christianlight/tutor
7
0
Fork 0
mirror of https://github.com/ChristianLight/tutor.git synced 2024-06-17 12:52:21 +00:00
Code Issues Releases Activity
0052481d42
tutor/tutor/templates/config.yml

82 lines
2.7 KiB
YAML
Raw Normal View History

Tutor v3 complete rewrite Replace all make commands by a single "tutor" binary. Environment and data are all moved to ~/.tutor/local/share/tutor. We take the opportunity to add a web UI and revamp the documentation. This is a complete rewrite. Close #121. Close #147.
2019-01-22 20:25:04 +00:00
---
Major refactoring of config module Configuration loading was overly complex. Here, we simplify it drastically with reasonable defaults. Hacky additional variables are unncessary now that we use custom jinja2 filters.
2019-05-11 22:11:44 +00:00
# These configuration values must be stored in the user's config.yml.
MYSQL_ROOT_PASSWORD: "{{ 8|random_string }}"
OPENEDX_MYSQL_PASSWORD: "{{ 8|random_string }}"
Rename SECRET_KEY to OPENEDX_SECRET_KEY
2019-07-07 02:02:03 +00:00
OPENEDX_SECRET_KEY: "{{ 24|random_string }}"
Major refactoring of config module Configuration loading was overly complex. Here, we simplify it drastically with reasonable defaults. Hacky additional variables are unncessary now that we use custom jinja2 filters.
2019-05-11 22:11:44 +00:00
ID: "{{ 24|random_string }}"
Fix missing password values from generated configuration Passwords were not being stored to config.yml during the first quickstart.
2019-06-24 10:36:19 +00:00
# This must be defined early
LMS_HOST: "www.myopenedx.com"
Major refactoring of config module Configuration loading was overly complex. Here, we simplify it drastically with reasonable defaults. Hacky additional variables are unncessary now that we use custom jinja2 filters.
2019-05-11 22:11:44 +00:00
# The following are default values
v11.0.0 (2020-12-09) - 💥[Improvement] Upgrade Open edX to Koa - 💥 Setting changes: - The ``ACTIVATE_HTTPS`` setting was renamed to ``ENABLE_HTTPS``. - Other ``ACTIVATE_*`` variables were all renamed to ``RUN_*``. - The ``WEB_PROXY`` setting was removed and ``RUN_CADDY`` was added. - The ``NGINX_HTTPS_PORT`` setting is deprecated. - Architectural changes: - Use Caddy as a web proxy for automated SSL/TLS certificate generation: - Nginx no longer listens to port 443 for https traffic - The Caddy configuration file comes with a new ``caddyfile`` patch for much simpler SSL/TLS management. - Configuration files for web proxies are no longer provided. - Kubernetes deployment no longer requires setting up a custom Ingress resource or custom manager. - Gunicorn and Whitenoise are replaced by uwsgi: this increases boostrap performance and makes it no longer necessary to mount media folders in the Nginx container. - Replace memcached and rabbitmq by redis. - Additional features: - Make it possible to disable all plugins at once with ``plugins disable all``. - Add ``tutor k8s wait`` command to wait for a pod to become ready - Faster, more reliable static assets with local memory caching - Deprecation: proxy files for Apache and Nginx are no longer provided out of the box. - Removed plugin `{{ patch (...) }}` statements: - "https-create", "k8s-ingress-rules", "k8s-ingress-tls-hosts": these are no longer necessary. Instead, declare your app in the "caddyfile" patch. - "local-docker-compose-nginx-volumes": this patch was primarily used to serve media assets. The recommended is now to serve assets with uwsgi.
2020-09-17 10:53:14 +00:00
RUN_LMS: true
RUN_CMS: true
RUN_ELASTICSEARCH: true
RUN_MONGODB: true
RUN_MYSQL: true
RUN_REDIS: true
RUN_SMTP: true
feat: get rid of the nginx container and services Nginx and Caddy performed duplicate tasks. It was decided to get rid of the nginx container, for simplification. This is a breaking change for plugin developers. Also, applications that collect nginx logs will have to be modified. See: - Corresponding TEP: https://discuss.overhang.io/t/tep-get-rid-of-the-nginx-container/2024 - the prior discussion: https://discuss.overhang.io/t/why-caddy-nginx/1952
2021-10-14 10:47:23 +00:00
CADDY_HTTP_PORT: 80
Fix missing password values from generated configuration Passwords were not being stored to config.yml during the first quickstart.
