ronnibaslund/dezky
1
0
Fork 0
Code Issues 37 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

docs(runbook): monitoring update — TCP-25 rationale + blacklist monitors
ci / tc_portal (push) Has been skipped
Details
ci / tc_operator (push) Has been skipped
Details
ci / build_operator (push) Has been skipped
Details
ci / changes (push) Successful in 3s
Details
ci / tc_booking (push) Has been skipped
Details
ci / tc_website (push) Has been skipped
Details
ci / tc_platform_api (push) Has been skipped
Details
ci / test_platform_api (push) Has been skipped
Details
ci / build_portal (push) Has been skipped
Details
ci / build_booking (push) Has been skipped
Details
ci / build_platform_api (push) Has been skipped
Details
ci / deploy (push) Has been skipped
Details

Browse Source
This commit is contained in:
Ronni Baslund
2026-06-11 11:49:00 +02:00
parent c6b6f8faec
commit 2e3c0f9188
1 changed files with 9 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
infrastructure/production/RUNBOOK.md
+9 -6
View File
@@ -39,12 +39,15 @@ bottom to rebuild it. Per-layer detail lives in `host/README.md`,
type): keep newest 5 versions per image + `latest`, remove older than 7
days. Applied by Gitea's daily cleanup cron.
- **Monitoring** — HetrixTools (Ronni's account): 11 uptime monitors via API
(HTTPS on the five apps + Gitea w/ SSL verify, ping, IMAPS/SMTPS TCP, SMTP
protocol on :25; 1-min checks from ams/fra/lon, alert after 2 fails) + the
Linux server agent on node1 (root mode, per-minute cron in
/etc/hetrixtools/; watches stalwart/k3s/dockerd processes, mdadm RAID,
NVMe SMART via smartmontools). Re-create monitors via their v2 API
(uptime/add, Type 9 = server agent — hidden in the new UI); agent install:
(HTTPS on the five apps + Gitea w/ SSL verify, ping, IMAPS/SMTPS/port-25
TCP — port 25 is a TCP check ON PURPOSE: Stalwart's DNSBL screening
rejects HetrixTools' probe IPs, so an SMTP-protocol check reads down while
real MTAs are fine; 1-min checks from ams/fra/lon, alert after 2 fails),
blacklist monitors on dezky.eu + 46.4.78.187, and the Linux server agent
on node1 (root mode, per-minute cron in /etc/hetrixtools/; watches
stalwart/k3s/dockerd processes, mdadm RAID, NVMe SMART via smartmontools).
Re-create monitors via their v2 API (uptime/add, Type 9 = server agent —
hidden in the new UI); agent install:
hetrixtools_install.sh <server_id from API response> 1 "stalwart,k3s,dockerd" 1 1.
## Deploy flow (day-to-day)