WIP NO MERGE rsmb initial deploy

.github/workflows/test.yml

@@ -1,10 +1,15 @@
+---
 name: Test
 
 on:
-  config:
+  push:
+
+jobs:
+  test:
     runs-on: ubuntu-latest
-    if: github.event.pull_request.draft == false
+    if: ${{ github.event.pull_request.draft == false }}
     timeout-minutes: 60
+
     steps:
       - uses: actions/checkout@v4
         with:
@@ -20,4 +25,3 @@ on:
 
       - name: Lint
         run: npm run lint
-

.gitignore

@@ -1,5 +1,6 @@
 # TAK Specific Files
 *CoreConfig.xml
+*UserAuthentication.xml
 tak-data/
 
 # Logs

CoreConfig.js

@@ -16,13 +16,17 @@
 ]) {
     if (!process.env[env]) {
         console.error(`${env} Environment Variable not set`);
         process.exit(1);
     }
 }
 
-const LDAP_DN = process.env.LDAP_Domain.split('.').map((part) => {
-    return `dc=${part}`;
-}).join(',');
+console.log('HostedDomain:', process.env.HostedDomain);
+
+const LDAP_DN = process.env.LDAP_Domain.split('.')
+    .map((part) => {
+        return `dc=${part}`;
+    })
+    .join(',');
 
 const Certificate = {
     O: process.env.ORGANIZATION || 'COTAK',
@@ -51,25 +55,28 @@
                     coreVersion: '2'
                 }
             },
-            connector: [{
-                _attributes: {
-                    port: '8443',
-                    _name: 'https',
-                    keystore: 'JKS',
-                    keystoreFile: `/opt/tak/certs/${process.env.HostedDomain}/letsencrypt.jks`,
-                    keystorePass: 'atakatak'
-                }
-            }, {
-                _attributes: {
-                    port: '8446',
-                    clientAuth: 'false',
-                    _name: 'cert_https',
-                    keystore: 'JKS',
-                    keystoreFile: `/opt/tak/certs/${process.env.HostedDomain}/letsencrypt.jks`,
-                    keystorePass: 'atakatak',
-                    enableNonAdminUI: 'false'
+            connector: [
+                {
+                    _attributes: {
+                        port: '8443',
+                        _name: 'https',
+                        keystore: 'JKS',
+                        keystoreFile: `/opt/tak/certs/${process.env.HostedDomain}/letsencrypt.jks`,
+                        keystorePass: 'atakatak'
+                    }
+                },
+                {
+                    _attributes: {
+                        port: '8446',
+                        clientAuth: 'false',
+                        _name: 'cert_https',
+                        keystore: 'JKS',
+                        keystoreFile: `/opt/tak/certs/${process.env.HostedDomain}/letsencrypt.jks`,
+                        keystorePass: 'atakatak',
+                        enableNonAdminUI: 'false'
+                    }
                 }
-            }],
+            ],
             announce: {
                 _attributes: {}
             }
@@ -100,17 +107,17 @@
                     ldapsTruststorePass: 'INTENTIONALLY_NOT_SENSITIVE',
                     enableConnectionPool: 'false'
                 }
-            },
-            File: {
-                _attributes: {
-                    location: 'UserAuthenticationFile.xml'
-                }
-            },
-            oauth: {
-                _attributes: {
-                    oauthUseGroupCache: 'true'
-                }
             }
+            //     File: {
+            //         _attributes: {
+            //             location: 'UserAuthenticationFile.xml'
+            //         }
+            //     },
+            //     oauth: {
+            //         _attributes: {
+            //             oauthUseGroupCache: 'true'
+            //         }
+            //     }
         },
         submission: {
             _attributes: {
@@ -144,31 +151,38 @@
                 periodMillis: '3000',
                 staleDelayMillis: '15000'
             },
-            repeatableType: [{
-                _attributes: {
-                    'initiate-test': "/event/detail/emergency[@type='911 Alert']",
-                    'cancel-test': "/event/detail/emergency[@cancel='true']",
-                    _name: '911'
-                }
-            },{
-                _attributes: {
-                    'initiate-test': "/event/detail/emergency[@type='Ring The Bell']",
-                    'cancel-test': "/event/detail/emergency[@cancel='true']",
-                    _name: 'RingTheBell'
-                }
-            },{
-                _attributes: {
-                    'initiate-test': "/event/detail/emergency[@type='Geo-fence Breached']",
-                    'cancel-test': "/event/detail/emergency[@cancel='true']",
-                    _name: 'GeoFenceBreach'
-                }
-            },{
-                _attributes: {
-                    'initiate-test': "/event/detail/emergency[@type='Troops In Contact']",
-                    'cancel-test': "/event/detail/emergency[@cancel='true']",
-                    _name: 'TroopsInContact'
+            repeatableType: [
+                {
+                    _attributes: {
+                        'initiate-test': "/event/detail/emergency[@type='911 Alert']",
+                        'cancel-test': "/event/detail/emergency[@cancel='true']",
+                        _name: '911'
+                    }
+                },
+                {
+                    _attributes: {
+                        'initiate-test': "/event/detail/emergency[@type='Ring The Bell']",
+                        'cancel-test': "/event/detail/emergency[@cancel='true']",
+                        _name: 'RingTheBell'
+                    }
+                },
+                {
+                    _attributes: {
+                        'initiate-test':
+                            "/event/detail/emergency[@type='Geo-fence Breached']",
+                        'cancel-test': "/event/detail/emergency[@cancel='true']",
+                        _name: 'GeoFenceBreach'
+                    }
+                },
+                {
+                    _attributes: {
+                        'initiate-test':
+                            "/event/detail/emergency[@type='Troops In Contact']",
+                        'cancel-test': "/event/detail/emergency[@cancel='true']",
+                        _name: 'TroopsInContact'
+                    }
                 }
-            }]
+            ]
         },
         filter: {
             _attributes: {}
@@ -198,17 +212,20 @@
             },
             certificateConfig: {
                 nameEntries: {
-                    nameEntry: [{
-                        _attributes: {
-                            name: 'O',
-                            value: Certificate.O
+                    nameEntry: [
+                        {
+                            _attributes: {
+                                name: 'O',
+                                value: Certificate.O
+                            }
+                        },
+                        {
+                            _attributes: {
+                                name: 'OU',
+                                value: Certificate.OU
+                            }
                         }
-                    },{
-                        _attributes: {
-                            name: 'OU',
-                            value: Certificate.OU
-                        }
-                    }]
+                    ]
                 }
             },
             TAKServerCAConfig: {
@@ -260,20 +277,27 @@
 
