Fix jupyterhub configuration

ooni · Oct 1, 2024 · 98cacf9 · 98cacf9
1 parent d391cb6
commit 98cacf9
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 4 deletions.
diff --git a/ansible/host_vars/oonidata.ooni.org b/ansible/host_vars/oonidata.ooni.org
@@ -1 +1,2 @@
 admin_group_name: adm
+tls_cert_dir: /var/lib/dehydrated/certs
diff --git a/ansible/roles/oonidata/defaults/main.yml b/ansible/roles/oonidata/defaults/main.yml
@@ -2,6 +2,7 @@ miniconda_install_dir: /opt/miniconda
 jupyterhub_config_dir: /etc/jupyterhub
 jupyterhub_runtime_dir: /srv/jupyterhub
 oonipipeline_runtime_dir: /srv/oonipipeline
+tls_cert_dir: /etc/letsencrypt/live
 admin_group_name: admin
 enable_oonipipeline_worker: true
 enable_jupyterhub: true
diff --git a/ansible/roles/oonidata/templates/jupyterhub_config.py.j2 b/ansible/roles/oonidata/templates/jupyterhub_config.py.j2
@@ -1,2 +1,3 @@
 c.JupyterHub.bind_url = 'http://127.0.0.1:8888'
 c.Spawner.cmd = ['{{ miniconda_install_dir }}/bin/jupyterhub-singleuser']
+c.Authenticator.allow_all = True
diff --git a/ansible/roles/oonidata/templates/nginx-jupyterhub.j2 b/ansible/roles/oonidata/templates/nginx-jupyterhub.j2
@@ -10,9 +10,9 @@ server {
 
     include /etc/nginx/ssl_intermediate.conf;
 
-    ssl_certificate /etc/letsencrypt/live/{{ inventory_hostname }}/fullchain.pem;
-    ssl_certificate_key /etc/letsencrypt/live/{{ inventory_hostname }}/privkey.pem;
-    ssl_trusted_certificate /etc/letsencrypt/live/{{ inventory_hostname }}/chain.pem;
+    ssl_certificate {{ tls_cert_dir }}/{{ inventory_hostname }}/fullchain.pem;
+    ssl_certificate_key {{ tls_cert_dir }}/{{ inventory_hostname }}/privkey.pem;
+    ssl_trusted_certificate {{ tls_cert_dir }}/{{ inventory_hostname }}/chain.pem;
 
     server_name _;
     access_log  /var/log/nginx/{{ inventory_hostname }}.access.log;
@@ -37,4 +37,4 @@ server {
         proxy_set_header X-Scheme $scheme;
         proxy_buffering off;
     }
-}
+}
Original file line number	Diff line number	Diff line change
		@@ -1 +1,2 @@
		admin_group_name: adm
		tls_cert_dir: /var/lib/dehydrated/certs