Râu Cao
401b03cc1e
Use Ubuntu 22.04 for new VMs
...
Also, remove the custom config image generation and replace it with
`--cloud-init` options.
2024-06-07 20:53:20 +02:00
f843a31e03
Merge pull request 'Improve mail server TLS certificate management' ( #556 ) from chore/mail_server_cert into master
...
Reviewed-on: #556
Reviewed-by: Greg <greg@noreply.kosmos.org >
2024-06-05 14:49:01 +00:00
ff313525c8
Reload postfix and dovecot on cert renewal
...
closes #552
Co-authored-by: Greg Karékinian <greg@karekinian.com >
2024-06-05 16:44:18 +02:00
cfb379741e
Add imap and smtp subdomains to mail server cert
...
closes #543
Co-authored-by: Greg Karékinian <greg@karekinian.com >
2024-06-05 15:55:29 +02:00
0c29fad404
Remove superfluous license header
...
Co-authored-by: Greg Karékinian <greg@karekinian.com >
2024-06-05 15:50:09 +02:00
416935d8b5
Merge pull request 'Upgrade Gitea to 1.22' ( #555 ) from chore/upgrade_gitea into master
...
Reviewed-on: #555
2024-06-02 21:18:07 +00:00
2b6f81c5d6
Upgrade Gitea to 1.22
2024-06-02 23:17:16 +02:00
18496bb0da
Merge pull request 'Configure akkounts for nostr zaps' ( #554 ) from chore/akkounts_config into master
...
Reviewed-on: #554
2024-06-02 21:05:15 +00:00
d878b4208e
Configure akkounts for nostr zaps
2024-06-02 23:03:06 +02:00
d31440d235
Add CORS headers to kosmos.social LNURL paths
2024-06-02 23:02:22 +02:00
6f287f14ef
Deploy live branch
2024-06-02 23:01:49 +02:00
b77df3d0db
Update email aliases
2024-05-16 14:34:09 +02:00
f7f5a0069d
Merge pull request 'Add support for proxy domain validation to tls_cert resource' ( #553 ) from feature/letsencrypt_proxy_validation into master
...
Reviewed-on: #553
Reviewed-by: Greg <greg@noreply.kosmos.org >
2024-05-08 12:30:29 +00:00
989185f951
Support proxy domain validation for Garage web domains
...
Also rename the data bag item
2024-04-30 12:23:36 +02:00
4cbda69a6b
Add support for proxy domain validation to tls_cert resource
2024-04-26 12:24:17 +02:00
6931fe05d0
Hide Gitea version and load times in footer
2024-04-07 13:16:19 +03:00
b248ef70db
Upgrade Gitea to 1.21.10
2024-04-07 13:10:10 +03:00
45159ad4e7
Resolve Mastodon addresses as Lightning Address
2024-03-31 08:27:20 +04:00
612cd0c55e
Merge pull request 'Configure LDAP login for Mastodon (merge .social and .org accounts)' ( #551 ) from feature/mastodon_ldap_integration into master
...
Reviewed-on: #551
Reviewed-by: Greg <greg@noreply.kosmos.org >
2024-03-29 09:51:42 +00:00
83380047bb
Configure LDAP integration for Mastodon
2024-03-29 09:28:13 +04:00
8aebb386a4
Configure Mastodon user address domain for akkounts
2024-03-27 20:19:24 +04:00
a8c4f0bd0e
Merge pull request 'Only allow ejabberd logins when XMPP service is enabled for user' ( #550 ) from feature/xmpp_service_enabled into master
...
Reviewed-on: #550
2024-03-27 16:17:04 +00:00
12b4fb37fa
Only allow ejabberd logins when XMPP service is enabled
2024-03-27 20:12:33 +04:00
263eb88b72
Add new env var for akkounts
2024-03-14 23:05:05 +01:00
25ee38fe27
Update kredits-ipfs-pinner
2024-03-14 23:04:27 +01:00
e701938442
Merge pull request 'Support letsencrypt proxy validation via CNAMEs' ( #548 ) from feature/letsencrypt_proxy_validation into master
...
Reviewed-on: #548
Reviewed-by: greg <greg@noreply.kosmos.org >
2024-03-12 14:11:14 +00:00
309bc45791
Merge pull request 'Fix backup script removing image after unsuccessful pivot' ( #549 ) from bugfix/vm_backups into master
...
Reviewed-on: #549
2024-03-11 15:35:50 +00:00
82a4af05ef
Fix backup script removing image after unsuccessful pivot
...
If pivoting the VM backing storage back to the original image fails
(e.g. VM being down at that time), the script currently still deletes
the hotswap image, which means that all changes since the creation of
the hotswap image are lost.
2024-03-11 16:26:14 +01:00
4a8ab3abe3
Support letsencrypt proxy validation via CNAMEs
...
Allows to point other domains' `_acme-challenge.example.com` entries at
`example.com.letsencrypt.kosmos.chat` so we can validate from our side
without access to the other domain's DNS records.
Used for 5apps.com XMPP for now. Can be used for others later.
Co-authored-by: Greg Karékinian <greg@karekinian.com >
2024-03-11 16:21:28 +01:00
21de964e1b
Upgrade nbxplorer, btcpay
2024-03-11 16:14:03 +01:00
b4ddfd19e3
Upgrade Ruby for latest Mastodon release
2024-03-11 16:13:48 +01:00
08c604962c
Upgrade Ruby for latest akkounts release
2024-03-11 16:13:30 +01:00
089574d0de
Merge pull request 'Update Gitea and act_runner, improve recipes' ( #547 ) from chore/upgrade_gitea into master
...
Reviewed-on: #547
2024-03-11 15:12:00 +00:00
d19a8eebfb
Update Gitea and act_runner, improve recipes
2024-03-11 16:11:12 +01:00
c0487d0e13
Deploy 5apps Gitea act runner
2024-03-11 16:08:22 +01:00
023a4261cd
Update node info
2024-03-11 16:07:32 +01:00
fea65404cf
Deploy new garage node
2024-03-11 16:03:22 +01:00
5139f242a4
Merge pull request 'Switch postgresql primary, deploy new replica' ( #546 ) from switch_postgres_primary into master
...
Reviewed-on: #546
2024-03-11 14:59:57 +00:00
9c2aa9faaa
Add info about required, unautomated step to script
2024-03-11 15:57:46 +01:00
164b974eb8
Switch postgresql primary, deploy new replica
2024-03-11 15:55:05 +01:00
6e4cc48068
Upgrade Gitea to 1.21.5
2024-02-05 14:39:12 +02:00
c2bd03dc23
Update node info
2024-02-05 10:14:27 +02:00
210a83a686
Increase max user offline messages for ejabberd
2024-02-04 15:47:55 +02:00
49db14869d
Merge pull request 'Add Liquor Cabinet cookbooks and configs, deploy to production' ( #541 ) from feature/535-liquor_cabinet into master
...
Reviewed-on: #541
2024-02-04 13:47:05 +00:00
000a13cec4
Merge pull request 'Set up coturn, switch from ejabberd in production' ( #532 ) from feature/coturn into master
...
Reviewed-on: #532
2024-02-04 13:46:50 +00:00
5f7701c288
Fix missing listen IP for storage proxy
2024-01-29 18:16:07 +02:00
bcaee3bb21
Fix ActiveStorage not liking the local S3 endpoint
2024-01-29 18:15:36 +02:00
f352901582
Consolidate akkounts well-known proxying, add Webfinger and Nostr
...
refs #158
2024-01-29 14:17:15 +02:00
5c1c63f94e
Add S3/Garage config for akkounts
2024-01-26 10:40:36 +03:00
98543f3e7d
Configure RS integration for akkounts
2024-01-26 09:01:55 +03:00
7ab83d3d82
Section header comments for ENV vars
...
Improve readability of recipe
2024-01-26 09:00:25 +03:00
b5020efdd5
Merge branch 'master' into feature/535-liquor_cabinet
2024-01-26 08:19:50 +03:00
2763244fdc
Merge pull request 'Config updates and improvements for new akkounts release' ( #542 ) from chore/akkounts_updates into master
...
Reviewed-on: #542
2024-01-26 05:19:16 +00:00
e10e54c12a
Deploy liquor-cabinet proxy to production
2024-01-26 08:16:26 +03:00
6114f0f799
Add liquor-cabinet proxy recipe
2024-01-26 08:15:53 +03:00
a2ec41b68a
Add/use kosmos_liquor-cabinet cookbook
2024-01-25 17:42:56 +03:00
715fdbc2ba
Node-attribute ALL THE THINGS
2024-01-25 17:40:42 +03:00
211a613e5c
Add liquor-cabinet configs, deploy to production
2024-01-25 16:27:31 +03:00
d3c22ea787
Add liquor_cabinet cookbook
2024-01-25 16:26:41 +03:00
6047ea3f84
Merge pull request 'Add support for Redis replication, set up in production' ( #540 ) from feature/redis_replication into master
...
Reviewed-on: #540
2024-01-25 10:19:12 +00:00
7d478f0183
Set up Redis replication in production
2024-01-24 18:12:22 +03:00
88e96747e3
Add Redis replica recipe and role
2024-01-24 18:11:58 +03:00
4b04aa7cd9
Let akkounts API proxy forward all API requests
...
... instead of just a specific subdirectory/path
2024-01-24 16:19:04 +03:00
2597e211ed
Add new akkounts configs
2024-01-24 16:18:50 +03:00
f96faf9fa2
Install libvips for image manipulation in akkounts
2024-01-24 16:18:19 +03:00
c32e8bc9e5
Add new garage nodes
2024-01-11 18:38:22 +03:00
Râu Cao
24b22b8f91
Merge pull request 'Add email service' ( #526 ) from feature/email into master
...
Reviewed-on: #526
2024-01-10 12:09:21 +00:00
456ec7a5fa
Deploy new email VM
2024-01-09 15:57:04 +03:00
daadd9374f
Use attribute for root dir
2024-01-08 11:35:04 +03:00
98acd429de
Add configs for virtual email aliases
2024-01-08 11:29:56 +03:00
cfa7da2051
Create vmail dir on fresh systems
2024-01-08 10:47:19 +03:00
0d3082e1c8
Upgrade Gitea to 1.21.3
2024-01-01 16:13:15 +03:00
e1007f7886
ejabberd disco config additions
2023-12-18 13:23:21 +01:00
292366a77f
Domain vs realm vs IP
2023-12-18 13:23:05 +01:00
ed998fc1d3
Use TCP for TLS connections
2023-12-18 13:22:34 +01:00
8a97ebf4f8
Use domain instead of IP, add TLS endpoints
2023-12-17 17:57:49 +01:00
ca3f06f831
Increase size of port range for TURN
2023-12-17 17:05:06 +01:00
1576a8e731
Set up coturn, switch from ejabberd in production
...
https://github.com/coturn/coturn
2023-12-17 15:20:11 +01:00
6e3fb80565
Upgrade CLN
2023-12-16 19:23:09 +01:00
Râu Cao
295d95c048
Upgrade Gitea to 1.21.1
2023-12-16 11:49:35 +01:00
789532fae9
Merge pull request 'Upgrade bitcoind, LND, CLN, RTL, NBXplorer, BTCPay' ( #531 ) from chore/upgrade_bitcoin_software into master
...
Reviewed-on: #531
2023-12-14 17:15:40 +00:00
Râu Cao
404f492e6e
Update node info
2023-12-14 18:14:37 +01:00
Râu Cao
574f78f128
Upgrade bitcoind, LND, CLN, RTL, NBXplorer, BTCPay
...
Also required upgrading node.js and the .NET SDK.
2023-12-14 18:12:29 +01:00
f4d1009473
Merge pull request 'Switch to virtual domains/aliases/mailboxes' ( #530 ) from feature/email_virtual_domains into feature/email
...
Reviewed-on: #530
2023-12-13 12:06:44 +00:00
Râu Cao
69af908f6b
Virtual domain configs
2023-12-13 13:05:31 +01:00
Râu Cao
e8880ded90
Remove vagrant (dev) node config files
...
No need for sharing them, since the actual roles etc. are defined in the
Vagrantfile.
2023-12-07 10:37:09 +01:00
Râu Cao
10dd3bf16e
Add new RSK testnet node, don't serve from current one
2023-12-07 09:55:29 +01:00
Râu Cao
ca580bcfe2
Set email report contact in production
2023-12-07 09:37:37 +01:00
5b0cb438ba
Merge pull request 'Set up SpamAssassin' ( #529 ) from feature/spamassassin into feature/email
...
Reviewed-on: #529
2023-12-06 11:28:14 +00:00
Râu Cao
5a4cdf9c30
Prevent local users from impersonating other local users
2023-12-06 12:27:38 +01:00
Râu Cao
b3f2ca415e
Set up SpamAssassin
...
Scan incoming and outgoing email for spam. Use a local Unbound for DNS,
so we don't run into blocks for RBL queries.
2023-12-06 12:22:24 +01:00
Râu Cao
05ccbcc58f
Merge branch 'master' into feature/email
2023-12-05 18:37:43 +01:00
Râu Cao
e3c4bf8969
Update node config
2023-12-05 18:21:26 +01:00
Râu Cao
cc6cebb8a2
Increase TURN throughput allowance
2023-12-05 18:20:27 +01:00
Râu Cao
4dbc960eed
Switch ejabberd node handling TURN
...
Should use the same outgoing IP as for incoming
2023-12-05 18:19:48 +01:00
ce47072b0d
Merge pull request 'Improve VM backups, configure backups on "her"' ( #528 ) from feature/backup_improvements into master
...
Reviewed-on: #528
2023-12-05 17:18:40 +00:00
Râu Cao
7805182457
Change borg backup default interval to 3 hrs
2023-12-05 18:16:15 +01:00
Râu Cao
769ac4a081
Support node-specific borg repo config
2023-12-05 18:09:44 +01:00
Râu Cao
b1763cd032
Pattern-match node names for VM backup exclusion
2023-12-05 18:04:57 +01:00
Râu Cao
c746b38ebf
Update node info
2023-12-05 14:19:52 +01:00
0a58cac0cf
Merge pull request 'Set up DKIM signing and verification' ( #527 ) from feature/email_dkim into feature/email
...
Reviewed-on: #527
2023-12-04 12:42:37 +00:00
Râu Cao
42c04538d8
Set up DKIM signing and verification
2023-12-04 13:40:37 +01:00
Râu Cao
c9ad3c2d18
Create/configure common default mailboxes
2023-12-04 13:33:23 +01:00
Râu Cao
fbad0bf896
More explicit postfix configs
2023-12-03 18:33:12 +01:00
Râu Cao
8a7eeb1dd9
Change INBOX location
2023-12-03 18:32:55 +01:00
Râu Cao
568197737a
Fix SMTP connection delay when peer hostname cannot be resolved
2023-12-03 18:31:47 +01:00
Râu Cao
738e96f7e4
Fix auth for SMTP submission on port 465
2023-12-03 18:31:12 +01:00
Râu Cao
87411274ae
Configure email domain for production
2023-12-03 18:29:35 +01:00
Râu Cao
ce00852bba
Remove obsolete config file
2023-12-01 12:19:21 +01:00
Râu Cao
366c0c0d3c
Add WIP email domain and hostname
2023-12-01 10:02:25 +01:00
Râu Cao
89d00afd1c
Set up email proxy
2023-12-01 10:02:11 +01:00
Râu Cao
e4abfb1b75
Use more reasonable priority for attributes in recipe
2023-12-01 10:01:34 +01:00
Râu Cao
335a082171
Put an LDAP server in the production env
2023-12-01 10:00:35 +01:00
Râu Cao
9d0ff358ef
Only use certbot deploy hook when applicable
2023-12-01 10:00:07 +01:00
Râu Cao
495a4231fb
Add mail server node
2023-12-01 09:59:41 +01:00
Râu Cao
51068e5259
Add email credentials
2023-12-01 09:58:25 +01:00
Râu Cao
fbcf1ed5e7
WIP Add initial cookbook and roles for email service
2023-12-01 09:56:54 +01:00
Râu Cao
158a9c2fbe
Update postfix cookbook
2023-11-29 22:26:59 +01:00
Râu Cao
1e9878d17e
Remove obsolete clients
2023-11-28 22:43:21 +01:00
Râu Cao
3df7a386e6
Remove rsk-testnet-3
2023-11-28 22:43:21 +01:00
cbeddefa34
Merge pull request 'Set max size for external S3 upload requests' ( #525 ) from bugfix/s3_nginx_max_upload_size into master
...
Reviewed-on: #525
2023-11-15 13:04:34 +00:00
Râu Cao
aefd01d38d
Remove old RSK mainnet node
2023-11-15 13:22:15 +01:00
Râu Cao
5765c08d6e
Fail over to next node when and RSK backend is down
2023-11-15 13:21:46 +01:00
Râu Cao
aaae90bc0d
Don't exit VM backup scripts immediately on failures
2023-11-15 13:20:42 +01:00
Râu Cao
087616b6b6
Set max size for external S3 upload requests
...
Fix uploads failing when exceeding the default nginx limit
2023-11-08 21:44:49 +01:00
Râu Cao
390753faa3
Increase update delay for Gandi DNS records
2023-11-05 01:01:16 +01:00
Râu Cao
1a3516904d
Update node info
2023-11-05 01:01:04 +01:00
adafb132ee
Merge pull request 'Upgrade Mastodon to 4.2.1' ( #524 ) from chore/upgrade_mastodon into master
...
Reviewed-on: #524
2023-11-05 00:00:51 +00:00
Râu Cao
8071f44f41
Upgrade Mastodon to 4.2.1
2023-11-05 00:57:43 +01:00
Râu Cao
05d04fe76c
Update node info
2023-11-04 15:25:01 +01:00
231811f9d0
Merge pull request 'Upgrade Gitea to 1.20.5' ( #523 ) from chore/upgrade_gitea into master
...
Reviewed-on: #523
2023-11-04 14:15:47 +00:00
Râu Cao
9fa7d8b28f
Upgrade Gitea to 1.20.5
2023-11-04 15:14:58 +01:00
5fbc48df9a
Merge pull request 'Upgrade RSKj to 5.3.0, deploy new nodes' ( #522 ) from chore/upgrade_rskj_jammy into master
...
Reviewed-on: #522
2023-11-04 14:09:30 +00:00
Râu Cao
925a5da239
Upgrade RSKj to 5.3.0, deploy new nodes
...
Adapted the cookbook for new nodes running on Jammy.
2023-11-04 15:06:31 +01:00
Râu Cao
3d3156a031
Add new host
2023-11-01 12:39:17 +01:00
2c33ee79f2
Merge pull request 'Upgrade ejabberd to 23.10, enable anonymous occupant IDs' ( #520 ) from chore/upgrade_ejabberd into master
...
Reviewed-on: #520
2023-11-01 11:32:18 +00:00
Râu Cao
abc168ebf1
Upgrade ejabberd to 23.10, enable anonymous occupant IDs
2023-11-01 12:29:23 +01:00
873c235539
Merge pull request 'Migrate ejabberd uploads to mod_s3_upload and Garage' ( #518 ) from feature/469-ejabberd_s3 into master
...
Reviewed-on: #518
2023-10-17 19:07:23 +00:00
Râu Cao
65d71d6a73
Migrate ejabberd uploads to mod_s3_upload and Garage
...
In addition to installing and configuring the new module, this also
enables public access to the S3 API via `bucket-name.s3.kosmos.org` as
well as Web access on `bucket-name.web.s3.kosmos.org` (when enabled).
Also includes some drive-by improvements to Chef attribute naming and
usage.
Co-authored-by: Greg Karékinian <greg@karekinian.com >
2023-10-10 17:55:55 +02:00
Râu Cao
832075dfb2
Shorten root domains for external Garage S3 and Web access
...
And move the configuration-specific preceding dot to the config
template.
2023-10-10 16:34:23 +02:00
1c9e28448f
Merge pull request 'Improve PostgreSQL streaming replication in production' ( #516 ) from feature/keep_wal_segments into master
...
Reviewed-on: #516
2023-10-07 08:18:24 +00:00
Râu Cao
3505212e92
Add missing header to RS discourse proxy config
2023-10-04 12:36:07 +02:00
Râu Cao
2d3872a692
Update chef client on postgres-4
...
refs #500
2023-10-02 15:48:50 +02:00
Râu Cao
eb1303a8da
Fix postgres primary not holding onto any WAL segments for later sync
...
closes #515
2023-10-02 15:46:26 +02:00
9af38219af
Merge pull request 'Upgrade bitcoind, LND, .NET, NBXplorer, and BTCPay' ( #514 ) from chore/upgrade_btc_things into master
...
Reviewed-on: #514
2023-09-28 14:44:00 +00:00
Râu Cao
08d9819fd2
Upgrade bitcoind, LND, dotnet, NBXplorer, and BTCPay
2023-09-28 16:41:44 +02:00
Râu Cao
f0968aae5b
Add Drone CI config for akkounts
2023-09-01 12:51:40 +02:00
b4ce426ce9
Merge pull request 'Upgrade Gitea to 1.20.3, Chef client to 18.x' ( #512 ) from chore/upgrade_gitea into master
...
Reviewed-on: #512
2023-08-25 15:14:46 +00:00
Râu Cao
e65c58ff6c
Upgrade Gitea to 1.20.3, Chef client to 18.x
2023-08-25 17:12:33 +02:00
cc8264432c
Merge pull request 'Migrate nginx sites to openresty' ( #511 ) from chore/migrate_nginx_sites_to_openresty into master
...
Reviewed-on: #511
2023-08-01 13:02:32 +00:00
Râu Cao
1650e429a8
Migrate fornax nginx to openresty
2023-07-31 15:57:13 +02:00
Râu Cao
123b304dd0
Use correct node attributes
2023-07-31 15:57:07 +02:00
Râu Cao
bbd25ebb9c
Add nginx logs for gitea
2023-07-31 15:56:40 +02:00
Râu Cao
ec43f4ee0f
Update openresty cookbook
2023-07-31 15:56:20 +02:00
Râu Cao
eab94090e8
Use openresty node attributes in openresty templates
2023-07-31 15:07:35 +02:00
Râu Cao
7f2805831c
Remove obsolete cookbook
2023-07-31 15:07:18 +02:00
Râu Cao
0f12a54eab
Refactor tor usage entirely
...
Use a custom resource and separate recipe for service configs with
pre-set keys and hostnames
2023-07-30 12:39:41 +02:00
Râu Cao
68b56789c5
Migrate ejabberd UDP streams to openresty
...
And remove the other streams in the process, in favor of running haproxy
on all LBs.
2023-07-30 12:39:36 +02:00
Râu Cao
438ee4ace0
Migrate Gitea SSH stream to openresty
2023-07-30 12:35:21 +02:00
Râu Cao
27bdc1f60d
Update openresty cookbook
2023-07-30 12:34:21 +02:00
Râu Cao
cb0fc27134
Refactor tor usage, set up new tor proxy on draco
2023-07-29 16:26:20 +02:00
Râu Cao
b149264919
Use paths from node attributes
2023-07-29 14:30:46 +02:00
Râu Cao
53c35fda51
Migrate garage proxies to openresty
2023-07-26 16:42:48 +02:00
Râu Cao
bb2f41fdb3
Migrate hubot proxies to openresty
2023-07-26 16:21:03 +02:00
Râu Cao
027d0ed570
Migrate IPFS proxies to openresty
2023-07-26 16:12:33 +02:00
Râu Cao
1362da0add
Migrate RS Discourse proxy to openresty
2023-07-26 15:57:08 +02:00
Râu Cao
15b2ea284a
Migrate mastodon proxy to openresty
2023-07-26 15:44:04 +02:00
Râu Cao
ad59913555
Migrate lndhub proxy to openresty
2023-07-26 15:00:55 +02:00
Râu Cao
1bad2939de
Migrate accounts API proxy to openresty
2023-07-26 15:00:43 +02:00
Râu Cao
7b5d46c813
Update openresty cookbook
2023-07-26 14:52:16 +02:00
Râu Cao
98d423aa70
Update roles
2023-07-26 14:16:33 +02:00
Râu Cao
4b14297f83
WIP Migrate Gitea proxy to openresty
...
