mirror of
https://github.com/TrezOne/docker-mods-uptime-kuma-timeout-fix.git
synced 2026-06-29 03:33:19 -04:00
swag-auto-proxy: initial commit
This commit is contained in:
aptalca
Executable
+145
@@ -0,0 +1,145 @@
|
||||
#!/usr/bin/with-contenv bash
|
||||
|
||||
AUTO_GEN=""
|
||||
# figure out which containers to generate confs for or which confs to remove
|
||||
if [ ! -f /auto-proxy/enabled_containers ]; then
|
||||
docker ps --filter "label=swag=enable" --format "{{.Names}}" > /auto-proxy/enabled_containers
|
||||
AUTO_GEN=$(cat /auto-proxy/enabled_containers)
|
||||
else
|
||||
ENABLED_CONTAINERS=$(docker ps --filter "label=swag=enable" --format "{{.Names}}")
|
||||
for CONTAINER in ${ENABLED_CONTAINERS}; do
|
||||
if [ ! -f "/auto-proxy/${CONTAINER}.conf" ]; then
|
||||
echo "**** New container ${CONTAINER} detected, will generate new conf. ****"
|
||||
AUTO_GEN="${CONTAINER} ${AUTO_GEN}"
|
||||
else
|
||||
INSPECTION=$(docker inspect ${CONTAINER})
|
||||
for VAR in swag_port swag_proto swag_url swag_auth swag_auth_bypass; do
|
||||
VAR_VALUE=$(echo ${INSPECTION} | jq -r ".[0].Config.Labels[\"${VAR}\"]")
|
||||
if [ "${VAR_VALUE}" == "null" ]; then
|
||||
VAR_VALUE=""
|
||||
fi
|
||||
if ! grep -q "${VAR}=\"${VAR_VALUE}\"" "/auto-proxy/${CONTAINER}.conf"; then
|
||||
AUTO_GEN="${CONTAINER} ${AUTO_GEN}"
|
||||
echo "**** Labels for ${CONTAINER} changed, will generate new conf. ****"
|
||||
break
|
||||
fi
|
||||
done
|
||||
fi
|
||||
done
|
||||
EXISTING_CONFS=$(cat /auto-proxy/enabled_containers)
|
||||
for CONTAINER in $EXISTING_CONFS; do
|
||||
if ! grep -q "${CONTAINER}" <<< "${ENABLED_CONTAINERS}"; then
|
||||
echo "**** Removing conf for ${CONTAINER} ****"
|
||||
rm -rf "/auto-proxy/${CONTAINER}.conf" "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
REMOVED_CONTAINERS="true"
|
||||
fi
|
||||
done
|
||||
echo "${ENABLED_CONTAINERS}" > /auto-proxy/enabled_containers
|
||||
fi
|
||||
|
||||
for CONTAINER in ${AUTO_GEN}; do
|
||||
INSPECTION=$(docker inspect ${CONTAINER})
|
||||
rm -rf "/auto-proxy/${CONTAINER}.conf"
|
||||
for VAR in swag_port swag_proto swag_url swag_auth swag_auth_bypass; do
|
||||
VAR_VALUE=$(echo ${INSPECTION} | jq -r ".[0].Config.Labels[\"${VAR}\"]")
|
||||
if [ "${VAR_VALUE}" == "null" ]; then
|
||||
VAR_VALUE=""
|
||||
fi
|
||||
echo "${VAR}=\"${VAR_VALUE}\"" >> "/auto-proxy/${CONTAINER}.conf"
|
||||
done
|
||||
. /auto-proxy/${CONTAINER}.conf
|
||||
if [ -f "/config/nginx/proxy-confs/${CONTAINER}.subdomain.conf.sample" ]; then
|
||||
cp "/config/nginx/proxy-confs/${CONTAINER}.subdomain.conf.sample" "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
echo "**** Using preset proxy conf for ${CONTAINER} ****"
|
||||
if [ -n "${swag_auth_bypass}" ]; then
|
||||
echo "**** Swag auth bypass is auto managed via preset confs and cannot be overridden via env vars ****"
|
||||
fi
|
||||
if [ -n "${swag_port}" ]; then
|
||||
sed -i "s|set \$upstream_port .*|set \$upstream_port ${swag_port};|g" "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
echo "**** Overriding port for ${CONTAINER} ****"
|
||||
fi
|
||||
if [ -n "${swag_proto}" ]; then
|
||||
sed -i "s|set \$upstream_proto .*|set \$upstream_proto ${swag_proto};|g" "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
echo "**** Overriding proto for ${CONTAINER} ****"
|
||||
