| 17 Jun 2025 |
 hexa | and no, that is likely not expected | 20:58:30 |
| 18 Jun 2025 |
 Domen Kožar | there were github and cloudflare issues in the last few days, all transient | 15:31:30 |
|  @federicodschonborn:matrix.org changed their display name from Worm 🏳️🌈 (he/they) to The Worm 🏳️🌈 (he/they). | 17:57:47 |
 nh2 | cache.nixos.org downloads some stuff, e.g. /nix/store/60bns0l3hc6sw5wpqcp160prcy0dag41-cloudcompare-2.13.1/ at 5 Mbit/s with my 1000 Mbit/s connection. Downloading it from my server via SSH that has it is way faster | 19:51:02 |
 Vladimír Čunát | Sometimes people do report paths filling from S3 to Fastly at such a slow speed. (i.e. if you cancel, the prefix redownloads at full speed but then you continue with the slow one) | 20:03:03 |
| 20 Jun 2025 |
 infinisil | hexa (signing key rotation when): Can you PM me the email list of the moderation team members? This is for https://github.com/NixOS/infra/pull/748 | 20:21:10 |
| hexa | for what purpose? | 20:21:34 |
| infinisil | I need to give them a freescout account, which needs an email | 20:21:58 |
| hexa | ^ | 20:22:06 |
| hexa | for that exact reason | 20:22:10 |
| hexa | this should not have gone into production without proper login infrastructure | 20:22:22 |
| infinisil | That doesn't work either way | 20:22:28 |
| hexa | why not? | 20:22:38 |
| infinisil | hexa (signing key rotation when): I added it in https://github.com/NixOS/infra/issues/700#issue-3098140041 | 20:23:15 |
| hexa | https://github.com/NixOS/infra/blob/main/build/pluto/prometheus/alertmanager.nix#L79-L84 | 20:23:28 |
| hexa | we can absolute tie oidc in with github teams | 20:23:36 |
| hexa | we are already doing that for infra | 20:23:44 |
| infinisil | Freescout supports OIDC? | 20:24:07 |
| hexa | https://freescout.net/module/oauth-login/ | 20:24:22 |
| infinisil | I see no mention of OIDC | 20:24:36 |
| infinisil | I don't really know OIDC though, so tell me if I'm wrong 😅 | 20:25:17 |
| hexa | you are very likely wrong 🙂 | 20:25:33 |
| hexa | https://github.com/dexidp/dex#connectors | 20:25:40 |
 emily | OIDC is based on top of OAuth | 20:25:47 |
| infinisil | I see! | 20:26:12 |
| emily | (but I don't know if the OIDC identity layer on top is relevant to any of the considerations here) | 20:26:25 |
| emily | (it looks kind of like they're just using OAuth as an imprecise term for OIDC actually) | 20:27:21 |
| hexa | the question is just if the plugin can map groups | 20:27:24 |
| hexa |
Keep in mind that this is the general OAuth authentication plugin and it will not allow to adjust users access based on user’s GitHub organization.
| 20:28:22 |
| infinisil | I don't think it makes sense to insist on OIDC now when we haven't done that for the mailing list in the past. The moderation team email is working in freescout, I just need to onboard everybody who got mails forwarded to their personal email before | 20:28:24 |
