Merge pull request #2776 from jvonau/lok_nginx

Lokole nginx only

roles/lokole/defaults/main.yml

@@ -18,11 +18,10 @@ lokole_install_path: "{{ content_base }}/lokole"    # /library/lokole
 lokole_venv: "{{ lokole_install_path }}/venv"       # /library/lokole/venv
 
 # Info needed to run Lokole:
-
 lokole_user: lokole
-lokole_run_directory: "/home/{{ lokole_user }}/state"
-
 lokole_url: /lokole
-lokole_full_url: "http://{{ iiab_hostname }}.{{ iiab_domain }}{{ lokole_url }}"    # http://box.lan/lokole
-
+lokole_run_directory: /home/{{ lokole_user }}/state
 lokole_domain_socket: "{{ lokole_run_directory }}/lokole_gunicorn.sock"
+lokole_sim_type: LocalOnly
+
+lokole_full_url: "http://{{ iiab_hostname }}.{{ iiab_domain }}{{ lokole_url }}"    # http://box.lan/lokole

roles/lokole/tasks/install.yml

@@ -2,14 +2,14 @@
 # https://github.com/iiab/iiab/blob/master/roles/httpd/templates/refresh-wiki-docs.sh#L51-L52
 
 
-- name: "Set 'apache_install: True' and 'apache_enabled: True'"
-  set_fact:
-    apache_install: True
-    apache_enabled: True
+#- name: "Set 'apache_install: True' and 'apache_enabled: True'"
+#  set_fact:
+#    apache_install: True
+#    apache_enabled: True
 
-- name: APACHE - run 'httpd' role
-  include_role:
-    name: httpd
+#- name: APACHE - run 'httpd' role
+#  include_role:
+#    name: httpd
 
 
 - name: "Install 8 packages for Lokole: python3, python3-pip, python3-venv, python3-dev, python3-bcrypt, libffi-dev, libssl-dev, libopenjp2-7"

roles/lokole/tasks/main.yml

@@ -53,10 +53,10 @@
     - celery
     - lokole
 
-#- name: Enable/Disable/Restart Apache if primary
-- name: SHIM FOR NOW SO ALWAYS DO THE...Enable/Disable/Restart Apache
+#- name: SHIM FOR NOW SO ALWAYS DO THE...Enable/Disable/Restart Apache
+- name: Enable/Disable/Restart Apache if primary
   include_tasks: apache.yml
-  #when: not nginx_enabled
+  when: not nginx_enabled
 
 - name: Enable/Disable/Restart NGINX if primary
   include_tasks: nginx.yml

roles/lokole/templates/lokole-nginx.conf.j2

@@ -1,3 +1,14 @@
-location {{ lokole_url }}/ {
-  proxy_pass http://127.0.0.1:{{ apache_port }}{{ lokole_url }}/;
+location = {{ lokole_url }}/favicon.ico {
+  alias {{ lokole_venv }}/lib/python{{ python_ver }}/site-packages/opwen_email_client/webapp/static/favicon.ico;
+}
+
+location ~ ^{{ lokole_url }}/static/(.*)$ {
+  alias {{ lokole_venv }}/lib/python{{ python_ver }}/site-packages/opwen_email_client/webapp/static/$1;
+}
+
+location {{ lokole_url }}/ {
+  proxy_set_header Host $http_host;
+  proxy_set_header X-Real-IP $remote_addr;
+  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+  proxy_pass http://unix:/{{ lokole_domain_socket }};
 }

