1
0
Fork 0
mirror of https://github.com/YunoHost-Apps/zabbix_ynh.git synced 2024-09-03 20:36:14 +02:00

Merge branch 'master' into 'testing'

Master

See merge request Mickael-Martin/zabbix_ynh!12
This commit is contained in:
Mickael-Martin 2019-03-07 15:03:07 +01:00
parent db61b46915
commit 8518c14708
8 changed files with 313 additions and 318 deletions

View file

@ -30,7 +30,7 @@ Do not change admin password.
* Do not change the default admin user password. The user is disabled juste after the install but used to update templates.
* The Zabbix server port is not opened by default for external monitoring (active agent).
* Install or update apply a template yunohost on the host "Zabbix-server" (127.0.0.1) for basic monitoring for Yunohost.
* A Yunohost template is imported and linked to the host "Zabbix-server" (127.0.0.1) for basic monitoring for Yunohost.
* If you want more information about Yunohost in the template, please open an issue on git.
**More information on the documentation page:**

View file

@ -7,7 +7,7 @@
"fr": "Zabbix pour Yunohost"
},
"version": "2.0",
"url": "https://framagit.org/Mickael-Martin/zabbix_ynh",
"url": "https://www.zabbix.com",
"license": "free",
"maintainer": {
"name": "Mickael Martin",
@ -61,10 +61,11 @@
"en": "Is it a public application?",
"fr": "Est-ce une application publique ?"
},
"default": true
"default": false
},
{
"name": "language",
"type": "string",
"ask": {
"en": "Choose the application language",
"fr": "Choisissez la langue de l'application"

View file

@ -10,4 +10,131 @@
ynh_delete_file_checksum () {
local checksum_setting_name=checksum_${1//[\/ ]/_} # Replace all '/' and ' ' by '_'
ynh_app_setting_delete $app $checksum_setting_name
}
#Zabbix part
#===================GET GUEST DEFAULT USER STATE==============
#return 0 if enable, else 1
get_state_guest_user(){
$mysqlconn -BN -e "SELECT count(id) from \`users_groups\` where userid=2 and usrgrpid=9"
}
#================ DISABLE DEFAULT ZABBIX USER GUEST ===================
disable_guest_user(){
if [ $(get_state_guest_user) = "0" ];then
lastid=$($mysqlconn -BN -e "SELECT max(id) from \`users_groups\`")
lastid=$(("$lastid" + 1 ))
$mysqlconn -e "INSERT INTO \`users_groups\` (\`id\` , \`usrgrpid\`, \`userid\`) VALUES ($lastid ,9, 2);"
fi
}
#===================GET ADMIN DEFAULT USER STATE==============
#return 0 if enable, else 1
get_state_admin_user(){
$mysqlconn -BN -e "SELECT count(id) from \`users_groups\` where userid=1 and usrgrpid=9"
}
#================ DISABLE DEFAULT ADMIN USER ===================
disable_admin_user(){
if [ $(get_state_admin_user) = "0" ] ;then
lastid=$($mysqlconn -BN -e "SELECT max(id) from \`users_groups\`")
lastid=$((lastid + 1 ))
$mysqlconn -e "INSERT INTO \`users_groups\` (\`id\` , \`usrgrpid\`, \`userid\`) VALUES ($lastid ,9, 1);"
ynh_print_info "Default admin disabled"
else
ynh_print_info "Default admin already disabled"
fi
}
enable_admin_user(){
if [ $(get_state_admin_user) = "1" ] ;then
ynh_print_info "Enable default admin"
#enable default admin temporaly
$mysqlconn -e "DELETE FROM users_groups where usrgrpid=9 and userid=1;"
ynh_print_info "Default admin enabled"
else
ynh_print_info "Default admin already enable"
fi
}
import_template(){
ynh_print_info "Import yunohost template"
zabbixFullpath=https://$domain$path_url
localpath=$(find /var/cache/yunohost/ -name "Template_Yunohost.xml")
sudoUserPpath=$(find /var/cache/yunohost/ -name "etc_sudoers.d_zabbix")
confUserPpath=$(find /var/cache/yunohost/ -name "etc_zabbix_zabbix_agentd.d_userP_yunohost.conf")
bashUserPpath=$(find /var/cache/yunohost/ -name "etc_zabbix_zabbix_agentd.d_yunohost.sh")
cp "$sudoUserPpath" /etc/sudoers.d/zabbix
cp "$confUserPpath" /etc/zabbix/zabbix_agentd.d/userP_yunohost.conf
cp "$bashUserPpath" /etc/zabbix/zabbix_agentd.d/yunohost.sh
chmod a+x /etc/zabbix/zabbix_agentd.d/yunohost.sh
systemctl restart zabbix-agent
curlOptions="-k -s --cookie cookiejar.txt --cookie-jar cookiejar.txt --resolve $domain:443:127.0.0.1"
curl -L $curlOptions \
--form "enter=Sign+in" \
--form "name=Admin" \
--form "password=zabbix" \
"$zabbixFullpath/index.php"
if [ $? -eq 0 ];then
sid=$(curl $curlOptions \
"$zabbixFullpath/conf.import.php?rules_preset=template" \
| grep -Po 'name="sid" value="\K([a-z0-9]{16})(?=")' )
importState=$(curl $curlOptions \
--form "config=1" \
--form "import_file=@$localpath" \
--form "rules[groups][createMissing]=1" \
--form "rules[templates][updateExisting]=1" \
--form "rules[templates][createMissing]=1" \
--form "rules[templateScreens][updateExisting]=1" \
--form "rules[templateScreens][createMissing]=1" \
--form "rules[templateLinkage][createMissing]=1" \
--form "rules[applications][createMissing]=1" \
--form "rules[items][updateExisting]=1" \
--form "rules[items][createMissing]=1" \
--form "rules[discoveryRules][updateExisting]=1" \
--form "rules[discoveryRules][createMissing]=1" \
--form "rules[triggers][updateExisting]=1" \
--form "rules[triggers][createMissing]=1" \
--form "rules[graphs][updateExisting]=1" \
--form "rules[graphs][createMissing]=1" \
--form "rules[httptests][updateExisting]=1" \
--form "rules[httptests][createMissing]=1" \
--form "rules[valueMaps][createMissing]=1" \
--form "import=Import" \
--form "backurl=templates.php" \
--form "form_refresh=1" \
--form "sid=${sid}" \ \
"${zabbixFullpath}/conf.import.php?rules_preset=template" \
| grep -c "Imported successfully")
if [ "$importState" -eq "1" ];then
ynh_print_info "Template Yunohost imported !"
else
ynh_print_warn "Template Yunohost not imported !"
fi
else
ynh_print_warn "Admin user cannot connect interface !"
fi
}
link_template(){
#apply template to host
tokenapi=$(curl -k -s --resolve $domain:443:127.0.0.1 --header "Content-Type: application/json" --request POST --data '{ "jsonrpc": "2.0","method": "user.login","params": {"user": "Admin","password": "zabbix"},"id": 1,"auth": null}' "${zabbixFullpath}/api_jsonrpc.php" | jq -r '.result')
zabbixHostID=$(curl -k -s --resolve $domain:443:127.0.0.1 --header "Content-Type: application/json" --request POST --data '{"jsonrpc":"2.0","method":"host.get","params":{"filter":{"host":["Zabbix server"]}},"auth":"'"$tokenapi"'","id":1}' "${zabbixFullpath}/api_jsonrpc.php" | jq -r '.result[0].hostid')
zabbixTemplateID=$(curl -k -s --resolve $domain:443:127.0.0.1 --header "Content-Type: application/json" --request POST --data '{"jsonrpc":"2.0","method":"template.get","params":{"filter":{"host":["Template Yunohost"]}},"auth":"'"$tokenapi"'","id":1}' "${zabbixFullpath}/api_jsonrpc.php" | jq -r '.result[0].templateid')
applyTemplate=$(curl -k -s --resolve $domain:443:127.0.0.1 --header "Content-Type: application/json" --request POST --data '{"jsonrpc":"2.0","method":"host.massadd","params":{"hosts":[{"hostid":"'"$zabbixHostID"'"}],"templates":[{"templateid":"'"$zabbixTemplateID"'"}]},"auth":"'"$tokenapi"'","id":1}' "${zabbixFullpath}/api_jsonrpc.php" | jq -r '.result.hostids[]')
if [ "$applyTemplate" -eq "$zabbixHostID" ];then
ynh_print_info "Template Yunohost linked to Zabbix server !"
else
ynh_print_warn "Template Yunohost no linked to Zabbix server !"
fi
}

