kosmos/chef
kosmos
/
chef
8
3
Fork 0
Code Issues 37 Pull Requests 1 Projects 1 Activity

Move Mastodon nginx to proxy/LB #452

Merged
greg merged 11 commits from feature/mastodon_nginx into master 2022-12-08 13:07:35 +00:00
Conversation 0 Commits 11 Files Changed 16 +153 -93
raucao commented 2022-11-30 11:12:11 +00:00
Owner
Copy Link

See commit messages for all details.

Tested/running on mastodon-3 and fornax. After switching DNS, I also removed the haproxy config on draco.

(The nginx proxy now has a Tor node running, with a generic hidden service configured for Web ports 80/443, so other services can also use subdomains like Mastodon does in the future. Or they can configure their own hidden service, of course.)

See commit messages for all details. Tested/running on `mastodon-3` and `fornax`. After switching DNS, I also removed the haproxy config on `draco`. (The nginx proxy now has a Tor node running, with a generic hidden service configured for Web ports 80/443, so other services can also use subdomains like Mastodon does in the future. Or they can configure their own hidden service, of course.)
raucao added the
ops
kredits-2
 labels 2022-11-30 11:12:11 +00:00
raucao added 6 commits 2022-11-30 11:12:11 +00:00
c4d43b7f4e Make Mastodon services listen on private IP in prod 
And allow access to them from the private network
66f5217a41
Refactor Mastodon nginx recipe for proxy usage 
Works both as local deployment and proxy (via roles and environments)

* Use upstreams for proxy_pass
* Access static assets from proxy, configure caching for them
* Move Tor config to environment, install via role
* ...
f3ca307e64
Fix Tor access 
Configure alternate_domains for Rails app to re-enable Tor access (was
throwing 403s without this config)
raucao requested review from greg 2022-11-30 11:12:16 +00:00
raucao changed title from Move Mastodon Nginx to proxy/LB to Move Mastodon nginx to proxy/LB 2022-11-30 11:12:24 +00:00
raucao added 1 commit 2022-12-01 16:08:32 +00:00
greg approved these changes 2022-12-08 13:07:02 +00:00
greg left a comment
Owner
Copy Link

Looking good!

Looking good!
greg added 1 commit 2022-12-08 13:07:10 +00:00
greg merged commit 98785a1a86 into master 2022-12-08 13:07:35 +00:00
greg deleted branch feature/mastodon_nginx 2022-12-08 13:07:36 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
greg
Labels
Clear labels   
service
accounts
Kosmos Accounts

  
service
discourse
Kosmos Community Forums

  
service
drone-ci
Kosmos Drone CI

  
service
email
mail.kosmos.org

  
service
garage
S3-compatible object storage

  
service
gitea
Kosmos Gitea

  
service
ipfs
Kosmos IPFS

  
service
mastodon
kosmos.social

  
service
postgres
Database cluster

  
service
remotestorage
Portable data storage for the Web

  
service
wiki
Kosmos Wiki

  
service
xmpp
Kosmos Chat

  
bug

Something is not working

  
design

Graphic/visual design

  
dev environment

Config, builds, CI, deployment, etc.

  
docs

Documentation

  
duplicate

This issue or pull request already exists

  
enhancement

Improving existing functionality

  
feature

New functionality

  
good first issue

Dive in, and start contributing

  
idea

Something to consider

  
invalid

Not a bug

  
kredits-1

Small contribution

  
kredits-2

Medium contribution

  
kredits-3

Large contribution

  
on hold

Currently not actionable

  
ops

Manual IT ops activities

  
question

Looking for an answer

  
release
major

  
release
minor

  
release
patch

  
security

All your base are belong to us

  
ui/ux

User interface, process design, etc.

  
wontfix

This won't be fixed

No Label
service
accounts
service
discourse
service
drone-ci
service
email
service
garage
service
gitea
service
ipfs
service
mastodon
service
postgres
service
remotestorage
service
wiki
service
xmpp
bug
design
dev environment
docs
duplicate
enhancement
feature
good first issue
idea
invalid
kredits-1
kredits-2
kredits-3
on hold
ops
question
release
major
release
minor
release
patch
security
ui/ux
wontfix
Milestone
Clear milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
No Assignees
2 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: kosmos/chef#452
No description provided.
Delete Branch "feature/mastodon_nginx"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?