Skip to content

Commit

Permalink
cut setup part out of start script
Browse files Browse the repository at this point in the history
  • Loading branch information
Cielquan committed Aug 4, 2019
1 parent a5bb6e6 commit dcfdb20
Showing 1 changed file with 0 additions and 196 deletions.
196 changes: 0 additions & 196 deletions start_script.sh
View file
Original file line number Diff line number Diff line change
@@ -1,202 +1,6 @@
#!/bin/bash


# Import conf file if existing
if [ -f start_script.conf ]; then . start_script.conf && echo "start_script.conf loaded"; fi


# Get argument from script call
ARCHITECTURE=${1:-arm}


# Architecture based settings
if [ "$ARCHITECTURE" == "arm" ]; then
sed -i 's,mvance/unbound:latest,mvance/unbound-rpi:latest,' docker-compose.yaml
elif [ "$ARCHITECTURE" == "x86" ]; then
sed -i 's,mvance/unbound-rpi:latest,mvance/unbound:latest,' docker-compose.yaml
if [ "$(sudo docker images | grep -c 'goofball222/dns-over-https' )" -gt 0 ] && [[ -z "${COMPILE}" ]]; then
echo "'x86' architecture selected and no local image found for 'goofball222/dns-over-https'.`
` Do you want to compile the image? (y => yes):"
read -r COMPILE
fi
else
echo "ERROR! Invalid argument given to script. Only 'arm', 'x86' or none are allowed."
exit 1
fi


# Get interface for server
if [[ -z "${INTERFACE}" ]]; then
echo "Please enter your network interface (empty => eth0):"
read -r INTERFACE
fi
if [[ -z "${INTERFACE}" ]]; then INTERFACE=eth0; fi


# Get host IP
HOST_IP=$(ifconfig "${INTERFACE}" | sed -En 's/127.0.0.1//;s/.*inet (addr:)?(([0-9]*\.){3}[0-9]*).*/\2/p')

# Get bit length of host's IP subnet
#HOST_IP_W_SUBNET=$(ip -o -4 addr show | grep "${INTERFACE}" | awk '/scope global/ {print $4}')

# Get hostname
HOST_NAME=$(hostname)


# Checking for filled '.env' file.
echo "# Checking for .env file"
if ! [ -f pihole-docker/custom.env ]; then
if [[ -z "${TIMEZONE}" ]]; then
echo "Please enter your timezone (empty => Europe/London):"
read -r TIMEZONE
fi
if [[ -z "${PIHOLE_WEBPASSWORD}" ]]; then
echo "Please enter a password for the pihole web interface (empty for none):"
read -r PIHOLE_WEBPASSWORD
fi
echo -e "ServerIP=${HOST_IP}\nVIRTUAL_HOST=${HOST_IP}\nTZ=${TIMEZONE:=Europe/London}\nWEBPASSWORD=${PIHOLE_WEBPASSWORD}" > pihole-docker/custom.env \
&& echo "# Created custom.env file"
else
echo "# Found custom.env file"
fi

# Check if ServerIP and TZ are set in custom.env
if ! [ "$(. pihole-docker/custom.env && [[ -n "${ServerIP}" ]] && [[ -n "${TZ}" ]] && echo "OK")" = "OK" ]; then
echo "ERROR! Please fill nessccessary settings (ServerIP and TZ) inside 'custom.env' file and restart this script. Only 'PIHOLE_WEBPASSWORD' may be empty."
exit 1
fi


# Get TIMEZONE if not set in start_script.conf and custom.env file exists
[[ -z "${TIMEZONE}" ]] && TIMEZONE=$(grep "TZ" pihole-docker/custom.env | sed 's/TZ=//')

# Create .env file for docker-compose
echo -e "HOSTNAME=${HOST_NAME}\nTIMEZONE=${TIMEZONE}" | sudo tee .env > /dev/null


# Check for at least one certificate and key
echo "# Checking for SSL crt and key"
CERT_COUNT=0
for cert in nginx-docker/certificates/certs/*.crt
do
if [ -e "$cert" ]; then
CERT_COUNT=$((CERT_COUNT + 1))
fi
done

KEY_COUNT=0
for key in nginx-docker/certificates/private/*.key
do
if [ -e "$key" ]; then
KEY_COUNT=$((KEY_COUNT + 1))
fi
done
# TODO: verify the need for 3 crt/key # TODO: are 3 crt realy needed? Maybe w/o CN
if (( CERT_COUNT < 3)) || (( KEY_COUNT < 3 )); then
echo "ERROR! Add at least one certificate to 'nginx-docker/certificates/certs/' and the matching key to " \
"'nginx-docker/certificates/' for pi.hole, your HOSTNAME and the server's IP. Then restart the script."
exit 1
elif ! (( CERT_COUNT = KEY_COUNT )); then
echo "WARNING! There is an uneven amount of certificates and keys."
else
echo "# Found SSL crt and key"
fi


# Generate 'dhparam.pem' file if missing.
echo "# Checking for dhparam.pem file"
if ! [ -f ~/docker-pihole-unbound-encrypted/nginx-docker/configs/dhparam.pem ]; then
echo "ERROR! No 'dhparam.pem' file found. Please add a 'dhparam.pem' file to nginx-docker/configs/. Then restart this script."
exit 1
else
echo "# Found dhparam.pem file"
fi


