kosmos/chef
8
3
Fork 0
Code Issues 38 Pull Requests 2 Projects 2 Activity
1,048 Commits 9 Branches 0 Tags
41ca5938a268bd85c99cecba178aa174b87320af
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
basti 05cd38a5b9 Re-enable and improve Tor access for kosmos.social 2021-01-23 14:22:34 +01:00
bastiandgreg fd4844a012 Fix ejabberd API permission for akkounts VMs 
It should have been using a /32, not a /8 subnet, in order to only allow
the akkounts VM(s) to use the API endpoints without further
authorization.
 2021-01-22 18:41:45 +01:00
bastiandgreg d018b6570d Use default Redis database now 2021-01-22 18:41:45 +01:00
bastiandgreg 69c1994840 Update node data 2021-01-22 18:41:45 +01:00
bastiandgreg d121971cca Set up mastodon-1 VM 2021-01-22 18:41:45 +01:00
bastiandgreg 1403d91631 Remove extra license header 2021-01-22 18:41:45 +01:00
bastiandgreg 6da190b110 Don't configure HTTPS site when certs missing 2021-01-22 18:41:45 +01:00
bastiandgreg 8a870f6fd6 Don't fail on first run, when Tor hostname missing 2021-01-22 18:41:45 +01:00
bastiandgreg ad64bfc0be Update system package dependencies for 20.04 2021-01-22 18:41:45 +01:00
bastiandgreg 971a3a25a1 Remove extra license headers 
And update year in LICENSE file
 2021-01-22 18:41:45 +01:00
basti 775ec691ef Add firewall rules for LND and c-lightning 2021-01-14 21:25:35 +01:00
basti 6c6026958b Fix typo in port number of externalip config 2021-01-14 21:23:03 +01:00
basti 12a3fa5b4e Use default Redis database now 2021-01-13 17:06:36 +01:00
basti 9224aa9d97 Update node data 2021-01-13 17:06:25 +01:00
basti 62320106cb Set up mastodon-1 VM 2021-01-13 09:50:37 +01:00
basti c622f81572 Remove extra license header 2021-01-13 09:50:10 +01:00
basti 047526e0fc Don't configure HTTPS site when certs missing 2021-01-13 09:49:49 +01:00
basti 9d13acd41a Don't fail on first run, when Tor hostname missing 2021-01-13 09:49:36 +01:00
basti 4d0259493f Update system package dependencies for 20.04 2021-01-13 09:48:23 +01:00
basti c4fa9e6ec1 Remove extra license headers 
And update year in LICENSE file
 2021-01-12 18:42:14 +01:00
basti 74cf26846e Fix ejabberd API permission for akkounts VMs 
It should have been using a /32, not a /8 subnet, in order to only allow
the akkounts VM(s) to use the API endpoints without further
authorization.
 2021-01-12 18:06:16 +01:00
basti 4872677066 Configure postgres recipes for VMs and zerotier access 
* Remove encfs (using encrypted volumes instead)
* Allow access without TLS from zerotier network
 2021-01-07 13:53:30 +01:00
basti 9d9907f0ed Remove extra license copy from recipe, update year 2021-01-07 12:53:44 +01:00
basti 4309efd228 Add postgres-2 VM 2021-01-07 12:53:20 +01:00
basti 1eb73711a2 Remove application_javascript usage from wormhole recipe 2021-01-06 19:12:36 +01:00
basti fe63f01f7b Move wormhole from barnard to nodejs-2 
Fixed two small bugs in the recipe:

* hubot user wasn't created when necessary
* systemd template always included redis service dependency
 2021-01-05 18:03:15 +01:00
basti ddded6fbae Create new nodejs VM, move kredits-github to it 2021-01-05 11:30:31 +01:00
basti adfd76aa64 Configure local LND as Lightning node in BTCPay Server 2021-01-02 09:59:50 +01:00
basti 2b765e744a Configure and run RTL 
Ride The Lightning is a Web UI for Lightning Network nodes. It is
accessible via the bitcoin VM's private zerotier IP on port 3000.
 2021-01-01 17:42:57 +01:00
basti 19e3dfa7b9 Remove obsolete non-standard RPC and REST ports 
We'll just run those on default ports without custom config.
 2021-01-01 14:14:59 +01:00
basti 37f1fa79e7 Use standard Lightning Network port for LND 
Only use the non-standard one internally, so we can run both c-lightning
and lnd on the same machine.
 2021-01-01 14:13:58 +01:00
basti f5f234c0fd Use name of existing node 
Migrated from andromeda to bitcoin-2.
