shockrah/infra
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
152 Commits 1 Branch 0 Tags
4a210404bbaca977809aab0541087c83dbff5785
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
shockrah 4a210404bb Adding temper.tv cert 2023-10-06 00:09:24 -07:00
shockrah 82f34d03cd Fixing certs that get attached to the LB 2023-10-06 00:08:14 -07:00
shockrah a83debde34 Validation and cert created for tmper 2023-10-05 23:41:18 -07:00
shockrah d02b5de48c Splitting certs into lone files 2023-10-05 23:16:49 -07:00
shockrah df2406720f Improving dependency chaingin slightly however more will stablize the race condition problem here in this folder 2023-10-05 23:12:39 -07:00
shockrah b6aebf06b1 Bringing in tmeper records to track 2023-10-05 23:08:27 -07:00
shockrah da379f20cb Moving remaining s3 configuration to its own folder 2023-10-05 22:43:35 -07:00
shockrah 9bd6cbd3e3 Fixing makefile 2023-10-05 22:28:54 -07:00
shockrah b0e5bd50da Moving out route53 and load balancer resources 2023-10-05 22:20:06 -07:00
shockrah 3029fbb3f6 Moving fargate things to their own folder 2023-10-04 01:15:32 -07:00
shockrah caf09a63cb More variable clean up for security groups 
Removing traces from previous networking cleanout
 2023-10-03 19:38:27 -07:00
shockrah e51ebc7251 Moving security groups out to their own folder as they are basically global to everything 2023-10-03 19:36:59 -07:00
shockrah 609f9b3e7b Moving networking code out into its own module 2023-10-03 19:07:06 -07:00
shockrah 10ed1f1a98 Adding note regarding master record with special record 2023-09-30 16:26:17 -07:00
shockrah 295f933d8a Terraform code cleanup and final reduction of containers from 2 -> 1 
Now able to serve multiple websites with 1 nginx container under an LB
Cost savings not massive but still noticable at this point considering
How low the cost is with this kind of setup
 2023-09-10 16:25:21 -07:00
shockrah b5e53acf0a Adding health check endpoint to nginx container 2023-09-10 16:23:54 -07:00
shockrah efdd75b831 Fresh readme 2023-09-10 15:51:35 -07:00
shockrah 830352a851 MVP nginx configuration for single container support 2023-09-10 15:36:47 -07:00
shockrah 50c6bfeac0 switching to borderline vanilla nginx docker image 2023-09-10 15:21:27 -07:00
shockrah 6b75b2534e Simplifying build and run scripts for general & pipeline usage 2023-09-10 15:20:50 -07:00
shockrah 9cd2fe11db Updating readme 2023-09-10 15:16:17 -07:00
shockrah 9ca3969a53 Ensuring public read access to all required public buckets 
* Required to allow task containers to read from here without crazy auth on
  nginx's part
 2023-09-10 15:10:22 -07:00
shockrah d9e0e8c70b Making public files for websites buckets public readable 2023-08-09 21:51:21 -07:00
shockrah 4987559b15 Adding readme for playbooks 2023-05-07 23:53:41 -07:00
shockrah 87a549bc1f * Load balancer components are now built dynamically for each domain 
+ Increased health_check intervals
+ HTTPS default action is now a blank 400 page
+ Generating listener rules for beta proxy based on bucket names/domains
Using domain filters for this basically
* Dynamically attaching listener certificates
 2023-03-10 21:37:35 -08:00
shockrah ffe5ffe831 Cleaning up Docker resources 
Adding ez build script
 2023-03-10 21:35:55 -08:00
shockrah f4e06fa24a New docker image supporting proxying S3 2023-03-10 21:34:58 -08:00
shockrah 42e55f7313 Task definition now uses the correct image and env vars 
Services are now mapped to their respective task definitions
 2023-03-10 21:34:06 -08:00
shockrah 28f8436768 Using new s3 access & secret key for s3 reader role 2023-03-10 21:33:24 -08:00
shockrah dfdc62f80c Consolidating locals into one place 
Also adding -input=false to Makefile
 2023-03-10 21:32:56 -08:00
shockrah 17d3f66073 Simplifying nginx vars 2023-03-06 18:35:07 -08:00
shockrah 550cb2eb70 Removing unused infra structure, lowering cost with this commit 2023-03-06 15:51:43 -08:00
shockrah 8f375def3b Updating bucket names to include blog and resume 2023-02-28 21:04:26 -08:00
shockrah 0f96719383 Dockerfile for proxying s3 resources with nginx 2023-02-28 20:20:21 -08:00
shockrah 91bb927cf5 Fixing nginx conf to return 404 on things it cant find rather than index.html 2023-02-14 18:53:11 -08:00
shockrah 321734a453 Adding redirect for 80 which was causing issues on folder path calls to nginx 2023-02-14 18:52:23 -08:00
