prepare.sh

#!/usr/bin/env bash

if [[ "$1" == "" ]]; then
  read -p "What's your server host: (localhost) " host
else
  host=$1
fi

if [[ "$host" == "localhost" ]]
then
  site_url="http://localhost"
else
  site_url="https://$host"
fi
echo "host: $host"
echo "site_url: $site_url"

dst_config=`pwd`/config
mkdir -p $dst_config

# check if it run in container
if [ -d '/usr/src/app/config' ]
then
  src_config='/usr/src/app/config'
else
  # src and dst config is same folder when developing
  src_config=$dst_config
fi

[ -d "$dst_config/caddy" ]    || cp -r $src_config/caddy    $dst_config/

# check for openssl
command -v openssl >/dev/null 2>&1 || { echo >&2 "Require openssl but it's not installed.  Aborting."; exit 1; }

# build key-pair for web and registry
private_key_pem="$dst_config/private_key.pem"
cert_pem="$dst_config/cert.pem"

rm $private_key_pem $cert_pem >/dev/null 2>&1

openssl genrsa -out ${private_key_pem} 4096
openssl req -new -x509 -key ${private_key_pem} -out ${cert_pem} -days 3650 -subj "/CN=${host}"

# generate secret key and service token
secret_key=$(openssl rand -base64 42)
echo "SECRET_KEY_BASE=${secret_key}" > $dst_config/env_file

service_token=$(openssl rand -hex 42)
echo "SERVICE_TOKEN=${service_token}" >> $dst_config/env_file

# set host name
echo "REGISTRY_AUTH_TOKEN_REALM=$site_url/service/token" >> $dst_config/env_file

# set caddy config file
echo "$site_url {" > $dst_config/Caddyfile
sed '1d' $src_config/Caddyfile.template >> $dst_config/Caddyfile