<samba_>
helo, it could be possible to think about the creation of certs of letsencrypt everytime we create a new grain?
<TimMc>
samba_: I wondered that too, but it doesn't work out.
<TimMc>
There's a new, unique subdomain every time each user opens each grain -- it's not one subdomain per grain.
<mrdomino>
it'd be great to do it for static publishing though
<mrdomino>
maybe implementing cron will give me enough of a sense of sandstorm's internals to finally do that
<TimMc>
Let's Encrypt rate-limits you to 20 certs per domain per week.
<samba_>
per-week
<samba_>
shit
<mrdomino>
(i am now at the point of "maybe i should draw up an architectural diagram")
ShalokShalom has quit [Read error: Connection reset by peer]
<TimMc>
Even if you wanted to compromise on security and pre-generate SAN certs with 100 subdomains (LE's max per cert) that the server would then use later, that's only 2000 grain-sessions per week, which would not work for even a moderately sized userbase.
<TimMc>
samba_: I did recently find a site selling wildcard certs for as little as $40–70 though, which I'm fine with. (Not the $600 absurdities I saw earlier.)
<samba_>
the worst part setting up a sandstorm platform is exactly how to explain to the user to accept a CA
<TimMc>
Heh, something I have so far managed to avoid.
<samba_>
the other one for me is to explain to not share the anon link to everybody
<samba_>
the use to share it and then the share by email is completely useless
<TimMc>
The anon link?
<TimMc>
Oh, they send a sharing link instead of inviting someone by email?
<samba_>
yes
<samba_>
it's annoying sometimes
<samba_>
there's any way to disable it?
<TimMc>
Nothing I know of... perhaps it interacts with the organization settings, though...
samba_ has quit [Ping timeout: 260 seconds]
samba_ has joined #sandstorm
samba_ has quit [Ping timeout: 260 seconds]
harish_ has joined #sandstorm
Stonehedge has joined #sandstorm
<Stonehedge>
Hi. Can anybody give me a hand? I'm trying to set up Sandstorm on Ubuntu 16.10. When I try to start a grain (any app) I just see the loading animation. Javascript console says lots of error 404s. I think I have domain wildcard and base URL set up correctly. How stupid am I being? :D
abliss has quit [Quit: Page closed]
ecloud has quit [Ping timeout: 246 seconds]
<TimMc>
Stonehedge: URL/ports can be hard to get configured right. What do the base URL, wildcard host, and ports look like in you config? (pastebin?)
<TimMc>
I had thought sandstorm would issue redirects for requests that hit the main URL with the wrong hostname, but I guess I'm wrong.
bitzobyte has joined #sandstorm
funwhilelost has joined #sandstorm
bitzobyte has quit [Client Quit]
mnutt_ has joined #sandstorm
Zarutian has joined #sandstorm
Telesight has quit [Quit: Leaving.]
samba_ has joined #sandstorm
matheusrv has joined #sandstorm
<Zarutian>
„Sandstorm, the grains make the crackers cry“
<mnutt_>
I was once again thinking about a PR to make `vagrant-spk dev` output the app's stout/stderr to spk's stdout/stdio. Are there any strong feelings about this? Just assume that every grain's output is interleaved, or some sort of foreman-style line tagging?