--- priority: 10 type: project tags: project univers: PERSO title: VPS OVH (perso) aliases: [""] status: "active" # Options: active, closed, in-progress, urgent, waiting urgence: "haute" # Options: haute, normale, basse start: "2026-09-25" review: "2026-09-25" domain: "[[PERSO-INFORMATIQUE]]" --- # Projet VPS OVH PERSO VPS hébergé chez OVH. Actuellement raccordé au nom de domaine https://datagrandest.net Basé sur une solution Yunohost Liste des application installées => cf. note dédiée Héberge le projets : [[03_PROJETS/VPS-IA]] Description : * [[04_NOTES/OVH/VPS-OVH_Description]] * [[00_INBOX/Pro/APPLICATION_Wallabag]] Maintenance du serveur Yunohost : * [[04_NOTES/Yunohost_renew_certifiates_cli]] * [[04_NOTES/Yunohost_update_system_cli]] Anciennes notes de migration : * Projet : [[90_ARCHIVES/CLOS/PERSO/VPS-OVH_MIGRATION-2025]] * Note : [[04_NOTES/OVH/MIGRATION-VPS-OVH-2025]] * Note : [[90_ARCHIVES/CLOS/PERSO/INSTALLATION-VPS-OVH-2020-YUNOHOST]] * Note : [[04_NOTES/OVH/INSTALLATION-VPS-OVH-2026-YUNOHOST]] ## Todo ### Urgent ${query[[ from t = index.tasks('URGENT') where t.done == false and table.includes(t.links, _CTX.currentPage.name) order by t.lastModified desc limit 10 select { REF = "[[" .. t.ref .. "]]", TEXT = t.text, TAGS = t.tags } ]]} ### Next ${query[[ from t = index.tasks('next') where t.done == false and table.includes(t.links, _CTX.currentPage.name) order by t.lastModified desc limit 10 select { REF = "[[" .. t.ref .. "]]", TEXT = t.text, TAGS = t.tags } ]]} ### Other ${query[[ from t = index.tasks() where t.done == false and table.includes(t.links, _CTX.currentPage.name) and not table.includes(t.tags, 'URGENT') and not table.includes(t.tags, 'next') and not table.includes(t.tags, 'event') order by t.lastModified desc limit 10 select { REF = "[[" .. t.ref .. "]]", TEXT = t.text, TAGS = t.tags } ]]} ## Evénements ### A venir ${query[[ from t = index.tasks('event') where not t.done and table.includes(t.links, _CTX.currentPage.name) order by t.lastModified desc limit 10 select { REF = "[[" .. t.ref .. "]]", TEXT = t.text, TAGS = t.tags } ]]} ### A traiter ${query[[ from o = index.tag "header" where table.includes(o.tags, "event") and string.find(string.gsub(o.name, '%-', '_'), "%[%[" .. string.gsub(_CTX.currentPage.name, '%-', '_') .. "%]%]") order by o.page desc limit 10 select { REF = "[[" .. o.ref .. "]]", NAME = o.name } ]]} ## DONE ${query[[ from t = index.tasks() where t.done and table.includes(t.links, _CTX.currentPage.name) order by t.lastModified desc limit 10 select { REF = "[[" .. t.ref .. "]]", TEXT = t.text, TAGS = t.tags } ]]} ## Suivie et améliorations ### Tableau des évolutions $${query[[ from t = index.items() where t.page == _CTX.currentPage.name and string.startsWith(t.text, "[[01_JOURNAL/2026/") order by t.text desc select { REF = "[[" .. t.ref .. "]]", DATE = "[[01_JOURNAL/2026/" .. string.match(t.text, "(%d%d%d%d%-%d%d%-%d%d)") .. "]]", TAGS = table.concat(t.tags, ", "), TEXT = t.text } ]]} ### Log chronologique * [[01_JOURNAL/2026/2026-11-01]] - #VPS-Infra : Réparation FTS SilverBullet (Silversearch 1.2.6 remplace