@glicogh/healthcare-cdk 0.1.72 → 0.1.73
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -21,15 +21,6 @@ sudo apt install nginx nodejs dnsmasq supervisor -yq
|
|
|
21
21
|
# test certbot with dry-run to ensure it can successfully obtain a certificate for the API Gateway domain name (will not actually obtain a certificate due to --dry-run flag). This would also create the necessary nginx configuration for certbot to use during the real certificate obtaining process.
|
|
22
22
|
sudo certbot certonly --nginx -d $api_gateway_domain_name --agree-tos --non-interactive -m mistabiggx@gmail.com --no-eff-email --quiet --dry-run
|
|
23
23
|
|
|
24
|
-
# copy appropriate server_name.conf based on env
|
|
25
|
-
cat $service_dir/nginx/microservices/server_name.{{envName}}.conf | sudo tee $service_dir/nginx/microservices/server_name.conf
|
|
26
|
-
|
|
27
|
-
# remove default virtual host
|
|
28
|
-
sudo rm -rf /etc/nginx/sites-enabled/default /etc/nginx/conf.d/default.conf
|
|
29
|
-
# create symlinks
|
|
30
|
-
sudo ln -sf $service_dir/nginx/microservices /etc/nginx/microservices
|
|
31
|
-
sudo ln -sf $service_dir/nginx/conf.d/microservices.conf /etc/nginx/conf.d/microservices.conf
|
|
32
|
-
|
|
33
24
|
# configure dnsmasq
|
|
34
25
|
echo "# ================================" | sudo tee -a /etc/dnsmasq.conf
|
|
35
26
|
echo "conf-dir=/etc/dnsmasq.d/,*.conf" | sudo tee -a /etc/dnsmasq.conf
|
|
@@ -39,15 +30,6 @@ echo "port=5353" | sudo tee -a /etc/dnsmasq.conf
|
|
|
39
30
|
# configure supervisor
|
|
40
31
|
sudo sed -i "s|files = .*|files = /etc/supervisor/conf.d/*.conf ${service_dir}/supervisor/conf.d/*.conf|" /etc/supervisor/supervisord.conf
|
|
41
32
|
|
|
42
|
-
# start supervisor
|
|
43
|
-
sudo systemctl restart supervisor
|
|
44
|
-
|
|
45
|
-
# start dnsmasq
|
|
46
|
-
sudo systemctl restart dnsmasq
|
|
47
|
-
|
|
48
|
-
# start nginx server
|
|
49
|
-
sudo systemctl restart nginx
|
|
50
|
-
|
|
51
33
|
# obtain SSL certificate (if it doesn't exist) and sync to S3 bucket.
|
|
52
34
|
if [[ ! -f "/etc/letsencrypt/live/$api_gateway_domain_name/fullchain.pem" ]]; then
|
|
53
35
|
sudo certbot certonly --nginx -d $api_gateway_domain_name --agree-tos --non-interactive -m mistabiggx@gmail.com --no-eff-email --quiet --deploy-hook "aws s3 sync /etc/letsencrypt s3://$public_bucket_name/ssl/{{serviceName}}/"
|
|
@@ -57,3 +39,21 @@ fi
|
|
|
57
39
|
certbot_cron_command="/usr/bin/certbot renew --deploy-hook \"aws s3 sync /etc/letsencrypt s3://$public_bucket_name/ssl/{{serviceName}}/\" >> $logs_dir/{{serviceName}}-ssl-renewal.log"
|
|
58
40
|
certbot_cron_job="0 0,12 * * * $certbot_cron_command"
|
|
59
41
|
( ( crontab -l || true ) | ( grep -v -F "$certbot_cron_command" || true ) ; echo "$certbot_cron_job" ) | crontab -
|
|
42
|
+
|
|
43
|
+
# copy appropriate server_name.conf based on env
|
|
44
|
+
cat $service_dir/nginx/microservices/server_name.{{envName}}.conf | sudo tee $service_dir/nginx/microservices/server_name.conf
|
|
45
|
+
|
|
46
|
+
# remove default virtual host
|
|
47
|
+
sudo rm -rf /etc/nginx/sites-enabled/default /etc/nginx/conf.d/default.conf
|
|
48
|
+
# create symlinks
|
|
49
|
+
sudo ln -sf $service_dir/nginx/microservices /etc/nginx/microservices
|
|
50
|
+
