Jakub Sokołowski
aa0142dc66
all: replace old naming of hq.metrics fleet
...
https://github.com/status-im/infra-hq/issues/158
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-10-18 15:54:01 +02:00
Jakub Sokołowski
61fd03b6d3
all: drop bootstrap__firewall_nftables=true
...
No longer necessary, iptables support was dropped.
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-10-17 12:45:50 +02:00
f4d833730d
node-db: enabling postgres metrics exporter
...
Signed-off-by: Alexis Pentori <alexis@status.im>
2024-10-11 12:31:47 +02:00
ebfb7ad799
all: change secret location
...
Signed-off-by: Alexis Pentori <alexis@status.im>
2024-09-27 11:27:03 +02:00
b02a1025de
ansible/lookup/vault: use ansible variable
...
Signed-off-by: Alexis Pentori <alexis@status.im>
2024-09-26 11:52:17 +02:00
Jakub Sokołowski
3f479e6827
node: remove unnecesary opening of port 9000
...
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-09-24 14:45:25 +02:00
Jakub Sokołowski
3b907ade6e
ansible/lookup/bitwarden: sync with template
2024-09-24 08:49:22 +02:00
5566604913
node-db: increases the shared memory configured in docker
...
Mitigates the "out of shared memory" issue
Signed-off-by: Ivan Folgueira Bande <ivansete@status.im>
2024-09-23 14:43:31 +02:00
65608788a9
all: fix vault consul acl-tokens
...
Signed-off-by: Alexis Pentori <alexis@status.im>
2024-09-23 14:42:40 +02:00
7e00fe0903
vault: update bitwarden plugin
...
Signed-off-by: Alexis Pentori <alexis@status.im>
2024-09-20 15:14:21 +02:00
1b3c6662a3
flake: open nix flake devShell automatically with direnv (nix-direnv)
...
see infra-templates:
- 32a8552eaf0347c217fa7d80572b06d5cd90243d
- a1b9500b5dcd114d45571e8122459f0e5aca9de2
Signed-off-by: Alexis Pentori <alexis@status.im>
2024-09-20 15:07:39 +02:00
9f2affe758
all: switch agent default acl token secret
...
Signed-off-by: Alexis Pentori <alexis@status.im>
2024-09-20 10:28:14 +02:00
8196f8b016
requirements: bump nim-waku role to remove rest-private parameter
...
Signed-off-by: Ivan Folgueira Bande <ivansete@status.im>
2024-09-19 16:30:06 +02:00
70b7c6dc72
vault: migrating secrets
...
Signed-off-by: Alexis Pentori <alexis@status.im>
2024-09-19 16:24:04 +02:00
d3ad781cfc
inventory: Apply updated terraform script
...
Update terraform script and apply it to get updated version of ansible
inventory file.
Referenced issue: https://github.com/status-im/infra-template/issues/10
Signed-off-by: markoburcul <marko@status.im>
2024-09-13 17:04:16 +02:00
e9ef60b3e5
node: lower max-relay-peers to 200
...
Given that max p2p connections is 300, with max allowed relay conns
we will have 100 for other protocols such as store, lightpush, etc.
Co-authored-by: Jakub <jakub@status.im>
2024-09-11 19:01:29 +02:00
9dab86bd56
all: migrate iptables to nftables
...
- set `bootstrap__firewall_nftables` var to true
- adjust `open_ports_list` to match the structure needed to run firewall role
changes applied to all hosts in test and sandbox environment of infra-waku
related to : https://github.com/status-im/infra-misc/issues/301
2024-09-06 15:19:55 +05:30
c5de7b8fcb
requirements: version bump
2024-09-06 15:19:55 +05:30
6c9ce4dc59
vault: adding lookup and env variables
2024-09-05 11:50:01 +02:00
0251f37dbf
node: adding rln keystore configuration
...
Signed-off-by: Alexis Pentori <alexis@status.im>
2024-09-03 10:25:50 +02:00
Jakub Sokołowski
6e6849b1bd
all: add Harbor Docker registry credentials
...
Otherwise hosts create a lot of `/v2/` calls that fail with 401.
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-09-03 09:31:43 +02:00
Jakub Sokołowski
de9094d964
all: do not send trace level logs to logstash
...
