asheesh changed the topic of #sandstorm to: Welcome to #sandstorm: home of all things sandstorm.io. Say hi! | Channel glossary: "i,i" means "I have no point, I just want to say". b == thumbs up. | Public logs at https://botbot.me/freenode/sandstorm/ & http://logbot.g0v.tw/channel/sandstorm/today
isd has joined #sandstorm
mnutt has quit [Quit: mnutt]
dograt has quit [Ping timeout: 272 seconds]
jacksingleton has joined #sandstorm
jacksingleton has quit [Ping timeout: 250 seconds]
ArcTanSusan has joined #sandstorm
jjb is now known as oao
mnutt has joined #sandstorm
isd has quit [Quit: Leaving.]
jadewang has joined #sandstorm
<jdenz> I asked this earlier and didn't get a response, so I'm asking again in hopes someone reading this in the next hour or so might know the answer. Is there an easy way to remove/delete email users on the 'admin/users' page for a self-hosted Sandstorm instance? Thanks.
<dwrensha> jdenz: not currently
ArcTanSusan has quit [Quit: ArcTanSusan]
<jdenz> ok, thanks. Is there a difficult way? :) I want to link my main user account with another email address, but I used that email address to sign in previously so Sandstorm says I can't link it.
<dwrensha> jdenz: ah...
jacksingleton has joined #sandstorm
<dwrensha> in https://github.com/sandstorm-io/sandstorm/pull/1269 we fixed a special case of this
<dwrensha> if the other account associate with the email address doesn't have any grains or other resources, we automatically delete it and let you link it
<dwrensha> but I think that change has not made it into a release yet
<jdenz> Ok, great. Will your advice in the comments for that issue work in the meantime?
<dwrensha> they should!
<dwrensha> as long as you have some other email address that you can use
<dwrensha> I know gmail lets you add anything after a "+"
<jdenz> Yeah, that's not a problem.
<jdenz> Ok, that workaround worked. Thanks.
<dwrensha> cool! glad to help
jacksingleton has quit [Ping timeout: 240 seconds]
jadewang has quit [Remote host closed the connection]
jadewang has joined #sandstorm
coyotebush has quit [Quit: No Ping reply in 180 seconds.]
coyotebush has joined #sandstorm
<zarvox> mnutt: yeah, I use the vagrant-mutate plugin to repack the virtualbox image for libvirt
jdenz has quit [Ping timeout: 250 seconds]
oao has quit [Ping timeout: 250 seconds]
jjb has joined #sandstorm
<zarvox> also I'm interested in possibly getting the nylas sync server working in Sandstorm, but it has to speak IMAP to some other actual email server, so that'd probably need to use IpNetwork (or a driver)
jadewang has quit [Remote host closed the connection]
|jemc| has quit [Ping timeout: 256 seconds]
mnutt has quit [Quit: mnutt]
mnutt has joined #sandstorm
<asheesh> zarvox: ooh or it could speak to the roundcubbeeeee
<asheesh> btw omg nethack in sandstorm
<asheesh> afk a bit
mnutt has quit [Quit: mnutt]
mnutt has joined #sandstorm
mnutt has quit [Client Quit]
jacksingleton has joined #sandstorm
GauntletW1zard has quit [Quit: WeeChat 1.2]
M-eternaleye has quit [Changing host]
M-eternaleye has joined #sandstorm
M-eternaleye is now known as eternaleye
jacksingleton has quit [Ping timeout: 272 seconds]
|jemc| has joined #sandstorm
ArcTanSusan has joined #sandstorm
bb010g has quit [Quit: Connection closed for inactivity]
Jan\ has quit [Ping timeout: 240 seconds]
|jemc| has quit [Ping timeout: 256 seconds]
Jan\ has joined #sandstorm
Jan\ has quit [Ping timeout: 250 seconds]
Jan\ has joined #sandstorm
ArcTanSusan has quit [Quit: ArcTanSusan]
jjb is now known as oao
spangattack has quit [Ping timeout: 276 seconds]
spangattack has joined #sandstorm
spangattack has quit [Changing host]
spangattack has joined #sandstorm
ragesoss has quit [Ping timeout: 260 seconds]
ragesoss has joined #sandstorm
aaronr has joined #sandstorm
amyers has joined #sandstorm
amyers has quit [Read error: Connection reset by peer]
amyers has joined #sandstorm
tobald has joined #sandstorm
amyers has quit [Ping timeout: 240 seconds]
amyers has joined #sandstorm
notevil has joined #sandstorm
amyers has quit [Ping timeout: 240 seconds]
amyers has joined #sandstorm
mnutt__ has joined #sandstorm
NwS has quit [Ping timeout: 272 seconds]
mnutt__ has quit [Client Quit]
bb010g has joined #sandstorm
|jemc| has joined #sandstorm
dwrensha has quit [Ping timeout: 250 seconds]
mnutt has joined #sandstorm
simonv3 has joined #sandstorm
mnutt has quit [Ping timeout: 250 seconds]
derf- has quit [Quit: ZNC - http://znc.sourceforge.net]
dograt has joined #sandstorm
mnutt has joined #sandstorm
<mnutt> top of HN today: https://github.com/phanan/koel
dwrensha has joined #sandstorm
derf- has joined #sandstorm
tobald has quit [Quit: Ex-Chat]
kecolus has joined #sandstorm
mnutt has quit [Quit: mnutt]
mnutt has joined #sandstorm
funwhilelost has joined #sandstorm
kecolus has quit [Ping timeout: 240 seconds]
kecolus has joined #sandstorm
bb010g has quit [Quit: Connection closed for inactivity]
funwhilelost has quit [Quit: My Mac has gone to sleep. ZZZzzz…]
mnutt has quit [Quit: mnutt]
mnutt has joined #sandstorm
<asheesh> mnutt: BTW, great meeting you while I was in NYC.
<asheesh> I seemed like if we had ~3x the time, you'd probably appreciate 3x longer answers about various things!
<mnutt> asheesh: definitely! great meeting you as well
jadewang has joined #sandstorm
mnutt has quit [Quit: mnutt]
mnutt has joined #sandstorm
mnutt has quit [Ping timeout: 272 seconds]
funwhilelost has joined #sandstorm
dwrensha has quit [Ping timeout: 240 seconds]
<ocdtrekkie> Couple of self-hosted music servers have hit HN in the last couple days.
dwrensha has joined #sandstorm
funwhilelost has quit [Quit: My Mac has gone to sleep. ZZZzzz…]
funwhilelost has joined #sandstorm
amyers has quit [Ping timeout: 240 seconds]
ne_ has joined #sandstorm
notevil has quit [Ping timeout: 256 seconds]
ne_ has quit [Quit: (poof!)]
Kamilion has joined #sandstorm
<Kamilion> so, I'm having an odd little problem trying to get my sandcats domain working... http://puu.sh/lVHgs/d5187f3ee1.png
<Kamilion> Anyone care to tell me how the external domain somehow got me to my cablemodem's admin page?
<asheesh> Kamilion: Yeah!
<asheesh> Let me see if this is in our docs
<asheesh> Your home router doesn't support "hairpin routing", so what you see within the home network != what you see on the outside.
<Kamilion> what home network?
<Kamilion> This is a comcast buisness router.
<Kamilion> and it's honestly been nothing but trouble
<asheesh> Ah hah, yeah, I meant s/home network/NAT box/
<asheesh> The Comcast business router is seemingly doing some network address translation.
<Kamilion> and it most certainly does support hairpinning -- I can access our mailserver from the external IP on the internal network.
<asheesh> To get a sense of what I mean, try visiting your sandcats host from e.g. a phone with wifi turned off.
<asheesh> Weird.
<Kamilion> I only have wifi on my galaxy s3
<asheesh> For me, when I try to connect to mcubed.sandcats.io I see a "Connecting..." in my Chromium.
<asheesh> So I wonder if there is a port forwarding you need to enable.
<Kamilion> okay, so it's not externally available
<Kamilion> good.
<Kamilion> if it had been, I'd be running into the comm closet with a fire axe
<asheesh> Ah hah (-:
<Kamilion> I already have a replacement cablemodem, but havn't had a chance to install it
<Kamilion> the new cablemodem is a motorola surfboard that has no internal routing (thankfully)
<asheesh> Well the sandcats service (at the moment) always sets its IP address to your public IP address. I was going to say that's per the docs at https://docs.sandstorm.io/en/latest/administering/sandcats/ but I don't actually see it documented there, hmm!
<Kamilion> but that means I have to stick a new router in and I've been avoiding it cause of comcast's 5 static IP thing and nobody at openwrt seems to understand.
<Kamilion> Well, I have a public IPv6 on the sandstorm node.
<Kamilion> Michelle Steigerwalt told me to check out kenton's latest project
<Kamilion> I've met kenton once or twice at hacker dojo
<asheesh> sandcats doesn't support IPv6 yet
<asheesh> I'm responsible for that, fwiw. |:
<Kamilion> what, ipv6?
<asheesh> For now, what I'd suggest is you set up your own wildcard DNS and transition to it, instead of sandcats.
<Kamilion> eh, I just wanted it for my internal lan anyway
<Kamilion> was gonna fire up a wekan instance on it
<asheesh> Well I'm responsible for the sandcats service, and so it's me who hasn't gotten around to IPv6 support for it.
<Kamilion> no worries :D
<Kamilion> I assume you're also here in the bay area?
<asheesh> Ya, I'm in Palo Alto right now; I'll also be at http://www.meetup.com/Sandstorm-SF-Bay-Area/events/227155527/ in two days fwiw!
<asheesh> I live in SF so am often in SF.
<Kamilion> Ah, sorry to hear that (* living in SF is EXPEENNNNSIVE!)
<Kamilion> good to hear you get down here where it's saner often though :D
* Kamilion laughs
<asheesh> (-:
<Kamilion> If you've been around long enough, I'm sure you've been by the hacker dojo?
