| 26 Oct 2021 |
| NixOS Moderation Bot set a profile picture. | 02:00:35 |
| NixOS Moderation Bot changed their profile picture. | 02:23:50 |
| NixOS Moderation Bot changed their profile picture. | 02:33:19 |
| 6 Nov 2021 |
| Tseb joined the room. | 09:19:26 |
| Tseb left the room. | 09:25:07 |
| 9 Nov 2021 |
| haugh left the room. | 20:10:47 |
| 11 Nov 2021 |
| EdLin joined the room. | 07:46:23 |
| EdLin left the room. | 08:03:18 |
| 16 Nov 2021 |
| moritz.hedtke joined the room. | 10:48:54 |
| 20 Nov 2021 |
| nykw joined the room. | 11:10:15 |
| 23 Nov 2021 |
| Server Stats Discoverer (traveler bot) left the room. | 02:35:48 |
| 24 Nov 2021 |
m1cr0man | Just looking through github for acme-related work. I found this old PR: https://github.com/NixOS/nixpkgs/pull/46379 about letting useAcmeHost=true vhosts add their aliases to the acme cert automatically. I'm actually against this idea - the main use case nowadays for useAcmeHost is specifying a wildcard cert to use with a bunch of stuff, and that would generally be a better idea than having a cert with lots of subject alternate names. Fwiw, if you just enableACME on a vhost we already do build a cert that includes serverAliases in extraDomains (see https://github.com/NixOS/nixpkgs/blob/c18638dc95216b1b2930d16e1334613d82d05e8e/nixos/modules/services/web-servers/nginx/default.nix#L935) | 21:37:23 |
hexa | m1cr0man: can i pm you to look at an acme issue? | 22:04:31 |
m1cr0man | yeah sure! Or just shout here like | 22:04:59 |
hexa | uh ok, I'll try to explain instead of posting logs | 22:05:34 |
hexa | I have a cert with olddomain.example.com example.com | 22:05:49 |
hexa | and I rmeoved olddomain.example.com | 22:05:53 |
hexa | and now I try to renew and it still tries to renew olddomain.example.com | 22:06:05 |
hexa | the olddomain is not part of the lego command | 22:07:00 |
m1cr0man | hm interesting ok | 22:07:01 |
m1cr0man | ah | 22:07:06 |
hexa | that's on 21.05 | 22:07:18 |
m1cr0man | it's been a while 😅 lemme glance at the module again | 22:07:21 |
m1cr0man | I think someone reported/saw this in some issue before, but it was shrugged off as a fluke. I have a fair idea what it could be | 22:09:34 |
hexa | anyway, I would have expected the domainhash to resolve that | 22:16:10 |
m1cr0man | yeah, me too. I'm just looking at the conditionals surrounding it | 22:16:37 |
hexa | the old domain is not part of the ExecStart script | 22:17:18 |
m1cr0man | Ok I think I see what's up | 22:17:27 |
m1cr0man | extraDomains is not part of the hashData, which is what certDir is set based upon | 22:17:42 |
m1cr0man | I need to get that vs code plugin that lets me get links to github files.. | 22:18:11 |