docker-entrypoint.sh 10 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366
  1. #!/bin/bash
  2. # Setup environment variables
  3. #########
  4. # PORTS #
  5. #########
  6. export API_GATEWAY_PORT=3000
  7. if [ -z "$SYNCING_SERVER_PORT" ]; then
  8. export SYNCING_SERVER_PORT=3101
  9. fi
  10. if [ -z "$AUTH_SERVER_PORT" ]; then
  11. export AUTH_SERVER_PORT=3103
  12. fi
  13. export FILES_SERVER_PORT=3104
  14. if [ -z "$REVISIONS_SERVER_PORT" ]; then
  15. export REVISIONS_SERVER_PORT=3105
  16. fi
  17. ######
  18. # DB #
  19. ######
  20. if [ -z "$DB_HOST" ]; then
  21. export DB_HOST="db"
  22. fi
  23. if [ -z "$DB_PORT" ]; then
  24. export DB_PORT="3306"
  25. fi
  26. if [ -z "$DB_USERNAME" ]; then
  27. export DB_USERNAME="std_notes_user"
  28. fi
  29. if [ -z "$DB_PASSWORD" ]; then
  30. export DB_PASSWORD=$(openssl rand -hex 32)
  31. fi
  32. if [ -z "$DB_DATABASE" ]; then
  33. export DB_DATABASE="standard_notes_db"
  34. fi
  35. if [ -z "$DB_DEBUG_LEVEL" ]; then
  36. export DB_DEBUG_LEVEL="all"
  37. fi
  38. export DB_MIGRATIONS_PATH="dist/migrations/*.js"
  39. #########
  40. # CACHE #
  41. #########
  42. if [ -z "$REDIS_PORT" ]; then
  43. export REDIS_PORT=6379
  44. fi
  45. if [ -z "$REDIS_HOST" ]; then
  46. export REDIS_HOST="cache"
  47. fi
  48. if [ -z "$REDIS_URL" ]; then
  49. export REDIS_URL="redis://$REDIS_HOST"
  50. fi
  51. ##########
  52. # SHARED #
  53. ##########
  54. if [ -z "$AUTH_JWT_SECRET" ]; then
  55. export AUTH_JWT_SECRET=$(openssl rand -hex 32)
  56. fi
  57. if [ -z "$VALET_TOKEN_SECRET" ]; then
  58. export VALET_TOKEN_SECRET=$(openssl rand -base64 32)
  59. fi
  60. ########
  61. # AUTH #
  62. ########
  63. if [ -z "$AUTH_SERVER_LOG_LEVEL" ]; then
  64. export AUTH_SERVER_LOG_LEVEL="info"
  65. fi
  66. export AUTH_SERVER_NODE_ENV="production"
  67. export AUTH_SERVER_VERSION="local"
  68. if [ -z "$AUTH_SERVER_AUTH_JWT_TTL" ]; then
  69. export AUTH_SERVER_AUTH_JWT_TTL=60000
  70. fi
  71. export AUTH_SERVER_JWT_SECRET=$AUTH_JWT_SECRET
  72. export AUTH_SERVER_LEGACY_JWT_SECRET=$(openssl rand -hex 32)
  73. export AUTH_SERVER_NEW_RELIC_ENABLED=false
  74. export AUTH_SERVER_NEW_RELIC_APP_NAME=Auth
  75. export AUTH_SERVER_NEW_RELIC_NO_CONFIG_FILE=true
  76. if [ -z "$AUTH_SERVER_DISABLE_USER_REGISTRATION" ]; then
  77. export AUTH_SERVER_DISABLE_USER_REGISTRATION=false
  78. fi
  79. if [ -z "$AUTH_SERVER_PSEUDO_KEY_PARAMS_KEY" ]; then
  80. export AUTH_SERVER_PSEUDO_KEY_PARAMS_KEY=$(openssl rand -hex 32)
