mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-09-24 11:06:24 +02:00
Kevin Veen-Birkenbach
9ba0efc1a1
- Introduce new resource_filter plugin (mandatory hard_default, auto entity_name fallback) - Replace get_app_conf calls with resource_filter in resource.yml.j2 - Add WEBSERVER_CPUS_EFFECTIVE, WEBSERVER_WORKER_PROCESSES, WEBSERVER_WORKER_CONNECTIONS to 05_webserver.yml - Update Nginx templates (sys-svc-webserver, web-app-magento, web-app-nextcloud) to use new vars - Extend svc-prx-openresty config with cpus/mem limits - Add unit tests for resource_filter Details: https://chatgpt.com/share/68d3a493-9a5c-800f-8cd2-bd2e7a3e3fda
60 lines
3.0 KiB
YAML
60 lines
3.0 KiB
YAML
# Webserver Configuration
|
|
|
|
# Helper
|
|
_nginx_www_dir: "{{ applications | get_app_conf('svc-prx-openresty','docker.volumes.www') }}"
|
|
_nginx_dir: "{{ applications | get_app_conf('svc-prx-openresty','docker.volumes.nginx') }}"
|
|
_nginx_conf_dir: "{{ _nginx_dir }}conf.d/"
|
|
_nginx_http_dir: "{{ _nginx_conf_dir }}http/"
|
|
|
|
## Nginx-Specific Path Configurations
|
|
NGINX:
|
|
FILES:
|
|
CONFIGURATION: "{{ _nginx_dir }}nginx.conf"
|
|
DIRECTORIES:
|
|
CONFIGURATION: "{{ _nginx_conf_dir }}" # Configuration directory
|
|
HTTP:
|
|
GLOBAL: "{{ _nginx_http_dir }}global/" # Contains global configurations which will be loaded into the http block
|
|
SERVERS: "{{ _nginx_http_dir }}servers/" # Contains one configuration per domain
|
|
MAPS: "{{ _nginx_http_dir }}maps/" # Contains mappings
|
|
STREAMS: "{{ _nginx_conf_dir }}streams/" # Contains streams configuration e.g. for ldaps
|
|
DATA:
|
|
WWW: "{{ _nginx_www_dir }}"
|
|
WELL_KNOWN: "/usr/share/nginx/well-known/" # Path where well-known files are stored
|
|
HTML: "{{ _nginx_www_dir }}public_html/" # Path where the static homepage files are stored
|
|
FILES: "{{ _nginx_www_dir }}public_files/" # Path where the web accessable files are stored
|
|
CDN: "{{ _nginx_www_dir }}public_cdn/" # Contains files which will be accessable via the content delivery network
|
|
GLOBAL: "{{ _nginx_www_dir }}global/" # Directory containing files which will be globaly accessable, @Todo remove this when css migrated to CDN
|
|
CACHE:
|
|
GENERAL: "/tmp/cache_nginx_general/" # Directory which nginx uses to cache general data
|
|
IMAGE: "/tmp/cache_nginx_image/" # Directory which nginx uses to cache images
|
|
USER: "http" # Default nginx user in ArchLinux
|
|
|
|
# Effective CPUs (float) across proxy and the current app
|
|
WEBSERVER_CPUS_EFFECTIVE: >-
|
|
{{
|
|
[
|
|
(applications | resource_filter('svc-prx-openresty', 'cpus', service_name | default(''), RESOURCE_CPUS)) | float,
|
|
(applications | resource_filter(application_id, 'cpus', service_name | default(''), RESOURCE_CPUS)) | float
|
|
] | min
|
|
}}
|
|
|
|
# Nginx requires an integer for worker_processes:
|
|
# - if cpus < 1 → 1
|
|
# - else → floor to int
|
|
WEBSERVER_WORKER_PROCESSES: >-
|
|
{{
|
|
1 if WEBSERVER_CPUS_EFFECTIVE < 1
|
|
else (WEBSERVER_CPUS_EFFECTIVE | int)
|
|
}}
|
|
|
|
# worker_connections from pids_limit (use the smaller one), with correct key/defaults
|
|
WEBSERVER_WORKER_CONNECTIONS: >-
|
|
{{
|
|
[
|
|
(applications | resource_filter('svc-prx-openresty', 'pids_limit', service_name | default(''), RESOURCE_PIDS_LIMIT)) | int,
|
|
(applications | resource_filter(application_id, 'pids_limit', service_name | default(''), RESOURCE_PIDS_LIMIT)) | int
|
|
] | min
|
|
}}
|
|
|
|
# @todo It propably makes sense to distinguish between target and source mount path, so that the config files can be stored in the openresty volumes folder
|