kosmos/chef
8
3
Fork 0
Code Issues 38 Pull Requests 2 Projects 2 Activity
1,988 Commits 9 Branches 0 Tags
89fa3ede9eff9c027131bf7eab20addc849840dc
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
greg 89fa3ede9e Remove the condition on the postgresql 
Also move back the environment variable definitions to the hash
 2025-06-25 09:51:35 +02:00
greg efb032fffa Opt-out of dotnet telemetry for btcpay 
This is done by setting an environment variable in the systemd unit

Fixes #441
 2025-06-24 16:53:59 +02:00
greg 7dc4f674a0 Use the systemd unit instead of an execute resource 
Also extract the attributes so it is possible to override them.
 2025-05-21 13:40:12 +02:00
greg 49b636305e Update mastodon-3 node file after Chef run 2025-05-21 11:36:15 +02:00
greg 3e2ee30334 Configure maximum size and timespan of journald logs 
Closes #506
 2025-05-21 11:36:15 +02:00
greg b01315f998 Delete old Mastodon media cache every day 
This is done using a systemd timer

Closes #533
 2025-05-16 19:12:47 +02:00
greg be072fb985 Update vagrant-openresty node file 2023-07-19 10:01:51 +02:00
greg 0fc388f43c Don't redirect http for the hello_world openresty app 2023-07-19 10:01:10 +02:00
greg 27b466f30d Add new architecture to Gemfile.lock 2023-07-17 18:09:55 +02:00
greg 1a19fa012d Deploy openresty proxy on draco 
Also update Chef to 18.2.7
 2023-07-17 18:09:13 +02:00
greg 7b0313fbd4 Add access and error logs for the assets vhost 2023-07-17 18:08:32 +02:00
greg 1183f6a621 Add missing dependency on git to deploy the assets 2023-07-17 18:08:21 +02:00
greg 05daff9029 Install certbot when using the tls_cert_for resource 2023-07-17 18:07:50 +02:00
greg 307ccbd561 Set a production run list for the openresty_proxy role 
It only contains the assets for now
 2023-07-17 18:06:58 +02:00
greg cc91aab155 Use the new way of setting attribute whitelists 2023-07-17 18:06:23 +02:00
greg bf72367cf2 Add a firewall rule to the kosmos_openresty cookbook 
It is part of the run list in production
 2023-07-17 18:05:34 +02:00
greg 4e0bd191c3 Move the Hello World lua app to its own recipe 
Use it in the development environment
 2023-07-17 18:04:35 +02:00
greg 96f45b1f63 Set the required Chef version to 18 2023-07-17 18:03:02 +02:00
greg 030dbc3584 Update the openresty cookbook submodule 2023-07-17 18:00:38 +02:00
greg 84ffb46ed5 Add Chef node file for openresty VM 2023-07-17 14:46:38 +02:00
greg 491cd31fac Add openresty Vagrant box 2023-07-15 17:20:06 +02:00
greg 2acf4c2b59 Update Chef in Vagrant setup 2023-07-15 17:19:50 +02:00
greg df1143525d Add openresty roles 2023-07-12 20:37:03 +02:00
greg d79dcd8e65 Deploy kosmos assets with Openresty 2023-07-12 20:36:12 +02:00
greg c1e2145ba1 Create a resource to get a Let's Encrypt cert with DNS validation 2023-07-12 20:35:15 +02:00
greg d077dfdcf2 Deploy a hello world openresty app 2023-07-12 20:34:00 +02:00
greg 8a3c519a6c Update our fork of the openresty cookbook 2023-07-12 20:32:53 +02:00
greg abb652cc2b Fix the openresty submodule 2023-07-08 15:37:12 +02:00
greg b7c36d427e Add jemalloc and yum cookbooks 2023-07-08 15:12:30 +02:00
greg 1bdcda0e97 Initial kosmos_openresty wrapper cookbook 2023-07-06 10:17:11 +02:00
greg 0a15199364 Add cookbook dependencies for openresty 2023-07-06 10:14:23 +02:00
greg aebf0a12e8 Don't use AIO in development 
This was needed in my Vagrant setup (VirtualBox)
 2023-07-06 10:13:52 +02:00
greg 2950ab5bfc Add openresty cookbook fork as a submodule 2023-07-05 15:50:46 +02:00
greg 2637d755af Remove old server 2023-06-29 17:17:06 +02:00
