Page MenuHomeDevCentral

dereckson (Sébastien Santoro)
Nasqueron founderAdministrator

Projects (90)

Today

  • Clear sailing ahead.

Tomorrow

  • Clear sailing ahead.

Friday

  • Clear sailing ahead.

User Details

User Since
Nov 11 2014, 04:38 (506 w, 1 d)
Roles
Administrator
Availability
Available

At Nasqueron, I maintain this Phabricator instance, and overview the operations infrastructure.

Website: https://www.dereckson.be/

Individual board: User-Dereckson

Recent Activity

Today

dereckson added a parent task for T1986: Upgrade Debian version for docker-nginx-php-fpm image: Unknown Object (Maniphest Task).
Wed, Jul 24, 19:55 · Docker images
dereckson triaged T1986: Upgrade Debian version for docker-nginx-php-fpm image as High priority.
Wed, Jul 24, 19:54 · Docker images
dereckson added a subtask for T1950: Deploy PHP 8.3: Unknown Object (Maniphest Task).
Wed, Jul 24, 19:36 · Servers, PHP 8.x support
dereckson updated the summary of D3375: Configure pg_HBA for dovecot user.
Wed, Jul 24, 17:47
dereckson accepted D3375: Configure pg_HBA for dovecot user.
Wed, Jul 24, 17:45
dereckson updated the task description for T1983: Enable telemetry on Vault.
Wed, Jul 24, 00:00 · Vault, Monitoring and reporting

Yesterday

dereckson triaged T1983: Enable telemetry on Vault as Low priority.
Tue, Jul 23, 23:57 · Vault, Monitoring and reporting
dereckson requested review of D3374: Expose RabbitMQ metrics on port 15692.
Tue, Jul 23, 23:34
dereckson added a revision to T1633: Collect metrics from RabbitMQ: D3374: Expose RabbitMQ metrics on port 15692.
Tue, Jul 23, 23:34 · Operations sprints (Consolidate them all), Servers
dereckson updated the task description for T1633: Collect metrics from RabbitMQ.
Tue, Jul 23, 23:27 · Operations sprints (Consolidate them all), Servers
dereckson updated the diff for D3373: Enable rabbitmq_prometheus plugin.

+port

Tue, Jul 23, 23:25
dereckson updated the summary of D3373: Enable rabbitmq_prometheus plugin.
Tue, Jul 23, 23:24
dereckson added a revision to T1633: Collect metrics from RabbitMQ: D3373: Enable rabbitmq_prometheus plugin.
Tue, Jul 23, 23:24 · Operations sprints (Consolidate them all), Servers
dereckson requested review of D3373: Enable rabbitmq_prometheus plugin.
Tue, Jul 23, 23:15
dereckson added a revision to T1623: Deploy Prometheus to gain observability: D3373: Enable rabbitmq_prometheus plugin.
Tue, Jul 23, 23:15 · Monitoring and reporting, Operations sprints (Consolidate them all), Servers
dereckson committed rOPSd98f98eb5e5d: Collect Docker metrics with Prometheus (authored by dereckson).
Collect Docker metrics with Prometheus
Tue, Jul 23, 23:08
dereckson closed D3372: Collect Docker metrics with Prometheus.
Tue, Jul 23, 23:08
dereckson added a comment to D3372: Collect Docker metrics with Prometheus.

Deployed on both Docker engines, but docker-002 is still to be restarted, probably good idea to sync that with dnf update

