kosmos/chef
8
3
Fork 0
Code Issues 38 Pull Requests 1 Projects 2 Activity
1,645 Commits 7 Branches 0 Tags
b550c1b79ee5ba599b2b728da6ea644be4ba0a98
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
greg b550c1b79e Remove deleted servers 2023-06-29 16:58:28 +02:00
greg 1f29d8a01a Get rid of compat_resource and mariadb 2023-06-29 16:49:06 +02:00
greg 462bdabf01 Get rid of the chef-sugar dependency 
It's now deprecated
 2023-06-29 16:41:08 +02:00
greg 7683de09a2 Update the elasticsearch cookbook 2023-06-29 16:39:09 +02:00
greg 68ce3c4834 Update the firewall cookbook to the latest version 
This gives us comments from the named resources
 2023-06-29 15:08:44 +02:00
greg 916ae8094c Get rid of the build-essential cookbook 
The build_essential resource has been part of Chef since 14.0
 2023-06-29 14:48:49 +02:00
greg 05834b6013 Get rid of the application and poise cookbooks 2023-06-28 18:59:31 +02:00
greg d7bc5e6f08 Update Chef on these servers 2023-06-28 18:55:13 +02:00
greg b7d17c1ad7 Replace application cookbook with git resource 2023-06-28 18:55:05 +02:00
greg 54098a450c Replace application cookbook with git resource 2023-06-28 18:54:38 +02:00
greg 3a5a038f7e Replace application cookbook with git resource 2023-06-28 18:53:59 +02:00
greg 3cf9c3868b Deploy mastodon without the application cookbooks 2023-06-28 17:23:05 +02:00
greg 57fdf0723f Deploy RTL without the deprecated application cookbook 2023-06-28 16:35:57 +02:00
greg 9378df23db Remove unused lndhub recipe 2023-06-28 16:35:56 +02:00
greg 88caae26e4 Install the latest backup gem 
It added a few dev dependencies, install them
 2023-06-28 16:35:56 +02:00
greg 0564165e81 Override the attributes in attributes, not the default recipe 2023-06-28 16:35:56 +02:00
greg ddeebc739d Update chef-sugar to fix a conflict in Chef 16+ 2023-06-28 16:35:56 +02:00
greg b9cf396d42 Deploy akkounts without the application_git cookbook 
Use the built-in git resource from Chef instead. poise/application does
not work on modern Chef.
 2023-06-28 16:35:56 +02:00
greg d1a4e4cbc5 Merge branch 'master' into feature/488-redis_server 2023-06-28 14:15:30 +02:00
greg b19fca6e7c Add firewall rule to allow access to Redis on Zerotier network 2023-06-20 15:19:34 +02:00
greg 76a952dbac Add missing Berksfile changes 2023-06-19 16:13:08 +02:00
greg 3fb89517ab Add redis_server role to redis-1 2023-06-19 16:08:59 +02:00
greg 44e23ffa1f Merge branch 'master' into feature/488-redis_server 2023-06-19 16:08:44 +02:00
greg 6116729907 Set up Redis using the latest version of redisio 
This replaces the deprecated redis cookbook. Compiles the latest version
of Redis, currently 7.0.11

Refs #488
 2023-06-19 16:02:58 +02:00
greg 0c4466b040 Namespace the smtp attributes 2023-03-27 10:49:12 +02:00
greg 34970fe3cf Set a better name for the from address 2023-03-27 10:48:56 +02:00
greg 3873ebaac2 Don't override the SMTP config with the same values 2023-03-27 10:45:02 +02:00
greg 4f1fb347a8 Add new SMTP config for akkounts 
This is not running on akkounts-1

closes #479
refs kosmos/akkounts#107
 2023-03-24 16:55:11 +01:00
greg 5a5f8425af Add missing postgresql-client package for backup gem 2022-11-07 16:30:45 +01:00
greg 97fe328312 Add missing pg_db recipe on postgresql_primary role 2022-11-07 16:30:02 +01:00
greg ed04753318 Update mastodon-3 node after chef run 2022-11-07 16:28:09 +01:00
greg 4bfb7d5f5d Extract mastodon db backup to its own recipe 2022-11-07 16:22:15 +01:00
greg fe8e66fda3 Add the new rs-discourse-1 server 2022-10-11 18:00:48 +02:00
greg 410c238450 Update the discourse-2 and fornax nodes after Chef run 2022-10-11 18:00:31 +02:00
greg 378fee85ec Create a discourse cookbook that can be wrapped 
It makes it possible to serve multiple Discord instances to different
hosts from a single nginx load balancer

