kosmos/chef
8
3
Fork 0
Code Issues 38 Pull Requests 2 Projects 2 Activity
355 Commits 9 Branches 0 Tags
fc265014de81c244fb31521b4b7c1eeba07ebdfd
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
greg fc265014de Switch back to the upstream nginx cookbook 
chef_nginx is deprecated
 2019-03-14 10:35:11 +01:00
greg 566e4278fd Update the ipfs cookbook 2019-03-13 15:11:02 +01:00
greg fee449f347 Set the ipfs user's shell to bash 2019-03-13 11:00:21 +01:00
greg b661f6780c Update chef, berkshelf and knife-solo gems 2019-02-26 14:51:56 +01:00
greg 886958270f Set REDIS_URL for botka 
It was using the same Redis key to write its brain as hal8000 (`hubot:storage`),
causing scores to not be persisted to Redis. Right now botka is only
saving the online users to the database. It looks like this was only
enabled recently, as the last saved score was from Feb 8

Fixes #14
 2019-02-25 18:29:18 +01:00
greg 5fc158cb5e Install the latest version of the backup gem 2019-02-25 18:28:55 +01:00
greg 2e1cdbecc6 Update the ipfs cookbook 2019-02-25 12:57:11 +01:00
greg 33b8b39be2 Update ipfs and ipfs-cluster 2019-02-25 12:50:07 +01:00
greg 56d14748f9 Fix the Let's Encrypt renew hook script 
Only copy over the certs to the prosody directory if it's the 5apps.com
wildcard, not for any 5apps.com subdomain
 2018-12-20 17:26:37 +01:00
greg 74a1f1b8a1 Update the ipfs cookbook to the latest version 2018-12-11 10:46:21 +01:00
greg 32b89422e7 Merge branch 'feature/5apps_xmpp_certs' into 'master' 
Automatically generate a Let's Encrypt cert for all 5apps xmpp domains

See merge request kosmos/chef!8
 2018-12-03 16:32:25 +00:00
greg 9c97cb4a58 Remove empty environment 2018-12-03 16:53:41 +01:00
greg 1e3f84ed9b Merge branch 'master' into feature/5apps_xmpp_certs 2018-12-03 16:52:26 +01:00
greg c1ea7d347d Merge branch 'bugfix/27-backup_notifications' into 'master' 
Fix backup gem notifications failing

Closes #27

See merge request kosmos/chef!13
 2018-11-09 17:07:22 +00:00
greg ffc6858dcc Do not pass the password on the command line anymore to fix a warning 
Since email notifications work now we do not want warnings. Write an
option file with the credentials for mysqldump
(https://dev.mysql.com/doc/refman/5.7/en/option-files.html)
 2018-11-09 14:08:32 +01:00
greg 7073e5d574 Fix backup gem notifications failing 
This was caused by a bogus PATH that did not include /usr/sbin. The root
user's default PATH includes that, so /usr/sbin/sendmail provided by
postfix is in it

Fixes #27
 2018-11-09 14:08:32 +01:00
greg 81c68a9609 Merge branch 'master' into feature/5apps_xmpp_certs 2018-11-08 14:13:09 +01:00
greg bb7dc26f43 Run IPFS Cluster on dev too 2018-10-26 18:30:13 +02:00
greg d65de56412 Add IPFS Cluster support 
See merge request kosmos/chef!7
 2018-10-26 16:29:40 +00:00
greg 3ce78a9ef4 Merge branch 'master' into feature/25-ipfs_cluster 2018-10-26 17:54:05 +02:00
greg edfe891f48 Add the kosmos-ipfs::letsencrypt recipe to Andromeda 
It has been extracted from the ipfs-kosmos::default recipe
 2018-10-26 17:51:16 +02:00
greg 5e973b6875 Use the kosmos-ipfs recipe in the hal8000 recipe 
This changes the port to not conflict with hubot and sets the gateway to
be writable
 2018-10-26 17:49:06 +02:00
greg a7871770b8 Remove an unnecessary require and letsencrypt recipe 
This way kosmos-ipfs::default can be used without adding the Let's
Encrypt certificate
 2018-10-26 17:46:47 +02:00
greg 4c7dc764a4 Add the updated Berksfile.lock 2018-10-26 17:06:03 +02:00
greg f0542bdf2e Update the ipfs cookbook 2018-10-26 17:02:30 +02:00
greg 4a42fc4ae3 Merge branch 'master' into feature/25-ipfs_cluster 2018-10-26 16:46:44 +02:00
greg 4dff379065 Merge branch 'feature/s3_oncall' into 'master' 
Set the S3 credentials to write the new oncall file

