ops: phasefinal.com moved to Cloudflare Pages; pfi-ana-webhost destroyed and removed from inventory, DNS and the FortiGate
This commit is contained in:
@@ -1,53 +0,0 @@
|
||||
# pfi-ana-webhost — RETIRED 2026-10-04
|
||||
|
||||
> **Retired 2026-10-04 (Prime: "retire dragonfirepro").** VM 110 shut down, `onboot 0`, out of the nightly vzdump
|
||||
> (last backup `pbs-ana:backup/vm/110/2026-10-04T10:28:18Z`; the VM is kept, not destroyed). FortiGate policy 18
|
||||
> `wan-to-webhost-web` (WAN → HTTP/HTTPS/**SSH**) set `status disable`; VIPs `web-to-webhost` (1:1 .45 → .52) and
|
||||
> `ssh-to-webhost` are left in place but inert. Config backup `/var/tmp/ana-gw-config-20261004T235515Z-pre-webhost-retire.conf`
|
||||
> on nh3-dev.
|
||||
>
|
||||
> Why: it was Debian 11 + Virtualmin with 183 pending updates (177 security) and SSH open to the internet, and it served
|
||||
> nothing live. Its one vhost, `dragonfirepro.com`, belongs to a drop-catcher since 2025-09-27. Its aliases
|
||||
> (`dragonfireacoustics.com`, `www.`) moved on 2026-09-24 to **Cloudflare Pages in the client's own Cloudflare account**
|
||||
> (project `dragonfireacoustics`; source on nh3-dev `~/development/adhoc/dragonfireacoustics-site`, deploy creds vaulted
|
||||
> `nh3-dev/.config/cloudflare/dragonfireacoustics-com`; domain now on Cloudflare Registrar, expires 2035-10-30,
|
||||
> transfer-locked). To bring the VM back: `qm set 110 --onboot 1 && qm start 110`, re-enable policy 18.
|
||||
|
||||
General-purpose webhost at the Anaheim colo.
|
||||
|
||||
## Network
|
||||
|
||||
- **LAN IP:** 10.250.50.52
|
||||
- **SSH:** `lkraven@pfi-ana-webhost` (key auth — verify on first run)
|
||||
|
||||
## Infrastructure
|
||||
|
||||
- **Hypervisor:** `pfi-pve` (VMID **110**)
|
||||
- **Type:** Linux VM
|
||||
- **Site:** Anaheim (PFI colo)
|
||||
|
||||
## Role
|
||||
|
||||
Web-facing workload host. DNS name includes `pfi-ana-webhost.phasefinal.com`.
|
||||
Specific services running here aren't catalogued in this workspace yet —
|
||||
refresh the snapshot and inspect.
|
||||
|
||||
## Backup coverage
|
||||
|
||||
- **VM-image:** ✅ vzdump on pfi-pve (daily, per the 2026-04-20 audit)
|
||||
- **File-level restic:** ❌ not yet configured
|
||||
|
||||
If this host starts carrying any state worth per-file restore (app
|
||||
configs, TLS certs, DBs), add a `configs/restic/pfi-ana-webhost/`
|
||||
profile following the ana-ml2 template.
|
||||
|
||||
## Refresh state
|
||||
|
||||
```bash
|
||||
scripts/refresh-server-info.sh pfi-ana-webhost
|
||||
```
|
||||
|
||||
## Discovered via
|
||||
|
||||
`scripts/discover-fortigate.sh 10.250.250.1` on 2026-04-21 —
|
||||
FortiGate DHCP lease (MAC `e6:f9:3a:c9:61:2a`).
|
||||
@@ -1 +0,0 @@
|
||||
lkraven@10.250.50.52
|
||||
@@ -1,104 +0,0 @@
|
||||
|
||||
===== HOST =====
|
||||
|
||||
Hostname: pfi-ana-webhost.phasefinal.com
|
||||
Date: 2026-04-23T01:00:53-07:00
|
||||
Uptime: up 34 weeks, 4 days, 11 hours, 35 minutes
|
||||
OS: Debian GNU/Linux 11 (bullseye)
|
||||
Kernel: 5.10.0-34-amd64
|
||||
Arch: x86_64
|
||||
|
||||
===== HARDWARE =====
|
||||
|
||||
CPU cores: 16
|
||||
CPU model: Common KVM processor
|
||||
MemTotal: 0.8 GB
|
||||
MemAvailable: 0.3 GB
|
||||
|
||||
===== GPUS =====
|
||||
|
||||
nvidia-smi not present (no NVIDIA GPUs or driver not installed)
|
||||
|
||||
===== FILESYSTEMS (df) =====
|
||||
|
||||
Filesystem Size Used Avail Use% Mounted on
|
||||
/dev/sda1 245G 8.6G 224G 4% /
|
||||
|
||||
===== PERSISTENT MOUNTS (/etc/fstab, non-comment) =====
|
||||
|
||||
UUID=110a7e2b-aaf8-4a55-a064-408b665ee322 / ext4 rw,grpquota,errors=remount-ro,relatime,quota,usrquota 0 1
|
||||
UUID=f788f710-a3ec-457e-8053-2eeca8c3f029 none swap sw 0 0
|
||||
/dev/sr0 /media/cdrom0 udf,iso9660 user,noauto 0 0
|
||||
/home/dragonfirepro /home/chroot/169559808468512/home/dragonfirepro bind defaults,bind 0
|
||||
|
||||
===== TARGETED DATA PATHS =====
|
||||
|
||||
/opt (total: 4.0K)
|
||||
total 8
|
||||
drwxr-xr-x 2 root root 4096 2023-09-24 15:42 .
