Commit Graph

285 Commits

Author SHA1 Message Date
wiz
f888011191
Merge pull request #2386 from mempool/wiz/dont-alert-for-warnings
[ops] Change keybase notifications to ERR or higher priority
2022-08-25 00:11:25 +09:00
Stephan Oeste
fd8ed4bbdf
Add .local/bin to cln's path and install git-lfs in prod install 2022-08-24 16:21:36 +02:00
wiz
71002ee119
[ops] Change keybase notifications to ERR or higher priority 2022-08-24 21:59:05 +09:00
nymkappa
bd1d9573d6
Reduce api size for channel world map in ln dashboard - added spinner - update cache warmer 2022-08-22 21:36:02 +02:00
wiz
e0d677b01c
Merge branch 'master' into ops/add-core-lightning 2022-08-10 22:38:36 +09:00
wiz
2b2c40f65a
[ops] Fix minor issue for /cln/.zshrc in prod installer 2022-08-10 22:37:22 +09:00
Stephan Oeste
cacd4abd9d
Add Core Lighting for FreeBSD in prod installer 2022-08-05 16:41:00 +02:00
wiz
faa59f59bd
Merge pull request #2236 from mempool/wiz/fix-syslog-perms
[ops] Fix syslog permissions for /var/log/mempool
2022-08-03 00:24:10 +00:00
wiz
82f9814438
[ops] Fix cron jobs to update liquid assets hourly 2022-08-02 01:00:06 +02:00
wiz
b8c82c8f2c
[ops] Fix syslog permissions for /var/log/mempool 2022-08-02 00:08:02 +02:00
wiz
8d1624476f
Remove TOR_HOME variable in prod/install 2022-07-30 15:32:51 +02:00
wiz
8f183945c0
Fix FreeBSD path for torrc 2022-07-30 15:30:55 +02:00
wiz
5d704b0e43
Merge branch 'master' into ops/fix-tor-freebsd 2022-07-30 13:29:19 +00:00
wiz
a413c6ebb8
Separate electrs into bitcoin electrs and elements electrs 2022-07-30 15:25:16 +02:00
Stephan Oeste
21b6c6158a
Fix tor config for FreeBSD on prod installer 2022-07-30 14:01:40 +02:00
Stephan Oeste
eaf7da9acb
Add Unfurl to the prod installer 2022-07-29 20:13:48 +02:00
Stephan Oeste
6e38caee63
Add options for components to be installed in prod install script 2022-07-29 13:08:07 +02:00
wiz
3207e2a285
Merge pull request #2193 from Emzy/ops/mysql-pw
Add random generated mysql passwords on prod install
2022-07-26 22:57:43 +00:00
wiz
7e504e783f
Fix zmq ports in prod bitcoin.conf 2022-07-27 00:47:46 +02:00
Stephan Oeste
412a0ee577
Add random generated mysql passwords on prod install 2022-07-26 22:07:46 +02:00
wiz
58b60c1f68
Route new APIs to services backend 2022-07-21 18:07:28 +02:00
wiz
92da3988da
Reduce nginx cache time for production homepage 2022-07-18 17:47:33 -05:00
wiz
8c5460c319
Merge pull request #2071 from mempool/wiz/add-maxmind-geoipdb
Add maxmind geoip-db update utility to prod installer
2022-07-11 16:42:24 +02:00
Erik Arvstedt
81bc449043
nginx: Fix gixy test host_spoofing
This patch was generated by replacing:
`proxy_set_header Host $http_host` ->
`proxy_set_header Host $host`

Script:
find . -type f -exec sed -i 's|proxy_set_header Host \$http_host|proxy_set_header Host \$host|g' {} \;

Fixes test error:
```
>> Problem: [host_spoofing] The proxied Host header may be spoofed.
Description: In most cases "$host" variable are more appropriate, just use it.
Additional info: https://github.com/yandex/gixy/blob/master/docs/en/plugins/hostspoofing.md
```

`proxy_set_header Host $host` is indeed the recommended default proxy header setting.
2022-07-11 15:32:37 +02:00
Erik Arvstedt
eec82e1bf9 nginx: Fix gixy test http_splitting
Fixes test error:
```
>> Problem: [http_splitting] Possible HTTP-Splitting vulnerability.
Description: Using variables that can contain "\n" or "\r" may lead to http injection.
```

