Ecosyste.ms: OpenCollective

An open API service for software projects hosted on Open Collective.

github.com/ooni/sysadmin

System administration tools
https://github.com/ooni/sysadmin

Add roles for nodejs and proteus-frontend

35a282e1a342aaed35b8bffd86f15410a60cb491 authored over 7 years ago by Arturo Filastò <[email protected]>
Also allow localhost non peer based auth for postgres user

723a010eaae0beed440554844823ee07fcca9382 authored over 7 years ago by Arturo Filastò <[email protected]>
Current external inventory state

00ef7ba2177652e510f1ee480633d08a46cbf625 authored over 7 years ago by Leonid Evdokimov <[email protected]>
Current external inventory state

dc42ab27bb6c9e3260dfd02dd8cdb6c3b1b2e8d6 authored over 7 years ago by Leonid Evdokimov <[email protected]>
Add shell-box at Washington DC, enable admin shell for `weasel` user.

7254bc7c89e435e66cac13fda8bcdb003f2b1da6 authored over 7 years ago by Leonid Evdokimov <[email protected]>
Fix hostname for database connection

3fc76525e4fa72d8432779683d948da2efad9d5a authored over 7 years ago by Arturo Filastò <[email protected]>
Current external inventory state

cb7ef162bc1244c2b177be39a66d1c9e9ed099bb authored over 7 years ago by Leonid Evdokimov <[email protected]>
Current external inventory state

6bafbfc9f29f6b4052ad511f578f67e82a2cd336 authored over 7 years ago by Leonid Evdokimov <[email protected]>
Add `vault_` prefix to `grafana_admin_password`

45654c86a7e68a1cb31ce4d059b2fc2e50cb48d0 authored over 7 years ago by Leonid Evdokimov <[email protected]>
Fix naming of proteus-events

7632958992922b6c93a77e48109bafc8ee67a820 authored over 7 years ago by Arturo Filastò <[email protected]>
Bind all orchestrators on port 443

Fix calling of the proteus-* service command

7b03b97952f658ae24a49b0159dbbcb13d780b7e authored over 7 years ago by Arturo Filastò <[email protected]>
Add roles for deploying orchestration

edd5e428e855160791a77949fa0a768a006e972f authored over 7 years ago by Arturo Filastò <[email protected]>
Run apt-get update before running adm and docker_py apt commands

132710a66566a7ae84ac154c9b9fdd17a6b219ae authored over 7 years ago by Arturo Filastò <[email protected]>
Add configs for the various pieces of infrastructure to monitor

f894d64f4574f266ae5c1dfa7148534d0c6744cd authored over 7 years ago by Arturo Filastò <[email protected]>
Send resolved messages via email too

d31ad75802c4116dbc71ec6f0ad2e11617517b98 authored over 7 years ago by Arturo Filastò <[email protected]>
Add Prometheus node_exporter.

c6fac25e4569cba9edb342a239a730474df53073 authored over 7 years ago by Ben Kochie <[email protected]>
Feature/node exporter (#111)

* Send resolved messages via email too

* Add role for deploying node_exporter

* Get node e...

58fca584c7476ada7696046d5eeeeb312cb99cef authored over 7 years ago by Arturo Filastò <[email protected]>
Delete some other un-used files

Update README

6cf3e7d7bffef685a06e3c550ec0b9360a298695 authored over 7 years ago by Arturo Filastò <[email protected]>
Add support for sending alerts via slack

ebd6159ec1b596e5350137d3d18d6ad3fe552e3d authored over 7 years ago by Arturo Filastò <[email protected]>
Improve the readibility of alert messages.

