sudo finger juxt ?

o/

lol

morning all, im sick today 😞

That sucks :( (And if the world was just you would be now owed a day of summer in winter, in lieu)

morning

get well soon @guy

I felt rough yesterday. Not 💯 today but a bit better. Plague maybe?

not again

can't be the plague if you feel (even a little bit) better today.

As a contractor I have to come in even if I feel rough (like today)

Gotta get paid help the clients achieve their goals

do you have bubos @otfrom?

@mccraigmccraig yes!

and a rattling cough!

(I really have neither of these)

you should probably go paint a big red cross on your front door or something, just in case

not a bad idea

Bore da

@otfrom wear a placard, ring a bell and chant warnings.

pest! pest! pest!

Morning

@agile_geek I already have people pointing at me in the streets and shouting "unclean! unclean!"

I think pomegranate is the thing you need on your classpath to load maven libs on your repl without restarting it

Morning

Morning

👋

I believe there's going to be some clojure/kafka talks at Funding Circle on November 22nd. I will attempt to create some order to my incoherent thoughts about testing asynchronous systems by talking about it in front of people with reference to badly drawn slides.

are you thinking about testing async systems at a high pan-component level @cddr or a lower unit-test kinda level ?

High level. I'll be talking about our "test-machine" that accepts commands and executes them against the system under test while reading the output back into an in-memory journal backed by a clojure ref that helps us define when the test has ended in terms of the output that has been observed.

hi all, is there a gRPC equivalent in clojure and also the equivalent of the context package in go?

morrrrrning!

#!/usr/bin/env bash

readarray -t instances < <(aws ec2 describe-instances --output json | jq -r '.Reservations[] | .Instances[] | [.PrivateDnsName, ([.Placement.AvailabilityZone, ([.Tags[] | select(.Key == "Name") | .Value][0])] | join(" "))] | .[]')

ip=`dialog --clear --stdout --menu "Where to connect?" 0 0 0 "${instances[@]}"`

if [ $? -eq 0 ]; then
	ssh -J bastion.in.your.cloud "$ip"
fi

@dominicm - That's interesting... Are you automating SSH to EC2 via Bastion?

it's ssh via a JumpHost @maleghast - giving you a dialog with all your ec2 hosts in to select from

JumpHost == Bastion, no?

googles - oh yeah 🙂

😄

tbh, I can probably drop the -J flag force users to setup:

Host *.eu-west-1.compute.internal
  ProxyJump your.proxy.jump

While you are here... I have a *.http://cervest.com SSL cert, but when I try to point a subdomain at an ALB with that cert installed the address just doesn't "work" - it never connects... Am I doing something stoopid?

sounds unrelated to ssl, more like the target of the alb isn't setup?

well, if I use http it gets routed

😞

I suppose it might__ just be me...

http://decisionvest-demo.cervest.com - works https://decisionvest-demo.cervest.com - doesn't work. The ALB is set up EXACTLY the same way as: http://cervest.com https://cervest.com but that works... 😞

by hand setup? 😛

Yes, and yes I realise that I should be using Terraform / CF, but honestly I've checked and re-checked.

I found something that I don't really understand about ACM needing the certificate to have the alternative names explicitly enumerated for them to work on an ALB / ELB, but I found other info that says that's balls.

😞

I've not had to do that, for sure

looks like it's not even initiating a connection, according to curl -v

The reason we sprung for a wildcard SSL cert was so that we could have subdomains a-plenty on that domain.

We've had this stuff sit there forever when we don't have a listener on https

wildcards shouldn't be a problem @maleghast - we use a wildcard ssl cert for all our backend services with both application and classic ELB instances

I know what it is / was

I am such a fucking idiot

Security Groups...

ah, the other common problem 🙂

@dominicm - What you can help me with is how I make an Edge App build all it's URLS for CSS / JS etc as https and re-direct any http to https

(if you know a quick way to achieve that)

bidi vhosts allows you to match http separately from https. So you can redirect that way? 🙂

I don't have an easy example to hand though

Er, it's more about the URLs that are pulling in CSS and JS at the moment, as I am getting mixed protocol errors so no CSS or JS... 😞

Oh, you don't want full urls pulling in the css/js. Are you going cross-domain?

nope

hold on...

how are you referring to your css/js?

My Selmer templates are like this:

{% url static %}app.css

and

{% url static %}decisionvest.js

so full line is:

<link rel="stylesheet" href="{% url static %}app.css"/>

and:

<script src="{% url static %}decisionvest.js" type="text/javascript"></script>

hmm, I'd expect that to work.

as in, it should retain the protocol.

one option is to use {% href %} which I think will bypass the issue altogether

@dominicm - It is retaining the protocol; Yada is getting an http request. I am using ELB Termination for the HTTPS

Yada does not get an https request, it gets an http request from the target group, proxied through nginx

@maleghast configure nginx to pass along the X-Forwarded-Proto header

Then it will work

Even though the nginx instance is getting an http request?

what do you use the nginx proxy for @maleghast?

