@drumee/setup-infra 1.0.12 → 1.0.14

package/bin/init-acme

@@ -1,4 +1,12 @@
 #!/bin/bash
+if [ "$DRUMEE_DOMAIN_NAME" = "" ]; then
+  echo "Public domain name not found. Will run only on private mode."
+  exit 0
+fi
+if [ "$OWN_CERTS_DIR" != "" ]; then
+  echo "OWN_CERTS_DIR was set to $OWN_CERTS_DIR. This means you will have to complete settings later."
+  exit 0
+fi
 
 echo "Configuring certificates..."
 #-------------------
@@ -6,9 +14,9 @@ function make_certs(){
   sum=0
   dom=$1
   echo Generating "${dom}" cetificates...
-  OPTIONS="--issue -d $dom -d "*.${dom}" --home $ACME_DIR --config-home $ACME_DIR/configs --cert-home $ACME_CERTS_DIR --dns dns_nsupdate"
+  OPTIONS="--issue -d $dom -d "*.${dom}" --home $ACME_DIR --config-home $ACME_DIR/configs --cert-home $CERTS_DIR --dns dns_nsupdate"
   ./acme.sh $OPTIONS
-  while [ ! -f ${ACME_CERTS_DIR}/${dom}_ecc/fullchain.cer ]; do
+  while [ ! -f ${CERTS_DIR}/${dom}_ecc/fullchain.cer ]; do
     ./acme.sh $OPTIONS
     if [ $? = "0" ]; then
       echo Certificate have been sucessfully created.
@@ -52,7 +60,7 @@ cd $ACME_DIR
 
 failed=0
 
-./acme.sh --register-account -m $ACME_EMAIL_ACCOUNT --home $ACME_DIR  --config-home $ACME_DIR/configs --cert-home $ACME_CERTS_DIR
+./acme.sh --register-account -m $ACME_EMAIL_ACCOUNT --home $ACME_DIR  --config-home $ACME_DIR/configs --cert-home $CERTS_DIR
 
 
 make_certs $DRUMEE_DOMAIN_NAME
@@ -64,8 +72,8 @@ usermod -a -G $DRUMEE_SYSTEM_GROUP jicofo
 usermod -a -G $DRUMEE_SYSTEM_GROUP turnserver
 usermod -a -G $DRUMEE_SYSTEM_GROUP postfix
 
-if [ -d "$ACME_CERTS_DIR" ]; then
-  chown -R $DRUMEE_SYSTEM_USER:$DRUMEE_SYSTEM_GROUP $ACME_CERTS_DIR 
+if [ -d "$CERTS_DIR" ]; then
+  chown -R $DRUMEE_SYSTEM_USER:$DRUMEE_SYSTEM_GROUP $CERTS_DIR 
 fi
 
 echo "ACME has been successfuly installed!"

package/bin/init-private

@@ -0,0 +1,40 @@
+#!/bin/bash
+set -e
+source /etc/drumee/drumee.sh
+
+echo "Configuring private domain name..."
+
+if [ "$DRUMEE_PRIVATE_DOMAIN" = "" ]; then
+  if [ "$DRUMEE_DOMAIN_NAME" = "" ]; then
+    export DRUMEE_PRIVATE_DOMAIN=drumee.local
+  else
+    echo "Private domain name not found. Will run only on public mode."
+    exit 0
+  fi
+fi
+
+mydomain=$DRUMEE_PRIVATE_DOMAIN
+outdir=${CERTS_DIR}/${mydomain}_ecc
+
+key=${outdir}/${mydomain}.key
+csr=${outdir}/${mydomain}.csr
+cer=${outdir}/${mydomain}.cer
+
+mkir -p $outdir
+
+C=$(locale --all | grep utf8 | tail -1 | sed  -E "s/^(.+_)|(\..+)$//g")
+if [ "$C" = "" ]; then
+  C=XX
+fi
+
+openssl genpkey -algorithm RSA -out $key
+
+openssl req -new -key $key -out $csr -subj "/C=${C}/ST= /L=Local Domain /O=${DRUMEE_DESCRIPTION} /OU=${DRUMEE_DESCRIPTION} /CN=*.${mydomain} /emailAddress=${ADMIN_EMAIL}"
+
+openssl x509 -req -in $csr -signkey $key -out $cer
+
+openssl x509 -in $cer -noout -text
+
+cp $cer /etc/ssl/certs/
+
+exit 0

package/bin/prosody

@@ -11,7 +11,7 @@ function setup_dirs() {
   ca_dir=/usr/local/share/ca-certificates
   mkdir -p $ca_dir
 
-  cert_file="${ACME_CERTS_DIR}/${JITSI_DOMAIN}_ecc/${JITSI_DOMAIN}"
+  cert_file="${CERTS_DIR}/${JITSI_DOMAIN}_ecc/${JITSI_DOMAIN}"
   target="${ca_dir}/auth.${JITSI_DOMAIN}"
 
   if [ -f "${cert_file}.cer" ]; then