Agosto 2025 - Git do Root C3SL

[Git][root/k8s/fluxcd][main] feat(squid): add ing
by yyvf22 (＠yyvf22) 13 Ago '25

13 Ago '25

yyvf22 pushed to branch main at Root / Kubernetes / FluxCD Commits: 3e50c9cf by yyvf at 2025-08-13T20:15:41-03:00 feat(squid): add ing - - - - - 2 changed files: - infrastructure/stage/kustomization.yaml - + infrastructure/stage/squid/ing.yaml Changes: ===================================== infrastructure/stage/kustomization.yaml ===================================== @@ -13,6 +13,7 @@ resources: - ./keycloak/ing.yaml - ../base/etcd-backup - ../base/squid + - ../squid/ing.yaml patches: - path: ./openbao/helmrelease.yaml target: ===================================== infrastructure/stage/squid/ing.yaml ===================================== @@ -0,0 +1,24 @@ +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: squid + namespace: squid + annotations: + cert-manager.io/cluster-issuer: letsencrypt-dns01 +spec: + ingressClassName: cilium + rules: + - host: squid.k8sstage.c3sl.ufpr.br + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: squid + port: + number: 3128 + tls: + - hosts: + - squid.k8sstage.c3sl.ufpr.br + secretName: squid-tls View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/3e50c9cf0ffb6084d7e758… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/3e50c9cf0ffb6084d7e758… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] ci: fix yamlfmt
by yyvf22 (＠yyvf22) 13 Ago '25

13 Ago '25

yyvf22 pushed to branch main at Root / Kubernetes / FluxCD Commits: 20192704 by yyvf at 2025-08-13T19:45:50-03:00 ci: fix yamlfmt - - - - - 2 changed files: - infrastructure/base/squid/deploy.yaml - infrastructure/base/squid/svc.yaml Changes: ===================================== infrastructure/base/squid/deploy.yaml ===================================== @@ -14,15 +14,15 @@ spec: app: squid spec: containers: - - name: squid - image: harbor.c3sl.ufpr.br/root/squid:latest - ports: - - containerPort: 3128 - name: squid - protocol: TCP - volumeMounts: - - name: squid-data - mountPath: /var/spool/squid + - name: squid + image: harbor.c3sl.ufpr.br/root/squid:latest + ports: + - containerPort: 3128 + name: squid + protocol: TCP + volumeMounts: + - name: squid-data + mountPath: /var/spool/squid volumes: - name: squid-data persistentVolumeClaim: ===================================== infrastructure/base/squid/svc.yaml ===================================== @@ -7,6 +7,6 @@ metadata: app: squid spec: ports: - - port: 3128 + - port: 3128 selector: app: squid View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/20192704bd3f64d6c93557… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/20192704bd3f64d6c93557… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] feat(squid): add squid
by yyvf22 (＠yyvf22) 13 Ago '25

