60 lines
2.3 KiB
Bash
60 lines
2.3 KiB
Bash
#!/bin/bash
|
|
|
|
set -eo pipefail
|
|
|
|
if [ -z "${POSTGRES_USER}" ] || [ -z "${POSTGRES_PASSWORD}" ] || [ -z "${POSTGRES_HOST}" ] || [ -z "${POSTGRES_DB}" ];then
|
|
echo "Database vars not set"
|
|
exit 1
|
|
fi
|
|
|
|
export POSTGRES_PORT="${POSTGRES_PORT:-5432}"
|
|
|
|
export LEMUR_ADMIN_PASSWORD="${LEMUR_ADMIN_PASSWORD:-admin}"
|
|
|
|
export SQLALCHEMY_DATABASE_URI="postgresql://$POSTGRES_USER:$POSTGRES_PASSWORD@$POSTGRES_HOST:$POSTGRES_PORT/$POSTGRES_DB"
|
|
|
|
|
|
PGPASSWORD=$POSTGRES_PASSWORD psql -h "$POSTGRES_HOST" -p "$POSTGRES_PORT" -U "$POSTGRES_USER" -d "$POSTGRES_DB" --command 'select 1;'
|
|
|
|
echo " # Create Postgres trgm extension"
|
|
PGPASSWORD=$POSTGRES_PASSWORD psql -h "$POSTGRES_HOST" -p "$POSTGRES_PORT" -U "$POSTGRES_USER" -d "$POSTGRES_DB" --command 'CREATE EXTENSION IF NOT EXISTS pg_trgm;'
|
|
echo " # Done"
|
|
|
|
if [ -z "${SKIP_SSL}" ]; then
|
|
if [ ! -f /etc/nginx/ssl/server.crt ] && [ ! -f /etc/nginx/ssl/server.key ]; then
|
|
openssl req -x509 -newkey rsa:4096 -nodes -keyout /etc/nginx/ssl/server.key -out /etc/nginx/ssl/server.crt -days 365 -subj "/C=US/ST=FAKE/L=FAKE/O=FAKE/OU=FAKE/CN=FAKE"
|
|
fi
|
|
[ -f "/etc/nginx/conf.d/default-ssl.conf.a" ] && mv /etc/nginx/conf.d/default-ssl.conf.a /etc/nginx/conf.d/default-ssl.conf
|
|
[ -f "/etc/nginx/conf.d/default.conf" ] && mv -f /etc/nginx/conf.d/default.conf /etc/nginx/conf.d/default.conf.a
|
|
fi
|
|
|
|
# if [ ! -f /home/lemur/.lemur/lemur.conf.py ]; then
|
|
# echo "Creating config"
|
|
# https://github.com/Netflix/lemur/issues/2257
|
|
# python3 /opt/lemur/lemur/manage.py create_config
|
|
# echo "Done"
|
|
# fi
|
|
|
|
echo " # Running init"
|
|
su lemur -s /bin/bash -c "cd /opt/lemur/lemur; lemur init -p ${LEMUR_ADMIN_PASSWORD}"
|
|
echo " # Done"
|
|
|
|
# echo "Creating user"
|
|
# https://github.com/Netflix/lemur/issues/
|
|
# echo "something that will create user" | python3 /opt/lemur/lemur/manage.py shell
|
|
# echo "Done"
|
|
|
|
cron_notify="${CRON_NOTIFY:-"0 22 * * *"}"
|
|
cron_sync="${CRON_SYNC:-"*/15 * * * *"}"
|
|
cron_revoked="${CRON_CHECK_REVOKED:-"0 22 * * *"}"
|
|
cron_reissue="${CRON_REISSUE:-"0 23 * * *"}"
|
|
|
|
echo " # Populating crontab"
|
|
echo "${cron_notify} lemur notify expirations" > /etc/crontabs/lemur
|
|
echo "${cron_sync} lemur source sync -s all" >> /etc/crontabs/lemur
|
|
echo "${cron_revoked} lemur certificate check_revoked" >> /etc/crontabs/lemur
|
|
echo "${cron_reissue} lemur certificate reissue -c" >> /etc/crontabs/lemur
|
|
echo " # Done"
|
|
|
|
exec "$@"
|