Feed Advanced Search

Advanced Search
Use Results
Edit Query
Hide Query

Mar 15 2022

dereckson closed T1627: Supersede equatower.nasqueron.org by docker-002.nasqueron.org as Resolved.

Mar 15 2022, 00:36 · Operations sprints (Consolidate them all), Servers, Salt, security

Mar 14 2022

dereckson added a comment to T619: Allow to control from TC2 the Docker engine.

Alternative could be to use https://docs.saltproject.io/en/latest/ref/engines/all/salt.engines.ircbot.html#module-salt.engines.ircbot

Mar 14 2022, 23:45 · Operations sprints (Operations sprint 1), security, Nasqueron Docker deployment squad, Servers, Dæghrefn

dereckson added a comment to T1619: Connect all baremetal servers to Drake network.

If all we want are tunnels, Tinc could be overkill, as GRE tunnels work well at D2594 + D2595.

Mar 14 2022, 23:32 · Servers, Drake network, security, Operations sprints (Consolidate them all)

dereckson moved T1656: Convert daeghrefn. for Uspection use from Backlog to Doc / Web on the IRC board.

Mar 14 2022, 23:17 · upsection, security, documentation, IRC, Dæghrefn

Mar 12 2022

dereckson lowered the priority of T1700: Drop metrics plugin for Etherpad from Normal to Low.

Mar 12 2022, 14:57 · security, Etherpad

dereckson added a comment to T1700: Drop metrics plugin for Etherpad.

As said in IRC:
14:47:59 < Dereckson> (j'ai un doute pour ep_ether-o-meter après relecture du package.json, je me demande si ce n'est simplement à ce moment là que npm audit s'est réveillé)
14:49:44 < Dereckson> Je soupçonne que npm install <plugin> prend les dépendances de dev d'Etherpad aussi, alors que https://github.com/ether/etherpad-lite/blob/develop/src/bin/installDeps.sh utilise npm ci --no-optional

Mar 12 2022, 14:57 · security, Etherpad

dereckson added a revision to T1700: Drop metrics plugin for Etherpad: D2587: Drop support for ether-o-meter Etherpad plugin.

Mar 12 2022, 13:14 · security, Etherpad

dereckson triaged T1700: Drop metrics plugin for Etherpad as Normal priority.

Mar 12 2022, 13:08 · security, Etherpad

dereckson moved T1524: Monitor sudo files on servers from Backlog to Server config on the Eglide board.

Mar 12 2022, 13:07 · Eglide, security, Servers

Mar 5 2022

dereckson created P302 Docker update pulls fuse on CentOS/Rocky.

Mar 5 2022, 21:18 · Nasqueron Docker deployment squad, security, Servers

dereckson added a comment to T1619: Connect all baremetal servers to Drake network.

There is a concurrent approach through tinc deployed on devserver WindRiver:

Mar 5 2022, 00:25 · Servers, Drake network, security, Operations sprints (Consolidate them all)

dereckson updated the task description for T1619: Connect all baremetal servers to Drake network.

Mar 5 2022, 00:13 · Servers, Drake network, security, Operations sprints (Consolidate them all)

Mar 4 2022

dereckson added a revision to T1616: Build a bastion - load balancers - private instances network topology: D2566: Configure IntraNought interface for RedHat servers.

Mar 4 2022, 23:56 · security, Operations sprints (Consolidate them all)

Feb 12 2022

dereckson claimed T1109: Switch all OAuth GitHub applications to Nasqueron organization accounts.

Feb 12 2022, 01:55 · Auth Grove, User-Dereckson, security, Nasqueron Operations Squad

dereckson added a comment to T1109: Switch all OAuth GitHub applications to Nasqueron organization accounts.

[ Grabbing this on my radar again, as it's in my account. ]

Feb 12 2022, 01:54 · Auth Grove, User-Dereckson, security, Nasqueron Operations Squad

Jan 15 2022

dereckson closed T665: Configure DevCentral to approve automatically the user accounts as Wontfix.

Spambots actually target Phabricator, so we're fine with the current process.

Jan 15 2022, 22:06 · security, DevCentral

Jan 9 2022

dereckson added a revision to T1627: Supersede equatower.nasqueron.org by docker-002.nasqueron.org: D2453: Clean up Equatower references.

Jan 9 2022, 10:27 · Operations sprints (Consolidate them all), Servers, Salt, security

Oct 2 2021

dereckson moved T1513: Propagate certificate to Openfire server from Backlog to Pending review on the Servers board.

Oct 2 2021, 23:14 · TLS certificates, XMPP, security, Servers

Sep 18 2021

dereckson moved T1656: Convert daeghrefn. for Uspection use from Backlog / triage to Sites to convert on the upsection board.

