pub-solar/infra
6
1
Fork 3
Code Issues 16 Pull requests 7 Actions Packages Projects 1 Releases Wiki Activity

Production config for matrix #72

Merged
teutat3s merged 9 commits from feat/matrix-prod into main 2023-11-28 12:58:54 +00:00
Conversation 1 Commits 9 Files changed 11 +171 -57
axeman commented 2023-11-19 17:18:51 +00:00
Owner
Copy link

TODOs:

  • Sync DB dump
  • Sync media data
    • synapse media-store
    • appservice-irc data
    • mautrix-telegram data
  • Ensure DB has C colation
  • Change DNS records, watch out for TTL
  • Switch over matrix configuration to nachtigall
  • Fix anything that breaks
TODOs: - Sync DB dump - Sync media data - synapse media-store - appservice-irc data - mautrix-telegram data - Ensure DB has C colation - Change DNS records, watch out for TTL - Switch over matrix configuration to nachtigall - Fix anything that breaks
axeman added 6 commits 2023-11-19 17:18:51 +00:00
nachtigall: Deploy coturn and configure matrix to use it
All checks were successful
Flake checks / Check (pull_request) Successful in 19m20s
Details
8a2f83c96a
matrix: Use production domains
All checks were successful
Flake checks / Check (pull_request) Successful in 18m59s
Details
8a2d946206
teutat3s changed title from [WIP] Prodcution config for matrix to [WIP] Production config for matrix 2023-11-19 17:19:07 +00:00
axeman added 1 commit 2023-11-19 17:21:57 +00:00
matrix: Point DNS to nachtigall
All checks were successful
Flake checks / Check (pull_request) Successful in 15m47s
Details
ccbfb211fd
teutat3s added 1 commit 2023-11-25 13:28:35 +00:00
feat: add well-known for matrix support contacts
All checks were successful
Flake checks / Check (pull_request) Successful in 16m52s
Details
9f633582d1
teutat3s commented 2023-11-25 19:30:18 +00:00
Owner
Copy link

Applied DNS changes:

❯ terraform plan -out pub-solar-infra.plan

Acquiring state lock. This may take a few moments...
namecheap_domain_records.pub-solar: Refreshing state... [id=pub.solar]

Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # namecheap_domain_records.pub-solar will be updated in-place
  ~ resource "namecheap_domain_records" "pub-solar" {
        id         = "pub.solar"
        # (3 unchanged attributes hidden)

      - record {
          - address  = "85.88.23.162" -> null
          - hostname = "chat" -> null
          - mx_pref  = 10 -> null
          - ttl      = 60 -> null
          - type     = "A" -> null
        }
      - record {
          - address  = "85.88.23.162" -> null
          - hostname = "matrix" -> null
          - mx_pref  = 10 -> null
          - ttl      = 60 -> null
          - type     = "A" -> null
        }
      + record {
          + address  = "nachtigall.pub.solar."
          + hostname = "chat"
          + mx_pref  = 10
          + ttl      = 60
          + type     = "CNAME"


        }
      - record {
          - address  = "nachtigall.pub.solar." -> null
          - hostname = "chat.test" -> null
          - mx_pref  = 10 -> null
          - ttl      = 1799 -> null
          - type     = "CNAME" -> null
        }
      + record {
          + address  = "nachtigall.pub.solar."
          + hostname = "matrix"


          + mx_pref  = 10
          + ttl      = 60
          + type     = "CNAME"


        }
      - record {
          - address  = "nachtigall.pub.solar." -> null


          - hostname = "test" -> null
          - mx_pref  = 10 -> null
          - ttl      = 1799 -> null
          - type     = "CNAME" -> null
        }
      - record {
          - address  = "nachtigall.pub.solar." -> null
          - hostname = "turn.test" -> null
          - mx_pref  = 10 -> null
          - ttl      = 300 -> null
          - type     = "CNAME" -> null
        }
        # (31 unchanged blocks hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────

Saved the plan to: pub-solar-infra.plan

To perform exactly these actions, run the following command to apply:


    terraform apply "pub-solar-infra.plan"
Releasing state lock. This may take a few moments...
Applied DNS changes: ``` ❯ terraform plan -out pub-solar-infra.plan Acquiring state lock. This may take a few moments... namecheap_domain_records.pub-solar: Refreshing state... [id=pub.solar] Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place Terraform will perform the following actions: # namecheap_domain_records.pub-solar will be updated in-place ~ resource "namecheap_domain_records" "pub-solar" { id = "pub.solar" # (3 unchanged attributes hidden) - record { - address = "85.88.23.162" -> null - hostname = "chat" -> null - mx_pref = 10 -> null - ttl = 60 -> null - type = "A" -> null } - record { - address = "85.88.23.162" -> null - hostname = "matrix" -> null - mx_pref = 10 -> null - ttl = 60 -> null - type = "A" -> null } + record { + address = "nachtigall.pub.solar." + hostname = "chat" + mx_pref = 10 + ttl = 60 + type = "CNAME" } - record { - address = "nachtigall.pub.solar." -> null - hostname = "chat.test" -> null - mx_pref = 10 -> null - ttl = 1799 -> null - type = "CNAME" -> null } + record { + address = "nachtigall.pub.solar." + hostname = "matrix" + mx_pref = 10 + ttl = 60 + type = "CNAME" } - record { - address = "nachtigall.pub.solar." -> null - hostname = "test" -> null - mx_pref = 10 -> null - ttl = 1799 -> null - type = "CNAME" -> null } - record { - address = "nachtigall.pub.solar." -> null - hostname = "turn.test" -> null - mx_pref = 10 -> null - ttl = 300 -> null - type = "CNAME" -> null } # (31 unchanged blocks hidden) } Plan: 0 to add, 1 to change, 0 to destroy. ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────── Saved the plan to: pub-solar-infra.plan To perform exactly these actions, run the following command to apply: terraform apply "pub-solar-infra.plan" Releasing state lock. This may take a few moments... ```
axeman added 1 commit 2023-11-25 22:38:32 +00:00
matrix: Move the whole email section into the secret
All checks were successful
Flake checks / Check (pull_request) Successful in 15m27s
Details
2cbc46c154 
Matrix doesn't deep merge the secrets, so this is necessary
axeman changed title from [WIP] Production config for matrix to Production config for matrix 2023-11-28 08:20:52 +00:00
teutat3s approved these changes 2023-11-28 12:58:23 +00:00
teutat3s left a comment
Owner
Copy link

🥇

🥇
teutat3s merged commit ad2eb1fa16 into main 2023-11-28 12:58:54 +00:00
teutat3s deleted branch feat/matrix-prod 2023-11-28 12:58:54 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
teutat3s
Labels
Clear labels   
Bug

   
Docs

   
Feature request

   
Good for newcomers

   
Infra

   
Privacy

   
Refactoring or migration

   
Security
No labels
Bug
Docs
Feature request
Good for newcomers
Infra
Privacy
Refactoring or migration
Security
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: pub-solar/infra#72
No description provided.
Delete branch "feat/matrix-prod"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?