Merge pull request #6 from tristcoil/develop

[ZEN] v0.3.6 build

Author: tristcoil

CICD/ansible/certbot_playbook_primary.yml

@@ -0,0 +1,70 @@
+---
+- name: Install Nginx on Ubuntu 24.04
+  become: yes
+  hosts: all
+  tasks:
+    - name: Install snapd
+      apt:
+        name: snapd
+        state: present
+
+    - name: Ensure snapd is enabled
+      systemd:
+        name: snapd
+        enabled: yes
+
+    - name: Ensure snapd is running
+      service:
+        name: snapd
+        state: started
+        enabled: yes
+
+    - name: Install Certbot
+      command: snap install --classic certbot
+
+    - name: Create symbolic link for Certbot
+      file:
+        src: /snap/bin/certbot
+        dest: /usr/bin/certbot
+        state: link
+
+    - name: Create a simple default Nginx configuration
+      copy:
+        content: |
+          server {
+              listen 80 default_server;
+              listen [::]:80 default_server;
+
+              server_name _;
+
+              location / {
+                  return 200 "Welcome to Nginx default server!";
+                  add_header Content-Type text/plain;
+              }
+          }
+        dest: /etc/nginx/sites-enabled/default
+        owner: root
+        group: root
+        mode: '0644'
+
+
+    - name: Obtain SSL certificates for hanabira.org
+      command: certbot --nginx -d hanabira.org --non-interactive --agree-tos -m [email protected]
+
+    - name: Remove default Nginx configuration file
+      file:
+        path: /etc/nginx/sites-enabled/default
+        state: absent
+
+    - name: Copy the Nginx configuration file for hanabira.org
+      copy:
+        src: nginx/hanabira.org
+        dest: /etc/nginx/sites-enabled/hanabira.org
+        owner: root
+        group: root
+        mode: '0644'
+
+    - name: Restart Nginx after copying configuration
+      service:
+        name: nginx
+        state: restarted

CICD/ansible/certbot_playbook_secondary.yml

@@ -0,0 +1,70 @@
+---
+- name: Install Nginx on Ubuntu 24.04
+  become: yes
+  hosts: all
+  tasks:
+    - name: Install snapd
+      apt:
+        name: snapd
+        state: present
+
+    - name: Ensure snapd is enabled
+      systemd:
+        name: snapd
+        enabled: yes
+
+    - name: Ensure snapd is running
+      service:
+        name: snapd
+        state: started
+        enabled: yes
+
+    - name: Install Certbot
+      command: snap install --classic certbot
+
+    - name: Create symbolic link for Certbot
+      file:
+        src: /snap/bin/certbot
+        dest: /usr/bin/certbot
+        state: link
+
+    - name: Create a simple default Nginx configuration
+      copy:
+        content: |
+          server {
+              listen 80 default_server;
+              listen [::]:80 default_server;
+
+              server_name _;
+
+              location / {
+                  return 200 "Welcome to Nginx default server!";
+                  add_header Content-Type text/plain;
+              }
+          }
+        dest: /etc/nginx/sites-enabled/default
+        owner: root
+        group: root
+        mode: '0644'
+
+
+    - name: Obtain SSL certificates for hanabira-dev.org
+      command: certbot --nginx -d hanabira-dev.org --non-interactive --agree-tos -m [email protected]
+
+    - name: Remove default Nginx configuration file
+      file:
+        path: /etc/nginx/sites-enabled/default
+        state: absent
+
+    - name: Copy the Nginx configuration file for hanabira-dev.org
+      copy:
+        src: nginx/hanabira-dev.org
+        dest: /etc/nginx/sites-enabled/hanabira-dev.org
+        owner: root
+        group: root
+        mode: '0644'
+
+    - name: Restart Nginx after copying configuration
+      service:
+        name: nginx
+        state: restarted

