blob: d32030917f68eb7da40941520f3e8a572efc7726 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
|
---
title: "Installation notes of eventline on FreeBSD"
description: My production setup
date: 2022-09-15
tags:
- Eventline
- FreeBSD
- PostgreSQL
---
## Introduction
Please refer to [the official website](https://www.exograd.com/doc/eventline/handbook.html#_deployment_and_configuration) documentation for an up to date installation guide. This page only lists what I had to do at the time to setup eventline and adapt it to my particular setup.
## Preparing the postgresql database
A Postgresql database version 14 or above is the only dependency, let's install it:
```sh
pkg install postgresql14-server postgresql14-contrib
/usr/local/etc/rc.d/postgresql enable
/usr/local/etc/rc.d/postgresql initdb
/usr/local/etc/rc.d/postgresql start
```
Now let's provision a database:
```sh
su - postgres
createuser -W eventline
createdb -O eventline eventline
```
Connect to the database and activate the pgcryto extension:
```sql
psql -U eventline -W eventline
CREATE EXTENSION pgcrypto;
```
## Eventline
Exograd (the company behind eventline) maintains a FreeBSD repository, let's use it:
```sh
curl -sSfL -o /usr/local/etc/pkg/repos/exograd-public.conf \
https://pkg.exograd.com/public/freebsd/exograd.conf
pkg update
pkg install eventline
```
Edit the `/usr/local/etc/eventline/eventline.yaml` configuration file:
```yaml
data_directory: "/usr/local/share/eventline"
api_http_server:
address: "localhost:8085"
web_http_server:
address: "localhost:8087"
web_http_server_uri: "https://eventline.adyxax.org/"
pg:
uri:
"postgres://eventline:XXXXXXXX@localhost:5432/eventline"
# You need to generate a random encryption, for example using OpenSSL:
# openssl rand -base64 32
encryption_key: "YYYYYYYY"
```
Now start eventline with:
```sh
service eventline enable
service eventline start
```
## DNS record
Since all configuration regarding this application is in terraform, so is the dns:
```hcl
resource "cloudflare_record" "eventline-cname" {
zone_id = lookup(data.cloudflare_zones.adyxax-org.zones[0], "id")
name = "eventline"
value = "10.1.2.5"
type = "A"
proxied = false
}
```
This IP is the wireguard endpoint on the server hosting eventline. Having this hostname is important for the ssl certificate validation, otherwise firefox will complain!
## Nginx configuration
This nginx configuration listens on the ip of a wireguard interface:
```cfg
server {
listen 10.1.2.5:80;
server_name eventline.adyxax.org;
location / {
return 308 https://$server_name$request_uri;
}
}
# webui
server {
listen 10.1.2.5:443 ssl;
server_name eventline.adyxax.org;
location / {
proxy_pass http://127.0.0.1:8087;
include headers_secure.conf;
}
ssl_certificate adyxax.org.fullchain;
ssl_certificate_key adyxax.org.key;
}
# api-server
server {
listen 10.1.2.5:8085 ssl;
server_name eventline.adyxax.org;
location / {
proxy_pass http://127.0.0.1:8085;
include headers_secure.conf;
}
ssl_certificate adyxax.org.fullchain;
ssl_certificate_key adyxax.org.key;
}
```
## Admin account's password
Go to the domain you configured (https://eventline.adyxax.org/ for me) and login to your new eventline with username `admin` and password `admin`. Then go to `Account` and click `Change password`.
## Backups
Backups are run with borg and stored on `yen.adyxax.org`. I used my [borg ansible role]({{< ref "docs/adyxax.org/backups/borg-ansible-role.md" >}}) for that. There is only one backup job: a pg_dump of eventline's postgresql database
## Final words
Eventline is very simple but there is always some sysadmin work to do if you want things done well.
Also I cleaned up some of my scripts in [a public repository](https://git.adyxax.org/adyxax/ev-scripts/tree/) and will detail my eventline jobs implementation in a next article.
I am now toying with eventline to orchestrate migrations and tasks for which I relied on ansible, I feel I can simplify and improve things this way!
|
