aboutsummaryrefslogtreecommitdiff
path: root/kolla/docker/letsencrypt/letsencrypt-base/extend_start.sh
diff options
context:
space:
mode:
authorZuul <zuul@review.opendev.org>2026-07-08 16:33:45 +0000
committerGerrit Code Review <review@openstack.org>2026-07-08 16:33:45 +0000
commit44b4d81399792f539716618953f2cafa64086a5c (patch)
tree4699d7e068e6dd842a9f1f247ca2f150d60d5e27 /kolla/docker/letsencrypt/letsencrypt-base/extend_start.sh
parentb3803eb9f951acd63018ab8ba69bcbd1a2de5c93 (diff)
parentdb35ac8d793506bc43b62e7e39d27a75de1043ed (diff)
downloadkolla-44b4d81399792f539716618953f2cafa64086a5c.tar.gz
kolla-44b4d81399792f539716618953f2cafa64086a5c.zip
Merge "Migrate to pyproject.toml"
Diffstat (limited to 'kolla/docker/letsencrypt/letsencrypt-base/extend_start.sh')
-rw-r--r--kolla/docker/letsencrypt/letsencrypt-base/extend_start.sh69
1 files changed, 69 insertions, 0 deletions
diff --git a/kolla/docker/letsencrypt/letsencrypt-base/extend_start.sh b/kolla/docker/letsencrypt/letsencrypt-base/extend_start.sh
new file mode 100644
index 000000000..0300f0b44
--- /dev/null
+++ b/kolla/docker/letsencrypt/letsencrypt-base/extend_start.sh
@@ -0,0 +1,69 @@
+#!/bin/bash
+
+# Logs
+
+if [[ ! -d "/var/log/kolla/letsencrypt" ]]; then
+ mkdir -p /var/log/kolla/letsencrypt
+fi
+if [[ $(stat -c %a /var/log/kolla/letsencrypt) != "755" ]]; then
+ chmod 755 /var/log/kolla/letsencrypt
+fi
+
+# Structure for lego and webserver
+
+FOLDERS_LEGO="/etc/letsencrypt /etc/letsencrypt/lego /etc/letsencrypt/lego/internal /etc/letsencrypt/lego/external"
+FOLDERS_WEBSERVER="/etc/letsencrypt/http-01 /etc/letsencrypt/http-01/.well-known /etc/letsencrypt/http-01/.well-known/acme-challenge"
+
+if [[ "${KOLLA_BASE_DISTRO}" =~ debian|ubuntu ]]; then
+ USER="www-data"
+ GROUP="www-data"
+ USERGROUP_WEBSERVER="${USER}:${GROUP}"
+ USERGROUP="haproxy:haproxy"
+else
+ USER="apache"
+ GROUP="apache"
+ USERGROUP_WEBSERVER="${USER}:${GROUP}"
+ USERGROUP="haproxy:haproxy"
+fi
+
+for folder in ${FOLDERS_LEGO}; do
+ if [[ ! -d "${folder}" ]]; then
+ mkdir -p ${folder}
+ fi
+
+ if [[ $(stat -c %U:%G ${folder}) != "${USERGROUP}" ]]; then
+ if getent passwd ${USER} 2 > /dev/null; then
+ chown ${USERGROUP} ${folder}
+ fi
+ fi
+
+ if [[ "${folder}" == "/etc/letsencrypt" ]]; then
+ if [[ $(stat -c %a ${folder}) != "751" ]]; then
+ chmod 751 ${folder}
+ fi
+ else
+ if [[ $(stat -c %a ${folder}) != "755" ]]; then
+ chmod 755 ${folder}
+ fi
+ fi
+done
+
+for folder in ${FOLDERS_WEBSERVER}; do
+ if [[ ! -d "${folder}" ]]; then
+ mkdir -p ${folder}
+ fi
+
+ if [[ $(stat -c %U:%G ${folder}) != "${USERGROUP_WEBSERVER}" ]]; then
+ if getent passwd ${USER} 2 > /dev/null; then
+ chown ${USERGROUP_WEBSERVER} ${folder}
+ fi
+ fi
+
+ if [[ $(stat -c %a ${folder}) != "755" ]]; then
+ chmod 755 ${folder}
+ fi
+done
+
+if [ -e /usr/local/bin/kolla_letsencrypt_extend_start ]; then
+ . /usr/local/bin/kolla_letsencrypt_extend_start
+fi