doc: Update nginx runbook for new infra

Author: Krinkle

doc/runbook-nginx-debug.md

@@ -1,56 +1,47 @@
 # Runbook: Nginx debugging
 
+## Local curl
+
+Use `--connect-to` to bypass any CDN and test the origin directly.
+
+```
+you@laptop$ curl -I 'https://view.jquery.com/bar' --connect-to '::miscweb-01.ops.jquery.net'
+```
+
+You can also do this from the origin itself over SSH
+
+```
+krinkle@miscweb-01:~$ curl -v -I 'https://view.jquery.com/bar' --connect-to ::localhost
+```
+
 ## Staging and testing
 
-* Push to `puppet-stage`.
-* Apply on **wp-01.stage**.ops by running `sudo puppet agent -tv` there.
+For nginx changes to WordPress hosts, you can use staging:
+
+* Push edits to `staging` branch.
+* SSH to a stage host (e.g. **wp-03.stage**.ops) and run `sudo run-puppet-agent` there.
   * If there are errors, especially the `Nginx[refresh]` line, then stop and fix the patch.
   * To get more details on the error, use `sudo service nginx configtest` and `sudo nginx -t`.
-* Push to `puppet-master`.
-* Apply on `wp-02.ops` by running `sudo puppet agent -tv` there. Confirm content sites (besides releases/codeorigin) are fine.
-* Apply on `wp-03.ops` by running `sudo puppet agent -tv` there. Confirm codeorigin is fine.
+* Once happy, forward to `production`.
+* Apply on relevant prod (e.g. wp-05 for jqueryui, wp-04 for jquery) by running `sudo run-puppet-agent` there and confirming the behaviour afterwards. Use local curl (example below) instead of the public Clouflare-cached URL if caching might be at play.
 
 ## Live hacking
 
-To test and **debug Nginx changes** for jQuery content sites hosted on wp-01, wp-02, or wp03.
+Sometimes iterating through the staging branch is tedious, or there might not be a staging version (e.g. miscweb). To iterate, debug, or preview Nginx changes you can do the following on any wp-stage, codeorigin-stage, or miscweb host.
 
-The staging server is **wp-01.stage** (for all sites, including codeorigin).
-
-1. Edit the appropriate file under `/tmp/nginx.d/`, e.g. using `sudo nano` (vim isn't installable currently).
-2. Then perform the same notify command as Puppet would do:
-   ```
-   sudo sh -c '/bin/cat /tmp/nginx.d/* > /etc/nginx/conf.d/vhost_autogen.conf'
-   ```
-3. Then reload the nginx service:
+1. Edit the appropriate file under `/etc/nginx/sites-available/`, e.g. using `sudo nano myfile.txt`.
+2. Perform reload nginx, just as Puppet would do:
    ```
    sudo service nginx reload
    ```
-4. Perform your test against HTTP localhost using `curl` and a Host header. Remember that on the staging server, the hostnames have a `stage.` prefix, for example:
-  ```
-  wp-01.stage$ curl -i 'http://localhost/color/jquery.color-2.2.0.min.js' -H 'Host: stage.codeorigin.jquery.com'
-
-  wp-01.stage$ curl -i 'http://localhost/git/example-git.js' -H 'Host: stage.releases.jquery.com'
-
-  wp-01.stage$ curl -i 'http://localhost/purge/?uri=/qunit/' -H 'Host: stage.releases.jquery.com'
-  wp-01.stage$ curl -i 'http://localhost/purge/?site=code&uri=/jquery-3.6.0.js' -H 'Host: stage.releases.jquery.com'
-  wp-01.stage$ curl -i 'http://localhost/purge/?site=code&uri=/color/jquery.color-2.2.0.min.js' -H 'Host: stage.releases.jquery.com'
-
-  wp-03$ curl -i 'http://localhost/git/color/jquery.color-git.min.js' -H 'Host: releases.jquery.com'
-  wp-03$ curl -i 'http://localhost/git/color/jquery.color-git.min.js' -H 'Host: codeorigin.jquery.com'
-  wp-03$ curl -i 'http://localhost/color/color/jquery.color-2.2.0.min.js' -H 'Host: codeorigin.jquery.com'
-
+3. Perform your test against HTTP localhost using `curl` and a Host header. Remember that on the staging server, the hostnames have a `stage.` prefix in the URL hostname:
   ```
-  Or, to test from the outside, use `--connect-to` to bypass Cloudflare and simulate a direct request:
-  ```
-  curl -I 'https://view.jquery.com/bar' --connect-to '::wp-01.ops.jquery.net'
+  curl -I 'https://view.jquery.com/bar' --connect-to '::wp-05.ops.jquery.net'
   ```
 
-Beware that Puppet will run every 30 minutes and may overwrite these changes.
-* Check `sudo tail -n100 /var/log/syslog`, to see when Puppet last ran.
-* To temporarily disable puppet: `puppet agent --disable "message here"`
+Beware that Puppet will run every 30 minutes and may overwrite your changes while you're live hacking.
+* Check `sudo journalctl -u puppet -n 20`, to see when Puppet last ran.
+* To temporarily pause puppet: `puppet agent --disable "message here"`
 * When done, re-enable puppet: `puppet agent --enable`
-* To undo your changes, run puppet so that it restores the state: `puppet agent -tv`.
-
-## See also
+* To undo your changes, simply run puppet: `sudo run-puppet-agent`.
 
-Ref https://github.com/jquery/infrastructure/commit/79ae864005a12dab9affa502fd5dc5291fff504c