vh
d3f59aa2c5
albok-service leaves nh3-docker before unit 4 puts the personal vault and licensed books into restricted wings. On nh3-docker, portainer, portainer_agent, dockge (socket rw) and dockerd on plaintext tcp/2375 were each root over /srv/albok. The new host runs only albok-service: no socket containers and no TCP Docker API, so its Homepage tile is a static services.yaml entry. - nh3-pve-2: vmbr0 made VLAN-aware (applied by reboot, no guests running); pbs-ana storage in the new namespace nh3-pve-2, plus a 21:30 vzdump job (pbs-nh3's recursive sync mirrors it) - VM 110 nh3-albok, 10.100.50.44 on VLAN 50, Debian 13 cloud-init, 4 vCPU x86-64-v3 / 12 GiB / 100 GB; built to fleet conventions (vh 1000, infra-ops 850, docker 851) - compose: mem_limit 4g -> 8g, homepage labels removed; host port 8392 kept - cutover by tar stream, verified by digest (contents plus owner, group, mode, mtime and type identical); albok.nh3.internal now points at nh3-albok - old /srv/albok stays on nh3-docker (container removed, compose renamed) until acceptance and the operator's approval to delete it - sudo-io archive hosts and ops-log STACK_HOSTS include nh3-albok
29 lines
1.2 KiB
INI
29 lines
1.2 KiB
INI
# name ssh target (infra-ops, NOPASSWD sudo, `Defaults:infra-ops log_output` in /etc/sudoers.d/infra-ops)
|
|
# Hosts with no infra-ops sudo (pfi-postgres, ana-wg, nh3-nas, the SureFire hosts) record nothing and are not listed.
|
|
pfi-pve infra-ops@10.250.250.31
|
|
nh3-pve infra-ops@10.100.250.60
|
|
nh3-pve-2 infra-ops@10.100.250.62
|
|
esh-pve infra-ops@10.0.250.35
|
|
esh-nas-pve infra-ops@10.0.50.55
|
|
pbs-ana infra-ops@10.250.50.90
|
|
pbs-nh3 infra-ops@10.100.50.90
|
|
ana-docker infra-ops@10.250.50.70
|
|
ana-nas infra-ops@10.250.50.50
|
|
ana-filebot infra-ops@10.250.50.53
|
|
corviduo-dev infra-ops@10.250.50.152
|
|
pfi-pteradactyl infra-ops@10.250.50.55
|
|
pfi-tacticalrmm infra-ops@10.250.50.57
|
|
fv-ml1 infra-ops@10.251.50.54
|
|
irv-ml1 infra-ops@irv-ml1.nh3.internal
|
|
pfi-gx10 infra-ops@10.100.50.60
|
|
nh3-dev infra-ops@10.100.10.50
|
|
nh3-docker infra-ops@10.100.50.40
|
|
nh3-albok infra-ops@10.100.50.44
|
|
nh3-extdev infra-ops@10.100.50.42
|
|
nh3-ml1 infra-ops@10.100.50.80
|
|
esh-docker-vm infra-ops@10.0.50.45
|
|
esh-vm-db infra-ops@10.0.50.60
|
|
esh-ml1 infra-ops@10.0.50.80
|
|
esh-matter infra-ops@10.0.90.20
|
|
vm-esh-nas infra-ops@10.0.50.154
|