kosmos/chef
8
3
Fork 0
Code Issues 38 Pull Requests 2 Projects 2 Activity
2,076 Commits 9 Branches 0 Tags
6d35c0a415cdd72f52bbd4639dd3d0e27c6094a9
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
greg d68deb96e9 Update openresty submodule 2026-04-07 11:40:35 +02:00
greg 1fb66092fc Update Gitea to 1.25.4 
Back to using the binary from upstream releases
 2026-02-13 11:15:07 +01:00
greg 81691f7e21 Run systemctl daemon-reload on gitea service changes 2026-02-13 11:05:08 +01:00
greg 5b53635f1a Document script that creates VMs 
Closes #244
 2025-10-30 16:18:59 +01:00
greg a828d92185 Fix Ruby style 
This is using Standard Ruby
 2025-09-09 15:29:17 +02:00
greg 0fe6d0bd06 Use the "new" way to set up sasl in the postfix cookbook 2025-09-09 15:28:20 +02:00
greg 9712697569 Fork the postfix cookbook to work around a bug 
I ran into the issue described in
https://github.com/sous-chefs/postfix/issues/148
and couldn't figure out a way to work around it without forking it.
 2025-09-09 14:54:06 +02:00
greg d32f276b42 Update akkounts-1 node file after Chef run 2025-09-09 10:13:26 +02:00
greg cc40c0db19 Configure unattended-upgrades for ESM 2025-09-09 10:12:35 +02:00
greg 0cae8dca69 Set the email sender in unattended-upgrades config 
Mailgun was rejecting the email as it did not have a valid sender
(the default, which is something like root@akkounts-1). Unattended
upgrades have been working properly, now we will start getting emails
next time an upgrade is done on akkounts-1.
 2025-07-15 10:12:02 +02:00
greg 78e5f810b7 Update node file after Chef upgrade 
I ended up upgrading Chef manually on the server as I couldn't using
knife-zero

`curl https://omnitruck.chef.io/install.sh | sudo bash -s -- -P chef -v 18.7.10`
 2025-07-09 15:42:30 +02:00
greg 443910c7a2 Modernize kosmos-mediawiki 
This has been done with the help of `cookstyle` which is very useful to
learn about breaking changes and updates in Chef.

On wiki-1 I managed to update Chef up to 17.10.163. For version 18 I ran
into an issue with the omnibus installer returning a 404

Refs #500
 2025-07-09 11:24:14 +02:00
greg cd269dca03 Also disable dotnet telemetry during the build 2025-06-25 10:35:07 +02:00
greg 7e47c879a1 Remove unused variable 2025-06-25 10:18:57 +02:00
greg 2b49cb1b2b Restart the btcpay service on config changes 
It cannot handle reloads
 2025-06-25 10:13:25 +02:00
greg 89fa3ede9e Remove the condition on the postgresql 
Also move back the environment variable definitions to the hash
 2025-06-25 09:51:35 +02:00
greg efb032fffa Opt-out of dotnet telemetry for btcpay 
This is done by setting an environment variable in the systemd unit

Fixes #441
 2025-06-24 16:53:59 +02:00
greg 68df49037c Merge remote-tracking branch 'origin/master' into bugfix/499-unattended_upgrades 2025-06-16 16:05:35 +02:00
greg 773950b9a5 Always send an email on unattended-upgrades 2025-05-31 17:00:07 +02:00
greg f39a1ed250 Enable unattended-upgrades 
We were missing a positive value on
`["apt"]["unattended_upgrades"]["enable"]` to enable it.

Refs #499
 2025-05-31 16:44:01 +02:00
greg 7dc4f674a0 Use the systemd unit instead of an execute resource 
Also extract the attributes so it is possible to override them.
 2025-05-21 13:40:12 +02:00
greg 49b636305e Update mastodon-3 node file after Chef run 2025-05-21 11:36:15 +02:00
greg 3e2ee30334 Configure maximum size and timespan of journald logs 
Closes #506
 2025-05-21 11:36:15 +02:00
greg b01315f998 Delete old Mastodon media cache every day 
This is done using a systemd timer

