Saturday, September 23, 2023
support@conference.yunohost.org
September
Mon Tue Wed Thu Fri Sat Sun
        1
2
3
4
5
6
7
8
9
10
11
12
13 14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
 
             

[00:10:38] <orhtej2> > <@mike6545:matrix.org> There are 4 different phpX.Y-fpm versions installed by my yunohost instance, I will check the logs of the 4 versions to look for traces of nextcloud

8.1 https://github.com/YunoHost-Apps/nextcloud_ynh/blob/0f16f720bd6bfdd98e9634692e0acfc70e986192/scripts/_common.sh#L7C5-L7C5
[00:11:23] <orhtej2> > <amu> Cannot find anything relevant in the logs

What app is that? Or at least what technology powers it
[00:11:59] <orhtej2> > <amu> > this is generic http.cat/500
> I don't understand

Nvm, I'm just saying that without exact app error its hard to reason about the cause
[00:12:56] <orhtej2> Otoh you mentioned exact shapes of request and response before, do they look any different now?
[07:48:37] <tituspijean> amu: we *really* need to know which app is displaying the error and its detailed logs when it throws the error.

You've delved blindly in the SSO realm but it may not be the culprit.
Delving further, orhtej2 forgot to make you reload ssowat: `sudo yunohost app ssowatconf`.
[09:56:14] <amu> tituspijean, orhtej2 : Thanks!
[09:56:20] <amu> What am I doing wrong?
[09:56:27] <amu> Please see this https://paste.yunohost.org/conotimahu.cs
[09:58:30] <amu> I have tried different things but I don't manage to get rid of this error. I guess it must be something very easy
[10:00:10] <amu> And the app is this one: https://gancio.org/
[10:05:49] <orhtej2> > <amu> Please see this https://paste.yunohost.org/conotimahu.cs

You need extra set of {} around the file
[10:08:59] <amu> Yes, I also tried that.
[10:09:28] <amu> Have a look https://paste.yunohost.org/sutejoqexu.cs
[10:10:29] <amu> It keeps complaining : (
[10:52:54] <orhtej2> > <amu> It keeps complaining : (

No clue, perhaps remove the comments?
[10:53:34] <amu> Let's see... I didn't try that
[10:56:11] <amu> oh, it was just that! it didn't complain! Let's see now if the problem is solved...
[10:57:03] <orhtej2> Reload both nginx and ssowat first
[11:03:44] <amu> How do I reload ssowat?
[11:39:13] <amu> Ah, ok, reloading ssowhat is 'yunhost app ssowatconf'
[11:39:49] <amu> The problem persists
[11:56:46] <lapineige> > <amu> And the app is this one: https://gancio.org/

Very interresting app, I'm glad to discover it 🙂
[11:56:52] <lapineige> I'll see if I can package it 🙂
[11:58:20] <amu> Yes, that'd be great!
[12:04:03] <amu> lapineige: In the case you mean you are going to do it now please let me know. In the meantime I am trying to fix this problem because I need to have the app working by tormorrow.
[12:06:24] <lapineige> I do.
But even if I tried now, don't bet on a stable version to be done until tomorrow. This would require some testing
[12:06:53] <lapineige> And there is a good chance that the issue you're facing will be encountered by the package too
[12:07:29] <amu> Ok, I understand. Thank you very much anyway.
[12:19:25] <lapineige> Did you make any special config, such as a systemd service or a Gancio config adjustments ? It would save me time
[12:23:11] <lapineige> The good news is : it sounds fairly easy to package
[12:39:18] <lapineige> Very surprisingly there is an (empty) "Yunohost" folder in the source code 🤔
[12:55:33] <amu> > Did you make any special config, such as a systemd service or a Gancio config adjustments ?
I installed it on a Debian LXC container, just following the instructions for Debian
[12:56:05] <amu> > The good news is : it sounds fairly easy to package
Cool!
[12:56:58] <orhtej2> > Very surprisingly there is an (empty) "Yunohost" folder in the source code 🤔

It's submodule
[13:00:56] <lapineige> What do you mean ?
[13:01:12] <lapineige> > <amu> > Did you make any special config, such as a systemd service or a Gancio config adjustments ?
> I installed it on a Debian LXC container, just following the instructions for Debian

