JulienAldon
1de2fe9ab4
Fix script environment variables Add Fefan configuration Fix gateway services file provisionning through ssh
104 lines
2.7 KiB
Bash
104 lines
2.7 KiB
Bash
#!/bin/bash
|
|
set -euo pipefail
|
|
|
|
source /opt/environment/.env
|
|
|
|
# Gitea user
|
|
if ! id -u $GITEA_USER >/dev/null 2>&1; then
|
|
adduser \
|
|
--system \
|
|
--shell /bin/bash \
|
|
--gecos 'Git Version Control' \
|
|
--group \
|
|
--disabled-password \
|
|
--home /home/git \
|
|
$GITEA_USER
|
|
fi
|
|
echo "---- Gitea user created ----"
|
|
|
|
# Gitea folder structure
|
|
mkdir -p $GITEA_HOME/{custom,data,log}
|
|
chown -R $GITEA_USER:$GITEA_USER $GITEA_HOME
|
|
chmod -R 750 $GITEA_HOME
|
|
|
|
mkdir -p /home/$GITEA_USER/.ssh
|
|
touch /home/$GITEA_USER/.ssh/authorized_keys
|
|
chown -R $GITEA_USER:$GITEA_USER /home/$GITEA_USER/.ssh
|
|
chmod 700 /home/$GITEA_USER/.ssh
|
|
chmod 600 /home/$GITEA_USER/.ssh/authorized_keys
|
|
|
|
if [ ! -f $GITEA_BINARY ]; then
|
|
wget -O /tmp/gitea "https://dl.gitea.com/gitea/$GITEA_VERSION/gitea-$GITEA_VERSION-linux-amd64"
|
|
chmod +x /tmp/gitea
|
|
mv /tmp/gitea $GITEA_BINARY
|
|
fi
|
|
echo "---- Gitea folder structure created ----"
|
|
|
|
# Postgres initial config
|
|
DB_PASS=$(openssl rand -base64 12)
|
|
sudo -u postgres psql <<EOF
|
|
CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';
|
|
CREATE DATABASE $DB_NAME WITH OWNER $DB_USER TEMPLATE template0 ENCODING UTF8 LC_COLLATE 'en_US.UTF-8' LC_CTYPE 'en_US.UTF-8';
|
|
EOF
|
|
|
|
if ls -1 "$SERVICE_BACKUPS_DIR"/$SERVICE_BACKUPS_PREFIX-*.$SERVICE_BACKUPS_EXTENSION >/dev/null 2>&1; then
|
|
echo "---- Backup found, restoring Gitea ----"
|
|
/usr/local/bin/restore-backup.sh
|
|
else
|
|
echo "---- No backup found in $SERVICE_BACKUPS_DIR, skipping restore ----"
|
|
fi
|
|
|
|
sudo chown -R $GITEA_USER:$GITEA_USER $SERVICE_BACKUPS_DIR
|
|
sudo chmod -R 770 $SERVICE_BACKUPS_DIR
|
|
|
|
GITEA_SECRET_KEY=$("$GITEA_BINARY" generate secret SECRET_KEY)
|
|
GITEA_JWT_SECRET=$("$GITEA_BINARY" generate secret JWT_SECRET)
|
|
GITEA_INTERNAL_TOKEN=$("$GITEA_BINARY" generate secret INTERNAL_TOKEN)
|
|
|
|
mkdir -p $(dirname "$GITEA_CONF")
|
|
cat > "$GITEA_CONF" <<EOF
|
|
[database]
|
|
DB_TYPE = postgres
|
|
HOST = 127.0.0.1:5432
|
|
NAME = $DB_NAME
|
|
USER = $DB_USER
|
|
PASSWD = $DB_PASS
|
|
SSL_MODE = disable
|
|
|
|
[security]
|
|
INSTALL_LOCK = true
|
|
SECRET_KEY = $GITEA_SECRET_KEY
|
|
JWT_SECRET = $GITEA_JWT_SECRET
|
|
INTERNAL_TOKEN = $GITEA_INTERNAL_TOKEN
|
|
|
|
[server]
|
|
DOMAIN = gitea.aldon.fr
|
|
SSH_AUTHORIZED_KEYS = /home/git/.ssh/authorized_keys
|
|
HTTP_PORT = 3000
|
|
ROOT_URL = https://gitea.aldon.fr
|
|
DISABLE_SSH = false
|
|
SSH_PORT = 22
|
|
|
|
[repository]
|
|
ROOT = /var/lib/gitea/data/repositories
|
|
|
|
[service]
|
|
DISABLE_REGISTRATION = true
|
|
|
|
[actions]
|
|
ENABLED=true
|
|
EOF
|
|
echo "---- Generated Gitea app.ini with secrets ----"
|
|
|
|
chown $GITEA_USER:$GITEA_USER $GITEA_CONF
|
|
chmod 640 $GITEA_CONF
|
|
|
|
systemctl daemon-reload
|
|
systemctl enable gitea
|
|
|
|
sudo -u git gitea --config $GITEA_CONF admin regenerate keys
|
|
|
|
systemctl is-active --quiet gitea || systemctl start gitea
|
|
|
|
|
|
echo "---- Gitea installation completed ----" |