Right now we run one for Kosmos and one for remoteStorage
 2022-10-11 17:58:22 +02:00
greg 1270488ef9 Remove ldap-2 VM 2022-10-03 14:45:00 +02:00
greg e4d4aa45f7 Use FQDN for hostname, add LDAP server 2022-08-22 16:16:01 +02:00
greg 85abfd4e5e Create the required groups and ACIs 2022-08-22 16:15:02 +02:00
greg 32f620e95c Update the wiki-1 node after Chef run 2022-05-11 16:23:18 +02:00
greg e766a96d3b Update the discourse-2 node after Chef run 2022-05-11 16:23:18 +02:00
greg a14cd9a74f New config for LDAP in Discourse 2022-05-11 16:23:18 +02:00
greg 0d133de1b8 New config and credentials for LDAP connection in mediawiki 2022-05-11 16:23:17 +02:00
greg 5c00e2d28a Add an attribute containing the LDAP server's address 2022-05-11 15:37:36 +02:00
greg c56870008e Use the new LDAP services application accounts 2022-05-11 14:49:28 +02:00
greg e53e55cb2d Disable TLS for LDAP since we're using Zerotier networking 2022-05-11 14:49:00 +02:00
greg ff7cb1ce4a Generate a hosts entry for the LDAP server 2022-05-11 14:48:30 +02:00
greg 1502d1956d Set new passwords for the LDAP service accounts 2022-05-11 14:47:32 +02:00
greg 907706d1d2 Set up the hosts entry for the new LDAP server 2022-05-10 11:50:49 +02:00
greg b869002c1a Update Gitea to 1.16.6 2022-05-10 11:50:35 +02:00
greg 7ffd3bbf73 Add LDAP's Zerotier IP to the akkount server's hosts 2022-04-28 12:12:10 +02:00
greg ee6bde5b23 Update discourse-1 node after running Chef 2022-02-18 20:00:18 +01:00
greg 58f2544a9e Remove the discourse role from centaurus 2022-02-18 19:59:17 +01:00
greg 98547088f1 Add the zerotier IP for fornax 2022-02-18 19:58:59 +01:00
greg 7582cafb77 Explicitly install snapd package 
It was not installed on fornax for example
 2022-02-18 19:42:43 +01:00
greg 31631ddc4a Add missing recipe 2022-02-18 19:39:04 +01:00
greg 79f623de4e Prepare fornax and discourse-1 for the discourse migration 2022-02-18 18:15:33 +01:00
greg e8f46db49c Extract the nginx config for discourse to a recipe 
Get the upstream servers automatically from Chef nodes
 2022-02-18 18:14:33 +01:00
greg 685deea920 Simplify dirsrv setup 
Connecting directly using zerotier, no more nginx
 2021-12-02 19:08:27 +01:00
greg d1d48cb749 Add role for ldap (dirsrv) 2021-12-02 19:08:16 +01:00
greg 067f5ba0d9 Add node config for ldap-1 2021-12-02 19:07:55 +01:00
greg e00d6c3a86 Use the sockethub role in the run list 2021-07-14 10:14:38 +02:00
greg 383a46676e Create a role for sockethub 2021-07-14 10:14:28 +02:00
greg eed27713ff Add the sockethub firewall rule to centaurus 2021-07-14 10:14:07 +02:00
greg b5e7e4ab85 Use DNS validation to generate/renew the TLS cert 2021-07-14 10:13:35 +02:00
greg 7c2aae6650 Add sockethub to nodejs-2's run list 2021-07-09 11:52:58 +02:00
greg d135b3873c Switch to a systemd unit Chef resource 2021-07-09 11:32:33 +02:00
greg e9c86081f7 Update sockethub to the latest npm release 2021-07-09 11:32:11 +02:00
greg b8ac5e1c07 Merge branch 'master' into feature/145-sockethub_from_npm 2021-07-09 10:51:02 +02:00
greg 9a3565c11f Only keep the knife-zero gem in the Gemfile 
The rest is already shipped with Chef Workstation
 2021-06-15 22:21:04 +02:00
greg 87d50d067c Add updated upstream nodejs cookbook 
... and its new dependency, chocolatey
 2021-04-09 13:18:35 +02:00
greg edf2e071e4 Upgrade nodejs to the latest version from the repo 
This is possible in newer versions of the nodejs cookbook, by setting
the `node["nodejs"]["package_action"]["nodejs"]` attribute to `:upgrade`
 2021-03-30 13:58:55 +02:00
greg f937e5dc68 Set the environment variables in the hubot-kredits dir 
This is meant to be executed as a script manually, not as part of Hubot.

