mirror of
https://github.com/hanzozt/console.git
synced 2026-10-30 18:15:39 +00:00
zeekay
6419672245
- Replace all "Ziti Admin Console" / "ZAC" with "Zero Trust Console" / "ZTC" - Replace "NetFoundry" branding with "Hanzo" / "Hanzo AI" - Remove Google Analytics (UA-91801335-7) - Update package metadata (name, author, imageRepo) - Change session secret from NetFoundryZiti to HanzoZeroTrust - Add GitHub Actions workflow for Docker image builds - Console will be served at ztc.hanzo.ai with hanzo.id OIDC auth
82 lines
2.3 KiB
Bash
Executable File
82 lines
2.3 KiB
Bash
Executable File
#!/bin/bash
|
|
#
|
|
# this script is used to run zac within a container
|
|
#
|
|
# this adds two symlinks required to run the server with TLS:
|
|
# - the private key: server.key -> ${ZAC_SERVER_KEY}
|
|
# - certificate chain, including any intermediates: server.chain.pem -> ${ZAC_SERVER_CERT_CHAIN}
|
|
|
|
if [[ "${ZAC_SERVER_KEY}" != "" ]]; then
|
|
while [ ! -f "${ZAC_SERVER_KEY}" ]; do
|
|
echo "waiting for server key to exist..."
|
|
sleep 3
|
|
done
|
|
|
|
echo "ZTC will use this key for TLS: ${ZAC_SERVER_KEY}"
|
|
ln -s "${ZAC_SERVER_KEY}" /usr/src/app/server.key
|
|
fi
|
|
if [[ "${ZAC_SERVER_CERT_CHAIN}" != "" ]]; then
|
|
while [ ! -f "${ZAC_SERVER_CERT_CHAIN}" ]; do
|
|
echo "waiting for server cert chain to exist..."
|
|
sleep 3
|
|
done
|
|
|
|
echo "ZTC will present this pem for TLS: ${ZAC_SERVER_CERT_CHAIN}"
|
|
ln -s "${ZAC_SERVER_CERT_CHAIN}" /usr/src/app/server.chain.pem
|
|
fi
|
|
|
|
if [[ "${ZITI_CTRL_EDGE_ADVERTISED_ADDRESS}" != "" ]]; then
|
|
if [[ "${ZITI_CTRL_EDGE_ADVERTISED_PORT}" != "" ]]; then
|
|
if [[ "${ZITI_CTRL_NAME}" == "" ]]; then
|
|
ZITI_CTRL_NAME="docker-based-controller"
|
|
fi
|
|
echo "emitting settings.json"
|
|
cat > /usr/src/app/assets/data/settings.json <<HERE
|
|
{
|
|
"edgeControllers":[{
|
|
"name":"${ZITI_CTRL_NAME}",
|
|
"url":"https://${ZITI_CTRL_EDGE_ADVERTISED_ADDRESS}:${ZITI_CTRL_EDGE_ADVERTISED_PORT}",
|
|
"default":true
|
|
}],
|
|
"editable": true,
|
|
"update": false,
|
|
"location": "../zt",
|
|
"port": 1408,
|
|
"portTLS": 8443,
|
|
"logo": "",
|
|
"primary": "",
|
|
"secondary": "",
|
|
"allowPersonal": true,
|
|
"rejectUnauthorized": false,
|
|
"mail": {
|
|
"host": "",
|
|
"port": 25,
|
|
"secure": false,
|
|
"auth": {
|
|
"user": "",
|
|
"pass": ""
|
|
}
|
|
},
|
|
"from": "",
|
|
"to": ""
|
|
}
|
|
HERE
|
|
else
|
|
echo ZITI_CTRL_EDGE_ADVERTISED_ADDRESS set but ZITI_CTRL_EDGE_ADVERTISED_PORT not set. cannot create default server
|
|
fi
|
|
fi
|
|
|
|
if [[ "$1" == "classic" ]]; then
|
|
echo "Running Classic ZTC Application"
|
|
exec node /usr/src/app/server.js classic
|
|
elif [[ "$1" == "edge-api" ]]; then
|
|
echo "Running ZTC server with Edge API integration"
|
|
exec node /usr/src/app/server-edge.js
|
|
elif (( $#)); then
|
|
echo "Running: server.js $*"
|
|
exec node /usr/src/app/server.js $*
|
|
else
|
|
echo "Running ZTC Server with Node API Integration"
|
|
exec node /usr/src/app/server.js node-api
|
|
fi
|