|
Xdev Host Manager
authored
2 days ago
|
1
|
version: 1
|
|
|
2
|
work_orders:
|
|
|
3
|
- id: "WO-20260606-001"
|
|
|
4
|
status: "pending"
|
|
Xdev Host Manager
authored
2 days ago
|
5
|
title: "Retire legacy public-cert local vhost names"
|
|
|
6
|
reason: "These names were introduced for Let's Encrypt-backed nginx vhosts for local Proxmox/PBS web interfaces. This WO records the intent to retire them, but the names stay published until the vhosts, certificates, clients and monitoring are migrated."
|
|
Xdev Host Manager
authored
2 days ago
|
7
|
created_at: "2026-06-06T00:00:00Z"
|
|
Xdev Host Manager
authored
2 days ago
|
8
|
checklist:
|
|
|
9
|
- id: "inventory-vhosts"
|
|
|
10
|
text: "Find the nginx vhost files, upstream targets and Let's Encrypt renewal state for all pmx.* and pbs.* names."
|
|
|
11
|
status: "pending"
|
|
|
12
|
- id: "issue-local-certs"
|
|
|
13
|
text: "Create or request local-CA certificates for the canonical internal service names that will replace these vhost aliases."
|
|
|
14
|
status: "pending"
|
|
|
15
|
- id: "install-local-certs"
|
|
|
16
|
text: "Install the local certificates on the service endpoint or replacement nginx vhost and reload the affected services."
|
|
|
17
|
status: "pending"
|
|
|
18
|
- id: "remove-legacy-vhosts"
|
|
|
19
|
text: "Remove the legacy nginx vhosts and Let's Encrypt renewal hooks/configuration for the pmx.* and pbs.* aliases."
|
|
|
20
|
status: "pending"
|
|
|
21
|
- id: "verify-access"
|
|
|
22
|
text: "Verify Proxmox/PBS access through the canonical internal names with the local CA trusted by clients."
|
|
|
23
|
status: "pending"
|
|
|
24
|
- id: "verify-unused"
|
|
|
25
|
text: "Check configs, monitoring, browser bookmarks/runbooks and logs so the retired names are no longer in active use."
|
|
|
26
|
status: "pending"
|
|
|
27
|
- id: "final-operator-approval"
|
|
|
28
|
text: "Operator confirms the task is complete and the aliases can be removed from the host registry."
|
|
|
29
|
status: "pending"
|
|
Xdev Host Manager
authored
2 days ago
|
30
|
actions:
|
|
|
31
|
- type: "remove_name"
|
|
|
32
|
host_id: "baobab"
|
|
|
33
|
name: "pmx.baobab.madagascar.xdev.ro"
|
|
|
34
|
- type: "remove_name"
|
|
|
35
|
host_id: "ebony"
|
|
|
36
|
name: "pmx.ebony.madagascar.xdev.ro"
|
|
|
37
|
- type: "remove_name"
|
|
|
38
|
host_id: "tapia"
|
|
|
39
|
name: "pmx.tapia.madagascar.xdev.ro"
|
|
|
40
|
- type: "remove_name"
|
|
|
41
|
host_id: "anjothibe"
|
|
|
42
|
name: "pbs.anjothibe.madagascar.xdev.ro"
|
|
|
43
|
- type: "remove_name"
|
|
|
44
|
host_id: "andrafiabe"
|
|
|
45
|
name: "pbs.andrafiabe.madagascar.xdev.ro"
|