274 lines
9.8 KiB
Bash
Executable File
274 lines
9.8 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# NodeMgmt - Galera/NGINX Node Management Scripts
|
|
|
|
action="$1"
|
|
|
|
if [ ! -f /opt/idssys/settings/nodemgmt.conf ]; then
|
|
if [ ! -d /opt/idssys/settings ]; then
|
|
mkdir /opt/idssys/settings
|
|
fi
|
|
mv /opt/idssys/nodemgmt/settings.conf /opt/idssys/settings/nodemgmt.conf
|
|
fi
|
|
|
|
source /opt/idssys/defaults/colors.inc
|
|
source /opt/idssys/defaults/default.inc
|
|
source /opt/idssys/settings/nodemgmt.conf
|
|
source /opt/idssys/nodemgmt/defaults.inc
|
|
|
|
|
|
# ========================================================= #
|
|
|
|
case "$1" in
|
|
service)
|
|
if [ "${NM_SERVICES[${2}]}" = "" ]; then
|
|
echo -e "${idsCL[Red]}(${2}) is not an allowed service.${idsCL[Default]}"
|
|
exit 1
|
|
fi
|
|
if [[ "start,stop,restart,reload,enable,disable" != *"${3}"* ]] && [ "${2}" != "daemon-reload" ]; then
|
|
echo -e "${idsCL[Red]}(${3}) is not an allowed service action.${idsCL[Default]}"
|
|
exit 1
|
|
fi
|
|
if [ "$3" = "stop" ]; then ADISP='Stopp'
|
|
elif [ "$3" = "enable" ]; then ADISP='Enabl'
|
|
elif [ "$3" = "disable" ]; then ADISP='Disabl'
|
|
else ADISP="$(tr '[:lower:]' '[:upper:]' <<< ${3:0:1})${3:1}"
|
|
fi
|
|
if [ "$3" = "start" ] && [ "$2" = "haproxy" ]; then TACT='restart'; else TACT="${3}"; fi
|
|
|
|
echo -e "${idsCL[LightGreen]}[[${NM_SERVICES[${2}]} ${ADISP}ing]]${idsCL[Default]}"
|
|
echo -e "${idsCL[LightGreen]}-------------------------------------------${idsCL[Default]}"
|
|
|
|
nid=1
|
|
for nip in "${NODE_HOSTS[@]}"
|
|
do
|
|
if [[ $(/sbin/ip -o -4 addr list ens192 | awk '{print $4}' | cut -d/ -f1) == *"${nip}"* ]]; then
|
|
nip='localhost'
|
|
NCMD=''
|
|
else
|
|
NCMD="ssh root@${nip}"
|
|
fi
|
|
echo -en "${ADISP}ing on Node ${nid} ($nip)...${idsCL[Default]}"
|
|
$NCMD systemctl $3 $2
|
|
if [[ "enable,disable" = *"${3}"* ]] || [ "${2}" = "daemon-reload" ]; then
|
|
echo -e "${idsCL[Green]}OK${idsCL[Default]}"
|
|
elif [[ $(${NCMD} pgrep ${2} | wc -l) -gt "0" ]]; then
|
|
echo -e "${idsCL[Green]}OK${idsCL[Default]}"
|
|
elif [ "$3" = "stop" ]; then echo -e "${idsCL[Red]}STOPPED${idsCL[Default]}"
|
|
else echo -e "${idsCL[Red]}ERROR${idsCL[Default]}"
|
|
fi
|
|
nid=`expr $nid + 1`
|
|
done
|
|
|
|
echo ""
|
|
echo -e "${idsCL[Green]}${NM_SERVICES[${2}]} has been ${ADISP}ed${idsCL[Default]}"
|
|
echo ""
|
|
exit 0
|
|
;;
|
|
|
|
newcert)
|
|
echo -e "${idsCL[LightGreen]}Requesting Certificate for '${idsCL[Yellow]}${2}${idsCL[LightGreen]}'...${idsCL[Default]}"
|
|
do_with_root $CERT_DAEMON certonly --webroot -w /var/www/html -d $2
