integrations - fix missing acme folder when using Swarm or Kubernetes

This commit is contained in:
bunkerity
2021-10-11 17:24:19 +02:00
parent 7045c0c2b6
commit 650ad7ea49
6 changed files with 21 additions and 33 deletions

View File

@@ -1,33 +1,19 @@
#!/bin/sh
# prepare /www
mkdir /www
chown -R root:nginx /www
chmod -R 770 /www
# prepare /acme-challenge
mkdir /acme-challenge
chown root:nginx /acme-challenge
chmod 770 /acme-challenge
# prepare /cache
mkdir /cache
chown root:nginx /cache
chmod 770 /cache
# prepare /plugins
mkdir /plugins
chown root:nginx /plugins
chmod 770 /plugins
# prepare symlinks
# prepare folders
folders="www http-confs server-confs modsec-confs modsec-crs-confs cache pre-server-confs acme-challenge plugins"
for folder in $folders ; do
if [ -e "/opt/bunkerized-nginx/$folder" ] ; then
rm -rf "/opt/bunkerized-nginx/$folder"
if [ -e "/opt/bunkerized-nginx/${folder}" ] ; then
rm -rf "/opt/bunkerized-nginx/${folder}"
fi
mkdir "/${folder}"
chown root:nginx "/${folder}"
chmod 770 "/${folder}"
ln -s "/$folder" "/opt/bunkerized-nginx/$folder"
done
mkdir -p /acme-challenge/.well-known/acme-challenge
chown -R root:nginx /acme-challenge
chmod 770 /acme-challenge
# prepare /var/log
rm -f /var/log/nginx/*

View File

@@ -348,7 +348,7 @@ module_hotfixes=true"
elif [ "$OS" = "fedora" ] ; then
echo "[*] Install nginx"
do_and_check_cmd dnf install -y nginx
elif [ "$OS" = "archlinux" ; then
elif [ "$OS" = "archlinux" ] ; then
echo "[*] Update pacman DB"
do_and_check_cmd pacman -Sy
echo "[*] Install nginx"
@@ -825,7 +825,7 @@ fi
# Create acme-challenge folder
if [ ! -d "/opt/bunkerized-nginx/acme-challenge" ] ; then
echo "[*] Create /opt/bunkerized-nginx/acme-challenge folder"
do_and_check_cmd mkdir /opt/bunkerized-nginx/acme-challenge
do_and_check_cmd mkdir -p /opt/bunkerized-nginx/acme-challenge/.well-known/acme-challenge
fi
# Create plugins folder
@@ -840,7 +840,7 @@ do_and_check_cmd chown -R root:nginx /opt/bunkerized-nginx
do_and_check_cmd find /opt/bunkerized-nginx -type f -exec chmod 0740 {} \;
do_and_check_cmd find /opt/bunkerized-nginx -type d -exec chmod 0750 {} \;
do_and_check_cmd chmod 770 /opt/bunkerized-nginx/cache
do_and_check_cmd chmod 770 /opt/bunkerized-nginx/acme-challenge
do_and_check_cmd chmod -R 770 /opt/bunkerized-nginx/acme-challenge
do_and_check_cmd chmod 750 /opt/bunkerized-nginx/entrypoint/*
do_and_check_cmd chmod 750 /opt/bunkerized-nginx/gen/main.py
do_and_check_cmd chmod 750 /opt/bunkerized-nginx/jobs/main.py