ippadmin/itpp-infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: mark wphost02 (5.161.62.38) decommissioned in phase-one audit findings

Browse Source 
- sys-a.md: fix wphost02 IP typo (152.53.62.38 -> 5.161.62.38) and annotate decommissioned 2026-08-28 (mysql-tunnel dot graph, dependency note, cron table)
- sys-b.md: annotate scope, reachability table, and section 5 as decommissioned; replace 'STILL LIVE' / 'NOT decommissioned' claims
- Resolves 2 stale IP references flagged by doc-live-verify.py
This commit is contained in:
root
2026-08-30 07:01:12 -04:00
parent 525e3cdd7b
commit 2e39611284
2 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
audit/phase-one/findings/sys-a.md
+3 -3
View File
@@ -184,7 +184,7 @@ digraph Core {
prometheus -> node_exporter; prometheus -> telegraf; prometheus -> mikrotik_exporter; prometheus -> snmp;
// Cross-host tunnel
mysql_tunnel -> "wphost02 MySQL (152.53.62.38)";
mysql_tunnel -> "wphost02 MySQL (5.161.62.38, decommissioned 2026-08-28)";
}
```
@@ -217,7 +217,7 @@ digraph app1 {
- LiteLLM is the AI backbone: Open WebUI, all mcp-* tool servers, and Super Search (via MCP) route through it. admin-ai.itpropartner.com is the model gateway for every AI consumer.
- Hermes gateway has a wide fan-out (8+ MCP/tool servers, browserless, camofox, Chrome CDP). Its failure cascades into all agent tooling.
- Cross-host dependency: app1 super-search depends on Core searxng (port 8888) over the WAN. If Core is down, app1 search is degraded.
- mysql-tunnel (Core) depends on wphost02 (152.53.62.38) reachability; a host key change breaks it silently.
- mysql-tunnel (Core) depends on wphost02 (5.161.62.38, decommissioned 2026-08-28) reachability; a host key change breaks it silently.
- HotNow is the only app with a real DB dependency chain (Postgres + Redis) on Core.
---
@@ -235,7 +235,7 @@ digraph app1 {
| 03:00 daily | docker-volume-sync.sh | root | **script does not exist** (F-13) | always fails silently |
| 00:05 daily | system-config-sync.sh | root | system configs to Wasabi | config drift backups lost |
| 15:00 daily | status-page-refresh.sh | root | status page data | stale status |
| various | wphost02-backup.sh | root | SSHes to 152.53.62.38 (wphost02) with root key | wphost02 backups lost |
| various | wphost02-backup.sh | root | SSHes to 5.161.62.38 (wphost02, decommissioned 2026-08-28) with root key | wphost02 backups lost |
| various | docuseal/timetrex/gitea/hudu/dawarich/ragflow/twenty/stack-auth/hexclave/komodo/litellm/technitium/unifi/unms/vaultwarden-backup.sh | root | per-service backups (many target remote hosts) | per-service backup loss |
Hermes-managed jobs live in /root/.hermes/cron/jobs.json (jobs.json + per-job dirs). Parsing jobs.json programmatically failed during the audit (malformed JSON); a grep fallback confirmed the job list above. The exact schedule set should be re-verified by the DR owner.