kosmos/chef
8
3
Fork 0
Code Issues 34 Pull Requests 3 Projects 2 Activity

WIP Set up akaunting

Browse Source
This commit is contained in:
Râu Cao
2024-12-16 12:04:08 +04:00
parent 31b7ff9217
commit 759e2febf1
21 changed files with 1407 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files

66
nodes/akaunting-1.json Normal file
View File

@@ -0,0 +1,66 @@
{
"name": "akaunting-1",
"chef_environment": "production",
"normal": {
"knife_zero": {
"host": "10.1.1.215"
}
},
"automatic": {
"fqdn": "akaunting-1",
"os": "linux",
"os_version": "5.15.0-1069-kvm",
"hostname": "akaunting-1",
"ipaddress": "192.168.122.162",
"roles": [
"base",
"kvm_guest",
"akaunting",
"postgresql_client"
],
"recipes": [
"kosmos-base",
"kosmos-base::default",
"kosmos_kvm::guest",
"kosmos_postgresql::hostsfile",
"kosmos_akaunting",
"kosmos_akaunting::default",
"apt::default",
"timezone_iii::default",
"timezone_iii::debian",
"ntp::default",
"ntp::apparmor",
"kosmos-base::systemd_emails",
"apt::unattended-upgrades",
"kosmos-base::firewall",
"kosmos-postfix::default",
"postfix::default",
"postfix::_common",
"postfix::_attributes",
"postfix::sasl_auth",
"hostname::default",
"kosmos-nodejs::default",
"nodejs::nodejs_from_package",
"nodejs::repo"
],
"platform": "ubuntu",
"platform_version": "22.04",
"cloud": null,
"chef_packages": {
"chef": {
"version": "18.5.0",
"chef_root": "/opt/chef/embedded/lib/ruby/gems/3.1.0/gems/chef-18.5.0/lib",
"chef_effortless": null
},
"ohai": {
"version": "18.1.11",
"ohai_root": "/opt/chef/embedded/lib/ruby/gems/3.1.0/gems/ohai-18.1.11/lib/ohai"
}
}
},
"run_list": [
"role[base]",
"role[kvm_guest]",
"role[akaunting]"
]
}

807
nodes/her.json
View File

@@ -1,15 +1,818 @@
{
"name": "her",
"chef_environment": "production",
"override": {
"apt": {
"unattended_upgrades": {
"allowed_origins": [
"${distro_id}:${distro_codename}-security",
"${distro_id}:${distro_codename}-updates"
],
"mail": "ops@kosmos.org",
"syslog_enable": true
}
},
"set_fqdn": "*",
"akkounts": {
"btcpay": {
"public_url": "https://btcpay.kosmos.org",
"store_id": "FNJVVsrVkKaduPDAkRVchdegjwzsNhpceAdonCaXAwBX"
},
"ejabberd": {
"admin_url": "https://xmpp.kosmos.org:5443/admin"
},
"lndhub": {
"public_url": "https://lndhub.kosmos.org",
"public_key": "024cd3be18617f39cf645851e3ba63f51fc13f0bb09e3bb25e6fd4de556486d946"
},
"nostr": {
"public_key": "b3e1b7c1660b7db0ecb93ec55c09e67961171a5c4e9e2602f1b47477ea61c50a"
}
},
"discourse": {
"domain": "community.kosmos.org"
},
"droneci": {
"public_url": "https://drone.kosmos.org"
},
"ejabberd": {
"turn_domain": "turn.kosmos.org"
},
"email": {
"domain": "kosmos.org",
"hostname": "mail.kosmos.org",
"report_contact": "abuse@kosmos.org",
"virtual_aliases": {
"admin@kosmos.org": "ops@kosmos.org",
"ops@kosmos.org": "ops@5apps.com",
"webmaster": "mail@kosmos.org",
"hostmaster@kosmos.org": "mail@kosmos.org",
"postmaster@kosmos.org": "mail@kosmos.org",
"abuse@kosmos.org": "mail@kosmos.org",
"mail@kosmos.org": "foundation@kosmos.org"
}
},
"garage": {
"replication_mode": "2",
"s3_api_root_domain": "s3.kosmos.org",
"s3_web_root_domain": "web.s3.kosmos.org",
"s3_web_domains": [
"media.kosmos.chat",
"s3.accounts.kosmos.org",
"s3.community.kosmos.org",
"s3.kosmos.social"
],
"xmpp_upload_bucket": "kosmos-xmpp-uploads"
},
"gitea": {
"domain": "gitea.kosmos.org",
"postgresql_host": "pg.kosmos.local:5432",
"config": {
