@scottalanmiller said in Why Right to Fire (and Hire) May Be in the Employee's Favour:

People have been taught to fear changing jobs, and all humans are naturally averse to change even when it is good for us. This is one of those cases where the increase rate of change feels scary, but actually makes us safer. It's not unlikely flying vs. driving. Driving feels safer, but flying with the pilot in control is actually safer.

Basically the same argument as for CI/CD. Painful experiences cause the reaction of people pushing to do it less and implement things to make it harder for people to do, when the solution is actually doing it more.

@wrx7m said in Ubiquiti Unifi APs - Do You Need a Controller?:

@jaredbusch said in Ubiquiti Unifi APs - Do You Need a Controller?:

@wrx7m said in Ubiquiti Unifi APs - Do You Need a Controller?:

@jaredbusch said in Ubiquiti Unifi APs - Do You Need a Controller?:

But a cloud key.

I hate them, but a home user it is not a bad solution.

Out of curiosity, what is it about them that you hate?

They can barely run the controller and have limited capacity. Just really useless IMO.

Thanks for the insight.

Do you ever use the ios/android app?

I use the app for my outdoor AP, it's pretty simple, can't imagine needing more than that for home use.

@scottalanmiller said in Certifications:

@flaxking said in Certifications:

MS certs can definitely give you an edge at companies that are MS Partners, since they need to meet certain requirements

I assume that that is going away given that the certs themselves are going away.

It seems that the plan was that by June 30, 2021 MS Partners would have to have Microsoft 365 certifications or Azure certifications to meet the requirements instead.

However, it sounds like they're already giving a free pass to partners that are not meeting the current requirements https://blogs.partner.microsoft.com/mpn/responding-to-covid-19-microsoft-partner-network/

If they continue with the June 2021 plan, Microsoft 365 and Azure certifications may be in high demand in that area of the market.

@wrx7m said in Ubiquiti Unifi APs - Do You Need a Controller?:

@flaxking said in Ubiquiti Unifi APs - Do You Need a Controller?:

@wrx7m said in Ubiquiti Unifi APs - Do You Need a Controller?:

@jaredbusch said in Ubiquiti Unifi APs - Do You Need a Controller?:

@wrx7m said in Ubiquiti Unifi APs - Do You Need a Controller?:

@jaredbusch said in Ubiquiti Unifi APs - Do You Need a Controller?:

But a cloud key.

I hate them, but a home user it is not a bad solution.

Out of curiosity, what is it about them that you hate?

They can barely run the controller and have limited capacity. Just really useless IMO.

Thanks for the insight.

Do you ever use the ios/android app?

I use the app for my outdoor AP, it's pretty simple, can't imagine needing more than that for home use.

Can you go from out-of-the-box to finished config with just the app?

Yep. Connect to it, update the firmware, setup wireless network. I didn't do anything fancy in my config so I don't know what's missing.

@JaredBusch said in Certifications:

@scottalanmiller said in Certifications:

@flaxking said in Certifications:

MS certs can definitely give you an edge at companies that are MS Partners, since they need to meet certain requirements

I assume that that is going away given that the certs themselves are going away.

And the MS Partner track has long had the cloud/azureO365 on the list.

As its own competency. Now that other exams are retiring they'll be needed for other competencies.

Docker in general IT is great for immutable server design. If you want to do OS updates, config changes, etc you roll out a new container.

The downside is if it's not for software you write yourselves, deploying a new version of the software might not be so smooth if the database or backing data storage has to also be updated. You can't design it to be able to be able to do a rolling update, or to be able to rollback, so it's not quite as useful then.

@CCWTech yes, it's your resume. And anytime I've seen a tech resume that someone said they paid a professional to help write, it hasn't been good.

Free help from other tech professionals is usually the way to go. Here is one community that can help https://discord.gg/CB8DMrr

My lunch, ibuprofen, and my dumbphone

@emad-r said in Check my 2 min audio theory on Containers:

DevOps

DevOps Engineer maybe could be a job title, but it's almost certainly not what you are doing in your job.

DevOps Admin could possibly be a job title, for someone who administers the DevOps tools.

DevOps is not a department, and companies that uses titles like DevOps Engineer probably aren't really doing DevOps, just using some DevOps tools.

@scottalanmiller said in Check my 2 min audio theory on Containers:

Then things like DevOps talking dev itself is the extra, the tack on later. It's not "part of" devops, any more than it is of any operations. And just how operations doesn't cease to exist without developers, neither does DevOps.

So, I agree that the 'Dev' part is comes after the core of DevOps. So you can practice the core of DevOps without Dev. However, I do not believe that the full complete picture of DevOps is possible without Dev.

SQL Server Configuration Manager – SQL Server Network Configuration – right click “Protocols for ...” - Properties – Under the Flags tab, set Force Encryption to Yes

MS SQL Server will then use a self-signed certificate for encrypting communications. SQL clients have supported encryption for ages, so whatever they're using for the client will probably just work with it.

If you want to use your own trusted certificate, you have to set the SQL clients on each machine to force encryption and to only trust trusted certificates

Self hosted screenconnect. Not sure what we will turn to when they stop offering maintenance subscriptions and our version gets too old.

@scottalanmiller said in PFsense hardware ?:

@flaxking said in PFsense hardware ?:

I'm using a wyse thin client for my home router.

What did you load into it?

Currently PFSense, but will be switching to VyOS soon.

@pmoncho said in Correct license for a Win 10 Veeam backup server on Type-1 Hypervisor:

@Obsolesce said in Correct license for a Win 10 Veeam backup server on Type-1 Hypervisor:

Straight from the license.rtf in Windows 10:

Doesn't the portion you highlighted make every win 10 PC that shares a printer or file share illegal?

Lower down, in d. iii, it specifically lists file and printer services as exceptions.

One of my dreams is to make a ticketing system on Tryton.

It took me quite a long time to get through the initial Puppet tutorials. And even then I was missing important pieces that should be used on any production setups. After that Salt was really easy to pick up. I haven't tried Ansible, but people always seem to say it is the easiest.

Looks like wail2ban probably isn't multithreaded, though if someone is hammering the server with login attempts it should still do the trick, just might not hit the lockout threshold as fast.

I should give Ansible a go one of these days, because whenever I research it, it seems to fall short of Salt, but it would be nice to really have concrete experience of how it falls short.

My current thinking is that if there's a windows feature that Ansible that Salt doesn't, I could probably just grab the powershell script + any dependent scripts and create Salt state/module wrappers around it.

Alternatively, Salt can run Ansible playbooks on minions, but the wrapper approach is more minimalist (don't have to install Ansible on each minion) and keeps secret security simpler.

@wrx7m said in PowerShell - Off-boarding Script:

@flaxking said in PowerShell - Off-boarding Script:

It wants a string and your giving it a SecureString

OK. How can you tell that?

On your read-host you have -AsSecureString to convert it.

Set-ADAccountPassword documentation shows it takes a SecureString for the password

Set-MsolUserPassword documentation shows it takes just a string for the password

If you run GetType() on your variable it should tell you it is a secure string

Next up is Graylog