Alias photo.nasqueron.org → photos.nasqueron.org : Configuré et fonctionnel

Next step: deploy to docker-002, and ensure D3622 is already deployed there too.

Current status: deployed to Dwellers

Deployment on Dwellers

Vault is now alive and used for credentials provisioned by Salt.

The full /etc/nginx directories on both docker-002 and dwellers use httpd_config_t for every file.

With T1452 resolved, this is resolved too.

It's now available on bash by default, but still missing for zsh.

Need to save structure of the ignored tables I guess:

Without performance benchmark, the expected gain is not obvious.

web-001 on the same hypervisor has correct IPv6 support, we can do the same for Hervil with the /56 trick and the hello trick:

Not sure of the current benefit to use TC2.

Salt SELinux module issue

SELinux context was the default for anything created under /var, which we didn't allow and aren't interested to allow for nginx.

Mumble isn't currently in scope.

If we want to fix that at docker-py level, we can also apply this patch: https://github.com/docker/docker-py/pull/3257/files

Per discussion with @fauve.