mirror of
https://github.com/Ylianst/MeshCentral.git
synced 2025-02-06 11:18:06 -05:00
setup container to use https://github.com/adi90x/rancher-active-proxy for certs and proxy
This commit is contained in:
parent
f357e31a7a
commit
9efb148f8f
@ -10,10 +10,10 @@ RUN apt-get update \
|
|||||||
&& rm -f lzma1604.7z \
|
&& rm -f lzma1604.7z \
|
||||||
&& rm -rf lzma1604
|
&& rm -rf lzma1604
|
||||||
|
|
||||||
RUN adduser --quiet meshcentral \
|
RUN adduser --quiet meshserver \
|
||||||
&& chmod +x /startmeshcentral.sh \
|
&& chmod +x /startmeshcentral.sh \
|
||||||
&& su - meshcentral \
|
&& su - meshserver \
|
||||||
&& cd /home/meshcentral \
|
&& cd /home/meshserver \
|
||||||
&& npm install meshcentral node-7z greenlock-cli
|
&& npm install meshcentral node-7z greenlock-cli
|
||||||
|
|
||||||
ENV PORT 443
|
ENV PORT 443
|
||||||
|
@ -10,22 +10,22 @@ if [ "$2" != "" ]; then
|
|||||||
REDIRPORT=$2
|
REDIRPORT=$2
|
||||||
fi
|
fi
|
||||||
|
|
||||||
su - meshcentral
|
su - meshserver
|
||||||
cd /home/meshcentral/
|
cd /home/meshserver/
|
||||||
npm install meshcentral
|
npm install meshcentral
|
||||||
|
|
||||||
if ! [ -f node_modules/.meshcentral-data/agentserver-cert-private.key ] ;then
|
if [ -f "/etc/letsencrypt/archive/$HOSTNAME/cert1.pem" ]; then
|
||||||
node node_modules/meshcentral/meshcentral.js --cert $HOSTNAME --port $PORT --redirport $REDIRPORT
|
ln -sf "/etc/letsencrypt/archive/$HOSTNAME/privkey1.pem" meshcentral-data/agentserver-cert-private.key
|
||||||
elif [ -f ssl.key ]; then
|
ln -sf "/etc/letsencrypt/archive/$HOSTNAME/cert1.pem" meshcentral-data/agentserver-cert-public.crt
|
||||||
ln -sf ssl.key node_modules/.meshcentral-data/agentserver-cert-private.key
|
ln -sf "/etc/letsencrypt/archive/$HOSTNAME/privkey1.pem" meshcentral-data/root-cert-private.key
|
||||||
ln -sf ssl.cert node_modules/.meshcentral-data/agentserver-cert-public.crt
|
ln -sf "/etc/letsencrypt/archive/$HOSTNAME/cert1.pem" meshcentral-data/root-cert-public.crt
|
||||||
ln -sf ssl.key node_modules/.meshcentral-data/root-cert-private.key
|
ln -sf "/etc/letsencrypt/archive/$HOSTNAME/privkey1.pem" meshcentral-data/webserver-cert-private.key
|
||||||
ln -sf ssl.cert node_modules/.meshcentral-data/root-cert-public.crt
|
ln -sf "/etc/letsencrypt/archive/$HOSTNAME/cert1.pem" meshcentral-data/webserver-cert-public.crt
|
||||||
ln -sf ssl.key node_modules/.meshcentral-data/webserver-cert-private.key
|
ln -sf "/etc/letsencrypt/archive/$HOSTNAME/privkey1.pem" meshcentral-data/mpsserver-cert-private.key
|
||||||
ln -sf ssl.cert node_modules/.meshcentral-data/webserver-cert-public.crt
|
ln -sf "/etc/letsencrypt/archive/$HOSTNAME/cert1.pem" meshcentral-data/mpsserver-cert-public.crt
|
||||||
ln -sf ssl.key node_modules/.meshcentral-data/mpsserver-cert-private.key
|
|
||||||
ln -sf ssl.cert node_modules/.meshcentral-data/mpsserver-cert-public.crt
|
|
||||||
