43 lines
1.6 KiB
Bash
43 lines
1.6 KiB
Bash
#!/bin/sh
|
|
|
|
# load default values
|
|
. /opt/entrypoint/defaults.sh
|
|
|
|
# load some functions
|
|
. /opt/entrypoint/utils.sh
|
|
|
|
# fix nginx configs rights (and modules through the symlink)
|
|
chown -R root:nginx /etc/nginx/
|
|
chmod -R 740 /etc/nginx/
|
|
find /etc/nginx -type d -exec chmod 750 {} \;
|
|
|
|
if [ "$MULTISITE" = "yes" ] ; then
|
|
servers=$(find /etc/nginx -name "server.conf" | cut -d '/' -f 4)
|
|
for server in $servers ; do
|
|
SERVER_PREFIX="/etc/nginx/${server}/"
|
|
if grep "/etc/letsencrypt/live" ${SERVER_PREFIX}https.conf > /dev/null && [ ! -f /etc/letsencrypt/live/${server}/fullchain.pem ] ; then
|
|
/opt/scripts/certbot-new.sh "$1" "$(cat ${SERVER_PREFIX}email-lets-encrypt.txt)"
|
|
fi
|
|
if grep "modsecurity.conf" ${SERVER_PREFIX}server.conf > /dev/null ; then
|
|
modsec_custom=""
|
|
if ls /modsec-confs/*.conf > /dev/null 2>&1 ; then
|
|
modsec_custom="include /modsec-confs/*.conf\n"
|
|
fi
|
|
if ls /modsec-confs/${1}/*.conf > /dev/null 2>&1 ; then
|
|
modsec_custom="${modsec_custom}include /modsec-confs/${server}/*.conf\n"
|
|
fi
|
|
replace_in_file "${SERVER_PREFIX}modsecurity-rules.conf" "%MODSECURITY_INCLUDE_CUSTOM_RULES%" "$modsec_custom"
|
|
if grep "owasp-crs.conf" ${SERVER_PREFIX}modsecurity-rules.conf > /dev/null ; then
|
|
modsec_crs_custom=""
|
|
if ls /modsec-crs-confs/*.conf > /dev/null 2>&1 ; then
|
|
modsec_crs_custom="include /modsec-crs-confs/*.conf\n"
|
|
fi
|
|
if ls /modsec-crs-confs/${1}/*.conf > /dev/null 2>&1 ; then
|
|
modsec_crs_custom="${modsec_custom}include /modsec-crs-confs/${server}/*.conf\n"
|
|
fi
|
|
fi
|
|
replace_in_file "${SERVER_PREFIX}modsecurity-rules.conf" "%MODSECURITY_INCLUDE_CUSTOM_CRS%" "$modsec_crs_custom"
|
|
fi
|
|
done
|
|
fi
|