- unblocked ruby-mail upgrade on Orfeo:
- critical patch /root/ruby-mail_part_ordering_fix.patch now unnecessary
- not sure patch ruby-mail_content-type_default_fix.patch is useful (keeping unapplied)
- moved patches on Orfeo in /root/patches (like on other machines)
- unblocked libfreetype6 upgrade on Orfeo and Toushirou (too many security problems, please revert if something breaks and no easy workaround is found/possible)
- fixed awstats not able to reach Elwing (used DDNS)
- added missing slave zone for DDNS (NS RR was set but Toushirou was not configured, my bad)
- Zabbix work:
- fixed temperature trigger calculation and thresholds
- adjusted pollers' resources to handle the queue better
- update mail config to enable sending mail from DuckLand using sendmail:
- updated local_header_rewrite_clients (was left to the old value static:all to avoid problems when it changed in Postfix 2.2, but this is wrong)
- reenabled and updated masquerade*_ settings
- Zabbix work:
- fixed several trigger description missing the "on {HOST.NAME}" part, which made alerts more difficult to follow
- fixed parameter for FTP service check
- fixed NTP service down not triggering any alert
- replaced obsolete {HOSTNAME} macro
- purged obsolete websites:
- ga.duckcorp.org
- admin-nerim.duckcorp.org (remnants)
- purged obsolete DNS entries:
- updated _servers DNS entry (not sure if it is still usefull)
- 1.0.0.9.0.4.7.1.c.7.6.0.1.0.0.2.ip6.arpa could not be DNSSEC-signed anymore as DLV is gone and Hivane has no DNSSEC support yet
- fixed ns1.duckcorp.org glue record still having previous Orfeo's IP
- purged obsolete websites:
- cleanup in the DNSSEC database (problems due to old bugs and manual DB manipulations to work around them)
- fixed pending rollover detection
- upgraded NextCloud (11.0.2->11.0.3)
- added dimers.science domain for NS1/NS2/MX2 and delegation to boutil via Banya
- upgraded Piwik (3.0.2->3.0.3)
- upgraded Piwik (2.16.4->3.0.2)
DuckCorp Infrastructure:
work
