Greg Karekinian
0cae8dca69
Set the email sender in unattended-upgrades config
...
Mailgun was rejecting the email as it did not have a valid sender
(the default, which is something like root@akkounts-1). Unattended
upgrades have been working properly, now we will start getting emails
next time an upgrade is done on akkounts-1.
2025-07-15 10:12:02 +02:00
Greg Karekinian
773950b9a5
Always send an email on unattended-upgrades
2025-05-31 17:00:07 +02:00
Greg Karekinian
f39a1ed250
Enable unattended-upgrades
...
We were missing a positive value on
`["apt"]["unattended_upgrades"]["enable"]` to enable it.
Refs #499
2025-05-31 16:44:01 +02:00
Greg Karekinian
3e2ee30334
Configure maximum size and timespan of journald logs
...
Closes #506
2025-05-21 11:36:15 +02:00
Greg Karékinian
e6b7794e20
Extract firewall definitions to their own recipe
...
This allows us to use them for KVM hosts as well. Until now we had set
up ufw rules manually on the two KVM hosts (draco and centaurus)
Refs #244
2020-12-04 16:27:42 +01:00
Greg Karékinian
84cf008bac
Install vim
2020-06-19 17:30:02 +02:00
Greg Karékinian
b4357df471
Enable unattended-upgrades (security and updates repositories)
...
... with email notifications on failure and logging with syslog
2020-06-19 17:30:02 +02:00
Greg Karékinian
3a693efcd6
Add email notifications for failed certbot runs
...
Based on https://wiki.archlinux.org/index.php/Systemd/Timers#MAILTO
This can easily be used by other services, with one line added to the
[Unit] section of a service:
OnFailure=status-email-ops@%n.service
Refs #3
2019-06-20 12:46:27 +02:00
Greg Karékinian
57d0885d26
Change the licenses of hte kosmos cookbooks to MIT
2019-04-12 11:41:20 +02:00
Greg Karékinian
12355a6b27
Add a base role, so that chef is updated before anything else
2019-04-08 17:58:02 +02:00
Greg Karékinian
b1a3c5e2cd
Revert "Revert "Remove the sudo cookbook""
...
This reverts commit 87d7c721b16356a3607f9462916e6b04a93dbad5.
2019-04-03 12:52:40 +02:00
Greg Karékinian
2f05629fde
Revert "Revert "Update Chef to 14.11.21""
...
This reverts commit db4b45b5c26c50c7b883d0f96b2a9a5136f26b58.
2019-04-03 12:52:32 +02:00
Greg Karékinian
87d7c721b1
Revert "Remove the sudo cookbook"
...
This reverts commit 73d1722d4b5c545ec488c5eb2119dd8b9b155363.
2019-04-03 10:30:38 +02:00
Greg Karékinian
db4b45b5c2
Revert "Update Chef to 14.11.21"
...
This reverts commit 2f599ffd6d757bc98ac862836110c7b32cda3c51.
2019-04-03 10:30:24 +02:00
Greg Karékinian
73d1722d4b
Remove the sudo cookbook
...
Chef 14 ships with a sudo resource:
https://docs.chef.io/resource_sudo.html
2019-04-02 12:17:06 +02:00
Greg Karékinian
2f599ffd6d
Update Chef to 14.11.21
...
Closes #21
2019-04-02 12:16:13 +02:00
Greg Karékinian
b35c4bc097
Update Chef version
2018-04-17 16:08:15 +02:00
Greg Karékinian
bd71418ec2
Changes for the new sudo cookbook
2018-04-17 13:18:36 +02:00
Greg Karékinian
f93070c4c0
Replace timezone-ii cookbook with timezone_iii
...
This fork supports Chef 13 and is still maintained
2017-06-16 13:10:46 +02:00
Greg Karékinian
189b66a36f
Update Chef to 12.20.3
2017-06-16 11:43:24 +02:00
Greg Karékinian
5534b57752
Add ntp package and don't run most kosmos-base things in development
2017-06-09 21:18:44 +02:00
Greg Karékinian
26097197ca
Don't create users and rewrite the sudo config in dev environment
...
It breaks the vagrant user
2017-06-09 16:43:26 +02:00
Greg Karékinian
5385813eda
Merge branch 'master' into feature/ubuntu-16.04
2017-06-09 16:36:19 +02:00
Greg Karékinian
afc07c3192
Add more secure sudo configuration
...
Also update the sudo cookbook
2017-06-09 16:08:36 +02:00
Greg Karékinian
943b4ace1f
Replace omnibus_updater with chef_client_updater
...
omnibus_updater is deprecated
2017-05-02 11:53:33 +02:00
54332db8de
Use ruby-build for Mastodon, update cookbooks
...
This uses the ruby_build provider for Mastodon, installing Ruby 2.4.1
currently. It also updates some other cookbooks and the runlists.
2017-04-17 11:40:31 +02:00
Greg Karékinian
14542f8419
Do not require the deprecated users::sysadmins recipe
...
Write the 4 lines of code instead
2017-03-20 13:17:32 +00:00
Greg Karékinian
e57ee1590e
Update Chef to 12.19.36
2017-03-20 13:16:11 +00:00
b431e75e79
Use latest Chef
2017-01-20 10:32:32 +08:00
Greg Karékinian
da39a04552
Update Chef to 12.9.38
2016-04-22 14:35:14 +02:00
Greg Karékinian
255ff036c3
Update firewall_rule resource
...
Updated cookbook
2016-02-19 18:11:43 +01:00
Greg Karékinian
17fca99aae
Update Chef to 12.6.0
2016-01-22 22:22:24 +00:00
Greg Karékinian
b9e9a59d54
Add timezone-ii cookbook to set timezone to UTC
2016-01-21 23:47:28 +00:00
Greg Karékinian
a5622d2209
Add firewall rules for mosh
2016-01-16 16:02:26 -05:00
Greg Karékinian
ee4079fa85
Initial Chef repository
2015-07-21 19:45:23 +02:00