shockrah f973c67bb4 Fixing indentation from vim 2023-02-11 21:19:08 -08:00
shockrah 5903ba2a5e Updating nginx config to now include resume.shockrah.xyz in the fun :) 
Also nginx.conf now has some gzip configuration parameters set, courtesy of:
https://www.techrepublic.com/article/how-to-configure-gzip-compression-with-nginx/
 2023-02-11 21:14:49 -08:00
shockrah 11ffc23871 Cleaning up DNS Records and updating certs to account for root domains 
For now we're just going to worry about the main blog and resume.shockrah.xyz
In the reverse-proxy image
* Resume pipelines will not work in this state and will need way of updating
their part of the image for ECS to pull updates*
 2023-02-11 20:56:52 -08:00
shockrah 904b730362 blog.shockrah.xyz working at an infrastructure level now 
Also updated the image so that it has the right baseURL
which gets configured during the service build ( Hugo )
 2023-02-10 22:07:26 -08:00
shockrah 53267daf99 Avoiding hard coded values and improving cluster name 2023-02-10 21:30:20 -08:00
shockrah 203ec7f434 Docker image required files 2023-02-10 21:29:50 -08:00
shockrah 1170e879f0 Consolidating roles for ecr and logging 2023-02-10 21:28:49 -08:00
shockrah 5e978b5766 Creating s3 bucket for static content 2023-01-21 16:58:11 -08:00
shockrah 57965a2a5a Replacing target group with proper shockrah.xyz group 2023-01-10 00:28:27 -08:00
shockrah 01e6d7f990 Attaching project-athen.xyz cert onto alpha LB SSL listener 2023-01-09 21:13:19 -08:00
shockrah 8481a5f123 Creating base certificates for shockrah and project-athens.xyz 2023-01-09 21:12:19 -08:00
shockrah 99bc6be5c9 Removing sample infra 2023-01-09 18:21:26 -08:00
shockrah d71c4780d9 Merge branch 'feature/alpha-cluster-sample' 2023-01-09 17:05:56 -08:00
shockrah 5c79b44ceb Removing pointless ufw rule 2023-01-09 17:05:19 -08:00
shockrah e019e09941 Normalizing sites that need cert updates 2023-01-09 17:04:43 -08:00
shockrah f48eb9610b Wildcard for sample project 2023-01-09 17:03:40 -08:00
shockrah bc096af870 Routing & TLS issues fixed with ACM 2023-01-02 19:10:08 -08:00
shockrah bdeb59e46d Health problems finally solved with LB and fargate 2023-01-02 19:08:25 -08:00
shockrah edbb647c18 Adding DNS entry for alpha load balancer cert 2023-01-02 18:37:16 -08:00
shockrah f96f6569cf Cert with load balancer listener 2023-01-02 18:36:48 -08:00
shockrah 97205a216c Cleaning up route53 entries 2022-12-27 22:03:46 -08:00
shockrah e2c4db294a Renaming project-athens.xyz route53 config 2022-12-27 21:08:19 -08:00
shockrah dcd3da5e47 Removing custom health check for now 2022-12-27 21:06:20 -08:00
shockrah 00edcc64af Formatting and comments 2022-12-27 21:02:56 -08:00
shockrah 52a9a94b32 Importing shockrah.xyz A records into terraform 2022-12-27 21:01:46 -08:00
shockrah f58fa4ae69 Adding shockrah.xyz public dns records 2022-12-27 20:45:32 -08:00
shockrah 4e46f34440 Imported route53 zone + records 2022-12-27 17:33:23 -08:00
shockrah ae61177661 Alpha configuration which still wont register 2022-12-16 22:51:05 -08:00
shockrah c4e169efee Tagging subnets 2022-12-16 22:50:45 -08:00
shockrah f47ce5e4ff Adding fallback for port 80 on base ecs 2022-12-16 22:50:15 -08:00
shockrah 6b0f985cd9 Adding generic health check for sample service 2022-12-16 22:49:55 -08:00
shockrah fafaae4ba7 Logging and role configuration speerated 2022-12-16 22:05:21 -08:00
shockrah 791d950821 Moving prefix to vars file 2022-12-09 22:23:13 -08:00
shockrah 4d15923af9 ALB requires two subnets to sit across 2022-12-09 22:23:04 -08:00
shockrah d4dae7618b Hooking service to a load balancer 2022-12-09 22:22:47 -08:00
shockrah 6212a7d8cc Removing atlas host 2022-12-09 21:49:17 -08:00
shockrah 9d426917f7 Working sample service with ECS 
for now this is just a hello world service with a public IP
 2022-12-09 20:55:30 -08:00
shockrah e830889432 Creating definition for alpha and lewdlad service 2022-12-06 19:53:48 -08:00
shockrah b9ac171181 Runbook for setting up atlas 2022-11-09 00:43:42 -08:00
shockrah 025b0539a6 All services now migrated and tested to be working as intended 
These configurations should be valid enough to perform a really fast migration
should something weird happen. Check the runbook created for this commit
to see the steps involved.
