Greg Karékinian
7582cafb77
Explicitly install snapd package
...
It was not installed on fornax for example
2022-02-18 19:42:43 +01:00
fa8cbac163
Fix custom resource not found in newer Chef versions
...
fixes #361
refs #337
2021-11-29 13:03:40 -06:00
09f0faadda
Add missing header to recipe
2021-02-24 19:11:53 +01:00
Greg Karékinian
e6b7794e20
Extract firewall definitions to their own recipe
...
This allows us to use them for KVM hosts as well. Until now we had set
up ufw rules manually on the two KVM hosts (draco and centaurus)
Refs #244
2020-12-04 16:27:42 +01:00
0bebdf7635
Do not require nginx from certbot recipe
...
In order to be able to use different nginx install recipes, we must not
require a specific one from this recipe.
2020-11-23 17:40:14 +01:00
9efb9cd78c
Configure/deploy HTTP upload service on uploads.kosmos.chat
...
https://xmpp.org/extensions/xep-0363.html
(Does not contain the config for ejabberd itself yet.)
2020-11-23 17:37:14 +01:00
a1a0d7e4c1
Switch Certbot to snap package on Ubuntu 20.04+
...
Needs only minor changes. Tested and running on wiki.kosmos.org already.
2020-09-06 13:46:06 +02:00
af0717a65b
Fix comet icon on maintenance page
...
The data URI declares an SVG source, but this was actually a PNG. Hence
the failure in Chrome. This change turns it into an actual inline SVG
and uses UTF8 encoding instead of base64, because SVG is just text anyway.
fixes #61
2020-08-02 21:00:10 +02:00
Greg Karékinian
44b49ddd57
Upgrade nginx to the latest mainline version
2020-07-30 11:58:52 +02:00
Greg Karékinian
db4e2777d4
Fix a bug preventing nginx from being reloaded after generating a cert
...
Change the notifies property to :immediately in nginx_certbot_site. This
way the vhost template is recreated and then triggers a reload of the
nginx service. The previous code resulted in nginx not being reloaded,
as the action had already been queued earlier.
2019-11-22 14:37:29 +01:00
Greg Karékinian
9d68d3c4da
Link to the new ops Mastodon account
2019-09-19 16:02:41 +02:00
Greg Karékinian
cd9a7dd3dc
Use the new kosmos.chat MUC domain on the maintenance page
2019-09-19 16:00:01 +02:00
Greg Karékinian
dfa709c9df
Update nginx to 1.17.3, enable TLS 1.3
...
Uses the current intermediate recommended config from
https://ssl-config.mozilla.org
Closes #92
2019-08-30 11:57:38 +02:00
36a50489d0
Add maintenance page to nginx default recipe
2019-05-07 15:46:00 +02:00
Greg Karékinian
5bb34554a7
The nginx_certbot_site resource does nothing in the dev environment
...
No need to check for the environment in recipes that use the resource
Closes #54
2019-05-03 10:55:02 +02:00
Greg Karékinian
d2142b046f
Reload nginx immediately after enabling the Let's Encrypt vhost
2019-04-15 10:51:18 +02:00
Greg Karékinian
57d0885d26
Change the licenses of hte kosmos cookbooks to MIT
2019-04-12 11:41:20 +02:00
Greg Karékinian
17f1b2a20a
Create a nginx_certbot_site resource to remove duplication
...
It creates a folder, the nginx vhost for certbot and HTTP redirects, and
also runs certbot and recreates the nginx vhost that includes the TLS
cert
2019-03-15 19:03:28 +01:00
Greg Karékinian
fc265014de
Switch back to the upstream nginx cookbook
...
chef_nginx is deprecated
2019-03-14 10:35:11 +01:00
Greg Karékinian
099debe5c3
Depend on the new chef_nginx cookbook
2017-04-28 12:01:51 +02:00
Greg Karékinian
d5d3fb60c1
Use nginx's official repo and improve TLS configuration
...
These packagea are newer than the 15.04 we had. We can enable HTTP2
2017-04-07 18:16:51 +02:00
Greg Karékinian
de11c0d691
Set up an instance of Mastodon for Kosmos
...
Refs #19
Use new application cookbook, update our cookbooks
2017-04-06 21:20:51 +02:00
Greg Karékinian
d95f0b601a
Install mediawiki on the dev server
2016-04-16 00:33:58 +02:00
Greg Karékinian
255ff036c3
Update firewall_rule resource
...
Updated cookbook
2016-02-19 18:11:43 +01:00
Greg Karékinian
ee4079fa85
Initial Chef repository
2015-07-21 19:45:23 +02:00
