Changes

This page documents VTLUUG's infrastructure post-[[CVL eviction]]. It is intended as a scratch pad ofsorts for organizing infrastructure changes, since [[Infrastructure:Log]] is incredibly out of date, andthere are a lot of details which must be sorted out before major infrastructure changes can be made.

[[Infrastructure:Cyberdelia|Cyberdelia]] is the only connected physical machine right now. It contains 48 GB of memory with 4 ethernet interfaces; only eth4 is connected and is attached to br0. All hosts are on the ECE network behind router.ece.vt.edu, a gateway featuring ARP proxying but no IPv6. For global DNS changes under ece.vt.edu, server room access, and getting hosts added to the ARP proxy, contact Branden McKagen.

Virginia Tech has started blocking inbound ports 22 and 3389 and outbound port 25 at the campus border, in a move some <!--[Who?]--> are calling [[gp:Cyber Auschwitz|Cyber Auschwitz]]. Contact itso-g@vt.edu for firewall exceptions. When deploying new hosts, make ssh listen on both 2222 and 22. Acidburn currently listens on 443 as well.

Most other VTLUUG-owned servers are currently stored in Ali's basement, with the exception of [[infrastructure:sunway|sunway]] and a SuperMicro server, which were all transferred to WUVT.

Because VTLUUG infra no longer has IPv6 access, we are limited by the IP addresses assigned to us, and what we can get through DHCP from ECE. As a consequence, all services which do not need to have a global IP should move to the internal network on the 10.99.x.x/16 subnet. In the future, it may be wise to bridge this network to an ethernet port on cyberdelia, so that a switch can be used to network our other services. When we have rackspace to do so, VPN/[[Iodine]] access to the internal network will be necessary.

It currently appears that the main vtluug page (mostly written in php), is or was managed from [https://vtluug.org/atrium Drupal] as abackend, but for that to function, mysql needs to be running.

uWSGI, django, and PHP appear make up most of the important features of the website in unknown ways. This was configured by [[user:mutantmonkey|James]] at some point, we presume, but he is not available to provide more information on the set-up.

The wiki currently runs fully on MediaWiki hosted on nginx (as opposed to the default include of apache2, demanded by the Debian package).Postgres is used for the database management, AFAIK, and authentication is through LDAP. MediaWiki is a dated git version from the stablerepositorystablerepository, as of March 2016, however updating is more complicated than a git pull

[[gp:Main page|Gobblerpedia]] is effectively non-functional because account creation was disabled to prevent spam. This needs to be addressed by adding captchas which are Blacksburg-specific, limiting account creation access to local IP addresses, '''or''' enabling some form of LUUG-managed account creation. One suggestion was using CAS/Login services to authenticate, however that makes it difficult for Blacksburgresidents to add content, and has other disadvantages.

VTLUUG currently has DNS with namecheap, however all domains have been re-registered with gandi under vtluug's own account, toreplace the mixture of mutantmonkey-holdings and vtluug-held domains on multiple different registrars.

This is the projected diagram of our network, once sczi is fully deployed and milton is phased out. At this time, razor may also lose its global v4 address.