2025-02-05 ops office hours take:
- Mailgun could be used as fallback for certificates issue
- We need to update payment info at Mailgun to reactivate service in that case, as our account isn't active anymore
2025-02-05 ops office hours take:
Deployed to Hervil, we see we now have fullchain generated everywhere.
Fix spacing issues for jinja templating logic ; run under acme user ; use reloadcmd as parameter, not reload.
Patched it live.
Upgrade to FreeBSD 15 broke Dovecot, needed to be recompiled.
@ptdradmin Seems ready to be merged to main branch with arc land
@DorianWinty It seems it tries to use Mailgun again instead of mail.nasqueron.org SMTP, could we prune the Mailgun part of the configuration? I removed DevCentral from the admin panel there.
Was actually correctly configured in rOPS, but not deployed, so old version was still there.
SPF updated for nasqueron.org domain to allow web-001:
Deployed on all FreeBSD servers with salt -G 'os:FreeBSD' state.apply roles/core/ntp
Action plan
Activer ntpd : nécessaire si le serveur doit aussi servir de source horaire à d'autres machines.
Let's go for that road, even if it's only for the local machine.
Next: reconfigure DNS zone in HE control panel, as it only has our IPv4.
DNS server listens correctly to IPv6:
DNS record for SPF, TXT version, didn't include the IPs of web-001, now it's the case with D3892 (propagation still pending to nsX.he.net)