• 25 Posts
  • 597 Comments
Joined 1 year ago
cake
Cake day: September 29th, 2023

help-circle



  • I use Yggdrasil now with a whitelist of public keys. Though I’m thinking about redoing my architecture in general to make key distribution easier, have more automated DNS entries and also use the tunnel for any node to node communication.

    Before that I tried Tailscale with Headscale, but I didn’t want to have a single node responsible for the network and discovery.



  • I’ve been managing my containers using the older mechanism (systemd-generate) since I started and it’s great. You get the reliable service start of systemd and its management interface. Monitoring is consistent with all your other services and you have your logs in exactly one location.

    I really wouldn’t want a separate interface or service manager just because I’m running containers.