Page MenuHomeDevCentral
Feed Advanced Search

Feb 2 2024

dereckson added a revision to T1950: Deploy PHP 8.3: D3307: Set PHP 8.3 as default version on FreeBSD servers.
Feb 2 2024, 02:02 · Servers, PHP 8.x support
dereckson added a revision to T437: Recreate NextCloud installation: D3306: Run maintenance operations for NextCloud.
Feb 2 2024, 01:27 · Servers
dereckson added a revision to T437: Recreate NextCloud installation: D3305: Configure NextCloud php-fpm pool.
Feb 2 2024, 01:13 · Servers
dereckson added a revision to T437: Recreate NextCloud installation: D3304: Increase memory limit for PHP processes.
Feb 2 2024, 01:04 · Servers
dereckson added a comment to T437: Recreate NextCloud installation.

Consolidating datacube volumes:

Feb 2 2024, 00:33 · Servers
dereckson lowered the priority of T437: Recreate NextCloud installation from Normal to Low.

I've asked on a brainstorming channel if someone is interested we take at Online some RPN storage, I didn't receive any answer, so I get nobody is looking for a solution to store a lot of Gb of documents here, hence the priority decrease.

Feb 2 2024, 00:23 · Servers
dereckson claimed T437: Recreate NextCloud installation.
Feb 2 2024, 00:12 · Servers

Feb 1 2024

dereckson added a comment to T1950: Deploy PHP 8.3.

Done for WindRiver, our current development server.

Feb 1 2024, 00:37 · Servers, PHP 8.x support
dereckson triaged T1950: Deploy PHP 8.3 as Normal priority.
Feb 1 2024, 00:21 · Servers, PHP 8.x support

Jan 18 2024

dereckson triaged T1947: nginx resolver defined at 127.0.0.1 doesn't work on Docker engines as Normal priority.
Jan 18 2024, 01:17 · Nasqueron Docker deployment squad, Servers, Salt
dereckson created T1947: nginx resolver defined at 127.0.0.1 doesn't work on Docker engines.
Jan 18 2024, 01:17 · Nasqueron Docker deployment squad, Servers, Salt

Jan 16 2024

dereckson moved T1529: Evaluate ml-workspace and ml-hub from Backlog to Nope / later on the Product evaluation board.
Jan 16 2024, 01:04 · Product evaluation, Servers

Jan 15 2024

dereckson added a comment to T1877: Evaluate Alcali - Salt front-end.

Alcali is still alive.

Jan 15 2024, 21:50 · security, Salt, Servers, Product evaluation
dereckson moved T1944: Ensure portsnap is available where we use ports from Backlog to Servers config on the Salt board.
Jan 15 2024, 21:50 · Salt, Servers
dereckson triaged T1944: Ensure portsnap is available where we use ports as Normal priority.
Jan 15 2024, 21:50 · Salt, Servers
dereckson added a revision to T1888: Add XML support on db-A PostgreSQL: D3290: Ensure PostgreSQL port is still up-to-date on FreeBSD.
Jan 15 2024, 21:37 · upstream, DBA, Servers
dereckson added a revision to T1943: Orbeon Forms trigger an error after application is submit: D3290: Ensure PostgreSQL port is still up-to-date on FreeBSD.
Jan 15 2024, 21:37 · Servers, Nasqueron Docker deployment squad, Launch community
dereckson closed T1943: Orbeon Forms trigger an error after application is submit as Resolved.
Jan 15 2024, 00:21 · Servers, Nasqueron Docker deployment squad, Launch community
dereckson closed T1888: Add XML support on db-A PostgreSQL, a subtask of T1943: Orbeon Forms trigger an error after application is submit, as Resolved.
Jan 15 2024, 00:21 · Servers, Nasqueron Docker deployment squad, Launch community
dereckson closed T1888: Add XML support on db-A PostgreSQL as Resolved.
Jan 15 2024, 00:21 · upstream, DBA, Servers
dereckson added a revision to T1888: Add XML support on db-A PostgreSQL: D3287: Fix PostgreSQL 15 build instructions.
Jan 15 2024, 00:19 · upstream, DBA, Servers
dereckson added a comment to T1888: Add XML support on db-A PostgreSQL.

I've added documentation to https://agora.nasqueron.org/Operations_grimoire/FreeBSD#PostgreSQL without real conviction.

Jan 15 2024, 00:16 · upstream, DBA, Servers
dereckson lowered the priority of T1943: Orbeon Forms trigger an error after application is submit from High to Normal.

Fixed. Form works again.

Jan 15 2024, 00:13 · Servers, Nasqueron Docker deployment squad, Launch community
dereckson moved T1943: Orbeon Forms trigger an error after application is submit from Backlog to Working on on the Nasqueron Docker deployment squad board.
Jan 15 2024, 00:06 · Servers, Nasqueron Docker deployment squad, Launch community
dereckson moved T1943: Orbeon Forms trigger an error after application is submit from Backlog to Working on on the Servers board.