Add support for email notifications.

aaf2593427049ff0a414f3b532d60efd5669b997 authored over 7 years ago by Arturo Filastò <[email protected]>
Null travis config to make travis happy

fca19ea209d9379447344f9acab4875cef0686ed authored over 7 years ago by Arturo Filastò <[email protected]>
Write playbook to deploy prometheus

ced1bb920469a6071b22c62c1dbfbb31f2ae1773 authored over 7 years ago by Arturo Filastò <[email protected]>
Add grafana deployment role

3dad39e4976e7d9eb2b8e4964cf6cf4c9604988c authored over 7 years ago by Arturo Filastò <[email protected]>
Update blackbox_exporter setcap

Move setcap from ansible to systemd unit to simplify deployment.

e62461035e564d317a837f174f774d5723b8f9e3 authored over 7 years ago by Ben Kochie <[email protected]>
Bind blackbox on localhost

* Add alerting rule for when a machine goes down

93c14bf9d4374989ed9ce36cb937e9fa17c307fc authored over 7 years ago by Arturo Filastò <[email protected]>
Remove old/unused pieces of infrastructure

5b7ed08d2f9af542aebf6df39cd149737ef99743 authored over 7 years ago by Arturo Filastò <[email protected]>
Remove extra newline in slack title

9626b39ff8ff4f51b6f54d22a001db1f31f9f97b authored over 7 years ago by Arturo Filastò <[email protected]>
Move some scripts into scripts tree

d66e566dd352d01929108ff9d4250b9848eea067 authored over 7 years ago by Arturo Filastò <[email protected]>
Make bouncer monitoring simpler

23ea7b6f872594b2d8e75ecce15681849c411d43 authored over 7 years ago by Arturo Filastò <[email protected]>
Add Prometheus monitoring server

Add a role for installing a Prometheus monitoring server.

3d9dffdce68b2a238194f6135b25ef5421242ade authored over 7 years ago by Ben Kochie <[email protected]>
Add the Prometheus blackbox_exporter.

0c4708544b0c09ab46641ce919f12dea24197189 authored over 7 years ago by Ben Kochie <[email protected]>
Update to Prometheus 1.6.0

Add auto-calculation for memory usage.

59061f1b70adec394a5c6e536d94bae2fd13ed8d authored over 7 years ago by Ben Kochie <[email protected]>
Merge pull request #105 from TheTorProject/airflow-pipeline

Airflow pipeline in da docker (part 1)

6a56c57dcd882bb0d9345db5ddfafe73c32877f9 authored over 7 years ago by Leonid Evdokimov <[email protected]>
Current external inventory state

000f53376dd64866b2eb6b9125cf47bb73b50ef9 authored over 7 years ago by Leonid Evdokimov <[email protected]>
airflow: Replace `on-failure` policy with `unless-stopped` so containers are started on reboot

a3b673840b77106ddc609bfa30f45609bbb7d3de authored over 7 years ago by Leonid Evdokimov <[email protected]>
dom0-bootstrap: comment out `bootstap python` task, not required by current VM templates

a8cae87e9f28931cf53f0270878318772f7212af authored over 7 years ago by Leonid Evdokimov <[email protected]>
Replace `sleep 60` with `BatchMode=yes` while using namecheap API through jumphost with fixed IP

511b63c681f9950e7178ff4ae2605ad05c36a4f8 authored over 7 years ago by Leonid Evdokimov <[email protected]>
More comments & better texts

4ec04960a03f580c78056899b0c5eba822264c9c authored over 7 years ago by Leonid Evdokimov <[email protected]>
Current external inventory state

5718384c70ced5f1200ebb6092c533de9715b661 authored over 7 years ago by Leonid Evdokimov <[email protected]>
airflow: step end_date to cleanup datacollector

c72f7725b3d65d85c8a094b02d80b7d2f4638054 authored over 7 years ago by Leonid Evdokimov <[email protected]>
airflow: unclutter logs a bit

487529ec16e413b1578621396b3619c308eae399 authored over 7 years ago by Leonid Evdokimov <[email protected]>
Reordering and cleanup of inventory

* Everything that is not noted with Art-NO-ACCESS, @darkk and I have
access to.
* Move some mac...

