Commit Graph
100 Commits
Author SHA1 Message Date
greg b01315f998 Delete old Mastodon media cache every day
This is done using a systemd timer

Closes #533
2025-05-16 19:12:47 +02:00
greg be072fb985 Update vagrant-openresty node file 2023-07-19 10:01:51 +02:00
greg 0fc388f43c Don't redirect http for the hello_world openresty app 2023-07-19 10:01:10 +02:00
greg 27b466f30d Add new architecture to Gemfile.lock 2023-07-17 18:09:55 +02:00
greg 1a19fa012d Deploy openresty proxy on draco
Also update Chef to 18.2.7
2023-07-17 18:09:13 +02:00
greg 7b0313fbd4 Add access and error logs for the assets vhost 2023-07-17 18:08:32 +02:00
greg 1183f6a621 Add missing dependency on git to deploy the assets 2023-07-17 18:08:21 +02:00
greg 05daff9029 Install certbot when using the tls_cert_for resource 2023-07-17 18:07:50 +02:00
greg 307ccbd561 Set a production run list for the openresty_proxy role
It only contains the assets for now
2023-07-17 18:06:58 +02:00
greg cc91aab155 Use the new way of setting attribute whitelists 2023-07-17 18:06:23 +02:00
greg bf72367cf2 Add a firewall rule to the kosmos_openresty cookbook
It is part of the run list in production
2023-07-17 18:05:34 +02:00
greg 4e0bd191c3 Move the Hello World lua app to its own recipe
Use it in the development environment
2023-07-17 18:04:35 +02:00
greg 96f45b1f63 Set the required Chef version to 18 2023-07-17 18:03:02 +02:00
greg 030dbc3584 Update the openresty cookbook submodule 2023-07-17 18:00:38 +02:00
greg 84ffb46ed5 Add Chef node file for openresty VM 2023-07-17 14:46:38 +02:00
greg 491cd31fac Add openresty Vagrant box 2023-07-15 17:20:06 +02:00
greg 2acf4c2b59 Update Chef in Vagrant setup 2023-07-15 17:19:50 +02:00
greg df1143525d Add openresty roles 2023-07-12 20:37:03 +02:00
greg d79dcd8e65 Deploy kosmos assets with Openresty 2023-07-12 20:36:12 +02:00
greg c1e2145ba1 Create a resource to get a Let's Encrypt cert with DNS validation 2023-07-12 20:35:15 +02:00
greg d077dfdcf2 Deploy a hello world openresty app 2023-07-12 20:34:00 +02:00
greg 8a3c519a6c Update our fork of the openresty cookbook 2023-07-12 20:32:53 +02:00
greg abb652cc2b Fix the openresty submodule 2023-07-08 15:37:12 +02:00
greg b7c36d427e Add jemalloc and yum cookbooks 2023-07-08 15:12:30 +02:00
greg 1bdcda0e97 Initial kosmos_openresty wrapper cookbook 2023-07-06 10:17:11 +02:00
greg 0a15199364 Add cookbook dependencies for openresty 2023-07-06 10:14:23 +02:00
greg aebf0a12e8 Don't use AIO in development
This was needed in my Vagrant setup (VirtualBox)
2023-07-06 10:13:52 +02:00
greg 2950ab5bfc Add openresty cookbook fork as a submodule 2023-07-05 15:50:46 +02:00
greg 2637d755af Remove old server 2023-06-29 17:17:06 +02:00
greg b550c1b79e Remove deleted servers 2023-06-29 16:58:28 +02:00
greg 1f29d8a01a Get rid of compat_resource and mariadb 2023-06-29 16:49:06 +02:00
greg 462bdabf01 Get rid of the chef-sugar dependency
It's now deprecated
2023-06-29 16:41:08 +02:00
greg 7683de09a2 Update the elasticsearch cookbook 2023-06-29 16:39:09 +02:00
greg 68ce3c4834 Update the firewall cookbook to the latest version
This gives us comments from the named resources
2023-06-29 15:08:44 +02:00
greg 916ae8094c Get rid of the build-essential cookbook
The build_essential resource has been part of Chef since 14.0
