Migrate ejabberd uploads to mod_s3_upload and Garage

In addition to installing and configuring the new module, this also
enables public access to the S3 API via `bucket-name.s3.kosmos.org` as
well as Web access on `bucket-name.web.s3.kosmos.org` (when enabled).

Also includes some drive-by improvements to Chef attribute naming and
usage.

Co-authored-by: Greg Karékinian <greg@karekinian.com>
This commit is contained in:
Râu Cao
2023-10-10 17:55:55 +02:00
parent 832075dfb2
commit 65d71d6a73
25 changed files with 322 additions and 132 deletions

View File

@@ -1,44 +1,58 @@
{
"id": "ejabberd",
"5apps_ldap_password": {
"encrypted_data": "Jyt8IRrAt2LbyaMoKmo3SS+1ywXZhr1B0VtaE6L+Rg==\n",
"iv": "fpVbd9Xl662cJvKU\n",
"auth_tag": "dmWcmajdGiFHNamYT+SZWQ==\n",
"encrypted_data": "jsV7M+1lg4cc+x3WP+sWg4K5XcyFNPrCnlPA6Tl+mA==\n",
"iv": "qkYV3ljTHgiEdpHk\n",
"auth_tag": "SUfcAAr8PmA51JVn+IWRXg==\n",
"version": 3,
"cipher": "aes-256-gcm"
},
"kosmos_ldap_password": {
"encrypted_data": "RtKK1k/gBQYZczxRC7r2MhB65lITFH69UBbdoNjoIQ==\n",
"iv": "MtMrzXMVoxe/rRGX\n",
"auth_tag": "q5SZT+2rT+jUDh9FNjZq8Q==\n",
"encrypted_data": "JzDO3Xlr0aF6xWmHXhkWDjpimgmQDR9SgQn0EAA20g==\n",
"iv": "gtMZ06rxKzi6O3we\n",
"auth_tag": "jnjd0P3yx8p4VOuoe4AArg==\n",
"version": 3,
"cipher": "aes-256-gcm"
},
"uploads_secret": {
"encrypted_data": "01E+ANiUyZXzeSPtgQ9G2PHP0iyW2G2ApBg0shntTtoe\n",
"iv": "97nkWn0VLV4g9NmN\n",
"auth_tag": "bvQ2owruKwJZNPQ8eb2pXQ==\n",
"encrypted_data": "LXd5zSsZDqQ/jVUVCjN8i+DjcS89xkn9jUh/+Qsqzty8\n",
"iv": "Xrh8s7woFiUDAR8N\n",
"auth_tag": "tdlaQGzJIDWjz+xRNq1/UQ==\n",
"version": 3,
"cipher": "aes-256-gcm"
},
"admins": {
"encrypted_data": "bqSE9Owd1uxwFnFfE3+i7CNM+6SekM84Zkp6mBm1e++e4WAwhXgjvvdD/4hx\nYSysn41o77DG\n",
"iv": "p3MHwqp0eCM0ct1R\n",
"auth_tag": "MKvzZYJgvAeNmDUgZy8hdg==\n",
"encrypted_data": "5ykS3j5SfWstOwVcgtitAHpKSCyol+cqQvpd5gEGbnqUPB1x/1XzN+L01jSY\nCPcSUSJadXyu\n",
"iv": "9OqWkcaMwUwrnUr5\n",
"auth_tag": "boB/6oxS9lyTVk3xlddUXw==\n",
"version": 3,
"cipher": "aes-256-gcm"
},
"erlang_cookie": {
"encrypted_data": "+fYG16Q2ImhMIvnVnNRmCD3THSqkgHkEFdgqvOEFjAg8YT10do+B\n",
"iv": "znHqFysDrwAaDF9u\n",
"auth_tag": "2DQDCeEBz025Q2tXpbJq4w==\n",
"encrypted_data": "dJGPR8Wt08dndhj2i8u5QIS7xVKxMlFNIXlR7z87L6bq2GV5uSbi\n",
"iv": "MSCY5oPea7PBr4t+\n",
"auth_tag": "15UteU8giZoPWkV8f8a85Q==\n",
"version": 3,
"cipher": "aes-256-gcm"
},
"stun_secret": {
"encrypted_data": "ZPTari/XE9MhCz4u7ydjt6hbSxCRpuqV1v198uGbAOsvqD+LI9PqmV76df0=\n",
"iv": "Tu/A0E2rQ324ksfg\n",
"auth_tag": "CFqLmR2uNrL+7wAzmgLgCA==\n",
"encrypted_data": "raGN5Q3yrVxmpYcnLtxh2lzpFUZp+uZxE0+RyWdkKOv4pmg52Sxbgw1vvdg=\n",
"iv": "3/SpX2kO/g8Fp0oY\n",
"auth_tag": "hFzJs0sz/Gf8RAivDen7Hw==\n",
"version": 3,
"cipher": "aes-256-gcm"
},
"s3_key_id": {
"encrypted_data": "TJm8USSzLn7N9IqV5UgVBCfp7XXyL5JKxvC5mdL+2ZDTnWUFuIOH5tFmigtc\n",
"iv": "fpoAWqct04pDHzeZ\n",
"auth_tag": "1aUzuzDCXePi4tKFOiZZVw==\n",
"version": 3,
"cipher": "aes-256-gcm"
},
"s3_secret_key": {
"encrypted_data": "tUfqkVuGTRbc8r8hJsgaHeWSKh1EEvqzXBhLBXZ3O7QnM+zfL70DXdtLa5zl\nghmypGIUXok/wY4LCV92GoVC7SyEdYWwFHB7wqmV/QXICHMy8eE=\n",
"iv": "d4vzG9SeAtdMttO/\n",
"auth_tag": "HJkNEd11pKwSu3ImogV1iQ==\n",
"version": 3,
"cipher": "aes-256-gcm"
}