Closes #533
 2025-05-16 19:12:47 +02:00
greg be072fb985 Update vagrant-openresty node file 2023-07-19 10:01:51 +02:00
greg 0fc388f43c Don't redirect http for the hello_world openresty app 2023-07-19 10:01:10 +02:00
greg 27b466f30d Add new architecture to Gemfile.lock 2023-07-17 18:09:55 +02:00
greg 1a19fa012d Deploy openresty proxy on draco 
Also update Chef to 18.2.7
 2023-07-17 18:09:13 +02:00
greg 7b0313fbd4 Add access and error logs for the assets vhost 2023-07-17 18:08:32 +02:00
greg 1183f6a621 Add missing dependency on git to deploy the assets 2023-07-17 18:08:21 +02:00
greg 05daff9029 Install certbot when using the tls_cert_for resource 2023-07-17 18:07:50 +02:00
greg 307ccbd561 Set a production run list for the openresty_proxy role 
It only contains the assets for now
 2023-07-17 18:06:58 +02:00
greg cc91aab155 Use the new way of setting attribute whitelists 2023-07-17 18:06:23 +02:00
greg bf72367cf2 Add a firewall rule to the kosmos_openresty cookbook 
It is part of the run list in production
 2023-07-17 18:05:34 +02:00
greg 4e0bd191c3 Move the Hello World lua app to its own recipe 
Use it in the development environment
 2023-07-17 18:04:35 +02:00
greg 96f45b1f63 Set the required Chef version to 18 2023-07-17 18:03:02 +02:00
greg 030dbc3584 Update the openresty cookbook submodule 2023-07-17 18:00:38 +02:00
greg 84ffb46ed5 Add Chef node file for openresty VM 2023-07-17 14:46:38 +02:00
greg 491cd31fac Add openresty Vagrant box 2023-07-15 17:20:06 +02:00
greg 2acf4c2b59 Update Chef in Vagrant setup 2023-07-15 17:19:50 +02:00
greg df1143525d Add openresty roles 2023-07-12 20:37:03 +02:00
greg d79dcd8e65 Deploy kosmos assets with Openresty 2023-07-12 20:36:12 +02:00
greg c1e2145ba1 Create a resource to get a Let's Encrypt cert with DNS validation 2023-07-12 20:35:15 +02:00
greg d077dfdcf2 Deploy a hello world openresty app 2023-07-12 20:34:00 +02:00
greg 8a3c519a6c Update our fork of the openresty cookbook 2023-07-12 20:32:53 +02:00
greg abb652cc2b Fix the openresty submodule 2023-07-08 15:37:12 +02:00
greg b7c36d427e Add jemalloc and yum cookbooks 2023-07-08 15:12:30 +02:00
greg 1bdcda0e97 Initial kosmos_openresty wrapper cookbook 2023-07-06 10:17:11 +02:00
greg 0a15199364 Add cookbook dependencies for openresty 2023-07-06 10:14:23 +02:00
greg aebf0a12e8 Don't use AIO in development 
This was needed in my Vagrant setup (VirtualBox)
 2023-07-06 10:13:52 +02:00
greg 2950ab5bfc Add openresty cookbook fork as a submodule 2023-07-05 15:50:46 +02:00
greg 2637d755af Remove old server 2023-06-29 17:17:06 +02:00
greg b550c1b79e Remove deleted servers 2023-06-29 16:58:28 +02:00
greg 1f29d8a01a Get rid of compat_resource and mariadb 2023-06-29 16:49:06 +02:00
greg 462bdabf01 Get rid of the chef-sugar dependency 
It's now deprecated
 2023-06-29 16:41:08 +02:00
greg 7683de09a2 Update the elasticsearch cookbook 2023-06-29 16:39:09 +02:00
greg 68ce3c4834 Update the firewall cookbook to the latest version 
This gives us comments from the named resources
 2023-06-29 15:08:44 +02:00
greg 916ae8094c Get rid of the build-essential cookbook 
The build_essential resource has been part of Chef since 14.0
 2023-06-29 14:48:49 +02:00
greg 05834b6013 Get rid of the application and poise cookbooks 2023-06-28 18:59:31 +02:00
greg d7bc5e6f08 Update Chef on these servers 2023-06-28 18:55:13 +02:00
greg b7d17c1ad7 Replace application cookbook with git resource 2023-06-28 18:55:05 +02:00
greg 54098a450c Replace application cookbook with git resource 2023-06-28 18:54:38 +02:00
greg 3a5a038f7e Replace application cookbook with git resource 2023-06-28 18:53:59 +02:00
greg 3cf9c3868b Deploy mastodon without the application cookbooks 2023-06-28 17:23:05 +02:00
greg 57fdf0723f Deploy RTL without the deprecated application cookbook 2023-06-28 16:35:57 +02:00
greg 9378df23db Remove unused lndhub recipe 2023-06-28 16:35:56 +02:00
greg 88caae26e4 Install the latest backup gem 
It added a few dev dependencies, install them
 2023-06-28 16:35:56 +02:00
greg 0564165e81 Override the attributes in attributes, not the default recipe 2023-06-28 16:35:56 +02:00
greg ddeebc739d Update chef-sugar to fix a conflict in Chef 16+ 2023-06-28 16:35:56 +02:00
greg b9cf396d42 Deploy akkounts without the application_git cookbook 
Use the built-in git resource from Chef instead. poise/application does
not work on modern Chef.
 2023-06-28 16:35:56 +02:00
greg d1a4e4cbc5 Merge branch 'master' into feature/488-redis_server 2023-06-28 14:15:30 +02:00
greg b19fca6e7c Add firewall rule to allow access to Redis on Zerotier network 2023-06-20 15:19:34 +02:00
greg 76a952dbac Add missing Berksfile changes 2023-06-19 16:13:08 +02:00
greg 3fb89517ab Add redis_server role to redis-1 2023-06-19 16:08:59 +02:00
greg 44e23ffa1f Merge branch 'master' into feature/488-redis_server 2023-06-19 16:08:44 +02:00
greg 6116729907 Set up Redis using the latest version of redisio 
This replaces the deprecated redis cookbook. Compiles the latest version
of Redis, currently 7.0.11

