Skip to main content

To Do

Outstanding infrastructure jobs. Tick an item off when it's done, and add new ones as they come up.

  • Make the infrastructure make commands pull from Gitea, not from local repositories.
  • Migrate all front-end services on services-staff and services-user to Gitea, and set up a CI/CD pipeline for them.
  • Review all Corais (Grafana) dashboards.
  • Set up alerts on Corais and send them to alerts.abair.ie.
  • Optimise the services on Amergin, based on current performance and load testing.
  • Load test the API Gateway, and set up regular tests.
  • Finish deduplicating the media files on the Dagda NAS, then back them up to the Hetzner Storage Box and an external hard drive (to be purchased).
  • Set up alerts from Wazuh to alerts.abair.ie, and monitor them.
  • Add MISP to Secops.
  • Update all front-end subdomains (check versions, CSP and so on).
  • Grafana: replace password login with Gitea OAuth, so 2FA is enforced.
  • Rocket.Chat: 2FA can't be enforced on the free edition. Either upgrade to Enterprise, or audit the Admin → Users 2FA column by hand.
  • Review users and teams in Vaultwarden.
  • Add the remaining services to Uptime Kuma.
  • Review Cloudflare Bot Fight Mode for abair.ie. It has to stay off at the moment because it blocks Uptime Kuma's checks. Free-plan Bot Fight Mode can't be bypassed with WAF skip rules. Decide whether to leave it off, or move to Super Bot Fight Mode (Pro plan), which can skip Uptime Kuma's requests.
  • Investigate false positives from Uptime Kuma.
  • Review the health check alerts for Fotheidil and batch recognition.
  • Add Liam's and Andy's public SSH keys to all servers.
  • Add Liam and Andy to alerts.abair.ie.
  • Self-host Supabase.