# Auto create lan.list file
echo "# Checking for lan.list file"
if ! [ -f pihole-docker/configs/pihole/lan.list ]; then
echo "${HOST_IP} ${HOST_NAME}.dns ${HOST_NAME}" | sudo tee pihole-docker/configs/pihole/lan.list > /dev/null \
&& echo "# Created lan.list file"
elif ! [ "$(grep -cw 'pihole-docker/configs/pihole/lan.list' -e "$HOST_IP")" -ge 1 ]; then

echo -e "\n${HOST_IP} ${HOST_NAME}.dns ${HOST_NAME}" | sudo tee -a pihole-docker/configs/pihole/lan.list > /dev/null \
&& echo "# Added host to lan.list file"
else
echo "# Found lan.list file with host entry"
fi


# Auto create nginx conf files
echo "# Checking for nginx conf files"
if [ -f nginx-docker/configs/sites-enabled/HOST_IP.conf.template ]; then
if ! [ -f nginx-docker/configs/sites-enabled/"${HOST_IP}".conf ]; then
sed -i s/HOST_IP/"${HOST_IP}"/g nginx-docker/configs/sites-enabled/HOST_IP.conf.template
mv nginx-docker/configs/sites-enabled/HOST_IP.conf.template nginx-docker/configs/sites-enabled/"${HOST_IP}".conf
else
rm -f nginx-docker/configs/sites-enabled/HOST_IP.conf.template
fi
fi
if [ -f nginx-docker/configs/sites-enabled/HOSTNAME.dns.conf.template ];then
if ! [ -f nginx-docker/configs/sites-enabled/"${HOST_NAME}".dns.conf ]; then
sed -i s/HOSTNAME/"${HOST_NAME}"/g nginx-docker/configs/sites-enabled/HOSTNAME.dns.conf.template
mv nginx-docker/configs/sites-enabled/HOSTNAME.dns.conf.template nginx-docker/configs/sites-enabled/"${HOST_NAME}".dns.conf
else
rm -f nginx-docker/configs/sites-enabled/HOSTNAME.dns.conf.template
fi
fi
if [ -f nginx-docker/configs/snippets/cert_HOST_IP.conf.template ]; then
if ! [ -f nginx-docker/configs/snippets/cert_"${HOST_IP}".conf ]; then
sed -i s/HOST_IP/"${HOST_IP}"/g nginx-docker/configs/snippets/cert_HOST_IP.conf.template
mv nginx-docker/configs/snippets/cert_HOST_IP.conf.template nginx-docker/configs/snippets/cert_"${HOST_IP}".conf
else
rm -f nginx-docker/configs/snippets/cert_HOST_IP.conf.template
fi
fi
if [ -f nginx-docker/configs/snippets/cert_HOSTNAME.dns.conf.template ]; then
if ! [ -f nginx-docker/configs/snippets/cert_"${HOST_NAME}".dns.conf ]; then
sed -i s/HOSTNAME/"${HOST_NAME}"/g nginx-docker/configs/snippets/cert_HOSTNAME.dns.conf.template
mv nginx-docker/configs/snippets/cert_HOSTNAME.dns.conf.template nginx-docker/configs/snippets/cert_"${HOST_NAME}".dns.conf
else
rm -f nginx-docker/configs/snippets/cert_HOSTNAME.dns.conf.template
fi
fi
if [ -f nginx-docker/configs/streams/dns-over-tls.template ]; then
if ! [ -f nginx-docker/configs/streams/dns-over-tls ]; then
sed -i s/HOST_IP/"${HOST_IP}"/g nginx-docker/configs/streams/dns-over-tls.template
mv nginx-docker/configs/streams/dns-over-tls.template nginx-docker/configs/streams/dns-over-tls
else
rm -f nginx-docker/configs/streams/dns-over-tls.template
fi
fi
echo "# Found and/or created nginx conf files"


# Compile doh server image
if [ "$COMPILE" == "y" ] || [ "$ARCHITECTURE" == "arm" ] && ! [ "$(sudo docker images | grep -c 'goofball222/dns-over-https' )" -gt 0 ]; then
VERSION="$(git ls-remote -t --refs https://github.com/m13253/dns-over-https.git | tail -n1 | awk '{print $2}' | sed 's,refs/tags/v,,')"
CUR_DIR="$(pwd)"
echo "# Compiling image for 'goofball222/dns-over-https' for version ${VERSION}"
sudo apt install -y git &&
mkdir -p ~/dns-over-https_tmp && cd ~/dns-over-https_tmp &&
git clone https://github.com/goofball222/dns-over-https.git && cd dns-over-https &&
echo "$VERSION" | tee 'stable/VERSION' > /dev/null && sudo make
cd "$CUR_DIR" && rm -rf ~/dns-over-https_tmp

if ! [ "$(sudo docker images | grep -c 'goofball222/dns-over-https')" -gt 0 ]; then
echo "ERROR! Compiling failed"
exit 1
else
echo "# Image compiled"
fi
fi


# Download root.hints file
echo ""
wget -nv https://www.internic.net/domain/named.root -O unbound-docker/var/root.hints


# Start docker container
echo ""
sudo docker-compose up -d
Expand Down

0 comments on commit dcfdb20

Please sign in to comment.