RedDec

Special projects

Mon, 01 Jan 0001 00:00:00 +0000

Specific to one subject single-page projects (aka: landings).

OpenEBS ZFS Permission

Fri, 02 May 2025 23:43:00 +0800

OpenEBS ZFS LocalPV delivers powerful and notably fast storage for Kubernetes environments. However, a common hurdle appears when attempting to use these volumes with containers operating under non-root privileges. Let’s dissect why this occurs specifically with native ZFS volumes and outline the effective solution.

How OpenEBS ZFS provisions volumes

OpenEBS ZFS LocalPV offers several methods for volume creation:

Native ZFS Volume (using fstype: "zfs"): This method carves out a ZFS filesystem directly within your ZFS pool. It stands out as the fastest and most straightforward approach.
Volume with other filesystems (e.g., fstype: "ext4"): This involves creating a ZFS subvolume (or zvol) which is then formatted using a different filesystem, such as ext4 or XFS.

This guide concentrates on the first scenario: native ZFS volumes.

Longhorn Backup and Restore

Mon, 21 Oct 2024 12:53:49 +0800

Article breaks down using Longhorn (version 1.7) for backups, self-hosting, and recovery. It’s for seasoned DevOps and SysAdmin folks who like doing things themselves. You’ll find a step-by-step guide on setting up and restoring backups with Longhorn, Velero, and GitOps. The goal is to show you a tried-and-true setup for getting your backups and restores working smoothly.

Go-Flags VSCode snippet

Mon, 15 Apr 2024 07:37:29 +0000

Snippet for generating go-flags parameters in VS Code.

Oauth Token via CLI

Wed, 03 Apr 2024 09:37:07 +0800

In today’s world of distributed systems and microservices, security has become more critical than ever. One common approach to securing these systems is through the use of OpenID Connect (OIDC), an identity layer built on top of the OAuth 2.0 protocol. However, integrating OIDC into command-line interface (CLI) applications can be challenging due to the complexity of OIDC flows.

In this short article there is a use-case of using oauth2c to obtain token via CLI. Keycloak is used as primary refernce of IDP, but any other OIDC complient solutions should work in the same way.

Redesigned Data Portal

Tue, 15 Aug 2023 08:47:25 +0000

Significant update to data warehouse portal.

Portable Stack

Tue, 24 Jan 2023 13:22:01 +0800

Once upon a time, I was sitting in front of my laptop with an IDE where hundreds of different Kubernetes manifests were opened and I was thinking: “how come I am in this moment? I need to add a new service, but to do it, I have to keep in my mind zillions of details and configure dozens of files instead promised by marketing ’little changes’”.

It wasn’t my first frustrating time: I have always been thinking that the current practice of how to set up an environment is slightly more complicated than needed for micro/small businesses especially for pet projects. Yes, even in pet-projects we want to have automatic TLS, backups, databases, security, and other useful stuff. The system should be scalable. While those reasons sound like the truth, it also feels like the IT road turned somewhere wrong.

Delayme

Fri, 16 Sep 2022 17:37:49 +0800

Delay request before redirect to the original URL

USD rates

Tue, 09 Aug 2022 16:47:30 +0800

Rates to USD from different world-wide currencies. Updates once per day from Philippines Central Bank.

How to get SSL certificates on Synology

Tue, 11 Jan 2022 09:24:06 +0800

I have been working with Synology Disk Station products for SOHO for a long time now. It’s a costly NAS but worth it because of: the combination of high-quality software (DSM) and hardware, and it is friendly for newcomers and professionals alike.

By default, Synology offers access to the NAS UI via HTTPS or HTTP protocol.

While HTTP is the simplest option, HTTPS (if done properly) is much more secure. However, the self-signed certificate, provided by Synology is not good neither in terms of security or user experience (ie: RED alerts in browsers and etc).

In general, in DSM 7 you may issue a certificate by two methods:

request a free certificate from Let’s Encrypt
import already existing certificate

The first option is available only in case you exposed your Synology to the public internet which might not be the best idea in terms of security.