Sep 18 2021, 09:43 · upsection, security, documentation, IRC, Dæghrefn

dereckson moved T1658: Convert infra. for Uspection use from Backlog / triage to Sites to convert on the upsection board.

Sep 18 2021, 09:43 · upsection, security, Servers

dereckson moved T1657: Convert docs. for Uspection use from Backlog / triage to Sites to convert on the upsection board.

Sep 18 2021, 09:42 · upsection, security, documentation

dereckson added projects to T1656: Convert daeghrefn. for Uspection use: Dæghrefn, IRC, documentation, security, upsection.

Sep 18 2021, 09:42 · upsection, security, documentation, IRC, Dæghrefn

dereckson added a project to T1657: Convert docs. for Uspection use: upsection.

Sep 18 2021, 09:42 · upsection, security, documentation

dereckson added a project to T1658: Convert infra. for Uspection use: upsection.

Sep 18 2021, 09:42 · upsection, security, Servers

dereckson created T1658: Convert infra. for Uspection use.

Sep 18 2021, 09:42 · upsection, security, Servers

dereckson triaged T1657: Convert docs. for Uspection use as Normal priority.

Sep 18 2021, 09:41 · upsection, security, documentation

Sep 12 2021

dereckson updated the task description for T673: Rebuild images using OpenSSH client.

Sep 12 2021, 08:46 · security, Docker images

dereckson updated the task description for T930: Secrets to migrate from DevCentral to Vault.

Sep 12 2021, 08:46 · User-Dereckson, Vault, Nasqueron Operations Squad, security

Aug 30 2021

Sandlayth closed T1645: Migrate Eglide TLS certificates as Resolved.

Certificates have been migrated, and a salt-call --local state.apply have been successfully ran after the migration.

Aug 30 2021, 20:11 · TLS certificates, security, Servers, Eglide

Aug 29 2021

dereckson moved T1145: Don't truncate passwords from Backlog to Darkbot bugs on the Odderon board.

Aug 29 2021, 00:37 · C, security, Odderon

Aug 25 2021

dereckson assigned T1645: Migrate Eglide TLS certificates to Sandlayth.

Aug 25 2021, 23:36 · TLS certificates, security, Servers, Eglide

dereckson moved T1645: Migrate Eglide TLS certificates from Backlog to Migration on the Eglide board.

Aug 25 2021, 22:53 · TLS certificates, security, Servers, Eglide

dereckson renamed T1645: Migrate Eglide TLS certificates from Migrate Eglide SSL certificates to Migrate Eglide TLS certificates.

Aug 25 2021, 22:51 · TLS certificates, security, Servers, Eglide

Dec 30 2020

dereckson closed T1640: "certbot: error: unrecognized arguments:" when renewing certificates on Docker Engine as Resolved by committing rOPS636fd7818086: Allow certbot wrapper to work when no argument is provided after the command.

Dec 30 2020, 02:23 · TLS certificates, Regression, Nasqueron Docker deployment squad, security, Servers

dereckson added a revision to T1640: "certbot: error: unrecognized arguments:" when renewing certificates on Docker Engine: D2375: Allow certbot wrapper to work when no argument is provided after the command.

Dec 30 2020, 02:19 · TLS certificates, Regression, Nasqueron Docker deployment squad, security, Servers

dereckson added a project to T1640: "certbot: error: unrecognized arguments:" when renewing certificates on Docker Engine: Regression.

Regression introduced in rOPSbf659c5728cbfeab65c1fba8772f2037278000b5:

Dec 30 2020, 02:14 · TLS certificates, Regression, Nasqueron Docker deployment squad, security, Servers

dereckson triaged T1640: "certbot: error: unrecognized arguments:" when renewing certificates on Docker Engine as High priority.

Dec 30 2020, 02:07 · TLS certificates, Regression, Nasqueron Docker deployment squad, security, Servers

Oct 20 2020

dereckson moved T1513: Propagate certificate to Openfire server from Backlog to Working on on the XMPP board.

Oct 20 2020, 01:19 · TLS certificates, XMPP, security, Servers

dereckson added a project to T1513: Propagate certificate to Openfire server: XMPP.

Oct 20 2020, 01:19 · TLS certificates, XMPP, security, Servers

Sep 28 2020

dereckson added a revision to T1627: Supersede equatower.nasqueron.org by docker-002.nasqueron.org: D2337: Prune Docker configuration for Equatower.

Sep 28 2020, 00:26 · Operations sprints (Consolidate them all), Servers, Salt, security

Sep 24 2020

dereckson added a comment to T1619: Connect all baremetal servers to Drake network.

