70511c340d
Because of how plugin commands are implemented, their output can be incredibly verbose. Rather than executing even the `set -eo pipefail` parts of a plugin, we immediately check if the command is implemented by a plugin. If it is not, then we continue on as normal. One side-effect of this change is that plugin commands need to be duplicated again: - once in the command array - once for the actual body of the command - once in the help output This is also quite hackish, and probably not the best way to decrease trace output. Note that we drop approximately 2k lines worth of logs with this change.
199 lines
7.1 KiB
Bash
Executable File
199 lines
7.1 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
[[ " nginx:build-config nginx:access-logs nginx:error-logs help nginx:help " == *" $1 "* ]] || exit $DOKKU_NOT_IMPLEMENTED_EXIT
|
|
set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
|
|
source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
|
|
source "$PLUGIN_AVAILABLE_PATH/certs/functions"
|
|
source "$PLUGIN_AVAILABLE_PATH/config/functions"
|
|
source "$PLUGIN_AVAILABLE_PATH/domains/functions"
|
|
|
|
validate_nginx () {
|
|
set +e
|
|
sudo /usr/sbin/nginx -t > /dev/null 2>&1
|
|
exit_code=$?
|
|
set -e
|
|
if [[ "$exit_code" -ne "0" ]]; then
|
|
sudo /usr/sbin/nginx -t
|
|
exit "$exit_code"
|
|
fi
|
|
}
|
|
|
|
restart_nginx () {
|
|
case "$DOKKU_DISTRO" in
|
|
ubuntu)
|
|
sudo /etc/init.d/nginx reload > /dev/null
|
|
;;
|
|
|
|
opensuse)
|
|
sudo /sbin/service nginx reload > /dev/null
|
|
;;
|
|
esac
|
|
}
|
|
|
|
case "$1" in
|
|
nginx:build-config)
|
|
APP="$2"; DOKKU_APP_LISTEN_PORT="$3"; DOKKU_APP_LISTEN_IP="${4}"
|
|
verify_app_name "$APP"
|
|
VHOST_PATH="$DOKKU_ROOT/$APP/VHOST"
|
|
URLS_PATH="$DOKKU_ROOT/$APP/URLS"
|
|
WILDCARD_SSL_PATH="$DOKKU_ROOT/tls"
|
|
APP_SSL_PATH="$DOKKU_ROOT/$APP/tls"
|
|
APP_NGINX_TEMPLATE="$DOKKU_ROOT/$APP/nginx.conf.template"
|
|
|
|
if [[ -z "$DOKKU_APP_LISTEN_PORT" ]] && [[ -z "$DOKKU_APP_LISTEN_IP" ]]; then
|
|
shopt -s nullglob
|
|
for DOKKU_APP_IP_FILE in $DOKKU_ROOT/$APP/IP.web.*; do
|
|
DOKKU_APP_PORT_FILE=$(echo $DOKKU_APP_IP_FILE | sed -e "s:IP:PORT:g")
|
|
DOKKU_APP_LISTENER_IP=$(< $DOKKU_APP_IP_FILE)
|
|
DOKKU_APP_LISTENER_PORT=$(< $DOKKU_APP_PORT_FILE)
|
|
|
|
DOKKU_APP_LISTENERS+=" "
|
|
DOKKU_APP_LISTENERS+="$DOKKU_APP_LISTENER_IP:$DOKKU_APP_LISTENER_PORT"
|
|
DOKKU_APP_LISTENERS+=" "
|
|
done
|
|
shopt -u nullglob
|
|
fi
|
|
|
|
DOKKU_APP_CIDS=($(get_app_container_ids $APP))
|
|
docker cp "${DOKKU_APP_CIDS[0]}:/app/nginx.conf.template" "$DOKKU_ROOT/$APP/" 2> /dev/null || true