"storage": {
"type": "minio",
"endpoint": "localhost:3900",
"location": "garage",
"use_ssl": "false"
}
}
},
"kosmos_kvm": {
"backup": {
"nodes_excluded": [
"garage-",
"lq-",
"rsk-",
"postgres-6"
]
}
},
"kosmos-mastodon": {
"domain": "kosmos.social",
"user_address_domain": "kosmos.social",
"s3_endpoint": "http://localhost:3900",
"s3_region": "garage",
"s3_bucket": "kosmos-social",
"s3_alias_host": "s3.kosmos.social",
"libre_translate_endpoint": "http://127.0.0.1:5000",
"alternate_domains": [
"mastodon.w7nooprauv6yrnhzh2ajpcnj3doinked2aaztlwfyt6u6pva2qdxqhid.onion"
]
},
"liquor-cabinet": {
"ufw_source_allowed": "10.1.1.0/24",
"redis_port": 6379,
"redis_db": 1,
"s3_endpoint": "http://localhost:3900",
"s3_region": "garage",
"s3_bucket": "rs-kosmos",
"domain": "storage.kosmos.org",
"root_redirect_url": "https://accounts.kosmos.org"
},
"mediawiki": {
"url": "https://wiki.kosmos.org"
},
"sentry": {
"allowed_ips": "10.1.1.0/24"
}
},
"normal": {
"knife_zero": {
"host": "10.1.1.222"
}
},
"default": {
"audit": {
"inspec_backend_cache": true,
"reporter": null,
"fetcher": null,
"insecure": null,
"quiet": true,
"profiles": {
},
"inputs": {
},
"attributes": {
},
"waiver_file": null,
"json_file": {
"location": "/var/chef/compliance_reports/compliance-20241213130159.json"
},
"run_time_limit": 1.0,
"result_message_limit": 10000,
"result_include_backtrace": false,
"control_results_limit": 50,
"chef_node_attribute_enabled": true,
"compliance_phase": false,
"interval": {
"enabled": false,
"time": 1440
}
},
"apt": {
"cacher_dir": "/var/cache/apt-cacher-ng",
"cacher_interface": null,
"cacher_port": 3142,
"compiletime": false,
"compile_time_update": false,
"key_proxy": "",
"periodic_update_min_delay": 86400,
"launchpad_api_version": "1.0",
"unattended_upgrades": {
"enable": false,
"update_package_lists": true,
"allowed_origins": [
"Ubuntu jammy"
],
"origins_patterns": [
],
"package_blacklist": [
],
"auto_fix_interrupted_dpkg": false,
"minimal_steps": false,
"install_on_shutdown": false,
"mail": null,
"sender": null,
"mail_only_on_error": true,
"remove_unused_dependencies": false,
"automatic_reboot": false,
"automatic_reboot_time": "now",
"dl_limit": null,
"random_sleep": null,
"syslog_enable": false,
"syslog_facility": "daemon",
"dpkg_options": [
]
},
"cacher_client": {
"cacher_server": {
}
},
"confd": {
"force_confask": false,
"force_confdef": false,
"force_confmiss": false,
"force_confnew": false,
"force_confold": false,
"install_recommends": true,
"install_suggests": false
}
},
"firewall": {
"allow_ssh": false,
"allow_winrm": false,
"allow_mosh": false,
"allow_loopback": false,
"allow_icmp": false,
"firewalld": {
"permanent": false
},
"iptables": {
"defaults": {
"policy": {
"input": "DROP",
"forward": "DROP",
"output": "ACCEPT"
},
"ruleset": {
"*filter": 1,
":INPUT DROP": 2,
":FORWARD DROP": 3,
":OUTPUT ACCEPT": 4,
"COMMIT_FILTER": 100
}
}
},
"ubuntu_iptables": false,
"redhat7_iptables": false,
"allow_established": true,
"ipv6_enabled": true,
"ufw": {
"defaults": {
"ipv6": "yes",
"manage_builtins": "no",
"ipt_sysctl": "/etc/ufw/sysctl.conf",
"ipt_modules": "nf_conntrack_ftp nf_nat_ftp nf_conntrack_netbios_ns",
"policy": {
"input": "DROP",
"output": "ACCEPT",
"forward": "DROP",
"application": "SKIP"
}
}
},
"windows": {
"defaults": {
"policy": {
"input": "blockinbound",
"output": "allowoutbound"
}
}
}
},
