6 Mar 2023 |
hexa | I'm stupid | 20:16:57 |
hexa | should've dumped it | 20:17:00 |
15 Mar 2023 |
m1cr0man | that one line is literally all I should need to reproduce it :) | 20:37:07 |
24 Mar 2023 |
hexa | Reliability via Automated Renewal Information - https://letsencrypt.org/2023/03/23/improving-resliiency-and-reliability-with-ari.html | 22:18:45 |
25 Mar 2023 |
m1cr0man | Yeah so that's interesting. We do an offline check to get around an issue where ACME would fail in containers that didn't have networking at startup. THere's an old (closed) issue about it lying around, I could probably find it through the git blame. Other than that, we do invoke lego to check renewal and that (as found during that same ticket) already does some online check. I think this is mostly a no-op for us, we already support it as best we can but we kinda need to keep the offline check to avoid that old bug. | 19:28:56 |
m1cr0man | https://github.com/NixOS/nixpkgs/issues/85794 fixed via https://github.com/NixOS/nixpkgs/pull/114752 | 19:29:40 |
m1cr0man | what would be really nice is if I would hurry my ass up and PR some sort of offline-ok check into lego renew so we can remove all our custom logic | 19:30:23 |
5 Apr 2023 |
| Redstone joined the room. | 05:51:14 |
6 Apr 2023 |
| kadawee joined the room. | 01:02:12 |
12 Apr 2023 |
| Yuddite G joined the room. | 09:12:01 |
16 Apr 2023 |
| Yuddite G changed their profile picture. | 23:09:28 |
26 Apr 2023 |
| Yuddite G changed their display name from Yuddite Pilot to Yuddite Groyper. | 04:49:18 |
| Yuddite G changed their display name from Yuddite Groyper to Yuddite G. | 21:02:56 |
6 May 2023 |
| @cel:pussy.accountants joined the room. | 12:49:32 |
17 May 2023 |
m1cr0man | Thanks for jumping in there emily 🙂 I always feel a pressure to respond to these sort of issues (when someone is eager to open a PR) to make sure the module stays maintainable, it's good to know I'm not the only one looking out! | 22:37:55 |
hexa | I was talking to someone recently who kinda complained about when acme jobs would be started in bulk after a rebuild, which would cause load spikes on hosts with many certificates 🙈 | 22:41:49 |
hexa | I fear we have no way to stretch those restarts out across a reasonable time span | 22:42:08 |