Example usage:

    cd /opt/hal8000_xmpp/node_modules/hubot-kredits
    ./scripts/review-kredits.js --start 2021-02-01 --end 2021-02-28T23:59:59Z --dry

Closes #315
 2021-03-30 13:54:21 +02:00
greg 346b6540d1 Fix an undefined variable 2021-03-30 12:14:40 +02:00
greg 45817ba997 Update the barnard node file after running Chef 2021-03-30 12:12:27 +02:00
greg 9415b71965 Deploy hubot with new hubot-kredits 
It includes a script for creating Kredits for reviews

Refs #135
 2021-03-30 12:11:03 +02:00
greg 90ce664f2e Update ejabberd to 20.12 
It fixes a bug that prevented the config to be reloaded for LDAP options
(https://github.com/processone/ejabberd/issues/3181) and more:
https://www.process-one.net/blog/ejabberd-20-12/
 2021-01-24 10:14:29 +01:00
greg 0e5519a4b7 Update Gitea to 1.13.1 
Running on centaurus

Closes #253
 2021-01-24 10:12:37 +01:00
greg 1ad7a6936c Generate the hosts entry for the PostgreSQL replica 2021-01-24 10:11:17 +01:00
greg b1fea4b09f Update the postgres-3 node after Chef run 2021-01-23 19:25:49 +01:00
greg 7ce8b7d461 Enable PostgreSQL service 2021-01-23 19:14:55 +01:00
greg 112eb903ec Add a script to switch the primary PostgreSQL server 
Usage: scripts/postgresql/switch_primary.sh <old_primary_hostname> <new_primary_hostname>
 2021-01-23 19:13:54 +01:00
greg 7e61e9cb45 Promote a new PostgreSQL primary: postgres-2 2021-01-23 19:09:41 +01:00
greg a7116b8fe5 Switch the TLS mode to disabled for Gitea 
We connect through a Zerotier private IP
 2021-01-23 19:08:06 +01:00
greg a4a35da0ff Replace the hardcoded primary pg IP with a hostname 2021-01-23 17:34:58 +01:00
greg 5cb390f340 Remove the postgresql_replica from centaurus, run Chef 
I have also deleted the data directory (in /mnt/data)
 2021-01-23 17:11:45 +01:00
greg 4e1bd458f3 Update the mastodon-1 node after Chef run 2021-01-23 17:11:45 +01:00
greg 40fde8a861 Update the ejabberd nodes after Chef run 2021-01-23 17:11:45 +01:00
greg 39d0304ab4 Update the akkounts-1 node after Chef run 2021-01-23 17:11:45 +01:00
greg ee7b3626be Generate a host entry for the current PostgreSQL primary 2021-01-23 17:11:45 +01:00
greg 286cd2f2a3 Move the postgresql_client role to the top 
We want the host file to be written before database connections happen
 2021-01-23 17:11:45 +01:00
greg 1e3a2b40d4 Add the postgresql_client role to the akkounts role 2021-01-23 17:11:45 +01:00
greg bb0e73d1b9 Switch ejabberd, mastodon and gitea to a hostname for Postgres 2021-01-23 17:11:45 +01:00
greg fdd70d1872 Remove postgres-1 server 
It was created with an encfs volume inside a VM, we want full disk encryption
instead. I have deleted the VM from centaurus as well as its disk and
have also unauthorized its id from the zerotier controller
 2021-01-23 17:11:45 +01:00
greg 41ca5938a2 Merge branch 'master' into feature/postgres_vms 2021-01-23 14:43:58 +01:00
greg 6ec747d416 Add missing credentials for zerotier 2021-01-22 18:43:05 +01:00
greg cbcb50bc86 Create a zerotier_controller role 2021-01-22 18:41:46 +01:00
greg eba7d63b43 Delete the test-2 client and node file 2021-01-22 18:41:46 +01:00
greg 5fa23fe872 Remove the andromeda client and node files 2021-01-22 18:41:46 +01:00
greg 0e1a73b18f Set the private Zerotier IP for draco in the node file 2021-01-22 18:41:46 +01:00
greg 9b4756441a Add a recipe to join the private Zerotier network 2021-01-22 18:41:45 +01:00