|
| 1 | +#!/usr/bin/env bash |
| 2 | +set -e |
| 3 | + |
| 4 | +# shellcheck disable=SC1091 |
| 5 | +source "$(dirname "${BASH_SOURCE[0]}")/_logging.sh" |
| 6 | + |
| 7 | +generate_cert() { |
| 8 | + log "Generating certificate for setup page..." |
| 9 | + mkdir -p "$SETUP_DIR/letsencrypt" "$SETUP_DIR/certs" |
| 10 | + log_cmd "docker pull certbot/certbot" |
| 11 | + |
| 12 | + if log_cmd "docker run --rm \ |
| 13 | + -v $SETUP_DIR/letsencrypt:/etc/letsencrypt \ |
| 14 | + -v $SETUP_DIR/certs:/certs \ |
| 15 | + -p 80:80 \ |
| 16 | + certbot/certbot certonly \ |
| 17 | + --standalone --non-interactive \ |
| 18 | + --preferred-challenges http \ |
| 19 | + --agree-tos \ |
| 20 | + --email $CERT_EMAIL \ |
| 21 | + -d $SETUP_HOST"; then |
| 22 | + |
| 23 | + CERT_PATH="$SETUP_DIR/letsencrypt/live/$SETUP_HOST" |
| 24 | + cp "$CERT_PATH/fullchain.pem" "$SETUP_DIR/certs/cert.pem" |
| 25 | + cp "$CERT_PATH/privkey.pem" "$SETUP_DIR/certs/key.pem" |
| 26 | + else |
| 27 | + echo "Let's Encrypt challenge failed, falling back to self-signed certificate." |
| 28 | + openssl req -x509 -nodes -days 365 -newkey rsa:2048 \ |
| 29 | + -out "$SETUP_DIR/certs/cert.pem" \ |
| 30 | + -keyout "$SETUP_DIR/certs/key.pem" \ |
| 31 | + -subj "/CN=$SETUP_HOST" |
| 32 | + fi |
| 33 | +} |
| 34 | + |
| 35 | +start_webserver() { |
| 36 | + BUILDX_DRIVER=$(docker buildx inspect | grep 'Driver:' | awk '{print $2}') |
| 37 | + [[ "$BUILDX_DRIVER" == "docker-container" ]] && LOAD_FLAG="--load" || LOAD_FLAG="" |
| 38 | + |
| 39 | + log_cmd "docker build $LOAD_FLAG -t wikibase/deploy-setup-webserver ." |
| 40 | + log_cmd "docker run -d \ |
| 41 | + -p $SETUP_PORT:443 \ |
| 42 | + -v $DEPLOY_DIR:/app/deploy \ |
| 43 | + -v $DEPLOY_DIR/setup/views:/app/views \ |
| 44 | + -v $SETUP_DIR/certs:/app/certs \ |
| 45 | + -v $LOG_PATH:/app/setup.log \ |
| 46 | + wikibase/deploy-setup-webserver" |
| 47 | + |
| 48 | + echo |
| 49 | + echo "To continue setup navigate to:" |
| 50 | + echo " https://$SETUP_HOST:$SETUP_PORT" |
| 51 | + echo |
| 52 | +} |
| 53 | + |
| 54 | +log "Starting setup webserver..." |
| 55 | +cd "$SETUP_DIR" |
| 56 | +generate_cert |
| 57 | +start_webserver |
0 commit comments