demo.pygeoapi.io server setup

Demo setup for https://demo.pygeoapi.io. Includes Ansible playbooks for bootstrapping (provisioning) an empty Ubuntu server, installing all (Docker) services.

All services can be started/stopped with an Ubuntu system service named pygeoapi on the server as well.

Services

The demo server runs the following apps/services:

• home - simple Flask app for landing page and demo viewers
• pygeoapi_master - (latest GitHub master version of) pygeoapi service with test data
• pygeoapi_stable - (last stable version of) pygeoapi service with test data
• pygeoapi_cite - (latest GitHub master version of) pygeoapi service with CITE configuration
• pygeoapi_covid-19 - (latest GitHub master version of) pygeoapi service with Covid-19 configuration
• traefik - Traefik edge/proxy server with HTTP(S) routing, SSL certificate management (Let's Encrypt), security headers, and TLS optimization
• update - pulls and redeploys if new pygeoapi:latest Docker Image on DockerHub available (#73 #75 cron-check)

Auto Update

The pygeoapi_master, pygeoapi_cite and pygeoapi_covid-19 services are automatically redeployed by update service when a new pygeoapi:latest Docker image is available.

Common setup with Ansible

# get code
git clone https://github.com/geopython/demo.pygeoapi.io

# Get required Ansible roles/modules, install locally
cd ansible
mkdir roles
ansible-galaxy install --roles-path ./roles -r requirements.yml

Make credentials files

These are not in this repo for obvious reasons... You need to create/populate these locally.

• ansible/vars/vars.yml (see example)

Remote Setup with Ansible.

Have a remote Ubuntu VM installed with root access via pub/private key.

# Installs entire system
cd ansible
ansible-playbook -vv bootstrap.yml -i hosts/demo.pygeoapi.io  --become

Local Setup with Ansible, Vagrant and VirtualBox

Have Ansible, Vagrant and VBox installed.

# Setup Vagrant with VirtualBox for Ubuntu 16.04 VM
cd demo.pygeoapi.io
vagrant box add geerlingguy/ubuntu2404
vagrant init geerlingguy/ubuntu2404

# Will use Vagrantfile for auto-provisioning via Ansible
vagrant up
vagrant ssh
vagrant halt

Start stop services

All services can be started/stopped as a Ubuntu system service named pygeoapi as well. Login as admin user and issue:

sudo service pygeoapi stop
sudo service pygeoapi start
sudo service pygeoapi status

Traefik Frontend-Proxy

This setup uses Traefik v3.6+ with enhanced security and modern configuration:

Configuration Approach

• Static configuration: Defined via command-line flags in services/traefik/docker-compose.yml
• Dynamic configuration: File-based configs for TLS and middleware settings
• Certificates: Stored in Docker volume acme_certificates (managed automatically by Let's Encrypt)
• Routing: Separate routers for production (HTTPS) and localhost (HTTP only)

Key Files

• services/traefik/docker-compose.yml - Main Traefik configuration via command flags
• services/traefik/config/dynamic/tls.yml - TLS security options (minimum TLS 1.2, cipher suites)
• services/traefik/config/dynamic/middlewares.yml - HTTP security headers (HSTS, CORS, etc.)