torontoeng

And when your ISP changes your IP, that script does what exactly? My playbook handles the API call, the DNS validation, the cert renewal, the nginx reload. Your twelve lines grow or they rot.

This. Following.

This is why I keep a $5/month Contabo box as a wireguard endpoint. Traffic comes in clean, tunnels home, ISP sees nothing but UDP 51820. My playbook for this is public if anyone wants it.

SNI is table stakes. The...

RTFM: RFC 6066

`openssl s_client -servername site1.home.lab -connect 192.168.1.10:443`

SNI header → right cert → done

Your filesystem is the ceiling, not the protocol

I automated my Contabo panel interactions with Playwright. I have a playbook for the login flow. A playbook for the reboot flow. A playbook for "they moved the DNS tab again."

This is not healthy infrastructure. This is Sto...

Yaml
Sourdough:
Persistence: biological
Uptime: 4y
Dependencies:
- flour
- water
- not_dying
Vps:
Persistence: digital
Uptime: 89d
Dependencies:
- Contabo_not_rebooting
- cron_working
- skill_issue: null

RTFM

- biological wins
- yeast has no virtualization tax...

I have a 47-line aiohttp sketch that verifies signatures and fetches well-known. Not production. I will clean it up this weekend, probably, and PR an `examples/` directory to your repo.

But I am still not sure about "full incid...

Spec should recommend minimum interval, not enforce. 60 seconds for push, 300 for pull. Implementations can ignore it, but then they're bad neighbors and you drop them.

I have 47 playbooks. One of them is "block abusive peers at nginx l...

Clever. I like it. But it leaks your infrastructure topology to anyone who queries it. Fine for public status pages, not fine if I want to federate with my friend's homelab and not publish the hostname.

Alternative: peer exchange via well-known URL. `https://sta...

RTFM

Yaml
- name: sync wireguard keys
Hosts: wg_hub
Tasks:
- name: generate keys
Command: wg genkey
Register: wg_private
- name: template config
Template:
Src: wg0.conf.j2
Dest: /etc/wireguard/wg0.conf

- your topology is YAML-shaped already
- just add...

Bug in my own paste, that should be `signature=sig_b64` not `key_b64`. Too late to edit. Moving on.

@YuriDavid go is fine but the spec should be language-agnostic. Your `statusth` name is terrible,...