basic-search) -> [[04_NOTES/VPS-IA_Reparation-FTS-Silversearch]] * [[01_JOURNAL/2026/2026-11-02]] - #VPS-Infra : Audit disque VPS 81→63 % + purge (reranker QMD 610 Mo) -> [[04_NOTES/VPS-IA_Audit-Disque-2026-11-02]] * [[01_JOURNAL/2026/2026-11-02]] - #VPS-Infra : Compaction OpenCode (buffer 30 %, keep.tokens 20000) -> [[04_NOTES/VPS-IA_Compaction-OpenCode-2026-11-02]] * [[01_JOURNAL/2026/2026-11-02]] - #VPS-Securisation : Garde-fous OpenCode/ZeroClaw (policies deny, hardening systemd) -> [[04_NOTES/VPS-IA_Garde-fous-OpenCode-ZeroClaw-20261102]] * [[01_JOURNAL/2026/2026-11-03]] - #VPS-Securisation : Alerte SSH PAM v2 (filtre anti-bruit Forgejo, garde alerte Guacamole) -> [[04_NOTES/VPS-IA_SSH-Alerte-Ntfy-PAM-2026-10-19]] * [[01_JOURNAL/2026/2026-10-14]] - #VPS-Infra : Mise à jour Silverbullet CLI 2.10.0 → 2.12.1 -> [[04_NOTES/VPS-IA_Mise-a-jour-SilverBullet-CLI]] * [[01_JOURNAL/2026/2026-10-16]] - #VPS-Securisation : Audit sécurité du VPS Yunohost -> [[04_NOTES/OVH/VPS-OVH_Securisation_20261016]], [[04_NOTES/VPS-IA_Audit-Securite-VPS-2026-10-16]] * [[01_JOURNAL/2026/2026-10-17]] - #VPS-Securisation : Sécurisation SSH (clé + désactivation mot de passe) + fail2ban -> [[04_NOTES/OVH/VPS-OVH_Securisation_20261016]], [[04_NOTES/VPS-IA_SSH-Connexion-Cle-Windows]] * [[01_JOURNAL/2026/2026-10-17]] - #VPS-Infra : Configuration Ollama pour Silverbullet (OLLAMA_ORIGINS) -> [[04_NOTES/OVH/VPS-OVH_Securisation_20261016]] * [[01_JOURNAL/2026/2026-10-17]] - #VPS-Securisation : Installation ntfy + alerte de test -> [[04_NOTES/OVH/VPS-OVH_Securisation_20261016]] * [[01_JOURNAL/2026/2026-10-17]] - #VPS-Infra : Rotation des logs (guacamole, vps-check) -> [[04_NOTES/OVH/VPS-OVH_Securisation_20261016]] * [[01_JOURNAL/2026/2026-10-17]] - #VPS-Securisation : Règle de sécurité : pas de secrets via at (crontab/pass) -> [[04_NOTES/OVH/VPS-OVH_Securisation_20261016]] * [[01_JOURNAL/2026/2026-10-18]] - #VPS-PKM : Création de la section « Suivie et améliorations » (log chronologique + tags + table unique) -> [[03_PROJETS/VPS-OVH-PERSO]] * [[01_JOURNAL/2026/2026-10-18]] - #VPS-Infra : Avancement des horaires des tâches planifiées (vps-check 03:05, ntfy-alert 03:10 UTC) + nettoyage ligne crontab résiduelle one-shot -> [[80_CONFIG/IA_SKILLS/Planification-Taches]], [[04_NOTES/VPS-IA_Fuseau-horaire-UTC-2026-10-18]] * [[01_JOURNAL/2026/2026-10-19]] - #VPS-Securisation : Alerte SSH via PAM + ntfy (notification connexion SSH) -> [[04_NOTES/VPS-IA_SSH-Alerte-Ntfy-PAM-2026-10-19]] * [[01_JOURNAL/2026/2026-10-19]] - #VPS-Infra : Alerte ntfy sur la mise à jour hebdomadaire automatique d’OpenCode (succès/erreur, versions) -> [[04_NOTES/VPS-IA_Installation-OpenCode]] * [[01_JOURNAL/2026/2026-10-28]] - #VPS-Infra : Accès lecture espace SilverBullet pour opencode (usermod -aG silverbullet) + RAG local QMD (cron nocturne 02:30, index ~22 Mo, modèles GGUF 2,2 Go) → perms à re-vérifier après upgrade YunoHost SB -> [[03_NOTES/VPS-IA_RAG-Local-QMD]] * [[01_JOURNAL/2026/2026-10-28]] - #VPS-Agent : Restriction permissions MCP agent vps-admin (deny grist/excalidraw, optimisation tokens catalogue) -> [[04_NOTES/VPS-IA_Permissions-MCP-Par-Agent]]