Mirror
/
zulip
mirror of https://github.com/zulip/zulip.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
zulip/puppet/zulip_ops/manifests/app_frontend.pp

75 lines
2.0 KiB
ObjectPascal
Raw Normal View History

puppet: Rename zulip_internal to zulip_ops. The old "zulip_internal" name was from back when Zulip, Inc. had two distributions of Zulip, the enterprise distribution in puppet/zulip/ and the "internal" SAAS distribution in puppet/zulip_internal. I think the name is a bit confusing in the new fully open-source Zulip work, so we're replacing it with "zulip_ops". I don't think the new name is perfect, but it's better. In the following commits, we'll delete a bunch of pieces of Zulip, Inc.'s infrastructure that don't exist anymore and thus are no longer useful (e.g. the old Trac configuration), with the goal of cleaning the repository of as much unnecessary content as possible.
2016-10-17 04:05:49 +02:00
class zulip_ops::app_frontend {
puppet: Rename app_frontend.pp to app_frontend_base.pp. This will enable us to move the remaining app-frontend related content out of voyager.pp.
2015-12-26 06:07:15 +01:00
include zulip::app_frontend_base
puppet: Move memcached and rabbitmq include out of app_frontend_base.pp.
2015-12-26 06:13:47 +01:00
include zulip::memcached
include zulip::rabbit
Move postfix inclusion from public app_frontend to internal manifest Otherwise, we will enable the postfix config on all frontends, regardless of whether Enterprise deployments requested it. (imported from commit 9592be3706adcee7547f6795f32fe7b8d85e71ee)
2014-02-06 21:10:00 +01:00
include zulip::postfix_localmail
puppet: Create static_asset_compiler manifest.
2016-07-20 00:35:03 +02:00
include zulip::static_asset_compiler
$app_packages = [# Needed for the ssh tunnel to the redis server
[manual] Use dedicated Redis server for staging Before we deploy this commit, we must migrate the data from the staging redis server to the new, dedicated redis server. The steps for doing so are the following: * Remove the zulip::redis puppet class from staging's zulip.conf * ssh once from staging to redis-staging.zulip.net so that the host key is known * Create a tunnel from redis0.zulip.net to staging.zulip.net * zulip@redis0:~$ ssh -N -L 127.0.0.1:6380:127.0.0.1:6379 -o ServerAliveInterval=30 -o ServerAliveCountMax=3 staging.zulip.net * Set the redis instance on redis0.zulip.net to replicate the one on staging.zulip.net * redis 127.0.0.1:6379> slaveof 127.0.0.1 6380 * Stop the app on staging * Stop redis-server on staging * Promote the redis server on redis0.zulip.net to a master * redis 127.0.0.1:6379> slaveof no one * Do a puppet apply at this commit on staging (this will bring up the tunnel to redis0) * Deploy this commit to staging (start the app on staging) * Kill the tunnel from redis0.zulip.net to staging.zulip.net * Uninstall redis-server on staging The steps for migrating prod will be the same modulo s/staging/prod0/. (imported from commit 546d258883ac299d65e896710edd0974b6bd60f8)
2014-02-05 01:05:27 +01:00
"autossh",
puppet: Move minify-js and statsd dependencies to internal manifest. (imported from commit 3363fb962a4fde575591b42db888b92bb6edd0f5)
2013-11-10 15:58:10 +01:00
]
package { $app_packages: ensure => "installed" }
puppet: Make old redis_tunnel configuration usable. This old puppet configuration was never really used, and regardless hardcoded an ancient zulip.net hostname. We fix this to use the zulipconf system to get the host domain (though not, at present, the hostname).
2016-08-01 04:58:47 +02:00
$hosts_domain = zulipconf("nagios", "hosts_domain", undef)
puppet: Move minify-js and statsd dependencies to internal manifest. (imported from commit 3363fb962a4fde575591b42db888b92bb6edd0f5)
2013-11-10 15:58:10 +01:00
zulip_ops: Add logrotate configuration from main zulip.
