Hi, Etaoin. :-)

On 6 Jan 2025, at 00:09, Etaoin Wu via SKS development and deployment list 
<sks-devel@nongnu.org> wrote:
> 
> The instance on pgp.3t.al (:443 https/hkps, :11371 hkp, :11370 recon) is 
> hosted on a Hetzner VPS located in Nuremberg, Germany. The Hockeypuck 
> instance is sitting behind the contrib/docker-compose/standalone 
> configuration of Haproxy, which itself is behind an existing instance of 
> Caddy that handles TLS termination.

Be careful to set the correct BEHIND* variables in haproxy, and that Caddy 
populates X-Forwarded-For -- otherwise haproxy may tarpit your entire Caddy 
instance. This is a commonly-encountered gotcha in the haproxy configuration. 
If you need help, please ask. :-)

> The version is 2.2-47-g2848306.

It’s not a good idea to use the `master` branch in production, you should 
instead build from the current support branch `branch-2.2`. While changes in 
`master` have passed the unit tests, they are not production-ready; in 
particular, there may be sync and performance issues in `master` that will only 
become apparent once run in a full test cluster, which is done manually.

Once you have the latest branch-2.2 running, you can add the pgpkeys.eu 
<http://pgpkeys.eu/> nodes as follows:

# Andrew Gallagher <andr...@andrewg.com>
# 0x00CC54C6A0C601691AF4931FFB73E21AF1163937
[hockeypuck.conflux.recon.partner.fr_pgpkeys_eu]
httpAddr="fr.pgpkeys.eu:11371"
reconAddr="fr.pgpkeys.eu:11370"
[hockeypuck.conflux.recon.partner.fi_pgpkeys_eu]
httpAddr="fi.pgpkeys.eu:11371"
reconAddr="fi.pgpkeys.eu:11370"
[hockeypuck.conflux.recon.partner.de_pgpkeys_eu]
httpAddr="de.pgpkeys.eu:11371"
reconAddr="de.pgpkeys.eu:11370"

A

Attachment: signature.asc
Description: Message signed with OpenPGP

Reply via email to