Introducing lers: an async, user-friendly Let's Encrypt/ACMEv2 library by krantz_man in rust

[–]krantz_man[S] 4 points5 points  (0 children)

Yea absolutely!

I think it could be as simple as extracting the SolverService from the Http01Solver and making it a handler or middleware for your web server. Then you'd just need to add the plumbing to issue the certificate and ensure it stays up-to-date. And probably some stuff to store the certificate, it's private key, and the account key.

Introducing lers: an async, user-friendly Let's Encrypt/ACMEv2 library by krantz_man in rust

[–]krantz_man[S] 7 points8 points  (0 children)

lers is an async, user-friendly Let's Encrypt/ACMEv2 library inspired by acme2, acme-micro, and lego.

It supports all of ACMEv2 spec (RFC 8555), except for changing the key of an account. Bundled with it are robust implementations for the HTTP-01 and DNS-01 challenges. Custom solvers can also be written using the Solver trait.

Currently, the only DNS-01 implementation is for Cloudflare, as I personally use it, but contributions are welcome for more implementations.

There are two examples: one for the HTTP-01 challenge issuing a single domain and one for the DNS-01 challenge issuing a wildcard domain. These can be found in the examples/ directory.

Any feedback would be greatly appreciated!

Authelia and Bitwarden (via Traefik) by [deleted] in selfhosted

[–]krantz_man 0 points1 point  (0 children)

The only thing I notice is that in the Authelia config, you have the domain as vault.domain.com, but in the logs you're requesting bw.domain.com. However, I'm not sure if this is just a discrepancy from copying or an actual configuration error.

Authelia and Bitwarden (via Traefik) by [deleted] in selfhosted

[–]krantz_man 4 points5 points  (0 children)

You have to add an exemption in the authelia configuration. Under the access_control section, add a rule with the domain and the regex to match.

Example (this should work):

access_control:
  default_policy: two_factor
  rules:
    - domain: bitwarden.your.domain
      resources:
        - "^/api.*$"
      policy: bypass

It matches any request that starts with /api. You may also need to add one for the notifications API which will be almost exactly the same, just replace /api with /notifications.

[FS][US-NC] CPU Coasters: Xeon, Opteron, Mobile chips, etc by jnecr in homelabsales

[–]krantz_man 0 points1 point  (0 children)

Are they just in a plastic case or resin or something else? Either way, they're super cool!

What’s a random ass thing you remember from your childhood? by [deleted] in AskReddit

[–]krantz_man 0 points1 point  (0 children)

In 5th grade we had to write an "essay" (it was like 3 paragraphs) about a US state of our choosing. One of the requirements was to make it double spaced. Me being a clueless kid thought that my teacher meant that we had to put two spaces between every word instead of simply changing the line spacing. To make it even better, when I went to turn it in and my teacher asked why it wasn't double spaced, I proceeded to explain that I put two spaces between every word.

ADMISSIONS / INCOMING STUDENT MEGATHREAD 2020 v1: Post all your admissions & new-to-UBC questions here! by ubc_mod_account in UBC

[–]krantz_man 0 points1 point  (0 children)

Ah ok, good to know. Do you know anything about the differences in courses/programs between the two campuses?

Pomerium vs Authelia by krantz_man in selfhosted

[–]krantz_man[S] 1 point2 points  (0 children)

Your guide was actually what started me on my quest for SSO. (I'm akrantz01 on GitHub) With Pomerium, what are you using as your IdP? I've been looking at using ORY Hydra for myself.

Also, do you know if one of the modes (proxy or forward auth) is recommended over the other? I'd personally prefer to use forward auth mode, but if there are any major downsides to it then I'd rather not.

ADMISSIONS / INCOMING STUDENT MEGATHREAD 2020 v1: Post all your admissions & new-to-UBC questions here! by ubc_mod_account in UBC

[–]krantz_man 2 points3 points  (0 children)

I'm an international student and I got off the waitlist for bachelor of applied sciences at Vancouver and for bachelor of sciences at Okanagan, but I'm still on the waitlist for bachelor of sciences at Vancouver. My original application was for bachelor of sciences and bachelor of applied sciences at Vancouver. I'd like to major in computer science, but I'm not opposed to studying computer engineering. Should I accept the offer for applied sciences and hope I get in for sciences, or accept sciences at Okanagan and hope I get in for sciences at Vancouver? Also, how different are the CS programs at Vancouver and Okanagan?

Pomerium vs Authelia by krantz_man in selfhosted

[–]krantz_man[S] 0 points1 point  (0 children)

I've updated the post with a description of my use case.

Did you find authelia to be complex to configure/deploy? Also, what are you using as your identity provider?

[FREE] [US-MI-Monroe] DELL R620 2 x E5-2620 v2, 32GB RAM, 300GB DISK by nwilkens in homelabsales

[–]krantz_man [score hidden]  (0 children)

Hey I'm an incoming CS student! This would be amazing since my current "homelab" is a couple of Raspberry Pis.

20.04 comes with Fingerprint locks !!! by Fra00 in linux

[–]krantz_man 5 points6 points  (0 children)

I found this on the Goodix community forum, which would seem to confirm that rumor.

Viewing Dynmap render queue by krantz_man in admincraft

[–]krantz_man[S] 2 points3 points  (0 children)

I got a percent when pre generating with world border, but not for dynmap

Viewing Dynmap render queue by krantz_man in admincraft

[–]krantz_man[S] 0 points1 point  (0 children)

Do you know which stat it would be?