boxswapper/Internal-apps
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

functional deployment without SSO for trade-hub

Browse Source
This commit is contained in:
boxswapper
2026-11-13 14:37:47 -07:00
parent 2b72f23ea9
commit f17cf9604e
8 changed files with 71 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
roles/trade_hub/README.md
View File

@@ -61,7 +61,8 @@ node environment, then to the development default `sc_inventory_dev`.
| `trade_hub_network` | `sc-inventory` | Podman network name |
| `trade_hub_volume` | `sc-inventory-data` | PostgreSQL data volume |
| `trade_hub_frontend_bind` | `0.0.0.0` | Address the frontend publishes on |
| `trade_hub_frontend_port` | `8080` | Host port for the frontend |
| `trade_hub_frontend_port` | `8071` | Host publish and container listen port for the frontend |
| `trade_hub_frontend_ip` | `10.10.0.5` | Static address on the shared `npm_internal` proxy network |
| `trade_hub_cookie_secure` | `false` | Mark session cookies `Secure` (enable behind TLS) |
| `trade_hub_healthcheck_url` | `http://127.0.0.1:<port>/healthz` | Post-deploy check |
| `trade_hub_remove_legacy_apache` | `false` | Remove a container named `my-apache-server` |
@@ -77,6 +78,18 @@ existing installation is upgraded in place.
ansible-playbook site.yml --tags trade_hub -e trade_hub_postgres_password='...'
```
The role verifies `http://127.0.0.1:8080/healthz` after starting the containers.
The role verifies `http://127.0.0.1:8071/healthz` after starting the containers.
Only the frontend publishes a port; the database and backend stay on the
internal podman network.
## Proxy manager
The frontend is pinned to `10.10.0.5` on the shared `npm_internal` podman
network, which also hosts Nginx Proxy Manager (10.10.0.19). Configure the proxy
host upstream as `http://10.10.0.5:8071`.
The `network` role must run before this one so `npm_internal` exists:
```bash
ansible-playbook -i inventory.ini ansible-playbook.yml --tags "network,trade_hub"
```