Only the Mail Ports Went Quiet
From home, every mail port ran into a timeout while HTTPS on the same host answered normally. The cause was a second [DEFAULT] ignoreip in jail.d that replaces FAIL2BAN_IGNOREIP from docker-mailserver.
Category
Operations, deployment, and everything underneath: Docker Swarm, CI/CD, networking, monitoring, and the outages we learned from.
From home, every mail port ran into a timeout while HTTPS on the same host answered normally. The cause was a second [DEFAULT] ignoreip in jail.d that replaces FAIL2BAN_IGNOREIP from docker-mailserver.
The special vdev of a 113 TB pool sat on two qcow2 files – both on the same consumer SSD, with 11% of its endurance left. Moving it meant operating on a live mirror with no room to be wrong. And it surfaced two checks that had been pointed at the wrong thing the whole time.
Workbench could drop its database and rebuild it. This one polls Graylog and files GitLab issues – and a side effect has no upstream. Why dry-run became a database column, why the dashboard has no delete button, and why the safety guard sits at the HTTP boundary rather than in configuration.