2019-06-24 10:36:19 +00:00
CMS_HOST: "studio.{{ LMS_HOST }}"
Feature: configuration setting `PREVIEW_LMS_BASE` discussion: https://discuss.overhang.io/t/new-settings-variable/1973/4
2021-10-04 12:14:28 +00:00
PREVIEW_LMS_HOST: "preview.{{ LMS_HOST }}"
Fix missing password values from generated configuration Passwords were not being stored to config.yml during the first quickstart.
2019-06-24 10:36:19 +00:00
CONTACT_EMAIL: "contact@{{ LMS_HOST }}"
🔌 Introduce a plugin system for tutor This adds the basic feratures that we need for a working plugin system, but there are still many TODOs in the codebase.
2019-05-29 09:14:06 +00:00
OPENEDX_AWS_ACCESS_KEY: ""
OPENEDX_AWS_SECRET_ACCESS_KEY: ""
fix: docker-compose project name in dev on nightly Project name was incorrectly set to "tutor_dev" instead of "tutor_nightly_dev".
2021-11-29 13:12:22 +00:00
DEV_PROJECT_NAME: "{{ TUTOR_APP }}_dev"
Tutor docker images should point to docker.io, too
2020-01-10 16:22:01 +00:00
DOCKER_REGISTRY: "docker.io/"
Make it possible to override the docker registry for individual services Previously, it was not possible to override the docker registry for just one or a few services. Setting the DOCKER_REGISTRY configuration parameter would apply to all images. This was inconvenient. To resolve this, we include the docker registry value in the DOCKER_IMAGE_* configuration parameters. This allows users to override the docker registry individually by defining the DOCKER_IMAGE_SERVICENAME configuration parameter. See https://discuss.overhang.io/t/kubernetes-ci-cd-pipeline/765/3
2020-07-21 07:13:00 +00:00
DOCKER_IMAGE_OPENEDX: "{{ DOCKER_REGISTRY }}overhangio/openedx:{{ TUTOR_VERSION }}"
feat: run all services as unprivileged containers With this change, containers are no longer run as "root" but as unprivileged users. This is necessary in some environments, notably some Kubernetes clusters. To make this possible, we need to manually fix bind-mounted volumes in docker-compose. This is pretty much equivalent to the behaviour in Kubernetes, where permissions are fixed at runtime if the volume owner is incorrect. Thus, we have a consistent behaviour between docker-compose and Kubernetes. We achieve this by bind-mounting some repos inside "*-permissions" services. These services run as root user on docker-compose and will fix the required permissions, as per build/permissions/setowner.sh These services simply do not run on Kubernetes, where we don't rely on bind-mounted volumes. There, we make use of Kubernete's built-in volume ownership feature. With this change, we get rid of the "openedx-dev" Docker image, in the sense that it no longer has its own Dockerfile. Instead, the dev image is now simply a different target in the multi-layer openedx Docker image. This makes it much faster to build the openedx-dev image. Because we declare the APP_USER_ID in the dev/docker-compose.yml file, we need to pass the user ID from the host there. The only way to achieve that is with a tutor config variable. The downside of this approach is that the dev/docker-compose.yml file is no longer portable from one machine to the next. We consider that this is not such a big issue, as it affects the development environment only. We take this opportunity to replace the base image of the "forum" image. There is now no need to re-install ruby inside the image. The total image size is only decreased by 10%, but re-building the image is faster. In order to run the smtp service as non-root, we switch from namshi/smtp to devture/exim-relay. This change should be backward-compatible. Note that the nginx container remains privileged. We could switch to nginxinc/nginx-unprivileged, but it's probably not worth the effort, as we are considering to get rid of the nginx container altogether. Close #323.