I'm rebuilding PostgreSQL 15.4 with XML support on db-A-001.

Jan 15 2024, 00:06 · Servers, Nasqueron Docker deployment squad, Launch community

Jan 14 2024

dereckson added a subtask for T1943: Orbeon Forms trigger an error after application is submit: T1888: Add XML support on db-A PostgreSQL.
Jan 14 2024, 23:19 · Servers, Nasqueron Docker deployment squad, Launch community
dereckson added a parent task for T1888: Add XML support on db-A PostgreSQL: T1943: Orbeon Forms trigger an error after application is submit.
Jan 14 2024, 23:19 · upstream, DBA, Servers
dereckson added a comment to T1943: Orbeon Forms trigger an error after application is submit.

Jan 14 23:13:52 db-A-001 postgres[35351]: [7-1] 2024-01-14 23:13:52.659 UTC [35351] ERROR: unsupported XML feature

Jan 14 2024, 23:19 · Servers, Nasqueron Docker deployment squad, Launch community
dereckson reopened T1888: Add XML support on db-A PostgreSQL as "Open".

When upgraded to FreeBSD 14, we lost this.

Jan 14 2024, 23:18 · upstream, DBA, Servers
dereckson updated subscribers of T1943: Orbeon Forms trigger an error after application is submit.

When clicking to Save Progress:

Jan 14 2024, 23:17 · Servers, Nasqueron Docker deployment squad, Launch community
dereckson updated the task description for T1943: Orbeon Forms trigger an error after application is submit.
Jan 14 2024, 22:55 · Servers, Nasqueron Docker deployment squad, Launch community
dereckson triaged T1943: Orbeon Forms trigger an error after application is submit as High priority.
Jan 14 2024, 22:55 · Servers, Nasqueron Docker deployment squad, Launch community

Jan 10 2024

dereckson updated the task description for T1938: Non open-source infrastructure software policy.
Jan 10 2024, 22:30 · discussion, Servers
dereckson added a comment to T1938: Non open-source infrastructure software policy.

Added RHEL question.

Jan 10 2024, 22:23 · discussion, Servers
dereckson updated the task description for T1938: Non open-source infrastructure software policy.
Jan 10 2024, 22:23 · discussion, Servers
dereckson lowered the priority of T1939: Implement blue/green deployment or immutable artefacts for router-001 from Normal to Low.
Jan 10 2024, 22:11 · Servers, Drake network
dereckson added a comment to T1939: Implement blue/green deployment or immutable artefacts for router-001.

router-001 update would cut network connections between Ysul, WindRiver, CloudHugger and IntraNought VMs.

I think that's actually acceptable, as production services can reach web-001/db-*/ directly through their dedicated network card.

Impact:

  • IRC bots wouldn't be able to reach MySQL or Vault as they're still on Ysul
  • Services still on Ysul can't reach
  • Development servers can't reach production services, or Dwellers

Another issue is we lose connections to all those machines, as router-001 is used to route traffic to them.

Probably best to ship router-002 under FreeBSD 14 so we can prepare to minimize this impact if we need more hypervisors in the future.

Jan 10 2024, 22:10 · Servers, Drake network
dereckson updated the task description for T1939: Implement blue/green deployment or immutable artefacts for router-001.
Jan 10 2024, 22:10 · Servers, Drake network
dereckson closed T1924: Upgrade servers to FreeBSD 14 as Resolved.

router-001 is out of scope as long as T1939 is implemented

Jan 10 2024, 22:09 · Servers
dereckson triaged T1939: Implement blue/green deployment or immutable artefacts for router-001 as Normal priority.
Jan 10 2024, 22:08 · Servers, Drake network

Jan 7 2024

dereckson added a comment to T1924: Upgrade servers to FreeBSD 14.

router-001 update would cut network connections between Ysul, WindRiver, CloudHugger and IntraNought VMs.

Jan 7 2024, 18:01 · Servers
dereckson updated the task description for T1924: Upgrade servers to FreeBSD 14.
Jan 7 2024, 17:46 · Servers
dereckson added a revision to T1924: Upgrade servers to FreeBSD 14: D3264: Bump FreeBSD version in MOTD.
Jan 7 2024, 16:20 · Servers

Jan 6 2024

dereckson created T1938: Non open-source infrastructure software policy.
Jan 6 2024, 17:53 · discussion, Servers

Jan 5 2024

dereckson updated the task description for T1924: Upgrade servers to FreeBSD 14.
Jan 5 2024, 22:00 · Servers
dereckson updated the task description for T1924: Upgrade servers to FreeBSD 14.
Jan 5 2024, 21:32 · Servers
dereckson added a comment to T1924: Upgrade servers to FreeBSD 14.