View file

@ -29,6 +29,8 @@ app="zabbix"
final_path=$(ynh_app_setting_get $app final_path)
domain=$(ynh_app_setting_get $app domain)
db_name=$(ynh_app_setting_get $app db_name)
nonfree=$(ynh_app_setting_get $app nonfree)
#=================================================
# STANDARD BACKUP STEPS
@ -69,4 +71,8 @@ ynh_mysql_dump_db "$db_name" > db.sql
#=================================================
# SPECIFIC BACKUP
#=================================================
if [ $nonfree ];then
ynh_backup /etc/apt/sources.list.d/non-free.list
ynh_backup /etc/apt/preferences.d
fi

View file

@ -1,4 +1,5 @@
#=================================================
#!/bin/bash
##=================================================
# GENERIC START
#=================================================
# IMPORT GENERIC HELPERS
@ -12,17 +13,17 @@ source /usr/share/yunohost/helpers
#=================================================
# Exit if an error occurs during the execution of the script
ynh_abort_if_errors
#ynh_abort_if_errors
#=================================================
# RETRIEVE ARGUMENTS FROM THE MANIFEST
#=================================================
domain=$YNH_APP_ARG_DOMAIN
path_url=$YNH_APP_ARG_PATH
admin=$YNH_APP_ARG_ADMIN
is_public=$YNH_APP_ARG_IS_PUBLIC
language=$YNH_APP_ARG_LANGUAGE
export domain="$YNH_APP_ARG_DOMAIN"
export path_url="$YNH_APP_ARG_PATH"
admin="$YNH_APP_ARG_ADMIN"
is_public="$YNH_APP_ARG_IS_PUBLIC"
language="$YNH_APP_ARG_LANGUAGE"
### If it's a multi-instance app, meaning it can be installed several times independently
### The id of the app as stated in the manifest is available as $YNH_APP_ID
@ -34,7 +35,7 @@ language=$YNH_APP_ARG_LANGUAGE
### The app instance name is probably what interests you most, since this is
### guaranteed to be unique. This is a good unique identifier to define installation path,
### db names, ...
app=$YNH_APP_INSTANCE_NAME
app="$YNH_APP_INSTANCE_NAME"
#=================================================
# CHECK IF THE APP CAN BE INSTALLED WITH THESE ARGS
@ -46,22 +47,23 @@ final_path=/var/www/zabbix
test ! -e "$final_path" || ynh_die "This path already contains a folder"
# Normalize the url path syntax
path_url=$(ynh_normalize_url_path $path_url)
path_url=$(ynh_normalize_url_path "$path_url")
# Check web path availability
ynh_webpath_available $domain $path_url
ynh_webpath_available "$domain" "$path_url"
# Register (book) web path
ynh_webpath_register $app $domain $path_url
ynh_webpath_register "$app" "$domain" "$path_url"
#=================================================
# STORE SETTINGS FROM MANIFEST
#=================================================
ynh_print_info "Get infos from manifest"
ynh_app_setting_set $app domain $domain
ynh_app_setting_set $app path $path_url
ynh_app_setting_set $app admin $admin
ynh_app_setting_set $app is_public $is_public
ynh_app_setting_set $app language $language
ynh_app_setting_set "$app" domain "$domain"
ynh_app_setting_set "$app" path "$path_url"
ynh_app_setting_set "$app" admin "$admin"
ynh_app_setting_set "$app" is_public "$is_public"
ynh_app_setting_set "$app" language "$language"
#=================================================
# STANDARD MODIFICATIONS
@ -93,35 +95,29 @@ ynh_app_setting_set $app language $language
### - Remove the section "REMOVE DEPENDENCIES" in the remove script
### - As well as the section "REINSTALL DEPENDENCIES" in the restore script
### - And the section "UPGRADE DEPENDENCIES" in the upgrade script
ynh_print_info "Install Zabbix repository"
wget "https://repo.zabbix.com/zabbix/4.0/debian/pool/main/z/zabbix-release/zabbix-release_4.0-2+stretch_all.deb"
dpkg -i zabbix-release_*.deb
rm zabbix-release_*.deb
echo "deb http://deb.debian.org/debian stretch non-free" >/etc/apt/sources.list.d/non-free.list
ynh_print_info "Update and install dependencies"
ynh_package_update
ynh_install_app_dependencies libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.2-0 php7.0 php-bcmath php7.0-bcmath ttf-dejavu-core php7.0-bcmath patch smistrip unzip wget fping libcap2-bin libiksemel3 libopenipmi0 libpam-cap libsnmp-base libsnmp30 snmptrapd snmpd snmp-mibs-downloader libjs-prototype zabbix-server-mysql zabbix-agent jq
yunohost service add snmpd -d "Management of SNMP Daemon"
DEBIAN_FRONTEND=noninteractive apt-get -y download zabbix-frontend-php
ar x *.deb
tar xzf control.tar.gz
sed -i 's/apache2 | httpd, //' control
tar --ignore-failed-read -cvzf control.tar.gz {post,pre}{inst,rm} md5sums control
ar rcs zabbix-frontend-php+stretch_all-noapache2.deb debian-binary control.tar.gz data.tar.xz
ynh_install_app_dependencies libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.2-0 php7.0 php-bcmath php7.0-bcmath ttf-dejavu-core php7.0-bcmath patch smistrip unzip wget fping libcap2-bin libiksemel3 libopenipmi0 libpam-cap libsnmp-base libsnmp30 snmptrapd snmpd libjs-prototype jq
dpkg -i zabbix-frontend-php+stretch_all-noapache2.deb
rm -fr zabbix-*.deb
ynh_package_install zabbix-server-mysql zabbix-agent zabbix-frontend-php
DEBIAN_FRONTEND=noninteractive apt-mark hold zabbix-server-mysql zabbix-frontend-php
sed -i "s/# fr_FR.UTF-8 UTF-8/fr_FR.UTF-8 UTF-8/g" /etc/locale.gen
locale-gen
ln -s /usr/share/zabbix $final_path
rm $final_path/conf/zabbix.conf.php
ln -s /usr/share/zabbix "$final_path"
rm "$final_path/conf/zabbix.conf.php"
#=================================================
# CREATE A MYSQL DATABASE
#=================================================
ynh_print_info "Create and add default data in db"
