shockrah/infra
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
163 Commits 1 Branch 0 Tags
1fe7ccc898e6b449eddf74cccedacf95a1ad9b5f
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
shockrah 1fe7ccc898 Moving dns records to mail server configuration 2023-10-21 00:00:46 -07:00
shockrah 19e42bf778 adding dns entries that would be required for miab server 2023-10-20 23:54:42 -07:00
shockrah a681d29457 Fixing reverse dns infra now setup and working to receive emails 2023-10-20 18:08:55 -07:00
shockrah 488722aaff Creating mail.shockrah.xyz dns records 2023-10-20 16:54:33 -07:00
shockrah 8aee1483fc Fixing group_id issue and missing quotes 2023-10-20 15:09:23 -07:00
shockrah e8dec5a6d8 Start of docs for mail server code 2023-10-20 15:04:14 -07:00
shockrah 69b8ad8a50 Sec configuration with ssh keys 2023-10-20 15:03:05 -07:00
shockrah 6f8d8abd15 Fargate readme 2023-10-16 21:00:16 -07:00
shockrah ba38a0d9c9 Adding back resume.shockrah.xyz to LB endpoints 2023-10-07 15:01:28 -07:00
shockrah 7a388534f1 Cleaning up roles 2023-10-06 22:30:24 -07:00
shockrah 8298dbb4f7 Addig temper.tv conf to docker image' 2023-10-06 00:16:29 -07:00
shockrah 4a210404bb Adding temper.tv cert 2023-10-06 00:09:24 -07:00
shockrah 82f34d03cd Fixing certs that get attached to the LB 2023-10-06 00:08:14 -07:00
shockrah a83debde34 Validation and cert created for tmper 2023-10-05 23:41:18 -07:00
shockrah d02b5de48c Splitting certs into lone files 2023-10-05 23:16:49 -07:00
shockrah df2406720f Improving dependency chaingin slightly however more will stablize the race condition problem here in this folder 2023-10-05 23:12:39 -07:00
shockrah b6aebf06b1 Bringing in tmeper records to track 2023-10-05 23:08:27 -07:00
shockrah da379f20cb Moving remaining s3 configuration to its own folder 2023-10-05 22:43:35 -07:00
shockrah 9bd6cbd3e3 Fixing makefile 2023-10-05 22:28:54 -07:00
shockrah b0e5bd50da Moving out route53 and load balancer resources 2023-10-05 22:20:06 -07:00
shockrah 3029fbb3f6 Moving fargate things to their own folder 2023-10-04 01:15:32 -07:00
shockrah caf09a63cb More variable clean up for security groups 
Removing traces from previous networking cleanout
 2023-10-03 19:38:27 -07:00
shockrah e51ebc7251 Moving security groups out to their own folder as they are basically global to everything 2023-10-03 19:36:59 -07:00
shockrah 609f9b3e7b Moving networking code out into its own module 2023-10-03 19:07:06 -07:00
shockrah 10ed1f1a98 Adding note regarding master record with special record 2023-09-30 16:26:17 -07:00
shockrah 295f933d8a Terraform code cleanup and final reduction of containers from 2 -> 1 
Now able to serve multiple websites with 1 nginx container under an LB
Cost savings not massive but still noticable at this point considering
How low the cost is with this kind of setup
 2023-09-10 16:25:21 -07:00
shockrah b5e53acf0a Adding health check endpoint to nginx container 2023-09-10 16:23:54 -07:00
shockrah efdd75b831 Fresh readme 2023-09-10 15:51:35 -07:00
shockrah 830352a851 MVP nginx configuration for single container support 2023-09-10 15:36:47 -07:00
shockrah 50c6bfeac0 switching to borderline vanilla nginx docker image 2023-09-10 15:21:27 -07:00
shockrah 6b75b2534e Simplifying build and run scripts for general & pipeline usage 2023-09-10 15:20:50 -07:00
shockrah 9cd2fe11db Updating readme 2023-09-10 15:16:17 -07:00
shockrah 9ca3969a53 Ensuring public read access to all required public buckets 
* Required to allow task containers to read from here without crazy auth on
  nginx's part
 2023-09-10 15:10:22 -07:00
shockrah d9e0e8c70b Making public files for websites buckets public readable 2023-08-09 21:51:21 -07:00
