From c8e7ac7f3a4ea7b8b9cf6fe6d458eb288d2124e5 Mon Sep 17 00:00:00 2001 From: brucec Date: Fri, 22 Mar 2019 11:42:11 -0700 Subject: [PATCH] Rm userdata_secondary.sh to cleanup --- Terraform/userdata_secondary.sh | 190 -------------------------------- 1 file changed, 190 deletions(-) delete mode 100644 Terraform/userdata_secondary.sh diff --git a/Terraform/userdata_secondary.sh b/Terraform/userdata_secondary.sh deleted file mode 100644 index 024d069..0000000 --- a/Terraform/userdata_secondary.sh +++ /dev/null @@ -1,190 +0,0 @@ -#!/bin/bash - -yum update -y -yum install -y java-1.8.0>> /tmp/yum-java8.log -alternatives --set java /usr/lib/jvm/jre-1.8.0-openjdk.x86_64/bin/java -yum -y remove java-1.7.0-openjdk>> /tmp/yum-java7.log 2>&1 - -##Install Artifactory -wget https://bintray.com/jfrog/artifactory-pro-rpms/rpm -O bintray-jfrog-artifactory-pro-rpms.repo -mv bintray-jfrog-artifactory-pro-rpms.repo /etc/yum.repos.d/ -sleep 10 -yum install -y jfrog-artifactory-pro-${artifactory_version}>> /tmp/yum-artifactory.log 2>&1 -yum install -y nginx>> /tmp/yum-nginx.log 2>&1 -curl -L -o /opt/jfrog/artifactory/tomcat/lib/mysql-connector-java-5.1.38.jar https://bintray.com/artifact/download/bintray/jcenter/mysql/mysql-connector-java/5.1.38/mysql-connector-java-5.1.38.jar -openssl req -nodes -x509 -newkey rsa:4096 -keyout /etc/pki/tls/private/example.key -out /etc/pki/tls/certs/example.pem -days 356 -subj "/C=US/ST=California/L=SantaClara/O=IT/CN=*.localhost" - - -cat </var/opt/jfrog/artifactory/etc/binarystore.xml - - - - - - - - - - - - - - - - crossNetworkStrategy - crossNetworkStrategy - 2 - - - - - remote - - - - local - - - s3.dualstack.${s3_bucket_region}.amazonaws.com - ${s3_access_key} - ${s3_secret_key} - ${s3_bucket_name} - - -EOF - -cat </var/opt/jfrog/artifactory/etc/db.properties - type=mysql - driver=com.mysql.jdbc.Driver - url=jdbc:mysql://${db_url}/${db_name}??characterEncoding=UTF-8&elideSetAutoCommits=true - username=${db_user} - password=${db_password} -EOF - -mkdir -p /var/opt/jfrog/artifactory/etc/security - -cat </var/opt/jfrog/artifactory/etc/security/master.key -${master_key} -EOF - -cat </var/opt/jfrog/artifactory/etc/artifactory.cluster.license -${artifactory_license_1} - -${artifactory_license_2} - -${artifactory_license_3} - -${artifactory_license_4} - -${artifactory_license_5} -EOF - -cat </var/opt/jfrog/artifactory/etc/ha-node.properties - node.id=art1 - artifactory.ha.data.dir=/var/opt/jfrog/artifactory/data - context.url=http://127.0.0.1:8081/artifactory - membership.port=10001 - hazelcast.interface=172.25.0.3 - primary=false -EOF - -cat </etc/pki/tls/certs/result.pem -${ssl_certificate} -EOF - -cat </etc/pki/tls/private/result.key -${ssl_certificate_key} -EOF - -cat </etc/nginx/nginx.conf - #user nobody; - worker_processes 1; - error_log /var/log/nginx/error.log info; - #pid logs/nginx.pid; - events { - worker_connections 1024; - } - - http { - include mime.types; - variables_hash_max_size 1024; - variables_hash_bucket_size 64; - server_names_hash_max_size 4096; - server_names_hash_bucket_size 128; - types_hash_max_size 2048; - types_hash_bucket_size 64; - proxy_read_timeout 2400s; - client_header_timeout 2400s; - client_body_timeout 