Râu Cao
a460302728
Add missing sidekiq queue
2022-12-01 17:08:17 +01:00
f8fd10c4c2
Merge pull request 'Upgrade Mastodon to 4.0' ( #456 ) from chore/upgrade_mastodon into feature/mastodon_nginx
...
Reviewed-on: #456
2022-12-01 14:33:20 +00:00
Râu Cao
2ecb4e2385
Upgrade Ruby to 3.0.4
2022-12-01 15:29:38 +01:00
Râu Cao
cdd3f026c4
Always use config for skipping post-deployment migrations
2022-12-01 15:05:24 +01:00
Râu Cao
5d05d5c187
Move Mastodon nginx to proxy/LB
2022-11-30 12:07:54 +01:00
Râu Cao
f3ca307e64
Fix Tor access
...
Configure alternate_domains for Rails app to re-enable Tor access (was
throwing 403s without this config)
2022-11-30 12:06:25 +01:00
Râu Cao
66f5217a41
Refactor Mastodon nginx recipe for proxy usage
...
Works both as local deployment and proxy (via roles and environments)
* Use upstreams for proxy_pass
* Access static assets from proxy, configure caching for them
* Move Tor config to environment, install via role
* ...
2022-11-30 12:02:17 +01:00
Râu Cao
83e55c84a2
Use domain name for log file paths
2022-11-30 12:00:01 +01:00
Râu Cao
83513dbd9d
Remove request limits for ipfs proxy
...
In favor of fail2ban
2022-11-30 11:58:22 +01:00
Râu Cao
c4d43b7f4e
Make Mastodon services listen on private IP in prod
...
And allow access to them from the private network
2022-11-30 11:57:51 +01:00
83fea1026c
Merge pull request 'Install/configure Garage (S3-compatible object storage cluster)' ( #450 ) from feature/garage into master
...
Reviewed-on: #450
2022-11-28 17:38:41 +00:00
3df9611a9d
Merge pull request 'Store Gitea data (avatars, attachments, etc.) in Garage/S3' ( #451 ) from feature/gitea_s3 into feature/garage
...
Reviewed-on: #451
2022-11-26 16:19:19 +00:00
Râu Cao
c3e98688fd
Deploy second dirsrv supplier
...
Manually configured (once) to replicate data from and to the first
supplier on `ldap-3`.
2022-11-26 16:47:55 +01:00
Râu Cao
2958ba4b81
Use *.kosmos.local hostnames for LDAP nodes
2022-11-26 16:47:28 +01:00
Râu Cao
991458208d
Use a role for configuring LDAP hostname on clients
...
This way it's also easy to converge all LDAP clients at once.
2022-11-26 16:45:45 +01:00
Râu Cao
8d4db7290e
Rename dirsrv_primary role
...
The term used in 389 docs is "supplier" instead (ex "master")
2022-11-26 16:44:05 +01:00
Râu Cao
e0fb84e56c
Store Gitea data (avatars, attachments, etc.) in Garage/S3
...
Also adds a new garage gateway role, which only allows RPC (inter-node)
traffic to Garage.
2022-11-26 13:05:07 +01:00
Râu Cao
9a89af0fe3
Add basic Garage doc
2022-11-25 10:56:22 +00:00
Râu Cao
20e6bdb7f9
Add production environment, replication for garage
...
Also deploy a third node in a different data center
2022-11-25 10:56:22 +00:00
Râu Cao
b5ff60214c
Install/configure Garage
...
Add a garage cookbook that installs the garage binary distribution and
creates the necessary configuration and system service.
Also deploy two new VMs to act as storage nodes.
refs #428
2022-11-25 10:56:22 +00:00
34bd187e3e
Merge pull request 'Set up fail2ban for nginx, move IPFS gateway to proxy role' ( #449 ) from feature/fail2ban_nginx into master
...
Reviewed-on: #449
2022-11-24 15:09:05 +00:00
Râu Cao
d06f5d7723
Set up fail2ban for nginx, move IPFS gateway to proxy role
2022-11-24 14:02:43 +01:00
Râu Cao
7f545404b1
Update node info
2022-11-22 21:23:39 +01:00
9dc2b387d1
Merge pull request 'Upgrade kosmos.social to Mastodon 3.5.3' ( #448 ) from chore/upgrade_mastodon into master
...
