mirror of https://github.com/OpenVidu/openvidu.git
openvidu-deployment: single-node - azure - Allow empty domains withj sslip
parent
5436087745
commit
fb465fa09f
|
@ -196,7 +196,6 @@ var openviduVMSettings = {
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
var fqdn = isEmptyIp ? publicIP_OV.properties.dnsSettings.fqdn : domainName
|
|
||||||
//KeyVault for secrets
|
//KeyVault for secrets
|
||||||
var keyVaultName = '${stackName}-keyvault'
|
var keyVaultName = '${stackName}-keyvault'
|
||||||
|
|
||||||
|
@ -251,7 +250,6 @@ resource openviduSharedInfo 'Microsoft.KeyVault/vaults@2023-07-01' = {
|
||||||
//Parms for not string interpolation support for multiline
|
//Parms for not string interpolation support for multiline
|
||||||
var stringInterpolationParams = {
|
var stringInterpolationParams = {
|
||||||
domainName: domainName
|
domainName: domainName
|
||||||
fqdn: fqdn
|
|
||||||
turnDomainName: turnDomainName
|
turnDomainName: turnDomainName
|
||||||
certificateType: certificateType
|
certificateType: certificateType
|
||||||
ownPublicCertificate: ownPublicCertificate
|
ownPublicCertificate: ownPublicCertificate
|
||||||
|
@ -275,9 +273,20 @@ apt-get update && apt-get install -y \
|
||||||
|
|
||||||
# Configure Domain
|
# Configure Domain
|
||||||
if [[ "${domainName}" == '' ]]; then
|
if [[ "${domainName}" == '' ]]; then
|
||||||
|
|
||||||
[ ! -d "/usr/share/openvidu" ] && mkdir -p /usr/share/openvidu
|
[ ! -d "/usr/share/openvidu" ] && mkdir -p /usr/share/openvidu
|
||||||
DOMAIN=${fqdn}
|
# Get public IP using the get_public_ip.sh script
|
||||||
echo ${fqdn} > /usr/share/openvidu/old-host-name
|
PUBLIC_IP=$(/usr/local/bin/get_public_ip.sh 2>/dev/null)
|
||||||
|
if [[ $? -ne 0 || -z "${PUBLIC_IP}" ]]; then
|
||||||
|
echo "Could not determine public IP."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
RANDOM_DOMAIN_STRING=$(tr -dc 'a-z' < /dev/urandom | head -c 8)
|
||||||
|
DOMAIN="openvidu-$RANDOM_DOMAIN_STRING-$(echo "$PUBLIC_IP" | tr '.' '-').sslip.io"
|
||||||
|
TURN_DOMAIN_NAME_SSLIP_IO="turn-$RANDOM_DOMAIN_STRING-$(echo "$PUBLIC_IP" | tr '.' '-').sslip.io"
|
||||||
|
echo $RANDOM_DOMAIN_STRING > /usr/share/openvidu/random-domain-string
|
||||||
|
echo $PUBLIC_IP > /usr/share/openvidu/public-ip
|
||||||
else
|
else
|
||||||
DOMAIN=${domainName}
|
DOMAIN=${domainName}
|
||||||
fi
|
fi
|
||||||
|
@ -347,6 +356,11 @@ if [[ "${turnDomainName}" != '' ]]; then
|
||||||
COMMON_ARGS+=(
|
COMMON_ARGS+=(
|
||||||
"--turn-domain-name=$LIVEKIT_TURN_DOMAIN_NAME"
|
"--turn-domain-name=$LIVEKIT_TURN_DOMAIN_NAME"
|
||||||
)
|
)
|
||||||
|
elif [[ "${TURN_DOMAIN_NAME_SSLIP_IO}" != '' ]]; then
|
||||||
|
LIVEKIT_TURN_DOMAIN_NAME=$(/usr/local/bin/store_secret.sh save LIVEKIT-TURN-DOMAIN-NAME "${TURN_DOMAIN_NAME_SSLIP_IO}")
|
||||||
|
COMMON_ARGS+=(
|
||||||
|
"--turn-domain-name=$LIVEKIT_TURN_DOMAIN_NAME"
|
||||||
|
)
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# Certificate arguments
|
# Certificate arguments
|
||||||
|
@ -408,12 +422,16 @@ az login --identity --allow-no-subscriptions > /dev/null
|
||||||
|
|
||||||
# Generate URLs
|
# Generate URLs
|
||||||
DOMAIN=$(az keyvault secret show --vault-name ${keyVaultName} --name DOMAIN-NAME --query value -o tsv)
