Jérôme Lebleu
10 years ago
2 changed files with 103 additions and 58 deletions
-
51README.md
-
110scripts/upgrade
@ -1,68 +1,72 @@ |
|||||
#!/bin/bash |
#!/bin/bash |
||||
|
|
||||
set -e |
|
||||
|
set -eu |
||||
|
|
||||
# Retrieve arguments |
|
||||
domain=$(sudo yunohost app setting my_webapp domain) |
|
||||
path=$(sudo yunohost app setting my_webapp path) |
|
||||
user=$(sudo yunohost app setting my_webapp ftp_user \ |
|
||||
|| sudo yunohost app setting my_webapp allowed_users \ |
|
||||
|| echo "") |
|
||||
is_public=$(sudo yunohost app setting my_webapp is_public) |
|
||||
final_path=/var/www/my_webapp |
|
||||
|
# Get multi-instances specific variables |
||||
|
app=$YNH_APP_INSTANCE_NAME |
||||
|
|
||||
# Remove trailing "/" from the path |
|
||||
path=${path%/} |
|
||||
|
# Source app helpers |
||||
|
. /usr/share/yunohost/helpers |
||||
|
|
||||
# Reset permissions |
|
||||
if [[ "$user" != "" ]]; then |
|
||||
sudo yunohost app setting my_webapp allowed_users -v "$user" |
|
||||
fi |
|
||||
|
# Retrieve app settings |
||||
|
domain=$(ynh_app_setting_get "$app" domain) |
||||
|
path=$(ynh_app_setting_get "$app" path) |
||||
|
path=${path%/} |
||||
|
is_public=$(ynh_app_setting_get "$app" is_public) |
||||
|
mysql_db=$(ynh_app_setting_get "$app" mysql_db) |
||||
|
password=$(ynh_app_setting_get "$app" password) |
||||
|
user=$(ynh_app_setting_get "$app" user) |
||||
|
|
||||
# Update the salt in the admin.php file |
|
||||
salt=$(dd if=/dev/urandom bs=1 count=200 2> /dev/null | tr -c -d 'A-Za-z0-9' | sed -n 's/\(.\{24\}\).*/\1/p') |
|
||||
sed -i "s@SALTTOCHANGE@$salt@g" ../sources/admin.php |
|
||||
|
([[ -n "$mysql_db" ]] && [[ -n "$password" ]] && [[ -n "$user" ]]) \ |
||||
|
|| ynh_die "The app changed and can not be automatically upgraded. \ |
||||
|
You will have to manually upgrade it following those instructions: \ |
||||
|
https://github.com/YunoHost-Apps/my_webapp_ynh#upgrade" |
||||
|
|
||||
# Modify the index.html instruction file |
|
||||
sed -i "s@USER@$user@g" ../sources/files/index.html |
|
||||
sed -i "s@URL@https://$domain$path/admin/@g" ../sources/files/index.html |
|
||||
|
# Check destination directory |
||||
|
DESTDIR="/var/www/$app" |
||||
|
[[ ! -d $DESTDIR ]] && ynh_die \ |
||||
|
"The destination directory '$DESTDIR' does not exist.\ |
||||
|
The app is not correctly installed, you should remove it first." |
||||
|
|
||||
# Copy files to the right place |
|
||||
sudo mkdir -p $final_path |
|
||||
sudo cp ../sources/admin.php $final_path/ |
|
||||
sudo cp -r ../sources/_assets $final_path/ |
|
||||
|
# Harden SSH connection for the user |
||||
|
sudo sed -i "/##-> ${app}/,/##<- ${app}/d" /etc/ssh/sshd_config |
||||
|
echo "##-> ${app} |
||||
|
# Hardening user connection |
||||
|
Match User ${user} |
||||
|
ChrootDirectory %h |
||||
|
ForceCommand internal-sftp |
||||
|
AllowTcpForwarding no |
