kazu634
/
itamae
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
644 Commits 2 Branches 0 Tags 35 MiB
Commit Graph

436 Commits

Author SHA1 Message Date
Kazuhiro MUSASHI 147e1bc643 Healthcheck for `filestat_exporter`. 2020-10-17 13:59:00 +09:00
Kazuhiro MUSASHI 018890d7e1 Use `unattended-upgrade`, instead of `cron-apt`. 2020-10-13 21:18:37 +09:00
Kazuhiro MUSASHI 601d814d5d Modify `Nginx` cookbook. 2020-10-13 21:18:37 +09:00
Kazuhiro MUSASHI 94420844b0 Modify `/etc/fstab` settings and misc setting. 2020-10-13 21:18:37 +09:00
Kazuhiro MUSASHI 8b4b0eeb9e Specify `dnsmasq` to check `consul` dns and the upper DNSs. 2020-10-13 21:18:37 +09:00
Kazuhiro MUSASHI 705432e244 Deploy `sshd_config` for Ubuntu 20.04. 2020-10-13 21:18:37 +09:00
Kazuhiro MUSASHI 05d7215f76 Use `timedatectl` when Ubuntu 20.04. 2020-10-13 21:18:37 +09:00
Kazuhiro MUSASHI 3b45ffb703 Modify the OS version to install kernel extra package. 2020-10-13 21:18:37 +09:00
Kazuhiro MUSASHI 12aabfb6c0 Do NOT deploy `perpare-commit-msg`. 2020-10-13 21:18:37 +09:00
Kazuhiro MUSASHI 4b911ce98a Do NOT install `ntp` to Ubuntu 20.04. 2020-10-13 21:18:37 +09:00
Kazuhiro MUSASHI 4a9e3d6286 Delete `fluentd` cookbook. 2020-10-13 21:12:39 +09:00
Kazuhiro MUSASHI 6706b9d4b1 Delete `monit` cookbook. 2020-10-13 21:12:27 +09:00
Kazuhiro MUSASHI 057b7fa979 Create dedicated cookbook for `Prometheus` exporters. 2020-10-13 17:53:33 +09:00
Kazuhiro MUSASHI d5ad34ac82 Create `prometheus` dedicated cookbook. 2020-10-13 17:53:16 +09:00
Kazuhiro MUSASHI 80175d609c Change `Loki` endpoint to `loki.service.consul:3100`. 2020-10-12 23:27:58 +09:00
Kazuhiro MUSASHI e8c01fc6ed Deploy `Consul` config for `Loki`. 2020-10-12 23:27:58 +09:00
Kazuhiro MUSASHI f2c3a5557d Deploy `systemd` config for `promtail-loki`. 2020-10-12 23:27:58 +09:00
Kazuhiro MUSASHI 0a9b4983d0 Deploy `promtail` config for `Loki`. 2020-10-12 23:27:58 +09:00
Kazuhiro MUSASHI b95f7a0383 Deploy `logrotated` config for `Loki`. 2020-10-12 23:27:58 +09:00
Kazuhiro MUSASHI 9aa481fa56 Deploy `rsyslog` config for `loki` logs. 2020-10-12 23:27:58 +09:00
Kazuhiro MUSASHI d6c76791b6 Deploy `systemd` config for `Loki`. 2020-10-12 23:27:58 +09:00
Kazuhiro MUSASHI 49869c48fa Deploy `Loki` config. 2020-10-12 23:27:58 +09:00
Kazuhiro MUSASHI e0c58066ec Install & Setup `Loki`. 2020-10-12 23:23:03 +09:00
Kazuhiro MUSASHI 6b7b0a0844 Modify `promtail` config for `sudo` logs. 2020-10-12 14:03:03 +09:00
Kazuhiro MUSASHI 990cf44393 Change threashold from 100 to 4000. 2020-09-28 00:59:43 +09:00
Kazuhiro MUSASHI 3b09f0a74f Change threashold from 100 to 4000. 2020-09-28 00:56:09 +09:00
Kazuhiro MUSASHI b814e759af Modify the service name. 2020-09-28 00:21:15 +09:00
