Thursday, February 04, 2021
yunohost@conference.lightwitch.org
February
Mon Tue Wed Thu Fri Sat Sun
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16 17 18 19
20
21
22
23
24 25 26
27
28
             
             
YunoHost support room | Don't ask to ask, just ask ! | Be patient and stay polite with everybody (this is a free software project ran by volunteers) | No answer? Post on the forum: https://forum.yunohost.org | This room is mirrored via Echo1 | Donate: https://liberapay.com/YunoHost

[00:34:55] <mikefordays> Thank you to all yunohost devs and app maintainers! I have been using it a long time, and I hardly ever have to mess with it. I love getting updates regularly. So smooth :D <3
[09:25:07] <irc> <Florent91> Bonjour, impossible de restauré sauvegarde post installation nextcloud(13.0.6), devenue incompatible suite à migration vers yunohost 4. Merci à vous.
[11:10:34] <irc> <s.seigner:fedisphere.net> Bonjour à tous, avez-vous la procédure pour bloquer la possibilité de faire des inscriptions via Element ?
[11:14:04] <irc> <sebik:lavallee.tech> Moi aussi je veux bien cette procédure
[11:38:33] <irc> <tituspijean[m]> s.seigner, sebik, Element n'est qu'une interface pour Matrix, il faut donc plutôt configurer votre instance Synapse.
[11:38:33] <irc> <tituspijean[m]> Si vous ne voulez pas y toucher, vous pouvez jouer avec les permissions de YunoHost, pour n'autoriser que vous et bloquer l'accès aux visiteurs à Element. (pas d'accès = pas de tentative d'inscription).
[11:38:33] <irc> <tituspijean[m]> Mais ça ne bloquera pas les inscriptions distances à Synapse. (et il faut y laisser l'accès public, puisque c'est un système décentralisé). Le paramètre se trouve à `enable_registration: False` dans `/etc/matrix-synapse/homeserver.yaml` mais c'est déjà comme ça par défaut.
[11:40:09] <irc> <tituspijean[m]> (redémarrez synapse ensuite avec `yunohost service restart matrix-synapse`
[11:42:47] <irc> <s.seigner:fedisphere.net> > <@yunohost:matrix.org> [irc] tituspijean[m]: (redémarrez synapse ensuite avec `yunohost service restart matrix-synapse`

Au top !!! Merci à toi !
[11:42:58] <irc> <s.seigner:fedisphere.net> Ça fonctionne nickel chez moi !
[11:44:10] <irc> <s.seigner:fedisphere.net> Et je présume, si demain je veux permettre une réinscription, je remet le paramètre à "enable_registration" à "True" ?
[11:45:16] <irc> <tituspijean[m]> Il me semble bien que oui ;) (mais je ne l'ai jamais fait ^^) N'hésite pas à repasser ici si ça ne marche pas dans l'autre sens.
[11:45:58] <irc> <tituspijean[m]> (en mettant `enable_registration: True`, évidemment ;) )
[11:47:06] <irc> <s.seigner:fedisphere.net> > <@yunohost:matrix.org> [irc] tituspijean[m]: Il me semble bien que oui ;) (mais je ne l'ai jamais fait ^^) N'hésite pas à repasser ici si ça ne marche pas dans l'autre sens.

Super, merci. En faite, j'avais bien identifié le _enable_registration_, mais impossible de trouver son emplacement ! 🥴
[12:53:08] <irc> <ynhuser> Hello, I am trying to configure DNS with my own Domain name
[12:53:44] <irc> <ynhuser> I am bit confused about which IP address I have to give exactly?
[12:55:50] <irc> <s.seigner:fedisphere.net> > <@yunohost:matrix.org> [irc] ynhuser: I am bit confused about which IP address I have to give exactly?

Hi, it's the IP of your server (where you had installed your yunohost instance)
[12:56:12] <irc> <CyBerNetX> ynhuser: hello , your ynh have vpn ? or not ? if not , the DNS has box external ip
[12:57:01] <irc> <CyBerNetX> https://www.whatsmyip.org/
[12:57:04] <irc> <ynhuser> Yunohost domain dns-conf domain.com..when I entered this I have getting the DNS conf file. My question is should same ip address in my register domain zone which is recommended by yunohost
[12:57:28] <irc> <ynhuser> I am using yunohost on rasberrypi 4
[12:59:49] *irc <CyBerNetX> BRB need to reboot
[13:39:46] <irc> <ynhuser> how to connect to yunohost server remotely after setting up dns?
[14:11:14] <irc> <myshahrul> Hi. got error installing lets encrypt for subdomain
[14:11:22] <irc> <myshahrul> https://paste.yunohost.org/raw/uyisojiwiy
[14:13:46] <irc> <myshahrul> nvm.. try re-install for second time, its valid now
[14:13:47] <irc> <myshahrul> -_-
[15:11:42] <irc> <yetijensen:theotherline.io> > <@yunohost:matrix.org> [irc] ynhuser: how to connect to yunohost server remotely after setting up dns?

