Page MenuHomeDevCentral
Feed All Stories

Feb 6 2026

dereckson updated the diff for D3630: Split Postfix configuration.

Rebased against origin/main. Removed extraneous white lines.

Feb 6 2026, 18:23
dereckson updated the diff for D3897: Always enable route to 172.27.27.0/24.

Document service variavbles

Feb 6 2026, 18:19
dereckson updated the diff for D3897: Always enable route to 172.27.27.0/24.

Rebased against origin/main. Whiteline issues.

Feb 6 2026, 18:15
dereckson committed rOPSc9df49a3cecc: Static UID and GID (authored by Duranzed).
Static UID and GID
Feb 6 2026, 18:12
dereckson closed D3903: Static UID and GID.
Feb 6 2026, 18:12
dereckson accepted D3903: Static UID and GID.
Feb 6 2026, 18:12
dereckson abandoned D3900: Create user Yousra.

Superseded by D3902.

Feb 6 2026, 18:11
dereckson added a comment to D3896: Add user ptdradmin to nasqueron-dev-docker group.

For future reference, write access to the repository requires to use SSH.
In your local rOPS copy, edit .git/config and swap URL from https://devcentral.nasqueron.org/source/operations.git to ssh://vcs@devcentral.nasqueron.org:5022/source/operations.git

Feb 6 2026, 18:09
dereckson committed rOPSb4f505d19a77: Add user ptdradmin to nasqueron-dev-docker group (authored by ptdradmin).
Add user ptdradmin to nasqueron-dev-docker group
Feb 6 2026, 18:06
dereckson closed D3896: Add user ptdradmin to nasqueron-dev-docker group.
Feb 6 2026, 18:06
dereckson closed D3909: Fix typo.
Feb 6 2026, 18:06
dereckson committed rOPS186cc088a02f: Fix typo (authored by dereckson).
Fix typo
Feb 6 2026, 18:06
dereckson accepted D3909: Fix typo.
Feb 6 2026, 18:05
dereckson requested review of D3909: Fix typo.
Feb 6 2026, 18:05
ptdradmin updated the diff for D3908: Deploy Anubis for DevCentral.

Summary: Refactored Anubis deployment according to review feedback.

  • Moved to roles/paas-docker/anubis/init.sls
  • Fixed pillar indentation and schema
  • Added dynamic port detection from docker_containers
  • Switched metrics to UNIX socket
  • Simplified provisioning script for Vault only
  • Cleaned up bot policies

.

  • Refactor Anubis deployment based on review feedback. Highlights: fixed pillar indentation, moved to init.sls, added dynamic port detection, and configured metrics socket.
Feb 6 2026, 17:50
dereckson awarded D3908: Deploy Anubis for DevCentral a Y So Serious token.
Feb 6 2026, 17:44
dereckson added a revision to T2193: Investigate Anubis: D3908: Deploy Anubis for DevCentral.
Feb 6 2026, 17:44 · Servers, Operations sprints (Echoes in the Void), Product evaluation, Alkane, DevCentral
dereckson updated the summary of D3908: Deploy Anubis for DevCentral.
Feb 6 2026, 17:44
dereckson moved T2193: Investigate Anubis from Backlog to To watch on the Alkane board.
Feb 6 2026, 17:41 · Servers, Operations sprints (Echoes in the Void), Product evaluation, Alkane, DevCentral
dereckson moved T2193: Investigate Anubis from Backlog to Working on on the Operations sprints (Echoes in the Void) board.
Feb 6 2026, 17:41 · Servers, Operations sprints (Echoes in the Void), Product evaluation, Alkane, DevCentral
dereckson assigned T2193: Investigate Anubis to ptdradmin.
Feb 6 2026, 17:41 · Servers, Operations sprints (Echoes in the Void), Product evaluation, Alkane, DevCentral
dereckson requested changes to D3908: Deploy Anubis for DevCentral.
Feb 6 2026, 17:32
ptdradmin reclaimed D3908: Deploy Anubis for DevCentral.
Feb 6 2026, 17:05
ptdradmin added a comment to D3908: Deploy Anubis for DevCentral.
Feb 6 2026, 17:04
ptdradmin abandoned D3908: Deploy Anubis for DevCentral.

