[14:41:24] <revi>	 https://tools.wmflabs.org/replag/ looks abnormal?
[14:41:58] <revi>	 d'oh https://usercontent.irccloud-cdn.com/file/e5Kk5NyS/doh.png
[15:00:56] <wm-bot>	  Technical Advice IRC meeting starting in 60 minutes in channel #wikimedia-tech, hosts:  - all questions welcome, more infos: https://www.mediawiki.org/wiki/Technical_Advice_IRC_Meeting
[15:50:08] <andrewbogott>	 !log hound deleting project and all instances as per https://wikitech.wikimedia.org/wiki/News/Cloud_VPS_2019_Purge#butterfly
[15:50:09] <stashbot>	 Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Hound/SAL
[15:50:54] <wm-bot>	  Technical Advice IRC meeting starting in 10 minutes in channel #wikimedia-tech, hosts:  - all questions welcome, more infos: https://www.mediawiki.org/wiki/Technical_Advice_IRC_Meeting
[15:52:24] <andrewbogott>	 !log general-k8s deleting instances and project as per https://wikitech.wikimedia.org/wiki/News/Cloud_VPS_2019_Purge#DELETE_general-k8s
[15:52:25] <stashbot>	 Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:General-k8s/SAL
[15:54:20] <andrewbogott>	 !log newsletter deleting VMs and project as per https://wikitech.wikimedia.org/wiki/News/Cloud_VPS_2019_Purge#DELETE_newsletter
[15:54:21] <stashbot>	 Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Newsletter/SAL
[15:58:07] <andrewbogott>	 !log partnermetrics deleting instances and project as per James Hare's instructions
[15:58:09] <stashbot>	 Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Partnermetrics/SAL
[16:02:53] <andrewbogott>	 !log wikibrain deleting VMS and project after communication with Shilad Sen
[16:02:54] <stashbot>	 Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Wikibrain/SAL
[16:05:00] <andrewbogott>	 !log wikicitevis deleting project after communication with Sam Walton
[16:05:13] <stashbot>	 Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Wikicitevis/SAL
[16:08:27] <andrewbogott>	 !log wikimetrics deleting project per communciation with Nuria
[16:08:28] <stashbot>	 Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Wikimetrics/SAL
[19:56:39] <jeh>	 !log openstack create 3 VMs jeh-ceph0[1-3] for testing ceph debian packages
[19:56:41] <stashbot>	 Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Openstack/SAL
[22:15:03] <hauskater>	 !help Is there a way to serve a tool only via https (webserver) ?
[22:15:03] <wm-bot>	 hauskater: If you don't get a response in 15-30 minutes, please create a phabricator task -- https://phabricator.wikimedia.org/maniphest/task/edit/form/1/?projects=wmcs-team
[22:18:38] <Krenair>	 hauskater, not sure I follow. there is already an http -> https redirect isn't there?
[22:19:13] <hauskater>	 Krenair: Sorry, I'll try to explain
[22:19:32] <hauskater>	 wikistats.wmflabs.org, for example, can be accessed via http
[22:19:58] <hauskater>	 if you manually switch to https you can access it via https too
[22:20:05] <Krenair>	 oh yeah
[22:20:11] <Krenair>	 the project-proxy doesn't enforce http
[22:20:11] <hauskater>	 I'd like to know if we can "autofunnel" http -> https
[22:20:12] <Krenair>	 https*
[22:20:30] <hauskater>	 I think some tool owners did it but I cannot find any docs
[22:20:32] <Krenair>	 so you most likely check the value of the X-Forwarded-Proto header
[22:20:54] <Krenair>	 let's not use the term 'tool' if not talking about something inside the tools project please :)
[22:21:19] <hauskater>	 'vps" then ?
[22:21:21] <hauskater>	 :)
[22:21:37] <hauskater>	 tools.wmflabs.org looks all served via https
[22:23:03] <Krenair>	 yeah it looks like tools enables the https_upgrade param when setting up dynamicproxy
[22:23:25] <Krenair>	 hauskater, anyway, to answer your question
[22:23:43] <Krenair>	 modules/dynamicproxy/templates/domainproxy.conf from operations/puppet.git shows it always does "proxy_set_header X-Forwarded-Proto $scheme;"
[22:23:49] <Krenair>	 therefore in your web server you can check the value of that header
[22:23:55] <Krenair>	 if it's not https, you can issue a redirect
[22:24:12] <Krenair>	 e.g. return 301 https://$host$request_uri;
[22:26:17] <Krenair>	 https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-Proto
[22:26:30] <hauskater>	 aha
[22:26:58] <hauskater>	 I guess for VPS projects you'll enforce HTTPS in the future?
[22:28:09] <Krenair>	 yeah https://phabricator.wikimedia.org/T131288
[22:28:22] <hauskater>	 Great
[22:28:33] <hauskater>	 thanks :)
[22:30:35] <Krenair>	 np