mirror of
https://github.com/YunoHost-Apps/yunorunner_ynh.git
synced 2024-09-03 20:36:13 +02:00
139 lines
5 KiB
Bash
139 lines
5 KiB
Bash
#!/bin/bash
|
|
|
|
#=================================================
|
|
# COMMON VARIABLES
|
|
#=================================================
|
|
|
|
yunorunner_repository="https://github.com/YunoHost/yunorunner"
|
|
|
|
yunorunner_release="a2ab9f576b2ab628190aa65d48dcdad727a81929"
|
|
|
|
#=================================================
|
|
# PERSONAL HELPERS
|
|
#=================================================
|
|
|
|
tweak_yunohost() {
|
|
# Idk why this is needed but wokay I guess >_>
|
|
echo -e "\n127.0.0.1 $domain #CI_APP" >> /etc/hosts
|
|
|
|
ynh_print_info "Disabling unecessary services to save up RAM..."
|
|
for SERVICE in mysql php7.4-fpm metronome rspamd dovecot postfix redis-server postsrsd yunohost-api avahi-daemon; do
|
|
systemctl stop $SERVICE
|
|
systemctl disable $SERVICE --quiet
|
|
done
|
|
|
|
yunohost app makedefault -d "$domain" $app
|
|
}
|
|
|
|
setup_incus() {
|
|
ynh_print_info "Configuring Incus..."
|
|
|
|
# ci_user will be the one launching job, gives it permission to run incus commands
|
|
usermod -a -G incus-admin "$app"
|
|
|
|
if [ "$cluster" -eq 1 ]; then
|
|
yunohost firewall allow TCP 8443
|
|
|
|
free_space=$(df --output=avail / | sed 1d)
|
|
btrfs_size=$(( free_space * 90 / 100 / 1024 / 1024 ))
|
|
incus_network=$((1 + RANDOM % 254))
|
|
ynh_add_config --template="incus-preseed.yml" --destination="$install_dir/incus-preseed.yml"
|
|
incus admin init --preseed < "$install_dir/incus-preseed.yml"
|
|
rm "$install_dir/incus-preseed.yml"
|
|
|
|
incus config set core.https_address "[::]"
|
|
else
|
|
incus admin init --auto # --storage-backend=dir
|
|
fi
|
|
|
|
ynh_exec_as "$app" incus remote add yunohost https://devbaseimgs.yunohost.org --public --accept-certificate
|
|
}
|
|
|
|
exposed_ports_if_cluster() {
|
|
if [ "$cluster" -eq 1 ]; then
|
|
echo "--needs_exposed_ports=8443"
|
|
fi
|
|
}
|
|
|
|
_ynh_firewall_add_tweak() {
|
|
mkdir -p "/etc/yunohost/hooks.d/post_iptable_rules"
|
|
|
|
ynh_add_config --template="firewall_rules.sh" --destination="/etc/yunohost/hooks.d/post_iptable_rules/50-${app}"
|
|
yunohost firewall reload
|
|
}
|
|
|
|
_ynh_firewall_remove_tweak() {
|
|
ynh_secure_remove --file="/etc/yunohost/hooks.d/post_iptable_rules/50-${app}"
|
|
yunohost firewall git remote add origin git@github.com:user/repository.git
|
|
|
|
}
|
|
|
|
#=================================================
|
|
# EXPERIMENTAL HELPERS
|
|
#=================================================
|
|
|
|
#=================================================
|
|
# FUTURE OFFICIAL HELPERS
|
|
#=================================================
|
|
|
|
ynh_maintenance_mode_ON () {
|
|
# Create an html to serve as maintenance notice
|
|
cat > "/var/www/html/maintenance.$app.html" <<EOF
|
|
<!DOCTYPE html>
|
|
<html>
|
|
<head>
|
|
<meta http-equiv="refresh" content="3">
|
|
<title>Your app $app is currently under maintenance!</title>
|
|
<style>
|
|
body {
|
|
width: 70em;
|
|
margin: 0 auto;
|
|
}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<h1>Your app $app is currently under maintenance!</h1>
|
|
<p>This app has been put under maintenance by your administrator at $(date)</p>
|
|
<p>Please wait until the maintenance operation is done. This page will be reloaded as soon as your app will be back.</p>
|
|
</body>
|
|
</html>
|
|
EOF
|
|
|
|
# Create a new nginx config file to redirect all access to the app to the maintenance notice instead.
|
|
cat > "/etc/nginx/conf.d/$domain.d/maintenance.$app.conf" <<EOF
|
|
# All request to the app will be redirected to ${path}_maintenance and fall on the maintenance notice
|
|
rewrite ^${path}/(.*)$ ${path}_maintenance/? redirect;
|
|
# Use another location, to not be in conflict with the original config file
|
|
location ${path}_maintenance/ {
|
|
alias /var/www/html/ ;
|
|
try_files maintenance.$app.html =503;
|
|
|
|
# Include SSOWAT user panel.
|
|
include conf.d/yunohost_panel.conf.inc;
|
|
}
|
|
EOF
|
|
|
|
# The current config file will redirect all requests to the root of the app.
|
|
# To keep the full path, we can use the following rewrite rule:
|
|
# rewrite ^${path}/(.*)$ ${path}_maintenance/\$1? redirect;
|
|
# The difference will be in the $1 at the end, which keep the following queries.
|
|
# But, if it works perfectly for a html request, there's an issue with any php files.
|
|
# This files are treated as simple files, and will be downloaded by the browser.
|
|
# Would be really be nice to be able to fix that issue. So that, when the page is reloaded after the maintenance, the user will be redirected to the real page he was.
|
|
systemctl reload nginx
|
|
}
|
|
|
|
ynh_maintenance_mode_OFF () {
|
|
# Rewrite the nginx config file to redirect from ${path}_maintenance to the real url of the app.
|
|
echo "rewrite ^${path}_maintenance/(.*)$ ${path}/\$1 redirect;" > "/etc/nginx/conf.d/$domain.d/maintenance.$app.conf"
|
|
systemctl reload nginx
|
|
|
|
# Sleep 4 seconds to let the browser reload the pages and redirect the user to the app.
|
|
sleep 4
|
|
|
|
# Then remove the temporary files used for the maintenance.
|
|
rm "/var/www/html/maintenance.$app.html"
|
|
rm "/etc/nginx/conf.d/$domain.d/maintenance.$app.conf"
|
|
|
|
systemctl reload nginx
|
|
}
|