CICD/ansible/files/docker-compose_prod.yml

@@ -0,0 +1,71 @@
+version: '3.8'
+
+services:
+  frontend-next:
+    image: coil/hanabira.org:frontend-next_blue
+    network_mode: "bridge"
+    extra_hosts:
+      - "localhost:host-gateway"    
+      - "host.docker.internal:host-gateway"
+    ports:
+      - "127.0.0.1:3000:3000" # Bind to localhost only
+    environment:
+      GA_MEASUREMENT_ID: 'G-P4SLLVSNCX' # Google Analytics measurement ID
+      #REACT_APP_HOST_IP: host.docker.internal # ${HOST_IP}
+      REACT_APP_HOST_IP: 'express-db'
+        #    depends_on:
+        # - express-db
+        #- flask-dynamic-db
+        #- dictionary-db
+    restart: unless-stopped
+    networks:
+      - hanabira-network
+
+  express-db:
+    image: coil/hanabira.org:express-db_blue
+    network_mode: "bridge"
+    extra_hosts:
+      - "localhost:host-gateway"
+      - "host.docker.internal:host-gateway"
+    ports:
+      - "127.0.0.1:8000:8000" # Bind to localhost only
+    environment:
+      # REACT_APP_HOST_IP: host.docker.internal # ${HOST_IP}
+      REACT_APP_HOST_IP: 'express-db'
+    restart: unless-stopped
+    networks:
+      - hanabira-network
+
+  flask-dynamic-db:
+    image: coil/hanabira.org:flask-dynamic-db_blue
+    network_mode: "bridge"
+    extra_hosts:
+      - "localhost:host-gateway"
+      - "host.docker.internal:host-gateway"
+    volumes:
+      - /opt/data/user_db:/data/db
+    ports:
+      - "127.0.0.1:5100:5100" # Bind to localhost only
+    restart: unless-stopped
+    networks:
+      - hanabira-network
+
+  dictionary-db:
+    image: coil/hanabira.org:dictionary-db_blue
+    network_mode: "bridge"
+    extra_hosts:
+      - "localhost:host-gateway"
+      - "host.docker.internal:host-gateway"
+    volumes:
+      - './config_dummy.json:/app/config.json'
+    ports:
+      - "127.0.0.1:5200:5200" # Bind to localhost only
+    restart: unless-stopped
+    networks:
+      - hanabira-network
+
+volumes:
+  user_db:
+
+networks:
+  hanabira-network:

CICD/ansible/files/nginx/hanabira-dev.org

@@ -0,0 +1,76 @@
+# Redirect HTTP traffic to HTTPS
+server {
+    if ($host = hanabira-dev.org) {
+        return 301 https://$host$request_uri;
+    } # managed by Certbot
+
+
+  listen 80;
+  server_name hanabira-dev.org www.hanabira-dev.org;
+
+  return 301 https://$server_name$request_uri;
+
+
+}
+
+server {
+    listen [::]:443 ssl ipv6only=on; # managed by Certbot
+    listen 443 ssl; # managed by Certbot
+    server_name hanabira-dev.org www.hanabira-dev.org;
+
+    ssl_certificate /etc/letsencrypt/live/hanabira-dev.org/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/hanabira-dev.org/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+
+
+
+
+  location / {
+    proxy_pass http://localhost:3000;
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_pass_request_headers on;
+    proxy_http_version 1.1;
+    proxy_cache_bypass $http_upgrade;
+    proxy_set_header Upgrade $http_upgrade;
+  }
+
+
+
+  location /e-api/v1 {
+    proxy_pass http://localhost:8000/e-api/v1;
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_pass_request_headers on;
+    proxy_http_version 1.1;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection 'upgrade';
+  }
+
+
+# ---
+
+  location /f-api/v1 {
+    proxy_pass http://localhost:5100/f-api/v1;
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_http_version 1.1;
+  }
+
+  location /d-api/v1 {
+    proxy_pass http://localhost:5200/d-api/v1;
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_http_version 1.1;
+  }
+
+
+# --------------------------------------- #
+
+}

CICD/ansible/files/nginx/hanabira.org

@@ -0,0 +1,76 @@
+# Redirect HTTP traffic to HTTPS
+server {
+    if ($host = hanabira.org) {
+        return 301 https://$host$request_uri;
+    } # managed by Certbot
+
+
+  listen 80;
+  server_name hanabira.org www.hanabira.org;
+
+  return 301 https://$server_name$request_uri;
+
+
+}
+
+server {
+    listen [::]:443 ssl ipv6only=on; # managed by Certbot
+    listen 443 ssl; # managed by Certbot
+    server_name hanabira.org www.hanabira.org;
+
+    ssl_certificate /etc/letsencrypt/live/hanabira.org/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/hanabira.org/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+
+
+
+
+  location / {
+    proxy_pass http://localhost:3000;
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_pass_request_headers on;
+    proxy_http_version 1.1;
+    proxy_cache_bypass $http_upgrade;
+    proxy_set_header Upgrade $http_upgrade;
+  }
+
+
+
+  location /e-api/v1 {
+    proxy_pass http://localhost:8000/e-api/v1;
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_pass_request_headers on;
+    proxy_http_version 1.1;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection 'upgrade';
+  }
+
+
+# ---
+
+  location /f-api/v1 {
+    proxy_pass http://localhost:5100/f-api/v1;
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_http_version 1.1;
+  }
+
+  location /d-api/v1 {
+    proxy_pass http://localhost:5200/d-api/v1;
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_http_version 1.1;
+  }
+
+
+# --------------------------------------- #
+
+}