00:53 <maurer> paulproteus: Oh, speaking of that, have you considered eventual FIDO U2F support for browser that support it? You can presumably already do this with google accounts, but a sandstorm server would be in a unique position to layer this over other auth systems

00:53 <maurer> *browsers

01:56 <jdenz> Hi all. I'm having trouble getting my WordPress site to see the Piwik instance in Sandstorm. I've created a share link that "can be tracked" and I've tried using the token_auth of the superuser and another user I created. I checked "Disable SSL peer verification" in the Piwik WordPress plugin (WP-Piwik). Any other ideas on things I can try?

01:57 <paulproteus> Hmm jdenz

02:03 <jdenz> Hi @paulproteus. I've been using Piwik for years now so I'm thinking I'm missing something that's peculiar to sandstorm. That said, my current Piwik self-hosted instance (outside of Sandstorm) seems to be broken and I don't know how to fix it. Should I just go with Google Analytics? I hope not.

02:05 <jdenz> I just tried giving "view" access to the "anonymous" user. That didn't help.

02:06 <paulproteus> I'm not sure and haven't tried the package, but I also haven't tried the Piwik WordPress plugin.

02:06 <paulproteus> I recall the Piwik package gives you some JS to add to the site to do the tracking.

02:07 <paulproteus> My hunch is that the Piwik WordPress plugin may not be compatible with that, so you might have to add custom JS to your WordPress theme or in a WordPress custom JS widget.

02:07 <paulproteus> e.g. via https://wordpress.org/plugins/html-javascript-adder/

02:07 <paulproteus> jdenz: Any chance you can try with a plain HTML page somewhere firsT?

02:08 <paulproteus> That way we can debug the Piwik Sandstorm stuff first, and once we know that works, work on the WordPress side of things.

02:08 <jdenz> That's a good idea. I'll set that up now.

02:09 <paulproteus> Thanks for coming by here and asking!

02:09 <jdenz> No problem. Thanks for being here to answer!

02:24 <jdenz> It seems to work ... almost. I'm seeing hits but the IP address is not correct. It's showing 127.0.0.0 for everything. But, this means that my problem with WordPress connecting is with that WP-Piwik plugin. That's unfortunate.

02:24 <paulproteus> Huh.

02:25 <paulproteus> re: 127.0.0.0 -- is this a self-hosted Sandstorm behind an nginx?

02:25 <jdenz> yes

02:25 <paulproteus> Cool, there's probably some setting worth setting.

02:26 <paulproteus> re: WP-Piwik plugin: Yeah that is unfortunate. But you could use the HTML Javascript adder thing I suggested.

02:26 <jdenz> Ok, thanks. I'll look for that.

02:32 <jdenz> Any thoughts on getting the IP address to work in nginx?

02:32 <jdenz> I added the tracking code to the footer.php file of the theme I'm using. That'll work in the short term.

02:34 <paulproteus> Yeah... there's this one thing to do.

02:34 <paulproteus> Let me dig it up

02:34 <jdenz> Thanks!

02:36 <paulproteus> Hmm kentonv is https://github.com/sandstorm-io/sandstorm/blob/master/nginx-example.conf the complete conf from Alpha?

02:36 <paulproteus> oh wait nm

02:36 <kentonv> it forked from a very early version

02:36 <kentonv> like march 2014ish

02:36 <paulproteus> Trying to figure out what changes zarvox made to get IP addresses for Piwik happiness

02:37 <paulproteus> https://paste.debian.net/313476/ jdenz

02:38 <paulproteus> You need the last two lines.

02:38 <jdenz> Ok, great.

03:00 <paulproteus> jdenz: Do let me know how it goes for you.

03:00 <jdenz> I made the change but cannot sign back in to Sandstorm because my email provider seems to be down at the moment. I guess that's one drawback to signing in with email only.

03:01 <paulproteus> Aw.

03:37 <jdenz> Out of curiosity, is there a server-side work around in the case where I can no longer access that email account? I don't think this will be a problem, but I'm curious.

03:37 <paulproteus> Ya, via Mongo shell

03:37 <paulproteus> going afk for a bit!

03:59 <jdenz> paulproteus: I used 'sudo sandstorm admin-token' and bumped another email address to an 'invited user' so I can test Piwik while I'm waiting for my email to come back. Created a new instance, adding the tracking code and the IP address still shows 127.0.0.0 after adding the bottom two lines of https://paste.debian.net/313476/. Any other ideas?

04:01 <paulproteus> (1) did you restart your nginx? (2) can you share your full nginx configuration?

04:01 <paulproteus> (3) we're hoping to avoid these problems! Out of curiosity, why are you using nginx?

04:03 <jdenz> Nginx was used here: https://docs.sandstorm.io/en/latest/administering/reverse-proxy/ That's what I followed to set things up.

04:03 <jdenz> I did restart Nginx earlier, but let me do it again now.

04:03 <paulproteus> Got it. And the reason you're doing this at all is to get HTTPS?

04:04 <paulproteus> Or for port 80?

04:04 <jdenz> Both. But mostly SSL.

04:07 <paulproteus> Cool. Possibly interestingly, if you can wait about 1-3 days, I can give you HTTPS with a patched Sandstorm, with a cert signed by GlobalSign, and you can uninstall nginx then.

04:07 <jdenz> Ohhh, that would be nice. :)

04:07 <paulproteus> That is to say, I can give you a Sandstorm bundle you can run 'sudo sandstorm update asheeshs-cool-bundle.tar.xz' on, and then the other stuff I said.

04:08 <jdenz> Ok, I understand.

04:10 <paulproteus> If you want, I can keep trying to help you with the nginx stuff in the meantime. Either way, email me at asheesh@sandstorm.io and I can try to give you something, plus some instructions, that should work in that 1-3 days time-frame.

04:10 <paulproteus> It would be alpha-quality, but having you use it (and/or report any issues!!) would be hugely helpful for me to know it's working properly.

04:10 <paulproteus> And I would only give it to you once I think it should actually work.

04:13 <jdenz> Ok, sure. I'll email you as soon as my email account comes back up. Might be sometime tomorrow though.

04:13 <jdenz> Is this something that'll eventually be offered to everyone, the GlobalSign wildcard cert?

04:14 <kentonv> mmmmmayyyyyyybbbbeeeeee.....

04:16 <jdenz> Is it hinging on something on Sandstorm's end, technology-wise, GlobalSign's end, or is it purely financial?

04:17 <kentonv> we just don't want to announce anything until it's live. ;)

04:18 <jdenz> Ah, ok. Cool.

04:27 <paulproteus> Awesome.

17:21 <larjona> Hi! yesterday I used intensively hacker slides in my sandstorm instance. Lots of good feelings, and some things to transmit to the maintainer. How is the correct way? I'm not sure if hackerslides project "exists" outside sandstorm, and not sure if contacting directly the maintainer or using the sandstorm-dev mailing list for specific problems about the packaged apps...

17:23 <dwrensha> larjona: You could report issues here: https://github.com/jacksingleton/hacker-slides

17:24 <dwrensha> larjona: jacksingleton, the author, sometimes is on this channel, but apparently not right now

17:25 <dwrensha> I'd say that sandstorm-dev would be a good place for more general feelings and questions, while HackerSlides issue tracker on GitHub would be a good place for specific issues.

17:27 <larjona> thanks dwrensha