Deleted Comment
- install machines with ansible (using hetzner scripts for OS install)
- machines communicate over vswitch/vlans, external interfaces disabled whenever possible. Pay attention to the custom mtu trick.
- harden machines, unattended-upgrades mandatory on each machine
- ssh open with IP whitelists from iptables on gateways
- machines organized as k8s clusters, took ~1 year to have everything working cleanly
- everything deployed as k8s resources (kustomize, fluxcd, gitops)
- use keepalived for external IPs with floating IPs for ingress on 3 machines per cluster
Machines are managed as cattle, it takes <1h+ hetzner provisioning time to add as many machines as we need.
I have a dream that Healthcare will someday be decoupled from employment. So much waste is tolerated simply due to the fact that the majority of the expense is borne by your employer before the number they put on your paycheck.
I can live on a part time salary without issue, but health insurance, which is already $200/wk for my family with my employer chipping in, would jump to more like $600/wk, which is just completely untenable. There is no sane reason why health insurance should be my single largest expense each month.
But we have many start-ups, which usually migrate to the US as soon as they grow big.
Change your keyboard layout to one of your own? Eh maybe Xmodmaps, oh but then it gets reset every so often because $HISTORICAL_ARTIFACT. You have to change the actual xkb mapping, which is very much not a “happy path” in any DE.
The only graphical e-mail client that actually seems feature complete is Thunderbird, and for _years_ I have to race to disable the global search within 10 seconds of starting it. Otherwise the program just freezes up. I don’t even know what to use for calendar stuff.
I would really love it if Linux was viable for me as a desktop OS. It just isn’t, because of things like these.
This is while they try to find a solution to earn money with it.