Differences

This shows you the differences between two versions of the page.

--- infra [2025/01/09 23:19] – 6b86b273-ff34-fce1-9d6b-804eff5a3f57
+++ infra [2025/03/07 22:37] (current) – ef2d127d-e37b-942b-aad0-6145e54b0c61
@@ Line 1: / Line 1: @@
 # IT Infrastructure
-The acting CTO is responsible for maintaining TheLab's network/server infrastructure.
 ----
-**Please don't tinker with the IT infrastructure - the daily operations of the space depend on it! If you want to change something, ask someone who's been around for a while first.**
+**Please don't tinker with the infra - daily operations of the space depend on it! If you want to change something, ask someone who's been around for a while first.**
 ----
+## Servers
+<nspages :servers -customTitle="{title}" -textPages="" -tree>
+## Cloudflare
+We use Cloudflare for various things including (most importantly) DNS. The account is associated with [email protected], so new CTOs should go reset the password to get access. Things don't change often in this account but it's worth knowing that it exists.
+Cloudflare tunnels are used for all ingress to our servers - no need to worry about rotating TLS certs, free DDoS protection, etc.
+## Github
+Any active members working on code-related projects can be added as a member of TheLab's Github org: https://github.com/TheLab-ms.
+## Monitoring
+We have a shared [cronitor](https://cronitor.io) account used for uptime checks. Failing checks are posted to #it and visible publicly at https://status.thelab.ms
 ## Network
@@ Line 23: / Line 41: @@
 Management points:
-- **10.200.10.1**: Mikrotik router web interface
+- **10.200.10.1**: Mikrotik router web interface (get creds from acting CTO)
 - **10.200.10.2**: Cisco network switch
+  - `ssh [email protected] -c aes256-cbc -o KexAlgorithms=diffie-hellman-group-exchange-sha1 -o PubkeyAcceptedAlgorithms=+ssh-rsa -o HostKeyAlgorithms=+ssh-rsa`
 ### Switch Ports
@@ Line 35: / Line 54: @@
 - Access Control
-## CDN (Cloudflare)
-We use Cloudflare for various things including (most importantly) DNS. The account is associated with [email protected], so new CTOs should go reset the password to get access. Things don't change often in this account but it's worth knowing that it exists.
-## Servers
-- Main cloud instance: **[[servers_foobar|foobar.thelab.ms]]**
-- Big metal box in TheLab: **[[servers_baz|baz.thelab.ms]]**