Page MenuHomeDevCentral
Feed All Stories

Mar 25 2026

dereckson moved T1505: Automate Let's Encrypt TLS certificates management for every server from Backlog to Let's Encrypt - legacy on the TLS certificates board.
Mar 25 2026, 09:31 · TLS certificates, Servers
dereckson moved T1342: Let's encrypt on Debian use logrotate from Backlog to Let's Encrypt - legacy on the TLS certificates board.
Mar 25 2026, 09:31 · TLS certificates, security, Servers, Eglide, Salt
dereckson moved T2043: Switch to acme.sh instead of certbot from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
Mar 25 2026, 09:31 · TLS certificates, Operations sprints (Ignite Alkane Propulsion), Servers
dereckson moved T2062: Native TLS support from Backlog to Applications on the TLS certificates board.
Mar 25 2026, 09:31 · TLS certificates, wurf
dereckson moved T2112: Renew Vault web server certificate automatically from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
Mar 25 2026, 09:31 · TLS certificates, security, Servers
dereckson moved T2155: Review rotation for acme.sh logs from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
Mar 25 2026, 09:30 · TLS certificates, Restricted Project, security, Servers
dereckson moved T2196: Reload of dovecot and postfix when certif renew from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
Mar 25 2026, 09:30 · TLS certificates, Restricted Project, good-first-issue, Nasqueron Operations Squad, Mail
dereckson requested review of D4030: Sort more DevCentral projects in Notifications Center.
Mar 25 2026, 08:53
dereckson set the image for TLS certificates to F25014448: profile.
Mar 25 2026, 08:31
dereckson created TLS certificates.
Mar 25 2026, 08:30
dereckson accepted D4029: Allow role router to access ops/secrets/network/router/vault.
Mar 25 2026, 08:23

Mar 24 2026

yousra closed D4027: Install dependencies to register MAC address to ISP.
Mar 24 2026, 21:36
yousra committed rOPSef6ea0d9f929: Install dependencies to register MAC address to ISP (authored by yousra).
Install dependencies to register MAC address to ISP
Mar 24 2026, 21:36
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Mar 24 2026, 21:28 · Python, Drake network, Servers, Monitoring and reporting, Secure HA tunnels
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Mar 24 2026, 21:28 · Python, Drake network, Servers, Monitoring and reporting, Secure HA tunnels
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Mar 24 2026, 21:27 · Python, Drake network, Servers, Monitoring and reporting, Secure HA tunnels
yousra added a comment to T2276: Automate CARP VIP MAC reassignment using devd and OVH API.

The script to test if we can access to the OVH credentials (application_key, application_secret, consumer_key):

Mar 24 2026, 21:26 · Python, Drake network, Servers, Monitoring and reporting, Secure HA tunnels
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Mar 24 2026, 21:09 · Python, Drake network, Servers, Monitoring and reporting, Secure HA tunnels
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Mar 24 2026, 20:29 · Python, Drake network, Servers, Monitoring and reporting, Secure HA tunnels
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Mar 24 2026, 20:28 · Python, Drake network, Servers, Monitoring and reporting, Secure HA tunnels
yousra requested review of D4029: Allow role router to access ops/secrets/network/router/vault.
Mar 24 2026, 20:27
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Mar 24 2026, 20:20 · Python, Drake network, Servers, Monitoring and reporting, Secure HA tunnels
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Mar 24 2026, 19:54 · Python, Drake network, Servers, Monitoring and reporting, Secure HA tunnels
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Mar 24 2026, 19:40 · Python, Drake network, Servers, Monitoring and reporting, Secure HA tunnels
yousra added a comment to T2276: Automate CARP VIP MAC reassignment using devd and OVH API.

The script to test the connection to Vault, using a YAML configuration file that tells the secretsmith client how to connect to Vault :

Mar 24 2026, 19:32 · Python, Drake network, Servers, Monitoring and reporting, Secure HA tunnels
yousra created P398 access to credentials Vault.
Mar 24 2026, 19:06
dereckson accepted D4027: Install dependencies to register MAC address to ISP.
Mar 24 2026, 17:58
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Mar 24 2026, 17:37 · Python, Drake network, Servers, Monitoring and reporting, Secure HA tunnels
yousra updated the diff for D4027: Install dependencies to register MAC address to ISP.