fi
|
||||
if [ -n "${swag_url}" ]; then
|
||||
sed -i "s|server_name .*|server_name ${swag_url};|" "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
echo "**** Overriding url for ${CONTAINER} ****"
|
||||
fi
|
||||
if [ "${swag_auth}" == "authelia" ]; then
|
||||
sed -i "s|#include /config/nginx/authelia|include /config/nginx/authelia|g" "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
echo "**** Enabling Authelia for ${CONTAINER} ****"
|
||||
elif [ "${swag_auth}" == "http" ]; then
|
||||
sed -i "s|#auth_basic|auth_basic|g" "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
echo "**** Enabling basic http auth for ${CONTAINER} ****"
|
||||
elif [ "${swag_auth}" == "ldap" ]; then
|
||||
sed -i "s|#include /config/nginx/ldap.conf;|include /config/nginx/ldap.conf;|g" "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
sed -i "s|#auth_request /auth;|auth_request /auth;|g" "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
sed -i "s|#error_page 401 =200 /ldaplogin;|error_page 401 =200 /ldaplogin;|g" "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
echo "**** Enabling basic http auth for ${CONTAINER} ****"
|
||||
fi
|
||||
else
|
||||
echo "**** No preset proxy conf found for ${CONTAINER}, generating from scratch ****"
|
||||
cp "/config/nginx/proxy-confs/_template.subdomain.conf.sample" "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
if [ -n "${swag_auth_bypass}" ]; then
|
||||
sed -i 's|^}$||' "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
for location in $(echo ${swag_auth_bypass} | tr "," " "); do
|
||||
cat <<DUDE >> "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
|
||||
location ~ ${location} {
|
||||
include /config/nginx/proxy.conf;
|
||||
include /config/nginx/resolver.conf;
|
||||
set \$upstream_app <container_name>;
|
||||
set \$upstream_port <port_number>;
|
||||
set \$upstream_proto <http or https>;
|
||||
proxy_pass \$upstream_proto://\$upstream_app:\$upstream_port;
|
||||
|
||||
}
|
||||
|
||||
DUDE
|
||||
done
|
||||
echo "}" >> "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
fi
|
||||
sed -i "s|<container_name>|${CONTAINER}|g" "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
if [ -z "${swag_port}" ]; then
|
||||
swag_port=$(docker inspect ${CONTAINER} | jq -r '.[0].NetworkSettings.Ports | keys[0]' | sed 's|/.*||')
|
||||
if [ "${swag_port}" == "null" ]; then
|
||||
echo "**** No exposed ports found for ${CONTAINER}. Setting reverse proxy port to 80. ****"
|
||||
swag_port="80"
|
||||
fi
|
||||
fi
|
||||
sed -i "s|set \$upstream_port .*|set \$upstream_port ${swag_port};|g" "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
echo "**** Setting port ${swag_port} for ${CONTAINER} ****"
|
||||
if [ -z "${swag_proto}" ]; then
|
||||
swag_proto="http"
|
||||
fi
|
||||
sed -i "s|set \$upstream_proto .*|set \$upstream_proto ${swag_proto};|g" "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
echo "**** Setting proto ${swag_proto} for ${CONTAINER} ****"
|
||||
if [ -z "${swag_url}" ]; then
|
||||
swag_url="${CONTAINER}.*"
|
||||
fi
|
||||
sed -i "s|server_name .*|server_name ${swag_url};|" "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
echo "**** Setting url ${swag_url} for ${CONTAINER} ****"
|
||||
if [ "${swag_auth}" == "authelia" ]; then
|
||||
