ipmb

I'd be happy to share my experience with you. We've solved problems like this for a lot of folks with small or non-existent internal tech teams. I agree with the small team of experts approach, but there are pitfalls there too.

Feel free to reach out pete AT lincolnloop.com

Any idea where this ranking comes from?

> Fandom Will Now Rank as the #14 Ad Supported Site in the U.S.

We're building one at https://apppack.io. It's a Heroku-like experience in your own AWS account leveraging their suite of managed services.

My understanding is that you are legally required to carry third-party liability (TPL) insurance in MX, but credit cards only provide collision/damage insurance.

Do you have a CC that explicitly covers TPL?

Looks like they've acknowledged it on the status page now. https://status.aws.amazon.com/

> 8:22 AM PST We are investigating increased error rates for the AWS Management Console.

> 8:26 AM PST We are experiencing API and console issues in the US-EAST-1 Region. We have identified root cause and we are actively working towards recovery. This issue is affecting the global console landing page, which is also hosted in US-EAST-1. Customers may be able to access region-specific consoles going to https://console.aws.amazon.com/. So, to access the US-WEST-2 console, try https://us-west-2.console.aws.amazon.com/

Yes, definitely something going on.

https://www.encode.io/databases/ maybe?

Cool project! I'm building something similar at https://apppack.io. It's not terraform based, but also helps setup, manage, and orchestrate AWS resources for devs.

Using AWS managed services is a huge win for maintainability. A lot of host-your-own PaaS tools are spinning up EC2 instances that you're then responsible for maintaining/patching/securing.

If you're on AWS, you might be interested our product https://apppack.io.

shameless plug... you might be interested in https://apppack.io. I built it for very similar reasons.

Seeing ~60% drop in traffic here.

The lock file and graph are big improvements over straight pip/virtualenv. They allow for truly reproducible builds.

pip2pi makes it really easy to run your own PyPI. All you need is something that can serve static files (Nginx, S3, etc.)

https://github.com/wolever/pip2pi

JIT warm-up time can be problematic. Often (usually?), the code starts slower than CPython, but improves as the code paths are executed.

Throwing Grafana in the mix seems strange. It is comparing apples and oranges.

Also, contrary to what the article says Grafana does alarms as of v4.0 http://docs.grafana.org/alerting/notifications/

Ordinary devs could have access to all the encrypted secrets without having access to the keys to decrypt them. If that's the case, the laptop is no more a risk than the git remote.

I haven't tried Pushpin yet, but we're using the Nginx push stream module on https://botbot.me in a similar manner. It acts as a reverse proxy to the Django app and also handles the realtime connections.

That's me! (shameless plug) I'm also running a Kickstarter campaign for a screencast series that will go into detail on Django deployments http://kck.st/1FRZyMx

Instead of rewriting your supervisord config every time you should be able to use a symlink that points to the newest virtualenv. I haven't tested gunicorn, but reloading uWSGI will resolve the new symlink to your new virtualenv. Rolling back is simply adjusting the symlink.

Also make sure you're on pip 7+ to take advantage of the automatic wheel cache to speed up building new virtualenvs.

As another commenter noted, I discussed a similar approach at DjangoCon US this year https://www.youtube.com/watch?v=SUczHTa7WmQ&t=1083

I'm not sure how much of this still holds true, but here's a few reasons you might want to stick to HTTP: https://speakerdeck.com/3rdeden/websuckets

tl;dr websockets can fail in strange ways on mobile and when passed through proxies and corporate firewalls

Include the intermediate certificate in your certificate chain and it should fix gk1's issue. You want the one labelled "extra download" here: https://www.ssllabs.com/ssltest/analyze.html?d=ballisticfina...

We're using it on our IRC logging service, https://botbot.me/ and agree with the author's sentiments. It's not perfect, but it keeps our infrastructure simple and is very fast over 20M+ rows.

Check out SockJS which has a properly tested/supported Python server https://github.com/mrjoes/sockjs-tornado

I've used them for a few years. No problems at all.

After a quick glance, I'd say fig.yml is the magic here. It orchestrates building and linking all the docker containers.

I had a similar experience. My accountant had never heard of Xero. I sent her a login and she was quickly using the system without a problem. For me, they've nailed making a system that is easy to use without being an accountant, but powerful enough for an accountant to do their job.

We GPG encrypt them and put them in Dropbox. Kip is used to handle encryption/decryption: https://github.com/grahamking/kip#readme

Here's a ticket to track for following the state of crypto in Saltstack, https://github.com/saltstack/salt/issues/5913. It includes a lot of thoughts from the project founder on how to handle it.

Why?