 2021-01-01 14:13:17 +01:00
basti 3fcdc8b056 Configure and run LND 2020-12-31 10:10:22 +01:00
basti 61accc05c2 Add nginx proxy for BTCPay 2020-12-29 15:56:53 +01:00
basti 5892e3c0ab Configure and run c-lightning daemon 2020-12-22 12:28:29 +01:00
basti f88354c67c Compile and install c-lightning 2020-12-21 16:53:22 +01:00
basti bbd5500982 Configure and run BTCPay Server 2020-12-21 13:50:28 +01:00
basti ca373a1503 Don't require auth cookie for nbxplorer API 2020-12-21 12:25:13 +01:00
basti 570a692bb2 Configure and run nbxplorer 2020-12-21 12:19:30 +01:00
basti 5277bce20b Formatting 2020-12-21 11:14:19 +01:00
basti aa2aa59e28 Download and build NBXplorer and BTCPay 2020-12-21 11:12:14 +01:00
basti a2b76c7d76 New recipe: Install .NET Core SDK 2020-12-21 11:01:20 +01:00
basti db51f1f332 Add new Zoom meeting ID to whitelist 2020-12-17 14:09:41 +01:00
basti 4b9dfd9c60 Update node configs 2020-12-11 19:24:12 +01:00
basti fb996e9abf Join new zerotier network on VM creation 2020-12-11 19:07:11 +01:00
basti 396fe6e714 Whitelist ejabberd custom node attributes 
fixes #256
 2020-12-11 19:07:06 +01:00
bastiandgreg c4dbed8d65 Fix zerotier network creation 
Using outdated/invalid rules syntax. Remove the property entirely, so
the API will create the default rule (which is the same) on creation.

Co-authored-by: Greg Karékinian <greg@karekinian.com>
 2020-12-11 17:42:25 +01:00
basti 2de9d5fe17 Fix typo 2020-12-11 17:40:40 +01:00
basti 1cb366a160 Add commands for running Chef against VMs 2020-12-10 23:39:59 +01:00
basti cb8fc25fc8 Configure a zerotier-one network controller 2020-12-10 22:51:35 +01:00
basti 12125bf0b2 Add hosts entries for ejabberd private IPs 2020-12-08 20:31:01 +01:00
basti 239b6aed51 Add API permissions for akkounts VMs 
Using the zerotier IP, which is the same as the knife-zero host.
 2020-12-08 20:00:31 +01:00
basti 8e0a66184c Use role for akkounts 
Lets us search by role
 2020-12-08 19:59:51 +01:00
basti 56d9144ad6 Disable ACME 
Throws a warning when reloading the config, because it is enabled by
default, but not configured entirely. Disabling it explicitly removes
the warning.
 2020-12-08 14:30:29 +01:00
basti 02239dd9a8 Update ejabberd doc 2020-12-08 13:13:05 +01:00
basti dace63b667 Remove akkounts recipe from barnard runlist 
Must have been committed accidentally.
 2020-11-27 13:22:29 +01:00
basti 58c5fad2a7 Add new nickname config for wormhole 2020-11-27 13:22:09 +01:00
basti 58854da648 Add erland_node fqdn to ejabberd node configs 2020-11-25 21:04:33 +01:00
basti 137d90ed8a Configure ejabberd on ejabberd-2 2020-11-25 21:03:16 +01:00
basti 8c60279fe1 Add cluster configs to ejabberd recipe 2020-11-25 21:02:46 +01:00
basti 7a1a5c03e3 Set up ejabberd-2 VM 2020-11-25 17:40:40 +01:00
basti f39f953b8a Configure ejabberd nodes for HTTP upload service 2020-11-24 15:44:59 +01:00
basti 0e29c930ed Configure subdirectory level for upload.pm 
This allows to post to per-domain subdirectories from XMPP clients.
 2020-11-24 15:33:34 +01:00
basti 0aef830aa3 Fix upload folder permissions 
Uploads are failing with the current mode.
 2020-11-23 20:50:01 +01:00
basti 0bebdf7635 Do not require nginx from certbot recipe 
In order to be able to use different nginx install recipes, we must not
require a specific one from this recipe.
 2020-11-23 17:40:14 +01:00
basti 6a89bb9d2e Add node info for uploads-1 
Runs uploads.kosmos.chat
 2020-11-23 17:39:47 +01:00
basti 9efb9cd78c Configure/deploy HTTP upload service on uploads.kosmos.chat 
https://xmpp.org/extensions/xep-0363.html

(Does not contain the config for ejabberd itself yet.)
