webapp1: Decommission webapp1 vm
This decommissions webapp1 and recyles its cname to target the new web instance (soon to be deployed [1]).
swh-octodiff webapp1
*** Running octocatalog-diff on host webapp1.internal.softwareheritage.org
I, [2023-12-14T14:11:01.590188 #276280] INFO -- : Catalogs compiled for webapp1.internal.softwareheritage.org
I, [2023-12-14T14:11:02.328817 #276280] INFO -- : Diffs computed for webapp1.internal.softwareheritage.org
diff origin/production/webapp1.internal.softwareheritage.org current/webapp1.internal.softwareheritage.org
*******************************************
- Anchor[::apache::modules_set_up]
*******************************************
- Apache::Listen[9080]
*******************************************
- Apache::Mod[access_compat]
*******************************************
- Apache::Mod[alias]
*******************************************
- Apache::Mod[auth_basic]
*******************************************
- Apache::Mod[authn_core]
*******************************************
- Apache::Mod[authn_file]
*******************************************
- Apache::Mod[authz_core]
*******************************************
- Apache::Mod[authz_groupfile]
*******************************************
- Apache::Mod[authz_host]
*******************************************
- Apache::Mod[authz_user]
*******************************************
- Apache::Mod[autoindex]
*******************************************
- Apache::Mod[cgid]
*******************************************
- Apache::Mod[dav]
*******************************************
- Apache::Mod[dav_fs]
*******************************************
- Apache::Mod[deflate]
*******************************************
- Apache::Mod[dir]
*******************************************
- Apache::Mod[env]
*******************************************
- Apache::Mod[filter]
*******************************************
- Apache::Mod[headers]
*******************************************
- Apache::Mod[mime]
*******************************************
- Apache::Mod[negotiation]
*******************************************
- Apache::Mod[proxy]
*******************************************
- Apache::Mod[proxy_http]
*******************************************
- Apache::Mod[reqtimeout]
*******************************************
- Apache::Mod[setenvif]
*******************************************
- Apache::Mod[status]
*******************************************
- Apache::Mpm[worker]
*******************************************
- Apache::Vhost[default-ssl]
*******************************************
- Apache::Vhost[default]
*******************************************
- Apache::Vhost[webapp1.internal.softwareheritage.org_non-ssl]
*******************************************
- Apt::Pin[filebeat]
*******************************************
- Apt::Pin[swh-web]
*******************************************
- Apt::Setting[pref-filebeat]
*******************************************
- Apt::Setting[pref-swh-web]
*******************************************
- Concat::Fragment[/etc/varnish/includes.vcl:early_vcl_recv]
*******************************************
- Concat::Fragment[/etc/varnish/includes.vcl:header]
*******************************************
- Concat::Fragment[/etc/varnish/includes.vcl:synth_redirect]
*******************************************
- Concat::Fragment[/etc/varnish/includes.vcl:unknown_vhost_then_forbidden_access]
*******************************************
- Concat::Fragment[/etc/varnish/includes.vcl:vhost_webapp1.internal.softwareheritage.org]
*******************************************
- Concat::Fragment[/etc/varnish/includes.vcl:webapp]
*******************************************
- Concat::Fragment[Apache ports header]
*******************************************
- Concat::Fragment[Listen 9080]
*******************************************
- Concat::Fragment[archive_webapp1 cacert]
*******************************************
- Concat::Fragment[archive_webapp1 cert]
*******************************************
- Concat::Fragment[archive_webapp1 dhparams]
*******************************************
- Concat::Fragment[archive_webapp1 key]
*******************************************
- Concat::Fragment[default-access_log]
*******************************************
- Concat::Fragment[default-apache-header]
*******************************************
- Concat::Fragment[default-directories]
*******************************************
- Concat::Fragment[default-docroot]
*******************************************
- Concat::Fragment[default-file_footer]
*******************************************
- Concat::Fragment[default-logging]
*******************************************
- Concat::Fragment[default-scriptalias]
*******************************************
- Concat::Fragment[default-serversignature]
*******************************************
- Concat::Fragment[default-ssl-access_log]
*******************************************
- Concat::Fragment[default-ssl-apache-header]
*******************************************
- Concat::Fragment[default-ssl-directories]
*******************************************
- Concat::Fragment[default-ssl-docroot]
*******************************************
- Concat::Fragment[default-ssl-file_footer]
*******************************************
- Concat::Fragment[default-ssl-logging]
*******************************************
- Concat::Fragment[default-ssl-scriptalias]
*******************************************
- Concat::Fragment[default-ssl-serversignature]
*******************************************
- Concat::Fragment[hitch::config config]
*******************************************
- Concat::Fragment[hitch::domain archive_webapp1]
*******************************************
- Concat::Fragment[nginx-metrics-500-6666cd76f96956469e7be39d750cc7d9]
*******************************************
- Concat::Fragment[nginx-metrics-500-ae3b848d2daecffc635ae20b0b882d8f]
