mirror of
https://github.com/YunoHost-Apps/reverseproxy_ynh.git
synced 2024-09-03 20:16:23 +02:00
54 lines
2.2 KiB
Bash
54 lines
2.2 KiB
Bash
|
# Verify that the requested reverse proxy destination is valid:
|
||
|
|
# - protocol is http(s):// or unix: for socket file
|
||
|
|
# - plaintext http is only allowed to localhost (to avoid leaking credentials on the network)
|
||
|
|
# - http(s) destination is webroot, no additional component allowed (eg. http://localhost:1234/test is invalid)
|
||
|
|
rp_validate_proxy_path() {
|
||
|
|
proxy_path="$1"
|
||
|
|
|
||
|
|
if [[ ! $proxy_path =~ '^unix:/' ]]; then
|
||
|
|
url_regex='^(http://(127\.[0-9]+\.[0-9]+\.[0-9]+|localhost)|https://.*)(:[0-9]+)?(/.*)?$'
|
||
|
|
[[ ! $proxy_path =~ $url_regex ]] && ynh_die \
|
||
|
|
"For secure reason, you can't use an unencrypted http remote destination couple with ssowat for your reverse proxy: $proxy_path" 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Don't allow trailing slash or additional URI components in proxy_path
|
||
|
|
if [[ "$proxy_path" =~ ^https?:// ]]; then
|
||
|
|
res="${proxy_path//[^\/]}"
|
||
|
|
if [[ "${#res}" != "2" ]]; then
|
||
|
|
if [[ "${#res}" = "3" ]] && [[ "$proxy_path" =~ /$ ]]; then
|
||
|
|
# If it's only one trailing slash (no more components), just remove it
|
||
|
|
proxy_path="${proxy_path::-1}"
|
||
|
|
else
|
||
|
|
ynh_die "Reverse proxy URL cannot contain additional slashes or components: $proxy_path" 1
|
||
|
|
fi
|
||
|
|
fi
|
||
|
|
fi
|
||
|
|
}
|
||
|
|
|
||
|
|
# Make reverse proxy public if $1 is 1
|
||
|
|
# Yunohost boolean params are 1 if true
|
||
|
|
rp_make_permissions() {
|
||
|
|
#ynh_script_progression --message="Configuring permissions..." --weight=2
|
||
|
|
|
||
|
|
if [ $1 = 1 ]; then
|
||
|
|
ynh_permission_update --permission="main" --add="visitors"
|
||
|
|
fi
|
||
|
|
}
|
||
|
|
|
||
|
|
# (re)generate nginx config
|
||
|
|
rp_make_webconfig() {
|
||
|
|
#ynh_script_progression --message="Configuring NGINX web server..." --weight=1
|
||
|
|
|
||
|
|
# Nginx configuration
|
||
|
|
ynh_replace_string "YNH_LOCATION" "$path_url" ../conf/nginx.conf
|
||
|
|
ynh_replace_string "YNH_PROXY_PATH" "$proxy_path" ../conf/nginx.conf
|
||
|
|
ynh_replace_string "YNH_APPNAME" "$app" ../conf/nginx.conf
|
||
|
|
ynh_replace_string "YNH_ASSETS_PATH" "$assets_path" ../conf/nginx.conf
|
||
|
|
cp ../conf/nginx.conf /etc/nginx/conf.d/$domain.d/$app.conf
|
||
|
|
}
|
||
|
|
|
||
|
|
rp_reload_web() {
|
||
|
|
#ynh_script_progression --message="Reloading NGINX web server..." --weight=1
|
||
|
|
ynh_systemd_action --service_name=nginx --action=reload
|
||
|
|
}
|