'Lets make a security blog, sounds awesome!'

Yeah the idea is awesome, domain name is setup and the server is already running.

Choosing a CMS is proving to be the biggest challenge right now, few hours of searching and still can't find anything that suits my needs 😅

That's why always go static html pages :3

@gitpush I love that idea but I want some interface for writing blog bosts tbh :/. Might write something myself soon or so haha

@linuxxx why reinvent the wheel? Just use WordPress, and @AlexDeLarge will be most helpful on this :P

@gitpush with jekyll?

@plusgut nope, copy/paste each web page and just change the content of the blog post XD

@gitpush I'd rather stick a running flamethrower up my ass than using wordpress!

@plusgut I like jeykill only the learning curve doesn't seem to suit my timeframe right now :/ (I just want this thing setup in an hour or so)

@linuxxx wow you are the first person I see that hates wordpress as much as Alex lol

@gitpush I didn't hate it that much before my current job. That cms generates security issues like nothing else, fucks up the most basic stuffs, can completely break functionality when plugins are updated and so on.

As someone who has to fix some of it's shit from peoples websites, I fucking hate it with a passion.

@linuxxx you remind me of a colleague that always has to fix client fuck ups with new plug-ins :\

Good luck in dealing with it man

@gitpush It's the one thing I freaking hate about my job :P. I like this Jekyll thingy but I still can't wrap my head around how this works :/

@linuxxx Check this CMS I haven't used it but I hear it is promising
https://www.couchcms.com/

@AlexDeLarge Can I put that behind an NginX installation? Because from my own experience I'd have to bind node to a specific port.

@AlexDeLarge Thanks for the tip! I have no clue how to do that so will do some searching ;)

@AlexDeLarge For some reason it never came to my mind that you can bind node to 127.0.0.1. Which means that you can't access it from outside... I feel quite stupid now O.o

@AlexDeLarge Yeah I do server management/monitoring/installation etc and backend programming for about 90 percent of the time indeed.

If you find some static generator with a nice GUI please mention me. Just realised that it would be nice to provide a GUI in the intranet for the stuff which is not accessible from the outside due to security.

As @AlexDeLarge said I've also setup a ghost blog and it's really neat. With Docker it took me 15 minutes to set it up. Now I can spam instances like 1 per minute (including site specific config) xD

Thanks for all the suggestions, going to look into everything :). For now I'm going to continue working on the privacy website cms api but will get back to this today for sure!

@linuxxx You seem to have found something already, otherwise I came across this one few months ago: https://getgrav.org
Never had time to delve into it but might be something if everything else fail!

Just use tumblr

@linuxxx take a look at Hugo ( writen in go ) its not as mature as others but its pretty cool, its a static HTML cms.

There's nothing you can't put behind nginx, actually. :)

Just don't expose the port the service is listening on (and block it for outside traffic) and reverse proxy the hell out of it.

I prefer sockets wherever applicable, though.

@Jilano @EvilArcher @azous Currently writing a quick thingy myself :). Because why not take a little challange?

@linuxxx Its personal preference. I happen to use Hugo w/ github pages. Quick to setup, i can pick a great default theme, and get started blogging right away.

Anyway here is a Hacker News discussion on this topic:
https://news.ycombinator.com/item/...

@linuxxx open source it 😁

@azous Is actually my intention! It's pretty much a very tiny php 'framework' which gets the content from JSON files :)

@linuxxx
Check out Pelican

@linuxxx That might be fine if you don't want to grow, but I doubt it will scale well.

@linuxxx There was an issue that I had to deal with some time ago, when wordpress updated itself and everything just broke.

@theCalcaholic I'm going to siege it tonight to see how well it holds :)

@linuxxx 👍

I'm mainly sceptical because your reading from json files instead of using a db. That's nice and simple and has little overhead but a db is able to
1. hold data in RAM
2. Cache frequent requests
3. Has an optimized data structure for finding entries (in contrast to your hard drive)

which gives it totally different capabilities regarding scalability.

@theCalcaholic Agreed but the amount of files I have to load now due to not using a database (php files I don't have to include) is quite lower than when using a database.

But I'll see soon enough :)

@linuxxx @theCalcaholic as a json you can hold them on Redis 🤔

@azous That might actually help.

@theCalcaholic @azous just did a siege test on the application I wrote and it can easily handle 1000r/s

@ribchinski He would be a dick if he didn't after teasing us for so long. :P

@linuxxx Nice, in that case: Go ahead!

@ribchinski Thanks for the enouragement and I am working on it :)

.

@linuxxx cool, how did you test it?

I'm assuming with a software called siege on another machine, right?

I used siege , which I prefer over ab but I never know if it really does that much damage as multiple machine with lower overhead

@azous Yeah I used Siege from my dedicated server (1000mbit connection) :)

@linuxxx interesting, I'll give siege a try, I have been using https://loader.io usually for that.

@JoshBent Siege just works from the linux terminal :)

If you can't find one, make one.

@azous @linuxxx any other tool like siege you guys know of? I just learned about it (from you guys) and gonna give it a go thanks guys :)

@gitpush There's an Apache stress tester of which I forgot the name...

@linuxxx oh I'm using Kestrel for now but I'm moving on to NGinx soon, is Siege enough?

@linuxxx @gitpush its called ab ( for apache benchmark ) comes with httpd-tools in fedora

@azous thanks man :)

@gitpush well I mentioned loader.io above but its not local, but has amazing config options.

@JoshBent thanks man, but how trust worthy is it? I usually don't like using online solutions for these cases

How about Typo3? @linuxxx
It probably won't take only an hour to set up though :/

@gitpush well anything that is third party, including pre-compiled binaries can't be fully trusted.

@JoshBent true can't argue with that, but I am still not a fan of web solutions :\

@gitpush What are you afraid of? The worst thing that could happen is that they lie to you about your servers results - but why would they do that?

I'm just curious. All of you hating on WordPress, have you ever used Drupal??? Just asking...

@theCalcaholic maybe he is afraid of his IP or url leaking before actual production or something?

@linuxxx I know you're already creating your own cms, but I just remembered, hexo actually does have an admin interface: https://github.com/jaredly/...

Craft CMS is pretty sweet. It's php...but it's a good piece of software.

Who needs a CMS when you can make your own? XD.

I use AnchorCMS if you wanna check it out, it's open source and lightweight and really simple, not bloated and shit like WP and some others and it's free.