Ok so no special change in the config ?
Great, it's easier
[13:07:10] <lapineige> amu: Can you show me what's in you config.json ?
[13:11:24] <lapineige> amu: Can you show me what's in your config.json ?
[13:12:32] <amu> Going
[13:13:42] <amu> Do you mean in the /etc/ssowat directory of the yunohost server?
[13:18:02] <amu> If so, please tell me exactly what you would need from that file
[13:20:31] <lapineige> No I mean the config.json file in you Gancio installation folder. [This](https://gancio.org/install/config) doesn't provide a full example
[13:28:43] <amu> https://paste.yunohost.org/suroderani.json
[13:29:39] <amu> What is that port on line 6?
[13:30:59] <amu> I'm wondering if that could be the problem, I have not allowed communication to that port
[13:34:19] <lapineige> You found it 🙂
[13:35:17] <lapineige> If it's installed with Yunohost, we prepare a setup to tell Yunohost to allow the use of that port (for that app), and the Nginx reverse proxy config is adjusted so that any communication incomming to that app is proxied to that *internal* port
[13:57:11] <amu> Too good to be true : (
[13:57:27] <amu> I open the port, but the problem is still there
[13:57:52] <lapineige> You need to setup the redirection in Nginx
[13:57:57] <amu> By the way, it's the ACAB port!
[13:58:45] <lapineige> These devs are some funny fellows 😉
[13:59:31] <amu> Really, in nginx?
[13:59:37] <amu> Plese guide me
[14:00:49] <amu> The thing is that I use a VPN for its SSH connection, so I added this 13120 port to the allowed ports on the VPN
[14:01:50] <amu> I mean this gancio instance will be reachable through the Yunohost Redirect app, but SSH-reachable through VPN
[14:03:36] <amu> I don't know about web stuff, I thought this reverse-proxy thing was only for web communications. Can it redirect other services/ports too?
[14:10:13] <amu> I think there's no need to open that port
[14:10:31] <amu> I have checked other instances https://gancio.org/instances
[14:10:42] <amu> And it is not open
[14:15:44] <lapineige> > <amu> Plese guide me

I can't, and won't, I'm making it once for the app package, it's easier and will be done for good 🙂
[14:15:56] <lautre> I don't think nginx works on it.
If you want make redirections it's better to use iptables or nftables
[14:16:35] <lapineige> More than that: do not expose publicly that port. That creates a security issue. It's for internal use only.
[14:29:59] <amu> What I configured was iptables in the VPN. But ok, I'll undo it.
[14:30:31] <amu> I don't understand what 'internal use' means
[14:33:11] <Aleks (he/him/il/lui)> Internal means inside the machine, it's for communication between programs inside the machine (nginx and the app), there's no need to open the port outside or it would create a security issue
[14:34:29] <Aleks (he/him/il/lui)> It's like if your server is a company, you want your employees to chat with each other and probably absolutely not allow anybody on the internet to access the employee chat
[14:34:30] <amu> Thanks!
[14:36:34] <amu> What's the name of that type of ports?
[14:36:52] <amu> internal?
[14:37:20] <lapineige> I don't think there is a name
[14:37:33] <lapineige> But it's a port allowed for localhost communication/origin
[14:37:45] <lapineige> Usually configured in a local proxy, such as Nginx
[14:38:13] <amu> Thanks
[14:38:36] <lapineige> (the app contacts *localhost*, Nginx handles the request, and redirect it to *localhost:port* where the app (service/daemon/whatever) is connected and listening)
[14:43:27] <Norbert> Hi there! Is someone here who runs a Synapse instance within YunoHost?
[14:44:52] <lapineige> Many of us connected here, yes 🙂
[14:45:35] <amu> Thanks, now I undertand a bit more the results of ss -tulpn
[14:48:39] <Norbert> https://aria.im/_matrix/media/v1/download/tchncs.de/021c13029cb2e32a5be9156a7ce7081e0cd82d5e
[14:49:30] <Norbert> If I click on the green Sy-button I get a "Bad URL" as result. Should it lead to an Synapse administration GUI?
[14:54:18] <lapineige> > <@nachdenker:tchncs.de> If I click on the green Sy-button I get a "Bad URL" as result. Should it lead to an Synapse administration GUI?

No. That's the `Synapse Admin` package.
The synapse server doesn't come with a web frontend. It's only there for Matrix clients to connect to. Yunohost shows an app icon for… let's say legacy reasons.
[14:54:28] <lapineige> Here you go amu 😃
https://github.com/YunoHost-Apps/gancio\_ynh/pull/1 🎉
_not ready for testing yet_

I'm happy to tell you that it's the first app ever packaged with the shiny App Generator I'm currently working on 🙂 (yes, I'm throwing me flowers 🥀).
That was a good occasion to do a proper testing, lots of improvements where added 😄
[14:56:19] <Norbert> > No. That's the `Synapse Admin` package.
> The synapse server doesn't come with a web frontend. It's only there for Matrix clients to connect to. Yunohost shows an app icon for… let's say legacy reasons.

Thank you!
[14:56:40] <amu> lipineige: Wow, that was fast! But I don't understand... can I test it? If so... how?
[14:58:35] <amu> I understand that was just an announcement of what is coming...
[14:59:10] <amu> Plese let me know when I can test it
[14:59:49] <lapineige> yeah sure I'll ping you 😉
[14:59:59] <amu> Thank you!
[15:02:09] <amu> By the way, libera.chat took down its bridge to Matrix (I support their decision), but now there is no connectioni between XMPP and IRC. Is it planned to connect them somehow sometime?
[15:12:05] <lapineige> it's complicated, we don't have a precise answer for now
[15:31:36] <Sean> That’s unfortunate…as a person who generally likes irc more than most other chat platforms that matrix bridges into it is a pretty nice bonus
[16:13:47] <lapineige> There is no easy solution unfortunatly
[16:25:13] <Mike> > An easier way : check if the there is a `nextcloud.conf` file in `/var/php/fpm/VERSION/pool.d` (not 100% if it's the right order)

