kentonv changed the topic of #sandstorm to: Welcome to #sandstorm: home of all things sandstorm.io. Say hi! | Have a question but no one is here? Try asking in the discussion group: https://groups.google.com/group/sandstorm-dev | Public logs at https://botbot.me/freenode/sandstorm/
ripdog has quit [Ping timeout: 245 seconds]
ripdog has joined #sandstorm
pie_ has joined #sandstorm
digitalcircuit has quit [Remote host closed the connection]
digitalcircuit has joined #sandstorm
isd has joined #sandstorm
frigginglorious has quit [Ping timeout: 272 seconds]
karswell has quit [Ping timeout: 244 seconds]
isd has quit [Ping timeout: 246 seconds]
<sy> can i prevent user enumeration from the login screen?
<sy> is there a setting or should i just change the error messages to match
strugee has quit [Quit: ZNC - http://znc.in]
strugee has joined #sandstorm
frigginglorious has joined #sandstorm
<xet7> sy: Look at Sandstorm Admin Panel is there any settings
isd has joined #sandstorm
<sy> no sir
<sy> I'll edit the code to change the message
pie_ has quit [Ping timeout: 252 seconds]
<sy> does anyone run sandstorm offline? I'm considering it but it seems to be a _lot_ of work
<xet7> sy: Sure it's possible, install sandstorm dev install with bash script, just uncomment at /opt/sandstorm/sandstorm.conf that #UPDATE_CHANNEL=dev and set your local network IP address, and when you want to update apps, just download .spk file from Sandstorm App Market and install it manually. There's also updated apps feed json url somewhere.
<xet7> dev install uses http, so it does not require opened SSL ports like *.sandcats.io internet accessible install
<sy> don't really want to manually download stuff
<sy> and i figure i can't up and run a clone of the app store
<xet7> huh? sure you can. Just download all of those updated files, and set on your local network to hosts file that sandstorm server domain and IP address etc at same URLs
<sy> guess this'll be the way it has to be
<sy> will this require me to go through and download all spks manually
<sy> and re-download every time there is an update?
<xet7> Well, depends if update is important. If you use offline install local network, I would think it's not so important to update so often.
<sy> it's offline, but it's still reachable externally
<xet7> And it's not like updates are very frequent. Only Wekan updates very often.
<sy> it's an airgapped network, save for a reverse proxy to sandstorm
<xet7> Yes, you can allow outgoing traffic only to sandstorm update server to download updates. Sandstorm also has network limit settings at Admin Panel.
<xet7> It would be possible to make script, that downloads all updates at once, burn those to CD, and then add those to local network server that has some hostname as sandstorm update server. That would then update Sandstorm directly from local server.
<sy> well if i allow outgoing access to something i don't control that rather defeats the point of an airgap in the first place
<sy> seen, doesn't say about the marketplace
<sy> i guess i'll have to do things manually or do hacky things
<xet7> That JSON file lists urls to all apps
<sy> excellent
<sy> might be able to sew together something
<xet7> Yes, read with code all those urls and download with wget
<xet7> and then set similar urls to your airgapped network, for example in linux /etc/hosts shows hostnames
<xet7> add there static file server
<xet7> so then airgapped sandstorms downloads those
<xet7> actually, when you set similar JSON file to your airgapped network, you can have any URLs there
<xet7> and if you don't use some apps, you don't need to list them in JSON file, and don't need to download them
<xet7> heh, same webpage says you could run copy of sandstorm app market code. Well, that could be a overkill, I don't know...
<sy> no that sounds like it would save me a lot of time
<sy> wouldn't i still need to clone though
pie_ has joined #sandstorm
<sy> ain't nobody going to push their apps seperately to my marketplace
<sy> where does it say that?
<sy> ah found it
<sy> should the client be able to access the https://<sandstorm-host>/install/<package-id>?url=https://<app-index-host>/packages/<package-id>
<sy> or the server?
<sy> sorry, the second bit url=
<xet7> Hmm, maybe, I have not tried it
<xet7> I think App Market is only if you install new apps
<xet7> for just updating existing apps I think it just reads JSON file
<xet7> Anyway, all of Sandstorm is Open Source
<xet7> .spk packages are signed by each Sandstorm package maintainers, other's can't publish to app market. Earch package has some public/private crypto key pairs for that.
<xet7> sure it's possible to upload selfmade .spk:s too
<xet7> but those will not get same app ID
<xet7> Well, because it's open source, on serverside it's possible to change who has those keys
<xet7> ocdtrekkie tests new Sandstorm packages, so they don't break anything
<xet7> before accepting as official version
<xet7> ttyl, good night :)
<sy> nigh
<sy> t