Vidjil: Difference between revisions

From CPB Wiki
Jump to navigation Jump to search
(Restore bkp)
(Wrapper and just owner root for privkey)
Line 14: Line 14:
* certified machine name: <code>vidjil.boldrini.org.br</code>
* certified machine name: <code>vidjil.boldrini.org.br</code>
* go to the <docker-dir> and impersonate a super-user: <code>sudo su joao.m</code> (<docker-dir> is currently <code>/home/vidjil/code/2020-vidjil/docker</code>).
* go to the <docker-dir> and impersonate a super-user: <code>sudo su joao.m</code> (<docker-dir> is currently <code>/home/vidjil/code/2020-vidjil/docker</code>).
* do <code>docker-compose -f <docker-compose-yml> down</code> to prevent Vidjil from disturbing standalone verification.  Use the most recent file of the form <code>docker-compose-boldrini-YYYY-MM-DD.yml</code> as <docker-compose-yml>.
* do <code>docker-compose -f docker-compose-wrapper.yml down</code> to prevent Vidjil from disturbing standalone verification.
* renew the certificate:
* renew the certificate:


Line 28: Line 28:
<code>sudo cp /etc/letsencrypt/live/vidjil.boldrini.org.br/privkey.pem  /home/vidjil/code/2020-vidjil/docker/vidjil-client/ssl/privkey.pem</code>
<code>sudo cp /etc/letsencrypt/live/vidjil.boldrini.org.br/privkey.pem  /home/vidjil/code/2020-vidjil/docker/vidjil-client/ssl/privkey.pem</code>
</blockquote>
</blockquote>
* make sure file privkey.pem has permissions 0600 and owner root:root
* make sure file privkey.pem has permissions 0600 and owner root
* do <code>docker-compose -f <docker-compose-yml> up -d</code> to restart Vidjil.  Use the same yml file as above.
* do <code>docker-compose -f docker-compose-wrapper.yml up -d</code> to restart Vidjil.
* visit <code>vidjil.boldrini.org.br</code> to confirm the new certificate in on.
* visit <code>vidjil.boldrini.org.br</code> to confirm the new certificate in on.
* mark on your calendar a date for the next renewal.
* mark on your calendar a date for the next renewal.

Revision as of 11:25, 7 November 2023

Vidjil is a software developed in Lille, France devoted to the analysis of V(D)J rearrangements. It is freely available and we have installed a production version and a number of test versions at the Boldrini Research Center (BRC). The production instance runs in a dedicated server.

Maintenance tasks:

  • perform backup
  • restore backup
  • renew SSL certificate (Let's Encrypt)
  • keep it up-to-date with the Lille version
  • develop specific addons for our own use

To renew the certificates:

  • this operation must be done between 1 and 8 days before expiration.
  • certified machine name: vidjil.boldrini.org.br
  • go to the <docker-dir> and impersonate a super-user: sudo su joao.m (<docker-dir> is currently /home/vidjil/code/2020-vidjil/docker).
  • do docker-compose -f docker-compose-wrapper.yml down to prevent Vidjil from disturbing standalone verification.
  • renew the certificate:

sudo certbot certonly --standalone -d vidjil.boldrini.org.br

  • issue the extra commands below to make sure the renewal is seen by Vidjil:

sudo cp /etc/letsencrypt/live/vidjil.boldrini.org.br/fullchain.pem /home/vidjil/code/2020-vidjil/docker/vidjil-client/ssl/fullchain.pem

sudo cp /etc/letsencrypt/live/vidjil.boldrini.org.br/privkey.pem /home/vidjil/code/2020-vidjil/docker/vidjil-client/ssl/privkey.pem

  • make sure file privkey.pem has permissions 0600 and owner root
  • do docker-compose -f docker-compose-wrapper.yml up -d to restart Vidjil.
  • visit vidjil.boldrini.org.br to confirm the new certificate in on.
  • mark on your calendar a date for the next renewal.