Add more structure and todos
[cacert-infradocs.git] / docs / systems.rst
1 Systems
2 =======
3
4 .. toctree::
5 :maxdepth: 2
6
7 systems/infra02
8 systems/arbitration
9 systems/emailout
10 systems/monitor
11
12 General
13 -------
14
15 .. todo:: consider whether a central MySQL service should be setup
16
17 Many containers contain their own instance of MySQL. It might be a better
18 idea to centralize the MySQL setups in a single container.
19
20 .. todo:: consider whether a central PostgreSQL service should be setup
21
22 .. todo::
23
24 setup a central syslog service and install syslog clients in each container
25
26 Checklist
27 ---------
28
29 * All containers should be monitored by :doc:`systems/monitor` and should
30 therefore have :program:`nagios-nrpe-server` installed
31 * All containers should use :program:`etckeeper` to put their local setup into
32 version control. All local setup should use :file:`/etc` to make sure it is
33 handled by :program:`etckeeper`
34 * All infrastructure systems must send their mail via :doc:`systems/emailout`
35 * All infrastructure systems should have an system-admin@cacert.org alias to
36 reach their admins
37
38 .. todo:: think about replacing nrpe with Icinga2 satellites
39 .. todo:: document how to setup the system-admin alias on the email system