Make an internal DNS reference in whatever runs DNS locally or manualy edit your hosts file, or add a reflexive NAT rule if it's behind nat.
[15:40:36] <irc> <krisu> I can't renew my Let's Encrypt certificate, is it related to Yunohost version? I haven't upgraded to 4, because it always fails (I have postponed that for now)
[15:40:42] <irc> <krisu> Log: https://bin.privacytools.io/?b108c9504a4591be#7m1YgrcuKPkmsS8UXfByxAg2MsnjnbPvkqWT2eVFJG22
[15:41:40] <irc> <krisu> Sorry, here's correct link: https://bin.privacytools.io/?aa12b1fcea03ba28#7inwVqfsiYNwDgD3ojpN88PV9zWJUZbikDuqry12fxKm
[15:42:38] <irc> <Aleks[m]> krisu: ah this sounds related to the backup system not backing/restoring /etc/yunohost/letsencrypt_account.pem i believe
[15:42:52] <irc> <Aleks[m]> you should force the reinstall of the cert i think this should do it
[15:42:58] <irc> <Aleks[m]> something like `yunohost domain cert-install yourdomain.tld --force`, maybe
[15:43:02] <irc> <krisu> Okay
[15:44:03] <irc> <yetijensen:theotherline.io> I would run cat /etc/yunohost/letsencrypt_account.pem and make sure it ddumps the contents of the pem key to make sure it's actually there
[15:44:12] <irc> <yetijensen:theotherline.io> don't post it here tho
[15:44:21] <irc> <yetijensen:theotherline.io> just make sure it dumps out
[15:44:35] <irc> <krisu41> I
[15:44:45] <irc> <krisu41> I'll try forcing first
[15:46:01] <irc> <krisu41> okay, it's not there
[15:46:09] <irc> <krisu41> no such file
[15:46:31] <irc> <yetijensen:theotherline.io> I would manually install certbot on your box then check again
[15:46:47] <irc> <krisu41> how can I do that?
[15:47:05] <irc> <yetijensen:theotherline.io> do you have SSH access to the box?
[15:47:23] <irc> <krisu41> yes, i'm on it rn
[15:47:47] <irc> <yetijensen:theotherline.io> apt install certbot
[15:48:30] <irc> <yetijensen:theotherline.io> sudo it if you aren't root
[15:48:40] <irc> <krisu41> yeah, sudo su :D
[15:49:16] <irc> <yetijensen:theotherline.io> I try not to do that to avoid breaking something, and sudo each command individually
[15:49:42] <irc> <yetijensen:theotherline.io> like if i'm using putty and right-click to paste something but it goes wrnog, I could end up runnnig a bunch of commands on accident that breaks my env or install
[15:49:49] <irc> <krisu41> yeah, true.
[15:49:49] <irc> <yetijensen:theotherline.io> i've done it twice and lost days of work
[15:50:11] <irc> <Aleks[m]> no
[15:50:14] <irc> <Aleks[m]> don't install certbot
[15:50:15] <irc> <Aleks[m]> wtf
[15:50:20] <irc> <krisu41> some commands just don't work with just sudo some reason
[15:50:29] <irc> <krisu41> oh :/
[15:50:36] <irc> <yetijensen:theotherline.io> it should have installed with the orignal yunohost image
[15:50:40] <irc> <Aleks[m]> yunohost handles the whole letsencrypt story without certbot ... why the hell do you recommend to install certbot ...
[15:51:09] <irc> <Aleks[m]> just fucking run "yunohost domain cert-install yourdomain.tld --force" ... what does this command returns ...
[15:51:33] <irc> <krisu41> ok
[15:51:54] <irc> <Aleks[m]> yetijensen : no, certbot should not have been installed, certbot is not the only way to install lets encrypt cert, and you definitely don't want to use certbot in the context of yunohost, it will mess with the nginx conf etc
[15:52:36] <irc> <yetijensen:theotherline.io> oh, mine seems fine, but I'll have to check my nginx conf fines and make sure
[15:52:59] <irc> <krisu41> it's signed
[15:53:43] <irc> <krisu41> do i uninstall the certbot then if it's pointless?
[15:54:11] <irc> <Aleks[m]> yes
[15:54:18] <irc> <krisu41> oh never mind, it didn't complete :/
[15:55:11] <irc> <krisu41> current log: https://paste.yunohost.org/raw/opasuhowow
[15:56:03] <irc> <Aleks[m]> hmmmm
[15:56:09] <irc> <Aleks[m]> i think that part is due to a bug in old versions yes
[15:56:11] <irc> <Aleks[m]> but actually it worked
[15:56:20] <irc> <Aleks[m]> i don't remember the exact reason
[15:56:29] <irc> <krisu41> O|TI
[15:56:32] <irc> <Aleks[m]> basically it says it failed but should be okay..
[15:56:37] <irc> <Aleks[m]> ?
[15:56:53] <irc> <krisu41> oh yeah, it actually works
[15:57:33] <irc> <krisu41> yeah the error was false, thanks for the help :)
[15:59:17] <irc> <yetijensen:theotherline.io> > <@yunohost:matrix.org> [irc] Aleks[m]: ?

