Commit 7e85868fa7
Unsigned
Layout: unified · split
content/uses/index.org +27 −27
| @@ -14,33 +14,33 @@ threat model justification. | |||
| 14 | 14 | ||
| 15 | * Software | 15 | * Software |
| 16 | 16 | ||
| 17 | | Technology | What I Use | Threat Model | | 17 | | Technology | What I Use | Threat Model | |
| 18 | |-----------------------+-------------------------+-----------------------------------------------------------------------------------------------------| | 18 | |-----------------------+-----------------------+-----------------------------------------------------------------------------------------------------| |
| 19 | | Registrar | [[https://cloudflare.com][Cloudflare]] | WHOIS privacy, low cost, integrates cleanly if you use other Cloudflare products. | | 19 | | Registrar | [[https://cloudflare.com][Cloudflare]] | WHOIS privacy, low cost, integrates cleanly if you use other Cloudflare products. | |
| 20 | | DNS | [[https://cloudflare.com][Cloudflare]] | Portable DNS, secure infrastructure, and acceptable privacy. | | 20 | | DNS | [[https://cloudflare.com][Cloudflare]] | Portable DNS, secure infrastructure, and acceptable privacy. | |
| 21 | | Security | [[https://cloudflare.com][Cloudflare]] + [[https://github.com/fail2ban/fail2ban][fail2ban]] | Automated auth-failure bans. Minimal Cloudflare functionality enabled. | | 21 | | Security | [[https://cloudflare.com][Cloudflare]] + [[https://github.com/fail2ban/fail2ban][fail2ban]] | Automated auth-failure bans. Minimal Cloudflare functionality enabled. | |
| 22 | | Routing | [[https://ui.com/][UniFi]] | Local network segmentation. | | 22 | | Routing | [[https://ui.com/][UniFi]] | Local network segmentation. | |
| 23 | | Server | [[https://cleberg.net/blog/server-build.html][Self-hosted]] | Physical control. No hypervisor escape vector. No subpoena to a DC. | | 23 | | Server | [[https://cleberg.net/blog/server-build.html][Self-hosted]] | Physical control. No hypervisor escape vector. No subpoena to a DC. | |
| 24 | | Operating System | [[https://ubuntu.com][Ubuntu]] + [[https://www.apple.com/os/macos/][macOS]] | Ubuntu: telemetry off, LTS, stable. macOS: workstation only. | | 24 | | Operating System | [[https://ubuntu.com][Ubuntu]] + [[https://www.apple.com/os/macos/][macOS]] | Ubuntu: telemetry off, LTS, stable. macOS: workstation only. | |
| 25 | | Web Server | [[https://nginx.org][Nginx]] + [[https://community.torproject.org/onion-services/setup/][Tor]] | Static file serving. Tor layer for censored-network access. | | 25 | | Web Server | [[https://nginx.org][Nginx]] + [[https://community.torproject.org/onion-services/setup/][Tor]] | Static file serving. Tor layer for censored-network access. | |
| 26 | | SSL | [[https://certbot.eff.org][Certbot]] | Free automated TLS. No commercial CA dependency. Ensures Cloudflare can't view unencrypted traffic. | | 26 | | SSL | [[https://certbot.eff.org][Certbot]] | Free automated TLS. No commercial CA dependency. Ensures Cloudflare can't view unencrypted traffic. | |
| 27 | | Static Site Generator | [[https://github.com/krazywarez/orgo][orgo]] + [[https://git.sr.ht/~ccleberg/cleberg.net/tree/main/item/build.py][build.py]] | Org-mode source compiles to plaintext HTML. Single binary, no runtime. | | 27 | | Static Site Generator | [[https://github.com/krazywarez/orgo][orgo]] + [[https://github.com/ccleberg/cleberg.net/blob/main/build.py][build.py]] | Org-mode source compiles to plaintext HTML. Single binary, no runtime. | |
| 28 | | Terminal | [[https://iterm2.com/][iTerm2]] | Functional. Inherited from macOS. | | 28 | | Terminal | [[https://iterm2.com/][iTerm2]] | Functional. Inherited from macOS. | |
