mirror of
https://github.com/samply/bridgehead.git
synced 2026-06-23 19:40:18 +02:00
tm16-medma
63 lines
2.7 KiB
Plaintext
63 lines
2.7 KiB
Plaintext
PRIVATEKEYFILENAME=/etc/bridgehead/pki/${SITE_ID}.priv.pem
|
|
BROKER_URL_FOR_PREREQ=${OVIS_PREREQ_URL:-https://github.com}
|
|
|
|
: ${ENABLE_OVIS:=true}
|
|
: ${REQUIRES_BEAM:=false}
|
|
: ${OVIS_PUBLIC_BASE_PATH:=/ovis}
|
|
: ${OVIS_PUBLIC_ORIGIN:=https://${HOST}}
|
|
: ${KEYCLOAK_HTTP_RELATIVE_PATH:=${OVIS_PUBLIC_BASE_PATH}/keycloak}
|
|
: ${OVIS_KEYCLOAK_HOSTNAME:=${HOST}}
|
|
: ${OVIS_IMPORT_MODE:=demo}
|
|
: ${OVIS_GENERAL_IMAGE_NAMESPACE:=thewindmom}
|
|
: ${OVIS_IMAGE_TAG:=latest}
|
|
: ${PUBLIC_LOGIN_ENABLED:=false}
|
|
: ${PUBLIC_LDAP_ENABLED:=false}
|
|
: ${PUBLIC_SYSTEM_START_LANGUAGE:=en}
|
|
: ${PUBLIC_NAV_STUDY_ENABLED:=false}
|
|
: ${PUBLIC_NAV_USER_MANAGEMENT_ENABLED:=true}
|
|
: ${OVIS_SITE_CONFIG_DIR:=/etc/bridgehead/ovis}
|
|
: ${OVIS_RUNTIME_DIR:=$(pwd)/ovis/runtime}
|
|
: ${OVIS_SITE_DOWNLOADS_DIR:=${OVIS_RUNTIME_DIR}/downloads}
|
|
: ${OVIS_SITE_CERTS_DIR:=${OVIS_RUNTIME_DIR}/certs}
|
|
: ${OVIS_SITE_KEYCLOAK_REALM_FILE:=${OVIS_RUNTIME_DIR}/keycloak/ovis-realm.json}
|
|
: ${OVIS_CATALOGUE_FILE:=${OVIS_RUNTIME_DIR}/mongodb/ovis-catalogue.json}
|
|
: ${OVIS_MONGO_INIT_FILE:=${OVIS_RUNTIME_DIR}/mongodb/initdb.js}
|
|
: ${OVIS_OPS4_FILE:=${OVIS_RUNTIME_DIR}/mongodb/ops4.mjs}
|
|
: ${OVIS_CREDOS_EXPORT_DIR:=${OVIS_RUNTIME_DIR}/input/CREDOSExportFiles}
|
|
|
|
if [ "${ENABLE_OVIS}" = "true" ]; then
|
|
mkdir -p /var/cache/bridgehead/ovis || fail_and_report 1 "Failed to create /var/cache/bridgehead/ovis"
|
|
OVIS_CREDENTIALS_FILE=${OVIS_CREDENTIALS_FILE:-/var/cache/bridgehead/ovis/credentials.env}
|
|
|
|
ovis_random_secret() {
|
|
openssl rand -hex 24
|
|
}
|
|
|
|
if [ ! -f "$OVIS_CREDENTIALS_FILE" ]; then
|
|
umask 077
|
|
{
|
|
printf ': ${DB:=onc_test}\n'
|
|
printf ': ${EXPRESS_AUTH_USERNAME:=ovis-express}\n'
|
|
printf ': ${EXPRESS_AUTH_PASSWORD:=%s}\n' "$(ovis_random_secret)"
|
|
printf ': ${KEYCLOAK_ADMIN:=ovis-admin}\n'
|
|
printf ': ${KEYCLOAK_ADMIN_PASSWORD:=%s}\n' "$(ovis_random_secret)"
|
|
printf ': ${KEYCLOAK_REALM:=ovis}\n'
|
|
printf ': ${KEYCLOAK_CLIENT_ID:=ovis_client}\n'
|
|
printf ': ${KEYCLOAK_CLIENT_SECRET:=%s}\n' "$(ovis_random_secret)"
|
|
printf ': ${KEYCLOAK_ADMIN_CLIENT_ID:=admin-cli}\n'
|
|
printf ': ${KEYCLOAK_ADMIN_CLIENT_SECRET:=%s}\n' "$(ovis_random_secret)"
|
|
printf ': ${OVIS_ROOT_USERNAME:=ovis-root}\n'
|
|
printf ': ${OVIS_ROOT_PASSWORD:=%s}\n' "$(ovis_random_secret)"
|
|
printf ': ${POSTGRES_DB:=keycloak}\n'
|
|
printf ': ${POSTGRES_USER:=ovis_keycloak}\n'
|
|
printf ': ${POSTGRES_PASSWORD:=%s}\n' "$(ovis_random_secret)"
|
|
} > "$OVIS_CREDENTIALS_FILE"
|
|
fi
|
|
if [ "$(id -u)" -eq 0 ] && id bridgehead >/dev/null 2>&1; then
|
|
chown bridgehead /var/cache/bridgehead/ovis "$OVIS_CREDENTIALS_FILE"
|
|
fi
|
|
chmod 700 /var/cache/bridgehead/ovis
|
|
chmod 600 "$OVIS_CREDENTIALS_FILE"
|
|
source "$OVIS_CREDENTIALS_FILE"
|
|
fi
|