- Notifications
You must be signed in to change notification settings - Fork8
Codebase for the ADL Initiative's Total Learning Architecture (TLA) reference implementation. Once matured and implemented, the TLA will enable personalized, data-driven, and technology-enabled lifelong learning across the DoD, other Federal Government agencies, and beyond.
License
adlnet/tla
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
Codebase for the ADL's TLA reference implementation. This project is under development as we migrate the 2019 repository to an open-source environment. ⚠🛠
For more information about the TLA project, visitadlnet.gov/projects/tla.
Current resource checklist:
- ✅ Keycloak server
- ✅ Kafka Cluster
- ✅ Basic Experience Index
- ✅ LRS w/ Kafka Forwarding
- ✅ Content Hosting Server
- ✅ Basic Learner Profile
- ✅ Basic LEM Services
- ❌ Competency Processor / Server
- 🔨 Landing Page
ADL services are typically deployed with Docker, with HTTP served by the usual pairing of Nginx with SSL certificates provided by Certbot. While this has provided a clean way of configuring machines without explicit host OS installs of either, it does complicate the automated SSL renewal usually provided by Certbot.
Instead of the default Certbot cronjob, we run a modified version of our manual SSL renewal script.
git clone https://github.com/adlnet/auto-ssl ~/auto-sslcd ~/auto-ssl- Open the root crontab
sudo crontab -e - Paste the following lines:
PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/bin0 2 * * 6 ~/auto-ssl/renew.sh <project path>replacing<project path> with the proper folder path (i.e.~/tla/adl-auth). That's it.
This cronjob is specified with time0 2 * * 6, meaning it will run:
6: On Saturdays*: Every Week*: Every Month2: At 2AM0: and 0 minutes
the values for which can obviously be adjusted for whatever your use case may be.
The path argument supplied by<project path> tells the script where to locate the correspondingdocker-compose.yml file for whichever server's SSL is being automated. Additionally, this output can be found at~/renew.log and the script can be manually run just via
sudo ~/auto-ssl/renew.md <project-path>to ensure that everything is working properly -- you should see something like this
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -The following certificates are not due for renewal yet: /etc/letsencrypt/live/tla-dev-auth.usalearning.net/fullchain.pem expires on 2021-06-01 (skipped)No renewals were attempted.- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -Note: If crontab is not being run as the root user, you'll need to add them to the Docker group:
sudo usermod -aG docker $USERAbout
Codebase for the ADL Initiative's Total Learning Architecture (TLA) reference implementation. Once matured and implemented, the TLA will enable personalized, data-driven, and technology-enabled lifelong learning across the DoD, other Federal Government agencies, and beyond.