diff --git a/deployment/main.tf b/deployment/main.tf index 7d3fb6a..98bdb0d 100644 --- a/deployment/main.tf +++ b/deployment/main.tf @@ -33,8 +33,8 @@ resource "openstack_compute_secgroup_v2" "motley" { description = "Open access via ssh-oidc" rule { - from_port = 8080 - to_port = 8080 + from_port = 8181 + to_port = 8181 ip_protocol = "tcp" cidr = "0.0.0.0/0" } diff --git a/deployment/playbook.yaml b/deployment/playbook.yaml index 6aa67ee..71da402 100644 --- a/deployment/playbook.yaml +++ b/deployment/playbook.yaml @@ -22,6 +22,28 @@ become: yes gather_facts: yes tasks: + - name: Disable default site in nginx + ansible.builtin.file: + path: /etc/nginx/sites-enabled/default + state: absent + + - name: Move motley-cue to a different port (nginx) + ansible.builtin.lineinfile: + path: /etc/nginx/sites-available/nginx.motley_cue + search_string: "8080;" + line: 8181; + + - name: Move motley-cue to a different port (pam-ssh-oidc) + ansible.builtin.lineinfile: + path: /etc/pam.d/pam-ssh-oidc-config.ini + search_string: "http://localhost:8080/verify_user" + line: http://localhost:8181/verify_user + + - name: Restart nginx + ansible.builtin.service: + name: nginx + state: restarted + - name: Checkout repo at VM ansible.builtin.git: repo: "https://github.com/EGI-Federation/fedcloud-dashboard.git"