||||
|
PermitTunnel no |
||||
|
X11Forwarding no |
||||
|
##<- ${app}" | sudo tee -a /etc/ssh/sshd_config >/dev/null |
||||
|
|
||||
# Create directory and set permissions |
|
||||
sudo mkdir -p $final_path/files |
|
||||
sudo chmod 775 -R $final_path/files |
|
||||
sudo chown -hR www-data:www-data $final_path/files |
|
||||
|
# Fix permissions |
||||
|
sudo chown -hR "${user}:" "$DESTDIR" |
||||
|
|
||||
# Modify Nginx configuration file and copy it to Nginx conf directory |
|
||||
if [[ "$path" == "" ]]; then |
|
||||
sed -i "s@LOCATIONTOCHANGE@/@g" ../conf/nginx.conf |
|
||||
else |
|
||||
sed -i "s@LOCATIONTOCHANGE@$path@g" ../conf/nginx.conf |
|
||||
fi |
|
||||
sed -i "s@PATHTOCHANGE@$path@g" ../conf/nginx.conf |
|
||||
sed -i "s@ALIASTOCHANGE@$final_path/@g" ../conf/nginx.conf |
|
||||
sed -i "s@NAMETOCHANGE@my_webapp@g" ../conf/nginx.conf |
|
||||
sudo cp ../conf/nginx.conf /etc/nginx/conf.d/$domain.d/my_webapp.conf |
|
||||
|
# Home directory of the user need to be owned by root to allow |
||||
|
# SFTP connections |
||||
|
sudo chown root: "$DESTDIR" |
||||
|
|
||||
# Same goes for PHP-FPM configuration |
|
||||
sed -i "s@NAMETOCHANGE@my_webapp@g" ../conf/php-fpm.conf |
|
||||
sudo cp ../conf/php-fpm.conf /etc/php5/fpm/pool.d/my_webapp.conf |
|
||||
|
# Set SSOwat rules |
||||
|
[[ $is_public -eq 1 ]] \ |
||||
|
&& ynh_app_setting_set "$app" skipped_uris "/" |
||||
|
|
||||
# Make app public if necessary |
|
||||
if [ "$is_public" = "Yes" ]; |
|
||||
then |
|
||||
sudo yunohost app setting my_webapp unprotected_uris -v "/" |
|
||||
fi |
|
||||
|
# Copy and set nginx configuration |
||||
|
nginx_conf="/etc/nginx/conf.d/${domain}.d/${app}.conf" |
||||
|
sed -i "s@{PATH}@${path}@g" ../conf/nginx.conf |
||||
|
sed -i "s@{LOCATION}@${path:-/}@g" ../conf/nginx.conf |
||||
|
sed -i "s@{DESTDIR}@${DESTDIR}@g" ../conf/nginx.conf |
||||
|
sed -i "s@{POOLNAME}@${app}@g" ../conf/nginx.conf |
||||
|
sudo cp ../conf/nginx.conf "$nginx_conf" |
||||
|
|
||||
# Protect the file manager |
|
||||
sudo yunohost app setting my_webapp protected_uris -v "/admin" |
|
||||
|
# Copy and set php-fpm configuration |
||||
|
phpfpm_conf="/etc/php5/fpm/pool.d/${app}.conf" |
||||
|
sed -i "s@{USER}@${user}@g" ../conf/php-fpm.conf |
||||
|
sed -i "s@{POOLNAME}@${app}@g" ../conf/php-fpm.conf |
||||
|
sed -i "s@{DESTDIR}@${DESTDIR}@g" ../conf/php-fpm.conf |
||||
|
sudo cp ../conf/php-fpm.conf "$phpfpm_conf" |
||||
|
|
||||
# Reload Nginx, php5-fpm and regenerate SSOwat conf |
|
||||
|
# Reload services |
||||
|
sudo service php5-fpm reload |
||||
sudo service nginx reload |
sudo service nginx reload |
||||
sudo killall php5-fpm || echo "PHP-FPM already killed" |
|
||||
sudo service php5-fpm start |
|
||||
sudo yunohost app ssowatconf |
|
||||
|
sudo service sshd reload |
||||
Write
Preview
Loading…
Cancel
Save
Reference in new issue