kosmos/chef
kosmos/chef
8
3
Fork 0
Code Issues 26 Pull Requests 2 Projects 2 Activity
1,155 Commits 6 Branches 0 Tags
Commit Graph

716 Commits

Author SHA1 Message Date
Greg Karékinian
448bffe34e Get rid of the deprecated set_unless 2019-04-03 12:56:15 +02:00
Greg Karékinian
b1a3c5e2cd Revert "Revert "Remove the sudo cookbook"" 
This reverts commit 87d7c721b16356a3607f9462916e6b04a93dbad5.
 2019-04-03 12:52:40 +02:00
Greg Karékinian
2f05629fde Revert "Revert "Update Chef to 14.11.21"" 
This reverts commit db4b45b5c26c50c7b883d0f96b2a9a5136f26b58.
 2019-04-03 12:52:32 +02:00
Greg Karékinian
6b9ce81212 Set postgresql password from an encrypted data bag 2019-04-03 11:34:59 +02:00
Greg Karékinian
d8a0ecec76 Update the postgresql cookbook 2019-04-03 11:34:41 +02:00
Greg Karékinian
85b7278ccc Add initial kosmos-postgresql cookbook 
This is to install PostgreSQL all in one place instead of for each
service that needs it (Mastodon, ejabberd, ...)
 2019-04-03 11:34:34 +02:00
Greg Karékinian
1ef24a2091 Install bundler 1.17.3 since we're still on Ruby 2.5 for now 
Bundler 2.0 needs Ruby 2.6 or RubyGems 3.0
 2019-04-03 11:02:51 +02:00
Greg Karékinian
58b5e5ac22 Move the creation of the SystemD service files outside of the application 
This prevents a crash on the initial Chef run due to the service files
not being there yet before the services gets notified to restart
 2019-04-03 11:02:25 +02:00
Greg Karékinian
87d7c721b1 Revert "Remove the sudo cookbook" 
This reverts commit 73d1722d4b5c545ec488c5eb2119dd8b9b155363.
 2019-04-03 10:30:38 +02:00
Greg Karékinian
db4b45b5c2 Revert "Update Chef to 14.11.21" 
This reverts commit 2f599ffd6d757bc98ac862836110c7b32cda3c51.
 2019-04-03 10:30:24 +02:00
Greg Karékinian
73d1722d4b Remove the sudo cookbook 
Chef 14 ships with a sudo resource:
https://docs.chef.io/resource_sudo.html
 2019-04-02 12:17:06 +02:00
Greg Karékinian
2f599ffd6d Update Chef to 14.11.21 
Closes #21
 2019-04-02 12:16:13 +02:00
Greg Karékinian
5fa0fa661b Install certbot from the direct download when on 15.04 
It does not have a ppa release. Add a cron job for renewal. When using
the PPA a Systemd timer is part of the package
 2019-03-18 16:52:05 +01:00
Greg Karékinian
17f1b2a20a Create a nginx_certbot_site resource to remove duplication 
It creates a folder, the nginx vhost for certbot and HTTP redirects, and
also runs certbot and recreates the nginx vhost that includes the TLS
cert
 2019-03-15 19:03:28 +01:00
Greg Karékinian
b30dcab4da Remove an IPFS port from the ejabberd firewall 2019-03-15 12:30:56 +01:00
Sebastian Kippe
41db5b2b73
Use kosmos.org email address 2019-03-15 12:45:28 +07:00
Sebastian Kippe
a77580d6da
Use variable instead of hardcoding domain 
The domain name is hardcoded exactly 12 times in just the letsencrypt
recipe.
 2019-03-15 12:38:42 +07:00
Greg Karékinian
c3135402ad Move the nginx hook to the deploy directory, create renewal-hooks dir 2019-03-14 20:21:34 +01:00
Greg Karékinian
f50f48b55b Remove the old deploy hook, we moved it to the certbot config dir 2019-03-14 18:07:52 +01:00
Greg Karékinian
a978f2a6a5 Fix the path to the Gandi DNS certbot script 2019-03-14 18:06:55 +01:00
Greg Karékinian
f12ddefec8 Move the Gandi DNS hook for certbot to the kosmos-base cookbook 2019-03-14 18:01:29 +01:00
Greg Karékinian
65482f09c3 Extract the post hooks to their own script in Certbot's config dir 2019-03-14 15:21:50 +01:00
Greg Karékinian
36e046ea73 Run certbot using the binary provided by the Ubuntu PPA 2019-03-14 10:52:44 +01:00
Greg Karékinian
fa27187f11 Switch from the git version of certbot to the Ubuntu PPA 2019-03-14 10:49:47 +01:00
Greg Karékinian
fc265014de Switch back to the upstream nginx cookbook 
chef_nginx is deprecated
 2019-03-14 10:35:11 +01:00
Sebastian Kippe
19ad46036f
Update Cleantalk extension to latest version 
Running on the server already
 2019-03-04 18:22:29 +07:00
Sebastian Kippe
0ea1971b6c
Open up some more ports in firewall 
From some manual playing around.
 2019-02-28 17:19:06 +07:00
Greg Karékinian
886958270f Set REDIS_URL for botka 
It was using the same Redis key to write its brain as hal8000 (`hubot:storage`),
causing scores to not be persisted to Redis. Right now botka is only
saving the online users to the database. It looks like this was only
enabled recently, as the last saved score was from Feb 8