a4a77d9c2f338c1dd7e19231ba181a192bed8535 authored over 7 years ago by Arturo Filastò <[email protected]>
Edits to the inventory

9cc1fd747b1dd133e622fbf9b3f8b6e656d0e70d authored over 7 years ago by Arturo Filastò <[email protected]>
Update inventory with more data

fda2b1c80e1f4c9575792ce8649003f6ec2c5817 authored over 7 years ago by Arturo Filastò <[email protected]>
airflow: fix some typos

9576891eca7c350188a5e345e01b220429159b72 authored over 7 years ago by Leonid Evdokimov <[email protected]>
Add another couple of boxes found digging in .ssh/config

48c4b127e11c9f627177feb6b4a484348a01267d authored over 7 years ago by Arturo Filastò <[email protected]>
Annotate ansible/inventory hosts

OK: means darkk and I have access
Art-NO-ACCESS: means I don't have access
CRITICAL: means it's ...

2c0c1f2a25abaf598fba7165066f699f833c4eba authored over 7 years ago by Arturo Filastò <[email protected]>
DAG: shovel:0.0.4, log okayish diff between sanitised and autoclaved

0acaa86d4f2a00b4112083a328f4d31a9d179b42 authored over 7 years ago by Leonid Evdokimov <[email protected]>
DAG: add cleanup of uncompressed private/reports-raw and public/sanitised

487a6f444e4e6437d1ea77c93f4b76a3680ccbde authored over 7 years ago by Leonid Evdokimov <[email protected]>
DAG: step end_date to check shovel:0.0.3 before cleanup

3271eb1c78b32735031d375675467cf70e4ffcaa authored over 7 years ago by Leonid Evdokimov <[email protected]>
Move `docker-trampoline` script from docker image to ansible role files.

59fe9b33cb4c3e80949caf846ffe35be2f291d01 authored over 7 years ago by Leonid Evdokimov <[email protected]>
Fill ansible/inventory with data from DNS and ~darkk/.ssh/config

1dcb10ec1268cf2f7311569b41d74d04f949a44b authored over 7 years ago by Leonid Evdokimov <[email protected]>
Current external inventory state

a321d84d5e8f67949668bd73312c8ff0fd3ab6ff authored over 7 years ago by Leonid Evdokimov <[email protected]>
Current external inventory state

3f1dd9d38ca9c32c47201a55fa78b063a90d0de7 authored over 7 years ago by Leonid Evdokimov <[email protected]>
Add playbook to update inventory files at ${gitroot}/ext/

7cd43897d521b43e6653365f9a2140f63bfda960 authored over 7 years ago by Leonid Evdokimov <[email protected]>
Current external inventory state

369261b52f521f58bb41721961bab169e13d6fba authored over 7 years ago by Leonid Evdokimov <[email protected]>
Bump openobservatory/shovel version, extract bash scripts from DAG to files

237bcbf8fe46b3d8862a47529df7a2f294f8d6b4 authored over 7 years ago by Leonid Evdokimov <[email protected]>
DAG: step end_date & fix af-worker recipe

9320463a20b399344ae0e287349f1e7bc605c401 authored over 7 years ago by Leonid Evdokimov <[email protected]>
Add airflow dags as they were on 2017-02-27

a282cd244ca69e72fef7608be746fbeef4fb1991 authored over 7 years ago by Leonid Evdokimov <[email protected]>
Avoid checking local ansible version for every possible host

afd2901b95aa64d8d6b719af37269ea83f02828a authored over 7 years ago by Leonid Evdokimov <[email protected]>
Comments & whitespace

39df334dfa4ad668dc95087518cc41c9d89a543f authored over 7 years ago by Leonid Evdokimov <[email protected]>
inventorize: more hosts under `dom0-bootstrap` playbook

4261baed3765db75537bafb7ebdca5a305788cfe authored over 7 years ago by Leonid Evdokimov <[email protected]>
Update hellais@ SSH key

c39332d76c99042c0c30c22460033637be6cbc42 authored over 7 years ago by Leonid Evdokimov <[email protected]>
Disable `sudo` for `dom0-bootstap`