It is not necessary to create a local map.jinja here, since it only imports a variable from the global map.jinja.

Mar 24 2026, 17:27
dereckson created P397 rg packages_prefixes.
Mar 24 2026, 17:18
dereckson added inline comments to D4027: Install dependencies to register MAC address to ISP.
Mar 24 2026, 17:12
yousra added a project to T2276: Automate CARP VIP MAC reassignment using devd and OVH API: Drake network.
Mar 24 2026, 16:38 · Python, Drake network, Servers, Monitoring and reporting, Secure HA tunnels
yousra edited projects for T2276: Automate CARP VIP MAC reassignment using devd and OVH API, added: Servers; removed Python.
Mar 24 2026, 16:38 · Python, Drake network, Servers, Monitoring and reporting, Secure HA tunnels
yousra added a project to T2290: Installation of CARP switch Python dependencies via Salt: Python package.
Mar 24 2026, 16:37 · Python package, Drake network, Servers, Secure HA tunnels
yousra updated the summary of D4027: Install dependencies to register MAC address to ISP.
Mar 24 2026, 16:31
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Mar 24 2026, 16:26 · Python, Drake network, Servers, Monitoring and reporting, Secure HA tunnels
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Mar 24 2026, 16:17 · Python, Drake network, Servers, Monitoring and reporting, Secure HA tunnels
dereckson renamed T2290: Installation of CARP switch Python dependencies via Salt from Installation of CARP switch Python dependencies via Salt to Installation of CARP switch Python dependencies via Salt.
Mar 24 2026, 15:29 · Python package, Drake network, Servers, Secure HA tunnels
dereckson added projects to T2290: Installation of CARP switch Python dependencies via Salt: Secure HA tunnels, Servers, Drake network.
Mar 24 2026, 15:29 · Python package, Drake network, Servers, Secure HA tunnels
dereckson renamed T2290: Installation of CARP switch Python dependencies via Salt from Installation of Python dependencies via Salt to Installation of CARP switch Python dependencies via Salt.
Mar 24 2026, 15:28 · Python package, Drake network, Servers, Secure HA tunnels
dereckson renamed T2290: Installation of CARP switch Python dependencies via Salt from Installation of secretsmith and ovh via Salt to Installation of Python dependencies via Salt.
Mar 24 2026, 15:27 · Python package, Drake network, Servers, Secure HA tunnels
dereckson added a subtask for T2276: Automate CARP VIP MAC reassignment using devd and OVH API: T2290: Installation of CARP switch Python dependencies via Salt.
Mar 24 2026, 15:27 · Python, Drake network, Servers, Monitoring and reporting, Secure HA tunnels
dereckson added a parent task for T2290: Installation of CARP switch Python dependencies via Salt: T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Mar 24 2026, 15:27 · Python package, Drake network, Servers, Secure HA tunnels
yousra updated the diff for D4027: Install dependencies to register MAC address to ISP.
  1. Install pip using the OS-specific package prefix from map.jinja.
Mar 24 2026, 15:27
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Mar 24 2026, 14:08 · Python, Drake network, Servers, Monitoring and reporting, Secure HA tunnels
dereckson updated the test plan for D4027: Install dependencies to register MAC address to ISP.
Mar 24 2026, 13:59
yousra removed projects from T2290: Installation of CARP switch Python dependencies via Salt: Python package, Salt, Secure HA tunnels.
Mar 24 2026, 13:50 · Python package, Drake network, Servers, Secure HA tunnels
dereckson retitled D4027: Install dependencies to register MAC address to ISP from Install ovh and secretsmith via Salt to Install dependencies to register MAC address to ISP.
Mar 24 2026, 13:42
dereckson added a revision to T2276: Automate CARP VIP MAC reassignment using devd and OVH API: D4027: Install dependencies to register MAC address to ISP.
Mar 24 2026, 13:42 · Python, Drake network, Servers, Monitoring and reporting, Secure HA tunnels
yousra added projects to T2290: Installation of CARP switch Python dependencies via Salt: Salt, Python package.
Mar 24 2026, 13:42 · Python package, Drake network, Servers, Secure HA tunnels
yousra updated the summary of D4027: Install dependencies to register MAC address to ISP.
Mar 24 2026, 13:40
yousra added a revision to T2290: Installation of CARP switch Python dependencies via Salt: D4027: Install dependencies to register MAC address to ISP.
Mar 24 2026, 13:40 · Python package, Drake network, Servers, Secure HA tunnels
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Mar 24 2026, 13:39 · Python, Drake network, Servers, Monitoring and reporting, Secure HA tunnels
yousra triaged T2290: Installation of CARP switch Python dependencies via Salt as Normal priority.
Mar 24 2026, 13:39 · Python package, Drake network, Servers, Secure HA tunnels
dereckson requested review of D4028: Update Black style.
Mar 24 2026, 12:48
ptdradmin accepted D3945: WIP: Installation and creation of a first Jenkins pipeline.
Mar 24 2026, 09:38