Fixes #14
 2019-02-25 18:29:18 +01:00
Greg Karékinian
5fc158cb5e Install the latest version of the backup gem 2019-02-25 18:28:55 +01:00
Greg Karékinian
33b8b39be2 Update ipfs and ipfs-cluster 2019-02-25 12:50:07 +01:00
Sebastian Kippe
f082269e66
Use Gitea repo, new branch, new Ruby 2019-01-27 12:46:21 +08:00
Greg Karékinian
56d14748f9 Fix the Let's Encrypt renew hook script 
Only copy over the certs to the prosody directory if it's the 5apps.com
wildcard, not for any 5apps.com subdomain
 2018-12-20 17:26:37 +01:00
Greg Karékinian
9c97cb4a58 Remove empty environment 2018-12-03 16:53:41 +01:00
Greg Karékinian
1e3f84ed9b Merge branch 'master' into feature/5apps_xmpp_certs 2018-12-03 16:52:26 +01:00
Greg Karékinian
ffc6858dcc Do not pass the password on the command line anymore to fix a warning 
Since email notifications work now we do not want warnings. Write an
option file with the credentials for mysqldump
(https://dev.mysql.com/doc/refman/5.7/en/option-files.html)
 2018-11-09 14:08:32 +01:00
Greg Karékinian
7073e5d574 Fix backup gem notifications failing 
This was caused by a bogus PATH that did not include /usr/sbin. The root
user's default PATH includes that, so /usr/sbin/sendmail provided by
postfix is in it

Fixes #27
 2018-11-09 14:08:32 +01:00
Greg Karékinian
81c68a9609 Merge branch 'master' into feature/5apps_xmpp_certs 2018-11-08 14:13:09 +01:00
Sebastian Kippe
90851fb7de Update Mastodon's Ruby 2018-11-01 12:19:30 +01:00
Greg Karékinian
3ce78a9ef4 Merge branch 'master' into feature/25-ipfs_cluster 2018-10-26 17:54:05 +02:00
Greg Karékinian
5e973b6875 Use the kosmos-ipfs recipe in the hal8000 recipe 
This changes the port to not conflict with hubot and sets the gateway to
be writable
 2018-10-26 17:49:06 +02:00
Greg Karékinian
a7871770b8 Remove an unnecessary require and letsencrypt recipe 
This way kosmos-ipfs::default can be used without adding the Let's
Encrypt certificate
 2018-10-26 17:46:47 +02:00
Sebastian Kippe
c0358f5c9b Split hubot into separate recipes, add ipfs to hal8000 2018-10-26 17:40:33 +02:00
Greg Karékinian
4a42fc4ae3 Merge branch 'master' into feature/25-ipfs_cluster 2018-10-26 16:46:44 +02:00
Greg Karékinian
d236d138dc Set the S3 credentials to write the new oncall file 2018-10-26 13:38:12 +02:00
Sebastian Kippe
c90ccfcf9e Merge branch 'feature/ipfs' 2018-09-09 15:47:26 +08:00
Sebastian Kippe
4bccf4dd88 Fix missing Mastodon/PosgreSQL backups 
The backup cookbook was incomplete, and also there was no database
configured to be backed up.
 2018-09-08 12:54:51 +08:00
Greg Karékinian
185649a5f9 Automatically generate a Let's Encrypt cert for all 5apps xmpp domains 
Uses the Gandi LiveDNS API
 2018-09-04 17:38:17 +02:00
Sebastian Kippe
214e69427e Open up port for Prosody HTTP uploads 2018-09-04 14:14:02 +08:00
Greg Karékinian
e6a3460a2c Make the number of sidekiq threads configurable, bump to 25 2018-09-03 19:11:42 +02:00
Greg Karékinian
2f87e7c07c Add the ability to override the IPFS port that nginx connects to 
This allows us to use the API proxy from the cluster
 2018-08-16 15:59:44 +02:00