  81. fi
  82. if [ -z "$AUTH_SERVER_ACCESS_TOKEN_AGE" ]; then
  83. export AUTH_SERVER_ACCESS_TOKEN_AGE=5184000
  84. fi
  85. if [ -z "$AUTH_SERVER_REFRESH_TOKEN_AGE" ]; then
  86. export AUTH_SERVER_REFRESH_TOKEN_AGE=31556926
  87. fi
  88. if [ -z "$AUTH_SERVER_MAX_LOGIN_ATTEMPTS" ]; then
  89. export AUTH_SERVER_MAX_LOGIN_ATTEMPTS=6
  90. fi
  91. if [ -z "$AUTH_SERVER_FAILED_LOGIN_LOCKOUT" ]; then
  92. export AUTH_SERVER_FAILED_LOGIN_LOCKOUT=3600
  93. fi
  94. if [ -z "$AUTH_SERVER_EPHEMERAL_SESSION_AGE" ]; then
  95. export AUTH_SERVER_EPHEMERAL_SESSION_AGE=259200
  96. fi
  97. if [ -z "$AUTH_SERVER_ENCRYPTION_SERVER_KEY" ]; then
  98. export AUTH_SERVER_ENCRYPTION_SERVER_KEY=$(openssl rand -hex 32)
  99. fi
  100. export AUTH_SERVER_SYNCING_SERVER_URL=http://localhost:$SYNCING_SERVER_PORT
  101. # File Uploads
  102. if [ -z "$AUTH_SERVER_VALET_TOKEN_TTL" ]; then
  103. export AUTH_SERVER_VALET_TOKEN_TTL=7200
  104. fi
  105. # Localstack Setup
  106. if [ -z "$AUTH_SERVER_SNS_TOPIC_ARN" ]; then
  107. export AUTH_SERVER_SNS_TOPIC_ARN="arn:aws:sns:us-east-1:000000000000:auth-local-topic"
  108. fi
  109. if [ -z "$AUTH_SERVER_SNS_ENDPOINT" ]; then
  110. export AUTH_SERVER_SNS_ENDPOINT="http://localstack:4566"
  111. fi
  112. if [ -z "$AUTH_SERVER_SNS_SECRET_ACCESS_KEY" ]; then
  113. export AUTH_SERVER_SNS_SECRET_ACCESS_KEY="x"
  114. fi
  115. if [ -z "$AUTH_SERVER_SNS_ACCESS_KEY_ID" ]; then
  116. export AUTH_SERVER_SNS_ACCESS_KEY_ID="x"
  117. fi
  118. if [ -z "$AUTH_SERVER_SNS_AWS_REGION" ]; then
  119. export AUTH_SERVER_SNS_AWS_REGION="us-east-1"
  120. fi
  121. if [ -z "$AUTH_SERVER_SQS_QUEUE_URL" ]; then
  122. export AUTH_SERVER_SQS_QUEUE_URL="http://localstack:4566/000000000000/auth-local-queue"
  123. fi
  124. if [ -z "$AUTH_SERVER_SQS_AWS_REGION" ]; then
  125. export AUTH_SERVER_SQS_AWS_REGION="us-east-1"
  126. fi
  127. if [ -z "$AUTH_SERVER_SQS_ACCESS_KEY_ID" ]; then
  128. export AUTH_SERVER_SQS_ACCESS_KEY_ID="x"
  129. fi
  130. if [ -z "$AUTH_SERVER_SQS_SECRET_ACCESS_KEY" ]; then
  131. export AUTH_SERVER_SQS_SECRET_ACCESS_KEY="x"
  132. fi
  133. if [ -z "$AUTH_SERVER_SQS_ENDPOINT" ]; then
  134. export AUTH_SERVER_SQS_ENDPOINT="http://localstack:4566"
  135. fi
  136. # U2F Setup
  137. if [ -z "$AUTH_SERVER_U2F_RELYING_PARTY_ID" ]; then
  138. export AUTH_SERVER_U2F_RELYING_PARTY_ID="localhost"
  139. fi
  140. if [ -z "$AUTH_SERVER_U2F_RELYING_PARTY_NAME" ]; then
  141. export AUTH_SERVER_U2F_RELYING_PARTY_NAME="Standard Notes"
