Load Balanced
I spent some time this morning moving some of the ancillary services of vmst.io behind our Digital Ocean managed load balancer, and the pair of Nginx hosts that front end Mastodon.
I'd previously been fronting all these things with a separate instance of Caddy, which was pretty flexible and easy to setup, but having a single place where things flow in makes it simpler to monitor and secure. Having them load balanced for the frontend even if it's a single app behind it also makes me feel a little better, and gives some flexibility for making things like Elk or WriteFreely more redundant in the future.
It also means fewer places where I need to have TLS certificates configured, replaced, etc.