

Well… Canada has a land border with Denmark…


Well… Canada has a land border with Denmark…


I have my Firefox configured to force HTTPS, so it’s rather inconvenient to work with any non-HTTPS sites.
Because of that I decided to make my own CA. But since I’m running in Kubernetes and using cert-manager for certs, this was really easy. Add a resource for a self-singed issuer, issue a CA cert, then create an issuer based on that CA cert. 3 Kubernetes resources total: https://cert-manager.io/docs/configuration/ca/ and finally import the CA cert on your various devices.
However this can also be done using LetsEncrypt, with the DNS01 challenge. That way you don’t need to expose anything to the Internet, and you don’t need to import a CA on all of your devices. Any cert you issue will however appear in certificate transparency logs. So if you don’t want anyone to know that you are running a Sonarr instance, you shouldn’t issue a certificate with that in it’s name. A way around that is a wildcard cert. Which you can then apply to all your subservices without exposing the individual service in logs. The wildcard will still be visible in the logs though…


The clause might be stronger, but there’s no EU forces, no EU equipment, no EU AWACS, and no EU command structure, to back up that clause. There’s many individual national militaries, but no dedicated EU military. NATO on the other hand has dedicated forces, equipment, command structure and so on. Logistics wins or loses wars. So even if the clause is stronger, is carries much less weight than NATO.
Being in the EU is however a decent deterrent for most purposes, but maybe not sufficient to deter Russia, China or USA.


In the current political environment, you might want to fix that typo 😉


Apparently Kingpin uses an ultrasonic cleaner and hasn’t seen any problems as a result… However he acknowledges that some people say it’s bad for electronics:


I think this might do it: https://youtube.com/watch?v=SVuI-Fn27-U
In the German version he apparently also mentions “no rinse aid”, but that’s apparently missed out in the English version.


Why not select the 2.0 channel audio track?


In addition people often use VLANs for security segregation. For example you might buy a bunch of cheap Chinese security cameras, but want to ensure that they can’t send anything back to the manufacturer. Then you can make a VLAN with no Internet access for the cameras.


I saw this YouTube video recently that puts out a bit of evidence that it’s not a ballroom, but instead a datacenter:
https://youtube.com/watch?v=VbJ4ilDvGyc
To me at least, all the clues match perfectly.


I’m expecting Trump to loudly announce that he negotiated so hard, and really got Greenland/Denmark to bow to his mighty nogotiating talents, only to then reveal that what he negotiated is that the US is allowed to build several military bases (which they already could), and that they have gotten rights to extract a chunk of minerals (which they already could).
Then the whole MAGA base will be thrilled with how big and strong their dear leader is…
As this point everything is exactly as it were before he started threatening Greenland and Denmark, except for having lost a large chunk of trust around the world, and MAGA feeling emboldened.
Then a few weeks/months down the line Trump will start threatening with an invasion again…


Why would we buy something we don’t want?
https://docs.renovatebot.com/
All my docker images are in code in Github.
Renovate makes a PR when there are image or helm chart updates.
ArgoCD sees the PR merge and applies to Kubernetes.
For a few special cases I use ArgoCD-image-updater.