!MthpOIxqJhTgrMNxDS:nixos.org

NixOS ACME / LetsEncrypt

97 Members
Another day, another cert renewal39 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
13 Jan 2023
@m1cr0man:m1cr0man.comm1cr0manHeh so, the reason I took developing of the wildcard cert support years ago was because I was deploying about 30 domains to a couple of servers, one of which had a subdomain per user (it was for a network society). All I know is, when I check those domains 4 years (holy shit time flies) later, they still work ;) 18:46:03
@m1cr0man:m1cr0man.comm1cr0man
In reply to @hexa:lossy.network
mind you, the host has 10 different ones 🙂
Btw this is why we implemented credential sharing across multiple instances of the renewal service. There's a 5 accounts per day rate limit
20:08:49
@m1cr0man:m1cr0man.comm1cr0manwhen I get some motivation I really want to port some of the features of the renewal script directly to lego. There's stuff in there that would be genuinely easier in the tool itself20:09:21
@hexa:lossy.networkhexagood luck with that20:10:12
@hexa:lossy.networkhexalast time we wanted an offline solution for the expiry check the upstream wasn't very forthcoming20:10:29
@m1cr0man:m1cr0man.comm1cr0manwell, we had a bit of a falling out XD I think it would require the work to be done by us. We must be one of lego's largest users though21:45:40
14 Jan 2023
@andreas.schraegle:helsinki-systems.de@andreas.schraegle:helsinki-systems.deWhy did we decide for lego btw, instead of any of the other clients? I know we used to use a different one, but I've never really looked into acme clients much.14:28:08
@hexa:lossy.networkhexa we used simp_le before 15:31:18
@hexa:lossy.networkhexaI think it couldn't do DNS0115:31:23

Show newer messages


Back to Room ListRoom Version: 6