13 Ago '25

yyvf22 pushed to branch main at Root / Kubernetes / FluxCD Commits: 9c2f3737 by yyvf at 2025-08-13T11:48:43-03:00 feat(squid): add squid - - - - - 6 changed files: - + infrastructure/base/squid/deploy.yaml - + infrastructure/base/squid/kustomization.yaml - + infrastructure/base/squid/ns.yaml - + infrastructure/base/squid/pvc.yaml - + infrastructure/base/squid/svc.yaml - infrastructure/stage/kustomization.yaml Changes: ===================================== infrastructure/base/squid/deploy.yaml ===================================== @@ -0,0 +1,29 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: squid + namespace: squid +spec: + replicas: 1 + selector: + matchLabels: + app: squid + template: + metadata: + labels: + app: squid + spec: + containers: + - name: squid + image: harbor.c3sl.ufpr.br/root/squid:latest + ports: + - containerPort: 3128 + name: squid + protocol: TCP + volumeMounts: + - name: squid-data + mountPath: /var/spool/squid + volumes: + - name: squid-data + persistentVolumeClaim: + claimName: squid-data ===================================== infrastructure/base/squid/kustomization.yaml ===================================== @@ -0,0 +1,9 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +metadata: + name: squid +resources: + - ns.yaml + - deploy.yaml + - svc.yaml + - pvc.yaml ===================================== infrastructure/base/squid/ns.yaml ===================================== @@ -0,0 +1,4 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: squid ===================================== infrastructure/base/squid/pvc.yaml ===================================== @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: squid-data + namespace: squid +spec: + accessModes: + - ReadWriteOnce + resources: + requests: + storage: 500M ===================================== infrastructure/base/squid/svc.yaml ===================================== @@ -0,0 +1,12 @@ +apiVersion: v1 +kind: Service +metadata: + name: squid + namespace: squid + labels: + app: squid +spec: + ports: + - port: 3128 + selector: + app: squid ===================================== infrastructure/stage/kustomization.yaml ===================================== @@ -12,6 +12,7 @@ resources: - ../base/keycloak - ./keycloak/ing.yaml - ../base/etcd-backup + - ../base/squid patches: - path: ./openbao/helmrelease.yaml target: View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/9c2f37379d326cce3796d0… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/9c2f37379d326cce3796d0… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/services/http-proxy] Pushed new branch main
by yyvf22 (＠yyvf22) 13 Ago '25

13 Ago '25

yyvf22 pushed new branch main at Root / Serviços / HTTP Proxy -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/http-proxy/-/tree/main You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/services/dhcp][main] Add imoral
by Fernando K (＠fmkiotheka) 13 Ago '25

13 Ago '25

Fernando K pushed to branch main at Root / Serviços / DHCP Commits: c6c5b21e by Fernando Monteiro Kiotheka at 2025-08-13T11:14:38-03:00 Add imoral - - - - - 1 changed file: - kea-dhcp4.conf Changes: ===================================== kea-dhcp4.conf ===================================== @@ -4537,6 +4537,12 @@ "ip-address": "10.254.221.86", "user-context": { "nextbox_ip_address_id": 99 } }, + { + "hostname": "imoral", + "hw-address": "60:C7:27:29:29:DC", + "ip-address": "10.254.221.87", + "user-context": { "nextbox_ip_address_id": 2786 } + }, { "hostname": "sherekhan", "hw-address": "D0:27:88:C2:30:56", View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dhcp/-/commit/c6c5b21ef1eec712a6a… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dhcp/-/commit/c6c5b21ef1eec712a6a… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/services/dns][main] Add imoral
by Fernando K (＠fmkiotheka) 13 Ago '25

13 Ago '25

Fernando K pushed to branch main at Root / Serviços / DNS Commits: c5fd820e by Fernando Monteiro Kiotheka at 2025-08-13T11:14:10-03:00 Add imoral - - - - - 2 changed files: - interna-254.10.in-addr.arpa.zone - interna-c3local.zone Changes: ===================================== interna-254.10.in-addr.arpa.zone ===================================== @@ -459,6 +459,7 @@ $TTL 21600 85.223 IN PTR h57.c3local. 86.221 IN PTR fawkes.c3local. 86.223 IN PTR h58.c3local. +87.221 IN PTR imoral.c3local. 87.223 IN PTR h59.c3local. 88.221 IN PTR sherekhan.c3local. 88.223 IN PTR h60.c3local. @@ -479,4 +480,4 @@ $TTL 21600 249.227 IN PTR mojito7.c3local. @ IN NS ns2.c3sl.ufpr.br. @ IN NS ns.c3sl.ufpr.br. -@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754933625 86400 7200 2592000 3600 +@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1755094437 86400 7200 2592000 3600 ===================================== interna-c3local.zone ===================================== @@ -70,7 +70,7 @@ brioja IN A 10.254.221.54 buxfox IN A 10.254.237.8 @ IN NS ns2.c3sl.ufpr.br. @ IN NS ns.c3sl.ufpr.br. -@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754933626 86400 7200 2592000 3600 +@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1755094437 86400 7200 2592000 3600 caio IN A 10.254.221.1 calvin IN A 10.254.229.6 carate IN A 10.254.221.43 @@ -221,6 +221,7 @@ i39 IN A 10.254.224.66 i40 IN A 10.254.224.67 i41 IN A 10.254.224.68 ihc1 IN A 10.254.240.10 +imoral IN A 10.254.221.87 impressora-lamir IN A 10.254.253.5 ironman IN A 10.254.221.41 j1 IN A 10.254.225.5 View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dns/-/commit/c5fd820e9559c0d3a712… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dns/-/commit/c5fd820e9559c0d3a712… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/dmarc-report][main] chore: remove binary file
by Fernando K (＠fmkiotheka) 13 Ago '25