shockrah 4987559b15 Adding readme for playbooks 2023-05-07 23:53:41 -07:00
shockrah 87a549bc1f * Load balancer components are now built dynamically for each domain 
+ Increased health_check intervals
+ HTTPS default action is now a blank 400 page
+ Generating listener rules for beta proxy based on bucket names/domains
Using domain filters for this basically
* Dynamically attaching listener certificates
 2023-03-10 21:37:35 -08:00
shockrah ffe5ffe831 Cleaning up Docker resources 
Adding ez build script
 2023-03-10 21:35:55 -08:00
shockrah f4e06fa24a New docker image supporting proxying S3 2023-03-10 21:34:58 -08:00
shockrah 42e55f7313 Task definition now uses the correct image and env vars 
Services are now mapped to their respective task definitions
 2023-03-10 21:34:06 -08:00
shockrah 28f8436768 Using new s3 access & secret key for s3 reader role 2023-03-10 21:33:24 -08:00
shockrah dfdc62f80c Consolidating locals into one place 
Also adding -input=false to Makefile
 2023-03-10 21:32:56 -08:00
shockrah 17d3f66073 Simplifying nginx vars 2023-03-06 18:35:07 -08:00
shockrah 550cb2eb70 Removing unused infra structure, lowering cost with this commit 2023-03-06 15:51:43 -08:00
shockrah 8f375def3b Updating bucket names to include blog and resume 2023-02-28 21:04:26 -08:00
shockrah 0f96719383 Dockerfile for proxying s3 resources with nginx 2023-02-28 20:20:21 -08:00
shockrah 91bb927cf5 Fixing nginx conf to return 404 on things it cant find rather than index.html 2023-02-14 18:53:11 -08:00
shockrah 321734a453 Adding redirect for 80 which was causing issues on folder path calls to nginx 2023-02-14 18:52:23 -08:00
shockrah f973c67bb4 Fixing indentation from vim 2023-02-11 21:19:08 -08:00
shockrah 5903ba2a5e Updating nginx config to now include resume.shockrah.xyz in the fun :) 
Also nginx.conf now has some gzip configuration parameters set, courtesy of:
https://www.techrepublic.com/article/how-to-configure-gzip-compression-with-nginx/
 2023-02-11 21:14:49 -08:00
shockrah 11ffc23871 Cleaning up DNS Records and updating certs to account for root domains 
For now we're just going to worry about the main blog and resume.shockrah.xyz
In the reverse-proxy image
* Resume pipelines will not work in this state and will need way of updating
their part of the image for ECS to pull updates*
 2023-02-11 20:56:52 -08:00
shockrah 904b730362 blog.shockrah.xyz working at an infrastructure level now 
Also updated the image so that it has the right baseURL
which gets configured during the service build ( Hugo )
 2023-02-10 22:07:26 -08:00
shockrah 53267daf99 Avoiding hard coded values and improving cluster name 2023-02-10 21:30:20 -08:00
shockrah 203ec7f434 Docker image required files 2023-02-10 21:29:50 -08:00
shockrah 1170e879f0 Consolidating roles for ecr and logging 2023-02-10 21:28:49 -08:00
shockrah 5e978b5766 Creating s3 bucket for static content 2023-01-21 16:58:11 -08:00
shockrah 57965a2a5a Replacing target group with proper shockrah.xyz group 2023-01-10 00:28:27 -08:00
shockrah 01e6d7f990 Attaching project-athen.xyz cert onto alpha LB SSL listener 2023-01-09 21:13:19 -08:00
shockrah 8481a5f123 Creating base certificates for shockrah and project-athens.xyz 2023-01-09 21:12:19 -08:00
shockrah 99bc6be5c9 Removing sample infra 2023-01-09 18:21:26 -08:00
shockrah d71c4780d9 Merge branch 'feature/alpha-cluster-sample' 2023-01-09 17:05:56 -08:00
shockrah 5c79b44ceb Removing pointless ufw rule 2023-01-09 17:05:19 -08:00
shockrah e019e09941 Normalizing sites that need cert updates 2023-01-09 17:04:43 -08:00
shockrah f48eb9610b Wildcard for sample project 2023-01-09 17:03:40 -08:00
