Vidjil: Difference between revisions

From CPB Wiki
Jump to navigation Jump to search
(Vidjil basics and certi renew)
 
m (List is with *, not -)
Line 3: Line 3:
Maintenance tasks:
Maintenance tasks:


- perform backup
* perform backup
- renew SSL certificate (Let's Encrypt)
* renew SSL certificate (Let's Encrypt)
- keep it up-to-date with the Lille version
* keep it up-to-date with the Lille version
- develop specific addons for our own use
* develop specific addons for our own use


To renew the certificates:
To renew the certificates:


- this operation must be done between 1 and 8 days before expiration.
* this operation must be done between 1 and 8 days before expiration.
- certificed machine name: vidjil.boldrini.org.br
* certificed machine name: vidjil.boldrini.org.br
- go to the <docker-dir> and impersonate a super-user: 'sudo su joao.m' (<docker-dir> is probably /home/vidjil/code/2020-vidjil/docker).
* go to the <docker-dir> and impersonate a super-user: 'sudo su joao.m' (<docker-dir> is probably /home/vidjil/code/2020-vidjil/docker).
- do 'docker-compose -f <docker-compose-yml> down' to prevent Vidjil from disturbing standalone verification.  Use the most recent file of the form docker-compose-boldrini-YYYY-MM-DD.yml as <docker-compose-yml>.
* do 'docker-compose -f <docker-compose-yml> down' to prevent Vidjil from disturbing standalone verification.  Use the most recent file of the form docker-compose-boldrini-YYYY-MM-DD.yml as <docker-compose-yml>.
- renew the certificate:
* renew the certificate:


sudo certbot certonly --standalone -d vidjil.boldrini.org.br
sudo certbot certonly --standalone -d vidjil.boldrini.org.br


- issue the extra commands below to make sure the renewal is seen by Vidjil:
* issue the extra commands below to make sure the renewal is seen by Vidjil:


sudo cp /etc/letsencrypt/live/vidjil.boldrini.org.br/fullchain.pem /home/vidjil/code/2020-vidjil/docker/vidjil-client/ssl/fullchain.pem
sudo cp /etc/letsencrypt/live/vidjil.boldrini.org.br/fullchain.pem /home/vidjil/code/2020-vidjil/docker/vidjil-client/ssl/fullchain.pem
sudo cp /etc/letsencrypt/live/vidjil.boldrini.org.br/privkey.pem  /home/vidjil/code/2020-vidjil/docker/vidjil-client/ssl/privkey.pem
sudo cp /etc/letsencrypt/live/vidjil.boldrini.org.br/privkey.pem  /home/vidjil/code/2020-vidjil/docker/vidjil-client/ssl/privkey.pem


- make sure file privkey.pem has permissions 0600 and owner root:root
* make sure file privkey.pem has permissions 0600 and owner root:root
- do 'docker-compose -f <docker-compose-yml> up -d' to restart Vidjil.  Use the same yml file as above.
* do 'docker-compose -f <docker-compose-yml> up -d' to restart Vidjil.  Use the same yml file as above.
- visit vidjil.boldrini.org.br to confirm the new certificate in on.
* visit vidjil.boldrini.org.br to confirm the new certificate in on.
- mark your calendar a date for the next renewal.
* mark your calendar a date for the next renewal.

Revision as of 14:35, 28 March 2023

Vidjil is a software developed in Lille, France devoted to the analysis of V(D)J rearrangements. It is freely available and we have installed a production version and a number of test versions at the Boldrini Research Center (BRC). The production instance runs in a dedicated server.

Maintenance tasks:

  • perform backup
  • renew SSL certificate (Let's Encrypt)
  • keep it up-to-date with the Lille version
  • develop specific addons for our own use

To renew the certificates:

  • this operation must be done between 1 and 8 days before expiration.
  • certificed machine name: vidjil.boldrini.org.br
  • go to the <docker-dir> and impersonate a super-user: 'sudo su joao.m' (<docker-dir> is probably /home/vidjil/code/2020-vidjil/docker).
  • do 'docker-compose -f <docker-compose-yml> down' to prevent Vidjil from disturbing standalone verification. Use the most recent file of the form docker-compose-boldrini-YYYY-MM-DD.yml as <docker-compose-yml>.
  • renew the certificate:

sudo certbot certonly --standalone -d vidjil.boldrini.org.br

  • issue the extra commands below to make sure the renewal is seen by Vidjil:

sudo cp /etc/letsencrypt/live/vidjil.boldrini.org.br/fullchain.pem /home/vidjil/code/2020-vidjil/docker/vidjil-client/ssl/fullchain.pem sudo cp /etc/letsencrypt/live/vidjil.boldrini.org.br/privkey.pem /home/vidjil/code/2020-vidjil/docker/vidjil-client/ssl/privkey.pem

  • make sure file privkey.pem has permissions 0600 and owner root:root
  • do 'docker-compose -f <docker-compose-yml> up -d' to restart Vidjil. Use the same yml file as above.
  • visit vidjil.boldrini.org.br to confirm the new certificate in on.
  • mark your calendar a date for the next renewal.