At Nasqueron, I maintain this Phabricator instance, and overview the operations infrastructure.
Website: https://www.dereckson.be/
Individual board: User-Dereckson
At Nasqueron, I maintain this Phabricator instance, and overview the operations infrastructure.
Website: https://www.dereckson.be/
Individual board: User-Dereckson
We've a last nginx fix to apply to simplify the configuration, and we'll be good to close this task.
[ We've code for this one, we've different use cases (MediaWiki, Zed, Auth Grove), but none of those projects has a bug with high priority to resolve this. ]
This is a temporary fix to fix the current error.
First step of the plan is done.
$ salt windriver state.sls_id /var/51-wwwroot/keruald roles/devserver/webserver-wwwroot51/sites windriver: ---------- ID: /var/51-wwwroot/keruald Function: file.directory Result: True Comment: Started: 13:18:37.079288 Duration: 14.887 ms Changes: ---------- /var/51-wwwroot/keruald: ---------- directory: new ---------- ID: /var/51-wwwroot/keruald Function: git.latest Name: ssh://vcs@devcentral.nasqueron.org:5022/source/keruald.git Result: True Comment: ssh://vcs@devcentral.nasqueron.org:5022/source/keruald.git cloned to /var/51-wwwroot/keruald Started: 13:18:37.112109 Duration: 1992.425 ms Changes: ---------- new: ssh://vcs@devcentral.nasqueron.org:5022/source/keruald.git => /var/51-wwwroot/keruald revision: ---------- new: ba7ec81ee0d34f16361fee39247bbeb047240b8e old: None
Current status: this is mostly implemented, but still to document properly per previous comment.
There are several issues here:
This if condition is a currently an always true for our infrastructure as it says "if "OS/distro is every OS we currently have".
Thanks to D4057 we now have a direct nginx error log to parse:
Repository for FreeBSD is currently broken, as we don't have a repository for FreeBSD 15 ready.
Let's create a new unit for OSPF and move those in roles/router/frrouting
Split DevCentral config in another change. Update SELinux policy.
Use web as shared group between nginx and anubis, so nginx can connect to anubis socket. Resolve target container port.
Update Anubis config.
Rebased. Removed comments for private key (not supported by Anubis). Provisioned systemd service template.
Rebased. Add anubis user. Trim unused setting.
I think the Salt key format slightly changed:
Generated with Claude Cowork using Opus 4.6.
$ ./check-mail-aliases WARNING: aliases newer than aliases.db (run newaliases)
Generated with Claude Opus 4.6 to evaluate Cowork suitability for non-technical maintenance tasks in repositories.