migrate discord.ocaml.org to a new cluster

[avsm]

See ocaml/ocaml.org#1169 for the overall tracking issue.

There is a chat bridge (matterbridge) which operates as a bot for the OCaml Discord community. This is currently running on a Rackspace host and needs to be migrated away. This is a good chance to see if we can configure it as as a Dockerfile instead of directly on the VM.

I set this up originally in April 2018 (see infrastructure thread) in response to a request from @bluddy.

@bluddy: would you be able to comment on whether you can convert this to a Dockerfile easily? Feel free to email me privately on anil@recoil.org if it involves any sensitive infrastructure details.

[bluddy]

Off the top of my head, this should be doable. The only thing that needs to be kept secret is the discord webhook uri. Currently this resides in the VM itself and in the admin panel on discord. Is there a method for keeping things secret with a dockerfile?

…

On Mon, Sep 28, 2020, 6:59 AM Anil Madhavapeddy ***@***.***> wrote: *See #1169 <ocaml/ocaml.org#1169> for the overall tracking issue.* There is a chat bridge (matterbridge) which operates as a bot for the OCaml Discord community. This is currently running on a Rackspace host and needs to be migrated away. This is a good chance to see if we can configure it as as a Dockerfile instead of directly on the VM. I set this up originally in April 2018 (see infrastructure thread <http://lists.ocaml.org/pipermail/infrastructure/2018-April/000662.html>) in response to a request from @bluddy <https://github.com/bluddy>. @bluddy <https://github.com/bluddy>: would you be able to comment on whether you can convert this to a Dockerfile easily? Feel free to email me privately on ***@***.*** if it involves any sensitive infrastructure details. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <ocaml/ocaml.org#1175>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAAVOQ7DFJBFGGZHY4NR42LSIBT7ZANCNFSM4R4LOI6Q> .

[avsm]

Yes, you can use Docker secrets for this (https://docs.docker.com/engine/swarm/secrets/). It's essentially just a file on the container filesystem, so if you could create a Dockerfile that assumes the webhook uri is in a particular place, I can take care of hooking it into the cluster deployment.

[avsm]

@bluddy, do you have a sense of when you can get me this Dockerfile? I need to plan the migration to the new cluster.

[bluddy]

I've started it but haven't yet had a chance to test it out.

…

On Tue, Oct 6, 2020 at 11:45 AM Anil Madhavapeddy ***@***.***> wrote: @bluddy <https://github.com/bluddy>, do you have a sense of when you can get me this Dockerfile? I need to plan the migration to the new cluster. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <ocaml/ocaml.org#1175 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAAVOQZWRWLLIGRQB5I7TADSJM3Q5ANCNFSM4R4LOI6Q> .

[avsm]

Checking in on this. The Discord server is one of the few things keeping me paying for the Rackspace Cloud account...

[avsm]

@bluddy - I'm going to have to destroy this virtual machine in a month or so. If you don't get back to me, I'll recreate a new Discord bridge, but the old secret will be gone.

[bluddy]

@avsm I replied to your private email.