mirror of
https://github.com/wireadmin/wireadmin
synced 2025-01-23 04:17:00 +00:00
97 lines
2.9 KiB
Bash
97 lines
2.9 KiB
Bash
#!/usr/bin/dumb-init /bin/bash
|
|
set -e
|
|
|
|
# Note above that we run dumb-init as PID 1 in order to reap zombie processes
|
|
# as well as forward signals to all processes in its session. Normally, sh
|
|
# wouldn't do either of these functions so we'd leak zombies as well as do
|
|
# unclean termination of all our sub-processes.
|
|
|
|
# Prevent core dumps
|
|
ulimit -c 0
|
|
|
|
# Checking if there is /data folder
|
|
if [ ! -d "/data" ]; then
|
|
mkdir -p /data
|
|
chmod 700 /data
|
|
fi
|
|
|
|
mkdir -p /var/vlogs
|
|
|
|
function remove_duplicated_lines() {
|
|
local file="$1"
|
|
local temp_file="/tmp/$(basename "$file")"
|
|
awk '!seen[$0]++' "$file" >"$temp_file"
|
|
mv "$temp_file" "$file"
|
|
}
|
|
|
|
function remove_duplicate_env() {
|
|
local file="$1"
|
|
local temp_file="/tmp/$(basename "$file")"
|
|
awk -F "=" -e '!seen[$1]++' "$file" >"$temp_file"
|
|
mv "$temp_file" "$file"
|
|
}
|
|
|
|
touch /app/.env.local
|
|
chmod 400 /app/.env.local
|
|
|
|
echo "NEXTAUTH_SECRET=$(openssl rand -base64 32)" >>/app/.env.local
|
|
|
|
# Checking if there is `UI_PASSWORD` environment variable
|
|
# if there was, converting it to hex and storing it to
|
|
# the .env.local
|
|
if [ -n "$UI_PASSWORD" ]; then
|
|
ui_password_hex=$(echo -n "$UI_PASSWORD" | xxd -ps -u)
|
|
sed -e '/^HASHED_PASSWORD=/d' /app/.env.local
|
|
echo "HASHED_PASSWORD=$ui_password_hex" >>/app/.env.local
|
|
unset UI_PASSWORD
|
|
fi
|
|
|
|
remove_duplicate_env "/app/.env.local"
|
|
|
|
# IP address of the container
|
|
inet_address="$(hostname -i | awk '{print $1}')"
|
|
|
|
sed -i "s/{{INET_ADDRESS}}/$inet_address/g" /etc/tor/torrc
|
|
|
|
# if /etc/tor/bridges was mounted, use those bridges
|
|
if [ "$TOR_USE_BRIDGES" = "true" ]; then
|
|
echo "Using bridges..."
|
|
tee -a /etc/tor/torrc <<EOF
|
|
|
|
# Using Bridges, obsf4
|
|
UseBridges 1
|
|
ClientTransportPlugin obfs4 exec /usr/local/bin/obfs4proxy managed
|
|
|
|
EOF
|
|
cat /etc/tor/bridges >>/etc/tor/torrc
|
|
fi
|
|
|
|
# any other environment variables that start with TOR_ are added to the torrc
|
|
# file
|
|
env | grep ^TOR_ | sed -e 's/TOR_//' -e 's/=/ /' >>/etc/tor/torrc
|
|
|
|
# Removing duplicated lines form /etc/tor/torrc file
|
|
remove_duplicated_lines "/etc/tor/torrc"
|
|
|
|
# Start Tor on the background
|
|
screen -L -Logfile /var/vlogs/tor -dmS tor bash -c "tor -f /etc/tor/torrc"
|
|
|
|
# Starting Redis server in detached mode
|
|
screen -L -Logfile /var/vlogs/redis -dmS redis bash -c "redis-server --port 6479 --daemonize no --dir /data --appendonly yes"
|
|
|
|
sleep 1
|
|
echo -e "\n======================== Versions ========================"
|
|
echo -e "Alpine Version: \c" && cat /etc/alpine-release
|
|
echo -e "WireGuard Version: \c" && wg -v | head -n 1 | awk '{print $1,$2}'
|
|
echo -e "Tor Version: \c" && tor --version | head -n 1
|
|
echo -e "Obfs4proxy Version: \c" && obfs4proxy -version
|
|
echo -e "\n========================= Torrc ========================="
|
|
cat /etc/tor/torrc
|
|
echo -e "========================================================\n"
|
|
sleep 1
|
|
|
|
# After 10 seconds, export the database to the WireGuard config file
|
|
screen -dm bash -c "sleep 10; curl -s -o /dev/null http://127.0.0.1:3000/api/wireguard/regen"
|
|
|
|
exec "$@"
|