Errar es humano. Propagar errores automáticamente es #devops

  • 2 Posts
  • 34 Comments
Joined 1 year ago
cake
Cake day: June 18th, 2023

help-circle







  • Some security tips:

    Firewall should block everything by default, and you start allowing incoming and outgoing connections when you need them or if something fails.

    Disable passwords and root access in ssh daemon.

    Use fail2ban or something similar to block bots failing to log-in.

    Use random long passwords for everything (eg: like databases). And put then in a password manager. If you can remember the database password, it’s not strong enough. If you can remember the admin password for a public web service, it’s weak.

    Don’t repeat the passwords. Everything should have its own random long password.

    .env files and files with secrets should be readable only by its service user. Chmod them to 400.

    Monitor logs from time to time to see if something funny is happening.














  • The things you say actively reflect on your employer and future employers.

    why?

    Imagine a interview where employer tries to know every aspect of your personality and ideas, before hiring you.

    Seems quite impossible.

    For a celebrity like Stallman seems easy. But imagine checking the background of a random candidate just to see if she posted something bad years ago. And rejecting her application because of a post defendig the wrong ideas.

    I agree we already have courts and police. If he did something illegal, there’s a course of action there.