fix letsencrypt-prod-wild

.vault/vault-keys

@@ -1 +1,4 @@
-55F7FC933CCA4A47F5AA3C802F84305F02B16995
+D749E2966193DF63
+EE3E0A7A87192BB7
+3C8D0C7EF49AB5A3
+388DD8D74903017E

ansible.cfg

@@ -1,3 +1,3 @@
 [defaults]
 roles_path = roles:galaxy-roles:git-roles:ansible-roles:~/.ansible/roles
-# vault_password_file = .vault/vault-open.sh
+vault_password_file = .vault/vault-open.sh

files/manifests/secret-digitalocean-dns.yaml

@@ -1 +0,0 @@
-dop_v1_cf3fddc6f6c9e008e62c454a3db645038634c253a526a3bbbcf27618789ae587

files/manifests/wildcard-pwa-realitynetwork.yaml

@@ -1,15 +1,15 @@
 apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:
-  name: l.stg.earthball.xyz
+  name: pwa.realitynetwork.store
   namespace: default
 spec:
-  secretName: l.stg.earthball.xyz
+  secretName: pwa.realitynetwork.store
   issuerRef:
     name: letsencrypt-prod-wild
     kind: ClusterIssuer
     group: cert-manager.io
-  commonName: "*.l.stg.earthball.xyz"
+  commonName: "*.pwa.realitynetwork.store"
   dnsNames:
-    - "l.stg.earthball.xyz"
+    - "pwa.realitynetwork.store"
-    - "*.l.stg.earthball.xyz"
+    - "*.pwa.realitynetwork.store"

group_vars/all/vault.yml

@@ -1,2 +1,7 @@
----
+$ANSIBLE_VAULT;1.1;AES256
-support_email: someone@example.com
+35636534633536663965623866666430613934363036343661343362346534353764326662396365
+3039363533323464353932373436356362353261343836620a616132336266346238336338653434
+35616334333832356134353466623333363235373066396663363839656663326666323164393265
+6338323565323936350a356136353231613765366531366431363864356565653938613963656233
+66613965396531636331353463333436376337363932393033303937383263336637663435373262
+3361356561306233303030313438363637343433356463626536

group_vars/lx_cad/k8s-vault.yml

@@ -1,10 +0,0 @@
----
-k8s_cluster_token: 18cd2efad6ba0df6cfe1e559ffacb0e2
-
-k8s_secrets:
-  - name: digitalocean-dns
-    type: template
-    namespace: cert-manager
-    secrets:
-      - key: access-token
-        value: dop_v1_cf3fddc6f6c9e008e62c454a3db645038634c253a526a3bbbcf27618789ae587

group_vars/rnt_cad/k8s-vault.yml

@@ -0,0 +1,20 @@
+$ANSIBLE_VAULT;1.1;AES256
+63643362636263346139663662346435343861333538623731363763303034386334396261383233
+6233306462326530343561333665656330663134653466330a353532613764633361623966396161
+33396332363966623862373036653862626237396631623637613134373266626534656334306465
+3537653237303461620a386534333031366366323332646363613265323531356331633338356430
+61396561313334633133623066613762613966366633323435656464303765353231373461363664
+61616433306361623631373530366331393132326663303532323461623962393739343364373735
+32313365646231313334373038353536333438386337623962623364313732663030396364346435
+35653663633366373036646435323865666139653133636439613034613733333830306339383936
+32333139646135316630643338653564613530623465313862396634356363373064366366343364
+39313638323631393966373263396361613331646162313736346233656137666563303939323933
+38626434396566333362623638663634393934623030633633363563343037396433386531356635
+31323731383161313330333337656536383630616331653637306238316365643930336233383433
+34643864373936393932356630376265316234333737353531653431313237306335383866656232
+37323064656134376237346436396565633732613364616366666638333836333331356534623166
+37633039336533373536356562663739316138633431366136653639343239396432636162353061
+35363133656131393366333734653634616430366531656230616637666136333161343633373839
+39636261396638666361333534643065366636313530623563663839643338633038613133336239
+35343636353135323033623037613637313464353733393366336435663835623030653636323734
+396637393534353535623266386361303332

group_vars/rnt_cad/k8s.yml

@@ -1,6 +1,6 @@
 ---
-k8s_cluster_name: lx-cad
+k8s_cluster_name: default
-k8s_cluster_url: lx-cad-cluster-control.l.stg.earthball.xyz
+k8s_cluster_url: rnt-cad-cluster-control.realitynetwork.store
 k8s_taint_servers: true
 
 k8s_acme_email: "{{ support_email }}"
@@ -41,6 +41,6 @@ k8s_manifests:
         secret_key: access-token
 
