Quack,

Happy New year! (slightly late, sorry) We hope you're still safe and doing well.

=== Memory Problems on Orfeo ===

Orfeo is old and lacks memory but only recently did we hit problems. During the last few weeks we had to restart failed services and we started investigating. Nothing major changed on our side but the antivirus's update method had changed to be more efficient at the cost of more memory usage (clamav's ConcurrentDatabaseReload) and we though that was it. Unfortunately something seems to be leaking memory, we could not find the source and decided to reboot. Orfeo took a very long time to come back (03:10-08:40 CET) and we though it lost. Everything's working fine again but we'll be monitoring the situation.

=== Misc News from end of 2021 ===

- LDAP improvements: the deployment was totally reworked to be simpler, with better security rules and now all three servers are replicating each other (n-way sync) which means there is no single point of failure anymore. - all machines were upgraded to Debian Bullseye successfully. - Matrix experimentation is going on well: the web interface improved and communities were replaced by spaces; ask for an invitation on IRC if you wish to join the DuckCorp space. - the webmail was upgraded bringing dark mode (to preserve your eyes) and other improvements/fixes. - we use certbot to generate Let's Encrypt certificates and it's missing an [important feature](https://github.com/certbot/certbot/pull/7244). so far we used the patch in this ticket but it does not seem it will be included. Until this is resolved one way or another we're now using a simpler workaround patch to ease the maintenance and we're also evaluating using another tool (acme.sh for e.g.).

Hugs. \_o<