Let's rewire tunnels against router-001.nasqueron.org / 51.255.124.8 / 172.27.27.1

Sep 24 2020, 20:50 · Servers, Drake network, security, Operations sprints (Consolidate them all)

dereckson added a revision to T1616: Build a bastion - load balancers - private instances network topology: D2334: Configure IntraNought interface for FreeBSD.

Sep 24 2020, 20:48 · security, Operations sprints (Consolidate them all)

dereckson added a revision to T1616: Build a bastion - load balancers - private instances network topology: D2330: Add router-001.nasqueron.org as router.

Sep 24 2020, 19:24 · security, Operations sprints (Consolidate them all)

dereckson added a revision to T1627: Supersede equatower.nasqueron.org by docker-002.nasqueron.org: D2328: Clone Equatower Docker configuration for docker-001.

Sep 24 2020, 03:21 · Operations sprints (Consolidate them all), Servers, Salt, security

dereckson added a revision to T1627: Supersede equatower.nasqueron.org by docker-002.nasqueron.org: D2327: Use new registry server.

Sep 24 2020, 01:51 · Operations sprints (Consolidate them all), Servers, Salt, security

Sep 23 2020

dereckson added a revision to T1627: Supersede equatower.nasqueron.org by docker-002.nasqueron.org: D2322: Configure Docker for docker-001.

Sep 23 2020, 23:15 · Operations sprints (Consolidate them all), Servers, Salt, security

dereckson added a revision to T1627: Supersede equatower.nasqueron.org by docker-002.nasqueron.org: D2321: Add server docker-001 for paas-docker role.

Sep 23 2020, 23:12 · Operations sprints (Consolidate them all), Servers, Salt, security

dereckson added a comment to T1627: Supersede equatower.nasqueron.org by docker-002.nasqueron.org.

Phabricator config explicitly contained a reference to Equatower, it's now aphlict.nasqueron.org

Sep 23 2020, 21:02 · Operations sprints (Consolidate them all), Servers, Salt, security

dereckson added a comment to T1627: Supersede equatower.nasqueron.org by docker-002.nasqueron.org.

Machine migration done with this workflow:

Sep 23 2020, 21:02 · Operations sprints (Consolidate them all), Servers, Salt, security

dereckson triaged T1627: Supersede equatower.nasqueron.org by docker-002.nasqueron.org as High priority.

Sep 23 2020, 21:00 · Operations sprints (Consolidate them all), Servers, Salt, security

Sep 22 2020

dereckson added a project to T849: https://trustspace.nasqueron.org/css/trustspace.css serves http:// content: TrustSpace.

Sep 22 2020, 01:08 · TrustSpace, security, Servers

dereckson moved T1594: Acquisitariat and Etherpad issue from Backlog to Blocked on the Operations sprints (Consolidate them all) board.

Sep 22 2020, 00:57 · Operations sprints (Consolidate them all), Vault, security, Nasqueron Docker deployment squad

dereckson added a comment to T1594: Acquisitariat and Etherpad issue.

All the quoted containers are priority candidates to be moved to Kubernetes cluster.

Sep 22 2020, 00:57 · Operations sprints (Consolidate them all), Vault, security, Nasqueron Docker deployment squad

dereckson triaged T1594: Acquisitariat and Etherpad issue as Low priority.

Sep 22 2020, 00:56 · Operations sprints (Consolidate them all), Vault, security, Nasqueron Docker deployment squad

Sep 21 2020

dereckson added a parent task for T1521: Restrict MySQL access: T1619: Connect all baremetal servers to Drake network.

Sep 21 2020, 23:34 · Operations sprints (Consolidate them all), security, Servers

dereckson added a subtask for T1619: Connect all baremetal servers to Drake network: T1521: Restrict MySQL access.

Sep 21 2020, 23:34 · Servers, Drake network, security, Operations sprints (Consolidate them all)

dereckson moved T1619: Connect all baremetal servers to Drake network from Backlog to Pending review on the Operations sprints (Consolidate them all) board.

Sep 21 2020, 23:34 · Servers, Drake network, security, Operations sprints (Consolidate them all)

Sep 20 2020

dereckson added a revision to T1619: Connect all baremetal servers to Drake network: D2303: Create GRE tunnel between WindRiver and Ysul.

Sep 20 2020, 00:59 · Servers, Drake network, security, Operations sprints (Consolidate them all)

dereckson triaged T1619: Connect all baremetal servers to Drake network as Normal priority.