node node_modules/meshcentral/meshcentral.js --port $PORT --redirport $REDIRPORT
|
node node_modules/meshcentral/meshcentral.js --port $PORT --redirport $REDIRPORT
|
||||||
|
elif ! [ -f meshcentral-data/agentserver-cert-private.key ] ;then
|
||||||
|
node node_modules/meshcentral/meshcentral.js --cert $HOSTNAME --port $PORT --redirport $REDIRPORT
|
||||||
else
|
else
|
||||||
node node_modules/meshcentral/meshcentral.js --port $PORT --redirport $REDIRPORT
|
node node_modules/meshcentral/meshcentral.js --port $PORT --redirport $REDIRPORT
|
||||||
fi
|
fi
|
||||||
|
@ -11,23 +11,22 @@ else
|
|||||||
REDIRPORT=$2
|
REDIRPORT=$2
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
su - meshserver
|
||||||
su - meshcentral
|
cd /home/meshserver/
|
||||||
cd /home/meshcentral/
|
|
||||||
npm install meshcentral
|
npm install meshcentral
|
||||||
|
|
||||||
if ! [ -f node_modules/.meshcentral-data/agentserver-cert-private.key ] ;then
|
if [ -f ssl.key ]; then
|
||||||
forever start node_modules/meshcentral/meshcentral.js --cert $HOSTNAME --port $PORT --redirport $REDIRPORT
|
ln -sf ssl.key meshcentral-data/agentserver-cert-private.key
|
||||||
elif [ -f ssl.key ]; then
|
ln -sf ssl.cert meshcentral-data/agentserver-cert-public.crt
|
||||||
ln -sf ssl.key node_modules/.meshcentral-data/agentserver-cert-private.key
|
ln -sf ssl.key meshcentral-data/root-cert-private.key
|
||||||
ln -sf ssl.cert node_modules/.meshcentral-data/agentserver-cert-public.crt
|
ln -sf ssl.cert meshcentral-data/root-cert-public.crt
|
||||||
ln -sf ssl.key node_modules/.meshcentral-data/root-cert-private.key
|
ln -sf ssl.key meshcentral-data/webserver-cert-private.key
|
||||||
ln -sf ssl.cert node_modules/.meshcentral-data/root-cert-public.crt
|
ln -sf ssl.cert meshcentral-data/webserver-cert-public.crt
|
||||||
ln -sf ssl.key node_modules/.meshcentral-data/webserver-cert-private.key
|
ln -sf ssl.key meshcentral-data/mpsserver-cert-private.key
|
||||||
ln -sf ssl.cert node_modules/.meshcentral-data/webserver-cert-public.crt
|
ln -sf ssl.cert meshcentral-data/mpsserver-cert-public.crt
|
||||||
ln -sf ssl.key node_modules/.meshcentral-data/mpsserver-cert-private.key
|
|
||||||
ln -sf ssl.cert node_modules/.meshcentral-data/mpsserver-cert-public.crt
|
|
||||||
forever start node_modules/meshcentral/meshcentral.js --port $PORT --redirport $REDIRPORT
|
forever start node_modules/meshcentral/meshcentral.js --port $PORT --redirport $REDIRPORT
|
||||||
|
elif ! [ -f meshcentral-data/agentserver-cert-private.key ] ;then
|
||||||
|
forever start node_modules/meshcentral/meshcentral.js --cert $HOSTNAME --port $PORT --redirport $REDIRPORT
|
||||||
else
|
else
|
||||||
forever start node_modules/meshcentral/meshcentral.js --port $PORT --redirport $REDIRPORT
|
forever start node_modules/meshcentral/meshcentral.js --port $PORT --redirport $REDIRPORT
|
||||||
fi
|
fi
|
||||||
|
Loading…
x
Reference in New Issue
Block a user