Enable deployment of both apps on a single server

Author: Ndpnt

playbooks/engine_and_federated_api/all.yml

@@ -0,0 +1,6 @@
+---
+- name: Set up infrastructure and deploy the Open Terms Archive engine and federated API
+  hosts: all
+
+- import_playbook: infrastructure.yml
+- import_playbook: application.yml

playbooks/engine_and_federated_api/application.yml

@@ -0,0 +1,43 @@
+---
+- name: Deploy the Open Terms Archive engine and federated API
+  hosts: all
+  vars:
+    ota_reverse_proxy_engine_path: "/collection-api"
+    ota_reverse_proxy_federated_api_path: "/federation-api"
+  tasks:
+    - block:
+      - name: Load the engine production config
+        ansible.builtin.include_vars:
+          name: ota_engine_app_config
+          file: "{{ inventory_dir }}/{{ ota_engine_config_path | default('../config/production.json') }}"
+      
+      - ansible.builtin.include_role:
+          name: engine
+
+      - ansible.builtin.include_role:
+          name: federated_api
+      tags: always
+
+    - block:
+      - name: Add conf in NGINX sites-available
+        ansible.builtin.template:
+          src: nginx-conf.j2
+          dest: '/etc/nginx/sites-available/ota'
+          force: true
+          mode: "644"
+
+      - name: Link conf from sites-available to sites-enabled
+        ansible.builtin.file:
+          src: '/etc/nginx/sites-available/ota'
+          dest: '/etc/nginx/sites-enabled/ota'
+          state: link
+          force: true
+      become: true
+      notify: Restart NGINX
+  
+  handlers:
+  - name: Restart NGINX
+    become: true
+    ansible.builtin.service:
+      name: nginx
+      state: restarted

playbooks/engine_and_federated_api/infrastructure.yml

@@ -0,0 +1,7 @@
+---
+- name: Set up infrastructure
+  hosts: all
+  become: true
+
+- ansible.builtin.import_playbook: ../engine/infrastructure.yml
+- ansible.builtin.import_playbook: ../federated_api/infrastructure.yml

playbooks/engine_and_federated_api/templates/nginx-conf.j2

@@ -0,0 +1,22 @@
+{{ ansible_managed | comment }}
+
+server {
+  listen 80;
+  server_name {{ inventory_hostname }};
+  
+  location {{ ota_reverse_proxy_engine_path }} {
+    # Allowing for a `burst` of up to 5 requests beyond the specified rate limit. The `nodelay` parameter ensures that excessive requests beyond the burst limit are immediately rejected with a 429 error response instead of being queued. See https://www.nginx.com/blog/rate-limiting-nginx/.
+    limit_req zone=limited burst=5 nodelay;
+    rewrite ^{{ ota_reverse_proxy_engine_path }}/(.*)$ /$1 break;
+    proxy_pass http://localhost:{{ ota_engine_app_config.api.port }};
+    proxy_redirect off;
+  }
+
+  location {{ ota_reverse_proxy_federated_api_path }} {
+    # Allowing for a `burst` of up to 5 requests beyond the specified rate limit. The `nodelay` parameter ensures that excessive requests beyond the burst limit are immediately rejected with a 429 error response instead of being queued. See https://www.nginx.com/blog/rate-limiting-nginx/.
+    limit_req zone=limited burst=5 nodelay;
+    rewrite ^{{ ota_reverse_proxy_federated_api_path }}/(.*)$ /$1 break;
+    proxy_pass http://localhost:{{ ota_federated_api_app_config.port }};
+    proxy_redirect off;
+  }
+}

roles/engine/tasks/main.yml

@@ -60,16 +60,16 @@
   become: true
   ansible.builtin.template:
     src: nginx-conf.j2
-    dest: '/etc/nginx/sites-available/ota-engine-api'
+    dest: '/etc/nginx/sites-available/ota'
     force: true
     mode: "644"
   notify: Restart NGINX
 
 - name: Link conf from sites-available to sites-enabled
   become: true
   ansible.builtin.file:
-    src: '/etc/nginx/sites-available/ota-engine-api'
-    dest: '/etc/nginx/sites-enabled/ota-engine-api'
+    src: '/etc/nginx/sites-available/ota'
+    dest: '/etc/nginx/sites-enabled/ota'
     state: link
     force: true
   notify: Restart NGINX

roles/federated_api/tasks/main.yml

@@ -62,16 +62,16 @@
   become: true
   ansible.builtin.template:
     src: nginx-conf.j2
-    dest: '/etc/nginx/sites-available/ota-federated-api'
+    dest: '/etc/nginx/sites-available/ota'
     force: true
     mode: "644"
   notify: Restart NGINX
 
 - name: Link conf from sites-available to sites-enabled
   become: true
   ansible.builtin.file:
-    src: '/etc/nginx/sites-available/ota-federated-api'
-    dest: '/etc/nginx/sites-enabled/ota-federated-api'
+    src: '/etc/nginx/sites-available/ota'
+    dest: '/etc/nginx/sites-enabled/ota'
     state: link
     force: true
   notify: Restart NGINX