31 lines
907 B
Bash
31 lines
907 B
Bash
|
#!/bin/sh
|
||
|
|
set -e
|
||
|
|
apk add jq su-exec
|
||
|
|
if [ "$ENABLE_HTTPS_PROXY" == true ]; then
|
||
|
|
|
||
|
|
while [ ! -f /etc/resty-auto-ssl/storage/file/*latest ]
|
||
|
|
do
|
||
|
|
echo "ERROR: certificate doesn't exist yet."
|
||
|
|
echo "Certificate gets create on the first request to the HTTPS proxy."
|
||
|
|
echo "We will try again..."
|
||
|
|
sleep 10
|
||
|
|
done
|
||
|
|
|
||
|
|
# extract cert
|
||
|
|
cat /etc/resty-auto-ssl/storage/file/*%3Alatest | jq -r '.fullchain_pem' > /tmp/cert.pem
|
||
|
|
cat /etc/resty-auto-ssl/storage/file/*%3Alatest | jq -r '.privkey_pem' > /tmp/key.pem
|
||
|
|
fi
|
||
|
|
|
||
|
|
if [ ! -f /tmp/cert.pem ] || [ ! -f /tmp/key.pem ]; then
|
||
|
|
echo "ERROR: certificate not found, but coturn relies on it."
|
||
|
|
echo "Use either auto HTTPS proxy or"
|
||
|
|
echo "provide path to certificates in .env file"
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
# If command starts with an option, prepend with turnserver binary.
|
||
|
|
if [ "${1:0:1}" == '-' ]; then
|
||
|
|
set -- turnserver "$@"
|
||
|
|
fi
|
||
|
|
|
||
|
|
su-exec nobody $(eval "echo $@")
|