Skip to main content

External VPS

We currently have 2 Virtual Private Server (VPS) hosted at Infomaniak.

  1. Hannibal is the VPS hosting the ISC Learn Moodle platform
  2. Marcellus is the legacy VPS hosting various services
Marcellus is not inventoried (August 2026)

The list of what actually runs on Marcellus was never filled in. Inventorying it (vhosts, containers, cron jobs) before anything is migrated or decommissioned is tracked in the ops todo.

Hannibal​

Ubuntu 24.04, Apache 2.4 + PHP-FPM 8.3 + MySQL 8.4 (port 3366) + Redis. Facts gathered read-only during the DR-mirror restore (August 2026):

  • SSH: ssh -4 -p 20002 ubuntu@learn.isc-vs.ch, key-based, passwordless sudo. From inside Calypso the port is unreachable — the uplink filters outbound non-standard ports.
  • No host firewall: ufw inactive, INPUT policy ACCEPT — inbound filtering, if any, is not on the box.
  • ⚠️ fail2ban watches the wrong port: its sshd jail rejects on port 2002 while sshd listens on 20002 — brute-force protection on SSH is currently a no-op. One-line jail fix + restart when a maintenance window allows.
  • Layout: everything lives in /srv (btrfs, compressed). ISC Learn = /srv/www/learn.isc-vs.ch/{moodle_isc,moodle_data,db_backups}; nightly automysqlbackup DB dumps at 06:25 land in db_backups/ — a restore never needs to touch the live DB.
  • Also hosted there (own vhosts, not covered by the Moodle DR mirror): ingegamez.isc-vs.ch (WordPress), files.isc-vs.ch, marks.isc-vs.ch, in-egalite.ch, plus Docker containers behind ports 8080/8443/8501. The DokuWiki that served wiki.isc-vs.ch was archived and switched off in August 2026 — the name now redirects to this documentation.
  • DR: a verified mirror of ISC Learn runs on rumba (restore runbook); backups go to the DS923 NAS — see backups.

Credentials and stale-account warnings: docs/secretzone/hannibal.md.