Bug #503
Updated by Marc Dequènes over 8 years ago
New IPv4 has been added in @/etc/network/interfaces.d/wan@ (see @admin@ encrypted repository) but services/DNS doesn't use the new address. Services configurations need to updated replacing the old IPv4 by the new one.
IPv4 configuration:
<pre>
# old IPv4
iface eth0 inet static
address 193.17.192.211/28
gateway 193.17.192.222
# new IPv4
iface eth0 inet static
address 193.200.43.105/29
gateway 193.200.43.110
</pre>
The list of services (@[X]@ _updated and applied_, @[/]@ _updated (see .new files) not applied_, @[ ]@ _TODO_) :
h3. orfeo.duckcorp.org
* @[X]@ postfix (ansible not used)
** @/etc/postfix/helo_overrides.cf@ updated, modification applied using: @postmap /etc/postfix/helo_overrides.cf@
** @/etc/postfix/main.cf@ updated, modification applied using: @systemctl reload postfix@
* @[X]@ dspam (ansible not used)
** @/etc/dspam/dspam.conf@ updated, modification applied using @systemctl reload dspam.service@
* @[/]@ ircd-ratbox (ansible not used)
** @/etc/ircd-ratbox/common_exempts.conf@ and @/etc/ircd-ratbox/ircd.conf@ updated, modification NOT applied using: @systemctl restart@
* @[/]@ ratbox-services (ansible not used)
** @/etc/ratbox-services/ratbox-services.conf@ updated, modification NOT applied using: @systemctl restart@
* @[ ]@ bind
<pre>
/etc/bind/master/duckcorp.org.zone
/etc/bind/master/hurdfr.org.zone
/etc/bind/master/milkypond.org.zone
/etc/bind/tsig.conf.hivane
/etc/bind/named.conf
/etc/bind/tsig.conf
</pre>
h3. toushirou.duckcorp.org
* @[X]@ fail2ban
** @/etc/fail2ban/jail.conf@ updated, modification applied using: @systemctl restart fail2ban.service@
* @[X]@ postfix
** @/etc/postfix/main.cf@ updated, modification applied using: @systemctl reload postfix@
* @[X]@ bind
** @/etc/bind/named.conf@, @/etc/bind/tsig.conf@ and @/etc/bind/slave_zones.conf@ updated, modifications applied using @systemctl reload bind9.service@
h3. jinta.duckcorp.org
* @[/]@ ircd-ratbox (ansible not used)
** @/etc/ircd-ratbox/common_exempts.conf@ and @/etc/ircd-ratbox/ircd.conf@ updated, modification NOT applied using: @systemctl restart@
h3. Configuration managed using Ansible
* fail2ban: configuration was up to date but not applied (see 8d89acefcc85733d1823e6719ad77094ce46fb5d), configuration is now applied on all hosts @thorfinn@, @toushirou@, @jinta@ and @orfeo@.
* @/etc/resolv.conf@: branch @orfeo_new_ipv4@ needs to be reviewed, merged and applied