Reviewed-on: #448
2022-11-22 20:19:52 +00:00
Greg Karékinian
5a5f8425af
Add missing postgresql-client package for backup gem
2022-11-07 16:30:45 +01:00
Greg Karékinian
97fe328312
Add missing pg_db recipe on postgresql_primary role
2022-11-07 16:30:02 +01:00
Greg Karékinian
ed04753318
Update mastodon-3 node after chef run
2022-11-07 16:28:09 +01:00
Greg Karékinian
4bfb7d5f5d
Extract mastodon db backup to its own recipe
2022-11-07 16:22:15 +01:00
Râu Cao
4188b2976b
Use Ruby 3.0.3, skip post-deployment migrations
2022-11-07 14:53:52 +01:00
Râu Cao
3620a43190
Upgrade Elasticsearch from 6.x to latest 7.x
2022-11-06 13:56:15 +01:00
5a94050555
Merge pull request 'Prune VM backups after every run' ( #447 ) from feature/439-prune_backups into master
...
Reviewed-on: #447
2022-11-05 20:42:31 +00:00
Râu Cao
28454c0849
Change VM backup schedule for draco
2022-11-05 17:43:53 +01:00
Râu Cao
6df168f32f
Prune VM backups after every run
2022-11-05 17:43:48 +01:00
9c0764a2eb
Merge pull request 'Migrate hal8000 to new kredits and nodejs VM' ( #445 ) from feature/migrate_hal8000 into master
...
Reviewed-on: #445
2022-11-04 18:14:17 +00:00
Râu Cao
65933bef4b
Move hubot nginx sites to proxy role, deploy to fornax
2022-11-04 14:41:21 +01:00
Râu Cao
6cce1d9df8
Upgrade hal8000 setup for new hubot-kredits
2022-11-04 14:41:12 +01:00
Râu Cao
534f23eebc
Remove obsolete recipes
2022-11-04 14:38:51 +01:00
Râu Cao
37710be28b
Bundle main IPFS node recipes in a role
...
So we can find the VM/IP
2022-11-04 14:37:23 +01:00
1c17906a41
Merge pull request 'Deploy new kredits ipfs-pinner' ( #444 ) from feature/deploy_new_kredits_pinner into master
...
Reviewed-on: #444
2022-11-03 13:17:47 +00:00
Râu Cao
76fd629e40
Deploy new kredits ipfs-pinner
...
refs kredits/meta#10
2022-11-03 14:16:37 +01:00
88fa0f12dd
Merge pull request 'Upgrade LND to 0.15.4' ( #443 ) from chore/upgrade_lnd into master
...
Reviewed-on: #443
2022-11-03 10:04:05 +00:00
Râu Cao
0297298ce0
Upgrade LND to 0.15.4
...
Fixes a critical issue that prevents block sync in production
2022-11-03 11:02:52 +01:00
08bcdcc395
Merge pull request 'Fix IPFS node connectivity from the outside as well as the private network' ( #442 ) from bugfix/ipfs_connectivity into master
...
Reviewed-on: #442
2022-11-02 18:32:44 +00:00
Râu Cao
90b62e3fc1
Remove ufw logging for ipfs
2022-11-02 19:27:09 +01:00
c9a0310511
Merge branch 'master' into bugfix/ipfs_connectivity
2022-11-02 17:13:55 +00:00
b8d6ba4c89
Merge pull request 'Move block data to CIFS share, other data to VM's own storage' ( #438 ) from feature/bitcoin_data_directories into master
...
Reviewed-on: #438
2022-11-02 17:13:37 +00:00
Râu Cao
b1922d26f6
Allow IPFS connections on private network
...
(HAProxy is now also using the private network.)
This fixes IPFS connections to Kosmos nodes from outside the network, as
well as in between nodes on the private network.
2022-11-02 14:06:07 +01:00
Râu Cao
f7ff1248fe
Enable Web UI on private network
2022-11-02 14:05:43 +01:00
Râu Cao
bc11301782
Move bitcoind datadir from host to VM storage
2022-10-27 11:52:05 +02:00
Râu Cao
756382ec9f
Move block data files to CIFS share
...
This is the vast majority of disk space used on the host currently.
2022-10-26 15:49:03 +02:00
