Commit c7c06dae authored by Guillermo Sanz López's avatar Guillermo Sanz López
Browse files

delete backoffice prepare from Dockerfile

parent e4eb4221
Loading
Loading
Loading
Loading
+0 −2
Original line number Diff line number Diff line
@@ -15,5 +15,3 @@ RUN apk add redis
COPY . /usr/src/app

EXPOSE 8080

CMD ["sh", "backoffice_prepare.sh"]
+0 −64
Original line number Diff line number Diff line
#!/bin/bash

# OUTPUT=$(redis-cli -h redis -p 6379 -n 1 GET  server_priv_key)
# echo "$OUTPUT"

# if [ -z "$OUTPUT" ]; then
#     echo "OUTPUT empty"
#     exit 1;
# else
#     echo "OUTPUT: $OUTPUT"
#     redis-cli -h redis -p 6379 -n 1 GET  server_priv_key > /usr/src/app/backoffice_service/server.key
# fi

pwd=$(pwd)
openssl req -x509 \
            -sha256 -days 356 \
            -nodes \
            -newkey rsa:2048 \
            -subj "/CN=backoffice/C=ES/L=Madrid" \
            -keyout $pwd/backoffice_service/certs/backofficeCA.key -out $pwd/backoffice_service/certs/backofficeCA.crt

openssl genrsa -out $pwd/backoffice_service/certs/backoffice_key.key 2048

COUNTRY="ES"                # 2 letter country-code
STATE="Madrid"            # state or province name
LOCALITY="Madrid"        # Locality Name (e.g. city)
ORGNAME="Telefonica I+D" # Organization Name (eg, company)
ORGUNIT="Innovation"                  # Organizational Unit Name (eg. section)
COMMONNAME="superadmin"
EMAIL="inno@tid.es"    # certificate's email address
# optional extra details
CHALLENGE=""                # challenge password
COMPANY=""                  # company name
# DAYS="-days 365"

# create the certificate request
cat <<__EOF__ | openssl req -new $DAYS -key $pwd/backoffice_service/certs/backoffice_key.key -out $pwd/backoffice_service/certs/backoffice.csr
$COUNTRY
$STATE
$LOCALITY
$ORGNAME
$ORGUNIT
$COMMONNAME
$EMAIL
$CHALLENGE
$COMPANY
__EOF__

openssl x509 -req -in $pwd/backoffice_service/certs/backoffice.csr -CA $pwd/backoffice_service/certs/backofficeCA.crt -CAkey $pwd/backoffice_service/certs/backofficeCA.key  -CAcreateserial -out $pwd/backoffice_service/certs/backoffice_cert.crt -days 365 -sha256

VAULT_ADDR="http://$VAULT_HOSTNAME:$VAULT_PORT"
VAULT_TOKEN=$VAULT_ACCESS_TOKEN

curl  -k -retry 30 \
    --retry-all-errors \
    --connect-timeout 5 \
    --max-time 10 \
    --retry-delay 10 \
    --retry-max-time 300 \
    --header "X-Vault-Token: $VAULT_TOKEN" \
    --request GET "$VAULT_ADDR/v1/secret/data/ca" 2>/dev/null | jq -r '.data.data.ca' -j > ./backoffice_service/certs/ca.crt

cd /usr/src/app/
python3 -m backoffice_service
 No newline at end of file