*******************************************
- Concat::Fragment[nginx-metrics-footer]
*******************************************
- Concat::Fragment[nginx-metrics-header]
*******************************************
- Concat::Fragment[nginx-swh-search-500-6666cd76f96956469e7be39d750cc7d9]
*******************************************
- Concat::Fragment[nginx-swh-search-default-500-6666cd76f96956469e7be39d750cc7d9]
*******************************************
- Concat::Fragment[nginx-swh-search-default-footer]
*******************************************
- Concat::Fragment[nginx-swh-search-default-header]
*******************************************
- Concat::Fragment[nginx-swh-search-footer]
*******************************************
- Concat::Fragment[nginx-swh-search-header]
*******************************************
- Concat::Fragment[nginx-swh-storage-500-6666cd76f96956469e7be39d750cc7d9]
*******************************************
- Concat::Fragment[nginx-swh-storage-default-500-6666cd76f96956469e7be39d750cc7d9]
*******************************************
- Concat::Fragment[nginx-swh-storage-default-footer]
*******************************************
- Concat::Fragment[nginx-swh-storage-default-header]
*******************************************
- Concat::Fragment[nginx-swh-storage-footer]
*******************************************
- Concat::Fragment[nginx-swh-storage-header]
*******************************************
- Concat::Fragment[swh-search-gunicorn_upstream_footer]
*******************************************
- Concat::Fragment[swh-search-gunicorn_upstream_header]
*******************************************
- Concat::Fragment[swh-search-gunicorn_upstream_member_gunicorn-search]
*******************************************
- Concat::Fragment[swh-storage-gunicorn_upstream_footer]
*******************************************
- Concat::Fragment[swh-storage-gunicorn_upstream_header]
*******************************************
- Concat::Fragment[swh-storage-gunicorn_upstream_member_gunicorn-storage]
*******************************************
- Concat::Fragment[webapp1.internal.softwareheritage.org_non-ssl-access_log]
*******************************************
- Concat::Fragment[webapp1.internal.softwareheritage.org_non-ssl-aliases]
*******************************************
- Concat::Fragment[webapp1.internal.softwareheritage.org_non-ssl-apache-header]
*******************************************
- Concat::Fragment[webapp1.internal.softwareheritage.org_non-ssl-custom_fragment]
*******************************************
- Concat::Fragment[webapp1.internal.softwareheritage.org_non-ssl-directories]
*******************************************
- Concat::Fragment[webapp1.internal.softwareheritage.org_non-ssl-docroot]
*******************************************
- Concat::Fragment[webapp1.internal.softwareheritage.org_non-ssl-file_footer]
*******************************************
- Concat::Fragment[webapp1.internal.softwareheritage.org_non-ssl-logging]
*******************************************
- Concat::Fragment[webapp1.internal.softwareheritage.org_non-ssl-proxy]
*******************************************
- Concat::Fragment[webapp1.internal.softwareheritage.org_non-ssl-serversignature]
*******************************************
- Concat[/etc/apache2/ports.conf]
*******************************************
- Concat[/etc/hitch/archive_webapp1.pem]
*******************************************
- Concat[/etc/hitch/hitch.conf]
*******************************************
- Concat[/etc/nginx/conf.d/swh-search-gunicorn-upstream.conf]
*******************************************
- Concat[/etc/nginx/conf.d/swh-storage-gunicorn-upstream.conf]
*******************************************
- Concat[/etc/nginx/sites-available/nginx-metrics.conf]
*******************************************
- Concat[/etc/nginx/sites-available/nginx-swh-search-default.conf]
*******************************************
- Concat[/etc/nginx/sites-available/nginx-swh-search.conf]
*******************************************
- Concat[/etc/nginx/sites-available/nginx-swh-storage-default.conf]
*******************************************
- Concat[/etc/nginx/sites-available/nginx-swh-storage.conf]
*******************************************
- Concat[/etc/varnish/includes.vcl]
*******************************************
- Concat[15-default-80.conf]
*******************************************
- Concat[15-default-ssl-443.conf]
*******************************************
- Concat[25-webapp1.internal.softwareheritage.org_non-ssl.conf]
*******************************************
- Concat_file[/etc/apache2/ports.conf]
*******************************************
- Concat_file[/etc/hitch/archive_webapp1.pem]
*******************************************
- Concat_file[/etc/hitch/hitch.conf]
*******************************************
- Concat_file[/etc/nginx/conf.d/swh-search-gunicorn-upstream.conf]
*******************************************
- Concat_file[/etc/nginx/conf.d/swh-storage-gunicorn-upstream.conf]
*******************************************
- Concat_file[/etc/nginx/sites-available/nginx-metrics.conf]
*******************************************
- Concat_file[/etc/nginx/sites-available/nginx-swh-search-default.conf]
*******************************************
- Concat_file[/etc/nginx/sites-available/nginx-swh-search.conf]
*******************************************
- Concat_file[/etc/nginx/sites-available/nginx-swh-storage-default.conf]
*******************************************
- Concat_file[/etc/nginx/sites-available/nginx-swh-storage.conf]
*******************************************
- Concat_file[/etc/varnish/includes.vcl]
*******************************************
- Concat_file[15-default-80.conf]
*******************************************
- Concat_file[15-default-ssl-443.conf]
*******************************************
- Concat_file[25-webapp1.internal.softwareheritage.org_non-ssl.conf]
