Improve provision_server.sh
This commit is contained in:
Sebastian Serth
@ -5,17 +5,15 @@
|
||||
######## VERSION INFORMATION ########
|
||||
|
||||
postgres_version=12
|
||||
node_version=12
|
||||
node_version=14
|
||||
ruby_version=2.7.0
|
||||
rails_version=5.2.4.1
|
||||
rails_version=5.2.4.3
|
||||
geckodriver_version=0.26.0
|
||||
|
||||
########## INSTALL SCRIPT ###########
|
||||
|
||||
# codeocean user
|
||||
sudo adduser codeocean
|
||||
usermod -a -G rvm codeocean
|
||||
usermod -a -G docker codeocean
|
||||
|
||||
# PostgreSQL
|
||||
wget --quiet -O - https://www.postgresql.org/media/keys/ACCC4CF8.asc | sudo apt-key add -
|
||||
@ -41,11 +39,13 @@ curl -fsSL https://nginx.org/keys/nginx_signing.key | sudo apt-key add -
|
||||
|
||||
# Install packages
|
||||
apt-get -qq update
|
||||
apt-get -qq -y install postgresql-client postgresql-$postgres_version postgresql-server-dev-$postgres_version yarn nodejs nginx
|
||||
apt-get -qq -y install postgresql-client postgresql-$postgres_version postgresql-server-dev-$postgres_version
|
||||
apt-get -qq -y install yarn nodejs nginx libpq-dev
|
||||
|
||||
# RVM
|
||||
gpg --recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3 7D2BAF1CF37B13E2069D6956105BD0E739499BDB
|
||||
curl -sSL https://get.rvm.io | bash -s stable
|
||||
usermod -a -G rvm codeocean
|
||||
|
||||
tee -a /etc/systemd/system/docker.service.d/override.conf <<EOF
|
||||
[Service]
|
||||
@ -58,6 +58,21 @@ service docker restart
|
||||
|
||||
# Docker
|
||||
curl -sSL https://get.docker.com/ | sudo sh
|
||||
usermod -a -G docker codeocean
|
||||
|
||||
tee -a /etc/docker/daemon.json <<EOF
|
||||
{
|
||||
"userns-remap": "default"
|
||||
}
|
||||
EOF
|
||||
|
||||
|
||||
tee -a /etc/sysctl.d/90-docker-keys-userns.conf <<EOF
|
||||
#
|
||||
# Increases the session key quota per user. Otherwise, some docker containers would not start with the following error:
|
||||
# OCI runtime exec failed: exec failed: container_linux.go:348: starting container process caused "could not create session key: disk quota exceeded": unknown
|
||||
kernel.keys.maxkeys=100000
|
||||
EOF
|
||||
|
||||
# Pull docker images
|
||||
docker pull openhpi/co_execenv_r
|
||||
@ -100,17 +115,23 @@ proxy_set_header X-Forwarded-Proto \$scheme;
|
||||
EOF
|
||||
|
||||
# $ is escaped to \$
|
||||
sudo tee /etc/nginx/conf.d/codeocean.cont <<EOF
|
||||
sudo tee /etc/nginx/conf.d/codeocean.conf <<EOF
|
||||
upstream puma {
|
||||
server unix:///var/www/app/shared/tmp/sockets/puma.sock;
|
||||
}
|
||||
|
||||
server {
|
||||
listen 80;
|
||||
server_name codeocean-staging.openhpi.de;
|
||||
server_name codeocean.openhpi.de;
|
||||
|
||||
root /var/www/app/current/public;
|
||||
|
||||
error_page 500 502 503 504 /custom_50x.html;
|
||||
location = /custom_50x.html {
|
||||
root /usr/share/nginx/html;
|
||||
internal;
|
||||
}
|
||||
|
||||
location / {
|
||||
try_files \$uri @puma;
|
||||
}
|
||||
@ -125,7 +146,7 @@ server {
|
||||
proxy_set_header X-Forwarded-Proto 'https';
|
||||
proxy_set_header X-Forwarded-Ssl on;
|
||||
proxy_set_header X-Forwarded-Port 443;
|
||||
proxy_set_header Origin https://codeocean-staging.openhpi.de;
|
||||
proxy_set_header Origin https://codeocean.openhpi.de;
|
||||
}
|
||||
|
||||