2021-09-23 10:04:19 +00:00
DOCKER_IMAGE_OPENEDX_DEV: "openedx-dev"
feat: upgrade to open-release/lilac.master One of the breaking changes of this release is the removal of the webui and android features; these are moved to dedicated plugins. This causes a breaking change: the renaming of the DOCKER_IMAGE_ANDROID config variable to ANDROID_DOCKER_IMAGE. See this TEP for reference: https://discuss.overhang.io/t/separate-webui-and-android-from-tutor-core-and-move-to-dedicated-plugins/1473
2021-04-13 20:14:43 +00:00
DOCKER_IMAGE_CADDY: "{{ DOCKER_REGISTRY }}caddy:2.3.0"
feat: get rid of the nginx container and services Nginx and Caddy performed duplicate tasks. It was decided to get rid of the nginx container, for simplification. This is a breaking change for plugin developers. Also, applications that collect nginx logs will have to be modified. See: - Corresponding TEP: https://discuss.overhang.io/t/tep-get-rid-of-the-nginx-container/2024 - the prior discussion: https://discuss.overhang.io/t/why-caddy-nginx/1952
2021-10-14 10:47:23 +00:00
DOCKER_IMAGE_ELASTICSEARCH: "{{ DOCKER_REGISTRY }}elasticsearch:7.10.1"
chore: upgrade elasticsearch/mongodb/redis Open edX master now runs elasticsearch 7.10 and mongodb 4.2. Redis also received a minor upgrade.
2021-10-25 12:16:10 +00:00
DOCKER_IMAGE_MONGODB: "{{ DOCKER_REGISTRY }}mongo:4.2.17"
feat: upgrade to nightly Get Tutor to work on the master branches of Open edX. The corresponding images will have to be rebuilt manually. Note that the process to contribute to the nightly branch is slightly different from the master branch (see the instructions from the corresponding tutorial).
2021-09-07 11:17:43 +00:00
DOCKER_IMAGE_MYSQL: "{{ DOCKER_REGISTRY }}mysql:5.7.35"
chore: upgrade elasticsearch/mongodb/redis Open edX master now runs elasticsearch 7.10 and mongodb 4.2. Redis also received a minor upgrade.
2021-10-25 12:16:10 +00:00
DOCKER_IMAGE_ELASTICSEARCH: "{{ DOCKER_REGISTRY }}elasticsearch:7.10.1"
feat: upgrade to nightly Get Tutor to work on the master branches of Open edX. The corresponding images will have to be rebuilt manually. Note that the process to contribute to the nightly branch is slightly different from the master branch (see the instructions from the corresponding tutorial).
2021-09-07 11:17:43 +00:00
DOCKER_IMAGE_NGINX: "{{ DOCKER_REGISTRY }}nginx:1.21.1"
fix: permissions image name
2021-10-25 14:56:37 +00:00
DOCKER_IMAGE_PERMISSIONS: "{{ DOCKER_REGISTRY }}overhangio/openedx-permissions:{{ TUTOR_VERSION }}"
chore: upgrade elasticsearch/mongodb/redis Open edX master now runs elasticsearch 7.10 and mongodb 4.2. Redis also received a minor upgrade.
2021-10-25 12:16:10 +00:00
DOCKER_IMAGE_REDIS: "{{ DOCKER_REGISTRY }}redis:6.2.6"
feat: run all services as unprivileged containers With this change, containers are no longer run as "root" but as unprivileged users. This is necessary in some environments, notably some Kubernetes clusters. To make this possible, we need to manually fix bind-mounted volumes in docker-compose. This is pretty much equivalent to the behaviour in Kubernetes, where permissions are fixed at runtime if the volume owner is incorrect. Thus, we have a consistent behaviour between docker-compose and Kubernetes. We achieve this by bind-mounting some repos inside "*-permissions" services. These services run as root user on docker-compose and will fix the required permissions, as per build/permissions/setowner.sh These services simply do not run on Kubernetes, where we don't rely on bind-mounted volumes. There, we make use of Kubernete's built-in volume ownership feature. With this change, we get rid of the "openedx-dev" Docker image, in the sense that it no longer has its own Dockerfile. Instead, the dev image is now simply a different target in the multi-layer openedx Docker image. This makes it much faster to build the openedx-dev image. Because we declare the APP_USER_ID in the dev/docker-compose.yml file, we need to pass the user ID from the host there. The only way to achieve that is with a tutor config variable. The downside of this approach is that the dev/docker-compose.yml file is no longer portable from one machine to the next. We consider that this is not such a big issue, as it affects the development environment only. We take this opportunity to replace the base image of the "forum" image. There is now no need to re-install ruby inside the image. The total image size is only decreased by 10%, but re-building the image is faster. In order to run the smtp service as non-root, we switch from namshi/smtp to devture/exim-relay. This change should be backward-compatible. Note that the nginx container remains privileged. We could switch to nginxinc/nginx-unprivileged, but it's probably not worth the effort, as we are considering to get rid of the nginx container altogether. Close #323.
