05:49 <crw> ahoy! what's the scoop with self-hosted sandstorm and LE wildcard certs? is that a thing? searching docs didn't yield anything.

05:52 <crw> oh, docs.sandstorm.io search looks broken.

05:54 <crw> looks like my answer is here: https://docs.sandstorm.io/en/latest/administering/wildcard/ :)

16:59 <TimMc> crw: Yep, that work is still pending.

17:04 <TimMc> I should see about setting up wildcard LE certs for my nginx...

17:44 <kentonv> crw, I know dwrensha has gotten his Sandstorm set up with a Let's Encrypt wildcard. Unfortunately it doesn't look like Sandstorm will be able to do much to automate it, since you have to pass a DNS challenge.

23:01 <ccx^xmpp> Can't you at that point just any ACMEv2 client, assuming Sandstorm detects certificate files changing and reloads?

23:25 <kentonv> ccx^xmpp, not sure what you mean. You probably need to put nginx in front of Sandstorm to do the TLS termination, and then arrange for Let's Encrypt to deliver certs to nginx

23:26 <kentonv> Sandstorm could be doing the termination, but that just changes things so you have to deliver the certs to Sandstorm. What Sandstorm cannot do is automatically request the certs for you, because you have to pass a DNS challenge, and Sandstorm doesn't have access to your DNS

23:26 <kentonv> (unless you are on sandcats, in which case we're already providing you with TLS certs)

23:28 <kentonv> ocdtrekkie, regarding your "last used" bug: is it consistent with the last-used time only being updated if you keep the grain open for at least a minute?

23:51 <ocdtrekkie> It seems relatively plausible to me, kentonv. I do a lot of short updates on documents.

23:52 <ocdtrekkie> Though I didn't think Sandstorm closed them again within a minute?

23:52 <ocdtrekkie> Once I noticed some of my docs didn't show a recent date of course, I tested by noticing that opening grains didn't move them to the top of the list, which again, would be "less than a minute" of testing in most cases.

23:54 <ocdtrekkie> Yeah, that seems to be the case.

23:54 <coffeebird[m]> is it possible to buik download grain backups?

23:55 <ocdtrekkie> coffeebird[m]: Sadly, no, not at present, AFAIK.

23:56 <kentonv> ocdtrekkie, yeah, pretty sure that was the bug. Pushing a Sandstorm release now to fix. Debating whether or not I want to bother updating Oasis...

23:56 <kentonv> (nothing else has changed since last release)

23:57 <ocdtrekkie> I need to review some apps.

23:57 <ocdtrekkie> Things not jumping to the top is mildly irritating sometimes, but not a huge issue.

23:58 <kentonv> guess I could push a hotfix... if it gets reverted by accident it's not going to be outage-inducing, at least

23:59 <ocdtrekkie> Should I test any specific oddities because of this being added to Wekan: https://atmospherejs.com/meteor/browser-policy