superconfig/2configs/services/flix/ at 7dac2206bf56d9cc0f4e48c1d26c2d1a0704c464 · lass.pds.lassul.us/superconfig · Tangled

lass.pds.lassul.us / superconfig

0

This repository has no description

0

superconfig / 2configs / services / flix

5 files

at 7dac2206bf56d9cc0f4e48c1d26c2d1a0704c464

lassulus flix: drop the jelly.r ACME cert 4w ago

container-host.nix

services.flix: pin flix upstream to yellow retiolum ip4 jellyfin only listens on IPv4, but yellow.r also resolves to its retiolum AAAA. nginx round-robined both addresses, so requests hitting the v6 upstream failed and poisoned the upstream group, causing intermittent 502 'no live upstreams' on flix.lassul.us. Also drop the stale duplicate flix vhost from container-host.nix.

1 month ago

flix: drop the jelly.r ACME cert The krebs-CA cert expired ~594 days ago and acme-order-renew-jelly.r keeps failing (exit 11, negative remaining duration), leaving yellow degraded. jellyfin is reachable over plain http on jelly.r and directly on :8096.

1 month ago

flix/ipfs: drop pin-add lock (concurrent --nocopy is idempotent) The flock around `ipfs add --nocopy` in the watcher and reconcile sweep guarded against a corruption that was assumed, never observed: it was added defensively alongside the reconcile sweep and never exercised (the MFS deadlock masked it). Tested it directly on kubo 0.40.1: 10 trials of two concurrent `ipfs add --nocopy --pin` on the same 16MB file, no lock. Every trial produced the same CID, a complete DAG (refs -r), and byte-identical content (cat | sha256sum). Concurrent same-file --nocopy adds are idempotent, so the lock guards nothing -- remove it.

3 months ago

ipfs.lassul.us: pin service only calculates hash, never pins

4 months ago

services.flix: pin flix upstream to yellow retiolum ip4 jellyfin only listens on IPv4, but yellow.r also resolves to its retiolum AAAA. nginx round-robined both addresses, so requests hitting the v6 upstream failed and poisoned the upstream group, causing intermittent 502 'no live upstreams' on flix.lassul.us. Also drop the stale duplicate flix vhost from container-host.nix.

1 month ago