2021-09-23 10:04:19 +00:00
DOCKER_IMAGE_SMTP: "{{ DOCKER_REGISTRY }}devture/exim-relay:4.94.2-r0-4"
feat: dynamic app name and version suffix Here, we make it possible to automatically append a suffix to the version and app name (in the sense of appdirs). This guarantees that a tutor edge project will not accidentally override another community release. In addition, we take the opportunity to document the tutor versioning format. (I've been meaning to do that for a long time)
2021-09-16 14:48:16 +00:00
LOCAL_PROJECT_NAME: "{{ TUTOR_APP }}_local"
Make it possible to configure data services host/port In the future, we want to allow users to rely on third-party services for data storage, such as hosted MySQL and such. To do so, we need to be able to configure the host/port of these services, which we do here. This is to address part of #114.
2019-03-20 17:57:10 +00:00
ELASTICSEARCH_HOST: "elasticsearch"
ELASTICSEARCH_PORT: 9200
Rename *_PROTOCOL to *_SCHEME
2020-03-12 08:37:22 +00:00
ELASTICSEARCH_SCHEME: "http"
Fix broken elasticsearch configuration Because we are running a version of elasticsearch older than Methusalem, the docker environment variables were not properly taken into account. For instance, the cluster name and "mlockall" settings were incorrect, as we could see by running: $ tutor local run lms curl elasticsearch:9200 | grep cluster_name ... "cluster_name" : "elasticsearch", $ tutor local run lms curl elasticsearch:9200/_nodes/process?pretty | grep mlock ... "mlockall" : false See https://discuss.overhang.io/t/elastic-container-is-not-being-removed/312/3 for discussion. This fix also introduces a new tutor configuration setting to adjust the elasticsearch heap size.
2020-02-26 10:47:43 +00:00
ELASTICSEARCH_HEAP_SIZE: 1g
feat: get rid of the nginx container and services Nginx and Caddy performed duplicate tasks. It was decided to get rid of the nginx container, for simplification. This is a breaking change for plugin developers. Also, applications that collect nginx logs will have to be modified. See: - Corresponding TEP: https://discuss.overhang.io/t/tep-get-rid-of-the-nginx-container/2024 - the prior discussion: https://discuss.overhang.io/t/why-caddy-nginx/1952
2021-10-14 10:47:23 +00:00
ENABLE_HTTPS: false
ENABLE_WEB_PROXY: true
More explicit JWT configuration values
2019-07-08 06:00:20 +00:00
JWT_COMMON_AUDIENCE: "openedx"
v11.0.0 (2020-12-09) - 💥[Improvement] Upgrade Open edX to Koa - 💥 Setting changes: - The ``ACTIVATE_HTTPS`` setting was renamed to ``ENABLE_HTTPS``. - Other ``ACTIVATE_*`` variables were all renamed to ``RUN_*``. - The ``WEB_PROXY`` setting was removed and ``RUN_CADDY`` was added. - The ``NGINX_HTTPS_PORT`` setting is deprecated. - Architectural changes: - Use Caddy as a web proxy for automated SSL/TLS certificate generation: - Nginx no longer listens to port 443 for https traffic - The Caddy configuration file comes with a new ``caddyfile`` patch for much simpler SSL/TLS management. - Configuration files for web proxies are no longer provided. - Kubernetes deployment no longer requires setting up a custom Ingress resource or custom manager. - Gunicorn and Whitenoise are replaced by uwsgi: this increases boostrap performance and makes it no longer necessary to mount media folders in the Nginx container. - Replace memcached and rabbitmq by redis. - Additional features: - Make it possible to disable all plugins at once with ``plugins disable all``. - Add ``tutor k8s wait`` command to wait for a pod to become ready - Faster, more reliable static assets with local memory caching - Deprecation: proxy files for Apache and Nginx are no longer provided out of the box. - Removed plugin `{{ patch (...) }}` statements: - "https-create", "k8s-ingress-rules", "k8s-ingress-tls-hosts": these are no longer necessary. Instead, declare your app in the "caddyfile" patch. - "local-docker-compose-nginx-volumes": this patch was primarily used to serve media assets. The recommended is now to serve assets with uwsgi.