Doublon de D3908

Feb 6 2026, 17:04
ptdradmin abandoned D3907: Deploy Anubis for DevCentral Summary: Integrated Anubis as a WAF/Reverse Proxy for DevCentral to secure traffic and challenge AI scrapers. Added Salt states, templates, and documentation. Test Plan: Verified on dwellers.nasqueron.drake: - Service....

Doublon de D3908

Feb 6 2026, 17:03
ptdradmin added a comment to D3896: Add user ptdradmin to nasqueron-dev-docker group.

@Derekson J'ai essayé de faire un arc land mais je reçois une erreur 403 (Permission refusée). pouvez-vous 'lander' cette révision pour moi ? Merci !

Feb 6 2026, 16:59
ptdradmin added a comment to D3896: Add user ptdradmin to nasqueron-dev-docker group.
Feb 6 2026, 16:58
ptdradmin updated the diff for D3908: Deploy Anubis for DevCentral.

\

Feb 6 2026, 16:38
ptdradmin updated the diff for D3908: Deploy Anubis for DevCentral.
Feb 6 2026, 16:36
ptdradmin requested review of D3908: Deploy Anubis for DevCentral.
Feb 6 2026, 16:32
ptdradmin requested review of D3907: Deploy Anubis for DevCentral Summary: Integrated Anubis as a WAF/Reverse Proxy for DevCentral to secure traffic and challenge AI scrapers. Added Salt states, templates, and documentation. Test Plan: Verified on dwellers.nasqueron.drake: - Service....
Feb 6 2026, 16:11
Duranzed updated subscribers of T2208: Installation and configuration Quagga .
Feb 6 2026, 11:59 · Secure HA tunnels
Duranzed renamed T2208: Installation and configuration Quagga from install and config Quagga to Install and config Quagga .
Feb 6 2026, 11:59 · Secure HA tunnels
Duranzed edited the content of Project conventions.
Feb 6 2026, 11:58
Duranzed set the icon for Secure HA tunnels to Infrastructure.
Feb 6 2026, 11:40
Duranzed renamed Secure HA tunnels from Network to Secure HA tunnels.
Feb 6 2026, 11:39
Duranzed renamed T2202: Pick solution for IPsec from Pick solution for IPSEC to Pick solution for IPsec.
Feb 6 2026, 11:16 · User-Duranzed, documentation, Product evaluation, Secure HA tunnels
Duranzed renamed T2202: Pick solution for IPsec from Pick solution for tunnel to Pick solution for IPSEC.
Feb 6 2026, 11:15 · User-Duranzed, documentation, Product evaluation, Secure HA tunnels
Duranzed renamed T2208: Installation and configuration Quagga from install and config Quaga to install and config Quagga .
Feb 6 2026, 11:15 · Secure HA tunnels
Duranzed renamed T2207: Configure CARP for the main gateway from Configure CARP for the main gateway to Configure CARP for the main gateway and for GRE tunnel.
Feb 6 2026, 11:13 · Secure HA tunnels
Duranzed renamed T2205: Enable CARP high-availability on router-002 and router-003 from Autoriser CARP sur les routeurs to Authorize CARP on all routers .
Feb 6 2026, 11:11 · Vault, Monitoring and reporting, Salt, Secure HA tunnels
Duranzed renamed T2209: Test TCP and UDP traffic from Test trafic tce/upd to Test trafic tcp/upd.
Feb 6 2026, 11:06 · Secure HA tunnels
Duranzed renamed T2206: Test for CARP Taffic from test for CARP Taffic to Test for CARP Taffic.
Feb 6 2026, 11:03 · Secure HA tunnels
Duranzed renamed T2208: Installation and configuration Quagga from install ouaga and configure OSPF to install and config Quaga .
Feb 6 2026, 11:01 · Secure HA tunnels
Duranzed updated the task description for T2204: Configure a CARP VHID for the shared virtual IP .
Feb 6 2026, 10:56 · Secure HA tunnels
Duranzed updated the task description for T2203: CARP setup (IP allocation, vhid, advskew / priorité (master / backup), shared secret).
Feb 6 2026, 08:18 · Drake network, Secure HA tunnels
Duranzed updated the task description for T2202: Pick solution for IPsec.
Feb 6 2026, 08:13 · User-Duranzed, documentation, Product evaluation, Secure HA tunnels
Duranzed updated the task description for T2201: GRE tunnel creation .
Feb 6 2026, 08:12 · User-Duranzed, Secure HA tunnels

Feb 5 2026

dereckson added a comment to T2175: Update mw to launch maintenance/run.php.

