p4-ovh-bms-3-ns3129867-operations

p4-ovh-bms-3-ns3129867 — Operations Workbook

Label: p4-ovh-bms-3-ns3129867
Host: 51.68.155.224
Hostname: ns3129867
Provider: OVH / Kimsufi (ns3129867.ip-51-68-155.eu)
Hardware: 8 vCPU · 32 GB RAM · 410 GB RAID1 (2× NVMe → /dev/md3)
OS: Ubuntu 22.04.5 LTS
Role: Pinbox24 staging/dev server + MongoDB replica set member (rs0)
Inventoried: 2026-06-14

---

Server Role

Dual-purpose server:

1. MongoDB — member of rs0 replica set (running since 2025-12-19, likely primary)
2. Staging — hosts all active Pinbox24 staging versions (v31/v32/v41/v42) via Docker + nginx-proxy

⚠️ MongoDB is consuming 21.7 GB RAM — leaves ~12 GB for containers. Watch for OOM.

---

SSH Access

Method	Command
Human (radieu)	ssh ubuntu@51.68.155.224 (uses ~/.ssh/id_ed25519)
Claude agent	ssh claude-admin@51.68.155.224 (uses VPS_SSH_PRIVATE_KEY)
Password fallback	ubuntu + password in .env.local → bare_metal_server_3_root_password

Keys installed:

• id_ed25519 (radieu) → /home/ubuntu/.ssh/authorized_keys — 2026-06-14
• VPS_SSH_PRIVATE_KEY (claude-admin) → /home/claude-admin/.ssh/authorized_keys — to be set up

claude-admin setup (run once as ubuntu):

sudo useradd -m -s /bin/bash claude-admin
sudo mkdir -p /home/claude-admin/.ssh
echo "<VPS_SSH_PRIVATE_KEY public part>" | sudo tee /home/claude-admin/.ssh/authorized_keys
sudo chmod 700 /home/claude-admin/.ssh && sudo chmod 600 /home/claude-admin/.ssh/authorized_keys
sudo chown -R claude-admin:claude-admin /home/claude-admin/.ssh
echo "claude-admin ALL=(ALL) NOPASSWD: /usr/bin/docker, /bin/systemctl, /bin/mkdir, /bin/chown, /bin/cp, /usr/bin/tee" \
  | sudo tee /etc/sudoers.d/claude-admin

---

MongoDB

Setting	Value
Version	7.0.26
Replica set	rs0
Port	27017 (bindIp 0.0.0.0)
Data dir	/var/lib/mongodb
Log	/var/log/mongodb/mongod.log
Auth	keyFile /etc/mongodb-keyfile + authorization: enabled
Status	Active since 2025-12-19 (5+ months)
RAM usage	~21.7 GB

---

Running Docker Containers

Container	Image	Status
v42-stage	ECR v42-stage	Up 3 months
s3-v42-stage	ECR v4-s3	Up 3 months
v41-stage	ECR v41-stage	Up 6 months
v32-stage	ECR v32-stage	Up 4 months
s3-v32-stage	ECR old-s3	Up 4 months
v31-stage	ECR v31-stage:latest	Up 5 months
traccar	traccar/traccar:latest	Up 4 months
mt5	mt5	Up 5 months
portainer-pinbox24	portainer/portainer	Up 5 months
nginx-proxy	jwilder/nginx-proxy	Up 6 months
nginx-proxy-letsencrypt	jrcs/letsencrypt-nginx-proxy-companion	Up 6 months

Registry: 563740926945.dkr.ecr.eu-central-1.amazonaws.com

ECR Login (required after 12h token expiry)

aws ecr get-login-password --region eu-central-1 \
  | docker login --username AWS --password-stdin \
    563740926945.dkr.ecr.eu-central-1.amazonaws.com

---

Disk Layout

/dev/nvme0n1  419.2G  (NVMe disk 1)
/dev/nvme1n1  419.2G  (NVMe disk 2)
/dev/md3      410G    mounted at /  — 170G used (44%)

⚠️ 44% disk used — monitor. Staging logs and old Docker images can fill this fast.

Disk cleanup

# Remove unused Docker images
docker system prune -f
 
# Check largest directories
du -sh /var/lib/mongodb /var/lib/docker /var/log

---

Monitoring

Not yet connected to Prometheus. node_exporter not installed.

To add Prometheus scrape:

1. Install node_exporter on this server
2. Add scrape target to monitoring/prometheus/prometheus.yml under the node job

---

Tasks

• Install node_exporter and add to Prometheus
• Monitor disk — 44% used; set alert at 70%
• Monitor RAM — MongoDB using 21.7GB; evaluate if it should be moved to dedicated node
• Add ops doc URL to dev_r_services and set compliance_workbook = 'yes'