From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms8.migadu.com with LMTPS id aOX/DJtQuWUcIQAA62LTzQ:P1 (envelope-from ) for ; Tue, 30 Jan 2024 20:40:11 +0100 Received: from aspmx1.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1.migadu.com with LMTPS id aOX/DJtQuWUcIQAA62LTzQ (envelope-from ) for ; Tue, 30 Jan 2024 20:40:11 +0100 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=lassieur.org header.s=fm2 header.b=K9jAPJHZ; dkim=pass header.d=messagingengine.com header.s=fm3 header.b=qdB2LuFk; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" ARC-Seal: i=1; s=key1; d=yhetil.org; t=1706643611; a=rsa-sha256; cv=none; b=Th8dTrkLM5Z80cKN5HVOUOH4E14IAYFGLatZQzUpkWeLGsL/NndPCk7cCMaFTyyq5M5gq/ BOk3YSQyRloJyBD/aw0bV+xEb5wJdXrCJ11hd/3YHe4m0LFrqqsP4o3VFPFA7Kqmm7cJqk di+JzRIe1KsT21IIeOY4hGdOKdvwG/F43aWIw+oiGmkF/rL+2TzufyMd4LMjfumcFN5YAI fR/oOUIDBE9MFxvynnxMh86fwJLIFaHpoW8n3ki6ssTXT6S3nL6VIAI562AkSj0v0eDVRY anPIahs7v6/78x0w9sCFaZR0qh6pW4VRkfUMOF9E7CTM/K9/Z3nQAUR/xMltqg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=lassieur.org header.s=fm2 header.b=K9jAPJHZ; dkim=pass header.d=messagingengine.com header.s=fm3 header.b=qdB2LuFk; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1706643611; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=SldLg2fQhDdS+plxU2hjN/e6atb1eKndm6lYViYXAVA=; b=bQR+TOQH0OgDz/UdKvMUcN66cSUnU9J6PqFE/fXKTIO5POdis1nZAhIj07dHz+ohljdAtY ZB1hajOkoTzpcNc9X7NbQvv3JubO7QEl/ByTXA1zUGWCLuY8LZyIk317MHPPVcb60a0TZi ruCSmjEZ72N+Ze73PpRT8isSZNjsiX2wTU1zH6PuTvjDoQI3+B9VLS0YuhKg/T+kDnRur6 0hMCkOUsW5fBEqcClXR+uBIrOY/BZNuFxbwj/dRRkmp+Jn3mcUNY7oA0gHyY/d8x7eOWm+ AJ0vJm0zPaXNj6cHhTvEx5zB6kLQArcuXHH5thbfSnEUxrYuQgSBYU1hdUSCVg== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 1C439BAD8 for ; Tue, 30 Jan 2024 20:40:10 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1rUtxJ-0000M1-Su; Tue, 30 Jan 2024 14:39:37 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rUtxE-0000LS-4A; Tue, 30 Jan 2024 14:39:33 -0500 Received: from wout3-smtp.messagingengine.com ([64.147.123.19]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rUtx8-0007d5-HC; Tue, 30 Jan 2024 14:39:30 -0500 Received: from compute6.internal (compute6.nyi.internal [10.202.2.47]) by mailout.west.internal (Postfix) with ESMTP id 29BFE3200BC8; Tue, 30 Jan 2024 14:39:20 -0500 (EST) Received: from mailfrontend2 ([10.202.2.163]) by compute6.internal (MEProxy); Tue, 30 Jan 2024 14:39:20 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lassieur.org; h= cc:cc:content-type:content-type:date:date:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to:subject :subject:to:to; s=fm2; t=1706643559; x=1706729959; bh=SldLg2fQhD dS+plxU2hjN/e6atb1eKndm6lYViYXAVA=; b=K9jAPJHZGPRLp6hMmbJmMPIdPP O+Ncwx/4n71W8g9qE0BjZgXAsCq4X9MPRwn3egTuEJtl3A+WuTqkeOxzJgA6OUwF Sw3I/l+zE1vLiLDllIGoNXQDPVolYT91MqzUbXeVcFwOhErkXzckTqKwJUXXNF+j D+0J3kmOVJRZF10MIL6yYDlVQnnGPEUOqarmbdoNnB8foWTlggaJf0JSqfBLC5ra