### Use these lines if you need a database for the application.
### `ynh_mysql_setup_db` will create a database, an associated user and a ramdom password.
@ -132,46 +128,46 @@ rm $final_path/conf/zabbix.conf.php
### - Remove also the section "REMOVE THE MYSQL DATABASE" in the remove script
### - As well as the section "RESTORE THE MYSQL DATABASE" in the restore script
db_name=$(ynh_sanitize_dbid $app)
db_user=$db_name
ynh_app_setting_set $app db_name $db_name
ynh_app_setting_set $app db_user $db_user
ynh_mysql_setup_db $db_user $db_name
declare db_pwd
db_name=$(ynh_sanitize_dbid "$app")
db_user="$db_name"
ynh_app_setting_set "$app" db_name "$db_name"
ynh_app_setting_set "$app" db_user "$db_user"
ynh_mysql_setup_db "$db_user" "$db_name"
zcat /usr/share/doc/zabbix-server-mysql*/create.sql.gz | mysql -u$db_user -p$db_pwd $db_name
export mysqlconn="mysql -u$db_user -p$db_pwd $db_name"
zcat /usr/share/doc/zabbix-server-mysql*/create.sql.gz | $mysqlconn
#sso integration
mysql -u$db_user -p$db_pwd $db_name -e "UPDATE \`config\` SET \`http_auth_enabled\` = '1', \`http_login_form\` = '1' WHERE \`config\`.\`configid\` = 1;"
$mysqlconn -e "UPDATE \`config\` SET \`http_auth_enabled\` = '1', \`http_login_form\` = '1' WHERE \`config\`.\`configid\` = 1;"
if [ $language == "fr" ];then
if [ "$language" == "fr" ];then
lang="fr_FR"
else
lang="en_GB"
fi
#admin creation
surname=$(ynh_user_get_info $admin lastname)
name=$(ynh_user_get_info $admin firstname)
surname=$(ynh_user_get_info "$admin" lastname)
name=$(ynh_user_get_info "$admin" firstname)
mysql -u$db_user -p$db_pwd $db_name -e "INSERT INTO \`users\` (\`userid\`,\`alias\`, \`name\`, \`surname\`, \`passwd\`, \`url\`, \`autologin\`, \`autologout\`, \`lang\`, \`refresh\`, \`type\`, \`theme\`, \`attempt_failed\`, \`attempt_ip\`, \`attempt_clock\`, \`rows_per_page\`) VALUES (3,'"$admin"', '"$admin"', '"$admin"', '5fce1b3e34b520afeffb37ce08c7cd66', '', 0, '0', '"$lang"', '30s', 3, 'default', 0, '', 0, 50);"
mysql -u$db_user -p$db_pwd $db_name -e "INSERT INTO \`users_groups\` (\`id\`, \`usrgrpid\`, \`userid\`) VALUES (5, 7, 3);"
$mysqlconn -e "INSERT INTO \`users\` (\`userid\`,\`alias\`, \`name\`, \`surname\`, \`passwd\`, \`url\`, \`autologin\`, \`autologout\`, \`lang\`, \`refresh\`, \`type\`, \`theme\`, \`attempt_failed\`, \`attempt_ip\`, \`attempt_clock\`, \`rows_per_page\`) VALUES (3,'$admin', '$admin', '$admin', '5fce1b3e34b520afeffb37ce08c7cd66', '', 0, '0', '$lang', '30s', 3, 'default', 0, '', 0, 50);"
$mysqlconn -e "INSERT INTO \`users_groups\` (\`id\`, \`usrgrpid\`, \`userid\`) VALUES (5, 7, 3);"
#users creation in zabbix database
i=4
for u in $(ynh_user_list);
for user in $(ynh_user_list);
do
if [ "$u" != "$admin" ];then
surname=$(ynh_user_get_info $u lastname)
name=$(ynh_user_get_info $u firstname)
mysql -u$db_user -p$db_pwd $db_name -e "INSERT INTO \`users\` (\`userid\`, \`alias\`, \`name\`, \`surname\`, \`passwd\`, \`url\`, \`autologin\`, \`autologout\`, \`lang\`, \`refresh\`, \`type\`, \`theme\`, \`attempt_failed\`, \`attempt_ip\`, \`attempt_clock\`, \`rows_per_page\`) VALUES ("$i",'"$u"', '"$name"', '"$surname"', '5fce1b3e34b520afeffb37ce08c7cd66', '', 0, '0', '"$lang"', '30s', 1, 'default', 0, '', 0, 50);"
i=$(($i+1))
if [ "$user" != "$admin" ];then
surname=$(ynh_user_get_info "$user" lastname)
name=$(ynh_user_get_info "$user" firstname)
$mysqlconn -e "INSERT INTO \`users\` (\`userid\`, \`alias\`, \`name\`, \`surname\`, \`passwd\`, \`url\`, \`autologin\`, \`autologout\`, \`lang\`, \`refresh\`, \`type\`, \`theme\`, \`attempt_failed\`, \`attempt_ip\`, \`attempt_clock\`, \`rows_per_page\`) VALUES ($i,'$user', '$name', '$surname', '5fce1b3e34b520afeffb37ce08c7cd66', '', 0, '0', '$lang', '30s', 1, 'default', 0, '', 0, 50);"
i=$((i+1))
fi
done
#disable default guest
lastid=$(mysql -u$db_user -p$db_pwd $db_name -BN -e "SELECT max(id) from \`users_groups\`")
lastid=$(($lastid + 1 ))
mysql -u$db_user -p$db_pwd $db_name -e "INSERT INTO \`users_groups\` (\`id\` , \`usrgrpid\`, \`userid\`) VALUES ($lastid ,9, 2);"
disable_guest_user
#=================================================
# DOWNLOAD, CHECK AND UNPACK SOURCE
@ -181,10 +177,12 @@ mysql -u$db_user -p$db_pwd $db_name -e "INSERT INTO \`users_groups\` (\`id\` , \
### downloaded from an upstream source, like a git repository.
### `ynh_setup_source` use the file conf/app.src
ynh_app_setting_set $app final_path $final_path
ynh_app_setting_set "$app" final_path "$final_path"
# Download, check integrity, uncompress and patch the source from app.src
#ynh_setup_source "$final_path"
ynh_print_info "Generate web config"
#=================================================
# NGINX CONFIGURATION
#=================================================
@ -271,18 +269,13 @@ systemctl reload nginx
# Installation with curl
#ynh_local_curl "/INSTALL_PATH" "key1=value1" "key2=value2" "key3=value3"
# Remove the public access
if [ $is_public -eq 0 ]
then
ynh_app_setting_delete $app skipped_uris
fi
#=================================================
# MODIFY A CONFIG FILE
#=================================================
### `ynh_replace_string` is used to replace a string in a file.
### (It's compatible with sed regular expressions syntax)
ynh_print_info "Generate zabbix config files"
echo "<?php
// Zabbix GUI configuration file.
@ -291,9 +284,9 @@ global \$DB;
\$DB['TYPE'] = 'MYSQL';
\$DB['SERVER'] = 'localhost';
\$DB['PORT'] = '0';
\$DB['DATABASE'] = '"$db_name"';
\$DB['USER'] = '"$db_user"';
\$DB['PASSWORD'] = '"$db_pwd"';
\$DB['DATABASE'] = '$db_name';
\$DB['USER'] = '$db_user';
\$DB['PASSWORD'] = '$db_pwd';
