mirror of
https://github.com/quay/quay.git
synced 2026-01-26 06:21:37 +03:00
324844bd5c
* add Postgresql client certificate authentication option * fixed tailing whitespace as reported by pre-commit
26 lines
865 B
Bash
Executable File
26 lines
865 B
Bash
Executable File
#!/bin/bash
|
|
|
|
CERTDIR=${CERTDIR:-"/.postgresql"}
|
|
|
|
# only execute if we have the secrets for client certificates
|
|
if [ -d /run/secrets/postgresql ]; then
|
|
if [ -d ${CERTDIR} ]; then
|
|
[ -e /run/secrets/postgresql/tls.crt ] && \
|
|
cp /run/secrets/postgresql/tls.crt ${CERTDIR}/postgresql.crt
|
|
[ -e /run/secrets/postgresql/tls.key ] && \
|
|
cp /run/secrets/postgresql/tls.key ${CERTDIR}/postgresql.key
|
|
# SSL key needs to be restricted mode 0600
|
|
[ -e ${CERTDIR}/postgresql.key ] && \
|
|
chmod 0600 ${CERTDIR}/postgresql.key
|
|
[ -e /run/secrets/postgresql/ca.crt ] && \
|
|
cp /run/secrets/postgresql/ca.crt ${CERTDIR}/root.crt
|
|
[ -e /run/secrets/postgresql/ca.crl ] && \
|
|
cp /run/secrets/postgresql/ca.crl ${CERTDIR}/root.crl
|
|
else
|
|
# inidicate that we didn't succeed with creating the expected SSL store
|
|
echo "cannot create ${CERTDIR}"
|
|
exit 1
|
|
fi
|
|
fi
|
|
exit 0
|