Ops One AG platform status and maintenance announcements. Times are indicated in local Swiss time. https://opsone.ch/.
All systems are operational
Scheduled Maintenance
Matomo: Changes to Multi-Server Setups

To improve stability and maintainability of larger Dedicated Matomo installations, we will perform some planned changes to the configuration.

Why this change?

Operating Matomo in a multi-server setup contains some complexity. We will further standardize and optimize the structure of the single parts of the stack, the monitoring and our automation. This will ensure we can further improve stability and performance, while reducing operational overhead and improving maintainability.

Which installations are affected?

These planned changes affect larger Dedicated Matomo installations that we operate on multiple servers. We will perform the planned changes one installation after the other during this 2-day maintenance window.

What does this mean?

  • Tracking of website users will continue without interruption, no tracking-data will be lost.
  • Access to the Matomo GUI for accessing the statistics will be interrupted temporarily for a short period of approx. 30-60 minutes per installation.
  • After the Matomo GUI is accessible again, tracking-data of the current day will show up with a slight delay until the queued tracking-data backlog is processed (duration of this process depends on the amount of tracking-data to be processed from the queue).

You don't have to do or change anything regarding this change.

If you have any questions, do not hesitate to contact us.

Start maintenance window: 16/11/2026 08:00
Stop maintenance window: 17/11/2026 18:00

Mailcow: Changes to Email Alias Forwarding

To improve email deliverability, we will restrict email aliases from forwarding messages to external domains.

Why this change?

Forwarding emails to external providers can cause authentication issues (particularly SPF), resulting in messages being rejected or classified as spam.

What does this mean?

  • Existing aliases will continue to work as usual, unless modified.
  • Forwarding to locally hosted domains remains unaffected.
  • Creating or modifying aliases to forward to external domains will be restricted.
  • External forwarding will remain possible through an alternative method.

For instructions, please see our forwarding guide.

If you have any questions, do not hesitate to contact us.

Start maintenance window: 30/11/2026 23:00
Stop maintenance window: 01/12/2026 02:00

Past Incidents

Tuesday 15th January 2019

Managed Server Version 6: Docker Update, scheduled 7 years ago

We will update Docker to version 18.09.1. Please make sure your containers are starting automatically, as we have to restart the Docker daemon to complete this update.

Start maintenance window: 15/01/2019 00:00 CEST
Stop maintenance window: 15/01/2019 03:00 CEST

Mailserver Update, scheduled 7 years ago

We perform software updates on our mail servers. We expect a downtime of ~5 minutes.

Start maintenance window: 15/01/2019 00:00
Stop maintenance window: 15/01/2019 01:30

New features / Changes:

  • [Web] Apple mobileconfig enhancements
  • [ClamAV] Include signatures from Sanesecurity
  • [SOGo] Fix Reminder Mails
  • [Web] Various minor fixes
  • [Web] Update languages (cs, en)
  • [Compose] Update to Redis 5
  • [Compose] New images for ClamAV, Watchdog, SOGo, Postfix and PHP-FPM
  • [PHP-FPM] Update PHP and libs

Monday 14th January 2019

Managed Server Version 6: Website Service: Enable ModSecurity in DetectionOnly Mode

So far, there was no web application firewall on generation 6 servers, as we had yet to lay some groundwork before. With this change, we will enable ModSecurity and load the OWASP core set, please see the detailed changes below:

  • update nginx to the latest stable version 1.14.2
  • load ModSecurity base configuration
  • load OWASP core rule set
  • enable ModSecurity in DetectionOnly mode (= logging only)
  • detected requests are logged into the ModSecurity audit log at /var/log/nginx/modsecurity.log (accessible via devop user)

Next steps:

  • we will analyze all audit logs and take appropriate actions if required
  • we might contact you over the next 2 weeks to discuss required changes on our or your end if required
  • we're going to activate blocking mode (switch engine from DetectionOnly to on) on Monday, January 28th

Reference: #291

Sunday 13th January 2019

No incidents reported

Saturday 12th January 2019

No incidents reported

Friday 11th January 2019

No incidents reported

Thursday 10th January 2019

Managed Server Version 6: php 71 & php72 update, scheduled 7 years ago

php71 was updated to version 7.1.26.
php72 was updated to version 7.2.14.

Managed Server Version 5: php72 update, scheduled 7 years ago

php72 was updated to version 7.2.14.

New Cockpit Version: Version 1.1.0
  • Bugfix: DNS Zones can be deleted again
  • Bugfix: Customer selector was empty after login
  • Bugfix: Entries in the customer selector were displayed multiple times
  • Feature: Every action is now logged with a diff to Customer / Logs

Wednesday 9th January 2019

No incidents reported

Tuesday 8th January 2019

Managed Server Version 5: Website Module: Add Additional SQL Injection Rules

Since a few weeks, we see more and more SQL injection attacks with a certain request pattern. While those requests do not led to any security problems, they are usually fired in rapid sucession, which can led to overloaded or slow systems.

Over the holidays, we developed and tested new WAF rules to block this particular requests. As we see the same pattern on many servers and do not expect any problem with those new rules after our testing, we will rollout them to all systems as of now.

Closes #494