Greg Karékinian
73d1722d4b
Remove the sudo cookbook
...
Chef 14 ships with a sudo resource:
https://docs.chef.io/resource_sudo.html
2019-04-02 12:17:06 +02:00
Greg Karékinian
2f599ffd6d
Update Chef to 14.11.21
...
Closes #21
2019-04-02 12:16:13 +02:00
gregkare
f5dc267030
Merge branch 'feature/1-lets_encrypt' of kosmos/chef into master
2019-03-18 16:24:00 +00:00
Greg Karékinian
5fa0fa661b
Install certbot from the direct download when on 15.04
...
It does not have a ppa release. Add a cron job for renewal. When using
the PPA a Systemd timer is part of the package
2019-03-18 16:52:05 +01:00
Greg Karékinian
17f1b2a20a
Create a nginx_certbot_site resource to remove duplication
...
It creates a folder, the nginx vhost for certbot and HTTP redirects, and
also runs certbot and recreates the nginx vhost that includes the TLS
cert
2019-03-15 19:03:28 +01:00
Greg Karékinian
b30dcab4da
Remove an IPFS port from the ejabberd firewall
2019-03-15 12:30:56 +01:00
41db5b2b73
Use kosmos.org email address
2019-03-15 12:45:28 +07:00
a77580d6da
Use variable instead of hardcoding domain
...
The domain name is hardcoded exactly 12 times in just the letsencrypt
recipe.
2019-03-15 12:38:42 +07:00
Greg Karékinian
c3135402ad
Move the nginx hook to the deploy directory, create renewal-hooks dir
2019-03-14 20:21:34 +01:00
Greg Karékinian
f50f48b55b
Remove the old deploy hook, we moved it to the certbot config dir
2019-03-14 18:07:52 +01:00
Greg Karékinian
a978f2a6a5
Fix the path to the Gandi DNS certbot script
2019-03-14 18:06:55 +01:00
Greg Karékinian
f12ddefec8
Move the Gandi DNS hook for certbot to the kosmos-base cookbook
2019-03-14 18:01:29 +01:00
Greg Karékinian
65482f09c3
Extract the post hooks to their own script in Certbot's config dir
2019-03-14 15:21:50 +01:00
Greg Karékinian
36e046ea73
Run certbot using the binary provided by the Ubuntu PPA
2019-03-14 10:52:44 +01:00
Greg Karékinian
fa27187f11
Switch from the git version of certbot to the Ubuntu PPA
2019-03-14 10:49:47 +01:00
Greg Karékinian
fc265014de
Switch back to the upstream nginx cookbook
...
chef_nginx is deprecated
2019-03-14 10:35:11 +01:00
gregkare
e20ad9e6f9
Merge branch 'chore/cleantalk_update' of kosmos/chef into master
2019-03-14 08:34:48 +00:00
Greg Karékinian
566e4278fd
Update the ipfs cookbook
2019-03-13 15:11:02 +01:00
Greg Karékinian
fee449f347
Set the ipfs user's shell to bash
2019-03-13 11:00:21 +01:00
19ad46036f
Update Cleantalk extension to latest version
...
Running on the server already
2019-03-04 18:22:29 +07:00
gregkare
f6119a045f
Merge branch 'moar_ports' of kosmos/chef into master
2019-02-28 15:04:48 +00:00
0ea1971b6c
Open up some more ports in firewall
...
From some manual playing around.
2019-02-28 17:19:06 +07:00
Greg Karékinian
b661f6780c
Update chef, berkshelf and knife-solo gems
2019-02-26 14:51:56 +01:00
Greg Karékinian
886958270f
Set REDIS_URL for botka
...