w50jcjyhZOVUKSDTf72LmWQAD0ZTzydl2Il8WfpZwKmwfuufPmwOXp8W49mAgCOv b0cDjhUe/Hpki8fp84oLxAOBh8/uRjEnKLExPgJBJh4Ke+9x0X7/OngwupbQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:subject:subject:to :to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s= fm3; t=1706643559; x=1706729959; bh=SldLg2fQhDdS+plxU2hjN/e6atb1 eKndm6lYViYXAVA=; b=qdB2LuFklW2zeDq0vu1QKw02nimjfP6aBks45Hb+y9mv IUlrKBLNUQaQMOAuppiMt+zw/fGfHQASHv+HqcjRovMo261RfNLAvAV/UxPPxYo1 mXI2hdEeoi9Zs8FQLeBcG/i102EIJtXthys22HJMjkSc2Rl0c8uSV9gVZMRpZZzL h+kW4njmISORFSaiEyBwNsZzZj1vibbTQOxNukhLzg9YGozriuplhfviX65ra57X qedzxhRmfvYskoGzylbzbqy0TGfiDyhskMUAWJfq2kF47W+C3Pz3+5yrIG1U4tkA iy8+WA8PbRlUNrw13JOFENDhaoNDmhy0uY+Xv16M9Q== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvkedrfedtjedgiedtucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhephffvvefujghffffkfgggtgesthdtredttderjeenucfhrhhomhepvehlrohm vghnthcunfgrshhsihgvuhhruceotghlvghmvghntheslhgrshhsihgvuhhrrdhorhhgqe enucggtffrrghtthgvrhhnpedvjeehffelgffhhffgvddtgfeggefhlefgheffudffgeek ffelheelieekudetheenucffohhmrghinheprhgvrgguthhhvgguohgtshdrihhonecuve hluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomheptghlvghmvghn theslhgrshhsihgvuhhrrdhorhhg X-ME-Proxy: Feedback-ID: i4c21472a:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Tue, 30 Jan 2024 14:39:16 -0500 (EST) From: =?utf-8?Q?Cl=C3=A9ment_Lassieur?= To: Felix Lechner via Bug reports for GNU Guix Cc: Carlo Zancanaro , 46961@debbugs.gnu.org, Felix Lechner , guix-devel@gnu.org, brice@waegenei.re Subject: Re: bug#46961: [PATCH v2 0/4] Make certbot play more nicely with nginx In-Reply-To: <875xzanaer.fsf__22488.5524179385$1706626282$gmane$org@lease-up.com> (Felix Lechner via Bug reports for's message of "Tue, 30 Jan 2024 06:49:48 -0800") References: <875xzanaer.fsf__22488.5524179385$1706626282$gmane$org@lease-up.com> Date: Tue, 30 Jan 2024 20:39:12 +0100 Message-ID: <8734uevcf3.fsf@lassieur.org> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain Received-SPF: pass client-ip=64.147.123.19; envelope-from=clement@lassieur.org; helo=wout3-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Scanner: mx10.migadu.com X-Spam-Score: -10.34 X-Migadu-Queue-Id: 1C439BAD8 X-Migadu-Spam-Score: -10.34 X-TUID: 3t4lo3v/6/oa On Tue, Jan 30 2024, Felix Lechner via Bug reports for GNU Guix wrote: > Hi Carlo, > > On Tue, Jan 30 2024, Carlo Zancanaro wrote: > >> certbot can't produce certificates without a functional nginx > > Yes, it can. The option is called --standalone. [1] > > Maybe another way to bootstrap the certificates would be to hold off on > starting Nginx or Apache until all certificates are obtained? Yes but if we do this and there is no internet, nginx won't start right? Carlo's solution allows to have a working nginx even when certbot fails. (If I understand well) > Anyway, that's what I do manually. > > Kind regards > Felix > > [1] https://eff-certbot.readthedocs.io/en/latest/using.html#standalone