Update 2019-05-31

The new server is installed and up and running. It has twice the amount of disk capacity, and twice the amount of RAM, which should allow us to grow for quite some time. We took the opportunity to upgrade all the main servers in the network to the buster release (yes, it all runs on Debian).

The slots on the encrypted disk of the old server were dropped, rendering the contents inaccessible, we scribbled all over the partition with random bytes and and all the log files were securely wiped before returning the server to the host.

The VPN layer across the network has been entirely revamped, phasing out Openvpn in favor of Wireguard.

The various elements of the site that require a database access (sphinx, ocelot and gazelle) now have separate user accounts with grants to only the tables they require, and no more. This helps to prevent a compromise from being able to do more damage than it should to the db.

Ocelot is up and running, gazelle is running and accessible from the outer proxy. What remains to be done is to get sphinx online, and set up all the various scheduled jobs in crontab. After that the site will be able to go live.

We will be back soon, thank-you all for your patients.

--OPS Staff, with