"hostsfile": {
"path": null
},
"hostname_cookbook": {
"hostsfile_ip": "127.0.1.1",
"hostsfile_aliases": [
],
"hostsfile_include_hostname_in_aliases": true,
"append_hostsfile_ip": true
},
"postfix": {
"packages": [
"postfix"
],
"mail_type": "client",
"relayhost_role": "relayhost",
"relayhost_port": "25",
"multi_environment_relay": false,
"use_procmail": false,
"use_alias_maps": false,
"use_transport_maps": false,
"use_access_maps": false,
"use_virtual_aliases": false,
"use_virtual_aliases_domains": false,
"use_relay_restrictions_maps": false,
"transports": {
},
"access": {
},
"virtual_aliases": {
},
"virtual_aliases_domains": {
},
"main_template_source": "postfix",
"master_template_source": "postfix",
"sender_canonical_map_entries": {
},
"smtp_generic_map_entries": {
},
"recipient_canonical_map_entries": {
},
"access_db_type": "hash",
"aliases_db_type": "hash",
"transport_db_type": "hash",
"virtual_alias_db_type": "hash",
"virtual_alias_domains_db_type": "hash",
"conf_dir": "/etc/postfix",
"aliases_db": "/etc/aliases",
"transport_db": "/etc/postfix/transport",
"access_db": "/etc/postfix/access",
"virtual_alias_db": "/etc/postfix/virtual",
"virtual_alias_domains_db": "/etc/postfix/virtual_domains",
"relay_restrictions_db": "/etc/postfix/relay_restrictions",
"main": {
"biff": "no",
"append_dot_mydomain": "no",
"myhostname": "her",
"mydomain": "her",
"myorigin": "$myhostname",
"mydestination": [
"her",
"her",
"localhost.localdomain",
"localhost"
],
"smtpd_use_tls": "yes",
"smtp_use_tls": "yes",
"smtpd_tls_mandatory_protocols": "!SSLv2,!SSLv3",
"smtp_tls_mandatory_protocols": "!SSLv2,!SSLv3",
"smtpd_tls_protocols": "!SSLv2,!SSLv3",
"smtp_tls_protocols": "!SSLv2,!SSLv3",
"smtp_sasl_auth_enable": "yes",
"mailbox_size_limit": 0,
"mynetworks": null,
"inet_interfaces": "loopback-only",
"smtp_tls_CAfile": "/etc/ssl/certs/ca-certificates.crt",
"smtpd_tls_CAfile": "/etc/ssl/certs/ca-certificates.crt",
"relayhost": "smtp.mailgun.org:587",
"smtp_sasl_password_maps": "hash:/etc/postfix/sasl_passwd",
"smtp_sasl_security_options": "noanonymous",
"smtpd_tls_cert_file": "/etc/ssl/certs/ssl-cert-snakeoil.pem",
"smtpd_tls_key_file": "/etc/ssl/private/ssl-cert-snakeoil.key",
"smtpd_tls_session_cache_database": "btree:${data_directory}/smtpd_scache",
"smtp_tls_session_cache_database": "btree:${data_directory}/smtp_scache",
"maildrop_destination_recipient_limit": 1,
"cyrus_destination_recipient_limit": 1
},
"cafile": "/etc/ssl/certs/ca-certificates.crt",
"master": {
"smtp": {
"active": true,
"order": 10,
"type": "inet",
"private": false,
"chroot": false,
"command": "smtpd",
"args": [
]
},
"submission": {
"active": false,
"order": 20,
"type": "inet",
"private": false,
"chroot": false,
"command": "smtpd",
"args": [
"-o smtpd_enforce_tls=yes",
" -o smtpd_sasl_auth_enable=yes",
"-o smtpd_client_restrictions=permit_sasl_authenticated,reject"
]
},
"smtps": {
"active": false,
"order": 30,
"type": "inet",
"private": false,
"chroot": false,
"command": "smtpd",
"args": [
"-o smtpd_tls_wrappermode=yes",
"-o smtpd_sasl_auth_enable=yes",
"-o smtpd_client_restrictions=permit_sasl_authenticated,reject"
]
},
"628": {
"active": false,
"order": 40,
"type": "inet",
"private": false,
"chroot": false,
"command": "qmqpdd",
"args": [
]
},
"pickup": {
"active": true,
"order": 50,
"type": "fifo",
"private": false,
"chroot": false,
"wakeup": "60",
