mirror of
https://github.com/gl-inet/glkvm-cloud.git
synced 2026-09-17 16:15:25 +00:00
Jon Agramonte
5e16e10e9a
- Introduced LDAP authentication configuration options in the README and Docker Compose files. - Updated API to handle dual authentication methods (LDAP and legacy). - Implemented LDAP authentication logic in a new ldap.go file. - Enhanced user login flow to support username and password for LDAP. - Added error handling for authorization and authentication failures. - Updated UI to include username input when LDAP is enabled and provide authentication options. - Added localization for new authentication messages in English and Chinese.
87 lines
2.3 KiB
Bash
Executable File
87 lines
2.3 KiB
Bash
Executable File
#!/bin/sh
|
|
set -e
|
|
|
|
# -------- GLKVM access IP resolver (IPv4) --------
|
|
resolve_glkvm_access_ip() {
|
|
# 1) Prefer user-provided env
|
|
if [ -n "${GLKVM_ACCESS_IP:-}" ]; then
|
|
echo "${GLKVM_ACCESS_IP}"
|
|
return 0
|
|
fi
|
|
|
|
is_ipv4() { echo "$1" | grep -Eq '^[0-9]{1,3}(\.[0-9]{1,3}){3}$'; }
|
|
try_cmd() {
|
|
val="$("$@" 2>/dev/null | tr -d '\r\n')"
|
|
if is_ipv4 "$val"; then
|
|
echo "$val"; return 0
|
|
fi
|
|
return 1
|
|
}
|
|
|
|
# 2) Best-effort auto-detection from multiple sources
|
|
if command -v wget >/dev/null 2>&1; then
|
|
try_cmd wget -qO- --timeout=3 https://api.ipify.org && return 0
|
|
try_cmd wget -qO- --timeout=3 https://ifconfig.me && return 0
|
|
fi
|
|
if command -v curl >/dev/null 2>&1; then
|
|
try_cmd curl -fsS --max-time 3 https://api.ipify.org && return 0
|
|
try_cmd curl -fsS --max-time 3 https://ifconfig.me && return 0
|
|
fi
|
|
if command -v dig >/dev/null 2>&1; then
|
|
try_cmd sh -c "dig +short -4 myip.opendns.com @resolver1.opendns.com" && return 0
|
|
fi
|
|
|
|
# 3) Fallback
|
|
echo "127.0.0.1"
|
|
}
|
|
|
|
# -------- Minimal template renderer ({{KEY}}) --------
|
|
render() {
|
|
in="$1"; out="$2"; shift 2
|
|
cp "$in" "$out"
|
|
for key in "$@"; do
|
|
val="$(printenv "$key" || true)"
|
|
# Special-case: GLKVM_ACCESS_IP prefers env, else auto-detect once
|
|
if [ "$key" = "GLKVM_ACCESS_IP" ] && [ -z "$val" ]; then
|
|
val="$(resolve_glkvm_access_ip)"
|
|
fi
|
|
# Escape '/' and '&' for sed
|
|
esc=$(printf '%s' "$val" | sed -e 's/[\/&]/\\&/g')
|
|
sed -i "s/{{${key}}}/${esc}/g" "$out"
|
|
done
|
|
}
|
|
|
|
# -------- Dispatch by first arg --------
|
|
case "$1" in
|
|
rttys)
|
|
: "${RTTYS_DEVICE_PORT:=5912}"
|
|
: "${RTTYS_WEBUI_PORT:=443}"
|
|
: "${RTTYS_HTTP_PROXY_PORT:=10443}"
|
|
: "${TURN_PORT:=3478}"
|
|
|
|
render /tpl/rttys.conf.tmpl /home/rttys.conf \
|
|
RTTYS_TOKEN RTTYS_PASS \
|
|
GLKVM_ACCESS_IP TURN_PORT TURN_USER TURN_PASS \
|
|
RTTYS_DEVICE_PORT RTTYS_WEBUI_PORT RTTYS_HTTP_PROXY_PORT \
|
|
LDAP_ENABLED LDAP_SERVER LDAP_PORT LDAP_USE_TLS \
|
|
LDAP_BIND_DN LDAP_BIND_PASSWORD LDAP_BASE_DN \
|
|
LDAP_USER_FILTER LDAP_ALLOWED_GROUPS LDAP_ALLOWED_USERS
|
|
|
|
exec rttys -c /home/rttys.conf
|
|
;;
|
|
|
|
coturn)
|
|
: "${TURN_PORT:=3478}"
|
|
|
|
mkdir -p /tmp
|
|
render /tpl/turnserver.conf.tmpl /tmp/turnserver.conf \
|
|
GLKVM_ACCESS_IP TURN_PORT TURN_USER TURN_PASS
|
|
|
|
exec turnserver -c /tmp/turnserver.conf
|
|
;;
|
|
|
|
*)
|
|
exec "$@"
|
|
;;
|
|
esac
|