Summary: `$uri` should never be used in `return` statements.
See: https://github.com/yandex/gixy/blob/master/docs/en/plugins/httpsplitting.md

In this case, `$uri` always equals `/`, so just replace it.
2022-07-11 15:25:42 +02:00
wiz
7320fadec9
Add maxmind geoip-db update utility to prod installer 2022-07-11 14:32:38 +02:00
wiz
1037fbe52b
Merge pull request #2041 from Emzy/ops/freebsd-nginx-conf
Install nginx config also for freebsd on prod install
2022-07-09 14:33:24 +02:00
wiz
c5e8a83ebb
Update to Node.js v16.16.0, use shared zlib for prod 2022-07-08 17:22:56 +02:00
wiz
c89fd8c39f
Merge pull request #2040 from Emzy/ops/disable-dialog
Remove the dialog for now on prod install
2022-07-08 16:55:40 +02:00
Stephan Oeste
d0381e7850
Install nginx config also for freebsd on prod install 2022-07-08 15:59:39 +02:00
wiz
83c383b1ec
Print onions on separate lines after prod install 2022-07-08 15:34:10 +02:00
Stephan Oeste
4f22864080
Add mempool build as final step on prod install 2022-07-08 15:29:59 +02:00
Stephan Oeste
92780daa78
Remove the dialog for now on prod install 2022-07-08 15:26:13 +02:00
wiz
bdd3af6b6a
Merge pull request #2032 from Emzy/ops/fix-elements-service
Fix service name to elements and add elements testnet for prod install
2022-07-08 11:57:36 +02:00
Stephan Oeste
6582c8b36f
Fix service name to elements and add elements testnet for prod install 2022-07-08 11:54:26 +02:00
Stephan Oeste
92eef3a6c1
Quote echo output in prod install 2022-07-08 11:05:45 +02:00
Stephan Oeste
eeb84e5d42
Installing Linux nginx config in prod install 2022-07-07 21:09:00 +02:00
wiz
0b0c0b458f
Merge branch 'master' into wiz/fix-npm-install-no-optional 2022-07-07 20:36:58 +02:00
wiz
41f0619572
Merge pull request #2013 from Emzy/ops/set-user-ulimit
Set ulimit highter for all users in prod install
2022-07-07 19:56:38 +02:00
wiz
96b4ea6b50
Merge pull request #1998 from Emzy/ops/fix-linux-crontab
Make user crontab reliable in prod install script
2022-07-07 19:56:06 +02:00
Stephan Oeste
b4bb54212c
Set ulimit highter for all users in prod install 2022-07-07 19:22:47 +02:00
wiz
d57193c269
Fix npm install commands in Dockerfiles and ops scripts 2022-07-07 18:53:17 +02:00
Stephan Oeste
bf969ec8f7
Make user crontab reliable in prod install script 2022-07-07 17:13:09 +02:00
wiz
12807583c2
Merge pull request #2003 from mempool/ops/fix-npm-install-prod
Add `--prod` to `npm install` in ops scripts
2022-07-07 16:36:11 +02:00
wiz
bc068a0d9a
Add --prod to npm install in ops scripts 2022-07-07 13:59:51 +02:00
Stephan Oeste
4ee9a42f3f
Fix startup scripts in prod install 2022-07-07 12:19:51 +02:00
wiz
81c68620a1
Merge pull request #1985 from Emzy/ops/install-linux-crontab
Add crontab creation for linux and bitcoin-minfee.service in prod install
2022-07-06 19:02:27 +02:00
wiz
96007509b5
Merge pull request #1979 from Emzy/ops/cpu-count
Limit make to max cpus in prod install
2022-07-06 18:51:53 +02:00
wiz
bb74a25adc
Merge pull request #1977 from Emzy/ops/fix-shebang-scripts
Disable confirmation prompt for rust and change shebang in scripts to be universal for prod install
2022-07-06 18:51:18 +02:00
Stephan Oeste
989c74699f
Add crontab creation for linux and bitcoin-minfee.service in prod install 2022-07-06 18:31:31 +02:00