@Duranzed next step: run the final deployment on Complector (without the fix to deploy it under a temporary name)

Feb 5 2026, 23:41 · good-first-issue, Mediawiki SaaS
dereckson moved T2196: Reload of dovecot and postfix when certif renew from Backlog to Ops on the good-first-issue board.
Feb 5 2026, 23:39 · Restricted Project, good-first-issue, Nasqueron Operations Squad, Mail
dereckson moved T2211: Create a dark theme CSS for Agora from Backlog to Design on the good-first-issue board.
Feb 5 2026, 23:39 · good-first-issue, design, Agora
dereckson updated the task description for T2196: Reload of dovecot and postfix when certif renew.
Feb 5 2026, 23:38 · Restricted Project, good-first-issue, Nasqueron Operations Squad, Mail
dereckson placed T2196: Reload of dovecot and postfix when certif renew up for grabs.

With D3906, there is a way to do this easily, by adding the command to the certificate_options pillar in https://devcentral.nasqueron.org/source/operations/browse/main/pillar/core/certificates/hervil.sls$13

Feb 5 2026, 23:36 · Restricted Project, good-first-issue, Nasqueron Operations Squad, Mail
dereckson triaged T2196: Reload of dovecot and postfix when certif renew as High priority.
Feb 5 2026, 23:31 · Restricted Project, good-first-issue, Nasqueron Operations Squad, Mail
dereckson edited the content of Credits.
Feb 5 2026, 23:29
dereckson added a comment to F23665567: profile.

Generated with Leonardo.

Feb 5 2026, 23:29
dereckson set the image for Secure HA tunnels to F23665567: profile.
Feb 5 2026, 23:27
dereckson added a comment to T2199: Unable to receive e-mail verification.

2025-02-05 ops office hours take:

  • Mailgun could be used as fallback for certificates issue
  • We need to update payment info at Mailgun to reactivate service in that case, as our account isn't active anymore
Feb 5 2026, 23:21 · DevCentral, Mail
dereckson closed D3906: Automate acme.sh install-cert cmd.
Feb 5 2026, 22:53
dereckson committed rOPSc9cb237e5e18: Automate acme.sh install-cert cmd (authored by DorianWinty).
Automate acme.sh install-cert cmd
Feb 5 2026, 22:53
dereckson closed T2210: fullchain.pem isn't automatically generated by acme.sh as Resolved by committing rOPSc9cb237e5e18: Automate acme.sh install-cert cmd.
Feb 5 2026, 22:53 · security, Mail
dereckson updated the summary of D3906: Automate acme.sh install-cert cmd.
Feb 5 2026, 22:49
dereckson accepted D3906: Automate acme.sh install-cert cmd.
Feb 5 2026, 22:35
dereckson added a comment to D3906: Automate acme.sh install-cert cmd.

Deployed to Hervil, we see we now have fullchain generated everywhere.

Feb 5 2026, 22:35
dereckson updated the diff for D3906: Automate acme.sh install-cert cmd.

Fix spacing issues for jinja templating logic ; run under acme user ; use reloadcmd as parameter, not reload.

Feb 5 2026, 22:33
DorianWinty requested review of D3906: Automate acme.sh install-cert cmd.
Feb 5 2026, 22:04
DorianWinty added a revision to T2210: fullchain.pem isn't automatically generated by acme.sh: D3906: Automate acme.sh install-cert cmd.
Feb 5 2026, 22:04 · security, Mail
dereckson claimed T2210: fullchain.pem isn't automatically generated by acme.sh.

Patched it live.

