Setup code runner

Author: lukazuljevic

apps/web/src/api/base.ts

@@ -60,7 +60,7 @@ api.interceptors.response.use(
 );
 
 export const runApi = axios.create({
-  baseURL: 'https://code-runner.bdeak.net/run',
+  baseURL: 'https://code-runner.dump.hr/run',
   timeout: 5000,
   headers: {
     'Content-Type': 'application/json',

apps/web/src/components/CodeRunner/CodeRunner.tsx

@@ -78,7 +78,7 @@ export const CodeRunner: FC<Props> = ({ code, language }) => {
 
     const pid = nanoid();
 
-    const stdout = new EventSource(`https://code-runner.bdeak.net/run/${pid}`);
+    const stdout = new EventSource(`https://code-runner.dump.hr/run/${pid}`);
 
     stdout.onmessage = ({ data }) => {
       const { event, text } = JSON.parse(data);

infrastructure/ansible/inventories/code-runner.ini

@@ -1,2 +1,2 @@
 [web]
-49.12.103.189
+3.124.49.131 #promini svake godine je drugi

infrastructure/ansible/playbooks/code-runner/playbook.yml

@@ -7,7 +7,7 @@
       when: groups.all|length == 0
 
 - hosts: web
-  remote_user: root # TODO: promini
+  remote_user: admin # TODO: promini
 
   pre_tasks:
     - name: Update apt cache if needed.
@@ -21,9 +21,9 @@
       become: true
       vars:
         docker_users:
-          - root # TODO: promini
+          - admin # TODO: promini
     - role: traefik
     - role: code-runner
       vars:
         docker_image: ghcr.io/dump-hr/code-runner:latest
-        code_runner_domain: code-runner.bdeak.net
+        code_runner_domain: code-runner.dump.hr

infrastructure/terraform/live/production/code-runner/.terraform-version

@@ -0,0 +1 @@
+1.5.3

infrastructure/terraform/live/production/code-runner/.terraform.lock.hcl

@@ -0,0 +1,17 @@
+data "aws_subnets" "public_subnets" {
+  tags = {
+    Project     = "internship-app"
+    Role        = "public"
+    Environment = "shared"
+    ManagedBy   = "terraform"
+  }
+}
+
+data "aws_security_groups" "public_sg" {
+  tags = {
+    Project     = "internship-app"
+    Role        = "public"
+    Environment = "shared"
+    ManagedBy   = "terraform"
+  }
+}

infrastructure/terraform/live/production/code-runner/dependecies.tf

@@ -0,0 +1,57 @@
+terraform {
+  required_version = ">= 1.0.0, < 2.0.0"
+
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 5.0"
+    }
+
+    cloudflare = {
+      source  = "cloudflare/cloudflare"
+      version = "~> 4.0"
+    }
+
+    sops = {
+      source  = "carlpett/sops"
+      version = "~> 0.5"
+    }
+  }
+}
+
+provider "aws" {
+  region  = "eu-central-1"
+  profile = "internship-app"
+}
+
+provider "cloudflare" {
+  api_token = data.sops_file.secrets.data["cloudflare_api_token"]
+}
+
+data "cloudflare_zone" "dump_hr" {
+  name = "dump.hr"
+}
+
+data "sops_file" "secrets" {
+  source_file = "secrets.enc.json"
+}
+
+module "code_runner" {
+  source = "github.com/lukazuljevic/code-runner"
+
+  name_prefix               = "code-runner-production"
+  instance_type             = "t3a.xlarge"
+  instance_count            = 1
+  instance_root_device_size = 20
+  subnets                   = data.aws_subnets.public_subnets.ids
+  security_groups           = data.aws_security_groups.public_sg.ids
+  ssh_public_key            = file("../../../../ssh-keys/production.pub")
+  website_domain            = "code-runner.dump.hr"
+  cloudflare_zone_id        = data.cloudflare_zone.dump_hr.id
+
+  tags = {
+    Project     = "code-runner"
+    Role        = "code-runner"
+    Environment = "production"
+  }
+}

infrastructure/terraform/live/production/code-runner/main.tf

@@ -0,0 +1,7 @@
+output "web_ips" {
+  value = module.code_runner.instance_ips
+}
+
+output "web_endpoint" {
+  value = module.code_runner.website_endpoint
+}

infrastructure/terraform/live/production/code-runner/outputs.tf

@@ -0,0 +1,22 @@
+{
+	"cloudflare_api_token": "ENC[AES256_GCM,data:zwitfNiS7eMF2MuFvp0Uzi4BZ8i6LdvFmsGGRwoGEgEaXqZ22MdIhw==,iv:kt4rqteHRAf4CWj6cek/GwZxgbNY4I7TxBTpxTYezF4=,tag:OnKJK7g3LoFRcVCu0Yf+hw==,type:str]",
+	"sops": {
+		"kms": [
+			{
+				"arn": "arn:aws:kms:us-east-1:763640948377:alias/internship-app",
+				"created_at": "2023-09-28T09:42:46Z",
+				"enc": "AQICAHjrdaBMJIMrrh9887xDqCyfay6NkxFQg6tntB6xewhoWQEgRSJXP1nyJPTo6/w5EatWAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMdzy6b2lWhZG7FqFEAgEQgDv5v9vALW+pELmy/+BH6uhZiVZBIqILDEylZBAr1/ytTz7AwicuxbcgCNHSTNvoplXA/lXKg3flA63mrA==",
+				"aws_profile": "internship-app"
+			}
+		],
+		"gcp_kms": null,
+		"azure_kv": null,
+		"hc_vault": null,
+		"age": null,
+		"lastmodified": "2023-09-28T09:42:56Z",
+		"mac": "ENC[AES256_GCM,data:MsvKuVs+Scgof1qauPA179ZVi3f2WKLAT2Woonnpt+VUMCrsd5YCLKB3Lwo7RGR9khkNyxCo4C9OnwX/deX1bKRtCQrcfjgcN1YTzFlB68nVH2TyD9ITy0N/aIgCkL1PrGy8YsKON5onrJe62Ja+SloqGZFt3yzf15oIN4l/bps=,iv:nsFZ7CmFU9XXUYTHYoXTNShbeeyyEbvOwE8UIejXcYM=,tag:LucwcYMjdxY0ZRP/WNe2/Q==,type:str]",
+		"pgp": null,
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.7.3"
+	}
+}