e1007f7886
ejabberd disco config additions
2023-12-18 13:23:21 +01:00
292366a77f
Domain vs realm vs IP
2023-12-18 13:23:05 +01:00
ed998fc1d3
Use TCP for TLS connections
2023-12-18 13:22:34 +01:00
8a97ebf4f8
Use domain instead of IP, add TLS endpoints
2023-12-17 17:57:49 +01:00
ca3f06f831
Increase size of port range for TURN
2023-12-17 17:05:06 +01:00
1576a8e731
Set up coturn, switch from ejabberd in production
...
https://github.com/coturn/coturn
2023-12-17 15:20:11 +01:00
6e3fb80565
Upgrade CLN
2023-12-16 19:23:09 +01:00
Râu Cao
295d95c048
Upgrade Gitea to 1.21.1
2023-12-16 11:49:35 +01:00
Râu Cao
574f78f128
Upgrade bitcoind, LND, CLN, RTL, NBXplorer, BTCPay
...
Also required upgrading node.js and the .NET SDK.
2023-12-14 18:12:29 +01:00
Râu Cao
69af908f6b
Virtual domain configs
2023-12-13 13:05:31 +01:00
Râu Cao
5a4cdf9c30
Prevent local users from impersonating other local users
2023-12-06 12:27:38 +01:00
Râu Cao
b3f2ca415e
Set up SpamAssassin
...
Scan incoming and outgoing email for spam. Use a local Unbound for DNS,
so we don't run into blocks for RBL queries.
2023-12-06 12:22:24 +01:00
Râu Cao
05ccbcc58f
Merge branch 'master' into feature/email
2023-12-05 18:37:43 +01:00
Râu Cao
cc6cebb8a2
Increase TURN throughput allowance
2023-12-05 18:20:27 +01:00
Râu Cao
4dbc960eed
Switch ejabberd node handling TURN
...
Should use the same outgoing IP as for incoming
2023-12-05 18:19:48 +01:00
Râu Cao
7805182457
Change borg backup default interval to 3 hrs
2023-12-05 18:16:15 +01:00
Râu Cao
769ac4a081
Support node-specific borg repo config
2023-12-05 18:09:44 +01:00
Râu Cao
b1763cd032
Pattern-match node names for VM backup exclusion
2023-12-05 18:04:57 +01:00
Râu Cao
42c04538d8
Set up DKIM signing and verification
2023-12-04 13:40:37 +01:00
Râu Cao
c9ad3c2d18
Create/configure common default mailboxes
2023-12-04 13:33:23 +01:00
Râu Cao
fbad0bf896
More explicit postfix configs
2023-12-03 18:33:12 +01:00
Râu Cao
8a7eeb1dd9
Change INBOX location
2023-12-03 18:32:55 +01:00
Râu Cao
568197737a
Fix SMTP connection delay when peer hostname cannot be resolved
2023-12-03 18:31:47 +01:00
Râu Cao
738e96f7e4
Fix auth for SMTP submission on port 465
2023-12-03 18:31:12 +01:00
Râu Cao
ce00852bba
Remove obsolete config file
2023-12-01 12:19:21 +01:00
Râu Cao
e4abfb1b75
Use more reasonable priority for attributes in recipe
2023-12-01 10:01:34 +01:00
Râu Cao
9d0ff358ef
Only use certbot deploy hook when applicable
2023-12-01 10:00:07 +01:00
Râu Cao
fbcf1ed5e7
WIP Add initial cookbook and roles for email service
2023-12-01 09:56:54 +01:00
cbeddefa34
Merge pull request 'Set max size for external S3 upload requests' ( #525 ) from bugfix/s3_nginx_max_upload_size into master
...
Reviewed-on: #525
2023-11-15 13:04:34 +00:00
Râu Cao
5765c08d6e
Fail over to next node when and RSK backend is down
2023-11-15 13:21:46 +01:00
Râu Cao
aaae90bc0d
Don't exit VM backup scripts immediately on failures
2023-11-15 13:20:42 +01:00
Râu Cao
087616b6b6
Set max size for external S3 upload requests
...
Fix uploads failing when exceeding the default nginx limit
2023-11-08 21:44:49 +01:00
Râu Cao
390753faa3
Increase update delay for Gandi DNS records
2023-11-05 01:01:16 +01:00
Râu Cao
8071f44f41
Upgrade Mastodon to 4.2.1
2023-11-05 00:57:43 +01:00
Râu Cao
9fa7d8b28f
Upgrade Gitea to 1.20.5
2023-11-04 15:14:58 +01:00
Râu Cao
925a5da239
Upgrade RSKj to 5.3.0, deploy new nodes
...
Adapted the cookbook for new nodes running on Jammy.
2023-11-04 15:06:31 +01:00
Râu Cao
abc168ebf1
Upgrade ejabberd to 23.10, enable anonymous occupant IDs
2023-11-01 12:29:23 +01:00
873c235539
Merge pull request 'Migrate ejabberd uploads to mod_s3_upload and Garage' ( #518 ) from feature/469-ejabberd_s3 into master
...
Reviewed-on: #518
2023-10-17 19:07:23 +00:00
Râu Cao
65d71d6a73
Migrate ejabberd uploads to mod_s3_upload and Garage
...
In addition to installing and configuring the new module, this also
enables public access to the S3 API via `bucket-name.s3.kosmos.org` as
well as Web access on `bucket-name.web.s3.kosmos.org` (when enabled).
Also includes some drive-by improvements to Chef attribute naming and
usage.
Co-authored-by: Greg Karékinian <greg@karekinian.com>
2023-10-10 17:55:55 +02:00
Râu Cao
832075dfb2
Shorten root domains for external Garage S3 and Web access
...
And move the configuration-specific preceding dot to the config
template.
2023-10-10 16:34:23 +02:00
1c9e28448f
Merge pull request 'Improve PostgreSQL streaming replication in production' ( #516 ) from feature/keep_wal_segments into master
...
Reviewed-on: #516
2023-10-07 08:18:24 +00:00
Râu Cao
3505212e92
Add missing header to RS discourse proxy config
2023-10-04 12:36:07 +02:00
Râu Cao
eb1303a8da
Fix postgres primary not holding onto any WAL segments for later sync
...
closes #515
2023-10-02 15:46:26 +02:00
Râu Cao
08d9819fd2
Upgrade bitcoind, LND, dotnet, NBXplorer, and BTCPay
2023-09-28 16:41:44 +02:00
Râu Cao
f0968aae5b
Add Drone CI config for akkounts
2023-09-01 12:51:40 +02:00
Râu Cao
e65c58ff6c
Upgrade Gitea to 1.20.3, Chef client to 18.x
2023-08-25 17:12:33 +02:00
Râu Cao
123b304dd0
Use correct node attributes
2023-07-31 15:57:07 +02:00
Râu Cao
bbd25ebb9c
Add nginx logs for gitea
2023-07-31 15:56:40 +02:00
Râu Cao
ec43f4ee0f
Update openresty cookbook
2023-07-31 15:56:20 +02:00
Râu Cao
eab94090e8
Use openresty node attributes in openresty templates
2023-07-31 15:07:35 +02:00
