Administrations, Logs, Backups, Updates¶
Application Logs¶
Our backend image follows the usual logging best practices by writing to
stdout, so you can follow logs with docker logs
or any other
appropriate tool. Apart from some service activity logs, all application
logs are JSON formatted.
It is up to you to set up log management (collection, aggregation, storage, retention) the way you want, according to your own log management policy. On our cloud, we use ELK stack for this task.
Backup and Restore¶
You need to backup:
- the content of the MongoDB database
- the folder mounted as a volume in the backend container at the
/app/storage
location
If one day you need to restore from scratch the Toucan Toco app, you
will only need to restore the Mongo database and to recreate a container
with the last backed up storage folder mounted in /app/storage
.
Choose backup frequency, storage place and retention duration according to your own backup policy.
Upgrading the Stack¶
I have a Toucan Toco stack installed. How do I update it?
Toucan Toco releases every week a new version of the Toucan Toco backend and frontend. The packages are automatically available on Docker Hub when they are ready.
Note
You may prefer to use the monthly packages (once a month, a more battle-tested release is published)
Warning
Review the “Breaking changes” section (below) carefully.
About Toucan Toco Versions¶
Please note each brick of the Toucan Toco stack (backend and frontend) has its own version.
To be compatible, the major version number should be the same, for example:
- Backend in v26.0.2 and Frontend in v26.0.7 are compatible, as they are both v26
- Backend in v25.2.10 and Frontend in v25.1.5 are compatible, as they are both v25
- Backend in v25.2.11 and Frontend in v26.0.7 are not compatible, as one is v25 and the other is v26
Breaking Changes¶
v77.0.0¶
Warning
The MongoDB backend migrates from 4.0 to 4.2
Please refer to the official documentation your Toucan Toco stack.
If you a use docker-compose stack, you only need to update the version of the MongoDB image and as an admin of the service, just launch:
db.adminCommand({
setFeatureCompatibilityVersion: '4.2'
});
v76.0.0¶
Following the release of the refresh token, we added encryption in the
applicative database for sensitive fields like tokens and
client_secrets. As an administrator, running Toucan Toco on-premise,
you now must provide a
`TOUCAN_DB_ENCRYPTION_SECRET
</sysadmin/03-configuration.html#toucan-db-encryption-secret>`__
before running the app. An error will show if not provided, preventing
it to start.
Choose a strong one! and keep it secret ;)
v60.0.0 Acid Citra Chinook¶
We completed a series of improvements on our backend Docker image.
- It is much smaller and we strive to make it pass static security scans.
- All the configuration states can be passed via environment variables (no need to mount a config file anymore).
- The features requiring taking screenshots of Toucan pages are supported by a new separate image.
- All this documentation was updated accordingly, please read before you deploy.
v56.1.0 Chou Bruxellensis¶
Warning
The MongoDB backend migrates from 3.6 to 4.0
I manage my own MongoDB
Please refer to the official documentation to upgrade your backend.
I don’t manage my own MongoDB
If you use the Toucan Toco shipping script to manage the MongoDB
installation and configuration (when "mongo_flag: enable"
),
everything will be upgraded auto-magically.
Warning
Please ensure that your current version is strictly superior to 44.4.0. otherwise, upgrade first to the 44.4.0 version
v44.4.0 Helpless Supernova¶
Warning
The MongoDB backend migrates from 3.4 to 3.6
I manage my own MongoDB
Please refer to the official documentation to upgrade your backend.
I don’t manage my own MongoDB
If you use the Toucan Toco shipping script to manage the MongoDB
installation and configuration (when "mongo_flag: enable"
),
everything will be upgraded auto-magically.
Monitoring¶
When you are in an on-premises mode, we recommend you to monitor the following parts:
Toucan Toco App¶
You should monitor:
https://api-toucan.domain.com/
returns a 200 HTTP statushttps://api-toucan.domain.com/status
with User AgentPlop 4rQD3KzCxWzTYaRyp0NSEfd6
returns a 200 HTTP status
The status page checks that:
- MongoDB is up and reachable by the Toucan Toco app
- Redis is up and reachable by the Toucan Toco app
- All Toucan Toco app processes are ok
System¶
Be sure the system is ok by monitoring:
- free disk space on all partitions
- load average of the server
- disk IO
- CPU, memory and SWAP usage
- RAID state
- hardware health
Of course, thresholds directly depend on your own monitoring policy.
Logs¶
MongoDB¶
You should monitor that:
- the mongoDB process is up and running
- the mongoDB port (usually 27017) is available and opened from the node where the Toucan Toco app is installed
- a basic user auth can be completed
Redis¶
You should monitor that:
- the redis process is up and running
- the redis port (usually 6379) is available and opened from the node where the Toucan Toco app is installed