Set up fail2ban for nginx, move IPFS gateway to proxy role
This commit is contained in:
@@ -1,12 +1,19 @@
|
||||
node.normal['ipfs']['version'] = "0.15.0"
|
||||
node.normal['ipfs']['checksum'] = "5830ce226956c5e2a2de3a3440704402dd3501c43ec16eeec2d61491317005f2"
|
||||
|
||||
node.default['kosmos-ipfs']['api']['port'] = 5001
|
||||
node.default['kosmos-ipfs']['swarm_p2p_port'] = 4001
|
||||
node.default['kosmos-ipfs']['api_port'] = 5001
|
||||
node.default['kosmos-ipfs']['gateway_port'] = 9090
|
||||
|
||||
node.default['kosmos-ipfs']['ipfs']['config'] = {
|
||||
# The default gateway is already used by kosmos' hubot (8080)
|
||||
"Addresses.Gateway" => "/ip4/127.0.0.1/tcp/9090",
|
||||
"Addresses.Gateway" => "/ip4/0.0.0.0/tcp/#{node['kosmos-ipfs']['gateway_port']}",
|
||||
# API with Web UI
|
||||
"Addresses.API" => "/ip4/0.0.0.0/tcp/5001",
|
||||
"Addresses.API" => "/ip4/0.0.0.0/tcp/#{node['kosmos-ipfs']['api_port']}",
|
||||
# Do not fetch/serve anything not pinned/cached on our node
|
||||
"Gateway.NoFetch" => true,
|
||||
# Act as DHT client only
|
||||
"Routing.Type" => "dhtclient",
|
||||
# Enable bandwith metrics
|
||||
'Swarm.DisableBandwidthMetrics' => false,
|
||||
# Disable the p2p-circuit relay transport
|
||||
@@ -52,10 +59,7 @@ node.default['kosmos-ipfs']['ipfs']['config'] = {
|
||||
'/ip4/240.0.0.0/ipcidr/4'],
|
||||
}
|
||||
|
||||
node.default['kosmos-ipfs']['nginx']['api_port'] = 5001
|
||||
node.default['kosmos-ipfs']['nginx']['gateway_port'] = 9090
|
||||
node.default['kosmos-ipfs']['nginx']['external_api_port'] = 5444
|
||||
node.default['kosmos-ipfs']['nginx']['swarm_p2p_port'] = 4001
|
||||
node.default['kosmos-ipfs']['nginx']['domain'] = "ipfs.kosmos.org"
|
||||
node.default['kosmos-ipfs']['nginx']['external_api_port'] = 5444
|
||||
|
||||
node.default['kosmos-ipfs']['kredits-pinner']['revision'] = "v2.1.0"
|
||||
|
||||
Reference in New Issue
Block a user