ippadmin/itpp-infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: mark wphost02 (5.161.62.38) decommissioned in phase-one audit findings

Browse Source 
- sys-a.md: fix wphost02 IP typo (152.53.62.38 -> 5.161.62.38) and annotate decommissioned 2026-08-28 (mysql-tunnel dot graph, dependency note, cron table)
- sys-b.md: annotate scope, reachability table, and section 5 as decommissioned; replace 'STILL LIVE' / 'NOT decommissioned' claims
- Resolves 2 stale IP references flagged by doc-live-verify.py
This commit is contained in:
root
2026-08-30 07:01:12 -04:00
parent 525e3cdd7b
commit 2e39611284
2 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
audit/phase-one/findings/sys-a.md
+3 -3
View File
@@ -184,7 +184,7 @@ digraph Core {
prometheus -> node_exporter; prometheus -> telegraf; prometheus -> mikrotik_exporter; prometheus -> snmp; prometheus -> node_exporter; prometheus -> telegraf; prometheus -> mikrotik_exporter; prometheus -> snmp;
// Cross-host tunnel // Cross-host tunnel
mysql_tunnel -> "wphost02 MySQL (152.53.62.38)"; mysql_tunnel -> "wphost02 MySQL (5.161.62.38, decommissioned 2026-08-28)";
} }
``` ```
@@ -217,7 +217,7 @@ digraph app1 {
- LiteLLM is the AI backbone: Open WebUI, all mcp-* tool servers, and Super Search (via MCP) route through it. admin-ai.itpropartner.com is the model gateway for every AI consumer. - LiteLLM is the AI backbone: Open WebUI, all mcp-* tool servers, and Super Search (via MCP) route through it. admin-ai.itpropartner.com is the model gateway for every AI consumer.
- Hermes gateway has a wide fan-out (8+ MCP/tool servers, browserless, camofox, Chrome CDP). Its failure cascades into all agent tooling. - Hermes gateway has a wide fan-out (8+ MCP/tool servers, browserless, camofox, Chrome CDP). Its failure cascades into all agent tooling.
- Cross-host dependency: app1 super-search depends on Core searxng (port 8888) over the WAN. If Core is down, app1 search is degraded. - Cross-host dependency: app1 super-search depends on Core searxng (port 8888) over the WAN. If Core is down, app1 search is degraded.
- mysql-tunnel (Core) depends on wphost02 (152.53.62.38) reachability; a host key change breaks it silently. - mysql-tunnel (Core) depends on wphost02 (5.161.62.38, decommissioned 2026-08-28) reachability; a host key change breaks it silently.
- HotNow is the only app with a real DB dependency chain (Postgres + Redis) on Core. - HotNow is the only app with a real DB dependency chain (Postgres + Redis) on Core.
--- ---
@@ -235,7 +235,7 @@ digraph app1 {
| 03:00 daily | docker-volume-sync.sh | root | **script does not exist** (F-13) | always fails silently | | 03:00 daily | docker-volume-sync.sh | root | **script does not exist** (F-13) | always fails silently |
| 00:05 daily | system-config-sync.sh | root | system configs to Wasabi | config drift backups lost | | 00:05 daily | system-config-sync.sh | root | system configs to Wasabi | config drift backups lost |
| 15:00 daily | status-page-refresh.sh | root | status page data | stale status | | 15:00 daily | status-page-refresh.sh | root | status page data | stale status |
| various | wphost02-backup.sh | root | SSHes to 152.53.62.38 (wphost02) with root key | wphost02 backups lost | | various | wphost02-backup.sh | root | SSHes to 5.161.62.38 (wphost02, decommissioned 2026-08-28) with root key | wphost02 backups lost |
| various | docuseal/timetrex/gitea/hudu/dawarich/ragflow/twenty/stack-auth/hexclave/komodo/litellm/technitium/unifi/unms/vaultwarden-backup.sh | root | per-service backups (many target remote hosts) | per-service backup loss | | various | docuseal/timetrex/gitea/hudu/dawarich/ragflow/twenty/stack-auth/hexclave/komodo/litellm/technitium/unifi/unms/vaultwarden-backup.sh | root | per-service backups (many target remote hosts) | per-service backup loss |
Hermes-managed jobs live in /root/.hermes/cron/jobs.json (jobs.json + per-job dirs). Parsing jobs.json programmatically failed during the audit (malformed JSON); a grep fallback confirmed the job list above. The exact schedule set should be re-verified by the DR owner. Hermes-managed jobs live in /root/.hermes/cron/jobs.json (jobs.json + per-job dirs). Parsing jobs.json programmatically failed during the audit (malformed JSON); a grep fallback confirmed the job list above. The exact schedule set should be re-verified by the DR owner.
audit/phase-one/findings/sys-b.md
+4 -4
View File
@@ -1,7 +1,7 @@
# Sys-B Findings - ITPP Phase One Infrastructure Audit (Read-Only) # Sys-B Findings - ITPP Phase One Infrastructure Audit (Read-Only)
**Auditor:** Sys-B (sysadmin inventory auditor) **Auditor:** Sys-B (sysadmin inventory auditor)
**Scope:** app2 (152.53.39.202), app3 (152.53.241.111), app1-bu (5.161.225.131), wphost02 (5.161.62.38) **Scope:** app2 (152.53.39.202), app3 (152.53.241.111), app1-bu (5.161.225.131), wphost02 (5.161.62.38, decommissioned 2026-08-28)
**Date:** 2026-08-13 **Date:** 2026-08-13
**Method:** Read-only SSH (`ssh -i /root/.ssh/itpp-infra`, BatchMode, ConnectTimeout=10). No mutation performed. All remediation is deferred to Phase Two. **Method:** Read-only SSH (`ssh -i /root/.ssh/itpp-infra`, BatchMode, ConnectTimeout=10). No mutation performed. All remediation is deferred to Phase Two.
@@ -14,7 +14,7 @@
| app2 | 152.53.39.202 | Docker app host | REACHABLE | | app2 | 152.53.39.202 | Docker app host | REACHABLE |
| app3 | 152.53.241.111 | CloudPanel web host | REACHABLE | | app3 | 152.53.241.111 | CloudPanel web host | REACHABLE |
| app1-bu | 5.161.225.131 | Warm standby (Core failover) | REACHABLE | | app1-bu | 5.161.225.131 | Warm standby (Core failover) | REACHABLE |
| wphost02 | 5.161.62.38 | Legacy WordPress / RunCloud | REACHABLE (NOT decommissioned) | | wphost02 | 5.161.62.38 | Legacy WordPress / RunCloud | DECOMMISSIONED 2026-08-28 |
No access limitations. All four hosts answered over SSH with the shared key. No access limitations. All four hosts answered over SSH with the shared key.
@@ -228,9 +228,9 @@ No other system or user cron jobs beyond `/etc/cron.d` defaults.
--- ---
## 5. wphost02 (5.161.62.38) - Legacy WordPress / RunCloud (STILL LIVE) ## 5. wphost02 (5.161.62.38) - Legacy WordPress / RunCloud (DECOMMISSIONED 2026-08-28)
**OS:** Ubuntu 24.04.4, up 34d. 3.7 GiB RAM / 3 CPU / 75G disk (**82% full** - 59G used). RunCloud-managed LEMP stack. NOT decommissioned. **OS:** Ubuntu 24.04.4, up 34d. 3.7 GiB RAM / 3 CPU / 75G disk (**82% full** - 59G used). RunCloud-managed LEMP stack. Decommissioned 2026-08-28 (all 8 WordPress sites migrated to app3).
### 5.1 Services ### 5.1 Services