*******************************************
- Concat_file[profile::cron::borgmatic]
*******************************************
- Concat_fragment[/etc/varnish/includes.vcl:early_vcl_recv]
*******************************************
- Concat_fragment[/etc/varnish/includes.vcl:header]
*******************************************
- Concat_fragment[/etc/varnish/includes.vcl:synth_redirect]
*******************************************
- Concat_fragment[/etc/varnish/includes.vcl:unknown_vhost_then_forbidden_access]
*******************************************
- Concat_fragment[/etc/varnish/includes.vcl:vhost_webapp1.internal.softwareheritage.org]
*******************************************
- Concat_fragment[/etc/varnish/includes.vcl:webapp]
*******************************************
- Concat_fragment[Apache ports header]
*******************************************
- Concat_fragment[Listen 9080]
*******************************************
- Concat_fragment[archive_webapp1 cacert]
*******************************************
- Concat_fragment[archive_webapp1 cert]
*******************************************
- Concat_fragment[archive_webapp1 dhparams]
*******************************************
- Concat_fragment[archive_webapp1 key]
*******************************************
- Concat_fragment[default-access_log]
*******************************************
- Concat_fragment[default-apache-header]
*******************************************
- Concat_fragment[default-directories]
*******************************************
- Concat_fragment[default-docroot]
*******************************************
- Concat_fragment[default-file_footer]
*******************************************
- Concat_fragment[default-logging]
*******************************************
- Concat_fragment[default-scriptalias]
*******************************************
- Concat_fragment[default-serversignature]
*******************************************
- Concat_fragment[default-ssl-access_log]
*******************************************
- Concat_fragment[default-ssl-apache-header]
*******************************************
- Concat_fragment[default-ssl-directories]
*******************************************
- Concat_fragment[default-ssl-docroot]
*******************************************
- Concat_fragment[default-ssl-file_footer]
*******************************************
- Concat_fragment[default-ssl-logging]
*******************************************
- Concat_fragment[default-ssl-scriptalias]
*******************************************
- Concat_fragment[default-ssl-serversignature]
*******************************************
- Concat_fragment[hitch::config config]
*******************************************
- Concat_fragment[hitch::domain archive_webapp1]
*******************************************
- Concat_fragment[nginx-metrics-500-6666cd76f96956469e7be39d750cc7d9]
*******************************************
- Concat_fragment[nginx-metrics-500-ae3b848d2daecffc635ae20b0b882d8f]
*******************************************
- Concat_fragment[nginx-metrics-footer]
*******************************************
- Concat_fragment[nginx-metrics-header]
*******************************************
- Concat_fragment[nginx-swh-search-500-6666cd76f96956469e7be39d750cc7d9]
*******************************************
- Concat_fragment[nginx-swh-search-default-500-6666cd76f96956469e7be39d750cc7d9]
*******************************************
- Concat_fragment[nginx-swh-search-default-footer]
*******************************************
- Concat_fragment[nginx-swh-search-default-header]
*******************************************
- Concat_fragment[nginx-swh-search-footer]
*******************************************
- Concat_fragment[nginx-swh-search-header]
*******************************************
- Concat_fragment[nginx-swh-storage-500-6666cd76f96956469e7be39d750cc7d9]
*******************************************
- Concat_fragment[nginx-swh-storage-default-500-6666cd76f96956469e7be39d750cc7d9]
*******************************************
- Concat_fragment[nginx-swh-storage-default-footer]
*******************************************
- Concat_fragment[nginx-swh-storage-default-header]
*******************************************
- Concat_fragment[nginx-swh-storage-footer]
*******************************************
- Concat_fragment[nginx-swh-storage-header]
*******************************************
- Concat_fragment[profile::cron::borgmatic-create]
*******************************************
- Concat_fragment[profile::cron::borgmatic-full]
*******************************************
- Concat_fragment[profile::cron::borgmatic::_header]
*******************************************
- Concat_fragment[swh-search-gunicorn_upstream_footer]
*******************************************
- Concat_fragment[swh-search-gunicorn_upstream_header]
*******************************************
- Concat_fragment[swh-search-gunicorn_upstream_member_gunicorn-search]
*******************************************
- Concat_fragment[swh-storage-gunicorn_upstream_footer]
*******************************************
- Concat_fragment[swh-storage-gunicorn_upstream_header]
*******************************************
- Concat_fragment[swh-storage-gunicorn_upstream_member_gunicorn-storage]
*******************************************
- Concat_fragment[webapp1.internal.softwareheritage.org_non-ssl-access_log]
*******************************************
- Concat_fragment[webapp1.internal.softwareheritage.org_non-ssl-aliases]
*******************************************
- Concat_fragment[webapp1.internal.softwareheritage.org_non-ssl-apache-header]
*******************************************
- Concat_fragment[webapp1.internal.softwareheritage.org_non-ssl-custom_fragment]
*******************************************
- Concat_fragment[webapp1.internal.softwareheritage.org_non-ssl-directories]
