[00:37:23] (03PS1) 10Dzahn: piwik: duplicate fake secrets to location for new role name [labs/private] - 10https://gerrit.wikimedia.org/r/406967 [00:38:32] (03PS2) 10Dzahn: piwik: duplicate fake secrets to location for new role name [labs/private] - 10https://gerrit.wikimedia.org/r/406967 [00:38:41] (03CR) 10Dzahn: [V: 032 C: 032] piwik: duplicate fake secrets to location for new role name [labs/private] - 10https://gerrit.wikimedia.org/r/406967 (owner: 10Dzahn) [06:27:02] https://etherscan.io/address/0x1595c383f52e474b28b5e6b4b8f72e92c1461474#comments [06:27:22] wrong channel :) sry. and no, it's not mine :) [07:20:21] why does an ethereum blockchain explorer have a comments section [12:16:06] (03PS1) 10MarcoAurelio: Link extensions to their pages in mediawiki.org [labs/tools/extreg-wos] - 10https://gerrit.wikimedia.org/r/406998 (https://phabricator.wikimedia.org/T185413) [13:50:45] hi [13:50:47] Can you see the eclipse on your side? [14:15:46] RWARD! Known: △ABC, AB = AC, ∠BAC = 20° and ∠BDA = 30° && D on the B.Proof: AD = BC.Who knows, a $100 reward. [14:16:14] RWARD! Known: △ABC, AB = AC, ∠BAC = 20° and ∠BDA = 30° && D on the B.Proof: AD = BC.Who knows, a $100 reward [15:29:47] Technical Advice IRC meeting starting in 30 minutes in channel #wikimedia-tech, hosts: @addshore & @CFisch_WMDE - all questions welcome, more infos: https://www.mediawiki.org/wiki/Technical_Advice_IRC_Meeting [16:41:40] !log tools.admin Restarted webservice, requests timing out [16:41:42] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.admin/SAL [17:21:19] bd808: ah thanks, I only saw the recovery not the intervention. any ideas why? [17:35:17] chasemp: I didn't poke too deeply [17:51:13] bd808: understood yeah [18:02:21] (03PS1) 10Dzahn: remove hieradata/piwik/server.yaml [labs/private] - 10https://gerrit.wikimedia.org/r/407032 [18:03:08] (03PS2) 10Dzahn: remove hieradata/piwik/server.yaml [labs/private] - 10https://gerrit.wikimedia.org/r/407032 [18:03:16] (03CR) 10Dzahn: [V: 032 C: 032] remove hieradata/piwik/server.yaml [labs/private] - 10https://gerrit.wikimedia.org/r/407032 (owner: 10Dzahn) [18:56:13] !help I cant renew my Let's Encrypt certificate on Cloud VPS [18:56:13] Freddy2001: If you don't get a response in 15-30 minutes, please create a phabricator task -- https://phabricator.wikimedia.org/maniphest/task/edit/form/1/?projects=wmcs-team [19:11:02] * harej wonders... do you need a Let’s Encrypt on Cloud VPS, or can you just ride off of the wmflabs.org cert? [19:12:05] harej: it depends on how you are doing things, we handle the certs for novaproxy i.e. the main reverse proxy and tools.wmflabs.org [19:13:20] harej you need one if you use floating ip [19:13:22] i think [19:48:34] Freddy2001: do you have more details about how the renewal is failing? I remember seeing something from Krenair not too long ago about some changes in the lets encrypt setup that was used somewhere (deployment-prep?) that were needed [19:49:30] it was just a case of changing the LE terms of use agreement URL for deployment-prep [19:49:43] was done in puppet, no cherry-picking for that as I was concerned about legal review [19:51:01] Freddy2001: could you paste the error please [19:51:09] harej, you don't need it if you're able to sit behind novaproxy - so https only (no other protocols, i.e. secure IRC or SMTP), *directly* under wmflabs.org only [19:51:21] no sub-sub-domains [19:54:41] and you'll need to be able to handle XFF etc. if you need client IP I think [20:26:21] (03PS1) 10Zhuyifei1999: sql: Set default cluster to 'analytics' and add bash completion [labs/toollabs] - 10https://gerrit.wikimedia.org/r/407054 (https://phabricator.wikimedia.org/T167026) [22:54:01] !log tools add bstorm to sudoers as root [22:54:07] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL [23:55:34] chicocvenancio: I just checked, if chsh.ldap is run as root it asks for LDAP admin password. I guess one has to run the command described in the docs on (was it terbium or tin?). [23:56:01] * chicocvenancio nods [23:56:14] apparently it can be a range of prod servers [23:56:19] (as root) [23:57:21] or an ldap user with permissions from any server (with `ldapvi`)