TODO: Make nginx_ssh stream resource work with openresty cookbook
2023-07-26 14:15:46 +02:00
Râu Cao
1681942fb1
Migrate static website to openresty
2023-07-26 14:15:22 +02:00
Râu Cao
4d528d67ef
Migrate RSK proxies to openresty
2023-07-26 14:08:44 +02:00
Râu Cao
53abc2ec9a
Migrate Drone CI proxy to openresty
2023-07-26 14:07:48 +02:00
Râu Cao
543b482adb
Migrate discourse proxy to openresty
2023-07-26 13:40:19 +02:00
Râu Cao
87657db8a7
Update openresty cookbook
2023-07-26 13:39:07 +02:00
Râu Cao
4b0b4b8d80
Migrate akkounts proxy to openresty
2023-07-26 13:31:28 +02:00
Râu Cao
77c97607d5
Update openresty cookbook
2023-07-26 13:31:27 +02:00
Râu Cao
4b08e4fc8c
Add JSON log format to openresty
2023-07-26 13:31:23 +02:00
507a812f33
Merge pull request 'Exclude specified VMs from image backups' ( #509 ) from feature/kvm_backup_exceptions into master
...
Reviewed-on: #509
2023-07-26 08:58:45 +00:00
Râu Cao
fb708743cc
Remove obsolete node
2023-07-26 09:31:38 +02:00
Râu Cao
9568b7072d
Exclude specified nodes/VMs from image backups
2023-07-25 16:58:16 +02:00
Râu Cao
a85bbc4a3e
Add kvm host role
2023-07-25 16:38:52 +02:00
266b17eb98
Merge pull request 'Set up openresty' ( #502 ) from feature/501-openresty into master
...
Reviewed-on: #502
2023-07-25 11:24:39 +00:00
7d9faf40d8
Merge pull request 'Upgrade Gitea to 1.20.1' ( #508 ) from chore/upgrade_gitea_to_1.20.1 into master
...
Reviewed-on: #508
2023-07-23 10:59:11 +00:00
Râu Cao
149760702b
Upgrade Gitea to 1.20.1
2023-07-23 12:58:02 +02:00
Râu Cao
ec77e19ab0
Update SMTP credentials
2023-07-23 12:56:46 +02:00
Râu Cao
baab02515c
Remove attributes from node config
2023-07-23 12:56:27 +02:00
Râu Cao
c48dd4c997
Replace postgresql primary, add new replica
2023-07-21 14:56:14 +02:00
Râu Cao
e5805169f5
Improve script for switching postgres primary
2023-07-21 14:55:43 +02:00
Greg Karékinian
be072fb985
Update vagrant-openresty node file
2023-07-19 10:01:51 +02:00
Greg Karékinian
0fc388f43c
Don't redirect http for the hello_world openresty app
2023-07-19 10:01:10 +02:00
Greg Karékinian
27b466f30d
Add new architecture to Gemfile.lock
2023-07-17 18:09:55 +02:00
Greg Karékinian
1a19fa012d
Deploy openresty proxy on draco
...
Also update Chef to 18.2.7
2023-07-17 18:09:13 +02:00
Greg Karékinian
7b0313fbd4
Add access and error logs for the assets vhost
2023-07-17 18:08:32 +02:00
Greg Karékinian
1183f6a621
Add missing dependency on git to deploy the assets
2023-07-17 18:08:21 +02:00
Greg Karékinian
05daff9029
Install certbot when using the tls_cert_for resource
2023-07-17 18:07:50 +02:00
Greg Karékinian
307ccbd561
Set a production run list for the openresty_proxy role
...
It only contains the assets for now
2023-07-17 18:06:58 +02:00
Greg Karékinian
cc91aab155
Use the new way of setting attribute whitelists
2023-07-17 18:06:23 +02:00
Greg Karékinian
bf72367cf2
Add a firewall rule to the kosmos_openresty cookbook
...
It is part of the run list in production
2023-07-17 18:05:34 +02:00
Greg Karékinian
4e0bd191c3
Move the Hello World lua app to its own recipe
...
Use it in the development environment
2023-07-17 18:04:35 +02:00
Greg Karékinian
96f45b1f63
Set the required Chef version to 18
2023-07-17 18:03:02 +02:00
Greg Karékinian
030dbc3584
Update the openresty cookbook submodule
2023-07-17 18:00:38 +02:00
Greg Karékinian
84ffb46ed5
Add Chef node file for openresty VM
2023-07-17 14:46:38 +02:00
Greg Karékinian
491cd31fac
Add openresty Vagrant box
2023-07-15 17:20:06 +02:00
Greg Karékinian
2acf4c2b59
Update Chef in Vagrant setup
2023-07-15 17:19:50 +02:00
Greg Karékinian
df1143525d
Add openresty roles
2023-07-12 20:37:03 +02:00
Greg Karékinian
d79dcd8e65
Deploy kosmos assets with Openresty
2023-07-12 20:36:12 +02:00
Greg Karékinian
c1e2145ba1
Create a resource to get a Let's Encrypt cert with DNS validation
2023-07-12 20:35:15 +02:00
Greg Karékinian
d077dfdcf2
Deploy a hello world openresty app
2023-07-12 20:34:00 +02:00
Greg Karékinian
8a3c519a6c
Update our fork of the openresty cookbook
2023-07-12 20:32:53 +02:00
Greg Karékinian
abb652cc2b
Fix the openresty submodule
2023-07-08 15:37:12 +02:00
Greg Karékinian
b7c36d427e
Add jemalloc and yum cookbooks
2023-07-08 15:12:30 +02:00
Greg Karékinian
1bdcda0e97
Initial kosmos_openresty wrapper cookbook
2023-07-06 10:17:11 +02:00
Greg Karékinian
0a15199364
Add cookbook dependencies for openresty
2023-07-06 10:14:23 +02:00
Greg Karékinian
aebf0a12e8
Don't use AIO in development
...
This was needed in my Vagrant setup (VirtualBox)
2023-07-06 10:13:52 +02:00
Greg Karékinian
2950ab5bfc
Add openresty cookbook fork as a submodule
2023-07-05 15:50:46 +02:00
8072fafa46
Merge pull request 'Set up Redis VM, upgrade all cookbooks for Chef 18, major cleanup' ( #496 ) from feature/488-redis_server into master
...
Reviewed-on: #496
2023-07-01 12:22:38 +00:00
Greg Karékinian
2637d755af
Remove old server
2023-06-29 17:17:06 +02:00
Greg Karékinian
b550c1b79e
Remove deleted servers
2023-06-29 16:58:28 +02:00
Greg Karékinian
1f29d8a01a
Get rid of compat_resource and mariadb
2023-06-29 16:49:06 +02:00
Greg Karékinian
462bdabf01
Get rid of the chef-sugar dependency
...
It's now deprecated
2023-06-29 16:41:08 +02:00
Greg Karékinian
7683de09a2
Update the elasticsearch cookbook
2023-06-29 16:39:09 +02:00
Greg Karékinian
68ce3c4834
Update the firewall cookbook to the latest version
...
This gives us comments from the named resources
2023-06-29 15:08:44 +02:00
Greg Karékinian
916ae8094c
Get rid of the build-essential cookbook
...
The build_essential resource has been part of Chef since 14.0
2023-06-29 14:48:49 +02:00
Greg Karékinian
05834b6013
Get rid of the application and poise cookbooks
2023-06-28 18:59:31 +02:00
Greg Karékinian
d7bc5e6f08
Update Chef on these servers
2023-06-28 18:55:13 +02:00
Greg Karékinian
b7d17c1ad7
Replace application cookbook with git resource
2023-06-28 18:55:05 +02:00
Greg Karékinian
54098a450c
Replace application cookbook with git resource
2023-06-28 18:54:38 +02:00
Greg Karékinian
3a5a038f7e
Replace application cookbook with git resource
2023-06-28 18:53:59 +02:00
Greg Karékinian
3cf9c3868b
Deploy mastodon without the application cookbooks
2023-06-28 17:23:05 +02:00
Greg Karékinian
57fdf0723f
Deploy RTL without the deprecated application cookbook
2023-06-28 16:35:57 +02:00
Greg Karékinian
9378df23db
Remove unused lndhub recipe
2023-06-28 16:35:56 +02:00
Greg Karékinian
88caae26e4
Install the latest backup gem
...
It added a few dev dependencies, install them
2023-06-28 16:35:56 +02:00
Greg Karékinian
0564165e81
Override the attributes in attributes, not the default recipe
2023-06-28 16:35:56 +02:00
Greg Karékinian
ddeebc739d
Update chef-sugar to fix a conflict in Chef 16+
2023-06-28 16:35:56 +02:00
Greg Karékinian
b9cf396d42
Deploy akkounts without the application_git cookbook
...
Use the built-in git resource from Chef instead. poise/application does
not work on modern Chef.
2023-06-28 16:35:56 +02:00
0506b75115
Merge pull request 'Configure all new and remaining options for akkounts' ( #498 ) from chore/akkounts_config into feature/488-redis_server
...
Reviewed-on: #498
2023-06-28 12:29:41 +00:00
Râu Cao
01977e088a
Configure remaining options for akkounts
...
And refactor attributes/variables to use the various service cookbook's
own attributes.
2023-06-28 14:27:25 +02:00
Greg Karékinian
d1a4e4cbc5
Merge branch 'master' into feature/488-redis_server
2023-06-28 14:15:30 +02:00
Râu Cao
bcbee255f1
Add primary domain config for akkounts
2023-06-21 15:08:14 +02:00
0a25ef6d7a
Merge pull request 'Upgrade Kredits IPFS Pinner' ( #497 ) from chore/deploy_kredits-ipfs-pinner into master
...
Reviewed-on: #497
2023-06-20 16:54:48 +00:00
Râu Cao
d6989ab161
Replace hardcoded value with variable
2023-06-20 18:52:44 +02:00
Râu Cao
b94484d0dd
Upgrade Kredits IPFS Pinner
2023-06-20 18:52:16 +02:00
Greg Karékinian
b19fca6e7c
Add firewall rule to allow access to Redis on Zerotier network
2023-06-20 15:19:34 +02:00
Greg Karékinian
76a952dbac
Add missing Berksfile changes
2023-06-19 16:13:08 +02:00
Greg Karékinian
3fb89517ab
Add redis_server role to redis-1
2023-06-19 16:08:59 +02:00
Greg Karékinian
44e23ffa1f
Merge branch 'master' into feature/488-redis_server
2023-06-19 16:08:44 +02:00
Greg Karékinian
6116729907
Set up Redis using the latest version of redisio
...
This replaces the deprecated redis cookbook. Compiles the latest version
of Redis, currently 7.0.11
Refs #488
2023-06-19 16:02:58 +02:00
e924d714af
Merge pull request 'Refactor RSK nginx sites for proxy/lb usage' ( #495 ) from chore/rsk_nginx_sites into master
...
Reviewed-on: #495
2023-06-19 14:01:25 +00:00
Râu Cao
90f66c74d2
Refactor RSK nginx sites for proxy/lb usage
2023-06-18 16:55:38 +02:00
635ca3870a
Merge pull request 'Upgrade RSKj to 4.4.0' ( #494 ) from chore/upgrade_rskj into master
...
Reviewed-on: #494
2023-06-15 14:40:52 +00:00
Râu Cao
80a7751267
Test for correct network in RSKj config
2023-06-07 15:28:23 +03:00
Râu Cao
ba573798ee
Upgrade RSKj to latest stable release
2023-06-07 15:27:58 +03:00
3b8326283f
Merge pull request 'Configure/deploy akkounts for Discourse SSO' ( #493 ) from chore/akkounts_upgrade into master
...
Reviewed-on: #493
2023-06-04 12:29:50 +00:00
Râu Cao
d113edb004
Set X-Forwarded-Proto for Discourse requests
2023-06-04 15:25:00 +03:00
Râu Cao
9648e071ca
Configure akkounts for Discourse Connect
2023-06-04 15:24:06 +03:00
b164d7a444
Merge pull request 'Provision VMs for Redis cluster, RS API' ( #490 ) from chore/new_vms into master
...
Reviewed-on: #490
2023-05-23 13:08:15 +00:00
7f97d95bad
Merge pull request 'Upgrade ZeroTier Controller UI to latest version' ( #491 ) from chore/upgrade_ztncui into master
...
Reviewed-on: #491
2023-05-23 13:02:04 +00:00
26b1682bdb
Merge pull request 'Upgrade Gitea to 1.19.3' ( #492 ) from chore/upgrade_gitea into master
...
Reviewed-on: #492
2023-05-13 13:43:22 +00:00
Râu Cao
91ede90184
Upgrade Gitea to 1.19.3
2023-05-13 15:41:59 +02:00
Râu Cao
6c329b7200
Upgrade ztncui to 0.8.13
2023-05-12 17:16:22 +02:00
Râu Cao
d0a1785847
Install new versions of ztncui, restart service
2023-05-12 17:15:52 +02:00
Râu Cao
29052ce509
Deploy new VMs for Redis, Liquor Cabinet
2023-05-12 17:02:10 +02:00
Râu Cao
fc041965f4
Update Ubuntu base image
2023-05-12 17:01:50 +02:00
b9e2f3b8e8
Merge pull request 'Upgrade Go to 1.20.3, LND to 0.16.1' ( #486 ) from chore/upgrade_golang_lnd into master
...
Reviewed-on: #486
2023-04-26 13:06:53 +00:00
Râu Cao
807ca52f1c
Upgrade LND to 0.16.1
2023-04-26 15:05:17 +02:00
Râu Cao
78eb3c033a
Upgrade golang to 1.20.3
2023-04-26 15:05:06 +02:00
bffa24884c
Merge pull request 'Upgrade ejabberd to 23.04, activate real-time MUC blocklists against spam' ( #485 ) from chore/upgrade_ejabberd into master
...
Reviewed-on: #485
2023-04-19 15:38:07 +00:00
Râu Cao
efb07ad3c1
Allow akkounts to set private XML storage data
...
Enables kosmos/akkounts#116
2023-04-19 17:32:30 +02:00
Râu Cao
14e04d77a9
Activate real-time MUC blocklist module
2023-04-19 17:32:15 +02:00
Râu Cao
f8f3fc7c3a
Upgrade ejabberd to 23.04
...
Also add a package version attribute, since the value changed in the
past.
2023-04-19 17:30:55 +02:00
Râu Cao
5ad15ba1f3
Upgrade Gitea to 1.19.1
2023-04-13 18:31:42 +02:00
4778253ad3
Merge pull request 'Fix Gitea Actions runner not working with private host' ( #484 ) from bugfix/act_runner_needs_public_host into master
...
Reviewed-on: #484
2023-04-11 10:16:20 +00:00
Râu Cao
1afc860b21
Fix Gitea Actions runner not working with private host
2023-04-11 12:14:17 +02:00
Râu Cao
03a02a19c4
Use proxy protocol for ejabberd nginx streams
2023-04-04 15:14:41 +02:00
Râu Cao
7a1be33b7a
Make all nginx vhosts listen on IPv6
2023-04-04 15:10:23 +02:00
Râu Cao
f36268e906
Update ejabberd admin list
2023-04-04 10:14:50 +02:00
Râu Cao
2dd4d572a6
Configure akkounts domain
2023-04-04 09:32:40 +02:00
a44fa31951
Merge pull request 'Improve ejabberd HTTP API configs and access' ( #483 ) from bugfix/ejabberd_api_access into master
...
Reviewed-on: #483
2023-04-03 16:03:03 +00:00
Râu Cao
797dd241e0
Improve ejabberd HTTP API configs and access
...
Move the listener to a separate endpoint on port 80, which is only
accessible from the private network. Change accounts.kosmos.org to use
the new endpoint via a `.local` domain instead of faking external
access.
2023-04-03 15:38:40 +02:00
ac00aa9def
Merge pull request 'Upgrade Gitea to 1.19, configure Gitea Actions, set up Actions runners' ( #482 ) from chore/upgrade_gitea into master
...
Reviewed-on: #482
2023-04-02 13:57:45 +00:00
Râu Cao
059812524e
Set up Gitea Actions runners
2023-04-01 12:56:21 +02:00
d7cbdbd6a5
Merge pull request 'Set up Sentry' ( #478 ) from feature/sentry into master
...
Reviewed-on: #478
2023-03-28 20:13:28 +00:00
Râu Cao
702449acc1
Upgrade Gitea to 1.19.0, enable Actions
2023-03-28 19:36:30 +02:00
Râu Cao
b78de9a3c9
Deploy Sentry from release tag
2023-03-28 15:23:57 +02:00
Râu Cao
99d985c0d5
Configure Sentry for akkounts
2023-03-27 19:10:48 +02:00
Râu Cao
9f886cc286
Configure Sentry DSN for lndhub-go
2023-03-27 19:04:03 +02:00
Râu Cao
05d0a19b5f
Add Sentry client recipe and role
...
Configures a local domain for Sentry in the hostsfile.
2023-03-27 19:04:03 +02:00
Râu Cao
798ee3d1d8
Basic Sentry setup
...
Not running the install script automatically at this point yet.
2023-03-27 19:03:58 +02:00
0fbba8baa8
Merge pull request 'Add new SMTP config for akkounts' ( #480 ) from feature/479-akkounts_smtp_config into master
...
Reviewed-on: #480
2023-03-27 09:56:15 +00:00
Greg Karékinian
0c4466b040
Namespace the smtp attributes
2023-03-27 10:49:12 +02:00
Greg Karékinian
34970fe3cf
Set a better name for the from address
2023-03-27 10:48:56 +02:00
Greg Karékinian
3873ebaac2
Don't override the SMTP config with the same values
2023-03-27 10:45:02 +02:00
Greg Karékinian
4f1fb347a8
Add new SMTP config for akkounts
...
This is not running on akkounts-1
closes #479
refs kosmos/akkounts#107
2023-03-24 16:55:11 +01:00
819109849a
Merge pull request 'Improve ejabberd config' ( #477 ) from feature/ejabberd_enhanced_configs into master
...
Reviewed-on: #477
2023-03-24 09:38:18 +00:00
Râu Cao
6e31c7a79b
Use proxy protocol
2023-03-24 16:35:23 +07:00
Râu Cao
a2fc3ba25c
Remove obsolete folder permissions
2023-03-24 16:35:07 +07:00
Râu Cao
13fc2e6e24
Improve MUC config
2023-03-24 16:34:40 +07:00
d308c2536d
Merge pull request 'Switch Discourse uploads and backups to Garage/S3' ( #476 ) from feature/discourse_garage into master
...
Reviewed-on: #476
2023-03-21 09:04:58 +00:00
4baff4cc03
Merge branch 'master' into feature/discourse_garage
2023-03-21 09:02:20 +00:00
Râu Cao
f34647b2bd
Fix akkounts asset requests when nginx is on proxy
2023-03-17 19:29:24 +07:00
Râu Cao
8ae7cdfafd
Switch Discourse uploads and backups to Garage/S3
2023-03-17 19:13:04 +07:00
Râu Cao
d8d1609572
Serve static assets from Rails in prod
2023-03-04 11:14:11 +08:00
Râu Cao
cf082833a7
Add lndhub pubkey in prod, update node config
2023-03-03 21:48:38 +08:00
6779f5a5dc
Merge pull request 'Add keysend support for Lightning Address' ( #471 ) from feature/lightning_address_keysend into master
...
Reviewed-on: #471
2023-03-02 10:53:07 +00:00
55bfc0c80f
Merge branch 'master' into feature/lightning_address_keysend
2023-03-02 10:52:25 +00:00
796b7e4436
Merge pull request 'Move akkounts nginx to nginx proxy' ( #474 ) from chore/move_akkounts_nginx into master
...
Reviewed-on: #474
2023-03-02 10:52:12 +00:00
Râu Cao
8225e1b67b
Move akkounts nginx to nginx proxy
2023-03-02 18:05:37 +08:00
e2e857ec76
Merge pull request 'Move akkounts to redisio cookbook, switch in production' ( #473 ) from chore/akkounts_redis into master
...
Reviewed-on: #473
2023-03-02 08:12:12 +00:00
8f70bf5033
Move akkounts to redisio cookbook
2023-03-02 16:09:51 +08:00
0320cae893
Merge pull request 'Upgrade BTCPay Server to 1.8.0' ( #472 ) from bugfix/btcpay_builds into master
...
Reviewed-on: #472
2023-03-02 07:36:46 +00:00
Râu Cao
9d1dd499bb
Upgrade BTCPay Server to 1.8.0
...
* Fixed build and run scripts
https://github.com/btcpayserver/btcpayserver/pull/4655
* Fixed bug when using LndHub account as Lightning back-end
https://github.com/btcpayserver/btcpayserver/issues/4658
2023-03-02 15:31:47 +08:00
Râu Cao
53f8a06e6f
Add keysend support for Lightning Address
2023-03-02 13:32:07 +08:00
e9832551ac
Merge pull request 'Write akkounts .env config, add config for lndhub admin UI' ( #470 ) from feature/462_akkounts_config into master
...
Reviewed-on: #470
2023-02-14 13:11:49 +00:00
7549164a2e
Merge branch 'master' into feature/462_akkounts_config
2023-02-14 13:04:00 +00:00
48f678148c
Merge pull request 'Switch/migrate NBXplorer to PostgreSQL' ( #468 ) from chore/nbxplorer_postgres into master
...
Reviewed-on: #468
2023-02-14 13:03:49 +00:00
544984abce
Merge branch 'master' into chore/nbxplorer_postgres
2023-02-14 13:02:06 +00:00
643af4a4a2
Merge pull request 'Upgrade RSKj, fix and document test suite' ( #465 ) from core/upgrade_rskj into master
...
Reviewed-on: #465
2023-02-14 13:01:55 +00:00
6209dcfc25
Merge branch 'master' into core/upgrade_rskj
2023-02-14 13:00:44 +00:00
Râu Cao
a1ec9b4d6a
Write akkounts .env config, add config for lndhub admin UI
...
closes #462
2023-02-13 22:39:11 +08:00
Râu Cao
b762d70b43
Use service resource
2023-02-11 17:22:22 +08:00
Râu Cao
99e029a5ca
Switch NBXplorer to Postgres
2023-02-08 15:30:44 +08:00
86d7514739
Merge pull request 'Upgrade bitcoind, NBXplorer, BTCPayServer' ( #467 ) from chore/upgrade_btcpay into master
...
Reviewed-on: #467
2023-02-03 09:05:46 +00:00
Râu Cao
4c7a5f4db8
Upgrade bitcoind, NBXplorer, BTCPayServer
2023-02-03 17:04:16 +08:00
Râu Cao
5e709a3a4f
Update node configs
2023-02-01 21:53:50 +08:00
Râu Cao
d04e2f4fd5
Bump cookbook version
2023-02-01 20:45:01 +08:00
Râu Cao
f9e7d98bf9
Document testing commands
2023-02-01 20:44:45 +08:00
Râu Cao
9c33fbda21
Bump rskj version
2023-02-01 20:44:07 +08:00
Râu Cao
a7b990c64f
Update preseed syntax
2023-02-01 20:43:41 +08:00
Râu Cao
55e48cca86
Include nginx cookbook in local deps (for testing)
2023-02-01 20:43:07 +08:00
Râu Cao
063858f06c
Install imagemagick for mediawiki thumbnail generation
2023-02-01 18:17:39 +08:00
Râu Cao
cd4d21efc8
Remove superfluous license header
2023-02-01 18:17:29 +08:00
Râu Cao
ad10e8cceb
Fix up lndhub hook config, converge all relevant nodes
2023-01-25 13:02:09 +08:00
Râu Cao
3e79955261
Deploy akkounts from master again
2023-01-25 12:31:17 +08:00
Râu Cao
d3d046b0d0
Merge branch 'feature/libretranslate'
2023-01-25 12:28:33 +08:00
7447ba2842
Merge pull request 'Configuration for LndHub webhooks' ( #461 ) from feature/lndhub_webhooks into master
...
Reviewed-on: #461
2023-01-17 13:45:00 +00:00
1a7fd5ac65
Merge branch 'master' into feature/lndhub_webhooks
2023-01-17 13:44:14 +00:00
cdb1213e1d
Merge pull request 'Migrate Mastodon S3 from AWS to Garage' ( #458 ) from feature/22-mastodon_s3 into master
...
Reviewed-on: #458
2023-01-17 13:42:28 +00:00
Râu Cao
03fa49ed0c
Remove unused import
2023-01-17 17:15:16 +08:00
Râu Cao
ed0e030106
Set up libretranslate for kosmos.social
2023-01-17 17:12:22 +08:00
Râu Cao
3933e4c310
Fix endpoint URL
2023-01-17 15:36:42 +08:00
Râu Cao
f777af22b8
Finish up Garage S3 config for kosmos.social
2023-01-14 15:59:47 +08:00
Râu Cao
345ba14f0e
Add garage S3 config for Mastodon
2023-01-14 15:03:38 +08:00
Râu Cao
89865bcd2a
Allow send_message endpoint from akkounts
2023-01-12 15:37:08 +08:00
Râu Cao
62d1a86555
Configure Webhook URL for lndhub.go
2023-01-12 15:37:04 +08:00
Râu Cao
2eb0544ea9
Update README
2023-01-05 17:14:46 +08:00
2d50c7dfd6
Merge pull request 'Upgrade Gitea to 1.18.0' ( #460 ) from chore/upgrade_gitea into master
...
Reviewed-on: #460
2022-12-30 16:08:18 +00:00
Râu Cao
e54112418e
Upgrade Gitea 1.18.0
...
Requires some config changes for the mailer.
2022-12-30 23:05:40 +07:00
0c37504ac6
Merge pull request 'Set up lndhub.go' ( #457 ) from feature/454-lndhub.go into master
...
Reviewed-on: #457
2022-12-27 06:29:09 +00:00
d8e0124c46
Merge pull request 'Set up PeerSwap for LND' ( #459 ) from feature/peerswap into feature/454-lndhub.go
...
Reviewed-on: #459
2022-12-27 06:23:09 +00:00
Râu Cao
176dd64438
Remove peerswap policy file from recipe
...
This will be auto-created anyway, and we don't want to overwrite changes
added by the CLI.
2022-12-26 11:29:17 +07:00
Râu Cao
4f1b1aff30
Set up PeerSwap
...
Allows to swap sats in and out of Lightning channels without a 3rd party
(and their fees). Instead, swaps can be initiated directly with the
channel peer.
https://www.peerswap.dev/
2022-12-26 11:16:22 +07:00
Râu Cao
b3465e186f
Fix comment
2022-12-26 11:16:01 +07:00
Râu Cao
ea635a52e9
Formatting
2022-12-26 11:14:40 +07:00
Râu Cao
90e17b0abc
Rename bitcoind recipe
...
Was still using a name from when the cookbook didn't set up anything
else
2022-12-25 16:28:14 +07:00
Râu Cao
8c8e978ae9
Update node configs
2022-12-24 00:58:31 +07:00
Râu Cao
3d7b4df376
Add rate limit config for lndhub-go
2022-12-24 00:58:11 +07:00
Râu Cao
b738dc1e80
Add nginx proxy hosts for Garage Web access
...
The respective bucket needs to be configured with a domain alias. When a
new alias is added to the `s3_web_domains` config, a new nginx site can
then be deployed to the `nginx_proxy` hosts.
2022-12-23 18:07:39 +07:00
Râu Cao
3641ea7a60
Deploy lndhub.go branch of akkounts
2022-12-23 18:02:42 +07:00
Râu Cao
a7e04f4e63
Exclude lndhub backups in dev
2022-12-23 14:17:43 +07:00
Râu Cao
e0c400c007
Use correct asset URL for lndhub logo
2022-12-22 20:03:58 +07:00
Râu Cao
7802ea25e6
Ignore chef environment when looking up primary
...
We use mixed environments still, not everything is in "production" yet.
2022-12-22 19:45:45 +07:00
Râu Cao
fb1206d03f
Refactor bitcoin-related roles and node config
2022-12-22 19:35:41 +07:00
Râu Cao
379a503dd0
Move lndhub nginx site to proxy
...
And configure for lndhub-go. Also configure branding for public lndhub
dashboard
2022-12-22 19:35:30 +07:00
Râu Cao
7d11450c4e
Set up lndhub.go
...
closes #454
2022-12-11 14:30:27 +01:00
430f8b36b6
Merge pull request 'Set up LDAP/dirsrv replication' ( #453 ) from feature/ldap_replication into master
...
Reviewed-on: #453
2022-12-08 13:12:22 +00:00
26a34a69d3
Merge branch 'master' into feature/ldap_replication
2022-12-08 13:08:00 +00:00
98785a1a86
Merge pull request 'Move Mastodon nginx to proxy/LB' ( #452 ) from feature/mastodon_nginx into master
...
Reviewed-on: #452
2022-12-08 13:07:35 +00:00
66c91b5a7f
Merge branch 'master' into feature/mastodon_nginx
2022-12-08 13:07:09 +00:00
Râu Cao
a460302728
Add missing sidekiq queue
2022-12-01 17:08:17 +01:00
f8fd10c4c2
Merge pull request 'Upgrade Mastodon to 4.0' ( #456 ) from chore/upgrade_mastodon into feature/mastodon_nginx
...
Reviewed-on: #456
2022-12-01 14:33:20 +00:00
Râu Cao
2ecb4e2385
Upgrade Ruby to 3.0.4
2022-12-01 15:29:38 +01:00
Râu Cao
cdd3f026c4
Always use config for skipping post-deployment migrations
2022-12-01 15:05:24 +01:00
Râu Cao
5d05d5c187
Move Mastodon nginx to proxy/LB
2022-11-30 12:07:54 +01:00
Râu Cao
f3ca307e64
Fix Tor access
...
Configure alternate_domains for Rails app to re-enable Tor access (was
throwing 403s without this config)
2022-11-30 12:06:25 +01:00
Râu Cao
66f5217a41
Refactor Mastodon nginx recipe for proxy usage
...
Works both as local deployment and proxy (via roles and environments)
* Use upstreams for proxy_pass
* Access static assets from proxy, configure caching for them
* Move Tor config to environment, install via role
* ...
2022-11-30 12:02:17 +01:00
Râu Cao
83e55c84a2
Use domain name for log file paths
2022-11-30 12:00:01 +01:00
Râu Cao
83513dbd9d
Remove request limits for ipfs proxy
...
In favor of fail2ban
2022-11-30 11:58:22 +01:00
Râu Cao
c4d43b7f4e
Make Mastodon services listen on private IP in prod
...
And allow access to them from the private network
2022-11-30 11:57:51 +01:00
83fea1026c
Merge pull request 'Install/configure Garage (S3-compatible object storage cluster)' ( #450 ) from feature/garage into master
...
Reviewed-on: #450
2022-11-28 17:38:41 +00:00
3df9611a9d
Merge pull request 'Store Gitea data (avatars, attachments, etc.) in Garage/S3' ( #451 ) from feature/gitea_s3 into feature/garage
...
Reviewed-on: #451
2022-11-26 16:19:19 +00:00
Râu Cao
c3e98688fd
Deploy second dirsrv supplier
...
Manually configured (once) to replicate data from and to the first
supplier on `ldap-3`.
2022-11-26 16:47:55 +01:00
Râu Cao
2958ba4b81
Use *.kosmos.local hostnames for LDAP nodes
2022-11-26 16:47:28 +01:00
Râu Cao
991458208d
Use a role for configuring LDAP hostname on clients
...
This way it's also easy to converge all LDAP clients at once.
2022-11-26 16:45:45 +01:00
Râu Cao
8d4db7290e
Rename dirsrv_primary role
...
The term used in 389 docs is "supplier" instead (ex "master")
2022-11-26 16:44:05 +01:00
Râu Cao
e0fb84e56c
Store Gitea data (avatars, attachments, etc.) in Garage/S3
...
Also adds a new garage gateway role, which only allows RPC (inter-node)
traffic to Garage.
2022-11-26 13:05:07 +01:00
Râu Cao
9a89af0fe3
Add basic Garage doc
2022-11-25 10:56:22 +00:00
Râu Cao
20e6bdb7f9
Add production environment, replication for garage
...
Also deploy a third node in a different data center
2022-11-25 10:56:22 +00:00
Râu Cao
b5ff60214c
Install/configure Garage
...
Add a garage cookbook that installs the garage binary distribution and
creates the necessary configuration and system service.
Also deploy two new VMs to act as storage nodes.
refs #428
2022-11-25 10:56:22 +00:00
34bd187e3e
Merge pull request 'Set up fail2ban for nginx, move IPFS gateway to proxy role' ( #449 ) from feature/fail2ban_nginx into master
...
Reviewed-on: #449
2022-11-24 15:09:05 +00:00
Râu Cao
d06f5d7723
Set up fail2ban for nginx, move IPFS gateway to proxy role
2022-11-24 14:02:43 +01:00
Râu Cao
7f545404b1
Update node info
2022-11-22 21:23:39 +01:00
9dc2b387d1
Merge pull request 'Upgrade kosmos.social to Mastodon 3.5.3' ( #448 ) from chore/upgrade_mastodon into master
...
Reviewed-on: #448
2022-11-22 20:19:52 +00:00
Greg Karékinian
5a5f8425af
Add missing postgresql-client package for backup gem
2022-11-07 16:30:45 +01:00
Greg Karékinian
97fe328312
Add missing pg_db recipe on postgresql_primary role
2022-11-07 16:30:02 +01:00
Greg Karékinian
ed04753318
Update mastodon-3 node after chef run
2022-11-07 16:28:09 +01:00
Greg Karékinian
4bfb7d5f5d
Extract mastodon db backup to its own recipe
2022-11-07 16:22:15 +01:00
Râu Cao
4188b2976b
Use Ruby 3.0.3, skip post-deployment migrations
2022-11-07 14:53:52 +01:00
Râu Cao
3620a43190
Upgrade Elasticsearch from 6.x to latest 7.x
2022-11-06 13:56:15 +01:00
5a94050555
Merge pull request 'Prune VM backups after every run' ( #447 ) from feature/439-prune_backups into master
...
Reviewed-on: #447
2022-11-05 20:42:31 +00:00
Râu Cao
28454c0849
Change VM backup schedule for draco
2022-11-05 17:43:53 +01:00
Râu Cao
6df168f32f
Prune VM backups after every run
2022-11-05 17:43:48 +01:00
9c0764a2eb
Merge pull request 'Migrate hal8000 to new kredits and nodejs VM' ( #445 ) from feature/migrate_hal8000 into master
...
Reviewed-on: #445
2022-11-04 18:14:17 +00:00
Râu Cao
65933bef4b
Move hubot nginx sites to proxy role, deploy to fornax
2022-11-04 14:41:21 +01:00
Râu Cao
6cce1d9df8
Upgrade hal8000 setup for new hubot-kredits
2022-11-04 14:41:12 +01:00
Râu Cao
534f23eebc
Remove obsolete recipes
2022-11-04 14:38:51 +01:00
Râu Cao
37710be28b
Bundle main IPFS node recipes in a role
...
So we can find the VM/IP
2022-11-04 14:37:23 +01:00
1c17906a41
Merge pull request 'Deploy new kredits ipfs-pinner' ( #444 ) from feature/deploy_new_kredits_pinner into master
...
Reviewed-on: #444
2022-11-03 13:17:47 +00:00
Râu Cao
76fd629e40
Deploy new kredits ipfs-pinner
...
refs kredits/meta#10
2022-11-03 14:16:37 +01:00
88fa0f12dd
Merge pull request 'Upgrade LND to 0.15.4' ( #443 ) from chore/upgrade_lnd into master
...
Reviewed-on: #443
2022-11-03 10:04:05 +00:00
Râu Cao
0297298ce0
Upgrade LND to 0.15.4
...
Fixes a critical issue that prevents block sync in production
2022-11-03 11:02:52 +01:00
08bcdcc395
Merge pull request 'Fix IPFS node connectivity from the outside as well as the private network' ( #442 ) from bugfix/ipfs_connectivity into master
...
Reviewed-on: #442
2022-11-02 18:32:44 +00:00
Râu Cao
90b62e3fc1
Remove ufw logging for ipfs
2022-11-02 19:27:09 +01:00
c9a0310511
Merge branch 'master' into bugfix/ipfs_connectivity
2022-11-02 17:13:55 +00:00
b8d6ba4c89
Merge pull request 'Move block data to CIFS share, other data to VM's own storage' ( #438 ) from feature/bitcoin_data_directories into master
...
Reviewed-on: #438
2022-11-02 17:13:37 +00:00
Râu Cao
b1922d26f6
Allow IPFS connections on private network
...
(HAProxy is now also using the private network.)
This fixes IPFS connections to Kosmos nodes from outside the network, as
well as in between nodes on the private network.
2022-11-02 14:06:07 +01:00
Râu Cao
f7ff1248fe
Enable Web UI on private network
2022-11-02 14:05:43 +01:00
Râu Cao
bc11301782
Move bitcoind datadir from host to VM storage
2022-10-27 11:52:05 +02:00
Râu Cao
756382ec9f
Move block data files to CIFS share
...
This is the vast majority of disk space used on the host currently.
2022-10-26 15:49:03 +02:00
Râu Cao
458558fb26
Deploy different content on kosmos.org for now
2022-10-24 15:13:18 +02:00
446148b28a
Merge pull request 'Downgrade go-ipfs to 0.15' ( #437 ) from chore/downgrade_ipfs into master
...
Reviewed-on: #437
2022-10-24 12:19:25 +00:00
Râu Cao
67f6e1b34a
Downgrade go-ipfs to 0.15
...
Fixes #435
2022-10-24 14:18:19 +02:00
945283738a
Merge pull request 'Set up live backups for all VMs' ( #433 ) from feature/qemu_snapshots into master
...
Reviewed-on: #433
2022-10-22 11:52:26 +00:00
33ae6befaa
Merge pull request 'Block outgoing traffic to local networks by default' ( #434 ) from feature/block_outoing_local_traffic into feature/qemu_snapshots
...
Reviewed-on: #434
2022-10-22 11:50:28 +00:00
Râu Cao
58e6e7de03
Remove ufw logs
...
Just added them to check the blocking for a while
2022-10-22 13:03:16 +02:00
Râu Cao
1afc3a5de5
Block outgoing traffic to local networks by default
...
Some software, e.g. go-ipfs, is rather aggressive in scanning local
networks for peers, which can trigger abuse reports and IP locks in the
data center.
2022-10-21 13:37:38 +02:00
Râu Cao
61710aa4a4
Set up systemd service and timer for backups
2022-10-21 10:50:04 +02:00
Râu Cao
95941c830f
Remove verbose stats outout from backup script
2022-10-21 10:49:30 +02:00
Râu Cao
a5b2eb5f97
Move borg credentials to a separate file
...
To be used from a service
2022-10-21 10:49:02 +02:00
Râu Cao
374654f8fd
Update chef/ohai on hosts
2022-10-21 10:47:46 +02:00
Râu Cao
7051cc9da8
Update draco's main IP address
2022-10-21 10:47:17 +02:00
Râu Cao
51163ca3a3
Whitelist Chef attributes for newer client versions
2022-10-21 10:46:16 +02:00
Râu Cao
927bb63535
Add kvm_guest role to nodes
2022-10-19 16:28:07 +02:00
Râu Cao
34a57fa298
Merge branch 'lnd_tor_changes' into feature/qemu_snapshots
2022-10-19 15:23:39 +02:00
Râu Cao
6d765f959d
Fix backup VM name for ldap-3
...
(and potentially other guests where the name differs from the libvirt
domain name)
2022-10-19 12:51:46 +02:00
Râu Cao
82f50b0caa
Only back up domain-specific XML per archive
2022-10-19 12:24:10 +02:00
Râu Cao
6c8f9055c1
Create directories for KVM host backup files
2022-10-19 12:23:54 +02:00
Râu Cao
2e2ebbcc02
Fix filenames for guest agent sockets
2022-10-19 12:23:17 +02:00
Râu Cao
a3844b7ef6
WIP Add KVM host backup recipe
...
Add a recipe that configures scripts for live backups of VM images via
libvirt and borg.
2022-10-19 12:08:05 +02:00
Râu Cao
6d50a32aca
Add FIXME note
2022-10-19 12:08:05 +02:00
Râu Cao
7848b4d365
Add jitsi-meet-1 VM
2022-10-19 12:08:04 +02:00
Râu Cao
063e9e070c
Add borg credentials
2022-10-19 12:08:04 +02:00
Râu Cao
b78e6685ed
Add kvm_guest role to VMs on fornax
2022-10-19 12:07:56 +02:00
Râu Cao
895d293899
Update RSKj version
2022-10-18 18:46:53 +02:00
11062f5180
Merge pull request 'Add guest agent device when creating VMs' ( #431 ) from bugfix/qemu_guest_agent into master
...
Reviewed-on: #431
2022-10-12 14:34:06 +00:00
Râu Cao
315cd247e5
Enable qemu-guest-agent after install
...
This is actually automatically done for the service from the apt
package, but I like specifying it explicitly as well.
2022-10-12 15:55:08 +02:00
Râu Cao
e73b8fb01f
Add guest agent device when creating VMs
...
This is necessary for qemu-guest-agent to actually work
2022-10-12 15:53:00 +02:00
d26ab2249c
Merge pull request 'Deploy a Discourse instance for remoteStorage' ( #430 ) from feature/discourse_wrappers into master
...
Reviewed-on: #430
2022-10-11 16:08:52 +00:00
Greg Karékinian
fe8e66fda3
Add the new rs-discourse-1 server
2022-10-11 18:00:48 +02:00
Greg Karékinian
410c238450
Update the discourse-2 and fornax nodes after Chef run
2022-10-11 18:00:31 +02:00
Greg Karékinian
378fee85ec
Create a discourse cookbook that can be wrapped
...
It makes it possible to serve multiple Discord instances to different
hosts from a single nginx load balancer
Right now we run one for Kosmos and one for remoteStorage
2022-10-11 17:58:22 +02:00
Râu Cao
e90b265f7e
Remove superfluous license headers
2022-10-10 15:29:17 +02:00
a5ac53caef
Merge pull request 'Upgrade LND, bitcoind' ( #429 ) from chore/upgrade_lnd into master
...
Reviewed-on: #429
2022-10-10 11:47:19 +00:00
Râu Cao
bec54e6ffb
Upgrade LND, bitcoind
...
LND needs an emergency hotfix, released in 0.15.2, due to a subtle
Taproot transaction parsing limitation in a library it depends on.
2022-10-10 13:46:12 +02:00
Greg Karékinian
1270488ef9
Remove ldap-2 VM
2022-10-03 14:45:00 +02:00
7026e0e85b
Merge pull request 'Upgrade Gitea to 1.17.2' ( #427 ) from chore/upgrade_gitea into master
...
Reviewed-on: Kosmos/chef#427
2022-09-21 09:33:01 +00:00
Râu Cao
ff907384d9
Upgrade Gitea to 1.17.2
2022-09-21 11:32:20 +02:00
2360ad2ac0
Merge pull request 'Move LDAP server to new VM' ( #426 ) from chore/new_ldap_vm into master
...
Reviewed-on: #426
2022-08-23 13:01:30 +00:00
Greg Karékinian
e4d4aa45f7
Use FQDN for hostname, add LDAP server
2022-08-22 16:16:01 +02:00
Greg Karékinian
85abfd4e5e
Create the required groups and ACIs
2022-08-22 16:15:02 +02:00
Râu Cao
80c3e4e270
Create ldap-3 VM
2022-08-22 13:40:26 +01:00
Râu Cao
f17a420a64
Update VM base image
2022-08-22 13:40:07 +01:00
607466b1d2
Merge pull request 'Add KVM Guest role' ( #409 ) from feature/kvm_guest_role into master
...
Reviewed-on: #409
2022-08-22 11:46:43 +00:00
d7aeb0e483
Merge pull request 'Upgrade Gitea to 1.17.0' ( #424 ) from chore/upgrade_gitea into master
...
Reviewed-on: #424
2022-08-18 08:33:48 +00:00
Râu Cao
65adc84e5b
Upgrade Gitea to 1.17.0
...
Also adds a new Nginx directive to allow larger uploads to the Docker
registry endpoints.
closes #422
2022-08-09 11:58:56 +02:00
fdb326b91a
Merge pull request 'Move Zerotier controller' ( #421 ) from chore/move_zerotier_controller into master
...
Reviewed-on: #421
2022-08-08 10:58:22 +00:00
Râu Cao
37b948cbe5
Remove custom cron job
...
refs #395
2022-08-08 12:57:30 +02:00
4adccb7411
Merge pull request 'Enable cron job to delete repo archives' ( #423 ) from chore/395-gitea_cron into master
...
Reviewed-on: #423
2022-08-08 10:54:26 +00:00
Râu Cao
08b7c7a5ac
Enable cron job to delete repo archives
...
closes #395
2022-08-08 12:51:26 +02:00
Râu Cao
206bb69100
Update node info
2022-07-31 13:05:59 +02:00
Râu Cao
41d4f87710
Move Zerotier controller
...
It's running on fornax now, and the VMs have been deleted. This way,
there's no internal routing needed for it to be publicly accessible by
any network member nodes.
2022-07-28 15:38:42 +02:00
8f43b34a86
Merge pull request 'Upgrade Gitea to 1.16.9' ( #420 ) from chore/upgrade_gitea into master
...
Reviewed-on: #420
2022-07-16 14:43:02 +00:00
8d332e76f3
Upgrade Gitea to 1.16.9
2022-07-16 16:42:19 +02:00
3fb3fd0f11
Merge pull request 'Update root path for kosmos website' ( #419 ) from chore/new_website into master
...
Reviewed-on: #419
2022-07-14 11:41:14 +00:00
562da400e3
Update root path for kosmos website
2022-07-11 13:31:31 +02:00
7de33b4e94
Merge pull request 'Fix VM base images being overwritten' ( #417 ) from bugfix/vm_base_images into master
...
Reviewed-on: #417
2022-06-11 09:20:42 +00:00
a1db277f2f
Merge branch 'master' into bugfix/vm_base_images
2022-06-11 09:20:09 +00:00
52d7fe52e5
Fix VM base images being overwritten
...
The base image is used as backing image for the VM images, so
overwriting it results in corrupt data after VM reboots.
2022-06-11 11:17:42 +02:00
7482283696
Merge pull request 'Fix MUC service/domains not being announced' ( #416 ) from bugfix/muc_discovery into master
...
Reviewed-on: #416
2022-06-11 09:16:23 +00:00
a85415ef48
Fix MUC service/domains not being announced
...
Only subdomains of `hosts` are automatically announced, but other
domains have to be added manually via the `extra_domains` disco module
config.
fixes #413
2022-06-03 18:07:50 +02:00
9d61e28911
Merge pull request 'Upgrade ejabberd to 22.05' ( #414 ) from chore/upgrade_ejabberd into master
...
Reviewed-on: #414
2022-05-31 15:08:36 +00:00
48cdd62973
Upgrade ejabberd to 22.05
...
Tested/running on all cluster nodes. Due to changes in the upstream
package we were able to remove some complexity from the recipe. Deleting
code FTW!
closes #334
2022-05-31 16:27:07 +02:00
e55805bc1b
Update ejabberd node info
2022-05-31 11:33:52 +02:00
a1e2c21bcb
Fix abuse address info in XMPP service discovery
...
It wasn't replacing the @HOST@ placeholder with the actual vhost domain.
2022-05-31 11:32:55 +02:00
24bc5bc4df
Merge pull request 'Support multiple different VMs in Vagrant' ( #411 ) from vagrant/dirsrv into master
...
Reviewed-on: #411
2022-05-27 13:41:28 +00:00
cae4547b12
Merge branch 'master' into vagrant/dirsrv
2022-05-27 13:41:06 +00:00
3261be556d
Merge pull request 'Set up nginx proxy for akkounts/kredits API' ( #412 ) from feature/kredits_api into master
...
Reviewed-on: #412
2022-05-27 13:30:40 +00:00
a93c5e5af6
Allow external HTTP requests to BTCPay
...
Limited to private network via firewall rule.
2022-05-24 15:10:24 +02:00
92d1bcd8c7
Add nginx proxy for akkounts/kredits API
...
closes #410
2022-05-24 15:03:51 +02:00
7a52f2bd89
Allow BTCPay API access over private network
2022-05-24 13:08:41 +02:00
d8781f7581
Finish multi-VM config
2022-05-24 12:46:37 +02:00
630ea5113e
Support multiple VMs in Vagrant config
2022-05-24 12:43:16 +02:00
77e7eed795
Configure Vagrant for dirsrv
2022-05-23 12:47:17 +02:00
a0b64a709d
Add KVM Guest role
...
Only installs qemu-guest-agent for now, for improving live VM backups.
2022-05-23 12:41:55 +02:00
6a85c2d5c6
Merge pull request 'Move dirsrv (LDAP) primary node to new VM' ( #401 ) from new_ldap_server into master
...
Reviewed-on: #401
2022-05-11 14:55:05 +00:00
2d6cbd22e4
Add ejabberd-8 node config
2022-05-11 16:27:21 +02:00
48c3fef1a1
Remove TLS config for ejabberd LDAP
2022-05-11 16:27:21 +02:00
decd937d43
Remove superfluous license header
2022-05-11 16:27:21 +02:00
e89e0b3122
Fix letsencrypt bootstrap for ejabberd
2022-05-11 16:27:21 +02:00
b3f1a74cc2
Remove obsolete ejabberd backups
2022-05-11 16:27:21 +02:00
Greg Karékinian
32f620e95c
Update the wiki-1 node after Chef run
2022-05-11 16:23:18 +02:00
Greg Karékinian
e766a96d3b
Update the discourse-2 node after Chef run
2022-05-11 16:23:18 +02:00
Greg Karékinian
a14cd9a74f
New config for LDAP in Discourse
2022-05-11 16:23:18 +02:00
Greg Karékinian
0d133de1b8
New config and credentials for LDAP connection in mediawiki
2022-05-11 16:23:17 +02:00
5c31531357
Merge pull request 'Configure STUN/TURN for ejabberd and nginx proxy' ( #407 ) from feature/ejabberd_stun_n_turn into new_ldap_server
...
Reviewed-on: #407
2022-05-11 14:21:14 +00:00
Greg Karékinian
5c00e2d28a
Add an attribute containing the LDAP server's address
2022-05-11 15:37:36 +02:00
c158f845f0
Configure STUN/TURN for ejabberd and nginx proxy
2022-05-11 15:27:49 +02:00
36e52a3cf1
Merge pull request 'Use the new LDAP server in the ejabberd configuration' ( #406 ) from chore/ejabberd_new_ldap_server into new_ldap_server
...
Reviewed-on: #406
2022-05-11 12:57:24 +00:00
Greg Karékinian
c56870008e
Use the new LDAP services application accounts
2022-05-11 14:49:28 +02:00
Greg Karékinian
e53e55cb2d
Disable TLS for LDAP since we're using Zerotier networking
2022-05-11 14:49:00 +02:00
Greg Karékinian
ff7cb1ce4a
Generate a hosts entry for the LDAP server
2022-05-11 14:48:30 +02:00
Greg Karékinian
1502d1956d
Set new passwords for the LDAP service accounts
2022-05-11 14:47:32 +02:00
45218ed024
Merge pull request 'Update Gitea to 1.16.6' ( #404 ) from chore/gitea_1.16.6_update into new_ldap_server
...
Reviewed-on: #404
2022-05-10 09:53:26 +00:00
Greg Karékinian
907706d1d2
Set up the hosts entry for the new LDAP server
2022-05-10 11:50:49 +02:00
Greg Karékinian
b869002c1a
Update Gitea to 1.16.6
2022-05-10 11:50:35 +02:00
Greg Karékinian
7ffd3bbf73
Add LDAP's Zerotier IP to the akkount server's hosts
2022-04-28 12:12:10 +02:00
1da5ef4979
Merge branch 'master' into new_ldap_server
2022-04-28 09:23:18 +02:00
3cc11e58d3
Add ldap-2 node config
2022-04-26 20:11:17 +02:00
590366639e
Fix fresh dirsrv installs on Ubuntu 20.04
2022-04-26 20:10:51 +02:00
8fe3670ce9
Remove ldap-1 node configs
2022-04-26 20:10:00 +02:00
71f9b06d28
Tor improvements for bitcoin cookbook
2022-04-19 14:08:02 +02:00
a633834a1b
Change rate limit for LndHub API
2022-04-18 10:42:47 +02:00
ae342106c9
Merge pull request 'Upgrade Gitea to 1.16.5' ( #400 ) from chore/upgrade_gitea into master
...
Reviewed-on: #400
2022-04-11 10:52:34 +00:00
994e5873d6
Upgrade Gitea to 1.16.5
...
Also add our hack-fix cron job to the recipe, so it doesn't get lost
when creating new VMs or otherwise.
2022-04-11 12:50:44 +02:00
8f4d11b317
Add cron job for deleting repo archives
2022-04-11 12:31:00 +02:00
5617591e1c
Merge pull request 'Rebuild broken VMs, fix small issues in various cookbooks' ( #399 ) from sheesh into master
...
Reviewed-on: #399
2022-04-03 13:47:08 +00:00
f758c74b5f
Rebuild broken VMs on fornax
2022-03-22 16:25:50 -06:00
bb8467b6ab
Switch Discourse deploy branch from master to main
2022-03-22 16:24:40 -06:00
ac1414e24e
Open alternative SSH port on KVM hosts
2022-03-22 16:24:14 -06:00
eabb6ab404
Switch more cookbooks from kosmos-redis to redisio
...
refs #349
2022-03-22 16:23:26 -06:00
71dda86d94
Remove obsolete license header
2022-03-22 16:21:29 -06:00
b6bd8ee6cd
Upgrade Sockethub to latest alpha
2022-03-18 11:47:51 -06:00
d5268167b5
Upgrade node.js from 12 to 14 everywhere
2022-03-18 11:47:23 -06:00
8e28d39acd
Remove superfluous license header
2022-03-18 11:47:04 -06:00
e3d0f8f83f
Merge pull request 'Move static sites from centaurus to fornax' ( #398 ) from chore/move_static_sites into master
...
Reviewed-on: #398
2022-03-17 21:13:24 +00:00
f17dd53f69
Include Stream configs in Nginx config if missing
2022-03-17 14:28:13 -06:00
4cd0149f76
Move static sites from centaurus to fornax/LB
2022-03-17 14:27:50 -06:00
5e38edb57e
Merge pull request 'Move Gitea and Drone CI to new VMs' ( #396 ) from chore/move_gitea_and_drone into master
...
Reviewed-on: #396
2022-03-17 19:38:04 +00:00
9c34e82484
Remove obsolete hosts entries for Gitea and Drone
...
They should use normal DNS
2022-03-17 13:02:56 -06:00
e1560ba12a
Fix copypasta
2022-03-12 15:40:22 -06:00
0a953070fe
Create nginx_proxy role
...
Used to configure hosts entries in the Gitea and Drone VMs, as well as
the allowed webhooks config for Gitea.
2022-03-12 15:39:07 -06:00
b270a2c1fd
Add database secret for Drone CI
...
closes #388
2022-03-12 15:05:16 -06:00
9187985acc
Move Gitea and Drone to new VMs
2022-03-12 14:47:06 -06:00
f35fb638d1
Adapt Drone recipes for VM setup, use PostgreSQL
2022-03-12 14:46:48 -06:00
a1b07dfb9e
Adapt Gitea recipes for new VM setup
2022-03-12 14:46:45 -06:00
23e49134e7
Remove superfluous license headers
2022-03-12 14:42:03 -06:00
f8a59b9720
WIP Use clearnet connections for clearnet LND nodes
2022-03-10 11:53:40 -06:00
c25e3632af
Upgrade RTL
2022-03-03 21:42:35 -06:00
b0ff8ec2a4
Merge pull request 'Upgrade RSKj to 3.2.0' ( #394 ) from chore/upgrade_rsk into master
...
Reviewed-on: #394
2022-03-03 15:29:57 +00:00
13c7774433
Upgrade RSKj to 3.2.0
2022-03-03 09:06:30 -06:00
8d7dacffd5
Merge pull request 'Fix Sockethub being offline due to missing HAProxy and UFW configs' ( #392 ) from bugfix/sockethub_firewall into master
...
Reviewed-on: #392
2022-03-02 15:57:05 +00:00
5f94c9752d
Merge pull request 'Deploy Kosmos LndHub fork with lnurl-pay additions' ( #393 ) from chore/fork_lndhub into master
...
Reviewed-on: #393
2022-03-02 15:56:44 +00:00
a091e07c72
Deploy Kosmos LndHub fork with lnurl-pay additions
2022-03-02 09:54:01 -06:00
f50e7874ba
Remove old sockethub firewall recipe
2022-02-27 16:08:40 -06:00
2e8004b37a
Add sockethub::firewall to draco, update node info
2022-02-27 13:10:00 -06:00
b9775a26e4
Rename sockethub firewall recipe
...
Not just used internally anymore.
2022-02-27 13:09:42 -06:00
1586fd536a
Remove superfluous license header
2022-02-27 13:09:17 -06:00
227e4a4665
Update node info
2022-02-26 09:47:31 -06:00
d7c5e40602
Merge pull request 'Deploy new akkounts' ( #390 ) from chore/deploy_akkounts into master
...
Reviewed-on: #390
2022-02-19 17:53:36 +00:00
e9c5286b24
Deploy new akkounts
...
Requires a newer version of Ruby.
2022-02-19 11:52:48 -06:00
74083256f4
Update zerotier-2 host
2022-02-18 13:19:42 -06:00
dc5813a8bb
Remove old zerotier VM config
2022-02-18 13:18:43 -06:00
203f89fe6b
Merge pull request 'Migrate Discourse to new VM on fornax' ( #389 ) from chore/migrate_discourse into master
...
Reviewed-on: #389
2022-02-18 19:02:49 +00:00
Greg Karékinian
ee6bde5b23
Update discourse-1 node after running Chef
2022-02-18 20:00:18 +01:00
Greg Karékinian
58f2544a9e
Remove the discourse role from centaurus
2022-02-18 19:59:17 +01:00
Greg Karékinian
98547088f1
Add the zerotier IP for fornax
2022-02-18 19:58:59 +01:00
Greg Karékinian
7582cafb77
Explicitly install snapd package
...
It was not installed on fornax for example
2022-02-18 19:42:43 +01:00
Greg Karékinian
31631ddc4a
Add missing recipe
2022-02-18 19:39:04 +01:00
5b2ae82ce6
Remove obsolete IP from nginx config
2022-02-18 12:23:37 -06:00
910817a7d4
Create certbot site before normal site
2022-02-18 12:23:14 -06:00
163b12efbc
Add firewall rule for Discourse
2022-02-18 12:22:15 -06:00
Greg Karékinian
79f623de4e
Prepare fornax and discourse-1 for the discourse migration
2022-02-18 18:15:33 +01:00
Greg Karékinian
e8f46db49c
Extract the nginx config for discourse to a recipe
...
Get the upstream servers automatically from Chef nodes
2022-02-18 18:14:33 +01:00
7a8fb1bc78
Add new Discourse VM
2022-02-17 13:02:10 -06:00
e46c8b3e81
Put Vagrant IP in new VirtualBox default allowed range
2022-02-12 10:58:15 -06:00
3c7cc1a133
Update node status
2022-02-12 10:57:26 -06:00
28659665a0
Merge pull request 'Migrate nodejs-2 from centaurus to nodejs-3 on fornax' ( #386 ) from chore/move_nodejs_vm into master
...
Reviewed-on: #386
2022-02-12 16:56:25 +00:00
6454c56b70
Merge pull request 'Fix Webhooks for Drone not working in Gitea 1.16' ( #387 ) from bugfix/allow_drone_webhooks into master
...
Reviewed-on: #387
2022-02-12 16:56:01 +00:00
03c7940f1c
Fix Webhooks for Drone not working in Gitea 1.16
...
By default, only external requests are allowed:
https://github.com/go-gitea/gitea/pull/17482
2022-02-12 10:53:45 -06:00
a710182c39
Add missing user recipe import to botka recipe
2022-02-10 17:00:19 -06:00
18161832ef
Deploy new nodejs VM (nodejs-3)
2022-02-10 17:00:10 -06:00
a2f1b7ccc6
Merge pull request 'Deploy new Zerotier Controller VMs' ( #385 ) from chore/move_zerotier into master
...
Reviewed-on: #385
2022-02-10 21:38:47 +00:00
935eff3b84
Deploy zerotier-3 on DO
...
Changes the firewall config to allow the control UI to be reached from
all connected networks.
2022-02-10 15:34:28 -06:00
a1f723d52e
Deploy zerotier-2 VM on fornax
2022-02-10 15:34:12 -06:00
c337ad9e40
Remove obsolete node configs
2022-02-10 15:33:23 -06:00
04a036c2b8
Merge pull request 'Move Mastodon to new VM on fornax' ( #383 ) from chore/mastodon_move into master
...
Reviewed-on: #383
2022-02-10 21:32:56 +00:00
a4b50d1643
Merge pull request 'Upgrade Gitea to 1.16.1' ( #384 ) from chore/upgrade_gitea into master
...
Reviewed-on: #384
2022-02-10 21:32:51 +00:00
22f5b8a66c
Upgrade Gitea to 1.16.1
2022-02-10 15:32:25 -06:00
b823ad5e59
Switch Mastodon cookbook to new Redis cookbook
...
Also add new node config.
refs #349
Co-authored-by Greg Karékinian <greg@karekinian.com >
2022-02-10 15:29:02 -06:00
341806ec8a
Update jemalloc binary path
...
Co-authored-by Greg Karékinian <greg@karekinian.com >
2022-02-10 15:26:37 -06:00
abe0218998
Merge pull request 'Upgrade knife-zero for Ruby 3.0' ( #381 ) from chore/upgrade_knife into master
...
Reviewed-on: #381
2022-02-02 23:32:26 +00:00
dace2ddf79
Upgrade knife-zero for Ruby 3.0
...
Was failing with latest Chef DK.
2022-02-02 17:31:13 -06:00
da1afcbf46
Merge pull request 'Upgrade Gitea to 1.15.11' ( #380 ) from chore/upgrade_gitea into master
...
Reviewed-on: #380
2022-02-01 18:49:33 +00:00
4462975e51
Upgrade Gitea to 1.15.11
2022-02-01 12:47:37 -06:00
3c76a1e0ad
Merge pull request 'Configure/install boltzd for Lightning/on-chain swaps' ( #378 ) from feature/boltz-lnd into master
...
Reviewed-on: #378
2022-01-28 23:38:49 +00:00
471c23eb5b
Update node config/state
2022-01-28 17:33:34 -06:00
90bd2dadb2
Configure boltzd access for RTL
2022-01-28 17:33:22 -06:00
87334de83a
Configure/install boltzd
2022-01-28 17:33:10 -06:00
d9bb257f99
Move golang installation to own recipe
...
Needed by more than one in the bitcoin cookbook now.
2022-01-28 17:32:19 -06:00
13ae913668
Upgrade nbxplorer
...
Needed a newer version of the .NET SDK as well.
2022-01-28 17:31:14 -06:00
727210aa74
Merge pull request 'Add new ejabberd node, remove old ones' ( #377 ) from chore/ejabberd_cluster_nodes into master
...
Reviewed-on: #377
2022-01-23 18:18:23 +00:00
8509e0af58
Add new ejabberd node
2022-01-23 12:15:14 -06:00
05dbf5211f
Remove old ejabberd node
2022-01-23 12:15:04 -06:00
bf6a77e41a
Merge pull request 'Use private IP for ejabberd TURN' ( #376 ) from chore/ejabberd_stun into master
...
Reviewed-on: #376
2022-01-23 18:09:46 +00:00
622fabe151
Use private IP for ejabberd TURN
2022-01-19 14:38:53 -06:00
3c3ca3f24a
Merge pull request 'Replace ejabberd cluster' ( #375 ) from chore/ejabberd_cluster into master
...
Reviewed-on: #375
2022-01-19 19:35:04 +00:00
6c8a98c524
Run Chef with ejabberd role against new cluster nodes
2022-01-18 12:50:14 -06:00
58736f05ee
Remove node configs for old ejabberd cluster
2022-01-18 12:50:14 -06:00
62c95175cc
Only allow ZeroTier connections for ejabberd cluster
2022-01-18 12:50:13 -06:00
74dd59ad07
Write hostname-related configs for new ejabberd cluster
2022-01-18 12:50:10 -06:00
5b351036ba
Remove superfluous license header
2022-01-18 11:19:20 -06:00
024b4bf164
Fix typo
2022-01-18 11:19:19 -06:00
14d83b4376
Add ejabberd-4 VM
2022-01-18 10:15:39 -06:00
a2c5295afd
Create ejabberd-3 VM
2022-01-18 10:15:37 -06:00
eb7c245ea1
Merge pull request 'Upgrade nbxplorer, c-lightning, BTCPay' ( #373 ) from chore/upgrade_bitcoin_software into master
...
Reviewed-on: #373
2022-01-08 23:19:23 +00:00
d53e1b538b
Update nbxplorer to 2.2.18
2022-01-08 17:17:04 -06:00
0e9a657090
Upgrade BTCPay to 1.3.7
2022-01-08 16:48:58 -06:00
3d54f7052f
Upgrade c-lightning to 0.10.2
2022-01-08 16:48:58 -06:00
ca79b6031a
Merge pull request 'Fix LndHub balances for on-chain topups' ( #372 ) from bugfix/lndhub_onchain_topups into master
...
Reviewed-on: #372
2022-01-08 22:48:09 +00:00
14cc2c0eb0
Fix lndhub balances with on-chain topups
...
Removes the bitcoind RPC config entirely, so lndhub only uses LND's
transaction monitoring. The bitcoind integration is broken as is.
2022-01-08 16:38:01 -06:00
ec10a0c120
Merge pull request 'Connect to IRC bouncer instead of directly' ( #371 ) from chore/fix_botka_connection into master
...
Reviewed-on: #371
2022-01-06 14:15:36 +00:00
f6fe3bab0f
Connect to IRC bouncer instead of directly
...
Changes botka on libera to connect to a bouncer, which also uses SASL,
in order to fix the connection issues and keep a stable connection with
minimal maintenance.
2022-01-06 08:12:42 -06:00
62ff4e51b7
Merge pull request 'Back up LND files and channels to S3' ( #370 ) from feature/359-lnd_channel_backups into master
...
Reviewed-on: #370
2022-01-03 17:38:46 +00:00
31f4a547a9
Backup LND SCB to S3 on change
...
closes #359
2021-12-23 13:06:32 +01:00
56f58f3a1b
Install/configure AWS client
2021-12-23 13:06:12 +01:00
57b5a244fa
Remove superfluous license header
2021-12-23 13:05:44 +01:00
0b80d490a8
Back up LND dir to S3
2021-12-23 13:05:14 +01:00
7adee84adf
Merge pull request 'Upgrade Mastodon to 3.4.4' ( #368 ) from chore/upgrade_mastodon into master
...
Reviewed-on: #368
2021-12-09 13:32:21 +00:00
a0de016e1c
Add single sidekiq process for new scheduler queue
2021-12-05 16:27:05 -06:00
38756fd296
Upgrade Mastodon to latest version
...
Using a new branch with freshly added Kosmos changes on top of the
upstream release code.
2021-12-05 16:11:09 -06:00
3d06300167
Merge pull request 'Upgrade LND to 0.14.1' ( #367 ) from chore/upgrade_lnd into master
...
Reviewed-on: #367
2021-12-05 01:59:56 +00:00
bbef38b6d6
Update golang cookbook
2021-12-04 19:57:19 -06:00
a8948053d6
Update LND to 0.14.1
...
closes #351
2021-12-04 19:56:49 -06:00
da3a70ef4c
WIP dirsrv changes
2021-12-02 13:56:23 -06:00
Greg Karékinian
685deea920
Simplify dirsrv setup
...
Connecting directly using zerotier, no more nginx
2021-12-02 19:08:27 +01:00
Greg Karékinian
d1d48cb749
Add role for ldap (dirsrv)
2021-12-02 19:08:16 +01:00
Greg Karékinian
067f5ba0d9
Add node config for ldap-1
2021-12-02 19:07:55 +01:00
a75237e0fb
Merge pull request 'Set up public HTTPS endpoint for RSKj' ( #337 ) from feature/rskj_public_endpoint into master
...
Reviewed-on: #337
2021-12-02 17:26:00 +00:00
5ac53633cd
Merge branch 'master' into feature/rskj_public_endpoint
2021-12-02 17:07:47 +00:00
62d7998da8
Merge pull request 'Deploy/configure LndHub' ( #350 ) from feature/lndhub into master
...
Reviewed-on: #350
2021-12-02 17:07:17 +00:00
6f29ede8d3
Merge branch 'master' into feature/lndhub
2021-12-02 16:59:46 +00:00
91905e0490
Merge pull request 'Fix backup email notifications' ( #366 ) from bugfix/358-backups into master
...
Reviewed-on: #366
2021-12-01 22:52:58 +00:00
f7afc21f9e
Use pbkdf2 for backup key derivation
...
Fixes a warning thrown by OpenSSL during backup runs, and makes it more
secure.
2021-11-30 13:38:34 -06:00
c30733e5aa
Send backup notifiations when run ends with warning
2021-11-30 13:38:18 -06:00
e63cda3317
Use SMTP/Mailgun for backup notifications
2021-11-30 13:37:51 -06:00
3d1937823a
Merge pull request 'Add documentation for backups/restores' ( #365 ) from docs/backup into master
...
Reviewed-on: #365
2021-11-30 18:46:37 +00:00
172553ddb3
Add documentation for backups/restores
2021-11-30 12:45:52 -06:00
1a7f7fee45
Merge pull request 'Configure/deploy kosmos.org (with Lightning Address support)' ( #360 ) from feature/kosmos_org_nginx into master
...
Reviewed-on: #360
2021-11-30 18:29:11 +00:00
9e94440975
Merge pull request 'Update kosmos postgres cookbook name in other cookbooks' ( #364 ) from chore/postgres_cookbook_deps into master
...
Reviewed-on: #364
2021-11-30 15:19:43 +00:00
a184f27c96
Update kosmos postgres cookbook name in other cookbooks
2021-11-30 08:47:15 -06:00
584da20d3e
Deploy nginx reverse proxy for RSK mainnet
2021-11-29 13:55:04 -06:00
0e1b362644
Fix nginx config, deploy LE cert
2021-11-29 13:33:43 -06:00
e414dfc23f
Merge branch 'master' into feature/rskj_public_endpoint
2021-11-29 13:18:42 -06:00
70fe5f81a5
Merge pull request 'Rename postgres cookbook, deploy new replica' ( #363 ) from chore/update_postgres_cookbook into master
...
Reviewed-on: #363
2021-11-29 19:15:52 +00:00
91ffe75bc1
Add missing files
2021-11-29 13:12:17 -06:00
ecdc41a54f
Rename postgres cookbook, deploy new replica
...
fixes #361
closes #330
2021-11-29 13:09:13 -06:00
1d8af6e86f
Merge pull request 'Fix custom resource not found in newer Chef versions' ( #362 ) from chore/update_postgres_cookbook into master
...
Reviewed-on: #362
2021-11-29 19:06:54 +00:00
fa8cbac163
Fix custom resource not found in newer Chef versions
...
fixes #361
refs #337
2021-11-29 13:03:40 -06:00
cbf42b9414
Add node config for fornax
2021-11-29 11:23:17 -06:00
f68eceec4c
Remove obsolete role
2021-11-28 10:08:39 -06:00
0628d091dc
Update rsk-testnet-2 with new rskj-testnet role
2021-11-28 10:05:48 -06:00
c9d32e02aa
Remove old RSK testnet node config
2021-11-28 10:02:28 -06:00
35115b7391
Merge branch 'master' into feature/rskj_public_endpoint
2021-11-28 10:02:06 -06:00
7e49dfd520
Merge pull request 'Deploy RSK mainnet node, and new testnet node' ( #346 ) from feature/343-rsk_mainnet into master
...
Reviewed-on: #346
2021-11-28 16:01:04 +00:00
d14d109a00
Configure/deploy kosmos.org
...
Includes a new directive for Lightning Address resolution.
2021-11-26 14:10:39 -06:00
6b2e501c90
Add LndHub backups
2021-11-26 11:22:24 -06:00
3962666a39
Re-enable Tor recipe
2021-11-25 19:44:42 -06:00
1e6c40b136
Update README
2021-11-25 19:37:48 -06:00
5d8e98e4a9
Merge pull request 'Upgrade Drone CI from 1.0 to 2.5' ( #357 ) from chore/upgrade_drone into master
...
Reviewed-on: #357
2021-11-25 23:29:23 +00:00
5717d11f7e
Upgrade Drone CI to latest version
...
closes #356
2021-11-25 17:28:13 -06:00
9656399e9d
Remove superfluous license header
2021-11-25 17:27:48 -06:00
11e9b569ae
Merge pull request 'Upgrade Gitea to 1.15.6' ( #354 ) from chore/upgrade_gitea into master
...
Reviewed-on: #354
2021-11-25 22:49:58 +00:00
24f94bdb02
Upgrade Gitea to 1.15.6
...
Configures the JWT signing algorithm to be the old, less secure
algorithm, until we update the token for Drone CI (and any other OAuth
apps).
closes #338
2021-11-25 16:44:48 -06:00
f93909da70
Update akkounts-1 node info
2021-11-22 23:46:36 -06:00
931a3a196f
Add public HTTP reverse proxy for LndHub
2021-11-21 13:22:40 -06:00
e48cf04e6c
Deploy LndHub to bitcoin-2
...
Update the node config
2021-11-17 11:11:45 -06:00
0481e42aa4
Install/configure LndHub
2021-11-16 16:03:46 -06:00
4b9183d78d
Use older Redis cookbook, install on bitcoin-2
2021-11-16 14:11:42 -06:00
18f65c4fc5
Add new Redis cookbook
2021-11-16 13:25:30 -06:00
80ec84782b
Berkshelf vendor changes
2021-11-16 13:25:08 -06:00
b911ec92c9
Update node info
2021-11-16 13:23:25 -06:00
65532836ff
Merge pull request 'Improve botka IRC config' ( #347 ) from chore/botka_config into master
...
Reviewed-on: #347
2021-10-23 09:29:36 +00:00
ca33dbe624
Improve botka IRC config
...
Use TLS, specify port.
2021-10-23 11:28:29 +02:00
e6ad9865bc
Add roles for RSK testnet/mainnet
2021-10-22 14:02:56 +02:00
83202747cf
Move RSKj firewall config to own recipe
2021-10-22 14:02:41 +02:00
ce7a7d5f83
Update RSKj version
2021-10-22 14:01:39 +02:00
5dd44fc283
Add new RSK VM node configs
2021-10-22 14:00:09 +02:00
ca13acb99f
Remove obsolete Parity role
2021-10-22 13:59:42 +02:00
fc70895d9c
Merge pull request 'Configure/deploy botka for libera.chat on nodejs-2 VM' ( #341 ) from feature/upgrade_and_move_botka_irc into master
...
Reviewed-on: #341
2021-09-21 15:52:23 +00:00
ee0a587dad
Upgrade botka, deploy for Libera.Chat to nodejs-2
...
Note: Temporarily disables wormhole, because it's still on Freenode,
where its credentials have been deleted by the new "management".
2021-09-13 18:21:46 +02:00
abec4be8ff
Update Gemfile.lock
2021-09-03 10:29:32 +02:00
efda3f6fdb
Merge pull request 'Update Sockethub to 4.1.0' ( #339 ) from chore/update_sockethub into master
...
Reviewed-on: #339
2021-09-03 08:29:10 +00:00
2a5d68cda9
Update Sockethub to 4.1.0
...
Tested/running on `nodejs-2`.
2021-09-03 10:28:07 +02:00
483481b141
Merge pull request 'Deploy Sockethub from the npm package' ( #146 ) from feature/145-sockethub_from_npm into master
...
Reviewed-on: #146
2021-08-31 09:00:07 +00:00
3817284566
Bump version
2021-08-09 19:12:45 +02:00
89e27a040f
Set up public HTTPS endpoint for RSKj
...
refs #325
2021-08-09 19:02:14 +02:00
0ffddb9d0f
Merge pull request 'Upgrade Gitea to 1.14.6' ( #336 ) from chore/upgrade_gitea into master
...
Reviewed-on: #336
2021-08-09 14:11:33 +00:00
8bbb4deed7
Upgrade Gitea to 1.14.6
2021-08-09 16:10:40 +02:00
fe66092c26
Merge pull request 'Upgrade LND to 0.13.1' ( #335 ) from chore/upgrade_lnd into master
...
Reviewed-on: #335
2021-08-09 14:01:19 +00:00
bf009d6822
Upgrade LND to 0.13.1
2021-08-09 16:00:19 +02:00
Greg Karékinian
e00d6c3a86
Use the sockethub role in the run list
2021-07-14 10:14:38 +02:00
Greg Karékinian
383a46676e
Create a role for sockethub
2021-07-14 10:14:28 +02:00
Greg Karékinian
eed27713ff
Add the sockethub firewall rule to centaurus
2021-07-14 10:14:07 +02:00
Greg Karékinian
b5e7e4ab85
Use DNS validation to generate/renew the TLS cert
2021-07-14 10:13:35 +02:00
Greg Karékinian
7c2aae6650
Add sockethub to nodejs-2's run list
2021-07-09 11:52:58 +02:00
Greg Karékinian
d135b3873c
Switch to a systemd unit Chef resource
2021-07-09 11:32:33 +02:00
Greg Karékinian
e9c86081f7
Update sockethub to the latest npm release
2021-07-09 11:32:11 +02:00
Greg Karékinian
b8ac5e1c07
Merge branch 'master' into feature/145-sockethub_from_npm
2021-07-09 10:51:02 +02:00
7fc0a65a22
Merge pull request 'Upgrade all bitcoin software to latest versions' ( #328 ) from chore/upgrade_bitcoin_software into master
...
Reviewed-on: #328
2021-07-07 09:42:33 +00:00
bb6394ab42
Merge pull request 'Add Tor support for LND' ( #332 ) from feature/lnd_tor into chore/upgrade_bitcoin_software
...
Reviewed-on: #332
2021-07-07 09:40:37 +00:00
b17c81a1aa
Merge branch 'chore/upgrade_bitcoin_software' into feature/lnd_tor
2021-07-07 09:36:11 +00:00
b7af04e8be
Support Tor connections for LND
...
Adds basics for general Tor support in bitcoin recipes, and specific
support for Tor to the lnd recipe.
2021-07-01 15:34:06 +02:00
9f0b5f0e64
(tor) Add support for ControlPort and CookieAuthentication
...
Allow to configure Tor to be controlled by other applications, so they
can manage hidden services and such.
2021-07-01 15:32:28 +02:00
c60e65020b
Merge pull request 'Auto-unlock LND wallet/node' ( #331 ) from feature/auto_unlock_lnd into chore/upgrade_bitcoin_software
...
Reviewed-on: #331
2021-07-01 13:21:41 +00:00
37873fb881
Add data bag for LND credentials
2021-07-01 13:17:51 +02:00
4bda4d7857
Install LND with all subsystems enabled
...
This allows to run loopd and other tools.
2021-06-30 17:10:57 +02:00
2ca576468e
Auto-unlock LND wallet/node
...
The latest release added a new config option for auto-unlocking the
wallet/node using a password file. This changeset adds support for just
that to the lnd recipe, so that nobody has to manually unlock it after
reboots or service restarts.
2021-06-30 17:09:31 +02:00
a65065c793
Upgrade all bitcoin software to latest versions
2021-06-29 15:55:20 +02:00
f095094cf7
Fix compilation issue with dotnet services
...
Compilation fails while the executable is running.
Fixed by stopping the services before upgrades.
2021-06-29 15:53:52 +02:00
3dcb9e76ce
Update node info
2021-06-29 15:53:22 +02:00
aa98b07f33
Merge pull request 'Configure/deploy RSKj' ( #326 ) from feature/deploy_rsk_testnet into master
...
Reviewed-on: #326
2021-06-21 16:38:55 +00:00
54274cef77
Merge branch 'master' into feature/deploy_rsk_testnet
2021-06-21 16:37:26 +00:00
65140f92ed
Merge pull request 'Upgrade Gitea to 1.14.3' ( #327 ) from chore/322-update_gitea into master
...
Reviewed-on: #327
2021-06-21 16:36:55 +00:00
b6d0bafce0
Remove license header, improve formatting
2021-06-21 17:50:23 +02:00
bbaeeb5099
Upgrade Gitea to 1.14.3
...
Adds a new config for the repository root directory.
closes #322
2021-06-21 17:47:30 +02:00
40a943354a
Update generated docs
2021-06-16 11:35:40 +02:00
5bc4266857
Merge pull request 'Use Chef Workstation's ruby with rbenv' ( #324 ) from chore/remove_bundler_version_lock into master
...
Reviewed-on: #324
2021-06-15 20:26:23 +00:00
Greg Karékinian
9a3565c11f
Only keep the knife-zero gem in the Gemfile
...
The rest is already shipped with Chef Workstation
2021-06-15 22:21:04 +02:00
cbdbb9c2eb
Switch to dokken for testing in kitchen
2021-06-13 17:50:32 +02:00
37787ce3e6
Specify package version for rskj
2021-06-13 17:50:25 +02:00
2063f5c953
WIP RSK cookbook
2021-06-13 16:58:53 +02:00
d7af1a57d1
Create RSK testnet VM
2021-06-12 14:52:36 +02:00
bda100313e
Update README
...
Add some info about Chef Workstation and rbenv.
2021-05-28 14:51:42 +02:00
ec75f1446c
Use chef-workstation Ruby with rbenv
...
See https://github.com/docwhat/rbenv-chef-workstation for painlessly
using Chef Workstation's Ruby with rbenv.
2021-05-28 14:40:02 +02:00
6bd76ebec6
Don't require old bundler version
2021-05-28 14:36:07 +02:00
dbdb803b7a
Merge pull request 'Upgrade Gitea from 1.13.1 to 1.13.7' ( #321 ) from chore/update_gitea into master
...
Reviewed-on: #321
2021-04-10 09:01:26 +00:00
7624bcec11
Upgrade Gitea from 1.13.1 to 1.13.7
2021-04-10 11:00:00 +02:00
18a5e0d5d0
Merge pull request 'Deploy hubots from Gitea repos' ( #320 ) from chore/hubot_repos into master
...
Reviewed-on: #320
2021-04-09 20:03:21 +00:00
f9c992e48e
Merge branch 'master' into chore/hubot_repos
2021-04-09 11:48:38 +00:00
Greg Karékinian
87d50d067c
Add updated upstream nodejs cookbook
...
... and its new dependency, chocolatey
2021-04-09 13:18:35 +02:00
c99f82fcd4
Update cookbook version
2021-04-09 11:45:39 +02:00
29e1d64ae0
Remove superfluous license headers from recipe files
2021-04-09 11:44:36 +02:00
9939e4d993
Deploy hubots from Gitea repos
...
The repos have been moved over from GitHub.
2021-04-09 11:35:49 +02:00
18e45cdaab
Merge pull request 'Upgrade nodejs to the latest version from the repo' ( #319 ) from feature/upgrade_nodejs into master
...
Reviewed-on: #319
2021-03-30 12:02:31 +00:00
769843e6ab
Merge branch 'master' into feature/upgrade_nodejs
2021-03-30 12:01:26 +00:00
Greg Karékinian
edf2e071e4
Upgrade nodejs to the latest version from the repo
...
This is possible in newer versions of the nodejs cookbook, by setting
the `node["nodejs"]["package_action"]["nodejs"]` attribute to `:upgrade`
2021-03-30 13:58:55 +02:00
aea5e07d2e
Merge pull request 'Set the environment variables in the hubot-kredits dir' ( #318 ) from feature/315-kredits_for_reviews_fix into master
...
Reviewed-on: #318
2021-03-30 11:58:26 +00:00
Greg Karékinian
f937e5dc68
Set the environment variables in the hubot-kredits dir
...
This is meant to be executed as a script manually, not as part of Hubot.
Example usage:
cd /opt/hal8000_xmpp/node_modules/hubot-kredits
./scripts/review-kredits.js --start 2021-02-01 --end 2021-02-28T23:59:59Z --dry
Closes #315
2021-03-30 13:54:21 +02:00
9fc49deafe
Merge pull request 'Fix an undefined variable' ( #317 ) from bugfix/dirsrv_undefined_variable into master
...
Reviewed-on: #317
2021-03-30 10:33:47 +00:00
9b2ba2c714
Merge branch 'master' into bugfix/dirsrv_undefined_variable
2021-03-30 10:33:35 +00:00
0504001e31
Merge pull request 'Deploy hubot with new hubot-kredits' ( #316 ) from feature/315-kredits_for_reviews into master
...
Reviewed-on: #316
2021-03-30 10:19:30 +00:00
Greg Karékinian
346b6540d1
Fix an undefined variable
2021-03-30 12:14:40 +02:00
Greg Karékinian
45817ba997
Update the barnard node file after running Chef
2021-03-30 12:12:27 +02:00
Greg Karékinian
9415b71965
Deploy hubot with new hubot-kredits
...
It includes a script for creating Kredits for reviews
Refs #135
2021-03-30 12:11:03 +02:00
3502fb0eec
Merge pull request 'Tell browsers to cache Gitea avatars for 30 days' ( #313 ) from bugfix/312-gitea_avatar_caching into master
...
Reviewed-on: #313
2021-02-26 21:25:41 +00:00
891b5f3fee
Tell browsers to cache Gitea avatars for 30 days
...
fixes #312
2021-02-26 20:41:53 +01:00
ab515e2101
Merge pull request 'Use shared Kosmos webfont for Gitea' ( #311 ) from feature/gitea_fonts into master
...
Reviewed-on: #311
2021-02-25 16:38:37 +00:00
5559ca41a7
Support IPv6 and CORS for font hosting
2021-02-25 17:38:11 +01:00
a96d29c716
Merge branch 'master' into feature/gitea_fonts
2021-02-25 15:38:06 +00:00
13ea0e3148
Merge pull request 'Set up assets.kosmos.org for shared static file/webfont hosting' ( #309 ) from feature/static_assets into master
...
Reviewed-on: #309
2021-02-25 15:22:52 +00:00
474208ea8e
Use shared Kosmos webfont for Gitea
...
Currently using a custom rule for system fonts. This change also adds a
missing new class to the custom rule to cover Markdown-generated content
like e.g. comments.
2021-02-25 14:29:41 +01:00
6109707f3c
Host assets.kosmos.org on centaurus
2021-02-25 12:13:20 +01:00
1c47f9ab27
Add cookbook for static asset hosting
...
Configures assets.kosmos.org, only for webfont hosting for now.
2021-02-25 12:12:41 +01:00
09f0faadda
Add missing header to recipe
2021-02-24 19:11:53 +01:00
26e8698e4f
Merge pull request 'Replace expired Zoom authentication token for hal8000' ( #308 ) from chore/update_zoom_jwt into master
...
Reviewed-on: #308
2021-02-18 18:53:45 +00:00
adc2ed895f
Merge pull request 'Update node.js (apt repo)' ( #307 ) from chore/update_nodejs_apt_repo into master
...
Reviewed-on: #307
2021-02-18 18:53:18 +00:00
fd901f6e64
Update Zoom JWT
2021-02-18 18:51:36 +01:00
f7d3736712
Update node details
...
Removes unused recipes from generated runlist
2021-02-18 18:51:11 +01:00
f3def7b71d
Update node.js (apt repo)
2021-02-10 23:47:23 +01:00
bac66d4dba
Merge pull request 'Configure/run Sidekiq for Akkounts' ( #304 ) from feature/303-akkounts_sidekiq into master
...
Reviewed-on: #304
2021-02-08 21:17:54 +00:00
f88ccae8a6
Merge branch 'master' into feature/303-akkounts_sidekiq
2021-02-08 21:17:43 +00:00
25e3dae4d4
Merge pull request 'Set up Zerotier Controller UI' ( #305 ) from feature/zncui into master
...
Reviewed-on: #305
2021-02-08 21:16:53 +00:00
9a54a7554f
Use package resource instead of custom command
2021-02-08 20:01:22 +01:00
e1bcd5efa0
Set up Zerotier Control UI
...
Install/configure ztncui[1], with HTTP access allowed from within the
private network.
[1]: https://key-networks.com/ztncui/
2021-02-07 17:44:08 +01:00
1adf3281bf
Configure/run Sidekiq for Akkounts
2021-02-03 19:53:13 +01:00
241f0807b3
Merge pull request 'Fix/refactor bitcoind recipe, upgrade bitcoind to 0.21' ( #298 ) from chore/update_bitcoin-core into master
...
Reviewed-on: #298
2021-01-28 15:26:31 +00:00
fe0a955314
Merge pull request 'Update lnd to 0.12.0' ( #299 ) from chore/update_lnd into chore/update_bitcoin-core
...
Reviewed-on: #299
2021-01-27 17:06:34 +00:00
65185b1a1b
Update lnd to 0.12.0
2021-01-27 18:05:30 +01:00
0d2a04f8ba
Refactor bitcoind recipe
...
Fixes various issues, like compilation not starting on subsequent
version updates, service not restarting after compilation, and a TODO
note on the compilation script itself.
2021-01-26 12:45:28 +01:00
152edbc958
Update bitcoind to 0.21
2021-01-26 12:45:17 +01:00
40fe403879
Stop c-lightning before compilation
...
See https://github.com/ElementsProject/lightning/issues/4346 for
potential issues with not doing that.
2021-01-26 12:33:09 +01:00
9023c14849
Merge pull request 'Update c-lightning to v0.9.3' ( #297 ) from chore/update_c-lightning into master
...
Reviewed-on: #297
2021-01-26 11:07:21 +00:00
c3256a07cc
Fix c-lightning configure not finding python
...
Broke in the latest release.
2021-01-26 12:05:29 +01:00
461af035ac
Update c-lightning to 0.9.3
2021-01-26 12:05:19 +01:00
e3507879a1
Merge pull request 'BTCPay recipe fixes (compilation + PostgreSQL config)' ( #296 ) from chore/btcpay_update_and_recipe_fix into master
...
Reviewed-on: #296
2021-01-26 10:52:03 +00:00
5a5db43de3
Use new postgres client role and config
...
Fixes btcpay having still used the old postgres master, and integrating
it into the global client config setup from here on out.
2021-01-26 11:49:20 +01:00
f7d3abc307
Stop BTCPay server before compilation
...
fixes #291
2021-01-26 11:48:41 +01:00
f1ff34d769
Merge pull request 'Add Onion-Location header for kosmos.social' ( #295 ) from feature/mastodon_onion_header into master
...
Reviewed-on: #295
2021-01-25 11:14:38 +00:00
49c75bbb05
Add Onion-Location header for kosmos.social
...
Tells Tor Browser where to find the native onion site.
refs #201
2021-01-25 12:09:28 +01:00
0920803535
Merge pull request 'Add script for notifying Kosmos channels from Ruby' ( #279 ) from feature/notify_xmpp_from_ruby into master
...
Reviewed-on: #279
2021-01-25 10:59:05 +00:00
ad271e55d4
Merge pull request 'Move PostgreSQL to VMs and access via Zerotier' ( #282 ) from feature/postgres_vms into master
...
Reviewed-on: #282
2021-01-25 10:56:42 +00:00
a3136e820b
Merge pull request 'Update Gitea to 1.13.1' ( #293 ) from chore/253-gitea_1.13.1 into master
...
Reviewed-on: #293
2021-01-24 12:49:49 +00:00
c2f36c6f01
Merge pull request 'Update ejabberd to 20.12' ( #294 ) from chore/ejabberd_20.12 into master
...
Reviewed-on: #294
2021-01-24 12:47:37 +00:00
Greg Karékinian
90ce664f2e
Update ejabberd to 20.12
...
It fixes a bug that prevented the config to be reloaded for LDAP options
(https://github.com/processone/ejabberd/issues/3181 ) and more:
https://www.process-one.net/blog/ejabberd-20-12/
2021-01-24 10:14:29 +01:00
Greg Karékinian
0e5519a4b7
Update Gitea to 1.13.1
...
Running on centaurus
Closes #253
2021-01-24 10:12:37 +01:00
Greg Karékinian
1ad7a6936c
Generate the hosts entry for the PostgreSQL replica
2021-01-24 10:11:17 +01:00
Greg Karékinian
b1fea4b09f
Update the postgres-3 node after Chef run
2021-01-23 19:25:49 +01:00
Greg Karékinian
7ce8b7d461
Enable PostgreSQL service
2021-01-23 19:14:55 +01:00
Greg Karékinian
112eb903ec
Add a script to switch the primary PostgreSQL server
...
Usage: scripts/postgresql/switch_primary.sh <old_primary_hostname> <new_primary_hostname>
2021-01-23 19:13:54 +01:00
Greg Karékinian
7e61e9cb45
Promote a new PostgreSQL primary: postgres-2
2021-01-23 19:09:41 +01:00
Greg Karékinian
a7116b8fe5
Switch the TLS mode to disabled for Gitea
...
We connect through a Zerotier private IP
2021-01-23 19:08:06 +01:00
Greg Karékinian
a4a35da0ff
Replace the hardcoded primary pg IP with a hostname
2021-01-23 17:34:58 +01:00
Greg Karékinian
5cb390f340
Remove the postgresql_replica from centaurus, run Chef
...
I have also deleted the data directory (in /mnt/data)
2021-01-23 17:11:45 +01:00
Greg Karékinian
4e1bd458f3
Update the mastodon-1 node after Chef run
2021-01-23 17:11:45 +01:00
Greg Karékinian
40fde8a861
Update the ejabberd nodes after Chef run
2021-01-23 17:11:45 +01:00
Greg Karékinian
39d0304ab4
Update the akkounts-1 node after Chef run
2021-01-23 17:11:45 +01:00
Greg Karékinian
ee7b3626be
Generate a host entry for the current PostgreSQL primary
2021-01-23 17:11:45 +01:00
Greg Karékinian
286cd2f2a3
Move the postgresql_client role to the top
...
We want the host file to be written before database connections happen
2021-01-23 17:11:45 +01:00
Greg Karékinian
1e3a2b40d4
Add the postgresql_client role to the akkounts role
2021-01-23 17:11:45 +01:00
Greg Karékinian
bb0e73d1b9
Switch ejabberd, mastodon and gitea to a hostname for Postgres
2021-01-23 17:11:45 +01:00
Greg Karékinian
fdd70d1872
Remove postgres-1 server
...
It was created with an encfs volume inside a VM, we want full disk encryption
instead. I have deleted the VM from centaurus as well as its disk and
have also unauthorized its id from the zerotier controller
2021-01-23 17:11:45 +01:00
bd48dab1d8
Set up postgres-3 VM
2021-01-23 17:06:15 +01:00
Greg Karékinian
41ca5938a2
Merge branch 'master' into feature/postgres_vms
2021-01-23 14:43:58 +01:00
e31f9ced96
Merge pull request 'Re-enable and improve Tor access for kosmos.social' ( #292 ) from feature/mastodon_tor into master
...
Reviewed-on: #292
2021-01-23 13:32:57 +00:00
05cd38a5b9
Re-enable and improve Tor access for kosmos.social
2021-01-23 14:22:34 +01:00
d1929fcc9c
Merge pull request 'Fix LN nodes not being accessible from the outside' ( #289 ) from bugfix/lnd_externalip into master
...
Reviewed-on: #289
2021-01-23 11:07:38 +00:00
Greg Karékinian
6ec747d416
Add missing credentials for zerotier
2021-01-22 18:43:05 +01:00
Greg Karékinian
cbcb50bc86
Create a zerotier_controller role
2021-01-22 18:41:46 +01:00
Greg Karékinian
eba7d63b43
Delete the test-2 client and node file
2021-01-22 18:41:46 +01:00
Greg Karékinian
5fa23fe872
Remove the andromeda client and node files
2021-01-22 18:41:46 +01:00
Greg Karékinian
0e1a73b18f
Set the private Zerotier IP for draco in the node file
2021-01-22 18:41:46 +01:00
Greg Karékinian
9b4756441a
Add a recipe to join the private Zerotier network
2021-01-22 18:41:45 +01:00
Greg Karékinian
dd78b8cf7e
Use the PG primary private Zerotier IP if it exists
2021-01-22 18:41:45 +01:00
Greg Karékinian
88e52607e3
Add a recipe to set up a hosts entry for the PG primary
2021-01-22 18:41:45 +01:00
Greg Karékinian
511400a7b8
Update hostsfile and add zerotier cookbook
2021-01-22 18:41:45 +01:00
Greg Karékinian
9a4420fc11
Add the ability to pass a disk size to the create_vm script
...
Defaults to 10GB
2021-01-22 18:41:45 +01:00
fd4844a012
Fix ejabberd API permission for akkounts VMs
...
It should have been using a /32, not a /8 subnet, in order to only allow
the akkounts VM(s) to use the API endpoints without further
authorization.
2021-01-22 18:41:45 +01:00
d018b6570d
Use default Redis database now
2021-01-22 18:41:45 +01:00
69c1994840
Update node data
2021-01-22 18:41:45 +01:00
d121971cca
Set up mastodon-1 VM
2021-01-22 18:41:45 +01:00
1403d91631
Remove extra license header
2021-01-22 18:41:45 +01:00
6da190b110
Don't configure HTTPS site when certs missing
2021-01-22 18:41:45 +01:00
8a870f6fd6
Don't fail on first run, when Tor hostname missing
2021-01-22 18:41:45 +01:00
ad64bfc0be
Update system package dependencies for 20.04
2021-01-22 18:41:45 +01:00
971a3a25a1
Remove extra license headers
...
And update year in LICENSE file
2021-01-22 18:41:45 +01:00
Greg Karékinian
ab422155e4
Add the ability to pass a disk size to the create_vm script
...
Defaults to 10GB
2021-01-22 13:49:23 +01:00
775ec691ef
Add firewall rules for LND and c-lightning
2021-01-14 21:25:35 +01:00
6c6026958b
Fix typo in port number of externalip config
2021-01-14 21:23:03 +01:00
d1ab4c24ea
Merge pull request 'Set up new Mastodon VM, fix/improve Chef recipes' ( #284 ) from chore/move_mastodon_to_vm into master
...
Reviewed-on: #284
2021-01-14 15:17:19 +00:00
e7fbd57189
Merge branch 'master' into chore/move_mastodon_to_vm
2021-01-14 15:16:17 +00:00
12a3fa5b4e
Use default Redis database now
2021-01-13 17:06:36 +01:00
9224aa9d97
Update node data
2021-01-13 17:06:25 +01:00
a27b6a1601
Merge pull request 'Fix ejabberd API permission for akkounts VMs' ( #283 ) from bugfix/ejabberd_api_permission into master
...
Reviewed-on: #283
2021-01-13 10:40:29 +00:00
ab3ca92228
Merge branch 'master' into bugfix/ejabberd_api_permission
2021-01-13 10:40:06 +00:00
62320106cb
Set up mastodon-1 VM
2021-01-13 09:50:37 +01:00
c622f81572
Remove extra license header
2021-01-13 09:50:10 +01:00
047526e0fc
Don't configure HTTPS site when certs missing
2021-01-13 09:49:49 +01:00
9d13acd41a
Don't fail on first run, when Tor hostname missing
2021-01-13 09:49:36 +01:00
4d0259493f
Update system package dependencies for 20.04
2021-01-13 09:48:23 +01:00
c4fa9e6ec1
Remove extra license headers
...
And update year in LICENSE file
2021-01-12 18:42:14 +01:00
74cf26846e
Fix ejabberd API permission for akkounts VMs
...
It should have been using a /32, not a /8 subnet, in order to only allow
the akkounts VM(s) to use the API endpoints without further
authorization.
2021-01-12 18:06:16 +01:00
4872677066
Configure postgres recipes for VMs and zerotier access
...
* Remove encfs (using encrypted volumes instead)
* Allow access without TLS from zerotier network
2021-01-07 13:53:30 +01:00
9d9907f0ed
Remove extra license copy from recipe, update year
2021-01-07 12:53:44 +01:00
4309efd228
Add postgres-2 VM
2021-01-07 12:53:20 +01:00
4ca875a77b
Merge pull request 'Create postgres-1 VM' ( #281 ) from feature/280-postgres_vm into master
...
Reviewed-on: #281
2021-01-07 11:29:37 +00:00
Greg Karékinian
af54777250
Create postgresql-1 VM
...
Refs #280
2021-01-07 12:04:52 +01:00
Greg Karékinian
f6086e2f6a
Add the firewall rules to the postgresql role
2021-01-07 12:02:35 +01:00
6db296a7f1
Merge pull request 'Move wormhole from barnard to nodejs-2' ( #278 ) from chore/move_wormhole into master
...
Reviewed-on: #278
2021-01-07 10:42:41 +00:00
1eb73711a2
Remove application_javascript usage from wormhole recipe
2021-01-06 19:12:36 +01:00
eb4764026b
Add script for notifying Kosmos channels from Ruby
...
An example for notifying Kosmos XMPP channels from plain Ruby, with no
dependencies.
2021-01-06 11:27:50 +01:00
fe63f01f7b
Move wormhole from barnard to nodejs-2
...
Fixed two small bugs in the recipe:
* hubot user wasn't created when necessary
* systemd template always included redis service dependency
2021-01-05 18:03:15 +01:00
333a76f086
Merge pull request 'Configure and run LND and RTL' ( #274 ) from feauture/lnd into master
...
Reviewed-on: #274
2021-01-05 10:33:37 +00:00
9ab097dd9a
Merge pull request 'Configure local LND as Lightning node in BTCPay Server' ( #275 ) from feature/btcpay_lnd_settings into feauture/lnd
...
Reviewed-on: #275
2021-01-05 10:33:01 +00:00
876d857dde
Merge pull request 'Create new nodejs VM, move kredits-github to it' ( #277 ) from chore/nodejs-2 into master
...
Reviewed-on: #277
2021-01-05 10:32:44 +00:00
ddded6fbae
Create new nodejs VM, move kredits-github to it
2021-01-05 11:30:31 +01:00
adfd76aa64
Configure local LND as Lightning node in BTCPay Server
2021-01-02 09:59:50 +01:00
2b765e744a
Configure and run RTL
...
Ride The Lightning is a Web UI for Lightning Network nodes. It is
accessible via the bitcoin VM's private zerotier IP on port 3000.
2021-01-01 17:42:57 +01:00
19e3dfa7b9
Remove obsolete non-standard RPC and REST ports
...
We'll just run those on default ports without custom config.
2021-01-01 14:14:59 +01:00
37f1fa79e7
Use standard Lightning Network port for LND
...
Only use the non-standard one internally, so we can run both c-lightning
and lnd on the same machine.
2021-01-01 14:13:58 +01:00
f5f234c0fd
Use name of existing node
...
Migrated from andromeda to bitcoin-2.
2021-01-01 14:13:17 +01:00
5a8d780d37
Merge pull request 'Fix a syntax error in certbot dirsrv hook' ( #273 ) from bugfix/272-certbot_dirsrv into master
...
Reviewed-on: #273
2020-12-31 11:54:17 +00:00
bf3bb3ed97
Merge branch 'master' into bugfix/272-certbot_dirsrv
2020-12-31 10:41:06 +00:00
Greg Karékinian
456639bdf8
Fix a syntax error in certbot dirsrv hook
...
The newline was not escaped and rendered as an actual newline
Fixes #272
2020-12-31 11:38:49 +01:00
1360836377
Merge pull request 'Set up NBXplorer, BTCPay Server, and C-Lightning with Chef' ( #270 ) from feature/btcpay_server into master
...
Reviewed-on: #270
2020-12-31 10:25:08 +00:00
8a6b81485a
Merge branch 'master' into feature/btcpay_server
2020-12-31 10:20:28 +00:00
3fcdc8b056
Configure and run LND
2020-12-31 10:10:22 +01:00
61accc05c2
Add nginx proxy for BTCPay
2020-12-29 15:56:53 +01:00
c71d243c40
Merge pull request 'Add a firewall rule to allow PostgreSQL clients to connect' ( #269 ) from bugfix/postgresql_client_firewall into master
...
Reviewed-on: #269
2020-12-22 22:15:06 +00:00
7d0490f3da
Merge branch 'master' into bugfix/postgresql_client_firewall
2020-12-22 17:16:49 +00:00
5892e3c0ab
Configure and run c-lightning daemon
2020-12-22 12:28:29 +01:00
f88354c67c
Compile and install c-lightning
2020-12-21 16:53:22 +01:00
bbd5500982
Configure and run BTCPay Server
2020-12-21 13:50:28 +01:00
ca373a1503
Don't require auth cookie for nbxplorer API
2020-12-21 12:25:13 +01:00
570a692bb2
Configure and run nbxplorer
2020-12-21 12:19:30 +01:00
5277bce20b
Formatting
2020-12-21 11:14:19 +01:00
aa2aa59e28
Download and build NBXplorer and BTCPay
2020-12-21 11:12:14 +01:00
a2b76c7d76
New recipe: Install .NET Core SDK
2020-12-21 11:01:20 +01:00
bb4b919548
Merge pull request 'Always set the promote trigger file config' ( #267 ) from bugfix/pg_promote_trigger_file into master
...
Reviewed-on: #267
2020-12-18 21:23:11 +00:00
Greg Karékinian
87388ac69d
Add the postgresql_client role to the mastodon role
...
This will add the firewall rule and pg_hba access rule on the PostgreSQL
servers
2020-12-18 17:54:31 +01:00
Greg Karékinian
c700f98976
Add a firewall rule to allow clients to connect
...
Previously it was not an issue because services that connected to the
PostgreSQL primary were also on the same server as a standby server.
2020-12-18 17:53:28 +01:00
Greg Karékinian
f75aeaf9b5
Always set the promote trigger file config
...
Only setting it for standby servers isn't useful, as we need to be able
to touch this file to trigger the promotion of a new primary server
after running Chef on it.
2020-12-18 17:02:13 +01:00
4be542670b
Merge pull request 'Add new Zoom meeting ID to hubot-kredits whitelist' ( #266 ) from chore/zoom_meeting_id into master
...
Reviewed-on: #266
2020-12-17 16:40:24 +00:00
db51f1f332
Add new Zoom meeting ID to whitelist
2020-12-17 14:09:41 +01:00
95c8b9fea9
Merge pull request 'Migrate to self-hosted zerotier network' ( #265 ) from chore/zerotier_migration into master
...
Reviewed-on: #265
2020-12-13 12:39:14 +00:00
84fdcc4760
Merge pull request 'Fix zerotier network creation' ( #262 ) from bugfix/zerotier_default_rules into master
...
Reviewed-on: #262
2020-12-13 12:38:59 +00:00
Greg Karékinian
1551fe6d1b
Update the ipfs-1 node file after running chef
2020-12-11 19:29:56 +01:00
Greg Karékinian
83736d2a85
Update the bitcoin-2 node file after running chef
2020-12-11 19:28:34 +01:00
4b9dfd9c60
Update node configs
2020-12-11 19:24:12 +01:00
fb996e9abf
Join new zerotier network on VM creation
2020-12-11 19:07:11 +01:00
396fe6e714
Whitelist ejabberd custom node attributes
...
fixes #256
2020-12-11 19:07:06 +01:00
Greg Karékinian
ebfd36bab8
Add nodejs-1 client and node file
...
Refs #259
2020-12-11 19:02:04 +01:00
c4dbed8d65
Fix zerotier network creation
...
Using outdated/invalid rules syntax. Remove the property entirely, so
the API will create the default rule (which is the same) on creation.
Co-authored-by: Greg Karékinian <greg@karekinian.com >
2020-12-11 17:42:25 +01:00
2de9d5fe17
Fix typo
2020-12-11 17:40:40 +01:00
8896beab67
Merge pull request 'Configure a zerotier-one network controller' ( #260 ) from feature/zerotier_controller into master
...
Reviewed-on: #260
2020-12-11 10:42:40 +00:00
8b624b666a
Merge branch 'master' into feature/zerotier_controller
2020-12-11 10:39:20 +00:00
ba4e3fdd6f
Merge pull request 'Document commands for running Chef against VMs' ( #261 ) from docs/update_readme into master
...
Reviewed-on: #261
2020-12-11 10:39:08 +00:00
1cb366a160
Add commands for running Chef against VMs
2020-12-10 23:39:59 +01:00
cb8fc25fc8
Configure a zerotier-one network controller
2020-12-10 22:51:35 +01:00
f66f6e2969
Merge pull request 'Add hosts entries for ejabberd private IPs' ( #257 ) from feature/akkounts_xmpp_host into master
...
Reviewed-on: #257
2020-12-10 13:28:46 +00:00
a06223d764
Merge branch 'master' into feature/akkounts_xmpp_host
2020-12-10 13:27:37 +00:00
0c537d04ef
Merge pull request 'Add ejabberd HTTP API permissions for akkounts' ( #255 ) from feature/api_permissions into master
...
Reviewed-on: #255
2020-12-10 13:27:19 +00:00
f1c8faff85
Merge branch 'master' into feature/api_permissions
2020-12-10 13:26:48 +00:00
623bb1e153
Merge pull request 'Script creating new VMs' ( #252 ) from feature/244-new_vm_script into master
...
Reviewed-on: #252
2020-12-09 15:33:08 +00:00
Greg Karékinian
a92205bd65
Fix the VM creation script
...
Also join the zerotier network
2020-12-09 16:29:15 +01:00
Greg Karékinian
77ab77afe8
Update the centaurus and draco nodes after Chef run
2020-12-09 15:42:49 +01:00
Greg Karékinian
6273271d40
Remove kosmos-bitcoin::source from draco
...
Bitcoind runs inside a VM, not directly on the host
2020-12-09 15:42:19 +01:00
742dc6ff7f
Merge branch 'master' into feature/244-new_vm_script
2020-12-09 13:59:52 +00:00
f540661de4
Merge pull request 'Update ejabberd doc' ( #254 ) from docs/ejabberd into master
...
Reviewed-on: #254
2020-12-09 12:12:51 +00:00
Greg Karékinian
7ceb9af3ed
Rename the kosmos_kvm default recipe to host
...
It makes it clear it is meant for KVM hosts
2020-12-09 11:19:13 +01:00
12125bf0b2
Add hosts entries for ejabberd private IPs
2020-12-08 20:31:01 +01:00
239b6aed51
Add API permissions for akkounts VMs
...
Using the zerotier IP, which is the same as the knife-zero host.
2020-12-08 20:00:31 +01:00
8e0a66184c
Use role for akkounts
...
Lets us search by role
2020-12-08 19:59:51 +01:00
Greg Karékinian
6c907419aa
Set the VM name from the script argument
2020-12-08 17:10:40 +01:00
Greg Karékinian
8f304d00ce
Remove unused kitchen.yml files
2020-12-08 16:34:24 +01:00
Greg Karékinian
94a34e4758
Add arguments for RAM and number of CPUs
2020-12-08 16:33:27 +01:00
Greg Karékinian
b3c1f81ec6
Set the description of the kosmos_zerotier cookbook
2020-12-08 16:26:14 +01:00
Greg Karékinian
6f7b493173
Create the base Ubuntu 20.04 cloud image with code
2020-12-08 16:25:32 +01:00
Greg Karékinian
176083497c
Install the libvirt-daemon-system package
...
It creates the libvirt-qemu user
2020-12-08 16:25:04 +01:00
Greg Karékinian
89c8f42a46
Set the description for the kosmos_kvm cookbook
2020-12-08 16:03:18 +01:00
56d9144ad6
Disable ACME
...
Throws a warning when reloading the config, because it is enabled by
default, but not configured entirely. Disabling it explicitly removes
the warning.
2020-12-08 14:30:29 +01:00
02239dd9a8
Update ejabberd doc
2020-12-08 13:13:05 +01:00
Greg Karékinian
1837285b79
Add the kosmos_kvm recipe and the firewall rules
...
... to the KVM hosts, centaurus and draco
Refs #244
2020-12-04 16:33:18 +01:00
Greg Karékinian
ee7a117d63
Add initial kosmos_zerotier cookbook
...
For now it only includes the firewall rule
Refs #244
2020-12-04 16:29:22 +01:00
Greg Karékinian
e6b7794e20
Extract firewall definitions to their own recipe
...
This allows us to use them for KVM hosts as well. Until now we had set
up ufw rules manually on the two KVM hosts (draco and centaurus)
Refs #244
2020-12-04 16:27:42 +01:00
Greg Karékinian
9dbe5bcfcb
Deploy a script to create new VMs
...
It uses `virt-install` with the official Ubuntu 20.04 cloud image as a
starting point, with cloud-init to add our SSH keys to the ubuntu user
and set up Zerotier.
USAGE: create_vm VMNAME
Closes #244
2020-12-04 16:21:52 +01:00
bc80540c14
Merge pull request 'Deploy new wormhole release on barnard' ( #251 ) from chore/wormhole_barnard into master
...
Reviewed-on: #251
2020-11-27 12:25:01 +00:00
dace63b667
Remove akkounts recipe from barnard runlist
...
Must have been committed accidentally.
2020-11-27 13:22:29 +01:00
58c5fad2a7
Add new nickname config for wormhole
2020-11-27 13:22:09 +01:00
39ca70d64e
Merge pull request 'Set up ejabberd-2 VM/node; add cluster configs to Chef' ( #248 ) from chore/ejabberd-2_vm into master
...
Reviewed-on: #248
2020-11-26 14:47:33 +00:00
58854da648
Add erland_node fqdn to ejabberd node configs
2020-11-25 21:04:33 +01:00
137d90ed8a
Configure ejabberd on ejabberd-2
2020-11-25 21:03:16 +01:00
8c60279fe1
Add cluster configs to ejabberd recipe
2020-11-25 21:02:46 +01:00
7a1a5c03e3
Set up ejabberd-2 VM
2020-11-25 17:40:40 +01:00
8e067e8901
Merge pull request 'Enable ejabberd clustering' ( #246 ) from feature/243-ejabberd_cluster into master
...
Reviewed-on: #246
2020-11-25 16:10:14 +00:00
Greg Karékinian
bbf01711f8
Add ejabberd-1 client and node file
2020-11-25 16:42:23 +01:00
Greg Karékinian
fbd71204c2
Use the production run list when no Chef environment was set
2020-11-25 16:41:43 +01:00
Greg Karékinian
613b316588
Add comment about needing to run Chef a second time...
...
... after the TLS certs are generated
2020-11-25 16:36:07 +01:00
Greg Karékinian
3a8af26b5f
Remove firewall rule for an unused port
2020-11-25 16:36:07 +01:00
Greg Karékinian
23ca3552d2
Remove the absolute path of certbot to use the new package
2020-11-25 16:36:07 +01:00
Greg Karékinian
ddb706b61c
Add a missing dependency on kosmos-dirsrv
2020-11-25 16:36:07 +01:00
Greg Karékinian
085bd8abd5
Move TURN port to a different range
...
It landed on a port used by PostgreSQL. Also switch STUN/TURN to TCP
because HAProxy does not support UDP.
Closes #240
2020-11-25 16:36:07 +01:00
Greg Karékinian
7636f6ed19
Move the Gandi DNS certbot hook to kosmos-ejabberd
2020-11-25 16:36:07 +01:00
Greg Karékinian
8b1f90c568
Use the same Erlang cookie to enable clustering
...
Refs #243
2020-11-25 16:35:37 +01:00
3da883864b
Merge pull request 'Configure/deploy HTTP upload service for Kosmos Chat/XMPP' ( #245 ) from feature/http_upload_service into master
...
Reviewed-on: #245
2020-11-25 09:46:47 +00:00
134493d2d6
Merge branch 'master' into feature/http_upload_service
2020-11-25 09:46:31 +00:00
f39f953b8a
Configure ejabberd nodes for HTTP upload service
2020-11-24 15:44:59 +01:00
0e29c930ed
Configure subdirectory level for upload.pm
...
This allows to post to per-domain subdirectories from XMPP clients.
2020-11-24 15:33:34 +01:00
0aef830aa3
Fix upload folder permissions
...
Uploads are failing with the current mode.
2020-11-23 20:50:01 +01:00
0bebdf7635
Do not require nginx from certbot recipe
...
In order to be able to use different nginx install recipes, we must not
require a specific one from this recipe.
2020-11-23 17:40:14 +01:00
6a89bb9d2e
Add node info for uploads-1
...
Runs uploads.kosmos.chat
2020-11-23 17:39:47 +01:00
9efb9cd78c
Configure/deploy HTTP upload service on uploads.kosmos.chat
...
https://xmpp.org/extensions/xep-0363.html
(Does not contain the config for ejabberd itself yet.)
2020-11-23 17:37:14 +01:00
89f5a81952
Merge pull request 'Configure/deploy new akkounts Rails app' ( #242 ) from feature/akkounts into master
...
Reviewed-on: #242
2020-11-23 09:52:16 +00:00
c26fcd5b26
Remove obsolete manual daemon reload
2020-11-22 20:26:56 +01:00
0dc314b1e7
Add node data for akkounts-1
2020-11-21 15:12:39 +01:00
d384f69139
Configure/deploy new akkounts app
2020-11-21 15:12:31 +01:00
21be68feb5
Merge pull request 'Add CLI script for hashing LDAP passwords' ( #239 ) from chore/ldap_hash_password_script into master
...
Reviewed-on: #239
2020-11-20 13:39:40 +00:00
b63c86b37f
Add CLI script for hashing LDAP passwords
...
Only takes a cleartext password and outputs a salted, hashed password
string for LDAP documents.
2020-11-20 14:36:25 +01:00
9470e62e3b
Merge pull request 'Set up Drone CI with Gitea integration' ( #236 ) from feature/235-drone_ci into master
...
Reviewed-on: #236
2020-11-19 13:47:43 +00:00
Greg Karékinian
df4c92b64e
Update the centaurus node after adding drone to it
2020-11-19 12:59:24 +01:00
Greg Karékinian
d7e54bf7ce
Add drone role
2020-11-19 12:59:24 +01:00
Greg Karékinian
ebf5f405f5
Initial kosmos_drone cookbook
...
Closes #235
2020-11-19 12:59:15 +01:00
9ba364ad7a
Merge pull request 'Fix 389 Directory Server CLIs not working' ( #234 ) from bugfix/install_lib389 into master
...
Reviewed-on: #234
2020-11-08 16:26:16 +00:00
ac49430521
Install lib389
...
Fixes 389 CLIs not working (e.g. `dsctl`).
2020-11-08 17:23:24 +01:00
f12cf704ac
Merge pull request 'Update barnard.kosmos.org node data' ( #232 ) from chore/update_node_info into master
...
Reviewed-on: #232
2020-10-30 09:01:13 +00:00
4c17d9ad53
Update barnard.kosmos.org node data
2020-10-30 10:00:23 +01:00
eaa3d78684
Merge pull request 'Remove hubot-rss-reader from hubots' ( #231 ) from chore/remove_hubot-rss-reader into master
...
Reviewed-on: #231
2020-10-29 15:20:16 +00:00
f874d7f979
Remove hubot-rss-reader from hubots
...
Not available in latest hal8000 source anymore
2020-10-29 16:19:24 +01:00
96d0f7dd04
Merge pull request 'Update IPFS cookbook/software' ( #230 ) from chore/update_go-ipfs into master
...
Reviewed-on: #230
2020-10-29 08:35:56 +00:00
af132c072d
Merge branch 'master' into chore/update_go-ipfs
2020-10-29 08:35:36 +00:00
c06d530f62
Update ipfs-1 kernel version
2020-10-25 12:09:22 +01:00
2c368f0f10
Update IPFS cookbook
2020-10-25 12:09:01 +01:00
efd985f6ba
Merge pull request 'Initial kosmos_discourse cookbook' ( #223 ) from feature/222-discourse into master
...
Reviewed-on: #223
2020-10-23 10:12:12 +00:00
42a70962e8
Merge branch 'master' into feature/222-discourse
2020-10-23 10:11:05 +00:00
Greg Karékinian
255e43c680
Fix the Systemd unit for discourse
...
Switch the systemd unit to a oneshot type
2020-10-23 09:28:31 +02:00
0f5f84dba2
Merge pull request 'Send wiki notifications to new info chatroom (instead of main Kosmos room)' ( #224 ) from chore/hubot_mediawiki_notifications into master
...
Reviewed-on: #224
2020-10-21 11:43:26 +00:00
71c8f6d91a
Merge branch 'master' into chore/hubot_mediawiki_notifications
2020-10-21 11:43:08 +00:00
da7ff96937
Merge pull request 'Fix the undefined variable in the instance resource' ( #225 ) from bugfix/dirsrv_certbot_undefined_var into master
...
Reviewed-on: #225
2020-10-21 08:12:48 +00:00
Greg Karékinian
5062392c71
Fix the undefined variable in the instance resource
2020-10-20 19:53:11 +02:00
4f5b005087
Send wiki notifications to new info XMPP room
2020-10-20 15:46:58 +02:00
69383a666b
Let hal8000 join new info@kosmos.chat room
2020-10-20 15:42:42 +02:00
Greg Karékinian
dc2fe38e10
Add the discourse role to centaurus
2020-10-20 12:22:07 +02:00
Greg Karékinian
07e6da4d33
Add a role for discourse
2020-10-20 12:22:07 +02:00
Greg Karékinian
429b609ac2
Initial kosmos_discourse cookbook
...
The systemd unit does not work
Refs #222
2020-10-20 12:21:53 +02:00
d1c9cf853f
Merge pull request 'Set the autocreate permission for Mediawiki users' ( #220 ) from bugfix/219-ldap_autocreate_wiki into master
...
Reviewed-on: #220
2020-10-06 13:56:05 +00:00
Greg Karékinian
7eaf177bb2
Set the autocreate permission for Mediawiki users
...
This allows LDAP sign ins to create an account automatically
Fixes #219
2020-10-06 15:51:01 +02:00
7d2374449a
Merge pull request 'Do not install PostgreSQL with ejabberd by default' ( #218 ) from bugfix/ejabberd_include_postgresql into master
...
Reviewed-on: #218
2020-09-25 18:12:07 +00:00
Greg Karékinian
2119c11243
Do not include kosmos-postgresql in kosmos-ejabberd default recipe
...
It will install PostgreSQL, and we do not want that on the ejabberd
server
2020-09-25 16:29:01 +02:00
fcd9e8ff74
Merge pull request 'Fix kosmos-ipfs not requiring nodejs/npm' ( #215 ) from bugfix/kosmos-ipfs_recipe into master
...
Reviewed-on: #215
2020-09-24 15:47:52 +00:00
70363c1a93
Merge pull request 'Migrate IPFS gateway to new VM on draco.kosmos.org' ( #216 ) from ops/ipfs_gateway_migration into master
...
Reviewed-on: #216
2020-09-24 15:47:25 +00:00
7c4af862b7
Add node config for new IPFS (gateway) VM
2020-09-24 17:41:24 +02:00
3d8d31c32f
Fix kosmos-ipfs not requiring nodejs/npm
...
If node isn't installed on a machine by something else before running
the kosmos-ipfs recipe, then it fails.
2020-09-24 17:39:28 +02:00
d2550d80c8
Merge pull request 'Switch Certbot to Snap package on Ubuntu 20.04+' ( #211 ) from feature/certbot_snap into master
...
Reviewed-on: #211
2020-09-24 14:16:55 +00:00
Greg Karékinian
a8b303af4a
Fix the search command for Kosmos LDAP users
2020-09-16 11:36:29 +02:00
104090d34e
Merge pull request 'Add shell script for creating LDAP user accounts' ( #214 ) from feature/add_user_script into master
...
Reviewed-on: #214
2020-09-16 09:34:34 +00:00
41319fc5bc
Add shell script for creating LDAP user accounts
2020-09-15 13:04:54 +02:00
be4d1ca7f4
Merge pull request 'Set up a testing VM on draco' ( #212 ) from test_vm into master
...
Reviewed-on: #212
2020-09-06 12:02:26 +00:00
ee7a853b5c
Set up a testing VM on draco
...
Currently only has base recipe and nginx with certbot running.
https://test-2.kosmos.org/
2020-09-06 14:00:35 +02:00
a1a0d7e4c1
Switch Certbot to snap package on Ubuntu 20.04+
...
Needs only minor changes. Tested and running on wiki.kosmos.org already.
2020-09-06 13:46:06 +02:00
ded21fb009
Merge pull request 'Move wiki to new VM, update cookbooks and software' ( #210 ) from feature/wiki_vm into master
...
Reviewed-on: #210
2020-09-06 11:45:30 +00:00
2d559ebd91
Update wiki node config
...
Just committing the changes after a successful run with letsencrypt also
working.
2020-09-06 13:43:07 +02:00
8dd146e95c
Remove obsolete mysql client install
...
This fails nowadays,and the client is already installed via the mysql
package in the first place.
2020-09-06 13:42:34 +02:00
b7e2a72369
Add missing changes for mediawiki upgrades
2020-09-05 23:43:28 +02:00
7af26d6ad3
Remove wiki role from andromeda
2020-09-05 20:59:07 +02:00
c646c3d5b4
Update mediawiki cookbook (Kosmos fork)
2020-08-30 18:03:44 +02:00
38c6a1ae15
Update mediawiki, install extensions from git repos
2020-08-30 17:59:45 +02:00
c9440800df
Update vendored cookbooks for mediawiki
2020-08-30 17:48:52 +02:00
d6ad68c50a
Add node config for new wiki VM
2020-08-30 17:34:02 +02:00
48f4a7e31d
Merge pull request 'Create basic LND cookbook' ( #206 ) from feature/lnd into master
...
Reviewed-on: #206
2020-08-30 15:32:43 +00:00
4b9e110ffd
Merge branch 'master' into feature/lnd
2020-08-30 15:32:31 +00:00
43cfb95a57
Merge pull request 'Move bitcoin-core to VM' ( #205 ) from feature/bitcoin_vm into master
...
Reviewed-on: #205
2020-08-30 15:29:35 +00:00
d5448e8240
Basic LND installation
2020-08-23 12:37:53 +02:00
0005f9ab7d
Add golang cookbook
...
Needs updating of ark and git cookbooks
2020-08-23 11:01:05 +02:00
217ab471ce
Moving bitcoin-core to VM
2020-08-22 23:16:11 +02:00
414a595719
Merge pull request 'Bitcoin (Core) cookbook' ( #121 ) from feature/bitcoin_cookbook into master
...
Reviewed-on: #121
2020-08-20 17:17:30 +00:00
5c105f00d1
Use MIT license for bitcoin cookbook
2020-08-19 15:29:18 +02:00
1a8c3e4350
Suggest bitcoin source recipe for dev
2020-08-19 15:28:00 +02:00
c98be94404
Add rpcpassword support to bitcoin snap recipe
2020-08-18 14:44:23 +02:00
97ae73c987
Improve variable name
2020-08-18 14:38:16 +02:00
23588760fa
Add walletdir flag to bitcoind service start
2020-08-17 21:43:56 +02:00
b0daa3d463
Only store wallet in encrypted dir
...
Storing all chain data in encfs caused unsolvable issues with leveldb.
So now we're only storing wallet data in the encrypted dir.
2020-08-17 16:46:59 +02:00
d65363f964
Remove obsolete ulimit dep
2020-08-17 10:51:54 +02:00
9795e77fde
Bitcoin source recipe
2020-08-17 10:45:15 +02:00
4606773440
Update license note
2020-08-16 16:25:14 +02:00
bbbd0f7408
Change default username
2020-08-16 16:25:06 +02:00
476316e13b
Always use latest/stable channel for bitcoind snap
2020-08-16 16:20:43 +02:00
4889f40c6a
WIP
2020-08-16 16:18:01 +02:00
c8122a44f1
Add systemd service
...
Plus some refactoring
2020-08-16 16:14:18 +02:00
4a6a02c137
Use 0.19 stable channel
...
Instead of relying on the default channel
2020-08-16 16:14:18 +02:00
Greg Karékinian
e31f480f27
Fix the attribute name
2020-08-16 16:14:18 +02:00
Greg Karékinian
aedf7bcb62
Create the snap mount directory in the user's home
2020-08-16 16:14:18 +02:00
Greg Karékinian
069246cf41
Create the bitcoind user and its home directory
2020-08-16 16:14:18 +02:00
Greg Karékinian
1b9a4aad17
Work around a bug in Chef's snap_package resource
...
https://github.com/chef/chef/issues/8827
`snap install` returns 0 when a package is already installed, so no need
for a guard clause
2020-08-16 16:14:17 +02:00
09527e693b
WIP bitcoind config
2020-08-16 16:14:15 +02:00
47105b2a1c
Initial version of bitcoin cookbook
2020-08-16 16:13:39 +02:00
2c40ad4591
Merge pull request 'Increase size limit for Gitea uploads/attachments' ( #199 ) from bugfix/188-attachment_size_limit into master
...
Reviewed-on: #199
2020-08-07 16:14:43 +00:00
9a28a03265
Increase size limit for Gitea uploads/attachments
...
The default limit in nginx is only 1MB. This increases it to 20MB.
fixes #188
2020-08-05 15:53:13 +02:00
f235aee17a
Merge pull request 'Fix comet icon on maintenance page' ( #198 ) from bugfix/61-maintenance_page_logo into master
...
Reviewed-on: #198
2020-08-02 19:05:18 +00:00
af0717a65b
Fix comet icon on maintenance page
...
The data URI declares an SVG source, but this was actually a PNG. Hence
the failure in Chrome. This change turns it into an actual inline SVG
and uses UTF8 encoding instead of base64, because SVG is just text anyway.
fixes #61
2020-08-02 21:00:10 +02:00
436bb8fcc1
Merge pull request 'Update Gitea to 1.12.3' ( #197 ) from feature/189-gitea_1.12.3 into master
...
Reviewed-on: #197
2020-07-30 10:39:17 +00:00
Greg Karékinian
41fd1576ad
Override the header template to remove the Roboto font
...
Using the system font instead
2020-07-30 12:33:09 +02:00
Greg Karékinian
924f67d8a8
Update Gitea to 1.12.3
...
Closes #189
2020-07-30 12:16:31 +02:00
Greg Karékinian
5e5bbe07dc
Restart gitea after upgrading it
2020-07-30 12:16:04 +02:00
c68bf472d4
Merge pull request 'Upgrading centaurus to Ubuntu 20.04' ( #196 ) from feature/195-centaurus_20.04 into master
2020-07-30 10:03:01 +00:00
Greg Karékinian
3f7894bd46
Run Chef again after upgrading centaurus to Ubuntu 20.04
...
Closes #195
2020-07-30 11:59:30 +02:00
Greg Karékinian
44b49ddd57
Upgrade nginx to the latest mainline version
2020-07-30 11:58:52 +02:00
3563b05932
Merge pull request 'Use the right variable for the TLS cert's domain in kosmos-dirsrv's instance resource' ( #194 ) from bugfix/193-dirsrv_undefined_var into master
2020-07-22 14:16:53 +00:00
Greg Karékinian
d2126f6153
Use the right variable for the TLS cert's domain
...
`domain` was undefined. `new_resource.hostname` is ldap.kosmos.org and
is what we need
Fixes #193
2020-07-22 15:59:27 +02:00
9ec1fe1db4
Merge pull request 'Add PostgreSQL primary server support to the mastodon cookbook' ( #187 ) from feature/186-postgresql_primary_mastodon into master
2020-07-07 15:45:54 +00:00
Greg Karékinian
4583421597
Connect to the PostgreSQL primary server instead of localhost
...
Move the db and user creation to its own recipe
Refs #186
2020-06-26 15:22:14 +02:00
Greg Karékinian
004a6913b4
Remove dependency to an old PostgreSQL in the Systemd unit
...
Refs #186
2020-06-26 15:22:05 +02:00
6adb910e1b
Merge pull request 'Chef base role improvements' ( #184 ) from feature/unattended_upgrades_and_vim into master
2020-06-22 13:07:20 +00:00
f55fc71765
Merge pull request 'Bootstrap draco.kosmos.org' ( #185 ) from feature/175-draco_bootstrap into master
2020-06-22 13:06:41 +00:00
Greg Karékinian
fb8687b63c
Add the postgresql_replica role to draco
2020-06-19 17:33:06 +02:00
Greg Karékinian
f7dfffd967
Add the kosmos_encfs recipe to draco
2020-06-19 17:33:06 +02:00
Greg Karékinian
8386dae46f
Add the new Hetzner server, draco.kosmos.org
2020-06-19 17:33:06 +02:00
Greg Karékinian
84cf008bac
Install vim
2020-06-19 17:30:02 +02:00
Greg Karékinian
b4357df471
Enable unattended-upgrades (security and updates repositories)
...
... with email notifications on failure and logging with syslog
2020-06-19 17:30:02 +02:00
Greg Karékinian
e7edb5a464
Update apt to 7.3.0
...
It now includes unattended-upgrades support
2020-06-19 17:30:02 +02:00
1b84009958
Merge pull request 'Add PostgreSQL primary support to the kosmos-ejabberd cookbook' ( #181 ) from feature/180-ejabberd_pg_primary into master
2020-06-19 14:46:52 +00:00
01f8af6e38
Merge pull request 'Set the Gitea root URL to HTTPS' ( #183 ) from bugfix/182-gitea_root_url into master
2020-06-15 12:39:29 +00:00
Greg Karékinian
5e483240c3
Set the Gitea root URL to HTTPS
...
It fixes U2F security keys support, that was broken because the protocol
did not match
Fixes #182
2020-06-12 17:22:34 +02:00
Greg Karékinian
ee9c241a4d
Add a postgresql_client role
...
The role is empty but is used to explicitly define servers that have
access rights to all PostgreSQL databases and users
2020-06-12 16:54:58 +02:00
Greg Karékinian
6f696d7634
Define access rules in the PostgreSQL primary recipe
...
Access is done for the IP of a server for all users and all databases
for ejabberd and gitea
2020-06-11 18:20:04 +02:00
Greg Karékinian
26097a7584
Use the correct database name for the access rights
2020-06-11 09:00:50 +02:00
Greg Karékinian
1a6ce44758
Create a minimalist ejabberd role for development
...
No Let's Encrypt, no backups
2020-06-10 18:43:34 +02:00
Greg Karékinian
2c21d6255b
Add PostgreSQL primary support to the kosmos-ejabberd cookbook
...
* Move the PostgreSQL user and database creation to a pg_db recipe
* Generate access rights for the ejabberd servers in the pg_db recipe
* Connect to the PostgreSQL primary instead of localhost
Refs #180
2020-06-10 18:38:40 +02:00
Greg Karékinian
091a46e972
Do not pass the pgsql_password variable to ejabberd.yml
...
The password is only used in the config files for the vhosts
2020-06-10 18:37:36 +02:00
81403b7cb9
Merge pull request 'Fix PostgreSQL replica config with encrypted data directory' ( #179 ) from bugfix/postgres_issues into master
2020-06-10 14:04:58 +00:00
Greg Karékinian
a0db6adaf2
Pass the data_directory to the postgresql_server_conf resource
...
Previously we were passing it as an additional config, but it is set by
default. The last value was used, the custom one, so the server still
used the correct file
2020-06-10 14:41:07 +02:00
Greg Karékinian
e3e726097f
Do not enable the postgresql@12-main service
...
We want it to run only once the encrypted data directory has been
mounted
2020-06-10 14:41:07 +02:00
Greg Karékinian
dba6629869
Use the attribute from the encfs recipe for the data directory
2020-06-10 14:41:03 +02:00
Greg Karékinian
229e9cfbd2
Add the kosmos_encfs recipe to centaurus
2020-06-10 14:40:01 +02:00
d88d3b07a5
Merge pull request 'Encrypt PostgreSQL data directory' ( #166 ) from feature/pg_encfs into master
2020-06-08 15:02:58 +00:00
b662c04183
Finish initial encfs cookbook and postgres adaptations
2020-06-08 17:01:24 +02:00
379161eb1e
Fix postgres installation
...
Also, do not start at boot anymore, in favor of path-based activation.
2020-06-07 12:47:06 +02:00
353f2c13f1
Improve encfs cookbook
...
Fix some things, and prepare for path-based activation. Also, comment
the buggy initial dir creation and explain manual provisioning in README
for now.
2020-06-07 12:45:33 +02:00
8918452fc5
Use latest postgresql fork
2020-06-07 12:40:39 +02:00
501626de1f
Add encfs to Vagrantfile
2020-06-07 12:30:00 +02:00
4fe0e913f8
Use our own fork of the postgresql cookbook
2020-06-07 12:29:34 +02:00
bd99b76287
Use human-readable flag for encfs mount script
...
In case someone wants to see what it does without reading a manual in
the future.
2020-06-06 12:24:08 +02:00
Greg Karékinian
1e60722ec4
Create an initial encfs cookbook
...
Usage: Add the kosmos_encfs::default recipe to the run list of a node.
Creating the encrypted directory will keep it mounted. After a reboot,
start the encfs service and enter the password:
```
$ systemctl start encfs
encfs password:
```
For now postgresql@12-main is a hardcoded dependency of the encfs
Systemd unit that is automatically started once the user inputs the
correct password. This list of dependency will need to be different for
every server, based on the services it is running
2020-06-04 19:50:20 +02:00
Greg Karékinian
eded62a3ec
Merge branch 'master' into feature/pg_encfs
2020-06-04 15:13:53 +02:00
db4792e836
Merge pull request 'Gitea fixes' ( #174 ) from bugfix/147-gitea_fixes into master
2020-06-02 14:24:11 +00:00
Greg Karékinian
ccd49aefa4
Add Gitea to the run lists for Andromeda and Centaurus
2020-06-02 16:19:21 +02:00
Greg Karékinian
759fa52e03
Enable the certbot resource
2020-06-02 16:19:05 +02:00
Greg Karékinian
0f10723c81
Enable secure cookies
2020-06-02 16:18:48 +02:00
Greg Karékinian
55865c526c
Add the Let's Encrypt hook dir to the config
...
Only enabled when there is no TLS cert. This is already part of the
certbot nginx vhost
2020-06-02 16:17:34 +02:00
Greg Karékinian
0c502580c2
Fix the condition for the Let's Encrypt cert in the template
...
The line contained an extra !
2020-06-02 16:16:30 +02:00
Greg Karékinian
27845525da
Use the same JWT_SECRET as on our previous Gitea
...
A different one breaks 2FA
2020-06-02 12:12:59 +02:00
Greg Karékinian
c8e50fd226
Install git, it is a required dependency for Gitea
...
I didn't catch it because git is installed by default in the Vagrant box
I used to write the cookbook
2020-06-02 11:41:19 +02:00
Greg Karékinian
2d6c514257
Add the gitea role
2020-06-02 11:22:10 +02:00
8342298c89
Merge branch 'feature/147-gitea_cookbook' of kosmos/chef into master
2020-06-02 09:16:37 +00:00
Greg Karékinian
94330f2052
Comment out the COOKIE_SECURE config for now
...
We will enable it again after we have a valid TLS cert generated with
Let's Encrypt. It prevents logins using http, and we will need that as
an admin account
2020-05-28 18:43:31 +02:00
Greg Karékinian
baaae695af
Merge branch 'master' into feature/147-gitea_cookbook
2020-05-28 15:44:44 +02:00
5b2d4f269d
Merge branch 'bugfix/171-letsencrypt_resource' of kosmos/chef into master
2020-05-26 15:25:27 +00:00
Greg Karékinian
baa0739936
Add the backup recipe
...
Also move the Gitea data dir to an attribute
2020-05-26 15:21:26 +02:00
Greg Karékinian
3332a1b2e8
Write initial README
2020-05-26 15:21:07 +02:00
Greg Karékinian
210c76c479
Fix the name of the Let's Encrypt cert execute resource
...
The resource in the notification was invalid, missing the type of
resource (execute)
Fixes #171
2020-05-26 14:10:47 +02:00
6469d2286e
Merge branch 'feature/zoom_options' of kosmos/chef into master
2020-05-25 15:52:41 +00:00
9dec1cfce8
Merge branch 'chore/mastodon_system_deps' of kosmos/chef into master
2020-05-25 15:50:58 +00:00
5fcb047505
Update Mastodon system dependencies
...
Needs new Ruby, and why not upgrade Yarn in the process. Running in
production.
2020-05-25 17:49:22 +02:00
f92b43e0f4
Configure Zoom meeting whitelist
...
So we only log contributions for actual Kosmos calls
2020-05-25 16:57:09 +02:00
Greg Karékinian
1f0e2ccbdd
Move the binary URL to an attribute
2020-05-21 11:51:06 +02:00
Greg Karékinian
51d4d88568
Initial kosmos_gitea cookbook
...
The default recipe deploys the gitea binary, generates a config file and
our custom Kosmos label set. The service runs as a Systemd unit.
The pg_db recipe needs to run on the primary PostgreSQL (currently
andromeda).
The backup recipe is empty for now
Refs #147
2020-05-18 19:39:43 +02:00
Greg Karékinian
20cbc678bc
Add a method that returns the PostgreSQL service
2020-05-18 19:38:37 +02:00
82f1e9863b
Merge branch 'bugfix/160-cookbook_fixes' of kosmos/chef into master
2020-05-16 08:53:24 +00:00
Greg Karékinian
d0daa9cee7
Add the encryption password for encfs to the data bag
2020-05-15 18:46:24 +02:00
Greg Karékinian
d79cdf087b
Move the PGPASS environment variable to the execute resource
...
That way it does not appear in the list of running processes while the
command is running
2020-05-15 18:45:12 +02:00
Greg Karékinian
31dc14e88c
Fix the firewall rules for PostgreSQL
...
I got the source and destination mixed up.
2020-05-15 18:44:42 +02:00
Greg Karékinian
55b1cbc1d7
Encrypt the Postgresql data dir on the replica (centaurus)
...
encfs always runs a configuration assistant when creating a new
volume, so this needs to be done manually:
systemctl stop postgresql@12-main
mv /var/lib/postgresql /var/lib/postgresql.old
encfs /var/lib/postgresql_encrypted /var/lib/postgresql --public
Pick p (paranoia mode) and enter the password from the data bag twice
mv /var/lib/postgresql/* /var/lib/postgresql/
systemctl start postgresql@12-main
This is running on centaurus and is mounted automatically on boot by a
system unit
Refs #129
2020-05-15 18:41:31 +02:00
4475af9204
Merge branch 'bugfix/enable_dirsrv' of kosmos/chef into master
2020-05-15 15:24:42 +00:00
Greg Karékinian
57f46c6c61
Merge branch 'master' into bugfix/enable_dirsrv
2020-05-15 17:24:04 +02:00
d900ca352c
Merge branch 'bugfix/dirsrv_acis_really_fix' of kosmos/chef into master
2020-05-15 15:22:04 +00:00
Greg Karékinian
b4209fa294
Fix the invalid ACIs on initial creation (for real)
...
Follow-up to #156
I found another issue with the initial ACI creation, while creating a
fresh VM. I thought I had fixed it in #156 but I was wrong. This time
the ACIs are really set and the code runs successfully.
The ACIs are set on the suffix, so modifying it is needed
This won't be executed on a server that is already running, this is only
done on the initial setup
2020-05-15 14:05:35 +02:00
Greg Karékinian
10f0460fd5
Fix startup of the dirsrv@master Systemd unit on boot
...
The symlink created by Chef's service resource was wrong. Creating the
correct symlink fixes the automatic startup on boot
2020-05-15 13:54:34 +02:00
Greg Karékinian
bf60f9fca8
Add the Chef client public keys for andromeda and barnard
2020-05-14 15:34:10 +02:00
773aa3ddee
Update node configs
2020-05-14 15:29:25 +02:00
3c905dd51e
Merge branch 'feature/160-postgres_replication' of kosmos/chef into master
2020-05-14 13:10:34 +00:00
Greg Karékinian
da278822f6
Use the new postgresql_primary role on andromeda
2020-05-14 15:09:33 +02:00
Greg Karékinian
18973fe4f6
Remove the deleted tls property from the resources
2020-05-14 15:09:15 +02:00
Greg Karékinian
fbf610a643
Merge branch 'master' into feature/160-postgres_replication
2020-05-14 15:06:00 +02:00
Greg Karékinian
069090bf44
Remove TODOs
...
Access rules will not be part of this cookbook, they need to be added to
the cookbooks that use a PostgreSQL database
2020-05-14 13:15:47 +02:00
Greg Karékinian
dd92d6cdb7
Remove deploying the root cert to clients from the README
...
We do not want to verify the root cert so this is not needed
2020-05-14 13:14:42 +02:00
Greg Karékinian
124ee5e6f3
Update the README
2020-05-14 12:36:20 +02:00
Greg Karékinian
0063776297
Remove unused dependencies
2020-05-13 19:11:00 +02:00
Greg Karékinian
8d2ab785fc
Use a self-signed TLS certificate for PostgreSQL
2020-05-13 19:10:14 +02:00
Greg Karékinian
84cb3de4a0
Remove outdated comment
...
This was the case when the code lived inside of the custom resource
2020-05-13 19:04:12 +02:00
Greg Karékinian
f3f8e47cce
Add replication_password to the postgresql credentials
2020-05-13 15:35:34 +02:00
Greg Karékinian
51b23c2f47
Add postgresql roles
2020-05-13 15:35:15 +02:00
Greg Karékinian
eb98aa1bac
Clarify the firewall and client authentication rules
2020-05-12 16:04:58 +02:00
Greg Karékinian
0180da1aa6
Fix a typo in the README
2020-05-12 15:59:55 +02:00
Greg Karékinian
254f9020ae
Enable firewall rules to allow primary/replica to connect
2020-05-12 12:10:10 +02:00
Greg Karékinian
80c7263a72
Upgrade PostgreSQL from 10 to 12
...
Refs #160
2020-05-11 18:26:57 +02:00
Greg Karékinian
b22a7e3c0f
Update the postgresql upstream cookbook
2020-05-11 18:26:35 +02:00
Greg Karékinian
21119fff08
Add a custom resource to set up PostgreSQL 12
...
Supports both primary and replica. The access rules and firewall have to
be set up outside of the custom resource, so they are part of the
recipes instead
Refs #160
2020-05-11 18:23:11 +02:00
0aae86b545
Merge branch 'feature/turn_ip_config' of kosmos/chef into master
2020-05-02 12:43:38 +00:00
4448ec2173
Configure TURN properly
...
Was missing a couple of necessary properties, and is now using an
explicit port range for TURN, and opening those ports in UFW.
2020-05-02 14:07:14 +02:00
0bcb2597e8
Update node info
2020-05-02 12:41:30 +02:00
136fc84c4f
Merge branch 'feature/159-ejabberd_stun_turn' of kosmos/chef into master
2020-05-02 10:01:15 +00:00
ef2fa2da72
Configure STUN/TURN
...
Configures built-in STUN/TURN support, and adds the new service discovery
module for it.
2020-05-01 16:25:38 +02:00
35a56aa221
Update version to 20.04
2020-05-01 14:55:13 +02:00
53d53f2375
Merge branch 'bugfix/152-remove_encryption_keys_tls' of kosmos/chef into master
2020-04-30 15:50:26 +00:00
ee13c3cbe9
Merge branch 'bugfix/153-update_ejabberd_20.03' of kosmos/chef into master
2020-04-21 13:38:53 +00:00
4c1879b84e
Merge branch 'bugfix/ldap_invalid_aci' of kosmos/chef into master
2020-04-21 11:22:50 +00:00
Greg Karékinian
1c920a8cb2
Remove the encryption keys after TLS cert renewal
...
This is done with awk, this was the best way I found to perform the
multi-line deletion. It deletes both the AES AND 3DES sections
The keys will be recreated on service restart
https://access.redhat.com/documentation/en-us/red_hat_directory_server/9.0/html/administration_guide/ssl-and-attr-encryption
Closes #152
2020-04-20 19:11:34 +02:00
Greg Karékinian
5e3c8066f9
Add the missing certbot command to generate the LDAP TLS cert
...
This had been done manually on barnard. This will not be executed on
barnard again since the cert exists
2020-04-20 19:10:15 +02:00
Greg Karékinian
d01c9a4d0a
Fix the name of the deploy certbot hook
2020-04-20 19:09:43 +02:00
Greg Karékinian
3ca8ab45da
Fix the invalid ACIs on initial creation
...
This is only executed on initial creation of the instance, the
production one is using these fixed ACIs, this was only an issue with
the setup
The issue was the ACI was set at the wrong level
2020-04-20 19:00:28 +02:00
Greg Karékinian
db8bb44c8b
Update ejabberd to 20.03
...
The download URL has changed, they removed a prefix
Closes #153
2020-04-20 14:53:08 +02:00
Greg Karékinian
f5dd2c7de9
Fix the command importing the schema on db creation
...
It had an extra }, but this only fails when creating the databases
2020-04-20 14:52:11 +02:00
f5bdc3e892
Merge branch 'doc/ldap' of kosmos/chef into master
2020-04-20 09:29:34 +00:00
73e87f8f45
Improve LDAP example command
...
We should not log passwords in bash history files. This change will
prompt the user for the password instead.
2020-04-19 13:01:39 +02:00
4f1bf768ee
Merge branch 'feature/hal8000_zoom' of kosmos/chef into master
2020-04-16 20:19:30 +00:00
cc4c8fb903
Add hubot-kredits Zoom config
2020-04-16 17:52:28 +02:00
Greg Karékinian
43736cd8e9
Move the debug logs env variable to an attribute
...
Set it to 'sockethub*' for now as Nick advised, see
#91
2020-03-25 17:51:28 +01:00
Greg Karékinian
29a5947d18
Deploy Sockethub from the npm package
...
This is currently 3.1.4 and is set as an attribute. The recipe is very
simple now, it installs the npm package, and the systemd service runs
/usr/bin/sockethub and sets the environment variables
Closes #145
2020-03-25 12:43:39 +01:00
a3b95463fa
Merge branch 'bugfix/mediawiki_extensions_deleted_releases' of kosmos/chef into master
2020-03-04 15:07:22 +00:00
Greg Karékinian
d7363d662b
Switch the Mediawiki extensions to GitHub zips
...
This fixes the annoying issue of Mediawiki only keeping one revision of
each branch
2020-03-04 16:03:12 +01:00
7fa11089b1
Merge branch 'bugfix/ejabberd_restart_config_vhost_change' of kosmos/chef into master
2020-03-04 13:45:10 +00:00
970a1b6a3a
Merge branch 'feature/136-ejabberd_20.02' of kosmos/chef into master
2020-03-04 13:33:52 +00:00
Greg Karékinian
a68ae78689
Update ejabberd to 20.02
...
It includes a fix to the reload_config command that prevented us from
running a version newer than 19.05
Closes #136
2020-03-04 13:28:13 +01:00
Greg Karékinian
6cd0fa039e
Restart ejabberd service when changing a vhost config
...
I have ran into an issue, changes to the LDAP config for a host are
currently only loaded on startup, not on reload
https://github.com/processone/ejabberd/issues/3181
This should be fixed once
b39a1e2d74
is part of the next release
2020-03-04 13:23:54 +01:00
gregkare
081222b75c
Merge branch 'feature/140-ldap_application_accounts' of kosmos/chef into master
2020-02-27 10:45:46 +00:00
Greg Karékinian
d7ad95fb3f
Switch the mediawiki LDAP setup to a new application account
...
Needs the new directory structure:
```
dn: cn=applications,dc=kosmos,dc=org
objectClass: top
objectClass: organizationalRole
cn: users
dn: ou=kosmos.org,cn=applications,dc=kosmos,dc=org
objectClass: top
objectClass: organizationalUnit
ou: kosmos.org
dn: ou=5apps.com,cn=applications,dc=kosmos,dc=org
objectClass: top
objectClass: organizationalUnit
description: 5apps
ou: 5apps.com
dn: uid=wiki,ou=kosmos.org,cn=applications,dc=kosmos,dc=org
objectClass: simpleSecurityObject
objectClass: account
uid: wiki
userPassword: [snip]
dn: uid=xmpp,ou=kosmos.org,cn=applications,dc=kosmos,dc=org
objectClass: simpleSecurityObject
objectClass: account
uid: xmpp
userPassword: [snip]
dn: uid=xmpp,ou=5apps.com,cn=applications,dc=kosmos,dc=org
objectClass: simpleSecurityObject
objectClass: account
uid: xmpp
userPassword: [snip]
```
And the new ACIs:
```
dn: ou=5apps.com,cn=users,dc=kosmos,dc=org
changetype: modify
replace: aci
aci: (target="ldap:///cn=*,ou=5apps.com,cn=users,dc=kosmos,dc=org")(targetattr="cn || sn || uid || mail || userPassword || nsRole") (version 3.0; acl "xmpp-5apps-read-search"; allow (read,search) userdn="ldap:///cn=xmpp,ou=5apps.com,cn=users,dc=kosmos,dc=org";)
aci: (target="ldap:///cn=*,ou=5apps.com,cn=users,dc=kosmos,dc=org")(targetattr="userPassword") (version 3.0; acl "xmpp-5apps-change-password"; allow (write) userdn="ldap:///cn=xmpp,ou=5apps.com,cn=users,dc=kosmos,dc=org";)
aci: (target="ldap:///cn=*,ou=5apps.com,cn=users,dc=kosmos,dc=org")(targetattr="cn || sn || uid || mail || userPassword || nsRole || objectClass") (version 3.0; acl "xmpp-5apps-read-search"; allow (read,search) userdn="ldap:///uid=xmpp,ou=5apps.com,cn=applications,dc=kosmos,dc=org";)
aci: (target="ldap:///cn=*,ou=5apps.com,cn=users,dc=kosmos,dc=org")(targetattr="userPassword") (version 3.0; acl "xmpp-5apps-change-password"; allow (write) userdn="ldap:///uid=xmpp,ou=5apps.com,cn=applications,dc=kosmos,dc=org";)
dn: ou=kosmos.org,cn=users,dc=kosmos,dc=org
changetype: modify
replace: aci
aci: (target="ldap:///cn=*,ou=kosmos.org,cn=users,dc=kosmos,dc=org")(targetattr="cn || sn || uid || mail || userPassword || nsRole") (version 3.0; acl "xmpp-kosmos-read-search"; allow (read,search) userdn="ldap:///cn=xmpp,ou=kosmos.org,cn=users,dc=kosmos,dc=org";)
aci: (target="ldap:///cn=*,ou=kosmos.org,cn=users,dc=kosmos,dc=org")(targetattr="cn || sn || uid || mail || userPassword") (version 3.0; acl "xmpp-kosmos-read-search"; allow (read,search) userdn="ldap:///cn=wiki,ou=kosmos.org,cn=users,dc=kosmos,dc=org";)
aci: (target="ldap:///cn=*,ou=kosmos.org,cn=users,dc=kosmos,dc=org")(targetattr="userPassword") (version 3.0; acl "xmpp-kosmos-change-password"; allow (write) userdn="ldap:///cn=xmpp,ou=kosmos.org,cn=users,dc=kosmos,dc=org";)
aci: (target="ldap:///cn=*,ou=kosmos.org,cn=users,dc=kosmos,dc=org")(targetattr="cn || sn || uid || mail || userPassword || nsRole || objectClass") (version 3.0; acl "xmpp-kosmos-read-search"; allow (read,search) userdn="ldap:///uid=xmpp,ou=kosmos.org,cn=applications,dc=kosmos,dc=org";)
aci: (target="ldap:///cn=*,ou=kosmos.org,cn=users,dc=kosmos,dc=org")(targetattr="cn || sn || uid || mail || userPassword || objectClass") (version 3.0; acl "xmpp-kosmos-read-search"; allow (read,search) userdn="ldap:///uid=wiki,ou=kosmos.org,cn=applications,dc=kosmos,dc=org";)
aci: (target="ldap:///cn=*,ou=kosmos.org,cn=users,dc=kosmos,dc=org")(targetattr="userPassword") (version 3.0; acl "xmpp-kosmos-change-password"; allow (write) userdn="ldap:///uid=xmpp,ou=kosmos.org,cn=applications,dc=kosmos,dc=org";)
```
Refs #140
2020-02-21 18:04:48 +01:00
Greg Karékinian
6fa89b3c25
Switch the ejabberd LDAP setup to a new application account
...
Needs the new directory structure:
```
dn: cn=applications,dc=kosmos,dc=org
objectClass: top
objectClass: organizationalRole
cn: users
dn: ou=kosmos.org,cn=applications,dc=kosmos,dc=org
objectClass: top
objectClass: organizationalUnit
ou: kosmos.org
dn: ou=5apps.com,cn=applications,dc=kosmos,dc=org
objectClass: top
objectClass: organizationalUnit
description: 5apps
ou: 5apps.com
dn: uid=wiki,ou=kosmos.org,cn=applications,dc=kosmos,dc=org
objectClass: simpleSecurityObject
objectClass: account
uid: wiki
userPassword: [snip]
dn: uid=xmpp,ou=kosmos.org,cn=applications,dc=kosmos,dc=org
objectClass: simpleSecurityObject
objectClass: account
uid: xmpp
userPassword: [snip]
dn: uid=xmpp,ou=5apps.com,cn=applications,dc=kosmos,dc=org
objectClass: simpleSecurityObject
objectClass: account
uid: xmpp
userPassword: [snip]
```
And the new ACIs:
```
dn: ou=5apps.com,cn=users,dc=kosmos,dc=org
changetype: modify
replace: aci
aci: (target="ldap:///cn=*,ou=5apps.com,cn=users,dc=kosmos,dc=org")(targetattr="cn || sn || uid || mail || userPassword || nsRole") (version 3.0; acl "xmpp-5apps-read-search"; allow (read,search) userdn="ldap:///cn=xmpp,ou=5apps.com,cn=users,dc=kosmos,dc=org";)
aci: (target="ldap:///cn=*,ou=5apps.com,cn=users,dc=kosmos,dc=org")(targetattr="userPassword") (version 3.0; acl "xmpp-5apps-change-password"; allow (write) userdn="ldap:///cn=xmpp,ou=5apps.com,cn=users,dc=kosmos,dc=org";)
aci: (target="ldap:///cn=*,ou=5apps.com,cn=users,dc=kosmos,dc=org")(targetattr="cn || sn || uid || mail || userPassword || nsRole || objectClass") (version 3.0; acl "xmpp-5apps-read-search"; allow (read,search) userdn="ldap:///uid=xmpp,ou=5apps.com,cn=applications,dc=kosmos,dc=org";)
aci: (target="ldap:///cn=*,ou=5apps.com,cn=users,dc=kosmos,dc=org")(targetattr="userPassword") (version 3.0; acl "xmpp-5apps-change-password"; allow (write) userdn="ldap:///uid=xmpp,ou=5apps.com,cn=applications,dc=kosmos,dc=org";)
dn: ou=kosmos.org,cn=users,dc=kosmos,dc=org
changetype: modify
replace: aci
aci: (target="ldap:///cn=*,ou=kosmos.org,cn=users,dc=kosmos,dc=org")(targetattr="cn || sn || uid || mail || userPassword || nsRole") (version 3.0; acl "xmpp-kosmos-read-search"; allow (read,search) userdn="ldap:///cn=xmpp,ou=kosmos.org,cn=users,dc=kosmos,dc=org";)
aci: (target="ldap:///cn=*,ou=kosmos.org,cn=users,dc=kosmos,dc=org")(targetattr="cn || sn || uid || mail || userPassword") (version 3.0; acl "xmpp-kosmos-read-search"; allow (read,search) userdn="ldap:///cn=wiki,ou=kosmos.org,cn=users,dc=kosmos,dc=org";)
aci: (target="ldap:///cn=*,ou=kosmos.org,cn=users,dc=kosmos,dc=org")(targetattr="userPassword") (version 3.0; acl "xmpp-kosmos-change-password"; allow (write) userdn="ldap:///cn=xmpp,ou=kosmos.org,cn=users,dc=kosmos,dc=org";)
aci: (target="ldap:///cn=*,ou=kosmos.org,cn=users,dc=kosmos,dc=org")(targetattr="cn || sn || uid || mail || userPassword || nsRole || objectClass") (version 3.0; acl "xmpp-kosmos-read-search"; allow (read,search) userdn="ldap:///uid=xmpp,ou=kosmos.org,cn=applications,dc=kosmos,dc=org";)
aci: (target="ldap:///cn=*,ou=kosmos.org,cn=users,dc=kosmos,dc=org")(targetattr="cn || sn || uid || mail || userPassword || objectClass") (version 3.0; acl "xmpp-kosmos-read-search"; allow (read,search) userdn="ldap:///uid=wiki,ou=kosmos.org,cn=applications,dc=kosmos,dc=org";)
aci: (target="ldap:///cn=*,ou=kosmos.org,cn=users,dc=kosmos,dc=org")(targetattr="userPassword") (version 3.0; acl "xmpp-kosmos-change-password"; allow (write) userdn="ldap:///uid=xmpp,ou=kosmos.org,cn=applications,dc=kosmos,dc=org";)
```
Refs #140
2020-02-21 18:03:58 +01:00
gregkare
f34513220e
Merge branch 'feature/130-remove_antispam' of kosmos/chef into master
2020-02-20 13:34:15 +00:00
Greg Karékinian
c4fdf1779f
Remove the CleanTalk Antispam extension
...
It is not needed anymore now that registration is closed and only LDAP
accounts can edit or create pages
Closes #130
2020-02-20 14:31:39 +01:00
Greg Karékinian
6f7474b4d1
Update the Mediawiki extensions
2020-02-20 14:30:25 +01:00
gregkare
c01f5c1038
Merge branch 'feature/127-new_ldap_dir_structure' of kosmos/chef into master
2020-02-20 13:29:05 +00:00
Greg Karékinian
90a0e6be9f
Enable LDAP on the kosmos.org vhost
2020-02-19 12:30:55 +01:00
Greg Karékinian
276daf0ed7
Switch the Mediawiki config to the new LDAP dir structure
...
* Use a new read-only account instead of the admin LDAP account
* Disable the LDAPAuthorization plugin. The LDAPAuthentication2 plugin
is still used to authenticate users, but every kosmos.org user has
access to the wiki. See
https://www.mediawiki.org/wiki/Extension:PluggableAuth for the
distinction between authentication and authorization
Refs #127
2020-02-19 12:29:14 +01:00
afaff86551
Merge branch 'feature/134-ejabberd_19.05' of kosmos/chef into master
2020-02-17 16:37:13 +00:00
Greg Karékinian
56adfa37fb
Fix a warning in the config
...
Migrate the web admin to a request handler
2020-02-17 17:26:55 +01:00
Greg Karékinian
0f9b2777a3
Update ejabberd to 19.05
...
Versions from 19.08 to 20.01 contains a blocking bug in the
reload_config command
(https://github.com/processone/ejabberd/issues/3170 )
Closes #134
2020-02-17 17:26:45 +01:00
e694996ebd
Merge branch 'feature/123-ejabberd_5apps' of kosmos/chef into master
2020-02-17 14:41:03 +00:00
Greg Karékinian
c2b2b6f08b
Fix the vhost template
...
hosts must be defined in the main config file
2020-02-17 15:04:08 +01:00
Greg Karékinian
72cc6342f1
Remove the unused LDAP variables from the main config file
2020-02-17 13:27:14 +01:00
Greg Karékinian
38f39af2a4
Move each vhost to its own config file
2020-02-17 13:20:54 +01:00
Greg Karékinian
463664448c
Merge branch 'master' into feature/123-ejabberd_5apps
2020-02-17 12:21:16 +01:00
5b86aca5e8
Update andromeda node info
2020-02-15 13:52:00 -05:00
gregkare
585041e36c
Merge branch 'bugfix/128-set_acis_on_users' of kosmos/chef into master
2020-02-14 15:47:16 +00:00
Greg Karékinian
55eb95ae73
Verify the TLS server's certificate
...
Do not proceed if a certificate is invalid
2020-02-14 13:56:52 +01:00
Greg Karékinian
dc1226073c
Move the admin users to the ejabberd encrypted data bag
2020-02-14 13:56:17 +01:00
Greg Karékinian
49d01991fd
Enable LDAP on the XMPP 5apps.com vhost
...
Refactor the ejabberd config file to remove hardcoded values about the
vhosts
Refs #123
2020-02-12 17:40:38 +01:00
Greg Karékinian
e56faab5b1
Set the ACIs on the base DN
...
Allow users to change their own password, but nothing else (no search,
no read, no write)
This will only run when setting up the 389-dirsrv instance for the first
time, this has been applied on barnard by editing the dn (see
#128 (comment) )
Closes #128
2020-02-12 16:13:45 +01:00
Greg Karékinian
396cc344fb
Switch the ipfs cookbook from GitHub to Gitlab
2020-02-04 16:26:31 +01:00
628b8c6ef8
Merge branch 'feature/124-enable_cite_extension' of kosmos/chef into master
2020-01-29 14:36:31 +00:00
Greg Karékinian
2a66ff6146
Enable the Cite extension in the MediaWiki config
...
This is used to create references as footnotes.
See https://www.mediawiki.org/wiki/Extension:Cite
Closes #124
2020-01-29 14:30:39 +01:00
ef29e60403
Merge branch 'feature/107-ldap_mediawiki' of kosmos/chef into master
2020-01-28 17:02:42 +00:00
Greg Karékinian
a06ea47e58
Update the LDAPProvider extension
2020-01-28 13:54:57 +01:00
Greg Karékinian
a69192a863
Enable LDAP support on mediawiki
...
Users can log in using their LDAP account (in the
ou=users,dc=kosmos,dc=org group and with the wiki attribute set to
enabled)
Add an attribute for the ldap master server, so it can be overridden in
the development environment
Refs #107
2020-01-24 13:45:17 +01:00