Docs/Plans

From MTU LUG Wiki
Jump to navigation Jump to search
  1. Formally acquire and install new servers (R640s)
    1. Repair shipping damage on the 8-bay machines
      1. Put the bent metal back into shape so they can fit cleanly in the rack
      2. One of them has board damage and can only take a single X16 card, but it still works and shouldn't be an issue for our use case
        1. Maybe make sure the damaged traces don't short out?
    2. Buy CPUs for the 10-bay machine
      1. Xeon Gold 6240s are cheap used
  2. Firewalls
    1. Migrate firewall duty to Okabe and Kurisu
    2. Decommission old firewall servers (lasagna and ravioli)
  3. Finish unlocking Locked HGST drives
    1. Replace all laptop drives in the cluster
  4. Proxmox
    1. Remove/decommission one of the R630s to make room
    2. Redistribute RAM and install new R640s, add them to the cluster
    3. 3D print needed 2.5" drive trays
    4. Ceph? (maybe)
      1. Change VM storage from NFS via Leskinen to Ceph on cluster
      2. Backup to Leskinen instead of cluster
    5. Figure out firewalling local network from VMs for VPS idea (able to give people an ""unmanaged VM"", it should not be able to access any other VMs on the local network)
      1. New subnet? (10.10.2.0/24)
      2. Reverse-NAT via OPNSense (and mandatory DHCP) so we don't have to trust people to statically assign themselves the right public IP?
  5. Mirrors
    1. Upgrade CPUs to the Xeon 2680 V4s from the decommissioned R630
    2. Try to do it with as little downtime as possible..
  6. Pterodactyl (?)
  7. Faceplates for servers
    1. Stickerbomb idea!
    2. Can 3D print some of the faceplates instead of buying them
  8. Finish OPNsense transition
    1. DNS for internal services
    2. 1:1 NAT for public services (not mirrors)
    3. Consider hosting authoritative DNS resolver for linuxusers.group on our infra
      1. Automated domains via dhcp hostnames in opnsense (?)
    4. Network booting for servers/VMs (?)
  9. LDAP (on cluster)
    1. Integrate logins for Shell, LUG VMs, and other servers
    2. Already set up:
      1. OPNSense, Proxmox, and iDRACs
  10. Document, document, document.
    1. Netbox?