Commit 6e80cf00 by Adi Amir

update devops

parent 2fad0ecc
...@@ -14,7 +14,7 @@ To re-generate a new valid certficate on one of the domains(safeyme.com/ipgaller ...@@ -14,7 +14,7 @@ To re-generate a new valid certficate on one of the domains(safeyme.com/ipgaller
2. backup the current certtficate 2. backup the current certtficate
>cd /opt/mcz >cd /opt/mcz
>tar czvf config-letsencrypt-20190616.tar.gz config-letsencrypt >tar czvf config-letsencrypt-20190616.tar.gz config-letsencrypt
> mv /config-letsencrypt /config-letsencrypt_old > mv config-letsencrypt/ config-letsencrypt_old/
3. stop the frontend 3. stop the frontend
...@@ -23,6 +23,7 @@ To re-generate a new valid certficate on one of the domains(safeyme.com/ipgaller ...@@ -23,6 +23,7 @@ To re-generate a new valid certficate on one of the domains(safeyme.com/ipgaller
4. generate a new certifcate - run the docker: letsencrypt 4. generate a new certifcate - run the docker: letsencrypt
>cd /opt/mcx/config/docker/ >cd /opt/mcx/config/docker/
>dc -f letsencrypt.yml up >dc -f letsencrypt.yml up
the latest succesfull print should be: "Server ready"
Ctrl+C too stop ! Ctrl+C too stop !
5. check that a directory named 'letsencrypt' exists under '/opt/mcz/config-letsencrypt' 5. check that a directory named 'letsencrypt' exists under '/opt/mcz/config-letsencrypt'
......
...@@ -13,6 +13,7 @@ To reserve a sendbox ...@@ -13,6 +13,7 @@ To reserve a sendbox
2. login 2. login
user: ipg.test@ipgallery.com user: ipg.test@ipgallery.com
password: @iptMgr1 password: @iptMgr1
3. select "kinetic for cities" sandbox
3. press "Reserve" to create a sendbox 3. press "Reserve" to create a sendbox
a mail will be sent to ipg.test@igallery.com with all required credentials a mail will be sent to ipg.test@igallery.com with all required credentials
in order to start using CKC api. in order to start using CKC api.
......
...@@ -56,8 +56,13 @@ install the latest version of docker ...@@ -56,8 +56,13 @@ install the latest version of docker
ref: https://www.digitalocean.com/community/tutorials/how-to-install-jenkins-on-ubuntu-16-04 ref: https://www.digitalocean.com/community/tutorials/how-to-install-jenkins-on-ubuntu-16-04
if ufw is installed on the host you must open the jenkins port (defualt=8080)
>ufw allow 8080
2.1 install 2.1 install
>wget -q -O - https://pkg.jenkins.io/debian/jenkins-ci.org.key | sudo apt-key add - >wget -q -O - https://pkg.jenkins.io/debian/jenkins.io.key | sudo apt-key add -
>echo deb https://pkg.jenkins.io/debian binary/ | sudo tee /etc/apt/sources.list.d/jenkins.list
>apt-get update >apt-get update
>apt-get install jenkins >apt-get install jenkins
>systemctl start jenkins >systemctl start jenkins
...@@ -66,7 +71,7 @@ install the latest version of docker ...@@ -66,7 +71,7 @@ install the latest version of docker
2.2 add 'jenkins' user to docker group & restart jenkins !!! 2.2 add 'jenkins' user to docker group & restart jenkins !!!
>usermod -a -G docker jenkins >usermod -a -G docker jenkins
>systemctl stop jenkins >systemctl stop jenkins
>systemctl stat jenkins >systemctl start jenkins
note: if you re-install docker you need to perform this step again note: if you re-install docker you need to perform this step again
...@@ -120,6 +125,14 @@ https://www.youtube.com/watch?v=9r1g_idFkIs ...@@ -120,6 +125,14 @@ https://www.youtube.com/watch?v=9r1g_idFkIs
>mkdir /opt/gradle >mkdir /opt/gradle
>unzip -d /opt/gradle /tmp/gradle-3.2.1-bin.zip >unzip -d /opt/gradle /tmp/gradle-3.2.1-bin.zip
add gradle to $PATH
>cd /etc/profile.d
>touch gradle.sh
>nano gradle.sh
export GRADLE_HOME=/opt/gradle/gradle-3.2.1
export PATH=${GRADLE_HOME}/bin:${PATH}
>source gradle.sh
important note: the latest gradle 5.2.1 produced errors in resolving of packages !!! important note: the latest gradle 5.2.1 produced errors in resolving of packages !!!
use only 3.2.1 at this stage use only 3.2.1 at this stage
......
...@@ -3,7 +3,7 @@ renew-certificate-for-municipalitybank.txt ...@@ -3,7 +3,7 @@ renew-certificate-for-municipalitybank.txt
objective objective
========= =========
in case the municipalitybank's cerificate expires, you need to restart gitlab,stunnel-archiva and owncloud dockers in case the municipalitybank's cerificate expires, you need to restart gitlab,stunnel-archiva and owncloud dockers
in order to read and update certficate. since it doesn't happens automaticall. in order to read and update certficate. since it doesn't happens automatically.
gitlab & archives(stunnel-archiva and owncloud) uses the same certificate. gitlab & archives(stunnel-archiva and owncloud) uses the same certificate.
A. To restart stunnel-archiva A. To restart stunnel-archiva
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or sign in to comment