Those issues are resolved now we use Vault to provision passwords.

In T1627#23666, @dereckson wrote:

Perhaps replace references here too: https://code.nasqueron.org/?q=equatower&i=nope&literal=nope&files=&excludeFiles=&repos=

For now we are in Laravel 9

For now, Laravel 8 :

@DorianWinty Would be useful to apply https://laravel.com/docs/9.x/upgrade so we're really up to date.

For Salt and Vault, we're already using the private network.

We're done here :)

Vault is live and Salt deployments were successful to cloudhugger dwellers windriver ysul (and Complector itself).

Per T644.

Migrated secrets

Perhaps replace references here too: https://code.nasqueron.org/?q=equatower&i=nope&literal=nope&files=&excludeFiles=&repos=

All tasks seem done, as we've docker-001 running for more than one year without any issue.

Alternative could be to use https://docs.saltproject.io/en/latest/ref/engines/all/salt.engines.ircbot.html#module-salt.engines.ircbot

If all we want are tunnels, Tinc could be overkill, as GRE tunnels work well at D2594 + D2595.

As said in IRC:
14:47:59 < Dereckson> (j'ai un doute pour ep_ether-o-meter après relecture du package.json, je me demande si ce n'est simplement à ce moment là que npm audit s'est réveillé)
14:49:44 < Dereckson> Je soupçonne que npm install <plugin> prend les dépendances de dev d'Etherpad aussi, alors que https://github.com/ether/etherpad-lite/blob/develop/src/bin/installDeps.sh utilise npm ci --no-optional

There is a concurrent approach through tinc deployed on devserver WindRiver:

[ Grabbing this on my radar again, as it's in my account. ]

Spambots actually target Phabricator, so we're fine with the current process.