| 22 Dec 2022 |
raitobezarius | with pleasure | 04:15:18 |
raitobezarius | thanks for all the amazing work on ACME ;) | 04:15:28 |
| 24 Dec 2022 |
K900 ⚡️ | https://hydra.nixos.org/build/202864292/nixlog/5 | 07:51:42 |
K900 ⚡️ | It broke again :( | 07:51:47 |
raitobezarius | In reply to @k900:0upti.me https://hydra.nixos.org/build/202864292/nixlog/5 did it? | 20:29:55 |
hexa | Probably fine after restart | 21:11:52 |
| 25 Dec 2022 |
| ahmed left the room. | 10:34:49 |
| 26 Dec 2022 |
m1cr0man | Huh I think my Matrix client was broke, those messages from Saturday just appeared. | 14:17:22 |
| 31 Dec 2022 |
hexa | 😲 | 19:49:12 |
| 1 Jan 2023 |
| v0|d left the room. | 12:05:26 |
| 11 Jan 2023 |
hexa | so I had to restore a host yesterday and I could've restored the certificates from a backup, but didn't | 15:55:52 |
hexa | the acme module recreated all certs no problemo | 15:56:04 |
hexa | on the first try | 15:56:08 |
hexa | mind you, the host has 10 different ones 🙂 | 15:56:25 |
hexa | 🙏 | 15:56:38 |
Arian | yay | 15:56:47 |
hexa | our ACME story is truly great | 15:57:10 |
| 12 Jan 2023 |
raitobezarius | I also had situations like this and really it's pure joy | 10:22:48 |
| 13 Jan 2023 |
m1cr0man | Heh so, the reason I took developing of the wildcard cert support years ago was because I was deploying about 30 domains to a couple of servers, one of which had a subdomain per user (it was for a network society). All I know is, when I check those domains 4 years (holy shit time flies) later, they still work ;) | 18:46:03 |
m1cr0man | In reply to @hexa:lossy.network mind you, the host has 10 different ones 🙂 Btw this is why we implemented credential sharing across multiple instances of the renewal service. There's a 5 accounts per day rate limit | 20:08:49 |
m1cr0man | when I get some motivation I really want to port some of the features of the renewal script directly to lego. There's stuff in there that would be genuinely easier in the tool itself | 20:09:21 |
hexa | good luck with that | 20:10:12 |
hexa | last time we wanted an offline solution for the expiry check the upstream wasn't very forthcoming | 20:10:29 |
m1cr0man | well, we had a bit of a falling out XD I think it would require the work to be done by us. We must be one of lego's largest users though | 21:45:40 |
| 14 Jan 2023 |
Andreas Schrägle | Why did we decide for lego btw, instead of any of the other clients?
I know we used to use a different one, but I've never really looked into acme clients much. | 14:28:08 |
hexa | we used simp_le before | 15:31:18 |
hexa | I think it couldn't do DNS01 | 15:31:23 |
hexa | https://web.archive.org/web/20180603040716/https://github.com/NixOS/nixpkgs/issues/34941 | 15:37:25 |
hexa | this the original discussion, started by volth and since deleted … thanks github | 15:37:36 |
hexa | https://github.com/NixOS/nixpkgs/pull/77578 | 15:39:52 |