863 Commits

Author SHA1 Message Date
fff5a044fe
Update/fix hubot URL, move variables to attributes 2019-06-25 14:29:11 +02:00
Greg Karékinian
3a693efcd6 Add email notifications for failed certbot runs
Based on https://wiki.archlinux.org/index.php/Systemd/Timers#MAILTO

This can easily be used by other services, with one line added to the
[Unit] section of a service:

OnFailure=status-email-ops@%n.service

Refs #3
2019-06-20 12:46:27 +02:00
Greg Karékinian
b01985ec4f Fix the permissions for the ejabberd upload folders 2019-06-14 16:38:49 +02:00
Greg Karékinian
aa79297387 Remove unused data bags and cookbooks 2019-05-21 14:58:01 +02:00
Greg Karékinian
4cc5f3e6d1 Remove the XMPP firewall rules for andromeda
They are part of the kosmos-ejabberd cookbook now
2019-05-14 17:10:33 +02:00
Greg Karékinian
5106ba20fd Add the version to the dpkg package to allow updates 2019-05-14 17:10:15 +02:00
Greg Karékinian
d398c167ca Allow to pass extra attributes to backup PostgreSQL databases 2019-05-14 16:39:21 +02:00
Greg Karékinian
f81b7c82de Backup the 5apps ejabberd database and uploads dir 2019-05-14 15:16:28 +02:00
Greg Karékinian
bd9491675f Add the missing sql schema 2019-05-14 15:10:07 +02:00
Greg Karékinian
902a013dca Restart the service when the systemd unit changes 2019-05-14 12:18:22 +02:00
Greg Karékinian
0be63e5935 Fix the config file when no TLS certs exist 2019-05-14 11:31:42 +02:00
Greg Karékinian
bd720b0189 Use the regular SQL schema (not the new one for all vhosts into one db) 2019-05-14 11:24:08 +02:00
Greg Karékinian
d9390a4b92 Don't use a concatenated cert for kosmos.org anymore 2019-05-13 18:53:45 +02:00
Greg Karékinian
5d1aeb7b68 Create a cert for 5apps.com and improve the renewal script 2019-05-13 18:52:39 +02:00
Greg Karékinian
88204ea91b Update the config to the current one running on andromeda 2019-05-13 17:59:04 +02:00
Greg Karékinian
ad23530653 Add the firewall rules for ejabberd
Includes the missing 5223 port in the andromeda_firewall recipe too
2019-05-13 17:08:21 +02:00
Greg Karékinian
b44a226753 Fix the postgresql setup for the ejabberd cookbook
Create a ejabberd user with a password from an encrypted data bag
2019-05-10 11:43:52 +02:00
Greg Karékinian
3884f9922e Merge branch 'master' into feature/7-ejabberd_rebased_2 2019-05-10 11:08:09 +02:00
3fbea864c1
Remove hubot-kredits from IRC hal8000 2019-05-10 07:08:29 +02:00
7afc2f5774 Remove old hubot admins from botka 2019-05-10 07:02:08 +02:00
b29a007533 Use different Redis database for new bot 2019-05-10 07:01:43 +02:00
4a480931a5 Fix bug in nginx config
Server name isn't recognized when adding a header
directive before like this.
2019-05-10 07:00:53 +02:00
9661980235 Change bot domain 2019-05-10 07:00:35 +02:00
f3f0d0deb2
Add nginx site for hal8000_xmpp 2019-05-09 23:44:28 +02:00
e8f325b41b
Refactor botka recipe 2019-05-09 23:44:28 +02:00
5f8b274cf9
Use MIT license 2019-05-09 23:44:28 +02:00
fe1821739c
Remove obsolete port opening
We have an nginx reverse proxy for botka instead.
2019-05-09 23:44:28 +02:00
584aab76a7
Add hal8000_xmpp recipe
Also, configure express ports in attributes, so they are both easy to
see at once, as well as override per node/env.
2019-05-09 23:44:18 +02:00
Greg Karékinian
90815bb274 Fix the postgresql credentials for the backup attributes 2019-05-08 16:58:47 +02:00
Greg Karékinian
7271065c5b Add names to the execute resources 2019-05-08 16:58:31 +02:00
Greg Karékinian
81192f7277 Fix the backup config format to work with backup 5 2019-05-08 12:26:47 +02:00
89027f1f32
Fix maintenance page paths 2019-05-07 16:10:23 +02:00
99a677ec47
Configure maintenance error page for 503 2019-05-07 15:52:58 +02:00
1ee2b5ad41
Add maintenance page feature to Mastodon nginx site 2019-05-07 15:49:01 +02:00
36a50489d0
Add maintenance page to nginx default recipe 2019-05-07 15:46:00 +02:00
9811490aad
Add self-contained maintenance web page
This can be used for any of our services when doing planned maintenance
or migrations.
2019-05-07 15:11:26 +02:00
8f4e2ca77a Merge branch 'feature/54-certbot_dev_env' of kosmos/chef into master 2019-05-03 11:31:47 +00:00
Greg Karékinian
37aa87df5e Add a missing dependency on the zlib1g-dev for the backup gem
Fixes #56
2019-05-03 10:58:39 +02:00
Greg Karékinian
5bb34554a7 The nginx_certbot_site resource does nothing in the dev environment
No need to check for the environment in recipes that use the resource

Closes #54
2019-05-03 10:55:02 +02:00
Greg Karékinian
61607f77c4 Update ipfs-cluster to 0.10.1
ipfs-cluster-ctl commands such as `pin rm` now work

Closes #48
2019-04-30 12:58:10 +02:00
Greg Karékinian
696d7cd561 Set up kosmos-hubot to use ipfs-cluster
That way a new document will be added and pinned on all members of the
cluster

Fixes #46
2019-04-26 16:54:02 +02:00
Greg Karékinian
c186ebf703 Update go-ipfs to 0.4.20
https://github.com/ipfs/go-ipfs/blob/v0.4.20/CHANGELOG.md
2019-04-25 19:20:16 +02:00
gregkare
ec067d4b80 Merge branch 'feature/35-kredits_github' of kosmos/chef into master 2019-04-25 14:03:15 +00:00
gregkare
3566184277 Merge branch 'feature/hubot-kredits_config' of kosmos/chef into master 2019-04-25 14:02:34 +00:00
gregkare
d4514a1871 Merge branch 'feature/add_ipfs_id' of kosmos/chef into master 2019-04-25 13:21:33 +00:00
d162233e8d
Add Gitea config for hal8000 2019-04-24 17:50:45 +01:00
Greg Karékinian
2cf611279b Make the systemd unit for kredits-github not world readable
This way the environment variables are kept secret. Only root can read
`/proc/$ID/environ`
2019-04-23 14:12:55 +02:00
Greg Karékinian
f5051d6352 Revert "Move the environment variables to an EnvironmentFile"
This reverts commit 79023a65f24b86a3fd357a3db7d3cb60e34852a9.
2019-04-23 14:12:16 +02:00
Greg Karékinian
ecf5870195 Only add the Let's Encrypt set up when not in the dev environment 2019-04-23 11:41:12 +02:00
Greg Karékinian
79023a65f2 Move the environment variables to an EnvironmentFile 2019-04-23 11:40:33 +02:00