2400s; - proxy_connect_timeout 75s; - proxy_send_timeout 2400s; - proxy_buffer_size 32k; - proxy_buffers 40 32k; - proxy_busy_buffers_size 64k; - proxy_temp_file_write_size 250m; - proxy_http_version 1.1; - client_body_buffer_size 128k; - - include /etc/nginx/conf.d/*.conf; - default_type application/octet-stream; - log_format main '$remote_addr - $remote_user [$time_local] "$request" ' - '$status $body_bytes_sent "$http_referer" ' - '"$http_user_agent" "$http_x_forwarded_for"'; - access_log /var/log/nginx/access.log main; - sendfile on; - #tcp_nopush on; - #keepalive_timeout 0; - keepalive_timeout 65; - } -EOF - -cat </etc/nginx/conf.d/artifactory.conf -ssl_certificate /etc/pki/tls/certs/cert.pem; -ssl_certificate_key /etc/pki/tls/private/cert.key; -ssl_session_cache shared:SSL:1m; -ssl_prefer_server_ciphers on; -## server configuration -server { - listen 443 ssl; - listen 80 ; - server_name ~(?.+)\\.${certificate_domain} ${artifactory_server_name}.${certificate_domain}; - if (\$http_x_forwarded_proto = '') { - set \$http_x_forwarded_proto \$scheme; - } - ## Application specific logs - ## access_log /var/log/nginx/artifactory-access.log timing; - ## error_log /var/log/nginx/artifactory-error.log; - rewrite ^/$ /artifactory/webapp/ redirect; - rewrite ^/artifactory/?(/webapp)?$ /artifactory/webapp/ redirect; - rewrite ^/(v1|v2)/(.*) /artifactory/api/docker/\$repo/\$1/\$2; - chunked_transfer_encoding on; - client_max_body_size 0; - location /artifactory/ { - proxy_read_timeout 2400; - proxy_pass_header Server; - proxy_cookie_path ~*^/.* /; - proxy_pass http://127.0.0.1:8081/artifactory/; - proxy_set_header X-Artifactory-Override-Base-Url \$http_x_forwarded_proto://\$host:\$server_port/artifactory; - proxy_set_header X-Forwarded-Port \$server_port; - proxy_set_header X-Forwarded-Proto \$http_x_forwarded_proto; - proxy_set_header Host \$http_host; - proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; - } -} -EOF - -cat /etc/pki/tls/certs/result.pem | sed 's/CERTIFICATE----- /CERTIFICATE-----\n/g' | sed 's/-----END/\n-----END/' > temp.pem -mv -f temp.pem /etc/pki/tls/certs/cert.pem -cat /etc/pki/tls/private/result.key | sed 's/KEY----- /KEY-----\n/g' | sed 's/-----END/\n-----END/' > temp.key -mv -f temp.key /etc/pki/tls/private/cert.key -echo "artifactory.ping.allowUnauthenticated=true" >> /var/opt/jfrog/artifactory/etc/artifactory.system.properties -echo "export JAVA_OPTIONS=\"${EXTRA_JAVA_OPTS}\"" >> /var/opt/jfrog/artifactory/etc/default -sed -i -e "s/art1/art-$(date +%s$RANDOM)/" /var/opt/jfrog/artifactory/etc/ha-node.properties -sed -i -e "s/127.0.0.1/$(curl http://169.254.169.254/latest/meta-data/public-ipv4)/" /var/opt/jfrog/artifactory/etc/ha-node.properties -sed -i -e "s/172.25.0.3/$(curl http://169.254.169.254/latest/meta-data/local-ipv4)/" /var/opt/jfrog/artifactory/etc/ha-node.properties -chown artifactory:artifactory -R /var/opt/jfrog/artifactory/etc/* && chown artifactory:artifactory -R /var/opt/jfrog/artifactory/* && chown artifactory:artifactory -R /var/opt/jfrog/artifactory/etc/security - -## Sleep 2 minute to avoid race condition -sleep 120 -service artifactory start -service nginx start \ No newline at end of file