add sftp things

ansible/deploy.yaml

@@ -76,19 +76,26 @@
         owner: 1000
         group: 1000
       with_items: '{{instances}}'
+    - name: sftp user file
+      copy:
+        content: |
+          {% for instance in instances %}
+          {{instance.name}}:{{instance.password}}:1000:1000
+          {% endfor %}
+        dest: '{{jupyter_root}}/sftp_users.conf'
     - name: docker-compose up -d
       docker_compose:
         project_src: '{{ jupyter_root }}'
         remove_orphans: true
         pull: true
   handlers:
-    - name: restart_nginx
+    - name: restart_all
       docker_compose:
         project_src: '{{ jupyter_root }}'
-        services:
-          - nginx
         restarted: true
-    - name: restart_all
+    - name: restart_nginx
       docker_compose:
         project_src: '{{ jupyter_root }}'
+        services:
+          - nginx
         restarted: true

ansible/docker-compose.yml.j2

@@ -12,8 +12,25 @@ services:
       - ./certs:/etc/nginx/certs:ro
       - ./nginx/cache:/etc/nginx/cache
       - ./nginx/log:/var/log/nginx
+  sftp:
+    restart: always
+    image: atmoz/sftp
+    ports:
+      - '7322:22'
+    volumes:
+      - ./sftp_users.conf:/etc/sftp/users.conf:ro
+      - /etc/ssh/ssh_host_rsa_key:/etc/ssh/ssh_host_rsa_key:ro
+      - /etc/ssh/ssh_host_dsa_key:/etc/ssh/ssh_host_dsa_key:ro
+      - /etc/ssh/ssh_host_ecdsa_key:/etc/ssh/ssh_host_ecdsa_key:ro
+      - /etc/ssh/ssh_host_ed25519_key:/etc/ssh/ssh_host_ed25519_key:ro
+{% for instance in instances %}
+      - ./attachments:/home/{{ instance.name }}/attachments:ro
+      - ./instances/data/{{ instance.name }}:/home/{{ instance.name }}/work
+{% endfor %}
+
+  # instances
 {% for instance in instances %}
-  '{{instance.name}}':
+  'notebook_instance_{{instance.name}}':
     restart: always
     image: {{ jupyter_image }}
     cpus: 1

ansible/nginx-conf/jupyter.conf

@@ -14,6 +14,6 @@ server {
         proxy_http_version 1.1;
         proxy_set_header Upgrade $http_upgrade;
         proxy_set_header Connection $connection_upgrade;
-        proxy_pass http://$1:8888;
+        proxy_pass http://notebook_instance_$1:8888;
     }
 }