-
Notifications
You must be signed in to change notification settings - Fork 48
/
docker-entrypoint.sh
33 lines (27 loc) · 1.53 KB
/
docker-entrypoint.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
#!/bin/sh
./process-environment.sh
PROXY_SERVER_HTTPS_CONNECTION_VALUE=$(grep -e 'PROXY_SERVER_HTTPS_CONNECTION' ./packages/graph-explorer/.env | cut -d "=" -f 2)
if [ -n "$PROXY_SERVER_HTTPS_CONNECTION_VALUE" ] && [ "$PROXY_SERVER_HTTPS_CONNECTION_VALUE" == "true" ]; then
if [ $HOST ]; then
echo "Generating new self-signed SSL cert using $HOST..."
cd /graph-explorer/packages/graph-explorer-proxy-server/cert-info/
sed -i "21s/$/ $HOST:*/" csr.conf
sed -i "8s/$/ $HOST:*/" cert.conf
openssl req -x509 -sha256 -days 356 -nodes -newkey rsa:2048 -subj "/CN=Graph Explorer/C=US/L=Seattle" -keyout rootCA.key -out rootCA.crt
openssl genrsa -out ./server.key 2048
openssl req -new -key ./server.key -out ./server.csr -config ./csr.conf
openssl x509 -req -in ./server.csr -CA ./rootCA.crt -CAkey ./rootCA.key -CAcreateserial -out ./server.crt -days 365 -sha256 -extfile ./cert.conf
else
echo "No HOST environment variable specified."
if [ -f "./rootCA.key" ] && [ -f "./rootCA.crt" ] && [ -f "./rootCA.crt" ] && [ -f "./server.csr"] && [ -f "./server.crt"]; then
echo "Found existing self-signed SSL certificate. Re-using existing cert."
else
echo "No existing self-signed SSL certificate found. Please specify --env HOST=<hostname> during docker run command to create SSL cert."
exit 1
fi
fi
else
echo "SSL disabled. Skipping self-signed certificate generation."
fi
echo "Starting graph explorer..."
pnpm -w start