"maxproc": "1",
"command": "pickup",
"args": [
]
},
"cleanup": {
"active": true,
"order": 60,
"type": "unix",
"private": false,
"chroot": false,
"maxproc": "0",
"command": "cleanup",
"args": [
]
},
"qmgr": {
"active": true,
"order": 70,
"type": "fifo",
"private": false,
"chroot": false,
"wakeup": "300",
"maxproc": "1",
"command": "qmgr",
"args": [
]
},
"tlsmgr": {
"active": true,
"order": 80,
"type": "unix",
"chroot": false,
"wakeup": "1000?",
"maxproc": "1",
"command": "tlsmgr",
"args": [
]
},
"rewrite": {
"active": true,
"order": 90,
"type": "unix",
"chroot": false,
"command": "trivial-rewrite",
"args": [
]
},
"bounce": {
"active": true,
"order": 100,
"type": "unix",
"chroot": false,
"maxproc": "0",
"command": "bounce",
"args": [
]
},
"defer": {
"active": true,
"order": 110,
"type": "unix",
"chroot": false,
"maxproc": "0",
"command": "bounce",
"args": [
]
},
"trace": {
"active": true,
"order": 120,
"type": "unix",
"chroot": false,
"maxproc": "0",
"command": "bounce",
"args": [
]
},
"verify": {
"active": true,
"order": 130,
"type": "unix",
"chroot": false,
"maxproc": "1",
"command": "verify",
"args": [
]
},
"flush": {
"active": true,
"order": 140,
"type": "unix",
"private": false,
"chroot": false,
"wakeup": "1000?",
"maxproc": "0",
"command": "flush",
"args": [
]
},
"proxymap": {
"active": true,
"order": 150,
"type": "unix",
"chroot": false,
"command": "proxymap",
"args": [
]
},
"smtpunix": {
"service": "smtp",
"active": true,
"order": 160,
"type": "unix",
"chroot": false,
"maxproc": "500",
"command": "smtp",
"args": [
]
},
"relay": {
"active": true,
"comment": "When relaying mail as backup MX, disable fallback_relay to avoid MX loops",
"order": 170,
"type": "unix",
"chroot": false,
"command": "smtp",
"args": [
"-o smtp_fallback_relay="
]
},
"showq": {
"active": true,
"order": 180,
"type": "unix",
"private": false,
"chroot": false,
"command": "showq",
"args": [
]
},
"error": {
"active": true,
"order": 190,
"type": "unix",
"chroot": false,
"command": "error",
"args": [
]
},
"discard": {
"active": true,
"order": 200,
"type": "unix",
"chroot": false,
"command": "discard",
"args": [
]
},
"local": {
"active": true,
"order": 210,
"type": "unix",
"unpriv": false,
"chroot": false,
"command": "local",
"args": [
]
},
"virtual": {
"active": true,
"order": 220,
"type": "unix",
"unpriv": false,
"chroot": false,
"command": "virtual",
"args": [
]
},
"lmtp": {
"active": true,
"order": 230,
"type": "unix",
"chroot": false,
"command": "lmtp",
"args": [
]
},
"anvil": {
"active": true,
"order": 240,
"type": "unix",
"chroot": false,
"maxproc": "1",
"command": "anvil",
"args": [
]
},
"scache": {
"active": true,
"order": 250,
"type": "unix",
"chroot": false,
"maxproc": "1",
"command": "scache",
"args": [
]
},
"maildrop": {
"active": true,
"comment": "See the Postfix MAILDROP_README file for details. To main.cf will be added: maildrop_destination_recipient_limit=1",
"order": 510,
"type": "unix",
"unpriv": false,
"chroot": false,
"command": "pipe",
"args": [
"flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}"
]
},
"old-cyrus": {
"active": false,
"comment": "The Cyrus deliver program has changed incompatibly, multiple times.",
"order": 520,
"type": "unix",
"unpriv": false,
"chroot": false,
"command": "pipe",
"args": [
"flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user}"
]
},
"cyrus": {
