#!/bin/bash shopt -s extglob # sets extended pattern matching options in the bash shell #================================================= # GENERIC STARTING #================================================= # IMPORT GENERIC HELPERS #================================================= source /usr/share/yunohost/helpers source _common.sh #================================================= # MANAGE SCRIPT FAILURE #================================================= ynh_clean_setup () { # Clean remainings not handled by remove script ynh_clean_check_starting } ynh_abort_if_errors # Stop script if an error is detected #================================================= # RETRIEVE ARGUMENTS FROM THE MANIFEST #================================================= # Retrieve app id app=$YNH_APP_INSTANCE_NAME # Retrieve arguments domain=$YNH_APP_ARG_DOMAIN path_url=$YNH_APP_ARG_PATH admin=$YNH_APP_ARG_ADMIN is_public=$YNH_APP_ARG_IS_PUBLIC #================================================= # CHECK IF THE APP CAN BE INSTALLED WITH THESE ARGS #================================================= path_url=$(ynh_normalize_url_path $path_url) # Check and normalize path final_path=/var/www/$app test ! -e "$final_path" || ynh_die "This path already contains a folder" # Check web path availability ynh_webpath_available $domain $path_url # Register (book) web path ynh_webpath_register $app $domain $path_url # Check memory requirements check_memory_requirements #================================================= # STORE SETTINGS FROM MANIFEST #================================================= ynh_app_setting_set $app domain "$domain" ynh_app_setting_set $app path_url "$path_url" ynh_app_setting_set $app admin "$admin" ynh_app_setting_set $app is_public "$is_public" ynh_app_setting_set $app final_path $final_path #================================================= # STANDARD MODIFICATIONS #================================================= # INSTALL DEPENDENCIES #================================================= ynh_install_app_dependencies "$pkg_dependencies" #================================================= # CREATE DEDICATED USER #================================================= # Create a system user allowing login ynh_system_user_create $app $final_path 1 #================================================= # CREATE A POSTGRES DATABASE #================================================= db_name=$(ynh_sanitize_dbid $app) db_pwd=$(ynh_string_random) ynh_app_setting_set $app db_name $db_name ynh_app_setting_set $app db_pwd $db_pwd ynh_psql_test_if_first_run ynh_psql_create_db $db_name $db_name $db_pwd # Set extensions ynh_psql_execute_as_root "\connect $db_name CREATE EXTENSION IF NOT EXISTS hstore; CREATE EXTENSION IF NOT EXISTS pg_trgm;" #================================================= # DOWNLOAD, CHECK AND UNPACK SOURCE #================================================= # Download, check integrity, uncompress and patch the source from app.src ynh_setup_source "$final_path" # Install LDAP plugin mkdir -p "$final_path/plugins/discourse-ldap-auth" ynh_setup_source "$final_path/plugins/discourse-ldap-auth" ldap-auth #================================================= # INSTALL RUBY #================================================= ynh_install_ruby $RUBY_VERSION #================================================= # NGINX CONFIGURATION #================================================= # Reference: https://meta.discourse.org/t/subfolder-support-with-docker/30507?u=falco&source_topic_id=54191 if [ "$path_url" != "/" ] ; then ynh_replace_string '$proxy_add_x_forwarded_for' '$http_your_original_ip_header' ../conf/nginx.conf fi # Create a dedicated nginx config ynh_add_nginx_config #================================================= # SPECIFIC SETUP #================================================= #================================================= # CONFIGURE DISCOURSE #================================================= # Configure database discourse_config_file="$final_path/config/discourse.conf" cp $final_path/config/discourse_defaults.conf $discourse_config_file ynh_replace_string "db_name = discourse" "db_name = $db_name" "$discourse_config_file" ynh_replace_string "db_username = discourse" "db_username = $db_name" "$discourse_config_file" ynh_replace_string "db_password =" "db_password = $db_pwd" "$discourse_config_file" # Configure hostname ynh_replace_string "hostname = \"www.example.com\"" "hostname = \"$domain\"" "$discourse_config_file" ynh_replace_string "relative_url_root =" "relative_url_root = ${path_url%/}" "$discourse_config_file" # Serve static assets (i.e. images, js, etc.) ynh_replace_string "serve_static_assets = false" "serve_static_assets = true" "$discourse_config_file" # Don't show miniprofiler ynh_replace_string "load_mini_profiler = true" "load_mini_profiler = false" "$discourse_config_file" # Configure e-mail server admin_mail=$(ynh_user_get_info "$admin" mail) ynh_replace_string "developer_emails =" "developer_emails = $admin_mail" "$discourse_config_file" ynh_replace_string "smtp_address =" "smtp_address = localhost" "$discourse_config_file" ynh_replace_string "smtp_domain =" "smtp_domain = $domain" "$discourse_config_file" ynh_replace_string "smtp_enable_start_tls = true" "smtp_enable_start_tls = false" "$discourse_config_file" # Calculate and store the config file checksum ynh_store_file_checksum "$discourse_config_file" # Configure LDAP plugin ldap_config_file="$final_path/plugins/discourse-ldap-auth/config/settings.yml" ynh_replace_string "adfs.example.com" "localhost" "$ldap_config_file" ynh_replace_string "dc=example,dc=com" "ou=users,dc=yunohost,dc=org" "$ldap_config_file" ynh_replace_string "sAMAccountName" "uid" "$ldap_config_file" ynh_store_file_checksum "$ldap_config_file" #================================================= # SETUP PUMA, A RUBY SERVER #================================================= puma_config_file="$final_path/config/puma.rb" # Set log files location ynh_replace_string "#{APP_ROOT}/log/puma" "/var/log/$app/puma" "$puma_config_file" # Set application absolute path ynh_replace_string "/home/discourse/discourse" "/var/www/$app" "$puma_config_file" # Don't daemonize so we get logs in journalctl ynh_replace_string "daemonize true" "daemonize false" "$puma_config_file" # Don't preload threads to avoid warnings ynh_replace_string "preload_app" "#preload_app" "$puma_config_file" # Calculate and store the config file checksum ynh_store_file_checksum "$puma_config_file" # Set a secret value cp ../conf/secrets.yml "$final_path/config/secrets.yml" ynh_replace_string "__SECRET__" "$(ynh_string_random)" "$final_path/config/secrets.yml" # Calculate and store the config file checksum ynh_store_file_checksum "$final_path/config/secrets.yml" # Set permissions to app files chown -R $app: $final_path (cd "$final_path" # Install bundler, a gems installer gem install bundler # Install without documentation exec_as $app echo "gem: --no-ri --no-rdoc" >> "$final_path/.gemrc") # If on ARM architecture, define the platform specificly to retrieve binaries # for libv8 because it currently doesn't compile on ARM devices if [ -n "$(uname -m | grep arm)" ] ; then exec_login_as $app bundle config specific_platform arm-linux fi # Install dependencies exec_login_as $app MAKEFLAGS=-j2 bundle install --jobs 2 --path vendor/bundle --with development # On ARM architecture, replace bundled libpsl by system native libpsl # because the provided binary isn't compatible if [ -n "$(uname -m | grep arm)" ] ; then (cd $final_path/vendor/bundle/ruby/*/gems/mini_suffix-*/vendor rm libpsl.so ln -s $(ldconfig -p | grep libpsl | awk 'END {print $NF}') libpsl.so) fi #================================================= # SETUP SIDEKIQ #================================================= cp ../conf/sidekiq.yml "$final_path/config/sidekiq.yml" #================================================= # PREPARE THE DATABASE #================================================= rake_exec="exec_login_as $app RAILS_ENV=production bin/rake" $rake_exec db:migrate $rake_exec assets:precompile #================================================= # POPULATE THE DATABASE #================================================= #Set default data (especially to have correct image URLs for subfolder install) ynh_psql_connect_as $db_name $db_pwd $db_name <<< "INSERT INTO site_settings (name, data_type, value, created_at, updated_at) VALUES ('title', 1, 'YunoHost Forum', 'NOW()', 'NOW()'); INSERT INTO site_settings (name, data_type, value, created_at, updated_at) VALUES ('site_description', 1, 'YunoHost Forum', 'NOW()', 'NOW()'); INSERT INTO site_settings (name, data_type, value, created_at, updated_at) VALUES ('contact_email', 14, '$admin_mail', 'NOW()', 'NOW()'); INSERT INTO site_settings (name, data_type, value, created_at, updated_at) VALUES ('contact_url', 1, '$domain$path_url', 'NOW()', 'NOW()'); INSERT INTO site_settings (name, data_type, value, created_at, updated_at) VALUES ('site_contact_username', 15, '$admin', 'NOW()', 'NOW()'); INSERT INTO site_settings (name, data_type, value, created_at, updated_at) VALUES ('logo_url', 1, '${path_url%/}/images/d-logo-sketch.png', 'NOW()', 'NOW()'); INSERT INTO site_settings (name, data_type, value, created_at, updated_at) VALUES ('long_polling_base_url', 1, '${path_url%/}/', 'NOW()', 'NOW()'); INSERT INTO site_settings (name, data_type, value, created_at, updated_at) VALUES ('logo_small_url', 1, '${path_url%/}/images/d-logo-sketch-small.png', 'NOW()', 'NOW()'); INSERT INTO site_settings (name, data_type, value, created_at, updated_at) VALUES ('favicon_url', 1, '${path_url%/}/images/default-favicon.ico', 'NOW()', 'NOW()'); INSERT INTO site_settings (name, data_type, value, created_at, updated_at) VALUES ('apple_touch_icon_url', 1, '${path_url%/}/images/default-apple-touch-icon.png', 'NOW()', 'NOW()'); INSERT INTO site_settings (name, data_type, value, created_at, updated_at) VALUES ('wizard_enabled', 5, 'f', 'NOW()', 'NOW()'); " #================================================= # FIX INITIAL POSTS LINKS FOR SUBFOLDER INSTALL #================================================= if [ "$path_url" != "/" ] ; then exec_login_as $app RAILS_ENV=production bundle exec script/discourse remap /images/welcome/ $path_url/images/welcome/ <<< "YES " fi #================================================= # CREATE ADMIN USER #================================================= # Create a random password admin_pwd=$(ynh_string_random) $rake_exec admin:create <<< "$admin_mail $admin_pwd $admin_pwd y " #================================================= # CONFIGURE PLUGINS #================================================= # Patch ldap-auth plugin dependency (omniauth-ldap) to fix it when using domain subfolder # (Can only do that now because we are patching dependencies which have just been downloaded) # Patch applied: https://github.com/omniauth/omniauth-ldap/pull/16 (cd $final_path/plugins/discourse-ldap-auth/gems/*/gems/omniauth-ldap*/ patch -p1 < $YNH_CWD/../conf/ldap-auth-fix-subfolder.patch) #================================================= # SETUP SYSTEMD #================================================= ynh_replace_string "__RBENVROOT__" "$RBENV_ROOT" "../conf/discourse-puma.service" ynh_replace_string "__RBENVROOT__" "$RBENV_ROOT" "../conf/discourse-sidekiq.service" # We assume for the moment that ARM devices are only dual core, so # we restrict the number of workers to 2 (the default is 4) if [ -n "$(uname -m | grep arm)" ] ; then additional_env="NUM_WEBS=2" else additional_env="" fi ynh_replace_string "__ADDITIONAL_ENV__" "$additional_env" "../conf/discourse-puma.service" ynh_add_systemd_config $app-puma discourse-puma.service ynh_add_systemd_config $app-sidekiq discourse-sidekiq.service #================================================= # GENERIC FINALIZATION #================================================= # SECURE FILES AND DIRECTORIES #================================================= # Add a pids and socket directory for the systemd script. mkdir -p "$final_path/tmp/pids" mkdir "$final_path/tmp/sockets" # Set permissions to app files chown -R $app: $final_path #================================================= # SETUP LOGROTATE #================================================= mkdir -p /var/log/$app chown -R $app: /var/log/$app # Use logrotate to manage application logfile(s) ynh_use_logrotate #================================================= # ADVERTISE SERVICE IN ADMIN PANEL #================================================= yunohost service add $app-puma --log "/var/log/$app/puma.stderr.log" yunohost service add $app-sidekiq --log "/var/www/$app/log/production.log" #================================================= # SETUP SSOWAT #================================================= # If app is public, add url to SSOWat conf as skipped_uris if [ $is_public -eq 1 ]; then # unprotected_uris allows SSO credentials to be passed anyway. ynh_app_setting_set "$app" skipped_uris "/" fi #================================================= # RELOAD NGINX #================================================= systemctl reload nginx #================================================= # START PUMA AND SIDEKIQ #================================================= # Wait for discourse-puma to be fully started # As discourse-sidekiq is a dependency, it is automatically started before ynh_check_starting "Use Ctrl-C to stop" systemd "120" "$app-puma"