2023-06-29 14:48:49 +02:00
greg 05834b6013 Get rid of the application and poise cookbooks 2023-06-28 18:59:31 +02:00
greg d7bc5e6f08 Update Chef on these servers 2023-06-28 18:55:13 +02:00
greg b7d17c1ad7 Replace application cookbook with git resource 2023-06-28 18:55:05 +02:00
greg 54098a450c Replace application cookbook with git resource 2023-06-28 18:54:38 +02:00
greg 3a5a038f7e Replace application cookbook with git resource 2023-06-28 18:53:59 +02:00
greg 3cf9c3868b Deploy mastodon without the application cookbooks 2023-06-28 17:23:05 +02:00
greg 57fdf0723f Deploy RTL without the deprecated application cookbook 2023-06-28 16:35:57 +02:00
greg 9378df23db Remove unused lndhub recipe 2023-06-28 16:35:56 +02:00
greg 88caae26e4 Install the latest backup gem
It added a few dev dependencies, install them
2023-06-28 16:35:56 +02:00
greg 0564165e81 Override the attributes in attributes, not the default recipe 2023-06-28 16:35:56 +02:00
greg ddeebc739d Update chef-sugar to fix a conflict in Chef 16+ 2023-06-28 16:35:56 +02:00
greg b9cf396d42 Deploy akkounts without the application_git cookbook
Use the built-in git resource from Chef instead. poise/application does
not work on modern Chef.
2023-06-28 16:35:56 +02:00
greg d1a4e4cbc5 Merge branch 'master' into feature/488-redis_server 2023-06-28 14:15:30 +02:00
greg b19fca6e7c Add firewall rule to allow access to Redis on Zerotier network 2023-06-20 15:19:34 +02:00
greg 76a952dbac Add missing Berksfile changes 2023-06-19 16:13:08 +02:00
greg 3fb89517ab Add redis_server role to redis-1 2023-06-19 16:08:59 +02:00
greg 44e23ffa1f Merge branch 'master' into feature/488-redis_server 2023-06-19 16:08:44 +02:00
greg 6116729907 Set up Redis using the latest version of redisio
This replaces the deprecated redis cookbook. Compiles the latest version
of Redis, currently 7.0.11

Refs #488
2023-06-19 16:02:58 +02:00
greg 0c4466b040 Namespace the smtp attributes 2023-03-27 10:49:12 +02:00
greg 34970fe3cf Set a better name for the from address 2023-03-27 10:48:56 +02:00
greg 3873ebaac2 Don't override the SMTP config with the same values 2023-03-27 10:45:02 +02:00
greg 4f1fb347a8 Add new SMTP config for akkounts
This is not running on akkounts-1

closes #479
refs kosmos/akkounts#107
2023-03-24 16:55:11 +01:00
greg 5a5f8425af Add missing postgresql-client package for backup gem 2022-11-07 16:30:45 +01:00
greg 97fe328312 Add missing pg_db recipe on postgresql_primary role 2022-11-07 16:30:02 +01:00
greg ed04753318 Update mastodon-3 node after chef run 2022-11-07 16:28:09 +01:00
greg 4bfb7d5f5d Extract mastodon db backup to its own recipe 2022-11-07 16:22:15 +01:00
greg fe8e66fda3 Add the new rs-discourse-1 server 2022-10-11 18:00:48 +02:00
greg 410c238450 Update the discourse-2 and fornax nodes after Chef run 2022-10-11 18:00:31 +02:00
greg 378fee85ec Create a discourse cookbook that can be wrapped
It makes it possible to serve multiple Discord instances to different
hosts from a single nginx load balancer

Right now we run one for Kosmos and one for remoteStorage
2022-10-11 17:58:22 +02:00
greg 1270488ef9 Remove ldap-2 VM 2022-10-03 14:45:00 +02:00
greg e4d4aa45f7 Use FQDN for hostname, add LDAP server 2022-08-22 16:16:01 +02:00
