openSUSE admin

Q&A from the community¶

• question about getting matrix login fixed - Stasiek didn't have time to work on matrix recently

status reports¶

• after power outage:
  • postfix on various machines started too early (before DNS was ready)
  • mostly postfix
  • IDP account updates were broken
  • limesurvey boot was broken ; nginx fighting apache
  • old beans.o.o VM booted and grabbed the public IP
• we now have a wireguard VPN to Provo and QSC - routing setup needs to be done
• migration to mailman3 done
  • went mostly well, with a few things left to fix
  • separate footer by "-- " instead of underscores? (to get it cut off when someone replies)
  • deliver mails directly instead of relaying them through anna/elsa?
  • DKIM
    • adding foooters and [MLname] subject prefix cause DKIM issues
    • mailman removed existing DKIM signatures, fixed in the meantime
• pagure (code.o.o) can now be accessed by ssh
  • gitolite is only needed for the /srv/www/ directory and the git user, needs to be moved to a separate system-user-git package

proposal: replace SuSEfirewall2 with nftables¶

• or firewalld? Neal will have a look at the current config
• scar (handling openvpn gateway and outgoing traffic) has quite some firewall rules
• salt it!

certmgr.i.o.o¶

• does it still copy certificates to other networks? (Bernhard will check)
• if not, give heroes access