There is no `php` folder in `/var`
[16:36:27] <lapineige> An easier way : check if the there is a `nextcloud.conf` file in `/etc/php/fpm/VERSION/pool.d` (not 100% if it's the right order)
[16:36:45] <lapineige> Mike: `/etc`, sorry ^^
[16:38:30] <Mike> > Mike: `/etc`, sorry ^^

Very good technique, now I know nextcloud uses php fpm 8.1
[19:52:16] <amu> > theoretically you can tweak ssowat.conf as per https://forum.yunohost.org/t/disable-ssowat-for-custom-url/15491/2 and see if it helps
Here it seems to skip sso in a different way: https://yunohost.org/oc/torhiddenservice#avoid-sso-redirection-opt
[21:10:02] <ChriChri> Migrated my RockPro64 NAS case Armbian yunohost successfully from eMMC to Software-RAID running of SATA SSDs. 🙃
https://git.sr.ht/~chrichri/RockPro64_u-boot_SATA_software_RAID_howto/tree/main/item/README.md
[21:16:47] <lapineige> Please share that on the forum 😉
[21:21:32] <lapineige> amu: I've got a running version of `Gancio` on my server. Not tested at all, but well, I have the web interface showned
[21:21:53] <lapineige> I will try to reproduce it in the official package
[21:23:52] <lapineige> It's even visible from Mastodon
[21:25:53] <amu> If possible, please enter as admin, configure email, create a user, open the email message the user receives and follow the link it contains so that the user sets their password. And then let me know if you see the "Something went wrong" banner : )
[21:26:21] <amu> By the way, thank you for such good news!!
[21:32:31] <ChriChri> > Please share that on the forum 😉

Go ahead 😇. I'm busy finding out why it didn't work with a different controller 🔎🔨
[21:34:28] <amu> By the way, I had a problem when configuring email on gancio, port 587 (the one Yunohost uses) did not work, 465 did. I wanted to use my yunohost email so I ended up installing and configuring Sendmail on the gancio machine (because in the settings there's an option to send through Sendmail).
[21:34:49] <amu> Just in case it happens to you...
[21:35:35] <lapineige> > <@chrichri:librem.one> Go ahead 😇. I'm busy finding out why it didn't work with a different controller 🔎🔨

I'm not going to do the work for you…
My point is : this is a support room, and while this could help some users, it's a niche use case so it's unlikely, and this is not made for archival, so it will be lost in the echo very soon. That would be a lot more useful in the forum 🙂
[21:37:21] <lapineige> > <amu> By the way, I had a problem when configuring email on gancio, port 587 (the one Yunohost uses) did not work, 465 did. I wanted to use my yunohost email so I ended up installing and configuring Sendmail on the gancio machine (because in the settings there's an option to send through Sendmail).

Yes emails are not working. I need to figure it out. How did you configure it to use your emails ?
[21:38:06] <amu> lapineige: The last comments on this issue are mine: https://framagit.org/les/gancio/-/issues/192
[21:39:11] <amu> I followed this guide: https://www.cloudbooklet.com/how-to-install-and-setup-sendmail-on-debian-10/
[21:39:30] <amu> And also installed sasl2-bin and libsasl2-modules
[21:40:59] <lapineige> So you didn't configure anything on the app side ?
[21:44:43] <amu> I did many tests to make the email work. It worked ok when using email servers that uses 465 for SMTP, but it did not work for email servers using 587 for SMTP (as yunohost does). So I ended up making a basic installation and configuration of Sendmail. In the Admin panel of gancio, when setting email, you will see a option to let Gancio send emails through Sendmail.
[21:45:27] <amu> I'm not sure if I'm answering your question...
[21:49:37] <lapineige> You do 🙂
How did you create that admin account ? How do you connect to it ?
[21:50:42] <amu> I did not do that part, let me ask my friend, they did it.
[21:55:57] <amu> I'm afraid zhe's not online now...
[21:58:09] <lapineige> no hurry 🙂
[22:04:50] <amu> lapineige: zhe is! Zhe said both admin's username and password are created automatically by Gancio in its initial configuration, and gives them to you. And once you log in you can change the password.
[22:11:40] <amu> I don't understand the question. You mean to override the username of the admin?
[22:12:15] <amu> Gancio lets you create new users as admins.
[22:13:10] <amu> Do you want me to check if I can delete the current admin? (I'd create a different one and do a backup first, just in case)
[22:14:58] <amu> I'm not sure I understood the question.
[22:16:52] <lapineige> Does that person knows if we can override them ?
[22:17:57] <lapineige> The thing is, if this admin user + pwd is generated by the app, it's hard for us to use it in Yunohost… while if I could only change a config file or pass a command to create such an user, it would be easier
[22:57:55] <amu> I understand. I cannot code, but if I can help somehow, let me know.