mirror of
https://github.com/nextcloud/all-in-one.git
synced 2026-09-18 09:17:24 +00:00
100 lines
2.9 KiB
Bash
100 lines
2.9 KiB
Bash
#!/bin/bash
|
|
|
|
if [ "$AIO_LOG_LEVEL" = 'debug' ]; then
|
|
set -x
|
|
fi
|
|
|
|
if [ -z "$NC_DOMAIN" ]; then
|
|
echo "NC_DOMAIN and NEXTCLOUD_HOST need to be provided. Exiting!"
|
|
exit 1
|
|
fi
|
|
|
|
CADDY_LOG_LEVEL="$(echo "$AIO_LOG_LEVEL" | tr '[:lower:]' '[:upper:]')"
|
|
export CADDY_LOG_LEVEL
|
|
if [ "$AIO_LOG_LEVEL" = 'debug' ]; then
|
|
export AIO_ACCESS_LOG=/proc/self/fd/1
|
|
else
|
|
export AIO_ACCESS_LOG=/dev/null
|
|
fi
|
|
|
|
# Need write access to /mnt/data
|
|
if ! [ -w /mnt/data ]; then
|
|
echo "Cannot write to /mnt/data"
|
|
exit 1
|
|
fi
|
|
|
|
# Only start container if nextcloud is accessible
|
|
while ! nc -z "$NEXTCLOUD_HOST" 9000; do
|
|
echo "Waiting for Nextcloud to start..."
|
|
sleep 5
|
|
done
|
|
|
|
# Get ipv4-address of Apache
|
|
# shellcheck disable=SC2153
|
|
IPv4_ADDRESS="$(dig "$APACHE_HOST" A +short +search | head -1)"
|
|
# Bring it in CIDR notation
|
|
# shellcheck disable=SC2001
|
|
IPv4_ADDRESS="$(echo "$IPv4_ADDRESS" | sed 's|[0-9]\+$|0/16|')"
|
|
|
|
if [ -z "$APACHE_PORT" ]; then
|
|
export APACHE_PORT="443"
|
|
fi
|
|
|
|
# Change variables in case of reverse proxies
|
|
if [ "$APACHE_PORT" != '443' ]; then
|
|
export PROTOCOL="http"
|
|
export NC_DOMAIN=""
|
|
else
|
|
export PROTOCOL="https"
|
|
fi
|
|
|
|
# Change the auto_https in case of reverse proxies
|
|
if [ "$APACHE_PORT" != '443' ]; then
|
|
CADDYFILE="$(sed 's|auto_https.*|auto_https off|' /Caddyfile)"
|
|
else
|
|
CADDYFILE="$(sed 's|auto_https.*|auto_https disable_redirects|' /Caddyfile)"
|
|
fi
|
|
echo "$CADDYFILE" > /tmp/Caddyfile
|
|
|
|
# Determine the trusted_proxies in case of reverse proxies
|
|
if [ "$APACHE_PORT" != '443' ]; then
|
|
# Here the 100.64.0.0/10 range gets added which is the CGNAT range used by Tailscale nodes
|
|
# See https://github.com/nextcloud/all-in-one/pull/6703 for reference
|
|
TRUSTED_PROXIES="trusted_proxies static private_ranges 100.64.0.0/10"
|
|
else
|
|
TRUSTED_PROXIES="trusted_proxies static $IPv4_ADDRESS"
|
|
fi
|
|
|
|
# In case of reverse proxies the APACHE_PORT listener is plain http, so limit it to h1 to avoid
|
|
# caddy warning that HTTP/2 and HTTP/3 were skipped. See the Caddyfile for further details.
|
|
if [ "$APACHE_PORT" != '443' ]; then
|
|
CADDYFILE="$(sed "s|# apache-port servers placeholder|servers :$APACHE_PORT {\n\t\tprotocols h1\n\t\t# trusted_proxies placeholder\n\t}|" /tmp/Caddyfile)"
|
|
echo "$CADDYFILE" > /tmp/Caddyfile
|
|
fi
|
|
|
|
# Change all trusted_proxies placeholders, also the ones inside the scoped `servers` blocks
|
|
CADDYFILE="$(sed "s|# trusted_proxies placeholder|$TRUSTED_PROXIES|g" /tmp/Caddyfile)"
|
|
echo "$CADDYFILE" > /tmp/Caddyfile
|
|
|
|
# Remove additional domain if not given
|
|
if [ -z "$ADDITIONAL_TRUSTED_DOMAIN" ]; then
|
|
CADDYFILE="$(sed '/ADDITIONAL_TRUSTED_DOMAIN/d' /tmp/Caddyfile)"
|
|
fi
|
|
echo "$CADDYFILE" > /tmp/Caddyfile
|
|
|
|
# Fix the Caddyfile format
|
|
caddy fmt --overwrite /tmp/Caddyfile
|
|
|
|
# Add caddy path
|
|
mkdir -p /mnt/data/caddy/
|
|
|
|
# Fix caddy startup
|
|
if [ -d "/mnt/data/caddy/locks" ]; then
|
|
rm -rf /mnt/data/caddy/locks/*
|
|
fi
|
|
|
|
# Fix apache startup
|
|
rm -f /usr/local/apache2/logs/httpd.pid
|
|
|
|
exec "$@"
|