"active": true,
"comment": "Cyrus 2.1.5 (Amos Gouaux). To main.cf will be added: cyrus_destination_recipient_limit=1",
"order": 530,
"type": "unix",
"unpriv": false,
"chroot": false,
"command": "pipe",
"args": [
"user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user}"
]
},
"uucp": {
"active": true,
"comment": "See the Postfix UUCP_README file for configuration details.",
"order": 540,
"type": "unix",
"unpriv": false,
"chroot": false,
"command": "pipe",
"args": [
"flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)"
]
},
"ifmail": {
"active": false,
"order": 550,
"type": "unix",
"unpriv": false,
"chroot": false,
"command": "pipe",
"args": [
"flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)"
]
},
"bsmtp": {
"active": true,
"order": 560,
"type": "unix",
"unpriv": false,
"chroot": false,
"command": "pipe",
"args": [
"flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient"
]
}
},
"aliases": {
},
"sasl": {
"smtp_sasl_user_name": "postmaster@mg.kosmos.org",
"smtp_sasl_passwd": "f5a3ba8e20e01b6f2cca83b28d8cd2a6-c30053db-fc52c414"
},
"sasl_password_file": "/etc/postfix/sasl_passwd"
},
"ntp": {
"servers": [
"0.pool.ntp.org",
"1.pool.ntp.org",
"2.pool.ntp.org",
"3.pool.ntp.org"
],
"peers": [
],
"restrictions": [
],
"tinker": {
"panic": 1000,
"allan": 1500,
"dispersion": 15,
"step": 0.128,
"stepout": 900
},
"restrict_default": "kod notrap nomodify nopeer noquery",
"packages": [
"ntp"
],
"service": "ntp",
"varlibdir": "/var/lib/ntp",
"driftfile": "/var/lib/ntp/ntp.drift",
"logfile": null,
"conffile": "/etc/ntp.conf",
"statsdir": "/var/log/ntpstats/",
"conf_owner": "root",
"conf_group": "root",
"var_owner": "ntp",
"var_group": "ntp",
"leapfile": "/etc/ntp.leapseconds",
"sync_clock": false,
"sync_hw_clock": false,
"listen": null,
"listen_network": null,
"ignore": null,
"apparmor_enabled": true,
"monitor": false,
"statistics": true,
"conf_restart_immediate": false,
"keys": null,
"trustedkey": null,
"requestkey": null,
"disable_tinker_panic_on_virtualization_guest": true,
"peer": {
"key": null,
"use_iburst": true,
"use_burst": false,
"minpoll": 6,
"maxpoll": 10
},
"server": {
"prefer": "",
"use_iburst": true,
"use_burst": false,
"minpoll": 6,
"maxpoll": 10
},
"orphan": {
"enabled": false,
"stratum": 5
},
"localhost": {
"noquery": false
},
"use_cmos": true
},
"timezone_iii": {
"timezone": "Etc/UTC",
"tzdata_dir": "/usr/share/zoneinfo",
"localtime_path": "/etc/localtime",
"use_symlink": false
},
"kosmos_kvm": {
"host": {
"qemu_base_image": {
"url": "https://cloud-images.ubuntu.com/releases/jammy/release-20240514/ubuntu-22.04-server-cloudimg-amd64-disk-kvm.img",
"checksum": "2e7698b3ebd7caead06b08bd3ece241e6ce294a6db01f92ea12bcb56d6972c3f",
"path": "/var/lib/libvirt/images/base/ubuntu-22.04-server-cloudimg-amd64-disk-kvm-20240514.qcow2"
}
},
"backup": {
"schedule": "0/3:00",
"nodes_excluded": [
]
}
}
},
"automatic": {
"fqdn": "her",
"os": "linux",
"os_version": "5.15.0-84-generic",
"os_version": "5.15.0-101-generic",
"hostname": "her",
"ipaddress": "192.168.30.172",
"roles": [
@@ -55,4 +858,4 @@
"role[base]",
"role[kvm_host]"
]
}
}

1
nodes/postgres-6.json
View File

@@ -22,6 +22,7 @@
"kosmos_kvm::guest",
"kosmos_postgresql::primary",
"kosmos_postgresql::firewall",
"kosmos_akaunting::pg_db",
"kosmos-bitcoin::lndhub-go_pg_db",
"kosmos-bitcoin::nbxplorer_pg_db",
"kosmos_drone::pg_db",