diff options
author | Sam Thursfield <sam.thursfield@codethink.co.uk> | 2017-10-20 15:21:08 +0100 |
---|---|---|
committer | Ben Brown <ben.brown@codethink.co.uk> | 2017-10-23 11:11:10 +0000 |
commit | bc5a99a4ee180a9ff4446055bf0311af64c2bf9d (patch) | |
tree | 25bba7467d826ac88b6a678b451710e5de209f7e /README.md | |
parent | 783240ce14579394859096b92269ea73cb449252 (diff) | |
download | infrastructure-bc5a99a4ee180a9ff4446055bf0311af64c2bf9d.tar.gz |
baserock_webserver: Update after redeployment
It now only serves download.baserock.org; the docs are hosted on GitLab
pages.
It will also serve paste, IRC logging and IRC bots soon!
Diffstat (limited to 'README.md')
-rw-r--r-- | README.md | 35 |
1 files changed, 33 insertions, 2 deletions
@@ -348,7 +348,7 @@ To deploy this system: --user-data ./baserock-ops-team.cloud-config ansible-playbook -i hosts baserock_frontend/image-config.yml ansible-playbook -i hosts baserock_frontend/instance-config.yml \ - --vault-password-file=... + --vault-password-file=~/vault-infra-pass ansible-playbook -i hosts baserock_frontend/instance-backup-config.yml ansible -i hosts -m service -a 'name=haproxy enabled=true state=started' \ @@ -376,6 +376,38 @@ usual haproxy.cfg file), use 'git grep' to find all of them. You'll need to update all the relevant config files. We really need some internal DNS system to avoid this hassle. +### General webserver + +The general-purpose webserver provides downloads, plus IRC logging and a +pastebin service. + +To deploy to production: + + openstack volume create \ + --description 'Webserver volume' \ + --size 150 \ + webserver-volume + + nova boot webserver \ + --key-name $keyname \ + --flavor 2C-8GB \ + --image $fedora_image_id \ + --nic "net-id=$network_id" \ + --security-groups default,web-server \ + --user-data ./baserock-ops-team.cloud-config + + nova volume-attach webserver <volume-id> /dev/vdb + + ansible-playbook -i hosts baserock_webserver/image-config.yml + ansible-playbook -i hosts baserock_webserver/instance-config.yml + +The webserver machine runs [Cherokee](http://cherokee-project.com/). You +can use the `cherokee-admin` configuration UI, by connecting to the webserver +over SSH and including this in your SSH commandlines: `-L9090:localhost:9090`. +When you run `sudo cherokee-admin` on the server, you'll be able to browse to +it locally on your machine at `https://localhost:9090/`. You also have to +modify the security groups temporarily to allow that port through. + ### Trove To deploy to production, run these commands in a Baserock 'devel' @@ -444,7 +476,6 @@ To deploy this system to production: ansible-playbook -i hosts baserock_ostree/instance-config.yml ansible-playbook -i hosts baserock_ostree/ostree-access-config.yml - SSL certificates ================ |