Râu Cao
67f6e1b34a
Downgrade go-ipfs to 0.15
...
Fixes #435
2022-10-24 14:18:19 +02:00
945283738a
Merge pull request 'Set up live backups for all VMs' ( #433 ) from feature/qemu_snapshots into master
...
Reviewed-on: #433
2022-10-22 11:52:26 +00:00
33ae6befaa
Merge pull request 'Block outgoing traffic to local networks by default' ( #434 ) from feature/block_outoing_local_traffic into feature/qemu_snapshots
...
Reviewed-on: #434
2022-10-22 11:50:28 +00:00
Râu Cao
58e6e7de03
Remove ufw logs
...
Just added them to check the blocking for a while
2022-10-22 13:03:16 +02:00
Râu Cao
1afc3a5de5
Block outgoing traffic to local networks by default
...
Some software, e.g. go-ipfs, is rather aggressive in scanning local
networks for peers, which can trigger abuse reports and IP locks in the
data center.
2022-10-21 13:37:38 +02:00
Râu Cao
61710aa4a4
Set up systemd service and timer for backups
2022-10-21 10:50:04 +02:00
Râu Cao
95941c830f
Remove verbose stats outout from backup script
2022-10-21 10:49:30 +02:00
Râu Cao
a5b2eb5f97
Move borg credentials to a separate file
...
To be used from a service
2022-10-21 10:49:02 +02:00
Râu Cao
374654f8fd
Update chef/ohai on hosts
2022-10-21 10:47:46 +02:00
Râu Cao
7051cc9da8
Update draco's main IP address
2022-10-21 10:47:17 +02:00
Râu Cao
51163ca3a3
Whitelist Chef attributes for newer client versions
2022-10-21 10:46:16 +02:00
Râu Cao
927bb63535
Add kvm_guest role to nodes
2022-10-19 16:28:07 +02:00
Râu Cao
34a57fa298
Merge branch 'lnd_tor_changes' into feature/qemu_snapshots
2022-10-19 15:23:39 +02:00
Râu Cao
6d765f959d
Fix backup VM name for ldap-3
...
(and potentially other guests where the name differs from the libvirt
domain name)
2022-10-19 12:51:46 +02:00
Râu Cao
82f50b0caa
Only back up domain-specific XML per archive
2022-10-19 12:24:10 +02:00
Râu Cao
6c8f9055c1
Create directories for KVM host backup files
2022-10-19 12:23:54 +02:00
Râu Cao
2e2ebbcc02
Fix filenames for guest agent sockets
2022-10-19 12:23:17 +02:00
Râu Cao
a3844b7ef6
WIP Add KVM host backup recipe
...
Add a recipe that configures scripts for live backups of VM images via
libvirt and borg.
2022-10-19 12:08:05 +02:00
Râu Cao
6d50a32aca
Add FIXME note
2022-10-19 12:08:05 +02:00
Râu Cao
7848b4d365
Add jitsi-meet-1 VM
2022-10-19 12:08:04 +02:00
Râu Cao
063e9e070c
Add borg credentials
2022-10-19 12:08:04 +02:00
Râu Cao
b78e6685ed
Add kvm_guest role to VMs on fornax
2022-10-19 12:07:56 +02:00
Râu Cao
895d293899
Update RSKj version
2022-10-18 18:46:53 +02:00
11062f5180
Merge pull request 'Add guest agent device when creating VMs' ( #431 ) from bugfix/qemu_guest_agent into master
...
Reviewed-on: #431
2022-10-12 14:34:06 +00:00
Râu Cao
315cd247e5
Enable qemu-guest-agent after install
...
This is actually automatically done for the service from the apt
package, but I like specifying it explicitly as well.
2022-10-12 15:55:08 +02:00
Râu Cao
e73b8fb01f
Add guest agent device when creating VMs
...
This is necessary for qemu-guest-agent to actually work
2022-10-12 15:53:00 +02:00
d26ab2249c
Merge pull request 'Deploy a Discourse instance for remoteStorage' ( #430 ) from feature/discourse_wrappers into master
...
