53 Commits

Author SHA1 Message Date
25ee38fe27
Update kredits-ipfs-pinner 2024-03-14 23:04:27 +01:00
Râu Cao
027d0ed570
Migrate IPFS proxies to openresty 2023-07-26 16:12:33 +02:00
Greg Karékinian
68ce3c4834 Update the firewall cookbook to the latest version
This gives us comments from the named resources
2023-06-29 15:08:44 +02:00
Greg Karékinian
b7d17c1ad7 Replace application cookbook with git resource 2023-06-28 18:55:05 +02:00
Râu Cao
d6989ab161
Replace hardcoded value with variable 2023-06-20 18:52:44 +02:00
Râu Cao
b94484d0dd
Upgrade Kredits IPFS Pinner 2023-06-20 18:52:16 +02:00
Râu Cao
83513dbd9d Remove request limits for ipfs proxy
In favor of fail2ban
2022-11-30 11:58:22 +01:00
Râu Cao
d06f5d7723
Set up fail2ban for nginx, move IPFS gateway to proxy role 2022-11-24 14:02:43 +01:00
Râu Cao
76fd629e40
Deploy new kredits ipfs-pinner
refs kredits/meta#10
2022-11-03 14:16:37 +01:00
Râu Cao
90b62e3fc1
Remove ufw logging for ipfs 2022-11-02 19:27:09 +01:00
Râu Cao
b1922d26f6
Allow IPFS connections on private network
(HAProxy is now also using the private network.)

This fixes IPFS connections to Kosmos nodes from outside the network, as
well as in between nodes on the private network.
2022-11-02 14:06:07 +01:00
Râu Cao
f7ff1248fe
Enable Web UI on private network 2022-11-02 14:05:43 +01:00
Râu Cao
67f6e1b34a
Downgrade go-ipfs to 0.15
Fixes #435
2022-10-24 14:18:19 +02:00
Râu Cao
34a57fa298
Merge branch 'lnd_tor_changes' into feature/qemu_snapshots 2022-10-19 15:23:39 +02:00
Râu Cao
e90b265f7e
Remove superfluous license headers 2022-10-10 15:29:17 +02:00
Greg Karékinian
e6b7794e20 Extract firewall definitions to their own recipe
This allows us to use them for KVM hosts as well. Until now we had set
up ufw rules manually on the two KVM hosts (draco and centaurus)

Refs #244
2020-12-04 16:27:42 +01:00
3d8d31c32f
Fix kosmos-ipfs not requiring nodejs/npm
If node isn't installed on a machine by something else before running
the kosmos-ipfs recipe, then it fails.
2020-09-24 17:39:28 +02:00
Greg Karékinian
34d69dbca1 Add missing application_javascript dependency 2019-09-27 11:07:15 +02:00
Greg Karékinian
9c8befc179 Move attributes from the ipfs cookbook to kosmos-ipfs
The default attributes set in the ipfs cookbook do not include
attributes that are specific to Kosmos anymore
2019-07-05 15:38:30 +02:00
Greg Karékinian
cf4e567dcb Get rid of the letsencrypt recipe
Its content has been moved to the public_gateway recipe
2019-07-04 10:24:33 +02:00
f4990a8066
Switch from IPFS cluster to kredits-ipfs-pinner
This removes the cluster configuration and adds deployment of Kredits
IPFS Pinner. It also switches hubot-kredits to use the normal API
endpoint again (instead of the cluster port).

Furthermore, it upgrades go-ipfs to the latest version.
2019-07-03 15:34:42 +02:00
f1d58f6172
Add IPFS gateway for document GETs
This adds a gateway endpoint for `http://ipfs.kosmos.org` on port 443
with support for `/ipfs/$objectHash` in order to GET documents from the
local gateway API.
2019-07-01 15:14:06 +02:00
Greg Karékinian
61607f77c4 Update ipfs-cluster to 0.10.1
ipfs-cluster-ctl commands such as `pin rm` now work

