Meetups/Infra/2025-09-29

Some hands-on NB m3 web debugging, report on NB garden k8s cluster with argoCD, and discussion of BeyondCorp / Zero Trust systems.

Introductions

• [name] - [background]. [goals for meetup, or interests to explore]

• Loren -- enjoys running meetups, platform engineer, background in scraping
• Elan -- software engineer mostly on the ai side of things, problem with leaving good, the enemy of better
• Alex -- backgroun in ML, no current goals
• Frank -- software background, intrests in HomeLabbing + NoiseGarden project
• Jameson -- zero trust programming models
• Robert -- new to tech, lots of ideas interested in imprementing,
• Mike -- recovering mathematician, zero-knowledge systems
• Greg -- programmer, homelab, redoxOS
• Cloud -- runs 5MoF
• Daniel -- visting, works on self-built robots
• Will -- work on content side of an edtech company
• John -- systems analyst with UCSF, lots of hands-on HPC infrastructure, also network security activism, ray hunter, EFF, tor/tails
• Doug -- NOT classically trained, writes software anyways!
• Zacchae -- experiencing the dread of working on email to the point that I'm working on compilers, compilers in C++
• Kevin -- likes writing code and learning
• Erik -- interested in the joining the scraping wars!

Lesson or Demo

• Read aloud: clarify for meetup. We are taking notes in a riseup pad (or I am--help appreciated, and links). We have meeting notes posted to the wiki. noisebridge.net, search Infra, or Meetups/Infra. (the Infrastructure page has a disambiguation link.)
• Shell, web services, self-hosting, networking!

• m3 -- wiki login -- add to ban rules
• anubis -- https://anubis.techaro.lol/ -- by https://xeiaso.net/

Example NixOS anibus config ```

 services.anubis = {
   defaultOptions.enable = true;
   instances.default.settings = {
     # Replace codeForgePort with the internal port that your anubis-protected service is listening on
     TARGET = "http://localhost:${(toString codeForgePort)}";
     BIND = ":9833";
     BIND_NETWORK = "tcp";
     METRICS_BIND = "127.0.0.1:9322";
     METRICS_BIND_NETWORK = "tcp";
   };
 };

```

• argo cd -- (continuous deployment), git ops, returns cluster to a desired state

• BeyondCorp -- Zero Trust

• • CloudFlare
  • SupaBase -- 12 container solution, including beyond corp
  • Duo security implementation

• hashicorp vault -- secret management

OpenBao -- fork alongside OpenTofu

Questions, Discussion, or Coworking

• [Issue]

For next time

Readings & Exercises

• Readings
• Exercises

Join online

• Try it yourself!
  • Join libera.chat #nb-meetup-infra

https://www.noisebridge.net/wiki/Meetups/Infra