*******************************************
- Concat_fragment[webapp1.internal.softwareheritage.org_non-ssl-docroot]
*******************************************
- Concat_fragment[webapp1.internal.softwareheritage.org_non-ssl-file_footer]
*******************************************
- Concat_fragment[webapp1.internal.softwareheritage.org_non-ssl-logging]
*******************************************
- Concat_fragment[webapp1.internal.softwareheritage.org_non-ssl-proxy]
*******************************************
- Concat_fragment[webapp1.internal.softwareheritage.org_non-ssl-serversignature]
*******************************************
- Exec[/usr/sbin/a2dismod event]
*******************************************
- Exec[/usr/sbin/a2dismod prefork]
*******************************************
- Exec[active-initialize]
*******************************************
- Exec[hitch::config generate dhparams]
*******************************************
- Exec[mkdir /etc/apache2/conf.d]
*******************************************
- Exec[mkdir /etc/apache2/mods-available]
*******************************************
- Exec[mkdir /etc/apache2/mods-enabled]
*******************************************
- Exec[mkdir /etc/apache2/sites-available]
*******************************************
- Exec[mkdir /etc/apache2/sites-enabled]
*******************************************
- Exec[remove distribution event conf file]
*******************************************
- Exec[remove distribution event load file]
*******************************************
- Exec[ssh-keygen -t ed25519 -f /root/.ssh/id_ed25519.borg -N '']
*******************************************
- Exec[swh-search-initialize]
*******************************************
- Exec[systemd-tmpfiles]
*******************************************
- Exec[varnish_systemctl_daemon_reload]
*******************************************
- Exec[vcl_reload]
*******************************************
- File[/etc/apache2/apache2.conf]
*******************************************
- File[/etc/apache2/conf.d]
*******************************************
- File[/etc/apache2/mods-available/access_compat.load]
*******************************************
- File[/etc/apache2/mods-available/alias.conf]
*******************************************
- File[/etc/apache2/mods-available/alias.load]
*******************************************
- File[/etc/apache2/mods-available/auth_basic.load]
*******************************************
- File[/etc/apache2/mods-available/authn_core.load]
*******************************************
- File[/etc/apache2/mods-available/authn_file.load]
*******************************************
- File[/etc/apache2/mods-available/authz_core.load]
*******************************************
- File[/etc/apache2/mods-available/authz_groupfile.load]
*******************************************
- File[/etc/apache2/mods-available/authz_host.load]
*******************************************
- File[/etc/apache2/mods-available/authz_user.load]
*******************************************
- File[/etc/apache2/mods-available/autoindex.conf]
*******************************************
- File[/etc/apache2/mods-available/autoindex.load]
*******************************************
- File[/etc/apache2/mods-available/cgid.conf]
*******************************************
- File[/etc/apache2/mods-available/cgid.load]
*******************************************
- File[/etc/apache2/mods-available/dav.load]
*******************************************
- File[/etc/apache2/mods-available/dav_fs.conf]
*******************************************
- File[/etc/apache2/mods-available/dav_fs.load]
*******************************************
- File[/etc/apache2/mods-available/deflate.conf]
*******************************************
- File[/etc/apache2/mods-available/deflate.load]
*******************************************
- File[/etc/apache2/mods-available/dir.conf]
*******************************************
- File[/etc/apache2/mods-available/dir.load]
*******************************************
- File[/etc/apache2/mods-available/env.load]
*******************************************
- File[/etc/apache2/mods-available/filter.load]
*******************************************
- File[/etc/apache2/mods-available/headers.load]
*******************************************
- File[/etc/apache2/mods-available/mime.conf]
*******************************************
- File[/etc/apache2/mods-available/mime.load]
*******************************************
- File[/etc/apache2/mods-available/negotiation.conf]
*******************************************
- File[/etc/apache2/mods-available/negotiation.load]
*******************************************
- File[/etc/apache2/mods-available/proxy.conf]
*******************************************
- File[/etc/apache2/mods-available/proxy.load]
*******************************************
- File[/etc/apache2/mods-available/proxy_http.load]
*******************************************
- File[/etc/apache2/mods-available/reqtimeout.conf]
*******************************************
- File[/etc/apache2/mods-available/reqtimeout.load]
*******************************************
- File[/etc/apache2/mods-available/setenvif.conf]
*******************************************
- File[/etc/apache2/mods-available/setenvif.load]
*******************************************
- File[/etc/apache2/mods-available/status.conf]
*******************************************
- File[/etc/apache2/mods-available/status.load]
*******************************************
- File[/etc/apache2/mods-available/worker.conf]
*******************************************
- File[/etc/apache2/mods-available/worker.load]
*******************************************
- File[/etc/apache2/mods-available]
*******************************************
- File[/etc/apache2/mods-enabled/access_compat.load]
*******************************************
- File[/etc/apache2/mods-enabled/alias.conf]
