Forem Creators and Builders 🌱

Discussion on: A big day for Forem Systems

Collapse
 
jdoss profile image
Joe Doss

The short answer is that Traefik doesn't have a mature caching solution. They just added caching support six days ago and it doesn't support cache purging.

We could make Nginx do TLS termination, http to https redirection and security headers easily but that means managing the Let's Encrypt certs with something like certbot. Traefik handles the Let's Encrypt cert lifecycle pretty well and it was pretty easy to configure.

A bigger picture answer is I want the FSS to be flexible with each component in the stack. If we were running N number of Forems in a SaaS like setup, it would be ideal to pull Traefik and Nginx (or HAProxy, Varnish or Envoy) off of the FSS and run them as their own cluster above each Forem deployment.

As for a read only PostgreSQL replica... I don't have the mental fortitude for that kind of yak shave just yet. ;)

Collapse
 
rhymes profile image
rhymes

As for a read only PostgreSQL replica... I don't have the mental fortitude for that kind of yak shave just yet. ;)

ahaha that's definitely for the future future. We can make PostgreSQL do magic things with foreign data wrappers