From 45402b966e48e9955a72a871e9ed446084225218 Mon Sep 17 00:00:00 2001 From: Paul Buetow Date: Sun, 31 Mar 2024 11:01:33 +0300 Subject: Update content for gemtext --- gemfeed/atom.xml | 16 +++++++++++----- 1 file changed, 11 insertions(+), 5 deletions(-) (limited to 'gemfeed/atom.xml') diff --git a/gemfeed/atom.xml b/gemfeed/atom.xml index b5184549..7b4bc167 100644 --- a/gemfeed/atom.xml +++ b/gemfeed/atom.xml @@ -1,6 +1,6 @@ - 2024-03-30T23:36:52+02:00 + 2024-03-31T11:01:19+03:00 foo.zone feed To be in the .zone! @@ -65,8 +65,8 @@ _____|_:_:_| (o)-(o) |_:_:_|--'`-. ,--. ksh under-water (((\'/
  • It's fine if my sites aren't reachable for five or ten minutes every other month. Due to their static nature, I don't care if there's a split-brain scenario where some requests reach one server and other requests reach another server.
  • Failover should work for both HTTP/HTTPS and Gemini protocols. My self-hosted MTAs and DNS servers should also be highly available.
  • Let's Encrypt TLS certificates should always work (before and after a failover).
    • -
  • Have good monitoring in place so I know when a failover was performed and when something went wrong with the failover. (This isn't part of the OpenBSD base system, but I coded my own monitoring system in Go.)
    • -
  • Don't configure everything manually. The configuration should be automated and reproducible. (This isn't part of the OpenBSD base system, but I didn't need to install any external software on OpenBSD either.)
    • +
  • Have good monitoring in place so I know when a failover was performed and when something went wrong with the failover.
    • +
  • Don't configure everything manually. The configuration should be automated and reproducible.

    • My HA solution



    @@ -296,7 +296,9 @@ http://www.gnu.org/software/src-highlite -->
    https://codeberg.org/snonux/gogios
    KISS server monitoring with Gogios
    -
    +
    +Gogios, as I developed it by myself, isn't part of the OpenBSD base system.
    +

    Rex automation



    I use Rexify, a friendly configuration management system that allows automatic deployment and configuration.
    @@ -304,9 +306,13 @@ http://www.gnu.org/software/src-highlite --> https://www.rexify.org
    codeberg.org/snonux/rexfiles/frontends

    +Rex isn't part of the OpenBSD base system, but I didn't need to install any external software on OpenBSD either as Rex is invoked from my Laptop!
    +

    More HA



    -Other high-available services running on my OpenBSD VMs are my MTAs for mail forwarding (OpenSMTPD) and the authoritative DNS servers (nsd) for all my domains. No particular HA setup is required, though, as the protocols (SMTP and DNS) already take care of the failover to the next available host!
    +Other high-available services running on my OpenBSD VMs are my MTAs for mail forwarding (OpenSMTPD - also part of the OpenBSD base system) and the authoritative DNS servers (nsd) for all my domains. No particular HA setup is required, though, as the protocols (SMTP and DNS) already take care of the failover to the next available host!
    +
    +https://www.opensmtpd.org/

    As a password manager, I use geheim, a command-line tool I wrote in Ruby with encrypted files in a git repository (I even have it installed in Termux on my Phone). For HA reasons, I simply updated the client code so that it always synchronises the database with both servers when I run the sync command there.

    -- cgit v1.2.3