infrastructure VS vodon-pro

I've been developing a recipe search engine and meal planner at https://www.reciperadar.com/ -- all the code is free and open source.

I think the two largest challenges it has at the moment are:

- Developer experience / infrastructure setup: the service is Kubernetes-based, composed primarily of Python+Flask microservices, and although the setup steps are documented[1], they're not yet automated.

- User interface: my lack of user interface design skills are fairly apparent, I think. Having some clear UI goals to work towards would be helpful - there's likely some overlap with product design questions here (what should be the range of functionality that the the app offers?)

Any and all feedback welcome, from discussion comments to pull requests to business model questions/critiques :)

PS: Don't forget to mention one or two of your own side projects if there's anything you're looking for help with, too.

[1] - https://github.com/openculinary/infrastructure/

Hi folks,

I enjoy developing and maintaining the RecipeRadar[1] project's infrastructure in a truly open fashion.

Since the project itself is AGPL-licensed, that means I like to -- ideally -- push infrastructure documentation and changes before the associated administrative commands are run. That means that the code to the system itself is already published and available (in a chronological sense) to anyone using the service over the network at any given point in time.

However, it does introduce a set of strange risks: what if there changes expose security vulnerabilities that are _not yet_ introduced, but will be when the commands are run.

In a typical system administration scenario, generally the 'home team' acts carefully and is primarily only aware of their own actions - aside from monitoring for any externally-initiated or unexpected system behaviour during maintenance.

If a mistake is made, sometimes they'll backtrack and clean up, but for some kinds of system change, it's hard to know whether an exposed vulnerability was exploited, because the exposure window may have been very brief.

I have a sense that the best overall solution to this kind of problem (in this kind of open environment) would be an 'adversarial' system administration approach; perhaps involving some kind of mirroring.

Two (or more) systems would walk through the same series of administration steps, each with one (or more) red teams attempting to exploit the process -- already armed with the knowledge of the steps to be applied in advance.

Does that make sense to anybody, and/or can anyone provide thoughts or reading material about research into this kind of area?

[1] - https://www.reciperadar.com/

[2] - https://github.com/openculinary/infrastructure/

I'm the author of a free open source video player project called "Vodon Pro", it's written using Electron. You can see the functionality of it here: https://vodon.gg/ (source here: https://github.com/Rodeoclash/vodon-pro)

You know I don't make any money off this right? You can download the entire app for free and the source code for it if you want (https://github.com/Rodeoclash/vodon-pro)

I have a video player designed for esports coaches to do gameplay reviews of matches that their team has played. It has the unique feature that you can synchronise multiple viewpoints from a match together. It's free and open source.

https://github.com/Rodeoclash/vodon-pro

I've built it using Electron as an MVP but I'd like to rebuild the most successful features into a native app using gstreamer as a V2 version at some point.

I'm looking for help with reaching more esports teams that might be interested in using it, graphic design feedback (I've done it myself :/ ) and someone who has knowledge building native apps that I could bounce ideas off.

Vodon Pro can be downloaded, for free, from https://github.com/Rodeoclash/vodon-pro

[1] https://github.com/Rodeoclash/vodon-pro

I'm using the build of this app to evaluate rebuilding another app I have called Vodon Pro which is a synchronised video player for esports reviews (https://github.com/Rodeoclash/vodon-pro) into QT so the performance is better but also that I can leverage GStreamer using the QT sink here: https://gstreamer.freedesktop.org/documentation/qmlgl/?gi-language=c

If you're interested, you can download it here: https://github.com/Rodeoclash/vodon-pro