  142. fi
  143. if [ -z "$AUTH_SERVER_U2F_EXPECTED_ORIGIN" ]; then
  144. export AUTH_SERVER_U2F_EXPECTED_ORIGIN="http://localhost,http://localhost:3001"
  145. fi
  146. if [ -z "$AUTH_SERVER_U2F_REQUIRE_USER_VERIFICATION" ]; then
  147. export AUTH_SERVER_U2F_REQUIRE_USER_VERIFICATION=false
  148. fi
  149. printenv | grep AUTH_SERVER_ | sed 's/AUTH_SERVER_//g' > /opt/bundled/auth/packages/auth/.env
  150. ##################
  151. # SYNCING SERVER #
  152. ##################
  153. if [ -z "$SYNCING_SERVER_LOG_LEVEL" ]; then
  154. export SYNCING_SERVER_LOG_LEVEL="info"
  155. fi
  156. export SYNCING_SERVER_NODE_ENV=production
  157. export SYNCING_SERVER_VERSION=local
  158. if [ -z "$SYNCING_SERVER_SNS_TOPIC_ARN" ]; then
  159. export SYNCING_SERVER_SNS_TOPIC_ARN="arn:aws:sns:us-east-1:000000000000:syncing-server-local-topic"
  160. fi
  161. if [ -z "$SYNCING_SERVER_SNS_ENDPOINT" ]; then
  162. export SYNCING_SERVER_SNS_ENDPOINT="http://localstack:4566"
  163. fi
  164. if [ -z "$SYNCING_SERVER_SNS_SECRET_ACCESS_KEY" ]; then
  165. export SYNCING_SERVER_SNS_SECRET_ACCESS_KEY="x"
  166. fi
  167. if [ -z "$SYNCING_SERVER_SNS_ACCESS_KEY_ID" ]; then
  168. export SYNCING_SERVER_SNS_ACCESS_KEY_ID="x"
  169. fi
  170. if [ -z "$SYNCING_SERVER_SNS_AWS_REGION" ]; then
  171. export SYNCING_SERVER_SNS_AWS_REGION="us-east-1"
  172. fi
  173. if [ -z "$SYNCING_SERVER_SQS_QUEUE_URL" ]; then
  174. export SYNCING_SERVER_SQS_QUEUE_URL="http://localstack:4566/000000000000/syncing-server-local-queue"
  175. fi
  176. if [ -z "$SYNCING_SERVER_SQS_AWS_REGION" ]; then
  177. export SYNCING_SERVER_SQS_AWS_REGION="us-east-1"
  178. fi
  179. if [ -z "$SYNCING_SERVER_SQS_ACCESS_KEY_ID" ]; then
  180. export SYNCING_SERVER_SQS_ACCESS_KEY_ID="x"
  181. fi
  182. if [ -z "$SYNCING_SERVER_SQS_SECRET_ACCESS_KEY" ]; then
  183. export SYNCING_SERVER_SQS_SECRET_ACCESS_KEY="x"
  184. fi
  185. if [ -z "$SYNCING_SERVER_SQS_ENDPOINT" ]; then
  186. export SYNCING_SERVER_SQS_ENDPOINT="http://localstack:4566"
  187. fi
  188. export SYNCING_SERVER_AUTH_SERVER_URL=http://localhost:$AUTH_SERVER_PORT
  189. if [ -z "$SYNCING_SERVER_EMAIL_ATTACHMENT_MAX_BYTE_SIZE" ]; then
  190. export SYNCING_SERVER_EMAIL_ATTACHMENT_MAX_BYTE_SIZE=10485760
  191. fi
  192. if [ -z "$SYNCING_SERVER_REVISIONS_FREQUENCY" ]; then
  193. export SYNCING_SERVER_REVISIONS_FREQUENCY=300
  194. fi
  195. export SYNCING_SERVER_NEW_RELIC_ENABLED=false
  196. export SYNCING_SERVER_NEW_RELIC_APP_NAME="Syncing Server JS"
