kosmos/chef
8
3 Fork 0
Code Issues 39 Pull Requests Projects 2 Activity
2,291 Commits 8 Branches 0 Tags
d3062d701f4066f79e4895fde998da595b448afc
Commit Graph
148 Commits
Author SHA1 Message Date
raucao cc9b324a18 Refactor kosmos-hubot to a data-driven model 
Replace the per-bot and per-vhost recipes with a single data-driven setup.

- resources/bot.rb (kosmos_hubot_bot): git checkout, npm install, generated
  external-scripts.json, extra files, and one hardened systemd unit for every
  hubot (Type=simple, Restart=always, RestartSec=2, TimeoutSec=10, PrivateTmp,
  ProtectSystem=full, NoNewPrivileges, PrivateDevices)
- recipes/default.rb: shared setup + loop over node['kosmos-hubot']['bots'];
  recipes/nginx.rb: loop over node['kosmos-hubot']['vhosts'];
  recipes/hal8000_extras.rb: augments the hal8000 bot (searched IPFS/RSK hosts,
  kredits .env, wallet) and declares no resources itself
- bot config and vhosts now live in attributes; secrets come from the encrypted
  credentials/hubot bag via secret_env
- Node 22.23.4; kosmos_redis replaces redisio; REDIS_URL uses ?<prefix>; the
  adapter is passed as -a <module>; botka gains hubot-incoming-webhook
- roles/hubot, nginx_proxy, openresty_proxy and the chef-nodes pointer updated
 2026-10-28 18:22:22 +04:00
raucao 44f86d3f07 Serve kredits-github via openresty, on Node 22 
Move kredits-github onto Node 22.23.4 and behind the openresty reverse proxy
on the proxy hosts, replacing its own nginx + the custom haproxy entry.

- pin Node 22.23.4; run the app with HOST=0.0.0.0 / NODE_ENV=production and
  open port 3000 to 10.1.1.0/24 so the proxy can reach it over ZeroTier
- create /opt/kredits-github owned by the deploy user before cloning
- add kredits-github::nginx_proxy (tls_cert_for + openresty_site, upstream
  from role:kredits_github) and register it in the openresty_proxy run list
- drop the app-node nginx recipe/template and its role entry
 2026-10-28 18:22:21 +04:00
raucao dea89ea2c0 Upgrade Sockethub to 5.0.0-beta.0, serve info page 2026-10-12 22:33:22 +02:00
raucao 2bb5b582ec Deploy Mastodon from now on 
The mastodon role now always deploys (deploy=true), so a plain converge rebuilds and restarts on new production-4.7 commits.
 2026-10-08 12:43:35 +02:00
raucao fb0c7b2b1c Add a build phase, make deployment revision-driven 
Split the deployment into kosmos-mastodon::build (checkout + bundle/yarn/assets, no database) and kosmos-mastodon::deploy (migrations + services), dispatched by the new 'build' attribute. Both phases are idempotent per checked-out revision via stamps, and the migration/restart/search-index chain is now triggered by the deployed revision instead of the git resource, so it still runs when the build was pre-staged.
 2026-10-07 18:08:22 +02:00
raucao 9dfdf6bc9b Remove the backup gem from Mastodon 
The shared backup cookbook hardcodes postgresql-client-12, which does not exist on Ubuntu 24.04. Drop the Mastodon backup recipe and its role inclusion; the PostgreSQL standby is the safety net. The backup cookbook itself is still used by other services.
 2026-10-07 17:53:57 +02:00
raucao 9fe5def5f9 Move Mastodon deploy flag to the mastodon role 
Set kosmos-mastodon.deploy to false as a role default, making it overridable per node, and drop the node-level attribute.
 2026-10-07 16:51:18 +02:00
raucao 911080ae81 Update/refactor Sockethub cookbook for 5.0 
See CHANGELOG.md for the important changes
 2026-09-22 16:45:16 +02:00
greg 0310f08d14 Switch to redisio cookbook version 8.0.0 
It switched to modern resources, see https://github.com/sous-chefs/redisio
 2026-09-21 19:26:50 +02:00
greg 010e2d0d64 Add zerotier ohai plugin to the base role 2026-07-11 17:34:39 +02:00
raucao ea69c7cec6 Add prometheus node exporter to base role 2026-07-04 15:45:57 +02:00
raucao 7396af5ca4 WIP Add node exporter 2026-07-04 14:15:33 +02:00
greg 765d0b080e WIP Initial kosmos_prometheus wrapper cookbook 2026-07-03 17:47:13 +02:00
greg 7810f9f373 Update Gitea to 1.26.4, Gitea Runner to 2.0.0 
Two avatar configs were moved to the admin settings.
 2026-07-01 14:28:31 +02:00
raucao 2169e7904c Add LDAP support for blossom-server 
Only available in our feature branch atm
 2026-05-19 16:32:03 +02:00
raucao 8afe2ad05d Update blossom whitelist 2026-05-14 07:51:23 +02:00
raucao f8ce544452 Set up Blossom server on blossom.kosmos.org 2026-04-18 16:37:00 +04:00
raucao 64d5d34d85 Update postgres roles 
Reset to normal/final
 2026-04-11 14:55:02 +04:00
raucao bc3f291bd2 WIP Prepare postgres for migration by replication 2026-04-10 08:25:55 +04:00
greg 1fb66092fc Update Gitea to 1.25.4 
Back to using the binary from upstream releases
 2026-02-13 11:15:07 +01:00
raucao 3492bec627 Use Gitea from source 2025-05-31 15:28:33 +04:00
raucaoandgreg d029d90214 Generate postgres user/db for akkounts, use credentials from env 
Co-authored-by: Greg Karékinian <greg@karekinian.com>
 2025-05-06 15:49:43 +04:00
raucao d35e57b90e Deploy substr 2024-12-09 21:19:13 +04:00
raucaoandgreg eb06926606 Migrate S3 backups from AWS, fix automatic cleanups 
The cleanups were broken in that every single archive was also copied to
a shared folder and never deleted from there.

