@glicogh/healthcare-cdk 0.1.73 → 0.1.75

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/dist/scripts/post-deployment-api-gateway.sh +10 -4
  2. package/dist/scripts/post-deployment-portal.sh +10 -4
  3. package/package.json +1 -1
  4. package/scripts/post-deployment-api-gateway.sh +10 -4
  5. package/scripts/post-deployment-portal.sh +10 -4
package/dist/scripts/post-deployment-api-gateway.sh CHANGED
@@ -6,7 +6,8 @@ sudo snap install --classic certbot
6
6
  sudo ln -s /snap/bin/certbot /usr/bin/certbot
7
7
 
8
8
  # sync SSL certificates from S3 bucket to local (if they exist)
9
- aws s3 cp s3://$public_bucket_name/ssl/{{serviceName}} /etc/letsencrypt --recursive
9
+ aws s3 cp s3://$public_bucket_name/ssl/{{serviceName}}/ $microservices_dir/letsencrypt --recursive
10
+ sudo tar -xzvf $microservices_dir/letsencrypt.tar.gz -C /etc/letsencrypt 2> /dev/null || true
10
11
  sudo chown -R ubuntu:ubuntu /etc/letsencrypt
11
12
 
12
13
  # install nginx
@@ -32,14 +33,19 @@ sudo sed -i "s|files = .*|files = /etc/supervisor/conf.d/*.conf ${service_dir}/s
32
33
 
33
34
  # obtain SSL certificate (if it doesn't exist) and sync to S3 bucket.
34
35
  if [[ ! -f "/etc/letsencrypt/live/$api_gateway_domain_name/fullchain.pem" ]]; then
35
- sudo certbot certonly --nginx -d $api_gateway_domain_name --agree-tos --non-interactive -m mistabiggx@gmail.com --no-eff-email --quiet --deploy-hook "aws s3 sync /etc/letsencrypt s3://$public_bucket_name/ssl/{{serviceName}}/"
36
+ sudo tar -czvf $microservices_dir/letsencrypt.tar.gz -C /etc/letsencrypt .
37
+ sudo certbot certonly --nginx -d $api_gateway_domain_name --agree-tos --non-interactive -m mistabiggx@gmail.com --no-eff-email --quiet --deploy-hook "aws s3 cp $microservices_dir/letsencrypt.tar.gz s3://$public_bucket_name/ssl/{{serviceName}}/"
36
38
  fi
37
39
 
38
40
  # register SSL renewal cron
39
- certbot_cron_command="/usr/bin/certbot renew --deploy-hook \"aws s3 sync /etc/letsencrypt s3://$public_bucket_name/ssl/{{serviceName}}/\" >> $logs_dir/{{serviceName}}-ssl-renewal.log"
41
+ certbot_cron_command="/usr/bin/certbot renew >> $logs_dir/{{serviceName}}-ssl-renewal.log"
40
42
  certbot_cron_job="0 0,12 * * * $certbot_cron_command"
41
43
  ( ( crontab -l || true ) | ( grep -v -F "$certbot_cron_command" || true ) ; echo "$certbot_cron_job" ) | crontab -
42
44
 
45
+ # stop nginx server to update configuration
46
+ sudo systemctl stop nginx
47
+ sudo killall nginx
48
+
43
49
  # copy appropriate server_name.conf based on env
44
50
  cat $service_dir/nginx/microservices/server_name.{{envName}}.conf | sudo tee $service_dir/nginx/microservices/server_name.conf
45
51
 
@@ -56,4 +62,4 @@ sudo systemctl restart supervisor
56
62
  sudo systemctl restart dnsmasq
57
63
 
58
64
  # start nginx server
59
- sudo systemctl restart nginx
65
+ sudo systemctl start nginx
package/dist/scripts/post-deployment-portal.sh CHANGED
@@ -6,7 +6,8 @@ sudo snap install --classic certbot
6
6
  sudo ln -s /snap/bin/certbot /usr/bin/certbot
7
7
 
8
8
  # sync SSL certificates from S3 bucket to local (if they exist)
9
- aws s3 cp s3://$public_bucket_name/ssl/{{serviceName}}/ /etc/letsencrypt --recursive
9
+ aws s3 cp s3://$public_bucket_name/ssl/{{serviceName}}/ $microservices_dir/letsencrypt --recursive
10
+ sudo tar -xzvf $microservices_dir/letsencrypt.tar.gz -C /etc/letsencrypt 2> /dev/null || true
10
11
  sudo chown -R ubuntu:ubuntu /etc/letsencrypt
11
12
 
12
13
  # install nginx
@@ -36,14 +37,19 @@ sudo NODE_OPTIONS="--max-old-space-size=2048 NUXT_TELEMETRY_DISABLED=1" npm run
36
37
 
