Mandate

• reasonable people trying to reach reasonable conclusions on what setup pieces should managed and how to manage our Large Integrated Domains.

Agenda Template

• CsSaltStackWgMeetingYYYYMMDD

Past Meeting Notes (most recent first)

• CsSaltStackWgMeeting20211124
• CsSaltStackWgMeeting20211110
• CsSaltStackWgMeeting20211027
• CsSaltStackWgMeeting20210915
• CsSaltStackWgMeeting20210901
• CsSaltStackWgMeeting20210720
• CsSaltStackWgMeeting20210622
• CsSaltStackWgMeeting20210511
• CsSaltStackWgMeeting20210427
• CsSaltStackWgMeeting20210330
• CsSaltStackWgMeeting20210309
• CsSaltStackWgMeeting20210302
• CsSaltStackWgMeeting20210223
• CsSaltStackWgMeeting20210216
• CsSaltStackWgMeeting20210210
• CsSaltStackWgMeeting20210202
• CsSaltStackWgMeeting20210120
• CsSaltStackWgMeeting20210112

Suggested list of formulae - nfish

1. apt
2. reboot (reboot-info, mollyguard + scripts)
3. remote_access (sshd, mosh) - done
4. salt
5. ceph (client, rgw, server) - done
6. networking (netplan, generic networking only)
7. physical (for non-LXC minions)
8. lxc (lxc containers, not hosts)
9. iaas (lxc/vm hosts)
10. logging (syslog_ng, logrotate, trimming)

Infrastructure formulae list

1. local admin accounts (cscf-adm, root)
2. remote admin accounts
3. mail forwarding
4. telemetry (prometheus)
5. monitoring (icinga)
6. PKI
7. active directory authentication / 2fa
8. syscall auditing
9. kernel crash dump collection
10. general use server / student general use server
11. internal microservices
12. backups

Suggested list of formulae - dlgawley:

1. pam
2. ssh
3. ldap
4. DUO
5. OpenVPN
6. Web
   1. Apache
   2. Lets Encrypt and Force HTTPS module
   3. URL case insensitive module
   4. Server side Includes module/setup (use execute bit not file extension).
   5. PAM integration
7. PostgreSQL
8. MySQL