logoalt Hacker News

subhobrotoyesterday at 6:19 PM1 replyview on HN

> found myself rolling out Yoink

- using Tailscale SSH is brilliant

- using caddy-docker-proxy for ingress is brilliant

What do you use for:

- service discovery

- secret store (EDIT: Crap you use Infisical. No shade, I just have this horrible foreboding it will end up like Hashicorp. I use Conjur Secretless Broker but am tracking: https://news.ycombinator.com/item?id=47903690)

- backing up and restoring state like in a DB

PS: Have you been having issues with Hetzner the last few weeks?


Replies

oddurmagnussonyesterday at 6:47 PM

Service discovery is basically just Docker's internal DNS. Caddy-docker-proxy can use it to find healthy upstreams.

For secrets, I self-host Infisical on the box -- easy to plug in whatever secret manager, should make it pair nicely with https://github.com/tellerops/teller or something similar

Had no problems with Hertzner so far, just enjoying the raw CPU power of bare metal. The plan is to roll out more boxes across different providers, using Tailscale for the backplane network and Cloudflare to load-balance between them. All in due time What issues have you been having ?

show 1 reply