-
Notifications
You must be signed in to change notification settings - Fork 2
/
Copy pathenv_create_podman.sh
executable file
·281 lines (226 loc) · 7.96 KB
/
env_create_podman.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
#!/bin/bash
# Get the github user from the argument
GITHUB_USER=$1
echo "GitHub User: $GITHUB_USER"
# Function to check for uppercase characters
contains_uppercase() {
[[ "$1" =~ [A-Z] ]]
}
# function to check if the site name is valid and has the first letter uppercase
is_FACILITY_name_valid() {
[[ "$1" = ^[A-Z] ]]
}
# Prompt for plant trigram
while true; do
read -p "Please enter your plant trigram (example: lan): " PLANT_TRIGRAM
if contains_uppercase "$PLANT_TRIGRAM"; then
echo "The plant trigram should not contain uppercase characters. Please try again."
else
break
fi
if [ -z "${PLANT_TRIGRAM}" ]
then
echo "The plant trigram should not be empty. Please try again."
fi
done
# Ask the name of the site or plant
while true; do
read -p "Please enter the name of the facility or plant (example: Langres or Andance): " FACILITY_NAME
if is_FACILITY_name_valid "$FACILITY_NAME"; then
echo "The site name should contain the first letter uppercase. Please try again."
else
break
fi
if [ -z "${FACILITY_NAME}" ]
then
echo "The site name should not be empty. Please try again."
fi
done
# Prompt for database details
read -p "Please enter your MySQL root password: " MYSQL_ROOT_PASSWORD
read -p "Please enter your MySQL username: " MYSQL_USER
read -p "Please enter your MySQL password: " MYSQL_PASSWORD
read -p "Please enter your database name: " MYSQL_DATABASE
while true; do
read -p "Please enter your app context (prod or dev): " APP_CONTEXT_SH
if [ "${APP_CONTEXT_SH}" == "prod" ] || [ "${APP_CONTEXT_SH}" == "dev" ]; then
# If the context is valid, break the loop and continue with the rest of your script
break
else
echo "Invalid app context. Please enter either the word prod or dev."
fi
done
read -p "What Timezone to use? (default Europe/Paris) " TIMEZONE
if [ -z "${TIMEZONE}" ]
then
TIMEZONE="'Europe/Paris'"
fi
while true; do
read -p "Is there a proxy in your network ? (yes/no) " PROXY_ANSWER;
if [ "${PROXY_ANSWER}" == "yes" ] || [ "${PROXY_ANSWER}" == "no" ]; then
break;
else
echo "Please answer yes or no";
fi
done
if [ "${PROXY_ANSWER}" == "yes" ]
then
read -p "Please enter your proxy address(default will be 'http://10.0.0.1'): " PROXY_ADDRESS
if [ -z "${PROXY_ADDRESS}" ]
then
PROXY_ADDRESS="http://10.0.0.1"
fi
read -p "Please enter your proxy port(default will be '80'): " PROXY_PORT
if [ -z "${PROXY_PORT}" ]
then
PROXY_PORT="80"
fi
PROXY_ENV="${PROXY_ADDRESS}:${PROXY_PORT}"
PROXY_DOCKERFILE="ENV http_proxy=\'${PROXY_ADDRESS}:${PROXY_PORT}\'"
sed -i "3s|.*|$PROXY_DOCKERFILE|" docker/dockerfile/Dockerfile
fi
# Create the secrets directory
mkdir -p ./secrets;
# Generate a new secret key
APP_SECRET=$(openssl rand -hex 16)
cat > ./secrets/root_password <<EOL
${MYSQL_ROOT_PASSWORD}
EOL
cat > ./secrets/database_name <<EOL
${MYSQL_DATABASE}
EOL
cat > ./secrets/database_user <<EOL
${MYSQL_USER}
EOL
cat > ./secrets/database_password <<EOL
${MYSQL_PASSWORD}
EOL
# Define the SSL directory
SSL_DIR="./secrets/ssl"
# Check if SSL directory exists
if [ -d "$SSL_DIR" ]; then
echo "SSL directory exists: $SSL_DIR"
else
echo "SSL directory does not exist: $SSL_DIR"
echo "Executing script to create SSL directory and certificates..."
# Execute the script to create the directory and certificates
./cert-gen.sh
# Check if the SSL directory now exists
if [ -d "$SSL_DIR" ]; then
echo "SSL directory and certificates created successfully."
else
echo "Error: Failed to create SSL directory and certificates."
