At Nasqueron, I maintain this Phabricator instance, and overview the operations infrastructure.
Website: https://www.dereckson.be/
Individual board: User-Dereckson
User Details
User Details
- User Since
- Nov 11 2014, 04:38 (586 w, 6 d)
- Roles
- Administrator
- Availability
- Available
Today
Today
ops: add yousra to operations group
dereckson retitled D3936: ops: add yousra to operations group from ops: add yousra to operations group
Make mtr available outside devservers to ops: add yousra to operations group.
Yesterday
Yesterday
dereckson committed rINFRAWWW0fcf4f2c0649: Update IRC channel to Libera network (authored by dereckson).
Update IRC channel to Libera network
dereckson requested review of D3935: Update IRC channel to Libera network.
dereckson committed rOPS0d9dc209ba36: Include network projects in ops group for Notifications Center (authored by dereckson).
Include network projects in ops group for Notifications Center
dereckson retitled D3934: Include network projects in ops group for Notifications Center from Include network project in ops group for Notifications Center to Include network projects in ops group for Notifications Center.
dereckson requested review of D3934: Include network projects in ops group for Notifications Center.
dereckson added a comment to T2221: Create 2 new routers.
@yousra When you install the servers, you can document on IRC the main steps:
dereckson added a comment to T2221: Create 2 new routers.
router-002 and router-003 have been created on hyper-001
dereckson updated the task description for T2212: Move eggdrops from Ysul to WindRiver.
dereckson updated the task description for T2212: Move eggdrops from Ysul to WindRiver.
dereckson added a comment to D3933: Listen for eggdrop users and bots in separate ports.
WindRiver
$ nc 2001:bc8:2e84:700:0:dead:c0de:b07 18000 ��This connection is in clear text, so ensure you use a SSH tunnel to the server.
dereckson retitled D3933: Listen for eggdrop users and bots in separate ports from Llisten for eggdrop users and bots in separate ports to Listen for eggdrop users and bots in separate ports.
dereckson moved T2220: Configure listening ports for telnet connections from Bugs to Working on on the Dæghrefn board.
dereckson updated the diff for D3933: Listen for eggdrop users and bots in separate ports.
Whitespace issues
dereckson added a comment to D3933: Listen for eggdrop users and bots in separate ports.
Complector (diff for Wearg eggdrop.conf)
+listen 19010 bots +listen 18010 users
dereckson requested review of D3933: Listen for eggdrop users and bots in separate ports.
dereckson added a comment to D3932: Listen to new IPv6 address for viperserv.n.o.
*** -HQ joined the party line. [15:50:48] Trying server irc.libera.chat:+6697 [15:50:48] Failed connect to irc.libera.chat (Vhost set in config is not available on this machine)
dereckson updated the task description for T2212: Move eggdrops from Ysul to WindRiver.
dereckson added a comment to D3932: Listen to new IPv6 address for viperserv.n.o.
IP updated for the 4 configuration files (Dæghrefn, Wearg, TC2, Æschere).
dereckson requested review of D3932: Listen to new IPv6 address for viperserv.n.o.
dereckson added a comment to D3931: Assign ViperServ IPv6 to WindRiver.
WindRiver
$ salt-call --local state.apply roles/core/network/ipv6 local: ---------- ID: /etc/rc.conf.d/netif/ipv6_igb0 Function: file.managed Result: True Comment: File /etc/rc.conf.d/netif/ipv6_igb0 updated Started: 15:37:56.041793 Duration: 14.764 ms Changes: ---------- diff: --- +++ @@ -14,3 +14,5 @@ # </auto-generated>
dereckson updated the diff for D3931: Assign ViperServ IPv6 to WindRiver.
Aliases are for netif_ipv6.rc
dereckson requested review of D3931: Assign ViperServ IPv6 to WindRiver.
dereckson added a revision to T2212: Move eggdrops from Ysul to WindRiver: D3931: Assign ViperServ IPv6 to WindRiver.
dereckson requested review of D3930: Update AAAA record for viperserv.nasqueron.org.
dereckson added a comment to T2212: Move eggdrops from Ysul to WindRiver.
MariaDB issue fixed, but now we've some networking inforamation to do update too:
dereckson committed rOPS404cef789f72: Update host for eggdrop user on db-B-001 (authored by dereckson).