*******************************************
- File[/etc/apache2/mods-enabled/alias.load]
*******************************************
- File[/etc/apache2/mods-enabled/auth_basic.load]
*******************************************
- File[/etc/apache2/mods-enabled/authn_core.load]
*******************************************
- File[/etc/apache2/mods-enabled/authn_file.load]
*******************************************
- File[/etc/apache2/mods-enabled/authz_core.load]
*******************************************
- File[/etc/apache2/mods-enabled/authz_groupfile.load]
*******************************************
- File[/etc/apache2/mods-enabled/authz_host.load]
*******************************************
- File[/etc/apache2/mods-enabled/authz_user.load]
*******************************************
- File[/etc/apache2/mods-enabled/autoindex.conf]
*******************************************
- File[/etc/apache2/mods-enabled/autoindex.load]
*******************************************
- File[/etc/apache2/mods-enabled/cgid.conf]
*******************************************
- File[/etc/apache2/mods-enabled/cgid.load]
*******************************************
- File[/etc/apache2/mods-enabled/dav.load]
*******************************************
- File[/etc/apache2/mods-enabled/dav_fs.conf]
*******************************************
- File[/etc/apache2/mods-enabled/dav_fs.load]
*******************************************
- File[/etc/apache2/mods-enabled/deflate.conf]
*******************************************
- File[/etc/apache2/mods-enabled/deflate.load]
*******************************************
- File[/etc/apache2/mods-enabled/dir.conf]
*******************************************
- File[/etc/apache2/mods-enabled/dir.load]
*******************************************
- File[/etc/apache2/mods-enabled/env.load]
*******************************************
- File[/etc/apache2/mods-enabled/filter.load]
*******************************************
- File[/etc/apache2/mods-enabled/headers.load]
*******************************************
- File[/etc/apache2/mods-enabled/mime.conf]
*******************************************
- File[/etc/apache2/mods-enabled/mime.load]
*******************************************
- File[/etc/apache2/mods-enabled/negotiation.conf]
*******************************************
- File[/etc/apache2/mods-enabled/negotiation.load]
*******************************************
- File[/etc/apache2/mods-enabled/proxy.conf]
*******************************************
- File[/etc/apache2/mods-enabled/proxy.load]
*******************************************
- File[/etc/apache2/mods-enabled/proxy_http.load]
*******************************************
- File[/etc/apache2/mods-enabled/reqtimeout.conf]
*******************************************
- File[/etc/apache2/mods-enabled/reqtimeout.load]
*******************************************
- File[/etc/apache2/mods-enabled/setenvif.conf]
*******************************************
- File[/etc/apache2/mods-enabled/setenvif.load]
*******************************************
- File[/etc/apache2/mods-enabled/status.conf]
*******************************************
- File[/etc/apache2/mods-enabled/status.load]
*******************************************
- File[/etc/apache2/mods-enabled/worker.conf]
*******************************************
- File[/etc/apache2/mods-enabled/worker.load]
*******************************************
- File[/etc/apache2/mods-enabled]
*******************************************
- File[/etc/apache2/sites-available]
*******************************************
- File[/etc/apache2/sites-enabled/15-default-80.conf]
*******************************************
- File[/etc/apache2/sites-enabled/15-default-ssl-443.conf]
*******************************************
- File[/etc/apache2/sites-enabled/25-webapp1.internal.softwareheritage.org_non-ssl.conf]
*******************************************
- File[/etc/apache2/sites-enabled]
*******************************************
- File[/etc/apt/preferences.d/filebeat.pref]
*******************************************
- File[/etc/apt/preferences.d/swh-web.pref]
*******************************************
- File[/etc/borgmatic/config.yaml]
*******************************************
- File[/etc/borgmatic]
*******************************************
- File[/etc/cron.d/puppet-borgmatic]
*******************************************
- File[/etc/default/prometheus-nginx-exporter]
*******************************************
- File[/etc/default/prometheus-varnish-exporter]
*******************************************
- File[/etc/default/varnish]
*******************************************
- File[/etc/filebeat/filebeat.yml]
*******************************************
- File[/etc/filebeat/inputs.d/varnishncsa.log.yml]
*******************************************
- File[/etc/filebeat/inputs.d/webapp-non-ssl-access.yml]
*******************************************
- File[/etc/filebeat/inputs.d/webapp1.internal.softwareheritage.org-non-ssl-access.yml]
*******************************************
- File[/etc/filebeat/inputs.d]
*******************************************
- File[/etc/gunicorn/instances/swh-search.cfg]
*******************************************
- File[/etc/gunicorn/instances/swh-storage.cfg]
*******************************************
- File[/etc/gunicorn/instances/swh-webapp.cfg]
*******************************************
- File[/etc/gunicorn/instances]
*******************************************
- File[/etc/gunicorn/logconfig.ini]
*******************************************
- File[/etc/gunicorn]
*******************************************
- File[/etc/hitch/dhparams.pem]
*******************************************
- File[/etc/hitch]
*******************************************
- File[/etc/logrotate.d/swh-webapp]
*******************************************
- File[/etc/memcached.conf]
*******************************************
- File[/etc/nginx/conf.d/error_status-map.conf]
