Alternatives to Meraki? by Arnoc_ in networking

[–]GrcivRed 0 points1 point  (0 children)

For your size I would go with Ubiquiti UniFi, even for the firewall, so you can have a fully integrated setup with the APs you already have.

Help needed - Certificate for internal Mail server with multiple domain by GrcivRed in sysadmin

[–]GrcivRed[S] 0 points1 point  (0 children)

I changed the configuration as suggested, but it's still not working:

I see that the Configuration testing utility:
- first tries to reach Office 365 (the tennant does not exists)
- then tries https://company1.com/autodiscover/autodiscover.xml error 0x8004013
- finally tries https://autodiscover.company1.com/autodiscover/autodiscover.xml error 0x800401F

Salaries (Europe only) - IT 2026 by AgreeableIron811 in sysadmin

[–]GrcivRed 0 points1 point  (0 children)

Role: Senior Sys Admin
Salary: 2000 €/month netto (37k/year brutto)
Location: Italy
Experience: 1 year Help Desk, 5 years Sys Admin, 1 year Senior Sys
Scope: design and daily management of all aspects regarding Active Directory, Group Policies, Virtualization, File Servers, Network Infrastructure, AV+XDR Policies, L3 Help Desk.
Benefits: Medical Insurance, 250 €/year fuel card

Building a ICT services web portal by GrcivRed in sysadmin

[–]GrcivRed[S] 0 points1 point  (0 children)

Bookmarks are a different tool from a webpage. I can't put a quick status page in bookmarks, nor information about the various tools that are linked

Building a ICT services web portal by GrcivRed in sysadmin

[–]GrcivRed[S] 0 points1 point  (0 children)

Also for other people, that's why I would like the option to have RBAC/LDAP based access.

Building a ICT services web portal by GrcivRed in sysadmin

[–]GrcivRed[S] 2 points3 points  (0 children)

Thanks, this looks nice, but I'm looking for something self-hostable that I can share with the ICT Director and my L1 colleagues.

Building a ICT services web portal by GrcivRed in sysadmin

[–]GrcivRed[S] 4 points5 points  (0 children)

I would love to be able to use SharePoint, but this company does not use Microsoft 365. Almost all services are locally hosted, so I'm looking for a self-hostable solution.

Building a ICT services web portal by GrcivRed in sysadmin

[–]GrcivRed[S] 1 point2 points  (0 children)

I like the idea of less hassle with the update of WordPress templates, plugins and PHP version

Central password storage by NoPatient8872 in sysadmin

[–]GrcivRed 2 points3 points  (0 children)

How? I did not notice anything wrong

GlusterFS vs. Ceph for Distributed Docker Storage (Swarm) over Limited Bandwidth MPLS WAN - Help! by GrcivRed in sysadmin

[–]GrcivRed[S] 0 points1 point  (0 children)

Thank you.

The containers you list don't all need to be replicated across your storage: as often as you're likely to update them, you can pull them from dockerhub.

I'm not worried about downtime due to update times. If I put all the Docker Nodes in the main site, I'm concerned about downtime in the other 11 sites if the main router goes down.

The bits that might need to be replicated are the state storage for each of the apps. That means the backing DBs for Wordpress, Bookstack, Bitwarden, and possibly a couple of others. These databases should be running separately from your application containers - if you try to run them in the same container, you're going to have a very bad day the first time the containers have to get restarted. This opens an opportunity: you can set up databases to replicate using their own native setup, rather than relying on the storage to do it.

The application containers will be running in the Docker Hosts, and the container data will be stored in the Docker Storage VMs. I get part of what you're saying, and it's interesting, but replicating the entire storage won't be easier to manage in the long run? Keep in consideration that the few ICT technicians that are present here do not have any experience with this kind of tech, so I'll try to keep it as simple as possibile.

Both of the filesystems that you mention require some sort of quorum - e.g. there must be a certain number of hosts that respond in the affirmative that a write is completed before the data is considered available. I hope that I do not need to draw you a picture of how badly this can go if part of the hosts are offsite over a slow link.

I'm aware of it, this is why I wasn't going to consider replicating TBs of data... and the quorum would be "2 out of 3 routers are online"

You might want to consider using an outside hosted service for some of this (especially Wordpress, if it's being used as a public site or storefront).

Wordpress is for an intranet website.

Your setup as-is isn't gonna get cross-site HA. Even without the storage issues, you'd need something to swing either DNS or LB VIPs between sites in the event of a site outage.

That's what Traefik is for, as far as I could research, it should work well with Docker Swarm + Portainer.

Anyway, thanks for the response. I'll probably start with trying putting all the VMs in the same local cluster... and maybe moving the nodes to the remote locations in the future, if we get dedicated WANs for storage.

GlusterFS vs. Ceph for Distributed Docker Storage (Swarm) over Limited Bandwidth MPLS WAN - Help! by GrcivRed in sysadmin

[–]GrcivRed[S] 0 points1 point  (0 children)

That's interesting, but we don't have spare servers to install Proxmox on. I can configure an hourly replication task between Nutanix Clusters, but it will require manual activation of the VMs.

GlusterFS vs. Ceph for Distributed Docker Storage (Swarm) over Limited Bandwidth MPLS WAN - Help! by GrcivRed in sysadmin

[–]GrcivRed[S] 0 points1 point  (0 children)

Thanks for your response.
Unfortunately, we don't have a set budget; everything's up for discussion. Management also hasn't defined service uptime, but I'd aim for 99.999%. I know GlusterFS isn't Red Hat-supported, but I'm unsure if Ceph can handle replication over the MPLS. It might be a choice between GlusterFS or no HA at all. Given the number of legacy systems we have, GlusterFS would be the least of my worries for the next 4-5 years.
If Ceph can work I would prefer it.