<instructions>Your goal is to analyze the following comment and estimate how highly it will be upvoted by the Hacker News community.</instructions><comment><author>jordanbeiber</author><text>It’s much easier with nomad as you are not forced in to a ”black box” with networking layers and surrounding requirements.&lt;p&gt;Bare metal nomad - use with consul and hook up traefik with consul backend. This would be the simplest, most ”zero conf”, way to go.&lt;p&gt;I’ve used this setup for a few years heavy production use (e-commerce &amp;amp; 50 devs)&lt;p&gt;As consul presents SRV records you can hook up a LB using those, or use nomad&amp;#x2F;consul templating to configure one.&lt;p&gt;Service mesh with mTLS is actually rather approachable and we’ve deployed it on selected services where we need to track access and have stricter security. (This however had us move off traefik and in to nginx + openresty)&lt;p&gt;Now if you want secrets management on steroids you’ll want vault. It’s really in many ways at the heart of things. It raises complexity, but the things that you can do with the nomad&amp;#x2F;consul&amp;#x2F;vault stack is fantastic.&lt;p&gt;Currently we use vault for ssl pki, secrets management for services &amp;amp; ci&amp;#x2F;cd, and ssh cert pki.&lt;p&gt;These things really form a coherent whole and each component is useful on it own.&lt;p&gt;Compared to k8s it’s a much more versatile stack although not as much of a “framework” and more like individual “libs”.&lt;p&gt;I always come back to the description: “more in line with the unix philosophy”.&lt;p&gt;In a mixed environment where you have some legacy and&amp;#x2F;or servers to manage I think using the hashicorp stack is a no brainer - consul and vault are tools I wouldn’t want to be without.</text><parent_chain><item><author>throwaway894345</author><text>I would be very interested in a more detailed write-up on Nomad vs Kubernetes for bare metal. I&amp;#x27;m working through getting Kubernetes stood up, but I&amp;#x27;m running into a &lt;i&gt;dearth&lt;/i&gt; of features--namely you have to bring your own load balancer provider, storage provider, ingress controller, external DNS, monitoring, secret encryption, etc, etc before you can run any real world applications on top of it. I would be interested in how Nomad compares.&lt;p&gt;EDIT: Downvoters, I&amp;#x27;m really curious what you&amp;#x27;re objecting to above, specifically.</text></item><item><author>marvinblum</author><text>I did&amp;#x2F;do run both myself, Kubernetes and Nomad, and it was a million times easier to set up Nomad (including Consul) on bare metal than it was to set up Kubernetes. Kubernetes offers more features, but you most likely don&amp;#x27;t need them and the increase in complexity makes it a pain to maintain. I&amp;#x27;m running a three-node cluster on Hetzner [0] for Pirsch [1] right now and haven&amp;#x27;t had any difficulties whatsoever when upgrading and modifing the cluster. Adding Vault is a bit tricky, but I&amp;#x27;m sure I&amp;#x27;ll get that done too. I highly recommend trying it if you think about maintaining your own infrastructure!&lt;p&gt;Let me know if you have any questions. I plan to write an article&amp;#x2F;kind-of-tutorial about the setup.&lt;p&gt;[0] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.hetzner.com&amp;#x2F;de&amp;#x2F;cloud&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.hetzner.com&amp;#x2F;de&amp;#x2F;cloud&lt;/a&gt;&lt;p&gt;[1] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;pirsch.io&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;pirsch.io&amp;#x2F;&lt;/a&gt;</text></item></parent_chain></comment><story><title>Running Nomad for a Home Server</title><url>https://mrkaran.dev/posts/home-server-nomad/</url></story>
<instructions>Your goal is to analyze the following comment and estimate how highly it will be upvoted by the Hacker News community.</instructions><comment><author>ForHackernews</author><text>I&amp;#x27;d be really interested, too. Have you looked at k3s at all? We&amp;#x27;re considering trying to run &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;rancher&amp;#x2F;k3os&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;rancher&amp;#x2F;k3os&lt;/a&gt; on bare metal servers.</text><parent_chain><item><author>throwaway894345</author><text>I would be very interested in a more detailed write-up on Nomad vs Kubernetes for bare metal. I&amp;#x27;m working through getting Kubernetes stood up, but I&amp;#x27;m running into a &lt;i&gt;dearth&lt;/i&gt; of features--namely you have to bring your own load balancer provider, storage provider, ingress controller, external DNS, monitoring, secret encryption, etc, etc before you can run any real world applications on top of it. I would be interested in how Nomad compares.&lt;p&gt;EDIT: Downvoters, I&amp;#x27;m really curious what you&amp;#x27;re objecting to above, specifically.</text></item><item><author>marvinblum</author><text>I did&amp;#x2F;do run both myself, Kubernetes and Nomad, and it was a million times easier to set up Nomad (including Consul) on bare metal than it was to set up Kubernetes. Kubernetes offers more features, but you most likely don&amp;#x27;t need them and the increase in complexity makes it a pain to maintain. I&amp;#x27;m running a three-node cluster on Hetzner [0] for Pirsch [1] right now and haven&amp;#x27;t had any difficulties whatsoever when upgrading and modifing the cluster. Adding Vault is a bit tricky, but I&amp;#x27;m sure I&amp;#x27;ll get that done too. I highly recommend trying it if you think about maintaining your own infrastructure!&lt;p&gt;Let me know if you have any questions. I plan to write an article&amp;#x2F;kind-of-tutorial about the setup.&lt;p&gt;[0] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.hetzner.com&amp;#x2F;de&amp;#x2F;cloud&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.hetzner.com&amp;#x2F;de&amp;#x2F;cloud&lt;/a&gt;&lt;p&gt;[1] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;pirsch.io&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;pirsch.io&amp;#x2F;&lt;/a&gt;</text></item></parent_chain></comment><story><title>Running Nomad for a Home Server</title><url>https://mrkaran.dev/posts/home-server-nomad/</url></story>