Add new service: nostr.kosmos.org (members-only nostr relay) #559

2024-06-11T21:18:26Z

raucao commented

2024-06-11 21:18:26 +00:00

Configures/deploys a strfry relay, with an LDAP policy to only allow writes from users with a known nostrKey in LDAP.

You can try this for yourself by adding wss://nostr.kosmos.org to any Nostr client and publishing a note. It will be rejected, unless you add your Nostr pubkey on https://accounts.kosmos.org/settings/nostr first. The easiest way of doing that is to generate a keypair in Alby, which you can then also use to log into your account once the key is added.

A very simple Web app for testing is https://snowcait.github.io/nostr-playground/ for example. Personally, I enjoy https://nostrudel.ninja a lot, and it comes with some debugging tools and detailed publishing statuses as well.

Configures/deploys a [strfry](https://github.com/hoytech/strfry) relay, with an LDAP policy to only allow writes from users with a known `nostrKey` in LDAP. You can try this for yourself by adding `wss://nostr.kosmos.org` to any Nostr client and publishing a note. It will be rejected, unless you add your Nostr pubkey on https://accounts.kosmos.org/settings/nostr first. The easiest way of doing that is to generate a keypair in Alby, which you can then also use to log into your account once the key is added. A very simple Web app for testing is https://snowcait.github.io/nostr-playground/ for example. Personally, I enjoy https://nostrudel.ninja a lot, and it comes with some debugging tools and detailed publishing statuses as well.

raucao added the kredits-2 ops feature labels 2024-06-11 21:18:26 +00:00

raucao added 9 commits 2024-06-11 21:18:26 +00:00

Add strfry cookbook 1a5f312699

Add kosmos_strfry cookbook, configs dbccd9d2bf

Fall back to default port for strfry proxy 9835b85181

When we don't override it elsewhere

Update strfry cookbook b9a3910364

Update strfry cookbook 1649d03665

Header name has to be all lowercase in strfry config 5be9081613

Deploy strfry reverse proxy 42c46a5645

Add, configure, deploy strfry policies d1301dad3e

Create/deploy strfry VM f5961af7fe

raucao requested review from greg 2024-06-11 21:18:31 +00:00

raucao reviewed 2024-06-11 21:50:25 +00:00

site-cookbooks/kosmos_kvm/attributes/default.rb

						
				@@ -1,9 +1,10 @@

				ubuntu_server_cloud_image_release = "20230506"

				release = "20240514"

				img_filename = "ubuntu-22.04-server-cloudimg-amd64-disk-kvm"

raucao commented

2024-06-11 21:50:25 +00:00

This change slipped into the PR accidentally, but I think we could probably just leave it here.

greg marked this conversation as resolved

raucao added 1 commit 2024-06-20 13:04:45 +00:00

Configure akkounts nostr relay URL in production 7e664723a1

raucao added 1 commit 2024-06-20 13:39:15 +00:00

Configure strfry whitelist 80eddfbf56

Allow akkounts pubkey to publish to our own relay

raucao added 1 commit 2024-06-20 16:16:48 +00:00

Add Deno lockfile 522c213b09

greg reviewed 2024-07-02 13:03:50 +00:00

site-cookbooks/kosmos_strfry/recipes/policies.rb Outdated

						
				@@ -0,0 +40,4 @@

				  owner node["strfry"]["user"]

				  group node["strfry"]["group"]

				  mode "0644"

				  notifies :restart, "service[strfry]", :delayed