Kazuhiro MUSASHI
|
6b2a5bdf07
|
Add monitoring condition for the logs containing "already banned".
|
2020-09-26 17:23:05 +09:00 |
Kazuhiro MUSASHI
|
9bf98f1d20
|
Ignore `already banned` message.
|
2020-09-26 17:08:05 +09:00 |
Kazuhiro MUSASHI
|
9a5d2d0178
|
Delete `Prometheus` static target file.
|
2020-09-26 17:02:51 +09:00 |
Kazuhiro MUSASHI
|
f1c09b8ae9
|
Change the severity of `nf_conntrack` message.
|
2020-09-26 16:56:15 +09:00 |
Kazuhiro MUSASHI
|
47c2f7784a
|
Modify the kernel parameter to adjust the timeout for nf_conntrack.
|
2020-09-26 16:53:26 +09:00 |
Kazuhiro MUSASHI
|
95ac2f5841
|
Delete `check-reboot-required`.
|
2020-09-23 23:52:40 +09:00 |
Kazuhiro MUSASHI
|
70e78a2af0
|
Use `consul` service discovery to register `prometheus` monitoring.
|
2020-09-23 23:40:12 +09:00 |
Kazuhiro MUSASHI
|
c13954bfc9
|
Delete `consul-template`.
|
2020-09-23 23:39:13 +09:00 |
Kazuhiro MUSASHI
|
bfbf20e80f
|
Change `level` and the regular expression.
|
2020-09-23 00:02:33 +09:00 |
Kazuhiro MUSASHI
|
ae827106cf
|
Ignore `apt` and `Temporary Directories`.
|
2020-09-22 23:54:33 +09:00 |
Kazuhiro MUSASHI
|
7ba084b71f
|
Use `/usr/local/bin/check_file`.
|
2020-09-22 23:46:14 +09:00 |
Kazuhiro MUSASHI
|
3c634b7dc3
|
Deploy `check_file_ script.
|
2020-09-22 23:46:13 +09:00 |
Kazuhiro MUSASHI
|
34d38f63e2
|
Modify `promtail` config for `ssh`.
|
2020-09-22 00:54:28 +09:00 |
Kazuhiro MUSASHI
|
39a4b22867
|
Change level when executing `itamae`.
|
2020-09-21 00:25:47 +09:00 |
Kazuhiro MUSASHI
|
0d3d8fe800
|
Modify `promtail` config for `systemd`.
|
2020-09-21 00:21:50 +09:00 |
Kazuhiro MUSASHI
|
81822f12d3
|
Modify `promtail` config for `init` journal.
|
2020-09-21 00:21:28 +09:00 |
Kazuhiro MUSASHI
|
5cf6f09a03
|
Add `promtail` config to monitor `consul`.
|
2020-09-20 15:39:31 +09:00 |
Kazuhiro MUSASHI
|
9e91a66819
|
Monitor systemd journal.
|
2020-09-20 13:13:41 +09:00 |
Kazuhiro MUSASHI
|
909ae01260
|
Deploy `promtail` config for `promtail`.
|
2020-09-19 01:19:21 +09:00 |
Kazuhiro MUSASHI
|
18f41794c3
|
Restart `promtail-base` service.
|
2020-09-14 01:11:52 +09:00 |
Kazuhiro MUSASHI
|
c37124a212
|
Modify the base configuration for `promtail`.
|
2020-09-14 01:11:29 +09:00 |
Kazuhiro MUSASHI
|
90c954a1a2
|
Modify `alertmanager` config to send alerts to webhook.
|
2020-09-14 00:14:13 +09:00 |
Kazuhiro MUSASHI
|
d27b979ab0
|
Deploy `supervisord` config for `alertmanager-webhook-logger`.
|
2020-09-14 00:14:13 +09:00 |
Kazuhiro MUSASHI
|
1f08c9a784
|
Specify attributes for `alertmanager-webhook-logger`
|
2020-09-14 00:10:16 +09:00 |
Kazuhiro MUSASHI
|
d463a2691d
|
Install `alertmanager-webhook-logger`.
|
2020-09-14 00:10:16 +09:00 |
Kazuhiro MUSASHI
|
6ec9cb5539
|
Deploy `supervisord` config for `alertmanager`.
