install.sh

# This script is called directly after the installation of the .deb package
# It is used to setup the django application and the caddy server

sudo mkdir -p /var/www/linux-arbeitsplatz-static/
sudo chmod -R 777 /var/www/linux-arbeitsplatz-static/

if [ ! -d "/usr/share/linux-arbeitsplatz" ]; then
    cd src/lac/
else 
    cd /usr/share/linux-arbeitsplatz/
fi

if [ ! -f "cfg" ]; then
    cp cfg.example cfg
fi

python3 -m venv .env

ln -s /usr/bin/python3 /usr/bin/python

source .env/bin/activate
pip install --upgrade pip
pip install -r requirements.txt 
# Make sure that the database is up to date (sometimes e.g. oidc_provider needs to be updated)
python3 manage.py makemigrations --no-input
python manage.py migrate --no-input

# Get the current IP-Adress
# Get the output of hostname -I and cut the first part of it
IP=`hostname -I | cut -d' ' -f1`

# If caddy file does not has # PORTAL-ENTRY, then add it
if ! grep -q "# PORTAL-ENTRY" /etc/caddy/Caddyfile; then

# Remove :80 entry from caddy file, because we don't want to use it
python3 /usr/share/linux-arbeitsplatz/unix/unix_scripts/remove_caddy_service.py :80

echo "# PORTAL-ENTRY
:443 {
    tls internal {
        on_demand
    }
    handle_path /static* {
        root * /var/www/linux-arbeitsplatz-static
        file_server
        encode zstd gzip
    }
    handle_path /media* {
        root * /usr/share/linux-arbeitsplatz/media
        file_server
        encode zstd gzip
    }
    reverse_proxy localhost:11123
}

# SED-LOCALHOST-ENTRY
# We need this one for the local browser to work
# Only http, because we don't want a warning about the self-signed certificate
http://localhost {
    reverse_proxy https://localhost:443 {
        transport http {
            tls_insecure_skip_verify
        }
    }
}

" >> /etc/caddy/Caddyfile

# If something is running on port 80, then systemctl reload caddy will silently hang
systemctl restart caddy

fi