[ANN] Mattermost and layer:lets-encrypt
With a much appreciated recent contribution from James Beedy (bdx) our Mattermost charm cs:~cmars/mattermost[1] is working again! This encouraged me to add some followup improvements to the charm to make it even easier to deploy with secure defaults -- automatic registration with Let's Encrypt. I've broken out the Let's Encrypt integration to a separate reactive charm layer, layer:lets-encrypt[2], which extends layer:nginx. Practically any charm that uses layer:nginx should be able to use layer:lets-encrypt. When a config option `fqdn` is set, the layer will automatically register with LE and obtain certificates. With the epic release of Juju 2.0 this past week -- the Mattermost charm depends on several features new in Juju 2 -- it's now ready to share. I'm operating a deployment of cs:~cmars/mattermost at https://live.cmars.tech/. If you'd like to try it out, here's an invite: https://live.cmars.tech/signup_user_complete/?id=wccpdu6dqp88mjkqbngnws6ohc -Casey [1] https://jujucharms.com/u/cmars/mattermost https://github.com/cmars/juju-charm-mattermost [2] https://github.com/cmars/layer-lets-encrypt -- Juju mailing list Juju@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/juju
Re: [ANN] Mattermost and layer:lets-encrypt
This is very awesome! On Sat, Oct 15, 2016, 12:07 PM Casey Marshall wrote: > With a much appreciated recent contribution from James Beedy (bdx) our > Mattermost charm cs:~cmars/mattermost[1] is working again! > > This encouraged me to add some followup improvements to the charm to make > it even easier to deploy with secure defaults -- automatic registration > with Let's Encrypt. > > I've broken out the Let's Encrypt integration to a separate reactive charm > layer, layer:lets-encrypt[2], which extends layer:nginx. Practically any > charm that uses layer:nginx should be able to use layer:lets-encrypt. When > a config option `fqdn` is set, the layer will automatically register with > LE and obtain certificates. > > With the epic release of Juju 2.0 this past week -- the Mattermost charm > depends on several features new in Juju 2 -- it's now ready to share. > > I'm operating a deployment of cs:~cmars/mattermost at > https://live.cmars.tech/. If you'd like to try it out, here's an invite: > https://live.cmars.tech/signup_user_complete/?id=wccpdu6dqp88mjkqbngnws6ohc > > -Casey > > [1] https://jujucharms.com/u/cmars/mattermost > https://github.com/cmars/juju-charm-mattermost > [2] https://github.com/cmars/layer-lets-encrypt > -- > Juju mailing list > Juju@lists.ubuntu.com > Modify settings or unsubscribe at: > https://lists.ubuntu.com/mailman/listinfo/juju > -- Juju mailing list Juju@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/juju
Re: [ANN] Mattermost and layer:lets-encrypt
Very nice, thanks! I look forward to using the lets-encrypt layer for some of my personal stuff. On 16 October 2016 at 10:07, Adam Stokes wrote: > This is very awesome! > > On Sat, Oct 15, 2016, 12:07 PM Casey Marshall < > casey.marsh...@canonical.com> wrote: > >> With a much appreciated recent contribution from James Beedy (bdx) our >> Mattermost charm cs:~cmars/mattermost[1] is working again! >> >> This encouraged me to add some followup improvements to the charm to make >> it even easier to deploy with secure defaults -- automatic registration >> with Let's Encrypt. >> >> I've broken out the Let's Encrypt integration to a separate reactive >> charm layer, layer:lets-encrypt[2], which extends layer:nginx. Practically >> any charm that uses layer:nginx should be able to use layer:lets-encrypt. >> When a config option `fqdn` is set, the layer will automatically register >> with LE and obtain certificates. >> >> With the epic release of Juju 2.0 this past week -- the Mattermost charm >> depends on several features new in Juju 2 -- it's now ready to share. >> >> I'm operating a deployment of cs:~cmars/mattermost at >> https://live.cmars.tech/. If you'd like to