mathbruyen / home Goto Github PK

Renewing certificates requires to edit several files, jump between two terminals and invoke kubectl multiple times. Can this process be replaced with a custom plugin?

Since two long running database deamons are started, some containers in the pod never complete and the job remains as ongoing.

http://kubernetes.io/v1.1/docs/user-guide/production-pods.html#liveness-and-readiness-probes-aka-health-checks

Periodically run broken-links-checker.

http://trigger-happy.readthedocs.io/en/latest/

• Jekyll 3.0
• HTTPS
• markdown triple backticks for highlighting

A pod serves static content from a readonly volume. Another pod registers to a webhook container on Github push event and uses kubectl from the container to upgrade the volume to new static files.

• Postgres: http://okigiveup.net/what-postgresql-tells-you-about-its-performance/?utm_source=dbweekly&utm_medium=email

To serve those images from the same domain and with HTTPS. Allows to remove the Content-Security-Policy entry for loading images from http://*.mqcdn.com.

readOnlyRootFilesystem in http://kubernetes.io/docs/api-reference/v1/definitions/#_v1_securitycontext

https://github.com/kubernetes/dashboard

• using a real webserver
• using environment for the db? maybe propose PR to revert other environment parameters requested
• using https endpoint as self url

Renewing certificates requires to edit several files, jump between two terminals and invoke kubectl multiple times. Can this process be replaced with a custom plugin?

Requires some cleanup:

• no gist for hosted code
• include of pagination gem
• changes in Gemfile (and Gemfile.lock)
• no more CNAME file
• remove warning while generating feeds.xml

Data migration is required for migration to postgres 9.5, which requires backup/restore script/pods.

• hostname
• pods/service
• docker images
• remove gcloud commands in image builder

config

Release notes: https://www.wallabag.org/blog/2016/09/07/wallabag-208

Use official image?

https://www.wallabag.org/blog/2016/10/03/wallabag-21

To allow rolling-updates for updates.

https://securityheaders.io/?q=https%3A%2F%2Ffeeds.mais-h.eu

http://kubernetes.io/docs/user-guide/ingress/

http://letsencrypt.readthedocs.org/en/latest/using.html#where-are-my-certificates

Automatically set correct rights for files put to backup. Currently files rights need to be changed after upload: kubectl exec files-4a1cm -c viewer -- chmod -Rv 755 /usr/share/nginx/html/volume.

Enable directory listing.

https://jekyllrb.com/docs/themes/

https://blog.mozilla.org/security/2016/08/26/mitigating-mime-confusion-attacks-in-firefox/