Page MenuHomeDevCentral
Projects security

securityTag
ActivePublic
Watch Project

Members (1)

Watchers

  • This project does not have any watchers.
  • View All

Details

Description

This tag identifies security issue.

Recent Activity
View All

Sun, Aug 23

Sandlayth added a comment to T2343: Validate privileged access - nasqueron-dev-docker.

A. Keep access

Sun, Aug 23, 20:46 · security, Servers
ptdradmin added a comment to T2342: Validate privileged access - ops.

A. Keep access

Sun, Aug 23, 19:37 · security, Servers
dereckson moved T2340: Deploy Restic client to automate files backups from Backlog to Working on on the security board.
Sun, Aug 23, 11:57 · security, Servers, Backups
dereckson moved T2342: Validate privileged access - ops from Backlog to Working on on the security board.
Sun, Aug 23, 11:57 · security, Servers
dereckson moved T2343: Validate privileged access - nasqueron-dev-docker from Backlog to Working on on the security board.
Sun, Aug 23, 11:57 · security, Servers
dereckson updated subscribers of T2343: Validate privileged access - nasqueron-dev-docker.

Cohort 1 accounts have been successfully removed from Dwellers.

Sun, Aug 23, 11:56 · security, Servers

Sat, Aug 22

ptdradmin added a comment to T2343: Validate privileged access - nasqueron-dev-docker.

A-Keep acces - Anubis tester

Sat, Aug 22, 18:46 · security, Servers

Fri, Aug 21

DorianWinty added a comment to T2342: Validate privileged access - ops.

A. Keep access

Fri, Aug 21, 16:22 · security, Servers

Thu, Aug 20

dereckson added a revision to T2343: Validate privileged access - nasqueron-dev-docker: D4170: Remove inactive users from nasqueron-dev-docker group.
Thu, Aug 20, 19:32 · security, Servers

Mon, Aug 17

dereckson triaged T2345: Scan FreeBSD packages and releases with Serpico as Wishlist priority.
Mon, Aug 17, 15:48 · security, Product evaluation

Sun, Aug 16

dereckson updated subscribers of T2343: Validate privileged access - nasqueron-dev-docker.

Cohort 1. Users with access only to nasqueron-dev-docker but not to ops.

Sun, Aug 16, 18:49 · security, Servers
dereckson added a comment to T2343: Validate privileged access - nasqueron-dev-docker.

A. Keep access - currently maintaining PHP images.

Sun, Aug 16, 18:46 · security, Servers
dereckson added a comment to T2342: Validate privileged access - ops.

A. Keep access

Sun, Aug 16, 18:46 · security, Servers
dereckson triaged T2343: Validate privileged access - nasqueron-dev-docker as Normal priority.
Sun, Aug 16, 18:45 · security, Servers
dereckson added projects to T2342: Validate privileged access - ops: Servers, security.
Sun, Aug 16, 18:44 · security, Servers

Sat, Aug 15

dereckson triaged T2340: Deploy Restic client to automate files backups as Normal priority.
Sat, Aug 15, 06:52 · security, Servers, Backups

Jul 4 2026

dereckson closed T2333: Upgrade OpenSSH version used on DevCentral as Resolved.
Jul 4 2026, 13:12 · Nasqueron security operations squad, Nasqueron Docker deployment squad, Docker images, security
dereckson added a comment to T2333: Upgrade OpenSSH version used on DevCentral.
  • Updated to Debian 12, then 13
  • /usr merge process done manually, with the help of statically compiled busybox
  • reinstalled libwebp6_0.6.1-2.1+deb11u2_amd64.deb to avoid to update PHP
Jul 4 2026, 13:08 · Nasqueron security operations squad, Nasqueron Docker deployment squad, Docker images, security
dereckson claimed T2333: Upgrade OpenSSH version used on DevCentral.
Jul 4 2026, 12:17 · Nasqueron security operations squad, Nasqueron Docker deployment squad, Docker images, security
dereckson added a comment to T2333: Upgrade OpenSSH version used on DevCentral.

Currently runs under Debian 11, target would be Debian 13.

Jul 4 2026, 12:17 · Nasqueron security operations squad, Nasqueron Docker deployment squad, Docker images, security

Jul 2 2026

dereckson triaged T2333: Upgrade OpenSSH version used on DevCentral as High priority.
Jul 2 2026, 14:18 · Nasqueron security operations squad, Nasqueron Docker deployment squad, Docker images, security

Jun 14 2026

dereckson moved T2107: j'aimerais avoir une présence permanente sur internet from Backlog to Project on the Eglide board.
Jun 14 2026, 15:04 · Eglide, security
dereckson closed T2183: Detect legacy SHA-1 RSA keys as Wontfix.

Our Salt state core/sshd does not set PubkeyAcceptedAlgorithms, so ssh-rsa (SHA-1) is blocked by default — this has been the case since OpenSSH 8.8 (released 2021-09-26, see https://www.openssh.com/txt/release-8.8).

