01:13 <hairwhale> I thought sandstorm couldn't use letsencrypt?

01:17 <TimMc> hairwhale: Not directly!

01:18 <TimMc> The usual approach is to put nginx in front of sandstorm, and use the nginx-certbot integration or something.

01:19 <TimMc> If you're curious what an example configuration looks like, here's the sandstorm part of my Ansible scripts: https://github.com/timmc/commapps/tree/master/ansible/roles/sandstorm

01:22 <hairwhale> ty

01:39 <TimMc> This is just something I cobbled together, so it's not like... the Official Right Way of doing things. Some parts are kind of janky or inconsistent, but the files/ and templates/ folders should give you some sense of what the config looks like on disk. If you have any questions, let me know!

01:52 <hairwhale> I don't really know what I'm looking at. I've read a bit about ansible but never used it

01:53 <hairwhale> I'll read up a bit more. Still need to learn some of the basics I guess

01:55 <TimMc> hairwhale: Ansible has some YAML-based "scripts" in the main/ and handler/ directories, and those control where the files in files/ and templates/ land in the filesystem.

01:56 <TimMc> The templates use Jinja templating, so you'll see some {{variable_substitution}} in the .j2 files.

01:56 <TimMc> so if you want to see *where* the files end up, the answers can be found in tasks/*.yml :-)

01:58 <TimMc> Most of the yml is just "put this file here, make sure this service is started, install this package..." and really you can ignore everything but the "put this file here"

01:59 <TimMc> e.g. https://github.com/timmc/commapps/blob/master/ansible/roles/sandstorm/templates/nginx-sites/sandstorm.conf.j2 is the nginx config (with a tiny bit of templating) and https://github.com/timmc/commapps/blob/master/ansible/roles/sandstorm/tasks/terminate-tls.yml#L77 installs it