forked from oscar.krause/fastapi-dls
121 lines
3.5 KiB
Bash
121 lines
3.5 KiB
Bash
#!/bin/bash
|
|
|
|
WORKING_DIR=/usr/share/fastapi-dls
|
|
CONFIG_DIR=/etc/fastapi-dls
|
|
|
|
echo "> Create config directory ..."
|
|
mkdir -p $CONFIG_DIR
|
|
|
|
echo "> Install service ..."
|
|
cat <<EOF >/etc/systemd/system/fastapi-dls.service
|
|
[Unit]
|
|
Description=Service for fastapi-dls
|
|
After=network.target
|
|
|
|
[Service]
|
|
User=www-data
|
|
Group=www-data
|
|
AmbientCapabilities=CAP_NET_BIND_SERVICE
|
|
WorkingDirectory=$WORKING_DIR/app
|
|
EnvironmentFile=$CONFIG_DIR/env
|
|
ExecStart=uvicorn main:app \\
|
|
--env-file /etc/fastapi-dls/env \\
|
|
--host \$DLS_URL --port \$DLS_PORT \\
|
|
--app-dir $WORKING_DIR/app \\
|
|
--ssl-keyfile /etc/fastapi-dls/webserver.key \\
|
|
--ssl-certfile /etc/fastapi-dls/webserver.crt \\
|
|
--proxy-headers
|
|
Restart=always
|
|
KillSignal=SIGQUIT
|
|
Type=simple
|
|
NotifyAccess=all
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
|
|
EOF
|
|
|
|
systemctl daemon-reload
|
|
|
|
if [[ ! -f $CONFIG_DIR/env ]]; then
|
|
echo "> Writing initial config ..."
|
|
touch $CONFIG_DIR/env
|
|
cat <<EOF >$CONFIG_DIR/env
|
|
# Toggle debug mode
|
|
#DEBUG=false
|
|
|
|
# Where the client can find the DLS server
|
|
DLS_URL=127.0.0.1
|
|
DLS_PORT=443
|
|
|
|
# CORS configuration
|
|
## comma separated list without spaces
|
|
#CORS_ORIGINS="https://$DLS_URL:$DLS_PORT"
|
|
|
|
# Lease expiration in days
|
|
LEASE_EXPIRE_DAYS=90
|
|
|
|
# Database location
|
|
## https://docs.sqlalchemy.org/en/14/core/engines.html
|
|
DATABASE=sqlite:///$CONFIG_DIR/db.sqlite
|
|
|
|
# UUIDs for identifying the instance
|
|
#SITE_KEY_XID="00000000-0000-0000-0000-000000000000"
|
|
#INSTANCE_REF="00000000-0000-0000-0000-000000000000"
|
|
|
|
# Site-wide signing keys
|
|
INSTANCE_KEY_RSA=$CONFIG_DIR/instance.private.pem
|
|
INSTANCE_KEY_PUB=$CONFIG_DIR/instance.public.pem
|
|
|
|
EOF
|
|
fi
|
|
|
|
echo "> Create dls-instance keypair ..."
|
|
openssl genrsa -out $CONFIG_DIR/instance.private.pem 2048
|
|
openssl rsa -in $CONFIG_DIR/instance.private.pem -outform PEM -pubout -out $CONFIG_DIR/instance.public.pem
|
|
|
|
while true; do
|
|
read -p "> Do you wish to create self-signed webserver certificate? [Y/n]" yn
|
|
yn=${yn:-y} # ${parameter:-word} If parameter is unset or null, the expansion of word is substituted. Otherwise, the value of parameter is substituted.
|
|
case $yn in
|
|
[Yy]*)
|
|
openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout $CONFIG_DIR/webserver.key -out $CONFIG_DIR/webserver.crt
|
|
break
|
|
;;
|
|
[Nn]*) break ;;
|
|
*) echo "Please answer [y] or [n]." ;;
|
|
esac
|
|
done
|
|
|
|
if [[ -f $CONFIG_DIR/webserver.key ]]; then
|
|
echo "> Starting service ..."
|
|
systemctl start fastapi-dls.service
|
|
|
|
if [ -x "$(command -v curl)" ]; then
|
|
echo "> Testing API ..."
|
|
source $CONFIG_DIR/env
|
|
curl --insecure -X GET https://$DLS_URL:$DLS_PORT/-/health
|
|
else
|
|
echo "> Testing API failed, curl not available. Please test manually!"
|
|
fi
|
|
fi
|
|
|
|
chown -R www-data:www-data $CONFIG_DIR
|
|
chown -R www-data:www-data $WORKING_DIR
|
|
|
|
cat <<EOF
|
|
|
|
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
|
|
# #
|
|
# fastapi-dls is now installed. #
|
|
# #
|
|
# Service should be up and running. #
|
|
# Webservice is listen to https://localhost #
|
|
# #
|
|
# Configuration is stored in ${CONFIG_DIR}/env #
|
|
# #
|
|
# #
|
|
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
|
|
|
|
EOF
|