changelog

ALL SERVICES ARE DOWN DUE TO MIGRATION. PLEASE CHECK BACK IN A DAY.

10-28-24

• giving up on docker swarm and moving to k3s: https://ext4.xyz/post/migration/
• a planned downtime will be posted few days before I take the services down and hopefully get up and running on k3s

10-09-24

• all public services can also be accessed through onion. onion header will show up if you access clearnet from tor browser.
• gitops with concourse in progress.
• modsec works fine, most of the time.
• hardened docker image registry in progress.
• gvisor added in all docker nodes. it’s PITA to debug network issues with gvisor, especially in swarm which has no official support. reverted to default runtime :(

08-06-25

• configured shepherd for automated docker image updates
• added frontends: priviblur, rss-bridge, litexiv
• configured modsecurity waf for every public facing service
• public docs

You can find more about the architecture and other details from the posts. Expect more updates this month. You can contact me on signal: frost.47.