iiab/roles/nginx

Transition to NGINX

1. Initial testing strategy (December 2019 - February 2020) is to move NGINX to port 80, and proxy everything to Apache on port 8090 — creating "Shims" for each IIAB App/Service in Section iii. below.

   Until "Native" NGINX is later implemented for that IIAB App/Service — allowing it to move up to Section ii. below.

   And potentially later moving it up to Section i. if its Apache support is dropped!

   (Background: IIAB Apps/Services are generally Ansible roles that live in /opt/iiab/iiab/roles)

2. Without PHP available via FastCGI, any function at all for PHP-based applications validates NGINX.

3. Current state of IIAB App/Service migrations as of 2020-05-16:

   1. These support "Native" NGINX but NOT Apache

      • Admin Console
      • captiveportal
      • IIAB documentation (http://box/info)
      • osm-vector-maps
      • OER2Go/RACHEL modules
      • usb_lib

   2. These support "Native" NGINX AND Apache, a.k.a. "dual support" for legacy testing (if suitable "Shims" from Section iii. below are preserved!) Both "Native" NGINX and "Shim" proxying from NGINX to Apache port 8090 cannot be enabled simultaneously for these IIAB Apps/Service. But if you want to attempt their "Shim" proxying legacy testing mode, try setting your primary web server to Apache using apache_install: True and apache_enabled: True (and nginx_enabled: False to disable NGINX) in /etc/iiab/local_vars.yml before you install IIAB. You may also need to run cd /opt/iiab/iiab; ./runrole httpd since this has been removed from roles/3-base-server/tasks/main.yml

      • awstats
      • calibre-web
      • gitea
      • kiwix
      • kolibri
      • mediawiki
      • munin
      • nextcloud
      • sugarizer
      • wordpress

   3. These support Apache but NOT "Native" NGINX. They use a "Shim" to proxy_pass from NGINX to Apache on port 8090. See roles/3-base-server/tasks/main.yml#L11 for a list of these IIAB Apps/Services, that auto-enable Apache.

      • cups ?
      • elgg
      • lokole
      • moodle
      • nodered

   4. These each run their own web server or non-web / backend services, e.g. off of their own unique port(s) (IIAB home pages link directly to these destinations). In future we'd like mnemonic URL's for all of these: (e.g. http://box/calibre, http://box/archive, http://box/kalite)

      • calibre (menu goes directly to port 8080)
      • internetarchive (menu goes directly to port 4244, PR #2120) [*]
      • kalite (menu goes directly to ports 8006-8008)
      • minetest [*]
      • openvpn
      • pbx [*]
      • transmission [*]

[*] The 4 above starred roles could use improvement, as of 2020-05-16.