61 lines
3.2 KiB
Bash
61 lines
3.2 KiB
Bash
 
|
# Mobilizon 5.2.4 (kaihuri's image of Framasoft's release): events, groups with their discussions, and participations,
|
||
|
|
# which it federates as Join and Leave, answered with Accept or Reject. Elixir, on a PostGIS of its own
|
||
|
|
# (shared_postgis_up: it needs the extension, which the shared Postgres has not got). Its federation runs on hackney,
|
||
|
|
# which trusts certifi's compiled-in roots, so the pasture's bundle is mounted over certifi's and castore's files and
|
||
|
|
# the system store. Geocoding points at a closed local port, so no address lookup leaves the workstation. Accounts come
|
||
|
|
# from mobilizon_ctl; its API is GraphQL (/api), signed in with an access token from the login mutation.
|
||
|
|
MOBILIZON_IMAGE=${MOBILIZON_IMAGE:-docker.io/kaihuri/mobilizon:5.2.4}
|
||
|
|
MOBILIZON_PASSWORD=Mobilizon-Pasture-1
|
||
|
|
. "$here/peers/shared.sh"
|
||
|
|
|
||
|
|
mobilizon_env() {
|
||
|
|
local keys="$here/.state/mobilizon/keys"
|
||
|
|
[ -s "$keys" ] || { mkdir -p "$here/.state/mobilizon"; for _ in 1 2; do head -c 48 /dev/urandom | base64 -w0; echo; done > "$keys"; }
|
||
|
|
cat <<ENV
|
||
|
|
MOBILIZON_INSTANCE_NAME=Pasture Mobilizon
|
||
|
|
MOBILIZON_INSTANCE_HOST=mobilizon.test
|
||
|
|
MOBILIZON_INSTANCE_PORT=4000
|
||
|
|
MOBILIZON_INSTANCE_EMAIL=noreply@mobilizon.test
|
||
|
|
MOBILIZON_REPLY_EMAIL=noreply@mobilizon.test
|
||
|
|
MOBILIZON_INSTANCE_REGISTRATIONS_OPEN=true
|
||
|
|
MOBILIZON_INSTANCE_SECRET_KEY_BASE=$(sed -n 1p "$keys")
|
||
|
|
MOBILIZON_INSTANCE_SECRET_KEY=$(sed -n 2p "$keys")
|
||
|
|
MOBILIZON_DATABASE_USERNAME=pasture
|
||
|
|
MOBILIZON_DATABASE_PASSWORD=pasture
|
||
|
|
MOBILIZON_DATABASE_DBNAME=mobilizon
|
||
|
|
MOBILIZON_DATABASE_HOST=postgis
|
||
|
|
MOBILIZON_LOGLEVEL=info
|
||
|
|
MOBILIZON_GEOSPATIAL_SERVICE=Nominatim
|
||
|
|
MOBILIZON_GEOSPATIAL_NOMINATIM_ENDPOINT=http://127.0.0.1:9
|
||
|
|
ENV
|
||
|
|
}
|
||
|
|
|
||
|
|
mobilizon_up() {
|
||
|
|
shared_postgis_up
|
||
|
|
podman exec pasture-postgis sh -c "psql -U pasture -tc \"select 1 from pg_database where datname='mobilizon'\" | grep -q 1 || createdb -U pasture mobilizon"
|
||
|
|
for ext in postgis pg_trgm unaccent; do
|
||
|
|
podman exec pasture-postgis psql -U pasture -d mobilizon -qc "create extension if not exists $ext;" >/dev/null
|
||
|
|
done
|
||
|
|
mkdir -p "$here/.state/mobilizon"
|
||
|
|
mobilizon_env > "$here/.state/mobilizon/env"
|
||
|
|
podman volume exists pasture-mobilizon-data || podman volume create --label pasture=1 pasture-mobilizon-data >/dev/null
|
||
|
|
podman run -d --replace --name pasture-mobilizon --network $net --label pasture=1 --env-file "$here/.state/mobilizon/env" \
|
||
|
|
-v pasture-mobilizon-data:/var/lib/mobilizon \
|
||
|
|
-v "$ca/bundle.pem:/etc/ssl/certs/ca-certificates.crt:z,ro" \
|
||
|
|
-v "$ca/bundle.pem:/lib/certifi-2.15.0/priv/cacerts.pem:z,ro" \
|
||
|
|
-v "$ca/bundle.pem:/lib/castore-1.0.19/priv/cacerts.pem:z,ro" \
|
||
|
|
"$MOBILIZON_IMAGE" >/dev/null
|
||
|
|
for _ in $(seq 1 120); do
|
||
|
|
site mobilizon.test -s -o /dev/null -w '%{http_code}' https://mobilizon.test:6443/.well-known/nodeinfo 2>/dev/null | grep -q 200 && break
|
||
|
|
sleep 3
|
||
|
|
done
|
||
|
|
mobilizon_settle
|
||
|
|
echo "mobilizon: https://mobilizon.test:6443"
|
||
|
|
}
|
||
|
|
|
||
|
|
# mzuser, an account with a profile (mobilizon_ctl splits its arguments on spaces: one word for the display name)
|
||
|
|
mobilizon_settle() {
|
||
|
|
podman exec pasture-mobilizon /bin/mobilizon_ctl users.new mzuser@mobilizon.test --password "$MOBILIZON_PASSWORD" \
|
||
|
|
--profile-username mzuser --profile-display-name Mobilizonian >/dev/null 2>&1 || true
|
||
|
|
echo "mzuser@mobilizon.test:$MOBILIZON_PASSWORD" > "$here/.state/mobilizon.token"
|
||
|
|
}
|