bucket list

[poquirion]

In no particular orders. Do do list for arc

• [ ] - Test on-boarding user with id for cilogon (smtp)
• [x] - Finish process an automated deployment for the production tech dev api (podman)
• [ ] - Start hosting data for bento team and delegate admin power to them
• [x] - Make sure we have a working gopass setup
• [x] - Use a vault system for pasword not in gopass
• [ ] - Backup KC, Zabbix, bastion and techdev postgess DB.
• [ ] - Zabbix as a service (first for bento)

[komainu-ctrl]

To do list #:

PO :

• [ ] Fully configure SMTP ( configure it for Production environnement)

Felix :

• [ ] Install crowdsec and watch some courses
• [ ] Keycloak behind nginx proxy (zabbix not neccessary) + (keycloak is causing trouble)
• [ ] Bastion (passhport)
• [ ] Migration and delete VM on MC_SDH
• [x] Change port on 443 for keycloak
• [x] Reconstruct dev plateform on c3g-dev
• [x] Encrypt more information in Ansible-Vault for more security
• [x] Modify Ansible-Nginx to follow the standard
• [x] Create a branch in Github for Dev part
• [x] Does Grafana is necessary? It's not delete VM and project on Github

Both :

• [ ] Documentation about the all infrastructures.
• [ ] Create a documentation about security
• [ ] Solution crowdsec
• [ ] Doing a pentest on our own infrastructure before making public
• [ ] Add backup for keycloak