77 lines
2.1 KiB
Bash
77 lines
2.1 KiB
Bash
#!/bin/ash
|
|
|
|
set -e
|
|
|
|
function check_ssl_files() {
|
|
if [[ ! -f "$AZURITE_DIR/server_key.pem" || ! -f "$AZURITE_DIR/server_cert.pem" ]]; then
|
|
echo "SSL enabled but server_key.pem or server_cert.pem not found in $AZURITE_DIR. Please provide these files for SSL support."
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
# We are running as root inside a container.
|
|
AZURITE_DIR="/storage"
|
|
AZURITE_ACCOUNTS_FILE="$AZURITE_DIR/accounts.env"
|
|
|
|
if [[ ! -f "$AZURITE_ACCOUNTS_FILE" ]]; then
|
|
echo "No accounts found. Provide $AZURITE_ACCOUNTS_FILE."
|
|
exit 1
|
|
fi
|
|
|
|
set -a
|
|
. $AZURITE_ACCOUNTS_FILE
|
|
set +a
|
|
|
|
CADDY=true
|
|
AZURITE_SSL=""
|
|
CERT_ARGS=()
|
|
BLOB_ARGS=()
|
|
OAUTH_ARGS=()
|
|
|
|
while [[ $# -gt 0 ]]; do
|
|
case "$1" in
|
|
--oauth)
|
|
OAUTH_ARGS=("--oauth" "basic")
|
|
CADDY="" # Ensure OAuth is disabled when using Caddy, as Azurite does not support OAuth in reverse proxy mode.
|
|
shift
|
|
;;
|
|
--ssl)
|
|
check_ssl_files
|
|
AZURITE_SSL=true
|
|
shift
|
|
;;
|
|
--no-caddy)
|
|
CADDY=""
|
|
shift
|
|
;;
|
|
*)
|
|
echo "Unknown argument: $1"
|
|
exit 1
|
|
;;
|
|
esac
|
|
done
|
|
|
|
if [[ -n "$CADDY" ]]; then
|
|
# If using Caddy, it will reverse proxy blob, queue, and table endpoints to different ports on localhost,
|
|
# allowing simultaneous access to all services on a single HTTPS port.
|
|
check_ssl_files # Ensure SSL files are present when using Caddy, as Caddy will handle SSL termination.
|
|
echo "Starting Caddy server..."
|
|
caddy start --config Caddyfile # Use start not run, start does not block the shell process.
|
|
else
|
|
# If not using Caddy, configure Azurite to listen on all interfaces and use the generated self-signed certificate.
|
|
# This mode does not require Caddy, but it will not allow simultaneous access to the table and queue services on the same HTTPS port.
|
|
if [[ -n "$AZURITE_SSL" ]]; then
|
|
BLOB_ARGS=("--blobHost" "0.0.0.0" "--blobPort" "443")
|
|
CERT_ARGS=("--key" "$AZURITE_DIR/server_key.pem" "--cert" "$AZURITE_DIR/server_cert.pem")
|
|
fi
|
|
fi
|
|
|
|
azurite \
|
|
--disableTelemetry \
|
|
--location "$AZURITE_DIR" \
|
|
"${CERT_ARGS[@]}" \
|
|
"${BLOB_ARGS[@]}" \
|
|
"${OAUTH_ARGS[@]}"
|
|
|
|
exec "$@"
|