f85775b870
This fixes the issue where all groups starting with 'adm' are returned which broke the installation.
60 lines
1.5 KiB
Bash
Executable File
60 lines
1.5 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
|
|
|
|
case "$DOKKU_DISTRO" in
|
|
debian)
|
|
echo "%dokku ALL=(ALL) NOPASSWD:/usr/sbin/invoke-rc.d nginx reload, /usr/sbin/nginx -t" > /etc/sudoers.d/dokku-nginx
|
|
;;
|
|
|
|
ubuntu)
|
|
echo "%dokku ALL=(ALL) NOPASSWD:/etc/init.d/nginx reload, /usr/sbin/nginx -t" > /etc/sudoers.d/dokku-nginx
|
|
;;
|
|
|
|
opensuse)
|
|
echo "%dokku ALL=(ALL) NOPASSWD:/sbin/service nginx reload, /usr/sbin/nginx -t" > /etc/sudoers.d/dokku-nginx
|
|
;;
|
|
esac
|
|
|
|
chmod 0440 /etc/sudoers.d/dokku-nginx
|
|
|
|
# if dokku.conf has not been created, create it
|
|
if [[ ! -f /etc/nginx/conf.d/dokku.conf ]]; then
|
|
cat<<EOF > /etc/nginx/conf.d/dokku.conf
|
|
include $DOKKU_ROOT/*/nginx.conf;
|
|
|
|
server_tokens off;
|
|
|
|
ssl_session_cache shared:SSL:20m;
|
|
ssl_session_timeout 10m;
|
|
|
|
ssl_ciphers EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
|
|
|
|
# ssl_certificate $DOKKU_ROOT/tls/server.crt;
|
|
# ssl_certificate_key $DOKKU_ROOT/tls/server.key;
|
|
EOF
|
|
fi
|
|
|
|
echo 'server_names_hash_bucket_size 512;' >| /etc/nginx/conf.d/server_names_hash_bucket_size.conf
|
|
|
|
# make sure dokku can read the default log dir
|
|
gpasswd -M "$(egrep ^adm: /etc/group | awk -F ":" '{ print $4 }')" dokku
|
|
chgrp -R dokku /var/log/nginx
|
|
chmod g+r /var/log/nginx
|
|
|
|
# patch broken nginx 1.8.0 logrotate
|
|
[[ -f /etc/logrotate.d/nginx ]] && sed -i -e 's/invoke-rc.d/service/g' /etc/logrotate.d/nginx
|
|
|
|
case "$DOKKU_DISTRO" in
|
|
debian)
|
|
/usr/sbin/invoke-rc.d nginx start
|
|
;;
|
|
|
|
ubuntu)
|
|
/etc/init.d/nginx start
|
|
;;
|
|
|
|
opensuse)
|
|
/sbin/service nginx start
|
|
;;
|
|
esac
|