*******************************************
- File[/etc/nginx/conf.d]
*******************************************
- File[/etc/nginx/conf.mail.d]
*******************************************
- File[/etc/nginx/conf.stream.d]
*******************************************
- File[/etc/nginx/mime.types]
*******************************************
- File[/etc/nginx/nginx.conf]
*******************************************
- File[/etc/nginx/sites-available]
*******************************************
- File[/etc/nginx/sites-enabled/nginx-metrics.conf]
*******************************************
- File[/etc/nginx/sites-enabled/nginx-swh-search-default.conf]
*******************************************
- File[/etc/nginx/sites-enabled/nginx-swh-search.conf]
*******************************************
- File[/etc/nginx/sites-enabled/nginx-swh-storage-default.conf]
*******************************************
- File[/etc/nginx/sites-enabled/nginx-swh-storage.conf]
*******************************************
- File[/etc/nginx/sites-enabled]
*******************************************
- File[/etc/nginx/snippets]
*******************************************
- File[/etc/nginx/streams-available]
*******************************************
- File[/etc/nginx/streams-enabled]
*******************************************
- File[/etc/nginx]
*******************************************
- File[/etc/softwareheritage/search/server.yml]
*******************************************
- File[/etc/softwareheritage/search]
*******************************************
- File[/etc/softwareheritage/storage/storage.yml]
*******************************************
- File[/etc/softwareheritage/storage]
*******************************************
- File[/etc/softwareheritage/web/http_auth]
*******************************************
- File[/etc/softwareheritage/web/web.yml]
*******************************************
- File[/etc/softwareheritage/web]
*******************************************
- File[/etc/ssl/certs/letsencrypt/archive_webapp1/cert.pem]
*******************************************
- File[/etc/ssl/certs/letsencrypt/archive_webapp1/chain.pem]
*******************************************
- File[/etc/ssl/certs/letsencrypt/archive_webapp1/fullchain.pem]
*******************************************
- File[/etc/ssl/certs/letsencrypt/archive_webapp1/privkey.pem]
*******************************************
- File[/etc/ssl/certs/letsencrypt/archive_webapp1]
*******************************************
- File[/etc/ssl/certs/letsencrypt]
*******************************************
- File[/etc/systemd/system/gunicorn-swh-search.service]
*******************************************
- File[/etc/systemd/system/gunicorn-swh-storage.service]
*******************************************
- File[/etc/systemd/system/gunicorn-swh-webapp.service]
*******************************************
- File[/etc/systemd/system/gunicorn.service]
*******************************************
- File[/etc/systemd/system/prometheus-nginx-exporter.service.d/ordering.conf]
*******************************************
- File[/etc/systemd/system/prometheus-nginx-exporter.service.d/restart.conf]
*******************************************
- File[/etc/systemd/system/prometheus-nginx-exporter.service.d]
*******************************************
- File[/etc/systemd/system/prometheus-varnish-exporter.service.d/restart.conf]
*******************************************
- File[/etc/systemd/system/prometheus-varnish-exporter.service.d/user.conf]
*******************************************
- File[/etc/systemd/system/prometheus-varnish-exporter.service.d]
*******************************************
- File[/etc/systemd/system/swh-webapp-sync-mailmaps.service]
*******************************************
- File[/etc/systemd/system/swh-webapp-sync-mailmaps.timer]
*******************************************
- File[/etc/systemd/system/swh-webapp-update-savecodenow-statuses.service]
*******************************************
- File[/etc/systemd/system/swh-webapp-update-savecodenow-statuses.timer]
*******************************************
- File[/etc/systemd/system/varnish.service]
*******************************************
- File[/etc/tmpfiles.d/gunicorn-swh-search.conf]
*******************************************
- File[/etc/tmpfiles.d/gunicorn-swh-storage.conf]
*******************************************
- File[/etc/tmpfiles.d/gunicorn-swh-webapp.conf]
*******************************************
- File[/etc/tmpfiles.d/gunicorn.conf]
*******************************************
- File[/etc/tmpfiles.d/nginx.conf]
*******************************************
- File[/etc/varnish/default.vcl]
*******************************************
- File[/etc/varnish/includes/00_early_vcl_recv.vcl]
*******************************************
- File[/etc/varnish/includes/01_webapp.vcl]
*******************************************
- File[/etc/varnish/includes/10_synth_redirect.vcl]
*******************************************
- File[/etc/varnish/includes/50_vhost_webapp1.internal.softwareheritage.org.vcl]
*******************************************
- File[/etc/varnish/includes/99_unknown_vhost_then_forbidden_access.vcl]
*******************************************
- File[/etc/varnish/includes]
*******************************************
- File[/etc/varnish/secret]
*******************************************
- File[/home/swhwebapp/.pg_service.conf]
*******************************************
- File[/home/swhwebapp/.pgpass]
*******************************************
- File[/run/nginx/client_body_temp]
*******************************************
- File[/run/nginx/proxy_temp]
*******************************************
- File[/run/nginx]
*******************************************
- File[/tmp/nginx.d]
*******************************************
- File[/tmp/nginx.mail.d]
*******************************************
- File[/var/lib/borg]
