KazV2/bin/foreign-domain.sh

#!/bin/bash

# list/ajout/supprime/ les domaines extérieurs à kaz.bzh

KAZ_ROOT=$(cd "$(dirname $0)"/..; pwd)
. "${KAZ_ROOT}/bin/.commonFunctions.sh"
setKazVars

export PRG="$0"
cd $(dirname $0)

. "${DOCKERS_ENV}"

LETS_DIR="/etc/letsencrypt/$([ "${mode}" == "local" ] && echo "local" || echo "live")"

declare -a availableComposes availableOrga
availableComposes=(${pahekoHost} ${cloudHost} ${dokuwikiHost} ${wordpressHost} ${matterHost} ${castopodHost})
availableOrga=($(sed -e "s/\(.*\)[ \t]*#.*$/\1/" -e "s/^[ \t]*\(.*\)-orga$/\1/" -e "/^$/d" "${KAZ_CONF_DIR}/container-orga.list"))
availableProxyComposes=($(getList "${KAZ_CONF_DIR}/container-proxy.list"))

# no more export in .env
export $(set | grep "domain=")

export CMD=""
export SIMU=""
export CHANGE=""

usage(){
    echo "Usage: ${PRG} list [friend-domain...]"
    echo "       ${PRG} [-n] add orga [${pahekoHost} ${cloudHost} ${dokuwikiHost} ${wordpressHost} ${matterHost} ${castopodHost}] [friend-domain...] "
    echo "       ${PRG} [-n] del [friend-domain...]"
    echo "       ${PRG} -l"
    echo "  -l short list"
    echo "  -renewAll"
    echo "  -h help"
    echo "  -n simulation"
    exit 1
}

export CERT_CFG="${KAZ_CONF_PROXY_DIR}/foreign-certificate"

createCert () {
    (
	fileName="${LETS_DIR}/$1-key.pem"
	#[ -f "${fileName}" ] || return
	# if [ -f "${fileName}" ]; then
	#     fileTime=$(stat --format='%Y' "${fileName}")
	#     current_time=$(date +%s)
	#     if (( "${fileTime}" > ( "${current_time}" - ( 60 * 60 * 24 * 89 ) ) )); then
	# 	exit
	#     fi
	# fi
	printKazMsg "create certificat for $1"
	${SIMU} docker exec -i proxyServ bash -c "/opt/certbot/bin/certbot certonly -n --nginx -d $1"
    )

}

for ARG in $@; do
    case "${ARG}" in
	'-h' | '-help' )
	    usage
	    ;;
	'-n' )
	    shift
	    export SIMU="echo"
	    ;;
	'-renewAll')
	    for i in $("${KAZ_BIN_DIR}/foreign-domain.sh" -l); do
		echo "$i"
		createCert "$i" |grep failed
	    done
	    exit
	    ;;
	'-l')
	    for compose in ${availableComposes[@]} ; do
		grep "server_name" "${KAZ_CONF_PROXY_DIR}/${compose}_kaz_name" | sed -e "s/[ \t]*\([^#]*\)#.*/\1/g" -e "/^$/d" -e "s/.*server_name[ \t]\([^ ;]*\).*/\1/"
	    done
	    exit
	    ;;
	'list'|'add'|'del' )
	    shift
	    CMD="${ARG}"
	    break
	    ;;
	* )
	    usage
	    ;;
    esac
done

if [ -z "${CMD}" ]; then
    echo "Commande missing"
    usage
fi

########################################
badDomaine () {
    [[ -z "$1" ]] && return 0;
    [[ ! "$1" =~ ^[-.a-zA-Z0-9]*$ ]] && return 0;
    return 1
}
badOrga () {
    [[ -z "$1" ]] && return 0;
    [[ ! " ${availableOrga[*]} " =~ " $1 " ]] && return 0
    return 1
}
badCompose () {
    [[ -z "$1" ]] && return 0;
    [[ ! " ${availableComposes[*]} " =~ " $1 " ]] && return 0
    return 1
}

########################################
listServ () {
    for compose in ${availableComposes[@]} ; do
	sed -e "s/[ \t]*\([^#]*\)#.*/\1/g" -e "/^$/d" -e "s/.*server_name[ \t]\([^ ;]*\).*/\1 : ${compose}/" "${KAZ_CONF_PROXY_DIR}/${compose}_kaz_name"
    done
}

listOrgaServ () {
    for compose in ${availableComposes[@]} ; do
	sed -e "s/[ \t]*\([^#]*\)#.*/\1/g" -e "/^$/d" -e "s/\([^ ]*\)[ \t]*\([^ \t;]*\).*/\1 => \2 : ${compose}/" "${KAZ_CONF_PROXY_DIR}/${compose}_kaz_map"
    done
}

########################################
list () {
    previousOrga=$(listOrgaServ)
    previousServ=$(listServ)
    if [ $# -lt 1 ]; then
	[ -n "${previousOrga}" ] && echo "${previousOrga}"
	[ -n "${previousServ}" ] && echo "${previousServ}"
	return
    fi
    for ARG in $@
    do
	orga=$(echo "${previousOrga}" | grep "${ARG}.* =>")
	serv=$(echo "${previousServ}" | grep "${ARG}.* =>")
	[ -n "${orga}" ] && echo "${orga}"
	[ -n "${serv}" ] && echo "${serv}"
    done
}