Reviewed-on: #430
2022-10-11 16:08:52 +00:00
Greg Karékinian
fe8e66fda3
Add the new rs-discourse-1 server
2022-10-11 18:00:48 +02:00
Greg Karékinian
410c238450
Update the discourse-2 and fornax nodes after Chef run
2022-10-11 18:00:31 +02:00
Greg Karékinian
378fee85ec
Create a discourse cookbook that can be wrapped
...
It makes it possible to serve multiple Discord instances to different
hosts from a single nginx load balancer
Right now we run one for Kosmos and one for remoteStorage
2022-10-11 17:58:22 +02:00
Râu Cao
e90b265f7e
Remove superfluous license headers
2022-10-10 15:29:17 +02:00
a5ac53caef
Merge pull request 'Upgrade LND, bitcoind' ( #429 ) from chore/upgrade_lnd into master
...
Reviewed-on: #429
2022-10-10 11:47:19 +00:00
Râu Cao
bec54e6ffb
Upgrade LND, bitcoind
...
LND needs an emergency hotfix, released in 0.15.2, due to a subtle
Taproot transaction parsing limitation in a library it depends on.
2022-10-10 13:46:12 +02:00
Greg Karékinian
1270488ef9
Remove ldap-2 VM
2022-10-03 14:45:00 +02:00
7026e0e85b
Merge pull request 'Upgrade Gitea to 1.17.2' ( #427 ) from chore/upgrade_gitea into master
...
Reviewed-on: Kosmos/chef#427
2022-09-21 09:33:01 +00:00
Râu Cao
ff907384d9
Upgrade Gitea to 1.17.2
2022-09-21 11:32:20 +02:00
2360ad2ac0
Merge pull request 'Move LDAP server to new VM' ( #426 ) from chore/new_ldap_vm into master
...
Reviewed-on: #426
2022-08-23 13:01:30 +00:00
Greg Karékinian
e4d4aa45f7
Use FQDN for hostname, add LDAP server
2022-08-22 16:16:01 +02:00
Greg Karékinian
85abfd4e5e
Create the required groups and ACIs
2022-08-22 16:15:02 +02:00
Râu Cao
80c3e4e270
Create ldap-3 VM
2022-08-22 13:40:26 +01:00
Râu Cao
f17a420a64
Update VM base image
2022-08-22 13:40:07 +01:00
607466b1d2
Merge pull request 'Add KVM Guest role' ( #409 ) from feature/kvm_guest_role into master
...
Reviewed-on: #409
2022-08-22 11:46:43 +00:00
d7aeb0e483
Merge pull request 'Upgrade Gitea to 1.17.0' ( #424 ) from chore/upgrade_gitea into master
...
Reviewed-on: #424
2022-08-18 08:33:48 +00:00
Râu Cao
65adc84e5b
Upgrade Gitea to 1.17.0
...
Also adds a new Nginx directive to allow larger uploads to the Docker
registry endpoints.
closes #422
2022-08-09 11:58:56 +02:00
fdb326b91a
Merge pull request 'Move Zerotier controller' ( #421 ) from chore/move_zerotier_controller into master
...
Reviewed-on: #421
2022-08-08 10:58:22 +00:00
Râu Cao
37b948cbe5
Remove custom cron job
...
refs #395
2022-08-08 12:57:30 +02:00
4adccb7411
Merge pull request 'Enable cron job to delete repo archives' ( #423 ) from chore/395-gitea_cron into master
...
Reviewed-on: #423
2022-08-08 10:54:26 +00:00
Râu Cao
08b7c7a5ac
Enable cron job to delete repo archives
...
closes #395
2022-08-08 12:51:26 +02:00
Râu Cao
206bb69100
Update node info
2022-07-31 13:05:59 +02:00
Râu Cao
41d4f87710
Move Zerotier controller
...
It's running on fornax now, and the VMs have been deleted. This way,
there's no internal routing needed for it to be publicly accessible by
any network member nodes.
2022-07-28 15:38:42 +02:00