greg 85abfd4e5e Create the required groups and ACIs 2022-08-22 16:15:02 +02:00
greg 32f620e95c Update the wiki-1 node after Chef run 2022-05-11 16:23:18 +02:00
greg e766a96d3b Update the discourse-2 node after Chef run 2022-05-11 16:23:18 +02:00
greg a14cd9a74f New config for LDAP in Discourse 2022-05-11 16:23:18 +02:00
greg 0d133de1b8 New config and credentials for LDAP connection in mediawiki 2022-05-11 16:23:17 +02:00
greg 5c00e2d28a Add an attribute containing the LDAP server's address 2022-05-11 15:37:36 +02:00
greg c56870008e Use the new LDAP services application accounts 2022-05-11 14:49:28 +02:00
greg e53e55cb2d Disable TLS for LDAP since we're using Zerotier networking 2022-05-11 14:49:00 +02:00
greg ff7cb1ce4a Generate a hosts entry for the LDAP server 2022-05-11 14:48:30 +02:00
greg 1502d1956d Set new passwords for the LDAP service accounts 2022-05-11 14:47:32 +02:00
greg 907706d1d2 Set up the hosts entry for the new LDAP server 2022-05-10 11:50:49 +02:00
greg b869002c1a Update Gitea to 1.16.6 2022-05-10 11:50:35 +02:00
greg 7ffd3bbf73 Add LDAP's Zerotier IP to the akkount server's hosts 2022-04-28 12:12:10 +02:00
greg ee6bde5b23 Update discourse-1 node after running Chef 2022-02-18 20:00:18 +01:00
greg 58f2544a9e Remove the discourse role from centaurus 2022-02-18 19:59:17 +01:00
greg 98547088f1 Add the zerotier IP for fornax 2022-02-18 19:58:59 +01:00
greg 7582cafb77 Explicitly install snapd package
It was not installed on fornax for example
2022-02-18 19:42:43 +01:00
greg 31631ddc4a Add missing recipe 2022-02-18 19:39:04 +01:00
greg 79f623de4e Prepare fornax and discourse-1 for the discourse migration 2022-02-18 18:15:33 +01:00
greg e8f46db49c Extract the nginx config for discourse to a recipe
Get the upstream servers automatically from Chef nodes
2022-02-18 18:14:33 +01:00
greg 685deea920 Simplify dirsrv setup
Connecting directly using zerotier, no more nginx
2021-12-02 19:08:27 +01:00
greg d1d48cb749 Add role for ldap (dirsrv) 2021-12-02 19:08:16 +01:00
greg 067f5ba0d9 Add node config for ldap-1 2021-12-02 19:07:55 +01:00
greg e00d6c3a86 Use the sockethub role in the run list 2021-07-14 10:14:38 +02:00
greg 383a46676e Create a role for sockethub 2021-07-14 10:14:28 +02:00
greg eed27713ff Add the sockethub firewall rule to centaurus 2021-07-14 10:14:07 +02:00
greg b5e7e4ab85 Use DNS validation to generate/renew the TLS cert 2021-07-14 10:13:35 +02:00
greg 7c2aae6650 Add sockethub to nodejs-2's run list 2021-07-09 11:52:58 +02:00
greg d135b3873c Switch to a systemd unit Chef resource 2021-07-09 11:32:33 +02:00
greg e9c86081f7 Update sockethub to the latest npm release 2021-07-09 11:32:11 +02:00
greg b8ac5e1c07 Merge branch 'master' into feature/145-sockethub_from_npm 2021-07-09 10:51:02 +02:00
greg 9a3565c11f Only keep the knife-zero gem in the Gemfile
The rest is already shipped with Chef Workstation
2021-06-15 22:21:04 +02:00
greg 87d50d067c Add updated upstream nodejs cookbook
... and its new dependency, chocolatey
2021-04-09 13:18:35 +02:00
greg edf2e071e4 Upgrade nodejs to the latest version from the repo
This is possible in newer versions of the nodejs cookbook, by setting
the `node["nodejs"]["package_action"]["nodejs"]` attribute to `:upgrade`
2021-03-30 13:58:55 +02:00