13 Ago '25

Fernando K pushed to branch main at Root / DMARC Report Commits: 6f1b4253 by Fernando Monteiro Kiotheka at 2025-08-13T10:43:21-03:00 chore: remove binary file - - - - - 1 changed file: - − dmarc-viewer Changes: ===================================== dmarc-viewer deleted ===================================== Binary files a/dmarc-viewer and /dev/null differ View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dmarc-report/-/commit/6f1b42533a80c3b16f59… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dmarc-report/-/commit/6f1b42533a80c3b16f59… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/dmarc-report][main] feat: upgrade to new bao config
by Fernando K (＠fmkiotheka) 13 Ago '25

13 Ago '25

Fernando K pushed to branch main at Root / DMARC Report Commits: 4ce72fa9 by Fernando Monteiro Kiotheka at 2025-08-13T10:37:03-03:00 feat: upgrade to new bao config - - - - - 2 changed files: - .gitlab-ci.yml - + get-key-from-bao.sh Changes: ===================================== .gitlab-ci.yml ===================================== @@ -3,32 +3,6 @@ stages: retrieve-key: stage : setup - script: - - | - - ssh-keygen -t ed25519 -f key -N '' -q <<<y > /dev/null 2>&1 - - UNSIGNED_SSH_KEY=$(cat key.pub) - - response=$(curl -X POST -H "X-Vault-Token: $CI_VAULT_TOKEN" -d "{\"public_key\": \"$UNSIGNED_SSH_KEY\"}" $CI_VAULT_ADDR/v1/$CI_VAULT_SIGNER_AUTHORITY_PATH) - if [ $? -eq 0 ]; then - SIGNED_KEY=$(echo $response | jq -r .data.signed_key) - if [ "$SIGNED_KEY" != "null" ]; then - echo $SIGNED_KEY > key-cert.pub - chmod 644 key-cert.pub - else - echo "Failed to retrieve SSH key: SSH key is empty" - exit 1 - fi - else - echo "Failed to retrieve SSH key: Request to Vault failed" - exit 1 - fi - - ssh -i key -o StrictHostKeyChecking=accept-new ansible(a)dmarc-report.c3sl.ufpr.br /home/ansible/dmarcts-report-parser/dmarcts-report-parser.pl -i - - artifacts: - paths: - - key - - key.pub - - key-cert.pub + script: |- + sh get-key-from-bao.sh + ssh -i key -o StrictHostKeyChecking=accept-new root(a)dmarc-report.c3sl.ufpr.br /home/ansible/dmarcts-report-parser/dmarcts-report-parser.pl -i ===================================== get-key-from-bao.sh ===================================== @@ -0,0 +1,11 @@ +#!/bin/sh +response=$(curl --no-progress-meter --request POST \ + --header "X-Vault-Token: $VAULT_TOKEN" --data '{"key_type": "ed25519"}' \ + "$VAULT_ADDR/v1/ssh-client-signer/issue/ansible") \ + || { echo "Failed to retrieve SSH key: Request to Vault failed"; exit 1; } +private_key=$(printf "%s" "$response" | jq --raw-output .data.private_key) +signed_key=$(printf "%s" "$response" | jq --raw-output .data.signed_key) +[ "$signed_key" != "null" ] && [ "$private_key" != "null" ] \ + || { echo "Failed to retrieve SSH key: SSH key is empty"; exit 1; } +printf "%s\n" "$private_key" >key && chmod 600 key +printf "%s\n" "$signed_key" >key-cert.pub && chmod 644 key-cert.pub View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dmarc-report/-/commit/4ce72fa9a6eda8009d82… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dmarc-report/-/commit/4ce72fa9a6eda8009d82… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] feat(ademir): add MAIL_ADDRESS env var
by yyvf22 (＠yyvf22) 13 Ago '25

