diff --git a/site/content/additional/maintlog/_index.md b/site/content/additional/maintlog/_index.md index cfe01db..282addc 100644 --- a/site/content/additional/maintlog/_index.md +++ b/site/content/additional/maintlog/_index.md @@ -7,6 +7,28 @@ A log of changes to the burble.dn42 network. --- +## 3rd April 2021 + +The collector is now using a TLS certificate issued by the +[DN42 ACME](https://acme.dn42) service. The collector is behind an anycasted +reverse proxy, so a normal ACME challenge will not work. Instead, the certificate +is managed using +[dnscontrol](https://stackexchange.github.io/dnscontrol/) to respond to +an ACME DNS challenge. + +DNSSEC has been enabled on all edge nodes. + +## 2nd April 2021 + +There was a major DNS outage today as a minor change took out the entire service. + +What should have been a trivial config change actually upgraded the container +from Alpine 3.11 to Alpine 3.13 and caused a number of the DNS applications to +stop working due to incompatibilities. + +The lack of working DNS meant it was more complicated to bootstrap the service +back again, leading to a long delay in restoring service. + ## 27th March 2021 Fixed a bug in bird that was preventing MRT dumps from the collector working.