See merge request kosmos/chef!12
 2018-10-26 13:08:15 +00:00
greg d236d138dc Set the S3 credentials to write the new oncall file 2018-10-26 13:38:12 +02:00
greg 293d1a8a8a Fix formatting 2018-10-04 18:59:30 +02:00
greg 8da7ebbef0 Add initial docs for ejabberd 2018-10-04 18:56:35 +02:00
greg 185649a5f9 Automatically generate a Let's Encrypt cert for all 5apps xmpp domains 
Uses the Gandi LiveDNS API
 2018-09-04 17:38:17 +02:00
greg e6a3460a2c Make the number of sidekiq threads configurable, bump to 25 2018-09-03 19:11:42 +02:00
greg 1f528a832d Add a role to set up a cluster node with TLS 2018-08-16 16:01:24 +02:00
greg f626131868 Build a cluster node on Andromeda 2018-08-16 16:00:44 +02:00
greg 2f87e7c07c Add the ability to override the IPFS port that nginx connects to 
This allows us to use the API proxy from the cluster
 2018-08-16 15:59:44 +02:00
greg f31322ab81 Move the firewall rule for ipfs p2p to the right recipe 2018-08-16 15:59:06 +02:00
greg 741c4a5192 Move the ipfs cookbook to its own GitHub repository 2018-08-13 12:05:50 +02:00
greg de32a7c595 Remove the Let's Encrypt recipe from the default one 
We only need one node with a TLS cert
 2018-08-13 12:05:11 +02:00
greg b36e6a718a Add a recipe that sets up the cluster and enables the firewall 2018-08-13 12:05:00 +02:00
greg 7a8042e356 Add initial IPFS Cluster support 
It uses an encrypted data bag to store the cluster secret that has to be
the same on all members of a cluster. It installs ipfs-cluster-service
and ipfs-cluster-ctl and starts the cluster

Refs #25
 2018-08-06 18:05:44 +02:00
greg d0f2275ebb Fix the ipfs config 
The whole thing was inconsistent and didn't work when creating a server
from scratch
 2018-08-06 12:14:20 +02:00
greg 7165bf49c6 Add missing recipe, used to set up andromeda's firewall rules 2018-06-07 12:33:38 +02:00
greg 08172b7e04 Add node file for andromeda server 2018-04-17 18:55:48 +02:00
greg 44625ee017 Don't connect to IPFS through localhost in hal8000 
Use the new IPFS node on the new server
 2018-04-17 18:52:35 +02:00
greg 11db96b3a1 Update IPFS to the latest release 
Also fix the ipfs config
 2018-04-17 18:51:53 +02:00
greg b4624cf2aa Don't set the default variable to a type that's not allowed 2018-04-17 16:08:30 +02:00
greg b35c4bc097 Update Chef version 2018-04-17 16:08:15 +02:00
greg 14ad962f37 Add missing cookbook files 2018-04-17 16:05:39 +02:00
greg b92cc6e5d7 Update apt cookbook 2018-04-17 13:43:22 +02:00
greg 6a86fc64fa Add configuration for knife-solo 
Disable Berkshelf integration and set the version of Chef to install on
the server
 2018-04-17 13:42:38 +02:00
greg a35867f3d9 Update build-essential cookbook 2018-04-17 13:31:28 +02:00
greg dd47030301 Update firewall cookbook 2018-04-17 13:27:35 +02:00
greg c3933012dd We install nodejs from package, update paths 2018-04-17 13:19:23 +02:00
greg d26d2e17fd Install nodejs from packages instead of building from source 2018-04-17 13:19:03 +02:00
greg bd71418ec2 Changes for the new sudo cookbook 2018-04-17 13:18:36 +02:00
greg 157ccdc8b7 Update nodejs, sudo and users cookbooks 2018-04-17 13:18:09 +02:00
greg ff2f424ddb Update poise-archive and poise-service cookbooks 2018-04-17 12:24:17 +02:00
greg 90bb872305 Update poise-javascript and poise-ruby cookbooks 2018-04-17 12:21:48 +02:00
greg d3aa94aab5 Switch from Batali to Berkshelf to manage upstream cookbooks 2018-04-17 12:16:20 +02:00
greg 0c80aaabd4 Update Node to the latest LTS release (8.11.1) 2018-04-06 14:02:59 +02:00
greg 36813b38d6 Remove wordpress from the dev node 2018-03-20 16:09:19 +01:00
greg 8653a8fa97 Use jemalloc1 on Puma and Sidekiq to lower the memory usage 
More details:
https://www.speedshop.co/2017/12/04/malloc-doubles-ruby-memory.html
 2018-03-20 16:07:55 +01:00
greg b8853a1b5d Install lua-dbi-sqlite3 and set the prosody version 2018-03-20 16:06:28 +01:00
greg 6ae27293ce Set the number of ActiveRecord DB pools to 50 in the Sidekiq service 2018-02-28 15:11:22 +01:00
greg aaabeee1fb Remove extra empty external-scripts that disabled modules for botka 2017-10-27 10:34:48 +02:00
greg b967b9d035 Add bots to a new XMPP room 2017-10-18 15:39:04 +02:00
greg acf86e4038 Use a new Prosody Ubuntu repository to be able to update it 2017-10-17 15:32:03 +02:00
greg 49664dbc8d The renew hook now needs to be an executable in the path 
An absolute path doesn't work anymore.