// Schema name. Used for IBM DB2 and PostgreSQL.
\$DB['SCHEMA'] = '';
@ -370,16 +363,9 @@ yunohost service add zabbix-agent -d "Management of Zabbix Agent"
#yunohost service add NAME_INIT.D --log "/var/log/FILE.log"
#=================================================
# SETUP SSOWAT
#=================================================
# Make app public if necessary
if [ $is_public -eq 1 ]
then
# unprotected_uris allows SSO credentials to be passed anyway.
ynh_app_setting_set $app unprotected_uris "/"
fi
# Make app public if for importing template
# unprotected_uris allows SSO credentials to be passed anyway
ynh_app_setting_set "$app" unprotected_uris "/"
#=================================================
# RELOAD NGINX AND PHP-FPM
@ -394,79 +380,35 @@ yunohost app ssowatconf
#=================================================
# Import Yunohost template
#=================================================
zabbixFullpath=https://$domain$path_url
localpath=$(find /var/cache/yunohost/ -name "Template_Yunohost.xml")
sudoUserPpath=$(find /var/cache/yunohost/ -name "etc_sudoers.d_zabbix")
confUserPpath=$(find /var/cache/yunohost/ -name "etc_zabbix_zabbix_agentd.d_userP_yunohost.conf")
bashUserPpath=$(find /var/cache/yunohost/ -name "etc_zabbix_zabbix_agentd.d_yunohost.sh")
cp $sudoUserPpath /etc/sudoers.d/zabbix
cp $confUserPpath /etc/zabbix/zabbix_agentd.d/userP_yunohost.conf
cp $bashUserPpath /etc/zabbix/zabbix_agentd.d/yunohost.sh
chmod a+x /etc/zabbix/zabbix_agentd.d/yunohost.sh
systemctl restart zabbix-agent
curl -k -s --cookie cookiejar.txt --cookie-jar cookiejar.txt \
--form enter=Sign+in \
--form name=Admin \
--form password=zabbix \
"$zabbixFullpath/index.php"
sid=$(curl -k -s --cookie cookiejar.txt --cookie-jar cookiejar.txt \
"$zabbixFullpath/conf.import.php?rules_preset=template" \
| grep -Po 'name="sid" value="\K([a-z0-9]{16})(?=")' )
importState=$(curl -k -s --cookie cookiejar.txt --cookie-jar cookiejar.txt \
--form "config=1" \
--form "import_file=@$localpath" \
--form rules[groups][createMissing]=1 \
--form rules[templates][updateExisting]=1 \
--form rules[templates][createMissing]=1 \
--form rules[templateScreens][updateExisting]=1 \
--form rules[templateScreens][createMissing]=1 \
--form rules[templateLinkage][createMissing]=1 \
--form rules[applications][createMissing]=1 \
--form rules[items][updateExisting]=1 \
--form rules[items][createMissing]=1 \
--form rules[discoveryRules][updateExisting]=1 \
--form rules[discoveryRules][createMissing]=1 \
--form rules[triggers][updateExisting]=1 \
--form rules[triggers][createMissing]=1 \
--form rules[graphs][updateExisting]=1 \
--form rules[graphs][createMissing]=1 \
--form rules[httptests][updateExisting]=1 \
--form rules[httptests][createMissing]=1 \
--form rules[valueMaps][createMissing]=1 \
--form "import=Import" \
--form "backurl=templates.php" \
--form "form_refresh=1" \
--form "sid=${sid}" \ \
"${zabbixFullpath}/conf.import.php?rules_preset=template" \
| grep -c "Imported successfully")
if [ "$importState" -eq "1" ];then
ynh_print_info "Template Yunohost imported !"
else
ynh_print_warn "Template Yunohost not imported !"
fi
#apply template to host
tokenapi=$(curl -k -s --header "Content-Type: application/json" --request POST --data '{ "jsonrpc": "2.0","method": "user.login","params": {"user": "Admin","password": "zabbix"},"id": 1,"auth": null}' ${zabbixFullpath}/api_jsonrpc.php | jq -r '.result')
zabbixHostID=$(curl -k -s --header "Content-Type: application/json" --request POST --data '{"jsonrpc":"2.0","method":"host.get","params":{"filter":{"host":["Zabbix server"]}},"auth":"'$tokenapi'","id":1}' ${zabbixFullpath}/api_jsonrpc.php | jq -r '.result[0].hostid')
zabbixTemplateID=$(curl -k -s --header "Content-Type: application/json" --request POST --data '{"jsonrpc":"2.0","method":"template.get","params":{"filter":{"host":["Template Yunohost"]}},"auth":"'$tokenapi'","id":1}' ${zabbixFullpath}/api_jsonrpc.php | jq -r '.result[0].templateid')
applyTemplate=$(curl -k -s --header "Content-Type: application/json" --request POST --data '{"jsonrpc":"2.0","method":"host.massadd","params":{"hosts":[{"hostid":"'$zabbixHostID'"}],"templates":[{"templateid":"'$zabbixTemplateID'"}]},"auth":"'$tokenapi'","id":1}' ${zabbixFullpath}/api_jsonrpc.php | jq -r '.result.hostids[]')
if [ "$applyTemplate" -eq "$zabbixHostID" ];then
ynh_print_info "Template Yunohost linked to Zabbix server !"
else
ynh_print_warn "Template Yunohost no linked to Zabbix server !"
fi
import_template
#=================================================
# Link Yunohost template to the ZAbbix Server Host
#=================================================
link_template
#=================================================
# disable default admin
#=================================================
disable_admin_user
#=================================================
# SETUP SSOWAT
#=================================================
# Make app private if necessary
if [ "$is_public" -eq 0 ]
then
# unprotected_uris allows SSO credentials to be passed anyway.
ynh_app_setting_delete "$app" unprotected_uris
fi
#=================================================
# RELOAD NGINX AND PHP-FPM
#=================================================
systemctl reload nginx
systemctl reload php7.0-fpm
# Reload SSOwat config
yunohost app ssowatconf
lastid=$(mysql -u$db_user -p$db_pwd $db_name -BN -e "SELECT max(id) from \`users_groups\`")
lastid=$(($lastid + 1 ))
mysql -u$db_user -p$db_pwd $db_name -e "INSERT INTO \`users_groups\` (\`id\` , \`usrgrpid\`, \`userid\`) VALUES ($lastid ,9, 1);"

