129 lines
4.2 KiB
Bash
129 lines
4.2 KiB
Bash
#!/hint/bash -euE
|
|
# Copyright (C) 2023-2024 Umorpha Systems
|
|
# SPDX-License-Identifier: AGPL-3.0-or-later
|
|
|
|
load_module "$(dirname -- "${BASH_SOURCE[0]}")/base-uwsgi.sh"
|
|
load_module "$(dirname -- "${BASH_SOURCE[0]}")/base-nginx.sh"
|
|
load_module "$(dirname -- "${BASH_SOURCE[0]}")/base-mariadb.sh"
|
|
|
|
packages+=(
|
|
uwsgi-plugin-php
|
|
)
|
|
|
|
post_install+=(20:bookstack:post_install)
|
|
bookstack:post_install() {
|
|
local arg_mountpoint=$1
|
|
|
|
install -Dm644 /dev/stdin "$arg_mountpoint/etc/nginx/sites/bookstack.conf" <<-'EOF'
|
|
# -*- mode: nginx; nginx-indent-level: 4; intent-tabs-mode: nil -*-
|
|
server {
|
|
server_name bookstack.mothstuff.lol;
|
|
include /etc/nginx/snippets/listen.conf;
|
|
error_log /var/log/nginx/main-error.http.bookstack.mothstuff.lol.log error;
|
|
|
|
root /usr/share/webapps/bookstack/public;
|
|
index index.php index.html;
|
|
|
|
location / {
|
|
try_files $uri $uri/ /index.php?$query_string;
|
|
}
|
|
|
|
location /index.php {
|
|
uwsgi_cache_key $host$request_uri;
|
|
uwsgi_cache_valid 5m;
|
|
|
|
include uwsgi_params;
|
|
uwsgi_modifier1 14; # Standard PHP request
|
|
uwsgi_pass unix:/run/uwsgi/bookstack.sock;
|
|
}
|
|
}
|
|
EOF
|
|
|
|
install -Dm755 /dev/stdin "$arg_mountpoint/etc/webapps/bookstack/config.env.gen" <<-'EOF'
|
|
#!/usr/bin/env bash
|
|
cat <<CFGEOF
|
|
APP_KEY=$(cat /etc/umorpha-secrets/bookstack-app-key.txt)
|
|
APP_URL=https://bookstack.mothstuff.lol
|
|
|
|
DB_HOST=localhost
|
|
DB_DATABASE=bookstack
|
|
DB_USERNAME=bookstack
|
|
|
|
MAIL_DRIVER=smtp
|
|
MAIL_HOST=mail.infomaniak.com
|
|
MAIL_PORT=465
|
|
MAIL_ENCRYPTION=tls
|
|
MAIL_USERNAME=$(cat /etc/umorpha-secrets/bookstack-infomaniak-mailaddr.txt)
|
|
MAIL_PASSWORD=$(cat /etc/umorpha-secrets/bookstack-infomaniak-mailpassword.txt)
|
|
MAIL_FROM=$(cat /etc/umorpha-secrets/bookstack-infomaniak-mailaddr.txt)
|
|
MAIL_FROM_NAME="Umorpha BookStack"
|
|
|
|
AUTH_METHOD=oidc
|
|
AUTH_AUTO_INITIATE=false
|
|
OIDC_NAME=Infomaniak
|
|
OIDC_DISPLAY_NAME_CLAIMS=name
|
|
OIDC_CLIENT_ID=$(cat /etc/umorpha-secrets/bookstack-infomaniak-clientid.txt)
|
|
OIDC_CLIENT_SECRET=$(cat /etc/umorpha-secrets/bookstack-infomaniak-clientsecret.txt)
|
|
OIDC_ISSUER=https://login.infomaniak.com
|
|
OIDC_ISSUER_DISCOVER=true
|
|
CFGEOF
|
|
EOF
|
|
|
|
# https://github.com/BookStackApp/BookStack/pull/4726
|
|
local patchfile
|
|
patchfile=$(realpath -- "$(dirname -- "${BASH_SOURCE[0]}")/0001-Oidc-Properly-query-the-UserInfo-Endpoint.patch")
|
|
pushd "$arg_mountpoint/usr/share/webapps/bookstack"
|
|
patch -p1 -i "$patchfile"
|
|
popd
|
|
|
|
install -Dm644 /dev/stdin "$arg_mountpoint/etc/systemd/system/bookstack-init.service" <<-'EOF'
|
|
[Unit]
|
|
Description=Initialize BookStack configuration
|
|
Before=uwsgi@bookstack.service
|
|
Requires=mariadb.service
|
|
After=mariadb.service
|
|
ConditionPathExists=/etc/umorpha-secrets/bookstack-app-key.txt
|
|
ConditionPathExists=/etc/umorpha-secrets/bookstack-infomaniak-mailaddr.txt
|
|
ConditionPathExists=/etc/umorpha-secrets/bookstack-infomaniak-mailpassword.txt
|
|
ConditionPathExists=/etc/umorpha-secrets/bookstack-infomaniak-clientid.txt
|
|
ConditionPathExists=/etc/umorpha-secrets/bookstack-infomaniak-clientsecret.txt
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
ExecStart=/etc/webapps/bookstack/post-install
|
|
EOF
|
|
|
|
local phpset=(
|
|
extension=pdo_mysql.so
|
|
extension=iconv.so
|
|
extension=gd.so
|
|
)
|
|
|
|
install -Dm755 /dev/stdin "$arg_mountpoint/etc/webapps/bookstack/post-install" <<-EOF
|
|
#!/bin/sh
|
|
set -x
|
|
sudo -u bookstack sh -c "umask 0077; /etc/webapps/bookstack/config.env.gen >/etc/webapps/bookstack/config.env"
|
|
if ! [ -e /var/lib/mysql/bookstack/db.opt ]; then
|
|
sudo -u mysql mariadb --execute="CREATE DATABASE bookstack; CREATE USER 'bookstack'@'localhost'; GRANT ALL ON bookstack.* TO 'bookstack'@'localhost'; FLUSH PRIVILEGES;"
|
|
fi
|
|
sudo -u bookstack sh -c "cd /usr/share/webapps/bookstack && php ${phpset[*]/#/-d } ./artisan migrate --no-interaction --force"
|
|
EOF
|
|
|
|
mkdir -p -- "$arg_mountpoint/etc/systemd/system/uwsgi@bookstack.service.wants"
|
|
ln -s "../bookstack-init.service" "$arg_mountpoint/etc/systemd/system/uwsgi@bookstack.service.wants"
|
|
|
|
install -Dm644 /dev/stdin "$arg_mountpoint/etc/uwsgi/bookstack.ini" <<-EOF
|
|
[uwsgi]
|
|
master = true
|
|
processes = 4
|
|
|
|
uid = %n
|
|
gid = http
|
|
|
|
plugins = php
|
|
${phpset[*]/#/$'\nphp-set = '}
|
|
EOF
|
|
|
|
systemctl --root="$arg_mountpoint" enable uwsgi@bookstack.socket
|
|
}
|