Figured this out in https://github.com/simonw/simonwillisonblog/issues/132 - I was running PostgreSQL 9.x and I wanted 11.x in order to use the new...

A complete production-ready deployment guide for Wazuh SIEM on AWS ECS Fargate with full configurations, SSL/TLS setup, load balancing, service discovery, and troubleshooting steps.

[Val Town](https://www.val.town/) is a neat service for hosting short server-side JavaScript programs online - reminiscent of a combination of Glit...

Spotted in [this Cloud Run example](https://github.com/GoogleCloudPlatform/github-actions/blob/20c294aabd5331f9f7b8a26e6075d41c31ce5e0d/example-wor...

[Fly](https://fly.io/) makes it surprisingly easy to configure wildcard DNS, such that `anything.your-new-domain.dev` is served by a single Fly app...

OpenAI [announced new models](https://openai.com/blog/function-calling-and-other-api-updates) today. Of particular interest to me is the new `gpt-3...

Complete guide to AWS IAM Roles - understanding trust policies, permissions, and common use cases for secure AWS resource access management.

I was experimenting with the new [Readwise export API](https://readwise.io/api_deets#export) and it gave me back the following JSON:

The ChatGPT Code Interpreter alpha remains incredibly interesting. I wrote about how I was using it [for Python and SQLite benchmarking](https://si...

In [this Observable notebook](https://observablehq.com/@simonw/mastodon-users-and-statuses-over-time) I'm plotting a line on a chart, but I want to...

I decided to run my CI tests against the Python 3.11 preview, to avoid the problem I had when Python 3.10 came out with [a bug that affected Datase...

A comprehensive guide to integrating HashiCorp Vault with CoreDNS for secure DNS resolution, dynamic secrets management, and certificate automation in modern infrastructure.

A comprehensive guide to implementing a DNS sinkhole for blocking malicious domains, advertisements, and tracking at the network level using various technologies and approaches.

A complete guide to building an automated API inventory system that discovers, documents, and manages all APIs across your organization's infrastructure.

A complete guide to building a robust API monitoring script with health checks, performance metrics, alerting, and comprehensive logging capabilities.

A comprehensive guide to implementing two-factor authentication for SSH using Google Authenticator, enhancing server security with time-based one-time passwords (TOTP).

A comprehensive guide to using Podman Quadlet for container management, enabling systemd-native container deployment with automatic updates, dependencies, and lifecycle management.

A comprehensive guide to managing multiple GitHub accounts on a single machine using SSH keys, Git configuration, and URL rewriting for seamless account switching.

A comprehensive, production-ready guide for deploying CoreDNS and Smallstep CA on Fedora CoreOS using Podman Quadlet, providing secure DNS and certificate management without Kubernetes.

A comprehensive guide to deploying CoreDNS and Smallstep CA on Kubernetes using Podman Quadlet, providing secure DNS and certificate management for your Kubernetes infrastructure.

A comprehensive guide to installing kubectl on Fedora CoreOS (FCOS), covering both RPM-based installation and binary installation methods with best practices.

A comprehensive guide on adding and managing Certificate Authority (CA) certificates in Podman environments, including integration with custom PKI infrastructure and automated workflows.

A complete guide explaining how to use Podman as a Docker alternative with Kubernetes, including manifest generation, image management, and development workflows.

A comprehensive shell script for creating and managing a complete Certificate Authority infrastructure including Root CA, Intermediate CA, and server certificates with automated certificate chain generation.