  197. export SYNCING_SERVER_NEW_RELIC_NO_CONFIG_FILE=true
  198. export SYNCING_SERVER_FILE_UPLOAD_PATH="/opt/shared/uploads"
  199. printenv | grep SYNCING_SERVER_ | sed 's/SYNCING_SERVER_//g' > /opt/bundled/syncing-server/packages/syncing-server/.env
  200. ################
  201. # FILES SERVER #
  202. ################
  203. if [ -z "$FILES_SERVER_LOG_LEVEL" ]; then
  204. export FILES_SERVER_LOG_LEVEL="info"
  205. fi
  206. export FILES_SERVER_NODE_ENV="production"
  207. export FILES_SERVER_VERSION="local"
  208. if [ -z "$FILES_SERVER_MAX_CHUNK_BYTES" ]; then
  209. export FILES_SERVER_MAX_CHUNK_BYTES=100000000
  210. fi
  211. export FILES_SERVER_NEW_RELIC_ENABLED=false
  212. if [ -z "$FILES_SERVER_SNS_TOPIC_ARN" ]; then
  213. export FILES_SERVER_SNS_TOPIC_ARN="arn:aws:sns:us-east-1:000000000000:files-local-topic"
  214. fi
  215. if [ -z "$FILES_SERVER_SNS_ENDPOINT" ]; then
  216. export FILES_SERVER_SNS_ENDPOINT="http://localstack:4566"
  217. fi
  218. if [ -z "$FILES_SERVER_SNS_SECRET_ACCESS_KEY" ]; then
  219. export FILES_SERVER_SNS_SECRET_ACCESS_KEY="x"
  220. fi
  221. if [ -z "$FILES_SERVER_SNS_ACCESS_KEY_ID" ]; then
  222. export FILES_SERVER_SNS_ACCESS_KEY_ID="x"
  223. fi
  224. if [ -z "$FILES_SERVER_SNS_AWS_REGION" ]; then
  225. export FILES_SERVER_SNS_AWS_REGION="us-east-1"
  226. fi
  227. if [ -z "$FILES_SERVER_SQS_QUEUE_URL" ]; then
  228. export FILES_SERVER_SQS_QUEUE_URL="http://localstack:4566/000000000000/files-local-queue"
  229. fi
  230. if [ -z "$FILES_SERVER_SQS_AWS_REGION" ]; then
  231. export FILES_SERVER_SQS_AWS_REGION="us-east-1"
  232. fi
  233. if [ -z "$FILES_SERVER_SQS_ACCESS_KEY_ID" ]; then
  234. export FILES_SERVER_SQS_ACCESS_KEY_ID="x"
  235. fi
  236. if [ -z "$FILES_SERVER_SQS_SECRET_ACCESS_KEY" ]; then
  237. export FILES_SERVER_SQS_SECRET_ACCESS_KEY="x"
  238. fi
  239. if [ -z "$FILES_SERVER_SQS_ENDPOINT" ]; then
  240. export FILES_SERVER_SQS_ENDPOINT="http://localstack:4566"
  241. fi
  242. printenv | grep FILES_SERVER_ | sed 's/FILES_SERVER_//g' > /opt/bundled/files/packages/files/.env
  243. #############
  244. # REVISIONS #
  245. #############
  246. if [ -z "$REVISIONS_SERVER_LOG_LEVEL" ]; then
  247. export REVISIONS_SERVER_LOG_LEVEL="info"
  248. fi
  249. export REVISIONS_SERVER_NODE_ENV="production"
  250. export REVISIONS_SERVER_VERSION="local"
  251. export REVISIONS_SERVER_NEW_RELIC_ENABLED=false
  252. if [ -z "$REVISIONS_SERVER_SNS_TOPIC_ARN" ]; then