*******************************************
- File[/var/lib/hitch]
*******************************************
- File[/var/log/apache2]
*******************************************
- File[/var/log/nginx]
*******************************************
- File[/var/log/softwareheritage/webapp/swh-web.log]
*******************************************
- File[/var/log/softwareheritage/webapp]
*******************************************
- File[/var/www/webapp1.internal.softwareheritage.org]
*******************************************
- File_line[swhwebapp:pgpass:softwareheritage-sync-mailmaps]
*******************************************
- Gunicorn::Instance[swh-search]
*******************************************
- Gunicorn::Instance[swh-storage]
*******************************************
- Gunicorn::Instance[swh-webapp]
*******************************************
- Hitch::Domain[archive_webapp1]
*******************************************
- Icinga2::Object::Service[swh-search api (local on webapp1.internal.softwareheritage.org)]
*******************************************
- Icinga2::Object::Service[swh-search api (remote on webapp1.internal.softwareheritage.org)]
*******************************************
- Icinga2::Object::Service[swh-storage api (local on webapp1.internal.softwareheritage.org)]
*******************************************
- Icinga2::Object::Service[swh-storage api (remote on webapp1.internal.softwareheritage.org)]
*******************************************
- Icinga2::Object::Service[swh-webapp https certificate webapp1.internal.softwareheritage.org]
*******************************************
- Icinga2::Object::Service[swh-webapp https on webapp1.internal.softwareheritage.org]
*******************************************
- Icinga2::Object::Service[webapp http redirect on webapp1.internal.softwareheritage.org]
*******************************************
- Ini_setting[swhwebapp:pg_service.conf:softwareheritage-sync-mailmaps:dbname]
*******************************************
- Ini_setting[swhwebapp:pg_service.conf:softwareheritage-sync-mailmaps:host]
*******************************************
- Ini_setting[swhwebapp:pg_service.conf:softwareheritage-sync-mailmaps:port]
*******************************************
- Ini_setting[swhwebapp:pg_service.conf:softwareheritage-sync-mailmaps:user]
*******************************************
- Nginx::Resource::Location[/metrics]
*******************************************
- Nginx::Resource::Location[nginx-metrics-default]
*******************************************
- Nginx::Resource::Location[nginx-swh-search-default-default]
*******************************************
- Nginx::Resource::Location[nginx-swh-search-default]
*******************************************
- Nginx::Resource::Location[nginx-swh-storage-default-default]
*******************************************
- Nginx::Resource::Location[nginx-swh-storage-default]
*******************************************
- Nginx::Resource::Map[error_status]
*******************************************
- Nginx::Resource::Server[nginx-metrics]
*******************************************
- Nginx::Resource::Server[nginx-swh-search-default]
*******************************************
- Nginx::Resource::Server[nginx-swh-search]
*******************************************
- Nginx::Resource::Server[nginx-swh-storage-default]
*******************************************
- Nginx::Resource::Server[nginx-swh-storage]
*******************************************
- Nginx::Resource::Upstream::Member[gunicorn-search]
*******************************************
- Nginx::Resource::Upstream::Member[gunicorn-storage]
*******************************************
- Nginx::Resource::Upstream[swh-search-gunicorn]
*******************************************
- Nginx::Resource::Upstream[swh-storage-gunicorn]
*******************************************
+ Node[default]
*******************************************
- Node[webapp1.internal.softwareheritage.org]
*******************************************
- Package[borgbackup]
*******************************************
- Package[borgmatic]
*******************************************
- Package[filebeat]
*******************************************
- Package[gunicorn3]
*******************************************
- Package[hitch]
*******************************************
- Package[httpd]
*******************************************
- Package[memcached]
*******************************************
- Package[mime-support]
*******************************************
- Package[nginx]
*******************************************
- Package[prometheus-nginx-exporter]
*******************************************
- Package[prometheus-varnish-exporter]
*******************************************
- Package[python3-swh.search]
*******************************************
- Package[python3-swh.storage]
*******************************************
- Package[python3-swh.web]
*******************************************
- Package[varnish-modules]
*******************************************
- Package[varnish]
*******************************************
- Profile::Cron::D[borgmatic-create]
*******************************************
- Profile::Cron::D[borgmatic-full]
*******************************************
- Profile::Cron::File[borgmatic]
*******************************************
- Profile::Filebeat::Log_input[varnishncsa.log]
*******************************************
- Profile::Filebeat::Log_input[webapp1.internal.softwareheritage.org-non-ssl-access]
*******************************************
- Profile::Hitch::Ssl_cert[archive_webapp1]
*******************************************
- Profile::Letsencrypt::Certificate[archive_webapp1]
*******************************************
- Profile::Prometheus::Export_scrape_config[nginx]
*******************************************
- Profile::Prometheus::Export_scrape_config[swh-webapp_webapp1.internal.softwareheritage.org]
