trf
7de1f6fd8a
BIND_DIR="$HOME/.local/share/traefik" to BIND_DIR="$HOME/.local/share/$POD_NAME" and relocated the Traefik files from /home/trf/.local/share/traefik/ to /home/trf/.local/share/traefik_pod/
86 lines
3.1 KiB
Bash
Executable File
86 lines
3.1 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# To be run by user trf to create the pod and container with
|
|
# Traefik and to create the systemd service
|
|
|
|
# Environment variables
|
|
POD_NAME='traefik_pod'
|
|
CTR_NAME='traefik_ctr'
|
|
IMAGE='docker.io/library/traefik:v3.5.4'
|
|
TRAEFIK_HOST_PORT='8080'
|
|
DASH_HOST_PORT='8085'
|
|
HOST_INGRESS_IP='10.8.0.6'
|
|
HOST_LOCAL_IP='127.0.0.1'
|
|
NET_OPTS='slirp4netns:allow_host_loopback=true,port_handler=slirp4netns'
|
|
BIND_DIR="$HOME/.local/share/$POD_NAME"
|
|
DYNAMIC_DIR="$BIND_DIR/dynamic"
|
|
STATIC_CFG="$BIND_DIR/traefik.yml"
|
|
USER_SYSTEMD_DIR="$HOME/.config/systemd/user"
|
|
POD_UNIT_FILE="$USER_SYSTEMD_DIR/pod-${POD_NAME}.service"
|
|
|
|
# Prepare directories
|
|
mkdir -p "$BIND_DIR" "$DYNAMIC_DIR" "$USER_SYSTEMD_DIR"
|
|
|
|
# Create pod if not yet existing
|
|
if ! podman pod exists "$POD_NAME"; then
|
|
podman pod create \
|
|
-n "$POD_NAME" \
|
|
--network "$NET_OPTS" \
|
|
-p ${HOST_INGRESS_IP}:${TRAEFIK_HOST_PORT}:${TRAEFIK_HOST_PORT} \
|
|
-p ${HOST_LOCAL_IP}:${DASH_HOST_PORT}:${DASH_HOST_PORT}
|
|
echo "Pod '$POD_NAME' created (rc=$?)"
|
|
else
|
|
echo "Pod '$POD_NAME' already exists."
|
|
fi
|
|
|
|
# Traefik container
|
|
# Remove old container
|
|
podman rm -f "$CTR_NAME"
|
|
# New container
|
|
podman run -d --name "$CTR_NAME" --pod "$POD_NAME" \
|
|
-v "$STATIC_CFG":/etc/traefik/traefik.yml:ro \
|
|
-v "$DYNAMIC_DIR":/etc/traefik/dynamic:ro \
|
|
"$IMAGE"
|
|
echo "Started $CTR_NAME container (rc=$?)"
|
|
|
|
# Generate systemd service files
|
|
cd "$USER_SYSTEMD_DIR"
|
|
podman generate systemd --files --new --name "$POD_NAME"
|
|
echo "Generated systemd service files (rc=$?)"
|
|
|
|
# Inject WireGuard IP readiness check into pod-${POD_NAME}.service
|
|
awk -v ip="$HOST_INGRESS_IP" '
|
|
BEGIN { inserted=0 }
|
|
# Insert the readiness check immediately BEFORE the pod create ExecStartPre
|
|
/^ExecStartPre=\/usr\/bin\/podman pod create/ && inserted==0 {
|
|
# Wait up to ~60s for ip to show up on any interface (safer than assuming wg0)
|
|
# Uses grep -F to avoid regex escaping issues with dots in the IP.
|
|
print "ExecStartPre=/bin/sh -ceu \047for i in $(seq 1 30); do ip -4 addr show | grep -Fq \" " ip "/\" && exit 0; sleep 2; done; echo \"IP " ip " not up\" >&2; exit 1\047"
|
|
inserted=1
|
|
}
|
|
{ print }
|
|
' "$POD_UNIT_FILE" > "${POD_UNIT_FILE}.tmp"
|
|
mv "${POD_UNIT_FILE}.tmp" "$POD_UNIT_FILE"
|
|
echo "Injected WG IP readiness check for ${HOST_INGRESS_IP} into pod unit"
|
|
|
|
# Stop & remove live pod and containers
|
|
podman pod stop --ignore --time 15 "$POD_NAME"
|
|
podman pod rm -f --ignore "$POD_NAME"
|
|
if podman pod exists "$POD_NAME"; then
|
|
echo "ERROR: Pod $POD_NAME still exists."
|
|
exit 1
|
|
else
|
|
echo "Stopped & removed live pod $POD_NAME and containers"
|
|
fi
|
|
|
|
# Enable systemd services
|
|
systemctl --user daemon-reload
|
|
systemctl --user enable --now "pod-${POD_NAME}.service"
|
|
echo "Enabled systemd service pod-${POD_NAME}.service (rc=$?)"
|
|
echo "Status: systemctl --user status pod-${POD_NAME}.service"
|
|
echo "View logs: journalctl --user -u pod-${POD_NAME}.service -f"
|
|
systemctl --user enable --now "container-${CTR_NAME}.service"
|
|
echo "Enabled systemd service container-${CTR_NAME}.service (rc=$?)"
|
|
echo "Status: systemctl --user status container-${CTR_NAME}.service"
|
|
echo "View logs: journalctl --user -u container-${CTR_NAME}.service -f"
|