"Oh I know an easy solution to this, all I need to do is setup a basic PKI infra and the problem is solved!" - a statement made by someone who is about it to _find out_

Adventures in PKI: ​:blobCat_nom_wire:​ Ok so here is the story so far as a recap.... * The starting point was Crowdsec. Crowdsec has three components: agents which parse logs/events, remediation engines, which act on decisions, and a local API (lapi) which the first two connect to, and tracks […]

Hmm, the pod limit is actually the bottleneck on these nodes given my workloads, oops But to increase it i need to very carefully modify the the cluster's pod network pools, good stuff

I have the urge to work on or plan projects but aaah what if I move this year?

Continuing the bad idea trend: Is there big household standalone battery thingy (like an Anker Solix) that has dual input, but won't back feed into the house? And then would that be able to be used in an area that disallows plug-in solar? Ideally setup in such a way that the battery discharges […]

Ok I saw someone on here working on wearables a while back but I forget who to ask Let's say I wanted to sew a led light strip into a purse strap and/or belt, what would be a good thing and flexible light strip to use? My thought was to use something like this Apollo WLED controller and build […]

Worse idea time: Could I plug a CCR2004-1G-2XS-PCIe into a external GPU enclosure, or just some thingy designed for a raspberry pi, and have a tiny inexpensive 2-port 25gb router? (likely only need 10g speed) #homelab #mikrotik #badideas

Fox cam update: no foxes in a week I hope they're staying warm ​:neocat_pleading:​

Up late with bad ideas (Eyeing an Intel xeon d-1541 board, because it can take ram from this r630 and might run at lower power)

Minor Homelab improvements: * Updated Crowdsec, which is now using mTLS for auth instead of tokens, which means two fewer secrets to track, including the Crowdsec bouncer * Got ArgoCD CLI working, turns out it can just use kubeconfig auth and I didn't have to spend any time at all […]

Omfg I had been trying to figure out wtf happened to the offsite backups and why the network at the offsite location was so painfully slow. I had started looking because the backups kept failing timing out I was poking at this off and on for a few weeks. Today I think to message my dad and ask […]

Backyard wildlife update: Three deer ran past!

I finally got that out of my head ​:meowbongo:​ SSH Certificates! ​:ablobcatbounce:​ * every`*` host has a ssh host-cert * clients have the host-cert pubkey added at the system level, no more worrying about known hosts/trustonfirstuse * the above is achieved via a simple ansible playbook if I […]

maybe if I can find something to apply to that looks promising to motivate me to actually update this resume

"I'm fine as long as I am constantly distracted" I am no longer sufficiently distracted

Things I am bouncing between today: * looking at smart watches (idk, considering a smaller daily-wear watch that looks nice) this is not important, but it is stuck in my head again. Gold or Silver watch case??? Idk. Anything but black for daily wear. * More tinkering with SSH certs, I have some […]

Probably not useful ideas that I have bouncing around that I still want to work on as leaning exercises and something to tinker with. I shouldn't look at either of these.... I have much more important and useful things to do, like fixing backups and getting my resume ready.... 1. SSH Certs via […]

Sent my mom a photo that had the black nail polish in just to fish for a reaction

Ok the gang here is going to a road trip soon to the Asian market which is far enough away to be a uncommon occurrence. My local markets have very limited selection so I'm planning on getting: * Cooking wine * Dark soy sauce * Thai staples (garngal, lime leaves, lemongrass etc) * Noodles * […]

🚨Fox News Update🚨 ​:neofox_notice:​

Someone posted on a local forum looking for interest in a LGBT game night. First response: "isn't that really divisive given the current environment? Just imagine if I had proposed a straights only game night???" ......siiiiiiiiiiiiiiigh

🚨Fox News Update🚨 ​:neofox_notice:​

As a bit of task avoidance I just sat down and organized/cleaned up my password DB ​:neocat_floof:​

Ok downloader is back online, now to figure out wtf is wrong with the backups I think the root cause is network issues at the offsite location. Maybe I'll setup backups targeting some cloud? Who has decently affordable S3 compatible storage that isn't a US megacorp? I might use Hetzner but idk […]

I got the VPN config working with protonvpn and ciliumegressgateway, pretty slick! * * ignore the loop running in that terminal window I'll fix it later!