Tue, Jul 23, 23:08
dereckson accepted D3372: Collect Docker metrics with Prometheus.
Tue, Jul 23, 23:07
dereckson added a revision to T1623: Deploy Prometheus to gain observability: D3372: Collect Docker metrics with Prometheus.
Tue, Jul 23, 23:05 · Monitoring and reporting, Operations sprints (Consolidate them all), Servers
dereckson requested review of D3372: Collect Docker metrics with Prometheus.
Tue, Jul 23, 23:05
dereckson added a reverting change for D2609: Install Python 3.9 on CentOS/Rocky 8.5 machines: D3371: Revert "Install Python 3.9 on CentOS/Rocky 8.5 machines".
Tue, Jul 23, 22:41
dereckson requested review of D3371: Revert "Install Python 3.9 on CentOS/Rocky 8.5 machines".
Tue, Jul 23, 22:41
dereckson added a reverting change for rOPSe509029a4712: Install Python 3.9 on CentOS/Rocky 8.5 machines: D3371: Revert "Install Python 3.9 on CentOS/Rocky 8.5 machines".
Tue, Jul 23, 22:41
dereckson added a revision to T1982: Upgrade from Python 3.9 to Python 3.11+: D3371: Revert "Install Python 3.9 on CentOS/Rocky 8.5 machines".
Tue, Jul 23, 22:41 · Servers
dereckson updated the task description for T1982: Upgrade from Python 3.9 to Python 3.11+.
Tue, Jul 23, 22:40 · Servers
dereckson added a task to D3366: Upgrade certbot to Python 3.11: T1982: Upgrade from Python 3.9 to Python 3.11+.
Tue, Jul 23, 22:38
dereckson added a revision to T1982: Upgrade from Python 3.9 to Python 3.11+: D3366: Upgrade certbot to Python 3.11.
Tue, Jul 23, 22:38 · Servers
dereckson added a task to D3368: Bump default versions to build ports: T1982: Upgrade from Python 3.9 to Python 3.11+.
Tue, Jul 23, 22:38
dereckson added a revision to T1982: Upgrade from Python 3.9 to Python 3.11+: D3368: Bump default versions to build ports.
Tue, Jul 23, 22:38 · Servers
dereckson triaged T1982: Upgrade from Python 3.9 to Python 3.11+ as Normal priority.
Tue, Jul 23, 22:37 · Servers
dereckson added a revision to T1623: Deploy Prometheus to gain observability: D3370: Deploy Prometheus on WindRiver.
Tue, Jul 23, 22:28 · Monitoring and reporting, Operations sprints (Consolidate them all), Servers
dereckson added a comment to T1931: Dovecot Provisioning.

Also, we need to declare Dovecot ports at https://netbox.nasqueron.org/virtualization/virtual-machines/10/ services table (on the public IP)

Tue, Jul 23, 21:36 · Mail, Restricted Project, Servers
dereckson removed a parent task for T1981: Upgrade to FreeBSD 14.1: T1980: ZFS collector doesn't work everywhere.
Tue, Jul 23, 21:15 · Servers
dereckson removed a subtask for T1980: ZFS collector doesn't work everywhere: T1981: Upgrade to FreeBSD 14.1.
Tue, Jul 23, 21:15 · Monitoring and reporting, Servers
dereckson closed T1980: ZFS collector doesn't work everywhere as Resolved.

I suspect the version 1.6.1 (currently in packages) is compatible with FreeBSD 13 while the version 1.8.2 is compatible with FreeBSD 14.

Tue, Jul 23, 21:15 · Monitoring and reporting, Servers
dereckson moved T1978: Document monitoring checks from Backlog to Checks on the Monitoring and reporting board.
Tue, Jul 23, 20:58 · Salt, Monitoring and reporting
dereckson moved T1945: Deploy a simple Nagios or Naemon to have a reference implementation from Backlog to Checks on the Monitoring and reporting board.
Tue, Jul 23, 20:58 · Monitoring and reporting
dereckson moved T1623: Deploy Prometheus to gain observability from Backlog to Prometheus on the Monitoring and reporting board.
Tue, Jul 23, 20:57 · Monitoring and reporting, Operations sprints (Consolidate them all), Servers
dereckson moved T1980: ZFS collector doesn't work everywhere from Backlog to Prometheus on the Monitoring and reporting board.
Tue, Jul 23, 20:57 · Monitoring and reporting, Servers
dereckson moved T1392: Evaluate Prometheus from Backlog to Prometheus on the Monitoring and reporting board.
Tue, Jul 23, 20:57 · Monitoring and reporting, Product evaluation
dereckson added a subtask for T1981: Upgrade to FreeBSD 14.1: T1972: Update WindRiver to FreeBSD 14.1.
Tue, Jul 23, 20:57 · Servers
dereckson added a parent task for T1972: Update WindRiver to FreeBSD 14.1: T1981: Upgrade to FreeBSD 14.1.
Tue, Jul 23, 20:57 · Servers
dereckson triaged T1981: Upgrade to FreeBSD 14.1 as High priority.
Tue, Jul 23, 20:57 · Servers
dereckson triaged T1980: ZFS collector doesn't work everywhere as Low priority.
Tue, Jul 23, 20:55 · Monitoring and reporting, Servers
dereckson committed rOPSa1b74616cbad: Deploy Prometheus Node Exporter (authored by dereckson).
Deploy Prometheus Node Exporter
Tue, Jul 23, 20:10
dereckson closed D3369: Deploy Prometheus Node Exporter.
Tue, Jul 23, 20:10
dereckson accepted D3369: Deploy Prometheus Node Exporter.
Tue, Jul 23, 20:09
dereckson updated the diff for D3369: Deploy Prometheus Node Exporter.