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-07-23 12:08:18 +02:00
Jakub Sokołowski
604ca9436f
flake: add flake.nix and lock
...
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-07-05 13:40:37 +02:00
Jakub Sokołowski
294ade5f7b
ansible: apply roles.py fixes
...
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-07-05 11:43:15 +02:00
ba0fc843dd
node: restore back the sepolia rpc url and change the contract addr
...
We needed to go back to Sepolia network because the Polygon zkEVM didn't
work very well, i.e., it wasn't consistent in the creation of
the nonce values.
We are creating a new contract address because we start using RLN_v2
2024-07-05 11:43:14 +02:00
2216da1d02
node: update contract and eth client addresses
2024-07-05 11:43:08 +02:00
Jakub Sokołowski
c9d5bc968c
versions.tf: upgrade pass provider to 2.1.1
...
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-06-24 13:29:15 +02:00
Jakub Sokołowski
d895586e33
ansible/roles.py: fix pull call to handle up-to-date repo
...
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-06-24 08:49:40 +02:00
Jakub Sokołowski
2f89b7ab94
ansible: add roles.py script to manage roles
...
https://github.com/status-im/infra-template/pull/5
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-06-13 17:17:31 +02:00
cbf30df76c
requirements: bump versions
...
Signed-off-by: Alexis Pentori <alexis@status.im>
2024-06-06 18:52:13 +02:00
7992188bf1
node.yml: as per alex recommendation, better set 50GB to avoid limit alarm
2024-06-05 14:26:37 +02:00
fb06c54d38
node.yml change retention policy from time:432000 to size:65GB
2024-06-03 08:47:43 +02:00
Jakub Sokołowski
5d724d2191
requirements: bump nim-waku and certbot roles
...
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-05-21 14:14:57 +02:00
Jakub Sokołowski
bd4559157c
workspaces.tf: bump db node data volume size to 70 GB
...
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-05-13 10:45:05 +02:00
Jakub Sokołowski
cd1b3e145e
readme: add waku fleets dashboard link
...
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-05-13 09:00:05 +02:00
c98d9d193c
all: add SSH access for gabriel@status.im
2024-05-09 15:05:32 +02:00
37b47fa867
all: add SSH access for zoltan@status.im
2024-05-09 15:05:15 +02:00
Jakub Sokołowski
0cbb8df61f
lookup_plugins/bitwarden: ignore stderr
...
Otherwise we get weird JSON parsing errors:
```
An unhandled exception occurred while running the lookup plugin 'bitwarden'.
Error was a <class 'json.decoder.JSONDecodeError'>, original message:
Extra data: line 1 column 843 (char 842). Extra data: line 1 column 843 (char 842)
```
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-05-07 14:48:59 +02:00
Jakub Sokołowski
40c6578cfa
requirements: use full names for all roles
...
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-05-07 13:03:05 +02:00
5135f173ed
requirements: change naming to repo name
2024-05-03 17:49:32 +02:00
f072766321
inventory: update dns_entry to status.im
2024-05-03 16:58:38 +02:00
8e9524a911
ansible/group_vars/all.yml: correct ivan public key
2024-04-16 16:35:32 +02:00
Jakub Sokołowski
a6090dc53c
readme: add ENR records for fleets
...
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-04-16 14:05:28 +03:00
2eb68c3897
terraform: more cleanup
2024-03-15 15:03:03 +01:00
0ccb7683c3
terraform: upgrade cloudflare provider
2024-03-15 14:58:19 +01:00
34abc7a012
terraform: fix domains
2024-03-15 14:41:33 +01:00
85f55e5801
nim-waku: setup ENRTREE for sandbox fleet
2024-03-15 14:41:32 +01:00
ec103eb5a9
ansible: setup db hosts first
2024-03-15 14:41:31 +01:00
b74deff59f
terraform: close websockify port as not used anymore
2024-03-15 14:41:30 +01:00
b168d02252
terraform: recreate sandbox fleet with new domain
2024-03-15 14:41:29 +01:00
Jakub Sokołowski
Alexis Pentori
Ivan Folgueira Bande
markoburcul
Siddarth Kumar
Ivan FB
Gabriel mermelstein
NagyZoltanPeter
Anton Iakimov