mathbruyen / home Goto Github PK

readOnlyRootFilesystem in http://kubernetes.io/docs/api-reference/v1/definitions/#_v1_securitycontext

http://kubernetes.io/docs/user-guide/ingress/

• hostname
• pods/service
• docker images
• remove gcloud commands in image builder

config

• Jekyll 3.0
• HTTPS
• markdown triple backticks for highlighting

Requires some cleanup:

• no gist for hosted code
• include of pagination gem
• changes in Gemfile (and Gemfile.lock)
• no more CNAME file
• remove warning while generating feeds.xml

https://github.com/kubernetes/dashboard

http://trigger-happy.readthedocs.io/en/latest/

http://kubernetes.io/v1.1/docs/user-guide/production-pods.html#liveness-and-readiness-probes-aka-health-checks

Renewing certificates requires to edit several files, jump between two terminals and invoke kubectl multiple times. Can this process be replaced with a custom plugin?

https://securityheaders.io/?q=https%3A%2F%2Ffeeds.mais-h.eu

https://jekyllrb.com/docs/themes/

A pod serves static content from a readonly volume. Another pod registers to a webhook container on Github push event and uses kubectl from the container to upgrade the volume to new static files.

Data migration is required for migration to postgres 9.5, which requires backup/restore script/pods.

Automatically set correct rights for files put to backup. Currently files rights need to be changed after upload: kubectl exec files-4a1cm -c viewer -- chmod -Rv 755 /usr/share/nginx/html/volume.

Enable directory listing.

To allow rolling-updates for updates.

http://letsencrypt.readthedocs.org/en/latest/using.html#where-are-my-certificates

Since two long running database deamons are started, some containers in the pod never complete and the job remains as ongoing.

https://www.wallabag.org/blog/2016/10/03/wallabag-21

Periodically run broken-links-checker.

• using a real webserver
• using environment for the db? maybe propose PR to revert other environment parameters requested
• using https endpoint as self url

To serve those images from the same domain and with HTTPS. Allows to remove the Content-Security-Policy entry for loading images from http://*.mqcdn.com.

Release notes: https://www.wallabag.org/blog/2016/09/07/wallabag-208

Use official image?

• Postgres: http://okigiveup.net/what-postgresql-tells-you-about-its-performance/?utm_source=dbweekly&utm_medium=email

Renewing certificates requires to edit several files, jump between two terminals and invoke kubectl multiple times. Can this process be replaced with a custom plugin?

https://blog.mozilla.org/security/2016/08/26/mitigating-mime-confusion-attacks-in-firefox/