|
DOMAIN=$(az keyvault secret show --vault-name ${keyVaultName} --name DOMAIN-NAME --query value -o tsv)
|
||||||
|
OPENVIDU_URL="https://${DOMAIN}/"
|
||||||
|
LIVEKIT_URL="wss://${DOMAIN}/"
|
||||||
DASHBOARD_URL="https://${DOMAIN}/dashboard/"
|
DASHBOARD_URL="https://${DOMAIN}/dashboard/"
|
||||||
GRAFANA_URL="https://${DOMAIN}/grafana/"
|
GRAFANA_URL="https://${DOMAIN}/grafana/"
|
||||||
MINIO_URL="https://${DOMAIN}/minio-console/"
|
MINIO_URL="https://${DOMAIN}/minio-console/"
|
||||||
|
|
||||||
# Update shared secret
|
# Update shared secret
|
||||||
az keyvault secret set --vault-name ${keyVaultName} --name DOMAIN-NAME --value $DOMAIN
|
az keyvault secret set --vault-name ${keyVaultName} --name DOMAIN-NAME --value $DOMAIN
|
||||||
|
az keyvault secret set --vault-name ${keyVaultName} --name OPENVIDU-URL --value $OPENVIDU_URL
|
||||||
|
az keyvault secret set --vault-name ${keyVaultName} --name LIVEKIT-URL --value $LIVEKIT_URL
|
||||||
az keyvault secret set --vault-name ${keyVaultName} --name DASHBOARD-URL --value $DASHBOARD_URL
|
az keyvault secret set --vault-name ${keyVaultName} --name DASHBOARD-URL --value $DASHBOARD_URL
|
||||||
az keyvault secret set --vault-name ${keyVaultName} --name GRAFANA-URL --value $GRAFANA_URL
|
az keyvault secret set --vault-name ${keyVaultName} --name GRAFANA-URL --value $GRAFANA_URL
|
||||||
az keyvault secret set --vault-name ${keyVaultName} --name MINIO-URL --value $MINIO_URL
|
az keyvault secret set --vault-name ${keyVaultName} --name MINIO-URL --value $MINIO_URL
|
||||||
|
@ -424,6 +442,7 @@ if [[ $? -ne 0 ]]; then
|
||||||
echo "Error updating keyvault"
|
echo "Error updating keyvault"
|
||||||
fi
|
fi
|
||||||
'''
|
'''
|
||||||
|
|
||||||
//DONE
|
//DONE
|
||||||
var update_config_from_secretScriptTemplate = '''
|
var update_config_from_secretScriptTemplate = '''
|
||||||
#!/bin/bash -x
|
#!/bin/bash -x
|
||||||
|
@ -437,6 +456,14 @@ CONFIG_DIR="${INSTALL_DIR}/config"
|
||||||
|
|
||||||
# Replace DOMAIN_NAME
|
# Replace DOMAIN_NAME
|
||||||
export DOMAIN=$(az keyvault secret show --vault-name ${keyVaultName} --name DOMAIN-NAME --query value -o tsv)
|
export DOMAIN=$(az keyvault secret show --vault-name ${keyVaultName} --name DOMAIN-NAME --query value -o tsv)
|
||||||
|
if [[ $DOMAIN == *"sslip.io"* ]] || [[ -z $DOMAIN ]]; then
|
||||||
|
PUBLIC_IP=$(/usr/local/bin/get_public_ip.sh 2>/dev/null || echo "")
|
||||||
|
|
||||||
|
if [[ -n "$PUBLIC_IP" ]] && [[ -f "/usr/share/openvidu/random-domain-string" ]]; then
|
||||||
|
RANDOM_DOMAIN_STRING=$(cat /usr/share/openvidu/random-domain-string)
|
||||||
|
DOMAIN="openvidu-$RANDOM_DOMAIN_STRING-$(echo "$PUBLIC_IP" | tr '.' '-').sslip.io"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
if [[ -n "$DOMAIN" ]]; then
|
if [[ -n "$DOMAIN" ]]; then
|
||||||
sed -i "s/DOMAIN_NAME=.*/DOMAIN_NAME=$DOMAIN/" "${CONFIG_DIR}/openvidu.env"
|
sed -i "s/DOMAIN_NAME=.*/DOMAIN_NAME=$DOMAIN/" "${CONFIG_DIR}/openvidu.env"
|
||||||
else
|
else
|
||||||
|
@ -445,6 +472,14 @@ fi
|
||||||
|
|
||||||
# Replace LIVEKIT_TURN_DOMAIN_NAME
|
# Replace LIVEKIT_TURN_DOMAIN_NAME
|
||||||