`sudo` is enabled by default as part of d7749914 in
ansible/group_vars/gh/vars.yml

c21b9f69570841e940e2b954ecdfe912277d7fdd authored over 7 years ago by Leonid Evdokimov <[email protected]>
Ignore `tags` filter while checking ansible version

a08b86a3a26cbe383066cc2e4d7e5da2688995cb authored over 7 years ago by Leonid Evdokimov <[email protected]>
Add TTY logging to `play` script

22ae6028a8aaa97ddee9d738cc167d1403abec59 authored over 7 years ago by Leonid Evdokimov <[email protected]>
WIP: playbook & Dockerfile for ooni-pipeline

5086eb9d917263be98a64706f880c24ce57b2f61 authored over 7 years ago by Leonid Evdokimov <[email protected]>
Add `adm` role and `dom0-bootstrap` playbook.

The playbook bootstraps user accounts of freshly created VM.

84c919008f284c8f2256dc4e001bc417bd21f0a1 authored over 7 years ago by Leonid Evdokimov <[email protected]>
Add nginx letsencrypt vhost role for get.ooni (#100)

e82ae37a9167cf660198121f8aa5cddbb5734b62 authored over 7 years ago by anadahz <[email protected]>
Add support to deploy a specific version of the repository (#102)

2119d6645ae81563d797357dcb89c1b2e031d7a0 authored over 7 years ago by anadahz <[email protected]>
Merge pull request #88 from TheTorProject/fix/ooni-measurements

Force overwrite any modified files

45dfdcbcdf44f502d2bf552206dc626438090900 authored almost 8 years ago by anadahz <[email protected]>
Force overwrite any modified files

8bc14b8b4ba49249f5b49f04504bb16d6c4b2107 authored almost 8 years ago by anadahz <[email protected]>
Add ooni-explorer ansible role (#86)

* Add ooni-explorer ansible role

* Fix typo, datasources location

* Add support for multip...

c08360bd4a8ae69969f84b31ec19e534bc97513d authored almost 8 years ago by anadahz <[email protected]>
Merge pull request #84 from TheTorProject/feature/letsencrypt-nginx

Add letsencrypt support for nginx

1767e3458ef69d9cdc59c8ed78b49599a929d12c authored almost 8 years ago by anadahz <[email protected]>
Merge branch 'master' into feature/letsencrypt-nginx

666aa1473b10f4a850c0a176dd86b854916693c4 authored almost 8 years ago by anadahz <[email protected]>
Merge pull request #85 from TheTorProject/fix/oonibackend-instances

Fix conditionals, docker image rebuild and deploy on success

42ca60fa019fa8495b0d887e9fec7ee872c7f24f authored almost 8 years ago by anadahz <[email protected]>
Merge pull request #87 from TheTorProject/role/munin

Add munin role

3b9a0648e87c02fe6e194a86c9d4336dd4ca9992 authored almost 8 years ago by anadahz <[email protected]>
Fix graphs, add fcgi and rrdcachec support, add relevant plugins

* Fix HTTP redirect with multiple domains
* Remove default nginx vhost as it conflicts with lets...

3ac7e1d51c16bdf6f9a0142af86afcd737492368 authored almost 8 years ago by anadahz <[email protected]>
Change deprecated option, add full command path

d3bae8a54503c7ff856c30599e9739af6784f09f authored almost 8 years ago by anadahz <[email protected]>
Fix HTTP redirect with multiple domains

e3c9aaaffd3042a977c38cb00ca6ec5e34d110d5 authored almost 8 years ago by anadahz <[email protected]>
Remove default nginx vhost as it conflicts with letsencrypt vhost

2ee371f668f833d96bc0ed14af55fa5afdc60d62 authored almost 8 years ago by anadahz <[email protected]>
Add munin role

