Add QA

nomad/traefik-wall/deploy/production.hcl

@@ -94,6 +94,12 @@ job "traefik-wall-production" {
         destination = "local/traefik-config"
       }
 
+      # Pulfalight Configuration
+      artifact {
+        source = "https://raw.githubusercontent.com/pulibrary/princeton_ansible/${ var.branch_or_sha }/nomad/traefik-wall/deploy/sites/pulfalight-production.yml"
+        destination = "local/traefik-config"
+      }
+
       resources {
         cpu    = 1000
         memory = 512
@@ -181,6 +187,12 @@ job "traefik-wall-production" {
         destination = "local/traefik-config"
       }
 
+      # Pulfalight Configuration
+      artifact {
+        source = "https://raw.githubusercontent.com/pulibrary/princeton_ansible/${ var.branch_or_sha }/nomad/traefik-wall/deploy/sites/pulfalight-production.yml"
+        destination = "local/traefik-config"
+      }
+
       resources {
         cpu    = 1000
         memory = 512

roles/nginxplus/files/conf/http/pulfalight-qa.conf

@@ -3,11 +3,19 @@ proxy_cache_path /var/cache/nginx/pulfalight-qa/ keys_zone=pulfalight-qacache:10
 
 upstream pulfalight-qa {
     zone pulfalight-qa 64k;
-    server pulfalight-qa-web1.princeton.edu resolve;
+    # lowchallenge challenges after 20 requests from xx.xx.<>.<>.<>
+    server service.consul service=lowchallenge.traefik-wall-staging resolve max_fails=0;
+    # highchallenge challenges everyone. Comment above and uncomment
+    # this when you're being swarmed by bots.
+    # server service.consul service=highchallenge.traefik-wall-staging resolve max_fails=0;
+    # If Traefik crashes, fall down to the box directly.
+    server pulfalight-qa-web1.princeton.edu resolve backup;
     sticky learn
           create=$upstream_cookie_pulfalightqacookie
           lookup=$cookie_pulfalightqacookie
           zone=pulfalightqaclient_sessions:1m;
+    resolver nomad-host-prod1.lib.princeton.edu nomad-host-prod2.lib.princeton.edu nomad-host-prod3.lib.princeton.edu valid=5s;
+    resolver_timeout 2s;
 }
 
 server {