79 lines
3.4 KiB
Bash
79 lines
3.4 KiB
Bash
|
#!/usr/bin/env bash
|
||
|
|
## create-vhost-litespeed.sh — sets up OLS config for one customer site.
|
||
|
|
##
|
||
|
|
## Approach: keep the stock LiteSpeed-shipped httpd_config.conf VERBATIM
|
||
|
|
## (it has all the cgid/lscgid plumbing that lscgid needs to actually
|
||
|
|
## create its IPC socket), and just APPEND our listeners + vhTemplate.
|
||
|
|
## The custom vhost template lives at conf/templates/site.conf and points
|
||
|
|
## at /home/${user}/public_html. envsubst renders our user/domain into
|
||
|
|
## both files at container start.
|
||
|
|
##
|
||
|
|
## Expects in env: user, domain, serveralias (optional).
|
||
|
|
set -euo pipefail
|
||
|
|
|
||
|
|
TPL_DIR=${TPL_DIR:-/etc/lsws-templates}
|
||
|
|
LSWS_CONF=/usr/local/lsws/conf
|
||
|
|
|
||
|
|
## Ensure the conf dir has stock config to append to. On first boot with
|
||
|
|
## a fresh image this is a no-op (image ships with conf/ populated). With
|
||
|
|
## a future volume mount of conf/, the upstream entrypoint pattern would
|
||
|
|
## copy from .conf/* — keep parity:
|
||
|
|
if [ -z "$(ls -A -- "$LSWS_CONF/" 2>/dev/null)" ]; then
|
||
|
|
cp -R /usr/local/lsws/.conf/* "$LSWS_CONF/"
|
||
|
|
fi
|
||
|
|
|
||
|
|
## Build the serveralias suffix for vhDomain. Empty for none, else
|
||
|
|
## ",alias1,alias2" prepended to the comma list.
|
||
|
|
vhost_map_aliases=""
|
||
|
|
if [ -n "${serveralias:-}" ]; then
|
||
|
|
for alias in $(echo "$serveralias" | tr ',' ' '); do
|
||
|
|
[ -z "$alias" ] && continue
|
||
|
|
vhost_map_aliases="${vhost_map_aliases},${alias}"
|
||
|
|
done
|
||
|
|
fi
|
||
|
|
export vhost_map_aliases user domain
|
||
|
|
|
||
|
|
## --- prep the stock httpd_config.conf before appending ours ---
|
||
|
|
## Stock ships with `listener HTTP {*:80}`, `listener HTTPS {*:443}`, and
|
||
|
|
## a `vhTemplate docker` mapped to /var/www/vhosts/$VH_NAME/html — these
|
||
|
|
## conflict with our ports and would shadow our siteVH vhost. Strip them
|
||
|
|
## and the demo `virtualHost Example`, but KEEP `listener Default` (it's
|
||
|
|
## bound to 8088 — harmless internally, removing risks unrelated breakage).
|
||
|
|
## Always restart from a stock copy so re-runs are idempotent (otherwise
|
||
|
|
## a second sed pass on already-stripped config corrupts it).
|
||
|
|
cp /usr/local/lsws/.conf/httpd_config.conf "$LSWS_CONF/httpd_config.conf"
|
||
|
|
|
||
|
|
## Strip the stock blocks we replace. Use awk: easier than sed range-deletes
|
||
|
|
## to skip a NAMED block of arbitrary length terminated by a top-level `}`.
|
||
|
|
awk '
|
||
|
|
BEGIN { skip = 0 }
|
||
|
|
/^listener HTTP \{/ || /^listener HTTPS \{/ || /^vhTemplate docker \{/ { skip = 1; next }
|
||
|
|
skip && /^\}/ { skip = 0; next }
|
||
|
|
!skip { print }
|
||
|
|
' "$LSWS_CONF/httpd_config.conf" > "$LSWS_CONF/httpd_config.conf.new"
|
||
|
|
mv "$LSWS_CONF/httpd_config.conf.new" "$LSWS_CONF/httpd_config.conf"
|
||
|
|
|
||
|
|
## --- append our listeners + vhTemplate ---
|
||
|
|
SENTINEL="## ---- cac-litespeed append (do not edit below) ----"
|
||
|
|
{
|
||
|
|
echo ""
|
||
|
|
echo "$SENTINEL"
|
||
|
|
envsubst '${user} ${domain} ${vhost_map_aliases}' < "$TPL_DIR/httpd_config.tpl"
|
||
|
|
} >> "$LSWS_CONF/httpd_config.conf"
|
||
|
|
|
||
|
|
## --- write our vhost template to /usr/local/lsws/conf/templates/site.conf ---
|
||
|
|
envsubst '${user}' < "$TPL_DIR/site-template.tpl" \
|
||
|
|
> "$LSWS_CONF/templates/site.conf"
|
||
|
|
|
||
|
|
## --- per-vhost config file the vhTemplate will reference ---
|
||
|
|
## OLS creates conf/vhosts/$VH_NAME/ at template-instantiation time, but
|
||
|
|
## we pre-create it to satisfy the configFile path and write a minimal
|
||
|
|
## vhconf.conf (empty body — all real config is inline in the template's
|
||
|
|
## virtualHostConfig{} block).
|
||
|
|
mkdir -p "$LSWS_CONF/vhosts/siteVH"
|
||
|
|
echo "## auto-generated; real vhost config is in templates/site.conf" \
|
||
|
|
> "$LSWS_CONF/vhosts/siteVH/vhconf.conf"
|
||
|
|
|
||
|
|
## Permissions: OLS reads conf/ as lsadm. Don't break that.
|
||
|
|
chown -R lsadm:nogroup "$LSWS_CONF" 2>/dev/null || true
|