10
edits
Docs/Plans: Difference between revisions
Jump to navigation
Jump to search
Removed completed plans and added new plans for server/infra upgrades
(Created page with "# 10 Gb/s backbone for internal network ## Install all Dell Daughterboards ## Program FiberStore SFP Sleds # Rearrange servers ## Mirrors/Leskinen on bottom of our space ## Maho right above ## Proxmox cluster ## Shell ## Lasagna/Ravioli on very top (OPNSense servers) # Redo Proxmox ## Change storage from local replication to either Ceph or iSCSI/NFS off Leskinen ## Figure out local firewalling of VMs for VPS idea ### New subnet? (10.10.2.0/24) # Document, document, docum...") |
(Removed completed plans and added new plans for server/infra upgrades) |
||
| (5 intermediate revisions by 2 users not shown) | |||
|
#Formally acquire and install new servers (R640s)
## Repair shipping damage on the 8-bay machines
### Put the bent metal back into shape so they can fit cleanly in the rack
### One of them has board damage and can only take a single X16 card, but it still works and shouldn't be an issue for our use case
# Rearrange servers▼
#### Maybe make sure the damaged traces don't short out?
## Buy CPUs for the 10-bay machine
### Xeon Gold 6240s are cheap used
## Proxmox cluster▼
# Firewalls
## Migrate firewall duty to Okabe and Kurisu
## Decommission old firewall servers (lasagna and ravioli)
# Finish unlocking [[Locked HGST drives]]
## Replace all laptop drives in the cluster
## Remove/decommission one of the R630s to make room
## Redistribute RAM and install new R640s, add them to the cluster
## 3D print needed 2.5" drive trays
## Ceph? (maybe)
### Change VM storage from NFS via Leskinen to Ceph on cluster
### Backup to Leskinen instead of cluster
## Figure out firewalling local network from VMs for VPS idea (able to give people an ""unmanaged VM"", it should not be able to access any other VMs on the local network)
### New subnet? (10.10.2.0/24)
### Reverse-NAT via OPNSense (and mandatory DHCP) so we don't have to trust people to statically assign themselves the right public IP?
# Mirrors
## Upgrade CPUs to the Xeon 2680 V4s from the decommissioned R630
## Try to do it with as little downtime as possible..
# Pterodactyl (?)
## Stickerbomb idea!
## Can 3D print some of the faceplates instead of buying them
# Finish OPNsense transition
##DNS for internal services
##1:1 NAT for public services (not mirrors)
##Consider hosting authoritative DNS resolver for linuxusers.group on our infra
### Automated domains via dhcp hostnames in opnsense (?)
##Network booting for servers/VMs (?)
# LDAP (on cluster)
## Integrate logins for Shell, LUG VMs, and other servers
## Already set up:
### OPNSense, Proxmox, and iDRACs
# Document, document, document.
## Netbox?
| |||