* Add support fon no ec2 hosts
* Add support for letsencrypt generated certificates
* Add munin ...

bf56c94519ab67ee08c8bf89d28c35be4a182348 authored almost 8 years ago by anadahz <[email protected]>
Add nginx package requirement

80d2bafe687c00ccfa6b5d4738606b1355c18b32 authored almost 8 years ago by anadahz <[email protected]>
Fix conditionals, docker image rebuild and deploy on success

* The oonibackend docker images should always rebuild and deployed upon
successful build.
* Fi...

c7bc53e71172a392d83e7b52604870e599e27913 authored almost 8 years ago by anadahz <[email protected]>
Add letsencrypt support for nginx

* Generate and auto update letsencrypt certificates for nginx hosts
* Remove unused docker imple...

bc1723676487ca0cb1a14ecba4d83ff701c629ba authored almost 8 years ago by anadahz <[email protected]>
Merge pull request #82 from TheTorProject/fix/oonibackend-instances

Do not try to fetch files unrelated to the instance

26dced0cd49d62a5041452dea1b9eb152cb7ab46 authored almost 8 years ago by anadahz <[email protected]>
Conform to cron naming convention convert variable to uuid

379a698a080b76aed5e0bc61eb2a92fb29f62201 authored almost 8 years ago by anadahz <[email protected]>
Do not try to fetch files unrelated to the instance

8e5b05f4369a3f9138eae20c0d6e49570b50c586 authored almost 8 years ago by anadahz <[email protected]>
Merge pull request #79 from TheTorProject/ansible/oonibackend-instances

Add oonibackend deployment on separate containers

c365f0a984527c4496cc77bfbac9dc7592630096 authored almost 8 years ago by anadahz <[email protected]>
Merge branch 'master' into ansible/oonibackend-instances

edfb553f5c8fc367ae0b294d33cf713c785f60eb authored almost 8 years ago by Arturo Filastò <[email protected]>
Add ooni-measurements deployment ansible role (#81)

f9e4efe4c052c57a2db5dab8811b89ef0bff326f authored almost 8 years ago by anadahz <[email protected]>
Change condiotional syntax, fetch backend files in separate path

As mentioned by @hellais

fe7bd3c9345d92fdb7c350f2ae82b3e6363073e2 authored almost 8 years ago by anadahz <[email protected]>
Set letsencrypt renewal cronjob to daily

As mentioned by @hellais

4dd35c3bf188a64649bc54f80a33e739d2887087 authored almost 8 years ago by anadahz <[email protected]>
Make conditional expressions less confusing

As mentioned by @hellais

dcfb4dd714efdea1a78da9a2664653c280b866e9 authored almost 8 years ago by anadahz <[email protected]>
Add force renewal option, remove certbot package generated cronjob

8f066105a4b93ab58609d4f7d7fd74c975fc043f authored almost 8 years ago by anadahz <[email protected]>
Fix oonibackend instances deployment

* Add docker_py dependency, do not template config inside container
* Add default port numbers i...

76e9ea0281c44e589ca7569e6b15b3db91133398 authored almost 8 years ago by anadahz <[email protected]>
Add oonibackend deployment on separate containers

* Add task to install docker-engine
* Add tasks and change default role behavior to enable insta...

22444ffcd9df745a802874970609021dbfa6392c authored about 8 years ago by anadahz <[email protected]>
Add ansible PostgreSQL installation role (#77)

e4d584ec75386e972f506013b16470f4bb1492a9 authored about 8 years ago by anadahz <[email protected]>
Merge pull request #70 from TheTorProject/doc/psql_replication

Add streaming PostgreSQL replication documentation

12ae8455961efb565165acd476f5750fd2615453 authored about 8 years ago by anadahz <[email protected]>
Docker bouncer should not use cache (#52)

80cdee948a86d683600b375bf20aae396c962f17 authored about 8 years ago by anadahz <[email protected]>