Commit Graph

1442 Commits

Author SHA1 Message Date
Râu Cao ac2d5d1990
WIP Set up Jitsi Meet 2022-10-22 13:59:48 +02:00
Greg 945283738a Merge pull request 'Set up live backups for all VMs' (#433) from feature/qemu_snapshots into master
Reviewed-on: #433
2022-10-22 11:52:26 +00:00
Greg 33ae6befaa Merge pull request 'Block outgoing traffic to local networks by default' (#434) from feature/block_outoing_local_traffic into feature/qemu_snapshots
Reviewed-on: #434
2022-10-22 11:50:28 +00:00
Râu Cao 58e6e7de03
Remove ufw logs
Just added them to check the blocking for a while
2022-10-22 13:03:16 +02:00
Râu Cao 1afc3a5de5
Block outgoing traffic to local networks by default
Some software, e.g. go-ipfs, is rather aggressive in scanning local
networks for peers, which can trigger abuse reports and IP locks in the
data center.
2022-10-21 13:37:38 +02:00
Râu Cao 61710aa4a4 Set up systemd service and timer for backups 2022-10-21 10:50:04 +02:00
Râu Cao 95941c830f Remove verbose stats outout from backup script 2022-10-21 10:49:30 +02:00
Râu Cao a5b2eb5f97 Move borg credentials to a separate file
To be used from a service
2022-10-21 10:49:02 +02:00
Râu Cao 374654f8fd
Update chef/ohai on hosts 2022-10-21 10:47:46 +02:00
Râu Cao 7051cc9da8 Update draco's main IP address 2022-10-21 10:47:17 +02:00
Râu Cao 51163ca3a3
Whitelist Chef attributes for newer client versions 2022-10-21 10:46:16 +02:00
Râu Cao 927bb63535
Add kvm_guest role to nodes 2022-10-19 16:28:07 +02:00
Râu Cao 34a57fa298
Merge branch 'lnd_tor_changes' into feature/qemu_snapshots 2022-10-19 15:23:39 +02:00
Râu Cao 6d765f959d
Fix backup VM name for ldap-3
(and potentially other guests where the name differs from the libvirt
domain name)
2022-10-19 12:51:46 +02:00
Râu Cao 82f50b0caa
Only back up domain-specific XML per archive 2022-10-19 12:24:10 +02:00
Râu Cao 6c8f9055c1
Create directories for KVM host backup files 2022-10-19 12:23:54 +02:00
Râu Cao 2e2ebbcc02
Fix filenames for guest agent sockets 2022-10-19 12:23:17 +02:00
Râu Cao a3844b7ef6
WIP Add KVM host backup recipe
Add a recipe that configures scripts for live backups of VM images via
libvirt and borg.
2022-10-19 12:08:05 +02:00
Râu Cao 6d50a32aca
Add FIXME note 2022-10-19 12:08:05 +02:00
Râu Cao 7848b4d365
Add jitsi-meet-1 VM 2022-10-19 12:08:04 +02:00
Râu Cao 063e9e070c
Add borg credentials 2022-10-19 12:08:04 +02:00
Râu Cao b78e6685ed
Add kvm_guest role to VMs on fornax 2022-10-19 12:07:56 +02:00
Râu Cao 895d293899
Update RSKj version 2022-10-18 18:46:53 +02:00
Greg 11062f5180 Merge pull request 'Add guest agent device when creating VMs' (#431) from bugfix/qemu_guest_agent into master
Reviewed-on: #431
2022-10-12 14:34:06 +00:00
Râu Cao 315cd247e5
Enable qemu-guest-agent after install
This is actually automatically done for the service from the apt
package, but I like specifying it explicitly as well.
2022-10-12 15:55:08 +02:00
Râu Cao e73b8fb01f
Add guest agent device when creating VMs
This is necessary for qemu-guest-agent to actually work
2022-10-12 15:53:00 +02:00
Râu Cao d26ab2249c Merge pull request 'Deploy a Discourse instance for remoteStorage' (#430) from feature/discourse_wrappers into master
Reviewed-on: #430
2022-10-11 16:08:52 +00:00
Greg fe8e66fda3 Add the new rs-discourse-1 server 2022-10-11 18:00:48 +02:00
Greg 410c238450 Update the discourse-2 and fornax nodes after Chef run 2022-10-11 18:00:31 +02:00
Greg 378fee85ec Create a discourse cookbook that can be wrapped
It makes it possible to serve multiple Discord instances to different
hosts from a single nginx load balancer

