This guide documents the tasks associated with installing and configuring "The Littlest Jupyterhub" (TLJH) on Nimbus. It is assumed that you have already created an instance and are able to log on to it using ssh. The developer documentation for TLJH is available at https://the-littlest-jupyterhub.readthedocs.io/en/latest/install/custom-server.html.
Set up networking
Jupyterhub will require the standard HTTPS port and we also want to redirect HTTP to HTTPS, so we need to open these ports:
- From your Nimbus dashboard, under the "Network" section of the left-hand navigation bar, select "Security Groups", then click on "Create Security Group" on the right hand side:
- Name: give it a meaningful name (e.g. jupyterhub)
- Description: open ports to allow Jupyterhub to communicate
Once created, click on "Manage Rules" for that security group, then click on "Add Rule" in the top right, click Rule and then select HTTP from the drop-down menu.
- Repeat for HTTPS, then it should look like this:
- Under the "Compute" section of the left-hand bar, select "Instances", click the Actions menu to the right of your instance, then "Edit Security Groups" and add the "jupyterhub" security group.
ssh into the instance and check if Python 3, curl, and git are installed using the following command (should be installed by default with latest Ubuntu):
Download and run the installer using the following code, making sure to replace <admin username> with the username of the account that will act as adminstrator. If you have yet to create any accounts on the VM simply use "ubuntu". This process will take approximately 25 minutes.
If everything runs as it should you'll see the following output with the final message being "Done!"
- You can then access the jupyterhub from the public IP associated with your instance, for eg. http://220.127.116.11, and you should see the sign-in page shown below. Note we will resolve the security warning next. If you fail to connect to the jupyterhub check that the security group created in the network setup section has been added to your instance.
Enable HTTPS for secure communication
In order to set up HTTPS using TLJH and Lets encrypt you need a domain name for your hub. You may be able to arrange one with your institution, however if you just want a free and easy solution you can use a DNS service provider. Dynu is free, has a good selection of features, no pesky reminders to register every month, and great documentation. See below for an example of my DNS control panel:
Once you have a domain name configured, set it in TLJH:
Modify the TLJH config:
You can check your config file with
Then reload the proxy to load the new configuration
At this point, the proxy should negotiate with Let’s Encrypt to set up a trusted HTTPS certificate for you. It may take a moment for the proxy to negotiate with Let’s Encrypt to get your certificates, after which you can access your Hub securely at https://yourhub.yourdomain.edu.