Feb 5 2026, 21:48 · security, Mail
dereckson committed rOPS380b5c8bf836: Divide acmesh stanza into sections (authored by dereckson).
Divide acmesh stanza into sections
Feb 5 2026, 21:33
dereckson closed D3905: Divide acmesh stanza into sections.
Feb 5 2026, 21:33
DorianWinty accepted D3905: Divide acmesh stanza into sections.
Feb 5 2026, 21:31
dereckson closed D3904: Make mtr available outside devservers.
Feb 5 2026, 21:19
dereckson closed T2200: Install mtr everywhere as Resolved by committing rOPS6a2b675152c1: Make mtr available outside devservers.
Feb 5 2026, 21:19 · Servers
dereckson committed rOPS6a2b675152c1: Make mtr available outside devservers (authored by yousra).
Make mtr available outside devservers
Feb 5 2026, 21:19
dereckson requested review of D3905: Divide acmesh stanza into sections.
Feb 5 2026, 21:13
dereckson updated the task description for T2211: Create a dark theme CSS for Agora.
Feb 5 2026, 21:12 · good-first-issue, design, Agora
dereckson triaged T2211: Create a dark theme CSS for Agora as Wishlist priority.
Feb 5 2026, 21:11 · good-first-issue, design, Agora
dereckson updated subscribers of T2210: fullchain.pem isn't automatically generated by acme.sh.
Feb 5 2026, 19:52 · security, Mail
dereckson triaged T2210: fullchain.pem isn't automatically generated by acme.sh as High priority.
Feb 5 2026, 19:52 · security, Mail
yousra renamed T2204: Configure a CARP VHID for the shared virtual IP from Create VOIP on each interface to Create VHID on each interface .
Feb 5 2026, 16:19 · Secure HA tunnels
Duranzed created T2209: Test TCP and UDP traffic.
Feb 5 2026, 16:13 · Secure HA tunnels
Duranzed created T2208: Installation and configuration Quagga .
Feb 5 2026, 16:11 · Secure HA tunnels
Duranzed created T2207: Configure CARP for the main gateway.
Feb 5 2026, 16:11 · Secure HA tunnels
Duranzed created T2206: Test for CARP Taffic.
Feb 5 2026, 16:09 · Secure HA tunnels
Duranzed created T2205: Enable CARP high-availability on router-002 and router-003.
Feb 5 2026, 16:08 · Vault, Monitoring and reporting, Salt, Secure HA tunnels
Duranzed created T2204: Configure a CARP VHID for the shared virtual IP .
Feb 5 2026, 16:02 · Secure HA tunnels
Duranzed created T2203: CARP setup (IP allocation, vhid, advskew / priorité (master / backup), shared secret).
Feb 5 2026, 15:53 · Drake network, Secure HA tunnels
Duranzed added a project to T2202: Pick solution for IPsec: Secure HA tunnels.
Feb 5 2026, 15:52 · User-Duranzed, documentation, Product evaluation, Secure HA tunnels
Duranzed updated the task description for T2202: Pick solution for IPsec.
Feb 5 2026, 15:52 · User-Duranzed, documentation, Product evaluation, Secure HA tunnels
Duranzed created T2202: Pick solution for IPsec.
Feb 5 2026, 15:51 · User-Duranzed, documentation, Product evaluation, Secure HA tunnels
Duranzed added a project to T2201: GRE tunnel creation : Secure HA tunnels.
Feb 5 2026, 15:51 · User-Duranzed, Secure HA tunnels
Duranzed created Secure HA tunnels.
Feb 5 2026, 15:50
Duranzed created T2201: GRE tunnel creation .
Feb 5 2026, 15:47 · User-Duranzed, Secure HA tunnels
dereckson added a member for Nasqueron security operations squad: Duranzed.
Feb 5 2026, 14:29
Duranzed accepted rOPS7e73484cac72: Run MediaWiki maintenance scripts using run.php entry point.
Feb 5 2026, 14:22
Duranzed accepted D3904: Make mtr available outside devservers.

mtr is installed.

Feb 5 2026, 14:21
Duranzed closed D3901: Run MediaWiki maintenance scripts using run.php entry point.
Feb 5 2026, 14:11
Duranzed committed rOPS7e73484cac72: Run MediaWiki maintenance scripts using run.php entry point (authored by Duranzed).
Run MediaWiki maintenance scripts using run.php entry point
Feb 5 2026, 14:11
yousra added a comment to D3904: Make mtr available outside devservers.

The installation of mtr has been added to all servers to facilitate network debugging.

Feb 5 2026, 14:06