greg b550c1b79e Remove deleted servers 2023-06-29 16:58:28 +02:00
greg 1f29d8a01a Get rid of compat_resource and mariadb 2023-06-29 16:49:06 +02:00
greg 462bdabf01 Get rid of the chef-sugar dependency 
It's now deprecated
 2023-06-29 16:41:08 +02:00
greg 7683de09a2 Update the elasticsearch cookbook 2023-06-29 16:39:09 +02:00
greg 68ce3c4834 Update the firewall cookbook to the latest version 
This gives us comments from the named resources
 2023-06-29 15:08:44 +02:00
greg 916ae8094c Get rid of the build-essential cookbook 
The build_essential resource has been part of Chef since 14.0
 2023-06-29 14:48:49 +02:00
greg 05834b6013 Get rid of the application and poise cookbooks 2023-06-28 18:59:31 +02:00
greg d7bc5e6f08 Update Chef on these servers 2023-06-28 18:55:13 +02:00
greg b7d17c1ad7 Replace application cookbook with git resource 2023-06-28 18:55:05 +02:00
greg 54098a450c Replace application cookbook with git resource 2023-06-28 18:54:38 +02:00
greg 3a5a038f7e Replace application cookbook with git resource 2023-06-28 18:53:59 +02:00
greg 3cf9c3868b Deploy mastodon without the application cookbooks 2023-06-28 17:23:05 +02:00
greg 57fdf0723f Deploy RTL without the deprecated application cookbook 2023-06-28 16:35:57 +02:00
greg 9378df23db Remove unused lndhub recipe 2023-06-28 16:35:56 +02:00
greg 88caae26e4 Install the latest backup gem 
It added a few dev dependencies, install them
 2023-06-28 16:35:56 +02:00
greg 0564165e81 Override the attributes in attributes, not the default recipe 2023-06-28 16:35:56 +02:00
greg ddeebc739d Update chef-sugar to fix a conflict in Chef 16+ 2023-06-28 16:35:56 +02:00
greg b9cf396d42 Deploy akkounts without the application_git cookbook 
Use the built-in git resource from Chef instead. poise/application does
not work on modern Chef.
 2023-06-28 16:35:56 +02:00
greg d1a4e4cbc5 Merge branch 'master' into feature/488-redis_server 2023-06-28 14:15:30 +02:00
greg b19fca6e7c Add firewall rule to allow access to Redis on Zerotier network 2023-06-20 15:19:34 +02:00
greg 76a952dbac Add missing Berksfile changes 2023-06-19 16:13:08 +02:00
greg 3fb89517ab Add redis_server role to redis-1 2023-06-19 16:08:59 +02:00
greg 44e23ffa1f Merge branch 'master' into feature/488-redis_server 2023-06-19 16:08:44 +02:00
greg 6116729907 Set up Redis using the latest version of redisio 
This replaces the deprecated redis cookbook. Compiles the latest version
of Redis, currently 7.0.11

Refs #488
 2023-06-19 16:02:58 +02:00
greg 0c4466b040 Namespace the smtp attributes 2023-03-27 10:49:12 +02:00
greg 34970fe3cf Set a better name for the from address 2023-03-27 10:48:56 +02:00
greg 3873ebaac2 Don't override the SMTP config with the same values 2023-03-27 10:45:02 +02:00
greg 4f1fb347a8 Add new SMTP config for akkounts 
This is not running on akkounts-1

closes #479
refs kosmos/akkounts#107
 2023-03-24 16:55:11 +01:00
greg 5a5f8425af Add missing postgresql-client package for backup gem 2022-11-07 16:30:45 +01:00
greg 97fe328312 Add missing pg_db recipe on postgresql_primary role 2022-11-07 16:30:02 +01:00
greg ed04753318 Update mastodon-3 node after chef run 2022-11-07 16:28:09 +01:00
greg 4bfb7d5f5d Extract mastodon db backup to its own recipe 2022-11-07 16:22:15 +01:00
greg fe8e66fda3 Add the new rs-discourse-1 server 2022-10-11 18:00:48 +02:00
greg 410c238450 Update the discourse-2 and fornax nodes after Chef run 2022-10-11 18:00:31 +02:00
greg 378fee85ec Create a discourse cookbook that can be wrapped 
It makes it possible to serve multiple Discord instances to different
hosts from a single nginx load balancer