In this article, I would like to share an approach on how to secure a connection to the Synology by issuing a valid (!) certificate without exposing NAS to the outer world.

Kubernetes Ingress Dashboard

Mon, 13 Dec 2021 17:13:10 +0800

reddec/ingress-dashboard

Automatic dashboard generation for Ingress objects.

Features:

No JS
Supports OIDC (Keycloak, Google, Okta, …) and Basic authorization
Automatic discovery of Ingress objects, configurable by annotations
Supports static configuration (in addition to Ingress objects)
Multiarch docker images: for amd64 and for arm64

Git Pipe

Sat, 12 Jun 2021 17:13:10 +0800

reddec/git-pipe

Hassle-free minimal CI/CD for git repos for docker-based projects.

Features:

zero configuration for repos by default
optional automatic TLS by Let’s Encrypt
optional automatic domain registration by supported providers

Binp

Mon, 08 Feb 2021 23:23:40 +0800

reddec/binp

Provides a platform for automation with code-first approach, with embedded batteries:

Tracing (journals)
Internal and user-defined API
Ultra-light but rich mobile-first UI
Embedded key-value storage

Nano Run

Mon, 28 Sep 2020 14:32:41 +0800

reddec/nano-run

A simplified version of trusted-cgi designed for async processing extreme amount of requests.

DevOps friendly - plain YAML configuration per subject
Low memory footprint
Can handle any size of request (limited by disk only)

Trusted CGI

Mon, 25 May 2020 11:23:08 +0800

reddec/trusted-cgi

Lightweight self-hosted lambda/applications/cgi/serverless-functions engine.

No specific requirements: just one binary. Working “as-is”
Rich API
Scheduler: run actions in cron-tab like style

Github Card

Wed, 13 May 2020 18:38:04 +0800

reddec/github-card

Custom element tag to show github repository

ultra light - 12KB without gzip (4.5KB - gzipped)
library agnostic
provides fallback if no JS available (or for old browsers)

Element Logo Generator

Fri, 31 Jan 2020 15:25:57 +0800

reddec/element-logo-generator

Generate nice and cute logotypes in periodic element style.

Build on SvelteJS platform - easy to embedded, lightweight and fast
Support SVG and PNG export
Support customization

Tinc Boot Full Mesh VPN without pain

Wed, 20 Nov 2019 10:15:46 +0800

Automatic, secure, distributed, with transitive connections (that is, forwarding messages when there is no direct access between subscribers), without a single point of failure, peer-to-peer, time-tested, low resource consumption, and a full-mesh VPN network with the ability to “punch” NAT – is it possible?

Tinc Boot

Tue, 15 Oct 2019 23:19:43 +0800

reddec/tinc-boot

Tinc-boot - is a all-in-one tool with zero dependency (except tinc of course), that aims to achieve:

one-line node initialization
automatic keys distribution
simplified procedure to add new node to existent net

Tinc Boot Full Mesh сеть без боли

Fri, 20 Sep 2019 11:06:38 +0800

Автоматическая, защищенная, распределенная, с транзистивными связями (т.е. пересылкой сообщений, когда нет прямого доступа между абонентами), без единой точки отказа, равноправная, проверенная временем, с низким потреблением ресурсов, full-mesh VPN сеть c возможностью “пробивки” NAT — это возможно?

Полная статья опубликована на Хабр

Ros-Reestr

Fri, 09 Aug 2019 16:47:30 +0800

The parser and visualizer for documents from Russian registry.

Securities and Legal Regulation

Wed, 10 Jul 2019 15:27:13 +0800

The main attention in the process of mastering the course is directed to the formation of the most important practical skill - identification of risks of the problem under consideration in the complex and in the interrelation of its various aspects. For example, when studying bonds, many issues are considered, concerning not only the issue of these securities, but also the consequences of the bond issuer’s failure to fulfill its obligations to pay interest and repay the face value of the bonds.