AAAAAAAAAAAAAAAAAAAAAaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa ​:neocat_scream:​

Hiding in the forest for the day was absolutely worth it

​:blobfoxcheck:​ setup gpg ​:blobfoxcheck:​ setup pass ​:blobfoxcheck:​ setup git gpg signing ​:blobfoxcheck:​ set git, kubeconfig, and direnv to use pass Now to get the Forgejo instance itself to use gpg, along with a few other config files Thanks to @[email protected] […]

AaaaaaaaaaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaaaaaaaaa ​:neocat_scream_scared:​

Goals for 2026: * Survive.

neat, I got tls working on mqtt with frigate and home assistant as clients except..... home assistant wants me to drop in the cert files into the UI, great, and then stores them inline in the `core.config_entries` json what the heck how is that supposed to be rotated? #homeassistant

The thing I love* the most about American healthcare is intentionally skipping a dose when it is safe to do so just so I don't have a total lapse when the pharmacy fucks up because they only let me pick it up every 30 days to the day but then the pharmacy fills it every 29-45 days because fuck me

AaaaaaaaaaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA ​:neocat_scream_scared:​

ok so I just did a pass on how I was managing secrets, cleaning up some .envrc files that I had been tracking secrets that the cluster needed (global gitignore, they didn't end up somewhere bad, but still ugly) anyhow, I ended up with 3 categories: * Secrets that need to be stored in `pass` […]

I don't love AI I really fear what yet another rent-seeking gatekeeper with enough money to further corrupt culture and politics will do the industry and the world beyond But hey, what is one note corruptive influence in the world? Throw it on the pile of shit If some job expects me to use AI […]

New addition to the monitoring stack: Kepler It uses Intel power monitoring extensions to export power metrics to Prometheus The dashboard that I was able to find is a bit wonky, so hopefully I can get a better way to display the data. It would be really nice if I could modify the […]

🚨 Important fox news update 🚨​:FoxJump:​ The fox has visited 4 days in a row ​:FoxJump:​

Blender Hack: success (cloned NFC chip) Host Logs for Talos: now in Loki Resume progress: ​:neocat_flop_blep:​

AaaaaaaaaaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA ​:neocat_scream:​

easy update, I'll just add a safe wg config that has a restricitive allowed IPs, what could go wrong? ...whelp that didn't work, node is down _hard_ ...one node reset later.....

`Message: Pod was rejected: Node didn't have enough resource: pods, requested: 1, used: 110, capacity: 110` ​:neocat_googly_woozy:​

Ok yeah jellyfin is also down (it just doesn't crash on boot like other apps) But frigate is still functioning? Is it falling back to the CPU or is it somehow not sharing the iGPU? Uggggh

lmao. talos linux just added a log folder in 1.12. Perfect, lemme enable node logs finally on the grafana/loki/alloy stack! Oh. Wait, alloy/k8s-monitoring expects `/var/log/journal` to exist, so systemd, which talos is not using. (far too minimal for that, not a philosophical aversion to it) […]

Weekend goals: * Clean kitchen * Clean living room * Sort laundry * Fix device issues on cluster node * Sort laundry * Finally put away travel stuff * Resume/CV * Wireguard shenanigans (might be a viable blog post)

oof finally got the last node updated still some device plugin issues to sort out but they're not as ctitical ​:neocat_flop:​

Oh right I was in the middle of a cluster upgrade (I got distracted and binged an entire 10+ year webcomic) ​:blobfoxread:​

On the timeline: "social safety nets are bad actually" Aaand that is enough for tonight

Random fun home automation bit I have a basic voice assistant thingy on my nightstand, but the mic/speaker isn't super great. When I shifted the speech to text to use the iGPU it did end up a bit less accurate So it isn't amazing as detecting "Goodnight" to trigger the evening / night […]

Watching my friend's fallout new vegas crashes via seeing repeated "X is playing fallout new vegas popups" lmfao

so many social events aaaaaaaaaa techposting will resume soon first up: * upgrade talos to 1.12 * kubernetes to 1.35 * Enable wireguard/proton vpn on worker nodes * Build NAT-PMP operator (if needed for downloaders)