Complector done.

Jan 5 2024, 21:31 · Servers
dereckson updated the task description for T1924: Upgrade servers to FreeBSD 14.
Jan 5 2024, 21:31 · Servers
DorianWinty updated the task description for T1924: Upgrade servers to FreeBSD 14.
Jan 5 2024, 20:38 · Servers
dereckson added a project to T1937: Update FreeBSD packages Nasqueron repository : Servers.
Jan 5 2024, 19:42 · Servers, User-Dereckson
DorianWinty added a comment to T1924: Upgrade servers to FreeBSD 14.

done for db-B-001

Jan 5 2024, 19:40 · Servers
DorianWinty updated the task description for T1924: Upgrade servers to FreeBSD 14.
Jan 5 2024, 19:40 · Servers
DorianWinty updated the task description for T1924: Upgrade servers to FreeBSD 14.
Jan 5 2024, 16:26 · Servers
DorianWinty added a comment to T1924: Upgrade servers to FreeBSD 14.

Done for Hervil

Jan 5 2024, 14:59 · Servers

Dec 25 2023

dereckson updated the task description for T1924: Upgrade servers to FreeBSD 14.
Dec 25 2023, 19:17 · Servers
dereckson added a comment to T1924: Upgrade servers to FreeBSD 14.

WindRiver done last week. Works perfectly fine.

Dec 25 2023, 19:15 · Servers
dereckson updated the task description for T1924: Upgrade servers to FreeBSD 14.
Dec 25 2023, 19:15 · Servers

Dec 18 2023

DorianWinty moved T1934: Install Snappymail from Backlog - On hold pending T1475 to Working on on the Mail board.
Dec 18 2023, 21:07 · Mail, Restricted Project, Servers
DorianWinty moved T1933: Roundcube Provisioning from Backlog - On hold pending T1475 to Working on on the Mail board.
Dec 18 2023, 21:07 · Mail, Restricted Project, Servers
DorianWinty moved T1932: ViMbAdmin Provisioning from Backlog - On hold pending T1475 to Working on on the Mail board.
Dec 18 2023, 21:07 · Mail, Restricted Project, Servers
DorianWinty moved T1931: Dovecot Provisioning from Backlog - On hold pending T1475 to Working on on the Mail board.
Dec 18 2023, 21:07 · Mail, Restricted Project, Servers
DorianWinty moved T1930: Postfix Provisioning from Backlog - On hold pending T1475 to Working on on the Mail board.
Dec 18 2023, 21:07 · Mail, Restricted Project, Servers
DorianWinty removed a revision from T1475: Provision a mail server: D3242: Install postfix.
Dec 18 2023, 21:03 · Mail, Restricted Project, Servers
DorianWinty created T1934: Install Snappymail.
Dec 18 2023, 20:52 · Mail, Restricted Project, Servers
DorianWinty created T1933: Roundcube Provisioning.
Dec 18 2023, 20:52 · Mail, Restricted Project, Servers
DorianWinty created T1932: ViMbAdmin Provisioning.
Dec 18 2023, 20:51 · Mail, Restricted Project, Servers
DorianWinty created T1931: Dovecot Provisioning.
Dec 18 2023, 20:46 · Mail, Restricted Project, Servers

Dec 17 2023

dereckson closed T1925: No SRV record found for the repo 'Nasqueron' as Resolved by committing rOPSae66989a3e26: Don't configure mirrors for FreeBSD packages repository.
Dec 17 2023, 22:02 · DNS, Servers
DorianWinty added a revision to T1930: Postfix Provisioning: D3242: Install postfix.
Dec 17 2023, 20:36 · Mail, Restricted Project, Servers
DorianWinty created T1930: Postfix Provisioning.
Dec 17 2023, 20:36 · Mail, Restricted Project, Servers
DorianWinty closed T1929: Prepare a database for Postfix, a subtask of T1475: Provision a mail server, as Resolved.
Dec 17 2023, 20:30 · Mail, Restricted Project, Servers
DorianWinty closed T1929: Prepare a database for Postfix as Resolved.
Dec 17 2023, 20:30 · Mail, Restricted Project, Servers
DorianWinty added a revision to T1929: Prepare a database for Postfix: D3252: Create mail PostgreSQL database.
Dec 17 2023, 16:23 · Mail, Restricted Project, Servers
DorianWinty created T1929: Prepare a database for Postfix.
Dec 17 2023, 15:56 · Mail, Restricted Project, Servers
dereckson created T1928: Serve CAA DNS records.
Dec 17 2023, 14:03 · Servers, DNS, security
dereckson added a revision to T1228: Configure TLS for webserver-core role: D3251: Provide TLS 1.3 only nginx configuration.
Dec 17 2023, 14:00 · security, Servers
dereckson added a comment to T1228: Configure TLS for webserver-core role.