|
|
do_with_root chown -R root:letsencrypt /etc/letsencrypt
|
|
do_with_root chmod -R 6775 /etc/letsencrypt
|
|
echo -e "${idsCL[LightGreen]}Waiting for Certificate Replication...${idsCL[Default]}"
|
|
sleep 20
|
|
"$0" service nginx reload
|
|
exit 0
|
|
;;
|
|
|
|
certrenew)
|
|
echo -e "${idsCL[LightGreen]}Renewing Certificates...${idsCL[Default]}"
|
|
do_with_root $CERT_DAEMON renew --webroot -w /var/www/html 2>&1 | tee /opt/idssys/nodemgmt/cert-renewal.lastrun
|
|
do_with_root chown -R root:letsencrypt /etc/letsencrypt 2>&1 | tee -a /opt/idssys/nodemgmt/cert-renewal.lastrun
|
|
do_with_root chmod -R 6775 /etc/letsencrypt 2>&1 | tee -a /opt/idssys/nodemgmt/cert-renewal.lastrun
|
|
echo -e "${idsCL[LightGreen]}Waiting for Certificate Replication...${idsCL[Default]}"
|
|
sleep 20
|
|
"$0" service nginx reload 2>&1 | tee -a /opt/idssys/nodemgmt/cert-renewal.lastrun
|
|
exit 0
|
|
;;
|
|
|
|
nightlyrenew)
|
|
rm -f /opt/idssys/nodemgmt/cert-renewal.lastrun
|
|
do_with_root $CERT_DAEMON renew --webroot -w /var/www/html &>> /opt/idssys/nodemgmt/cert-renewal.lastrun
|
|
do_with_root chown -R root:letsencrypt /etc/letsencrypt &>> /opt/idssys/nodemgmt/cert-renewal.lastrun
|
|
do_with_root chmod -R 6775 /etc/letsencrypt &>> /opt/idssys/nodemgmt/cert-renewal.lastrun
|
|
sleep 20
|
|
"$0" service nginx reload &>> /opt/idssys/nodemgmt/cert-renewal.lastrun
|
|
exit 0
|
|
;;
|
|
|
|
newsite)
|
|
mkdir /var/www/${1}/{public_folder,nginx_logs}
|
|
echo -e "server {
|
|
listen 8443 ssl http2;
|
|
listen 8080;
|
|
|
|
|
|
server_name ${1};
|
|
set $base /var/www/${1};
|
|
root $base/public_html;
|
|
|
|
access_log /var/www/${1}/nginx_logs/access.log;
|
|
error_log /var/www/${1}/nginx_logs/error.log warn;
|
|
|
|
ssl_certificate /etc/letsencrypt/live/${1}/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/${1}/privkey.pem;
|
|
include conf.d/include/ssl-ciphers.conf;
|
|
|
|
index index.php;
|
|
|
|
location / {
|
|
try_files $uri $uri/ /index.php?$query_string;
|
|
include conf.d/include/force-ssl.conf;
|
|
}
|
|
|
|
location ~ \.php$ {
|
|
fastcgi_pass unix:/var/run/php/php5.6-fpm.sock;
|
|
include conf.d/include/php_fastcgi.conf;
|
|
}
|
|
|
|
include conf.d/include/general.conf;
|
|
include conf.d/include/letsencrypt-acme-challenge.conf;
|
|
}
|
|
" > /etc/nginx/sites-available/${1}.conf
|
|
nodemgmt set-permissions {$1}
|
|
;;
|
|
|
|
update)
|
|
exit 0
|
|
;;
|
|
|
|
status)
|
|
echo -e "${idsCL[Yellow]} NodeMgmt - Galera/NGINX Node Management${idsCL[Default]} ${idsCL[DarkGray]}(ver-${VERS})${idsCL[Default]}"
|
|
|
|
if [ ! -z ${LOCAL_SERVICES+x} ]; then
