@glicogh/healthcare-cdk 0.1.74 → 0.1.76
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -6,8 +6,9 @@ sudo snap install --classic certbot
|
|
|
6
6
|
sudo ln -s /snap/bin/certbot /usr/bin/certbot
|
|
7
7
|
|
|
8
8
|
# sync SSL certificates from S3 bucket to local (if they exist)
|
|
9
|
-
aws s3 cp s3://$public_bucket_name/ssl/{{serviceName}} /
|
|
10
|
-
sudo
|
|
9
|
+
aws s3 cp s3://$public_bucket_name/ssl/{{serviceName}}/ $microservices_dir/letsencrypt --recursive
|
|
10
|
+
sudo tar -xzvf $microservices_dir/letsencrypt.tar.gz -C /etc/letsencrypt || true
|
|
11
|
+
sudo chown -R ubuntu:ubuntu /etc/letsencrypt || true
|
|
11
12
|
|
|
12
13
|
# install nginx
|
|
13
14
|
sudo apt install curl gnupg2 ca-certificates lsb-release ubuntu-keyring -yq
|
|
@@ -32,7 +33,8 @@ sudo sed -i "s|files = .*|files = /etc/supervisor/conf.d/*.conf ${service_dir}/s
|
|
|
32
33
|
|
|
33
34
|
# obtain SSL certificate (if it doesn't exist) and sync to S3 bucket.
|
|
34
35
|
if [[ ! -f "/etc/letsencrypt/live/$api_gateway_domain_name/fullchain.pem" ]]; then
|
|
35
|
-
sudo
|
|
36
|
+
sudo tar -czvf $microservices_dir/letsencrypt.tar.gz -C /etc/letsencrypt .
|
|
37
|
+
sudo certbot certonly --nginx -d $api_gateway_domain_name --agree-tos --non-interactive -m mistabiggx@gmail.com --no-eff-email --quiet --deploy-hook "aws s3 cp $microservices_dir/letsencrypt.tar.gz s3://$public_bucket_name/ssl/{{serviceName}}/"
|
|
36
38
|
fi
|
|
37
39
|
|
|
38
40
|
# register SSL renewal cron
|
|
@@ -42,6 +44,7 @@ certbot_cron_job="0 0,12 * * * $certbot_cron_command"
|
|
|
42
44
|
|
|
43
45
|
# stop nginx server to update configuration
|
|
44
46
|
sudo systemctl stop nginx
|
|
47
|
+
sudo killall nginx
|
|
45
48
|
|
|
46
49
|
# copy appropriate server_name.conf based on env
|
|
47
50
|
cat $service_dir/nginx/microservices/server_name.{{envName}}.conf | sudo tee $service_dir/nginx/microservices/server_name.conf
|
|
@@ -6,8 +6,9 @@ sudo snap install --classic certbot
|
|
|
6
6
|
sudo ln -s /snap/bin/certbot /usr/bin/certbot
|
|
7
7
|
|
|
8
8
|
# sync SSL certificates from S3 bucket to local (if they exist)
|
|
9
|
-
aws s3 cp s3://$public_bucket_name/ssl/{{serviceName}}/ /
|
|
10
|
-
sudo
|
|
9
|
+
aws s3 cp s3://$public_bucket_name/ssl/{{serviceName}}/ $microservices_dir/letsencrypt --recursive
|
|
10
|
+
sudo tar -xzvf $microservices_dir/letsencrypt.tar.gz -C /etc/letsencrypt || true
|
|
11
|
+
sudo chown -R ubuntu:ubuntu /etc/letsencrypt || true
|
|
11
12
|
|
|
12
13
|
# install nginx
|
|
13
14
|
sudo apt install curl gnupg2 ca-certificates lsb-release ubuntu-keyring -yq
|
|
@@ -36,7 +37,8 @@ sudo NODE_OPTIONS="--max-old-space-size=2048 NUXT_TELEMETRY_DISABLED=1" npm run
|
|
|
36
37
|
|
|
37
38
|
# obtain SSL certificate (if it doesn't exist) and sync to S3 bucket
|
|
38
39
|
if [[ ! -f "/etc/letsencrypt/live/$portal_domain_name/fullchain.pem" ]]; then
|
|
39
|
-
sudo
|
|
40
|
+
sudo tar -czvf $microservices_dir/letsencrypt.tar.gz -C /etc/letsencrypt .
