-
Notifications
You must be signed in to change notification settings - Fork 17
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
For release v1.6.0 #1172
For release v1.6.0 #1172
Changes from all commits
236a80c
62fcfdf
f15cc7a
0817015
b71492f
5ed0d6f
db1e9c9
3bfacbe
91a756b
492332e
a784ce9
b19c840
1f41763
cc0383f
2edc168
8cae68f
534869d
6cd0aa1
321bba0
dd7daf5
e82ffd8
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -12,8 +12,6 @@ all: | |
# This configuration variable blocks all access to the server, including SSH, except from the IP addresses specified below. | ||
# This should always be set when configuring a production server if there is no other firewall in front of the server. | ||
# SSH and other services should never be exposed to the public internet. | ||
only_allow_access_from_addresses: | ||
- 159.89.14.13 | ||
# Enable backups | ||
enable_backups: true | ||
backup_server_remote_target_directory: /home/backup/backups | ||
|
@@ -36,28 +34,31 @@ all: | |
- ssh-rsa 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 | ||
state: present | ||
sudoer: true | ||
- name: shoumik | ||
ssh_keys: | ||
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINRSRTqm3vOfjyTutISEtbVp7ZddoWa9NZDZLeWZGzLy dsi@dsi-Inspiron-15-3511 | ||
state: present | ||
sudoer: true | ||
|
||
docker-manager-first: | ||
hosts: | ||
farajaland-prod: | ||
ansible_host: '165.22.205.62' | ||
farajaland-prod-1: | ||
ansible_host: '188.245.160.165' | ||
data_label: data1 | ||
ansible_ssh_common_args: '-J [email protected] -o StrictHostKeyChecking=no' | ||
|
||
# We recommend you add 2-4 workers for a scaled production deployment | ||
# This should depend on the size of your country and the number of end users. | ||
# If you are only using one production worker for very small countries or small pilot projects, replace with an empty block like so: docker-workers: {} | ||
docker-workers: | ||
hosts: | ||
farajaland-prod-02: | ||
ansible_host: '178.128.245.255' | ||
farajaland-prod-2: | ||
ansible_host: '49.13.124.87' | ||
data_label: data2 | ||
ansible_ssh_common_args: '-J [email protected] -o StrictHostKeyChecking=no' | ||
|
||
backups: | ||
hosts: | ||
farajaland-backup: | ||
ansible_host: '64.226.95.104' | ||
ansible_host: '188.245.61.69' | ||
# Written by provision pipeline. Assumes "backup" environment | ||
# exists in Github environments | ||
ansible_ssh_private_key_file: /tmp/backup_ssh_private_key |
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -58,6 +58,11 @@ all: | |
- ssh-rsa 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 [email protected] | ||
state: present | ||
sudoer: true | ||
- name: shoumik | ||
ssh_keys: | ||
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINRSRTqm3vOfjyTutISEtbVp7ZddoWa9NZDZLeWZGzLy dsi@dsi-Inspiron-15-3511 | ||
state: present | ||
sudoer: true | ||
# If the machine is repurposed to also be the backup host, we need to add more keys to the authorized_keys file so that | ||
# when the application servers get provisioned, the provision user of this machine can be used. | ||
additional_keys_for_provisioning_user: | ||
|
@@ -66,7 +71,7 @@ all: | |
docker-manager-first: | ||
hosts: | ||
farajaland-qa: | ||
ansible_host: '165.22.110.53' | ||
ansible_host: '5.223.46.129' | ||
data_label: data1 | ||
|
||
# QA and staging servers are not configured to use workers. | ||
|
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. @rikukissa Do we really need to make a backup of the staging server? Does it bring any benefits to us? There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. No, I don't think we do. As long as staging restores backups from prod we're solid |
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -13,8 +13,6 @@ all: | |
# OpenCRVS should never be exposed to the public internet. If this is not possible to organise, | ||
# then this should always be set when configuring a production server if there is no other firewall in front of the server. | ||
# BE CAREFUL! This will block all SSH traffic except from the IP addresses listed here. | ||
only_allow_access_from_addresses: | ||
- 159.89.14.13 | ||
# Enable backups but write them to a different location from where production writes them | ||
enable_backups: true | ||
backup_server_remote_target_directory: /home/backup/staging-backups | ||
|
@@ -64,19 +62,23 @@ all: | |
- ssh-rsa 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 [email protected] | ||
state: present | ||
sudoer: true | ||
- name: shoumik | ||
ssh_keys: | ||
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINRSRTqm3vOfjyTutISEtbVp7ZddoWa9NZDZLeWZGzLy dsi@dsi-Inspiron-15-3511 | ||
state: present | ||
sudoer: true | ||
docker-manager-first: | ||
hosts: | ||
farajaland-staging: | ||
ansible_host: '167.172.105.70' | ||
ansible_host: '5.223.47.53' | ||
data_label: data1 | ||
ansible_ssh_common_args: '-J [email protected] -o StrictHostKeyChecking=no' | ||
|
||
# QA and staging servers are not configured to use workers. | ||
docker-workers: {} | ||
backups: | ||
hosts: | ||
farajaland-qa: | ||
ansible_host: '64.226.95.104' | ||
farajaland-backup: | ||
ansible_host: '188.245.61.69' | ||
# Written by provision pipeline. Assumes "backup" environment | ||
# exists in Github environments | ||
ansible_ssh_private_key_file: /tmp/backup_ssh_private_key |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can we clean this file off of all the old IPs?