Align names

Tue, Jul 23, 19:58
dereckson updated the diff for D3369: Deploy Prometheus Node Exporter.

hunt-insecable-spaces

Tue, Jul 23, 19:57
dereckson updated the diff for D3369: Deploy Prometheus Node Exporter.

Avoid duplicate jinja context for service config

Tue, Jul 23, 19:56
dereckson updated the diff for D3369: Deploy Prometheus Node Exporter.

hunt-insecable-spaces

Tue, Jul 23, 19:51
dereckson updated the diff for D3369: Deploy Prometheus Node Exporter.

Configure systemd service to restrict to private IP too

Tue, Jul 23, 19:50
dereckson updated the diff for D3369: Deploy Prometheus Node Exporter.

no-op on FreeBSD

Tue, Jul 23, 19:14
dereckson updated the diff for D3369: Deploy Prometheus Node Exporter.

Service name is different on EPEL package

Tue, Jul 23, 19:08
dereckson added a comment to D3369: Deploy Prometheus Node Exporter.

Successfully deployed on FreeBSD servers:

Tue, Jul 23, 18:56
dereckson requested review of D3369: Deploy Prometheus Node Exporter.
Tue, Jul 23, 18:30
dereckson added a revision to T1623: Deploy Prometheus to gain observability: D3369: Deploy Prometheus Node Exporter.
Tue, Jul 23, 18:30 · Monitoring and reporting, Operations sprints (Consolidate them all), Servers
dereckson added a comment to T1623: Deploy Prometheus to gain observability.

Independently of the 2020 plan for a service mesh, we're going to deploy Prometheus right now to gain observability on currently deployed services.

Tue, Jul 23, 18:05 · Monitoring and reporting, Operations sprints (Consolidate them all), Servers
dereckson added a comment to T1392: Evaluate Prometheus.

Prometheus has gained in traction and timeseries become now more and more standard.

Tue, Jul 23, 18:01 · Monitoring and reporting, Product evaluation
dereckson renamed T1392: Evaluate Prometheus from Deploy Prometheus to Evaluate Prometheus.
Tue, Jul 23, 17:57 · Monitoring and reporting, Product evaluation
dereckson added a project to T1392: Evaluate Prometheus: Monitoring and reporting.
Tue, Jul 23, 17:57 · Monitoring and reporting, Product evaluation
dereckson renamed T1392: Evaluate Prometheus from Evaluate Prometheus to Deploy Prometheus.
Tue, Jul 23, 17:56 · Monitoring and reporting, Product evaluation
dereckson moved T1392: Evaluate Prometheus from Backlog to Current focus on the Product evaluation board.
Tue, Jul 23, 17:56 · Monitoring and reporting, Product evaluation
dereckson added a comment to T1877: Evaluate Alcali - Salt front-end.

It could be easier to deploy https://github.com/kpetremann/salt-exporter

Tue, Jul 23, 17:56 · security, Salt, Servers, Product evaluation
dereckson added a comment to T1978: Document monitoring checks.

In D2648, NRPE directory has been set to dirs.share + "/monitoring/checks/nrpe", resolved on FreeBSD to /usr/local/share/monitoring/checks/nrpe directory.

Tue, Jul 23, 17:30 · Salt, Monitoring and reporting
dereckson triaged T1979: Migrate from FANTOIR to TOPO as Low priority.
Tue, Jul 23, 06:13 · Dæghrefn, Nasqueron Databases
dereckson created T1979: Migrate from FANTOIR to TOPO.
Tue, Jul 23, 06:13 · Dæghrefn, Nasqueron Databases
dereckson added a revision to T1950: Deploy PHP 8.3: D3368: Bump default versions to build ports.
Tue, Jul 23, 06:04 · Servers, PHP 8.x support
dereckson added a task to D3368: Bump default versions to build ports: T1950: Deploy PHP 8.3.
Tue, Jul 23, 06:04
dereckson requested review of D3368: Bump default versions to build ports.
Tue, Jul 23, 06:02
dereckson accepted D3366: Upgrade certbot to Python 3.11.
Tue, Jul 23, 05:59
dereckson retitled D3366: Upgrade certbot to Python 3.11 from Upgrade to Python 3.11 to Upgrade certbot to Python 3.11.
Tue, Jul 23, 05:59
dereckson committed rOPSbf3710b826d8: Switch to http2 directive for nginx 1.25.1+ (authored by dereckson).
Switch to http2 directive for nginx 1.25.1+
Tue, Jul 23, 05:56
dereckson closed D3367: Switch to http2 directive for nginx 1.25.1+.
Tue, Jul 23, 05:56
dereckson accepted D3367: Switch to http2 directive for nginx 1.25.1+.
Tue, Jul 23, 05:56
dereckson updated the diff for D3367: Switch to http2 directive for nginx 1.25.1+.