|
|
|
|
eval "$(config_export global)"
|
|
eval "$(config_export app $APP)"
|
|
[[ -f "$APP_NGINX_TEMPLATE" ]] && NGINX_TEMPLATE="$APP_NGINX_TEMPLATE" && NGINX_CUSTOM_TEMPLATE="true" && dokku_log_info1 'Overriding default nginx.conf with detected nginx.conf.template'
|
|
|
|
if [[ ! -n "$NO_VHOST" ]] && [[ -f "$DOKKU_ROOT/$APP/VHOST" ]]; then
|
|
NONSSL_VHOSTS=$(get_app_domains $APP)
|
|
if [[ -n "$(is_ssl_enabled $APP)" ]]; then
|
|
SSL_HOSTNAME=$(get_ssl_hostnames $APP)
|
|
|
|
[[ -n "$SSL_HOSTNAME" ]] && SSL_HOSTNAME_REGEX=$(echo "$SSL_HOSTNAME" | xargs | sed 's|\.|\\.|g' | sed 's/\*/\[^\.\]\*/g' | sed 's/ /|/g')
|
|
if (egrep -q "^${SSL_HOSTNAME_REGEX}$" $VHOST_PATH); then
|
|
SSL_INUSE=true
|
|
else
|
|
dokku_log_info1 "No matching configured domains for $APP found in SSL certificate. Your app will not be configured with an SSL endpoint"
|
|
dokku_log_info1 "Please add appropriate domains via the dokku domains command"
|
|
dokku_log_info1 "Configured domains for app:"
|
|
for domain in $(echo $NONSSL_VHOSTS| xargs); do
|
|
dokku_log_info2 "$domain"
|
|
done
|
|
dokku_log_info1 "Domains found in SSL certificate:"
|
|
for domain in $(echo $SSL_HOSTNAME | xargs); do
|
|
dokku_log_info2 "$domain"
|
|
done
|
|
fi
|
|
if [[ "$(is_ssl_enabled $APP)" == "app" ]]; then
|
|
SSL_DIRECTIVES=$(cat <<EOF
|
|
ssl_certificate $APP_SSL_PATH/server.crt;
|
|
ssl_certificate_key $APP_SSL_PATH/server.key;
|
|
EOF
|
|
)
|
|
elif [[ "$(is_ssl_enabled $APP)" == "global" ]]; then
|
|
SSL_DIRECTIVES=""
|
|
fi
|
|
fi
|
|
|
|
NGINX_CONF=$(mktemp -t "nginx.conf.XXXXXX")
|
|
SCHEME="http"
|
|
if [[ -n "$SSL_INUSE" ]]; then
|
|
SCHEME="https"
|
|
|
|
[[ -z "$NGINX_TEMPLATE" ]] && NGINX_TEMPLATE="$(dirname $0)/templates/nginx.ssl.conf.template"
|
|
SSL_VHOSTS=$(egrep "^${SSL_HOSTNAME_REGEX}$" $VHOST_PATH || true)
|
|
NONSSL_VHOSTS=$(egrep -v "^${SSL_HOSTNAME_REGEX}$" $VHOST_PATH || true)
|
|
|
|
while read line; do
|
|
[[ -z "$line" ]] && continue
|
|
dokku_log_info1 "Configuring SSL for $line..."
|
|
SSL_SERVER_NAME=$line
|
|
NOSSL_SERVER_NAME=$line
|
|
eval "cat <<< \"$(< $NGINX_TEMPLATE)\" >> $NGINX_CONF"
|
|
done <<< "$SSL_VHOSTS"
|
|
fi
|
|
|
|
if [[ -n "$NONSSL_VHOSTS" ]]; then
|
|
NOSSL_SERVER_NAME=$(echo $NONSSL_VHOSTS | tr '\n' ' ')
|
|
xargs -i echo "-----> Configuring {}..." <<< "$NONSSL_VHOSTS"
|
|
if [[ -n "$DOKKU_SSL_TERMINATED" ]] && [[ -z "$NGINX_CUSTOM_TEMPLATE" ]]; then
|
|
NGINX_TEMPLATE="$(dirname $0)/templates/nginx.conf.ssl_terminated.template"
|
|
elif [[ -z "$NGINX_CUSTOM_TEMPLATE" ]]; then
|
|
NGINX_TEMPLATE="$(dirname $0)/templates/nginx.conf.template"
