Notices by M. Hamzah Khan (mhamzahkhan@intahnet.co.uk), page 2

@sheogorath @Pxtl I'm gonna be honest: initially, when reading Madison's post, I wanted to kinda stay impartial? Just because it was hearsay, without evidence. I'm not saying she wasn't telling the truth, just... I don't know what the truth is, so I'd rather not think anything until there is more information.

Now that there are other ex-employees kinda confirming things and leaks coming out, I think i might be done with them too.

@sheogorath but can it not be chown/chmod'ed by an init container that runs as root, to the mastodon container's UID?

Is it possible to make #mastodon write its temporary files to somewhere else other than /opt/mastodon? For example, the pull queue has jobs which download images etc to /opt/mastodon before being uploaded to S3 etc.

I tried setting PAPERCLIP_ROOT_PATH but that didn't seem to work.

#mastoadmin

@YUKIMOCHI Upgraded! Thank you for your hard work! :)

@projectdp FreeIPA does a lot of certificate and Kerberos ticket renewals automatically in the background for its own internal services. I've had a few problems when those renewals occur, which required manual intervention.

But the biggest one I've had is LDAP replication conflicts. I'm fairly certain that this is because the VPN connection between my IPA replicas is a bit crap, but I've also experienced this issue at work before as well.

@silverwizard It's more of a headache than just OpenLDAP. FreeIPA has a lot of different components. It does LDAP, Kerberos, PKI, and DNS.

I currently have my FreeIPA domain set up with 3 IPA replicas. I've had instances where I had to resolve LDAP replication issues or certificates and tokens for FreeIPAs internal services not renewing correctly.

@silverwizard I don't want to make it sound like it's not a stable product.

It definitely is. I've used it in a number of larger companies I've worked at. But for a homelab environment, in my experience, it's not something that can just be setup and left to run in the background. It needs a lot of caressing (and monitoring) ?

@projectdp @silverwizard I'm using Keycloak with FreeIPA at the moment.

I like Keycloak. It just sits there and quietly does its thing with very little TLC from me. ?

@projectdp @silverwizard I'm using #FreeIPA in my #homelab. It works, but it can sometimes be a bit of a headache to maintain.