Râu Cao
991458208d
Use a role for configuring LDAP hostname on clients
...
This way it's also easy to converge all LDAP clients at once.
2022-11-26 16:45:45 +01:00
Râu Cao
8d4db7290e
Rename dirsrv_primary role
...
The term used in 389 docs is "supplier" instead (ex "master")
2022-11-26 16:44:05 +01:00
Râu Cao
e0fb84e56c
Store Gitea data (avatars, attachments, etc.) in Garage/S3
...
Also adds a new garage gateway role, which only allows RPC (inter-node)
traffic to Garage.
2022-11-26 13:05:07 +01:00
Râu Cao
b5ff60214c
Install/configure Garage
...
Add a garage cookbook that installs the garage binary distribution and
creates the necessary configuration and system service.
Also deploy two new VMs to act as storage nodes.
refs #428
2022-11-25 10:56:22 +00:00
Râu Cao
d06f5d7723
Set up fail2ban for nginx, move IPFS gateway to proxy role
2022-11-24 14:02:43 +01:00
Greg Karékinian
97fe328312
Add missing pg_db recipe on postgresql_primary role
2022-11-07 16:30:02 +01:00
Greg Karékinian
4bfb7d5f5d
Extract mastodon db backup to its own recipe
2022-11-07 16:22:15 +01:00
Râu Cao
65933bef4b
Move hubot nginx sites to proxy role, deploy to fornax
2022-11-04 14:41:21 +01:00
Râu Cao
6cce1d9df8
Upgrade hal8000 setup for new hubot-kredits
2022-11-04 14:41:12 +01:00
Râu Cao
37710be28b
Bundle main IPFS node recipes in a role
...
So we can find the VM/IP
2022-11-04 14:37:23 +01:00
Râu Cao
76fd629e40
Deploy new kredits ipfs-pinner
...
refs kredits/meta#10
2022-11-03 14:16:37 +01:00
Greg Karékinian
378fee85ec
Create a discourse cookbook that can be wrapped
...
It makes it possible to serve multiple Discord instances to different
hosts from a single nginx load balancer
Right now we run one for Kosmos and one for remoteStorage
2022-10-11 17:58:22 +02:00
607466b1d2
Merge pull request 'Add KVM Guest role' ( #409 ) from feature/kvm_guest_role into master
...
Reviewed-on: #409
2022-08-22 11:46:43 +00:00
92d1bcd8c7
Add nginx proxy for akkounts/kredits API
...
closes #410
2022-05-24 15:03:51 +02:00
a0b64a709d
Add KVM Guest role
...
Only installs qemu-guest-agent for now, for improving live VM backups.
2022-05-23 12:41:55 +02:00
e89e0b3122
Fix letsencrypt bootstrap for ejabberd
2022-05-11 16:27:21 +02:00
b3f1a74cc2
Remove obsolete ejabberd backups
2022-05-11 16:27:21 +02:00
c158f845f0
Configure STUN/TURN for ejabberd and nginx proxy
2022-05-11 15:27:49 +02:00
1da5ef4979
Merge branch 'master' into new_ldap_server
2022-04-28 09:23:18 +02:00
b6bd8ee6cd
Upgrade Sockethub to latest alpha
2022-03-18 11:47:51 -06:00
4cd0149f76
Move static sites from centaurus to fornax/LB
2022-03-17 14:27:50 -06:00
0a953070fe
Create nginx_proxy role
...
Used to configure hosts entries in the Gitea and Drone VMs, as well as
the allowed webhooks config for Gitea.
2022-03-12 15:39:07 -06:00
f35fb638d1
Adapt Drone recipes for VM setup, use PostgreSQL
2022-03-12 14:46:48 -06:00
a1b07dfb9e
Adapt Gitea recipes for new VM setup
2022-03-12 14:46:45 -06:00
da3a70ef4c
WIP dirsrv changes
2021-12-02 13:56:23 -06:00
Greg Karékinian
d1d48cb749
Add role for ldap (dirsrv)
2021-12-02 19:08:16 +01:00
5ac53633cd
Merge branch 'master' into feature/rskj_public_endpoint
2021-12-02 17:07:47 +00:00
6f29ede8d3
Merge branch 'master' into feature/lndhub
2021-12-02 16:59:46 +00:00
584da20d3e
Deploy nginx reverse proxy for RSK mainnet
2021-11-29 13:55:04 -06:00
ecdc41a54f
Rename postgres cookbook, deploy new replica
...
fixes #361
closes #330
2021-11-29 13:09:13 -06:00
f68eceec4c
Remove obsolete role
2021-11-28 10:08:39 -06:00
35115b7391
Merge branch 'master' into feature/rskj_public_endpoint
2021-11-28 10:02:06 -06:00
4b9183d78d
Use older Redis cookbook, install on bitcoin-2
2021-11-16 14:11:42 -06:00
e6ad9865bc
Add roles for RSK testnet/mainnet
2021-10-22 14:02:56 +02:00
ca13acb99f
Remove obsolete Parity role
2021-10-22 13:59:42 +02:00
89e27a040f
Set up public HTTPS endpoint for RSKj
...
refs #325
2021-08-09 19:02:14 +02:00
Greg Karékinian
383a46676e
Create a role for sockethub
2021-07-14 10:14:28 +02:00
e1bcd5efa0
Set up Zerotier Control UI
...
Install/configure ztncui[1], with HTTP access allowed from within the
private network.
[1]: https://key-networks.com/ztncui/
2021-02-07 17:44:08 +01:00
5a5db43de3
Use new postgres client role and config
...
Fixes btcpay having still used the old postgres master, and integrating
it into the global client config setup from here on out.
2021-01-26 11:49:20 +01:00
Greg Karékinian
1ad7a6936c
Generate the hosts entry for the PostgreSQL replica
2021-01-24 10:11:17 +01:00
Greg Karékinian
ee7b3626be
Generate a host entry for the current PostgreSQL primary
2021-01-23 17:11:45 +01:00
Greg Karékinian
286cd2f2a3
Move the postgresql_client role to the top
...
We want the host file to be written before database connections happen
2021-01-23 17:11:45 +01:00
Greg Karékinian
1e3a2b40d4
Add the postgresql_client role to the akkounts role
2021-01-23 17:11:45 +01:00
Greg Karékinian
cbcb50bc86
Create a zerotier_controller role
2021-01-22 18:41:46 +01:00
4872677066
Configure postgres recipes for VMs and zerotier access
...
* Remove encfs (using encrypted volumes instead)
* Allow access without TLS from zerotier network
2021-01-07 13:53:30 +01:00
4ca875a77b
Merge pull request 'Create postgres-1 VM' ( #281 ) from feature/280-postgres_vm into master
...
Reviewed-on: #281
2021-01-07 11:29:37 +00:00
Greg Karékinian
f6086e2f6a
Add the firewall rules to the postgresql role
2021-01-07 12:02:35 +01:00
8a6b81485a
Merge branch 'master' into feature/btcpay_server
2020-12-31 10:20:28 +00:00
aa2aa59e28
Download and build NBXplorer and BTCPay
2020-12-21 11:12:14 +01:00
a2b76c7d76
New recipe: Install .NET Core SDK
2020-12-21 11:01:20 +01:00