37
38
  # obtain SSL certificate (if it doesn't exist) and sync to S3 bucket
38
39
  if [[ ! -f "/etc/letsencrypt/live/$portal_domain_name/fullchain.pem" ]]; then
39
- sudo certbot certonly --nginx -d $portal_domain_name --agree-tos --non-interactive -m mistabiggx@gmail.com --no-eff-email --quiet --deploy-hook "aws s3 sync /etc/letsencrypt s3://$public_bucket_name/ssl/{{serviceName}}/"
40
+ sudo tar -czvf $microservices_dir/letsencrypt.tar.gz -C /etc/letsencrypt .
41
+ sudo certbot certonly --nginx -d $portal_domain_name --agree-tos --non-interactive -m mistabiggx@gmail.com --no-eff-email --quiet --deploy-hook "aws s3 cp $microservices_dir/letsencrypt.tar.gz s3://$public_bucket_name/ssl/{{serviceName}}/"
40
42
  fi
41
43
 
42
44
  # register SSL renewal cron
43
- certbot_cron_command="/usr/bin/certbot renew --deploy-hook \"aws s3 sync /etc/letsencrypt s3://$public_bucket_name/ssl/{{serviceName}}/\" >> $logs_dir/{{serviceName}}-ssl-renewal.log"
45
+ certbot_cron_command="/usr/bin/certbot renew >> $logs_dir/{{serviceName}}-ssl-renewal.log"
44
46
  certbot_cron_job="0 0,12 * * * $certbot_cron_command"
45
47
  ( ( crontab -l || true ) | ( grep -v -F "$certbot_cron_command" || true ) ; echo "$certbot_cron_job" ) | crontab -
46
48
 
49
+ # stop nginx server to update configuration
50
+ sudo systemctl stop nginx
51
+ sudo killall nginx
52
+
47
53
  # copy appropriate server_name.conf based on env
48
54
  cat $service_dir/.infra/nginx/portal/server_name.{{envName}}.conf | sudo tee $service_dir/.infra/nginx/portal/server_name.conf
49
55
 
@@ -55,4 +61,4 @@ sudo ln -sf $service_dir/.infra/nginx/portal /etc/nginx/portal
55
61
  sudo ln -sf $service_dir/.infra/nginx/conf.d/portal.conf /etc/nginx/conf.d/portal.conf
56
62
 
57
63
  # start nginx server
58
- sudo systemctl restart nginx
64
+ sudo systemctl start nginx
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@glicogh/healthcare-cdk",
3
- "version": "0.1.73",
3
+ "version": "0.1.75",
4
4
  "description": "CDK automations",
5
5
  "bin": {
6
6
  "cdk": "bin/cdk.js"
package/scripts/post-deployment-api-gateway.sh CHANGED
@@ -6,7 +6,8 @@ sudo snap install --classic certbot
6
6
  sudo ln -s /snap/bin/certbot /usr/bin/certbot
7
7
 
8
8
  # sync SSL certificates from S3 bucket to local (if they exist)
9
- aws s3 cp s3://$public_bucket_name/ssl/{{serviceName}} /etc/letsencrypt --recursive
9
+ aws s3 cp s3://$public_bucket_name/ssl/{{serviceName}}/ $microservices_dir/letsencrypt --recursive
10
+ sudo tar -xzvf $microservices_dir/letsencrypt.tar.gz -C /etc/letsencrypt 2> /dev/null || true
10
11
  sudo chown -R ubuntu:ubuntu /etc/letsencrypt
11
12
 
12
13
  # install nginx
@@ -32,14 +33,19 @@ sudo sed -i "s|files = .*|files = /etc/supervisor/conf.d/*.conf ${service_dir}/s
32
33
 
33
34
  # obtain SSL certificate (if it doesn't exist) and sync to S3 bucket.
34
35
  if [[ ! -f "/etc/letsencrypt/live/$api_gateway_domain_name/fullchain.pem" ]]; then
35
- sudo certbot certonly --nginx -d $api_gateway_domain_name --agree-tos --non-interactive -m mistabiggx@gmail.com --no-eff-email --quiet --deploy-hook "aws s3 sync /etc/letsencrypt s3://$public_bucket_name/ssl/{{serviceName}}/"
36
+ sudo tar -czvf $microservices_dir/letsencrypt.tar.gz -C /etc/letsencrypt .
37
+ sudo certbot certonly --nginx -d $api_gateway_domain_name --agree-tos --non-interactive -m mistabiggx@gmail.com --no-eff-email --quiet --deploy-hook "aws s3 cp $microservices_dir/letsencrypt.tar.gz s3://$public_bucket_name/ssl/{{serviceName}}/"
36
38
  fi
37
39
 
