kosmos/chef
8
3 Fork 0
Code Issues 39 Pull Requests Projects 2 Activity
2,293 Commits 8 Branches 0 Tags
e53df92b577488486ffee1c5e93b0b4a44c37ce7
Commit Graph
12 Commits
Author SHA1 Message Date
raucao cc9b324a18 Refactor kosmos-hubot to a data-driven model 
Replace the per-bot and per-vhost recipes with a single data-driven setup.

- resources/bot.rb (kosmos_hubot_bot): git checkout, npm install, generated
  external-scripts.json, extra files, and one hardened systemd unit for every
  hubot (Type=simple, Restart=always, RestartSec=2, TimeoutSec=10, PrivateTmp,
  ProtectSystem=full, NoNewPrivileges, PrivateDevices)
- recipes/default.rb: shared setup + loop over node['kosmos-hubot']['bots'];
  recipes/nginx.rb: loop over node['kosmos-hubot']['vhosts'];
  recipes/hal8000_extras.rb: augments the hal8000 bot (searched IPFS/RSK hosts,
  kredits .env, wallet) and declares no resources itself
- bot config and vhosts now live in attributes; secrets come from the encrypted
  credentials/hubot bag via secret_env
- Node 22.23.4; kosmos_redis replaces redisio; REDIS_URL uses ?<prefix>; the
  adapter is passed as -a <module>; botka gains hubot-incoming-webhook
- roles/hubot, nginx_proxy, openresty_proxy and the chef-nodes pointer updated
 2026-10-28 18:22:22 +04:00
Râu Cao 90f66c74d2 Refactor RSK nginx sites for proxy/lb usage 2023-06-18 16:55:38 +02:00
Râu Cao 8225e1b67b Move akkounts nginx to nginx proxy 2023-03-02 18:05:37 +08:00
Râu Cao fb1206d03f Refactor bitcoin-related roles and node config 2022-12-22 19:35:41 +07:00
Râu Cao 66f5217a41 Refactor Mastodon nginx recipe for proxy usage 
Works both as local deployment and proxy (via roles and environments)

* Use upstreams for proxy_pass
* Access static assets from proxy, configure caching for them
* Move Tor config to environment, install via role
* ...
 2022-11-30 12:02:17 +01:00
Râu Cao d06f5d7723 Set up fail2ban for nginx, move IPFS gateway to proxy role 2022-11-24 14:02:43 +01:00
Râu Cao 65933bef4b Move hubot nginx sites to proxy role, deploy to fornax 2022-11-04 14:41:21 +01:00
greg 378fee85ec Create a discourse cookbook that can be wrapped 
It makes it possible to serve multiple Discord instances to different
hosts from a single nginx load balancer

Right now we run one for Kosmos and one for remoteStorage
 2022-10-11 17:58:22 +02:00
basti 92d1bcd8c7 Add nginx proxy for akkounts/kredits API 
closes #410
 2022-05-24 15:03:51 +02:00
basti c158f845f0 Configure STUN/TURN for ejabberd and nginx proxy 2022-05-11 15:27:49 +02:00
basti 4cd0149f76 Move static sites from centaurus to fornax/LB 2022-03-17 14:27:50 -06:00
basti 0a953070fe Create nginx_proxy role 
Used to configure hosts entries in the Gitea and Drone VMs, as well as
the allowed webhooks config for Gitea.
 2022-03-12 15:39:07 -06:00