Râu Cao
d06f5d7723
Set up fail2ban for nginx, move IPFS gateway to proxy role
2022-11-24 14:02:43 +01:00
Râu Cao
76fd629e40
Deploy new kredits ipfs-pinner
...
refs kredits/meta#10
2022-11-03 14:16:37 +01:00
Râu Cao
90b62e3fc1
Remove ufw logging for ipfs
2022-11-02 19:27:09 +01:00
Râu Cao
b1922d26f6
Allow IPFS connections on private network
...
(HAProxy is now also using the private network.)
This fixes IPFS connections to Kosmos nodes from outside the network, as
well as in between nodes on the private network.
2022-11-02 14:06:07 +01:00
Râu Cao
f7ff1248fe
Enable Web UI on private network
2022-11-02 14:05:43 +01:00
Râu Cao
e90b265f7e
Remove superfluous license headers
2022-10-10 15:29:17 +02:00
Greg Karékinian
e6b7794e20
Extract firewall definitions to their own recipe
...
This allows us to use them for KVM hosts as well. Until now we had set
up ufw rules manually on the two KVM hosts (draco and centaurus)
Refs #244
2020-12-04 16:27:42 +01:00
3d8d31c32f
Fix kosmos-ipfs not requiring nodejs/npm
...
If node isn't installed on a machine by something else before running
the kosmos-ipfs recipe, then it fails.
2020-09-24 17:39:28 +02:00
Greg Karékinian
9c8befc179
Move attributes from the ipfs cookbook to kosmos-ipfs
...
The default attributes set in the ipfs cookbook do not include
attributes that are specific to Kosmos anymore
2019-07-05 15:38:30 +02:00
Greg Karékinian
cf4e567dcb
Get rid of the letsencrypt recipe
...
Its content has been moved to the public_gateway recipe
2019-07-04 10:24:33 +02:00
f4990a8066
Switch from IPFS cluster to kredits-ipfs-pinner
...
This removes the cluster configuration and adds deployment of Kredits
IPFS Pinner. It also switches hubot-kredits to use the normal API
endpoint again (instead of the cluster port).
Furthermore, it upgrades go-ipfs to the latest version.
2019-07-03 15:34:42 +02:00
f1d58f6172
Add IPFS gateway for document GETs
...
This adds a gateway endpoint for `http://ipfs.kosmos.org ` on port 443
with support for `/ipfs/$objectHash` in order to GET documents from the
local gateway API.
2019-07-01 15:14:06 +02:00
Greg Karékinian
61607f77c4
Update ipfs-cluster to 0.10.1
...
ipfs-cluster-ctl commands such as `pin rm` now work
Closes #48
2019-04-30 12:58:10 +02:00
Greg Karékinian
c186ebf703
Update go-ipfs to 0.4.20
...
https://github.com/ipfs/go-ipfs/blob/v0.4.20/CHANGELOG.md
2019-04-25 19:20:16 +02:00
Greg Karékinian
57d0885d26
Change the licenses of hte kosmos cookbooks to MIT
2019-04-12 11:41:20 +02:00
Greg Karékinian
17f1b2a20a
Create a nginx_certbot_site resource to remove duplication
...
It creates a folder, the nginx vhost for certbot and HTTP redirects, and
also runs certbot and recreates the nginx vhost that includes the TLS
cert
2019-03-15 19:03:28 +01:00
41db5b2b73
Use kosmos.org email address
2019-03-15 12:45:28 +07:00
a77580d6da
Use variable instead of hardcoding domain
...
The domain name is hardcoded exactly 12 times in just the letsencrypt
recipe.
2019-03-15 12:38:42 +07:00
Greg Karékinian
36e046ea73
Run certbot using the binary provided by the Ubuntu PPA
2019-03-14 10:52:44 +01:00
Greg Karékinian
33b8b39be2
Update ipfs and ipfs-cluster
2019-02-25 12:50:07 +01:00
Greg Karékinian
3ce78a9ef4
Merge branch 'master' into feature/25-ipfs_cluster
2018-10-26 17:54:05 +02:00
Greg Karékinian
a7871770b8
Remove an unnecessary require and letsencrypt recipe
...
This way kosmos-ipfs::default can be used without adding the Let's
Encrypt certificate
2018-10-26 17:46:47 +02:00
Greg Karékinian
2f87e7c07c
Add the ability to override the IPFS port that nginx connects to
...
This allows us to use the API proxy from the cluster
2018-08-16 15:59:44 +02:00
Greg Karékinian
f31322ab81
Move the firewall rule for ipfs p2p to the right recipe
2018-08-16 15:59:06 +02:00
Greg Karékinian
de32a7c595
Remove the Let's Encrypt recipe from the default one
...
We only need one node with a TLS cert
2018-08-13 12:05:11 +02:00
Greg Karékinian
b36e6a718a
Add a recipe that sets up the cluster and enables the firewall
2018-08-13 12:05:00 +02:00
Greg Karékinian
d0f2275ebb
Fix the ipfs config
...
The whole thing was inconsistent and didn't work when creating a server
from scratch
2018-08-06 12:14:20 +02:00
Greg Karékinian
11db96b3a1
Update IPFS to the latest release
...
Also fix the ipfs config
2018-04-17 18:51:53 +02:00
Greg Karékinian
f96444d6f4
Move CORS headers from nginx to ipfs
2017-06-09 13:34:44 +02:00
Greg Karékinian
2f0ff1f559
Fixed code styling
2017-04-28 15:45:59 +02:00
Greg Karékinian
de11c0d691
Set up an instance of Mastodon for Kosmos
...
Refs #19
Use new application cookbook, update our cookbooks
2017-04-06 21:20:51 +02:00
Greg Karékinian
2090bc6b10
Change the port for IPFS's nginx vhost
2017-03-31 19:23:10 +02:00
Greg Karékinian
f7de7e215a
Move the CORS headers from IPFS to the nginx reverse proxy
2017-03-20 22:49:06 +00:00
Greg Karékinian
114503033b
Initial nginx reverse proxy for the IPFS IP
...
It supports cat and add for now. I have tried it using the ipfs-api npm
module
2017-03-20 19:38:51 +00:00
Greg Karékinian
d52ef53ac8
Generate a Let's Encrypt certificate for IPFS
2017-03-20 13:26:03 +00:00
Greg Karékinian
08e778eb96
Split up kosmos config from the ipfs cookbook
...
Also do not connect IPFS to the local network to avoid getting our
server blocked by Hetzner
2017-03-03 15:30:30 +01:00
