Skip to content
  • Meeting topics:
  • Caddy webserver (Rechner)
  • Identity/SSO (Sergio)
  • DHTs (Dan) {if we have time, might need to bump this to next meeting}

Attendance

  • Host: Rechner
  • In-person: Nic, Geo, Bocuma, Sergio, Dan, Grace
  • Online: Cyberius, Georninja

Introductions. Name, background, goals or interests for the meeting.

  • Rechner (he/him): CTO @ Pawprint, Infra-wrangler in default life, helping people homelab
  • Bocuma (he/him): racon
  • NIC (he/him): Infra and Network person.
  • Geo (he/him): Professional sand bamboozler.
  • Dan (any): compiler hacker / distributed systems
  • Cyberius (he/they): infosec and Linux dog
  • Georninja (any): SJSU IT graduate why is there a Canadian catgirl

because AI slop machine go brrr

Hello

a web server converts cats to ip packets

Wordpress = VaaS

But Rechner, why are Canadian accountants in charge of deciding who is Totally Legit?

so that’s called IPFS

Lesson or demo

Caddy Webserver

Caddy Webserver Slide deck

Sergio Identity/SSO

SSO Slide Deck

We'll be doing a live demo setting up KanIDM ~4 years at cloudflare, lots of identity products

DNS is the root of trust for identity

Phishing-resistant MFA: Multi-factor authentication that can't be obtained by tricking a user into obtaining

What can identity do for you?

  • SSO for all internal and external apps
  • Central logging

IdP options

  • Cloud hosted: Okta, Auth0, Azure AD, Google Identity
  • Self-hosted: Kanidm, keycloak, Zitadel, Authelia

Kanidm uniquely does not enable passwords by default.

Demo

  • Spun up a VM with Kanidm running in Docker, and did a quick demo registering a user with a passkey.

DHTs

Building an abstract network on top of another network (overlay network). For downloading linux distros.

Chord (protocol)

Legacy, built as a ring (boo hiss) rings suck because rings can split or join accidentally (net split, network variant)

Kademlia

Used by Bittorrent, others Network invariant

Questions & discussion

Readings & exercises for future meetings

  • Docker (@rechner)
  • DHT (Reprise, with slides!)
  • Homelab Access (signal: @touk.75)
  • Weaponized TV Slurping (Sergio)
  • Phone your friends (Sergio)
  • Geo can do security!