OpenNeo/openneo-analytics
OpenNeo/openneo-analytics
1
0
Fork 0
Code Pull requests Activity

Compare commits

base: OpenNeo:6966727117aceb399ade3b81cac6a1cc94bb58bf
Branches Tags
OpenNeo:main
..
compare: OpenNeo:8633124883aafa81d52c497351b8e4aae99a399f
Branches Tags
OpenNeo:main

2 commits
6966727117 ... 8633124883

Author SHA1 Message Date
Emi Matchu
8633124883 Oops, fix serving over IPv6 (and therefore HTTPS cert renewal!) 
Oh wow, TIL you need a special invocation in nginx to listen on IPv6 as
well as IPv4. This was both presumably breaking clients trying to
connect over IPv6 (I guess we never ran into that in a browser?), but
also breaking certbot's certificate renewal attempts, because Let's
Encrypt prefers IPv6 when possible. Okay!
 2024-02-13 08:38:53 -08:00
Emi Matchu
72aba0d579 Replace run.sh with an equivalent ansible.cfg 
I've learned some more about Ansible, and how to use `ansible.cfg` to
set up `ansible-playbook` to do the same thing as our `run.sh` was
doing! Same number of files, less overhead for the workflow's weirdness.
 2024-02-13 08:36:54 -08:00
4 changed files with 9 additions and 5 deletions
Show stats Expand all files Collapse all files

4
README.md
View file

@ -18,9 +18,9 @@ these are all very basic commands, captured in script form for convenience!)
- `setup-plausible.yml`: Sets up the Plausible server itself, as a `systemd` - `setup-plausible.yml`: Sets up the Plausible server itself, as a `systemd`
service running Plausible's official Docker container. service running Plausible's official Docker container.
You can run them individually, or all at once, with `run.sh`: You can run them individually, or all at once, with `ansible-playbook`:
run.sh setup-all.yml ansible-playbook setup-all.yml
If you're interested in setting up your own Plausible service, this could be If you're interested in setting up your own Plausible service, this could be
useful as a starting point, there's not much custom here! Just a couple things useful as a starting point, there's not much custom here! Just a couple things

5
ansible.cfg Normal file
View file

@ -0,0 +1,5 @@
[defaults]
inventory = inventory.cfg
[privilege_escalation]
become_ask_pass = True

1
run.sh
View file

@ -1 +0,0 @@
ansible-playbook -i inventory.cfg --ask-become-pass $@

4
setup-nginx.yml
View file

@ -29,7 +29,7 @@
content: | content: |
server { server {
server_name analytics.openneo.net; server_name analytics.openneo.net;
listen 80; listen [::]:80;
if ($host = analytics.openneo.net) { if ($host = analytics.openneo.net) {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} }
@ -37,7 +37,7 @@
server { server {
server_name analytics.openneo.net; server_name analytics.openneo.net;
listen 443 ssl; listen [::]:443 ssl;
ssl_certificate /etc/letsencrypt/live/analytics.openneo.net/fullchain.pem; ssl_certificate /etc/letsencrypt/live/analytics.openneo.net/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/analytics.openneo.net/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/analytics.openneo.net/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf; include /etc/letsencrypt/options-ssl-nginx.conf;