|
|
fi
|
|
eval "cat <<< \"$(< $NGINX_TEMPLATE)\" >> $NGINX_CONF"
|
|
fi
|
|
|
|
if [[ -n "$DOKKU_APP_LISTEN_PORT" ]] && [[ -n "$DOKKU_APP_LISTEN_IP" ]]; then
|
|
echo "upstream $APP { server $DOKKU_APP_LISTEN_IP:$DOKKU_APP_LISTEN_PORT; }" >> $NGINX_CONF
|
|
elif [[ -n "$DOKKU_APP_LISTENERS" ]]; then
|
|
echo "upstream $APP { " >> $NGINX_CONF
|
|
for listener in $DOKKU_APP_LISTENERS; do
|
|
echo " server $listener;" >> $NGINX_CONF
|
|
done
|
|
echo "}" >> $NGINX_CONF
|
|
fi
|
|
|
|
dokku_log_info1 "Creating $SCHEME nginx.conf"
|
|
mv $NGINX_CONF "$DOKKU_ROOT/$APP/nginx.conf"
|
|
|
|
if is_deployed "$APP"; then
|
|
dokku_log_info1 "Running nginx-pre-reload"
|
|
plugn trigger nginx-pre-reload $APP $DOKKU_APP_LISTEN_PORT $DOKKU_APP_LISTEN_IP
|
|
|
|
dokku_log_verbose "Reloading nginx"
|
|
validate_nginx && restart_nginx
|
|
fi
|
|
|
|
echo "# THIS FILE IS GENERATED BY DOKKU - DO NOT EDIT, YOUR CHANGES WILL BE OVERWRITTEN" > $URLS_PATH
|
|
xargs -i echo "https://{}" <<< "${SSL_VHOSTS}" >> $URLS_PATH
|
|
xargs -i echo "http://{}" <<< "${NONSSL_VHOSTS}" >> $URLS_PATH
|
|
else
|
|
if [[ -f "$DOKKU_ROOT/$APP/VHOST" ]]; then
|
|
dokku_log_info1 "VHOST support disabled, deleting $APP/VHOST"
|
|
rm "$DOKKU_ROOT/$APP/VHOST"
|
|
fi
|
|
if [[ -f "$DOKKU_ROOT/$APP/URLS" ]]; then
|
|
dokku_log_info1 "VHOST support disabled, deleting $APP/URLS"
|
|
rm "$DOKKU_ROOT/$APP/URLS"
|
|
fi
|
|
if [[ -f "$DOKKU_ROOT/$APP/nginx.conf" ]]; then
|
|
dokku_log_info1 "VHOST support disabled, deleting nginx.conf"
|
|
rm "$DOKKU_ROOT/$APP/nginx.conf"
|
|
|
|
if is_deployed "$APP"; then
|
|
dokku_log_info1 "VHOST support disabled, reloading nginx after nginx.conf deletion"
|
|
validate_nginx && restart_nginx
|
|
fi
|
|
fi
|
|
fi
|
|
;;
|
|
|
|
nginx:access-logs|nginx:error-logs)
|
|
[[ -z $2 ]] && echo "Please specify an app to run the command on" && exit 1
|
|
verify_app_name "$2"
|
|
APP="$2"
|
|
|
|
NGINX_LOGS_TYPE=${1#nginx:}
|
|
NGINX_LOGS_TYPE=${NGINX_LOGS_TYPE%-logs}
|
|
NGINX_LOGS_PATH="/var/log/nginx/$APP-$NGINX_LOGS_TYPE.log"
|
|
|
|
if [[ $3 == "-t" ]]; then
|
|
NGINX_LOGS_ARGS="-F"
|
|
else
|
|
NGINX_LOGS_ARGS="-n 20"
|
|
fi
|
|
|
|
tail "$NGINX_LOGS_ARGS" "$NGINX_LOGS_PATH"
|
|
;;
|
|
|
|
help | nginx:help)
|
|
cat<<EOF
|
|
nginx:build-config <app>, (Re)builds nginx config for given app
|
|
nginx:access-logs <app> [-t], Show the nginx access logs for an application (-t follows)
|
|
nginx:error-logs <app> [-t], Show the nginx error logs for an application (-t follows)
|
|
EOF
|
|
;;
|
|
|
|
*)
|
|
exit $DOKKU_NOT_IMPLEMENTED_EXIT
|
|
;;
|
|
|
|
esac
|