sudo ln -sf $service_dir/nginx/conf.d/microservices.conf /etc/nginx/conf.d/microservices.conf
|
|
51
|
+
|
|
52
|
+
# start supervisor
|
|
53
|
+
sudo systemctl restart supervisor
|
|
54
|
+
|
|
55
|
+
# start dnsmasq
|
|
56
|
+
sudo systemctl restart dnsmasq
|
|
57
|
+
|
|
58
|
+
# start nginx server
|
|
59
|
+
sudo systemctl restart nginx
|
|
@@ -29,24 +29,11 @@ sudo cat $configuration_dir/global-ssm.env >> .env
|
|
|
29
29
|
sudo cat $configuration_dir/service-ssm.env >> .env
|
|
30
30
|
sudo cat $configuration_dir/local.env >> .env
|
|
31
31
|
|
|
32
|
-
# copy appropriate server_name.conf based on env
|
|
33
|
-
cat $service_dir/.infra/nginx/portal/server_name.{{envName}}.conf | sudo tee $service_dir/.infra/nginx/portal/server_name.conf
|
|
34
|
-
|
|
35
|
-
# remove default virtual host
|
|
36
|
-
sudo rm -rf /etc/nginx/sites-enabled/default /etc/nginx/conf.d/default.conf
|
|
37
|
-
|
|
38
|
-
# create symlinks
|
|
39
|
-
sudo ln -sf $service_dir/.infra/nginx/portal /etc/nginx/portal
|
|
40
|
-
sudo ln -sf $service_dir/.infra/nginx/conf.d/portal.conf /etc/nginx/conf.d/portal.conf
|
|
41
|
-
|
|
42
32
|
# install dependencies and generate static files
|
|
43
33
|
cd $service_dir
|
|
44
34
|
sudo npm i
|
|
45
35
|
sudo NODE_OPTIONS="--max-old-space-size=2048 NUXT_TELEMETRY_DISABLED=1" npm run generate
|
|
46
36
|
|
|
47
|
-
# start nginx server
|
|
48
|
-
sudo systemctl restart nginx
|
|
49
|
-
|
|
50
37
|
# obtain SSL certificate (if it doesn't exist) and sync to S3 bucket
|
|
51
38
|
if [[ ! -f "/etc/letsencrypt/live/$portal_domain_name/fullchain.pem" ]]; then
|
|
52
39
|
sudo certbot certonly --nginx -d $portal_domain_name --agree-tos --non-interactive -m mistabiggx@gmail.com --no-eff-email --quiet --deploy-hook "aws s3 sync /etc/letsencrypt s3://$public_bucket_name/ssl/{{serviceName}}/"
|
|
@@ -56,3 +43,16 @@ fi
|
|
|
56
43
|
certbot_cron_command="/usr/bin/certbot renew --deploy-hook \"aws s3 sync /etc/letsencrypt s3://$public_bucket_name/ssl/{{serviceName}}/\" >> $logs_dir/{{serviceName}}-ssl-renewal.log"
|
|
57
44
|
certbot_cron_job="0 0,12 * * * $certbot_cron_command"
|
|
58
45
|
( ( crontab -l || true ) | ( grep -v -F "$certbot_cron_command" || true ) ; echo "$certbot_cron_job" ) | crontab -
|
|
46
|
+
|
|
47
|
+
# copy appropriate server_name.conf based on env
|
|
48
|
+
cat $service_dir/.infra/nginx/portal/server_name.{{envName}}.conf | sudo tee $service_dir/.infra/nginx/portal/server_name.conf
|
|
49
|
+
|
|
50
|
+
# remove default virtual host
|
|
51
|
+
sudo rm -rf /etc/nginx/sites-enabled/default /etc/nginx/conf.d/default.conf
|
|
52
|
+
|
|
53
|
+
# create symlinks
|
|
54
|
+
sudo ln -sf $service_dir/.infra/nginx/portal /etc/nginx/portal
|
|
55
|
+
sudo ln -sf $service_dir/.infra/nginx/conf.d/portal.conf /etc/nginx/conf.d/portal.conf
|
|
56
|
+
|
|
57
|
+
# start nginx server
|
|
58
|
+
sudo systemctl restart nginx
|
package/package.json
CHANGED
|
@@ -21,15 +21,6 @@ sudo apt install nginx nodejs dnsmasq supervisor -yq
|
|
|
21
21
|
# test certbot with dry-run to ensure it can successfully obtain a certificate for the API Gateway domain name (will not actually obtain a certificate due to --dry-run flag). This would also create the necessary nginx configuration for certbot to use during the real certificate obtaining process.
|
|
22
22
|
sudo certbot certonly --nginx -d $api_gateway_domain_name --agree-tos --non-interactive -m mistabiggx@gmail.com --no-eff-email --quiet --dry-run
|
|
23
23
|
|
|
24
|
-
# copy appropriate server_name.conf based on env
|
|
25
|
-
cat $service_dir/nginx/microservices/server_name.{{envName}}.conf | sudo tee $service_dir/nginx/microservices/server_name.conf
|
|
26
|
-
|
|
27
|
-
# remove default virtual host
|
|
28
|
-
sudo rm -rf /etc/nginx/sites-enabled/default /etc/nginx/conf.d/default.conf
|
|
29
|
-
# create symlinks
|
|
30
|
-
sudo ln -sf $service_dir/nginx/microservices /etc/nginx/microservices
|
|
31
|
-
sudo ln -sf $service_dir/nginx/conf.d/microservices.conf /etc/nginx/conf.d/microservices.conf
|
|
32
|
-
|
|
33
24
|
# configure dnsmasq
|
|
34
25
|
echo "# ================================" | sudo tee -a /etc/dnsmasq.conf
|
|
35
26
|
echo "conf-dir=/etc/dnsmasq.d/,*.conf" | sudo tee -a /etc/dnsmasq.conf
|
|
@@ -39,15 +30,6 @@ echo "port=5353" | sudo tee -a /etc/dnsmasq.conf
|
|
|
39
30
|
# configure supervisor
|
|
40
31
|
sudo sed -i "s|files = .*|files = /etc/supervisor/conf.d/*.conf ${service_dir}/supervisor/conf.d/*.conf|" /etc/supervisor/supervisord.conf
|
|
41
32
|
|
|
42
|
-
# start supervisor
|
|
43
|
-
sudo systemctl restart supervisor
|
|
44
|
-
|
|
45
|
-
# start dnsmasq
|
|
46
|
-
sudo systemctl restart dnsmasq
|
|
47
|
-
|
|
48
|
-
# start nginx server
|
|
49
|
-
sudo systemctl restart nginx
|
|
50
|
-
|
|
51
33
|
# obtain SSL certificate (if it doesn't exist) and sync to S3 bucket.
|
|
52
34
|
if [[ ! -f "/etc/letsencrypt/live/$api_gateway_domain_name/fullchain.pem" ]]; then
|
|
53
35
|
sudo certbot certonly --nginx -d $api_gateway_domain_name --agree-tos --non-interactive -m mistabiggx@gmail.com --no-eff-email --quiet --deploy-hook "aws s3 sync /etc/letsencrypt s3://$public_bucket_name/ssl/{{serviceName}}/"
|
|
@@ -57,3 +39,21 @@ fi
|
|
|
57
39
|
certbot_cron_command="/usr/bin/certbot renew --deploy-hook \"aws s3 sync /etc/letsencrypt s3://$public_bucket_name/ssl/{{serviceName}}/\" >> $logs_dir/{{serviceName}}-ssl-renewal.log"
|
|
58
40
|
certbot_cron_job="0 0,12 * * * $certbot_cron_command"
|
|
59
41
|
( ( crontab -l || true ) | ( grep -v -F "$certbot_cron_command" || true ) ; echo "$certbot_cron_job" ) | crontab -
|
|
42
|
+
|
|
43
|
+
# copy appropriate server_name.conf based on env
|
|
44
|
+
cat $service_dir/nginx/microservices/server_name.{{envName}}.conf | sudo tee $service_dir/nginx/microservices/server_name.conf
|
|
45
|
+
|
|
46
|
+
# remove default virtual host
|
|
47
|
+
sudo rm -rf /etc/nginx/sites-enabled/default /etc/nginx/conf.d/default.conf
|
|
48
|
+
# create symlinks
|
|
49
|
+
sudo ln -sf $service_dir/nginx/microservices /etc/nginx/microservices
|
|
50
|
+
sudo ln -sf $service_dir/nginx/conf.d/microservices.conf /etc/nginx/conf.d/microservices.conf
