ops(pfi-ana-webhost): retired (VM 110 stopped, FortiGate policy 18 disabled); dragonfireacoustics.com located on Cloudflare Pages

2026-10-04 16:57:49 -07:00
parent 0e3ab447af
commit 55e4d01b49
3 changed files with 18 additions and 4 deletions
@@ -1,4 +1,17 @@
-# pfi-ana-webhost
+# pfi-ana-webhost — RETIRED 2026-10-04
+
+> **Retired 2026-10-04 (Prime: "retire dragonfirepro").** VM 110 shut down, `onboot 0`, out of the nightly vzdump
+> (last backup `pbs-ana:backup/vm/110/2026-10-04T10:28:18Z`; the VM is kept, not destroyed). FortiGate policy 18
+> `wan-to-webhost-web` (WAN → HTTP/HTTPS/**SSH**) set `status disable`; VIPs `web-to-webhost` (1:1 .45 → .52) and
+> `ssh-to-webhost` are left in place but inert. Config backup `/var/tmp/ana-gw-config-20261004T235515Z-pre-webhost-retire.conf`
+> on nh3-dev.
+>
+> Why: it was Debian 11 + Virtualmin with 183 pending updates (177 security) and SSH open to the internet, and it served
+> nothing live. Its one vhost, `dragonfirepro.com`, belongs to a drop-catcher since 2025-09-27. Its aliases
+> (`dragonfireacoustics.com`, `www.`) moved on 2026-09-24 to **Cloudflare Pages in the client's own Cloudflare account**
+> (project `dragonfireacoustics`; source on nh3-dev `~/development/adhoc/dragonfireacoustics-site`, deploy creds vaulted
+> `nh3-dev/.config/cloudflare/dragonfireacoustics-com`; domain now on Cloudflare Registrar, expires 2035-10-30,
+> transfer-locked). To bring the VM back: `qm set 110 --onboot 1 && qm start 110`, re-enable policy 18.

 General-purpose webhost at the Anaheim colo.

@@ -37,7 +37,7 @@ hypervisor):
 - **VM 105** — `pfi-postgres` (PFI-Postgres; PGDATA on local VM disk as of 2026-04-23 migration off ana-nas NFS) — `servers/pfi-postgres/`
 - **VM 106** — `corviduo-dev` (Worldtree-team dev VM, PFI-hosted) — `servers/corviduo-dev/`
 - **VM 107** — `pfi-pteradactyl` (game panel) — `servers/pfi-pteradactyl/`
- **VM 110** — `pfi-ana-webhost` — `servers/pfi-ana-webhost/`
+- **VM 110** — `pfi-ana-webhost` — **RETIRED 2026-10-04: stopped, `onboot 0`, out of vzdump** — `servers/pfi-ana-webhost/`
 - **VM 111** — `pfi-tacticalrmm` — `servers/pfi-tacticalrmm/`
 - **CT 109** — `ana-nas` (Debian LXC serving NFS/SMB; bind-mounts
  from ospool; data-serving SPOF — see `memory/incident_ana_nas_spof.md`) — `servers/ana-nas/`