try it out, here's an invite: >> https://live.cmars.tech/signup_user_complete/?id= >> wccpdu6dqp88mjkqbngnws6ohc >> >> -Casey >> >> [1] https://jujucharms.com/u/cmars/mattermost >> https://github.com/cmars/juju-charm-mattermost >> [2] https://github.com/cmars/layer-lets-encrypt >> -- >> Juju mailing list >> Juju@lists.ubuntu.com >> Modify settings or unsubscribe at: https://lists.ubuntu.com/ >> mailman/listinfo/juju >> > > -- > Juju mailing list > Juju@lists.ubuntu.com > Modify settings or unsubscribe at: https://lists.ubuntu.com/ > mailman/listinfo/juju > > -- Juju mailing list Juju@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/juju
Re: [ANN] Mattermost and layer:lets-encrypt
On Sun, Oct 16, 2016 at 12:07 AM Casey Marshall < casey.marsh...@canonical.com> wrote: > With a much appreciated recent contribution from James Beedy (bdx) our > Mattermost charm cs:~cmars/mattermost[1] is working again! > > This encouraged me to add some followup improvements to the charm to make > it even easier to deploy with secure defaults -- automatic registration > with Let's Encrypt. > > I've broken out the Let's Encrypt integration to a separate reactive charm > layer, layer:lets-encrypt[2], which extends layer:nginx. Practically any > charm that uses layer:nginx should be able to use layer:lets-encrypt. When > a config option `fqdn` is set, the layer will automatically register with > LE and obtain certificates. > Nice, thank you. This will be useful for some stuff I'm working on. It would be nice if the nginx charm supported (included) this by default. Is there a reason it shouldn't? Having to create a separate charm that includes both means you then have to track changes. With the epic release of Juju 2.0 this past week -- the Mattermost charm > depends on several features new in Juju 2 -- it's now ready to share. > > I'm operating a deployment of cs:~cmars/mattermost at > https://live.cmars.tech/. If you'd like to try it out, here's an invite: > https://live.cmars.tech/signup_user_complete/?id=wccpdu6dqp88mjkqbngnws6ohc > > -Casey > > [1] https://jujucharms.com/u/cmars/mattermost > https://github.com/cmars/juju-charm-mattermost > [2] https://github.com/cmars/layer-lets-encrypt > -- > Juju mailing list > Juju@lists.ubuntu.com > Modify settings or unsubscribe at: > https://lists.ubuntu.com/mailman/listinfo/juju > -- Juju mailing list Juju@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/juju
Re: [ANN] Mattermost and layer:lets-encrypt
On Mon, Oct 24, 2016 at 3:51 AM, Andrew Wilkins < andrew.wilk...@canonical.com> wrote: > On Sun, Oct 16, 2016 at 12:07 AM Casey Marshall < > casey.marsh...@canonical.com> wrote: > >> With a much appreciated recent contribution from James Beedy (bdx) our >> Mattermost charm cs:~cmars/mattermost[1] is working again! >> >> This encouraged me to add some followup improvements to the charm to make >> it even easier to deploy with secure defaults -- automatic registration >> with Let's Encrypt. >> >> I've broken out the Let's Encrypt integration to a separate reactive >> charm layer, layer:lets-encrypt[2], which extends layer:nginx. Practically >> any charm that uses layer:nginx should be able to use layer:lets-encrypt. >> When a config option `fqdn` is set, the layer will automatically register >> with LE and obtain certificates. >> > > Nice, thank you. This will be useful for some stuff I'm working on. > > It would be nice if the nginx charm supported (included) this by default. > Is there a reason it shouldn't? Having to create a separate charm that > includes both means you then have to track changes. > I came to the conclusion that layer:nginx and layer:lets-encrypt should each do one thing well for better reuse. layer:lets-encrypt no longer includes layer:nginx, but they're easy to use together. layer:lets-encrypt now just obtains certs, which you can then use in nginx templates -- or in any web application configuration, really. See the latest README[1] for up-to-date