520c76007a
It was recommended by Danimo because /etc is for mutable stuff It also adds comments with context about this file The owner is set to root:root and permission 600 to be only readable by root (also Danimo suggestion)
76 lines
3.0 KiB
Bash
Executable File
76 lines
3.0 KiB
Bash
Executable File
#!/bin/bash -e
|
|
|
|
case "$1" in
|
|
configure|upgrade|1|2)
|
|
|
|
fc-cache -f
|
|
|
|
# make sure postgres can read this directory
|
|
chmod 755 /usr/share/bbb-graphql-server/ -R
|
|
|
|
runuser -u postgres -- psql -c "alter user postgres password 'bbb_graphql'"
|
|
runuser -u postgres -- psql -c "drop database if exists bbb_graphql with (force)"
|
|
runuser -u postgres -- psql -c "create database bbb_graphql WITH TEMPLATE template0 LC_COLLATE 'C.UTF-8'"
|
|
runuser -u postgres -- psql -c "alter database bbb_graphql set timezone to 'UTC'"
|
|
runuser -u postgres -- psql -U postgres -d bbb_graphql -q -f /usr/share/bbb-graphql-server/bbb_schema.sql --set ON_ERROR_STOP=on
|
|
|
|
DATABASE_NAME="hasura_app"
|
|
DB_EXISTS=$(runuser -u postgres -- psql -U postgres -tAc "SELECT 1 FROM pg_database WHERE datname='$DATABASE_NAME'")
|
|
if [ "$DB_EXISTS" = '1' ]
|
|
then
|
|
echo "Database $DATABASE_NAME already exists"
|
|
else
|
|
runuser -u postgres -- psql -c "create database hasura_app"
|
|
echo "Database $DATABASE_NAME created"
|
|
fi
|
|
|
|
echo "Postgresql configured"
|
|
|
|
#Generate a random password to Hasura to improve security
|
|
if [ ! -f /etc/default/bbb-graphql-server-admin-pass ]; then
|
|
HASURA_RANDOM_ADM_PASSWORD=$(openssl rand -base64 32 | sed 's/=//g' | sed 's/+//g' | sed 's/\///g')
|
|
echo "# This password is randomly generated during the installation of BigBlueButton." > /etc/default/bbb-graphql-server-admin-pass
|
|
echo "# It serves as the admin password for the bbb-graphql-server (Hasura)." >> /etc/default/bbb-graphql-server-admin-pass
|
|
echo "# The admin can change this password at any time without any issues." >> /etc/default/bbb-graphql-server-admin-pass
|
|
echo "HASURA_GRAPHQL_ADMIN_SECRET=$HASURA_RANDOM_ADM_PASSWORD" >> /etc/default/bbb-graphql-server-admin-pass
|
|
chown root:root /etc/default/bbb-graphql-server-admin-pass
|
|
chmod 600 /etc/default/bbb-graphql-server-admin-pass
|
|
echo "Set a random password to Hasura at /etc/default/bbb-graphql-server-admin-pass"
|
|
fi
|
|
|
|
#Set admin secret for Hasura CLI
|
|
HASURA_ADM_PASSWORD=$(grep '^HASURA_GRAPHQL_ADMIN_SECRET=' /etc/default/bbb-graphql-server-admin-pass | cut -d '=' -f 2)
|
|
sed -i "s/^admin_secret: .*/admin_secret: $HASURA_ADM_PASSWORD/g" /usr/share/bbb-graphql-server/config.yaml
|
|
|
|
if [ ! -f /.dockerenv ]; then
|
|
systemctl enable bbb-graphql-server.service
|
|
systemctl daemon-reload
|
|
restartService bbb-graphql-server || echo "bbb-graphql-server service could not be registered or started"
|
|
|
|
#Check if Hasura is ready before applying metadata
|
|
HASURA_PORT=8085
|
|
while ! netstat -tuln | grep ":$HASURA_PORT " > /dev/null; do
|
|
echo "Waiting for Hasura's port ($HASURA_PORT) to be ready..."
|
|
sleep 1
|
|
done
|
|
|
|
# Apply BBB metadata in Hasura
|
|
cd /usr/share/bbb-graphql-server
|
|
timeout 15s /usr/local/bin/hasura metadata apply --skip-update-check
|
|
cd ..
|
|
rm -rf /usr/share/bbb-graphql-server/metadata
|
|
fi
|
|
|
|
echo "Graphql-server after-install finished"
|
|
|
|
;;
|
|
|
|
abort-upgrade|abort-remove|abort-deconfigure)
|
|
;;
|
|
|
|
*)
|
|
echo "postinst called with unknown argument \`$1'" >&2
|
|
exit 1
|
|
;;
|
|
esac
|