|
7e7f2eb2d4
|
ansible.cfg: drop remote_user=admin from config
It made sense when there was only one admin.
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2022-05-12 10:00:40 +02:00 |
|
|
8133c5a90c
|
switch Goerli to light sync to reclaim disk space
Full sync takes up 120 GB currently and it's not necessary.
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2022-05-06 19:14:46 +02:00 |
|
|
c5a138036e
|
add missing firewall rule for geth-exporter
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2022-03-29 19:11:51 +02:00 |
|
|
abcfeb33d3
|
requirements: bump Geth to 1.10.16
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2022-03-07 11:08:40 +01:00 |
|
|
2ead0694ac
|
bootstrap: fix credentials and update roles
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2022-02-23 22:34:49 +01:00 |
|
|
a5afaaf4e6
|
wireguard: bump role and add Consul ACL token
Part of effort to lock down Consul ACLs:
https://github.com/status-im/infra-hq/issues/70
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2022-02-08 19:38:20 +01:00 |
|
|
d8b4f92ebe
|
consul: add mandatory agent ACL token
https://github.com/status-im/infra-hq/issues/70
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2022-02-08 11:55:06 +01:00 |
|
|
714cf7efcd
|
consul: upgrade from 1.10.1 to 1.11.1
https://github.com/hashicorp/consul/releases/tag/v1.11.1
Also upgrade Geth to 1.10.14:
https://github.com/ethereum/go-ethereum/releases/tag/v1.10.14
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2022-01-03 16:58:26 +01:00 |
|
|
2f1558ceae
|
requirements: upgrade Netdata to 1.32.0
https://github.com/netdata/netdata/releases/tag/v1.32.0
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-12-09 17:31:28 +01:00 |
|
|
163d062564
|
requirements: remove consul proxy, add wireguard check
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-09-16 00:16:28 +02:00 |
|
|
d50e7a9090
|
fix root password name in BitWarden, bump roles
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-08-26 20:33:48 +02:00 |
|
|
48ddebc3f7
|
upgrade Geth to 1.10.8
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-08-25 13:09:45 +02:00 |
|
|
5ac688b97b
|
firewall: use new IP sets and iptables chains
https://github.com/status-im/infra-hq/issues/69
https://github.com/status-im/infra-role-bootstrap-linux/commit/92d8923b
https://github.com/status-im/infra-role-wireguard/commit/8394639e
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-08-02 20:05:08 +02:00 |
|
|
d0e8669492
|
update WireGuard config files layout
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-07-29 21:47:31 +02:00 |
|
|
53e6686b17
|
rename infra-role-bootstrap-linux, upgrade consul
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-07-28 11:36:40 +02:00 |
|
|
d62aa48d60
|
upgrade Geth to 1.10.6
https://github.com/ethereum/go-ethereum/releases/tag/v1.10.6
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-07-22 19:43:39 +02:00 |
|
|
25876f89ec
|
update inventory
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-07-22 17:42:03 +02:00 |
|
|
f57040d2ca
|
upgrade Terraform to 1.0, upgrade all providers
https://www.terraform.io/upgrade-guides/0-15.html
https://www.terraform.io/upgrade-guides/1-0.html
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-06-23 12:26:04 +02:00 |
|
|
806ac58608
|
add BitWarden lookup plugin, port secrets to BW
https://github.com/status-im/infra-docs/issues/9
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-06-16 17:04:55 +02:00 |
|
|
8e147e6ef3
|
replace Tinc VPN with WireGuard
https://github.com/status-im/infra-hq/issues/58
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-05-19 23:08:21 +02:00 |
|
|
6d7f144364
|
ansible/requirements: bump origin-certs role
https://github.com/status-im/infra-role-origin-certs/commit/586d81d6
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-05-13 10:54:49 +02:00 |
|
|
b79993c331
|
ansible: add versioncheck.py script to verify role versions
This was originally introduced to `infra-nimbus` and proved robust.
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-05-11 09:22:02 +02:00 |
|
|
5977ea7c5d
|
use new Docker Compose setup for geth-exporter
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-03-25 19:40:03 +01:00 |
|
|
62c560f150
|
faucet-api: rafactor to use Docker Compose
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-03-25 14:02:56 +01:00 |
|
|
89833b514c
|
use open-ports to open the Nginx proxy ports
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-03-25 12:43:50 +01:00 |
|
|
88d2afa61c
|
drop geth-peer-fix which appears to be unnecesary
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-03-25 12:29:15 +01:00 |
|
|
a6849196f9
|
add more revived ropsten bootstrap nodes
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-03-25 11:47:45 +01:00 |
|
|
052c7b474a
|
increase memory limit for Ropsten and lower for Goerli
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-03-25 11:47:22 +01:00 |
|
|
da8ccc236e
|
define geth_metrics_port for all nodes
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-03-25 11:46:36 +01:00 |
|
|
19f4d07a52
|
bootstrap: provide Consul encryption key from infra-pass
Related: https://github.com/status-im/infra-role-bootstrap/commit/0d40f81d
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-03-22 11:11:01 +01:00 |
|
|
e5aad0839a
|
always restart geth containers
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-03-21 08:48:14 +01:00 |
|
|
d04457e319
|
make Goerli use snap sync too
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-03-19 14:10:03 +01:00 |
|
|
08d2f1fd87
|
ropsten: switch to new snap sync mode added in 1.10.1
Ropsten light is notorious for lack of peers.
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-03-19 12:43:55 +01:00 |
|
|
eebeadd4fa
|
restart Ropsten Geth instance using new revival bootnodes
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-02-06 20:34:16 +01:00 |
|
|
e09c233d99
|
Re-arrange memory usage, give half to Goerli
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-02-04 22:55:26 +01:00 |
|
|
65c2e04fb1
|
ansible/terraform.py: drop deprecated encoding argument
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2021-02-04 22:29:46 +01:00 |
|
|
4a35e9a79f
|
add websocket port, adjust other ports
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2020-11-25 21:39:42 +01:00 |
|
|
05c1b21639
|
disable websocket api, not necessary
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2020-11-24 17:14:56 +01:00 |
|
|
bfd2c506d8
|
use our own fork of Nginx role to fix permissions
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2020-10-07 19:49:46 +02:00 |
|
|
15a66f2dd3
|
faucet-master: lower SWAP size to 1GB
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2020-05-24 21:02:52 +02:00 |
|
|
44d46a30e1
|
use new memory variables for geth role
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2020-03-16 18:09:16 +01:00 |
|
|
41aa7e315b
|
reduce swap size to 2GB
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2020-03-16 09:34:04 +01:00 |
|
|
56d6ba18a6
|
add tags to playbook
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2020-01-29 13:58:20 +01:00 |
|
|
ab71feac05
|
adjust memory limits, add 4GB swap file
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2019-11-19 21:18:29 +01:00 |
|
|
0f7af9e2d4
|
update origin-certs role arguments
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2019-11-12 23:43:52 +01:00 |
|
|
57b5dd293e
|
update consul faucet check name to be different
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2019-08-10 02:15:21 -04:00 |
|
|
49e6a9d33c
|
lower cache ratio to 0.15
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2019-08-10 01:39:13 -04:00 |
|
|
54feca95f3
|
fix memory relations, cache lower than cont mem limit
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2019-08-09 21:55:47 -04:00 |
|
|
a6d0b26a08
|
explicit conversion to string
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2019-08-09 21:55:03 -04:00 |
|
|
37c19cc51a
|
restart only on geth failure
Signed-off-by: Jakub Sokołowski <jakub@status.im>
|
2019-08-09 14:56:31 -04:00 |
|