summaryrefslogtreecommitdiff
path: root/docs/systems.rst
blob: 8a2860102c1818d710ae0d7d471cec90cfafac6a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
Systems
=======

.. toctree::
   :maxdepth: 2

   systems/infra02
   systems/arbitration
   systems/emailout
   systems/monitor

General
-------

.. todo:: consider whether a central MySQL service should be setup

   Many containers contain their own instance of MySQL. It might be a better
   idea to centralize the MySQL setups in a single container.

.. todo:: consider whether a central PostgreSQL service should be setup

.. todo::

   setup a central syslog service and install syslog clients in each container

Checklist
---------

* All containers should be monitored by :doc:`systems/monitor` and should
  therefore have :program:`nagios-nrpe-server` installed
* All containers should use :program:`etckeeper` to put their local setup into
  version control. All local setup should use :file:`/etc` to make sure it is
  handled by :program:`etckeeper`
* All infrastructure systems must send their mail via :doc:`systems/emailout`
* All infrastructure systems should have an system-admin@cacert.org alias to
  reach their admins

.. todo:: think about replacing nrpe with Icinga2 satellites
.. todo:: document how to setup the system-admin alias on the email system