0xEFF

bogle heads 60/40, rebalance when bands are broken and forget about it otherwise.

Your judgement of other parents is the problem, both in this thread and in our broader culture of parenting in the United States today.

Feeding schedules aren’t starving children.

Please focus on what yields the best outcome for your family, and assume other families are doing the same without judgement.

Try replacing your rage with curiosity about all the factors of modern parenting.

Most assets, both stocks and fine art, are bought and sold between relatively rich people not from the person or company who originally issued the asset.

Consider a house, the builder sells it once, but it gets bought and sold on average every 7 years subsequently.

Research shows no long term effects after age 6, positive or negative, of sleep training, so the research doesn't support your hypothesis.

Research shows many positive effects before age 6, both for the child and the family.

Is it emotionally abusive to ignore a child's hours long temper tantrum after they're told they can't have ice cream for dinner?

It's curious years of good nights of sleep and a happy child enrages you.

We sleep trained our son at 7 months. He cried for 90 minutes the first night, then slept soundly until 7 am. The second night he cried for 45 minutes then slept until 7 am. He didn't cry the third night. Every night since he's slept peacefully from 8 PM until 7 AM and asks to go to bed when he gets tired. He's happy during the day unless something obvious is distressing him. Most notably he's happy and peaceful from 5 PM until 8 PM when I see other parents suffering from witching hour and unexplained melt downs.

Isn't a few hours of discomfort in exchange for years of good sleep and happiness a good trade off?

I was curious how F = mv/t relates. TIL a steel hammer reverberates 30% of the energy back into the arm. Titanium is only 3%. I imagine it feels a lot better after a day of work.

https://www.protoolreviews.com/titanium-hammers-vs-steel/

TurboTax business. It’s the same underlying engine tax preparers use.

I suggest reframing the question to, “how do I learn how to build container images?” Docker as a container runtime is dying fast and being replaced, so no need to learn the runtime.

The lasting contribution of Docker is the Dockerfile, learning that and the alternative ways to build an image is sufficient in 2022.

Why not work for Elon now then?

Does Hydra integrate with nginx or envoy external authorization? If so, is there a good example you could share?

I’ve relied on oauth2proxy with Dex as an oidc issuer for this purpose for years. This works but I’m trying to understand if Ory is an advancement in functionality.

Where do you store your secrets? Persistent data? How do you handle authentication and authorization when using cloud run only?

This is all in my basement but I tried to build it like I would a rack in a datacenter the stack is:

1: EdgeRouter4 connected to ISP. This operates as a typical router, nothing special other than some static routes to item 2.

2: Pair of VyOS routers running in VMs. I think of them as top of rack L3 switches in a datacenter. Their primary purpose is for ECMP [1]. They also use VRRP so the can be upgraded without downtime.

3: Three node caddy cluster I mentioned. Running plain old Debian. anycast-healthchecker configures the anycast IP on each VM's loopback interface. Bird advertises the address to the two VyOS routers via BGP.

4: Caddy binds to each address.

All of the hosts in this network are configured with a default route to the VRRP address on the VyOS VM's. That's pretty much it.

I've recently started using Calico in k8s on some separate VM's, and they work the exact same way, advertising Services of type LoadBalancer to the VyOS routers which does ECMP across the nodes. I learned quite a bit configuring anycast-healthchecker with Caddy, then comparing it to how Calico works.

[1]: https://codecave.cc/multipath-routing-in-linux-part-2.html

I've been using Caddy in a 3 node HA cluster sharing an anycast bgp address for about 18 months now and it's been fantastic. Certs "just work" across the cluster once consul is wired up. I recently added IPv6 which also "just works."

greenpau/caddy-security is fantastic and "just works" for OIDC sso.

mholt, thanks for recently adding the ability to bind to multiple specific IP addresses by default, this help me conserve precious public IPv4 addresses.

The risk is greater with independent contractors subcontracting through an agency. The agency has less control for the same reputation risk with respect to the subcontractor.

Buy direct from the roaster, they generally ship it the day or two after it’s been roasted.

Water Avenue Coffee out of an aeropress tastes sweet to me.

Maybe, maybe not. If so, maybe for a profit, maybe for a loss.

It’s unrealistic to expect the entire team to know how to build and safely operate IPv6 BGP anycast with an HTTP/2 tls load balancer, authentication and authorization, integrated with a modern observability platform and a zero downtime deployment CI process.

It is realistic to expect a small team to build the same in an industry standard way and hand of a clear, well documented API to the rest of the team.

Bespoke solutions need to deal with this complexity somehow, k8s provides a standard way to do so.

Driving in heavy traffic is exhausting. Going for a walk is refreshing.

What are the benefits of Infra over using Dex to manage OIDC access to Kubernetes?

I use caddy for the oidc/oauth letsencrypt combo. Does nginx-proxy-manager support oidc? Reading the docs, I see only http basic auth.

Yes, simply add the key gcloud generates as normal using ssh-add ~/.ssh/google_compute_engine

The author is capable of identifying their emotional state and adjusting their behavior accordingly.

Unit testing.

Because we don’t know if you’re immune. We do know vaccines help even for those who have contracted the virus. Therefore, it’s necessary for you to get vaccinated.

It’s normal that most people prioritize the social responsibility to prevent the spread of a deadly virus.

Printers and scanners have refused to process imagines containing certain patterns of stars for decades and it seems to have worked out OK.

I recently tried to help someone onboard into a cloud project that requires git tunneling due to security policies.

While they had experience with their IDE of choice and git, they were ultimately unable to push any changes.

Caution is warranted on the you can have it if you can pay for it route.

An enterprising teenager may earn money in undesirable ways.

I’m a parent and I’m thinking I’ll handle this as a clear you can have it or you can’t to avoid the grey and black market incentives.