Also send an email containing STDERR when the renewal command fails
 2017-09-22 11:53:01 +02:00
greg 063ebeb7c3 Update nodejs (security update) 2017-07-12 12:34:24 +02:00
greg 262fbd89b6 Specify the Chef version in the Vagrant config 
We don't need the vagrant-omnibus plugin anymore
 2017-07-12 12:12:45 +02:00
greg ffdec12606 Update Chef to 12.21.1 2017-07-12 12:12:45 +02:00
greg 0bb6204a0d Fix the Let's Encrypt setup for mediawiki 2017-06-19 18:40:20 +02:00
greg edca6608c7 Update mediawiki cookbook 2017-06-16 22:57:33 +02:00
greg bdfb3a1afb Downgrade mysql cookbook for now 
It doesn't play well with our current dev server setup
 2017-06-16 22:44:57 +02:00
greg ff3d062c73 Update users cookbook and poise cookbooks 
The poise cookbooks were incompatible with Chef 13
 2017-06-16 15:50:13 +02:00
greg f93070c4c0 Replace timezone-ii cookbook with timezone_iii 
This fork supports Chef 13 and is still maintained
 2017-06-16 13:10:46 +02:00
greg 189b66a36f Update Chef to 12.20.3 2017-06-16 11:43:24 +02:00
greg acd67151a0 Merge branch 'feature/ubuntu-16.04' into 'master' 
Support Ubuntu 16.04

See merge request !2
 2017-06-16 09:34:50 +00:00
greg 6711fc3a6e Merge branch 'master' into feature/ubuntu-16.04 2017-06-16 11:33:52 +02:00
greg f5858319a7 Update more cookbooks 2017-06-16 11:25:49 +02:00
greg 7da2c5a738 Add ntp cookbook 2017-06-09 21:23:42 +02:00
greg 49a9625d16 Just use plain HTTP in development environment 2017-06-09 21:20:00 +02:00
greg 488b50d54d Just use plain HTTP in development environment 2017-06-09 21:19:47 +02:00
greg 5534b57752 Add ntp package and don't run most kosmos-base things in development 2017-06-09 21:18:44 +02:00
greg 26097197ca Don't create users and rewrite the sudo config in dev environment 
It breaks the vagrant user
 2017-06-09 16:43:26 +02:00
greg c64383c2a4 Don't set up backups in development environment 2017-06-09 16:41:37 +02:00
greg 5385813eda Merge branch 'master' into feature/ubuntu-16.04 2017-06-09 16:36:19 +02:00
greg afc07c3192 Add more secure sudo configuration 
Also update the sudo cookbook
 2017-06-09 16:08:36 +02:00
greg 0acc4e65e9 Fix the IPFS API URL for the get command 2017-06-09 15:35:16 +02:00
greg cf48006a0a Add get endpoint to ipfs proxied API 2017-06-09 13:37:33 +02:00
greg f96444d6f4 Move CORS headers from nginx to ipfs 2017-06-09 13:34:44 +02:00
greg 9065db8476 Update mastodon cookbook for 1.4.1 
There is a strange issue with assets precompilation. I have found a
workaround but it looks like a bug in application_ruby (in production I
fixed it manually)
 2017-06-02 18:30:57 +02:00
greg b7e395f122 Update application_ruby cookbook 2017-06-02 18:30:48 +02:00
greg 892d02bf2d Deploy XMPP schlupp's master branch again 2017-05-17 12:13:43 +02:00
greg 78c377e07f Add parity role to the dev server 2017-05-09 00:05:20 +02:00
greg 541599434d Update the mainnet recipe 2017-05-09 00:04:39 +02:00
greg 383d3adaae Add parity testnet 2017-05-09 00:02:07 +02:00
greg 5b49d727a6 Enable Dapps 
It's required after all, but doesn't need to have its port open
 2017-05-08 22:59:57 +02:00
greg 82386b44ba Add missing backup recipe 2017-05-08 22:59:40 +02:00
greg 58c9ccc48c Fix the Let's Encrypt config for Parity 
The SSL port wasn't set in the variables
 2017-05-08 22:58:39 +02:00