[07:55:41] there will be a short service interruption on Gitlab for a maintenance [08:04:31] done [09:35:10] hey, vgutierrez. I need to setup TLS termination for an internal service through a proxy, and I thought to use HAProxy. Would you recommend looking at your edge profile or would you recommend looking somewhere else for a small setup? [09:36:36] or if you would recommend looking at something else, nginx or other? [10:17:17] for internal services I thought we've more or less standardized on Envoy? [10:17:31] thanks, that helps me [10:19:14] although I wonder if that's standarized only for stateless services [10:19:38] jynus: are we talking HTTPS? or something else? [10:19:43] yes [10:19:59] as taavi mentioned, envoy is the standard approach for that [10:20:35] I am seeking to setup an alternative to minio, but the current option I am evaluating only has http support [10:20:58] DP uses it as the TLS termination layer of swift right now BTW [10:21:11] mmm [10:21:14] so you already have some use cases inside your team [10:21:17] that's actually not great [10:21:48] :? [10:22:10] the mandate is not reuse storage technology for backups [10:22:38] I guess tecnically the proxy is not part of the storage [10:22:42] envoy is definitely not storage technology [10:23:02] otherwise I see FreeBSD in your near future [10:23:06] ha ha [10:23:09] good point [10:23:26] I will then use swift's setup as guidance, thanks for the help [16:29:35] I'm spinning my wheels on a grub bug and this has me wondering... why grub and not systemd-boot? [16:29:54] I miss LiLo [16:35:27] LiLo & Stretch [16:53:07] google may have answer my question, which is that systemd-boot may only work with uefi [16:54:19] it does only work with UEFI and eventually we'll move fully to UEFI as well (most Partman recipes are fixed and latest Dell Gen10 only support UEFI) [16:55:06] but systemd-boot is not a drop-in replacement for grub and there's a non-trivial level of integration we already have for grub, so it's not an ad hoc fix for this issue [16:55:19] the first step would be to actually report it in Debian anyway