2FA enabled

As a minimum, to have somewhere (a reports repository?) where we can write those report queries could already be useful, so we don't lose them.

Server is live and stable.

Subtask removed to simplify the graph. It's the task where db-B-001 has been created and so solved this one.

Resolved by db-B-001 deployment: MySQL server doesn't have a public IP anymore

In T1627#23666, @dereckson wrote:

Perhaps replace references here too: https://code.nasqueron.org/?q=equatower&i=nope&literal=nope&files=&excludeFiles=&repos=

Password truncation
Passwords are explicitly truncated to 25 characters in load_helpers functions:

DUID published in Vault under ops/secrets/network/DUID/2001:bc8:2e84:700::

2001:bc8:2e84:700:: /56 should be used for WindRiver addresses.

Autoconfig IP isn't in our block

https://api.nasqueron.org/infra/servers.json

Not present in recent FreeBSD machines, so I guess it was solved during an OS upgrade.

All secrets are now stored in Vault and provisioned through Salt, with policies restricting access to secrets by node.

And with the Zemke-Rhyne decom, we're done.

Those issues are resolved now we use Vault to provision passwords.

In T1627#23666, @dereckson wrote:

Perhaps replace references here too: https://code.nasqueron.org/?q=equatower&i=nope&literal=nope&files=&excludeFiles=&repos=

For now we are in Laravel 9

For now, Laravel 8 :

@DorianWinty Would be useful to apply https://laravel.com/docs/9.x/upgrade so we're really up to date.

For Salt and Vault, we're already using the private network.

We're done here :)

Vault is live and Salt deployments were successful to cloudhugger dwellers windriver ysul (and Complector itself).