Page MenuHomePhabricator

Ensure all services use CF proxy
Open, Stalled, NormalPublic

Description

Remaining:

  • db1.mirahezebots.org

Once this is done, we can stop serving traffic over Apache where the CF SSL certificates don't exchange.

Details

Security
None

Event Timeline

RhinosF1 triaged this task as Normal priority.Feb 4 2021, 9:27 AM
RhinosF1 created this task.

This will break SSH on the old system unless you use the IP.

I will post config reminders on here.

RhinosF1 changed the task status from Open to Stalled.Mar 5 2021, 8:14 AM
RhinosF1 claimed this task.
RhinosF1 added a project: Web.

Until Monday when we'll issue these. This should be fairly easy.

Miraheze will just switch the backends back to geoip!cp

In T177#3862, @RhinosF1 wrote:

This will break SSH on the old system unless you use the IP.

I will post config reminders on here.

It would also work to use the fosshost URL I believe

In T177#3862, @RhinosF1 wrote:

This will break SSH on the old system unless you use the IP.

I will post config reminders on here.

It would also work to use the fosshost URL I believe

That's correct. db1 will remain unproxied until I figure out https://github.com/cloudflare/cloudflared/issues/329