1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
|
#+title: Uses
#+slug: index
What are the technologies behind ~cleberg.net~? See below. I tend to flip-flop on
my DNS providers and Git hosts often, but the rest of these technologies are
consistently powering this website.
I've also included various technologies that I use /while/ building ~cleberg.net~,
as they seem relevant to complete the picture.
* Philosophy
My choice of tools is guided by a few core "soft" requirements that are more
important to me than convenience or feature-creep:
- Digital Sovereignty: If I don't own the hardware or the plain-text source, I
don't truly own the content. This site lives in my rack, not on someone else's
"cloud."
- Zero Tracking: I have no interest in your data. I don't use cookies, I don't
track your IP, and I don't care how many "unique visitors" I have. If the
content is useful, it will find its way via RSS or word-of-mouth.
- Disposable Infrastructure: The server is a pet, but the site is a cattle.
Because the entire build is driven by org-mode and a single ~build.py~ script, I
can lose the entire machine and be back online on a fresh OS in minutes.
- Minimalist Stack: I prefer tools that do one thing well. Weblorg for static
generation and Nginx for serving files is a stack that will likely still work
ten years from now without a single dependency update.
* Software
| Technology | What I Use |
|-----------------------+----------------------------------|
| Registrar | [[https://njal.la][Njalla]] |
| DNS | [[https://cloudflare.com][Cloudflare]] [fn:1] |
| Security | [[https://www.cloudflare.com/zero-trust/][Cloudflare Zero Trust]] + [[https://github.com/fail2ban/fail2ban][fail2ban]] |
| Routing | [[https://ui.com/][UniFi]] |
| Server | [[https://cleberg.net/blog/server-build.html][Self-hosted]] |
| Operating System | [[https://ubuntu.com][Ubuntu]] + [[https://www.apple.com/os/macos/][macOS]] |
| Web Server | [[https://nginx.org][Nginx]] + [[https://community.torproject.org/onion-services/setup/][Tor]] |
| SSL | [[https://certbot.eff.org][Certbot]] |
| Static Site Generator | [[https://github.com/emacs-love/weblorg][Weblorg]] |
| Terminal | [[https://iterm2.com/][iTerm2]] |
| Shell | [[https://www.zsh.org/][Zsh]] |
| Editor | [[https://github.com/doomemacs/doomemacs][Doom Emacs]] |
| Markup Language | [[https://orgmode.org][org-mode]] |
| Image Processing | [[https://github.com/Homebrew/homebrew-core/blob/HEAD/Formula/w/webp.rb][webP (CLI)]] |
| Browser(s) [fn:2] | [[https://www.torproject.org/][Tor]] + [[https://librewolf.net/][LibreWolf]] |
| Version Control | [[https://git-scm.com/][Git (CLI)]] |
| Git Host | [[https://github.com/ccleberg][GitHub]] |
| CI/CD | [[https://github.com/ccleberg/cleberg.net/blob/main/build.py][build.py]] + [[https://www.openssh.org/][OpenSSH]] |
| Email Host | [[https://soverin.com/][Soverin]] |
| Search Engine | [[https://docs.searxng.org/][SearXNG]] |
| Backups | N/A - Absolutely None [fn:3] |
| Monitoring | N/A - Absolutely None |
| Analytics | N/A - Absolutely None |
| Social Media | N/A - Absolutely None |
| Newsletter | N/A - RSS Only |
[fn:1] I hate myself a little bit for using Cloudflare, but they've proven to be
extremely reliable over the years and have not invaded my privacy (at least, in
a visible manner). They also allow me to experience a large jump in security for
zero cost, which is nice.
[fn:2] I don't get paid for this, so I only test my site in my current primary
browser(s).
[fn:3] I have nothing to back up except the source code (which is already
"backed up" via Git), since I do not collect or store any user data.
* Hardware
I run most of my services from my custom, rack-mounted server (details below),
but I also run a Dell Optiplex and a Raspbery Pi 4 for some miscellaneous
services.
See the following blog post for more information on this server: [[https://cleberg.net/blog/server-build.html][Building a
High-Performance Rack-Mounted Server with Consumer PC Components]].
| Hardware Component | What I Use |
|--------------------+-------------------------------------------|
| Chassis | Rosewill RSV-R4100U 4U Rackmount |
| Motherboard | NZXT B550 |
| CPU | AMD Ryzen 7 5700G [fn:4] |
| GPU | N/A - Onboard Radeon Graphics |
| RAM | 64GB (2x32GB) DDR4 |
| Boot Drive | 500GB WD M.2 NVMe SSD |
| Storage (HDD) | 1x10TB White, 1x8TB White, 2x8TB Red Plus |
| Power Supply | Corsair RM850 |
| Thermal Paste | Corsair TM30 |
| Cooling | Noctua Fans (1x120mm front, 2x80mm rear) |
| Cabling | CableMatters 6Gbps SATA |
[fn:4] Specifically chosen for onboard graphics support to avoid needing a
dedicated GPU in the rack.
|
