This is the deployment repository for iplimit.irc.mozilla.org
A web app to enable self-service IRC IP connection limit exception creation. Wow, what a mouthful.
Mozilla's IRC network (and many others) have a common problem where, due to spam, we have to limit the number of IRC connections allowed from a single IP address. However, we often have people getting together in groups and working from conferences, hotels, etc, and these people are often blocked from IRC until an admin can manually add an exception. With this self-service site, they're able to add an exception on their own.
Defined in nubis/terraform/main.tf
Defined in nubis/puppet/apache.pp
The produced image is that of a simple Ubuntu Apache webserver running Python/mod_wsgi
Simple ELB
This entire application is protected behind mod_auth_openidc except for a small JSON API dump endpoint under /json, protected by basic authentication
Main application state is persisted in an RDS/MySQL database
Administrative access to it can be gained thru the db-admin service.
Elasticache/Memcache is used to provide persistency for mod_auth_openidc's session cache
The application's configuration file is /var/www/${project_name}/${project_name}.conf and is confd managed.
This application's Consul keys, living under ${project_name}-${environment}/${environment}/config/ and defined in Defined in nubis/terraform/consul.tf
Operator Supplied Apache htaccess content used to control access to the JSON endpoint
DNS endpoint of Elasticache/memcache
TCP port of Elasticache/memcache
The name of the RDS/MySQL Database
The password to the RDS/MySQL Database
The username to the RDS/MySQL Database
The hostname of the RDS/MySQL Database
Hostname:Port of Elasticache/memcache
Generated OpenID passphrase for session encryption
Operator Supplied Auth0 Domain for this application, typically 'mozilla'
Operator Supplied Auth0 Client ID for this application
Operator Supplied Auth0 Client Secret for this application 'mozilla'
Operator Supplied Auth0 Site URL for this application
None
No application specific logs