<asheesh> I haven't yet! I have driven by it though.
<Kamilion> It's been having some 'issues' with management, heh. A lot of us have been avoiding it for a while until recently
<Kamilion> the board appointed an idiot manboy of a CEO that did nothing but consume money and make poor decisions.
<Kamilion> * my opinion
<asheesh> Exciting.
<Kamilion> things apparently changed recently and the original folks who started it are back at the helm
<Kamilion> but I'm down in campbell now, so I doubt I'll be hanging out there often.
<asheesh> Gotcha.
<Kamilion> Allrighty, so, how do I release this subdomain then?
<asheesh> I'm... not sure you can.
<asheesh> It's OK though.
<Kamilion> I can't seem to get at it's admin panel from the outside and it's complaining if I try to hit it's IP internally.
<asheesh> Yeah - check out what IP address it resolves to -- it's your external IP.
<asheesh> So you probabably would prefer a domain bound to the internal IP that you want, if I understand correctly.
<Kamilion> Hope you're not using SQL; I'm super OCD so I can't stand looking at databased with missing rows.
<Kamilion> yeah, I can do that myself with letsencrypt
<Kamilion> they're fine with up to a hundred common names per certificate
<Kamilion> one of which can be the raw IP
<asheesh> Note that Let's Encrypt doesn't support wildcards, but Sandstorm requires them: https://docs.sandstorm.io/en/latest/administering/wildcard/#how-does-sandstorm-use-its-wildcard
<Kamilion> Oh, great, more fun with DNS.
<Kamilion> *sigh* I hate messing with the bind zones
<asheesh> If you are OK with setting up port 443 external to route to the Sandstorm machine, then you can make the sandcats approach work too.
<Kamilion> That means I have to go get my wildcard class2 at startcom renewed...
<asheesh> But you sound unexcited about that, so you probably will have to take care of DNS.
<Kamilion> normally would be but that router's a super PITA about port forwarding
<Kamilion> it can do 1:1 nat of external to internals fine
<Kamilion> but whoever built that thing at cisco-cn had their head up their bum
<Kamilion> "shiywang@cisco.com"
<Kamilion> in shanghai
<Kamilion> (according to the expired certificate from 2012 it served me)
* asheesh chuckles.
<Kamilion> This is comcast's Buisness Cablemodem, DPC3939B. It's a pile of junk.
<Kamilion> I think it's running Windows CE with PHP inside.
<Kamilion> Amusingly enough, a friend of mine was visiting a disney theme park, and met someone who worked at cisco. My friend happened to bring up the above person's name and was told the person whom my friend ran into recalled their termination.
<Kamilion> Anyhoo, thanks for your help, I'll stop by again once I've swapped out the cablemodem.
<asheesh> Great! Good luck.
<Kamilion> I can probably get by from the documentation from here.
<Kamilion> oh -- actually
<asheesh> Oh, I should also add -- /opt/sandstorm/sandstorm.conf is your friend.
<Kamilion> Any idea how horribly this works with microsoft active directory DNS?
<asheesh> Should be fine with that, so long as you can do wildcards in that, which I presume you can.
<Kamilion> Hmm... I'm not sure, actually
<Kamilion> their DNS and DHCP are tied together
<Kamilion> so when the VM got it's DHCP address, a DNS entry was already added for it
<asheesh> You can use a different wildcard domain if you need.
<asheesh> Specifically:
<Kamilion> unfortunately, the person who set the microsoft active directory domain set it up with a .local
<asheesh> 1. Create a separate "domain", then
<Kamilion> so it will never work on the outside internet.
<Kamilion> it's another thing on my list of stuff to do: make a new company AD domain using our actual internet domain, as per microsoft's reccomendations
<asheesh> 2. Configure WILDCARD_HOST in /opt/sandstorm/sandstorm.conf to be the other host, like
<Kamilion> which is why I was trying to get wekan on sandstorm, so I could keep track of all this stuff I'm supposed to do... lol
<asheesh> BASE_URL=https://sandstorm.local
<asheesh> WILDCARD_HOST=sandstorm-wildcard-domain-*.local
<asheesh> Oh yuck, that may not work for you.
<asheesh> I dunno entirely.
mnutt has joined #sandstorm
<asheesh> WILDCARD_HOST=*.sandstorm-wildcard-domain.local maaaybe but it depends on how browsers define origins which I don't fully remember.
simonv3 has quit [Quit: Connection closed for inactivity]
funwhilelost has quit [Quit: My Mac has gone to sleep. ZZZzzz…]
<asheesh> Maybe running bootstrap-vz is not so crazy a thing for us to do, and sharing the artifacts.
funwhilelost has joined #sandstorm
<mnutt> for a quick fix it looks like it’s pretty easy to pin debian/jessie64 to 8.2.1: https://docs.vagrantup.com/v2/boxes/versioning.html
<asheesh> I was just looking for that.
<asheesh> Thank you!