Re: [foreman-dev] CDN for the theforeman.org

2017-12-13 Thread Lukas Zapletal
Great news, thanks. LZ On Tue, Dec 12, 2017 at 4:12 PM, Evgeni Golov wrote: > downloads.theforeman.org and stagingdeb.theforeman.org is now served > via Fastly, enjoy! > > On Tue, Dec 12, 2017 at 3:51 PM, Evgeni Golov wrote: >> Just a quick heads-up for

Re: [foreman-dev] CDN for the theforeman.org

2017-12-12 Thread Evgeni Golov
downloads.theforeman.org and stagingdeb.theforeman.org is now served via Fastly, enjoy! On Tue, Dec 12, 2017 at 3:51 PM, Evgeni Golov wrote: > Just a quick heads-up for everybody. > > We now have the right config and TLS certificates in place to serve > Forman content via

Re: [foreman-dev] CDN for the theforeman.org

2017-12-12 Thread Evgeni Golov
Just a quick heads-up for everybody. We now have the right config and TLS certificates in place to serve Forman content via Fastly, but we did not change any public DNS entries yet. We'll probably start with stagingdeb.tfm.o and downloads.tfm.o soon, and move to the other vhosts some time in

Re: [foreman-dev] CDN for the theforeman.org

2017-11-20 Thread Evgeni Golov
FWIW, deb.d.o runs on a custom LE cert, not on a wildcard, so you can't really compare that. And cdn-fastly.deb.debian.org (which is the "real" Fastly host apt hits) does not have SSL enabled at all. On Mon, Nov 20, 2017 at 11:58 AM, Greg Sutcliffe wrote: > On 20/11/17

Re: [foreman-dev] CDN for the theforeman.org

2017-11-20 Thread Greg Sutcliffe
On 20/11/17 10:08, Lukas Zapletal wrote: > Great, thanks. Before moving on, I'd check if yum/deb accepts these > kind of certificates. I *think* so, but I've heard from security guys > they don't like these certs at all :-) Thanks for the heads up, good to know. I believe Fastly is used by the

Re: [foreman-dev] CDN for the theforeman.org

2017-11-20 Thread Lukas Zapletal
Great, thanks. Before moving on, I'd check if yum/deb accepts these kind of certificates. I *think* so, but I've heard from security guys they don't like these certs at all :-) LZ On Fri, Nov 17, 2017 at 4:14 PM, Greg Sutcliffe wrote: > Hi all, > > I've signed the

Re: [foreman-dev] CDN for the theforeman.org

2017-11-17 Thread Neil Hanlon
Heavy fastly user here :) Let me know what you need (or we can chat on freenode if you want) On Fri, Nov 17, 2017 at 10:14 AM Greg Sutcliffe wrote: > Hi all, > > I've signed the contact with our newest sponsor, Fastly, and we now have > a CDN available for us to use on

[foreman-dev] CDN for the theforeman.org

2017-11-17 Thread Greg Sutcliffe
Hi all, I've signed the contact with our newest sponsor, Fastly, and we now have a CDN available for us to use on our web host. This comes with a single wildcard certificate, so we should be able to use it for all the vhosts on there (yum.tf, deb.tf, etc) Being entirely honest, I've never set up