Closes #48
2019-04-30 12:58:10 +02:00
Greg Karékinian
c186ebf703 Update go-ipfs to 0.4.20
https://github.com/ipfs/go-ipfs/blob/v0.4.20/CHANGELOG.md
2019-04-25 19:20:16 +02:00
Greg Karékinian
94cb7c8e20 Add the id endpoint to our IPFS reverse proxy 2019-04-18 11:00:22 +02:00
Greg Karékinian
57d0885d26 Change the licenses of hte kosmos cookbooks to MIT 2019-04-12 11:41:20 +02:00
Greg Karékinian
17f1b2a20a Create a nginx_certbot_site resource to remove duplication
It creates a folder, the nginx vhost for certbot and HTTP redirects, and
also runs certbot and recreates the nginx vhost that includes the TLS
cert
2019-03-15 19:03:28 +01:00
41db5b2b73
Use kosmos.org email address 2019-03-15 12:45:28 +07:00
a77580d6da
Use variable instead of hardcoding domain
The domain name is hardcoded exactly 12 times in just the letsencrypt
recipe.
2019-03-15 12:38:42 +07:00
Greg Karékinian
36e046ea73 Run certbot using the binary provided by the Ubuntu PPA 2019-03-14 10:52:44 +01:00
Greg Karékinian
33b8b39be2 Update ipfs and ipfs-cluster 2019-02-25 12:50:07 +01:00
Greg Karékinian
3ce78a9ef4 Merge branch 'master' into feature/25-ipfs_cluster 2018-10-26 17:54:05 +02:00
Greg Karékinian
a7871770b8 Remove an unnecessary require and letsencrypt recipe
This way kosmos-ipfs::default can be used without adding the Let's
Encrypt certificate
2018-10-26 17:46:47 +02:00
Greg Karékinian
2f87e7c07c Add the ability to override the IPFS port that nginx connects to
This allows us to use the API proxy from the cluster
2018-08-16 15:59:44 +02:00
Greg Karékinian
f31322ab81 Move the firewall rule for ipfs p2p to the right recipe 2018-08-16 15:59:06 +02:00
Greg Karékinian
de32a7c595 Remove the Let's Encrypt recipe from the default one
We only need one node with a TLS cert
2018-08-13 12:05:11 +02:00
Greg Karékinian
b36e6a718a Add a recipe that sets up the cluster and enables the firewall 2018-08-13 12:05:00 +02:00
Greg Karékinian
d0f2275ebb Fix the ipfs config
The whole thing was inconsistent and didn't work when creating a server
from scratch
2018-08-06 12:14:20 +02:00
Greg Karékinian
11db96b3a1 Update IPFS to the latest release
Also fix the ipfs config
2018-04-17 18:51:53 +02:00
b351bad994 Add object/data endpoint to IPFS nginx config
This is needed for the ipfs-api client to store data from e.g.
kosmos-web.
2017-06-15 14:49:57 -07:00
Greg Karékinian
0acc4e65e9 Fix the IPFS API URL for the get command 2017-06-09 15:35:16 +02:00
Greg Karékinian
cf48006a0a Add get endpoint to ipfs proxied API 2017-06-09 13:37:33 +02:00
Greg Karékinian
f96444d6f4 Move CORS headers from nginx to ipfs 2017-06-09 13:34:44 +02:00
e5f3121ee3 Improve CORS headers for IPFS proxy 2017-06-09 13:01:38 +02:00
Greg Karékinian
eaaaacf97f Remove placeholder text from generated Chef cookbooks 2017-05-08 12:07:32 +02:00
Greg Karékinian
2f0ff1f559 Fixed code styling 2017-04-28 15:45:59 +02:00
Greg Karékinian
6bea5b7567 Enable HTTP2 and HSTS 2017-04-07 18:20:43 +02:00
Greg Karékinian
de11c0d691 Set up an instance of Mastodon for Kosmos
Refs #19

Use new application cookbook, update our cookbooks
2017-04-06 21:20:51 +02:00
Greg Karékinian
2090bc6b10 Change the port for IPFS's nginx vhost 2017-03-31 19:23:10 +02:00
Greg Karékinian
f7de7e215a Move the CORS headers from IPFS to the nginx reverse proxy 2017-03-20 22:49:06 +00:00