nhyatt/bitwarden
1
0
Fork 0
mirror of https://github.com/bitwarden/server.git synced 2025-06-30 15:42:48 -05:00
Code Activity

step down from host root LUID

Browse Source
This commit is contained in:
Kyle Spearrin
2018-03-27 22:57:30 -04:00
parent ecb490e8a8
commit 95b25246f1
8 changed files with 140 additions and 76 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
util/Nginx/entrypoint.sh
View File

@ -1,24 +1,32 @@
#!/bin/bash
NOUSER=`id -u bitwarden > /dev/null 2>&1; echo $?`
USERNAME="bitwarden"
NOUSER=`id -u $USERNAME > /dev/null 2>&1; echo $?`
LUID=${LOCAL_UID:-999}
if [ $NOUSER == 0 ] && [ `id -u bitwarden` != $LUID ]
# Step down from host root
if [ $LUID == 0 ]
then
usermod -u $LUID bitwarden
elif [ $NOUSER == 1 ]
then
useradd -r -u $LUID -g bitwarden bitwarden
LUID=999
fi
chown -R bitwarden:bitwarden /etc/bitwarden
if [ $NOUSER == 0 ] && [ `id -u $USERNAME` != $LUID ]
then
usermod -u $LUID $USERNAME
elif [ $NOUSER == 1 ]
then
useradd -r -u $LUID -g $USERNAME $USERNAME
fi
chown -R $USERNAME:$USERNAME /etc/bitwarden
cp /etc/bitwarden/nginx/default.conf /etc/nginx/conf.d/default.conf
mkdir -p /etc/letsencrypt
chown -R bitwarden:bitwarden /etc/letsencrypt
chown -R $USERNAME:$USERNAME /etc/letsencrypt
mkdir -p /etc/ssl
chown -R bitwarden:bitwarden /etc/ssl
chown -R $USERNAME:$USERNAME /etc/ssl
touch /var/run/nginx.pid
chown -R bitwarden:bitwarden /var/run/nginx.pid
chown -R bitwarden:bitwarden /var/cache/nginx
chown -R bitwarden:bitwarden /var/log/nginx
chown -R $USERNAME:$USERNAME /var/run/nginx.pid
chown -R $USERNAME:$USERNAME /var/cache/nginx
chown -R $USERNAME:$USERNAME /var/log/nginx
gosu bitwarden:bitwarden nginx -g 'daemon off;'
gosu $USERNAME:$USERNAME nginx -g 'daemon off;'