| 31 Aug 2021 |
 Kris | for reference: https://github.com/ctrlaltcoop/certbot-dns-hetzner this should make it fairly easy to generate wildcard certs which makes manageing certs a lot easier | 13:02:55 |
 @_xmpp_southerntofu=40militant.es:matrix.org | (i remember it was not always like that) | 13:02:57 |
| @_xmpp_southerntofu=40militant.es:matrix.org | Kris, https://github.com/AnalogJ/lexicon | 13:04:41 |
| @_xmpp_southerntofu=40militant.es:matrix.org | supports many providers including those implementing RFC2136/RFC2137 | 13:04:57 |
| Kris | cool, thanks for sharing | 13:06:23 |
 emorrp1 | indeed, lexicon is what I'm using, there's also octodns and dnscontrol etc. | 13:06:36 |
| emorrp1 | but good find on the certbot integration | 13:06:47 |
| @_xmpp_southerntofu=40militant.es:matrix.org | tbh my view on what we could/should do is going to evolve depending on feedback in #libregaming-sysadmin but it's been a while since i heard anything in there | 13:11:41 |
| Kris | with it it should be failry easy to set up an xmpp server on a subdomain and use SRV routing to get it working on the main domain without having direct control on the server that hosts the main domain | 13:11:52 |
| @_xmpp_southerntofu=40militant.es:matrix.org | anything (almost) will be ok with me as long as we have a consistent strategy and don't just do things randomly until we get our asses bitten :P | 13:12:02 |
| @_xmpp_southerntofu=40militant.es:matrix.org | Kris, yes... or the same using our own DNS primary server :P | 13:12:16 |
| Kris | seems overkill to run your own dns server :p | 13:12:59 |
| @_xmpp_southerntofu=40militant.es:matrix.org | Kris, overkill? takes just a few megabytes of RAM :P | 13:13:26 |
| @_xmpp_southerntofu=40militant.es:matrix.org | (and it's an important part of the internet ecosystem, we should not centralize everything) | 13:13:35 |
| Kris | hmm, since you are renting the domain from a provider anyways, I don't see much point except for some very exotic global load balancing situations | 13:17:10 |
| Kris | and less moving parts to maintain is always better | 13:17:39 |
| @_xmpp_southerntofu=40militant.es:matrix.org | i wouldn't consider DNS a moving part, since it's a foundational piece for internet infrastructure | 13:18:46 |
| @_xmpp_southerntofu=40militant.es:matrix.org | although it receives a lot of disinterest from people like you who treat it like a secondary artifact :P | 13:19:22 |
| @_xmpp_southerntofu=40militant.es:matrix.org | DNS is really cool, despite all of its weaknesses... it's a global decentralized hierarchical-yet-anti-authoritarian database | 13:19:28 |
| Kris | I don't think domain registrars and dns servers are too centralized. the entrie dns system is not really decentalzed, but if you accespt that fact then I don't see the problem having the dns server hosted by the ISP or the domain registrar | 13:19:45 |
| @_xmpp_southerntofu=40militant.es:matrix.org | apart from a common root, everything is fully decentralized | 13:20:46 |
| @_xmpp_southerntofu=40militant.es:matrix.org | but there's a trend with commercial registrars and DoH resolvers to recentralize everything, and its a worrying trend | 13:21:16 |
| Kris | yeah but you always have to referr back to that root, which IMHO does not make it decentralized at all | 13:21:38 |
| @_xmpp_southerntofu=40militant.es:matrix.org | that's a very far-away view of DNS, when you take the delegation process into account, as well as the resolving algorithm, it's in fact a pretty decentralized system where everybody can have many names and noone can seize/invalid them all | 13:23:18 |
| Kris | yes the current ideas to encrypt dns are really making things a lot more centralized. | 13:23:31 |
| Kris | yes, it has some decentralized characteristics, but ultimatly it is much more centralized then the internet itself | 13:24:36 |
| Kris | although IP range allocation on the internet is also pretty centralized | 13:25:06 |
| @_xmpp_southerntofu=40militant.es:matrix.org | well IP allocation are somewhat centralized.. there's only 5 (4?) RIRs handing them out :P | 13:25:13 |
| Kris | yeah | 13:25:21 |
| @_xmpp_southerntofu=40militant.es:matrix.org | it's pretty similar to DNS in terms of politics | 13:25:24 |
