Operations grimoire/External services: Difference between revisions

From Nasqueron Agora
(+instances.mastodon.xyz)
 
(13 intermediate revisions by the same user not shown)
Line 3: Line 3:


== Docker Hub ==
== Docker Hub ==
Organization account, administrative access by Sandlayth and Dereckson
Organization account, administrative access by Sandlayth and Dereckson.
 
2021-09-12: request for open source as part of the https://www.docker.com/blog/expanded-support-for-open-source-software-projects done, mainly as automated builds have been disabled in the free team plan.
 
== GeoLite2 ==
Account at MaxMind for GeoLite2 databases, created by Dereckson.
 
Account credentials stored in Vault under <code>ops/infra/maxmind</code>.
There aren't the API credentials, for example Sentry ones are stored at <code>ops/secrets/nasqueron/sentry/geoipupdate</code>.


== Gandi ==
== Gandi ==
Line 11: Line 19:


== GitHub ==
== GitHub ==
Organization account, administrative access by Sandlayth and Dereckson
;Organization account
:Administrative access by Sandlayth and Dereckson
:''Some OAuth could be on Dereckson account. When found, should be switched to Nasqueron (see [https://devcentral.nasqueron.org/T1109 T1109]).''


''Some OAuth could be on Dereckson account. When found, should be switched to Nasqueron (see [https://devcentral.nasqueron.org/T1109 T1109]).''
;Alken-Orin
:As automated agent, there is an '''Alken-Orin''' account to link GitHub to CI/CD.
:This account is also used to fetch code from GitHub through the `staging_private_repository` Salt state. To that end, the Salt deploy SSH key is added to this account.
:Credentials at [https://devcentral.nasqueron.org/K53 K53].


== Google ==
== Google ==
Line 25: Line 38:
== instances.mastodon.xyz ==
== instances.mastodon.xyz ==
Credentials for this account are stored in [https://devcentral.nasqueron.org/K103 K103].
Credentials for this account are stored in [https://devcentral.nasqueron.org/K103 K103].
== JetBrains ==
Licenses for open-source contributions managed by Dereckson.


== Mailgun ==
== Mailgun ==
Account managed by Dereckson.
Account managed by Dereckson.
2020-02-28: account upgraded to Flex, as it's not possible anymore to add custom domains to the free plan. From July, mails will cost 0.80$ / 1000. To avoid any financial abuse, (i) a 1000 mail accounts limit is currently in (we can update it in account settings) (ii) the credit card associated for this account is limited to 5 € / month.
== Mural ==
Mural non-profit plan for Wolfplex Hackerspace ASBL, Sébastien has access.
Personal notes:
* We have 10 seats
* To add an user: [https://app.mural.co/t/nasqueron8788/settings/members workspace > settings > members]
* Mail about access requests go to Wolfplex mail
== PURL ==
/NET/Nasqueron is managed by the Dereckson Internet Archive account.


== Online / Scaleway ==
== Online / Scaleway ==
;Online
* [[Ysul]], account managed by Dereckson, billed to Dereckson
* [[WindRiver]], account managed by Dereckson, billed to Trantorium
;Scaleway
* [[Eglide]], account managed by Sandlayth, billed to Sandlayth
** Following organization account introduction, Dereckson has now access too.
== OVH / SoYouStart ==
Servers:
Servers:
* [[Stormshear]], account managed by Dereckson
* [[hyper-001]], account managed by Dereckson, billed to ?
* [[Eglide]], account managed by Sandlayth
* [[CloudHugger]], account managed by Dereckson, billed to Trantorium


== Sendgrid ==
== Sendgrid ==

Latest revision as of 18:18, 24 October 2024

Amazon Web Services (AWS)

S3, account managed by Sandlayth.

Docker Hub

Organization account, administrative access by Sandlayth and Dereckson.

2021-09-12: request for open source as part of the https://www.docker.com/blog/expanded-support-for-open-source-software-projects done, mainly as automated builds have been disabled in the free team plan.

GeoLite2

Account at MaxMind for GeoLite2 databases, created by Dereckson.

Account credentials stored in Vault under ops/infra/maxmind. There aren't the API credentials, for example Sentry ones are stored at ops/secrets/nasqueron/sentry/geoipupdate.

Gandi

Some domains names:

  • eglide.org, account managed by Sandlayth
  • ook.space, account managed by Dereckson

GitHub

Organization account
Administrative access by Sandlayth and Dereckson
Some OAuth could be on Dereckson account. When found, should be switched to Nasqueron (see T1109).
Alken-Orin
As automated agent, there is an Alken-Orin account to link GitHub to CI/CD.
This account is also used to fetch code from GitHub through the `staging_private_repository` Salt state. To that end, the Salt deploy SSH key is added to this account.
Credentials at K53.

Google

OAuth for DevCentral, account managed by Dereckson (under espace-win.org Google Apps organization)

Hurricane Electric

IPv6 connectivity, account 'nasqueron'.

Note: DNS for nasqueron.org is currently handled on the 'dereckson' account.

instances.mastodon.xyz

Credentials for this account are stored in K103.

JetBrains

Licenses for open-source contributions managed by Dereckson.

Mailgun

Account managed by Dereckson.

2020-02-28: account upgraded to Flex, as it's not possible anymore to add custom domains to the free plan. From July, mails will cost 0.80$ / 1000. To avoid any financial abuse, (i) a 1000 mail accounts limit is currently in (we can update it in account settings) (ii) the credit card associated for this account is limited to 5 € / month.

Mural

Mural non-profit plan for Wolfplex Hackerspace ASBL, Sébastien has access.

Personal notes:

PURL

/NET/Nasqueron is managed by the Dereckson Internet Archive account.

Online / Scaleway

Online
  • Ysul, account managed by Dereckson, billed to Dereckson
  • WindRiver, account managed by Dereckson, billed to Trantorium
Scaleway
  • Eglide, account managed by Sandlayth, billed to Sandlayth
    • Following organization account introduction, Dereckson has now access too.

OVH / SoYouStart

Servers:

  • hyper-001, account managed by Dereckson, billed to ?
  • CloudHugger, account managed by Dereckson, billed to Trantorium

Sendgrid

Account managed by Dereckson.

Wikimedia

OAuth authentication, managed by Dereckson