root
90 lines
1.6 KiB
Bash
Executable File
90 lines
1.6 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
set -Eeuo pipefail
|
|
|
|
ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
|
|
SRC="${ROOT}/stacks/haproxy"
|
|
LIVE="/srv/nfs/infra/haproxy"
|
|
ENV_FILE="${LIVE}/.env"
|
|
|
|
echo "=== HAProxy validation ==="
|
|
|
|
if [[ ! -f "${ENV_FILE}" ]]; then
|
|
echo "ERROR: ${ENV_FILE} not found"
|
|
exit 1
|
|
fi
|
|
|
|
if [[ ! -f "${SRC}/docker-compose.yml" ]]; then
|
|
echo "ERROR: docker-compose.yml not found"
|
|
exit 1
|
|
fi
|
|
|
|
if [[ ! -f "${SRC}/conf/haproxy.cfg" ]]; then
|
|
echo "ERROR: haproxy.cfg not found"
|
|
exit 1
|
|
fi
|
|
|
|
|
|
echo
|
|
echo "--- Validate docker-compose.yml ---"
|
|
|
|
docker compose \
|
|
--env-file "${ENV_FILE}" \
|
|
-f "${SRC}/docker-compose.yml" \
|
|
config >/dev/null
|
|
|
|
|
|
echo
|
|
echo "--- Detect HAProxy image ---"
|
|
|
|
HAPROXY_IMAGE="$(
|
|
docker compose \
|
|
--env-file "${ENV_FILE}" \
|
|
-f "${SRC}/docker-compose.yml" \
|
|
config --images |
|
|
grep -m1 -E '(^|/)haproxy:'
|
|
)"
|
|
|
|
if [[ -z "${HAPROXY_IMAGE}" ]]; then
|
|
echo "ERROR: HAProxy image not found in compose"
|
|
exit 1
|
|
fi
|
|
|
|
echo "HAProxy image: ${HAPROXY_IMAGE}"
|
|
|
|
|
|
echo
|
|
echo "--- Validate haproxy.cfg ---"
|
|
|
|
TMP_DIR="$(mktemp -d)"
|
|
|
|
cleanup()
|
|
{
|
|
rm -rf "${TMP_DIR}"
|
|
}
|
|
|
|
trap cleanup EXIT
|
|
|
|
mkdir -p "${TMP_DIR}/conf"
|
|
|
|
rsync -a \
|
|
"${SRC}/conf/" \
|
|
"${TMP_DIR}/conf/"
|
|
|
|
|
|
docker run \
|
|
--rm \
|
|
-v "${TMP_DIR}/conf:/usr/local/etc/haproxy:ro" \
|
|
-v "${LIVE}/certs:/etc/haproxy/certs:ro" \
|
|
-v "${LIVE}/crowdsec/lua:/usr/lib/crowdsec-haproxy-spoa-bouncer/lua:ro" \
|
|
-v "${LIVE}/crowdsec/templates:/var/lib/crowdsec-haproxy-spoa-bouncer/html:ro" \
|
|
"${HAPROXY_IMAGE}" \
|
|
haproxy \
|
|
-c \
|
|
-f /usr/local/etc/haproxy/haproxy.cfg
|
|
|
|
|
|
echo
|
|
echo "=== Validation successful ==="
|