33 Commits

Author SHA1 Message Date
e1bcd5efa0
Set up Zerotier Control UI
Install/configure ztncui[1], with HTTP access allowed from within the
private network.

[1]: https://key-networks.com/ztncui/
2021-02-07 17:44:08 +01:00
5a5db43de3
Use new postgres client role and config
Fixes btcpay having still used the old postgres master, and integrating
it into the global client config setup from here on out.
2021-01-26 11:49:20 +01:00
Greg Karékinian
1ad7a6936c Generate the hosts entry for the PostgreSQL replica 2021-01-24 10:11:17 +01:00
Greg Karékinian
ee7b3626be Generate a host entry for the current PostgreSQL primary 2021-01-23 17:11:45 +01:00
Greg Karékinian
286cd2f2a3 Move the postgresql_client role to the top
We want the host file to be written before database connections happen
2021-01-23 17:11:45 +01:00
Greg Karékinian
1e3a2b40d4 Add the postgresql_client role to the akkounts role 2021-01-23 17:11:45 +01:00
Greg Karékinian
cbcb50bc86 Create a zerotier_controller role 2021-01-22 18:41:46 +01:00
4872677066
Configure postgres recipes for VMs and zerotier access
* Remove encfs (using encrypted volumes instead)
* Allow access without TLS from zerotier network
2021-01-07 13:53:30 +01:00
4ca875a77b Merge pull request 'Create postgres-1 VM' (#281) from feature/280-postgres_vm into master
Reviewed-on: #281
2021-01-07 11:29:37 +00:00
Greg Karékinian
f6086e2f6a Add the firewall rules to the postgresql role 2021-01-07 12:02:35 +01:00
8a6b81485a Merge branch 'master' into feature/btcpay_server 2020-12-31 10:20:28 +00:00
aa2aa59e28
Download and build NBXplorer and BTCPay 2020-12-21 11:12:14 +01:00
a2b76c7d76
New recipe: Install .NET Core SDK 2020-12-21 11:01:20 +01:00
Greg Karékinian
87388ac69d Add the postgresql_client role to the mastodon role
This will add the firewall rule and pg_hba access rule on the PostgreSQL
servers
2020-12-18 17:54:31 +01:00
8e0a66184c
Use role for akkounts
Lets us search by role
2020-12-08 19:59:51 +01:00
Greg Karékinian
fbd71204c2 Use the production run list when no Chef environment was set 2020-11-25 16:41:43 +01:00
Greg Karékinian
d7e54bf7ce Add drone role 2020-11-19 12:59:24 +01:00
Greg Karékinian
07e6da4d33 Add a role for discourse 2020-10-20 12:22:07 +02:00
Greg Karékinian
ee9c241a4d Add a postgresql_client role
The role is empty but is used to explicitly define servers that have
access rights to all PostgreSQL databases and users
2020-06-12 16:54:58 +02:00
Greg Karékinian
1a6ce44758 Create a minimalist ejabberd role for development
No Let's Encrypt, no backups
2020-06-10 18:43:34 +02:00
Greg Karékinian
2d6c514257 Add the gitea role 2020-06-02 11:22:10 +02:00
Greg Karékinian
51b23c2f47 Add postgresql roles 2020-05-13 15:35:15 +02:00
Greg Karékinian
2c2ae596ed Don't update chef using the chef_client_updater cookbook
It only makes sense when using Chef Server, which we don't
2019-10-08 18:17:34 +02:00
f4990a8066
Switch from IPFS cluster to kredits-ipfs-pinner
This removes the cluster configuration and adds deployment of Kredits
IPFS Pinner. It also switches hubot-kredits to use the normal API
endpoint again (instead of the cluster port).

Furthermore, it upgrades go-ipfs to the latest version.
2019-07-03 15:34:42 +02:00
Greg Karékinian
283f623fee Add mastodon role 2019-06-14 15:49:29 +02:00
Greg Karékinian
c9547582b7 Add a role for the ejabberd server
Includes the backup, letsencrypt and default recipe
2019-05-14 15:18:05 +02:00
Greg Karékinian
451d182ca9 Add kredits_github role for the node app and the nginx vhost 2019-04-23 11:30:59 +02:00
Greg Karékinian
12355a6b27 Add a base role, so that chef is updated before anything else 2019-04-08 17:58:02 +02:00
Greg Karékinian
1f528a832d Add a role to set up a cluster node with TLS 2018-08-16 16:01:24 +02:00
41e47f42c1 Don't run testnet node for now 2017-05-17 12:40:58 +02:00
Greg Karékinian
383d3adaae Add parity testnet 2017-05-09 00:02:07 +02:00
Greg Karékinian
fc346e85c9 Add initial parity role 2017-05-08 16:51:50 +02:00
Greg Karékinian
ee4079fa85 Initial Chef repository 2015-07-21 19:45:23 +02:00