HN user
meet.hn/city/de-Karlsruhe
Socials: - seymon.at.hn
---
Using something like this for centralized authorization across services works well for binary access control decisions.
But the problem that remains is "authorized search" in an efficient way. Asking permify what resources a user can access and then query the app postgres db with "WHERE resource_id IN ( {list}, {with}, {many}, {IDs}, ... )" does not scale well. How to solve this?
What's considered nowadays the best practice (in terms of security) for running selfhosted workloads with containers? Daemon less, unprivileged podman containers?
And maybe updating container images with a mechanism similar to renovate with "minimumReleaseTime=7days" or something similar!?
But are there good alternatives to grafana in the foss space nowadays?
Curious how this differs from Atuin — is there a particular problem it solves better?
Is there any concept of private key rotation or something else? In case a client with a nostr key on it got compromised or something similar? With a traditional password passed logins I would just set a new password from another machine. Regeneration of a new nostr key would mean it's a new account isn't it?
How does Sidequest compare to Graphile Worker https://worker.graphile.org/ ?
What's the benefit of just using plain owasp modsecurity?
It also exists as a docker container as an nginx reverse proxy with modsecurity extension.
https://coreruleset.org/docs/6-development/6-6-useful_tools/...
I am already using zfs on my NAS where I want my backups to be. But I didn't consider it for backups till now
Borg vs Restic vs Kopia ?
They are so similar in features. How do they compare? Which to choose?
Is fogejo the platform that codeberg uses?
Instead of the luks key in tpm you can use a fido2 compatible hardware security usb token. For booting/unlocking it has to be plugged in then you can remove it. This is pretty convenient and secure against many threats like stealing the nas in my opinion.
How to do this on android?
Are you using existing libraries for your angular i18n?
There is the open source software project gluetun, that allows setting up a containers that are only able to communicate through a vpn network interface in an easy way.
https://github.com/qdm12/gluetun
With this it is not much effort to set up qbittorrent in a privacy secure way.
Which options do you mean!?
What do you think about the german Nitrokeys? Especially the features and compatibility of the Nitrokey 3?
Anyone has one of those?
What do you think about penpot as an alternative to figma?
Has anyone managed to run a non trivial Nest.js application with bun already?
With non trivial I mean an application using a lot of Nest.js features and libraries like TypeORM, Swagger-UI.
What are the benefits over using helmfile? https://helmfile.readthedocs.io/
One thing I find difficult using access control systems as a distributed service like Zanzibar is a convenient and performant way to search and filter resource data using permissions. For example defining database queries that should only return resources a subject has access to based on Zanzibar permissions.
How does patternfly compare to the carbon design system? https://carbondesignsystem.com/
Since red hat now belongs to ibm and patternfly is from red hat ans rhe carbon design system is from ibm i wonder which one will stay!?
Materialistic Android App. Unfortunately it is not anymore in the Google Play Store. It's the best hackernews android app in my opinion. What android app do you use?
Is there something to backup helm releases? With including all k8s manifests, configmaps, secrets and also persistent volumes. Preferably FOSS?
How does it compare to keycloak?
This! I am from germany and had chosen latin class in school. It is a useless dead language noone speaks.
I which all the keycloak login and email themes would be more flexible and could use custom client attributes, realm settings etc.
Another missing thing is multi tenancy within a realm. Because managing a huge number of realms is a configuration nightmare.
Which JDK distribution is used today? There are so many to choose from.
What are your opinions on DBeaver? https://dbeaver.io/
LinkAce seems to be a nice Bookmark Manager to self host.
No, it's written in Golang. It works on Linux, macOS, and Windows. There are currently builds for x86_64, but compiling to other architectures should be easy.