agala/server-initializer
1
0
Fork 0
mirror of https://github.com/elAgala/server-initializer.git synced 2026-02-14 05:06:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: generate caddy password before starting the container

Browse Source
This commit is contained in:
elAgala
2025-09-06 12:27:00 -03:00
parent 2370131022
commit 127294ed01
1 changed files with 16 additions and 38 deletions
Download Patch File Download Diff File Expand all files Collapse all files

54
src/web/install_caddy.sh
View File

@@ -37,10 +37,10 @@ PROMETHEUS_PASSWORD=dev-placeholder-password
LOKI_PASSWORD=dev-placeholder-password LOKI_PASSWORD=dev-placeholder-password
EOF EOF
else else
echo "[ WEB ]: Starting containers to generate keys..." echo "[ WEB ]: Installing apache2-utils for password hashing..."
cd "$caddy_dir" sudo apt-get update
sudo apt-get install -y apache2-utils
# Prompt user for passwords and encrypt them using Caddy
echo "[ WEB ]: Setting up authentication passwords..." echo "[ WEB ]: Setting up authentication passwords..."
echo -n "Enter password for Prometheus access: " echo -n "Enter password for Prometheus access: "
read -s prometheus_plain_password read -s prometheus_plain_password
@@ -49,15 +49,17 @@ EOF
read -s loki_plain_password read -s loki_plain_password
echo echo
# Create .env file with placeholder # Generate password hashes using htpasswd (no Caddy needed)
cat >"$caddy_dir/.env" <<EOF echo "[ WEB ]: Hashing Prometheus password..."
CROWDSEC_API_KEY=PLACEHOLDER_WILL_BE_REPLACED PROMETHEUS_PASSWORD=$(htpasswd -nbB user "$prometheus_plain_password" | cut -d: -f2)
PROMETHEUS_PASSWORD=PLACEHOLDER_WILL_BE_REPLACED echo "[ WEB ]: Hashing Loki password..."
LOKI_PASSWORD=PLACEHOLDER_WILL_BE_REPLACED LOKI_PASSWORD=$(htpasswd -nbB user "$loki_plain_password" | cut -d: -f2)
EOF
# Start containers cd "$caddy_dir"
sudo docker compose up -d
# Start only CrowdSec first
echo "[ WEB ]: Starting CrowdSec container..."
sudo docker compose up -d crowdsec
# Wait for CrowdSec to be ready with health check # Wait for CrowdSec to be ready with health check
echo "[ WEB ]: Waiting for CrowdSec to be ready..." echo "[ WEB ]: Waiting for CrowdSec to be ready..."
@@ -76,43 +78,19 @@ EOF
return 1 return 1
fi fi
# Wait for Caddy to be ready with health check
echo "[ WEB ]: Waiting for Caddy to be ready..."
for i in {1..30}; do
if sudo docker exec caddy caddy version >/dev/null 2>&1; then
echo "[ WEB ]: Caddy is ready!"
break
fi
echo "[ WEB ]: Waiting for Caddy... ($i/30)"
sleep 2
done
# Check if Caddy is ready
if ! sudo docker exec caddy caddy version >/dev/null 2>&1; then
echo "[ WEB ]: ERROR: Caddy failed to start properly. Check logs with: docker compose logs caddy"
return 1
fi
# Generate CrowdSec API key # Generate CrowdSec API key
echo "[ WEB ]: Generating CrowdSec API key..." echo "[ WEB ]: Generating CrowdSec API key..."
CROWDSEC_API_KEY=$(sudo docker exec crowdsec cscli bouncers add caddy-bouncer -o raw) CROWDSEC_API_KEY=$(sudo docker exec crowdsec cscli bouncers add caddy-bouncer -o raw)
# Encrypt passwords using Caddy # Create final .env file with all real values
echo "[ WEB ]: Encrypting Prometheus password..."
PROMETHEUS_PASSWORD=$(sudo docker exec caddy caddy hash-password --plaintext "$prometheus_plain_password")
echo "[ WEB ]: Encrypting Loki password..."
LOKI_PASSWORD=$(sudo docker exec caddy caddy hash-password --plaintext "$loki_plain_password")
# Update .env file with real API key and encrypted passwords
cat >"$caddy_dir/.env" <<EOF cat >"$caddy_dir/.env" <<EOF
CROWDSEC_API_KEY=$CROWDSEC_API_KEY CROWDSEC_API_KEY=$CROWDSEC_API_KEY
PROMETHEUS_PASSWORD=$PROMETHEUS_PASSWORD PROMETHEUS_PASSWORD=$PROMETHEUS_PASSWORD
LOKI_PASSWORD=$LOKI_PASSWORD LOKI_PASSWORD=$LOKI_PASSWORD
EOF EOF
# Restart containers with new API key # Start all containers now that passwords are ready
echo "[ WEB ]: Restarting containers with generated keys..." echo "[ WEB ]: Starting all containers with generated keys..."
sudo docker compose down
sudo docker compose up -d sudo docker compose up -d
fi fi