Merge remote-tracking branch 'compositions/monorepo-prep' into monorepo-prep

Author: martenrichter

.gitignore

@@ -11,4 +11,10 @@ daemons/*/dist
 .env
 daemons/staticserver/oss-attribution/*
 tsconfig.tsbuildinfo
+.env-file
+*.pem
+*.key
+*.crt
+deploy/docker-compose/.env
+deploy/helmchart/configexamples
 

deploy/avsrouter/clouduserdata.yaml

@@ -0,0 +1,31 @@
+#cloud-config
+write_files:
+- content: |
+    # configure your avs server instance
+    # first nameofyourcluster|secret|URL of the dispatcher
+    AVSCONFIG=yourclustername|sharedsecretwithdispatcher|https://urlofyourfailsinstallation/avs
+    # the domain name or better hostname of your router
+    AVSDOMAIN=hostnameofyourrouter.example.com
+    # optionally you can set the timezone, defaults to Europe/Berlin, required to find a restart time in the night
+    # AVSTIMEZONE=
+    #turns of staging, comment if you would like to use cert-bot staging environment
+    STAGING=
+  path: /home/linux/.env
+
+repo_update: true
+repo_upgrade: all
+
+packages:
+  - apt-transport-https
+  - ca-certificates
+  - curl
+  - gnupg-agent
+  - software-properties-common
+
+runcmd:
+  - apt-get update -y && apt-get install software-properties-common -y && apt-get update -y
+  - curl -fsSL https://download.docker.com/linux/debian/gpg | apt-key add -   
+  - add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/debian $(lsb_release -cs) stable"
+  - apt-get update -y && apt-get install docker-ce docker-ce-cli docker-compose-plugin -y 
+  - wget -O /home/linux/docker-compose.yml https://github.com/fails-components/compositions/raw/master/avsrouter/docker-compose.yml
+  - cd /home/linux/ && docker compose pull && docker compose up -d

deploy/avsrouter/docker-compose.yml

@@ -0,0 +1,72 @@
+version: "3.9"
+volumes:
+  acmeroot:
+
+  certdir:
+
+  certbotdata:
+
+  avsconfigdir:
+
+services:
+  avsrouter:
+    image: "ghcr.io/fails-components/avsrouter:${FAILS_TAG:-master}"
+    volumes:
+      - acmeroot:/usr/src/avsrouter/challenges:ro
+      - certdir:/usr/src/avsrouter/certs:ro
+      - avsconfigdir:/usr/src/avsrouter/config:rw   
+    restart: always
+    ports:
+      - "443:443"
+      - "443:443/udp"
+      - "80:80"
+    healthcheck:
+      test: curl --fail http://localhost/health || exit 1
+      interval: 60s
+      retries: 5
+      start_period: 20s
+      timeout: 10s
+    
+    environment:
+# region config, needs to be set externally, aswell as AVSDOMAIN
+      - AVSCONFIG
+      - AVSROUTERURL=https://${AVSDOMAIN}/avfails
+      - AVSROUTERWSURL=wss://${AVSDOMAIN}/avfails
+      - AVSMAXCLIENTS=${AVSMAXCLIENTS:-50}
+      - AVSMAXREALMS=${AVSMAXREALMS:-10}
+      - AVSROUTERHOST=0.0.0.0
+      - AVSROUTERPORT=443
+# filename for key and cert fopr http1, checked all 5 sec for changes
+      - AVSROUTERKEYPEM=/usr/src/avsrouter/certs/live/${AVSDOMAIN}/privkey.pem
+      - AVSROUTERCERTPEM=/usr/src/avsrouter/certs/live/${AVSDOMAIN}/fullchain.pem
+# dirname for serving acme challenges
+      - AVSROUTERACMEHTTP1DIR=/usr/src/avsrouter/challenges
+# time zones to find suitable restart times for certificate rotations defaults to Europe/Berlin      
+      - AVSTIMEZONE
+  certbot:
+    image: certbot/certbot
+    depends_on:
+      avsrouter:
+        condition: service_healthy
+    restart: always
+    volumes:
+      - certbotdata:/var/lib/letsencrypt:rw
+      - certdir:/etc/letsencrypt:rw
+      - acmeroot:/var/www/html:rw
+    entrypoint: /bin/sh -c 'trap exit TERM; 
+      if [ ! -f /etc/letsencrypt/certs/live/${AVSDOMAIN}/privkey.pem ];
+      then
+        echo "Obtain initial certificate!";
+        certbot certonly --webroot -w /var/www/html -d ${AVSDOMAIN}  --non-interactive --agree-tos
+           --register-unsafely-without-email ${STAGING---staging};
+      fi;
+      while :;
+      do
+        echo "Check certificate renewal"; 
+        certbot renew;
+        echo "Sleep for 12 h"; 
+        sleep 12h & wait $${!};
+      done;' 
+
+
+

deploy/avsrouter/readme.md

@@ -0,0 +1,2 @@
+Experimental files using docker compose to spin up audio-video-screen routers.
+This is not ready yet, do not use it.