mirror of
https://github.com/samply/bridgehead.git
synced 2026-06-23 16:10:17 +02:00
Add general OVIS bridgehead project
This commit is contained in:
@@ -0,0 +1,62 @@
|
||||
PRIVATEKEYFILENAME=/etc/bridgehead/pki/${SITE_ID}.priv.pem
|
||||
BROKER_URL_FOR_PREREQ=${OVIS_PREREQ_URL:-https://github.com}
|
||||
|
||||
: ${ENABLE_OVIS:=true}
|
||||
: ${REQUIRES_BEAM:=false}
|
||||
: ${OVIS_PUBLIC_BASE_PATH:=/ovis}
|
||||
: ${OVIS_PUBLIC_ORIGIN:=https://${HOST}}
|
||||
: ${KEYCLOAK_HTTP_RELATIVE_PATH:=${OVIS_PUBLIC_BASE_PATH}/keycloak}
|
||||
: ${OVIS_KEYCLOAK_HOSTNAME:=${HOST}}
|
||||
: ${OVIS_IMPORT_MODE:=demo}
|
||||
: ${OVIS_GENERAL_IMAGE_NAMESPACE:=thewindmom}
|
||||
: ${OVIS_IMAGE_TAG:=latest}
|
||||
: ${PUBLIC_LOGIN_ENABLED:=false}
|
||||
: ${PUBLIC_LDAP_ENABLED:=false}
|
||||
: ${PUBLIC_SYSTEM_START_LANGUAGE:=en}
|
||||
: ${PUBLIC_NAV_STUDY_ENABLED:=false}
|
||||
: ${PUBLIC_NAV_USER_MANAGEMENT_ENABLED:=true}
|
||||
: ${OVIS_SITE_CONFIG_DIR:=/etc/bridgehead/ovis}
|
||||
: ${OVIS_RUNTIME_DIR:=$(pwd)/ovis/runtime}
|
||||
: ${OVIS_SITE_DOWNLOADS_DIR:=${OVIS_RUNTIME_DIR}/downloads}
|
||||
: ${OVIS_SITE_CERTS_DIR:=${OVIS_RUNTIME_DIR}/certs}
|
||||
: ${OVIS_SITE_KEYCLOAK_REALM_FILE:=${OVIS_RUNTIME_DIR}/keycloak/ovis-realm.json}
|
||||
: ${OVIS_CATALOGUE_FILE:=${OVIS_RUNTIME_DIR}/mongodb/ovis-catalogue.json}
|
||||
: ${OVIS_MONGO_INIT_FILE:=${OVIS_RUNTIME_DIR}/mongodb/initdb.js}
|
||||
: ${OVIS_OPS4_FILE:=${OVIS_RUNTIME_DIR}/mongodb/ops4.mjs}
|
||||
: ${OVIS_CREDOS_EXPORT_DIR:=${OVIS_RUNTIME_DIR}/input/CREDOSExportFiles}
|
||||
|
||||
if [ "${ENABLE_OVIS}" = "true" ]; then
|
||||
mkdir -p /var/cache/bridgehead/ovis || fail_and_report 1 "Failed to create /var/cache/bridgehead/ovis"
|
||||
OVIS_CREDENTIALS_FILE=${OVIS_CREDENTIALS_FILE:-/var/cache/bridgehead/ovis/credentials.env}
|
||||
|
||||
ovis_random_secret() {
|
||||
openssl rand -hex 24
|
||||
}
|
||||
|
||||
if [ ! -f "$OVIS_CREDENTIALS_FILE" ]; then
|
||||
umask 077
|
||||
{
|
||||
printf ': ${DB:=onc_test}\n'
|
||||
printf ': ${EXPRESS_AUTH_USERNAME:=ovis-express}\n'
|
||||
printf ': ${EXPRESS_AUTH_PASSWORD:=%s}\n' "$(ovis_random_secret)"
|
||||
printf ': ${KEYCLOAK_ADMIN:=ovis-admin}\n'
|
||||
printf ': ${KEYCLOAK_ADMIN_PASSWORD:=%s}\n' "$(ovis_random_secret)"
|
||||
printf ': ${KEYCLOAK_REALM:=ovis}\n'
|
||||
printf ': ${KEYCLOAK_CLIENT_ID:=ovis_client}\n'
|
||||
printf ': ${KEYCLOAK_CLIENT_SECRET:=%s}\n' "$(ovis_random_secret)"
|
||||
printf ': ${KEYCLOAK_ADMIN_CLIENT_ID:=admin-cli}\n'
|
||||
printf ': ${KEYCLOAK_ADMIN_CLIENT_SECRET:=%s}\n' "$(ovis_random_secret)"
|
||||
printf ': ${OVIS_ROOT_USERNAME:=ovis-root}\n'
|
||||
printf ': ${OVIS_ROOT_PASSWORD:=%s}\n' "$(ovis_random_secret)"
|
||||
printf ': ${POSTGRES_DB:=keycloak}\n'
|
||||
printf ': ${POSTGRES_USER:=ovis_keycloak}\n'
|
||||
printf ': ${POSTGRES_PASSWORD:=%s}\n' "$(ovis_random_secret)"
|
||||
} > "$OVIS_CREDENTIALS_FILE"
|
||||
fi
|
||||
if [ "$(id -u)" -eq 0 ] && id bridgehead >/dev/null 2>&1; then
|
||||
chown bridgehead /var/cache/bridgehead/ovis "$OVIS_CREDENTIALS_FILE"
|
||||
fi
|
||||
chmod 700 /var/cache/bridgehead/ovis
|
||||
chmod 600 "$OVIS_CREDENTIALS_FILE"
|
||||
source "$OVIS_CREDENTIALS_FILE"
|
||||
fi
|
||||
Reference in New Issue
Block a user