View file

@ -15,11 +15,11 @@ source /usr/share/yunohost/helpers
app=$YNH_APP_INSTANCE_NAME
domain=$(ynh_app_setting_get $app domain)
port=$(ynh_app_setting_get $app port)
db_name=$(ynh_app_setting_get $app db_name)
#domain=$(ynh_app_setting_get "$app" domain) #not used
port=$(ynh_app_setting_get "$app" port)
db_name=$(ynh_app_setting_get "$app" db_name)
db_user=$db_name
final_path=$(ynh_app_setting_get $app final_path)
#final_path=$(ynh_app_setting_get "$app" final_path) #not used
#=================================================
# STANDARD REMOVE
@ -73,7 +73,7 @@ rm /var/www/zabbix
#=================================================
# Remove a database if it exists, along with the associated user
ynh_mysql_remove_db $db_user $db_name
ynh_mysql_remove_db "$db_user" "$db_name"
#=================================================
# REMOVE NGINX CONFIGURATION
@ -102,7 +102,7 @@ ynh_remove_logrotate
if yunohost firewall list | grep -q "\- $port$"
then
echo "Close port $port" >&2
yunohost firewall disallow TCP $port 2>&1
yunohost firewall disallow TCP "$port" 2>&1
fi
#=================================================

View file

@ -1,10 +1,11 @@
#!/bin/bash
#=================================================
# GENERIC START
#=================================================
# IMPORT GENERIC HELPERS
#=================================================
#source _common.sh
source ../settings/scripts/_common.sh
source /usr/share/yunohost/helpers
#=================================================
@ -39,37 +40,46 @@ rm -fr $final_path
#=================================================
domain=$(ynh_app_setting_get $app domain)
path_url=$(ynh_app_setting_get $app path)
admin=$(ynh_app_setting_get $app admin)
#path_url=$(ynh_app_setting_get $app path) #not used
#admin=$(ynh_app_setting_get $app admin) #not used
is_public=$(ynh_app_setting_get $app is_public)
language=$(ynh_app_setting_get $app language)
#language=$(ynh_app_setting_get $app language) #not used
nonfree=$(ynh_app_setting_get $app nonfree)
#=================================================
# INSTALL DEPENDENCIES
#=================================================
ynh_print_info "Install Zabbix repository"
wget "https://repo.zabbix.com/zabbix/4.0/debian/pool/main/z/zabbix-release/zabbix-release_4.0-2+stretch_all.deb"
dpkg -i zabbix-release_*.deb
rm zabbix-release_*.deb
echo "deb http://deb.debian.org/debian stretch non-free" >/etc/apt/sources.list.d/non-free.list
ynh_print_info "Install non-free repository with pinning"
if [ $nonfree ];then
ynh_restore_file "/etc/apt/sources.list.d/non-free.list"
ynh_restore_file "/etc/apt/preferences.d"
fi
ynh_print_info "Update and install dependencies"
ynh_package_update
ynh_install_app_dependencies libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.2-0 php7.0 php-bcmath php7.0-bcmath ttf-dejavu-core php7.0-bcmath patch smistrip unzip wget fping libcap2-bin libiksemel3 libopenipmi0 libpam-cap libsnmp-base libsnmp30 snmptrapd snmpd snmp-mibs-downloader libjs-prototype zabbix-server-mysql zabbix-agent
yunohost service add snmpd -d "Management of SNMP Daemon"
DEBIAN_FRONTEND=noninteractive apt-get -y download zabbix-frontend-php
ar x *.deb
tar xzf control.tar.gz
sed -i 's/apache2 | httpd, //' control
tar --ignore-failed-read -cvzf control.tar.gz {post,pre}{inst,rm} md5sums control
ar rcs zabbix-frontend-php+stretch_all-noapache2.deb debian-binary control.tar.gz data.tar.xz
if [ $nonfree ];then
ynh_install_app_dependencies libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.2-0 php7.0 php-bcmath php7.0-bcmath ttf-dejavu-core php7.0-bcmath patch smistrip unzip wget fping libcap2-bin libiksemel3 libopenipmi0 libpam-cap libsnmp-base libsnmp30 snmptrapd snmpd snmp-mibs-downloader libjs-prototype jq
else
ynh_install_app_dependencies libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.2-0 php7.0 php-bcmath php7.0-bcmath ttf-dejavu-core php7.0-bcmath patch smistrip unzip wget fping libcap2-bin libiksemel3 libopenipmi0 libpam-cap libsnmp-base libsnmp30 snmptrapd snmpd libjs-prototype jq
dpkg -i zabbix-frontend-php+stretch_all-noapache2.deb
fi
rm -fr zabbix-*.deb
ynh_package_install zabbix-server-mysql zabbix-agent zabbix-frontend-php
DEBIAN_FRONTEND=noninteractive apt-mark hold zabbix-server-mysql zabbix-frontend-php
sed -i "s/# fr_FR.UTF-8 UTF-8/fr_FR.UTF-8 UTF-8/g" /etc/locale.gen
locale-gen
ln -s /usr/share/zabbix /var/www/zabbix
rm $final_path/conf/zabbix.conf.php
@ -104,7 +114,7 @@ yunohost app ssowatconf
systemctl reload nginx
# Remove the public access
if [ $is_public -eq 0 ]
if [ "$is_public" -eq 0 ]
then
ynh_app_setting_delete $app skipped_uris
fi
@ -117,8 +127,8 @@ db_name=$(ynh_app_setting_get $app db_name)
db_user=$(ynh_app_setting_get $app db_user)
db_pwd=$(ynh_app_setting_get $app mysqlpwd)
ynh_mysql_setup_db $db_user $db_name $db_pwd
ynh_mysql_connect_as $db_name $db_pwd $db_name < ./db.sql
ynh_mysql_setup_db "$db_user" "$db_name" "$db_pwd"
ynh_mysql_connect_as "$db_name" "$db_pwd" "$db_name" < ./db.sql
#=================================================
# Restore configs files
@ -135,9 +145,6 @@ ynh_restore_file "/etc/zabbix"
systemctl enable zabbix-server && systemctl start zabbix-server
#=================================================
# SETUP LOGROTATE
#=================================================
@ -159,7 +166,7 @@ systemctl enable zabbix-server && systemctl start zabbix-server
#=================================================
# Make app public if necessary
if [ $is_public -eq 1 ]
if [ "$is_public" -eq 1 ]
then
# unprotected_uris allows SSO credentials to be passed anyway.
ynh_app_setting_set $app unprotected_uris "/"

