!coeAONBrWyDJnYMbMi:nixos.org

NixOS System Operations

569 Members
About system administration for running NixOS systems in production. Declaratively manage your operations. | Room recommendations: #networking:nixos.org150 Servers

Load older messages


SenderMessageTime
12 Aug 2025
@c4lliope:matrix.orgc4lliopenow to load up on https://microvm-nix.github.io/microvm.nix images02:04:24
@josh:joshuayuen.meJosh joined the room.16:09:48
@jean-paul.:matrix.orgjean-paul. joined the room.19:04:13
@jean-paul.:matrix.orgjean-paul.

How do I convince nix to use a GitHub token for downloading stuff from GitHub? I keep getting rate limited on CI. I already have access-tokens = github.com=... in ~/.config/nix/nix.conf which seems like it should be enough but clearly isn't.

How do I even tell whether it's trying to use a token for authentication or not?

19:04:50
@jean-paul.:matrix.orgjean-paul. The only thing I can figure out is to put the credentials in /etc/nix/netrc. No variation of access-tokens works as far as I can tell. 20:01:27
@scrumplex:duckhub.ioScrumplex

netrc is going to be your best bet really as its widely supported by a lot of tools, not just curl.

Something along the lines of

machine github.com
login your_username
password ghp_...

machine api.github.com
login your_username
password ghp_...
20:42:13
@scrumplex:duckhub.ioScrumplex I am pretty sure access-tokens in nix.conf only affects the builtin fetchers primarly used by the flake subsystem 20:43:43
@jean-paul.:matrix.orgjean-paul.It'd be nice if that were actually documented. The nix.conf docs really make it sound like it's for anything.20:59:37
13 Aug 2025
@jean-paul.:matrix.orgjean-paul.

Cool, 9% of the time:

/etc/nix/netrc" (line 2, column 9):
unexpected 'a'
expecting comment, "machine", "default", "macdef" or end of input
Exited with code exit status 1
11:29:15
@adam:robins.wtf@adam:robins.wtf joined the room.14:37:12
@adam:robins.wtf@adam:robins.wtfLast message 19-Mar 😆14:38:16
@hlad:hlad.org@hlad:hlad.org left the room.16:08:00
@matthewcroughan:defenestrate.itmatthewcroughan changed their display name from matthewcroughan @ WHY2025 (DECT: 8793) to matthewcroughan.17:10:22
14 Aug 2025
@adam:robins.wtf@adam:robins.wtfAhh my message was clearly wrong. Thanks matrix for backfilling all the mod events instantly and then doing the chat events later12:16:59
@adam:robins.wtf@adam:robins.wtfhttps://blog.nginx.org/blog/native-support-for-acme-protocol12:51:12
@adam:robins.wtf@adam:robins.wtfi'm not a big nginx user, and think our acme implementation is good enough, but could be interesting to some12:52:56
@magic_rb:matrix.redalder.orgmagic_rbThats exciting, brings it closer to caddy, caddy is still a bit slower than nginx i think13:36:07
@hexa:lossy.networkhexaand has no rate limiting13:37:06
@adam:robins.wtf@adam:robins.wtfi was happy to see it's written in a memory safe language too (rust)13:54:52
@adam:robins.wtf@adam:robins.wtf* i was happy to see the plugin is written in a memory safe language too (rust)13:56:25
@magic_rb:matrix.redalder.orgmagic_rbWhat has no ratelimiting13:56:35
@hexa:lossy.networkhexacaddy13:56:43
@magic_rb:matrix.redalder.orgmagic_rbNginx has rate limiting what13:56:58
@hexa:lossy.networkhexahttps://nginx.org/en/docs/http/ngx_http_limit_req_module.html13:57:17
@hexa:lossy.networkhexahttps://github.com/mholt/caddy-ratelimit hm13:57:32
@hexa:lossy.networkhexa

WORK IN PROGRESS: Please note that this module is still unfinished and may have bugs. Please try it out and file bug reports - thanks!

13:57:39
@magic_rb:matrix.redalder.orgmagic_rbMaybe i should do that, i need to write myself a more comprehensive nixng module for nginx, the one i have is shit13:59:47
@magic_rb:matrix.redalder.orgmagic_rbI could also reuse the nixos one in nixng but i dont like it that much14:00:22
@hexa:lossy.networkhexamaybe you just need to stop doing nixng14:00:51
@hexa:lossy.networkhexa🤷14:00:53

Show newer messages


Back to Room ListRoom Version: 10