kosmos/chef
kosmos/chef
8
3
Fork 0
Code Issues 29 Pull Requests 2 Projects 2 Activity

Add new service: nostr.kosmos.org (members-only nostr relay) #559

Merged
greg merged 14 commits from feature/strfry into master 2024-07-05 07:33:41 +00:00
Conversation 3 Commits 14 Files Changed 23 +16 -7
3 changed files with 16 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 8b8e8f3438 - Show all commits

2
environments/production.json
View File

@ -106,7 +106,7 @@
"strfry": {
"domain": "nostr.kosmos.org",
"real_ip_header": "x-real-ip",
"policy_path": "/opt/strfry-policy.ts",
"policy_path": "/opt/strfry/strfry-policy.ts",
"whitelist_pubkeys": [
"b3e1b7c1660b7db0ecb93ec55c09e67961171a5c4e9e2602f1b47477ea61c50a"
],

1
site-cookbooks/kosmos_strfry/attributes/default.rb
View File

@ -1 +1,2 @@
node.default["strfry"]["ldap_search_dn"] = "ou=kosmos.org,cn=users,dc=kosmos,dc=org"
node.default["strfry"]["extras_dir"] = "/opt/strfry"

20
site-cookbooks/kosmos_strfry/recipes/policies.rb
View File

@ -11,6 +11,14 @@ include_recipe "deno"
ldap_credentials = Chef::EncryptedDataBagItem.load('credentials', 'dirsrv')
extras_dir = node["strfry"]["extras_dir"]
directory extras_dir do
owner node["strfry"]["user"]
group node["strfry"]["group"]
mode "0755"
end
env = {
ldap_url: 'ldap://ldap.kosmos.local:389', # requires "ldap_client" role
ldap_bind_dn: ldap_credentials["service_dn"],
@ -19,7 +27,7 @@ env = {
whitelist_pubkeys: node["strfry"]["whitelist_pubkeys"].join(",")
}
template "/opt/.env" do
template "#{extras_dir}/.env" do
source 'env.erb'
owner node["strfry"]["user"]
group node["strfry"]["group"]
@ -35,7 +43,7 @@ end
raucao marked this conversation as resolved Outdated
greg commented 2024-07-02 13:03:50 +00:00
Outdated
Review
Copy Link

Is this service defined anywhere else? I can see it's commented out on line 77

Is this service defined anywhere else? I can see it's commented out on line 77
raucao commented 2024-07-03 07:25:00 +00:00
Outdated
Review
Copy Link

It's created in the strfry cookbook. I have removed the commented code. Thanks.

It's created in the `strfry` cookbook. I have removed the commented code. Thanks.
base_url = "https://gitea.kosmos.org/kosmos/akkounts/raw/branch/live/extras/strfry"
remote_file "/opt/deno.json" do
remote_file "#{extras_dir}/deno.json" do
source "#{base_url}/deno.json"
owner node["strfry"]["user"]
group node["strfry"]["group"]
@ -43,7 +51,7 @@ remote_file "/opt/deno.json" do
notifies :restart, "service[strfry]", :delayed
end
remote_file "/opt/deno.lock" do
remote_file "#{extras_dir}/deno.lock" do
source "#{base_url}/deno.lock"
owner node["strfry"]["user"]
group node["strfry"]["group"]
@ -51,7 +59,7 @@ remote_file "/opt/deno.lock" do
notifies :restart, "service[strfry]", :delayed
end
remote_file "/opt/strfry-policy.ts" do
remote_file "#{extras_dir}/strfry-policy.ts" do
source "#{base_url}/strfry-policy.ts"
owner node["strfry"]["user"]
group node["strfry"]["group"]
@ -59,7 +67,7 @@ remote_file "/opt/strfry-policy.ts" do
notifies :restart, "service[strfry]", :delayed
end
remote_file "/opt/ldap-policy.ts" do
remote_file "#{extras_dir}/ldap-policy.ts" do
source "#{base_url}/ldap-policy.ts"
owner node["strfry"]["user"]
group node["strfry"]["group"]
@ -67,7 +75,7 @@ remote_file "/opt/ldap-policy.ts" do
notifies :restart, "service[strfry]", :delayed
end
remote_file "/opt/strfry-sync.ts" do
remote_file "#{extras_dir}/strfry-sync.ts" do
source "#{base_url}/strfry-sync.ts"
owner node["strfry"]["user"]
group node["strfry"]["group"]