Files
openstack-ansible-os_skyline/files/nginx.conf
Jonathan Rosser 82b1f5a5e6 Initial Commit
Enough code to install skyline-apiserver and make a non functional
dashboard viewable in a browser.

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/841154

NOTE:

Only works in an AIO

Only works with LXC deployment

Manually copy files/skyline_env_d.yml and files/skyline_conf.d to
the proper directories in /etc/openstack_deploy to add skyline to
the inventory.

Boostrap / create containers, run whole openstack deployment.

Copy files/os-skyline-install.yml to /opt/openstack-ansible/playbooks

Run openstack-ansible playbooks/os-skyline-install.yml

Manually adjust haproxy config so that the skyline container is the
backend for the dashboard, just hack horizon-back config, reload
haproxy config with systemctl.

The apache config this ansible role installs is not working.

Attach to the skyline container, then:

* Stop the apache service
* Install nginx with apt
* Copy files/nginx.conf to /etc/nginx/nginx.conf
* Restart nginx

Should be possible to visit the dashboard now.

TODO:

Figure out a working apache reverse proxy config
or better....
Figure out how to do the same reverse proxying at haproxy

Work out what all the skyline.conf fields are about (where are the docs?)

Figure out why the nginx config generator binary in the skyline
venv has broken python imports (markupsafe/jinja2) - Do we need a newer
version of pip to install this all properly?

Why are certain parts of the dashboard broken with "not authorised to..."

Make the npm install parts idempotent, check we are using native ansible
modules where possible.
2022-05-11 09:25:15 +01:00

159 lines
5.2 KiB
Nginx Configuration File

worker_processes auto;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;
events {
worker_connections 1024;
multi_accept on;
}
http {
##
# Basic Settings
##
sendfile on;
tcp_nopush on;
tcp_nodelay on;
client_max_body_size 0;
types_hash_max_size 2048;
proxy_request_buffering off;
server_tokens off;
# server_names_hash_bucket_size 64;
# server_name_in_redirect off;
include /etc/nginx/mime.types;
default_type application/octet-stream;
##
# Logging Settings
##
log_format main '$remote_addr - $remote_user [$time_local] "$request_time" '
'"$upstream_response_time" "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
access_log /var/log/skyline/nginx_access.log main;
error_log /var/log/skyline/nginx_error.log;
##
# Gzip Settings
##
gzip on;
gzip_static on;
gzip_disable "msie6";
gzip_vary on;
gzip_proxied any;
gzip_comp_level 6;
gzip_buffers 16 8k;
# gzip_http_version 1.1;
gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
upstream skyline {
server unix:/var/lib/skyline/skyline.sock fail_timeout=0;
}
##
# Virtual Host Configs
##
server {
listen 80 default_server;
root /var/www/html/static;
# Add index.php to the list if you are using PHP
index index.html;
server_name _;
location / {
# First attempt to serve request as file, then
# as directory, then fall back to displaying a 404.
try_files $uri $uri/ /index.html;
expires 1d;
add_header Cache-Control "public";
}
location /api/openstack/skyline/ {
proxy_pass http://skyline/;
proxy_redirect off;
proxy_buffering off;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header Host $http_host;
}
# RegionOne neutron
location /api/openstack/regionone/neutron/ {
proxy_pass https://172.29.236.101:9696/;
proxy_redirect https://172.29.236.101:9696/ /api/openstack/regionone/neutron/;
proxy_buffering off;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header Host $http_host;
}
# RegionOne keystone
location /api/openstack/regionone/keystone/ {
proxy_pass https://172.29.236.101:5000/;
proxy_redirect https://172.29.236.101:5000/ /api/openstack/regionone/keystone/;
proxy_buffering off;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header Host $http_host;
}
# RegionOne placement
location /api/openstack/regionone/placement/ {
proxy_pass https://172.29.236.101:8780/;
proxy_redirect https://172.29.236.101:8780/ /api/openstack/regionone/placement/;
proxy_buffering off;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header Host $http_host;
}
# RegionOne glance
location /api/openstack/regionone/glance/ {
proxy_pass https://172.29.236.101:9292/;
proxy_redirect https://172.29.236.101:9292/ /api/openstack/regionone/glance/;
proxy_buffering off;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header Host $http_host;
}
# RegionOne nova
location /api/openstack/regionone/nova/ {
proxy_pass https://172.29.236.101:8774/;
proxy_redirect https://172.29.236.101:8774/ /api/openstack/regionone/nova/;
proxy_buffering off;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header Host $http_host;
}
# RegionOne cinder
location /api/openstack/regionone/cinder/ {
proxy_pass https://172.29.236.101:8776/;
proxy_redirect https://172.29.236.101:8776/ /api/openstack/regionone/cinder/;
proxy_buffering off;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header Host $http_host;
}
}
}