 2020-11-23 17:37:14 +01:00
basti c26fcd5b26 Remove obsolete manual daemon reload 2020-11-22 20:26:56 +01:00
basti 0dc314b1e7 Add node data for akkounts-1 2020-11-21 15:12:39 +01:00
basti d384f69139 Configure/deploy new akkounts app 2020-11-21 15:12:31 +01:00
basti b63c86b37f Add CLI script for hashing LDAP passwords 
Only takes a cleartext password and outputs a salted, hashed password
string for LDAP documents.
 2020-11-20 14:36:25 +01:00
basti ac49430521 Install lib389 
Fixes 389 CLIs not working (e.g. `dsctl`).
 2020-11-08 17:23:24 +01:00
basti 4c17d9ad53 Update barnard.kosmos.org node data 2020-10-30 10:00:23 +01:00
basti f874d7f979 Remove hubot-rss-reader from hubots 
Not available in latest hal8000 source anymore
 2020-10-29 16:19:24 +01:00
basti c06d530f62 Update ipfs-1 kernel version 2020-10-25 12:09:22 +01:00
basti 2c368f0f10 Update IPFS cookbook 2020-10-25 12:09:01 +01:00
basti 4f5b005087 Send wiki notifications to new info XMPP room 2020-10-20 15:46:58 +02:00
basti 69383a666b Let hal8000 join new info@kosmos.chat room 2020-10-20 15:42:42 +02:00
basti 7c4af862b7 Add node config for new IPFS (gateway) VM 2020-09-24 17:41:24 +02:00
basti 3d8d31c32f Fix kosmos-ipfs not requiring nodejs/npm 
If node isn't installed on a machine by something else before running
the kosmos-ipfs recipe, then it fails.
 2020-09-24 17:39:28 +02:00
basti 41319fc5bc Add shell script for creating LDAP user accounts 2020-09-15 13:04:54 +02:00
basti ee7a853b5c Set up a testing VM on draco 
Currently only has base recipe and nginx with certbot running.

https://test-2.kosmos.org/
 2020-09-06 14:00:35 +02:00
basti a1a0d7e4c1 Switch Certbot to snap package on Ubuntu 20.04+ 
Needs only minor changes. Tested and running on wiki.kosmos.org already.
 2020-09-06 13:46:06 +02:00
basti 2d559ebd91 Update wiki node config 
Just committing the changes after a successful run with letsencrypt also
working.
 2020-09-06 13:43:07 +02:00
basti 8dd146e95c Remove obsolete mysql client install 
This fails nowadays,and the client is already installed via the mysql
package in the first place.
 2020-09-06 13:42:34 +02:00
basti b7e2a72369 Add missing changes for mediawiki upgrades 2020-09-05 23:43:28 +02:00
basti 7af26d6ad3 Remove wiki role from andromeda 2020-09-05 20:59:07 +02:00
basti c646c3d5b4 Update mediawiki cookbook (Kosmos fork) 2020-08-30 18:03:44 +02:00
basti 38c6a1ae15 Update mediawiki, install extensions from git repos 2020-08-30 17:59:45 +02:00
basti c9440800df Update vendored cookbooks for mediawiki 2020-08-30 17:48:52 +02:00
basti d6ad68c50a Add node config for new wiki VM 2020-08-30 17:34:02 +02:00
basti d5448e8240 Basic LND installation 2020-08-23 12:37:53 +02:00
basti 0005f9ab7d Add golang cookbook 
Needs updating of ark and git cookbooks
 2020-08-23 11:01:05 +02:00
basti 217ab471ce Moving bitcoin-core to VM 2020-08-22 23:16:11 +02:00
basti 5c105f00d1 Use MIT license for bitcoin cookbook 2020-08-19 15:29:18 +02:00
basti 1a8c3e4350 Suggest bitcoin source recipe for dev 2020-08-19 15:28:00 +02:00
basti c98be94404 Add rpcpassword support to bitcoin snap recipe 2020-08-18 14:44:23 +02:00
basti 97ae73c987 Improve variable name 2020-08-18 14:38:16 +02:00
basti 23588760fa Add walletdir flag to bitcoind service start 2020-08-17 21:43:56 +02:00
basti b0daa3d463 Only store wallet in encrypted dir 
Storing all chain data in encfs caused unsolvable issues with leveldb.
So now we're only storing wallet data in the encrypted dir.
 2020-08-17 16:46:59 +02:00