Configure Jenkins server for custom CI

[martukas]

What has to be done
We have a server at the Oakland workshop that can be used to continuously test with hardware. We need to configure a Jenkins server for this.

• Jenkins setup should be proxied and secure, with shttp
• for starters, it should run similar tasks as CircleCI
• minimal test with hardware would be:
  • deploy to unit
  • execute a couple of simple commands via debug interface to confirm data in/out
• figure out what is needed for parallelization - to run multiple build processes and/or to deploy to multiple controllers simultaneously

How do you know it has to be done
Needed for all the different types of hardware-in-the-loop tests, such as

• On-device unit tests #472
• Ideas for Integration Testing (to verify the system - not just manufacturing) #635
• Automated calibration/characterization scripts with reference flow meter #838

Starting points
Useful articles:
https://www.virtualizationhowto.com/2021/09/install-jenkins-on-ubuntu-21-04-with-self-signed-ssl-certificate/
https://www.digitalocean.com/community/tutorials/how-to-configure-jenkins-with-ssl-using-an-nginx-reverse-proxy-on-ubuntu-22-04

[martukas]

https://certbot.eff.org/instructions?ws=nginx&os=ubuntufocal

[martukas]

So apparently we need a cert from here https://letsencrypt.org/
which should probably be managed by certbot, but a number of things are not clear to me:

• do we need to have ports 80 and 443 open? Would be best if we could avoid that. There must be servers out there that use other ports and things still work?
• can Cloudflare do the proxying for us? Or is that something different?
• don't we already have some sort of cert for our main website and top level domain? Could we not reuse that one?

[martukas]

https://github.com/Callet91/DEMO_Jenkins_PlatformIO
https://medium.com/natix-io/ci-cd-on-the-edge-part3-5582d12a5afc