Update host for eggdrop user on db-B-001
dereckson added a comment to D3929: Update host for eggdrop user on db-B-001.
During deployment, note MariaDB created a new user nasqueron@172.27.27.35 (username was the old eggdrop name) but didn't remove the nasqueron@172.27.27.33 user, we probably need a list of missing credentials to prune for that.
dereckson requested review of D3929: Update host for eggdrop user on db-B-001.
dereckson added a comment to T2212: Move eggdrops from Ysul to WindRiver.
Access to Vault works fine, fetching secrets from there too, including after Terraform rotation.
dereckson updated the task description for T2212: Move eggdrops from Ysul to WindRiver.
dereckson closed T2217: Don't load dns module anymore as Resolved by committing rOPS2fbe0f8ff4d2: Don't load DNS eggdrop module.
Don't load DNS eggdrop module
dereckson requested review of D3928: Don't load DNS eggdrop module.
dereckson added a revision to T2217: Don't load dns module anymore: D3928: Don't load DNS eggdrop module.
dereckson committed rOPSb7fcb1aa0342: Don't store Terraform state and always rotate secrets (authored by dereckson).
Don't store Terraform state and always rotate secrets
dereckson committed rOPSd81abfe1034d: Touch deployment log on deployment server (authored by dereckson).
Touch deployment log on deployment server
dereckson requested review of D3927: Touch deployment log on deployment server.
dereckson updated the diff for D3926: Don't store Terraform state and always rotate secrets.
Fix AUDIT_LOG variable
dereckson added a comment to D3926: Don't store Terraform state and always rotate secrets.
Code review with Claude Sonnet 4.5 gave two improvements to the Makefile: audit log, .PHONY targets.
dereckson requested review of D3926: Don't store Terraform state and always rotate secrets.
dereckson committed rOPS9e441d8d256a: Update secret path for Rhyne-Wyse's Vault approle credential (part 2) (authored by dereckson).
Update secret path for Rhyne-Wyse's Vault approle credential (part 2)
dereckson requested review of D3925: Update secret path for Rhyne-Wyse's Vault approle credential (part 2).
dereckson committed rOPS793af5119fcc: Proofread Terraform variables definition (authored by dereckson).
Proofread Terraform variables definition
dereckson requested review of D3924: Proofread Terraform variables definition.
dereckson committed rOPSabe00f4a2633: Migrate viperserv Vault AppRole to Terraform (authored by dereckson).
Migrate viperserv Vault AppRole to Terraform
dereckson updated the diff for D3923: Migrate viperserv Vault AppRole to Terraform.
Update credentials fields in Salt config. Fix header.
dereckson updated the diff for D3923: Migrate viperserv Vault AppRole to Terraform.
Remove Terraform policy from Salt policies list
dereckson planned changes to D3923: Migrate viperserv Vault AppRole to Terraform.
dereckson requested review of D3923: Migrate viperserv Vault AppRole to Terraform.
dereckson updated the task description for T2212: Move eggdrops from Ysul to WindRiver.
Sat, Feb 7
Sat, Feb 7
Install Terraform on Complector
dereckson requested review of D3922: Install Terraform on Complector.
dereckson committed rOPS177ce9cb89d8: Reconfigure Vault provider for Terraform (authored by dereckson).
Reconfigure Vault provider for Terraform
dereckson updated the diff for D3921: Reconfigure Vault provider for Terraform.
Split
dereckson added a comment to D3921: Reconfigure Vault provider for Terraform.
We need to split that one in two different concerns.
dereckson requested review of D3921: Reconfigure Vault provider for Terraform.
dereckson added a comment to D3693: Give access to Vault to Rhyne-Wyse automated agent.
Associated documentation available at https://agora.nasqueron.org/Operations_grimoire/Deploy_with_Terraform
dereckson committed rOPSc28623e93756: Update secret path for Rhyne-Wyse's Vault approle credential (authored by dereckson).
Update secret path for Rhyne-Wyse's Vault approle credential
dereckson requested review of D3920: Update secret path for Rhyne-Wyse's Vault approle credential.
dereckson committed rOPS8e0a33bd332c: Give access to Vault to Rhyne-Wyse automated agent (authored by dereckson).
Give access to Vault to Rhyne-Wyse automated agent