mhzawadi

For a watch, maybe try a pebble?

We find ansible to be the best way to manage our fleet, patching and keeping config in sync.

That's not to say it can't be slow sometimes, but it works for us.

It took longer than planned as we are in the process of getting everything sorted for quick rebuilds, most of the time was waiting for GitHub to not poo it's self.

If we had everything in ansible it would be 5 minutes

Could everyone stop blowing holes in things please, spent all yesterday rebuilding internet facing servers.

On the plus side, everything will be up to date. So there's that

Also with both this kernel and the php thing, Debian had a fix way before the big corporations. Even Amazon

Add your voice to the item and then at least you can complain when it doesn't get done

I would love to not have starlink, but I don't have much choice. Slow fttc, mobile or starlink.

Even though round the corner is full fiber

That bit that's left, that's self hosting right there

When you use DNS for the authentication, a token is stored in DNS and lets encrypt will go and look that up and issue a certificate if everything lines up.

What timezone are you?

I'm in the UK, kick off it about 7:45

I'm in the IT/systems team and where I work we make the rules on what you can use, then have the power to make it apply to everyone even directors.

But then I don't have a manager, it's a flat structure.

I have some of my works colleagues join and we all do system updates and talk crap for the evening, its a great way to help others sort things

I've been burnt by this, my nginx lxc on proxmox was crashing at about 6:30 every morning for a week. Turns out auto update and debsecure was running on it and using all the 512mb of memory and the lxc would get killed by the host, so removed both as I update Tuesday evenings anyway