[00:09:42] 07HTTPS, 10Traffic, 06Operations, 13Patch-For-Review: Sort out letsencrypt puppetization for simple public hosts - https://phabricator.wikimedia.org/T132812#2211618 (10Dzahn) >Package/backport acme-tiny and install via puppet (it's so tiny we could even just throw the file in puppet for a first draft). ye... [02:05:31] 10Traffic, 06Operations, 10Phabricator, 10hardware-requests: We need a backup phabricator front-end node - https://phabricator.wikimedia.org/T131775#2211772 (10mmodell) @jcrespo: Phabricator database clustering support is now documented: https://secure.phabricator.com/book/phabricator/article/cluster_data... [06:50:28] 10Traffic, 06Operations: cronspam from cpXXXX hosts due to /usr/local/sbin/update-ocsp-all - https://phabricator.wikimedia.org/T132835#2211794 (10elukey) [06:52:34] 10Traffic, 06Operations: cronspam from cpXXXX hosts due to update-ocsp-all and zero_fetch - https://phabricator.wikimedia.org/T132835#2211808 (10elukey) [11:23:10] 10Traffic, 06Operations: cronspam from cpXXXX hosts due to update-ocsp-all and zero_fetch - https://phabricator.wikimedia.org/T132835#2211794 (10BBlack) OCSP: ------------ We have an icinga alert for when things go really-wrong (multiple serial failures), and the commentary in `modules/tlsproxy/manifests/ocsp.... [16:07:11] 10Traffic, 06Operations, 10Phabricator, 10hardware-requests: We need a backup phabricator front-end node - https://phabricator.wikimedia.org/T131775#2212146 (10jcrespo) As a note, m3 (miscellaneous database services - shard number 3) is entirely dedicated to phabricator database needs, and as you can see h... [17:02:05] 10Traffic, 06Operations, 10Phabricator, 10hardware-requests: We need a backup phabricator front-end node - https://phabricator.wikimedia.org/T131775#2212200 (10BBlack) >>! In T131775#2209885, @mark wrote: > I think a backup Phabricator host in codfw would make a lot of sense, and is something we strive for...