location @puma {
|
||||
@ -142,14 +163,82 @@ server {
|
||||
add_header Referrer-Policy 'unsafe-url';
|
||||
}
|
||||
|
||||
location ~* ^/assets/ {
|
||||
location ~* ^/assets/ {
|
||||
expires 1y;
|
||||
add_header Cache-Control public;
|
||||
}
|
||||
}
|
||||
}
|
||||
EOF
|
||||
|
||||
service nginx restart
|
||||
|
||||
tee -a /etc/systemd/system/dockercontainerpool.service <<EOF
|
||||
[Unit]
|
||||
Description=DockerContainerPool
|
||||
|
||||
[Service]
|
||||
WorkingDirectory=/var/www/dockercontainerpool/current
|
||||
User=codeocean
|
||||
Group=docker
|
||||
EnvironmentFile=/var/www/dockercontainerpool/shared/config/.env
|
||||
Environment=MALLOC_ARENA_MAX=2
|
||||
ExecStart=/usr/local/rvm/bin/rvm default do bundle exec puma -C /var/www/dockercontainerpool/shared/puma.rb
|
||||
RestartSec=10
|
||||
TimeoutStartSec=5
|
||||
TimeoutStopSec=60
|
||||
Restart=always
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
|
||||
|
||||
tee -a /etc/systemd/system/codeocean.service <<EOF
|
||||
[Unit]
|
||||
Description=CodeOcean
|
||||
|
||||
[Service]
|
||||
WorkingDirectory=/var/www/app/current
|
||||
User=codeocean
|
||||
Group=docker
|
||||
EnvironmentFile=/var/www/app/shared/config/.env
|
||||
Environment=RAILS_LOG_TO_STDOUT=true
|
||||
Environment=MALLOC_ARENA_MAX=2
|
||||
ExecStart=/usr/local/rvm/bin/rvm default do bundle exec puma -C /var/www/app/shared/puma.rb
|
||||
RestartSec=2
|
||||
TimeoutSec=5
|
||||
Restart=always
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
|
||||
|
||||
|
||||
tee -a /usr/share/nginx/html/custom_50x.html <<EOF
|
||||
<html>
|
||||
<head>
|
||||
<meta charset="utf-8">
|
||||
</head>
|
||||
<body>
|
||||
<h1>Maintenance! <i>Wartungsarbeiten!</i></h1>
|
||||
<p>CodeOcean is temporarily unavailable and will be back soon! We're aware of this issue and you do not need to take further steps (ask a question in the course forum or create a helpdesk ticket). Please check back in about five minutes. Your last progress has been saved and will be available once you return.</p></br>
|
||||
<p><i>CodeOcean ist derzeit nicht verfügbar und wird in Kürze wieder erreichbar sein. Wir wissen von der Nichtverfügbarkeit, sodass keine weiteren Schritte (wie eine Frage im Forum zu posten oder ein Helpdesk-Ticket zu erstellen) nötig sind. Bitte versuchen Sie in ungefähr fünf Minunten erneut, die Lernplattform aus dem Kurs heraus zu öffnen. Ihr Bearbeitungsstand wurde gespeichert und wird Ihnen beim Fortsetzen der Aufgabe wieder zur Verfügung stehen.</i></p></br>
|
||||
<p>Kind regards, <i>Viele Grüße</i></p>
|
||||
<p>Teaching Team</p>
|
||||
</body>
|
||||
</html>
|
||||
EOF
|
||||
|
||||
|
||||
mkdir /var/www
|
||||
chown -R www-data:codeocean /var/www
|
||||
chmod -R 775 /var/www
|
||||
|
||||
certbot certonly --webroot -w /var/www/acme-challenges/ --email email@example.org --rsa-key-size 4096 --agree-tos -d codeocean.openhpi.de
|
||||
systemctl daemon-reload
|
||||
|
||||
# Deploy via Capistrano (both, CodeOcean and DockerContainerPool) and symlink Docker files:
|
||||
# ln -s /var/www/app/current/tmp/files/staging /var/www/dockercontainerpool/current/tmp/files/staging
|
||||
|
||||
# Find more files in codeocean-deploy/config/backup
|
||||
Reference in New Issue
Block a user