forked from opencrvs/opencrvs-countryconfig
-
Notifications
You must be signed in to change notification settings - Fork 17
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #1200 from opencrvs/env-setup-script-update
Set up new env(E2E)
- Loading branch information
Showing
7 changed files
with
205 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -21,6 +21,7 @@ on: | |
- qa | ||
- staging | ||
- production | ||
- e2e | ||
core-image-tag: | ||
description: Core DockerHub image tag | ||
jobs: | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,122 @@ | ||
services: | ||
notification: | ||
environment: | ||
- LANGUAGES=en,fr | ||
- SENTRY_DSN=${SENTRY_DSN:-} | ||
- QA_ENV=true | ||
- NODE_ENV=production | ||
|
||
countryconfig: | ||
image: ${DOCKERHUB_ACCOUNT}/${DOCKERHUB_REPO}:${COUNTRY_CONFIG_VERSION} | ||
restart: unless-stopped | ||
secrets: | ||
- jwt-public-key.{{ts}} | ||
environment: | ||
- NODE_ENV=production | ||
- QA_ENV=true | ||
- CHECK_INVALID_TOKEN=true | ||
- MONGO_URL=mongodb://mongo1/user-mgnt?replicaSet=rs0 | ||
- SENTRY_DSN=${SENTRY_DSN:-} | ||
- SENDER_EMAIL_ADDRESS=${SENDER_EMAIL_ADDRESS} | ||
- ALERT_EMAIL=${ALERT_EMAIL} | ||
- SMTP_HOST=${SMTP_HOST} | ||
- SMTP_PORT=${SMTP_PORT} | ||
- SMTP_USERNAME=${SMTP_USERNAME} | ||
- SMTP_PASSWORD=${SMTP_PASSWORD} | ||
- SMTP_SECURE=${SMTP_SECURE} | ||
deploy: | ||
replicas: 1 | ||
networks: | ||
- overlay_net | ||
|
||
client: | ||
environment: | ||
- DECLARED_DECLARATION_SEARCH_QUERY_COUNT=100 | ||
|
||
gateway: | ||
environment: | ||
- LANGUAGES=en,fr | ||
- SENTRY_DSN=${SENTRY_DSN:-} | ||
- QA_ENV=true | ||
- NODE_ENV=production | ||
- DISABLE_RATE_LIMIT=true | ||
|
||
workflow: | ||
environment: | ||
- LANGUAGES=en,fr | ||
- SENTRY_DSN=${SENTRY_DSN:-} | ||
- QA_ENV=true | ||
- NODE_ENV=production | ||
|
||
search: | ||
environment: | ||
- SENTRY_DSN=${SENTRY_DSN:-} | ||
- QA_ENV=true | ||
- NODE_ENV=production | ||
|
||
metrics: | ||
environment: | ||
- SENTRY_DSN=${SENTRY_DSN:-} | ||
- QA_ENV=true | ||
- NODE_ENV=production | ||
|
||
auth: | ||
environment: | ||
- SENTRY_DSN=${SENTRY_DSN:-} | ||
- QA_ENV=true | ||
- NODE_ENV=production | ||
|
||
user-mgnt: | ||
environment: | ||
- SENTRY_DSN=${SENTRY_DSN:-} | ||
- QA_ENV=true | ||
- NODE_ENV=production | ||
|
||
webhooks: | ||
environment: | ||
- SENTRY_DSN=${SENTRY_DSN:-} | ||
- QA_ENV=true | ||
- NODE_ENV=production | ||
|
||
config: | ||
environment: | ||
- SENTRY_DSN=${SENTRY_DSN:-} | ||
- QA_ENV=true | ||
- NODE_ENV=production | ||
|
||
documents: | ||
environment: | ||
- QA_ENV=true | ||
- NODE_ENV=production | ||
|
||
scheduler: | ||
environment: | ||
- QA_ENV=true | ||
- NODE_ENV=production | ||
|
||
traefik: | ||
command: | ||
# Use HTTP-01 challenge as the web server is publicly available | ||
# https://doc.traefik.io/traefik/https/acme/#httpchallenge | ||
# For DNS-01 challenge and manual certificates, check staging and production configurations | ||
- --certificatesresolvers.certResolver.acme.email=riku@opencrvs.org | ||
- --certificatesresolvers.certResolver.acme.storage=acme.json | ||
- --certificatesresolvers.certResolver.acme.caserver=https://acme-v02.api.letsencrypt.org/directory | ||
- --certificatesresolvers.certResolver.acme.httpchallenge.entrypoint=web | ||
- --certificatesresolvers.certResolver.acme.httpchallenge=true | ||
|
||
- --entrypoints.web.address=:80 | ||
- --entrypoints.websecure.address=:443 | ||
- --providers.docker | ||
- --providers.docker.swarmMode=true | ||
- --api.dashboard=true | ||
- --api.insecure=true | ||
- --log.level=WARNING | ||
- --entrypoints.web.http.redirections.entryPoint.to=websecure | ||
- --entrypoints.web.http.redirections.entryPoint.scheme=https | ||
- --entrypoints.web.http.redirections.entrypoint.permanent=true | ||
