summaryrefslogtreecommitdiff
path: root/baserock_frontend
Commit message (Collapse)AuthorAgeFilesLines
* Auto renew SSL certsPedro Alvarez2021-09-204-5/+56
|
* baserock_frontend: Move to UbuntuPedro Alvarez2021-09-093-27/+10
|
* HAProxy; Configure init-addr to avoid startup failuresPedro Alvarez2021-02-261-0/+3
| | | | | | | | | Sometimes, DNS don't resolve when the system is starting, and resolving basreock.gitlab.io is needed in order to start HAProxy. By configuring with , we ignore DNS issues upon startup. More information here: - https://cbonte.github.io/haproxy-dconv/1.7/configuration.html#5.2-init-addr
* baserock_frontend/instance-config.yml: Compatible with Ansible 2.9Pedro Alvarez2020-06-011-1/+1
|
* baserock_frontend: Restart haproxy if the configuration changespedro/ssl-certs-jan-2018Pedro Alvarez2018-01-021-0/+11
|
* frontend: Add rule to redirect Gitlab IRC bot requestspedro/gitlab-bot-fixes-2Pedro Alvarez Piedehierro2017-11-061-1/+10
|
* baserock_frontend: Add rules for paste subdomainPedro Alvarez2017-10-241-0/+6
|
* Update hosts and haproxy to point to the new webserverSam Thursfield2017-10-231-5/+2
|
* baserock_frontend: Update for new OSTree hostSam Thursfield2017-10-231-2/+2
|
* baserock_frontend: Remove obsolete servers from haproxy configurationSam Thursfield2017-10-231-36/+5
|
* Add ostree.baserock.org systemSam Thursfield2017-07-131-1/+22
| | | | | | | | | | | | | This is a new instance that can be used as an artifact cache by the BuildStream build tool. Anyone can download artifacts over HTTPS. Those given SSH access to the machine can write to the artifact cache (this will likely be limited to automated build machines). DNS is now set to point cache.baserock.org and ostree.baserock.org to the HAProxy frontend. The SSL certificate for the frontend-haproxy system has been regenerated to include the cache.baserock.org and ostree.baserock.org domains.
* baserock_frontend: Prepare to redirect spec and docs subdomainsPedro Alvarez Piedehierro2017-03-221-3/+10
| | | | This will let us use easily more SSL certs from our HAProxy instance
* baserock_frontend: Update for new SSL certsPedro Alvarez2017-03-171-8/+5
|
* baserock_frontend: Remove acl rules for deprecated serversPedro Alvarez2017-03-171-18/+0
|
* Use Ansible Vaults to contain secret files/variablesPedro Alvarez2016-08-151-2/+7
| | | | | | | | | | Having them in files lying around in a local repository is dangerous, they could be commited and pushed by accident. Also, having these files in a mail is not good either, and makes this repository complicated to use for us. Change-Id: I644e1fb8228e3cb081a004547abaf654e9c449b7
* Install opengrok.baserock.orgPedro Alvarez2016-04-181-0/+6
| | | | | | | | Using baserock-export scripts, OpenGrok sytem will export all the sources needed for a Baserock minimal system and will use them. Change-Id: Ia1e5196b15d6bb8af005f0ea8cf317182db51134
* Fix backupsbaserock/liveSam Thursfield2016-03-081-2/+8
| | | | | | | These have been failing due to the public IP of the backup machine having temporarily changed. Change-Id: Ifa82dce630d36a61b5e0b6d866bff5c01f227e21
* baserock_frontend: Increase timeout for Gerrit SSH connections to 1 hourSam Thursfield2016-03-011-0/+8
| | | | | | | | | | The `gerrit stream-events` command requires a long-lived SSH connection, it's annoying to have to reconnect every minute. I'd be happy to increase timeout further, although it cannot be infinite. Change-Id: I9398f6feaf8585ac1bdb6f7cd828518cdc3ea291
* Add docs.baserock.org, which renders spec.git as HTML and serves itSam Thursfield2016-03-011-0/+3
| | | | Change-Id: I99ab72ad50d43da58c867b6d3ccd972b8e3e4bab
* baserock_openid_provider: Update on top of Fedora 23, and without PackerSam Thursfield2016-02-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | This means we no longer use Packer for anything, which is good. The switch from Django 1.7 to Django 1.9 caused some problems in the openid_provider module. Upstream for that module is here: https://bitbucket.org/romke/django_openid_provider/ At the time of writing there was no fix upstream for these issues, it would be good to submit them. We have other unsubmitted changes against that upstream in our openid_provider code. One issue was use of import_module (which is now available from importlib, doesn't need to be imported from django.utils any more). Another is use of WSGIRequest.REQUEST, which is deprecated since Django 1.7 and removed in Django 1.9. We now need to use .POST or .GET to get that info. Change-Id: I60793aaf0d84d81b89ff59efbe08240d99b7973f
* baserock_frontend: Update deploy instructions for Fedora 23Sam Thursfield2016-02-171-4/+8
| | | | | | | Flavour is also changed because the previous flavour no longer exists. Smallest flavour should be fine for something that is just a proxy. Change-Id: I7d6f3befaa32f41d909eb5336e221b2514403f12
* baserock_frontend: Improve SSL configurationPedro Alvarez2016-01-131-1/+3
| | | | Change-Id: I7456188e00ede88056c9bfd74a8cbdd8f0980bac
* baserock_frontend: Add configuration for download.baserock.orgPedro Alvarez2015-12-201-0/+6
| | | | Change-Id: I06e0191d072fc6561da00047e69ce6c3e20ea8cb
* Avoid using Packer for the frontend systemSam Thursfield2015-07-134-0/+168
Also, move it into baserock_frontend so it is clearly differentiated from the upstream definitions.git stuff. It's now based off Fedora 21 instead of Fedora 20. This is now deployed at baserock.org. Change-Id: Icaabc84f9513d08479d8d22c19e8b632ac5108b5
View Lorry Controller Status