Set up fail2ban for nginx, move IPFS gateway to proxy role

This commit is contained in:
Râu Cao
2022-11-22 21:16:27 +01:00
parent 7f545404b1
commit d06f5d7723
33 changed files with 1528 additions and 100 deletions

View File

@@ -1,12 +1,19 @@
node.normal['ipfs']['version'] = "0.15.0"
node.normal['ipfs']['checksum'] = "5830ce226956c5e2a2de3a3440704402dd3501c43ec16eeec2d61491317005f2"
node.default['kosmos-ipfs']['api']['port'] = 5001
node.default['kosmos-ipfs']['swarm_p2p_port'] = 4001
node.default['kosmos-ipfs']['api_port'] = 5001
node.default['kosmos-ipfs']['gateway_port'] = 9090
node.default['kosmos-ipfs']['ipfs']['config'] = {
# The default gateway is already used by kosmos' hubot (8080)
"Addresses.Gateway" => "/ip4/127.0.0.1/tcp/9090",
"Addresses.Gateway" => "/ip4/0.0.0.0/tcp/#{node['kosmos-ipfs']['gateway_port']}",
# API with Web UI
"Addresses.API" => "/ip4/0.0.0.0/tcp/5001",
"Addresses.API" => "/ip4/0.0.0.0/tcp/#{node['kosmos-ipfs']['api_port']}",
# Do not fetch/serve anything not pinned/cached on our node
"Gateway.NoFetch" => true,
# Act as DHT client only
"Routing.Type" => "dhtclient",
# Enable bandwith metrics
'Swarm.DisableBandwidthMetrics' => false,
# Disable the p2p-circuit relay transport
@@ -52,10 +59,7 @@ node.default['kosmos-ipfs']['ipfs']['config'] = {
'/ip4/240.0.0.0/ipcidr/4'],
}
node.default['kosmos-ipfs']['nginx']['api_port'] = 5001
node.default['kosmos-ipfs']['nginx']['gateway_port'] = 9090
node.default['kosmos-ipfs']['nginx']['external_api_port'] = 5444
node.default['kosmos-ipfs']['nginx']['swarm_p2p_port'] = 4001
node.default['kosmos-ipfs']['nginx']['domain'] = "ipfs.kosmos.org"
node.default['kosmos-ipfs']['nginx']['external_api_port'] = 5444
node.default['kosmos-ipfs']['kredits-pinner']['revision'] = "v2.1.0"