Not working on this for now, and the number of services in our API doesn't make that urgent.

Alias photo.nasqueron.org → photos.nasqueron.org : Configuré et fonctionnel

Next step: deploy to docker-002, and ensure D3622 is already deployed there too.

Current status: deployed to Dwellers

Deployment on Dwellers

Vault is now alive and used for credentials provisioned by Salt.

Credentials have been hashed directly in Vault, so we don't need to manipulate cleartext password with Salt.
Salt updated the tomcat-users.xml accordingly.

The full /etc/nginx directories on both docker-002 and dwellers use httpd_config_t for every file.

With T1452 resolved, this is resolved too.

It's now available on bash by default, but still missing for zsh.

Need to save structure of the ignored tables I guess:

Without performance benchmark, the expected gain is not obvious.

web-001 on the same hypervisor has correct IPv6 support, we can do the same for Hervil with the /56 trick and the hello trick:

Not sure of the current benefit to use TC2.

Salt SELinux module issue

SELinux context was the default for anything created under /var, which we didn't allow and aren't interested to allow for nginx.