View file

@ -14,17 +14,16 @@ source /usr/share/yunohost/helpers
#=================================================
app=$YNH_APP_INSTANCE_NAME
trustedversion="1:4.0.4-1+stretch"
domain=$(ynh_app_setting_get $app domain)
path_url=$(ynh_app_setting_get $app path)
admin=$(ynh_app_setting_get $app admin)
is_public=$(ynh_app_setting_get $app is_public)
final_path=$(ynh_app_setting_get $app final_path)
language=$(ynh_app_setting_get $app language)
db_name=$(ynh_app_setting_get $app db_name)
db_user=$(ynh_app_setting_get $app db_user)
db_pwd=$(ynh_app_setting_get $app mysqlpwd)
trustedversion="1:4.0.5-1+stretch"
export domain=$(ynh_app_setting_get "$app" domain)
export path_url=$(ynh_app_setting_get "$app" path)
#admin=$(ynh_app_setting_get "$app" admin) #not used
is_public=$(ynh_app_setting_get "$app" is_public)
final_path=$(ynh_app_setting_get "$app" final_path)
#language=$(ynh_app_setting_get "$app" language) #not used
db_name=$(ynh_app_setting_get "$app" db_name)
db_user=$(ynh_app_setting_get "$app" db_user)
db_pwd=$(ynh_app_setting_get "$app" mysqlpwd)
#=================================================
# ENSURE DOWNWARD COMPATIBILITY
@ -32,153 +31,69 @@ db_pwd=$(ynh_app_setting_get $app mysqlpwd)
# Fix is_public as a boolean value
if [ "$is_public" = "Yes" ]; then
ynh_app_setting_set $app is_public 1
ynh_app_setting_set "$app" is_public 1
is_public=1
elif [ "$is_public" = "No" ]; then
ynh_app_setting_set $app is_public 0
ynh_app_setting_set "$app" is_public 0
is_public=0
fi
# If db_name doesn't exist, create it
if [ -z $db_name ]; then
db_name=$(ynh_sanitize_dbid $app)
ynh_app_setting_set $app db_name $db_name
if [ -z "$db_name" ]; then
db_name=$(ynh_sanitize_dbid "$app")
ynh_app_setting_set "$app" db_name "$db_name"
fi
# If final_path doesn't exist, create it
if [ -z $final_path ]; then
if [ -z "$final_path" ]; then
final_path=/var/www/$app
ynh_app_setting_set $app final_path $final_path
ynh_app_setting_set "$app" final_path "$final_path"
fi
export mysqlconn="mysql -u$db_user -p$db_pwd $db_name"
#=================================================
# Enable default admin temporaly
#=================================================
haveDefaultAdminDisabled=$(mysql -BN -u$db_user -p$db_pwd $db_name -BN -e "SELECT count(id) from \`users_groups\` where userid=1 and usrgrpid=9")
if [ "$haveDefaultAdminDisabled" -eq 1 ] ;then
ynh_print_info "Enable default admin"
#enable default admin temporaly
mysql -u$db_user -p$db_pwd $db_name -e "DELETE FROM users_groups where usrgrpid=9 and userid=1;"
else
ynh_print_info "default admin already enabled"
fi
enable_admin_user
#=================================================
# Import Yunohost template
#=================================================
ynh_print_info "Import Yunohost template"
#disable sso temporaly
ynh_app_setting_set $app unprotected_uris "/"
systemctl reload nginx
yunohost app ssowatconf
zabbixFullpath=https://$domain$path_url
localpath=$(find /var/cache/yunohost/ -name "Template_Yunohost.xml")
sudoUserPpath=$(find /var/cache/yunohost/ -name "etc_sudoers.d_zabbix")
confUserPpath=$(find /var/cache/yunohost/ -name "etc_zabbix_zabbix_agentd.d_userP_yunohost.conf")
bashUserPpath=$(find /var/cache/yunohost/ -name "etc_zabbix_zabbix_agentd.d_yunohost.sh")
cp $sudoUserPpath /etc/sudoers.d/zabbix
cp $confUserPpath /etc/zabbix/zabbix_agentd.d/userP_yunohost.conf
cp $bashUserPpath /etc/zabbix/zabbix_agentd.d/yunohost.sh
chmod a+x /etc/zabbix/zabbix_agentd.d/yunohost.sh
systemctl restart zabbix-agent
curl -k -s --cookie cookiejar.txt --cookie-jar cookiejar.txt \
--form enter=Sign+in \
--form name=Admin \
--form password=zabbix \
"$zabbixFullpath/index.php"
sid=$(curl -k -s --cookie cookiejar.txt --cookie-jar cookiejar.txt \
"$zabbixFullpath/conf.import.php?rules_preset=template" \
| grep -Po 'name="sid" value="\K([a-z0-9]{16})(?=")' )
importState=$(curl -k -s --cookie cookiejar.txt --cookie-jar cookiejar.txt \
--form "config=1" \
--form "import_file=@$localpath" \
--form rules[groups][createMissing]=1 \
--form rules[templates][updateExisting]=1 \
--form rules[templates][createMissing]=1 \
--form rules[templateScreens][updateExisting]=1 \
--form rules[templateScreens][createMissing]=1 \
--form rules[templateLinkage][createMissing]=1 \