Jun 14 2026, 14:58 · security, Python, Eglide, Servers, Operations sprints (Echoes in the Void)

Apr 22 2026

yousra added a revision to T2318: Restart Salt minion service after configuration change: D4092: Add DNS SOA serial validation pre-commit hook.
Apr 22 2026, 22:06 · security, Vault, Salt
yousra added a comment to T2318: Restart Salt minion service after configuration change.

The error occured is (T2315) :

Apr 22 2026, 11:19 · security, Vault, Salt
dereckson updated subscribers of T2318: Restart Salt minion service after configuration change.
Apr 22 2026, 11:14 · security, Vault, Salt
dereckson moved T2318: Restart Salt minion service after configuration change from Backlog to Bug and issues on the Salt board.
Apr 22 2026, 11:14 · security, Vault, Salt
dereckson triaged T2318: Restart Salt minion service after configuration change as Normal priority.
Apr 22 2026, 11:14 · security, Vault, Salt

Apr 3 2026

dereckson triaged T2297: Serve HTTP 3 traffic as Normal priority.
Apr 3 2026, 19:54 · Alkane, security, Servers

Mar 25 2026

dereckson moved T1513: Propagate certificate to Openfire server from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
Mar 25 2026, 09:32 · TLS certificates, XMPP, security, Servers
dereckson moved T1602: Provision ACME DNS credentials for core domains on each servers from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
Mar 25 2026, 09:31 · TLS certificates, Operations sprints (Ignite Alkane Propulsion), security, Servers
dereckson moved T1342: Let's encrypt on Debian use logrotate from Backlog to Let's Encrypt - legacy on the TLS certificates board.
Mar 25 2026, 09:31 · TLS certificates, security, Servers, Eglide, Salt
dereckson moved T2112: Renew Vault web server certificate automatically from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
Mar 25 2026, 09:31 · TLS certificates, security, Servers
dereckson moved T2155: Review rotation for acme.sh logs from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
Mar 25 2026, 09:30 · TLS certificates, Restricted Project, security, Servers

Mar 23 2026

dereckson merged task T1524: Monitor sudo files on servers into T2286: Detect configuration drift by computing difference between Salt states and deployed.
Mar 23 2026, 09:09 · Eglide, security, Servers
dereckson closed T1524: Monitor sudo files on servers as Wontfix.

With Salt, sudo files content are now managed from rOPS.

Mar 23 2026, 09:09 · Eglide, security, Servers

Mar 22 2026

dereckson triaged T2107: j'aimerais avoir une présence permanente sur internet as Wishlist priority.
Mar 22 2026, 23:58 · Eglide, security
dereckson added a comment to T1861: Configure static IPv6 on WindRiver.

Next: configure DNS records

Mar 22 2026, 19:08 · security, Servers, IPv6
dereckson changed the visibility for T2143: Hash Tomcat credentials.
Mar 22 2026, 19:04 · Servers, Nasqueron Docker deployment squad, security
dereckson shifted T2143: Hash Tomcat credentials from the Restricted Space space to the S1 Nasqueron space.
Mar 22 2026, 19:03 · Servers, Nasqueron Docker deployment squad, security
dereckson closed T2143: Hash Tomcat credentials as Resolved.
Mar 22 2026, 19:02 · Servers, Nasqueron Docker deployment squad, security
dereckson moved T1109: Switch all OAuth GitHub applications to Nasqueron organization accounts from Backlog to Infra on the Auth Grove board.
Mar 22 2026, 18:30 · Auth Grove, User-Dereckson, security, Nasqueron Operations Squad
dereckson triaged T1109: Switch all OAuth GitHub applications to Nasqueron organization accounts as Normal priority.
Mar 22 2026, 18:29 · Auth Grove, User-Dereckson, security, Nasqueron Operations Squad
dereckson placed T1513: Propagate certificate to Openfire server up for grabs.
Mar 22 2026, 18:21 · TLS certificates, XMPP, security, Servers
dereckson triaged T1513: Propagate certificate to Openfire server as Normal priority.
Mar 22 2026, 18:21 · TLS certificates, XMPP, security, Servers

Mar 21 2026

dereckson added a parent task for T1513: Propagate certificate to Openfire server: T2043: Switch to acme.sh instead of certbot.
Mar 21 2026, 10:32 · TLS certificates, XMPP, security, Servers
dereckson updated subscribers of T1513: Propagate certificate to Openfire server.

Will need to be revisited when we switch to acme.sh.

Mar 21 2026, 10:31 · TLS certificates, XMPP, security, Servers

Mar 20 2026

dereckson triaged T2281: [irssi] Secure proxy module with TLS connection as Wishlist priority.
Mar 20 2026, 21:51 · security, upstream, IRC, C
dereckson updated the title for P390 Anubis default botPolicies.yaml from botPolicies.yaml to Anubis default botPolicies.yaml.
Mar 20 2026, 20:03 · security, Nasqueron Docker deployment squad, Servers

Feb 5 2026

dereckson closed T2210: fullchain.pem isn't automatically generated by acme.sh as Resolved by committing rOPSc9cb237e5e18: Automate acme.sh install-cert cmd.
Feb 5 2026, 22:53 · TLS certificates, security, Mail
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator