<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Ben Arellano</title><link>https://www.benjaminarellano.com/</link><description>Recent content on Ben Arellano</description><generator>Hugo</generator><language>en-us</language><atom:link href="https://www.benjaminarellano.com/index.xml" rel="self" type="application/rss+xml"/><item><title>About</title><link>https://www.benjaminarellano.com/about/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://www.benjaminarellano.com/about/</guid><description>&lt;p&gt;My first computer didn&amp;rsquo;t run Windows. It was an IBM PC 5150 my dad used for work. For a while my whole relationship with it was typing a command, getting &amp;ldquo;Bad command or file name,&amp;rdquo; and trying again.&lt;/p&gt;
&lt;p&gt;Gaming turned that curiosity into love. Building my own PC, and gaming over dial-up, hooked me. That feeling never left: speccing a Nutanix HCI node still feels like building a gaming rig, and racing to patch a zero-day has the same pull it always did.&lt;/p&gt;</description></item><item><title>How this site is built</title><link>https://www.benjaminarellano.com/how-its-built/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://www.benjaminarellano.com/how-its-built/</guid><description>&lt;p&gt;This site is also a working example. Nothing here is clicked together in a portal.&lt;/p&gt;
&lt;pre tabindex="0"&gt;&lt;code&gt;write post ──&amp;gt; pull request ──&amp;gt; checks + preview URL ──&amp;gt; merge ──&amp;gt; live
│ │
GitHub Actions Azure Static Web Apps
&lt;/code&gt;&lt;/pre&gt;&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Content&lt;/strong&gt; is Markdown, built into static pages by &lt;a href="https://gohugo.io/"&gt;Hugo&lt;/a&gt;.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Hosting&lt;/strong&gt; is Azure Static Web Apps, free tier, in my own tenant.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Infrastructure is code.&lt;/strong&gt; The Azure resources are defined in a Bicep file. A pipeline deploys it, and shows what would change before it changes anything.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;No stored cloud passwords.&lt;/strong&gt; The infrastructure pipeline signs in to Azure with a short-lived token GitHub issues per run (OIDC federation), scoped to one resource group.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Nothing reaches the main branch without a pull request.&lt;/strong&gt; Each one gets its own preview address and an automated check that blocks a post containing anything that shouldn&amp;rsquo;t be public.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;The source is on &lt;a href="https://github.com/ben2mx/portfolio"&gt;GitHub&lt;/a&gt;.&lt;/p&gt;</description></item></channel></rss>