1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283 |
- #!/usr/bin/with-contenv bash
- # make our folders
- mkdir -p \
- /config/{nginx/site-confs,keys} \
- /run \
- /var/lib/nginx/tmp/client_body \
- /var/tmp/nginx
- # generate keys (maybe)
- if [[ $DISABLE_HTTPS -ne 1 ]]; then
- if [[ $ENABLE_LETSENCRYPT -eq 1 ]]; then
- if [[ ! -f /etc/letsencrypt/live/$LETSENCRYPT_DOMAIN/fullchain.pem ]]; then
- if ! certbot-auto \
- certonly \
- --no-self-upgrade \
- --noninteractive \
- --standalone \
- --preferred-challenges http \
- -d $LETSENCRYPT_DOMAIN \
- --agree-tos \
- --email $LETSENCRYPT_EMAIL ; then
- echo "Failed to obtain a certificate from the Let's Encrypt CA."
- # this tries to get the user's attention and to spare the
- # authority's rate limit:
- sleep 15
- echo "Exiting."
- exit 1
- fi
- fi
- # remove default certbot renewal
- if [[ -f /etc/cron.d/certbot ]]; then
- rm /etc/cron.d/certbot
- fi
- # setup certbot renewal script
- if [[ ! -f /etc/cron.daily/letencrypt-renew ]]; then
- cp /defaults/letsencrypt-renew /etc/cron.daily/
- fi
- else
- # use self-signed certs
- if [[ -f /config/keys/cert.key && -f /config/keys/cert.crt ]]; then
- echo "using keys found in /config/keys"
- else
- echo "generating self-signed keys in /config/keys, you can replace these with your own keys if required"
- SUBJECT="/C=US/ST=TX/L=Austin/O=jitsi.org/OU=Jitsi Server/CN=*"
- openssl req -new -x509 -days 3650 -nodes -out /config/keys/cert.crt -keyout /config/keys/cert.key -subj "$SUBJECT"
- fi
- fi
- fi
- # copy config files
- tpl /defaults/nginx.conf > /config/nginx/nginx.conf
- tpl /defaults/meet.conf > /config/nginx/meet.conf
- if [[ -f /config/nginx/custom-meet.conf ]]; then
- cat /config/nginx/custom-meet.conf >> /config/nginx/meet.conf
- fi
- tpl /defaults/ssl.conf > /config/nginx/ssl.conf
- tpl /defaults/default > /config/nginx/site-confs/default
- cp /defaults/config.js /config/config.js
- tpl /defaults/system-config.js >> /config/config.js
- tpl /defaults/settings-config.js >> /config/config.js
- if [[ -f /config/custom-config.js ]]; then
- cat /config/custom-config.js >> /config/config.js
- fi
- if [[ ! -f /config/interface_config.js ]]; then
- cp /defaults/interface_config.js /config/interface_config.js
- # It will remove parameter 'closedcaptions' from TOOLBAR_BUTTONS if ENABLE_TRANSCRIPTIONS is false,
- # because it enabled by default, but not supported out of the box.
- if [[ $ENABLE_TRANSCRIPTIONS -ne 1 && "$ENABLE_TRANSCRIPTIONS" != "true" ]]; then
- sed -i \
- -e "s#'closedcaptions', ##" \
- /config/interface_config.js
- fi
- fi
|