Move Mastodon nginx to proxy/LB #452

Merged
greg merged 11 commits from feature/mastodon_nginx into master 2022-12-08 13:07:35 +00:00
Owner

See commit messages for all details.

Tested/running on mastodon-3 and fornax. After switching DNS, I also removed the haproxy config on draco.

(The nginx proxy now has a Tor node running, with a generic hidden service configured for Web ports 80/443, so other services can also use subdomains like Mastodon does in the future. Or they can configure their own hidden service, of course.)

See commit messages for all details. Tested/running on `mastodon-3` and `fornax`. After switching DNS, I also removed the haproxy config on `draco`. (The nginx proxy now has a Tor node running, with a generic hidden service configured for Web ports 80/443, so other services can also use subdomains like Mastodon does in the future. Or they can configure their own hidden service, of course.)
raucao added the
ops
kredits-2
labels 2022-11-30 11:12:11 +00:00
raucao added 6 commits 2022-11-30 11:12:11 +00:00
And allow access to them from the private network
In favor of fail2ban
Works both as local deployment and proxy (via roles and environments)

* Use upstreams for proxy_pass
* Access static assets from proxy, configure caching for them
* Move Tor config to environment, install via role
* ...
Configure alternate_domains for Rails app to re-enable Tor access (was
throwing 403s without this config)
raucao requested review from greg 2022-11-30 11:12:16 +00:00
raucao changed title from Move Mastodon Nginx to proxy/LB to Move Mastodon nginx to proxy/LB 2022-11-30 11:12:24 +00:00
raucao added 1 commit 2022-12-01 16:08:32 +00:00
greg approved these changes 2022-12-08 13:07:02 +00:00
greg left a comment
Owner

Looking good!

Looking good!
greg added 1 commit 2022-12-08 13:07:10 +00:00
greg merged commit 98785a1a86 into master 2022-12-08 13:07:35 +00:00
greg deleted branch feature/mastodon_nginx 2022-12-08 13:07:36 +00:00
Sign in to join this conversation.
No Reviewers
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: kosmos/chef#452
No description provided.