README updated
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
All Stories
May 20 2016
Test works:
README has to be updated: we've logs \o/
- User app created (reusing nasqueron/nginx-php-fpm uid/gid)
- Node command adjusted
So launcher line is node --max-old-space-size=256 -- /opt/phabricator/support/aphlict/server/aphlict_server.js --config=/opt/phabricator/conf/aphlict/aphlict.custom.json
- the server doesn't run as root by default
- /var/run/aphlict.pid and /var/log/aphlict.log must be writable by app
$ docker logs aphlict fs.js:634 return binding.open(pathModule._makeLong(path), stringToFlags(flags), mode); ^
May 19 2016
May 17 2016
@amj ping?
May 17 15:54:02 ysul pkg: reptyr-0.6.3a_2 installed
@dereckson is this task still relevant?
May 13 2016
May 12 2016
We need that before June, the next renewal time window.
I've ran letsencrypt renew on Dwellers, then reloaded nginx.
Test run on Ysul
May 10 2016
Parameters look good.
May 8 2016
May 6 2016
Probably deinstalled during Apache update. Or maybe they don't ship
SuEXEC at all in the binary package:
May 5 2016
May 4 2016
Apr 28 2016
Trying a Python script to ask Jenkins to start a job:
Apr 26 2016
- Site switched to https in forum settings
- Callback URL updated at https://github.com/organizations/nasqueron/settings/applications
The launcher script call pups. This one wants an ASCII configuration file to work.
To get the file From Dwellers: ssh -i /root/.ssh/id_zr zr@ysul.nasqueron.org getconfig forum/forum.yml > forum.yml
This uses K63 to supersede K1. I've destroyed K1 secret as a port of the migration.
The domain forum.nasqueron.org has been added to Mailgun.
Mandrill free service is disabled this April 27.
Apr 22 2016
Okay, looks good.
Apr 21 2016
IPv6 configured:
*.eglide.org 300 IN A 212.47.244.42 @ 300 IN A 212.47.244.42 www.eglide.org 300 IN A 212.47.244.42 eglide.org 10800 IN AAAA 2001:470:1f13:896:0:c0de:15:11fe eglide.org 10800 IN SSHFP 1 1 23d53659502c8926754b8adb2784279db14b8b24 eglide.org 10800 IN SSHFP 1 2 bf0cbd68b0e7b25b28f81f5c3bf5bf135e1846f5435a258a71055533d9fcb750 eglide.org 10800 IN SSHFP 2 1 a5f162fd1a969f0cf6517b987baabd5e622790e1 eglide.org 10800 IN SSHFP 2 2 2f1ef927f698c751a5d199d2eaacea675cf1e81db917e8daa14a6957e32d9daa eglide.org 10800 IN SSHFP 3 1 44d267dc76fcf634f178aba0c54c56dc9d79f70f eglide.org 10800 IN SSHFP 3 2 1547976c85f83babc2534fbb82b1475e7bf230f29fd5ffec1de83bf55bf60bc5 eglide.org 10800 IN SSHFP 4 1 165403ebd193c90af5223a196c2cd150daa0be0a eglide.org 10800 IN SSHFP 4 2 d2d38e7e7ffd0cb6968d2711df9843fa0c8825c8636fde0ab3d69c22e59fe81c
SSHFP configured:
Apr 20 2016
So the issue was this nginx block, which deny access to .well-known like anything else starting with a dot:
$ letsencrypt renew [...] ------------------------------------------------------------------------------- Processing /usr/local/etc/letsencrypt/renewal/www.espace-win.org.conf ------------------------------------------------------------------------------- 2016-04-20 22:10:33,464:WARNING:letsencrypt.renewal:Attempting to renew cert from /usr/local/etc/letsencrypt/renewal/www.espace-win.org.conf produced an unexpected error: Failed authorization procedure. dropbox.espace-win.org (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://dropbox.espace-win.org/.well-known/acme-challenge/AFcGawsTLFqpJwWWZDmMh4LHjMVRkIbAfbq13_6qM40 [212.83.187.132]: 403, files.espace-win.org (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://files.espace-win.org/.well-known/acme-challenge/43QDyWupIPxeAlNMyXgvDezCIMf-6kGxvAn2SzBIrak [212.83.187.132]: 403, forum.espace-win.org (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://forum.espace-win.org/.well-known/acme-challenge/rHPn1p3iNsjXBzgAC0Hk-npvdCRF1qmJTrohgFkmugM [212.83.187.132]: 403, espace-win.org (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://espace-win.org/.well-known/acme-challenge/o_7sf9acLUEuHzVQNOHBcHvTG73l7xlP8mMX6nhx22c [212.83.187.132]: 403, pastebin.espace-win.org (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://pastebin.espace-win.org/.well-known/acme-challenge/QCzu4WhOSjhRPzH6BvjMgAn2tggV1qbBW0q9tdyYACs [212.83.187.132]: 403, assets.espace-win.org (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://assets.espace-win.org/.well-known/acme-challenge/LU-KuSB2bzPYmxw2vACtLu6yZj8ygXkAZiPxwHOMcHE [212.83.187.132]: 403, excel.espace-win.org (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://excel.espace-win.org/.well-known/acme-challenge/5iaG0F-_T5a2TKlFWDxTqvBxg6GD50B_YfY5sxolNQ0 [212.83.187.132]: 403, www.espace-win.org (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://www.espace-win.org/.well-known/acme-challenge/Pw6LYupam92EIy330xYlAuHuKvNKpp6unoVU8UAOrmw [212.83.187.132]: 403, gd.espace-win.org (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://gd.espace-win.org/.well-known/acme-challenge/SP1gRHzjZR39Ai9lZXQvEsTi9i7f0dYSL2bbR_bPOY4 [212.83.187.132]: 403. Skipping.