|
|
lip=$(/sbin/ip -o -4 addr list ens192 | awk '{print $4}' | cut -d/ -f1)
|
|
echo -e "${idsCL[Yellow]}-------------------------------------------------------------${idsCL[Default]}"
|
|
echo -e "Node hostname: ${idsST[Bold]}${idsCL[LightCyan]}${NODE_HOSTNAME} (${lip})${idsST[Reset]}${idsCL[LightCyan]} - localhost${idsCL[Default]}"
|
|
for srvc in "${LOCAL_SERVICES[@]}"
|
|
do
|
|
if [[ "mysql,nginx,gitea,haproxy,keepalived,maxscale" = *"${srvc}"* ]]; then spc=" "; else spc=""; fi
|
|
echo -en "${NM_SERVICES[${srvc}]} $spc"
|
|
if [ $(pgrep ${srvc} | wc -l) -gt "0" ]; then
|
|
echo -e "${idsCL[Green]}Running${idsCL[Default]}"
|
|
else echo -e "${idsCL[Red]}Not Running${idsCL[Default]}"
|
|
fi
|
|
done
|
|
fi
|
|
|
|
nid=1
|
|
for nip in "${NODE_HOSTS[@]}"
|
|
do
|
|
if [[ $(/sbin/ip -o -4 addr list ens192 | awk '{print $4}' | cut -d/ -f1) == *"${nip}"* ]]; then NCMD=''; LH='- localhost'
|
|
else NCMD="ssh root@${nip}"; LH=''
|
|
fi
|
|
|
|
echo -e "${idsCL[Yellow]}-------------------------------------------------------------${idsCL[Default]}"
|
|
echo -e "Node hostname: ${idsST[Bold]}${idsCL[LightCyan]}iDS-Node${nid} (${nip})${idsST[Reset]}${idsCL[LightCyan]} ${LH}${idsCL[Default]}"
|
|
for srvc in "${NODE_SERVICES[@]}"
|
|
do
|
|
if [[ "mysql,nginx,gitea,haproxy,keepalived,maxscale" = *"${srvc}"* ]]; then spc=" "; else spc=""; fi
|
|
echo -en "${NM_SERVICES[${srvc}]} $spc"
|
|
if [ $(${NCMD} pgrep ${srvc} | wc -l) -gt "0" ]; then
|
|
echo -e "${idsCL[Green]}Running${idsCL[Default]}"
|
|
else echo -e "${idsCL[Red]}Not Running${idsCL[Default]}"
|
|
fi
|
|
done
|
|
nid=`expr $nid + 1`
|
|
done
|
|
|
|
echo -e "${idsCL[Yellow]}-------------------------------------------------------------${idsCL[Default]}"
|
|
echo ""
|
|
;;
|
|
|
|
status-check)
|
|
if [ "${STATUS_CHECK_EMAIL}" != "" ]; then
|
|
if [ ! -z ${LOCAL_SERVICES+x} ]; then
|
|
lip=$(/sbin/ip -o -4 addr list ens192 | awk '{print $4}' | cut -d/ -f1)
|
|
for srvc in "${LOCAL_SERVICES[@]}"
|
|
do
|
|
if [ $(pgrep ${srvc} | wc -l) -lt "1" ]; then
|
|
echo "${NM_SERVICES[${srvc}]} is down" | mail -s "${NODE_HOSTNAME}-${nip}" ${STATUS_CHECK_EMAIL}
|
|
touch ${FOLDER}/localhost-${srvc}.down
|
|
elif [ -f ${FOLDER}/localhost-${srvc}.down ]; then
|
|
echo "${NM_SERVICES[${srvc}]} is back UP!" | mail -s "${NODE_HOSTNAME}-${nip}" ${STATUS_CHECK_EMAIL}
|
|
rm -f ${FOLDER}/localhost-${srvc}.down
|
|
fi
|
|
done
|
|
fi
|
|
if [ -z ${LOCAL_SERVICES+x} ] || [ "${2}" = "all" ]; then
|
|
nid=1
|
|
for nip in "${NODE_HOSTS[@]}"
|
|
do
|
|
if [[ $(/sbin/ip -o -4 addr list ens192 | awk '{print $4}' | cut -d/ -f1) == *"${nip}"* ]]; then NCMD=''
