Commit Graph

41 Commits

Author SHA1 Message Date
Siddarth Kumar 5c7a3314f1 vault: migrate secrets from bitwarden 2024-12-04 12:23:29 +05:30
Anton Iakimov 6b1327dd64
mainnet: rename nel fleet to nec and return nimbus-eth1 service name 2024-11-01 16:29:08 +01:00
Anton Iakimov e6518f0a02
mainnet: change layout
TODO:
- https://github.com/status-im/infra-nimbus/issues/211
- https://github.com/status-im/infra-nimbus/issues/212
2024-10-23 16:27:30 +02:00
Vedran Mendelski 8c61563acc mainnet: switch to nftables 2024-09-25 14:12:48 +02:00
markoburcul c38dc75f7f
ansible: Change hostname to inventory_hostname
Due to the change caused by updated terraform script, we need to change
usage of variable `hostname` to `inventory_hostname`.

Signed-off-by: markoburcul <marko@status.im>
2024-09-16 08:10:36 +02:00
Jakub Sokołowski 8395f200b4
mainnet,sepolia,holesky: add tags for include_role tasks
By using `apply` argument we can make the `tags` work for `include_role`
calls used together with `with_items`.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-06-20 16:01:14 +02:00
Jakub Sokołowski eca6fc2e76
ansible: add roles.py script to manage roles
https://github.com/status-im/infra-template/pull/5
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-06-13 17:19:32 +02:00
Jakub Sokołowski 90edd3c50e
nimbus.mainnet: add IPv6 addresses and netplan role
https://github.com/status-im/infra-nimbus/issues/176

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-03-20 13:50:19 +01:00
Jakub Sokołowski 848a148844
requirements: use full names for all roles
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-03-10 13:43:30 +01:00
Jakub Sokołowski de1ae7b873
nimbus.mainnet: rename nodes to include bootstrap word
This is additional precaution to avoid accidental destruction of these hosts
as they are used by Ethereum clients to connect to the network.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-03-05 10:41:52 +01:00
Jakub Sokołowski afc0e93e36
nimbus.mainnet: discover only EL nodes from nimbus.geth
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-01-11 14:51:43 +01:00
Jakub Sokołowski 13fa6ea608
get-geth-api-urls: allow specifying multiple fleets
More useful than specifying multiple servicer names.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-01-09 11:10:44 +01:00
Jakub Sokołowski 9fbf61806a
nimbus.mainnet: use all geth nodes in the fleet
To allow individual geth nodes to be re-synced gradually.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-01-09 09:40:14 +01:00
Jakub Sokołowski 73c4b72972
ansible: drop tags from include_role tasks
This does not actually work. And what we need is to include a `tags` key
in each of the elements provided via `with_items`. To do this in a way
that's not disgusting we would probably need a custom lookup plugin.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2023-09-08 11:59:50 +02:00
Jakub Sokołowski 3b4a872b00
nimbus.mainnet: add 16 GB SWAP file, no SWAP partition
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2023-07-12 09:45:51 +02:00
Jakub Sokołowski 4ea58aeda7
deploy SMART metrics to all metal hosts
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2023-03-18 18:02:58 +01:00
Jakub Sokołowski c8e3232dff
nimbus-era-files: use --network flag to fix errors
Changes to default runtime config have caused errors like this:
```
FAT Could not load head state, database corrupt? tid=3639597 file=blockchain_dag.nim:920 head=e7d4f3b7:4636671 tail=4d611d5b:0 genesis=4d611d5b:0
```

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2022-10-12 09:30:46 +02:00
Jakub Sokołowski 23a91206c1
nimbus.mainnet: open ports for Geth exporter
https://github.com/status-im/infra-nimbus/issues/127

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2022-09-14 15:34:23 +02:00
Jakub Sokołowski b4066e7386
nimbus.mainnet: deploy one Geth node on metal hosts
https://github.com/status-im/infra-nimbus/issues/127

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2022-09-14 15:24:15 +02:00
Jakub Sokołowski 21926f4cf7
mainnet: drop purging of DBs, resync does that
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2022-09-14 15:18:37 +02:00
Jakub Sokołowski 1ffc159f70
use idx instead of port_offset loop_var name
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2022-08-10 16:55:01 +02:00
Jakub Sokołowski 3cc72b68e9
nimbus.mainnet: deploy nimbus-era-files to metal hosts
https://github.com/status-im/infra-nimbus/issues/98