2016-08-24 07:42:33 +02:00
file { "/etc/logrotate.d/zulip":
ensure => file,
owner => "root",
group => "root",
mode => 644,
source => "puppet:///modules/zulip/logrotate/zulip",
}
[puppet] Add log2zulip tool for sending log files to Zulip. This tool is a little crude; it runs out of a cron job and will forward to staging a notice about any new lines in the declared log files, truncating if there are more than 10 lines. (imported from commit 6748ddff1def0907b061dc278a3a848bd2e933f1)
2013-12-16 22:37:42 +01:00
file { '/etc/log2zulip.conf':
ensure => file,
owner => "zulip",
group => "zulip",
mode => 644,
puppet: Rename zulip_internal to zulip_ops. The old "zulip_internal" name was from back when Zulip, Inc. had two distributions of Zulip, the enterprise distribution in puppet/zulip/ and the "internal" SAAS distribution in puppet/zulip_internal. I think the name is a bit confusing in the new fully open-source Zulip work, so we're replacing it with "zulip_ops". I don't think the new name is perfect, but it's better. In the following commits, we'll delete a bunch of pieces of Zulip, Inc.'s infrastructure that don't exist anymore and thus are no longer useful (e.g. the old Trac configuration), with the goal of cleaning the repository of as much unnecessary content as possible.
2016-10-17 04:05:49 +02:00
source => 'puppet:///modules/zulip_ops/log2zulip.conf',
[puppet] Add log2zulip tool for sending log files to Zulip. This tool is a little crude; it runs out of a cron job and will forward to staging a notice about any new lines in the declared log files, truncating if there are more than 10 lines. (imported from commit 6748ddff1def0907b061dc278a3a848bd2e933f1)
2013-12-16 22:37:42 +01:00
}
file { '/etc/cron.d/log2zulip':
ensure => file,
puppet: Fix permissions on /etc/cron.d/log2zulip. (imported from commit 33ee5ae97b09b3925849940262ecd0bcbce38a3f)
2013-12-17 20:13:27 +01:00
owner => "root",
group => "root",
[puppet] Add log2zulip tool for sending log files to Zulip. This tool is a little crude; it runs out of a cron job and will forward to staging a notice about any new lines in the declared log files, truncating if there are more than 10 lines. (imported from commit 6748ddff1def0907b061dc278a3a848bd2e933f1)
2013-12-16 22:37:42 +01:00
mode => 644,
puppet: Rename zulip_internal to zulip_ops. The old "zulip_internal" name was from back when Zulip, Inc. had two distributions of Zulip, the enterprise distribution in puppet/zulip/ and the "internal" SAAS distribution in puppet/zulip_internal. I think the name is a bit confusing in the new fully open-source Zulip work, so we're replacing it with "zulip_ops". I don't think the new name is perfect, but it's better. In the following commits, we'll delete a bunch of pieces of Zulip, Inc.'s infrastructure that don't exist anymore and thus are no longer useful (e.g. the old Trac configuration), with the goal of cleaning the repository of as much unnecessary content as possible.
2016-10-17 04:05:49 +02:00
source => 'puppet:///modules/zulip_ops/cron.d/log2zulip',
[puppet] Add log2zulip tool for sending log files to Zulip. This tool is a little crude; it runs out of a cron job and will forward to staging a notice about any new lines in the declared log files, truncating if there are more than 10 lines. (imported from commit 6748ddff1def0907b061dc278a3a848bd2e933f1)
2013-12-16 22:37:42 +01:00
}
puppet: Run check_send_receive_time via a cron job. This allows the actual nagios work involved with check_send_receive_time nagios checks to be done by an unprivileged "nagios" user rather than the "zulip" user.
