diff options
| -rwxr-xr-x | production-deploy.sh | 10 | ||||
| -rw-r--r-- | production.scm | 35 |
2 files changed, 42 insertions, 3 deletions
diff --git a/production-deploy.sh b/production-deploy.sh index c774a31..d87a459 100755 --- a/production-deploy.sh +++ b/production-deploy.sh @@ -1,7 +1,7 @@ #! /bin/sh -e # genenetwork-machines --- Guix configuration for genenetwork machines -# Copyright © 2022 Arun Isaac <arunisaac@systemreboot.net> +# Copyright © 2022, 2024 Arun Isaac <arunisaac@systemreboot.net> # # This file is part of genenetwork-machines. # @@ -22,9 +22,17 @@ # Build and install genenetwork production container on tux02. container_script=$(guix system container \ + --network \ + --load-path . \ --verbosity=3 \ + --share=/export2/guix-containers/genenetwork/var/lib/acme=/var/lib/acme \ --share=/export2/guix-containers/genenetwork/var/lib/mysql=/var/lib/mysql \ --share=/export2/guix-containers/genenetwork/var/lib/virtuoso=/var/lib/virtuoso \ + --expose=/export2/guix-containers/genenetwork/etc/genenetwork=/etc/genenetwork \ + --expose=/export/data/genenetwork-xapian \ + --share=/export/data/genenetwork-sqlite \ + --expose=/export/data/genenetwork/genotype_files \ + --share=/var/run/mysqld=/run/mysqld \ production.scm) echo $container_script diff --git a/production.scm b/production.scm index 5d6554c..12ec385 100644 --- a/production.scm +++ b/production.scm @@ -1,5 +1,5 @@ ;;; genenetwork-machines --- Guix configuration for genenetwork machines -;;; Copyright © 2022, 2023 Arun Isaac <arunisaac@systemreboot.net> +;;; Copyright © 2022–2024 Arun Isaac <arunisaac@systemreboot.net> ;;; ;;; This file is part of genenetwork-machines. ;;; @@ -18,8 +18,13 @@ ;;; <https://www.gnu.org/licenses/>. (use-modules (gnu) + (genenetwork services genenetwork) + ((gnu packages admin) #:select (shepherd)) (gn services databases) - (gnu services databases)) + (gnu services databases) + (forge acme) + (forge nginx) + (forge socket)) (operating-system (host-name "genenetwork") @@ -30,6 +35,10 @@ (targets (list "/dev/sdX")))) (file-systems %base-file-systems) (users %base-user-accounts) + (sudoers-file + (mixed-text-file "sudoers" + "@include " %sudoers-specification + "\nacme ALL = NOPASSWD: " (file-append shepherd "/bin/herd") " restart nginx\n")) (packages %base-packages) (services (cons* (service mysql-service-type (mysql-configuration @@ -38,4 +47,26 @@ (virtuoso-configuration (server-port 8891) (http-server-port 8892))) + (service forge-nginx-service-type + (forge-nginx-configuration + (http-listen (forge-ip-socket + (ip "0.0.0.0") + (port 8890))) + (https-listen (forge-ip-socket + (ip "0.0.0.0") + (port 8891))))) + (service acme-service-type + (acme-configuration + (email "arunisaac@systemreboot.net"))) + (service genenetwork-service-type + (genenetwork-configuration + (server-name "test1.genenetwork.org") + (gn2-port 8892) + (gn3-port 8893) + (sql-uri "mysql://webqtlout:webqtlout@localhost/db_webqtl") + (auth-db "/export/data/genenetwork-sqlite/auth.db") + (xapian-db "/export/data/genenetwork-xapian") + (genotype-files "/export/data/genenetwork/genotype_files") + (sparql-endpoint "http://localhost:8892/sparql") + (gn3-data-directory "/export/data/genenetwork"))) %base-services))) |