Forensic Accounting and Fraud Examination

Sun, 05 May 2019 15:21:15 +0800

Everyday across the world, thousands of businesses are victimized by fraud. Who commits these bad acts? Why? And, how? The course are going to help answer the questions: who commits fraud, why and how. Also it helps develop skills for catching them.

Machine Learning

Fri, 25 Jan 2019 09:28:02 +0800

Supervised learning (parametric/non-parametric algorithms, support vector machines, kernels, neural networks).
Unsupervised learning (clustering, dimensionality reduction, recommender systems, deep learning).
Best practices in machine learning (bias/variance theory; innovation process in machine learning and AI)

The Elements of Ai

Tue, 03 Jul 2018 15:34:44 +0800

The Elements of AI is a series of free online courses created by Reaktor and the University of Helsinki. They want to encourage as broad a group of people as possible to learn what AI is, what can (and can’t) be done with AI, and how to start creating AI methods. The courses combine theory with practical exercises and can be completed at your own pace.

Fluent Amqp

Wed, 30 May 2018 23:23:12 +0800

reddec/fluent-amqp

Fluent and easy wrapper over streadway-amqp API. Adds such features like:

Reconnecting. Will restore all defined infrastructure
Optional auto-requeue (with delay)
Signing and verifiying messages by public/private pair

Envredis

Fri, 15 Dec 2017 23:23:31 +0800

reddec/envredis

Wrap syscall for get/set/clean and e.t.c environment and map values to/from Redis

Just-for-fun but could be useful in some real cases.

Отображение переменных окружения в Redis

Fri, 15 Dec 2017 11:08:22 +0800

Redis — это такое хранилище вида ключ-значение. Переменные окружения (environment variables) — напоминают то же самое. А что если это как-то объединить?

Легкая система мониторинга с Телеграмом и консулом

Tue, 08 Aug 2017 11:11:54 +0800

Эволюционно так получилось, что в моем личном владении оказался не маленький зоопарк различных серверов: от дешевого Supermicro до топового (на момент выпуска) HP Gen 8. Все конечно связано оптикой и прочими радостями жизни.

И вроде все работает. Но иногда наступает тот дивный чудный момент, когда приходит потребитель одного из сервисов с вопросом вида “а чего-то у меня уже неделю сервис такой-то немного не живой”.

Monexec

Tue, 04 Jul 2017 14:47:11 +0800

reddec/monexec

Light supervisor on Go (with optional Consul autoregistration)

Just a single binary file pre-compilled for most major platforms
Can be used as a Golang library with clean and simple architecture
Integrated with Consul

Брокер сообщений для сервисной архитектуры

Sat, 18 Jul 2015 11:13:52 +0800

Профессиональное счастье программиста довольно простое — писать на своем любимом языке интересные задачи и получать за это деньги (желательно не маленькие, хотя денег всегда мало). Подобные желания привели к тому, что родился целый подход в виде отдельностоящих приложений и процесса обмена между ними: SOA (в частности SOAP/WSDL/XML-RPC/JSON-RPC т.п.), REST, микросервисная архитектура. Суть в том, что следуя заветам Unix, отдельный функционал выделяется в приложения, а обмен данными между ними специфицируется отдельно.

Mutalk

Sat, 11 Oct 2014 23:23:21 +0800

reddec/mutalk

UDP Multicast messaging library

Supports pub/sub pattern with minimal network overhead
Plain POSIX C without dependencies
Customizable

Децентрализованная система обмена сообщениями

Sat, 11 Oct 2014 11:17:39 +0800

Мир IT-разработок идет по спирали. Основатели UNIX считали, что пусть программ будет много, но каждая из них выполняет свою задачу на «отлично». В начале 2000х основным трендом были программы-комбайны, выполняющие все, что только можно и даже больше. Сейчас вектор направления разработок начал движение в обратную сторону. И если раньше для обмена данными использовался в основном стандартный поток ввода/вывода, то теперь из-за того, что системы делают все более распределенными, передачей данными между узлами занимаются специализированные интеграционные комплексы (англ. Message Bus или Message broker).