--form rules[applications][createMissing]=1 \
--form rules[items][updateExisting]=1 \
--form rules[items][createMissing]=1 \
--form rules[discoveryRules][updateExisting]=1 \
--form rules[discoveryRules][createMissing]=1 \
--form rules[triggers][updateExisting]=1 \
--form rules[triggers][createMissing]=1 \
--form rules[graphs][updateExisting]=1 \
--form rules[graphs][createMissing]=1 \
--form rules[httptests][updateExisting]=1 \
--form rules[httptests][createMissing]=1 \
--form rules[valueMaps][createMissing]=1 \
--form "import=Import" \
--form "backurl=templates.php" \
--form "form_refresh=1" \
--form "sid=${sid}" \ \
"${zabbixFullpath}/conf.import.php?rules_preset=template" \
| grep -c "Imported successfully")
if [ "$importState" -eq "1" ];then
ynh_print_info "Template Yunohost imported !"
else
ynh_print_warn "Template Yunohost not imported !"
fi
#apply template to host
tokenapi=$(curl -k -s --header "Content-Type: application/json" --request POST --data '{ "jsonrpc": "2.0","method": "user.login","params": {"user": "Admin","password": "zabbix"},"id": 1,"auth": null}' ${zabbixFullpath}/api_jsonrpc.php | jq -r '.result')
zabbixHostID=$(curl -k -s --header "Content-Type: application/json" --request POST --data '{"jsonrpc":"2.0","method":"host.get","params":{"filter":{"host":["Zabbix server"]}},"auth":"'$tokenapi'","id":1}' ${zabbixFullpath}/api_jsonrpc.php | jq -r '.result[0].hostid')
zabbixTemplateID=$(curl -k -s --header "Content-Type: application/json" --request POST --data '{"jsonrpc":"2.0","method":"template.get","params":{"filter":{"host":["Template Yunohost"]}},"auth":"'$tokenapi'","id":1}' ${zabbixFullpath}/api_jsonrpc.php | jq -r '.result[0].templateid')
applyTemplate=$(curl -k -s --header "Content-Type: application/json" --request POST --data '{"jsonrpc":"2.0","method":"host.massadd","params":{"hosts":[{"hostid":"'$zabbixHostID'"}],"templates":[{"templateid":"'$zabbixTemplateID'"}]},"auth":"'$tokenapi'","id":1}' ${zabbixFullpath}/api_jsonrpc.php | jq -r '.result.hostids[]')
if [ "$applyTemplate" -eq "$zabbixHostID" ];then
ynh_print_info "Template Yunohost linked to Zabbix server !"
else
ynh_print_warn "Template Yunohost no linked to Zabbix server !"
fi
import_template
#=================================================
# Link Yunohost template to the ZAbbix Server Host
#=================================================
link_template
#=================================================
# Disable default admin for security issue
#=================================================
haveDefaultAdminDisabled=$(mysql -BN -u$db_user -p$db_pwd $db_name -BN -e "SELECT count(id) from \`users_groups\` where userid=1 and usrgrpid=9")
if [ "$haveDefaultAdminDisabled" -eq 0 ] ;then
ynh_print_info "Disable default admin"
#disable default admin
lastid=$(mysql -u$db_user -p$db_pwd $db_name -BN -e "SELECT max(id) from \`users_groups\`")
lastid=$(($lastid + 1 ))
mysql -u$db_user -p$db_pwd $db_name -e "INSERT INTO \`users_groups\` (\`id\` , \`usrgrpid\`, \`userid\`) VALUES ($lastid ,9, 1);"
else
ynh_print_info "default admin already disabled"
fi
disable_admin_user
#=================================================
# Disable default guest for security issue
#=================================================
haveDefaultGuestDisabled=$(mysql -BN -u$db_user -p$db_pwd $db_name -BN -e "SELECT count(id) from \`users_groups\` where userid=2 and usrgrpid=9")
if [ "$haveDefaultGuestDisabled" -eq 0 ] ;then
echo "Disable default guest"
#disable default guest
lastid=$(mysql -u$db_user -p$db_pwd $db_name -BN -e "SELECT max(id) from \`users_groups\`")
lastid=$(($lastid + 1 ))
mysql -u$db_user -p$db_pwd $db_name -e "INSERT INTO \`users_groups\` (\`id\` , \`usrgrpid\`, \`userid\`) VALUES ($lastid ,9, 2);"
else
echo "default guest already disabled"
fi
disable_guest_user
#=================================================
# CHECK THE PATH
#=================================================
# Normalize the URL path syntax
path_url=$(ynh_normalize_url_path $path_url)
path_url=$(ynh_normalize_url_path "$path_url")
#REMOVE NONFREE PART PATCH IF NEEDED (snmp-mibs-downloader (non-free) installed in version 1)
nonfreepackagelist=$(dpkg-query -W -f='${Section}\t${Package}\n' | grep ^non-free)