 if (config.Configuration.network.connector) {
     if (!config.Configuration.network.connector) {
-        config.Configuration.network.connector = [config.Configuration.network.connector];
+        config.Configuration.network.connector = [
+            config.Configuration.network.connector
+        ];
     }
 
     for (const connector of config.Configuration.network.connector) {
-        validateKeystore(connector._attributes.keystoreFile, connector._attributes.keystorePass);
+        validateKeystore(
+            connector._attributes.keystoreFile,
+            connector._attributes.keystorePass
+        );
     }
 } else {
     console.warn('No Network Connectors Found');
 }
 
 if (config.Configuration.certificateSigning.TAKServerCAConfig) {
     validateKeystore(
-        config.Configuration.certificateSigning.TAKServerCAConfig._attributes.keystoreFile,
-        config.Configuration.certificateSigning.TAKServerCAConfig._attributes.keystorePass
+        config.Configuration.certificateSigning.TAKServerCAConfig._attributes
+            .keystoreFile,
+        config.Configuration.certificateSigning.TAKServerCAConfig._attributes
+            .keystorePass
     );
 }
 

Dockerfile

@@ -1,43 +1,54 @@
 FROM eclipse-temurin:17-jammy
 RUN apt update \
-    && apt-get install -y emacs-nox net-tools netcat vim certbot curl libxml2-utils unzip
+  && apt-get install -y emacs-nox net-tools netcat vim certbot curl libxml2-utils unzip
 
 ENV HOME=/home/server
 WORKDIR $HOME
 
 COPY ./ $HOME/
 
+# 80/443 currently unused
 EXPOSE 80
 EXPOSE 443
+# streaming CoT enpoint
+EXPOSE 8089
+
+# webtak api & public CA api
 EXPOSE 8443
+# maybe for federation tak servers, not used currently
 EXPOSE 8444
+# probably WebTak on OAuth
 EXPOSE 8446
 
 
 ENV NVM_DIR=/usr/local/nvm
 ENV NODE_VERSION=22
 ENV TAK_VERSION=takserver-docker-5.2-RELEASE-43
+ENV PASSWORD=INTENTIONALLY_NOT_SENSITIVE
+
+SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
 RUN curl -o- https://www.amazontrust.com/repository/AmazonRootCA1.pem > /tmp/AmazonRootCA1.pem \
-    && openssl pkcs12 -export -nokeys -in /tmp/AmazonRootCA1.pem -out /tmp/intermediate.p12  -password pass:INTENTIONALLY_NOT_SENSITIVE \
-    && keytool -importkeystore -srckeystore /tmp/intermediate.p12 -srcstoretype PKCS12 -destkeystore ./aws-acm-root.jks -deststoretype JKS \
-    && rm /tmp/*.pem \
-    && rm /tmp/*.p12
+  && openssl pkcs12 -export -nokeys -in /tmp/AmazonRootCA1.pem -out /tmp/intermediate.p12  -password pass:${PASSWORD} \
+  && keytool -importkeystore -srckeystore /tmp/intermediate.p12 -srcstoretype PKCS12 -destkeystore ./aws-acm-root.jks -deststoretype JKS \
+  -srcstorepass $PASSWORD -deststorepass $PASSWORD -noprompt \
+  && rm /tmp/*.pem \
+  && rm /tmp/*.p12
 
 RUN wget "http://tak-server-releases.s3-website.us-gov-east-1.amazonaws.com/${TAK_VERSION}.zip" \
-    && unzip "./${TAK_VERSION}.zip" \
-    && rm "./${TAK_VERSION}.zip" \
-    && rm -rf "./${TAK_VERSION}/docker" \
-    && mv ./${TAK_VERSION}/tak/* ./ \
-    && rm -rf "./${TAK_VERSION}"
+  && unzip "./${TAK_VERSION}.zip" \
+  && rm "./${TAK_VERSION}.zip" \
+  && rm -rf "./${TAK_VERSION}/docker" \
+  && mv ./${TAK_VERSION}/tak/* ./ \
+  && rm -rf "./${TAK_VERSION}"
 
 RUN mkdir -p $NVM_DIR \
-    && curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.0/install.sh | bash \
-    && . $NVM_DIR/nvm.sh \
-    && nvm install $NODE_VERSION \
-    && nvm alias default $NODE_VERSION \
-    && nvm use default \
-    && npm install \
-    && npm install --global http-server
+  && curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.0/install.sh | bash \
+  && . $NVM_DIR/nvm.sh \
+  && nvm install $NODE_VERSION \
+  && nvm alias default $NODE_VERSION \
+  && nvm use default \
+  && npm install \
+  && npm install --global http-server
 
 ENTRYPOINT ["/bin/bash", "-c", "./start"]