169 Commits

Author SHA1 Message Date
6c2067ae17
mail: move all config from ses.tf to mail.tf
Also add two emails:
 - dapps-staking@status.im
 - dapps-approvals@status.im

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-02-04 15:54:39 +01:00
23cd4e9b22
mail: fix uploading of lambda index.js
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-02-04 15:34:32 +01:00
1e6aac03b0
explain email setup, rename index.js to sesforwarder.js
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-02-04 13:26:00 +01:00
8c6ed39984
forward stake@dap.ps to dapps-staking@status.im
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-02-04 13:16:50 +01:00
93e565fead
drop unused dns provider
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-01-27 21:06:08 +01:00
eae370856f
use Status IPFS cluster
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-01-27 20:49:21 +01:00
f294580e31
delegate dap.ps domain management to Route53
We have to use Route53 because it provides the option to use an
ALIAS type record which works for apex records and can point to
a CloudFront distribution in a dynamic way.

Without this we'd have to use A records which are static unlike
a CNAME, which would eventually become obsolete and take down
the site when they do.

Details: https://github.com/dap-ps/infra-dapps/issues/18

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-01-27 20:49:05 +01:00
9a207dddbc
use terraform 0.12 formatting
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-01-22 09:09:16 +01:00
3942f3905c
Makefile: Use -e with echo for proper newlines
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-01-22 09:06:47 +01:00
c3b15a2b02
add special case for /metadata/all to lower its cache time
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-01-15 13:09:43 +01:00
eda1b43612
upgrade CloudPosse modules and AWS provider
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-01-15 12:27:46 +01:00
f96c98643c
add raw DNS entries for non-CDN access to the site
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-12-13 00:00:45 +01:00
315eb38f26
limit aws provider version
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-12-12 11:23:33 +01:00
73527a2f77
switch prod to use new CDN
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-11-12 22:00:13 +01:00
761ae9f5f2
drop unused origin-cert role
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-11-12 22:00:01 +01:00
38793d395e
don't forward caching headers
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-11-05 18:52:31 +01:00
db24716d39
add a CloudFront CDN
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-11-05 18:32:32 +01:00
a77df7224f
disable NAT Gateway for subnets
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-11-04 20:43:39 +01:00
21923f795e
replace DB hosts
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-11-03 18:02:37 +01:00
4d940e0b6b
make DB hosts use the same VPC as the EB env
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-11-03 18:02:27 +01:00
7b9b37389a
fix how tf inventory is exported for ansible
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-11-03 18:02:05 +01:00
1d68769b7b
upgrade Amazon Linux 2018/03: v4.8.3 > v4.11.0
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-11-02 14:45:16 +01:00
55e4630222
upgrade Lambda function NodeJS: 8.10 > 10.x
NodeJS 8.10 is approaching End-of-life and AWS Lambda
will stop supporting it at the end of 2019.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-10-21 18:37:35 +02:00
fb45f5b884
go back to using CloudPosse versions of modules
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-10-10 11:21:55 +02:00
83d0c7434d
add Data Lifecycle Policy for MongoDB volumes
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-10-04 14:56:46 +02:00
0f355679c7
drop LINKS.md file
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-10-04 11:39:28 +02:00
b9f9867815
fix issue links
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-10-04 11:39:08 +02:00
e4261e2637
add a README
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-10-04 11:38:08 +02:00
1398bf4a67
can't use CNAMEs with apex records, have to resolve the ELB FQDN
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-16 09:00:02 -04:00
aa458ecf28
map dap.ps DNS entry as CNAME for prod.dap.ps
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-15 12:38:04 -04:00
06fb3177ec
add explicit deployment pereferences
see:
https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/using-features.rolling-version-deploy.html
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatepolicy.html

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-14 19:05:42 -04:00
78f3626fee
add replicaSet argument to mondodb URI
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-14 10:57:04 -04:00
c6a39c05da
use minimum 2 hosts for prod EB autoscaling group
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-09 16:09:49 -04:00
a562205cc8
remove obsolete comment
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-09 16:03:52 -04:00
d6853ee6b4
include SAN for dap.ps in certificates for different stages
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-09 12:29:59 -04:00
603309e83d
specify explicitly EB_NODE_COMMAND
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-07 12:27:41 -04:00
d344fefb56
update prod contract and endpoint
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-07 11:24:37 -04:00
649e4cb6c7
use approvals@dap.ps email to send approval emails
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-06 11:43:23 -04:00
ed59190434
fix which credentials are used for smtp
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-06 09:47:42 -04:00
ad87eca515
comment out smtp outputs for now
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-06 09:43:57 -04:00
023d2bea60
fix how we extract the smtp password from aws_iam_access_key
https://www.terraform.io/docs/providers/aws/r/iam_access_key.html#ses_smtp_password

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-06 09:41:13 -04:00
82e34bdfb0
add more actions to smtp sending policy
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-06 09:02:10 -04:00
8b289d8e65
move outputs to outputs.tf
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-06 09:02:00 -04:00
dede02dce6
update DISCOVER_CONTRACT address
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-05 16:26:13 -04:00
949823a1dd
fix name of rate limiting variable
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-05 14:32:53 -04:00
f2024bf558
fix backup script to create a tarball
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-05 14:00:54 -04:00
5e7cbc0cf1
fix upload credentials for s3 bucket backups
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-05 14:00:53 -04:00
50a14d330a
apply access policy to user, not bucket
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-05 14:00:53 -04:00
e677f3f45f
make module naming consistent
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-01 14:20:28 -04:00
efe0c3269b
configure prod MongoDB replicate set
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-01 14:15:41 -04:00