|
|
41
|
+
sudo certbot certonly --nginx -d $portal_domain_name --agree-tos --non-interactive -m mistabiggx@gmail.com --no-eff-email --quiet --deploy-hook "aws s3 cp $microservices_dir/letsencrypt.tar.gz s3://$public_bucket_name/ssl/{{serviceName}}/"
|
|
40
42
|
fi
|
|
41
43
|
|
|
42
44
|
# register SSL renewal cron
|
|
@@ -46,6 +48,7 @@ certbot_cron_job="0 0,12 * * * $certbot_cron_command"
|
|
|
46
48
|
|
|
47
49
|
# stop nginx server to update configuration
|
|
48
50
|
sudo systemctl stop nginx
|
|
51
|
+
sudo killall nginx
|
|
49
52
|
|
|
50
53
|
# copy appropriate server_name.conf based on env
|
|
51
54
|
cat $service_dir/.infra/nginx/portal/server_name.{{envName}}.conf | sudo tee $service_dir/.infra/nginx/portal/server_name.conf
|
package/package.json
CHANGED
|
@@ -6,8 +6,9 @@ sudo snap install --classic certbot
|
|
|
6
6
|
sudo ln -s /snap/bin/certbot /usr/bin/certbot
|
|
7
7
|
|
|
8
8
|
# sync SSL certificates from S3 bucket to local (if they exist)
|
|
9
|
-
aws s3 cp s3://$public_bucket_name/ssl/{{serviceName}} /
|
|
10
|
-
sudo
|
|
9
|
+
aws s3 cp s3://$public_bucket_name/ssl/{{serviceName}}/ $microservices_dir/letsencrypt --recursive
|
|
10
|
+
sudo tar -xzvf $microservices_dir/letsencrypt.tar.gz -C /etc/letsencrypt || true
|
|
11
|
+
sudo chown -R ubuntu:ubuntu /etc/letsencrypt || true
|
|
11
12
|
|
|
12
13
|
# install nginx
|
|
13
14
|
sudo apt install curl gnupg2 ca-certificates lsb-release ubuntu-keyring -yq
|
|
@@ -32,7 +33,8 @@ sudo sed -i "s|files = .*|files = /etc/supervisor/conf.d/*.conf ${service_dir}/s
|
|
|
32
33
|
|
|
33
34
|
# obtain SSL certificate (if it doesn't exist) and sync to S3 bucket.
|
|
34
35
|
if [[ ! -f "/etc/letsencrypt/live/$api_gateway_domain_name/fullchain.pem" ]]; then
|
|
35
|
-
sudo
|
|
36
|
+
sudo tar -czvf $microservices_dir/letsencrypt.tar.gz -C /etc/letsencrypt .
|
|
37
|
+
sudo certbot certonly --nginx -d $api_gateway_domain_name --agree-tos --non-interactive -m mistabiggx@gmail.com --no-eff-email --quiet --deploy-hook "aws s3 cp $microservices_dir/letsencrypt.tar.gz s3://$public_bucket_name/ssl/{{serviceName}}/"
|
|
36
38
|
fi
|
|
37
39
|
|
|
38
40
|
# register SSL renewal cron
|
|
@@ -42,6 +44,7 @@ certbot_cron_job="0 0,12 * * * $certbot_cron_command"
|
|
|
42
44
|
|
|
43
45
|
# stop nginx server to update configuration
|
|
44
46
|
sudo systemctl stop nginx
|
|
47
|
+
sudo killall nginx
|
|
45
48
|
|
|
46
49
|
# copy appropriate server_name.conf based on env
|
|
47
50
|
cat $service_dir/nginx/microservices/server_name.{{envName}}.conf | sudo tee $service_dir/nginx/microservices/server_name.conf
|
|
@@ -6,8 +6,9 @@ sudo snap install --classic certbot
|
|
|
6
6
|
sudo ln -s /snap/bin/certbot /usr/bin/certbot
|
|
7
7
|
|
|
8
8
|
# sync SSL certificates from S3 bucket to local (if they exist)
|
|
9
|
-
aws s3 cp s3://$public_bucket_name/ssl/{{serviceName}}/ /
|
|
10
|
-
sudo
|
|
9
|
+
aws s3 cp s3://$public_bucket_name/ssl/{{serviceName}}/ $microservices_dir/letsencrypt --recursive
|
|
10
|
+
sudo tar -xzvf $microservices_dir/letsencrypt.tar.gz -C /etc/letsencrypt || true
|
|
11
|
+
sudo chown -R ubuntu:ubuntu /etc/letsencrypt || true
|
|
11
12
|
|
|
12
13
|
# install nginx
|
|
13
14
|
sudo apt install curl gnupg2 ca-certificates lsb-release ubuntu-keyring -yq
|
|
@@ -36,7 +37,8 @@ sudo NODE_OPTIONS="--max-old-space-size=2048 NUXT_TELEMETRY_DISABLED=1" npm run
|
|
|
36
37
|
|
|
37
38
|
# obtain SSL certificate (if it doesn't exist) and sync to S3 bucket
|
|
38
39
|
if [[ ! -f "/etc/letsencrypt/live/$portal_domain_name/fullchain.pem" ]]; then
|
|
39
|
-
sudo
|
|
40
|
+
sudo tar -czvf $microservices_dir/letsencrypt.tar.gz -C /etc/letsencrypt .
|
|
41
|
+
sudo certbot certonly --nginx -d $portal_domain_name --agree-tos --non-interactive -m mistabiggx@gmail.com --no-eff-email --quiet --deploy-hook "aws s3 cp $microservices_dir/letsencrypt.tar.gz s3://$public_bucket_name/ssl/{{serviceName}}/"
|
|
40
42
|
fi
|
|
41
43
|
|
|
42
44
|
# register SSL renewal cron
|
|
@@ -46,6 +48,7 @@ certbot_cron_job="0 0,12 * * * $certbot_cron_command"
|
|
|
46
48
|
|
|
47
49
|
# stop nginx server to update configuration
|
|
48
50
|
sudo systemctl stop nginx
|
|
51
|
+
sudo killall nginx
|
|
49
52
|
|
|
50
53
|
# copy appropriate server_name.conf based on env
|
|
51
54
|
cat $service_dir/.infra/nginx/portal/server_name.{{envName}}.conf | sudo tee $service_dir/.infra/nginx/portal/server_name.conf
|