usage. -Casey [1] https://github.com/cmars/layer-lets-encrypt > > With the epic release of Juju 2.0 this past week -- the Mattermost charm >> depends on several features new in Juju 2 -- it's now ready to share. >> >> I'm operating a deployment of cs:~cmars/mattermost at >> https://live.cmars.tech/. If you'd like to try it out, here's an invite: >> https://live.cmars.tech/signup_user_complete/?id= >> wccpdu6dqp88mjkqbngnws6ohc >> >> -Casey >> >> [1] https://jujucharms.com/u/cmars/mattermost >> https://github.com/cmars/juju-charm-mattermost >> [2] https://github.com/cmars/layer-lets-encrypt >> -- >> Juju mailing list >> Juju@lists.ubuntu.com >> Modify settings or unsubscribe at: https://lists.ubuntu.com/ >> mailman/listinfo/juju >> > -- Juju mailing list Juju@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/juju
Re: [ANN] Mattermost and layer:lets-encrypt
On Mon, Oct 24, 2016 at 1:22 PM, Casey Marshall < casey.marsh...@canonical.com> wrote: > I came to the conclusion that layer:nginx and layer:lets-encrypt should > each do one thing well for better reuse. layer:lets-encrypt no longer > includes layer:nginx, but they're easy to use together. > Best thing i've heard on this list in weeks Casey! +1 to that sentiment about layer encapsulation. Charles Butler - Juju Charmer Come see the future of modeling your datacenter: http://jujucharms.com -- Juju mailing list Juju@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/juju
Re: [ANN] Mattermost and layer:lets-encrypt
On Tue, Oct 25, 2016 at 2:22 AM Casey Marshall wrote: > On Mon, Oct 24, 2016 at 3:51 AM, Andrew Wilkins < > andrew.wilk...@canonical.com> wrote: > > On Sun, Oct 16, 2016 at 12:07 AM Casey Marshall < > casey.marsh...@canonical.com> wrote: > > With a much appreciated recent contribution from James Beedy (bdx) our > Mattermost charm cs:~cmars/mattermost[1] is working again! > > This encouraged me to add some followup improvements to the charm to make > it even easier to deploy with secure defaults -- automatic registration > with Let's Encrypt. > > I've broken out the Let's Encrypt integration to a separate reactive charm > layer, layer:lets-encrypt[2], which extends layer:nginx. Practically any > charm that uses layer:nginx should be able to use layer:lets-encrypt. When > a config option `fqdn` is set, the layer will automatically register with > LE and obtain certificates. > > > Nice, thank you. This will be useful for some stuff I'm working on. > > It would be nice if the nginx charm supported (included) this by default. > Is there a reason it shouldn't? Having to create a separate charm that > includes both means you then have to track changes. > > > I came to the conclusion that layer:nginx and layer:lets-encrypt should > each do one thing well for better reuse. layer:lets-encrypt no longer > includes layer:nginx, but they're easy to use together. > > layer:lets-encrypt now just obtains certs, which you can then use in nginx > templates -- or in any web application configuration, really. See the > latest README[1] for up-to-date usage. > OK, indeed sounds better than including nginx. I'll have a play with it soon. Cheers, Andrew > -Casey > > [1] https://github.com/cmars/layer-lets-encrypt > > > > With the epic release of Juju 2.0 this past week -- the Mattermost charm > depends on several features new in Juju 2 -- it's now ready to share. > > I'm operating a deployment of cs:~cmars/mattermost at > https://live.cmars.tech/. If you'd like to try it out, here's an invite: > https://live.cmars.tech/signup_user_complete/?id=wccpdu6dqp88mjkqbngnws6ohc > > -Casey > > [1] https://jujucharms.com/u/cmars/mattermost > https://github.com/cmars/juju-charm-mattermost > [2] https://github.com/cmars/layer-lets-encrypt > -- > Juju mailing list > Juju@lists.ubuntu.com > Modify settings or unsubscribe at: > https://lists.ubuntu.com/mailman/listinfo/juju > > -- Juju mailing list Juju@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/juju