raucao
4dc9c18d46
Move Node services onto patched releases for the eMudhra CA incident
...
Bump Node to patched releases (mastodon/sockethub 24.22.1, RTL 22.23.4).
Force the pinned major's latest patch in kosmos-nodejs: nodejs_install only
selects the repo major and a bare `package nodejs` never upgrades an already
installed package.
For hosts stuck on Node 16 (no patched 16.x), run the services with
NODE_OPTIONS=--use-openssl-ca so they use the patched system trust store:
ipfs-pinner, kredits-github, hubot botka/hal8000, sockethub.
2026-10-24 15:29:21 +02:00
greg
54098a450c
Replace application cookbook with git resource
2023-06-28 18:54:38 +02:00
greg
5bb34554a7
The nginx_certbot_site resource does nothing in the dev environment
...
No need to check for the environment in recipes that use the resource
Closes #54
2019-05-03 10:55:02 +02:00
greg
2cf611279b
Make the systemd unit for kredits-github not world readable
...
This way the environment variables are kept secret. Only root can read
`/proc/$ID/environ`
2019-04-23 14:12:55 +02:00
greg
f5051d6352
Revert "Move the environment variables to an EnvironmentFile"
...
This reverts commit 79023a65f2
2019-04-23 14:12:16 +02:00
greg
ecf5870195
Only add the Let's Encrypt set up when not in the dev environment
2019-04-23 11:41:12 +02:00
greg
79023a65f2
Move the environment variables to an EnvironmentFile
2019-04-23 11:40:33 +02:00
greg
fabbe398a2
Remove the nginx recipe inclusion and the dependency on nginx in the service
...
The nginx vhost should be set up after the app is deployed. The node app
doesn't need nginx to run
2019-04-23 11:28:23 +02:00
greg
3b2a3bf3fa
Replace reference to sockethub, remove comment that's not relevant
2019-04-23 10:33:31 +02:00
basti
2658b90c5b
Set log level to info
...
Now that everything works, we don't need detailed output for every
GitHub payload anymore.
2019-04-20 09:34:37 +01:00
basti
1d98bf14fe
Configure kosmos-github
...
closes #35
2019-04-19 18:45:13 +01:00
raucao
greg
basti