| 3 Jun 2025 |
Jeremy Fleischman (jfly) | i know we need backups, and i know we'll need changes to freescout nix flake to support paid modules. hopefully neither of those are blockers | 21:32:02 |
infinisil | Nah, this is great for a start | 21:32:46 |
infinisil | I guess it would be good to get those PRs merged so they don't get deployed over | 21:32:55 |
Jeremy Fleischman (jfly) | good point. i will start bugging my teammates about that if i don't have shipits by tomorrow | 21:33:29 |
Jeremy Fleischman (jfly) | going on a road trip starting on saturday. so i'll be around the rest of this week, just need to spend some time prepping for the trip rather than hacking | 21:33:56 |
infinisil | Oh neat, enjoy! | 21:34:19 |
infinisil | Jeremy Fleischman (jfly): Oh I can't delete the freescout test mailbox because it asks for the password, which only you have :P | 21:57:29 |
Jeremy Fleischman (jfly) | lol and i just deleted that password | 21:57:57 |
Jeremy Fleischman (jfly) | shoot. it must be in the db or something | 21:58:20 |
Jeremy Fleischman (jfly) | lemme poke around | 21:58:28 |
infinisil | Jeremy Fleischman (jfly): Oh never mind | 21:58:38 |
infinisil | It asked for my personal password | 21:58:47 |
infinisil | Phew! | 21:59:05 |
Jeremy Fleischman (jfly) | ah, kk. i suppose that makes sense. like "sudo mode" on github | 21:59:05 |
infinisil | Yeah | 21:59:09 |
hexa | if we decide for freescout we should really get the OIDC plugin | 22:15:43 |
hexa | * if we decide for freescout we should really get the OIDC plugin to centralize account management | 22:15:53 |
Jeremy Fleischman (jfly) | this one? https://freescout.net/module/oauth-login/ (added to https://github.com/NixOS/infra/issues/700) | 22:33:24 |
| @federicodschonborn:matrix.org changed their display name from LEGO® Worm™ (Now Only 1 krad!) to LEGO® Worm™ (he/they) (Happy Pride Month! 🏳️🌈). | 22:41:34 |
| 4 Jun 2025 |
Arian | Do we have an OIDC provider? | 09:39:36 |
hexa | we have used github previously for the alertmanager | 13:00:02 |
Arian | GitHub doesn't implement OIDC. But if they have specific GitHub support it should work | 20:20:46 |
Arian | * GitHub doesn't implement OIDC. But if they have specific GitHub auth support it should work | 20:21:01 |
hexa | we are using dex for alerts.nixos.org | 20:23:32 |
hexa | * we are using dex for alerts.nixos.org to bridge that gap | 20:24:45 |
hexa | with more services that we deploy we should probably run our own idm | 20:45:44 |
| 5 Jun 2025 |
Mic92 | hexa (signing key rotation when): I still see dangling terraform resources for netlify domains in terraform. Should I remove those? | 11:23:40 |
Mic92 | I mean removing the state otherwise, terraform apply will remove all our records | 11:24:10 |
hexa | yeah, feel free | 12:37:15 |
Mic92 | hexa (signing key rotation when): finished my second fastly pr, in case you want to have a look | 13:00:07 |