Currently it looks like this which is hard to maintain and error prone

    env:
      VIRTUAL_HOST: "{{LEARNINGCIRCLES.DOMAIN}}"
      LETSENCRYPT_HOST: "{{LEARNINGCIRCLES.DOMAIN}}"
      LETSENCRYPT_EMAIL: "[email protected]"
      DOMAIN: "{{LEARNINGCIRCLES.DOMAIN}}"
      DATABASE_URL: "postgres://{{ LEARNINGCIRCLES.DB_USER }}:{{ LEARNINGCIRCLES.DB_PASSWORD }}@postgres:5432/{{LEARNINGCIRCLES.DB_NAME}}"
      ADMIN_EMAIL: "{{LEARNINGCIRCLES.ADMIN_EMAIL}}"
      SECRET_KEY: "{{LEARNINGCIRCLES.SECRET_KEY}}"
      EMAIL_HOST: "{{LEARNINGCIRCLES.EMAIL_HOST}}"
      EMAIL_HOST_USER: "{{LEARNINGCIRCLES.EMAIL_HOST_USER}}"
      EMAIL_HOST_PASSWORD: "{{LEARNINGCIRCLES.EMAIL_HOST_PASSWORD}}"
      DEFAULT_FROM_EMAIL: "{{LEARNINGCIRCLES.DEFAULT_FROM_EMAIL}}"
      TWILIO_ACCOUNT_SID: "{{LEARNINGCIRCLES.TWILIO_ACCOUNT_SID}}"
      TWILIO_AUTH_TOKEN: "{{LEARNINGCIRCLES.TWILIO_AUTH_TOKEN}}"
      TWILIO_NUMBER: "{{LEARNINGCIRCLES.TWILIO_NUMBER}}"
      BROKER_URL: "amqp://guest:guest@rabbitmq//"
      BACKUP_DIR: "{{LEARNINGCIRCLES.BACKUP_DIR}}"
      BACKUP_AWS_ACCESS_KEY_ID: "{{LEARNINGCIRCLES.BACKUP_AWS_ACCESS_KEY_ID}}"
      BACKUP_AWS_SECRET_ACCESS_KEY: "{{LEARNINGCIRCLES.BACKUP_AWS_SECRET_ACCESS_KEY}}"
      BACKUP_AWS_STORAGE_BUCKET_NAME: "{{LEARNINGCIRCLES.BACKUP_AWS_STORAGE_BUCKET_NAME}}"
      BACKUP_AWS_KEY_PREFIX: "{{LEARNINGCIRCLES.BACKUP_AWS_KEY_PREFIX}}"
      GA_TRACKING_ID: "{{LEARNINGCIRCLES.GA_TRACKING_ID}}" 

https://galaxy.ansible.com/angstwad/docker_ubuntu

See https://docs.docker.com/engine/security/rootless/

Find a different role to install docker without installing GCC

See https://docs.nginx.com/nginx/admin-guide/security-controls/controlling-access-proxied-http/

It is not being rotated and DO droplet ran out of space. Had to do a manual cleanup.

Update the script uses to do backups roles/postgres_backup/templates/backup.sh to delete files after running upload_rotate.py

Ran out of disk space because of old kernel sources :(

Traceback (most recent call last):
File "/usr/local/bin/netwell", line 5, in
from netwell.command import handle
File "/usr/local/lib/python3.12/site-packages/netwell/command.py", line 4, in
from netwell import checkers
File "/usr/local/lib/python3.12/site-packages/netwell/checkers.py", line 11, in
import requests
File "/usr/local/lib/python3.12/site-packages/requests/init.py", line 43, in
import urllib3
File "/usr/local/lib/python3.12/site-packages/urllib3/init.py", line 7, in
from .connectionpool import HTTPConnectionPool, HTTPSConnectionPool, connection_from_url
File "/usr/local/lib/python3.12/site-packages/urllib3/connectionpool.py", line 11, in
from .exceptions import (
File "/usr/local/lib/python3.12/site-packages/urllib3/exceptions.py", line 2, in
from .packages.six.moves.http_client import IncompleteRead as httplib_IncompleteRead
ModuleNotFoundError: No module named 'urllib3.packages.six.moves'

Postgres 11 reaches EOL November 2023 - https://www.postgresql.org/support/versioning/

• Update postgres update role to go from 11 to 15
• Run update on learning circles staging
• Run update on live server
• Check etherpad and other playbooks that need to be updated

At some point backups started failing - seems to be related to updates to mysqldump.

This would avoid the problem of having to recreate any containers that depends on another container. ex app container depending on db container. If the db container is recreated, the app container needs to be recreated, otherwise it will link the old container that's nor running anymore

Investigate why we have such a high rate of traffic going out from courses.p2pu.org???

Seems to be a spider (Bytespider) need to either block it or rate limit the overall level of traffic

• Currently this script checks for running docker containers
• Need to find a better way of specifying the list of docker containers that should be running via a template or variable
• Could consider only running this on production