########################################
add () {
    # $1 : orga
    # $2 : service
    # $3 : friend-domain
    [ $# -lt 3 ] && usage
    badOrga $1 && echo "bad orga: ${RED}$1${NC} not in ${GREEN}${availableOrga[@]}${NC}" && usage
    badCompose $2 && echo "bad compose: ${RED}$2${NC} not in ${GREEN}${availableComposes[@]}${NC}" && usage
    ORGA=$1
    COMPOSE=$2
    shift; shift
    CLOUD_SERVNAME="${ORGA}-${nextcloudServName}"
    CLOUD_CONFIG="${DOCK_VOL}/orga_${ORGA}-cloudConfig/_data/config.php"

    # XXX check compose exist in orga ?
    # /kaz/bin/kazList.sh service enable ${ORGA}
    if [ "${COMPOSE}" = "${cloudHost}" ]; then
	if ! [[ "$(docker ps -f name=${CLOUD_SERVNAME} | grep -w ${CLOUD_SERVNAME})" ]]; then
	    printKazError "${CLOUD_SERVNAME} not running... abort"
	    exit
	fi
    fi

    for FRIEND in $@; do
	badDomaine "${FRIEND}"  && echo "bad domaine: ${RED}${FRIEND}${NC}" && usage
    done

    for FRIEND in $@; do
	createCert "${FRIEND}"
	if [ "${COMPOSE}" = "${cloudHost}" ]; then
	    IDX=$(awk  'BEGIN {flag=0; cpt=0} /trusted_domains/ {flag=1} /)/ {if (flag) {print cpt+1; exit 0}} / => / {if (flag && cpt<$1) cpt=$1}' "${CLOUD_CONFIG}")
	    ${SIMU} docker exec -ti -u 33 "${CLOUD_SERVNAME}" /var/www/html/occ config:system:set trusted_domains "${IDX}" --value="${FRIEND}"
	fi
	
	previousOrga=$(listOrgaServ | grep "${FRIEND}")
	[[ " ${previousOrga}" =~ " ${FRIEND} => ${ORGA} : ${COMPOSE}" ]] && echo "  - already done" && continue
	[[ " ${previousOrga}" =~ " ${FRIEND} " ]] && echo "  - ${YELLOW}${BOLD}$(echo "${previousOrga}" | grep -e "${FRIEND}")${NC} must be deleted before" && return
	if [[ -n "${SIMU}" ]] ; then
	    echo "${FRIEND} ${ORGA}; => ${KAZ_CONF_PROXY_DIR}/${COMPOSE}_kaz_map"
	    cat <<EOF
    => ${KAZ_CONF_PROXY_DIR}/${COMPOSE}_kaz_name
server_name ${FRIEND};
EOF
	else
	    echo "${FRIEND} ${ORGA};" >> "${KAZ_CONF_PROXY_DIR}/${COMPOSE}_kaz_map"
	    cat  >> "${KAZ_CONF_PROXY_DIR}/${COMPOSE}_kaz_name" <<EOF
server_name ${FRIEND};
EOF
	fi
	echo "${PRG}: ${FRIEND} added"
	
	CHANGE="add"
    done
    #(cd "${KAZ_COMP_DIR}/${ORGA}-orga"; docker-compose restart)
}

########################################
del () {
    [ $# -lt 1 ] && usage

    for FRIEND in $@; do
	badDomaine "${FRIEND}"  && echo "bad domaine: ${RED}${FRIEND}${NC}" && usage
	previous=$(listOrgaServ | grep -e "${FRIEND}")
	[[ ! "${previous}" =~ ^${FRIEND} ]] && echo "${FRIEND} not found in ${previous}" && continue
	# XXX if done OK
	for COMPOSE in ${availableComposes[@]} ; do
	    if grep -q -e "^[ \t]*${FRIEND}[ \t]" "${KAZ_CONF_PROXY_DIR}/${COMPOSE}_kaz_map" ; then
		if [ "${COMPOSE}" = "${cloudHost}" ]; then
		    ORGA="$(grep "${FRIEND}" "${KAZ_CONF_PROXY_DIR}/${COMPOSE}_kaz_map" | sed "s/^${FRIEND}\s*\([^;]*\);/\1/")"
		    CLOUD_CONFIG="${DOCK_VOL}/orga_${ORGA}-cloudConfig/_data/config.php"
		    ${SIMU} sed -e "/\d*\s*=>\s*'${FRIEND}'/d" -i "${CLOUD_CONFIG}"
		fi
		${SIMU} sed -e "/^[ \t]*${FRIEND}[ \t]/d" -i "${KAZ_CONF_PROXY_DIR}/${COMPOSE}_kaz_map"
	    fi
	    if grep -q -e "^[ \t]*server_name ${FRIEND};" "${KAZ_CONF_PROXY_DIR}/${COMPOSE}_kaz_name" ; then
		${SIMU} sed -i "${KAZ_CONF_PROXY_DIR}/${COMPOSE}_kaz_name" \
			-e "/^[ \t]*server_name ${FRIEND};/d"
	    fi
	done
	echo "${PRG}: ${FRIEND} deleted"
	CHANGE="del"
    done
}

########################################
${CMD} $@

if [ -n "${CHANGE}" ] ; then
    echo "Reload proxy conf"
	for item in "${availableProxyComposes[@]}"; do
    	${SIMU} ${KAZ_COMP_DIR}/${item}/proxy-gen.sh
    	${SIMU} "${KAZ_COMP_DIR}/proxy/reload.sh"
    done
fi

########################################