Fix jupyterhub configuration

ooni · Oct 1, 2024 · 98cacf9 · 98cacf9
1 parent d391cb6
commit 98cacf9
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 4 deletions.
diff --git a/ansible/host_vars/oonidata.ooni.org b/ansible/host_vars/oonidata.ooni.org
@@ -1 +1,2 @@
 admin_group_name: adm
+tls_cert_dir: /var/lib/dehydrated/certs
diff --git a/ansible/roles/oonidata/defaults/main.yml b/ansible/roles/oonidata/defaults/main.yml
@@ -2,6 +2,7 @@ miniconda_install_dir: /opt/miniconda
 jupyterhub_config_dir: /etc/jupyterhub
 jupyterhub_runtime_dir: /srv/jupyterhub
 oonipipeline_runtime_dir: /srv/oonipipeline
+tls_cert_dir: /etc/letsencrypt/live
 admin_group_name: admin
 enable_oonipipeline_worker: true
 enable_jupyterhub: true
diff --git a/ansible/roles/oonidata/templates/jupyterhub_config.py.j2 b/ansible/roles/oonidata/templates/jupyterhub_config.py.j2
@@ -1,2 +1,3 @@
 c.JupyterHub.bind_url = 'http://127.0.0.1:8888'
 c.Spawner.cmd = ['{{ miniconda_install_dir }}/bin/jupyterhub-singleuser']
+c.Authenticator.allow_all = True
diff --git a/ansible/roles/oonidata/templates/nginx-jupyterhub.j2 b/ansible/roles/oonidata/templates/nginx-jupyterhub.j2
@@ -10,9 +10,9 @@ server {
 
  include /etc/nginx/ssl_intermediate.conf;
 
- ssl_certificate /etc/letsencrypt/live/{{ inventory_hostname }}/fullchain.pem;
- ssl_certificate_key /etc/letsencrypt/live/{{ inventory_hostname }}/privkey.pem;
- ssl_trusted_certificate /etc/letsencrypt/live/{{ inventory_hostname }}/chain.pem;
+ ssl_certificate {{ tls_cert_dir }}/{{ inventory_hostname }}/fullchain.pem;
+ ssl_certificate_key {{ tls_cert_dir }}/{{ inventory_hostname }}/privkey.pem;
+ ssl_trusted_certificate {{ tls_cert_dir }}/{{ inventory_hostname }}/chain.pem;
 
  server_name _;
  access_log /var/log/nginx/{{ inventory_hostname }}.access.log;
@@ -37,4 +37,4 @@ server {
  proxy_set_header X-Scheme $scheme;
  proxy_buffering off;
  }
-}
+}