entrypoint-pen.sh
2.63 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
#!/bin/bash
# ENVIRONMENT VARIABLES
# $SEI_PROD
# $SEI_HOST_URL
# $SEI_ORGAO
# $SEI_DB_USERNAME
# $SEI_DB_PASSWORD
# $SMTP_SERVER
# $SMTP_PORT
set -e
# Direciona logs para saida padrão para utilizar docker logs
# ln -sf /dev/stdout /var/log/httpd/access_log
# ln -sf /dev/stdout /var/log/httpd/ssl_access_log
# ln -sf /dev/stdout /var/log/httpd/ssl_request_log
# ln -sf /dev/stderr /var/log/httpd/error_log
# ln -sf /dev/stderr /var/log/httpd/ssl_error_log
# Direcionamento de logs para rancher - supervisor v 3.3
#ln -sf /dev/stdout /var/log/supervisor/sei-supervisord-stdout.log
#ln -sf /dev/stderr /var/log/supervisor/sei-supervisord-stderr.log
# Direcionamento de logs para rancher - supervisor v 2
#ln -sf /dev/stdout /var/log/supervisor/sei-supervisord.log
#ln -sf /dev/stderr /var/log/supervisor/sei-supervisord.log
# Gera certificados caso necessário para desenvolvimento
if [ ! -d "/etc/ssl/certs/sei/" ]; then
echo "Creating self-signed certificates"
mkdir /etc/ssl/certs/sei
fi
if [ -z "$(ls -A /etc/ssl/certs/sei)" ]; then
cd /etc/ssl/certs/sei
echo "Creating CA"
openssl genrsa -out sei-ca-key.pem 2048
openssl req -x509 -new -nodes -key sei-ca-key.pem \
-days 10000 -out sei-ca.pem -subj "/CN=sei-dev"
echo "Creating certificates for $SEI_HOST_URL"
openssl genrsa -out sei.key 2048
openssl req -new -nodes -key sei.key \
-days 10000 -out sei.csr -subj "/CN=$SEI_HOST_URL"
openssl x509 -req -in sei.csr -CA sei-ca.pem \
-CAkey sei-ca-key.pem -CAcreateserial \
-out sei.crt -days 10000 -extensions v3_req
fi
cd /etc/ssl/certs/sei
cat /etc/ssl/certs/sei/sei-ca.pem >> /etc/ssl/certs/cacert.pem
cp sei.crt /etc/pki/tls/certs/sei.crt
cp sei.key /etc/pki/tls/private/sei.key
cat sei.crt sei.key >> /etc/pki/tls/certs/sei.pem
# Set etc/hosts - caso nao seja producao
if [ -z "$SEI_PROD" ]; then
IP=`ifconfig | awk '/inet addr/{print substr($2,6)}' | head -1`
echo $IP $SEI_HOST_URL >> /etc/hosts
fi
#
# Exemplo: SEI_MODULOS = 'PENIntegracao' => 'mod-sei-barramento', 'MdWsSeiRest' => 'mod-wssei'
#
if [ ! -z "$SEI_MODULOS" ]; then
echo "Alterando os módulos ativos do SEI"
sed -i '/Modulos/c\Modulos=> array('"$SEI_MODULOS"')' /opt/sei/config/ConfiguracaoSEI.php
fi
#Crontab configuration
echo "*/5 * * * * /opt/sei/bin/verificar-servicos.sh" > /var/spool/cron/root
service crond start
service gearmand start
exec "$@"