Rebased against origin/main. Removed extraneous white lines.

Document service variavbles

Rebased against origin/main. Whiteline issues.

Superseded by D3902.

For future reference, write access to the repository requires to use SSH.
In your local rOPS copy, edit .git/config and swap URL from https://devcentral.nasqueron.org/source/operations.git to ssh://vcs@devcentral.nasqueron.org:5022/source/operations.git

@Duranzed next step: run the final deployment on Complector (without the fix to deploy it under a temporary name)

With D3906, there is a way to do this easily, by adding the command to the certificate_options pillar in https://devcentral.nasqueron.org/source/operations/browse/main/pillar/core/certificates/hervil.sls$13

Generated with Leonardo.

2025-02-05 ops office hours take:

• Mailgun could be used as fallback for certificates issue
• We need to update payment info at Mailgun to reactivate service in that case, as our account isn't active anymore

Deployed to Hervil, we see we now have fullchain generated everywhere.

Fix spacing issues for jinja templating logic ; run under acme user ; use reloadcmd as parameter, not reload.

Patched it live.

Upgrade to FreeBSD 15 broke Dovecot, needed to be recompiled.

Next steps

@ptdradmin Seems ready to be merged to main branch with arc land

@DorianWinty It seems it tries to use Mailgun again instead of mail.nasqueron.org SMTP, could we prune the Mailgun part of the configuration? I removed DevCentral from the admin panel there.

Was actually correctly configured in rOPS, but not deployed, so old version was still there.

SPF updated for nasqueron.org domain to allow web-001:

Deployed on all FreeBSD servers with salt -G 'os:FreeBSD' state.apply roles/core/ntp