Migrate Gitea SSH stream to openresty

nodes/draco.kosmos.org.json

@@ -47,6 +47,7 @@
       "kosmos_drone::nginx",
       "kosmos_garage::nginx_web",
       "kosmos_gitea::nginx",
+      "kosmos_gitea::nginx_ssh",
       "kosmos_rsk::nginx_testnet",
       "kosmos_rsk::nginx_mainnet",
       "kosmos_website",

nodes/fornax.kosmos.org.json

@@ -102,7 +102,6 @@
     "role[base]",
     "role[kvm_host]",
     "role[nginx_proxy]",
-    "kosmos_gitea::nginx_ssh",
     "role[zerotier_controller]"
   ]
 }

roles/openresty_proxy.rb

@@ -31,6 +31,7 @@ production_run_list = %w(
   kosmos_drone::nginx
   kosmos_garage::nginx_web
   kosmos_gitea::nginx
+  kosmos_gitea::nginx_ssh
   kosmos_rsk::nginx_testnet
   kosmos_rsk::nginx_mainnet
   kosmos_website::default

site-cookbooks/kosmos_gitea/recipes/nginx_ssh.rb

@@ -3,16 +3,15 @@
 # Recipe:: nginx_ssh
 #
 
-template "#{node['nginx']['dir']}/streams-available/ssh" do
-  source "nginx_conf_ssh.erb"
-  owner 'www-data'
-  mode 0640
-  variables domain: domain,
-            upstream_host: upstream_ip_address
-
-  notifies :reload, 'service[nginx]', :delayed
+begin
+  upstream_ip_address = search(:node, "role:gitea").first["knife_zero"]["host"]
+rescue
+  Chef::Log.warn('No server with "gitea" role. Stopping here.')
+  return
 end
 
-nginx_stream "ssh" do
+openresty_stream "ssh" do
+  template "nginx_conf_ssh.erb"
+  variables upstream_host: upstream_ip_address
   action :enable
 end

site-cookbooks/kosmos_gitea/templates/default/nginx_conf_ssh.erb

@@ -3,6 +3,6 @@ upstream _gitea_ssh {
 }
 
 server {
-  listen 148.251.83.201:22;
+  listen <%= "#{node['openresty']['listen_ip']}:" if node['openresty']['listen_ip'] %>22;
   proxy_pass _gitea_ssh;
 }