• 0 Posts
  • 3 Comments
Joined 8 months ago
cake
Cake day: January 6th, 2024

help-circle
  • I will continue to be a proponent of meditation practice. It’s honestly a shame imo that it has a “mystical” connotation. I think it’s very practical. I really don’t think of it much more than dedicating time to observing how my brain works. And a lot of that is all the stuff that arises that doesn’t feel like it “under your power.” When you actually sit down regularly and take notice of the arising and falling away of thoughts and emotions, it becomes a lot easier to not let it consume you and react.

    It’s one thing to “know” the emotions are temporary and you shouldn’t react so strongly. It’s another thing to really internalize that and be able to have that same perspective in the moment of strong emotion. It’s practice.



  • I think the container piece is probably the least of your concerns here honestly. The biggest thing you’ll want to focus on is the ingress networking layer, but that won’t really be any different than if you were running the app normally. Generally exposing ports from your home network to the internet is not a great idea, and you try to use something like cloudflare or get a cheap cloud VPS with a reverse proxy connected to the container host via VPN.

    But for general container security practice, what you mentioned is good. You could also look at the Docker CIS Benchmark for more good security practices. And container scanning tools like trivy or anchore syft/grype to identify vulnerabilities in your containers. But again this is secondary to the networking layer in my opinion.