In T1755#24731, @dereckson wrote:

DNS configuration

notifications.notifications-test.nasqueron.org. 86400 IN CNAME www3.nasqueron.org.
orange-rabbit.notifications-test.nasqueron.org. 86400 IN CNAME www3.nasqueron.org.
vault.notifications-test.nasqueron.org. 86400 IN CNAME www3.nasqueron.org.

Use "integration" to better stress on the functional role of this environment, to integrate new features.

Scope for this change: Docker containers + nginx config

Rebased. Addressed some of the comments.

Code is ready both for Notifications and keruald/dockerhub, should be tested with the next build we want to promote before merging.

Missing trailing comma in array

The nasqueron/notifications image took from D2958, so we're done:

chmod ; s/authgrove/auth-grove/

+vault_mount_paths

Vault part is OK by adding apps to vault_mount_paths.

Simplify Vault path by bypassing this prefix thing

Vault policy

We still use that for rNOTIF and rGROVE AFAIK, so I provisioned their secrets in Vault at apps/notifications-center/dockerhub/

Last tweaks, e.g. read durable parameters and adjust permissions like currently deployed

declare wearg-notifications as durable

So if someone needs more recent ICU, the cleaner way would be a custom Bullseye build of the icu source package. We'll include it in packages.nasqueron.org, and from there, the repository can then be used in the image both for libxml2 and PHP itself.

"Fun" fact: libxml requires libicu, and pulls the system one of course:

Debian images will lag too much, review https://icu.unicode.org/download, we're at 71, Debian Bullseye is stuck at 67.

For shellserver and devserver role, the intl extension is already installed, per bdd61c48. MediaWiki is quoted as example of application using it.

Pro tip: even in a data provider, you can format the arrays to help to read them.

Trim EOF

Current status: Airflow works, Sentry works.