exit 1
fi
fi
# Change the src/Kernel.php to set the good timezone.
cat > ./src/Kernel.php <<EOL
<?php
namespace App;
use Symfony\Bundle\FrameworkBundle\Kernel\MicroKernelTrait;
use Symfony\Component\HttpKernel\Kernel as BaseKernel;
class Kernel extends BaseKernel
{
use MicroKernelTrait;
public function boot(): void
{
parent::boot();
date_default_timezone_set(${TIMEZONE});
}
}
EOL
# Create .env file
cat > .env <<EOL
MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
MYSQL_DATABASE=${MYSQL_DATABASE}
MYSQL_USER=${MYSQL_USER}
MYSQL_PASSWORD=${MYSQL_PASSWORD}
HOSTNAME=${HOSTNAME}
PLANT_TRIGRAM=${PLANT_TRIGRAM}
GITHUB_USER=${GITHUB_USER}
FACILITY_NAME=${FACILITY_NAME}
###> symfony/framework-bundle ###
APP_ENV=${APP_CONTEXT_SH}
APP_SECRET=${APP_SECRET}
###< symfony/framework-bundle ###
###> symfony/webapp-pack ###
MESSENGER_TRANSPORT_DSN=doctrine://default?auto_setup=0
###< symfony/webapp-pack ###
###> doctrine/doctrine-bundle ###
# Format described at https://www.doctrine-project.org/projects/doctrine-dbal/en/latest/reference/configuration.html#connecting-using-a-url
# IMPORTANT: You MUST configure your server version, either here or in config/packages/doctrine.yaml
#
# DATABASE_URL="sqlite:///%kernel.project_dir%/var/data.db"
# DATABASE_URL="mysql://app:[email protected]:3306/app?serverVersion=8&charset=utf8mb4"
DATABASE_URL=mysql://root:\${MYSQL_ROOT_PASSWORD}@efnc-database-pod/\${MYSQL_DATABASE}?charset=utf8mb4&serverVersion=MariaDB-11.6.2&sslmode=verify_ca&sslrootcert=/etc/ssl/certs/ca-cert.pem
###< doctrine/doctrine-bundle ###
###> symfony/messenger ###
# Choose one of the transports below
# MESSENGER_TRANSPORT_DSN=doctrine://default
# MESSENGER_TRANSPORT_DSN=amqp://guest:guest@localhost:5672/%2f/messages
# MESSENGER_TRANSPORT_DSN=redis://localhost:6379/messages
###< symfony/messenger ###
###> symfony/mailer ###
MAILER_DSN=smtp://smtp.corp.ponet:25?verify_peer=0
MAILER_SENDER_EMAIL=${PLANT_TRIGRAM}[email protected]
###< symfony/mailer ###
###> certificate for SSL connection to DB ###
MYSQL_SSL_KEY=/etc/ssl/certs/server-key.pem
MYSQL_SSL_CERT=/etc/ssl/certs/server-cert.pem
MYSQL_SSL_CA=/etc/ssl/certs/ca-cert.pem
###< certificate for SSL connection to DB ###
EOL
echo ".env file created successfully!"
if [ "${APP_CONTEXT_SH}" == "prod" ]
then
APP_CONTEXT_SH="dev"
sed -i "s|^APP_ENV=prod.*|APP_ENV=dev|" .env
sed -i "s|^# MAILER_DSN=.*|MAILER_DSN=smtp://smtp.corp.ponet:25?verify_peer=0|" .env
set -a
APP_CONTEXT=${APP_CONTEXT_SH}
PROXY_ENV=${PROXY_ENV}
APP_TIMEZONE=${TIMEZONE}
GITHUB_USER=${GITHUB_USER}
set +a
# Create docker-compose.override.yml file to use the good entrypoint
envsubst < ./template.yml > ./efnc.yml;
podman play kube --replace ./efnc.yml
# Wait until the container is listed as running
until [ "$(podman ps -q -f name=efnc-web)" ]; do
echo "Waiting for container efnc-web to start..."
sleep 1
done
# Wait until the webpack compiled successfully
until podman logs --since 10s --tail 10 efnc-web 2>&1 | grep -q "webpack compiled successfully"; do
echo "Waiting for the webpack to be compiled"
sleep 10
done
podman play kube --down ./efnc.yml
sleep 30
sed -i "s|^APP_ENV=dev.*|APP_ENV=prod|" .env
APP_CONTEXT_SH="prod"
set -a
APP_CONTEXT=${APP_CONTEXT_SH}
PROXY_ENV=${PROXY_ENV}
APP_TIMEZONE=${TIMEZONE}
GITHUB_USER=${GITHUB_USER}
set +a
# Create docker-compose.override.yml file to use the good entrypoint
envsubst < ./template.yml > ./efnc.yml
echo "Production efnc.yml file created successfully!";
cat ./efnc.yml;
else
APP_CONTEXT_SH="dev"
sed -i "s|^APP_ENV=prod.*|APP_ENV=dev|" .env
sed -i "s|^# MAILER_DSN=.*|MAILER_DSN=smtp://smtp.corp.ponet:25?verify_peer=0|" .env
set -a
APP_CONTEXT=${APP_CONTEXT_SH}
PROXY_ENV=${PROXY_ENV}
APP_TIMEZONE=${TIMEZONE}
GITHUB_USER=${GITHUB_USER}
set +a
# Create docker-compose.override.yml file to use the good entrypoint
envsubst < ./template.yml > ./efnc.yml;
echo "Development efnc.yml file created successfully!";
cat ./efnc.yml;
fi