117 Commits

Author SHA1 Message Date
7e7f2eb2d4
ansible.cfg: drop remote_user=admin from config
It made sense when there was only one admin.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2022-05-12 10:00:40 +02:00
8133c5a90c
switch Goerli to light sync to reclaim disk space
Full sync takes up 120 GB currently and it's not necessary.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2022-05-06 19:14:46 +02:00
c5a138036e
add missing firewall rule for geth-exporter
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2022-03-29 19:11:51 +02:00
abcfeb33d3
requirements: bump Geth to 1.10.16
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2022-03-07 11:08:40 +01:00
2ead0694ac
bootstrap: fix credentials and update roles
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2022-02-23 22:34:49 +01:00
a5afaaf4e6
wireguard: bump role and add Consul ACL token
Part of effort to lock down Consul ACLs:
https://github.com/status-im/infra-hq/issues/70

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2022-02-08 19:38:20 +01:00
d8b4f92ebe
consul: add mandatory agent ACL token
https://github.com/status-im/infra-hq/issues/70

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2022-02-08 11:55:06 +01:00
714cf7efcd
consul: upgrade from 1.10.1 to 1.11.1
https://github.com/hashicorp/consul/releases/tag/v1.11.1

Also upgrade Geth to 1.10.14:
https://github.com/ethereum/go-ethereum/releases/tag/v1.10.14

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2022-01-03 16:58:26 +01:00
2f1558ceae
requirements: upgrade Netdata to 1.32.0
https://github.com/netdata/netdata/releases/tag/v1.32.0

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-12-09 17:31:28 +01:00
163d062564
requirements: remove consul proxy, add wireguard check
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-09-16 00:16:28 +02:00
d50e7a9090
fix root password name in BitWarden, bump roles
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-08-26 20:33:48 +02:00
48ddebc3f7
upgrade Geth to 1.10.8
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-08-25 13:09:45 +02:00
5ac688b97b
firewall: use new IP sets and iptables chains
https://github.com/status-im/infra-hq/issues/69
https://github.com/status-im/infra-role-bootstrap-linux/commit/92d8923b
https://github.com/status-im/infra-role-wireguard/commit/8394639e

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-08-02 20:05:08 +02:00
d0e8669492
update WireGuard config files layout
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-07-29 21:47:31 +02:00
53e6686b17
rename infra-role-bootstrap-linux, upgrade consul
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-07-28 11:36:40 +02:00
d62aa48d60
upgrade Geth to 1.10.6
https://github.com/ethereum/go-ethereum/releases/tag/v1.10.6

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-07-22 19:43:39 +02:00
25876f89ec
update inventory
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-07-22 17:42:03 +02:00
f57040d2ca
upgrade Terraform to 1.0, upgrade all providers
https://www.terraform.io/upgrade-guides/0-15.html
https://www.terraform.io/upgrade-guides/1-0.html

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-06-23 12:26:04 +02:00
806ac58608
add BitWarden lookup plugin, port secrets to BW
https://github.com/status-im/infra-docs/issues/9

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-06-16 17:04:55 +02:00
8e147e6ef3
replace Tinc VPN with WireGuard
https://github.com/status-im/infra-hq/issues/58

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-05-19 23:08:21 +02:00
6d7f144364
ansible/requirements: bump origin-certs role
https://github.com/status-im/infra-role-origin-certs/commit/586d81d6

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-05-13 10:54:49 +02:00
b79993c331
ansible: add versioncheck.py script to verify role versions
This was originally introduced to `infra-nimbus` and proved robust.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-05-11 09:22:02 +02:00
5977ea7c5d
use new Docker Compose setup for geth-exporter
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-03-25 19:40:03 +01:00
62c560f150
faucet-api: rafactor to use Docker Compose
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-03-25 14:02:56 +01:00
89833b514c
use open-ports to open the Nginx proxy ports
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-03-25 12:43:50 +01:00
88d2afa61c
drop geth-peer-fix which appears to be unnecesary
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-03-25 12:29:15 +01:00
a6849196f9
add more revived ropsten bootstrap nodes
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-03-25 11:47:45 +01:00
052c7b474a
increase memory limit for Ropsten and lower for Goerli
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-03-25 11:47:22 +01:00
da8ccc236e
define geth_metrics_port for all nodes
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-03-25 11:46:36 +01:00
19f4d07a52
bootstrap: provide Consul encryption key from infra-pass
Related: https://github.com/status-im/infra-role-bootstrap/commit/0d40f81d

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-03-22 11:11:01 +01:00
e5aad0839a
always restart geth containers
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-03-21 08:48:14 +01:00
d04457e319
make Goerli use snap sync too
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-03-19 14:10:03 +01:00
08d2f1fd87
ropsten: switch to new snap sync mode added in 1.10.1
Ropsten light is notorious for lack of peers.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-03-19 12:43:55 +01:00
eebeadd4fa
restart Ropsten Geth instance using new revival bootnodes
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-02-06 20:34:16 +01:00
e09c233d99
Re-arrange memory usage, give half to Goerli
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-02-04 22:55:26 +01:00
65c2e04fb1
ansible/terraform.py: drop deprecated encoding argument
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-02-04 22:29:46 +01:00
4a35e9a79f
add websocket port, adjust other ports
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-11-25 21:39:42 +01:00
05c1b21639
disable websocket api, not necessary
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-11-24 17:14:56 +01:00
bfd2c506d8
use our own fork of Nginx role to fix permissions
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-10-07 19:49:46 +02:00
15a66f2dd3
faucet-master: lower SWAP size to 1GB
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-05-24 21:02:52 +02:00
44d46a30e1
use new memory variables for geth role
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-03-16 18:09:16 +01:00
41aa7e315b
reduce swap size to 2GB
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-03-16 09:34:04 +01:00
56d6ba18a6
add tags to playbook
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-01-29 13:58:20 +01:00
ab71feac05
adjust memory limits, add 4GB swap file
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-11-19 21:18:29 +01:00
0f7af9e2d4
update origin-certs role arguments
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-11-12 23:43:52 +01:00
57b5dd293e
update consul faucet check name to be different
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-10 02:15:21 -04:00
49e6a9d33c
lower cache ratio to 0.15
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-10 01:39:13 -04:00
54feca95f3
fix memory relations, cache lower than cont mem limit
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-09 21:55:47 -04:00
a6d0b26a08
explicit conversion to string
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-09 21:55:03 -04:00
37c19cc51a
restart only on geth failure
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-08-09 14:56:31 -04:00