A PHP developer who, in his spare time, plays tabletop and videogames; if the weathers nice I climb rocks, but mostly fall off of indoor bouldering ones.

He/Him Blog Photos Keyoxide

  • 0 Posts
  • 34 Comments
Joined 8 months ago
cake
Cake day: November 4th, 2023

help-circle



  • I’ve not used dockge so it may be great but at least for this case portainer puts all the stack (docker-compose) files on disk. It’s very easy to grab them if the app is unavailable.

    I use a single Portainer service to manage 5 servers, 3 local and 2 VPS. I didn’t have to relearn anything beyond my management tool of choice (compose, swarm, k8s etc)






  • Long story short the MRI showed no impinging of the cord so we were told to just monitor it. It’s slowly fading.

    The long story is that the next day the GP repeated 111’s advice so we bundled up pillows and painkillers and, still very upset, we went back. After an hour the triage nurse told us that all the GP needed to do was a referral by email and we would have been admitted straight to the spinal unit.

    She then rang the GP and actually tore them a new one. It was highly satisfying.

    We spent the rest of the day in spinal, her on a bed, and got seen by excellent staff who did more explaining about the injury and what to expect than anyone else had done to that point. We were in limbo about the whole thing till then.


  • Fuck.

    My wife and I were in this A&E 3 days later. She’d new lower body numbness appear some months into a broken back recovery. 101 said go straight there, this is a no fuck around situation.

    We get there and are advised it’s a 12 hour wait, the place is rammed, ambulances are queuing and the corridors are full of gurneys and paramedics.

    My wife at this point is in tears. The broken back means sitting for an hour on a shit waiting room chair is hard work. 12 literally can’t happen.

    So we leave. What else can we do.

    The situation was fucking awful, but I don’t blame the staff. I felt genuinely bad for all of them - there was just a complete lack of hope on any of their faces.











  • Documentation people don’t read

    Too bad people don’t read that advice

    Sure, I get it, this stuff should be accessible for all. Easy to use with sane defaults and all that. But at the end of the day anyone wanting to using this stuff is exposing potential/actual vulnerabilites to the internet (via the OS, the software stack, the configuration, … ad nauseum), and the management and ultimate responsibility for that falls on their shoulders.

    If they’re not doing the absolute minimum of R’ingTFM for something as complex as Docker then what else has been missed?

    People expect, that, like most other services, docker binds to ports/addresses behind the firewall

    Unless you tell it otherwise that’s exactly what it does. If you don’t bind ports good luck accessing your NAT’d 172.17.0.x:3001 service from the internet. Podman has the exact same functionality.