keeping secrets in the macos keychain

Plenty of tools these days want an API token or some other secret in an environment variable. The path of least resistance is to echo 'export SOME_SECRET="a_secret"' >> ~/.zshrc and move on, and that works, until you commit your dotfiles, back them up somewhere, or share your screen with the file open.

More …

google.com/ncr - stop google geolocating automatically

GeoIP databases - which map IP addresses to geographic locations around the world - occasionally get it wrong, since VPN exit nodes, CDN edges, and shared infrastructure can move around. When GeoIP databases get out of sync with reality, you might end up somewhere you don’t expect by typing google.com and getting google.ca, or somewhere else.

More …

new machine setup

Whether it’s from regular lifecycling or a hardware issue, it is important to have a way to get yourself back up and running after a machine change. I used to use an Ansible playbook to do this, but I found the solution to be too clunky.

More …