!MthpOIxqJhTgrMNxDS:nixos.org

NixOS ACME / LetsEncrypt

92 Members
Another day, another cert renewal43 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
6 Mar 2023
@hexa:lossy.networkhexaI'm stupid20:16:57
@hexa:lossy.networkhexashould've dumped it20:17:00
15 Mar 2023
@m1cr0man:m1cr0man.comm1cr0manthat one line is literally all I should need to reproduce it :) 20:37:07
24 Mar 2023
@hexa:lossy.networkhexaReliability via Automated Renewal Information - https://letsencrypt.org/2023/03/23/improving-resliiency-and-reliability-with-ari.html22:18:45
25 Mar 2023
@m1cr0man:m1cr0man.comm1cr0manYeah so that's interesting. We do an offline check to get around an issue where ACME would fail in containers that didn't have networking at startup. THere's an old (closed) issue about it lying around, I could probably find it through the git blame. Other than that, we do invoke lego to check renewal and that (as found during that same ticket) already does some online check. I think this is mostly a no-op for us, we already support it as best we can but we kinda need to keep the offline check to avoid that old bug.19:28:56
@m1cr0man:m1cr0man.comm1cr0manhttps://github.com/NixOS/nixpkgs/issues/85794 fixed via https://github.com/NixOS/nixpkgs/pull/114752 19:29:40
@m1cr0man:m1cr0man.comm1cr0manwhat would be really nice is if I would hurry my ass up and PR some sort of offline-ok check into lego renew so we can remove all our custom logic19:30:23
5 Apr 2023
@redstone-menace:matrix.orgRedstone joined the room.05:51:14
6 Apr 2023
@kadawee:cat.casakadawee joined the room.01:02:12
12 Apr 2023
@errisnotnil:matrix.orgYuddite G joined the room.09:12:01
16 Apr 2023
@errisnotnil:matrix.orgYuddite G changed their profile picture.23:09:28
26 Apr 2023
@errisnotnil:matrix.orgYuddite G changed their display name from Yuddite Pilot to Yuddite Groyper.04:49:18
@errisnotnil:matrix.orgYuddite G changed their display name from Yuddite Groyper to Yuddite G.21:02:56
6 May 2023
@cel:pussy.accountants@cel:pussy.accountants joined the room.12:49:32
17 May 2023
@m1cr0man:m1cr0man.comm1cr0man Thanks for jumping in there emily 🙂 I always feel a pressure to respond to these sort of issues (when someone is eager to open a PR) to make sure the module stays maintainable, it's good to know I'm not the only one looking out! 22:37:55
@hexa:lossy.networkhexaI was talking to someone recently who kinda complained about when acme jobs would be started in bulk after a rebuild, which would cause load spikes on hosts with many certificates 🙈22:41:49
@hexa:lossy.networkhexaI fear we have no way to stretch those restarts out across a reasonable time span22:42:08

Show newer messages


Back to Room ListRoom Version: 6