13 Ago '25

yyvf22 pushed to branch main at Root / Kubernetes / FluxCD Commits: a34b542a by yyvf at 2025-08-12T21:19:44-03:00 feat(ademir): add MAIL_ADDRESS env var - - - - - 1 changed file: - apps/base/ademir/deploy.yaml Changes: ===================================== apps/base/ademir/deploy.yaml ===================================== @@ -55,6 +55,8 @@ spec: value: smtp.c3sl.ufpr.br - name: MAIL_PORT value: "25" + - name: MAIL_ADDRESS + value: "ademir(a)c3sl.ufpr.br" - name: S3_ACCESS_KEY_ID valueFrom: secretKeyRef: View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/a34b542ad91e7c0ed89c5a… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/a34b542ad91e7c0ed89c5a… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/suporte][main] feat: add draft matrix support page
by Fernando K (＠fmkiotheka) 12 Ago '25

12 Ago '25

Fernando K pushed to branch main at Root / Suporte do Departamento de Informática Commits: 53703287 by ferk6a at 2025-08-12T13:55:54-03:00 feat: add draft matrix support page - - - - - 7 changed files: - + content/pt-br/matrix.md - + content/pt-br/matrix/1.jpg - + content/pt-br/matrix/2.jpg - + content/pt-br/matrix/3.jpg - + content/pt-br/matrix/4.jpg - + content/pt-br/matrix/5.jpg - + content/pt-br/matrix/6.jpg Changes: ===================================== content/pt-br/matrix.md ===================================== @@ -0,0 +1,19 @@ +--- +title: Chat com Matrix +type: docs +--- + +O Matrix é um protocolo de comunicação com criptografia ponta a ponta. O C3SL +possui um servidor matrix para comunicação interna acadêmica que visa substituir +a necessidade da utilização de serviços como o Discord. + +## Aplicativos de celular + +### Element (Android e iOS) + +O Element pode ser obtido na [loja F-Droid](https://f-droid.org/packages/im.vector.app/) +ou na [loja Play Store](https://play.google.com/store/apps/details?id=im.vector.app). +Ele é no momento a versão mais completa. Para utilizar o Matrix com o servidor +do C3SL: + +1. ![](1.jpg) ===================================== content/pt-br/matrix/1.jpg ===================================== Binary files /dev/null and b/content/pt-br/matrix/1.jpg differ ===================================== content/pt-br/matrix/2.jpg ===================================== Binary files /dev/null and b/content/pt-br/matrix/2.jpg differ ===================================== content/pt-br/matrix/3.jpg ===================================== Binary files /dev/null and b/content/pt-br/matrix/3.jpg differ ===================================== content/pt-br/matrix/4.jpg ===================================== Binary files /dev/null and b/content/pt-br/matrix/4.jpg differ ===================================== content/pt-br/matrix/5.jpg ===================================== Binary files /dev/null and b/content/pt-br/matrix/5.jpg differ ===================================== content/pt-br/matrix/6.jpg ===================================== Binary files /dev/null and b/content/pt-br/matrix/6.jpg differ View it on GitLab: https://gitlab.c3sl.ufpr.br/root/suporte/-/commit/537032875bf8251ce47a811c8… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/suporte/-/commit/537032875bf8251ce47a811c8… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0