setup.sh

#!/bin/bash

set -e
#set -x

# set up data & secrets dir with the right ownerships in the default location
# to stop docker autocreating them with random owners.
# originally these were checked into the git repo, but that's pretty ugly, so doing it here instead.
mkdir -p data/{element-{web,call},livekit,mas,nginx/{ssl,www,conf.d},postgres,synapse}
mkdir -p secrets/{livekit,postgres,synapse}

# create blank secrets to avoid docker creating empty directories in the host
touch secrets/livekit/livekit_{api,secret}_key \
      secrets/postgres/postgres_password \
      secrets/synapse/signing.key

# establish the IP address of the server we're setting up on
# use the first argument of hostname -I. This might be stupid if more complex network structures are in place...

ipaddrstring=$(hostname -I)
set -- $ipaddrstring
SERVER_IP=$(echo $1)


# grab an env if we don't have one already
if [[ ! -e .env  ]]; then
    cp .env-sample .env

    sed -ri.orig "s/^USER_ID=/USER_ID=$(id -u)/" .env
    sed -ri.orig "s/^GROUP_ID=/GROUP_ID=$(id -g)/" .env

    read -p "Enter base domain name (e.g. example.com): " DOMAIN
    sed -ri.orig "s/example.com/$DOMAIN/" .env

    # try to guess your livekit IP
    if [ -x "$(command -v getent)" ]; then
        NODE_IP=`getent hosts livekit.$DOMAIN | cut -d' ' -f1`
        if ! [ -z "$NODE_IP" ]; then
            sed -ri.orig "s/LIVEKIT_NODE_IP=127.0.0.1/LIVEKIT_NODE_IP=$NODE_IP/" .env
        fi
    fi

#    # SSL setup
#    read -p "Use local mkcert CA for SSL? [y/n] " use_mkcert
#    if [[ "$use_mkcert" =~ ^[Yy]$ ]]; then
#	if ! [ -x "$(command -v mkcert)" ]; then
#            echo "Please install mkcert from brew/apt/yum etc"
#	    exit
#        fi
#        mkcert -install
#        mkcert $DOMAIN '*.'$DOMAIN
#        mkdir -p data/ssl
#        mv ${DOMAIN}+1.pem data/ssl/fullchain.pem
#        mv ${DOMAIN}+1-key.pem data/ssl/privkey.pem
#        cp "$(mkcert -CAROOT)"/rootCA.pem data/ssl/ca-certificates.crt
#        # borrow letsencrypt's SSL config
#        curl -s https://raw.githubusercontent.com/certbot/certbot/master/certbot-nginx/certbot_nginx/_internal/tls_configs/options-ssl-nginx.conf > "data/ssl/options-ssl-nginx.conf"
#        curl -s https://raw.githubusercontent.com/certbot/certbot/master/certbot/certbot/ssl-dhparams.pem > "data/ssl/ssl-dhparams.pem"
#        success=true
#    else
#        read -p "Use letsencrypt for SSL? [y/n] " use_letsencrypt
#        if [[ "$use_letsencrypt" =~ ^[Yy]$ ]]; then
#	    mkdir -p data/ssl
#            touch data/ssl/ca-certificates.crt # will get overwritten by init-letsencrypt.sh
#            source ./init-letsencrypt.sh
#            success=true
#        else
#            echo "Please put a valid {privkey,fullchain}.pem and ca-certificates.crt into data/ssl/"
#        fi
#    fi
else
    echo ".env already exists; move it out of the way first to re-setup"
fi

if ! [ -z "$success" ]; then
    echo ".env and SSL configured; you can now docker compose up"
fi