kosmos/chef
kosmos/chef
8
3
Fork 0
Code Issues 30 Pull Requests 3 Projects 2 Activity

Change the port for IPFS's nginx vhost

Browse Source
This commit is contained in:
Greg Karékinian 2017-03-31 19:23:10 +02:00
parent 6430d71006
commit 2090bc6b10
2 changed files with 13 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
site-cookbooks/kosmos-ipfs/recipes/letsencrypt.rb
View File

@ -23,11 +23,12 @@ template "#{node['nginx']['dir']}/sites-available/ipfs.kosmos.org" do
source 'nginx_conf_ipfs.kosmos.org.erb' source 'nginx_conf_ipfs.kosmos.org.erb'
owner 'www-data' owner 'www-data'
mode 0640 mode 0640
variables server_name: 'ipfs.kosmos.org', variables server_name: 'ipfs.kosmos.org',
root_directory: root_directory, root_directory: root_directory,
ssl_cert: "/etc/letsencrypt/live/ipfs.kosmos.org/fullchain.pem", ssl_cert: "/etc/letsencrypt/live/ipfs.kosmos.org/fullchain.pem",
ssl_key: "/etc/letsencrypt/live/ipfs.kosmos.org/privkey.pem", ssl_key: "/etc/letsencrypt/live/ipfs.kosmos.org/privkey.pem",
ipfs_api_port: 5001 ipfs_api_port: 5001,
ipfs_external_api_port: 5444
notifies :reload, 'service[nginx]', :delayed notifies :reload, 'service[nginx]', :delayed
end end
@ -36,6 +37,12 @@ nginx_site 'ipfs.kosmos.org' do
enable true enable true
end end
firewall_rule 'ipfs_api' do
port 5444
protocol :tcp
command :allow
end
# Generate a Let's Encrypt cert (only if the nginx vhost exists and no cert # Generate a Let's Encrypt cert (only if the nginx vhost exists and no cert
# has been generated before. The renew cron will take care of renewing # has been generated before. The renew cron will take care of renewing
execute "letsencrypt cert for ipfs.kosmos.org" do execute "letsencrypt cert for ipfs.kosmos.org" do

2
site-cookbooks/kosmos-ipfs/templates/default/nginx_conf_ipfs.kosmos.org.erb
View File

@ -16,7 +16,7 @@ server {
server { server {
<% if File.exist?(@ssl_cert) && File.exist?(@ssl_key) -%> <% if File.exist?(@ssl_cert) && File.exist?(@ssl_key) -%>
listen 443 ssl spdy; listen <%= @ipfs_external_api_port %> ssl spdy;
<% else -%> <% else -%>
listen 80; listen 80;
<% end -%> <% end -%>