Search results

...opt/salt/nasqueron-operations as our local copy of rOPS, authoritative for Salt ** /opt/salt/staging for web and application content ...

Salt is used for deployment. Configuration can be found in the rOPS repository. ...nt should be used by minions in the `master_finger` value in configuration file. ...

=== Salt === * {{Ops file|pillar/core/groups.sls}}: add username to '''ops''' group ...

...nes need to apply the relevant SELinux context to '''each''' directory and file. {% set has_selinux = salt['grains.get']('selinux:enabled', False) %} ...

* Declare network interfaces carefully: it's the source of truth and Salt will use that for configure network * No need to create another user, Salt will do that (correctly) ...

...ce to Docker PaaS, it needs to be configured in the Operations repository. Salt will then deploy the needed files and instruct Docker to run the containers In {{Ops file|roles/paas-docker/containers}}, you can create a new .sls file with the name of the service. ...

* To redeploy containers, use <code>salt-call --local state.apply roles/paas-docker/containers/rabbitmq</code> ...e a new port for a new protocol or metrics, edit relevant file under {{ops file|pillar/paas/}} ...

| 12000 || bitlbee || bitlbee || {{Ops file|roles/shellserver/userland-software/files/etc__init.d__bitlbee}} * [[Operations grimoire/Create and revoke user accounts on Salt servers]] ...

On some roles, this process is automated by Salt: * {{Ops file|roles/dbserver-pgsql/server/build.sls}} for PostgreSQL with XML support (re ...

States are located in {{Ops file|roles/shellserver/vault}} unit. This unit is needed as Eglide isn't connect In any case, run <code>salt-call --local state.apply roles/shellserver/vault/config</code> to restore a ...

## data directory: add your canonical host to the pillar/saas/mediawiki.sls file in the mediawiki_datastores section # Deploy operations changes with Salt ...

# Delete the file Salt uses to know front-end is deployed: <code>rm /srv/penpot/public/version.txt ....util.migrations - action="apply migration", module="main", name="0103-mod-file-object-thumbnail-table" ...

# Edit {{Ops file|pillar/paas/docker.sls}} to adjust the list of IPs under <code>allowed_ips< # Update nginx configuration with <code>salt equatower state.sls_id /etc/nginx/vhosts/registry/registry.conf roles/paas ...

# To update the repository against production branch: <code>salt eglide state.apply roles/shellserver/odderon/</code> ## Deploy with <code>salt eglide state.apply roles/shellserver/odderon/code</code> ...

=== Deploy through Salt === ## By default, PHP errors are logged on file, ...

# Edit the relevant pillar file, for example pillar/dbserver/cluster-A.sls in rOPS # Deploy the change: <code>salt db-A-001 state.apply roles/dbserver-pgsql</code> ...

Instructions for new content should be added to this file: {{Ops file|operations/roles/webserver-content/org/nasqueron/docs.sls}}. ...r documentation repository to the staging repository, and deploy it with a file.recurse. ...

Pull it on docker-002, run <code>deploy-container etherpad</code> to run Salt states. * Use the {{Ops file|roles/paas-docker/wrappers/files/pad-delete.py}} script fo send the request ...

.../github.com/dereckson/rabbitmq-tcl/blob/master/.clang-format .clang-format file] is available. ...queron/codestyle</code> and use the following <kbd>phpcs.xml<kbd> standard file: ...

...he php package will overwrite the <code>/usr/local/etc/rc.d/php-fpm</code> file. As PID files path change between their version and ours, you can't reload ...his issue, call Salt to restore the amended multi instances services: <kbd>salt-call --local state.apply roles/webserver-legacy/php-sites/php-fpm</kbd>. ...

...Docker PaaS to serve dynamic TLS records under .acme.nasqueron.org, {{Ops file|roles/paas-docker/containers/acme_dns.sls}}. ...iles were previously '''only deployed to paas-docker role''' through {{Ops file|roles/paas-docker/letsencrypt/files}}. ...

=== Salt configuration === ...ss sites are defined in {{Ops file|pillar/saas/wordpress.sls}}. That's the file to edit to add a new one. ...

...is page currently documents Vault installed on complector as part of {{Ops file|roles/vault/}}. It doesn't document Docker or shellserver installation. See * to provision credentials through Salt ...

Configuration is stored in {{Ops file|pillar/notifications/config.sls}}. It can be applied through Salt: ...

* In {{Ops file|pillar/paas/alkane/web-001/}} add the subdomain in nginx_vhosts ...e|roles/webserver-alkane/nginx/files/vhosts/}} add the nginx configuration file ...

...oc/pipeline/steps/saltstack/#-salt-%20send%20a%20message%20to%20salt%20api Salt API] As a workaround, you can edit the configuration file located in the jobs/ folder of Jenkins home, for example <code>/srv/jenkins ...

...G instructions at [[Operations grimoire/Create and revoke user accounts on Salt servers]] and send a commit to Differential against our operations reposito ...e /srv or /var when you need to share something, that generally requires a Salt config to give shared rights to that directory ...

*# Deploy new Vault policy <code>sudo salt-call --local state.sls_id salt-node-dwellers roles/vault/policies</code> *# Deploy it with <code>salt dwellers state.sls_id /srv/orbeon/nasqueron_forms/conf/tomcat-users.xml rol ...

# Edit the relevant pillar file, for example pillar/dbserver/cluster-B.sls in rOPS # Deploy the change: <code>salt db-B-001 state.apply roles/dbserver-mysql/content</code> ...

[[File:Network simplified topology - 2023-05-08.png]] | 172.27.27.7||[[Complector]]||complector.nasqueron.drake||FreeBSD 13|||Salt, Vault||''Infrastructure server'' ...

Note: for Salt, that works slightly differently: a test deployment is required before land $ file `which arc` ...

...ides.''' Containers are regularly managed like any other container through Salt in paas-docker role. Instead, the getsentry/self-hosted repository is used ...p 172</code> to get it) in <code>/srv/relay/sentry_relay/config.yml</code> file under <code>relay.upstream</code> key. ...