2016-08-10 07:57:19 +02:00
file { '/etc/cron.d/check_send_receive_time':
ensure => file,
owner => "root",
group => "root",
mode => 644,
source => 'puppet:///modules/zulip_ops/cron.d/check_send_receive_time',
}
[puppet] Add log2zulip tool for sending log files to Zulip. This tool is a little crude; it runs out of a cron job and will forward to staging a notice about any new lines in the declared log files, truncating if there are more than 10 lines. (imported from commit 6748ddff1def0907b061dc278a3a848bd2e933f1)
2013-12-16 22:37:42 +01:00
file { '/etc/log2zulip.zuliprc':
ensure => file,
owner => "zulip",
group => "zulip",
mode => 600,
puppet: Rename zulip_internal to zulip_ops. The old "zulip_internal" name was from back when Zulip, Inc. had two distributions of Zulip, the enterprise distribution in puppet/zulip/ and the "internal" SAAS distribution in puppet/zulip_internal. I think the name is a bit confusing in the new fully open-source Zulip work, so we're replacing it with "zulip_ops". I don't think the new name is perfect, but it's better. In the following commits, we'll delete a bunch of pieces of Zulip, Inc.'s infrastructure that don't exist anymore and thus are no longer useful (e.g. the old Trac configuration), with the goal of cleaning the repository of as much unnecessary content as possible.
2016-10-17 04:05:49 +02:00
source => 'puppet:///modules/zulip_ops/log2zulip.zuliprc',
[puppet] Add log2zulip tool for sending log files to Zulip. This tool is a little crude; it runs out of a cron job and will forward to staging a notice about any new lines in the declared log files, truncating if there are more than 10 lines. (imported from commit 6748ddff1def0907b061dc278a3a848bd2e933f1)
2013-12-16 22:37:42 +01:00
}
[puppet] Add the apns-token crontab file to puppet (imported from commit f12001453c9ca924c801a6000927e3ee2696a392)
2014-01-08 18:00:31 +01:00
file { "/etc/cron.d/check-apns-tokens":
APNs: Rip out the existing, broken implementation. This code empirically doesn't work. It's not entirely clear why, even having done quite a bit of debugging; partly because the code is quite convoluted, and because it shows the symptoms of people making changes over time without really understanding how it was supposed to work. Moreover, this code targets an old version of the APNs provider API. Apple deprecated that in 2015, in favor of a shiny new one which uses HTTP/2 to meet the same needs for concurrency and scale that the old one had to do a bunch of ad-hoc protocol design for. So, rip this code out. We'll build a pathway to the new API from scratch; it's not that complicated.
2017-08-19 00:09:26 +02:00
ensure => absent,
[puppet] Add the apns-token crontab file to puppet (imported from commit f12001453c9ca924c801a6000927e3ee2696a392)
2014-01-08 18:00:31 +01:00
}
puppet: Make old redis_tunnel configuration usable. This old puppet configuration was never really used, and regardless hardcoded an ancient zulip.net hostname. We fix this to use the zulipconf system to get the host domain (though not, at present, the hostname).
2016-08-01 04:58:47 +02:00
file { "/etc/supervisor/conf.d/redis_tunnel.conf":
require => Package["supervisor", "autossh"],
ensure => file,
owner => "root",
group => "root",
mode => 644,
content => template("zulip_ops/supervisor/conf.d/redis_tunnel.conf.template.erb"),
notify => Service["supervisor"],
}
puppet: Add redis_password file for Nagios. This allows the Nagios user to access redis without having full access to the redis system. Ideally, this would eventually use a password that only has statistics read access, but I'm not sure redis supports that.
2016-08-01 05:24:55 +02:00
# Need redis_password in its own file for Nagios
file { '/var/lib/nagios/redis_password':
ensure => file,
mode => 600,
owner => "nagios",
group => "nagios",
content => zulipsecret('secrets', 'redis_password', ''),
}
puppet: Move minify-js and statsd dependencies to internal manifest. (imported from commit 3363fb962a4fde575591b42db888b92bb6edd0f5)
2013-11-10 15:58:10 +01:00
}