fi
}
-
##
-## Does the current IP match the domain name?
+## Check whether a connection to HOSTNAME ($1) on PORT ($2) is possible
##
-check_IP_match () {
- echo
- echo Checking your domain name . . .
- sleep 1
- local IFACE=none
- local IFCONFIG=`which ifconfig`
- /sbin/route |grep default > /tmp/route$PPID
-
- if grep default /tmp/route$PPID > /dev/null
+connect_to_port () {
+ HOST="$1"
+ PORT="$2"
+ VERIFY=`date +%s | sha256sum | base64 | head -c 20`
+ echo -e "HTTP/1.1 200 OK\n\n $VERIFY" | nc -w 4 -l -p $PORT >/dev/null 2>&1 &
+ if curl --proto =http -s $HOST:$PORT --connect-timeout 3 | grep $VERIFY >/dev/null 2>&1
then
- local IFACE=`cut -c 73-100 /tmp/route$PPID |head -1`
+ return 0
else
- echo WARNING: Cannot check your IP number.
+ curl --proto =http -s localhost:$PORT >/dev/null 2>&1
+ return 1
fi
- local IP=`$IFCONFIG $IFACE|grep "inet addr:" |cut -d":" -f 2|cut -d" " -f1|head -1`
- local RESOLVED_IP=`dig +short $1`
+}
- IP_LOOKS_GOOD=0
- if [[ ! -z $RESOLVED_IP ]]
- then
- if [ $IP == $RESOLVED_IP ]
- then
- echo $1 resolves to $IP. Looks good!
- echo
- local IP_LOOKS_GOOD=1
- fi
- fi
- if [ $IP_LOOKS_GOOD == 0 ]
+check_IP_match () {
+ HOST="$1"
+ echo
+ echo Checking your domain name . . .
+ if connect_to_port $HOST 443
then
- echo "-----------------------------------------"
- echo $1 does not resolve to $IP.
- echo IT IS ALMOST CERTAINLY A BAD IDEA TO TURN ON LET\'S ENCRYPT!!
- echo Unless you know why this check failed, DO NOT USE Let\'s Encrypt.
echo
- echo You should answer \"n\" at the next prompt and disable Let\'s Encrypt.
- echo You have been warned.
- echo "-----------------------------------------"
+ echo "Connection to $HOST succeeded."
+ else
+ echo WARNING:: This server does not appear to be accessible at $HOST:443.
+ echo
+ if connect_to_port $HOST 80
+ then
+ echo A connection to port 80 succeeds, however.
+ echo This suggests that your DNS settings are correct,
+ echo but something is keeping traffic to port 443 from getting to your server.
+ echo Check your networking configuration to see that connections to port 443 are allowed.
+ else
+ echo "A connection to http://$HOST (port 80) also fails."
+ echo
+ echo This suggests that $HOST resolves to the wrong IP address
+ echo or that traffic is not being routed to your server.
+ fi
+ echo
+ echo Google: \"open ports YOUR CLOUD SERVICE\" for information for resolving this problem.
+ echo
+ echo You should probably answer \"n\" at the next prompt and disable Let\'s Encrypt.
+ echo
+ echo This test might not work for all situations,
+ echo so if you can access Discourse at http://$HOST, you might try anyway.
+ sleep 3
fi
- sleep 1
}
##
os_type=$(check_OS)
avail_mem=0
- if [ $os_type == "Darwin" ]; then
+ if [ "$os_type" == "Darwin" ]; then
avail_mem=$(check_osx_memory)
else
avail_mem=$(check_linux_memory)
if [ "$avail_mem" -le 2 ]; then
total_swap=`free -g --si | awk ' /Swap:/ {print $2} '`
+
if [ "$total_swap" -lt 2 ]; then
echo "WARNING: Discourse requires at least 2GB of swap when running with 2GB of RAM"
echo "or less. This system does not appear to have sufficient swap space."
echo "Without sufficient swap space, your site may not work properly, and future"
echo "upgrades of Discourse may not complete successfully."
echo
- read -p "ENTER to create a 2GB swapfile now, or Ctrl+C to exit"
+ echo "Ctrl+C to exit or wait 5 seconds to have a 2GB swapfile created."
+ sleep 5
##
## derived from https://meta.discourse.org/t/13880
avail_gb=0
avail_cores=0
os_type=$(check_OS)
- if [ $os_type == "Darwin" ]; then
+ if [ "$os_type" == "Darwin" ]; then
avail_gb=$(check_osx_memory)
avail_cores=`sysctl hw.ncpu | awk '/hw.ncpu:/ {print $2}'`
else
rm $changelog
fi
+ echo $config_file memory parameters updated.
}
fi
read_config "LETSENCRYPT_ACCOUNT_EMAIL"
local letsencrypt_account_email=$read_config_result
- if [ $letsencrypt_account_email = "me@example.com" ]
+ if [ -z $letsencrypt_account_email ]
+ then
+ letsencrypt_account_email="me@example.com"
+ fi
+ if [ "$letsencrypt_account_email" = "me@example.com" ]
then
local letsencrypt_status="ENTER to skip"
else
if [ "$letsencrypt_status" = "ENTER to skip" ]
then
- echo "Let's Encrypt will not be configured"
local src='^ #\?- "templates\/web.ssl.template.yml"'
local dst=' #\- "templates\/web.ssl.template.yml"'
sed -i -e "s/$src/$dst/w $changelog" $config_file
- if [ -s $changelog ]
+ if [ ! -s $changelog ]
then
- echo "web.ssl.template.yml disabled"
- else
update_ok="n"
echo "web.ssl.template.yml NOT DISABLED--Are you using a non-standard template?"
fi
local dst=' #- "templates\/web.letsencrypt.ssl.template.yml"'
sed -i -e "s/$src/$dst/w $changelog" $config_file
- if [ -s $changelog ]
+ if [ ! -s $changelog ]
then
- echo "letsencrypt.ssl.template.yml disabled"
- else
update_ok="n"
echo "web.ssl.template.yml NOT DISABLED--Are you using a non-standard template?"
fi
echo -e "\nConfiguration file at $config_file updated successfully!\n"
else
echo -e "\nUnfortunately, there was an error changing $config_file\n"
+ echo -d "This may happen if you have made unexpected changes."
exit 1
fi
}
if (( result == 0 ))
then
- if [[ $config_line = *"$default"* ]]
+ if [[ "$config_line" = *"$default"* ]]
then
echo "$x left at incorrect default of example.com"
valid_config="n"
check_root
check_and_install_docker
check_disk_and_memory
-check_ports
##
## make a copy of the simple standalone config file
##
if [ -a $config_file ]
then
- echo "The configuration file $config_file already exists!"
+ echo "The configuration file $config_file already exists."
echo
echo ". . . reconfiguring . . ."
echo
+ echo
+ DATE=`date +"%Y-%m-%d-%H%M%S"`
+ BACKUP=$app_name.yml.$DATE.bak
+ echo Saving old file as $BACKUP
+ cp $config_file containers/$BACKUP
+ echo "Stopping existing container in 5 seconds or Control-C to cancel."
+ sleep 5
+ ./launcher stop app
+ echo
else
+ check_ports # don't need to check ports if Discourse was already installed
cp $template_path $config_file
fi
## if we reach this point without exiting, OK to proceed
## rebuild won't fail if there's nothing to rebuild and does the restart
##
+echo "Updates successful. Rebuilding in 5 seconds."
sleep 5 # Just a chance to ^C in case they were too fast on the draw
time ./launcher rebuild $app_name
projects / discourse_docker.git / blobdiff