Co-authored-by: Greg Karékinian <greg@karekinian.com>
 2024-10-16 12:31:51 +02:00
raucao 752bb74663 Remove boltz service and RTL integration 
We use peerswap these days, and the build process for boltz was made
much more complicated at some point. Not worth upgrading for us.
 2024-10-16 12:23:38 +02:00
raucao 1c8ee14bb3 Add HTTP redirects for kosmos.chat and kosmos.cash 2024-08-04 16:49:20 +02:00
raucao d1301dad3e Add, configure, deploy strfry policies 2024-06-11 23:12:22 +02:00
raucao dbccd9d2bf Add kosmos_strfry cookbook, configs 2024-06-11 23:09:48 +02:00
raucao 49db14869d Merge pull request 'Add Liquor Cabinet cookbooks and configs, deploy to production' (#541) from feature/535-liquor_cabinet into master 
Reviewed-on: #541
 2024-02-04 13:47:05 +00:00
raucao 000a13cec4 Merge pull request 'Set up coturn, switch from ejabberd in production' (#532) from feature/coturn into master 
Reviewed-on: #532
 2024-02-04 13:46:50 +00:00
raucao b5020efdd5 Merge branch 'master' into feature/535-liquor_cabinet 2024-01-26 08:19:50 +03:00
raucao e10e54c12a Deploy liquor-cabinet proxy to production 2024-01-26 08:16:26 +03:00
raucao a2ec41b68a Add/use kosmos_liquor-cabinet cookbook 2024-01-25 17:42:56 +03:00
raucao 211a613e5c Add liquor-cabinet configs, deploy to production 2024-01-25 16:27:31 +03:00
raucao 88e96747e3 Add Redis replica recipe and role 2024-01-24 18:11:58 +03:00
raucao 1576a8e731 Set up coturn, switch from ejabberd in production 
https://github.com/coturn/coturn
 2023-12-17 15:20:11 +01:00
Râu Cao fbcf1ed5e7 WIP Add initial cookbook and roles for email service 2023-12-01 09:56:54 +01:00
Râu Cao 925a5da239 Upgrade RSKj to 5.3.0, deploy new nodes 
Adapted the cookbook for new nodes running on Jammy.
 2023-11-04 15:06:31 +01:00
Râu Caoandgreg 65d71d6a73 Migrate ejabberd uploads to mod_s3_upload and Garage 
In addition to installing and configuring the new module, this also
enables public access to the S3 API via `bucket-name.s3.kosmos.org` as
well as Web access on `bucket-name.web.s3.kosmos.org` (when enabled).

Also includes some drive-by improvements to Chef attribute naming and
usage.

Co-authored-by: Greg Karékinian <greg@karekinian.com>
 2023-10-10 17:55:55 +02:00
Râu Cao 0f12a54eab Refactor tor usage entirely 
Use a custom resource and separate recipe for service configs with
pre-set keys and hostnames
 2023-07-30 12:39:41 +02:00
Râu Cao 68b56789c5 Migrate ejabberd UDP streams to openresty 
And remove the other streams in the process, in favor of running haproxy
on all LBs.
 2023-07-30 12:39:36 +02:00
Râu Cao 438ee4ace0 Migrate Gitea SSH stream to openresty 2023-07-30 12:35:21 +02:00
Râu Cao cb0fc27134 Refactor tor usage, set up new tor proxy on draco 2023-07-29 16:26:20 +02:00
Râu Cao 53c35fda51 Migrate garage proxies to openresty 2023-07-26 16:42:48 +02:00
Râu Cao bb2f41fdb3 Migrate hubot proxies to openresty 2023-07-26 16:21:03 +02:00
Râu Cao 027d0ed570 Migrate IPFS proxies to openresty 2023-07-26 16:12:33 +02:00
Râu Cao 1362da0add Migrate RS Discourse proxy to openresty 2023-07-26 15:57:08 +02:00
Râu Cao 15b2ea284a Migrate mastodon proxy to openresty 2023-07-26 15:44:04 +02:00
Râu Cao ad59913555 Migrate lndhub proxy to openresty 2023-07-26 15:00:55 +02:00
Râu Cao 1bad2939de Migrate accounts API proxy to openresty 2023-07-26 15:00:43 +02:00