export LIVEKIT_TURN_DOMAIN_NAME=$(az keyvault secret show --vault-name ${keyVaultName} --name LIVEKIT-TURN-DOMAIN-NAME --query value -o tsv)
|
export LIVEKIT_TURN_DOMAIN_NAME=$(az keyvault secret show --vault-name ${keyVaultName} --name LIVEKIT-TURN-DOMAIN-NAME --query value -o tsv)
|
||||||
|
if [[ $LIVEKIT_TURN_DOMAIN_NAME == *"sslip.io"* ]] || [[ -z $LIVEKIT_TURN_DOMAIN_NAME ]]; then
|
||||||
|
PUBLIC_IP=$(/usr/local/bin/get_public_ip.sh 2>/dev/null || echo "")
|
||||||
|
|
||||||
|
if [[ -n "$PUBLIC_IP" ]] && [[ -f "/usr/share/openvidu/random-domain-string" ]]; then
|
||||||
|
RANDOM_DOMAIN_STRING=$(cat /usr/share/openvidu/random-domain-string)
|
||||||
|
LIVEKIT_TURN_DOMAIN_NAME="turn-$RANDOM_DOMAIN_STRING-$(echo "$PUBLIC_IP" | tr '.' '-').sslip.io"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
if [[ -n "$LIVEKIT_TURN_DOMAIN_NAME" ]]; then
|
if [[ -n "$LIVEKIT_TURN_DOMAIN_NAME" ]]; then
|
||||||
sed -i "s/LIVEKIT_TURN_DOMAIN_NAME=.*/LIVEKIT_TURN_DOMAIN_NAME=$LIVEKIT_TURN_DOMAIN_NAME/" "${CONFIG_DIR}/openvidu.env"
|
sed -i "s/LIVEKIT_TURN_DOMAIN_NAME=.*/LIVEKIT_TURN_DOMAIN_NAME=$LIVEKIT_TURN_DOMAIN_NAME/" "${CONFIG_DIR}/openvidu.env"
|
||||||
fi
|
fi
|
||||||
|
@ -488,12 +523,16 @@ sed -i "s/ENABLED_MODULES=.*/ENABLED_MODULES=$ENABLED_MODULES/" "${CONFIG_DIR}/o
|
||||||
|
|
||||||
|
|
||||||
# Update URLs in secret
|
# Update URLs in secret
|
||||||
|
OPENVIDU_URL="https://${DOMAIN}/"
|
||||||
|
LIVEKIT_URL="wss://${DOMAIN}/"
|
||||||
DASHBOARD_URL="https://${DOMAIN}/dashboard/"
|
DASHBOARD_URL="https://${DOMAIN}/dashboard/"
|
||||||
GRAFANA_URL="https://${DOMAIN}/grafana/"
|
GRAFANA_URL="https://${DOMAIN}/grafana/"
|
||||||
MINIO_URL="https://${DOMAIN}/minio-console/"
|
MINIO_URL="https://${DOMAIN}/minio-console/"
|
||||||
|
|
||||||
# Update shared secret
|
# Update shared secret
|
||||||
az keyvault secret set --vault-name ${keyVaultName} --name DOMAIN-NAME --value $DOMAIN
|
az keyvault secret set --vault-name ${keyVaultName} --name DOMAIN-NAME --value $DOMAIN
|
||||||
|
az keyvault secret set --vault-name ${keyVaultName} --name OPENVIDU-URL --value $OPENVIDU_URL
|
||||||
|
az keyvault secret set --vault-name ${keyVaultName} --name LIVEKIT-URL --value $LIVEKIT_URL
|
||||||
az keyvault secret set --vault-name ${keyVaultName} --name DASHBOARD-URL --value $DASHBOARD_URL
|
az keyvault secret set --vault-name ${keyVaultName} --name DASHBOARD-URL --value $DASHBOARD_URL
|
||||||
az keyvault secret set --vault-name ${keyVaultName} --name GRAFANA-URL --value $GRAFANA_URL
|
az keyvault secret set --vault-name ${keyVaultName} --name GRAFANA-URL --value $GRAFANA_URL
|
||||||
az keyvault secret set --vault-name ${keyVaultName} --name MINIO-URL --value $MINIO_URL
|
az keyvault secret set --vault-name ${keyVaultName} --name MINIO-URL --value $MINIO_URL
|
||||||
|
@ -629,6 +668,32 @@ else
|
||||||
fi
|
fi
|
||||||
'''
|
'''
|
||||||
|
|
||||||
|
var get_public_ip = '''
|
||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# List of services to check public IP
|
||||||
|
services=(
|
||||||
|
"https://checkip.amazonaws.com"
|
||||||
|
"https://ifconfig.me/ip"
|
||||||
|
"https://ipinfo.io/ip"
|
||||||
|
"https://api.ipify.org"
|
||||||
|
"https://icanhazip.com"
|
||||||
