Skip to content
Snippets Groups Projects
home.md 5.25 KiB
Newer Older
---
title: Torproject Sysadmin Team
---
Peter Palfrader's avatar
Peter Palfrader committed

# Torproject Sysadmin Team
Peter Palfrader's avatar
Peter Palfrader committed

The Torproject System Administration Team is the team that keeps
Peter Palfrader's avatar
Peter Palfrader committed
torproject.org's infrastructure going. This is the internal team wiki.
It has mostly documentation mainly targeted for the team members, but
may also have useful information for people with torproject.org
accounts.

To contact us, see, [how to get help!](policy/tpa-rfc-2-support#how-to-get-help).
Peter Palfrader's avatar
Peter Palfrader committed

For a list of services and which servers they run on check
[ud-ldap](https://db.torproject.org/machines.cgi).
Peter Palfrader's avatar
Peter Palfrader committed

## source repositories
Peter Palfrader's avatar
Peter Palfrader committed

* Look at [gitweb](https://gitweb.torproject.org/) for things under `admin/`.
* This is a gitlab wiki.
  Feel free to send us patches to improve this resource.
  You can either edit it in gitlab directly, if you can, or you can clone
  ``git@gitlab.torproject.org:tpo/tpa/team.wiki`` and send us a patch.
Peter Palfrader's avatar
Peter Palfrader committed

# Documentation

This documentation is primarily aimed at users.
Peter Palfrader's avatar
Peter Palfrader committed

anarcat's avatar
anarcat committed
<!-- update with `ls -d doc/*.md | sed 's/.md$//;s/\(.*\)/ * [\1](doc\/\1)/'` -->
anarcat's avatar
anarcat committed
 * [accounts](doc/accounts)
 * [admins](doc/admins)
 * [bits-and-pieces](doc/bits-and-pieces)
 * [extra](doc/extra)
 * [hardware-requirements](doc/hardware-requirements)
 * [how-to-get-help](doc/how-to-get-help)
 * [naming-scheme](doc/naming-scheme)
 * [reporting-email-problems](doc/reporting-email-problems)
 * [services](doc/services)
 * [ssh-jump-host](doc/ssh-jump-host)
 * [static-sites](doc/static-sites)
 * [svn-accounts](doc/svn-accounts)
# Howtos

This documentation is primarily aimed at sysadmins and establishes
various procedures not necessarily associated with a specific service.
anarcat's avatar
anarcat committed
<!-- update with `ls -d howto/*.md | sed 's/.md$//;s/\(.*\)/ * [\1](howto\/\1)/'` -->

 * [build_and_upload_debs](howto/build_and_upload_debs)
 * [create-a-new-user](howto/create-a-new-user)
 * [cumin](howto/cumin)
 * [fabric](howto/fabric)
 * [incident-response](howto/incident-response)
 * [new-machine](howto/new-machine)
 * [new-machine-hetzner-cloud](howto/new-machine-hetzner-cloud)
 * [new-machine-hetzner-robot](howto/new-machine-hetzner-robot)
 * [new-machine-mandos](howto/new-machine-mandos)
 * [new-machine](howto/new-machine)
 * [new-person](howto/new-person)
 * [raid](howto/raid)
 * [retire-a-host](howto/retire-a-host)
 * [retire-a-user](howto/retire-a-user)
 * [upgrades](howto/upgrades)

# Service documentation

This documentation covers all services hosted at TPO.

Every service hosted at TPO should have a documentation page, either
in this wiki, or elsewhere (but linked here). Services should ideally
follow this [template](howto/template) to ensure proper documentation.

## Internal services

Those are services managed by TPA directly.

 * [backup](howto/backup)
 * [cache](howto/cache)
anarcat's avatar
anarcat committed
 * [dns](howto/dns)
 * [drbd](howto/drbd)
 * [ganeti](howto/ganeti)
 * [git](howto/git)
 * [grafana](howto/grafana)
 * [ipsec](howto/ipsec)
 * [kvm](howto/kvm)
 * [ldap](howto/ldap)
 * [letsencrypt](howto/letsencrypt)
 * [logging](howto/logging)
 * [lvm](howto/lvm)
 * [nagios](howto/nagios)
 * [openstack](howto/openstack)
 * [postgresql](howto/postgresql)
 * [prometheus](howto/prometheus)
 * [puppet](howto/puppet)
 * [static-component](howto/static-component)
 * [tls](howto/tls)
 * [wkd](howto/wkd)
## Non-TPA services

Those are managed by service admins, and not directly the
responsability of the TPA team.

 * [gitlab](howto/gitlab)
 * [irc](howto/irc)
 * [rt](howto/rt)
 * [svn](howto/svn)

## Retired or researched services

Those services have been either retired or have not been implemented yet.

 * [conference](howto/conference)
 * [submission](howto/submission)
 * [trac](howto/trac)

# Meetings

We also keep our minutes here.

anarcat's avatar
anarcat committed
<!-- update with `ls -d meeting/*.md | sed 's/.md$//;s/\(.*\)/ * [\1](meeting\/\1)/'` -->

 * [2019-03-04](meeting/2019-03-04)
 * [2019-04-08](meeting/2019-04-08)
 * [2019-05-06](meeting/2019-05-06)
 * [2019-06-03](meeting/2019-06-03)
 * [2019-07-01](meeting/2019-07-01)
 * [2019-09-09](meeting/2019-09-09)
 * [2019-10-07](meeting/2019-10-07)
 * [2019-11-04](meeting/2019-11-04)
 * [2019-11-25](meeting/2019-11-25)
 * [2020-01-13](meeting/2020-01-13)
 * [2020-02-03](meeting/2020-02-03)
 * [2020-03-09](meeting/2020-03-09)
 * [2020-04-14](meeting/2020-04-14)
 * [2020-05-11](meeting/2020-05-11)
 * [2020-06-10](meeting/2020-06-10)
anarcat's avatar
anarcat committed
 * [2020-07-01](meeting/2020-07-01)
anarcat's avatar
anarcat committed
 * [monthly-report](meeting/monthly-report)
 * [template](meeting/template)
# Policies
anarcat's avatar
anarcat committed

anarcat's avatar
anarcat committed
 * [tpa-rfc-1-policy](policy/tpa-rfc-1-policy)
 * [tpa-rfc-2-support](policy/tpa-rfc-2-support)
 * [tpa-rfc-3-tools](policy/tpa-rfc-3-tools)
 * [tpa-rfc-4-prometheus-disk](policy/tpa-rfc-4-prometheus-disk)
 * [tpa-rfc-5-gitlab](policy/tpa-rfc-5-gitlab)
anarcat's avatar
anarcat committed

To add a new policy, create the page using the [template](template)
and add it to the above list.

## other, non TSA stuff
* [service list](https://gitlab.torproject.org/legacy/trac/-/wikis/org/operations/Infrastructure)

Those are old docs that should be destroyed or merged above.

anarcat's avatar
anarcat committed
<!-- update with `ls -d old/*.md | sed 's/.md$//;s/\(.*\)/ * [\1](old\/\1)/'` -->
anarcat's avatar
anarcat committed
 * [backuppc](old/backuppc)
 * [nagios-client](old/nagios-client)
 * [new-kvm-virsh-vm](old/new-kvm-virsh-vm)
 * [new-machine-cymru](old/new-machine-cymru)
 * [new-machine-nondebian](old/new-machine-nondebian)
 * [new-machine.orig](old/new-machine.orig)
 * [new-vm-rethem](old/new-vm-rethem)