38
40
  # register SSL renewal cron
39
- certbot_cron_command="/usr/bin/certbot renew --deploy-hook \"aws s3 sync /etc/letsencrypt s3://$public_bucket_name/ssl/{{serviceName}}/\" >> $logs_dir/{{serviceName}}-ssl-renewal.log"
41
+ certbot_cron_command="/usr/bin/certbot renew >> $logs_dir/{{serviceName}}-ssl-renewal.log"
40
42
  certbot_cron_job="0 0,12 * * * $certbot_cron_command"
41
43
  ( ( crontab -l || true ) | ( grep -v -F "$certbot_cron_command" || true ) ; echo "$certbot_cron_job" ) | crontab -
42
44
 
45
+ # stop nginx server to update configuration
46
+ sudo systemctl stop nginx
47
+ sudo killall nginx
48
+
43
49
  # copy appropriate server_name.conf based on env
44
50
  cat $service_dir/nginx/microservices/server_name.{{envName}}.conf | sudo tee $service_dir/nginx/microservices/server_name.conf
45
51
 
@@ -56,4 +62,4 @@ sudo systemctl restart supervisor
56
62
  sudo systemctl restart dnsmasq
57
63
 
58
64
  # start nginx server
59
- sudo systemctl restart nginx
65
+ sudo systemctl start nginx
package/scripts/post-deployment-portal.sh CHANGED
@@ -6,7 +6,8 @@ sudo snap install --classic certbot
6
6
  sudo ln -s /snap/bin/certbot /usr/bin/certbot
7
7
 
8
8
  # sync SSL certificates from S3 bucket to local (if they exist)
9
- aws s3 cp s3://$public_bucket_name/ssl/{{serviceName}}/ /etc/letsencrypt --recursive
9
+ aws s3 cp s3://$public_bucket_name/ssl/{{serviceName}}/ $microservices_dir/letsencrypt --recursive
10
+ sudo tar -xzvf $microservices_dir/letsencrypt.tar.gz -C /etc/letsencrypt 2> /dev/null || true
10
11
  sudo chown -R ubuntu:ubuntu /etc/letsencrypt
11
12
 
12
13
  # install nginx
@@ -36,14 +37,19 @@ sudo NODE_OPTIONS="--max-old-space-size=2048 NUXT_TELEMETRY_DISABLED=1" npm run
36
37
 
37
38
  # obtain SSL certificate (if it doesn't exist) and sync to S3 bucket
38
39
  if [[ ! -f "/etc/letsencrypt/live/$portal_domain_name/fullchain.pem" ]]; then
39
- sudo certbot certonly --nginx -d $portal_domain_name --agree-tos --non-interactive -m mistabiggx@gmail.com --no-eff-email --quiet --deploy-hook "aws s3 sync /etc/letsencrypt s3://$public_bucket_name/ssl/{{serviceName}}/"
40
+ sudo tar -czvf $microservices_dir/letsencrypt.tar.gz -C /etc/letsencrypt .
41
+ sudo certbot certonly --nginx -d $portal_domain_name --agree-tos --non-interactive -m mistabiggx@gmail.com --no-eff-email --quiet --deploy-hook "aws s3 cp $microservices_dir/letsencrypt.tar.gz s3://$public_bucket_name/ssl/{{serviceName}}/"
40
42
  fi
41
43
 
42
44
  # register SSL renewal cron
43
- certbot_cron_command="/usr/bin/certbot renew --deploy-hook \"aws s3 sync /etc/letsencrypt s3://$public_bucket_name/ssl/{{serviceName}}/\" >> $logs_dir/{{serviceName}}-ssl-renewal.log"
45
+ certbot_cron_command="/usr/bin/certbot renew >> $logs_dir/{{serviceName}}-ssl-renewal.log"
44
46
  certbot_cron_job="0 0,12 * * * $certbot_cron_command"
45
47
  ( ( crontab -l || true ) | ( grep -v -F "$certbot_cron_command" || true ) ; echo "$certbot_cron_job" ) | crontab -
46
48
 
49
+ # stop nginx server to update configuration
50
+ sudo systemctl stop nginx
51
+ sudo killall nginx
52
+
47
53
  # copy appropriate server_name.conf based on env
48
54
  cat $service_dir/.infra/nginx/portal/server_name.{{envName}}.conf | sudo tee $service_dir/.infra/nginx/portal/server_name.conf
49
55
 
@@ -55,4 +61,4 @@ sudo ln -sf $service_dir/.infra/nginx/portal /etc/nginx/portal
55
61
  sudo ln -sf $service_dir/.infra/nginx/conf.d/portal.conf /etc/nginx/conf.d/portal.conf
56
62
 
57
63
  # start nginx server
58
- sudo systemctl restart nginx
64
+ sudo systemctl start nginx