# I am the Watcher. I am your guide through this vast new twtiverse.
#
# Usage:
# https://watcher.sour.is/api/plain/users View list of users and latest twt date.
# https://watcher.sour.is/api/plain/twt View all twts.
# https://watcher.sour.is/api/plain/mentions?uri=:uri View all mentions for uri.
# https://watcher.sour.is/api/plain/conv/:hash View all twts for a conversation subject.
#
# Options:
# uri Filter to show a specific users twts.
# offset Start index for quey.
# limit Count of items to return (going back in time).
#
# twt range = 1 16
# self = https://watcher.sour.is/conv/4gtuzoq
managing SSL certificates are a PITA š¤£
managing SSL certificates are a PITA š¤£
@prologic Thatās right, but it got a looooooooooooot easier thanks to letsencrypt. š
@prologic Thatās right, but it got a looooooooooooot easier thanks to letsencrypt. š
@prologic Thatās right, but it got a looooooooooooot easier thanks to letsencrypt. š
Oh Let's Encrypt is _incredibly easy_! What I was referring to was managing your own CA, intermediate CA, signing certs, and all the fun that comes with š¤£
Oh Let's Encrypt is _incredibly easy_! What I was referring to was managing your own CA, intermediate CA, signing certs, and all the fun that comes with š¤£
@prologic Oh, god, no. Yes. Running your own CA is a nightmare. You canāt avoid that?
@prologic Oh, god, no. Yes. Running your own CA is a nightmare. You canāt avoid that?
@prologic Oh, god, no. Yes. Running your own CA is a nightmare. You canāt avoid that?
I _think_ we can if we just use a "wildcard cert". I _honestly_ don't understand what the benefit of using Vault is in this case, where we can just use a single wildcard cert and just shove that in a Traefik ingress load balancer and be done with it.
I _think_ we can if we just use a "wildcard cert". I _honestly_ don't understand what the benefit of using Vault is in this case, where we can just use a single wildcard cert and just shove that in a Traefik ingress load balancer and be done with it.
@prologic @movq Before switching to LE, we ran our own CA. Once setup, three shell scripts for a new cert, renewal and revocation were all we needed. And a weekly cron job reporting certs which were about to expire.
@movq @lyse Yeah itās following what someone else put together thatās the hard part š¤£
@movq @lyse Yeah itās following what someone else put together thatās the hard part š¤£