28 Commits

Author SHA1 Message Date
f8e5fd2f3e
Fix missing dir for Mastodon maintenance file 2025-04-29 17:53:05 +04:00
f17dd53f69
Include Stream configs in Nginx config if missing 2022-03-17 14:28:13 -06:00
23e49134e7
Remove superfluous license headers 2022-03-12 14:42:03 -06:00
Greg Karékinian
7582cafb77 Explicitly install snapd package
It was not installed on fornax for example
2022-02-18 19:42:43 +01:00
fa8cbac163
Fix custom resource not found in newer Chef versions
fixes #361
refs #337
2021-11-29 13:03:40 -06:00
09f0faadda
Add missing header to recipe 2021-02-24 19:11:53 +01:00
Greg Karékinian
e6b7794e20 Extract firewall definitions to their own recipe
This allows us to use them for KVM hosts as well. Until now we had set
up ufw rules manually on the two KVM hosts (draco and centaurus)

Refs #244
2020-12-04 16:27:42 +01:00
0bebdf7635
Do not require nginx from certbot recipe
In order to be able to use different nginx install recipes, we must not
require a specific one from this recipe.
2020-11-23 17:40:14 +01:00
9efb9cd78c
Configure/deploy HTTP upload service on uploads.kosmos.chat
https://xmpp.org/extensions/xep-0363.html

(Does not contain the config for ejabberd itself yet.)
2020-11-23 17:37:14 +01:00
a1a0d7e4c1
Switch Certbot to snap package on Ubuntu 20.04+
Needs only minor changes. Tested and running on wiki.kosmos.org already.
2020-09-06 13:46:06 +02:00
af0717a65b
Fix comet icon on maintenance page
The data URI declares an SVG source, but this was actually a PNG. Hence
the failure in Chrome. This change turns it into an actual inline SVG
and uses UTF8 encoding instead of base64, because SVG is just text anyway.

fixes #61
2020-08-02 21:00:10 +02:00
Greg Karékinian
44b49ddd57 Upgrade nginx to the latest mainline version 2020-07-30 11:58:52 +02:00
Greg Karékinian
db4e2777d4 Fix a bug preventing nginx from being reloaded after generating a cert
Change the notifies property to :immediately in nginx_certbot_site. This
way the vhost template is recreated and then triggers a reload of the
nginx service. The previous code resulted in nginx not being reloaded,
as the action had already been queued earlier.
2019-11-22 14:37:29 +01:00
Greg Karékinian
9d68d3c4da Link to the new ops Mastodon account 2019-09-19 16:02:41 +02:00
Greg Karékinian
cd9a7dd3dc Use the new kosmos.chat MUC domain on the maintenance page 2019-09-19 16:00:01 +02:00
Greg Karékinian
dfa709c9df Update nginx to 1.17.3, enable TLS 1.3
Uses the current intermediate recommended config from
https://ssl-config.mozilla.org

Closes #92
2019-08-30 11:57:38 +02:00
36a50489d0
Add maintenance page to nginx default recipe 2019-05-07 15:46:00 +02:00
Greg Karékinian
5bb34554a7 The nginx_certbot_site resource does nothing in the dev environment
No need to check for the environment in recipes that use the resource

Closes #54
2019-05-03 10:55:02 +02:00
Greg Karékinian
d2142b046f Reload nginx immediately after enabling the Let's Encrypt vhost 2019-04-15 10:51:18 +02:00
Greg Karékinian
57d0885d26 Change the licenses of hte kosmos cookbooks to MIT 2019-04-12 11:41:20 +02:00
Greg Karékinian
17f1b2a20a Create a nginx_certbot_site resource to remove duplication
It creates a folder, the nginx vhost for certbot and HTTP redirects, and
also runs certbot and recreates the nginx vhost that includes the TLS
cert
2019-03-15 19:03:28 +01:00
Greg Karékinian
fc265014de Switch back to the upstream nginx cookbook
chef_nginx is deprecated
2019-03-14 10:35:11 +01:00
Greg Karékinian
099debe5c3 Depend on the new chef_nginx cookbook 2017-04-28 12:01:51 +02:00
Greg Karékinian
d5d3fb60c1 Use nginx's official repo and improve TLS configuration
These packagea are newer than the 15.04 we had. We can enable HTTP2
2017-04-07 18:16:51 +02:00
Greg Karékinian
de11c0d691 Set up an instance of Mastodon for Kosmos
Refs #19

Use new application cookbook, update our cookbooks
2017-04-06 21:20:51 +02:00
Greg Karékinian
d95f0b601a Install mediawiki on the dev server 2016-04-16 00:33:58 +02:00
Greg Karékinian
255ff036c3 Update firewall_rule resource
Updated cookbook
2016-02-19 18:11:43 +01:00
Greg Karékinian
ee4079fa85 Initial Chef repository 2015-07-21 19:45:23 +02:00