Show more

Long day today in preparation for an upcoming, and much needed, month off. Got to know `-engine pkcs11` as an option to many openssl tools today as I put the trio of Nitrokey HSM 2 modules purchased for my team to use in eliminating single points of failure in the safe storage of critical secrets. Sadly almost none of these tasks are even tangentially documented by Nitrokey, OpenSC, or anyone else - but now that I’ve sorted that out for my team I’ll put something together publicly as well.

@stevenroose test coverage for ARSE is pretty close to 100% since I’m doing TDD. End of next week is my hope for finishing the admin feature and user documentation. That said if you can manage putting markdown inside a folder on your own it should be ready for you. What I added yesterday allows you to define your own template and CSS so in theory you can make it look however you want.

@stevenroose haha in the current world we need to take every opportunity to laugh. The name cracks me up, and so I stuck with it. The demo site is at some.bullsh.art just to round it out 😂

@stevenroose can’t say as I’ve not looked at Zola, you’re welcome to take a look and let me know though. In the long standing tradition that is I had a need and wrote my own solution rather than looking at what else exists and making contributions there.

Well, I hadn't planned on adding additional features to A Rust Site Engine today but... Two Release Tuesday can be a thing can't it?

crates.io/crates/arse 0.6.0 adds accessing individual posts directly. Underneath the feature add was a major refactor of the application's core and the Engine struct itself. While rendering and load times were already very fast, I was previously loading the Tera template for every single request. Now it's done once at startup.

Released 0.5.0 of A Rust Site Engine today, adding support for custom templates for the rendering engine.

The README has been updated with some information on setting a custom template. Previous users will need to add the template parameter to their [site] config section to upgrade to 0.5.0. This should be the last breaking change for the config before 1.0.

crates.io/crates/arse

Since direct inbound is neither necessary nor desirable, I’ve spun a new firewall VM in Qubes with my Wireguard interface. Now the AppVMs are using that VM instead of their own individual tunnels. I didn’t need to free up allocated IPs in my VPN, but now there’s one available for another device if needed. When I am back stateside I will reconfigure my US home network (as it’s needlessly complicated today), and add a peer for my Qubes VM so I can always reach local home assets directly.

WireGuard has really made it extremely easy to join my home networks on both sides of the Atlantic, and my cloud services (private side) together. Syncthing is replicating (note: do not confuse this for backing up - not the same thing) important data between two of my machines, while Borg is maintaining backups in multiple locations. All running smoothly between Qubes VMs, cloud VMs, Fedora and Debian on metal, and even the two iOS devices I still use.

Had a pretty good work week with my team being super efficient and taking a lot of good initiative to get things done before I even assigned it. Ended it all on a high note when I checked my personal email and saw my Librem 14 from @purism has shipped! Just saw a post about running Qubes on it, so when I fly home in a few weeks I will bring my backup with me so I can get things running as soon as possible.

The sun is shining and it’s a long weekend so the whole country (.nl) is out in the park. This has been a post.

@Gina we’ve been getting out a bit more as well. My team has shaped up nicely, and I’m no longer doing it all alone. Not climbing yet, but we are flying home soon so that will be nice.

This whole write-up is great, but the Hackers-inspired video demoing the exploit just clinches it. Gold. signal.org/blog/cellebrite-vul

Now that I’ve got meaningful error messages in my logs if/when things go sideways, and I’ve not managed to cause a panic with bad requests, A Rust Site Engine is at 0.4.0 on my way to 1.0. Next up: admin portal, support for user-defined Tera templates, and full documentation.

Show more
Librem Social

Librem Social is an opt-in public network. Messages are shared under Creative Commons BY-SA 4.0 license terms. Policy.

Stay safe. Please abide by our code of conduct.

(Source code)

image/svg+xml Librem Chat image/svg+xml