Plus Labs1-3 Initial (#20)

* initial Plus lab

* lab1 changes

* split into OSS & Plus folders

* rename nginx-oss to nginx-plus

* lab1-2 rewrites

* lab1-2 Plus initial draft

* lab3 Plus initial draft

* main README update and new diagram

* fixed typos

Author: chrisakker

.gitignore

@@ -1,4 +1,5 @@
 # Don't track these files
 *.crt
 *.key
+*.jwt
 .DS_Store

labs/lab0/media/2factorAuthentication.png renamed to OSS/labs/lab0/media/2factorAuthentication.png

@@ -0,0 +1,20 @@
+# NGINX Plus with tools build
+# NGINX Plus Basics, Nov 2024
+# Chris Akker, Shouvik Dutta, Adam Currier
+#
+services:
+  nginx-plus:                  # NGINX Plus Web / Load Balancer
+    hostname: nginx-plus
+    container_name: nginx-plus
+    build: ./nginx-plus          # Build new container, using /nginx-plus/Dockerfile
+    image: nginx-plus:workshop
+    volumes:
+        - ./nginx-plus/etc/nginx/conf.d:/etc/nginx/conf.d        # Copy these folders to container
+        - ./nginx-plus/etc/nginx/includes:/etc/nginx/includes
+        - ./nginx-plus/usr/share/nginx/html:/usr/share/nginx/html
+        - ./nginx-plus/etc/nginx/nginx.conf:/etc/nginx/nginx.conf
+    ports:
+        - 80:80       # Open for HTTP
+        - 443:443     # Open for HTTPS
+        - 9000:9000   # Open for Plus Dashboard page / API
+    restart: always     

labs/lab0/media/2factorConfirmation.png renamed to OSS/labs/lab0/media/2factorConfirmation.png

@@ -0,0 +1,25 @@
+# NGINX Plus Basics, Nov 2024
+# Chris Akker, Shouvik Dutta, Adam Currier
+# dashboard.conf
+#
+server {
+    # Conventional port for the NGINX Plus API is 8080
+    listen 9000;
+    access_log off; # reduce noise in access logs
+
+    # Conventional location for accessing the NGINX Plus API 
+    location /api/ {
+        # Enable in read-write mode
+        api write=on;
+    }
+
+    # Conventional location of the NGINX Plus dashboard
+    location = /dashboard.html {
+        root /usr/share/nginx/html;
+    }
+
+    # Redirect requests for "/" to "/dashboard.html"
+    location / {
+        return 301 /dashboard.html;
+    }
+}

labs/lab0/media/F5accountactivationemail.png renamed to OSS/labs/lab0/media/F5accountactivationemail.png

@@ -0,0 +1,49 @@
+# NGINX Plus Basics, Nov 2024
+# Chris Akker, Shouvik Dutta, Adam Currier
+# default.conf
+#
+server {
+    listen       80;
+    server_name  localhost;
+
+    #charset koi8-r;
+    #access_log  /var/log/nginx/host.access.log  main;
+
+    location / {
+        root   /usr/share/nginx/html;
+        index  index.html index.htm;
+    }
+
+    #error_page  404              /404.html;
+
+    # intercept server error pages to the static page /50x.html
+    #
+    error_page   500 502 503 504  /50x.html;
+    location = /50x.html {
+        root   /usr/share/nginx/html;
+    }
+
+    # proxy the PHP scripts to Apache listening on 127.0.0.1:80
+    #
+    #location ~ \.php$ {
+    #    proxy_pass   http://127.0.0.1;
+    #}
+
+    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
+    #
+    #location ~ \.php$ {
+    #    root           html;
+    #    fastcgi_pass   127.0.0.1:9000;
+    #    fastcgi_index  index.php;
+    #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
+    #    include        fastcgi_params;
+    #}
+
+    # deny access to .htaccess files, if Apache's document root
+    # concurs with nginx's one
+    #
+    #location ~ /\.ht {
+    #    deny  all;
+    #}
+}
+

labs/lab0/media/F5signup.png renamed to OSS/labs/lab0/media/F5signup.png

@@ -0,0 +1,57 @@
+# For Ubuntu 20.04:
+FROM ubuntu:focal
+
+## Install Nginx Plus
+# Download certificate and key from the MyF5 customer portal (https://account.f5.com/myf5)
+# and copy to the build context and set correct permissions
+RUN mkdir -p /etc/ssl/nginx
+COPY etc/ssl/nginx/nginx-repo.* /etc/ssl/nginx/
+RUN chmod 644 /etc/ssl/nginx/* 
+
+# Install prerequisite packages:
+RUN apt-get update && apt-get install -y apt-transport-https lsb-release ca-certificates curl wget gnupg2 net-tools vim tree openssl jq
+
+# Download and add the NGINX signing key:
+RUN wget https://nginx.org/keys/nginx_signing.key && apt-key add nginx_signing.key 
+
+# Add NGINX Plus repository:
+RUN printf "deb https://pkgs.nginx.com/plus/ubuntu `lsb_release -cs` nginx-plus\n" | tee /etc/apt/sources.list.d/nginx-plus.list
+
+# Download the apt configuration to `/etc/apt/apt.conf.d`:
+RUN wget -P /etc/apt/apt.conf.d https://cs.nginx.com/static/files/90pkgs-nginx
+
+# <TODO:  modify apt-get install command to pull R32 ( no R33 allowed ):
+# HELP:  https://docs.nginx.com/nginx/admin-guide/installing-nginx/installing-nginx-docker/#creating-custom-nginx-plus-docker-image
+# Update the repository and install version R32P1 of NGINX Plus:
+RUN apt-get update && DEBIAN_FRONTEND="noninteractive" apt-get install -y nginx-plus=32-2*
+
+# Remove nginx repository key/cert from docker
+RUN rm -rf /etc/ssl/nginx \
+# Remove default nginx config
+# && rm /etc/nginx/conf.d/default.conf \
+# Required for this demo: Create State file folder and set permissions
+&& mkdir -p /var/lib/nginx/state \
+&& chown -R nginx /var/lib/nginx/state \
+# COPY var/lib/nginx/state/upstreams.state /var/lib/nginx/state/upstreams.state
+&& touch /var/lib/nginx/state/upstreams.state
+
+# Copy certificate files and dhparams
+COPY etc/ssl /etc/ssl
+
+# COPY /etc/nginx (Nginx configuration) directory
+COPY etc/nginx /etc/nginx
+RUN chown -R nginx:nginx /etc/nginx \
+# # Forward request logs to Docker log collector:
+# && ln -sf /dev/stdout /var/log/nginx/access.log \
+# && ln -sf /dev/stderr /var/log/nginx/error.log \
+ # Remove the cert/keys from the image
+&& rm /etc/ssl/nginx/nginx-repo.crt /etc/ssl/nginx/nginx-repo.key
+
+# COPY /usr/share/nginx/html (Nginx files) directory
+COPY usr/share/nginx/html /usr/share/nginx/html
+RUN chown -R nginx:nginx /usr/share/nginx/html
+
+# EXPOSE ports, HTTP 80, HTTP 8080, HTTPS 443, Nginx API / status page 9000, Prometheus Exporter page 9113
+EXPOSE 80 443 8080 9000 9113
+STOPSIGNAL SIGTERM
+CMD ["nginx", "-g", "daemon off;"]