Sep 20 2020, 00:57 · Servers, Drake network, security, Operations sprints (Consolidate them all)

Jun 3 2020

dereckson added a revision to T1616: Build a bastion - load balancers - private instances network topology: D2293: Provide a PaaS front-end role.

Jun 3 2020, 17:43 · security, Operations sprints (Consolidate them all)

dereckson added a parent task for T1616: Build a bastion - load balancers - private instances network topology: Unknown Object (Maniphest Task).

Jun 3 2020, 17:37 · security, Operations sprints (Consolidate them all)

dereckson triaged T1616: Build a bastion - load balancers - private instances network topology as Normal priority.

Jun 3 2020, 17:36 · security, Operations sprints (Consolidate them all)

Feb 23 2020

dereckson moved T1602: Provision ACME DNS credentials for core domains on each servers from Backlog to Pending review on the Operations sprints (Consolidate them all) board.

Feb 23 2020, 12:31 · TLS certificates, Operations sprints (Ignite Alkane Propulsion), security, Servers

dereckson added a revision to T1602: Provision ACME DNS credentials for core domains on each servers: D2249: Allow to update ACME DNS accounts.

Feb 23 2020, 11:40 · TLS certificates, Operations sprints (Ignite Alkane Propulsion), security, Servers

dereckson created T1602: Provision ACME DNS credentials for core domains on each servers.

Feb 23 2020, 11:40 · TLS certificates, Operations sprints (Ignite Alkane Propulsion), security, Servers

Feb 15 2020

dereckson created Blog Post: New SSH keys for servers.

Feb 15 2020, 23:50 · security, Servers

Feb 14 2020

dereckson closed T667: Mitigate CVE-2016-0777 in SSH clients configuration files as Resolved.

OpenSSH now mitigates this.

Feb 14 2020, 17:40 · security, Servers

dereckson closed T693: Add dwellers.nasqueron.org to Ysul sshguard whitelist as Wontfix.

We do'nt use sshguard anymore, as login by password is disabled, keys are required.

Feb 14 2020, 17:37 · security, Nasqueron Docker deployment squad, Servers, Restricted Project

dereckson closed T744: Recycle containers on Dwellers to mitigate CVE-2015-7547 as Resolved.

Feb 14 2020, 17:35 · security, Nasqueron Docker deployment squad

dereckson claimed T744: Recycle containers on Dwellers to mitigate CVE-2015-7547.

Done during the migration to EquaTower and Salt for aphlict cachet devcentral wolfphab acquisitariat etherpad tommy ci silly_bardeen.

Feb 14 2020, 17:35 · security, Nasqueron Docker deployment squad

dereckson added a comment to T1594: Acquisitariat and Etherpad issue.

The option is the same for Etherpad and DevCentral:

Feb 14 2020, 15:52 · Operations sprints (Consolidate them all), Vault, security, Nasqueron Docker deployment squad

dereckson added a project to T1594: Acquisitariat and Etherpad issue: Operations sprints (Consolidate them all).

Feb 14 2020, 15:44 · Operations sprints (Consolidate them all), Vault, security, Nasqueron Docker deployment squad

dereckson updated the task description for T1594: Acquisitariat and Etherpad issue.

Feb 14 2020, 15:44 · Operations sprints (Consolidate them all), Vault, security, Nasqueron Docker deployment squad

dereckson created T1594: Acquisitariat and Etherpad issue.

Feb 14 2020, 15:42 · Operations sprints (Consolidate them all), Vault, security, Nasqueron Docker deployment squad

Feb 8 2020

dereckson closed T1580: Deploy ACME-specific DNS server, a subtask of T1513: Propagate certificate to Openfire server, as Resolved.

Feb 8 2020, 18:39 · TLS certificates, XMPP, security, Servers

dereckson closed T1580: Deploy ACME-specific DNS server as Resolved.

Feb 8 2020, 18:39 · TLS certificates, Operations sprints (Consolidate them all), DNS, security, Servers

Feb 4 2020

dereckson added a revision to T1580: Deploy ACME-specific DNS server: D2181: Allow certbot to use acme.nasqueron.org on Docker engines.

Feb 4 2020, 22:22 · TLS certificates, Operations sprints (Consolidate them all), DNS, security, Servers

dereckson added a comment to T1580: Deploy ACME-specific DNS server.

The server works fine. Next step is to integrate Certbot or any other client with it and create relevant CNAMEs.

Feb 4 2020, 20:07 · TLS certificates, Operations sprints (Consolidate them all), DNS, security, Servers

dereckson added a revision to T1580: Deploy ACME-specific DNS server: D2180: Provide homepage for ACME DNS Server.

