mirror of
https://github.com/zerotier/ZeroTierOne.git
synced 2024-12-26 16:11:07 +00:00
e4cb74896b
* allow specifying authtoken in central startup * set allowManagedFrom * move redis_mem_notification to the correct place * add node checkins metric * wire up min/max connection pool size metrics
105 lines
3.1 KiB
Bash
Executable File
105 lines
3.1 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
if [ -z "$ZT_IDENTITY_PATH" ]; then
|
|
echo '*** FAILED: ZT_IDENTITY_PATH environment variable is not defined'
|
|
exit 1
|
|
fi
|
|
if [ -z "$ZT_DB_HOST" ]; then
|
|
echo '*** FAILED: ZT_DB_HOST environment variable not defined'
|
|
exit 1
|
|
fi
|
|
if [ -z "$ZT_DB_PORT" ]; then
|
|
echo '*** FAILED: ZT_DB_PORT environment variable not defined'
|
|
exit 1
|
|
fi
|
|
if [ -z "$ZT_DB_NAME" ]; then
|
|
echo '*** FAILED: ZT_DB_NAME environment variable not defined'
|
|
exit 1
|
|
fi
|
|
if [ -z "$ZT_DB_USER" ]; then
|
|
echo '*** FAILED: ZT_DB_USER environment variable not defined'
|
|
exit 1
|
|
fi
|
|
if [ -z "$ZT_DB_PASSWORD" ]; then
|
|
echo '*** FAILED: ZT_DB_PASSWORD environment variable not defined'
|
|
exit 1
|
|
fi
|
|
|
|
REDIS=""
|
|
if [ "$ZT_USE_REDIS" == "true" ]; then
|
|
if [ -z "$ZT_REDIS_HOST" ]; then
|
|
echo '*** FAILED: ZT_REDIS_HOST environment variable not defined'
|
|
exit 1
|
|
fi
|
|
|
|
if [ -z "$ZT_REDIS_PORT" ]; then
|
|
echo '*** FAILED: ZT_REDIS_PORT enivronment variable not defined'
|
|
exit 1
|
|
fi
|
|
|
|
if [ -z "$ZT_REDIS_CLUSTER_MODE" ]; then
|
|
echo '*** FAILED: ZT_REDIS_CLUSTER_MODE environment variable not defined'
|
|
exit 1
|
|
fi
|
|
|
|
REDIS="\"redis\": {
|
|
\"hostname\": \"${ZT_REDIS_HOST}\",
|
|
\"port\": ${ZT_REDIS_PORT},
|
|
\"clusterMode\": ${ZT_REDIS_CLUSTER_MODE},
|
|
\"password\": \"${ZT_REDIS_PASSWORD}\"
|
|
}
|
|
"
|
|
else
|
|
REDIS="\"redis\": null"
|
|
fi
|
|
|
|
mkdir -p /var/lib/zerotier-one
|
|
|
|
pushd /var/lib/zerotier-one
|
|
ln -s $ZT_IDENTITY_PATH/identity.public identity.public
|
|
ln -s $ZT_IDENTITY_PATH/identity.secret identity.secret
|
|
if [ -f "$ZT_IDENTITY_PATH/authtoken.secret" ]; then
|
|
ln -s $ZT_IDENTITY_PATH/authtoken.secret authtoken.secret
|
|
fi
|
|
popd
|
|
|
|
DEFAULT_PORT=9993
|
|
|
|
APP_NAME="controller-$(cat /var/lib/zerotier-one/identity.public | cut -d ':' -f 1)"
|
|
|
|
echo "{
|
|
\"settings\": {
|
|
\"controllerDbPath\": \"postgres:host=${ZT_DB_HOST} port=${ZT_DB_PORT} dbname=${ZT_DB_NAME} user=${ZT_DB_USER} password=${ZT_DB_PASSWORD} application_name=${APP_NAME} sslmode=prefer sslcert=${DB_CLIENT_CERT} sslkey=${DB_CLIENT_KEY} sslrootcert=${DB_SERVER_CA}\",
|
|
\"portMappingEnabled\": true,
|
|
\"softwareUpdate\": \"disable\",
|
|
\"interfacePrefixBlacklist\": [
|
|
\"inot\",
|
|
\"nat64\"
|
|
],
|
|
\"ssoRedirectURL\": \"${ZT_SSO_REDIRECT_URL}\",
|
|
\"allowManagementFrom\": [\"127.0.0.1\", \"::1\", \"10.0.0.0/8\"],
|
|
${REDIS}
|
|
}
|
|
}
|
|
" > /var/lib/zerotier-one/local.conf
|
|
|
|
if [ -n "$DB_SERVER_CA" ]; then
|
|
echo "secret list"
|
|
chmod 600 /secrets/db/*.pem
|
|
ls -l /secrets/db/
|
|
until /usr/bin/pg_isready -h ${ZT_DB_HOST} -p ${ZT_DB_PORT} -d "sslmode=prefer sslcert=${DB_CLIENT_CERT} sslkey=${DB_CLIENT_KEY} sslrootcert=${DB_SERVER_CA}"; do
|
|
echo "Waiting for PostgreSQL...";
|
|
sleep 2;
|
|
done
|
|
else
|
|
until /usr/bin/pg_isready -h ${ZT_DB_HOST} -p ${ZT_DB_PORT}; do
|
|
echo "Waiting for PostgreSQL...";
|
|
sleep 2;
|
|
done
|
|
fi
|
|
|
|
export GLIBCXX_FORCE_NEW=1
|
|
export GLIBCPP_FORCE_NEW=1
|
|
export LD_PRELOAD="/usr/lib/x86_64-linux-gnu/libjemalloc.so.2"
|
|
exec /usr/local/bin/zerotier-one -p${ZT_CONTROLLER_PORT:-$DEFAULT_PORT} /var/lib/zerotier-one
|