*******************************************
- Profile::Prometheus::Export_scrape_config[varnish]
*******************************************
- Profile::Swh::Deploy::Install_web_deps[swh-web]
*******************************************
- Profile::Swh::Deploy::Rpc_server[search]
*******************************************
- Profile::Swh::Deploy::Rpc_server[storage]
*******************************************
- Profile::Varnish::Vcl_include[early_vcl_recv]
*******************************************
- Profile::Varnish::Vcl_include[synth_redirect]
*******************************************
- Profile::Varnish::Vcl_include[unknown_vhost_then_forbidden_access]
*******************************************
- Profile::Varnish::Vcl_include[vhost_webapp1.internal.softwareheritage.org]
*******************************************
- Profile::Varnish::Vcl_include[webapp]
*******************************************
- Profile::Varnish::Vhost[webapp1.internal.softwareheritage.org]
*******************************************
- Service[filebeat]
*******************************************
- Service[gunicorn-swh-search]
*******************************************
- Service[gunicorn-swh-storage]
*******************************************
- Service[gunicorn-swh-webapp]
*******************************************
- Service[gunicorn]
*******************************************
- Service[hitch]
*******************************************
- Service[httpd]
*******************************************
- Service[memcached]
*******************************************
- Service[nginx]
*******************************************
- Service[prometheus-nginx-exporter]
*******************************************
- Service[prometheus-varnish-exporter]
*******************************************
- Service[swh-webapp-sync-mailmaps.timer]
*******************************************
- Service[swh-webapp-update-savecodenow-statuses.timer]
*******************************************
- Service[varnish]
*******************************************
- Systemd::Dropin_file[prometheus-nginx-exporter/ordering.conf]
*******************************************
- Systemd::Dropin_file[prometheus-nginx-exporter/restart.conf]
*******************************************
- Systemd::Dropin_file[prometheus-varnish-exporter/config.conf]
*******************************************
- Systemd::Dropin_file[prometheus-varnish-exporter/restart.conf]
*******************************************
- Systemd::Timer[swh-webapp-sync-mailmaps.timer]
*******************************************
- Systemd::Timer[swh-webapp-update-savecodenow-statuses.timer]
*******************************************
- Systemd::Tmpfile[gunicorn-swh-search.conf]
*******************************************
- Systemd::Tmpfile[gunicorn-swh-storage.conf]
*******************************************
- Systemd::Tmpfile[gunicorn-swh-webapp.conf]
*******************************************
- Systemd::Tmpfile[gunicorn.conf]
*******************************************
- Systemd::Tmpfile[nginx.conf]
*******************************************
- Systemd::Unit_file[gunicorn-swh-search.service]
*******************************************
- Systemd::Unit_file[gunicorn-swh-storage.service]
*******************************************
- Systemd::Unit_file[gunicorn-swh-webapp.service]
*******************************************
- Systemd::Unit_file[gunicorn.service]
*******************************************
- Systemd::Unit_file[swh-webapp-sync-mailmaps.service]
*******************************************
- Systemd::Unit_file[swh-webapp-sync-mailmaps.timer]
*******************************************
- Systemd::Unit_file[swh-webapp-update-savecodenow-statuses.service]
*******************************************
- Systemd::Unit_file[swh-webapp-update-savecodenow-statuses.timer]
*******************************************
- User[www-data]
*******************************************
- Varnish::Vcl[/etc/varnish/default.vcl]
*******************************************
- Varnish::Vcl[/etc/varnish/includes/00_early_vcl_recv.vcl]
*******************************************
- Varnish::Vcl[/etc/varnish/includes/01_webapp.vcl]
*******************************************
- Varnish::Vcl[/etc/varnish/includes/10_synth_redirect.vcl]
*******************************************
- Varnish::Vcl[/etc/varnish/includes/50_vhost_webapp1.internal.softwareheritage.org.vcl]
*******************************************
- Varnish::Vcl[/etc/varnish/includes/99_unknown_vhost_then_forbidden_access.vcl]
*******************************************
*** End octocatalog-diff on webapp1.internal.softwareheritage.orgswh-octodiff pergamon
diff origin/production/pergamon.softwareheritage.org current/pergamon.softwareheritage.org
*******************************************
File[/etc/bind/keys/local-update] =>
parameters =>
content =>
@@ -2,4 +2,4 @@
key local-update {
algorithm hmac-sha256;
- secret "fyNXHQQ5roCXL6/oSzTUf4wegnaGUr79WCj40m+SwYq9zJeGtfHEo0QSg2l541PFbg5z7eUDTAApxo8ZDJuYvw==";
+ secret "q7eQiwNbM/jFmnip5y83AUiyt9MB6LLF75/aTMb4Wtw1eSOAWfUlwPZSAbjZEJzUnc8XTTKSANcRKtNpd+bq6w==";
};
*******************************************
File[/etc/bind/rndc.key] =>
parameters =>
content =>
@@ -2,4 +2,4 @@
key rndc-key {
algorithm hmac-md5;
- secret "a8tCstoi4k3Z+G0tO0xq4qHYcGtsl5bckqgz47C0TxYvcYTsbqfEKxJudzq0zPHQhgwT+7mu+R5/GWEhYmJdyQ==";
+ secret "x4cc19+UGKhZLp35uJclAUgt7slLIX1+K9YBd89Xg/YDQKe4cY9oeK6QjdOrezQmM2OuLJtgEAdjZF+JOwS43w==";
};
*******************************************
+ Resource_record[webapp1-production/CNAME] =>
parameters =>
"data": "k8s-archive-production-rke2.internal.softwareheritage.org.",
"keyfile": "/etc/bind/keys/local-update",
"record": "webapp1.internal.softwareheritage.org",
"type": "CNAME"
*******************************************
*** End octocatalog-diff on pergamon.softwareheritage.orgEdited by Antoine R. Dumont