Right now we run one for Kosmos and one for remoteStorage
2022-10-11 17:58:22 +02:00
Râu Cao e90b265f7e
Remove superfluous license headers 2022-10-10 15:29:17 +02:00
Râu Cao a5ac53caef Merge pull request 'Upgrade LND, bitcoind' (#429) from chore/upgrade_lnd into master
Reviewed-on: #429
2022-10-10 11:47:19 +00:00
Râu Cao bec54e6ffb
Upgrade LND, bitcoind
LND needs an emergency hotfix, released in 0.15.2, due to a subtle
Taproot transaction parsing limitation in a library it depends on.
2022-10-10 13:46:12 +02:00
Greg 1270488ef9 Remove ldap-2 VM 2022-10-03 14:45:00 +02:00
Râu Cao 7026e0e85b Merge pull request 'Upgrade Gitea to 1.17.2' (#427) from chore/upgrade_gitea into master
Reviewed-on: Kosmos/chef#427
2022-09-21 09:33:01 +00:00
Râu Cao ff907384d9
Upgrade Gitea to 1.17.2 2022-09-21 11:32:20 +02:00
Râu Cao 2360ad2ac0 Merge pull request 'Move LDAP server to new VM' (#426) from chore/new_ldap_vm into master
Reviewed-on: #426
2022-08-23 13:01:30 +00:00
Greg e4d4aa45f7 Use FQDN for hostname, add LDAP server 2022-08-22 16:16:01 +02:00
Greg 85abfd4e5e Create the required groups and ACIs 2022-08-22 16:15:02 +02:00
Râu Cao 80c3e4e270
Create ldap-3 VM 2022-08-22 13:40:26 +01:00
Râu Cao f17a420a64
Update VM base image 2022-08-22 13:40:07 +01:00
Râu Cao 607466b1d2 Merge pull request 'Add KVM Guest role' (#409) from feature/kvm_guest_role into master
Reviewed-on: #409
2022-08-22 11:46:43 +00:00
Greg d7aeb0e483 Merge pull request 'Upgrade Gitea to 1.17.0' (#424) from chore/upgrade_gitea into master
Reviewed-on: #424
2022-08-18 08:33:48 +00:00
Râu Cao 65adc84e5b
Upgrade Gitea to 1.17.0
Also adds a new Nginx directive to allow larger uploads to the Docker
registry endpoints.

closes #422
2022-08-09 11:58:56 +02:00
Râu Cao fdb326b91a Merge pull request 'Move Zerotier controller' (#421) from chore/move_zerotier_controller into master
Reviewed-on: #421
2022-08-08 10:58:22 +00:00
Râu Cao 37b948cbe5
Remove custom cron job
refs #395
2022-08-08 12:57:30 +02:00
Râu Cao 4adccb7411 Merge pull request 'Enable cron job to delete repo archives' (#423) from chore/395-gitea_cron into master
Reviewed-on: #423
2022-08-08 10:54:26 +00:00
Râu Cao 08b7c7a5ac
Enable cron job to delete repo archives
closes #395
2022-08-08 12:51:26 +02:00
Râu Cao 206bb69100
Update node info 2022-07-31 13:05:59 +02:00
Râu Cao 41d4f87710
Move Zerotier controller
It's running on fornax now, and the VMs have been deleted. This way,
there's no internal routing needed for it to be publicly accessible by
any network member nodes.
2022-07-28 15:38:42 +02:00