2020-09-17 10:53:14 +00:00
JWT_COMMON_ISSUER: "{% if ENABLE_HTTPS %}https{% else %}http{% endif %}://{{ LMS_HOST }}/oauth2"
More explicit JWT configuration values
2019-07-08 06:00:20 +00:00
JWT_COMMON_SECRET_KEY: "{{ OPENEDX_SECRET_KEY }}"
v10.0.0 Upgrade to Juniper (2020-06-15) Here, we upgrade the Open edX platform from Ironwood to Juniper. This upgrade does not come with many feature changes, but there are many technical improvements under the hood: - Upgrade from Python 2.7 to 3.5 - Upgrade from Mongodb v3.2 to v3.6 - Upgrade Ruby to 2.5.7 We took the opportunity to completely rething the way locally running platforms should be accessed for testing purposes. It is no longer possible to access a running platform from http://localhost and http://studio.localhost. Instead, users should access http://local.overhang.io and https://studio.local.overhang.io. This drastically simplifies internal communication between Docker containers. To upgrade, users should simply run: tutor local quickstart For Kubernetes platform, the upgrade process is outlined when running: tutor k8s upgrade --from=ironwood
2019-12-24 16:22:12 +00:00
JWT_RSA_PRIVATE_KEY: "{{ 2048|rsa_private_key }}"
Towards a stable Kubernetes integration Missing features: - https certificates - xqueue - lms/cms workers Moreover, we scalability issues due to the uploaded file storage in the lms/cms. To address this issue we need to develop the MinIO plugin so that it becomes compatible with Open edX. Close #126 #179 #187
2019-05-09 07:51:06 +00:00
K8S_NAMESPACE: "openedx"
Major refactoring of config module Configuration loading was overly complex. Here, we simplify it drastically with reasonable defaults. Hacky additional variables are unncessary now that we use custom jinja2 filters.
2019-05-11 22:11:44 +00:00
LANGUAGE_CODE: "en"
Make it possible to configure data services host/port In the future, we want to allow users to rely on third-party services for data storage, such as hosted MySQL and such. To do so, we need to be able to configure the host/port of these services, which we do here. This is to address part of #114.
2019-03-20 17:57:10 +00:00
MONGODB_HOST: "mongodb"
MONGODB_DATABASE: "openedx"
Configurable mongodb username/password/port
2019-03-20 18:18:46 +00:00
MONGODB_PORT: 27017
MONGODB_USERNAME: ""
MONGODB_PASSWORD: ""
feat: upgrade to open-release/lilac.master One of the breaking changes of this release is the removal of the webui and android features; these are moved to dedicated plugins. This causes a breaking change: the renaming of the DOCKER_IMAGE_ANDROID config variable to ANDROID_DOCKER_IMAGE. See this TEP for reference: https://discuss.overhang.io/t/separate-webui-and-android-from-tutor-core-and-move-to-dedicated-plugins/1473
2021-04-13 20:14:43 +00:00
OPENEDX_CACHE_REDIS_DB: 1
OPENEDX_CELERY_REDIS_DB: 0
v11.0.0 (2020-12-09) - 💥[Improvement] Upgrade Open edX to Koa - 💥 Setting changes: - The ``ACTIVATE_HTTPS`` setting was renamed to ``ENABLE_HTTPS``. - Other ``ACTIVATE_*`` variables were all renamed to ``RUN_*``. - The ``WEB_PROXY`` setting was removed and ``RUN_CADDY`` was added. - The ``NGINX_HTTPS_PORT`` setting is deprecated. - Architectural changes: - Use Caddy as a web proxy for automated SSL/TLS certificate generation: - Nginx no longer listens to port 443 for https traffic - The Caddy configuration file comes with a new ``caddyfile`` patch for much simpler SSL/TLS management. - Configuration files for web proxies are no longer provided. - Kubernetes deployment no longer requires setting up a custom Ingress resource or custom manager. - Gunicorn and Whitenoise are replaced by uwsgi: this increases boostrap performance and makes it no longer necessary to mount media folders in the Nginx container. - Replace memcached and rabbitmq by redis. - Additional features: - Make it possible to disable all plugins at once with ``plugins disable all``. - Add ``tutor k8s wait`` command to wait for a pod to become ready - Faster, more reliable static assets with local memory caching - Deprecation: proxy files for Apache and Nginx are no longer provided out of the box. - Removed plugin `{{ patch (...) }}` statements: - "https-create", "k8s-ingress-rules", "k8s-ingress-tls-hosts": these are no longer necessary. Instead, declare your app in the "caddyfile" patch. - "local-docker-compose-nginx-volumes": this patch was primarily used to serve media assets. The recommended is now to serve assets with uwsgi.
