Past Incidents

We will update NextCloud to Version v15.0.2. We expect a downtime of ~10 minutes.

Start maintenance window: 29/01/2019 00:00 CEST
Stop maintenance window: 29/01/2019 02:00 CEST

We will update Docker to version 18.09.1. Please make sure your containers are starting automatically, as we have to restart the Docker daemon to complete this update.

Start maintenance window: 15/01/2019 00:00 CEST
Stop maintenance window: 15/01/2019 03:00 CEST

So far, there was no web application firewall on generation 6 servers, as we had yet to lay some groundwork before. With this change, we will enable ModSecurity and load the OWASP core set, please see the detailed changes below:

• update nginx to the latest stable version 1.14.2
• load ModSecurity base configuration
• load OWASP core rule set
• enable ModSecurity in DetectionOnly mode (= logging only)
• detected requests are logged into the ModSecurity audit log at /var/log/nginx/modsecurity.log (accessible via devop user)

Next steps:

• we will analyze all audit logs and take appropriate actions if required
• we might contact you over the next 2 weeks to discuss required changes on our or your end if required
• we're going to activate blocking mode (switch engine from DetectionOnly to on) on Monday, January 28th

Reference: #291

php71 was updated to version 7.1.26.
php72 was updated to version 7.2.14.

• https://secure.php.net/ChangeLog-7.php