mirror of
https://github.com/openfrontio/OpenFrontIO.git
synced 2026-06-21 09:10:42 +00:00
Evan
1f05e22277
## Description:
Connects deployed containers to Traefik for automatic reverse proxy
routing, replacing the previous Cloudflare Tunnel approach.
```
docker inspect openfront-staging-traefik --format '{{json .Config.Labels}}' | jq
{
"traefik.enable": "true",
"traefik.http.routers.openfront-staging-traefik.entrypoints": "web",
"traefik.http.routers.openfront-staging-traefik.rule": "Host(`traefik.openfront.dev`)",
"traefik.http.services.openfront-staging-traefik.loadbalancer.server.port": "80"
}
```
## Please complete the following:
- [x] I have added screenshots for all UI updates
- [x] I process any text displayed to the user through translateText()
and I've added it to the en.json file
- [x] I have added relevant tests to the test directory
- [x] I confirm I have thoroughly tested these changes and take full
responsibility for any bugs introduced
## Please put your Discord username so you can be contacted if a bug or
regression is found:
evan
93 lines
3.8 KiB
Bash
93 lines
3.8 KiB
Bash
#!/bin/bash
|
|
set -e
|
|
|
|
# Check if required environment variables are set
|
|
if [ -z "$CF_API_TOKEN" ] || [ -z "$CF_ACCOUNT_ID" ] || [ -z "$SUBDOMAIN" ] || [ -z "$DOMAIN" ]; then
|
|
echo "Error: Required environment variables not set"
|
|
echo "Please set CF_API_TOKEN, CF_ACCOUNT_ID, SUBDOMAIN, and DOMAIN"
|
|
exit 1
|
|
fi
|
|
|
|
# Generate a unique tunnel name using timestamp
|
|
TIMESTAMP=$(date +%Y%m%d%H%M%S)
|
|
TUNNEL_NAME="${SUBDOMAIN}-tunnel-${TIMESTAMP}"
|
|
echo "Using unique tunnel name: ${TUNNEL_NAME}"
|
|
|
|
# Create a new tunnel
|
|
echo "Creating Cloudflare tunnel for subdomain ${SUBDOMAIN}..."
|
|
TUNNEL_RESPONSE=$(curl -s -X POST "https://api.cloudflare.com/client/v4/accounts/${CF_ACCOUNT_ID}/cfd_tunnel" \
|
|
-H "Authorization: Bearer ${CF_API_TOKEN}" \
|
|
-H "Content-Type: application/json" \
|
|
--data "{\"name\":\"${TUNNEL_NAME}\"}")
|
|
|
|
# Extract tunnel ID and token
|
|
TUNNEL_ID=$(echo $TUNNEL_RESPONSE | jq -r '.result.id')
|
|
TUNNEL_TOKEN=$(echo $TUNNEL_RESPONSE | jq -r '.result.token')
|
|
|
|
if [ -z "$TUNNEL_ID" ] || [ "$TUNNEL_ID" == "null" ]; then
|
|
echo "Failed to create tunnel"
|
|
echo $TUNNEL_RESPONSE
|
|
exit 1
|
|
fi
|
|
|
|
echo "Tunnel created with ID: ${TUNNEL_ID}"
|
|
|
|
# Configure the tunnel with hostname
|
|
echo "Configuring tunnel to point to tunnel-${SUBDOMAIN}.${DOMAIN}..."
|
|
curl -s -X PUT "https://api.cloudflare.com/client/v4/accounts/${CF_ACCOUNT_ID}/cfd_tunnel/${TUNNEL_ID}/configurations" \
|
|
-H "Authorization: Bearer ${CF_API_TOKEN}" \
|
|
-H "Content-Type: application/json" \
|
|
--data "{\"config\":{\"ingress\":[{\"hostname\":\"tunnel-${SUBDOMAIN}.${DOMAIN}\",\"service\":\"http://localhost:80\"},{\"service\":\"http_status:404\"}]}}"
|
|
|
|
# Update DNS record to point to the new tunnel
|
|
echo "Updating DNS record to point to the new tunnel..."
|
|
|
|
# First check if DNS record exists
|
|
DNS_RECORDS=$(curl -s -X GET "https://api.cloudflare.com/client/v4/zones?name=${DOMAIN}" \
|
|
-H "Authorization: Bearer ${CF_API_TOKEN}" \
|
|
-H "Content-Type: application/json")
|
|
|
|
ZONE_ID=$(echo $DNS_RECORDS | jq -r '.result[0].id')
|
|
|
|
if [ -z "$ZONE_ID" ] || [ "$ZONE_ID" == "null" ]; then
|
|
echo "Could not find zone ID for domain ${DOMAIN}"
|
|
exit 1
|
|
fi
|
|
|
|
# Check for existing record
|
|
EXISTING_RECORDS=$(curl -s -X GET "https://api.cloudflare.com/client/v4/zones/${ZONE_ID}/dns_records?name=tunnel-${SUBDOMAIN}.${DOMAIN}" \
|
|
-H "Authorization: Bearer ${CF_API_TOKEN}" \
|
|
-H "Content-Type: application/json")
|
|
|
|
RECORD_ID=$(echo $EXISTING_RECORDS | jq -r '.result[0].id')
|
|
|
|
# Create or update the DNS record
|
|
if [ -z "$RECORD_ID" ] || [ "$RECORD_ID" == "null" ]; then
|
|
# Create new record
|
|
echo "Creating new DNS record..."
|
|
DNS_RESPONSE=$(curl -s -X POST "https://api.cloudflare.com/client/v4/zones/${ZONE_ID}/dns_records" \
|
|
-H "Authorization: Bearer ${CF_API_TOKEN}" \
|
|
-H "Content-Type: application/json" \
|
|
--data "{\"type\":\"CNAME\",\"name\":\"tunnel-${SUBDOMAIN}.${DOMAIN}\",\"content\":\"${TUNNEL_ID}.cfargotunnel.com\",\"ttl\":1,\"proxied\":true}")
|
|
else
|
|
# Update existing record
|
|
echo "Updating existing DNS record..."
|
|
DNS_RESPONSE=$(curl -s -X PUT "https://api.cloudflare.com/client/v4/zones/${ZONE_ID}/dns_records/${RECORD_ID}" \
|
|
-H "Authorization: Bearer ${CF_API_TOKEN}" \
|
|
-H "Content-Type: application/json" \
|
|
--data "{\"type\":\"CNAME\",\"name\":\"tunnel-${SUBDOMAIN}.${DOMAIN}\",\"content\":\"${TUNNEL_ID}.cfargotunnel.com\",\"ttl\":1,\"proxied\":true}")
|
|
fi
|
|
|
|
# Log the tunnel information
|
|
echo "Tunnel configuration is set up! Site will be available at: https://tunnel-${SUBDOMAIN}.${DOMAIN}"
|
|
|
|
# Export the tunnel token for supervisord
|
|
export CLOUDFLARE_TUNNEL_TOKEN=${TUNNEL_TOKEN}
|
|
|
|
# Start supervisord
|
|
if [ "$DOMAIN" = openfront.dev ] && [ "$SUBDOMAIN" != main ]; then
|
|
exec timeout 18h /usr/bin/supervisord -c /etc/supervisor/conf.d/supervisord.conf
|
|
else
|
|
exec /usr/bin/supervisord -c /etc/supervisor/conf.d/supervisord.conf
|
|
fi
|