Situation has evolved since 2017, we currently configure nginx with TLSv1.2 + TLSv1.3,
per Mozilla intermediate configuration https://ssl-config.mozilla.org/

Dec 17 2023, 13:59 · security, Servers
dereckson updated the task description for T1228: Configure TLS for webserver-core role.
Dec 17 2023, 13:57 · security, Servers
dereckson renamed T1228: Configure TLS for webserver-core role from Configure TLS for Ysul to Configure TLS for webserver-core role.
Dec 17 2023, 13:57 · security, Servers
dereckson closed T298: Validate devserver operational state as Resolved.

Ubald configuration is deemed out of scope of devserver validation.

Dec 17 2023, 13:16 · Servers
dereckson closed T801: Review skel to provision new accounts on Ysul as Wontfix.

whom-diff isn't provided anymore

Dec 17 2023, 13:15 · Servers
dereckson closed T801: Review skel to provision new accounts on Ysul, a subtask of T298: Validate devserver operational state, as Wontfix.
Dec 17 2023, 13:15 · Servers
dereckson closed T706: Update default shell and user settings on Ysul, a subtask of T298: Validate devserver operational state, as Resolved.
Dec 17 2023, 13:14 · Servers
dereckson closed T706: Update default shell and user settings on Ysul as Resolved.

We can specify the default shell in user accounts configuration.

Dec 17 2023, 13:14 · Servers, CLI
dereckson moved T437: Recreate NextCloud installation from Pending review to Backlog on the Servers board.
Dec 17 2023, 13:06 · Servers
dereckson moved T1925: No SRV record found for the repo 'Nasqueron' from Backlog to Pending review on the Servers board.
Dec 17 2023, 12:57 · DNS, Servers
dereckson added a revision to T1925: No SRV record found for the repo 'Nasqueron': D3249: Don't configure mirrors for FreeBSD packages repository.
Dec 17 2023, 12:53 · DNS, Servers
dereckson added a comment to T1925: No SRV record found for the repo 'Nasqueron'.

Even with correct SRV records, no HTTP request reach nginx, neither on www1. or packages.

Dec 17 2023, 12:39 · DNS, Servers
dereckson added a comment to T1925: No SRV record found for the repo 'Nasqueron'.

Comparing to pkg.pfsense.org, we only use subdomains, not full domains:

Dec 17 2023, 12:13 · DNS, Servers
dereckson added a comment to T1925: No SRV record found for the repo 'Nasqueron'.

This is a blocker for the use of pkg.

Dec 17 2023, 12:10 · DNS, Servers

Dec 16 2023

dereckson added a comment to T1475: Provision a mail server.

A certificate for mail.nasqueron.org and hervil.nasqueron.org has been generated successfully after D3248 has been deployed:

Dec 16 2023, 14:49 · Mail, Restricted Project, Servers
dereckson added a revision to T1505: Automate Let's Encrypt TLS certificates management for every server: D3248: Deploy Certbot everywhere.
Dec 16 2023, 01:01 · Servers

Dec 14 2023

dereckson added a revision to T1505: Automate Let's Encrypt TLS certificates management for every server: D3247: Free certificates unit's init state for includes.
Dec 14 2023, 17:16 · Servers
dereckson claimed T1505: Automate Let's Encrypt TLS certificates management for every server.
Dec 14 2023, 17:01 · Servers
dereckson merged T784: Set up let's encrypt certificates renewal into T1505: Automate Let's Encrypt TLS certificates management for every server.
Dec 14 2023, 17:01 · Servers
dereckson merged task T784: Set up let's encrypt certificates renewal into T1505: Automate Let's Encrypt TLS certificates management for every server.
Dec 14 2023, 17:01 · Servers
dereckson renamed T1505: Automate Let's Encrypt TLS certificates management for every server from Automate Let's Encrypt TLS certificates management for Docker PaaS to Automate Let's Encrypt TLS certificates management for every server.
Dec 14 2023, 17:01 · Servers

Oct 26 2023

dereckson added a comment to T1925: No SRV record found for the repo 'Nasqueron'.

Documentation for HTTPS isn't clear, perhaps we should check the pkg source code for the exact seek.

Oct 26 2023, 23:33 · DNS, Servers

Oct 17 2023

dereckson claimed T1925: No SRV record found for the repo 'Nasqueron'.
Oct 17 2023, 20:10 · DNS, Servers
dereckson added a comment to T1925: No SRV record found for the repo 'Nasqueron'.

DNS record according the documentation:

Oct 17 2023, 20:10 · DNS, Servers