Montagu reverse proxy

A reverse proxy for Montagu. This allows us to expose a single port (443) and map different paths to different apps (containers).

SSL configuration files

nginx.montagu.conf contains references to an X509 certificate and a private key, which it expects at /etc/montagu/proxy/certificate.pem and /etc/montagu/proxy/ssl_key.pem, respectively. The /etc/montagu/proxy directory can be mounted from a volume providing these certificates, or they can be injected into the container using docker copy.

These certificates can be provisioned using Let's Encrypt (or another ACME provider). The /var/www/.well-known/acme-challenge directory inside the container will be exposed under the /.well-known/acme-challenge path. This directory can be mounted from a volume that is shared with a certbot image.

When the container starts, if no certificate is present, a self-signed certificate will be generated. This helps avoid a chicken and egg problem where nginx cannot start without a certificate, and a certificate cannot be obtained without nginx running.

When a new the certificate is obtained and written to /etc/montagu/proxy, nginx needs to be reloaded by entering the container and running nginx -s reload.

Build and run locally

Run ./scripts/dev.sh. This runs up the proxy along with the apis and portals, in order to manually test links, logins etc. The test user with email test.user@example.com and password password is added by default. Optionally include 'data' parameter (./scripts/dev.sh data) to include generating Montagu test data. Orderly test data is always generated.

Testing

Run unit tests with npm run test. Jest will pick up test in files with the .test.js extension.

To run integration tests:

1. Make sure you have Chrome (or Chromium) installed. Depending on the platform you may also need to install chromedriver.
   • On Ubuntu, sudo apt install chromium-browser chromium-chromedriver will install both.
2. Run the proxy and dependencies with ./scripts/dev.sh
3. Then run tests with npm run integration-test

Jest will pick up tests in files with the .itest.js extension.

Buildkite

1. ./scripts/make-integration-test-image.sh makes the integration tests image which contains all selenium test dependencies
2. ./scripts/build-image.sh: builds and pushes the main app image to docker hub
3. ./scripts/run-integration-tests.sh: runs the app image created in the previous step along with all dependencies and then runs the integration tests image created in step 2.
4. ./dev/build-minimal-image.sh: builds an image montagu-reverse-proxy-minimal that just provides login functionality. This is used for testing OrderlyWeb login integration without having to run an entire Montagu deployment.