!MthpOIxqJhTgrMNxDS:nixos.org

NixOS ACME / LetsEncrypt

105 Members
Another day, another cert renewal43 Servers

Load older messages


SenderMessageTime
3 Jun 2024
@sandro:supersandro.deSandro 🐧
In reply to @arianvp:matrix.org
So the rate-limit issue is probably less of a problem; unless you have A lot of domains
If the domains are similar, I always use the DNS challenge to avoid sich scenarios in case of data loss but probably not everyone is doing that
10:03:00
@arianvp:matrix.orgArianRedacted or Malformed Event10:05:25
@arianvp:matrix.orgArianWe also have https://github.com/NixOS/nixpkgs/pull/244511 which limits concurrent domain creation. I didn't realise that landed10:05:55
@arianvp:matrix.orgArianSo... the rate limit concern is probably not so big. This is just a problem with people with CAA records. I think I'm okay with just double checking this is in the release notes and if not add it10:06:21
@arianvp:matrix.orgArianIf ya'll agree lets go with a prominent entry in the release notes. If someone has energy to do a state convergence PR that's a nice to have but probably not as urgent as I initially thought10:09:21
@sandro:supersandro.deSandro 🐧
In reply to @arianvp:matrix.org
We also have https://github.com/NixOS/nixpkgs/pull/244511 which limits concurrent domain creation. I didn't realise that landed
I think that is mainly there to prevent going immediately into the rate limit of something fails
10:12:21
@sandro:supersandro.deSandro 🐧I mean we should probably do a release notes entry either way10:12:40
@sandro:supersandro.deSandro 🐧And testing state changes like that should probably not be done to quick to not create the next bugs πŸ˜…10:12:56
@sandro:supersandro.deSandro 🐧Also merge that test please πŸ˜…πŸ™ˆ10:13:04
@sandro:supersandro.deSandro 🐧Can't you mitigate this by setting the URL back to null?10:15:21
@sandro:supersandro.deSandro 🐧I think no one mentioned that yet10:15:27
@arianvp:matrix.orgArian no because we removed the nullOr from the type 10:16:02
@arianvp:matrix.orgArianbut we could add that!!10:16:04
@arianvp:matrix.orgAriangood idea. 10:16:09
@arianvp:matrix.orgArianGood thinking10:16:28
@stephank:stephank.nlStΓ©phanI like that too. Something like this? https://github.com/NixOS/nixpkgs/compare/master...stephank:nixpkgs:fix-acme211:00:06
@sandro:supersandro.deSandro 🐧Maybe we should couple that with a warning that people should set the URL explicit11:23:12
@sandro:supersandro.deSandro 🐧but then, is that worth it? I dono11:23:20
@ccppuu:matrix.orgCPU
In reply to @arianvp:matrix.org
If there are any volunteers to join the team just yell ;)
:wave: I would be interested. Is commented on #316854 the best way to get looped in?
14:45:48
@ccppuu:matrix.orgCPU
In reply to @arianvp:matrix.org
If there are any volunteers to join the team just yell ;)
* :wave: I would be interested. Is commenting on #316854 the best way to get looped in?
14:45:54
@arianvp:matrix.orgArian StΓ©phan: yeh that looks perfect. Wanna open a PR for that? 18:42:18
4 Jun 2024
@raitobezarius:matrix.orgraitobezarius changed their display name from raitobezarius (DECT: 7248) to raitobezarius.11:14:33
@os:matrix.flyingcircus.ioosnyx (he/him)
In reply to @stephank:stephank.nl
I like that too. Something like this? https://github.com/NixOS/nixpkgs/compare/master...stephank:nixpkgs:fix-acme2
Looks good, IMHO that's a good alternative to the state convergence approach.
13:56:18
@os:matrix.flyingcircus.ioosnyx (he/him)
In reply to @stephank:stephank.nl
I like that too. Something like this? https://github.com/NixOS/nixpkgs/compare/master...stephank:nixpkgs:fix-acme2
* Looks good, IMHO that's a decent alternative to the state convergence approach.
13:56:34
@m1cr0man:m1cr0man.comm1cr0manhttps://github.com/NixOS/nixpkgs/pull/270221 damn, had I seen this I would have reviewed for sure18:32:08
@m1cr0man:m1cr0man.comm1cr0manLiterally started a new job today, sorry I haven't been around for the incident18:32:26
@arianvp:matrix.orgArianCongrats on the new job!18:54:49
@arianvp:matrix.orgArianhttps://github.com/NixOS/nixpkgs/pull/31725718:55:17
@arianvp:matrix.orgArianAlso added https://github.com/NixOS/nixpkgs/pull/317261 so we get automatically tagged for review in the future18:56:41
@m1cr0man:m1cr0man.comm1cr0manThank you πŸ™‚. Okay, I can review those. Possibly right now18:57:33

Show newer messages


Back to Room ListRoom Version: 6