 2022-11-09 00:43:29 -08:00
shockrah 7ddd15c4a5 Searx, Clippable, & Filebrowser services are now running on the host 
Reverse proxy is the last step before they are exposed to the outside
 2022-11-09 00:17:22 -08:00
shockrah 7d6fee4781 Adding first 3 steps/playbooks for setting up atlas 
Drives are now mounted and services are ready to be spun up at this point
 2022-11-08 22:11:12 -08:00
shockrah 3ef52017c1 New version of alpha named atlas ready for provisioning 2022-10-29 15:50:40 -07:00
shockrah 369a5dbfa1 Minor rework to readme 2022-10-22 15:25:25 -07:00
shockrah ae8816bbc6 * Better build scripts which are now source aware 2022-10-21 20:56:07 -07:00
shockrah a970d344e9 - No longer using web user to copy static content 
+ init.yml now creates web user properly
 2022-10-21 20:55:52 -07:00
shockrah 890286b77d fixing copy params for resume updates 2022-10-10 09:58:52 -07:00
shockrah c43987faf4 Allowing massive files to be uploaded to files.leftcoast.space 2022-10-06 15:33:02 -07:00
shockrah 39c4545b70 Removing old references 2022-09-22 11:11:36 -07:00
shockrah 4290398c11 + Adding files.leftcoast.space to alphas certbot list 2022-09-13 07:26:33 -07:00
shockrah 026ee129eb + qrcodes now part of project athens scope 2022-07-24 23:33:50 -07:00
shockrah 836101beca * leftcoast file server fixerinod 2022-07-24 23:33:32 -07:00
shockrah 5f0e2bbc03 * Larger file upload support for gallery 2022-06-24 12:24:10 -07:00
shockrah a32f339ca1 + Filebrowser stack 
+ Cert setup for filebrowser service

This is going to be served under gallery.leftcoast.space for
a common fileserver thing that we use as a kind of scrapbook
 2022-06-14 21:17:59 -07:00
shockrah 0d634f6bdc + Simple runbook for mounting drives 2022-06-13 23:54:37 -07:00
shockrah 36891b111e - Removing musical maurice 
- Lewdlad now managed by another project
 2022-06-13 23:35:52 -07:00
shockrah a61ef4b841 + Docker config to save on space 2022-06-13 23:16:30 -07:00
shockrah 2f926b99c1 + Ignoring env var files 2022-06-13 23:14:38 -07:00
shockrah 1ab3137444 + Docker user 2022-06-13 23:13:55 -07:00
shockrah 92733f6613 * Moving to a remote backend in s3 2022-06-13 23:08:02 -07:00
shockrah acfd39be9b + Creating new volume for the photo/video gallery service 
Service ware still needs to be defined but this is the only resource we need
to build out in order to have things be kosher
 2022-06-12 21:34:39 -07:00
shockrah b9759b38f6 * Makefile now builds with new env vars 2022-04-22 22:41:00 -07:00
shockrah 87f7daed2b * Moving all vars to an input-vars.tf module 
The idea with this is to centralize the variables so that they are
easier to find and configure. The old way was scattered and lead to
being unclear. There is also much more documentation added with this
patch for clarity-sake
 2022-04-22 22:31:28 -07:00
shockrah 0977761976 + Lewdlad DEV_GUILD_ID aware 2022-04-05 17:04:45 -07:00