do you know why it worked when forced but not when it wasn't? what had to be ignored from a not-forced run? (asking to learn, not to be a dick)
[16:00:29] <irc> <Aleks[m]> hmpf that's just super technical ... basically cert-install will ask/create the letsencrypt_account key.pem, but the cert-renew command assumes that file already exists
[16:01:06] <irc> <Aleks[m]> but there was an issue (i don't even know if it's fixed) which is that backup/restore doesn't backup/restore this file (so assuming krisu reinstalled its setup from a backup at some point)
[16:01:23] <irc> <krisu41> yes i did
[16:01:24] <irc> <yetijensen:theotherline.io> okay that makes sense
[16:01:41] <irc> <Aleks[m]> so using cert-install fixes the situation ... just gotta add --force because cert-install may refuse to override an already-valid-cert
[16:02:11] <irc> <Aleks[m]> basically i just know this because i already saw a user with similar symptoms and i'm the main author of the corresponding code so
[16:02:52] <irc> <yetijensen:theotherline.io> appreciate the response. I spent years as a windows sysadmin and i'm trying to get branched into linux. starting with a homelab and self-hosted apps to replace as many 3p hosted stuff as i can.
[16:12:16] <irc> <Aleks[m]> sounds like a good way to learn about sysadmin bits indeed ;P
[16:16:54] <irc> <Gilou> haha, quite hardcore, but cool :P
[16:25:26] <irc> <yetijensen:theotherline.io> thanks! my matrix instance is live now, and i have several other services migrated over. Security is my only concern, but i do regular updates and hourly backups too.
[16:27:01] <irc> <Aleks[m]> hourly o.o
[16:27:51] <irc> <Aleks[m]> https://i.imgflip.com/4wojdt.jpg
[17:16:14] <irc> <milosh> Est-il possible d'avoir moins de mail de diagnostic (Je préférerais ne pas ignorer certaines erreurs que je ne veux pas non plus corriger) ?
[17:20:53] <irc> <Aleks[m]> mouarf ben tu peux éditer le cron job qui s'appelle /etc/cron.d/yunohost-diagnosis mais bon ... normalement soit c'est un vrai problème et ça se corrige, soit c'est un faux problème et ça s'ignore ..
[17:22:07] <irc> <yetijensen:theotherline.io> > <@yunohost:matrix.org> [irc] Aleks[m]: hourly o.o

they're diff merges, and consolidate on sunday nights, so they only take up 30-50MB each, depending on how much has changed.
[18:19:43] <irc> <gmilad> Bonsoir tous le monde
[18:22:14] <irc> <Aleks[m]> hello
[18:24:17] <irc> <sytnfh> Hi, all
[18:25:18] <irc> <sytnfh> Actually not a big problem, but since the last upgrade, the formerly-permanent 'yunohost' square disappeared from Nexcloud
[18:26:10] <irc> <Aleks[m]> hmyeah i think a few person reported this issue, for example here https://github.com/YunoHost-Apps/nextcloud_ynh/issues/367
[18:26:33] <irc> <Aleks[m]> probably related to some change in the nginx conf, would need to take time to dig deeper ...
[18:27:33] <irc> <sytnfh> Sorry for missing previous reports. I'll have a look. Thx!
[18:28:07] <irc> <Aleks[m]> i mean not you have to but some people maintaining the app or knowledgeable enough about nginx in the context of yunohost...
[18:30:09] <irc> <sytnfh> :o( Don't know anything to nginx config, but reading config files with a candid look sometimes may help...
[18:55:55] <irc> <peter_pirx:matrix.org> Hello.
_Something_ happened (nobody knows what) and my Peertube instance now shows bad gateway error. Other apps are doing just fine. General log shows nothing. Peertube is visible on the application list, but _not_ in the user interface.
[18:56:32] <irc> <peter_pirx:matrix.org> Shuld I dig deeper, or perhaps there is a way to reinstall it without loosing accounts and files?
[19:04:42] <irc> <Aleks[m]> digging first is better than just randomly reinstalling ...
[19:05:40] <irc> <Aleks[m]> does the yunohost diagnosis complains about anything ?
[19:17:43] <irc> <peter_pirx:matrix.org> > <@yunohost:matrix.org> [irc] Aleks[m]: does the yunohost diagnosis complains about anything ?

crapload of stuff: https://paste.yunohost.org/raw/zadexazucu
My problem is that I am just a seasoned user and my sysadmin friend got stuck with his paid job 😕
[19:19:30] <irc> <Aleks[m]> peter_pirx: alrighty, then maybe let's try to go in Services > peertube, and try to restart the service
[19:19:41] <irc> <Aleks[m]> (even if it's apparently up, but who knows)
[19:21:00] <irc> <peter_pirx:matrix.org> It reported up, I checked first thing. But yes, after restat it is visible now.
[19:21:21] <irc> <peter_pirx:matrix.org> Checking it...
[19:22:01] <irc> <peter_pirx:matrix.org> Aaand... YES!
[19:22:35] <irc> <peter_pirx:matrix.org> Thanks a lot. I will remember next time to restart a service, even if it shows green.