Operations grimoire/Mumble

From Nasqueron Agora

📕📁📜 Old technical information :: content warning

⌛ This Nasqueron Operations Grimoire page hasn't been updated for a long time.

☣ As our infrastructure evolves quickly, there is a good chance this information is outdated or now inaccurate. Be careful and consider update it.

➡️ To assert the information is still up-to-date or not, you can check the history of the relevant role in our Operations repository.

Overview

The Mumble server (Murmur) is sandboxed in a jail on Ysul.

Server needs to connect to MySQL on Ysul.

A bot, w|, is managed by Triskel (not by Nasqueron) connects to it, generally through IPv6 from 2001:41d0:2:8d8c:216:3eff:fed3:976d.

Update certificates

SSL certificates are renewed on Ysul.

After mumble.nasqueron.org certificate is renewed, run update-mumble-certificates to copy it to the Mumble jail. That will restart the Murmur server too.

Ideally, we should call automatically this script when server is renewed, probably adding an hook to the Let's encrypt configuration. This is tracked at https://devcentral.nasqueron.org/T853.