330 Commits

Author SHA1 Message Date
Greg Karékinian
81c68a9609 Merge branch 'master' into feature/5apps_xmpp_certs 2018-11-08 14:13:09 +01:00
36a4beaed9 Update knife-solo for being able to update net-ssh 2018-11-01 12:19:39 +01:00
90851fb7de Update Mastodon's Ruby 2018-11-01 12:19:30 +01:00
Greg Karékinian
bb7dc26f43 Run IPFS Cluster on dev too 2018-10-26 18:30:13 +02:00
Greg Karékinian
d65de56412 Add IPFS Cluster support
See merge request kosmos/chef!7
2018-10-26 16:29:40 +00:00
Greg Karékinian
3ce78a9ef4 Merge branch 'master' into feature/25-ipfs_cluster 2018-10-26 17:54:05 +02:00
Greg Karékinian
edfe891f48 Add the kosmos-ipfs::letsencrypt recipe to Andromeda
It has been extracted from the ipfs-kosmos::default recipe
2018-10-26 17:51:16 +02:00
Greg Karékinian
5e973b6875 Use the kosmos-ipfs recipe in the hal8000 recipe
This changes the port to not conflict with hubot and sets the gateway to
be writable
2018-10-26 17:49:06 +02:00
Greg Karékinian
a7871770b8 Remove an unnecessary require and letsencrypt recipe
This way kosmos-ipfs::default can be used without adding the Let's
Encrypt certificate
2018-10-26 17:46:47 +02:00
c0358f5c9b Split hubot into separate recipes, add ipfs to hal8000 2018-10-26 17:40:33 +02:00
Greg Karékinian
4c7dc764a4 Add the updated Berksfile.lock 2018-10-26 17:06:03 +02:00
Greg Karékinian
f0542bdf2e Update the ipfs cookbook 2018-10-26 17:02:30 +02:00
Greg Karékinian
4a42fc4ae3 Merge branch 'master' into feature/25-ipfs_cluster 2018-10-26 16:46:44 +02:00
Greg Karékinian
4dff379065 Merge branch 'feature/s3_oncall' into 'master'
Set the S3 credentials to write the new oncall file

See merge request kosmos/chef!12
2018-10-26 13:08:15 +00:00
Greg Karékinian
d236d138dc Set the S3 credentials to write the new oncall file 2018-10-26 13:38:12 +02:00
Greg Karékinian
293d1a8a8a Fix formatting 2018-10-04 18:59:30 +02:00
Greg Karékinian
8da7ebbef0 Add initial docs for ejabberd 2018-10-04 18:56:35 +02:00
c90ccfcf9e Merge branch 'feature/ipfs' 2018-09-09 15:47:26 +08:00
421897145c Merge branch 'bugfix/postgres-backups' 2018-09-09 15:44:25 +08:00
35772d1641 Remove IPFS role, because it's not just IPFS
This recipe is trying to set up the entire public gateway for
ipfs.kosmos.org, including getting an LE cert, which obviously fails on
machines not hosting the domain. Setting up a public gateway should not
be part of a default IPFS recipe.
2018-09-08 12:56:43 +08:00
4bccf4dd88 Fix missing Mastodon/PosgreSQL backups
The backup cookbook was incomplete, and also there was no database
configured to be backed up.
2018-09-08 12:54:51 +08:00
Greg Karékinian
185649a5f9 Automatically generate a Let's Encrypt cert for all 5apps xmpp domains
Uses the Gandi LiveDNS API
2018-09-04 17:38:17 +02:00
214e69427e Open up port for Prosody HTTP uploads 2018-09-04 14:14:02 +08:00
Greg Karékinian
e6a3460a2c Make the number of sidekiq threads configurable, bump to 25 2018-09-03 19:11:42 +02:00
d20c0cf7f6 Add note about ejabberd cert 2018-08-29 19:38:21 +08:00
412c108dbc Add notes about getting LE certs using acme.sh 2018-08-28 14:31:38 +02:00
Greg Karékinian
1f528a832d Add a role to set up a cluster node with TLS 2018-08-16 16:01:24 +02:00
Greg Karékinian
f626131868 Build a cluster node on Andromeda 2018-08-16 16:00:44 +02:00
Greg Karékinian
2f87e7c07c Add the ability to override the IPFS port that nginx connects to
This allows us to use the API proxy from the cluster
2018-08-16 15:59:44 +02:00
Greg Karékinian
f31322ab81 Move the firewall rule for ipfs p2p to the right recipe 2018-08-16 15:59:06 +02:00
Greg Karékinian
741c4a5192 Move the ipfs cookbook to its own GitHub repository 2018-08-13 12:05:50 +02:00
Greg Karékinian
de32a7c595 Remove the Let's Encrypt recipe from the default one
We only need one node with a TLS cert
2018-08-13 12:05:11 +02:00
Greg Karékinian
b36e6a718a Add a recipe that sets up the cluster and enables the firewall 2018-08-13 12:05:00 +02:00
Greg Karékinian
7a8042e356 Add initial IPFS Cluster support
It uses an encrypted data bag to store the cluster secret that has to be
the same on all members of a cluster. It installs ipfs-cluster-service
and ipfs-cluster-ctl and starts the cluster

Refs #25
2018-08-06 18:05:44 +02:00
Greg Karékinian
d0f2275ebb Fix the ipfs config
The whole thing was inconsistent and didn't work when creating a server
from scratch
2018-08-06 12:14:20 +02:00
b2d92723d7 Add hubot-redis-brain to botka
Without it, the web push notifications script cannot work.
2018-06-14 13:31:04 +02:00
122dcfeea7 Add fixme note 2018-06-14 11:47:07 +02:00
db039a185a Update certbot 2018-06-13 18:52:13 +02:00
50de448d53 Add nginx reverse proxy for botka on freenode 2018-06-13 18:52:01 +02:00
4b30ce8b23 Make hubot nginx config generic 2018-06-13 18:32:36 +02:00
056c24f6e5 Merge branch 'master' into feature/ipfs 2018-06-07 12:47:22 +02:00
Greg Karékinian
7165bf49c6 Add missing recipe, used to set up andromeda's firewall rules 2018-06-07 12:33:38 +02:00
e2a5262a39 Update IPFS, open its p2p port 2018-06-07 12:29:05 +02:00
af6fe37e0b Add Composer, Mermaid extension 2018-06-01 17:04:15 +02:00
9c0ce30780 Add Berkshelf help to the README 2018-06-01 16:13:50 +02:00
1515b98a17 Update Cleantalk Antispam version 2018-06-01 12:56:39 +02:00
adbfc14765 Update Mastodon deps 2018-05-24 21:29:54 +02:00
0e974182de Configure botka for web push notifications 2018-05-07 19:34:56 +02:00
a6d83f5720 Allow incoming traffic for IPFS 2018-05-05 17:25:10 +02:00
2aebcb2fa5 Use Infura Ethereum node for hubot-kredits 2018-05-05 17:24:48 +02:00