|
)
|
||||||
|
|
||||||
|
for service in "${services[@]}"; do
|
||||||
|
ip=$(curl -s --max-time 5 "$service")
|
||||||
|
if [[ -n "$ip" && "$ip" =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
|
||||||
|
echo "$ip"
|
||||||
|
exit 0
|
||||||
|
else
|
||||||
|
echo "Failed to get IP from $service" >&2
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
echo "Could not retrieve public IP from any service." >&2
|
||||||
|
exit 1
|
||||||
|
'''
|
||||||
|
|
||||||
var check_app_ready = '''
|
var check_app_ready = '''
|
||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
while true; do
|
while true; do
|
||||||
|
@ -721,6 +786,7 @@ var base64update_config_from_secret = base64(update_config_from_secretScript)
|
||||||
var base64update_secret_from_config = base64(update_secret_from_configScript)
|
var base64update_secret_from_config = base64(update_secret_from_configScript)
|
||||||
var base64get_value_from_config = base64(get_value_from_configScript)
|
var base64get_value_from_config = base64(get_value_from_configScript)
|
||||||
var base64store_secret = base64(store_secretScript)
|
var base64store_secret = base64(store_secretScript)
|
||||||
|
var base64get_public_ip = base64(get_public_ip)
|
||||||
var base64check_app_ready = base64(check_app_ready)
|
var base64check_app_ready = base64(check_app_ready)
|
||||||
var base64restart = base64(restart)
|
var base64restart = base64(restart)
|
||||||
var base64config_blobStorage = base64(config_blobStorageScript)
|
var base64config_blobStorage = base64(config_blobStorageScript)
|
||||||
|
@ -732,6 +798,7 @@ var userDataParams = {
|
||||||
base64update_secret_from_config: base64update_secret_from_config
|
base64update_secret_from_config: base64update_secret_from_config
|
||||||
base64get_value_from_config: base64get_value_from_config
|
base64get_value_from_config: base64get_value_from_config
|
||||||
base64store_secret: base64store_secret
|
base64store_secret: base64store_secret
|
||||||
|
base64get_public_ip: base64get_public_ip
|
||||||
base64check_app_ready: base64check_app_ready
|
base64check_app_ready: base64check_app_ready
|
||||||
base64restart: base64restart
|
base64restart: base64restart
|
||||||
base64config_blobStorage: base64config_blobStorage
|
base64config_blobStorage: base64config_blobStorage
|
||||||
|
@ -764,6 +831,10 @@ chmod +x /usr/local/bin/get_value_from_config.sh
|
||||||
echo ${base64store_secret} | base64 -d > /usr/local/bin/store_secret.sh
|
echo ${base64store_secret} | base64 -d > /usr/local/bin/store_secret.sh
|
||||||
chmod +x /usr/local/bin/store_secret.sh
|
chmod +x /usr/local/bin/store_secret.sh
|
||||||
|
|
||||||
|
# get_public_ip.sh
|
||||||
|
echo ${base64get_public_ip} | base64 -d > /usr/local/bin/get_public_ip.sh
|
||||||
|
chmod +x /usr/local/bin/get_public_ip.sh
|
||||||
|
|
||||||
echo ${base64check_app_ready} | base64 -d > /usr/local/bin/check_app_ready.sh
|
echo ${base64check_app_ready} | base64 -d > /usr/local/bin/check_app_ready.sh
|
||||||
chmod +x /usr/local/bin/check_app_ready.sh
|
chmod +x /usr/local/bin/check_app_ready.sh
|
||||||
|
|
||||||
|
|
File diff suppressed because one or more lines are too long
Loading…
Reference in New Issue