# foobar.thelab.ms

Foobar is the main internet-facing server running [Conway](https://github.com/TheLab-ms/conway) and [Dokuwiki](https://docs.thelab.ms).

#### Provisioning Process (Dec 2024)

- Azure Standard_B1s running Ubuntu 24.04 in southcentralus.
- Enable daily Azure backups during provisioning.
- Manually populate IP in Cloudflare dns record (foobar.thelab.ms)
- The cto user should trust the current acting CTO's ssh pubkey. It can always be updated through the Azure portal.
- Manually install cloudflared for tunneling. It would be hard to automate, very easy to do by hand.
  - Make sure to run as a service i.e. `cloudflared service install`
- Run `make ansible`!

Here's the cloudflared config at the time of provisioning:

```yaml
tunnel: <redacted>
credentials-file: /root/.cloudflared/<redacted>.json

originRequest:
  connectTimeout: 10s

ingress:
  - hostname: members.thelab.ms
    service: http://localhost:8080

  - hostname: wiki.thelab.ms
    service: http://localhost:8081

  - service: http_status:404
```