---
title: Torproject Sysadmin Team
---

[[_TOC_]]

# Torproject Sysadmin Team

The Torproject System Administration Team is the team that keeps
torproject.org's infrastructure going. This is the internal team wiki.
It has mostly documentation mainly targeted for the team members, but
may also have useful information for people with torproject.org
accounts.

To contact us, see, [how to get help!](policy/tpa-rfc-2-support#how-to-get-help).

For a list of services and which servers they run on check
[ud-ldap](https://db.torproject.org/machines.cgi).

## source repositories

* Look at [gitweb](https://gitweb.torproject.org/) for things under `admin/`.
* This is a gitlab wiki.
  Feel free to send us patches to improve this resource.
  You can either edit it in gitlab directly, if you can, or you can clone
  ``git@gitlab.torproject.org:tpo/tpa/team.wiki`` and send us a patch.

# Documentation

This documentation is primarily aimed at users.

<!-- update with `ls -d doc/*.md | sed 's/.md$//;s/\(.*\)/ * [\1](doc\/\1)/'` -->

 * [accounts](doc/accounts)
 * [admins](doc/admins)
 * [bits-and-pieces](doc/bits-and-pieces)
 * [extra](doc/extra)
 * [hardware-requirements](doc/hardware-requirements)
 * [how-to-get-help](doc/how-to-get-help)
 * [naming-scheme](doc/naming-scheme)
 * [reporting-email-problems](doc/reporting-email-problems)
 * [services](doc/services)
 * [ssh-jump-host](doc/ssh-jump-host)
 * [static-sites](doc/static-sites)
 * [svn-accounts](doc/svn-accounts)

# Howtos

This documentation is primarily aimed at sysadmins and establishes
various procedures not necessarily associated with a specific service.

<!-- update with `ls -d howto/*.md | sed 's/.md$//;s/\(.*\)/ * [\1](howto\/\1)/'` -->

 * [build_and_upload_debs](howto/build_and_upload_debs)
 * [create-a-new-user](howto/create-a-new-user)
 * [cumin](howto/cumin)
 * [fabric](howto/fabric)
 * [incident-response](howto/incident-response)
 * [new-machine](howto/new-machine)
 * [new-machine-hetzner-cloud](howto/new-machine-hetzner-cloud)
 * [new-machine-hetzner-robot](howto/new-machine-hetzner-robot)
 * [new-machine-mandos](howto/new-machine-mandos)
 * [new-machine](howto/new-machine)
 * [new-person](howto/new-person)
 * [raid](howto/raid)
 * [retire-a-host](howto/retire-a-host)
 * [retire-a-user](howto/retire-a-user)
 * [upgrades](howto/upgrades)

# Service documentation

This documentation covers all services hosted at TPO.

Every service hosted at TPO should have a documentation page, either
in this wiki, or elsewhere (but linked here). Services should ideally
follow this [template](howto/template) to ensure proper documentation.

## Internal services

Those are services managed by TPA directly.

 * [backup](howto/backup)
 * [cache](howto/cache)
 * [dns](howto/dns)
 * [drbd](howto/drbd)
 * [ganeti](howto/ganeti)
 * [git](howto/git)
 * [grafana](howto/grafana)
 * [ipsec](howto/ipsec)
 * [kvm](howto/kvm)
 * [ldap](howto/ldap)
 * [letsencrypt](howto/letsencrypt)
 * [logging](howto/logging)
 * [lvm](howto/lvm)
 * [nagios](howto/nagios)
 * [openstack](howto/openstack)
 * [postgresql](howto/postgresql)
 * [prometheus](howto/prometheus)
 * [puppet](howto/puppet)
 * [static-component](howto/static-component)
 * [tls](howto/tls)
 * [wkd](howto/wkd)

## Non-TPA services

Those are managed by service admins, and not directly the
responsability of the TPA team.

 * [gitlab](howto/gitlab)
 * [irc](howto/irc)
 * [rt](howto/rt)
 * [svn](howto/svn)

## Retired or researched services

Those services have been either retired or have not been implemented yet.

 * [conference](howto/conference)
 * [submission](howto/submission)
 * [trac](howto/trac)

# Meetings

We also keep our minutes here.

<!-- update with `ls -d meeting/*.md | sed 's/.md$//;s/\(.*\)/ * [\1](meeting\/\1)/'` -->

 * [2019-03-04](meeting/2019-03-04)
 * [2019-04-08](meeting/2019-04-08)
 * [2019-05-06](meeting/2019-05-06)
 * [2019-06-03](meeting/2019-06-03)
 * [2019-07-01](meeting/2019-07-01)
 * [2019-09-09](meeting/2019-09-09)
 * [2019-10-07](meeting/2019-10-07)
 * [2019-11-04](meeting/2019-11-04)
 * [2019-11-25](meeting/2019-11-25)
 * [2020-01-13](meeting/2020-01-13)
 * [2020-02-03](meeting/2020-02-03)
 * [2020-03-09](meeting/2020-03-09)
 * [2020-04-14](meeting/2020-04-14)
 * [2020-05-11](meeting/2020-05-11)
 * [2020-06-10](meeting/2020-06-10)
 * [2020-07-01](meeting/2020-07-01)
 * [monthly-report](meeting/monthly-report)
 * [template](meeting/template)

# Policies

 * [tpa-rfc-1-policy](policy/tpa-rfc-1-policy)
 * [tpa-rfc-2-support](policy/tpa-rfc-2-support)
 * [tpa-rfc-3-tools](policy/tpa-rfc-3-tools)
 * [tpa-rfc-4-prometheus-disk](policy/tpa-rfc-4-prometheus-disk)
 * [tpa-rfc-5-gitlab](policy/tpa-rfc-5-gitlab)

To add a new policy, create the page using the [template](template)
and add it to the above list.

## other, non TSA stuff

* [service list](https://gitlab.torproject.org/legacy/trac/-/wikis/org/operations/Infrastructure)

## old

Those are old docs that should be destroyed or merged above.

<!-- update with `ls -d old/*.md | sed 's/.md$//;s/\(.*\)/ * [\1](old\/\1)/'` -->

 * [backuppc](old/backuppc)
 * [nagios-client](old/nagios-client)
 * [new-kvm-virsh-vm](old/new-kvm-virsh-vm)
 * [new-machine-cymru](old/new-machine-cymru)
 * [new-machine-nondebian](old/new-machine-nondebian)
 * [new-machine.orig](old/new-machine.orig)
 * [new-vm-rethem](old/new-vm-rethem)