152 Commits

Author SHA1 Message Date
a77df7224f
disable NAT Gateway for subnets
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-11-04 20:43:39 +01:00
21923f795e
replace DB hosts
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-11-03 18:02:37 +01:00
4d940e0b6b
make DB hosts use the same VPC as the EB env
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-11-03 18:02:27 +01:00
7b9b37389a
fix how tf inventory is exported for ansible
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-11-03 18:02:05 +01:00
1d68769b7b
upgrade Amazon Linux 2018/03: v4.8.3 > v4.11.0
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-11-02 14:45:16 +01:00
55e4630222
upgrade Lambda function NodeJS: 8.10 > 10.x
NodeJS 8.10 is approaching End-of-life and AWS Lambda
will stop supporting it at the end of 2019.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-10-21 18:37:35 +02:00
fb45f5b884
go back to using CloudPosse versions of modules
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-10-10 11:21:55 +02:00
83d0c7434d
add Data Lifecycle Policy for MongoDB volumes
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-10-04 14:56:46 +02:00
0f355679c7
drop LINKS.md file
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-10-04 11:39:28 +02:00
b9f9867815
fix issue links
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-10-04 11:39:08 +02:00
e4261e2637
add a README
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-10-04 11:38:08 +02:00
1398bf4a67
can't use CNAMEs with apex records, have to resolve the ELB FQDN
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-16 09:00:02 -04:00
aa458ecf28
map dap.ps DNS entry as CNAME for prod.dap.ps
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-15 12:38:04 -04:00
06fb3177ec
add explicit deployment pereferences
see:
https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/using-features.rolling-version-deploy.html
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatepolicy.html

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-14 19:05:42 -04:00
78f3626fee
add replicaSet argument to mondodb URI
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-14 10:57:04 -04:00
c6a39c05da
use minimum 2 hosts for prod EB autoscaling group
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-09 16:09:49 -04:00
a562205cc8
remove obsolete comment
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-09 16:03:52 -04:00
d6853ee6b4
include SAN for dap.ps in certificates for different stages
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-09 12:29:59 -04:00
603309e83d
specify explicitly EB_NODE_COMMAND
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-07 12:27:41 -04:00
d344fefb56
update prod contract and endpoint
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-07 11:24:37 -04:00
649e4cb6c7
use approvals@dap.ps email to send approval emails
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-06 11:43:23 -04:00
ed59190434
fix which credentials are used for smtp
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-06 09:47:42 -04:00
ad87eca515
comment out smtp outputs for now
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-06 09:43:57 -04:00
023d2bea60
fix how we extract the smtp password from aws_iam_access_key
https://www.terraform.io/docs/providers/aws/r/iam_access_key.html#ses_smtp_password

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-06 09:41:13 -04:00
82e34bdfb0
add more actions to smtp sending policy
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-06 09:02:10 -04:00
8b289d8e65
move outputs to outputs.tf
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-06 09:02:00 -04:00
dede02dce6
update DISCOVER_CONTRACT address
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-05 16:26:13 -04:00
949823a1dd
fix name of rate limiting variable
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-05 14:32:53 -04:00
f2024bf558
fix backup script to create a tarball
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-05 14:00:54 -04:00
5e7cbc0cf1
fix upload credentials for s3 bucket backups
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-05 14:00:53 -04:00
50a14d330a
apply access policy to user, not bucket
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-05 14:00:53 -04:00
e677f3f45f
make module naming consistent
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-01 14:20:28 -04:00
efe0c3269b
configure prod MongoDB replicate set
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-01 14:15:41 -04:00
20a59a1e2c
use python2 by default
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-01 14:12:25 -04:00
f9ea4c2596
add comment explaining why we need pymongo 3.8.0
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-01 13:51:28 -04:00
117104f3fe
don't default to python3
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-01 13:42:43 -04:00
3fe5f76953
set mongodb_replication_params statically for now
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-07-31 17:10:57 -04:00
47fc33893b
rename mongodb to mongodb-setup
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-07-31 17:07:34 -04:00
69cb1517a7
add new prod db hosts to inventory
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-07-31 16:58:47 -04:00
dfce8678ac
add 3 mongodb hosts for prod environment
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-07-31 16:58:46 -04:00
e6dac40489
don't configure docker or watchtower
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-07-31 16:55:56 -04:00
448207af93
uncomment roles
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-07-31 15:30:02 -04:00
002cfd4ef2
create s3 bucket for backups of db.dev
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-07-31 15:30:02 -04:00
c895c1a4a6
fix aws-s3-bucket module
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-07-31 15:30:01 -04:00
a897485c07
drop mongodb-old role
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-07-31 15:11:18 -04:00
fc80d31908
configure backups and s3 upload for dev db
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-07-31 15:07:59 -04:00
0ba9b9f042
add missing cidr_blocks for opening ports
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-07-31 14:39:57 -04:00
c2a4f965e9
add force_valid_group_names
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-07-31 14:39:57 -04:00
e42f3d8bf8
update inventory file
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-07-31 14:39:56 -04:00
f4243d8939
deploy and configure mongodb on dev
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-07-31 14:39:56 -04:00