So I just completed a migration of my proxy server from an old Nginx Proxy Manager (NPM) setup to a terraformed/ansible-controlled Caddy install. Which went well, and it's a needed upgrade, but I lose the GUI, and the immediate ability to see what's going on. So on to the next project: tearing down my experimental Prometheus/Grafana servers and rebuilding them with proper dashboards to not only augment my SNMP dashboard, but get certificate monitoring and proper alerts/notifications working.
In the middle of that, I had some internal certificates expire, and while I have scripts to automate deployment, I had previously copied the new certs from NPM. Figuring Caddy could help automate this a little more, I started down a path that made me realize the host I was using for terraform/ansible was a hand-built, all-over-the-place Linux box that really needed to be rebuilt with my own terraform/ansible discipline. So now I'm building a new box (using the old one - this isn't a chicken-and-egg story), and along the way discovering a few missed/forgotten things (aptcache server!) that is now being baked in to my default container model.
I think this puts me three or four layers down from my original goal? Oh, well, all good things that needed to be done.
(In case you missed the reference from the title, it's the last line of the Malcom in the Middle cold open where Hal starts out replacing a lightbulb, and ends up under his car. S03E06)
EDIT: by way of an update, we're now one more level deep: I just discovered an anomaly in the unattended-upgrade subsystem of our container template image. Fun stuff!
Leave a Comment
Add your comment