mirror of
https://github.com/chatmail/relay.git
synced 2026-05-11 16:34:39 +00:00
73 lines
2.2 KiB
Bash
Executable File
73 lines
2.2 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
set -eo pipefail
|
|
export CHATMAIL_INI="${CHATMAIL_INI:-/etc/chatmail/chatmail.ini}"
|
|
export ENABLE_CERTS_MONITORING="${ENABLE_CERTS_MONITORING:-true}"
|
|
export CERTS_MONITORING_TIMEOUT="${CERTS_MONITORING_TIMEOUT:-60}"
|
|
export PATH_TO_SSL="${PATH_TO_SSL:-/var/lib/acme/live/${MAIL_DOMAIN}}"
|
|
|
|
CMDEPLOY=/opt/cmdeploy/bin/cmdeploy
|
|
|
|
if [ -z "$MAIL_DOMAIN" ]; then
|
|
echo "ERROR: Environment variable 'MAIL_DOMAIN' must be set!" >&2
|
|
exit 1
|
|
fi
|
|
|
|
calculate_hash() {
|
|
if [ ! -d "$PATH_TO_SSL" ]; then
|
|
echo ""
|
|
return 0
|
|
fi
|
|
find "$PATH_TO_SSL" -type f -exec sha1sum {} \; | sort | sha1sum | awk '{print $1}'
|
|
}
|
|
|
|
monitor_certificates() {
|
|
if [ "$ENABLE_CERTS_MONITORING" != "true" ]; then
|
|
echo "Certs monitoring disabled."
|
|
return 0
|
|
fi
|
|
|
|
# Wait for certificate directory to exist before monitoring
|
|
echo "[INFO] Waiting for certificate directory: $PATH_TO_SSL"
|
|
while [ ! -d "$PATH_TO_SSL" ]; do
|
|
sleep "$CERTS_MONITORING_TIMEOUT"
|
|
done
|
|
echo "[INFO] Certificate directory found, starting monitoring."
|
|
|
|
previous_hash=$(calculate_hash)
|
|
|
|
while true; do
|
|
sleep "$CERTS_MONITORING_TIMEOUT"
|
|
current_hash=$(calculate_hash)
|
|
if [ -n "$current_hash" ] && [ "$current_hash" != "$previous_hash" ]; then
|
|
echo "[INFO] Certificate's folder hash was changed, reloading nginx, dovecot and postfix services."
|
|
systemctl reload nginx.service
|
|
systemctl reload dovecot.service
|
|
systemctl reload postfix.service
|
|
previous_hash=$current_hash
|
|
fi
|
|
done
|
|
}
|
|
|
|
### MAIN
|
|
|
|
if [ ! -f /etc/dkimkeys/opendkim.private ]; then
|
|
/usr/sbin/opendkim-genkey -D /etc/dkimkeys -d "$MAIL_DOMAIN" -s opendkim
|
|
fi
|
|
chown opendkim:opendkim /etc/dkimkeys/opendkim.private
|
|
chown opendkim:opendkim /etc/dkimkeys/opendkim.txt
|
|
|
|
# Create chatmail.ini (skips if file already exists, e.g. volume-mounted)
|
|
mkdir -p "$(dirname "$CHATMAIL_INI")"
|
|
if [ ! -f "$CHATMAIL_INI" ]; then
|
|
$CMDEPLOY init --config "$CHATMAIL_INI" "$MAIL_DOMAIN"
|
|
fi
|
|
|
|
export CMDEPLOY_STAGES="${CMDEPLOY_STAGES:-configure,activate}"
|
|
$CMDEPLOY run --config "$CHATMAIL_INI" --ssh-host @local
|
|
|
|
echo "ForwardToConsole=yes" >> /etc/systemd/journald.conf
|
|
systemctl restart systemd-journald
|
|
|
|
monitor_certificates &
|