Right now we run one for Kosmos and one for remoteStorage
 2022-10-11 17:58:22 +02:00
greg 1270488ef9 Remove ldap-2 VM 2022-10-03 14:45:00 +02:00
greg e4d4aa45f7 Use FQDN for hostname, add LDAP server 2022-08-22 16:16:01 +02:00
greg 85abfd4e5e Create the required groups and ACIs 2022-08-22 16:15:02 +02:00
greg 32f620e95c Update the wiki-1 node after Chef run 2022-05-11 16:23:18 +02:00
greg e766a96d3b Update the discourse-2 node after Chef run 2022-05-11 16:23:18 +02:00
greg a14cd9a74f New config for LDAP in Discourse 2022-05-11 16:23:18 +02:00
greg 0d133de1b8 New config and credentials for LDAP connection in mediawiki 2022-05-11 16:23:17 +02:00
greg 5c00e2d28a Add an attribute containing the LDAP server's address 2022-05-11 15:37:36 +02:00
greg c56870008e Use the new LDAP services application accounts 2022-05-11 14:49:28 +02:00
greg e53e55cb2d Disable TLS for LDAP since we're using Zerotier networking 2022-05-11 14:49:00 +02:00
greg ff7cb1ce4a Generate a hosts entry for the LDAP server 2022-05-11 14:48:30 +02:00
greg 1502d1956d Set new passwords for the LDAP service accounts 2022-05-11 14:47:32 +02:00
greg 907706d1d2 Set up the hosts entry for the new LDAP server 2022-05-10 11:50:49 +02:00
greg b869002c1a Update Gitea to 1.16.6 2022-05-10 11:50:35 +02:00
greg 7ffd3bbf73 Add LDAP's Zerotier IP to the akkount server's hosts 2022-04-28 12:12:10 +02:00
greg ee6bde5b23 Update discourse-1 node after running Chef 2022-02-18 20:00:18 +01:00
greg 58f2544a9e Remove the discourse role from centaurus 2022-02-18 19:59:17 +01:00
greg 98547088f1 Add the zerotier IP for fornax 2022-02-18 19:58:59 +01:00
greg 7582cafb77 Explicitly install snapd package 
It was not installed on fornax for example
 2022-02-18 19:42:43 +01:00
greg 31631ddc4a Add missing recipe 2022-02-18 19:39:04 +01:00
greg 79f623de4e Prepare fornax and discourse-1 for the discourse migration 2022-02-18 18:15:33 +01:00
greg e8f46db49c Extract the nginx config for discourse to a recipe 
Get the upstream servers automatically from Chef nodes
 2022-02-18 18:14:33 +01:00
greg 685deea920 Simplify dirsrv setup 
Connecting directly using zerotier, no more nginx
 2021-12-02 19:08:27 +01:00
greg d1d48cb749 Add role for ldap (dirsrv) 2021-12-02 19:08:16 +01:00
greg 067f5ba0d9 Add node config for ldap-1 2021-12-02 19:07:55 +01:00
greg e00d6c3a86 Use the sockethub role in the run list 2021-07-14 10:14:38 +02:00
greg 383a46676e Create a role for sockethub 2021-07-14 10:14:28 +02:00
greg eed27713ff Add the sockethub firewall rule to centaurus 2021-07-14 10:14:07 +02:00
greg b5e7e4ab85 Use DNS validation to generate/renew the TLS cert 2021-07-14 10:13:35 +02:00
greg 7c2aae6650 Add sockethub to nodejs-2's run list 2021-07-09 11:52:58 +02:00
greg d135b3873c Switch to a systemd unit Chef resource 2021-07-09 11:32:33 +02:00