Mar 23 2026

yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Mar 23 2026, 23:12 · Python, Drake network, Servers, Monitoring and reporting, Secure HA tunnels
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Mar 23 2026, 23:12 · Python, Drake network, Servers, Monitoring and reporting, Secure HA tunnels
yousra added a comment to D4027: Install dependencies to register MAC address to ISP.

ovh and secretsmith are now installed on the router-002 and router-003.

Mar 23 2026, 23:09
yousra updated the diff for D4027: Install dependencies to register MAC address to ISP.

1.Add map to avoid to hunt version every time we update python.

Mar 23 2026, 22:59
dereckson added inline comments to D4027: Install dependencies to register MAC address to ISP.
Mar 23 2026, 20:51
yousra requested review of D4027: Install dependencies to register MAC address to ISP.
Mar 23 2026, 20:37
Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

removed canonical ipv4 from network.sls and corrected node function

Mar 23 2026, 18:42
Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

better variable name

Mar 23 2026, 17:47
Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

removed for loop

Mar 23 2026, 17:39
Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

testing list format for routers

Mar 23 2026, 17:19
dereckson added a comment to D2084: Usee Docker pillar information in nginx config.

I've asked upstream for advice how to resolve pillar for another server than the current node @ https://groups.google.com/g/salt-tower/c/XEKg2CEiZrU

Mar 23 2026, 17:06
Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

added router parameter

Mar 23 2026, 16:58
Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

Light modifications

Mar 23 2026, 16:46
dereckson planned changes to D2084: Usee Docker pillar information in nginx config.

The output is really useful to avoid to manually repeat the ports.

Mar 23 2026, 16:37
dereckson updated the diff for D2084: Usee Docker pillar information in nginx config.

Rebased. Fixed pillar handling.

Mar 23 2026, 16:32
dereckson added a comment to D4026: Deploy or rotate Vault secrets.

Note: we're deploying a third secret for CARP routers scripts. If we've already that code merged, we'll need to append a line to deploy that state too.

Mar 23 2026, 14:26
Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

updated for loop syntax

Mar 23 2026, 14:23
dereckson added a comment to D4026: Deploy or rotate Vault secrets.

Note: we're deploying a third secret for CARP routers scripts. If we've already that code merged, we'll need to append a line to deploy that state too.

Mar 23 2026, 14:21
dereckson updated the summary of D2084: Usee Docker pillar information in nginx config.
Mar 23 2026, 14:16
Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

Added router-002

Mar 23 2026, 14:14
dereckson added a comment to D2084: Usee Docker pillar information in nginx config.

