dbd517b279
- Update dbis_core, cross-chain-pmm-lps, explorer-monorepo, metamask-integration, pr-workspace/chains - Omit embedded publish git dirs and empty placeholders from index Made-with: Cursor
89 lines
4.1 KiB
Bash
Executable File
89 lines
4.1 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Create or update NPMplus proxy host: omdnl.org + www.omdnl.org → static nginx upstream.
|
|
#
|
|
# Add Cloudflare A records first (scripts/cloudflare/configure-omdnl-org-dns.sh).
|
|
# Then request certificates in NPM (SSL) once DNS resolves.
|
|
#
|
|
# Env: NPM_URL, NPM_EMAIL, NPM_PASSWORD; optional:
|
|
# OMDNL_ORG_UPSTREAM_IP (default IP_OMDNL_ORG_WEB / 192.168.11.222)
|
|
# OMDNL_ORG_UPSTREAM_PORT (default 80)
|
|
# NPM_CURL_MAX_TIME (default 300)
|
|
set -euo pipefail
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
|
|
source "${PROJECT_ROOT}/config/ip-addresses.conf" 2>/dev/null || true
|
|
|
|
_orig_npm_url="${NPM_URL:-}"
|
|
_orig_npm_email="${NPM_EMAIL:-}"
|
|
_orig_npm_password="${NPM_PASSWORD:-}"
|
|
if [ -f "$PROJECT_ROOT/.env" ]; then set +u; source "$PROJECT_ROOT/.env"; set -u; fi
|
|
[ -n "$_orig_npm_url" ] && NPM_URL="$_orig_npm_url"
|
|
[ -n "$_orig_npm_email" ] && NPM_EMAIL="$_orig_npm_email"
|
|
[ -n "$_orig_npm_password" ] && NPM_PASSWORD="$_orig_npm_password"
|
|
source "${PROJECT_ROOT}/config/ip-addresses.conf" 2>/dev/null || true
|
|
|
|
NPM_URL="${NPM_URL:-https://${IP_NPMPLUS:-192.168.11.167}:81}"
|
|
NPM_EMAIL="${NPM_EMAIL:-}"
|
|
NPM_PASSWORD="${NPM_PASSWORD:-}"
|
|
[ -z "$NPM_PASSWORD" ] && { echo "NPM_PASSWORD required (.env or export)" >&2; exit 1; }
|
|
|
|
UP_IP="${OMDNL_ORG_UPSTREAM_IP:-${IP_OMDNL_ORG_WEB:-192.168.11.222}}"
|
|
UP_PORT="${OMDNL_ORG_UPSTREAM_PORT:-80}"
|
|
|
|
NPM_CURL_MAX_TIME="${NPM_CURL_MAX_TIME:-300}"
|
|
curl_npm() { curl -s -k -L --http1.1 --connect-timeout 30 --max-time "$NPM_CURL_MAX_TIME" "$@"; }
|
|
|
|
try_connect() { curl -s -k -L -o /dev/null --connect-timeout 5 --max-time 20 "$1" 2>/dev/null; }
|
|
if ! try_connect "$NPM_URL/"; then
|
|
http_url="${NPM_URL/https:/http:}"
|
|
try_connect "$http_url/" && NPM_URL="$http_url"
|
|
fi
|
|
|
|
AUTH_JSON=$(jq -n --arg identity "$NPM_EMAIL" --arg secret "$NPM_PASSWORD" '{identity:$identity,secret:$secret}')
|
|
TOKEN=$(curl_npm -X POST "$NPM_URL/api/tokens" -H "Content-Type: application/json" -d "$AUTH_JSON" | jq -r '.token // empty')
|
|
[ -n "$TOKEN" ] && [ "$TOKEN" != "null" ] || { echo "NPM auth failed" >&2; exit 1; }
|
|
|
|
ADV='add_header Referrer-Policy "strict-origin-when-cross-origin" always;'
|
|
PAYLOAD_ADD=$(jq -n \
|
|
--argjson domains '["omdnl.org","www.omdnl.org"]' \
|
|
--arg host "$UP_IP" \
|
|
--argjson port "$UP_PORT" \
|
|
--arg adv "$ADV" \
|
|
'{domain_names:$domains,forward_scheme:"http",forward_host:$host,forward_port:$port,allow_websocket_upgrade:false,block_exploits:true,certificate_id:null,ssl_forced:false,advanced_config:$adv}')
|
|
|
|
echo "Trying create (POST) omdnl.org + www → http://${UP_IP}:${UP_PORT}"
|
|
RESP=$(curl_npm -X POST "$NPM_URL/api/nginx/proxy-hosts" -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" -d "$PAYLOAD_ADD")
|
|
if echo "$RESP" | jq -e '.id' >/dev/null 2>&1; then
|
|
echo "OK created id=$(echo "$RESP" | jq -r .id)"
|
|
exit 0
|
|
fi
|
|
|
|
ERR_MSG=$(echo "$RESP" | jq -r '.message // .error.message // .error // empty' 2>/dev/null || echo "")
|
|
if ! echo "$ERR_MSG" | grep -qiE 'already|in use|exist|duplicate|unique'; then
|
|
echo "Create failed (not a duplicate case): $ERR_MSG" >&2
|
|
echo "$RESP" | jq . 2>/dev/null || echo "$RESP"
|
|
exit 1
|
|
fi
|
|
|
|
echo "Host exists; fetching proxy list for PUT ($ERR_MSG)"
|
|
PROXY_JSON=$(curl_npm -X GET "$NPM_URL/api/nginx/proxy-hosts" -H "Authorization: Bearer $TOKEN")
|
|
HOST_ID=$(echo "$PROXY_JSON" | jq -r '
|
|
.[] | select(.domain_names | type == "array") |
|
|
select(any(.domain_names[]; (. | tostring | ascii_downcase) == "omdnl.org")) |
|
|
.id' | head -n1)
|
|
|
|
if [ -z "$HOST_ID" ] || [ "$HOST_ID" = "null" ]; then
|
|
echo "Could not resolve proxy host id for omdnl.org." >&2
|
|
exit 1
|
|
fi
|
|
|
|
echo "Updating proxy host id=$HOST_ID -> http://${UP_IP}:${UP_PORT}"
|
|
PAYLOAD_PUT=$(jq -n \
|
|
--arg host "$UP_IP" \
|
|
--argjson port "$UP_PORT" \
|
|
--arg adv "$ADV" \
|
|
'{forward_scheme:"http",forward_host:$host,forward_port:$port,allow_websocket_upgrade:false,block_exploits:true,advanced_config:$adv}')
|
|
RESP=$(curl_npm -X PUT "$NPM_URL/api/nginx/proxy-hosts/$HOST_ID" -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" -d "$PAYLOAD_PUT")
|
|
echo "$RESP" | jq -e '.id' >/dev/null && echo "OK updated" || { echo "$RESP" | jq . 2>/dev/null || echo "$RESP"; exit 1; }
|