#Crowdsec has been re-enabled on #Midgaard - the #Kubernetes cluster running #MSTDNDK. We're doing this without CloudFlare and virtualization - it's #baremetal and homegrown #firewall all the way.
Should you experience connectivity issues, either as a user or a federated instance, please reach out to us.
Numerous technical and security improvements on the infrastructure that supports https://mstdn.dk
Bottom line: https://sikkerpånettet.dk/ now gives the site a 100% #security score. There are still improvements to be made (weirdly enough) - specifically I'm looking into supporting DANE for #TLS certificate signatures in #DNS.
Now that's off the TODO-list :-)
Some time this weekend, we'll be upgrading the #Mastodon #PostgreSQL cluster on #MSTDNDK. The cluster is being managed by #CloudNativePG and upgrades have been successfully tested on multiple other clusters - even upgrades directly from version 15 to 18.
While this is an incredibly smooth and easy process, major upgrades requires that #CNPG takes down the whole database cluster, meaning https://mstdn.dk will be unavailable for a period of time. Exactly how long is unknown, since we've never actually done this before with clusters of this size.
I'll keep you posted and give you fair warning 🙂
I've been a little rough and irresponsible with my #baremetal #Kubernetes cluster, especially when it comes to randomly rebooting nodes. Today I fixed that.
I'm running a bunch of somewhat delicate workloads, including database clusters with CSIs like #Longhorn and #OpenEBS. Checking if everything is in working order has been demanding task and often something I've skipped before rebooting or upgrading nodes - occasionally with horrific results.
Last night I finally took the time and wrote a pretty thorough script that checks that everything is working and healthy, before politely cordoning off a node, draining it and applying upgrades.
I felt so confident today that I tested it by running this new safe upgrade script for all the nodes in the cluster - and it worked! All nodes are now fully upgraded and running kernel 6.12.73 on Debian 13.
This also fixes the outstanding issue caused by #Hetzner no longer supporting obtaining IP addresses through DHCP.
Hård uge. Arbejder og sover. Heldigvis holder @leeleedee styr på #mstdndk imens jeg jamrer og klager! Tak for det! 😊
.. og med de ord vil jeg se dyner! 🤣
Saustrup