mirror of
https://git.vectorsigma.ru/public/tubearchivist.git
synced 2026-08-04 22:39:38 +00:00
e9619c1242
* Avoid creating superuser if variables are removed Enables the removal of `TA_USERNAME` and/or `TA_PASSWORD` as a way of preventing an additional superuser being created when another exists. In the old code, `ELASTIC_USER` would never error due to the default, so this replaces the loop with one requirement on `ELASTIC_PASSWORD`. * Use .superuser_created to prevent re-creation Creates an empty `.superuser_created` file after successful creation, and uses this to skip the command on future runs. If the file doesn't exist, then `TA_USERNAME` and `TA_PASSWORD` will also be required. * The superuser password can't be empty ...well—it *can*—but the password input of the login form requires a value so even though the account is created, you can't actually login. * Parse createsuperuser output for 'exists' error If a user already exists with the same name as the superuser being created, the command fails with "Error: That name is already taken". It's probably safe to assume that user is the one we expect. This parses the output, treating it as successful so it can be skipped next time. If it hits the catch-all, something probably failed so we exit. * Use the cache for persistence Updates the .superuser_created file to be placed in /cache so that it gets persisted in a volume between config tweaks and container rebuilds. Also makes `TA_PASSWORD` required always, because it seems to be needed by tubearchivist/config/settings.py to generate a secret key. * Let it work outside Docker If /cache doesn't exist (i.e. when it's not running in Docker), this falls back to a `cache` dir in the current working directory instead. Also renames the file to 'initsu.lock' rather than having it hidden. * Use flexible fallback path for `celery` command
67 lines
1.9 KiB
Bash
67 lines
1.9 KiB
Bash
#!/bin/bash
|
|
# startup script inside the container for tubearchivist
|
|
|
|
if [[ -z "$ELASTIC_USER" ]]; then
|
|
export ELASTIC_USER=elastic
|
|
fi
|
|
|
|
cachedir=/cache
|
|
[[ -d $cachedir ]] || cachedir=.
|
|
lockfile=${cachedir}/initsu.lock
|
|
|
|
required="Missing required environment variable"
|
|
[[ -f $lockfile ]] || : "${TA_USERNAME:?$required}"
|
|
: "${TA_PASSWORD:?$required}"
|
|
: "${ELASTIC_PASSWORD:?$required}"
|
|
|
|
# ugly nginx and uwsgi port overwrite with env vars
|
|
if [[ -n "$TA_PORT" ]]; then
|
|
sed -i "s/8000/$TA_PORT/g" /etc/nginx/sites-available/default
|
|
fi
|
|
|
|
if [[ -n "$TA_UWSGI_PORT" ]]; then
|
|
sed -i "s/8080/$TA_UWSGI_PORT/g" /etc/nginx/sites-available/default
|
|
sed -i "s/8080/$TA_UWSGI_PORT/g" /app/uwsgi.ini
|
|
fi
|
|
|
|
# wait for elasticsearch
|
|
counter=0
|
|
until curl -u "$ELASTIC_USER":"$ELASTIC_PASSWORD" "$ES_URL" -fs; do
|
|
echo "waiting for elastic search to start"
|
|
counter=$((counter+1))
|
|
if [[ $counter -eq 12 ]]; then
|
|
# fail after 2 min
|
|
echo "failed to connect to elastic search, exiting..."
|
|
exit 1
|
|
fi
|
|
sleep 10
|
|
done
|
|
|
|
# start python application
|
|
python manage.py makemigrations
|
|
python manage.py migrate
|
|
|
|
if [[ -f $lockfile ]]; then
|
|
echo -e "\e[33;1m[WARNING]\e[0m This is not the first run! Skipping" \
|
|
"superuser creation.\nTo force it, remove $lockfile"
|
|
else
|
|
export DJANGO_SUPERUSER_PASSWORD=$TA_PASSWORD
|
|
output="$(python manage.py createsuperuser --noinput --name "$TA_USERNAME" 2>&1)"
|
|
|
|
case "$output" in
|
|
*"Superuser created successfully"*)
|
|
echo "$output" && touch $lockfile ;;
|
|
*"That name is already taken."*)
|
|
echo "Superuser already exists. Creation will be skipped on next start."
|
|
touch $lockfile ;;
|
|
*) echo "$output" && exit 1
|
|
esac
|
|
fi
|
|
|
|
python manage.py collectstatic --noinput -c
|
|
nginx &
|
|
celery -A home.tasks worker --loglevel=INFO &
|
|
celery -A home beat --loglevel=INFO \
|
|
-s "${BEAT_SCHEDULE_PATH:-${cachedir}/celerybeat-schedule}" &
|
|
uwsgi --ini uwsgi.ini
|