!MthpOIxqJhTgrMNxDS:nixos.org

NixOS ACME / LetsEncrypt

93 Members
Another day, another cert renewal43 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
19 Jun 2023
@arianvp:matrix.orgArianhttps://github.com/systemd/systemd/issues/2807510:43:36
@emilazy:matrix.orgemilyheh, convenient10:56:36
@raitobezarius:matrix.orgraitobezariussystemd folks seemed more interested to implement this via implementing service limits on a slice13:02:23
@emilazy:matrix.orgemilyon the issue or through your own communication with systemd people?13:10:33
@emilazy:matrix.orgemilyI think on the issue we were just pushing back on "more bespoke complexity in the service scripts" by all means necessary :p13:10:49
@raitobezarius:matrix.orgraitobezariuson the systemd dev chat13:12:04
@raitobezarius:matrix.orgraitobezariuss/systemd folks/poettering13:12:24
@emilazy:matrix.orgemilyright13:22:29
@emilazy:matrix.orgemily
In reply to @m1cr0man:m1cr0man.com

okay yeah, so these are pretty lenient for most people. I think I was only concerned about the concurrent one that the ticket opener mentioned:

the “new-nonce”, “new-account”, “new-order”, and “revoke-cert” endpoints on the API have an Overall Requests limit of 20 per second.

Right now this one is very easy to do

tbh given ^ and the other limits we discussed at that time, some kind of time-based limits might be what we'd really want
13:23:05
@emilazy:matrix.orgemily"N instances of this service per X period of time"13:23:17
@emilazy:matrix.orgemilyi'm guessing systemd probably wouldn't go for that though13:23:22
28 Jun 2023
@lehmanator:gnulinux.club@lehmanator:gnulinux.club joined the room.19:28:06
30 Jun 2023
@m1cr0man:m1cr0man.comm1cr0manI have this really old PR to add useACMEHosts to opensmtpd. Anyone care to review? https://github.com/NixOS/nixpkgs/pull/12326121:36:29
8 Jul 2023
@k900:conduit.0upti.meK900 (deprecated)Found a new test failure mode: https://gist.github.com/K900/991b5c2b7b0637bf31237becf306662012:32:03
10 Jul 2023
@hexa:lossy.networkhexaShortening the Let's Encrypt Chain of Trust - https://letsencrypt.org/2023/07/10/cross-sign-expiration.html22:49:11
@hexa:lossy.networkhexaNo more cross signing in 202422:49:32

Show newer messages


Back to Room ListRoom Version: 6