2020-10-04T02:15:05  *** okurz_ is now known as okurz
2020-10-04T02:45:42  *** boombatower_ is now known as boombatower
2020-10-04T09:27:07  <asn[m]> LCP: https://build.opensuse.org/request/show/839348
2020-10-04T09:28:11  <asn[m]> LCP: did you already set up the stuff?
2020-10-04T09:28:32  <asn[m]> how did you set it up, the stuff is not secure by default
2020-10-04T09:28:46  <asn[m]> with uwsgi you can at least have it running with apparmor
2020-10-04T09:37:54  <lcp> [asn](https://matrix.to/#/@asn:matrix.org) we are using uwsgi
2020-10-04T09:38:26  <lcp> I don't remember if we have apparmor set up, probably not yet
2020-10-04T09:39:13  <asn[m]> LCP: https://build.opensuse.org/package/show/home:gladiac:apps/uwsgi-apparmor
2020-10-04T09:40:05  <lcp> <asn[m] "LCP: https://build.opensuse.org/"> hm, some of that would probably be useful upstream
2020-10-04T09:40:59  <asn[m]> -> /etc/apparmor.d/uwsgi.d/postorius: ->
2020-10-04T09:41:03  <asn[m]> https://cpaste.org/?572c100e74bea768#Hq778xVE8K4Fz7Bk4Wq363WVSk45q7AR7zxxBTmvykfY
2020-10-04T09:41:34  <asn[m]> this is the apparmor profile for it
2020-10-04T09:41:58  <asn[m]>  * this is the apparmor profile for postorius
2020-10-04T09:42:11  <lcp> alright, I will get it on the server when I have the time
2020-10-04T09:43:07  <asn[m]> we could put uwsgi-apparmor in server:http where uwsgi resides ...
2020-10-04T09:43:48  <lcp> sure, that sounds reasonable
2020-10-04T09:45:03  <lcp> keep in mind the infra stuff is openSUSE Leap 15.2 with OBS repo openSUSE:infrastructure: mailman iirc
2020-10-04T09:45:33  <lcp> so devel repo stuff doesn't really land then unless somebody adds it, which I might do ;)
2020-10-04T09:46:53  <asn[m]> I've also improved the mailman package itself
2020-10-04T09:47:13  <asn[m]> It comes with systemd files and runs as user mailman now
2020-10-04T09:51:48  <asn[m]> https://build.opensuse.org/package/show/home:gladiac:mailman3/python-mailman
2020-10-04T10:00:21  <lcp> nice
2020-10-04T18:48:55  <cboltz> lethliel_: the certificate for meet.opensuse.org will expire tomorrow - can you please update it?
2020-10-04T20:15:39  <cboltz> lethliel_: I was able to renew the certificate by temporary disabling the http -> https redirect - but it will fail again in some months