  253. export REVISIONS_SERVER_SNS_TOPIC_ARN="arn:aws:sns:us-east-1:000000000000:revisions-server-local-topic"
  254. fi
  255. if [ -z "$REVISIONS_SERVER_SNS_ENDPOINT" ]; then
  256. export REVISIONS_SERVER_SNS_ENDPOINT="http://localstack:4566"
  257. fi
  258. if [ -z "$REVISIONS_SERVER_SNS_SECRET_ACCESS_KEY" ]; then
  259. export REVISIONS_SERVER_SNS_SECRET_ACCESS_KEY="x"
  260. fi
  261. if [ -z "$REVISIONS_SERVER_SNS_ACCESS_KEY_ID" ]; then
  262. export REVISIONS_SERVER_SNS_ACCESS_KEY_ID="x"
  263. fi
  264. if [ -z "$REVISIONS_SERVER_SNS_AWS_REGION" ]; then
  265. export REVISIONS_SERVER_SNS_AWS_REGION="us-east-1"
  266. fi
  267. if [ -z "$REVISIONS_SERVER_SQS_QUEUE_URL" ]; then
  268. export REVISIONS_SERVER_SQS_QUEUE_URL="http://localstack:4566/000000000000/revisions-server-local-queue"
  269. fi
  270. if [ -z "$REVISIONS_SERVER_SQS_AWS_REGION" ]; then
  271. export REVISIONS_SERVER_SQS_AWS_REGION="us-east-1"
  272. fi
  273. if [ -z "$REVISIONS_SERVER_SQS_ACCESS_KEY_ID" ]; then
  274. export REVISIONS_SERVER_SQS_ACCESS_KEY_ID="x"
  275. fi
  276. if [ -z "$REVISIONS_SERVER_SQS_SECRET_ACCESS_KEY" ]; then
  277. export REVISIONS_SERVER_SQS_SECRET_ACCESS_KEY="x"
  278. fi
  279. if [ -z "$REVISIONS_SERVER_SQS_ENDPOINT" ]; then
  280. export REVISIONS_SERVER_SQS_ENDPOINT="http://localstack:4566"
  281. fi
  282. printenv | grep REVISIONS_SERVER_ | sed 's/REVISIONS_SERVER_//g' > /opt/bundled/revisions/packages/revisions/.env
  283. ###############
  284. # API GATEWAY #
  285. ###############
  286. if [ -z "$API_GATEWAY_LOG_LEVEL" ]; then
  287. export API_GATEWAY_LOG_LEVEL="info"
  288. fi
  289. export API_GATEWAY_NODE_ENV=production
  290. export API_GATEWAY_VERSION=local
  291. export API_GATEWAY_NEW_RELIC_ENABLED=false
  292. export API_GATEWAY_NEW_RELIC_APP_NAME="API Gateway"
  293. export API_GATEWAY_NEW_RELIC_NO_CONFIG_FILE=true
  294. export API_GATEWAY_SYNCING_SERVER_JS_URL=http://localhost:$SYNCING_SERVER_PORT
  295. export API_GATEWAY_AUTH_SERVER_URL=http://localhost:$AUTH_SERVER_PORT
  296. export API_GATEWAY_REVISIONS_SERVER_URL=http://localhost:$REVISIONS_SERVER_PORT
  297. if [ -z "$PUBLIC_FILES_SERVER_URL" ]; then
  298. export PUBLIC_FILES_SERVER_URL=http://localhost:3125
  299. fi
  300. export API_GATEWAY_FILES_SERVER_URL=$PUBLIC_FILES_SERVER_URL
  301. printenv | grep API_GATEWAY_ | sed 's/API_GATEWAY_//g' > /opt/bundled/api-gateway/packages/api-gateway/.env
  302. # Run supervisor
  303. supervisord -c /etc/supervisord.conf
  304. exec "$@"