| 29 | | Shell | [[https://www.zsh.org/][Zsh]] | Portable, POSIX-adjacent, available on every target OS. | | 29 | | Shell | [[https://www.zsh.org/][Zsh]] | Portable, POSIX-adjacent, available on every target OS. | |
| 30 | | Editor | [[https://github.com/doomemacs/doomemacs][Doom Emacs]] | Editor and markup are the same tool. No proprietary format. | | 30 | | Editor | [[https://github.com/doomemacs/doomemacs][Doom Emacs]] | Editor and markup are the same tool. No proprietary format. | |
| 31 | | Markup Language | [[https://orgmode.org][org-mode]] | Plain text. Readable without any software. Version-control native. | | 31 | | Markup Language | [[https://orgmode.org][org-mode]] | Plain text. Readable without any software. Version-control native. | |
| 32 | | Image Processing | [[https://github.com/Homebrew/homebrew-core/blob/HEAD/Formula/w/webp.rb][webP (CLI)]] | CLI-only. No GUI, no cloud, no account. | | 32 | | Image Processing | [[https://github.com/Homebrew/homebrew-core/blob/HEAD/Formula/w/webp.rb][webP (CLI)]] | CLI-only. No GUI, no cloud, no account. | |
| 33 | | Browser(s) | [[https://www.torproject.org/][Tor]] + [[https://librewolf.net][LibreWolf]] | Tor for anonymity-critical use. LibreWolf for hardened daily use. | | 33 | | Browser(s) | [[https://www.torproject.org/][Tor]] + [[https://librewolf.net][LibreWolf]] | Tor for anonymity-critical use. LibreWolf for hardened daily use. | |
| 34 | | Version Control | [[https://git-scm.com/][Git (CLI)]] | Decentralized. The repo is the backup. | | 34 | | Version Control | [[https://git-scm.com/][Git (CLI)]] | Decentralized. The repo is the backup. | |
| 35 | | Git Host | [[https://sr.ht][SourceHut]] + [[https://github.com/ccleberg][GitHub]] | SourceHut is the primary and GitHub is the mirror. | | 35 | | Git Host | [[https://github.com/ccleberg][GitHub]] + [[https://sr.ht][SourceHut]] | GitHub is the primary and SourceHut is the mirror. | |
| 36 | | CI/CD | [[https://git.sr.ht/~ccleberg/cleberg.net/tree/main/item/build.py][build.py]] + [[https://builds.sr.ht][builds.sr.ht]] | A Python script and SSH. builds.sr.ht for convenience but not required. | | 36 | | CI/CD | [[https://github.com/ccleberg/cleberg.net/blob/main/build.py][build.py]] | A Python script and SSH. No pipeline to depend on. | |
| 37 | | Email Host | [[https://migadu.com][Migadu]] | Straightforward usage-based provider from Switzerland. | | 37 | | Email Host | [[https://migadu.com][Migadu]] | Straightforward usage-based provider from Switzerland. | |
| 38 | | Search Engine | [[https://docs.searxng.org/][SearXNG]] (self-hosted) | Queries route through my own instance. No third-party search profile. | | 38 | | Search Engine | [[https://docs.searxng.org/][SearXNG]] (self-hosted) | Queries route through my own instance. No third-party search profile. | |
| 39 | | Backups | N/A | Nothing to back up. No user data. Source mirrored via Git. | | 39 | | Backups | N/A | Nothing to back up. No user data. Source mirrored via Git. | |
| 40 | | Monitoring | N/A | Monitoring creates logs. Logs are a liability. | | 40 | | Monitoring | N/A | Monitoring creates logs. Logs are a liability. | |
| 41 | | Analytics | N/A | No interest in visitor data. Content finds its way via RSS. | | 41 | | Analytics | N/A | No interest in visitor data. Content finds its way via RSS. | |
| 42 | | Social Media | N/A | — | | 42 | | Social Media | N/A | — | |
| 43 | | Newsletter | RSS Only | No subscriber list. No email vendor. No data relationship. | | 43 | | Newsletter | RSS Only | No subscriber list. No email vendor. No data relationship. | |
| 44 | 44 | ||
| 45 | * Hardware | 45 | * Hardware |
| 46 | 46 | ||