User avatar
φ @fiore@brain.worm.pink
1y
ok infra thread to plan out the new gngr.fail server setup
1
0
1
0
User avatar
φ @fiore@brain.worm.pink
1y
its gonna be fedora server . i have decided
2
0
1
0
User avatar
φ @fiore@brain.worm.pink
1y
itll be 2 physical servers , one actually running the services and the other for bulk data and backups
1
0
1
0
User avatar
φ @fiore@brain.worm.pink
1y
backups will be done thru borg , the backups server will only be exposed to the internal network
1
0
1
0
User avatar
φ @fiore@brain.worm.pink
1y
itll all be rootless podman+systemd . the only thing running as root will be the caddy reverse proxy
2
0
1
0
User avatar
φ @fiore@brain.worm.pink
1y
every service will have its own user , lingering enabled , and data stored in the home dir
2
0
1
0
User avatar
Two Hollywood Phonies @autumn@cafe.autumn.town
1y
@fiore all sounds very good actually, why fedora server though? you'll have to upgrade it every 6 months (although there's probably a very nice system upgrade util)
1
0
1
0
User avatar
φ @fiore@brain.worm.pink
1y
@autumn yea system upgrades are very comfy in fedora . also since im containerizing everything , the servjces themselves will be fine

also , fedora just has the normal way of handling things as the default . its basically Normal Linux nowadays , and i dont wanna have ti deal with outdated packages (debian) , snaps (ubuntu) , or manual setup of everything (arch)
1
0
1
0
User avatar
Two Hollywood Phonies @autumn@cafe.autumn.town
1y
@fiore how i did things before was via Debian, and since everything would be containerised then outdated packages aren't really an issue, like unless you need the latest version of like. Htop or smth 😭 and that gives you the benefit of not needing to upgrade for 5 years (or until next release)

not trying to convince you or anything, just something to consider!!
2
0
1
0
User avatar
Two Hollywood Phonies @autumn@cafe.autumn.town
1y
@fiore if you want to take it one step further, i suggest you look into ansible and other infrastructure as code tools too. really cool software.
1
0
1
0
User avatar
φ @fiore@brain.worm.pink
1y
@autumn ive never understood what ansible does lmfao csre to explain ?
1
0
1
0
User avatar
Two Hollywood Phonies @autumn@cafe.autumn.town
1y
@fiore essentially you're able to write out instructions for a server to do tasks when setting it up, the idea is that you have a clean install and you're able to configure it to whatever you need (edit configs, install packages etc)

the way this differs from a bash script is that it's a lot easier since tasks that don't need to be done are just skipped, and it's all done in a reproducible way so you're able to push the same thing to 2 different servers, or even completely clean reinstall one of then and run the playbook again to restore it. (assuming that the only thing you erased can be made again, e.g configs and not like user files etc.)
2
0
1
0
User avatar
ms_arrow_left one rubillion containers @sneexy@booping.synth.download
1y
@fiore @autumn ( nix but not nix therefore is 100x more sane )
1
0
2
0
User avatar
Two Hollywood Phonies @autumn@cafe.autumn.town
1y
@sneexy @fiore there are differences between the 2 fundamentally but in broad strokes yeah, writing configs to make your system reproducible
0
0
1
0