Kazuhiro MUSASHI 40a8fc29cc Change `"` to `'`. 2020-09-27 18:21:46 +09:00
Kazuhiro MUSASHI 7dea0e4f4e Collect `filestat_exporter` metrics. 2020-09-27 18:18:34 +09:00
Kazuhiro MUSASHI 4e47ebfa6f Deploy `filestat_exporter`. 2020-09-27 18:11:58 +09:00
Kazuhiro MUSASHI 839e1449d4 Deploy `exporter_proxy` config under `/etc/prometheus_exporters.d/exporter_proxy`. 2020-09-27 18:11:57 +09:00
Kazuhiro MUSASHI ec906dae58 Create `/etc/prometheus_exporters.d`. 2020-09-27 18:11:57 +09:00
Kazuhiro MUSASHI 673b30eeb2 Modify `Prometheus` alert settings. 2020-09-27 13:01:44 +09:00
Kazuhiro MUSASHI e8d8ceeacb Deploy the `consul` config for `Grafana`. 2020-09-27 00:23:47 +09:00
Kazuhiro MUSASHI 06438d0dc2 Collect the metrics from `grafana`. 2020-09-27 00:22:50 +09:00
Kazuhiro MUSASHI 6b2a5bdf07 Add monitoring condition for the logs containing "already banned". 2020-09-26 17:23:05 +09:00
Kazuhiro MUSASHI 9bf98f1d20 Ignore `already banned` message. 2020-09-26 17:08:05 +09:00
Kazuhiro MUSASHI 9a5d2d0178 Delete `Prometheus` static target file. 2020-09-26 17:02:51 +09:00
Kazuhiro MUSASHI f1c09b8ae9 Change the severity of `nf_conntrack` message. 2020-09-26 16:56:15 +09:00
Kazuhiro MUSASHI 47c2f7784a Modify the kernel parameter to adjust the timeout for nf_conntrack. 2020-09-26 16:53:26 +09:00
Kazuhiro MUSASHI 95ac2f5841 Delete `check-reboot-required`. 2020-09-23 23:52:40 +09:00
Kazuhiro MUSASHI 70e78a2af0 Use `consul` service discovery to register `prometheus` monitoring. 2020-09-23 23:40:12 +09:00
Kazuhiro MUSASHI c13954bfc9 Delete `consul-template`. 2020-09-23 23:39:13 +09:00
Kazuhiro MUSASHI bfbf20e80f Change `level` and the regular expression. 2020-09-23 00:02:33 +09:00
Kazuhiro MUSASHI ae827106cf Ignore `apt` and `Temporary Directories`. 2020-09-22 23:54:33 +09:00
Kazuhiro MUSASHI 7ba084b71f Use `/usr/local/bin/check_file`. 2020-09-22 23:46:14 +09:00
Kazuhiro MUSASHI 3c634b7dc3 Deploy `check_file_ script. 2020-09-22 23:46:13 +09:00
Kazuhiro MUSASHI 34d38f63e2 Modify `promtail` config for `ssh`. 2020-09-22 00:54:28 +09:00
Kazuhiro MUSASHI 39a4b22867 Change level when executing `itamae`. 2020-09-21 00:25:47 +09:00
Kazuhiro MUSASHI 0d3d8fe800 Modify `promtail` config for `systemd`. 2020-09-21 00:21:50 +09:00
Kazuhiro MUSASHI 81822f12d3 Modify `promtail` config for `init` journal. 2020-09-21 00:21:28 +09:00
Kazuhiro MUSASHI 5cf6f09a03 Add `promtail` config to monitor `consul`. 2020-09-20 15:39:31 +09:00
Kazuhiro MUSASHI 9e91a66819 Monitor systemd journal. 2020-09-20 13:13:41 +09:00
Kazuhiro MUSASHI 909ae01260 Deploy `promtail` config for `promtail`. 2020-09-19 01:19:21 +09:00
Kazuhiro MUSASHI 18f41794c3 Restart `promtail-base` service. 2020-09-14 01:11:52 +09:00
Kazuhiro MUSASHI c37124a212 Modify the base configuration for `promtail`. 2020-09-14 01:11:29 +09:00
Kazuhiro MUSASHI 90c954a1a2 Modify `alertmanager` config to send alerts to webhook. 2020-09-14 00:14:13 +09:00
Kazuhiro MUSASHI d27b979ab0 Deploy `supervisord` config for `alertmanager-webhook-logger`. 2020-09-14 00:14:13 +09:00
Kazuhiro MUSASHI 1f08c9a784 Specify attributes for `alertmanager-webhook-logger` 2020-09-14 00:10:16 +09:00
Kazuhiro MUSASHI d463a2691d Install `alertmanager-webhook-logger`. 2020-09-14 00:10:16 +09:00
Kazuhiro MUSASHI 6ec9cb5539 Deploy `supervisord` config for `alertmanager`. 2020-09-12 15:52:56 +09:00
Kazuhiro MUSASHI f621f97e75 `promtail` config for `nginx`. 2020-09-11 02:02:07 +09:00
Kazuhiro MUSASHI 110f8ae8bc `systemd` config for `prmtail` nginx. 2020-09-11 02:01:47 +09:00
Kazuhiro MUSASHI c599fccc2b Deploy `promtail` config & `systemd` config. 2020-09-11 01:59:50 +09:00
Kazuhiro MUSASHI 335ffa11c8 Deploy `promtail` & `systemd` configs. 2020-09-07 23:06:06 +09:00
Kazuhiro MUSASHI e750ac0ce9 Set up `promtail`: 
- Deploy `systemd` config file
- Deploy `promtail` basic config file
- Deploy `rsyslog` config file
- Deploy `logrotated` config file
 2020-09-07 22:17:13 +09:00
Kazuhiro MUSASHI 872382df1d Install `promtail`. 2020-09-07 22:17:13 +09:00
Kazuhiro MUSASHI ee975266e0 Specify the cookbook-specific attiributes. 2020-09-07 22:17:13 +09:00
Kazuhiro MUSASHI 8931d6709c Create the entrypoint .rb. 2020-09-07 22:17:13 +09:00
Kazuhiro MUSASHI 7e3f6eba3d Add `gzip` settings. 2020-09-07 00:52:39 +09:00
Kazuhiro MUSASHI 2de591be19 Update `cron` settings. 2020-09-06 13:28:02 +09:00
Kazuhiro MUSASHI 860ea17d05 Force link to `/opt/lego/lego`. 2020-09-06 13:27:35 +09:00
Kazuhiro MUSASHI 3f6df758e2 Install `direnv`. 2020-08-09 15:41:13 +09:00
Kazuhiro MUSASHI c969038bdc Deploy the alert settings. 2020-07-19 01:07:00 +09:00
Kazuhiro MUSASHI b4be40871c Add federation settings. 2020-07-18 20:22:56 +09:00
Kazuhiro MUSASHI 9c7b88f200 Delete the monitoring setting for statup. 2020-07-18 20:20:17 +09:00
Kazuhiro MUSASHI 081e7a6994 Modify the external labels. 2020-07-18 20:12:43 +09:00
Kazuhiro MUSASHI ff6d4a7185 Enable integration with Alert Manager. 2020-07-18 20:07:38 +09:00
Kazuhiro MUSASHI 6f0f7ff472 Add alert settings. 2020-07-18 20:07:32 +09:00
Kazuhiro MUSASHI 2c70f62509 Add configuration file for Alert Manager. 2020-07-18 19:44:12 +09:00
Kazuhiro MUSASHI 2d36a53462 Add recipe for setting up Alert Manager 2020-07-18 19:44:11 +09:00
Kazuhiro MUSASHI 4d0f4fde4c Add recipe for installing `Alertmanager`. 2020-07-18 19:44:10 +09:00
Kazuhiro MUSASHI 64ec53f6fc Add `Alertmanage` attributes for itamae. 2020-07-18 19:44:10 +09:00
Kazuhiro MUSASHI 553bf71391 Install and Setup Alert Manager 2020-07-18 19:44:10 +09:00
Kazuhiro MUSASHI 1eca8560a7 Rename Prometheus install & setup recipes. 2020-07-18 19:43:49 +09:00
Kazuhiro MUSASHI b11cc232f5 Open port for `exporter_proxy`. 2020-07-18 14:23:35 +09:00
Kazuhiro MUSASHI 23bba10ab0 Change the target exporter port number. 2020-07-18 14:23:00 +09:00
Kazuhiro MUSASHI 49cf603406 Change the listening port of `exporter_proxy`. 2020-07-18 14:22:32 +09:00
Kazuhiro MUSASHI d57fbcbc93 Delete the monitoring settings for `consul`. 2019-11-25 00:09:04 +08:00
Kazuhiro MUSASHI a4822fe9ef Do not deploy the monitoring settings for `consul` 2019-11-25 00:08:20 +08:00
Kazuhiro MUSASHI 36c27f24fe Delete `grafana-front` cookbook. 2019-11-13 11:36:35 +08:00
Kazuhiro MUSASHI bd0043cebf Deploy the basic auth file. 2019-11-13 11:31:27 +08:00
Kazuhiro MUSASHI d6d8b2a5d2 Create directory for staging environment. 2019-11-13 11:30:38 +08:00
Kazuhiro MUSASHI 40e7c26656 Install `nginx-build` when finding a newer version. 2019-11-08 00:29:31 +08:00
Kazuhiro MUSASHI dc6b5a2f01 Install `prometheus` when finding a newer version. 2019-11-08 00:29:15 +08:00
Kazuhiro MUSASHI a8b637a51e Install `node_exporter` when finding a newer version. 2019-11-08 00:29:00 +08:00
Kazuhiro MUSASHI 45fe078188 Install `consul-template` when finding a newer version. 2019-11-08 00:28:45 +08:00
Kazuhiro MUSASHI e0820892d4 Install `consul`, when finding a newer version. 2019-11-08 00:28:13 +08:00
Kazuhiro MUSASHI 2c96bd7276 Modify the way of generating swap image. 2019-11-05 23:20:35 +08:00
Kazuhiro MUSASHI 46929fe87a Delete net.ipv4.tcp_tw_recycle=1. 2019-11-05 23:17:54 +08:00
Kazuhiro MUSASHI 482c71ece1 Get SSL certificate first. 2019-11-05 23:17:01 +08:00
Kazuhiro MUSASHI e19fd992d3 Create storage director for blog data. 2019-11-05 23:16:25 +08:00
Kazuhiro MUSASHI 6cfb4cdccf fix typo: fstab -> mount 2019-11-05 23:15:14 +08:00
Kazuhiro MUSASHI 272afbaf2e Deploy /etc/cron.d/blog. 2019-11-06 00:12:47 +09:00
Kazuhiro MUSASHI 7d6ae95020 Generate `ticket.key` by `nginx` cookbook. 2019-11-06 00:12:47 +09:00
Kazuhiro MUSASHI 28053a2c37 Deploy `dhparams_4096.pem` & `ticket.key`. 2019-11-06 00:12:47 +09:00
Kazuhiro MUSASHI 37e11592cd Do not execute the maitenance procedures. 2019-11-06 00:12:47 +09:00
Kazuhiro MUSASHI 494f16b4f8 Use `nginx` repository configs 2019-11-06 00:12:46 +09:00
Kazuhiro MUSASHI eddc0a517f Create sym-link to `/etc/nginx` config directories. 2019-11-06 00:12:46 +09:00
Kazuhiro MUSASHI 7349dc9b30 Clone the nginx config from the git repository. 2019-11-06 00:12:46 +09:00
Kazuhiro MUSASHI b01aee85b5 Load `lego.rb` instead of `letsencrypt.rb`. 
diff --git a/cookbooks/nginx/default.rb b/cookbooks/nginx/default.rb
index f7a30a7..8529d93 100644
--- a/cookbooks/nginx/default.rb
+++ b/cookbooks/nginx/default.rb
@@ -14,4 +14,4 @@ include_recipe './build.rb'
 include_recipe './setup.rb'

 # Install Let's Encrypt:
-include_recipe './letsencrypt.rb'
\ No newline at end of file
+include_recipe './lego.rb'
 2019-10-27 23:50:00 +08:00
Kazuhiro MUSASHI f9c59e53ba Download and install `lego`. 2019-10-27 23:49:47 +08:00
Kazuhiro MUSASHI b788c6b73b Rename `letsencrypt.rb` to `lego.rb`. 2019-10-27 23:49:10 +08:00
Kazuhiro MUSASHI be73c1f6a5 Create the config directory for stream config. 2019-10-27 15:07:46 +08:00
Kazuhiro MUSASHI a434ddaee2 Load the `Nginx` config from `stream-enable/` directory. 2019-10-27 15:07:23 +08:00
Kazuhiro MUSASHI 57647177bf Enable `stream` module. 2019-10-27 15:07:12 +08:00
Kazuhiro MUSASHI b9472d630d Add `SSH` credentials. 2019-10-27 14:42:16 +08:00
Kazuhiro MUSASHI d1e1dd50f4 Specify `OpenSSL` version (newer than 1.1.1) to enable TSL1.3. 2019-10-27 15:38:40 +09:00
Kazuhiro MUSASHI 27b1481454 `nginx` version bumps to `1.17.5`: 2019-10-27 15:38:40 +09:00
Kazuhiro MUSASHI d0dacca340 Exclude "127" and "172" (= Docker) IP addresses. 2019-10-26 23:07:20 +08:00
Kazuhiro MUSASHI 752a76a065 Modify the apt key URL. 2019-09-15 22:40:04 +08:00
Kazuhiro MUSASHI 762c94142f Modify apt repository setting. 2019-09-15 22:39:47 +08:00
Kazuhiro MUSASHI 8079808c45 In addition to `/mnt/backup`, mount `/var/spool/apt-mirror`. 2019-08-13 23:22:43 +08:00
Kazuhiro MUSASHI a04214f277 Modify the Slack secret URL. 2019-08-11 13:44:24 +08:00
Kazuhiro MUSASHI 7b7270c940 Create `fzf` cookbook. 2019-08-10 21:41:45 +08:00
Kazuhiro MUSASHI 64c79a6e16 Merge branch 'fluentd-slack-support' of kazu634/itamae into master 2019-08-10 20:02:48 +09:00
Kazuhiro MUSASHI 2e9bfb990e Merge branch 'digdag-install-java8' of kazu634/itamae into master 2019-08-10 20:02:02 +09:00
Kazuhiro MUSASHI 755fd9631f Install Java8. 2019-08-10 18:59:16 +08:00
Kazuhiro MUSASHI fea7da84f2 `Slack`のシークレットキーを更新する 2019-08-10 18:56:19 +08:00
Kazuhiro MUSASHI 5b8e5b50ab `192.168.10.0/24`セグメントのアドレスを指定する 2019-08-10 18:53:59 +08:00
Kazuhiro MUSASHI b3a7f44b09 Change `zsh` absolute path. 
Change `zhs` absolute path to `/usr/bin/zsh`.
 2019-08-10 17:20:16 +08:00
Kazuhiro MUSASHI cde8cfcea3 Upgrade the `nginx` version to be installed to `1.17.2`. 
Upgrade `nginx` version from `1.15.2` to `1.17.2`.
 2019-08-10 16:53:45 +08:00
Kazuhiro MUSASHI 0b43fb9a48 Merge branch 'delete-statup' of kazu634/itamae into master 2019-08-10 17:50:06 +09:00
Kazuhiro MUSASHI 70fcbe3086 Delete `statup` cookbook. 2019-08-10 16:48:28 +08:00
Kazuhiro MUSASHI 86ec4f850a Delete `wekan` cookbook. 
This commit refs/fixes #delete-wekan.
 2019-08-10 16:43:56 +08:00
Kazuhiro MUSASHI 39fbe6669b initial commit 2019-03-03 16:50:49 +08:00