mirror of
https://github.com/zokradonh/kopano-docker
synced 2025-06-06 23:46:24 +00:00
f7934cbc51
* make konnect url configurable * switch to fork of dockerize as it allows to skip ssl verification since the address of the oidc issuer is now dynamic it could point to an invalid ssl certificate (the self signed cert is by default "valid" for *) * update hadolint * add more scopes * only skip ssl verification when running insecure
143 lines
3.8 KiB
Bash
Executable File
143 lines
3.8 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
ADDITIONAL_KOPANO_PACKAGES=${ADDITIONAL_KOPANO_PACKAGES:-""}
|
|
KCCONF_SERVER_MYSQL_SOCKET=${KCCONF_SERVER_MYSQL_SOCKET:-""}
|
|
|
|
set -eu # unset variables are errors & non-zero return values exit the whole script
|
|
|
|
if [ ! -e /kopano/"$SERVICE_TO_START".py ]; then
|
|
echo "Invalid service specified: $SERVICE_TO_START" | ts
|
|
exit 1
|
|
fi
|
|
|
|
[ -n "${ADDITIONAL_KOPANO_PACKAGES// }" ] && apt update
|
|
[ -n "${ADDITIONAL_KOPANO_PACKAGES// }" ] && for installpkg in $ADDITIONAL_KOPANO_PACKAGES; do
|
|
# shellcheck disable=SC2016 disable=SC2086
|
|
if [ "$(dpkg-query -W -f='${Status}' $installpkg 2>/dev/null | grep -c 'ok installed')" -eq 0 ]; then
|
|
apt --assume-yes --no-upgrade install "$installpkg"
|
|
fi
|
|
done
|
|
|
|
mkdir -p /kopano/data/attachments /kopano/data/kapi-kvs /tmp/"$SERVICE_TO_START" /var/run/kopano
|
|
|
|
echo "Configure core service '$SERVICE_TO_START'" | ts
|
|
/usr/bin/python3 /kopano/"$SERVICE_TO_START".py
|
|
|
|
echo "Set ownership" | ts
|
|
chown -R kopano:kopano /run /tmp
|
|
chown kopano:kopano /kopano/data/ /kopano/data/attachments
|
|
|
|
# ensure removed pid-file on unclean shutdowns and mounted volumes
|
|
rm -f /var/run/kopano/"$SERVICE_TO_START".pid
|
|
|
|
# allow helper commands given by "docker-compose run"
|
|
if [ $# -gt 0 ]; then
|
|
exec "$@"
|
|
exit
|
|
fi
|
|
|
|
# start regular service
|
|
case "$SERVICE_TO_START" in
|
|
server)
|
|
# determine db connection mode (unix vs. network socket)
|
|
if [ -n "$KCCONF_SERVER_MYSQL_SOCKET" ]; then
|
|
DB_CONN="file://$KCCONF_SERVER_MYSQL_SOCKET"
|
|
else
|
|
DB_CONN="tcp://$KCCONF_SERVER_MYSQL_HOST:$KCCONF_SERVER_MYSQL_PORT"
|
|
fi
|
|
dockerize \
|
|
-wait file://"$KCCONF_SERVER_SERVER_SSL_CA_FILE" \
|
|
-wait file://"$KCCONF_SERVER_SERVER_SSL_KEY_FILE" \
|
|
-wait "$DB_CONN" \
|
|
-timeout 360s
|
|
# cleaning up env variables
|
|
unset "${!KCCONF_@}"
|
|
exec /usr/sbin/kopano-server -F
|
|
;;
|
|
dagent)
|
|
dockerize \
|
|
-wait file://var/run/kopano/server.sock \
|
|
-timeout 360s
|
|
# cleaning up env variables
|
|
unset "${!KCCONF_@}"
|
|
exec /usr/sbin/kopano-dagent -l
|
|
;;
|
|
gateway)
|
|
dockerize \
|
|
-wait tcp://kopano_server:236 \
|
|
-timeout 360s
|
|
# cleaning up env variables
|
|
unset "${!KCCONF_@}"
|
|
exec /usr/sbin/kopano-gateway -F
|
|
;;
|
|
ical)
|
|
dockerize \
|
|
-wait tcp://kopano_server:236 \
|
|
-timeout 360s
|
|
# cleaning up env variables
|
|
unset "${!KCCONF_@}"
|
|
exec /usr/sbin/kopano-ical -F
|
|
;;
|
|
grapi)
|
|
LC_CTYPE=en_US.UTF-8
|
|
export socket_path=/var/run/kopano/grapi
|
|
mkdir -p "$socket_path"
|
|
chown -R kapi:kopano "$socket_path"
|
|
# cleaning up env variables
|
|
unset "${!KCCONF_@}"
|
|
exec kopano-grapi serve
|
|
;;
|
|
kapid)
|
|
if [ "$KCCONF_KAPID_INSECURE" = "yes" ]; then
|
|
dockerize \
|
|
-skip-tls-verify \
|
|
-wait file://var/run/kopano/grapi/notify.sock \
|
|
-wait "$KCCONF_KAPID_OIDC_ISSUER_IDENTIFIER"/.well-known/openid-configuration \
|
|
-timeout 360s
|
|
else
|
|
dockerize \
|
|
-wait file://var/run/kopano/grapi/notify.sock \
|
|
-wait "$KCCONF_KAPID_OIDC_ISSUER_IDENTIFIER"/.well-known/openid-configuration \
|
|
-timeout 360s
|
|
fi
|
|
LC_CTYPE=en_US.UTF-8
|
|
sed -i s/\ *=\ */=/g /etc/kopano/kapid.cfg
|
|
# shellcheck disable=SC2046
|
|
export $(grep -v '^#' /etc/kopano/kapid.cfg | xargs -d '\n')
|
|
kopano-kapid setup
|
|
# cleaning up env variables
|
|
unset "${!KCCONF_@}"
|
|
exec kopano-kapid serve --log-timestamp=false
|
|
;;
|
|
monitor)
|
|
dockerize \
|
|
-wait file://var/run/kopano/server.sock \
|
|
-timeout 360s
|
|
# cleaning up env variables
|
|
unset "${!KCCONF_@}"
|
|
exec /usr/sbin/kopano-monitor -F
|
|
;;
|
|
search)
|
|
dockerize \
|
|
-wait file://var/run/kopano/server.sock \
|
|
-timeout 360s
|
|
# give kopano-server a moment to settler before starting search
|
|
sleep 5
|
|
# cleaning up env variables
|
|
unset "${!KCCONF_@}"
|
|
exec /usr/bin/python3 /usr/sbin/kopano-search -F
|
|
;;
|
|
spooler)
|
|
dockerize \
|
|
-wait file://var/run/kopano/server.sock \
|
|
-wait tcp://"$KCCONF_SPOOLER_SMTP_SERVER":25 \
|
|
-timeout 1080s
|
|
# cleaning up env variables
|
|
unset "${!KCCONF_@}"
|
|
exec /usr/sbin/kopano-spooler -F
|
|
;;
|
|
*)
|
|
echo "Failed to start: Unknown service name: '$SERVICE_TO_START'" | ts
|
|
exit 1
|
|
esac
|