2020-09-17 10:53:14 +00:00
OPENEDX_CMS_UWSGI_WORKERS: 2
OPENEDX_LMS_UWSGI_WORKERS: 2
Harmonize mysql usernames and passwords We were using the same password both for the root and the openedx user. This used to be fine, but alas it is so no longer.
2019-03-20 17:45:20 +00:00
OPENEDX_MYSQL_DATABASE: "openedx"
v10.0.0 Upgrade to Juniper (2020-06-15) Here, we upgrade the Open edX platform from Ironwood to Juniper. This upgrade does not come with many feature changes, but there are many technical improvements under the hood: - Upgrade from Python 2.7 to 3.5 - Upgrade from Mongodb v3.2 to v3.6 - Upgrade Ruby to 2.5.7 We took the opportunity to completely rething the way locally running platforms should be accessed for testing purposes. It is no longer possible to access a running platform from http://localhost and http://studio.localhost. Instead, users should access http://local.overhang.io and https://studio.local.overhang.io. This drastically simplifies internal communication between Docker containers. To upgrade, users should simply run: tutor local quickstart For Kubernetes platform, the upgrade process is outlined when running: tutor k8s upgrade --from=ironwood
2019-12-24 16:22:12 +00:00
OPENEDX_CSMH_MYSQL_DATABASE: "{{ OPENEDX_MYSQL_DATABASE }}_csmh"
Harmonize mysql usernames and passwords We were using the same password both for the root and the openedx user. This used to be fine, but alas it is so no longer.
2019-03-20 17:45:20 +00:00
OPENEDX_MYSQL_USERNAME: "openedx"
feat: upgrade to nightly Get Tutor to work on the master branches of Open edX. The corresponding images will have to be rebuilt manually. Note that the process to contribute to the nightly branch is slightly different from the master branch (see the instructions from the corresponding tutorial).
2021-09-07 11:17:43 +00:00
OPENEDX_COMMON_VERSION: "master"
feat: allow to specify extra pip packages in config Added OPENEDX_EXTRA_PIP_REQUIREMENTS setting, which allows to specify extra pip packages that should be installed. Moved "openedx-scorm-xblock" package from Dockerfile to the new setting in the config.yml.
2021-11-17 18:37:35 +00:00
OPENEDX_EXTRA_PIP_REQUIREMENTS:
- "openedx-scorm-xblock<13.0.0,>=12.0.0"
Make it possible to configure data services host/port In the future, we want to allow users to rely on third-party services for data storage, such as hosted MySQL and such. To do so, we need to be able to configure the host/port of these services, which we do here. This is to address part of #114.
2019-03-20 17:57:10 +00:00
MYSQL_HOST: "mysql"
MYSQL_PORT: 3306
Make the mysql root username a configuration parameter This allows users who connect to an external database to customise the root username. Indeed, quite often the "root" username is reserved. Close #328
2020-06-01 15:11:10 +00:00
MYSQL_ROOT_USERNAME: "root"
Major refactoring of config module Configuration loading was overly complex. Here, we simplify it drastically with reasonable defaults. Hacky additional variables are unncessary now that we use custom jinja2 filters.
2019-05-11 22:11:44 +00:00
PLATFORM_NAME: "My Open edX"
🔌 Introduce a plugin system for tutor This adds the basic feratures that we need for a working plugin system, but there are still many TODOs in the codebase.
2019-05-29 09:14:06 +00:00
PLUGINS: []
chore: upgrade elasticsearch/mongodb/redis Open edX master now runs elasticsearch 7.10 and mongodb 4.2. Redis also received a minor upgrade.