shockrah bc096af870 Routing & TLS issues fixed with ACM 2023-01-02 19:10:08 -08:00
shockrah bdeb59e46d Health problems finally solved with LB and fargate 2023-01-02 19:08:25 -08:00
shockrah edbb647c18 Adding DNS entry for alpha load balancer cert 2023-01-02 18:37:16 -08:00
shockrah f96f6569cf Cert with load balancer listener 2023-01-02 18:36:48 -08:00
shockrah 97205a216c Cleaning up route53 entries 2022-12-27 22:03:46 -08:00
shockrah e2c4db294a Renaming project-athens.xyz route53 config 2022-12-27 21:08:19 -08:00
shockrah dcd3da5e47 Removing custom health check for now 2022-12-27 21:06:20 -08:00
shockrah 00edcc64af Formatting and comments 2022-12-27 21:02:56 -08:00
shockrah 52a9a94b32 Importing shockrah.xyz A records into terraform 2022-12-27 21:01:46 -08:00
shockrah f58fa4ae69 Adding shockrah.xyz public dns records 2022-12-27 20:45:32 -08:00
shockrah 4e46f34440 Imported route53 zone + records 2022-12-27 17:33:23 -08:00
shockrah ae61177661 Alpha configuration which still wont register 2022-12-16 22:51:05 -08:00
shockrah c4e169efee Tagging subnets 2022-12-16 22:50:45 -08:00
shockrah f47ce5e4ff Adding fallback for port 80 on base ecs 2022-12-16 22:50:15 -08:00
shockrah 6b0f985cd9 Adding generic health check for sample service 2022-12-16 22:49:55 -08:00
shockrah fafaae4ba7 Logging and role configuration speerated 2022-12-16 22:05:21 -08:00
shockrah 791d950821 Moving prefix to vars file 2022-12-09 22:23:13 -08:00
shockrah 4d15923af9 ALB requires two subnets to sit across 2022-12-09 22:23:04 -08:00
shockrah d4dae7618b Hooking service to a load balancer 2022-12-09 22:22:47 -08:00
shockrah 6212a7d8cc Removing atlas host 2022-12-09 21:49:17 -08:00
shockrah 9d426917f7 Working sample service with ECS 
for now this is just a hello world service with a public IP
 2022-12-09 20:55:30 -08:00
shockrah e830889432 Creating definition for alpha and lewdlad service 2022-12-06 19:53:48 -08:00
shockrah b9ac171181 Runbook for setting up atlas 2022-11-09 00:43:42 -08:00
shockrah 025b0539a6 All services now migrated and tested to be working as intended 
These configurations should be valid enough to perform a really fast migration
should something weird happen. Check the runbook created for this commit
to see the steps involved.
 2022-11-09 00:43:29 -08:00
shockrah 7ddd15c4a5 Searx, Clippable, & Filebrowser services are now running on the host 
Reverse proxy is the last step before they are exposed to the outside
 2022-11-09 00:17:22 -08:00
shockrah 7d6fee4781 Adding first 3 steps/playbooks for setting up atlas 
Drives are now mounted and services are ready to be spun up at this point
 2022-11-08 22:11:12 -08:00
shockrah 3ef52017c1 New version of alpha named atlas ready for provisioning 2022-10-29 15:50:40 -07:00
shockrah 369a5dbfa1 Minor rework to readme 2022-10-22 15:25:25 -07:00
shockrah ae8816bbc6 * Better build scripts which are now source aware 2022-10-21 20:56:07 -07:00
shockrah a970d344e9 - No longer using web user to copy static content 
+ init.yml now creates web user properly
 2022-10-21 20:55:52 -07:00
shockrah 890286b77d fixing copy params for resume updates 2022-10-10 09:58:52 -07:00
shockrah c43987faf4 Allowing massive files to be uploaded to files.leftcoast.space 2022-10-06 15:33:02 -07:00
shockrah 39c4545b70 Removing old references 2022-09-22 11:11:36 -07:00
shockrah 4290398c11 + Adding files.leftcoast.space to alphas certbot list 2022-09-13 07:26:33 -07:00
shockrah 026ee129eb + qrcodes now part of project athens scope 2022-07-24 23:33:50 -07:00
shockrah 836101beca * leftcoast file server fixerinod 2022-07-24 23:33:32 -07:00
shockrah 5f0e2bbc03 * Larger file upload support for gallery 2022-06-24 12:24:10 -07:00