|
|
else NCMD="ssh root@${nip}"
|
|
fi
|
|
for srvc in "${NODE_SERVICES[@]}"
|
|
do
|
|
if [ $(${NCMD} pgrep ${srvc} | wc -l) -lt "1" ]; then
|
|
echo "${NM_SERVICES[${srvc}]} is down" | mail -s "iDS-Node${nid}-${nip}" ${STATUS_CHECK_EMAIL}
|
|
touch ${FOLDER}/${nip}-${srvc}.down
|
|
elif [ -f ${FOLDER}/${nip}-${srvc}.down ]; then
|
|
echo "${NM_SERVICES[${srvc}]} is back UP!" | mail -s "iDS-Node${nid}-${nip}" ${STATUS_CHECK_EMAIL}
|
|
rm -f ${FOLDER}/${nip}-${srvc}.down
|
|
fi
|
|
done
|
|
nid=`expr $nid + 1`
|
|
done
|
|
fi
|
|
fi
|
|
;;
|
|
|
|
set-permissions)
|
|
if [ "${1}" != "" ]; then
|
|
echo -e "${idsCL[Yellow]}Setting new site folder permissions for (/var/www/${1})${idsCL[Default]}"
|
|
fi
|
|
nid=1
|
|
for nip in "${NODE_HOSTS[@]}"
|
|
do
|
|
if [[ $(/sbin/ip -o -4 addr list ens192 | awk '{print $4}' | cut -d/ -f1) == *"${nip}"* ]]; then
|
|
nip='localhost'
|
|
NCMD=''
|
|
else
|
|
NCMD="ssh root@${nip}"
|
|
fi
|
|
if [ "${1}" != "" ]; then
|
|
echo -en "${idsCL[Cyan]}iDS-Node{nid} (${nip}) ${idsCL[Default]}"
|
|
${NCMD} chown -R www-data:www-data /var/www/${1}
|
|
${NCMD} chmod -R 7775 /var/www/${1}
|
|
echo -e "${idsCL[Green]}Complete${idsCL[Default]}"
|
|
else
|
|
echo -e "${idsCL[Yellow]}Setting folder permissions for iDS-Node{nid} (${nip})${idsCL[Default]}"
|
|
echo -en "${idsCL[Cyan]}LetsEncrypt Certs ${idsCL[Default]}"
|
|
${NCMD} chown -R root:letsencrypt /etc/letsencrypt
|
|
${NCMD} chmod -R 6775 /etc/letsencrypt
|
|
echo -e "${idsCL[Green]}Complete${idsCL[Default]}"
|
|
echo -en "${idsCL[Cyan]}Webserver folders ${idsCL[Default]}"
|
|
${NCMD} chown -R www-data:www-data /var/www
|
|
${NCMD} chmod -R 7775 /var/www
|
|
echo -e "${idsCL[Green]}Complete${idsCL[Default]}"
|
|
echo -en "${idsCL[Cyan]}Gogs Folder ${idsCL[Default]}"
|
|
${NCMD} chown -R gogs:gogs /var/www/gogs
|
|
${NCMD} chmod -R 750 /var/www/gogs
|
|
echo -e "${idsCL[Green]}Complete${idsCL[Default]}"
|
|
echo -en "${idsCL[Cyan]}Gitea Folder ${idsCL[Default]}"
|
|
${NCMD} chown -R git:git /var/lib/gitea
|
|
${NCMD} chmod -R 750 /var/lib/gitea
|
|
echo -e "${idsCL[Green]}Complete${idsCL[Default]}"
|
|
echo ""
|
|
fi
|
|
nid=`expr $nid + 1`
|
|
done
|
|
if [ "${1}" != "" ]; then echo ""; fi
|
|
;;
|
|
|
|
*)
|
|
echo -e "Usage: ${idsCL[Yellow]}nodemgmt${idsCL[Default]} { ${idsCL[Yellow]}service${idsCL[Default]} [service] [action] | ${idsCL[Yellow]}status${idsCL[Default]} | ${idsCL[Yellow]}newcert${idsCL[Default]} [domain(,s)] | ${idsCL[Yellow]}certrenew${idsCL[Default]} }"
|
|
echo ""
|
|
echo ""
|
|
exit 0
|
|
;;
|
|
|
|
esac
|
|
|
|
exit 0 |