kosmos/chef
kosmos/chef
8
3
Fork 0
Code Issues 30 Pull Requests 3 Projects 2 Activity

Migrate nginx sites to openresty #511

Merged
greg merged 30 commits from chore/migrate_nginx_sites_to_openresty into master 2023-08-01 13:02:33 +00:00
Conversation 3 Commits 30 Files Changed 76 +422 -1213
raucao commented 2023-07-26 14:47:00 +00:00
Owner
Copy Link

Includes some minor openresty cookbook changes, which I pushed directly to its own repo's master branch as well.

Almost done. Left to do:

  • Decide what to do with streams (ejabberd, gitea ssh). Either add a resource to the openresty cookbook or move to haproxy (nicer, but not possible for UDP streams)
  • Tor (use same keys on all LBs; they will do a kind of HA, even though it's a slow failover and only 1 node will be connected to at any given time, i.e. the last one announcing itself on the network)

closes #510

Includes some minor openresty cookbook changes, which I pushed directly to its own repo's master branch as well. Almost done. Left to do: * [x] Decide what to do with streams (ejabberd, gitea ssh). Either add a resource to the openresty cookbook or move to haproxy (nicer, but not possible for UDP streams) * [x] Tor (use same keys on all LBs; they will do a kind of HA, even though it's a slow failover and only 1 node will be connected to at any given time, i.e. the last one announcing itself on the network) closes #510
raucao added 18 commits 2023-07-26 14:47:01 +00:00 
TODO: Make nginx_ssh stream resource work with openresty cookbook
raucao requested review from greg 2023-07-26 14:47:07 +00:00
greg reviewed 2023-07-28 12:26:02 +00:00
site-cookbooks/kosmos_garage/recipes/nginx_web.rb Outdated
@ -6,3 +6,1 @@
include_recipe "kosmos-nginx"
file "/etc/nginx/conf.d/garage.conf" do
file "/etc/openresty/conf.d/garage.conf" do
greg commented 2023-07-28 12:26:02 +00:00
Owner
Copy Link

Could use node['openresty']['dir'] here instead of hardcoding `/etc/openresty"

Could use `node['openresty']['dir']` here instead of hardcoding `/etc/openresty"
👍 1
raucao marked this conversation as resolved
raucao added 1 commit 2023-07-29 12:31:12 +00:00
raucao added 1 commit 2023-07-29 14:26:57 +00:00
raucao added 2 commits 2023-07-30 10:35:43 +00:00
raucao added 2 commits 2023-07-30 10:40:37 +00:00 
And remove the other streams in the process, in favor of running haproxy
on all LBs.
Use a custom resource and separate recipe for service configs with
pre-set keys and hostnames
greg was assigned by raucao 2023-07-30 10:41:48 +00:00
raucao self-assigned this 2023-07-30 10:41:49 +00:00
raucao added 2 commits 2023-07-31 13:07:58 +00:00
raucao added 4 commits 2023-07-31 13:57:30 +00:00
raucao added the
kredits-2
ops
 labels 2023-07-31 13:58:02 +00:00
raucao commented 2023-07-31 13:58:12 +00:00
Author
Owner
Copy Link

All done and running in prod!

All done and running in prod!
greg approved these changes 2023-08-01 13:02:21 +00:00
greg left a comment
Owner
Copy Link

Looking good!

Looking good!
greg merged commit cc8264432c into master 2023-08-01 13:02:33 +00:00
greg deleted branch chore/migrate_nginx_sites_to_openresty 2023-08-01 13:02:33 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
greg
Labels
Clear labels
service
accounts
Kosmos Accounts
service
discourse
Kosmos Community Forums
service
drone-ci
Kosmos Drone CI
service
email
mail.kosmos.org
service
garage
S3-compatible object storage
service
gitea
Kosmos Gitea
service
ipfs
Kosmos IPFS
service
mastodon
kosmos.social
service
postgres
Database cluster
service
remotestorage
Portable data storage for the Web
service
wiki
Kosmos Wiki
service
xmpp
Kosmos Chat
bug
Something is not working
design
Graphic/visual design
dev environment
Config, builds, CI, deployment, etc.
docs
Documentation
duplicate
This issue or pull request already exists
enhancement
Improving existing functionality
feature
New functionality
good first issue
Dive in, and start contributing
idea
Something to consider
invalid
Not a bug
kredits-1
Small contribution
kredits-2
Medium contribution
kredits-3
Large contribution
on hold
Currently not actionable
ops
Manual IT ops activities
question
Looking for an answer
release
major
release
minor
release
patch
security
All your base are belong to us
ui/ux
User interface, process design, etc.
wontfix
This won't be fixed
No Label
kredits-2
ops
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
bkero bumi fsmanuel galfert greg hueso raucao slvrbckt
No Assignees greg raucao
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: kosmos/chef#511
No description provided.
Delete Branch "chore/migrate_nginx_sites_to_openresty"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?