mirror of
https://github.com/furyhawk/cloudy.git
synced 2026-07-21 02:05:53 +00:00
52 lines
1.7 KiB
Bash
Executable File
52 lines
1.7 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
BOUNCER_NAME="${CROWDSEC_BOUNCER_NAME:-traefik-bouncer}"
|
|
BOUNCER_KEY="${CROWDSEC_BOUNCER_KEY:-}"
|
|
SERVICE_NAME="crowdsec_crowdsec"
|
|
WAIT_TIMEOUT_SECONDS="${CROWDSEC_REGISTER_WAIT_TIMEOUT:-180}"
|
|
WAIT_INTERVAL_SECONDS="${CROWDSEC_REGISTER_WAIT_INTERVAL:-3}"
|
|
|
|
if [[ -z "$BOUNCER_KEY" ]]; then
|
|
echo "CROWDSEC_BOUNCER_KEY is not set. Export it or source swarm/.env first."
|
|
exit 1
|
|
fi
|
|
|
|
if ! command -v docker >/dev/null 2>&1; then
|
|
echo "docker command not found in PATH."
|
|
exit 1
|
|
fi
|
|
|
|
if ! docker service inspect "$SERVICE_NAME" >/dev/null 2>&1; then
|
|
echo "CrowdSec service '${SERVICE_NAME}' does not exist yet."
|
|
echo "Deploy CrowdSec first: make deploy-crowdsec"
|
|
exit 1
|
|
fi
|
|
|
|
deadline=$((SECONDS + WAIT_TIMEOUT_SECONDS))
|
|
container_id=""
|
|
|
|
while [[ -z "$container_id" && $SECONDS -lt $deadline ]]; do
|
|
container_id="$(docker ps --filter "label=com.docker.swarm.service.name=${SERVICE_NAME}" --format '{{.ID}}' | head -n1)"
|
|
if [[ -z "$container_id" ]]; then
|
|
remaining=$((deadline - SECONDS))
|
|
echo "Waiting for running CrowdSec task (${remaining}s left)..."
|
|
sleep "$WAIT_INTERVAL_SECONDS"
|
|
fi
|
|
done
|
|
|
|
if [[ -z "$container_id" ]]; then
|
|
echo "No running CrowdSec LAPI task found for service ${SERVICE_NAME} after ${WAIT_TIMEOUT_SECONDS}s."
|
|
echo "Check service status: docker service ps ${SERVICE_NAME} --no-trunc"
|
|
exit 1
|
|
fi
|
|
|
|
if docker exec "$container_id" cscli bouncers list 2>/dev/null | grep -q "$BOUNCER_NAME"; then
|
|
echo "Bouncer '${BOUNCER_NAME}' is already registered."
|
|
exit 0
|
|
fi
|
|
|
|
echo "Registering bouncer '${BOUNCER_NAME}' on ${SERVICE_NAME}..."
|
|
docker exec "$container_id" cscli bouncers add "$BOUNCER_NAME" --key "$BOUNCER_KEY"
|
|
echo "Bouncer registration complete."
|