eb06926606
Migrate S3 backups from AWS, fix automatic cleanups
...
The cleanups were broken in that every single archive was also copied to
a shared folder and never deleted from there.
Co-authored-by: Greg Karékinian <greg@karekinian.com>
2024-10-16 12:31:51 +02:00
d19a8eebfb
Update Gitea and act_runner, improve recipes
2024-03-11 16:11:12 +01:00
Râu Cao
438ee4ace0
Migrate Gitea SSH stream to openresty
2023-07-30 12:35:21 +02:00
Râu Cao
4b14297f83
WIP Migrate Gitea proxy to openresty
...
TODO: Make nginx_ssh stream resource work with openresty cookbook
2023-07-26 14:15:46 +02:00
Râu Cao
1afc860b21
Fix Gitea Actions runner not working with private host
2023-04-11 12:14:17 +02:00
Râu Cao
059812524e
Set up Gitea Actions runners
2023-04-01 12:56:21 +02:00
Râu Cao
e54112418e
Upgrade Gitea 1.18.0
...
Requires some config changes for the mailer.
2022-12-30 23:05:40 +07:00
Râu Cao
991458208d
Use a role for configuring LDAP hostname on clients
...
This way it's also easy to converge all LDAP clients at once.
2022-11-26 16:45:45 +01:00
Râu Cao
e0fb84e56c
Store Gitea data (avatars, attachments, etc.) in Garage/S3
...
Also adds a new garage gateway role, which only allows RPC (inter-node)
traffic to Garage.
2022-11-26 13:05:07 +01:00
Râu Cao
37b948cbe5
Remove custom cron job
...
refs #395
2022-08-08 12:57:30 +02:00
Greg Karékinian
907706d1d2
Set up the hosts entry for the new LDAP server
2022-05-10 11:50:49 +02:00
8f4d11b317
Add cron job for deleting repo archives
2022-04-11 12:31:00 +02:00
9c34e82484
Remove obsolete hosts entries for Gitea and Drone
...
They should use normal DNS
2022-03-17 13:02:56 -06:00
e1560ba12a
Fix copypasta
2022-03-12 15:40:22 -06:00
0a953070fe
Create nginx_proxy role
...
Used to configure hosts entries in the Gitea and Drone VMs, as well as
the allowed webhooks config for Gitea.
2022-03-12 15:39:07 -06:00
a1b07dfb9e
Adapt Gitea recipes for new VM setup
2022-03-12 14:46:45 -06:00
23e49134e7
Remove superfluous license headers
2022-03-12 14:42:03 -06:00
03c7940f1c
Fix Webhooks for Drone not working in Gitea 1.16
...
By default, only external requests are allowed:
https://github.com/go-gitea/gitea/pull/17482
2022-02-12 10:53:45 -06:00
24f94bdb02
Upgrade Gitea to 1.15.6
...
Configures the JWT signing algorithm to be the old, less secure
algorithm, until we update the token for Drone CI (and any other OAuth
apps).
closes #338
2021-11-25 16:44:48 -06:00
b6d0bafce0
Remove license header, improve formatting
2021-06-21 17:50:23 +02:00
bbaeeb5099
Upgrade Gitea to 1.14.3
...
Adds a new config for the repository root directory.
closes #322
2021-06-21 17:47:30 +02:00
Greg Karékinian
bb0e73d1b9
Switch ejabberd, mastodon and gitea to a hostname for Postgres
2021-01-23 17:11:45 +01:00
Greg Karékinian
e6b7794e20
Extract firewall definitions to their own recipe
...
This allows us to use them for KVM hosts as well. Until now we had set
up ufw rules manually on the two KVM hosts (draco and centaurus)
Refs #244
2020-12-04 16:27:42 +01:00
Greg Karékinian
41fd1576ad
Override the header template to remove the Roboto font
...
Using the system font instead
2020-07-30 12:33:09 +02:00
Greg Karékinian
5e5bbe07dc
Restart gitea after upgrading it
2020-07-30 12:16:04 +02:00
Greg Karékinian
6f696d7634
Define access rules in the PostgreSQL primary recipe
...
Access is done for the IP of a server for all users and all databases
for ejabberd and gitea
2020-06-11 18:20:04 +02:00
Greg Karékinian
759fa52e03
Enable the certbot resource
2020-06-02 16:19:05 +02:00
Greg Karékinian
c8e50fd226
Install git, it is a required dependency for Gitea
...
I didn't catch it because git is installed by default in the Vagrant box
I used to write the cookbook
2020-06-02 11:41:19 +02:00
Greg Karékinian
baa0739936
Add the backup recipe
...
Also move the Gitea data dir to an attribute
2020-05-26 15:21:26 +02:00
Greg Karékinian
1f0e2ccbdd
Move the binary URL to an attribute
2020-05-21 11:51:06 +02:00
Greg Karékinian
51d4d88568
Initial kosmos_gitea cookbook
...
The default recipe deploys the gitea binary, generates a config file and
our custom Kosmos label set. The service runs as a Systemd unit.
The pg_db recipe needs to run on the primary PostgreSQL (currently
andromeda).
The backup recipe is empty for now
Refs #147
2020-05-18 19:39:43 +02:00
