♟ dereckson

At Nasqueron, I maintain this Phabricator instance, and overview the operations infrastructure.

Website: https://www.dereckson.be/

Individual board: User-Dereckson

21:30:03 < yousra> [ERROR] Source file salt://roles/core/motd/files/router-002 not found in salt env 'base'

ops: add router-002 node

Pillar configuration for nodes.sls:

Generated from NetBox data using sudo utils/netbox/pillarize.py router-002 (from D2790)

ops: add yousra to operations group

Update IRC channel to Libera network

Include network projects in ops group for Notifications Center

@yousra When you install the servers, you can document on IRC the main steps:

router-002 and router-003 have been created on hyper-001

WindRiver

$ nc 2001:bc8:2e84:700:0:dead:c0de:b07 18000 
��This connection is in clear text, so ensure you use a SSH tunnel to the server.

Complector (diff for Wearg eggdrop.conf)

+listen 19010 bots                                                                                                                                                                                
+listen 18010 users

*** -HQ joined the party line.
[15:50:48] Trying server irc.libera.chat:+6697
[15:50:48] Failed connect to irc.libera.chat (Vhost set in config is not available on this machine)

IP updated for the 4 configuration files (Dæghrefn, Wearg, TC2, Æschere).

WindRiver

$ salt-call --local state.apply roles/core/network/ipv6
local:
----------
          ID: /etc/rc.conf.d/netif/ipv6_igb0
    Function: file.managed
      Result: True
     Comment: File /etc/rc.conf.d/netif/ipv6_igb0 updated
     Started: 15:37:56.041793
    Duration: 14.764 ms
     Changes:   
              ----------
              diff:
                  --- 
                  +++ 
                  @@ -14,3 +14,5 @@
                   #   </auto-generated>

Aliases are for netif_ipv6.rc

MariaDB issue fixed, but now we've some networking inforamation to do update too:

Update host for eggdrop user on db-B-001

During deployment, note MariaDB created a new user nasqueron@172.27.27.35 (username was the old eggdrop name) but didn't remove the nasqueron@172.27.27.33 user, we probably need a list of missing credentials to prune for that.

Access to Vault works fine, fetching secrets from there too, including after Terraform rotation.

Don't load DNS eggdrop module

Don't store Terraform state and always rotate secrets

Touch deployment log on deployment server

Fix AUDIT_LOG variable

Code review with Claude Sonnet 4.5 gave two improvements to the Makefile: audit log, .PHONY targets.

Update secret path for Rhyne-Wyse's Vault approle credential (part 2)

Proofread Terraform variables definition

Migrate viperserv Vault AppRole to Terraform

Update credentials fields in Salt config. Fix header.

Remove Terraform policy from Salt policies list

Install Terraform on Complector

Reconfigure Vault provider for Terraform

We need to split that one in two different concerns.

dereckson (Sébastien Santoro)
Nasqueron founderAdministrator

Projects (92)
View All

Calendar

Today

Tomorrow

Thursday

User Details

Recent Activity
View All

Yesterday

Sun, Feb 8

Sat, Feb 7

dereckson (Sébastien Santoro)Nasqueron founderAdministrator

Projects (92)View All