roles/lokole/templates/webapp_secrets.sh.j2

@@ -1,6 +1,7 @@
-export OPWEN_SIM_TYPE='LocalOnly'
-export OPWEN_STATE_DIRECTORY='{{lokole_run_directory}}'
+export OPWEN_SIM_TYPE='{{ lokole_sim_type }}'
+export OPWEN_STATE_DIRECTORY='{{ lokole_run_directory }}'
+export OPWEN_APP_ROOT='{{ lokole_url }}'
+export OPWEN_MAX_UPLOAD_SIZE_MB=10
+export OPWEN_SYNC_SCHEDULE='1,16,31,46 * * * *'
 export OPWEN_SESSION_KEY='{{ lookup('password', '/dev/null chars=ascii_letters,digits,_ length=32') }}'
 export OPWEN_PASSWORD_SALT='{{ lookup('password', '/dev/null chars=ascii_letters,digits,_ length=16') }}'
-export OPWEN_CLIENT_NAME='{{ iiab_hostname }}'
-export OPWEN_ROOT_DOMAIN='{{ iiab_domain }}'

roles/nginx/README.md

@@ -27,6 +27,7 @@
       * gitea
       * kiwix
       * kolibri
+      * lokole
       * mediawiki
       * munin
       * nextcloud
@@ -35,7 +36,6 @@
 
    3. These support Apache but ***NOT*** "Native" NGINX.  They use a "Shim" to [proxy_pass](https://docs.nginx.com/nginx/admin-guide/web-server/reverse-proxy/) from NGINX to Apache on port 8090.  See [roles/3-base-server/tasks/main.yml#L11](../3-base-server/tasks/main.yml#L11) for a list of IIAB Apps/Services that auto-enable Apache.
       * elgg
-      * lokole
       * moodle
       * nodered
 

vars/debian-10.yml

@@ -24,3 +24,4 @@ sshd_service: ssh
 php_version: 7.3
 postgresql_version: 11
 systemd_location: /lib/systemd/system
+python_ver: 3.7

vars/debian-11.yml

@@ -24,3 +24,4 @@ sshd_service: ssh
 php_version: 7.4
 postgresql_version: 13
 systemd_location: /lib/systemd/system
+python_ver: 3.9

vars/linuxmint-20.yml

@@ -28,3 +28,4 @@ php_version: 7.4
 # "postgresql_version: 11.2" failed (too detailed for /etc/systemd/system/postgresql-iiab.service on Ubuntu 19.04)
 postgresql_version: 12
 systemd_location: /lib/systemd/system
+python_ver: 3.8

vars/local_vars_big.yml

@@ -260,6 +260,7 @@ jupyterhub_enabled: True
 # Lokole (email for rural communities) from https://ascoderu.ca
 lokole_install: True
 lokole_enabled: True
+#lokole_sim_type: Ethernet
 
 mediawiki_install: True
 mediawiki_enabled: True

vars/local_vars_medium.yml

@@ -260,6 +260,7 @@ jupyterhub_enabled: False
 # Lokole (email for rural communities) from https://ascoderu.ca
 lokole_install: False
 lokole_enabled: False
+#lokole_sim_type: Ethernet
 
 mediawiki_install: False
 mediawiki_enabled: False

vars/local_vars_min.yml

@@ -260,6 +260,7 @@ jupyterhub_enabled: False
 # Lokole (email for rural communities) from https://ascoderu.ca
 lokole_install: False
 lokole_enabled: False
+#lokole_sim_type: Ethernet
 
 mediawiki_install: False
 mediawiki_enabled: False

vars/ubuntu-20.yml

@@ -26,3 +26,4 @@ php_version: 7.4
 # "postgresql_version: 11.2" failed (too detailed for /etc/systemd/system/postgresql-iiab.service on Ubuntu 19.04)
 postgresql_version: 12
 systemd_location: /lib/systemd/system
+python_ver: 3.8

vars/ubuntu-21.yml

@@ -26,3 +26,4 @@ php_version: 7.4    # 2020-04-22: Will Ubuntu 21.10 require 8.0?
 # "postgresql_version: 11.2" failed (too detailed for /etc/systemd/system/postgresql-iiab.service on Ubuntu 19.04)
 postgresql_version: 13    # 2020-04-22: Will Ubuntu 21.10 require 14?
 systemd_location: /lib/systemd/system
+python_ver: 3.9