mirror of
https://github.com/zokradonh/kopano-docker
synced 2025-06-07 16:06:14 +00:00
97ebd264d6
Fixes https://github.com/zokradonh/kopano-docker/issues/371 Signed-off-by: Felix Bartels <felix@host-consultants.de>
147 lines
4.3 KiB
Bash
Executable File
147 lines
4.3 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
set -e
|
|
|
|
fqdn_to_dn() {
|
|
printf 'dc=%s' "$1" | sed -E 's/\./,dc=/g'
|
|
}
|
|
|
|
random_string() {
|
|
hexdump -n 16 -v -e '/1 "%02X"' /dev/urandom
|
|
}
|
|
|
|
if [ ! -e /etc/machine-id ]; then
|
|
echo "This compose file uses /etc/machine-id to identify the system its running on. The file does not seem to exist on your system, please create it."
|
|
exit 1
|
|
fi
|
|
|
|
if [ ! -e ./.env ]; then
|
|
PRINT_SETUP_SUCCESS=""
|
|
|
|
echo "Creating an .env file for you"
|
|
|
|
value_default="Kopano Demo"
|
|
read -r -p "Name of the Organisation for LDAP [$value_default]: " new_value
|
|
LDAP_ORGANISATION=${new_value:-$value_default}
|
|
|
|
value_default="kopano.demo"
|
|
read -r -p "FQDN to be used (for reverse proxy).
|
|
Hint: use port 2015 in case port 443 is already in use on the system.
|
|
[$value_default]: " new_value
|
|
FQDN=${new_value:-$value_default}
|
|
|
|
value_default="self_signed"
|
|
read -r -p "Email address to use for Lets Encrypt.
|
|
Use 'self_signed' as your email to create self signed certificates.
|
|
Use 'off' if you want to run the service without tls encryption. Make sure to use an ssl-terminating reverse proxy in front in this case.
|
|
[$value_default]: " new_value
|
|
EMAIL=${new_value:-$value_default}
|
|
|
|
# Let Kapi accept self signed certs if required
|
|
if [ "$EMAIL" == "self_signed" ]; then
|
|
INSECURE="yes"
|
|
else
|
|
INSECURE="no"
|
|
fi
|
|
|
|
LDAP_BASE_DN=$(fqdn_to_dn "${FQDN%:*}")
|
|
value_default="$LDAP_BASE_DN"
|
|
read -r -p "Name of the BASE DN for LDAP [$value_default]: " new_value
|
|
LDAP_BASE_DN=${new_value:-$value_default}
|
|
|
|
value_default="ldap://ldap:389"
|
|
read -r -p "LDAP server to be used (defaults to the bundled OpenLDAP) [$value_default]: " new_value
|
|
LDAP_SERVER=${new_value:-$value_default}
|
|
|
|
if [ "$LDAP_SERVER" != "$value_default" ]; then
|
|
# We don't need an admin password in case we don't use the bundled LDAP server
|
|
LDAP_ADMIN_PASSWORD=""
|
|
|
|
value_default="$LDAP_BASE_DN"
|
|
read -r -p "LDAP search base [$value_default]: " new_value
|
|
LDAP_SEARCH_BASE=${new_value:-$value_default}
|
|
|
|
value_default="cn=readonly,$LDAP_BASE_DN"
|
|
read -r -p "LDAP bind user (needs read permissions) [$value_default]: " new_value
|
|
LDAP_BIND_DN=${new_value:-$value_default}
|
|
|
|
value_default="kopano123"
|
|
read -r -p "LDAP bind password to be used [$value_default]: " new_value
|
|
LDAP_BIND_PW=${new_value:-$value_default}
|
|
|
|
PRINT_SETUP_SUCCESS="$PRINT_SETUP_SUCCESS !! You have specified the LDAP server '${LDAP_SERVER}', don't forget to remove the bundled ldap service in docker-compose.yml !!"
|
|
else
|
|
value_default="yes"
|
|
read -r -p "Use bundled LDAP with demo users? yes/no [$value_default]: " new_value
|
|
LDAP_CONTAINER_QUESTION=${new_value:-$value_default}
|
|
|
|
if [ "${LDAP_CONTAINER_QUESTION}" == "yes" ]; then
|
|
LDAP_CONTAINER="kopano_ldap_demo"
|
|
else
|
|
LDAP_CONTAINER="kopano_ldap"
|
|
fi
|
|
|
|
LDAP_ADMIN_PASSWORD=$(random_string)
|
|
LDAP_SEARCH_BASE="$LDAP_BASE_DN"
|
|
LDAP_BIND_DN="cn=readonly,$LDAP_BASE_DN"
|
|
LDAP_BIND_PW=$(random_string)
|
|
fi
|
|
|
|
if [ -f /etc/timezone ]; then
|
|
value_default=$(cat /etc/timezone)
|
|
elif [ -f /etc/localtime ]; then
|
|
value_default=$(readlink /etc/localtime|sed -n 's|^.*zoneinfo/||p')
|
|
else
|
|
value_default="Europe/Berlin"
|
|
fi
|
|
|
|
read -r -p "Timezone to be used [$value_default]: " new_value
|
|
TZ=${new_value:-$value_default}
|
|
|
|
echo "${PRINT_SETUP_SUCCESS}"
|
|
|
|
cat <<EOF > "./.env"
|
|
# please consult https://github.com/kopano-dev/kopano-docker
|
|
# for possible configuration values and their impact
|
|
|
|
# Access to the Kopano Turn service can be requested at https://portal.kopano.com/content/turn-server-access-request
|
|
TURN_USER=
|
|
TURN_PASSWORD=
|
|
|
|
# Defines how Kopano can be accessed from the outside world
|
|
FQDN=$FQDN
|
|
FQDNCLEANED=${FQDN%:*}
|
|
DEFAULTREDIRECT=/meet
|
|
EMAIL=$EMAIL
|
|
CADDY=2015
|
|
HTTP=80
|
|
HTTPS=443
|
|
|
|
TZ=$TZ
|
|
|
|
LDAP_CONTAINER=$LDAP_CONTAINER
|
|
LDAP_ORGANISATION="$LDAP_ORGANISATION"
|
|
LDAP_DOMAIN=${FQDN%:*}
|
|
LDAP_BASE_DN=$LDAP_BASE_DN
|
|
LDAP_SERVER=$LDAP_SERVER
|
|
LDAP_ADMIN_PASSWORD=$LDAP_ADMIN_PASSWORD
|
|
LDAP_READONLY_USER_PASSWORD=$LDAP_BIND_PW
|
|
LDAP_BIND_DN=$LDAP_BIND_DN
|
|
LDAP_BIND_PW=$LDAP_BIND_PW
|
|
LDAP_SEARCH_BASE=$LDAP_SEARCH_BASE
|
|
|
|
# Settings for test environments
|
|
INSECURE=$INSECURE
|
|
|
|
# Docker and docker-compose settings
|
|
# Docker Repository to push to/pull from
|
|
docker_repo=kopano
|
|
COMPOSE_PROJECT_NAME=kopano
|
|
|
|
EOF
|
|
else
|
|
echo ".env already exists with initial configuration"
|
|
echo "If you want to change the configuration, please edit .env directly"
|
|
exit 1
|
|
fi
|