932 Commits

Author SHA1 Message Date
Greg Karékinian
176083497c Install the libvirt-daemon-system package
It creates the libvirt-qemu user
2020-12-08 16:25:04 +01:00
Greg Karékinian
89c8f42a46 Set the description for the kosmos_kvm cookbook 2020-12-08 16:03:18 +01:00
Greg Karékinian
1837285b79 Add the kosmos_kvm recipe and the firewall rules
... to the KVM hosts, centaurus and draco

Refs #244
2020-12-04 16:33:18 +01:00
Greg Karékinian
ee7a117d63 Add initial kosmos_zerotier cookbook
For now it only includes the firewall rule

Refs #244
2020-12-04 16:29:22 +01:00
Greg Karékinian
e6b7794e20 Extract firewall definitions to their own recipe
This allows us to use them for KVM hosts as well. Until now we had set
up ufw rules manually on the two KVM hosts (draco and centaurus)

Refs #244
2020-12-04 16:27:42 +01:00
Greg Karékinian
9dbe5bcfcb Deploy a script to create new VMs
It uses `virt-install` with the official Ubuntu 20.04 cloud image as a
starting point, with cloud-init to add our SSH keys to the ubuntu user
and set up Zerotier.

USAGE: create_vm VMNAME

Closes #244
2020-12-04 16:21:52 +01:00
bc80540c14 Merge pull request 'Deploy new wormhole release on barnard' (#251) from chore/wormhole_barnard into master
Reviewed-on: #251
2020-11-27 12:25:01 +00:00
dace63b667
Remove akkounts recipe from barnard runlist
Must have been committed accidentally.
2020-11-27 13:22:29 +01:00
58c5fad2a7
Add new nickname config for wormhole 2020-11-27 13:22:09 +01:00
39ca70d64e Merge pull request 'Set up ejabberd-2 VM/node; add cluster configs to Chef' (#248) from chore/ejabberd-2_vm into master
Reviewed-on: #248
2020-11-26 14:47:33 +00:00
58854da648
Add erland_node fqdn to ejabberd node configs 2020-11-25 21:04:33 +01:00
137d90ed8a
Configure ejabberd on ejabberd-2 2020-11-25 21:03:16 +01:00
8c60279fe1
Add cluster configs to ejabberd recipe 2020-11-25 21:02:46 +01:00
7a1a5c03e3
Set up ejabberd-2 VM 2020-11-25 17:40:40 +01:00
8e067e8901 Merge pull request 'Enable ejabberd clustering' (#246) from feature/243-ejabberd_cluster into master
Reviewed-on: #246
2020-11-25 16:10:14 +00:00
Greg Karékinian
bbf01711f8 Add ejabberd-1 client and node file 2020-11-25 16:42:23 +01:00
Greg Karékinian
fbd71204c2 Use the production run list when no Chef environment was set 2020-11-25 16:41:43 +01:00
Greg Karékinian
613b316588 Add comment about needing to run Chef a second time...
... after the TLS certs are generated
2020-11-25 16:36:07 +01:00
Greg Karékinian
3a8af26b5f Remove firewall rule for an unused port 2020-11-25 16:36:07 +01:00
Greg Karékinian
23ca3552d2 Remove the absolute path of certbot to use the new package 2020-11-25 16:36:07 +01:00
Greg Karékinian
ddb706b61c Add a missing dependency on kosmos-dirsrv 2020-11-25 16:36:07 +01:00
Greg Karékinian
085bd8abd5 Move TURN port to a different range
It landed on a port used by PostgreSQL. Also switch STUN/TURN to TCP
because HAProxy does not support UDP.

