They literally campaigned on a slogan saying that doubling the prison time would cut crime in half. Insanity.

Better source from Vox:

https://www.vox.com/on-the-right-newsletter/415360/state-department-substack-samuel-samson-adrian-vermeule-integralism

The memo in question:

https://substack.com/@statedept/p-164571608

Probably not that hard to build a simple flask frontend around it.

Automatically processing files in an S3/WebDAV directory would also be useful.

https://docs.k3s.io/installation/uninstall

There is also a k3s option for Nixos, which removes the security and side-affect risks of running a random bash script installer.

Very true. Each brick you lay upgrades your setup and your skillset. There are very few mistakes in Kubernetes as long as you make sure your state is backed up.

For question 1: You can have multiple resource objects in a single file, each resource object just needs to be separated by ---. The small resource definitions help keep things organized when you’re working with dozens of precisely configured services. It’s a lot more readable than the other solutions out there.

For question 2, unfortunately Docker Compose is much more common than Kubernetes. There are definitely some apps that provide kubernetes documentation, especially Kubernetes operators and enterprise stuff, but Docker-Compose definitely has bigger market share for self-hosted apps. You’ll have to get experienced with turning a docker compose example into deployment+service+pvc.

Kubernetes does take a lot of the headaches out of managing self-hosted clusters though. The self-healing, smart networking, and batteries-included operators for reverse-proxy/database/ACME all save so much hassle and maintenance. Definitely Install ingress-nginx, cert-manager, ArgoCD, and CNPG (in order of difficulty).

Try to write yaml resources yourself instead of fiddling with Helm values.yaml. Usually the developer experience is MUCH nicer.

Feel free to take inspiration/copy from my 500+ container cluster: https://codeberg.org/jlh/h5b/src/branch/main/argo

In my repo, custom_applications are directories with hand-written/copy-pasted yaml files auto-synced via ArgoCD Operator, while external_applications are helm installations, managed via ArgoCD Operator Applications.

helm charts are awful, i didn’t really like cdk8s either tbh. I think the future “package format” might be operators or Crossplane Composite Resources

Trump and Netanyahu have alienated 92 million people from the west and kicked a massive, nuclear, hornets nest. I worry that the Tehran regime has nothing left to lose at this point. They’re on the ropes militarily, but they’re not out of power.

would probably take a month or two

Closing Hormuz would blockade the Saudis as well.

all home routers have NAT which functions as a firewall, but VPSes don’t cone with any firewall by default, so you’d have to set one up. Also VPS ranges seem to hotter for scanning.

That is not the argument stated in the article

Sánchez argued that Spain doesn’t need to spend 5 percent of its GDP to fulfill its so-called capability targets, meaning new objectives of weapons inventory agreed by NATO defense ministers earlier this month.

He also wrote that a 5 percent defense spending goal would jeopardize the country’s welfare system, force the government to increase taxes on the middle class, scale back commitments to the green transition and curtail international development cooperation.

“It is the legitimate right of every government to decide whether or not they are willing to make those sacrifices,” he wrote.

Rushing to 5 percent would also force Madrid to buy off-the-shelf equipment instead of fostering its own industrial base, as well as take money away from welfare policies, Sánchez also wrote.

The Spanish Socialist party is in a coalition with the junior left-wing Sumar party, which opposes increased defense spending and whose members are expected to attend a counter-summit for peace in parallel to the NATO summit.

Your stuff is more likely to get scanned sitting in a VPS with no firewall than behind a firewall on a home network

Trump can just veto the bill if he doesn’t want to sanction Russia, they should stop trying to water it down.

Wouldn’t be funny at all.

Yeah Stalwart seems to have a lot of momentum, I’ll probably be setting up a server with my kubernetes+ceph cluster this month.

Trump was president during the Hong Kong crackdown, they were begging for help.

Check out NixOS. It can build qcow images from scratch for you to import into proxmox

https://github.com/nix-community/nixos-generators

I have 8 bare-metal servers and I do everything automated with NixOS, I rarely ever access the servers directly.

Here are the nixos configs for my DHCP server and kubernetes servers that you can use as a base.

https://codeberg.org/jlh/h5b/src/branch/main/porygonz

https://codeberg.org/jlh/h5b/src/branch/main/nodes

For what it’s worth, Ive been using Ansible off and on at work for 8 years, and I think it’s pretty outdated and clunky these days, there are much smarter ways to manage workloads such as kubernetes, cloud-init, terraform, and NixOS.

Is there no family visa for the immediate family of a US citizen?

in play to prevent a civil war