Refs #488
 2023-06-19 16:02:58 +02:00
greg 0c4466b040 Namespace the smtp attributes 2023-03-27 10:49:12 +02:00
greg 34970fe3cf Set a better name for the from address 2023-03-27 10:48:56 +02:00
greg 3873ebaac2 Don't override the SMTP config with the same values 2023-03-27 10:45:02 +02:00
greg 4f1fb347a8 Add new SMTP config for akkounts 
This is not running on akkounts-1

closes #479
refs kosmos/akkounts#107
 2023-03-24 16:55:11 +01:00
greg 5a5f8425af Add missing postgresql-client package for backup gem 2022-11-07 16:30:45 +01:00
greg 97fe328312 Add missing pg_db recipe on postgresql_primary role 2022-11-07 16:30:02 +01:00
greg ed04753318 Update mastodon-3 node after chef run 2022-11-07 16:28:09 +01:00
greg 4bfb7d5f5d Extract mastodon db backup to its own recipe 2022-11-07 16:22:15 +01:00
greg fe8e66fda3 Add the new rs-discourse-1 server 2022-10-11 18:00:48 +02:00
greg 410c238450 Update the discourse-2 and fornax nodes after Chef run 2022-10-11 18:00:31 +02:00
greg 378fee85ec Create a discourse cookbook that can be wrapped 
It makes it possible to serve multiple Discord instances to different
hosts from a single nginx load balancer

Right now we run one for Kosmos and one for remoteStorage
 2022-10-11 17:58:22 +02:00
greg 1270488ef9 Remove ldap-2 VM 2022-10-03 14:45:00 +02:00
greg e4d4aa45f7 Use FQDN for hostname, add LDAP server 2022-08-22 16:16:01 +02:00
greg 85abfd4e5e Create the required groups and ACIs 2022-08-22 16:15:02 +02:00
greg 32f620e95c Update the wiki-1 node after Chef run 2022-05-11 16:23:18 +02:00
greg e766a96d3b Update the discourse-2 node after Chef run 2022-05-11 16:23:18 +02:00
greg a14cd9a74f New config for LDAP in Discourse 2022-05-11 16:23:18 +02:00
greg 0d133de1b8 New config and credentials for LDAP connection in mediawiki 2022-05-11 16:23:17 +02:00
greg 5c00e2d28a Add an attribute containing the LDAP server's address 2022-05-11 15:37:36 +02:00
greg c56870008e Use the new LDAP services application accounts 2022-05-11 14:49:28 +02:00
greg e53e55cb2d Disable TLS for LDAP since we're using Zerotier networking 2022-05-11 14:49:00 +02:00
greg ff7cb1ce4a Generate a hosts entry for the LDAP server 2022-05-11 14:48:30 +02:00
greg 1502d1956d Set new passwords for the LDAP service accounts 2022-05-11 14:47:32 +02:00
greg 907706d1d2 Set up the hosts entry for the new LDAP server 2022-05-10 11:50:49 +02:00