38 Commits

Author SHA1 Message Date
Greg Karékinian
e6b7794e20 Extract firewall definitions to their own recipe
This allows us to use them for KVM hosts as well. Until now we had set
up ufw rules manually on the two KVM hosts (draco and centaurus)

Refs #244
2020-12-04 16:27:42 +01:00
3d8d31c32f
Fix kosmos-ipfs not requiring nodejs/npm
If node isn't installed on a machine by something else before running
the kosmos-ipfs recipe, then it fails.
2020-09-24 17:39:28 +02:00
Greg Karékinian
34d69dbca1 Add missing application_javascript dependency 2019-09-27 11:07:15 +02:00
Greg Karékinian
9c8befc179 Move attributes from the ipfs cookbook to kosmos-ipfs
The default attributes set in the ipfs cookbook do not include
attributes that are specific to Kosmos anymore
2019-07-05 15:38:30 +02:00
Greg Karékinian
cf4e567dcb Get rid of the letsencrypt recipe
Its content has been moved to the public_gateway recipe
2019-07-04 10:24:33 +02:00
f4990a8066
Switch from IPFS cluster to kredits-ipfs-pinner
This removes the cluster configuration and adds deployment of Kredits
IPFS Pinner. It also switches hubot-kredits to use the normal API
endpoint again (instead of the cluster port).

Furthermore, it upgrades go-ipfs to the latest version.
2019-07-03 15:34:42 +02:00
f1d58f6172
Add IPFS gateway for document GETs
This adds a gateway endpoint for `http://ipfs.kosmos.org` on port 443
with support for `/ipfs/$objectHash` in order to GET documents from the
local gateway API.
2019-07-01 15:14:06 +02:00
Greg Karékinian
61607f77c4 Update ipfs-cluster to 0.10.1
ipfs-cluster-ctl commands such as `pin rm` now work

Closes #48
2019-04-30 12:58:10 +02:00
Greg Karékinian
c186ebf703 Update go-ipfs to 0.4.20
https://github.com/ipfs/go-ipfs/blob/v0.4.20/CHANGELOG.md
2019-04-25 19:20:16 +02:00
Greg Karékinian
94cb7c8e20 Add the id endpoint to our IPFS reverse proxy 2019-04-18 11:00:22 +02:00
Greg Karékinian
57d0885d26 Change the licenses of hte kosmos cookbooks to MIT 2019-04-12 11:41:20 +02:00
Greg Karékinian
17f1b2a20a Create a nginx_certbot_site resource to remove duplication
It creates a folder, the nginx vhost for certbot and HTTP redirects, and
also runs certbot and recreates the nginx vhost that includes the TLS
cert
2019-03-15 19:03:28 +01:00
41db5b2b73
Use kosmos.org email address 2019-03-15 12:45:28 +07:00
a77580d6da
Use variable instead of hardcoding domain
The domain name is hardcoded exactly 12 times in just the letsencrypt
recipe.
2019-03-15 12:38:42 +07:00
Greg Karékinian
36e046ea73 Run certbot using the binary provided by the Ubuntu PPA 2019-03-14 10:52:44 +01:00
Greg Karékinian
33b8b39be2 Update ipfs and ipfs-cluster 2019-02-25 12:50:07 +01:00
Greg Karékinian
3ce78a9ef4 Merge branch 'master' into feature/25-ipfs_cluster 2018-10-26 17:54:05 +02:00
Greg Karékinian
a7871770b8 Remove an unnecessary require and letsencrypt recipe
This way kosmos-ipfs::default can be used without adding the Let's
Encrypt certificate
2018-10-26 17:46:47 +02:00
Greg Karékinian
2f87e7c07c Add the ability to override the IPFS port that nginx connects to
This allows us to use the API proxy from the cluster
2018-08-16 15:59:44 +02:00
Greg Karékinian
f31322ab81 Move the firewall rule for ipfs p2p to the right recipe 2018-08-16 15:59:06 +02:00
Greg Karékinian
de32a7c595 Remove the Let's Encrypt recipe from the default one
We only need one node with a TLS cert
2018-08-13 12:05:11 +02:00
Greg Karékinian
b36e6a718a Add a recipe that sets up the cluster and enables the firewall 2018-08-13 12:05:00 +02:00
Greg Karékinian
d0f2275ebb Fix the ipfs config
The whole thing was inconsistent and didn't work when creating a server
from scratch
2018-08-06 12:14:20 +02:00
Greg Karékinian
11db96b3a1 Update IPFS to the latest release
Also fix the ipfs config
2018-04-17 18:51:53 +02:00
b351bad994 Add object/data endpoint to IPFS nginx config
This is needed for the ipfs-api client to store data from e.g.
kosmos-web.
2017-06-15 14:49:57 -07:00
Greg Karékinian
0acc4e65e9 Fix the IPFS API URL for the get command 2017-06-09 15:35:16 +02:00
Greg Karékinian
cf48006a0a Add get endpoint to ipfs proxied API 2017-06-09 13:37:33 +02:00
Greg Karékinian
f96444d6f4 Move CORS headers from nginx to ipfs 2017-06-09 13:34:44 +02:00
e5f3121ee3 Improve CORS headers for IPFS proxy 2017-06-09 13:01:38 +02:00
Greg Karékinian
eaaaacf97f Remove placeholder text from generated Chef cookbooks 2017-05-08 12:07:32 +02:00
Greg Karékinian
2f0ff1f559 Fixed code styling 2017-04-28 15:45:59 +02:00
Greg Karékinian
6bea5b7567 Enable HTTP2 and HSTS 2017-04-07 18:20:43 +02:00
Greg Karékinian
de11c0d691 Set up an instance of Mastodon for Kosmos
Refs #19

Use new application cookbook, update our cookbooks
2017-04-06 21:20:51 +02:00
Greg Karékinian
2090bc6b10 Change the port for IPFS's nginx vhost 2017-03-31 19:23:10 +02:00
Greg Karékinian
f7de7e215a Move the CORS headers from IPFS to the nginx reverse proxy 2017-03-20 22:49:06 +00:00
Greg Karékinian
114503033b Initial nginx reverse proxy for the IPFS IP
It supports cat and add for now. I have tried it using the ipfs-api npm
module
2017-03-20 19:38:51 +00:00
Greg Karékinian
d52ef53ac8 Generate a Let's Encrypt certificate for IPFS 2017-03-20 13:26:03 +00:00
Greg Karékinian
08e778eb96 Split up kosmos config from the ipfs cookbook
Also do not connect IPFS to the local network to avoid getting our
server blocked by Hetzner
2017-03-03 15:30:30 +01:00