10:39 <augustl> paulproteus: thanks :)

10:39 <augustl> paulproteus: I do have a wildcard cert for *.augustl.com, can I use that somehow?

15:58 <paulproteus> augustl: Yeah -- if you move the thing to not be on *.sandcats.io but be on https://sandstorm.augustl.com (by adjusing BASE_URL and adding nginx in front) and make the WILDCARD_HOST be sandstorm-*.augustl.com then that should do the trick.

17:14 <augustl> paulproteus: I see, so for ssl I should have nginx or apache or something in front of it, sandstorm itself doesn't support ssl?

17:15 <augustl> very nice that the wildcard is in the same level of the subdomain so I don't need an extra *.sandstorm.augustl.com wildcard cert :)

17:21 <dwrensha> augustl: right, you'll need a server to terminate SSL.

17:21 <dwrensha> augustl: we have an example configuration for nginx here: https://github.com/sandstorm-io/sandstorm/blob/master/nginx-example.conf

17:39 <paulproteus> Yeah, that's accurate for now.

17:40 <paulproteus> dwrensha: Thanks for answering augustl 's question!

18:42 <augustl> dwrensha, paulproteus: thanks :)

19:50 <augustl> hmm, seems like I need at least an extra cert after all, one for *.augustl.com and one for api.sandstorm.augustl.com

19:52 <augustl> hmm, seems that most apps also live under xyz.augustl.sandcats.io

19:52 <augustl> so perhaps I need a cert for sandstorm.augustl.com and a wildcard cert for *.sandstorm.augustl.com?

19:52 <dwrensha> augustl: I think you could set your WILDCARD_PARENT to *-sandstorm.augustl.com

19:53 <augustl> ah, good to know

19:53 <dwrensha> or abc-*-xyz.augustl.com, or whatever

19:54 <augustl> dwrensha: there's a WILDCARD_HOST option, is that the one you meant?

19:55 <dwrensha> oops, yes

19:55 <augustl> just had to make sure, thanks :)

19:56 <augustl> hmm, DNS configuration becomes interesting.. Need to set up some kind of dynamic DNS as well

19:57 <dwrensha> why is that?

19:57 <augustl> seems sandcats.io doesn't resolve abcd-some-token-augustl.sandcats.io

19:57 <dwrensha> ah, paging paulproteus

19:59 <augustl> I wish SSL had a way to just encrypt without the CA authorization step :)

19:59 <augustl> it's good enough for me that it's encrypted and that my login works..

20:02 <dwrensha> wait, maybe I'm confused here. Your cert is for *.augustl.com, but you're expecting to use it for a sandcats.io install?

20:03 <dwrensha> I don't think that would have a chance of working.

20:26 <dwrensha> preview of the next release of the GitWeb app: https://sandstorm.dwrensha.ws/shared/fQ9pdqlhk1YcRv_Abx2jI9rqkGWxO9adm06YoY2vGJJ

20:27 <dwrensha> I'm wondering whether the text in the offer template makes sense

20:47 <augustl> dwrensha: I'm using sandcats.io atm but planning to switching to augustl.com

20:47 <augustl> dwrensha: very nice! That's exactly what I think is missing from gitweb atm :)

20:48 <augustl> dwrensha: personally I'd prefer if I just got the url http://user:password-token-here@sandstorm-api.whatever.com/..., that's what I use as my origin

20:58 <dwrensha> augustl: yeah, that's the big tradeoff here

20:58 <dwrensha> putting the password in the URL is certainly convenient

20:58 <dwrensha> but it's not so secure

20:58 <mwcampbell> kentonv: I was looking at the Sandstorm source and noticed that the node capnp module is mostly C++. Would a pure-JS implementation have any significant advantages, like better JIT optimization (e.g. inlining) and keeping everything in the garbage-collected V8 heap?

20:58 <augustl> dwrensha: good enough for me, as long as it's https of course :)

21:00 <dwrensha> augustl: then I recommend that you do `git config --global credential.helper store`

21:01 <dwrensha> augustl: which should be nearly as convenient, and somewhat more secure

21:02 <augustl> dwrensha: true that

21:02 <dwrensha> "somewhat more secure" because the ~/.git-credentials file uses filesystem permissions so that only you can read it

21:02 <augustl> dwrensha: would be nice with a generic socket API for sandstorm so there could be a ssh server running alongside the webserver

21:03 <dwrensha> augustl: I think our stance on that is "someday"

21:04 <augustl> cool :)

21:05 <dwrensha> mwcampbell: I think there would be a lot of advantages to having a pure-JS implementation of Cap'n Proto RPC.

21:07 <dwrensha> mwcampbell: Tim Popham was talking about working on it, but it looks like there's not been any progress: https://github.com/capnp-js/rpc

23:21 <erikoeurch> Is there currently a way to see how much resources I have been using on Oasis? Just to sate my curiosity...

23:54 <bb010g> How should I go about doing a fresh reinstall of Sandstorm? What do I need to clean out?

23:55 <dwrensha> bb010g: `sudo sandstorm stop`

23:55 <dwrensha> bb010g: `sudo rm -rf /opt/sandstom`

23:56 <dwrensha> and that's just about it

23:56 <bb010g> dwrensha: I don't need to clean out any init scripts?

23:57 <dwrensha> the documentation at the top of install.sh mentions a few other things, like init scripts

23:57 <dwrensha> if you're just reinstalling, you probably don't need to worry about those