- --serverstransport.insecureskipverify=true | ||
- --entrypoints.websecure.address=:443 | ||
- --accesslog=true | ||
- --accesslog.format=json | ||
- --ping=true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,66 @@ | ||
# This Source Code Form is subject to the terms of the Mozilla Public | ||
# License, v. 2.0. If a copy of the MPL was not distributed with this | ||
# file, You can obtain one at https://mozilla.org/MPL/2.0/. | ||
# | ||
# OpenCRVS is also distributed under the terms of the Civil Registration | ||
# & Healthcare Disclaimer located at http://opencrvs.org/license. | ||
# | ||
# Copyright (C) The OpenCRVS Authors located at https://github.com/opencrvs/opencrvs-core/blob/master/AUTHORS. | ||
all: | ||
vars: | ||
users: | ||
# If you need to remove access from someone, do not remove them from this list, but instead set their state: absent | ||
- name: pyry | ||
ssh_keys: | ||
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJBcrSLLdrkLrhqNQi7Uo/ZIWXb1y4kc0vGb16e2s0Jq pyry@opencrvs.org | ||
state: present | ||
sudoer: true | ||
- name: tameem | ||
ssh_keys: | ||
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGUprcQyUFYwRto0aRpgriR95C1pgNxrQ0lEWEe1D8he haidertameem@gmail.com | ||
state: present | ||
sudoer: true | ||
- name: riku | ||
ssh_keys: | ||
- ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWIF63S4f3z9wQMvWibmvl7MPuJ6EVrkP0HuvgNhcs/4DZYMcR/GRBvV4ldOSYMlBevIXycgGzNDxKJgENUuwIWanjBu7uVAHyD6+cIRD1h63qq7Cjv/2HYTfBDKOrKzPOhA6zWvKO0ZGWsjRXk5LWMCbKOkvKJCxOpj/NVBxeE4FTK5YADYPV3OSsmBtqTHrVLm2sMmShU/2hMYYswWkobidjX65+nK/X+3C+yJbHwiydVvn+QCrFlFfCLPWKe8rUpOxyxofPqWVQh6CHhHfT8okaOc9sOE8Qeip9ljo84DftJh3Xm3ynOdWK1hH2BvRvxNadWqcE1qECbkg4tx2x riku.rouvila@gmail.com | ||
state: present | ||
sudoer: true | ||
- name: euan | ||
ssh_keys: | ||
- ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDECqHO65UpyrrO8uueD06RxGaVVq22f152Rf8qVQQAAIGAMu6gCs7ztlZ8a3yQgSEIjM/Jl1/RqIVs6CziTEef74nLFTZ5Ufz3CLRVgdebBeSBEmhTfTUV0HLkSyNzwKFpuzJxucGd72ulPvEp6eHvyJAPJz37YcU8cjaL1v05T6s2ee99li35GlDDtCzfjVV4ZPAg5JdfWuTj41RAVC0LQhk2/NB4qEu37UxGGjhRFSjBEsS5LxI9QfvgrsHpl/VOn+soH7ZkK7kS6qRgNP/uYsXRWXhHaamcl5OX68gJWTbrW6c7PCqlbCWGnsHJswCmqPIthwXXMfC7ULDNLSKG6mslAt5Dyc8/MCr3vTW7pDyr2d0FvvY86SMQUggxv3qF7TZewqfX1bhK0fMLarIxVMQ1RFo//wN9QGA+2we8rxd2Y1Kr1DBuJyuwXPfv+Exo8yNYQ+x/AYH5k6UVcSYuaB8eYmplG2KQCxt8RBFtoChrwOKNRWLqXdKyfpdp5XmnnWxPvR95gf3h3yLocVYkF0i0uvKKJ0vt8J0Ezfkdfow0B1kUg5bPXKJROX7PwbaCPdYcxyDaO6wwOigRnSmoFvkH1pLb4j1RQAXcX531CHgfN6Izi/h0mpMS4bnyIUcv2GQr+h4z4TxcCtj7qpH2y6yw7XG12jVh7TfeesXG2Q== euanmillar77@gmail.com | ||
state: present | ||
sudoer: true | ||
- name: tahmid | ||
ssh_keys: | ||
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINUml9O5ySwPtEMD1yGEYHlf9Z3jro97NWAnM9+ew9gn tahmidrahman.dsi@gmail.com | ||
state: present | ||
sudoer: true | ||
- name: tareq | ||
ssh_keys: | ||
- ssh-rsa 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 tareq.aziz@dsinnovators.com | ||
state: present | ||
sudoer: true | ||
- name: jamil | ||
ssh_keys: | ||
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINMSNTIIsM0C3uJg3V/Fqh2gi4lvl2y6nenrb2Ft1JlX jamil31415926@gmail.com | ||
state: present | ||
sudoer: true | ||
- name: ashwin | ||
ssh_keys: | ||
- ssh-rsa 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 ashwin@opencrvs.org | ||
state: present | ||
sudoer: true | ||
- name: shoumik | ||
ssh_keys: | ||
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINRSRTqm3vOfjyTutISEtbVp7ZddoWa9NZDZLeWZGzLy dsi@dsi-Inspiron-15-3511 | ||
state: present | ||
sudoer: true | ||
enable_backups: false | ||
docker-manager-first: | ||
hosts: | ||
farajaland-integration-e2e: | ||
ansible_host: '49.13.216.104' | ||
data_label: data1 | ||
|
||
# QA and staging servers are not configured to use workers. | ||
docker-workers: {} |