|
||||
drwxr-xr-x 18 root root 4096 2025-04-12 13:58 ..
|
||||
|
||||
/srv (total: 12K)
|
||||
total 12
|
||||
drwxr-xr-x 3 root root 4096 2023-09-24 16:15 .
|
||||
drwxr-xr-x 18 root root 4096 2025-04-12 13:58 ..
|
||||
drwxr-xr-x 2 ftp nogroup 4096 2023-09-24 16:15 ftp
|
||||
|
||||
|
||||
===== DOCKER =====
|
||||
|
||||
docker not installed
|
||||
|
||||
===== COMPOSE FILES (/opt/docker/compose/) =====
|
||||
|
||||
/opt/docker/compose not present
|
||||
|
||||
===== CONFIG LAYOUT (/opt/docker/conf/ — top 200 entries) =====
|
||||
|
||||
/opt/docker/conf not present
|
||||
|
||||
===== LISTENING PORTS =====
|
||||
|
||||
0.0.0.0:10000
|
||||
0.0.0.0:110
|
||||
0.0.0.0:143
|
||||
0.0.0.0:20000
|
||||
0.0.0.0:22
|
||||
0.0.0.0:993
|
||||
0.0.0.0:995
|
||||
[::]:10000
|
||||
10.250.50.52:53
|
||||
[::]:110
|
||||
[::1]:10023
|
||||
[::1]:25
|
||||
127.0.0.1:10023
|
||||
127.0.0.1:25
|
||||
127.0.0.1:3306
|
||||
127.0.0.1:465
|
||||
127.0.0.1:53
|
||||
127.0.0.1:587
|
||||
127.0.0.1:953
|
||||
[::]:143
|
||||
[::1]:465
|
||||
[::1]:53
|
||||
[::1]:587
|
||||
[::1]:953
|
||||
*:21
|
||||
[::]:22
|
||||
*:2222
|
||||
*:443
|
||||
*:80
|
||||
[::]:993
|
||||
[::]:995
|
||||
[fe80::e4f9:3aff:fec9:612a]%ens18:53
|
||||
|
||||
===== MODEL / HUGGINGFACE CACHES =====
|
||||
|
||||
|
||||
===== DOCKER-ADJACENT SYSTEMD SERVICES =====
|
||||
|
||||
(none matching)
|
||||
|
||||
===== DONE =====
|
||||
|
||||
Paste the above back into the chat, or pass a path as argv[1] to save.
|
||||
@@ -37,7 +37,7 @@ hypervisor):
|
||||
- **VM 105** — `pfi-postgres` (PFI-Postgres; PGDATA on local VM disk as of 2026-04-23 migration off ana-nas NFS) — `servers/pfi-postgres/`
|
||||
- **VM 106** — `corviduo-dev` (Worldtree-team dev VM, PFI-hosted) — `servers/corviduo-dev/`
|
||||
- **VM 107** — `pfi-pteradactyl` (game panel) — `servers/pfi-pteradactyl/`
|
||||
- **VM 110** — `pfi-ana-webhost` — **RETIRED 2026-10-04: stopped, `onboot 0`, out of vzdump** — `servers/pfi-ana-webhost/`
|
||||
- ~~**VM 110** — `pfi-ana-webhost`~~ — **destroyed 2026-10-04** (Prime); last image `pbs-ana:backup/vm/110/2026-10-04T10:28:18Z`; history in `docs/retired/pfi-ana-webhost/`
|
||||
- **VM 111** — `pfi-tacticalrmm` — `servers/pfi-tacticalrmm/`
|
||||
- **CT 109** — `ana-nas` (Debian LXC serving NFS/SMB; bind-mounts
|
||||
from ospool; data-serving SPOF — see `memory/incident_ana_nas_spof.md`) — `servers/ana-nas/`
|
||||
|
||||
Reference in New Issue
Block a user