ALB passes along a special header to indicate what the upstream protocol was

Sweet

proxy_set_header X-Forwarded-Proto $http_x_forwarded_proto; apparently does the trick

@mccraigmccraig - old habits, EC2s in my VPC only expose 22 and 80

(They only expose 22 to the Bastion server, courtesy of Security Groups)

what's nginx for tho ?

so the instance gets the request on 80 and nginx receives and proxies to 3080 (Edge Prod Port)

why not just configure your ALB listener to forward direct to 3080 ?

Because I don't have 3080 open on the instance that the app is running on

and limit those ports to only your ELBs

(I realise I could open it)

the only port we have open to the internet on any of our EC2s is 22 on the jump host

although most of our EC2s will accept on large ranges from the load-balancers

@dominicm - That header forward not working, but I will swap my Selmer filter to href instead of url and see if that makes a difference...

@mccraigmccraig - I imagine I'll go that way in the end, but for now I have EC2s that are not "behind" loadbalancers, so having 80 open on them helps...

ah, right, nginx makes sense then... i started out having nginx in front of yada, since on my previous project i'd been using nginx as a caching proxy, but i now use CloudFront for all my CDN and caching needs, so i ended up ditching nginx

*nods* Yeah, I want to put everything into S3 / CloudFront in the fullness of time, but that means some app-level tinkering, as I will want my build process to put the compiled / minified / optimised JS and CSS onto S3 as part of that process and I will therefore want my URLs to be different.

if you use relative urls it mostly doesn't matter - our app works the same from file:, localhost, cloudfronted domain and direct s3 url without specifying or changing any urls... the only place requiring absolute urls to be specified is email generation and our hacky theming (which implements a cloudfront origin server and pattern-match/replaces from the original s3-hosted css)

@dominicm - I imagine I am doing this wrong, but this:

<link rel="stylesheet" href="{% href static %}app.css"/>

<script src="{% href static %}decisionvest.js" type="text/javascript"></script>

Probably not terribly relevant to what you’re doing but it was a big revelation to me when someone told me about protocol relative URLs - https://en.wikipedia.org/wiki/URL#prurl

@dominicm - Fixed it:

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;

@firthh - Going to read that in a moment or two...

@firthh - That's very useful to know - are they supported on all browsers, etc..?

As far as I’m aware they are

😄

That would be great...

@mccraigmccraig - I just re-read your comment above^^... How do you get relative URLs to work for assets that are on S3..?

*boggle*

(I am assuming on reflection that the app handles the routing)

check it out: http://app.yapsterchat.com.s3.amazonaws.com/index.html vs https://app.yapsterchat.com/

i think it just works

That's just MAGIC?

I mean, seriously, I don't understand how that is possible.

what don't you get ? it's been a while since i set it up, so i can't really remember whether there were any gotchas

the http://app.yapsterchat.com is just the files from the s3 url fronted by cloudfront

Oh right, so they are two different URLs for the same index.html..?

yeah

so you must have DNS resolving https://app.yapsterchat.com/js/... to your Cloudfront Distribution

yep - http://app.yapsterchat.com points at the cloudfront distribution...

I mean CF Distros have mental URLs

right, but there's no need to put the CF urls into any of the source - the js url is relative to the index.html

Right, but I can't host a Clojure app on Cloudfront

ah, no - that's just the static stuff - our clojure api is on a completely different url

Right

with CORS etc

Yeah, I would like to stay the FUCK away from CORS if I can...

lol, you just add a couple of headers which roughly translate to "fuck off CORS!" 😬

Yeah, but the restrictions on Cross-Origin addressing are there for a reason.

Yes, if you craft very tight exemptions I believe that they can be safe, but I would rather solve the problem at the other end.

(This is personal preference and not religion, and if what you are doing works for you I salute you!)

(I could__ even be persuaded / talked around)

we're pretty much forced into CORS - our users are mostly on mobile devices with a hybrid app, which means a file: or url, so CORS is required

and every request on our API, apart from the auth requests, requires a JWT token, and they are all over https, so single-origin wouldn't be doing much for us anyway

but @maleghast i forgot something - "Right, but I can't host a Clojure app on Cloudfront" is not quite correct - you can't host it on CloudFront, but you can add an origin to your cloudfront distribution which will proxy requests to your clojure app... giving you a single-origin webapp backed by S3 for your static stuff and EC2 for your dynamic stuff

*raises eyebrow*

O-RLY

(as long as you can separate your static stuff and dynamic stuff by path... we just have all our api requests go to /api/... and that suffices)

thus: https://www.evernote.com/l/AD6lvw5obsBAO4uJqzGT7lDWcbUc_cV8KhY

Yeah, that's really nice - sorry was just doing a little happy dance about AWS adding on-ALB redirection, so all http traffic to a domain can be re-routed to https on the Load Balancer without needing to handle the protocol up-sell on the application server or proxy server.

I ❤️ LIVING IN THE FUTURE!

Ahh yes CORS

I've got cljs stuff on cloudfront, lambda backend and...

Well yeah

Internetting is hard