It was using the same Redis key to write its brain as hal8000 (`hubot:storage`),
causing scores to not be persisted to Redis. Right now botka is only
saving the online users to the database. It looks like this was only
enabled recently, as the last saved score was from Feb 8
Fixes #14
2019-02-25 18:29:18 +01:00
Greg Karékinian
5fc158cb5e
Install the latest version of the backup gem
2019-02-25 18:28:55 +01:00
gregkare
20c724252d
Merge branch 'feature/ipfs_updates' of kosmos/chef into master
2019-02-25 17:11:52 +00:00
Greg Karékinian
2e1cdbecc6
Update the ipfs cookbook
2019-02-25 12:57:11 +01:00
Greg Karékinian
33b8b39be2
Update ipfs and ipfs-cluster
2019-02-25 12:50:07 +01:00
501dd47130
Merge branch 'dev/mastodon_updates' of kosmos/chef into master
2019-01-27 04:50:02 +00:00
f082269e66
Use Gitea repo, new branch, new Ruby
2019-01-27 12:46:21 +08:00
9ec1a8a6c0
Update ejabberd doc
2019-01-02 09:41:47 +08:00
0012b73607
Update ejabberd doc
2019-01-02 09:19:29 +08:00
Greg Karékinian
56d14748f9
Fix the Let's Encrypt renew hook script
...
Only copy over the certs to the prosody directory if it's the 5apps.com
wildcard, not for any 5apps.com subdomain
2018-12-20 17:26:37 +01:00
Greg Karékinian
74a1f1b8a1
Update the ipfs cookbook to the latest version
2018-12-11 10:46:21 +01:00
Greg Karékinian
32b89422e7
Merge branch 'feature/5apps_xmpp_certs' into 'master'
...
Automatically generate a Let's Encrypt cert for all 5apps xmpp domains
See merge request kosmos/chef!8
2018-12-03 16:32:25 +00:00
Greg Karékinian
9c97cb4a58
Remove empty environment
2018-12-03 16:53:41 +01:00
Greg Karékinian
1e3f84ed9b
Merge branch 'master' into feature/5apps_xmpp_certs
2018-12-03 16:52:26 +01:00
Greg Karékinian
c1ea7d347d
Merge branch 'bugfix/27-backup_notifications' into 'master'
...
Fix backup gem notifications failing
Closes #27
See merge request kosmos/chef!13
2018-11-09 17:07:22 +00:00
Greg Karékinian
ffc6858dcc
Do not pass the password on the command line anymore to fix a warning
...
Since email notifications work now we do not want warnings. Write an
option file with the credentials for mysqldump
(https://dev.mysql.com/doc/refman/5.7/en/option-files.html )
2018-11-09 14:08:32 +01:00
Greg Karékinian
7073e5d574
Fix backup gem notifications failing
...
This was caused by a bogus PATH that did not include /usr/sbin. The root
user's default PATH includes that, so /usr/sbin/sendmail provided by
postfix is in it
Fixes #27
2018-11-09 14:08:32 +01:00
Greg Karékinian
81c68a9609
Merge branch 'master' into feature/5apps_xmpp_certs
2018-11-08 14:13:09 +01:00
36a4beaed9
Update knife-solo for being able to update net-ssh
2018-11-01 12:19:39 +01:00
90851fb7de
Update Mastodon's Ruby
2018-11-01 12:19:30 +01:00
Greg Karékinian
bb7dc26f43
Run IPFS Cluster on dev too
2018-10-26 18:30:13 +02:00
Greg Karékinian
d65de56412
Add IPFS Cluster support
...
See merge request kosmos/chef!7
2018-10-26 16:29:40 +00:00
Greg Karékinian
3ce78a9ef4
Merge branch 'master' into feature/25-ipfs_cluster
2018-10-26 17:54:05 +02:00
Greg Karékinian
edfe891f48
Add the kosmos-ipfs::letsencrypt recipe to Andromeda
...
It has been extracted from the ipfs-kosmos::default recipe
2018-10-26 17:51:16 +02:00
Greg Karékinian
5e973b6875
Use the kosmos-ipfs recipe in the hal8000 recipe
...
This changes the port to not conflict with hubot and sets the gateway to
be writable
2018-10-26 17:49:06 +02:00
Greg Karékinian
a7871770b8
Remove an unnecessary require and letsencrypt recipe
...
This way kosmos-ipfs::default can be used without adding the Let's
Encrypt certificate
2018-10-26 17:46:47 +02:00
c0358f5c9b
Split hubot into separate recipes, add ipfs to hal8000
2018-10-26 17:40:33 +02:00
