Also, we need to declare Dovecot ports at https://netbox.nasqueron.org/virtualization/virtual-machines/10/ services table (on the public IP)

I suspect the version 1.6.1 (currently in packages) is compatible with FreeBSD 13 while the version 1.8.2 is compatible with FreeBSD 14.

Independently of the 2020 plan for a service mesh, we're going to deploy Prometheus right now to gain observability on currently deployed services.

It could be easier to deploy https://github.com/kpetremann/salt-exporter

DNS change

policy-spf package should be installed

Key confirmed to work.

Still some issue to connect, SSH2 RSA key not recognized.

It also needs PostgreSQL launched at startup, but that's already defined in the role dbserver-pgsql.

Queries from https://gist.github.com/barryo/8918488 have been checked against PostgreSQL mail database and works like a charm.

Adapted from https://gist.github.com/barryo/8918488:

In T1475#29341, @DorianWinty wrote:

Due to various problems with vimbadmin,
we will provision mailbox ourself with salt

pefs module has been rebuilt, /opt/python ruamel yaml clib fix updated

Userland ready for update, rebooting server to new kernel

In T1932#29348, @DorianWinty wrote:

misssing php-gettext extention
(installed by myself)

misssing php-gettext extention
(installed by myself)

vimbadmin not maintained anymore

Due to various problems with vimbadmin,
we will provision mailbox ourself with salt

As a follow-up, for shellserver and webserver-alkane roles, we need to bump s/php82/php83 for main package name.

• pprint isn't used anymore
• need to run black
• description needs to be updated
• TTL can be much shorter if we automate this procedure

sudo kill -1 $(cat /var/run/vault.pid)

Error management should be done to check if that pids exist or return an error code.

Needs hvac and pyyaml as packages to be installed on the server, Complector doesn't currently have hvac, only pyyaml.

Decreasing priority as we tested a page successfully on WindRiver.

Currently, the responsibility seems to be to the nginx unit in the main webserver role, not on webserver-core:

000-fallback.conf exists on WindRiver but as an empty file, so without any server block

Did you know? Debian Sid still has 8.2 in the core repo.

Next steps: