344 Commits

Author SHA1 Message Date
wiz
3b35224434 Merge pull request #2419 from mempool/wiz/add-unfurl-to-ops-scripts
[ops] Update prod scripts for unfurler and cache warmer
2022-08-28 14:01:36 +02:00
wiz
6962efa807 Update ops scripts for unfurler and cache warmer 2022-08-28 14:00:20 +02:00
wiz
9559e9f451 [ops] Add production lightning backend configurations 2022-08-27 18:57:59 +02:00
Stephan Oeste
f0b4e2005a Start cln after Bitcoind in prod installer 2022-08-27 15:58:01 +02:00
Stephan Oeste
bf0f405325 Only source mysql_credentials if present in prod install 2022-08-27 15:52:42 +02:00
wiz
1b5e97ef26 [ops] Add nginx entrypoints for unfurler daemon 2022-08-27 14:17:17 +02:00
wiz
7f75669316 [ops] Add nginx placeholders for unfurlbot configuration 2022-08-27 13:55:30 +02:00
wiz
885501c066 Merge pull request #2388 from Emzy/Fix-syslog-path
Fix path for newsyslog configs in prod installer
2022-08-26 00:28:56 +09:00
Stephan Oeste
e9bb35f31b Fix path for newsyslog configs in prod installer 2022-08-24 17:49:56 +02:00
wiz
debb64d189 Merge pull request #2386 from mempool/wiz/dont-alert-for-warnings
[ops] Change keybase notifications to ERR or higher priority
2022-08-25 00:11:25 +09:00
Stephan Oeste
f09dd78bec Add .local/bin to cln's path and install git-lfs in prod install 2022-08-24 16:21:36 +02:00
wiz
bc37459dcf [ops] Change keybase notifications to ERR or higher priority 2022-08-24 21:59:05 +09:00
nymkappa
61db4f96f2 Reduce api size for channel world map in ln dashboard - added spinner - update cache warmer 2022-08-22 21:36:02 +02:00
wiz
e296fafff5 Merge branch 'master' into ops/add-core-lightning 2022-08-10 22:38:36 +09:00
wiz
c6d005318e [ops] Fix minor issue for /cln/.zshrc in prod installer 2022-08-10 22:37:22 +09:00
Stephan Oeste
8aae040253 Add Core Lighting for FreeBSD in prod installer 2022-08-05 16:41:00 +02:00
wiz
a20aafe6da Merge pull request #2236 from mempool/wiz/fix-syslog-perms
[ops] Fix syslog permissions for /var/log/mempool
2022-08-03 00:24:10 +00:00
wiz
5a2c29fc0e [ops] Fix cron jobs to update liquid assets hourly 2022-08-02 01:00:06 +02:00
wiz
0f2608aef4 [ops] Fix syslog permissions for /var/log/mempool 2022-08-02 00:08:02 +02:00
wiz
cf38d9cf3a Remove TOR_HOME variable in prod/install 2022-07-30 15:32:51 +02:00
wiz
c9c5d471ee Fix FreeBSD path for torrc 2022-07-30 15:30:55 +02:00
wiz
c525689854 Merge branch 'master' into ops/fix-tor-freebsd 2022-07-30 13:29:19 +00:00
wiz
230333c4bd Separate electrs into bitcoin electrs and elements electrs 2022-07-30 15:25:16 +02:00
Stephan Oeste
16d45736ed Fix tor config for FreeBSD on prod installer 2022-07-30 14:01:40 +02:00
Stephan Oeste
0127eed3bf Add Unfurl to the prod installer 2022-07-29 20:13:48 +02:00
Stephan Oeste
c9157c974f Add options for components to be installed in prod install script 2022-07-29 13:08:07 +02:00
wiz
ec8553d579 Merge pull request #2193 from Emzy/ops/mysql-pw
Add random generated mysql passwords on prod install
2022-07-26 22:57:43 +00:00
wiz
3b5ef62536 Fix zmq ports in prod bitcoin.conf 2022-07-27 00:47:46 +02:00
Stephan Oeste
91f2e3d10e Add random generated mysql passwords on prod install 2022-07-26 22:07:46 +02:00
wiz
2f7a0cc81f Route new APIs to services backend 2022-07-21 18:07:28 +02:00
wiz
215978985c Reduce nginx cache time for production homepage 2022-07-18 17:47:33 -05:00
wiz
6daf1a17e2 Merge pull request #2071 from mempool/wiz/add-maxmind-geoipdb
Add maxmind geoip-db update utility to prod installer
2022-07-11 16:42:24 +02:00
Erik Arvstedt
8e5b609587 nginx: Fix gixy test host_spoofing
This patch was generated by replacing:
`proxy_set_header Host $http_host` ->
`proxy_set_header Host $host`

