Hacker News: mrl5

New comment by mrl5 in "TLS certificates for internal services done right"

mrl5 — Fri, 10 Jul 2026 14:25:56 +0000

TIL, thanks! This makes dns challange automation more approachable for me. I always had an issue with API keys which scope can't be limited to TXT records. This seems to be a nice workaround

... and it is even already documented at https://github.com/acmesh-official/acme.sh/wiki/DNS-alias-mo...

New comment by mrl5 in "TLS certificates for internal services done right"

mrl5 — Thu, 09 Jul 2026 20:57:09 +0000

OP here. Actually I tried to use it but apparently prematurely -> https://github.com/acmesh-official/acme.sh/issues/7085#issue...

Once it's supported I think my next iteration will be DNS persist + internal ip addresses on the public zone.

Thank you all for comments and feedback! It's cool to see real interest in this blog post

New comment by mrl5 in "TLS certificates for internal services done right"

mrl5 — Thu, 09 Jul 2026 14:57:02 +0000

I've documented how to securely set up TLS certificates for internal services without creating TLS issues for http clients downstream. All thanks to split-horizon DNS, WAF and ACME protocol. All for free!

TLS certificates for internal services done right

mrl5 — Thu, 09 Jul 2026 14:57:02 +0000

Article URL: https://tuxnet.dev/posts/tls-for-internal-services/

Comments URL: https://news.ycombinator.com/item?id=48846995

Points: 182

# Comments: 151

New comment by mrl5 in "Rearchitecting: Redis to SQLite"

mrl5 — Wed, 25 Sep 2024 19:46:24 +0000

Thank you. First explanation what might be the root cause :)

New comment by mrl5 in "Ask HN: What tools should I use to manage secrets from env files?"

mrl5 — Tue, 24 Sep 2024 20:32:39 +0000

This is an interesting alternative to password manager, esp. if you want to version control your secrets https://github.com/getsops/sops

System Logs Aggregation with Postgres

mrl5 — Sun, 14 Jul 2024 16:53:28 +0000

Article URL: https://tuxnet.dev/post/20240712_central-logs-postgres/

Comments URL: https://news.ycombinator.com/item?id=40961947

Points: 3

# Comments: 0

New comment by mrl5 in "Neon: Comparing type-safe SQL libraries for TypeScript"

mrl5 — Fri, 04 Aug 2023 15:42:34 +0000

I wonder why pgtyped [1] was skipped

[1] https://github.com/adelsz/pgtyped

New comment by mrl5 in "Firejail: Light, featureful and zero-dependency security sandbox for Linux"

mrl5 — Tue, 11 Jul 2023 15:40:04 +0000

There is also https://github.com/google/nsjail

New comment by mrl5 in "The Clock of the Long Now"

mrl5 — Sat, 08 Jul 2023 06:43:24 +0000

"It is still being assembled deep inside a mountain in west Texas. The Clock provides a rare invitation to think and engineer at the timescale of civilization. It offers an enduring symbol of our personal connection to the distant future."