Closes #240
2020-11-25 16:36:07 +01:00
Greg Karékinian
7636f6ed19 Move the Gandi DNS certbot hook to kosmos-ejabberd 2020-11-25 16:36:07 +01:00
Greg Karékinian
8b1f90c568 Use the same Erlang cookie to enable clustering
Refs #243
2020-11-25 16:35:37 +01:00
3da883864b Merge pull request 'Configure/deploy HTTP upload service for Kosmos Chat/XMPP' (#245) from feature/http_upload_service into master
Reviewed-on: #245
2020-11-25 09:46:47 +00:00
134493d2d6 Merge branch 'master' into feature/http_upload_service 2020-11-25 09:46:31 +00:00
f39f953b8a
Configure ejabberd nodes for HTTP upload service 2020-11-24 15:44:59 +01:00
0e29c930ed
Configure subdirectory level for upload.pm
This allows to post to per-domain subdirectories from XMPP clients.
2020-11-24 15:33:34 +01:00
0aef830aa3
Fix upload folder permissions
Uploads are failing with the current mode.
2020-11-23 20:50:01 +01:00
0bebdf7635
Do not require nginx from certbot recipe
In order to be able to use different nginx install recipes, we must not
require a specific one from this recipe.
2020-11-23 17:40:14 +01:00
6a89bb9d2e
Add node info for uploads-1
Runs uploads.kosmos.chat
2020-11-23 17:39:47 +01:00
9efb9cd78c
Configure/deploy HTTP upload service on uploads.kosmos.chat
https://xmpp.org/extensions/xep-0363.html

(Does not contain the config for ejabberd itself yet.)
2020-11-23 17:37:14 +01:00
89f5a81952 Merge pull request 'Configure/deploy new akkounts Rails app' (#242) from feature/akkounts into master
Reviewed-on: #242
2020-11-23 09:52:16 +00:00
c26fcd5b26
Remove obsolete manual daemon reload 2020-11-22 20:26:56 +01:00
0dc314b1e7
Add node data for akkounts-1 2020-11-21 15:12:39 +01:00
d384f69139
Configure/deploy new akkounts app 2020-11-21 15:12:31 +01:00
21be68feb5 Merge pull request 'Add CLI script for hashing LDAP passwords' (#239) from chore/ldap_hash_password_script into master
Reviewed-on: #239
2020-11-20 13:39:40 +00:00
b63c86b37f
Add CLI script for hashing LDAP passwords
Only takes a cleartext password and outputs a salted, hashed password
string for LDAP documents.
2020-11-20 14:36:25 +01:00
9470e62e3b Merge pull request 'Set up Drone CI with Gitea integration' (#236) from feature/235-drone_ci into master
Reviewed-on: #236
2020-11-19 13:47:43 +00:00
Greg Karékinian
df4c92b64e Update the centaurus node after adding drone to it 2020-11-19 12:59:24 +01:00
Greg Karékinian
d7e54bf7ce Add drone role 2020-11-19 12:59:24 +01:00
Greg Karékinian
ebf5f405f5 Initial kosmos_drone cookbook
Closes #235
2020-11-19 12:59:15 +01:00
9ba364ad7a Merge pull request 'Fix 389 Directory Server CLIs not working' (#234) from bugfix/install_lib389 into master
Reviewed-on: #234
2020-11-08 16:26:16 +00:00
ac49430521
Install lib389
Fixes 389 CLIs not working (e.g. `dsctl`).
2020-11-08 17:23:24 +01:00
f12cf704ac Merge pull request 'Update barnard.kosmos.org node data' (#232) from chore/update_node_info into master
Reviewed-on: #232
2020-10-30 09:01:13 +00:00
4c17d9ad53
Update barnard.kosmos.org node data 2020-10-30 10:00:23 +01:00
eaa3d78684 Merge pull request 'Remove hubot-rss-reader from hubots' (#231) from chore/remove_hubot-rss-reader into master
Reviewed-on: #231
2020-10-29 15:20:16 +00:00
f874d7f979
Remove hubot-rss-reader from hubots
Not available in latest hal8000 source anymore
2020-10-29 16:19:24 +01:00
96d0f7dd04 Merge pull request 'Update IPFS cookbook/software' (#230) from chore/update_go-ipfs into master
Reviewed-on: #230
2020-10-29 08:35:56 +00:00
af132c072d Merge branch 'master' into chore/update_go-ipfs 2020-10-29 08:35:36 +00:00