Script:
find . -type f -exec sed -i 's|proxy_set_header Host \$http_host|proxy_set_header Host \$host|g' {} \;

Fixes test error:
```
>> Problem: [host_spoofing] The proxied Host header may be spoofed.
Description: In most cases "$host" variable are more appropriate, just use it.
Additional info: https://github.com/yandex/gixy/blob/master/docs/en/plugins/hostspoofing.md
```

`proxy_set_header Host $host` is indeed the recommended default proxy header setting.
2022-07-11 15:32:37 +02:00
Erik Arvstedt
a88388e311 nginx: Fix gixy test http_splitting
Fixes test error:
```
>> Problem: [http_splitting] Possible HTTP-Splitting vulnerability.
Description: Using variables that can contain "\n" or "\r" may lead to http injection.
```

Summary: `$uri` should never be used in `return` statements.
See: https://github.com/yandex/gixy/blob/master/docs/en/plugins/httpsplitting.md

In this case, `$uri` always equals `/`, so just replace it.
2022-07-11 15:25:42 +02:00
wiz
bc6b96fcfb Add maxmind geoip-db update utility to prod installer 2022-07-11 14:32:38 +02:00
wiz
f3b06bb3af Merge pull request #2041 from Emzy/ops/freebsd-nginx-conf
Install nginx config also for freebsd on prod install
2022-07-09 14:33:24 +02:00
wiz
2980790fad Update to Node.js v16.16.0, use shared zlib for prod 2022-07-08 17:22:56 +02:00
wiz
2360d8c386 Merge pull request #2040 from Emzy/ops/disable-dialog
Remove the dialog for now on prod install
2022-07-08 16:55:40 +02:00
Stephan Oeste
26db80c6fd Install nginx config also for freebsd on prod install 2022-07-08 15:59:39 +02:00
wiz
3ee806107c Print onions on separate lines after prod install 2022-07-08 15:34:10 +02:00
Stephan Oeste
3d87ca0ea3 Add mempool build as final step on prod install 2022-07-08 15:29:59 +02:00
Stephan Oeste
20d8927725 Remove the dialog for now on prod install 2022-07-08 15:26:13 +02:00
wiz
25f81bf203 Merge pull request #2032 from Emzy/ops/fix-elements-service
Fix service name to elements and add elements testnet for prod install
2022-07-08 11:57:36 +02:00
Stephan Oeste
9483c6f423 Fix service name to elements and add elements testnet for prod install 2022-07-08 11:54:26 +02:00
Stephan Oeste
dc64d2744e Quote echo output in prod install 2022-07-08 11:05:45 +02:00
Stephan Oeste
ace27157cb Installing Linux nginx config in prod install 2022-07-07 21:09:00 +02:00
wiz
13af42226d Merge branch 'master' into wiz/fix-npm-install-no-optional 2022-07-07 20:36:58 +02:00
wiz
4a6dabc0f2 Merge pull request #2013 from Emzy/ops/set-user-ulimit
Set ulimit highter for all users in prod install
2022-07-07 19:56:38 +02:00
wiz
ef0634041c Merge pull request #1998 from Emzy/ops/fix-linux-crontab
Make user crontab reliable in prod install script
2022-07-07 19:56:06 +02:00
Stephan Oeste
9e4dfff966 Set ulimit highter for all users in prod install 2022-07-07 19:22:47 +02:00