   # initiate wildcard cert
-  - name: l.stg.earthball.xyz
+  - name: pwa.realitynetwork.store
     type: file
-    source: wildcard-l-earthball.yaml
+    source: wildcard-pwa-realitynetwork.yaml

host_vars/rnt-cad-cluster-control/firewalld.yml

@@ -2,7 +2,7 @@
 firewalld_add:
   - name: public
     interfaces:
-      - eth0
+      - enp9s0
     services:
       - http
       - https
@@ -13,5 +13,5 @@ firewalld_add:
     sources:
       - 10.42.0.0/16
       - 10.43.0.0/16
-      - 146.190.250.234/32
+      - 142.93.110.163/32
-      - 138.197.140.188/32
+      - 147.182.158.116/32

host_vars/rnt-cad-cluster-worker/firewalld.yml

@@ -2,7 +2,7 @@
 firewalld_add:
   - name: public
     interfaces:
-      - eth0
+      - enp9s0
     services:
       - http
       - https
@@ -11,5 +11,5 @@ firewalld_add:
     sources:
       - 10.42.0.0/16
       - 10.43.0.0/16
-      - 146.190.250.234/32
+      - 142.93.110.163/32
-      - 138.197.136.93/32
+      - 147.182.150.60/32

host_vars/rnt-daemon/firewalld.yml

@@ -2,7 +2,7 @@
 firewalld_add:
   - name: public
     interfaces:
-      - eth0
+      - ens3
     services:
       - http
       - https
@@ -13,5 +13,5 @@ firewalld_add:
 
   - name: trusted
     sources:
-      - 138.197.140.188/32
+      - 147.182.150.60/32
-      - 138.197.136.93/32
+      - 147.182.158.116/32

host_vars/rnt-daemon/nginx.yml

@@ -6,16 +6,16 @@ nginx_proxy_send_timeout: 1200
 nginx_proxy_connection_timeout: 75
 
 nginx_sites:
-  - name: lx-console
+  - name: rnt-console
-    url: lx-console.l.stg.earthball.xyz
+    url: rnt-console.realitynetwork.store
     upstream: http://localhost:8080
     template: basic-proxy
     ssl: true
 
-  - name: lx-daemon
+  - name: rnt-daemon
-    url: lx-daemon.l.stg.earthball.xyz
+    url: rnt-daemon.realitynetwork.store
     upstream: http://localhost:9473
     configs:
-      - rewrite ^/deployer(/.*)? https://webapp-deployer.l.stg.earthball.xyz permanent
+      - rewrite ^/deployer(/.*)? https://webapp-deployer.pwa.realitynetwork.store permanent
     template: websocket-proxy
     ssl: true

hosts

@@ -1,14 +1,14 @@
 [all]
-lx-daemon ansible_host=146.190.250.234
+rnt-daemon ansible_host=142.93.110.163
-lx-cad-cluster-control ansible_host=138.197.136.93
+rnt-cad-cluster-control ansible_host=147.182.150.60
-lx-cad-cluster-worker ansible_host=138.197.140.188
+rnt-cad-cluster-worker ansible_host=147.182.158.116
 
 [so]
-lx-daemon
+rnt-daemon
 
-[lx_cad]
+[rnt_cad]
-lx-cad-cluster-control k8s_node_type=bootstrap
+rnt-cad-cluster-control k8s_node_type=bootstrap
-lx-cad-cluster-worker k8s_node_type=agent k8s_pod_limit=1024 k8s_external_ip=138.197.140.188
+rnt-cad-cluster-worker k8s_node_type=agent k8s_pod_limit=1024 k8s_external_ip=147.182.158.116
 
 [k8s:children]
-lx_cad
+rnt_cad