|
2020-09-12 15:52:56 +09:00 |
Kazuhiro MUSASHI
|
f621f97e75
|
`promtail` config for `nginx`.
|
2020-09-11 02:02:07 +09:00 |
Kazuhiro MUSASHI
|
110f8ae8bc
|
`systemd` config for `prmtail` nginx.
|
2020-09-11 02:01:47 +09:00 |
Kazuhiro MUSASHI
|
c599fccc2b
|
Deploy `promtail` config & `systemd` config.
|
2020-09-11 01:59:50 +09:00 |
Kazuhiro MUSASHI
|
335ffa11c8
|
Deploy `promtail` & `systemd` configs.
|
2020-09-07 23:06:06 +09:00 |
Kazuhiro MUSASHI
|
e750ac0ce9
|
Set up `promtail`:
- Deploy `systemd` config file
- Deploy `promtail` basic config file
- Deploy `rsyslog` config file
- Deploy `logrotated` config file
|
2020-09-07 22:17:13 +09:00 |
Kazuhiro MUSASHI
|
872382df1d
|
Install `promtail`.
|
2020-09-07 22:17:13 +09:00 |
Kazuhiro MUSASHI
|
ee975266e0
|
Specify the cookbook-specific attiributes.
|
2020-09-07 22:17:13 +09:00 |
Kazuhiro MUSASHI
|
8931d6709c
|
Create the entrypoint .rb.
|
2020-09-07 22:17:13 +09:00 |
Kazuhiro MUSASHI
|
7e3f6eba3d
|
Add `gzip` settings.
|
2020-09-07 00:52:39 +09:00 |
Kazuhiro MUSASHI
|
2de591be19
|
Update `cron` settings.
|
2020-09-06 13:28:02 +09:00 |
Kazuhiro MUSASHI
|
860ea17d05
|
Force link to `/opt/lego/lego`.
|
2020-09-06 13:27:35 +09:00 |
Kazuhiro MUSASHI
|
3f6df758e2
|
Install `direnv`.
|
2020-08-09 15:41:13 +09:00 |
Kazuhiro MUSASHI
|
c969038bdc
|
Deploy the alert settings.
|
2020-07-19 01:07:00 +09:00 |
Kazuhiro MUSASHI
|
b4be40871c
|
Add federation settings.
|
2020-07-18 20:22:56 +09:00 |
Kazuhiro MUSASHI
|
9c7b88f200
|
Delete the monitoring setting for statup.
|
2020-07-18 20:20:17 +09:00 |
Kazuhiro MUSASHI
|
081e7a6994
|
Modify the external labels.
|
2020-07-18 20:12:43 +09:00 |
Kazuhiro MUSASHI
|
ff6d4a7185
|
Enable integration with Alert Manager.
|
2020-07-18 20:07:38 +09:00 |
Kazuhiro MUSASHI
|
6f0f7ff472
|
Add alert settings.
|
2020-07-18 20:07:32 +09:00 |
Kazuhiro MUSASHI
|
2c70f62509
|
Add configuration file for Alert Manager.
|
2020-07-18 19:44:12 +09:00 |
Kazuhiro MUSASHI
|
2d36a53462
|
Add recipe for setting up Alert Manager
|
2020-07-18 19:44:11 +09:00 |
Kazuhiro MUSASHI
|
4d0f4fde4c
|
Add recipe for installing `Alertmanager`.
|
2020-07-18 19:44:10 +09:00 |
Kazuhiro MUSASHI
|
64ec53f6fc
|
Add `Alertmanage` attributes for itamae.
|
2020-07-18 19:44:10 +09:00 |
Kazuhiro MUSASHI
|
553bf71391
|
Install and Setup Alert Manager
|
2020-07-18 19:44:10 +09:00 |
Kazuhiro MUSASHI
|
1eca8560a7
|
Rename Prometheus install & setup recipes.
|
2020-07-18 19:43:49 +09:00 |
Kazuhiro MUSASHI
|
b11cc232f5
|
Open port for `exporter_proxy`.
|
2020-07-18 14:23:35 +09:00 |
Kazuhiro MUSASHI
|
23bba10ab0
|
Change the target exporter port number.
|
2020-07-18 14:23:00 +09:00 |
Kazuhiro MUSASHI
|
49cf603406
|
Change the listening port of `exporter_proxy`.
|
2020-07-18 14:22:32 +09:00 |
Kazuhiro MUSASHI
|
d57fbcbc93
|
Delete the monitoring settings for `consul`.
|
2019-11-25 00:09:04 +08:00 |
Kazuhiro MUSASHI
|
a4822fe9ef
|
Do not deploy the monitoring settings for `consul`
|
2019-11-25 00:08:20 +08:00 |
Kazuhiro MUSASHI
|
36c27f24fe
|
Delete `grafana-front` cookbook.
|
2019-11-13 11:36:35 +08:00 |
Kazuhiro MUSASHI
|
bd0043cebf
|
Deploy the basic auth file.
|
2019-11-13 11:31:27 +08:00 |
Kazuhiro MUSASHI
|
d6d8b2a5d2
|
Create directory for staging environment.
|
2019-11-13 11:30:38 +08:00 |
Kazuhiro MUSASHI
|
40e7c26656
|
Install `nginx-build` when finding a newer version.
|
2019-11-08 00:29:31 +08:00 |
Kazuhiro MUSASHI
|
dc6b5a2f01
|
Install `prometheus` when finding a newer version.
|
2019-11-08 00:29:15 +08:00 |
Kazuhiro MUSASHI
|
a8b637a51e
|
Install `node_exporter` when finding a newer version.
|
2019-11-08 00:29:00 +08:00 |
Kazuhiro MUSASHI
|
45fe078188
|
Install `consul-template` when finding a newer version.
|
2019-11-08 00:28:45 +08:00 |
Kazuhiro MUSASHI
|
e0820892d4
|
Install `consul`, when finding a newer version.
|
2019-11-08 00:28:13 +08:00 |
Kazuhiro MUSASHI
|
2c96bd7276
|
Modify the way of generating swap image.
|
2019-11-05 23:20:35 +08:00 |
Kazuhiro MUSASHI
|
46929fe87a
|
Delete net.ipv4.tcp_tw_recycle=1.
|
2019-11-05 23:17:54 +08:00 |
Kazuhiro MUSASHI
|
482c71ece1
|
Get SSL certificate first.
|
2019-11-05 23:17:01 +08:00 |
Kazuhiro MUSASHI
|
e19fd992d3
|
Create storage director for blog data.
|
2019-11-05 23:16:25 +08:00 |
Kazuhiro MUSASHI
|
6cfb4cdccf
|
fix typo: fstab -> mount
|
2019-11-05 23:15:14 +08:00 |
Kazuhiro MUSASHI
|
272afbaf2e
|
Deploy /etc/cron.d/blog.
|
2019-11-06 00:12:47 +09:00 |
Kazuhiro MUSASHI
|
7d6ae95020
|
Generate `ticket.key` by `nginx` cookbook.
|
2019-11-06 00:12:47 +09:00 |
Kazuhiro MUSASHI
|
28053a2c37
|
Deploy `dhparams_4096.pem` & `ticket.key`.
|
2019-11-06 00:12:47 +09:00 |
Kazuhiro MUSASHI
|
37e11592cd
|
Do not execute the maitenance procedures.
|
2019-11-06 00:12:47 +09:00 |
Kazuhiro MUSASHI
|
494f16b4f8
|
Use `nginx` repository configs
|
2019-11-06 00:12:46 +09:00 |
Kazuhiro MUSASHI
|
eddc0a517f
|
Create sym-link to `/etc/nginx` config directories.
|
2019-11-06 00:12:46 +09:00 |
Kazuhiro MUSASHI
|
7349dc9b30
|
Clone the nginx config from the git repository.
|
2019-11-06 00:12:46 +09:00 |
Kazuhiro MUSASHI
|
b01aee85b5
|
Load `lego.rb` instead of `letsencrypt.rb`.
diff --git a/cookbooks/nginx/default.rb b/cookbooks/nginx/default.rb
index f7a30a7..8529d93 100644
--- a/cookbooks/nginx/default.rb
+++ b/cookbooks/nginx/default.rb
@@ -14,4 +14,4 @@ include_recipe './build.rb'
include_recipe './setup.rb'
# Install Let's Encrypt:
-include_recipe './letsencrypt.rb'
\ No newline at end of file
+include_recipe './lego.rb'
|
2019-10-27 23:50:00 +08:00 |
Kazuhiro MUSASHI
|
f9c59e53ba
|
Download and install `lego`.
|
2019-10-27 23:49:47 +08:00 |
Kazuhiro MUSASHI
|
b788c6b73b
|
Rename `letsencrypt.rb` to `lego.rb`.
|
2019-10-27 23:49:10 +08:00 |
Kazuhiro MUSASHI
|
be73c1f6a5
|
Create the config directory for stream config.
|
2019-10-27 15:07:46 +08:00 |
Kazuhiro MUSASHI
|
a434ddaee2
|
Load the `Nginx` config from `stream-enable/` directory.
|
2019-10-27 15:07:23 +08:00 |
Kazuhiro MUSASHI
|
57647177bf
|
Enable `stream` module.
|
2019-10-27 15:07:12 +08:00 |
Kazuhiro MUSASHI
|
b9472d630d
|
Add `SSH` credentials.
|
2019-10-27 14:42:16 +08:00 |
Kazuhiro MUSASHI
|
d1e1dd50f4
|
Specify `OpenSSL` version (newer than 1.1.1) to enable TSL1.3.
|
2019-10-27 15:38:40 +09:00 |
Kazuhiro MUSASHI
|
27b1481454
|
`nginx` version bumps to `1.17.5`:
|
2019-10-27 15:38:40 +09:00 |
Kazuhiro MUSASHI
|
d0dacca340
|
Exclude "127" and "172" (= Docker) IP addresses.
|
2019-10-26 23:07:20 +08:00 |
Kazuhiro MUSASHI
|
752a76a065
|
Modify the apt key URL.
|
2019-09-15 22:40:04 +08:00 |
Kazuhiro MUSASHI
|
762c94142f
|
Modify apt repository setting.
|
2019-09-15 22:39:47 +08:00 |
Kazuhiro MUSASHI
|
8079808c45
|
In addition to `/mnt/backup`, mount `/var/spool/apt-mirror`.
|
2019-08-13 23:22:43 +08:00 |
Kazuhiro MUSASHI
|
a04214f277
|
Modify the Slack secret URL.
|
2019-08-11 13:44:24 +08:00 |
Kazuhiro MUSASHI
|
7b7270c940
|
Create `fzf` cookbook.
|
2019-08-10 21:41:45 +08:00 |
Kazuhiro MUSASHI
|
64c79a6e16
|
Merge branch 'fluentd-slack-support' of kazu634/itamae into master
|
2019-08-10 20:02:48 +09:00 |
Kazuhiro MUSASHI
|
2e9bfb990e
|
Merge branch 'digdag-install-java8' of kazu634/itamae into master
|
2019-08-10 20:02:02 +09:00 |
Kazuhiro MUSASHI
|
755fd9631f
|
Install Java8.
|
2019-08-10 18:59:16 +08:00 |
Kazuhiro MUSASHI
|
fea7da84f2
|
`Slack`のシークレットキーを更新する
|
2019-08-10 18:56:19 +08:00 |
Kazuhiro MUSASHI
|
5b8e5b50ab
|
`192.168.10.0/24`セグメントのアドレスを指定する
|
2019-08-10 18:53:59 +08:00 |
Kazuhiro MUSASHI
|
b3a7f44b09
|
Change `zsh` absolute path.
Change `zhs` absolute path to `/usr/bin/zsh`.
|
2019-08-10 17:20:16 +08:00 |
Kazuhiro MUSASHI
|
cde8cfcea3
|
Upgrade the `nginx` version to be installed to `1.17.2`.
Upgrade `nginx` version from `1.15.2` to `1.17.2`.
|
2019-08-10 16:53:45 +08:00 |
Kazuhiro MUSASHI
|
0b43fb9a48
|
Merge branch 'delete-statup' of kazu634/itamae into master
|
2019-08-10 17:50:06 +09:00 |
Kazuhiro MUSASHI
|
70fcbe3086
|
Delete `statup` cookbook.
|
2019-08-10 16:48:28 +08:00 |
Kazuhiro MUSASHI
|
86ec4f850a
|
Delete `wekan` cookbook.
This commit refs/fixes #delete-wekan.
|
2019-08-10 16:43:56 +08:00 |
Kazuhiro MUSASHI
|
39fbe6669b
|
initial commit
|
2019-03-03 16:50:49 +08:00 |