Articles

The site had needed a refresh for a while. I knew exactly what was wrong: images that no longer displayed, the about page a bit empty, tags all over the place… I just never had the motivation to get to it. Now it’s done, so here’s a quick tour of before and now. Images are back All the site’s images went through a CDN I’d built myself, a small personal project running on a VPS. The day I cancelled that VPS, the CDN went with it, and all the images went with the CDN. Profile picture included: ...

A just cause… a shameful method Protect children from online predators? Yes, a thousand times yes. But monitor every message, every photo, every file exchanged between ordinary citizens? No, never. And yet that’s exactly what Chat Control proposes. Behind reassuring, well-meaning rhetoric, we’re being set up with a scanning machine built directly into our phones, computers and tablets, able to examine every piece of content before it’s even encrypted. The problem is that once this spy is in place, there’s no such thing as truly private communication anymore. It breaks trust in the tools we use every day, and opens the door to blanket surveillance. ...

One year of Free fiber: my take Overall, I’ve been pretty satisfied with fiber from Free, a French ISP, this year. Stable speeds, decent latency, no surprises on the hardware side. For “mainstream” FTTH, it was pretty good… until the end of the period, when outages piled up and left me a bit disappointed. June clearly weighed heavily in the balance and tarnished an otherwise quiet year. The numbers that matter Monitoring started on July 9 with HetrixTools: cumulative uptime of 52w 20h 46min, cumulative downtime of 9h 50min, 37 incidents, for an observed availability of 99.8877%. ...

Among all the sites I use to discover new sounds, there’s one that holds a really special place: everynoise.com. It’s a bit of a crazy project, launched more than ten years ago, that literally maps out every musical genre in the world, with an ultra-minimal interface but infinite sonic richness. Every Noise's genre cloud I use it a lot, especially to dig into styles like blackgaze and shoegaze, and all their dreamy or aggressive variations. Thanks to this site, I’ve discovered plenty of small indie bands that are often little known, sometimes self-released, but always interesting. ...

Traefik: first steps If Ansible helped me declare the desired state of my machines, I still needed a simple, automatic way to route HTTP/HTTPS traffic to my various services (Docker, VMs, bare metal). After several recommendations, I dove into Traefik, a reverse proxy / ingress controller written in Go. Why I chose Traefik Dynamic configuration: Traefik continuously queries its providers (Docker, Kubernetes, files…) and updates routes on the fly, no more nginx -s reload every time a container shows up. Built-in Let’s Encrypt: certificate generation and renewal without a homemade script. Clear dashboard: you can see routes, middlewares, and entry points in real time. Native Docker/K8s support: three labels are enough to expose a service. My first discoveries Quick install docker network create traefik docker compose -f traefik.yml up -d Static vs dynamic Static: ports, providers, ACME. Dynamic: routing rules, middlewares, certificates, changeable without a restart. Docker labels Minimal example: labels: - "traefik.enable=true" - "traefik.http.routers.blog.rule=Host(`blog.example.com`)" - "traefik.http.services.blog.loadbalancer.server.port=3000" Let’s Encrypt in 30 seconds A certresolver=le in the labels plus an email address, and Traefik handles the rest. Middlewares HTTPS redirect, security headers, basic auth… declarable via YAML or a label. ...