boblin

@boblin@sh.itjust.works

• ⁨Comment⁩ on ⁨Release v1.3.0 VoidAuth - Sub-Directory Hosting and OIDC Security Groups⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:

  I tried both voidauth and authelia and found that I really like that you can (actually must, as far as I’ve seen) configure authelias OIDC clients as configuration files. That fits a gitops style approach much better when paired with e.g. sealed secrets. It was a real pain to figure out that authelia configuration, hard agree on that… The official helm chart felt way too over-parametrized and is badly documented. The project website has a lot of basically-copy-paste configs for all kinds if self hosted software though.

• ⁨Comment⁩ on ⁨It's a simple thing, but one good way to make games memorable is for the developers to leave you words of encouragement in the pack-in material.⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  This is about Doom 3, which was definitely more down the horror alley than the Doom installations after the reboot 2016.

• ⁨Comment⁩ on ⁨Questions regarind k8s ingress⁩ ⁨⁨4⁩ ⁨months⁩ ago⁩:

  Ingress controllers usually use the standard k8s services. In fact metal-lb allows workloads (like the nginx ingress controller) in the cluster to use services of type LoadBalancer, which is the default configuration. This results in an actual IP being made available to your ingress controller.

• ⁨Comment⁩ on ⁨Questions regarind k8s ingress⁩ ⁨⁨4⁩ ⁨months⁩ ago⁩:

  To get nginx ingress to use the external clients IP, you can configure the ingress controllers traffic policy. Using the helm chart, I used these values:

  controller:
            priorityClassName: cluster-service
            service:
              # this has a bunch of downsides, but allows source-ip based access white/deny listing.
              externalTrafficPolicy: Local
  

  For the ingress IP, I configured metal-lb to receive traffic on a static IP (using IP4AddressPool and L2Advertisement CRDs from metal-lb), which is then used for the port forwarding. I’ve never tested it because I only have a single worker node, but I expect the metal-lb controller will receive traffic to that same static IP if a node goes down.

• ⁨Comment⁩ on ⁨[deleted]⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  Steam does this as far as I know.