Next: try salt web-001 paas_docker.get_upstreams

Mar 23 2026, 14:12
dereckson added inline comments to D3988: Configure strongSwan as IPsec implementation.
Mar 23 2026, 14:08
dereckson retitled D2084: Usee Docker pillar information in nginx config from WIP: Use Docker pillar information in nginx config to Usee Docker pillar information in nginx config.
Mar 23 2026, 14:04
Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

Removed cloudhugger

Mar 23 2026, 14:04
dereckson updated the diff for D2084: Usee Docker pillar information in nginx config.

Rebased against current main for Alkane.

Mar 23 2026, 14:04
dereckson moved T2289: https://infra.nasqueron.org/cd/dashboard without trailing slash doesn't serve CSS from Backlog to Next on the Servers board.
Mar 23 2026, 14:01 · Jenkins, Tommy, Servers, Alkane
dereckson triaged T2289: https://infra.nasqueron.org/cd/dashboard without trailing slash doesn't serve CSS as Normal priority.
Mar 23 2026, 14:00 · Jenkins, Tommy, Servers, Alkane
dereckson added a comment to D2084: Usee Docker pillar information in nginx config.

This change is interesting and should be rebased.

Mar 23 2026, 13:34
dereckson added a comment to D2030: Enable federation on Pixelfed.

This configuration is for Pixelfed old versions.

Mar 23 2026, 13:33
dereckson added a comment to D1524: WIP: Allow to manage phpBB containers.

Not sure today if we still want to deploy through Docker, or if we would target Alkane PaaS for Espace Win sites. It's also unknown if it brings value to put back the forum archive.

Mar 23 2026, 13:29
dereckson added a comment to D1590: Serve zed51.dereckson.be.

Currently, zed51.dereckson.be serves a 500 error.

Mar 23 2026, 13:28
dereckson closed T1817: Update pillar path for paas_docker.get_subnets as Resolved.
Mar 23 2026, 10:02 · Salt
dereckson closed T1817: Update pillar path for paas_docker.get_subnets, a subtask of T2123: Fix tests for operations repository, as Resolved.
Mar 23 2026, 10:02 · Technical debt, Servers
dereckson added a subtask for T2100: Switch to local delivery instead of mailgun: T786: Add PECL extension mailparse to Phabricator Docker image.
Mar 23 2026, 10:02 · Nasqueron Operations Squad, DevCentral, Mail
dereckson added a parent task for T786: Add PECL extension mailparse to Phabricator Docker image: T2100: Switch to local delivery instead of mailgun.
Mar 23 2026, 10:02 · good-first-issue, Docker images
dereckson added a comment to T786: Add PECL extension mailparse to Phabricator Docker image.

Tried to deploy on DevCentral - it's now an old container still using PHP 7.4.

Mar 23 2026, 10:01 · good-first-issue, Docker images
dereckson created P395 mailparse build failure in devcentral container.
Mar 23 2026, 09:59 · PHP 8.x support, Mail, DevCentral
dereckson closed T1475: Provision a mail server, a subtask of T4: Setup fauve services, as Resolved.
Mar 23 2026, 09:45 · Servers, Mail, Grip migration
dereckson closed T1475: Provision a mail server as Resolved.

We can consider the mail server as deployed and create tasks for extra actions in the Mail projects.

Mar 23 2026, 09:45 · Mail, Restricted Project, Servers
dereckson closed T1475: Provision a mail server, a subtask of T1476: Host @wolfplex.be mail, as Resolved.
Mar 23 2026, 09:45 · Mail, Wolfplex migration
dereckson added a comment to T2099: Provision devcentral local configuration.

@DorianWinty Do we have everything in the configuration or is there some actionnables remaining?

Mar 23 2026, 09:43 · Nasqueron Operations Squad, DevCentral
dereckson closed T1932: ViMbAdmin Provisioning, a subtask of T1475: Provision a mail server, as Resolved.
Mar 23 2026, 09:43 · Mail, Restricted Project, Servers
dereckson closed T1932: ViMbAdmin Provisioning as Resolved.

Deployed and working fine.

Mar 23 2026, 09:43 · Mail, Restricted Project, Servers
dereckson triaged T2288: Install memcached for ViMbAdmin as Low priority.
Mar 23 2026, 09:41 · Restricted Project, Alkane, Mail