Use double quotes in Jinja

Tue, Jul 23, 05:55
dereckson requested review of D3367: Switch to http2 directive for nginx 1.25.1+.
Tue, Jul 23, 05:53

Sun, Jul 21

dereckson triaged T1978: Document monitoring checks as High priority.
Sun, Jul 21, 13:39 · Salt, Monitoring and reporting
dereckson triaged T1970: Configure Mailbox thugh salt as Normal priority.
Sun, Jul 21, 13:25 · Restricted Project, Mail
dereckson triaged T1977: missing import of packages_prefixes as Normal priority.
Sun, Jul 21, 13:24 · Mail
dereckson moved T1967: Alkane definition of the error message from Backlog to Dev on the good-first-issue board.
Sun, Jul 21, 13:24 · good-first-issue, Alkane
dereckson moved T1971: Avoid to use user.present or group.present without stable UID/GID from Backlog to Ops on the good-first-issue board.
Sun, Jul 21, 13:24 · good-first-issue, Salt

Thu, Jul 18

dereckson accepted D3365: Create PostgreSQL credentials for Dovecot.
Thu, Jul 18, 18:50

Mon, Jul 15

dereckson added a comment to T1475: Provision a mail server.

DNS change

Mon, Jul 15, 20:17 · Mail, Restricted Project, Servers
dereckson moved T1973: ViMbAdmin Security Issue from Backlog - On hold pending T1475 to Working on on the Mail board.
Mon, Jul 15, 20:14 · Mail
dereckson moved T1977: missing import of packages_prefixes from Backlog - On hold pending T1475 to Working on on the Mail board.
Mon, Jul 15, 20:14 · Mail

Fri, Jul 12

dereckson closed D3363: Install mail clients on devserver and shellserver roles.
Fri, Jul 12, 20:46
dereckson committed rOPSee6002ea2288: Install mail clients on devserver and shellserver roles (authored by dereckson).
Install mail clients on devserver and shellserver roles
Fri, Jul 12, 20:46
dereckson closed D3361: Provision /usr/ports a more resiliant way.
Fri, Jul 12, 20:46
dereckson committed rOPS0925ab320bd2: Provision /usr/ports a more resiliant way (authored by dereckson).
Provision /usr/ports a more resiliant way
Fri, Jul 12, 20:46
dereckson edited reviewers for D3363: Install mail clients on devserver and shellserver roles, added: DorianWinty; removed: dereckson.
Fri, Jul 12, 20:44
dereckson added a revision to T1475: Provision a mail server: D3363: Install mail clients on devserver and shellserver roles.
Fri, Jul 12, 20:41 · Mail, Restricted Project, Servers
dereckson requested review of D3363: Install mail clients on devserver and shellserver roles.
Fri, Jul 12, 20:41

Wed, Jul 10

dereckson updated the task description for T1668: Improve inclusive terminology.
Wed, Jul 10, 20:22 · User-Dereckson, documentation, We are Nasqueron, discussion
dereckson added a comment to T1668: Improve inclusive terminology.

Recovered PDF from Internet Archive: {F3335166}

Wed, Jul 10, 20:22 · User-Dereckson, documentation, We are Nasqueron, discussion
dereckson closed T1974: Update windu SSH key as Resolved.

Key confirmed to work.

Wed, Jul 10, 19:17 · security, Servers

Tue, Jul 9

dereckson closed D3357: Allow to issue Vault token with admin policy.
Tue, Jul 9, 22:33
dereckson committed rOPS02c2202539c6: Allow to issue Vault token with admin policy (authored by dereckson).
Allow to issue Vault token with admin policy
Tue, Jul 9, 22:33
dereckson committed rOPSac101a5a5af9: Require pre-commit itself (authored by dereckson).
Require pre-commit itself
Tue, Jul 9, 22:29