Feb 4 2020, 19:58 · TLS certificates, Operations sprints (Consolidate them all), DNS, security, Servers

dereckson added a revision to T1580: Deploy ACME-specific DNS server: D2179: Restrict access to ACME DNS.

Feb 4 2020, 19:29 · TLS certificates, Operations sprints (Consolidate them all), DNS, security, Servers

dereckson added a comment to T1580: Deploy ACME-specific DNS server.

Server is deployed on Equatower.

Feb 4 2020, 18:11 · TLS certificates, Operations sprints (Consolidate them all), DNS, security, Servers

dereckson added a revision to T1580: Deploy ACME-specific DNS server: D2178: Provide nginx configuration for ACME DNS.

Feb 4 2020, 17:49 · TLS certificates, Operations sprints (Consolidate them all), DNS, security, Servers

dereckson added a revision to T1580: Deploy ACME-specific DNS server: D2177: Serve acme.nasqueron.org DNS.

Feb 4 2020, 16:15 · TLS certificates, Operations sprints (Consolidate them all), DNS, security, Servers

dereckson moved T1580: Deploy ACME-specific DNS server from Backlog to Working on on the Operations sprints (Consolidate them all) board.

Feb 4 2020, 15:03 · TLS certificates, Operations sprints (Consolidate them all), DNS, security, Servers

dereckson added a project to T1580: Deploy ACME-specific DNS server: Operations sprints (Consolidate them all).

Feb 4 2020, 15:03 · TLS certificates, Operations sprints (Consolidate them all), DNS, security, Servers

dereckson created T1580: Deploy ACME-specific DNS server.

Feb 4 2020, 15:02 · TLS certificates, Operations sprints (Consolidate them all), DNS, security, Servers

dereckson added a revision to T1513: Propagate certificate to Openfire server: D2050: WIP: deploy certificate to Openfire.

Feb 4 2020, 14:54 · TLS certificates, XMPP, security, Servers

Jan 25 2020

dereckson added a project to T1109: Switch all OAuth GitHub applications to Nasqueron organization accounts: Administrative.

Jan 25 2020, 01:33 · Auth Grove, User-Dereckson, security, Nasqueron Operations Squad

Jan 15 2020

dereckson added a project to T1521: Restrict MySQL access: Operations sprints (Consolidate them all).

Jan 15 2020, 11:23 · Operations sprints (Consolidate them all), security, Servers

dereckson added a comment to T1484: Upgrade Laravel framework.

5.4 migration is done for the running source code, but tests require to cope with the undocumented internal framework mechanisms changes for events.

Jan 15 2020, 11:21 · Restricted Project, security, Technical debt, Notifications center

Jan 14 2020

dereckson added a comment to T1486: Evaluate Archery.

Still maintained.

Jan 14 2020, 15:19 · security, Product evaluation, Operations sprints (Move the ambiant lights)

dereckson updated the task description for T1486: Evaluate Archery.

Jan 14 2020, 15:18 · security, Product evaluation, Operations sprints (Move the ambiant lights)

dereckson moved T1211: Implement ACL to the exchanges/queues we can subscribe to in delivery API from Zboing! Zboing! to Backlog on the Notifications center board.

Jan 14 2020, 00:38 · Notifications center, security

Jan 13 2020

dereckson added a revision to T1484: Upgrade Laravel framework: D2129: Upgrade to Laravel 5.3.

Jan 13 2020, 22:29 · Restricted Project, security, Technical debt, Notifications center

dereckson added a parent task for T1484: Upgrade Laravel framework: T1336: Migrate tests to PHPUnit 8.

Jan 13 2020, 02:52 · Restricted Project, security, Technical debt, Notifications center

Dec 5 2019

dereckson moved T1484: Upgrade Laravel framework from Backlog to Dev on the Technical debt board.

Dec 5 2019, 13:12 · Restricted Project, security, Technical debt, Notifications center

Oct 14 2019

dereckson closed T1530: pam_nologin link issue in FreeBSD as Resolved.

No more log messages.

Oct 14 2019, 14:30 · security, Servers

dereckson added a comment to T1530: pam_nologin link issue in FreeBSD.

$ sudo service cron restart
Stopping cron.
Waiting for PIDS: 1043.
Starting cron.

Oct 14 2019, 14:19 · security, Servers

dereckson added a comment to T1530: pam_nologin link issue in FreeBSD.

Known similar issue: https://forums.freebsd.org/threads/crontab-not-working-after-upgrading-to-freebsd-12-0-release.68675/

Oct 14 2019, 14:16 · security, Servers

dereckson triaged T1530: pam_nologin link issue in FreeBSD as High priority.

Oct 14 2019, 14:15 · security, Servers