Merge the three exact-match redirect blocks (/cd, /cd/, /cd/dashboard) into a single regex location, as suggested.

Merge the three exact-match redirect blocks (/cd, /cd/, /cd/dashboard) into a single regex location, as suggested: location ~ ^/cd(?:/|/dashboard)?$ { ... }

Computed on db-B-001, got 1 Gb using POWER(1024,3) but only 139 Mb using POWER(1024,2), so we're good with the default value there for now.

Drop the redundant pillar/top.sls entry per dereckson's comment: pillar/tower.sls already auto-loads dbserver/{{ minion_id }}.sls for every minion via salt-tower, so pillar/dbserver/ysul.sls alone is enough.

I see 3 blocks with the same 302 redirect.

Scope the diff to the T1130 commit only, the previous version wrongly included the unrelated T2289 (D4134) change from the same local branch.

COMFIRM

Document HTTP/HTTPS pitfall when pulling from the local Docker registry is closed

Document HTTP/HTTPS pitfall when pulling from the local Docker registry is closed

Simplify wording per dereckson's feedback: switch to callout primary, keep only the pull URL and a brief note that localhost:5000 no longer provides a certificate.

Instead of documenting the error in a warning block, I'd suggest we keep a primary callout block with directly the good instructions you wrote.

Works like a charm.

To help edit vhosts, I've used the following sed expressions:

We can live with that, as there is work in progress to:

• at Nasqueron, migrate certificates to acme.sh
• on FreeBSD ports, prepare Salt for Python 3.12

It could be solved upstream with 3006.26.

@yousra It seems better with last Salt versions on 3006 LTS branch.

Fix: the pull failure was reported on docker-002, not docker-001.

Also, for reference, I solved the issue in a new Salt repo with 9002:9002

A quick note for reference, as I was looking this task to recreate the same issue in a new Salt environment, the core role provides:

Review assisted by LLM. Caught by Qwen3.7-Plus.

Confirming the SSH key request with MFA.

Just a note current configuration of rDPHPFPM explicitly set /var/service as directory: https://devcentral.nasqueron.org/source/docker-nginx-php-fpm/browse/main/files/usr/local/sbin/runsvdir-init

The realpath failure is expected, and dependant of the test environment: