kosmos/chef
8
3
Fork 0
Code Issues 37 Pull Requests Projects 2 Activity

Move Mastodon nginx to proxy/LB #452

Merged
greg merged 11 commits from feature/mastodon_nginx into master 2022-12-08 13:07:35 +00:00
Conversation 1 Commits 11 Files Changed 16
+153 -93
raucao commented 2022-11-30 11:12:11 +00:00
Owner
Copy Link
Copy Source

See commit messages for all details.

Tested/running on mastodon-3 and fornax. After switching DNS, I also removed the haproxy config on draco.

(The nginx proxy now has a Tor node running, with a generic hidden service configured for Web ports 80/443, so other services can also use subdomains like Mastodon does in the future. Or they can configure their own hidden service, of course.)

See commit messages for all details. Tested/running on `mastodon-3` and `fornax`. After switching DNS, I also removed the haproxy config on `draco`. (The nginx proxy now has a Tor node running, with a generic hidden service configured for Web ports 80/443, so other services can also use subdomains like Mastodon does in the future. Or they can configure their own hidden service, of course.)
raucao added the opskredits-2 labels 2022-11-30 11:12:11 +00:00
raucao added 6 commits 2022-11-30 11:12:11 +00:00
Make Mastodon services listen on private IP in prod c4d43b7f4e 
And allow access to them from the private network
Remove request limits for ipfs proxy 83513dbd9d 
In favor of fail2ban
Use domain name for log file paths 83e55c84a2
Refactor Mastodon nginx recipe for proxy usage 66f5217a41 
Works both as local deployment and proxy (via roles and environments)

* Use upstreams for proxy_pass
* Access static assets from proxy, configure caching for them
* Move Tor config to environment, install via role
* ...
Fix Tor access f3ca307e64 
Configure alternate_domains for Rails app to re-enable Tor access (was
throwing 403s without this config)
Move Mastodon nginx to proxy/LB 5d05d5c187
raucao requested review from greg 2022-11-30 11:12:16 +00:00
raucao changed title from Move Mastodon Nginx to proxy/LB to Move Mastodon nginx to proxy/LB 2022-11-30 11:12:24 +00:00
raucao added 1 commit 2022-12-01 16:08:32 +00:00
Add missing sidekiq queue a460302728
greg approved these changes 2022-12-08 13:07:02 +00:00
greg left a comment
Owner
Copy Link
Copy Source

Looking good!

Looking good!
greg added 1 commit 2022-12-08 13:07:10 +00:00
Merge branch 'master' into feature/mastodon_nginx 66c91b5a7f
greg merged commit 98785a1a86 into master 2022-12-08 13:07:35 +00:00
greg deleted branch feature/mastodon_nginx 2022-12-08 13:07:36 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
greg
Labels
Clear labels
service
discourse
Kosmos Community Forums
monitoring
Infrastructure metrics, alerts, notifications, etc.
service
accounts
Kosmos Accounts
service
drone-ci
Kosmos Drone CI
service
email
mail.kosmos.org
service
garage
S3-compatible object storage
service
gitea
Kosmos Gitea
service
ipfs
Kosmos IPFS
service
mastodon
kosmos.social
service
nostr
Relays, Blossom server, etc.
service
postgres
Database cluster
service
remotestorage
Portable data storage for the Web
service
wiki
Kosmos Wiki
service
xmpp
Kosmos Chat
bug
Something is not working
 design
Graphic/visual design
 dev environment
Config, builds, CI, deployment, etc.
 docs
Documentation
 duplicate
This issue or pull request already exists
 enhancement
Improving existing functionality
 feature
New functionality
 good first issue
Dive in, and start contributing
 idea
Something to consider
 invalid
Not a bug
 kredits-1
Small contribution
 kredits-2
Medium contribution
 kredits-3
Large contribution
 on hold
Currently not actionable
 ops
Manual IT ops activities
 question
Looking for an answer
release
major
release
minor
release
patch
security
All your base are belong to us
 ui/ux
User interface, process design, etc.
 wontfix
This won't be fixed
No labels kredits-2 ops
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
bkero (bkero) bumi (bumi) fsmanuel (fsmanuel) galfert (galfert) greg (Greg) hueso (hueso) raucao (Râu Cao) slvrbckt (Nick Jennings)
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: kosmos/chef#452