if [ $(echo $nonfreepackagelist | wc -l) -eq 1 ] && [ $(echo $nonfreepackagelist | grep -c "snmp-mibs-downloader") -eq 1 ] ;then
ynh_print_info "Removing snmp-mibs-downloader (non-free package)"
sed -i.$(date "+%m%d%y") 's/ snmp-mibs-downloader,//g' /var/lib/dpkg/status
DEBIAN_FRONTEND=noninteractive apt purge snmp-mibs-downloader -y
if [ -f /etc/apt/sources.list.d/non-free.list ];then
ynh_secure_remove /etc/apt/sources.list.d/non-free.list
fi
fi
#=================================================
# STANDARD UPGRADE STEPS
@ -189,19 +104,19 @@ ynh_package_update
#REMOVE DUPLICATE LOG ENTRY IN LOGROTATE PATCH IF NEEDED
ynh_remove_logrotate
zabbixServerInstalledVersion=$(apt-cache policy zabbix-server-mysql | grep -Po "Installed: \K(.*)")
zabbixServerCandidateVersion=$(apt-cache policy zabbix-server-mysql | grep -Po "Candidate: \K(.*)")
zabbixServerInstalledVersion=$(apt-cache policy zabbix-server-mysql | sed -n '2p' | grep -Po ".*: \K(.*)")
zabbixServerCandidateVersion=$(apt-cache policy zabbix-server-mysql | sed -n '3p' | grep -Po ".*: \K(.*)")
zabbixFrontendInstalledVersion=$(apt-cache policy zabbix-frontend-php | grep -Po "Installed: \K(.*)")
zabbixFrontendCandidateVersion=$(apt-cache policy zabbix-frontend-php | grep -Po "Candidate: \K(.*)")
zabbixFrontendInstalledVersion=$(apt-cache policy zabbix-frontend-php | sed -n '2p' | grep -Po ".*: \K(.*)")
zabbixFrontendCandidateVersion=$(apt-cache policy zabbix-frontend-php | sed -n '3p' | grep -Po ".*: \K(.*)")
zabbixagentInstalledVersion=$(apt-cache policy zabbix-agent | grep -Po "Installed: \K(.*)")
zabbixagentCandidateVersion=$(apt-cache policy zabbix-agent | grep -Po "Candidate: \K(.*)")
zabbixagentInstalledVersion=$(apt-cache policy zabbix-agent | sed -n '2p' | grep -Po ".*: \K(.*)")
zabbixagentCandidateVersion=$(apt-cache policy zabbix-agent | sed -n '3p' | grep -Po ".*: \K(.*)")
if [ "$trustedversion" == "$zabbixServerCandidateVersion" ]
then
if [ "$zabbixServerInstalledVersion" != "$zabbixServerCandidateVersion" -o "$zabbixFrontendInstalledVersion" != "$zabbixFrontendCandidateVersion" -o "$zabbixagentInstalledVersion" != "$zabbixagentCandidateVersion" ]
if [ "$zabbixServerInstalledVersion" != "$zabbixServerCandidateVersion" ] || [ "$zabbixFrontendInstalledVersion" != "$zabbixFrontendCandidateVersion" ] || [ "$zabbixagentInstalledVersion" != "$zabbixagentCandidateVersion" ]
then
#=================================================
# BACKUP BEFORE UPGRADE THEN ACTIVE TRAP
@ -220,16 +135,13 @@ then
cp -p /usr/share/zabbix/conf/zabbix.conf.php /tmp/
DEBIAN_FRONTEND=noninteractive apt-mark unhold zabbix-server-mysql zabbix-frontend-php
DEBIAN_FRONTEND=noninteractive apt-get -y download zabbix-frontend-php
ar x *.deb
tar xzf control.tar.gz
sed -i 's/apache2 | httpd, //' control
tar --ignore-failed-read -cvzf control.tar.gz {post,pre}{inst,rm} md5sums control
ar rcs zabbix-frontend-php+stretch_all-noapache2.deb debian-binary control.tar.gz data.tar.xz
dpkg -i zabbix-frontend-php+stretch_all-noapache2.deb
rm -fr zabbix-*.deb
apt-get -y --only-upgrade install zabbix-server-mysql zabbix-agent
DEBIAN_FRONTEND=noninteractive apt-mark hold zabbix-server-mysql zabbix-frontend-php
ynh_print_info "Update and install dependencies"
ynh_package_update
ynh_install_app_dependencies libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.2-0 php7.0 php-bcmath php7.0-bcmath ttf-dejavu-core php7.0-bcmath patch smistrip unzip wget fping libcap2-bin libiksemel3 libopenipmi0 libpam-cap libsnmp-base libsnmp30 snmptrapd snmpd libjs-prototype jq
ynh_package_install zabbix-server-mysql zabbix-agent zabbix-frontend-php
DEBIAN_FRONTEND=noninteractive apt-mark hold zabbix-server-mysql zabbix-frontend-php
rm /usr/share/zabbix/conf/zabbix.conf.php
cp -rpf /tmp/zabbix /etc/
@ -248,13 +160,13 @@ fi
# RE-ENABLE SSOWAT
#=================================================
ynh_print_info "re-enable SSOWAT"
# Make app public if necessary
if [ $is_public -eq 1 ]
# Make app private if necessary
if [ $is_public -eq 0 ]
then
# unprotected_uris allows SSO credentials to be passed anyway.
ynh_app_setting_set $app unprotected_uris "/"
ynh_app_setting_delete "$app" unprotected_uris
else
ynh_app_setting_set $app unprotected_uris ""
ynh_app_setting_set "$app" unprotected_uris "/"
fi
systemctl reload nginx