2021-10-25 12:16:10 +00:00
PREVIEW_LMS_HOST: "preview.{{ LMS_HOST }}"
v11.0.0 (2020-12-09) - 💥[Improvement] Upgrade Open edX to Koa - 💥 Setting changes: - The ``ACTIVATE_HTTPS`` setting was renamed to ``ENABLE_HTTPS``. - Other ``ACTIVATE_*`` variables were all renamed to ``RUN_*``. - The ``WEB_PROXY`` setting was removed and ``RUN_CADDY`` was added. - The ``NGINX_HTTPS_PORT`` setting is deprecated. - Architectural changes: - Use Caddy as a web proxy for automated SSL/TLS certificate generation: - Nginx no longer listens to port 443 for https traffic - The Caddy configuration file comes with a new ``caddyfile`` patch for much simpler SSL/TLS management. - Configuration files for web proxies are no longer provided. - Kubernetes deployment no longer requires setting up a custom Ingress resource or custom manager. - Gunicorn and Whitenoise are replaced by uwsgi: this increases boostrap performance and makes it no longer necessary to mount media folders in the Nginx container. - Replace memcached and rabbitmq by redis. - Additional features: - Make it possible to disable all plugins at once with ``plugins disable all``. - Add ``tutor k8s wait`` command to wait for a pod to become ready - Faster, more reliable static assets with local memory caching - Deprecation: proxy files for Apache and Nginx are no longer provided out of the box. - Removed plugin `{{ patch (...) }}` statements: - "https-create", "k8s-ingress-rules", "k8s-ingress-tls-hosts": these are no longer necessary. Instead, declare your app in the "caddyfile" patch. - "local-docker-compose-nginx-volumes": this patch was primarily used to serve media assets. The recommended is now to serve assets with uwsgi.
2020-09-17 10:53:14 +00:00
REDIS_HOST: "redis"
REDIS_PORT: 6379
REDIS_USERNAME: ""
REDIS_PASSWORD: ""
Pluggable SMTP service This is part of #114
2019-03-20 17:45:09 +00:00
SMTP_HOST: "smtp"
feat: run all services as unprivileged containers With this change, containers are no longer run as "root" but as unprivileged users. This is necessary in some environments, notably some Kubernetes clusters. To make this possible, we need to manually fix bind-mounted volumes in docker-compose. This is pretty much equivalent to the behaviour in Kubernetes, where permissions are fixed at runtime if the volume owner is incorrect. Thus, we have a consistent behaviour between docker-compose and Kubernetes. We achieve this by bind-mounting some repos inside "*-permissions" services. These services run as root user on docker-compose and will fix the required permissions, as per build/permissions/setowner.sh These services simply do not run on Kubernetes, where we don't rely on bind-mounted volumes. There, we make use of Kubernete's built-in volume ownership feature. With this change, we get rid of the "openedx-dev" Docker image, in the sense that it no longer has its own Dockerfile. Instead, the dev image is now simply a different target in the multi-layer openedx Docker image. This makes it much faster to build the openedx-dev image. Because we declare the APP_USER_ID in the dev/docker-compose.yml file, we need to pass the user ID from the host there. The only way to achieve that is with a tutor config variable. The downside of this approach is that the dev/docker-compose.yml file is no longer portable from one machine to the next. We consider that this is not such a big issue, as it affects the development environment only. We take this opportunity to replace the base image of the "forum" image. There is now no need to re-install ruby inside the image. The total image size is only decreased by 10%, but re-building the image is faster. In order to run the smtp service as non-root, we switch from namshi/smtp to devture/exim-relay. This change should be backward-compatible. Note that the nginx container remains privileged. We could switch to nginxinc/nginx-unprivileged, but it's probably not worth the effort, as we are considering to get rid of the nginx container altogether. Close #323.
2021-09-23 10:04:19 +00:00
SMTP_PORT: 8025
Configurable SMTP server authentication We can now define non-empty username/password for sending email.
2019-03-20 17:52:57 +00:00
SMTP_USERNAME: ""
SMTP_PASSWORD: ""
Add support for external SMTP server with TLS Note that this setting will not work with the default namshi smtp server shipped with tutor. Close #231.
2019-07-07 01:06:35 +00:00
SMTP_USE_TLS: false
Add support for SMTP SSL, in addition to TLS Note that SSL and TLS are incompatible. Close #231.
2019-07-07 22:24:35 +00:00
SMTP_USE_SSL: false
Copy Permalink