setup container to use https://github.com/adi90x/rancher-active-proxy for certs and proxy

This commit is contained in:
Lawrence 2018-01-13 15:48:35 -05:00
parent f357e31a7a
commit 9efb148f8f
3 changed files with 29 additions and 30 deletions

View File

@ -10,10 +10,10 @@ RUN apt-get update \
&& rm -f lzma1604.7z \ && rm -f lzma1604.7z \
&& rm -rf lzma1604 && rm -rf lzma1604
RUN adduser --quiet meshcentral \ RUN adduser --quiet meshserver \
&& chmod +x /startmeshcentral.sh \ && chmod +x /startmeshcentral.sh \
&& su - meshcentral \ && su - meshserver \
&& cd /home/meshcentral \ && cd /home/meshserver \
&& npm install meshcentral node-7z greenlock-cli && npm install meshcentral node-7z greenlock-cli
ENV PORT 443 ENV PORT 443

View File

@ -10,22 +10,22 @@ if [ "$2" != "" ]; then
REDIRPORT=$2 REDIRPORT=$2
fi fi
su - meshcentral su - meshserver
cd /home/meshcentral/ cd /home/meshserver/
npm install meshcentral npm install meshcentral
if ! [ -f node_modules/.meshcentral-data/agentserver-cert-private.key ] ;then if [ -f "/etc/letsencrypt/archive/$HOSTNAME/cert1.pem" ]; then
node node_modules/meshcentral/meshcentral.js --cert $HOSTNAME --port $PORT --redirport $REDIRPORT ln -sf "/etc/letsencrypt/archive/$HOSTNAME/privkey1.pem" meshcentral-data/agentserver-cert-private.key
elif [ -f ssl.key ]; then ln -sf "/etc/letsencrypt/archive/$HOSTNAME/cert1.pem" meshcentral-data/agentserver-cert-public.crt
ln -sf ssl.key node_modules/.meshcentral-data/agentserver-cert-private.key ln -sf "/etc/letsencrypt/archive/$HOSTNAME/privkey1.pem" meshcentral-data/root-cert-private.key
ln -sf ssl.cert node_modules/.meshcentral-data/agentserver-cert-public.crt ln -sf "/etc/letsencrypt/archive/$HOSTNAME/cert1.pem" meshcentral-data/root-cert-public.crt
ln -sf ssl.key node_modules/.meshcentral-data/root-cert-private.key ln -sf "/etc/letsencrypt/archive/$HOSTNAME/privkey1.pem" meshcentral-data/webserver-cert-private.key
ln -sf ssl.cert node_modules/.meshcentral-data/root-cert-public.crt ln -sf "/etc/letsencrypt/archive/$HOSTNAME/cert1.pem" meshcentral-data/webserver-cert-public.crt
ln -sf ssl.key node_modules/.meshcentral-data/webserver-cert-private.key ln -sf "/etc/letsencrypt/archive/$HOSTNAME/privkey1.pem" meshcentral-data/mpsserver-cert-private.key
ln -sf ssl.cert node_modules/.meshcentral-data/webserver-cert-public.crt ln -sf "/etc/letsencrypt/archive/$HOSTNAME/cert1.pem" meshcentral-data/mpsserver-cert-public.crt
ln -sf ssl.key node_modules/.meshcentral-data/mpsserver-cert-private.key
ln -sf ssl.cert node_modules/.meshcentral-data/mpsserver-cert-public.crt
node node_modules/meshcentral/meshcentral.js --port $PORT --redirport $REDIRPORT node node_modules/meshcentral/meshcentral.js --port $PORT --redirport $REDIRPORT
elif ! [ -f meshcentral-data/agentserver-cert-private.key ] ;then
node node_modules/meshcentral/meshcentral.js --cert $HOSTNAME --port $PORT --redirport $REDIRPORT
else else
node node_modules/meshcentral/meshcentral.js --port $PORT --redirport $REDIRPORT node node_modules/meshcentral/meshcentral.js --port $PORT --redirport $REDIRPORT
fi fi

View File

@ -11,23 +11,22 @@ else
REDIRPORT=$2 REDIRPORT=$2
fi fi
su - meshserver
su - meshcentral cd /home/meshserver/
cd /home/meshcentral/
npm install meshcentral npm install meshcentral
if ! [ -f node_modules/.meshcentral-data/agentserver-cert-private.key ] ;then if [ -f ssl.key ]; then
forever start node_modules/meshcentral/meshcentral.js --cert $HOSTNAME --port $PORT --redirport $REDIRPORT ln -sf ssl.key meshcentral-data/agentserver-cert-private.key
elif [ -f ssl.key ]; then ln -sf ssl.cert meshcentral-data/agentserver-cert-public.crt
ln -sf ssl.key node_modules/.meshcentral-data/agentserver-cert-private.key ln -sf ssl.key meshcentral-data/root-cert-private.key
ln -sf ssl.cert node_modules/.meshcentral-data/agentserver-cert-public.crt ln -sf ssl.cert meshcentral-data/root-cert-public.crt
ln -sf ssl.key node_modules/.meshcentral-data/root-cert-private.key ln -sf ssl.key meshcentral-data/webserver-cert-private.key
ln -sf ssl.cert node_modules/.meshcentral-data/root-cert-public.crt ln -sf ssl.cert meshcentral-data/webserver-cert-public.crt
ln -sf ssl.key node_modules/.meshcentral-data/webserver-cert-private.key ln -sf ssl.key meshcentral-data/mpsserver-cert-private.key
ln -sf ssl.cert node_modules/.meshcentral-data/webserver-cert-public.crt ln -sf ssl.cert meshcentral-data/mpsserver-cert-public.crt
ln -sf ssl.key node_modules/.meshcentral-data/mpsserver-cert-private.key
ln -sf ssl.cert node_modules/.meshcentral-data/mpsserver-cert-public.crt
forever start node_modules/meshcentral/meshcentral.js --port $PORT --redirport $REDIRPORT forever start node_modules/meshcentral/meshcentral.js --port $PORT --redirport $REDIRPORT
elif ! [ -f meshcentral-data/agentserver-cert-private.key ] ;then
forever start node_modules/meshcentral/meshcentral.js --cert $HOSTNAME --port $PORT --redirport $REDIRPORT
else else
forever start node_modules/meshcentral/meshcentral.js --port $PORT --redirport $REDIRPORT forever start node_modules/meshcentral/meshcentral.js --port $PORT --redirport $REDIRPORT
fi fi