|
|
51
|
+
|
|
52
|
+
# start supervisor
|
|
53
|
+
sudo systemctl restart supervisor
|
|
54
|
+
|
|
55
|
+
# start dnsmasq
|
|
56
|
+
sudo systemctl restart dnsmasq
|
|
57
|
+
|
|
58
|
+
# start nginx server
|
|
59
|
+
sudo systemctl restart nginx
|
|
@@ -29,24 +29,11 @@ sudo cat $configuration_dir/global-ssm.env >> .env
|
|
|
29
29
|
sudo cat $configuration_dir/service-ssm.env >> .env
|
|
30
30
|
sudo cat $configuration_dir/local.env >> .env
|
|
31
31
|
|
|
32
|
-
# copy appropriate server_name.conf based on env
|
|
33
|
-
cat $service_dir/.infra/nginx/portal/server_name.{{envName}}.conf | sudo tee $service_dir/.infra/nginx/portal/server_name.conf
|
|
34
|
-
|
|
35
|
-
# remove default virtual host
|
|
36
|
-
sudo rm -rf /etc/nginx/sites-enabled/default /etc/nginx/conf.d/default.conf
|
|
37
|
-
|
|
38
|
-
# create symlinks
|
|
39
|
-
sudo ln -sf $service_dir/.infra/nginx/portal /etc/nginx/portal
|
|
40
|
-
sudo ln -sf $service_dir/.infra/nginx/conf.d/portal.conf /etc/nginx/conf.d/portal.conf
|
|
41
|
-
|
|
42
32
|
# install dependencies and generate static files
|
|
43
33
|
cd $service_dir
|
|
44
34
|
sudo npm i
|
|
45
35
|
sudo NODE_OPTIONS="--max-old-space-size=2048 NUXT_TELEMETRY_DISABLED=1" npm run generate
|
|
46
36
|
|
|
47
|
-
# start nginx server
|
|
48
|
-
sudo systemctl restart nginx
|
|
49
|
-
|
|
50
37
|
# obtain SSL certificate (if it doesn't exist) and sync to S3 bucket
|
|
51
38
|
if [[ ! -f "/etc/letsencrypt/live/$portal_domain_name/fullchain.pem" ]]; then
|
|
52
39
|
sudo certbot certonly --nginx -d $portal_domain_name --agree-tos --non-interactive -m mistabiggx@gmail.com --no-eff-email --quiet --deploy-hook "aws s3 sync /etc/letsencrypt s3://$public_bucket_name/ssl/{{serviceName}}/"
|
|
@@ -56,3 +43,16 @@ fi
|
|
|
56
43
|
certbot_cron_command="/usr/bin/certbot renew --deploy-hook \"aws s3 sync /etc/letsencrypt s3://$public_bucket_name/ssl/{{serviceName}}/\" >> $logs_dir/{{serviceName}}-ssl-renewal.log"
|
|
57
44
|
certbot_cron_job="0 0,12 * * * $certbot_cron_command"
|
|
58
45
|
( ( crontab -l || true ) | ( grep -v -F "$certbot_cron_command" || true ) ; echo "$certbot_cron_job" ) | crontab -
|
|
46
|
+
|
|
47
|
+
# copy appropriate server_name.conf based on env
|
|
48
|
+
cat $service_dir/.infra/nginx/portal/server_name.{{envName}}.conf | sudo tee $service_dir/.infra/nginx/portal/server_name.conf
|
|
49
|
+
|
|
50
|
+
# remove default virtual host
|
|
51
|
+
sudo rm -rf /etc/nginx/sites-enabled/default /etc/nginx/conf.d/default.conf
|
|
52
|
+
|
|
53
|
+
# create symlinks
|
|
54
|
+
sudo ln -sf $service_dir/.infra/nginx/portal /etc/nginx/portal
|
|
55
|
+
sudo ln -sf $service_dir/.infra/nginx/conf.d/portal.conf /etc/nginx/conf.d/portal.conf
|
|
56
|
+
|
|
57
|
+
# start nginx server
|
|
58
|
+
sudo systemctl restart nginx
|