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2022-07-14 01:00:29 +02:00
Jakub Sokołowski 2b57a4096e
add serial variable to playbooks
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2022-06-14 11:40:18 +02:00
Jakub Sokołowski 6488efd4e9
nimbus-db-purge: deploy to two mainnet hosts
https://github.com/status-im/infra-nimbus/issues/86

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2022-02-28 17:32:01 +01:00
Jakub Sokołowski 0c1169cee3
get-geth-api-urls: query for HTTP RPC API endpoints
We want to test the support for normal HTTP API endpoints.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-12-02 13:14:41 +01:00
Jakub Sokołowski 3585f5615a
mainnet/prater: block libp2p ports for select nodes
As part of experiment in how nodes behave in restrictive networks.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-10-05 18:28:08 +02:00
Jakub Sokołowski 89cbff6b52
switch back to original 3 branch layout of nodes
Since with release of `1.5.0` the `stable` branch has all the necessary changes:
https://github.com/status-im/nimbus-eth2/releases/tag/v1.5.0

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-10-05 12:43:51 +02:00
Jakub Sokołowski 61e573d40a
nimbus.mainnet: add 2GB swap file for all hosts
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-10-05 12:08:14 +02:00
Jakub Sokołowski 018e1f3b78
enable beacon_node_rpc_enabled for all hosts
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-10-04 17:53:07 +02:00
Jakub Sokołowski 5f06c39644
nimbus.mainnet: add two public Beacon API endpoints
These nodes are intended for testing by Community.
https://ethereum.github.io/beacon-APIs/

https://github.com/status-im/infra-nimbus/issues/66

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-10-04 13:42:33 +02:00
Jakub Sokołowski 6c7e3384e5
nimbus.mainnet: deploy 6 nodes on new Hetzner hosts
https://github.com/status-im/infra-nimbus/issues/66

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-10-04 12:08:58 +02:00
Jakub Sokołowski 2a781d70e8
firewall: remove obsolete settings for open-ports
We now call `open-ports` role inside of `beacon-node` roles.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-08-23 16:51:26 +02:00
Jakub Sokołowski 5d36d3ad3e
firewall: use new IP sets and iptables chains
https://github.com/status-im/infra-hq/issues/69
https://github.com/status-im/infra-role-bootstrap-linux/commit/92d8923b
https://github.com/status-im/infra-role-wireguard/commit/8394639e

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-08-11 19:54:36 +02:00
Jakub Sokołowski bdab0a2f8b
deploy prater nodes on hetzner node
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-06-28 21:30:00 +02:00
Arthur Koziel 0a75a69a09 Deploy mainnet beacon nodes on hetzner server
This will run multiple mainnet beacon nodes on the hetzner server. It
will use the `infra-role-beacon-node-linux` to build and run `stable`,
`unstable` and `testing` on the machine.

Signed-off-by: Arthur Koziel <arthur@arthurkoziel.com>
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-06-22 12:29:01 +02:00
Arthur Koziel fb2ab82f6d
Add hetzner dedicated server (#56)
add stable-metal-01.he-eu-hel1.nimbus.mainnet

Signed-off-by: Arthur Koziel <arthur@arthurkoziel.com>
2021-05-19 18:04:12 +08:00
Jakub Sokołowski 657e8a098f
ansible: add meta requirements target, add check to bootstrap
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-05-10 15:29:38 +02:00
Jakub Sokołowski 65d8302527
implement Eth1 Web3 URL fallbacks
Related:
https://github.com/status-im/infra-role-beacon-node/commit/92f740e0

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-04-19 20:27:52 +02:00
Jakub Sokołowski 757b097c81 add versioncheck.py script to verify Ansible role versions
Since Ansible or Ansible Galaxy doesn't actually check role versions
itself, we have to do it ourselves. This script goes through contents of
`ansible/requirements.txt` and verifies each role is installed and has
correct version.

It also checks the version of Ansible itself.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-04-13 08:07:26 +02:00
Jakub Sokołowski a5a950bb91
set become=false in ansible.cfg, set it to true in playbooks
See: https://github.com/status-im/nimbus-private/pull/9

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-02-09 20:27:13 +01:00
Jakub Sokołowski eb44131dc6
add configuration for nimbus.mainnet bootstrap nodes
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-11-25 15:58:44 +01:00