sed -i "s|#include /config/nginx/authelia|include /config/nginx/authelia|g" "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
echo "**** Enabling Authelia for ${CONTAINER} ****"
|
||||
elif [ "${swag_auth}" == "http" ]; then
|
||||
sed -i "s|#auth_basic|auth_basic|g" "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
echo "**** Enabling basic http auth for ${CONTAINER} ****"
|
||||
elif [ "${swag_auth}" == "ldap" ]; then
|
||||
sed -i "s|#include /config/nginx/ldap.conf;|include /config/nginx/ldap.conf;|g" "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
sed -i "s|#auth_request /auth;|auth_request /auth;|g" "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
sed -i "s|#error_page 401 =200 /ldaplogin;|error_page 401 =200 /ldaplogin;|g" "/config/nginx/proxy-confs/auto-proxy-${CONTAINER}.subdomain.conf"
|
||||
echo "**** Enabling basic http auth for ${CONTAINER} ****"
|
||||
fi
|
||||
fi
|
||||
done
|
||||
|
||||
if ([ -n "${AUTO_GEN}" ] || [ "${REMOVED_CONTAINERS}" == "true" ]) && ps aux | grep [n]ginx: > /dev/null; then
|
||||
if /usr/sbin/nginx -c /config/nginx/nginx.conf -t; then
|
||||
echo "**** Changes to nginx config are valid, reloading nginx ****"
|
||||
/usr/sbin/nginx -c /config/nginx/nginx.conf -s reload
|
||||
else
|
||||
echo "**** Changes to nginx config are not valid, skipping nginx reload. Please double check the config including the auto-proxy confs. ****"
|
||||
fi
|
||||
fi
|
||||
@@ -0,0 +1,2 @@
|
||||
The files named "auto-proxy-<servicename>.subdomain.conf" are managed by the SWAG-auto-proxy mod.
|
||||
*** Do not manually modify those files ***
|
||||
@@ -0,0 +1,4 @@
|
||||
#!/usr/bin/with-contenv bash
|
||||
|
||||
sed -i '/\/app\/auto-proxy.sh/d' /config/crontabs/root
|
||||
rm -rf /config/nginx/proxy-confs/auto-proxy*.conf
|
||||
@@ -0,0 +1,18 @@
|
||||
#!/usr/bin/with-contenv bash
|
||||
|
||||
if [ ! -f /usr/local/bin/docker ]; then
|
||||
echo "**** Docker mod not installed, skipping SWAG auto-proxy ****"
|
||||
exit 0
|
||||
fi
|
||||
|
||||
rm -rf /config/nginx/proxy-confs/auto-proxy*.conf
|
||||
cp /defaults/auto-proxy-readme /config/nginx/proxy-confs/auto-proxy-readme
|
||||
rm -rf /auto-proxy
|
||||
mkdir /auto-proxy
|
||||
|
||||
if ! grep -q "/app/auto-proxy.sh" /config/crontabs/root; then
|
||||
echo "* * * * * /app/auto-proxy.sh" >> /config/crontabs/root
|
||||
cp /config/crontabs/root /etc/crontabs/root
|
||||
fi
|
||||
|
||||
/app/auto-proxy.sh
|
||||
@@ -1,27 +0,0 @@
|
||||
#!/usr/bin/with-contenv bash
|
||||
|
||||
# Determine if setup is needed
|
||||
if [ ! -f /usr/local/lib/python***/dist-packages/sshuttle ] && \
|
||||
[ -f /usr/bin/apt ]; then
|
||||
## Ubuntu
|
||||
apt-get update
|
||||
apt-get install --no-install-recommends -y \
|
||||
iptables \
|
||||
openssh-client \
|
||||
python3 \
|
||||
python3-pip
|
||||
pip3 install sshuttle
|
||||
fi
|
||||
if [ ! -f /usr/lib/python***/site-packages/sshuttle ] && \
|
||||
[ -f /sbin/apk ]; then
|
||||
# Alpine
|
||||
apk add --no-cache \
|
||||
iptables \
|
||||
openssh \
|
||||
py3-pip \
|
||||
python3
|
||||
pip3 install sshuttle
|
||||
fi
|
||||
|
||||
chown -R root:root /root
|
||||
chmod -R 600 /root/.ssh
|
||||
@@ -1,3 +0,0 @@
|
||||
#!/usr/bin/with-contenv bash
|
||||
|
||||
sshuttle --dns --remote root@${HOST}:${PORT} 0/0 -x 172.17.0.0/16
|
||||
Reference in New Issue
Block a user