!MthpOIxqJhTgrMNxDS:nixos.org

NixOS ACME / LetsEncrypt

120 Members
Another day, another cert renewal50 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
5 Mar 2022
@winterqt:nixos.devWinter (she/her)

Riiight, completely forgot about that.

I think the best thing to do here is to revisit how the Caddy module operates in this regard -- so removing the blanket "acme" group addition. (Since I'm not sure the best way to do this, would it be appropriate to open an issue to discuss it with the module maintainer?)

17:36:06
@m1cr0man:m1cr0man.comm1cr0manYeah that's probably best, and so that it's on record on Github too17:44:17
@winterqt:nixos.devWinter (she/her)
In reply to @m1cr0man:m1cr0man.com
Yeah that's probably best, and so that it's on record on Github too
Would it be appropriate to label the issue as a bug?
19:34:00
@winterqt:nixos.devWinter (she/her)(don't wanna open an issue with no label idk)19:34:07
@winterqt:nixos.devWinter (she/her)i think so19:34:22
@m1cr0man:m1cr0man.comm1cr0manhah uh idk what label to use honestly 😅 I think it's more just discussion atm, nothing is wrong per se19:34:33
@m1cr0man:m1cr0man.comm1cr0man * hah uh idk what label to use honestly 😅 I think it's more just discussion/suggestion atm, nothing is wrong per se19:34:40
@winterqt:nixos.devWinter (she/her)true19:34:43
@winterqt:nixos.devWinter (she/her)yeah ill do no label19:34:53
@winterqt:nixos.devWinter (she/her) m1cr0man: am i just blind, or is the group option for not defined in certOpts? 19:51:09
@winterqt:nixos.devWinter (she/her) * m1cr0man: am i just blind, or is the group option not defined in certOpts? 19:51:14
@m1cr0man:m1cr0man.comm1cr0manit's defined in the inheritableModule thing19:51:23
@winterqt:nixos.devWinter (she/her)oh19:51:53
@winterqt:nixos.devWinter (she/her)
      group = mkOption {
        type = types.str;
        inherit (defaultAndText "group" "acme") default defaultText;
        description = "Group running the ACME client.";
      };

i feel like this description is inaccurate?

19:52:02
@winterqt:nixos.devWinter (she/her)oh nevermind19:52:24
@winterqt:nixos.devWinter (she/her)guess its not19:52:27
@winterqt:nixos.devWinter (she/her)
        # Group might change between runs, re-apply it
        chown '${user}:${data.group}' certificates/*

hm

19:52:57
@m1cr0man:m1cr0man.comm1cr0manyeah that's 100% necessary19:53:11
@m1cr0man:m1cr0man.comm1cr0manran into it myself and covered by the test suite19:53:19
@winterqt:nixos.devWinter (she/her)so is that if the certificate doest have to be renewed, but the group changed?19:53:33

Show newer messages


Back to Room ListRoom Version: 6