Upload 5 files

nginx.conf.template

@@ -4,6 +4,21 @@ server {
     absolute_redirect off;
     port_in_redirect off;
 
+    location ^~ /v0/management {
+        proxy_pass http://${CLI_PROXY_HOST}:${CLI_PROXY_PORT};
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        proxy_set_header X-Management-Key "${MANAGEMENT_KEY}";
+        proxy_set_header X-Api-Key "${MANAGEMENT_KEY}";
+        proxy_set_header Authorization "Bearer ${MANAGEMENT_KEY}";
+        proxy_read_timeout 300;
+    }
+
     location / {
         proxy_pass http://${CLI_PROXY_HOST}:${CLI_PROXY_PORT};
         proxy_http_version 1.1;

start.sh

@@ -41,6 +41,63 @@ if [ ! -f "${CONFIG_PATH}" ]; then
   done
 fi
 
+if [ -n "${CLI_PROXY_KEY:-}" ]; then
+  if [ -z "${MANAGEMENT_KEY:-}" ]; then
+    MANAGEMENT_KEY="${CLI_PROXY_KEY}"
+  fi
+  if [ -z "${API_KEYS:-}" ]; then
+    API_KEYS="${CLI_PROXY_KEY}"
+  fi
+fi
+
+if [ -f "${CONFIG_PATH}" ]; then
+  if [ -n "${MANAGEMENT_KEY:-}" ]; then
+    MGMT_ESCAPED="$(printf '%s' "${MANAGEMENT_KEY}" | sed 's/[\\/&]/\\&/g')"
+    if grep -q '^[[:space:]]*secret-key:' "${CONFIG_PATH}"; then
+      sed -i "s|^\([[:space:]]*secret-key:\).*|\1 \"${MGMT_ESCAPED}\"|" "${CONFIG_PATH}"
+    fi
+  fi
+  if [ -n "${API_KEYS:-}" ]; then
+    TMP_CONFIG="${CONFIG_PATH}.tmp"
+    awk -v keys="${API_KEYS}" '
+      BEGIN {
+        n=split(keys, arr, /[ ,]+/);
+        in_api=0;
+        found=0;
+      }
+      function emit_keys() {
+        print "api-keys:";
+        for (i=1; i<=n; i++) {
+          if (length(arr[i]) > 0) {
+            print "  - \"" arr[i] "\"";
+          }
+        }
+      }
+      {
+        if (in_api) {
+          if ($0 ~ /^[[:space:]]*-/) {
+            next;
+          } else {
+            in_api=0;
+          }
+        }
+        if ($0 ~ /^api-keys:[[:space:]]*$/) {
+          emit_keys();
+          in_api=1;
+          found=1;
+          next;
+        }
+        print $0;
+      }
+      END {
+        if (!found) {
+          emit_keys();
+        }
+      }
+    ' "${CONFIG_PATH}" > "${TMP_CONFIG}" && mv "${TMP_CONFIG}" "${CONFIG_PATH}"
+  fi
+fi
+
 if [ -f "${CONFIG_PATH}" ]; then
   ln -sf "${CONFIG_PATH}" /CLIProxyAPI/config.yaml
 elif [ -f "/CLIProxyAPI/config.yaml" ]; then
@@ -58,8 +115,18 @@ if [ -d "/etc/nginx/http.d" ]; then
   NGINX_CONF_DIR="/etc/nginx/http.d"
 fi
 
-export PROXY_PATH CLI_PROXY_HOST CLI_PROXY_PORT PORT
-envsubst '${PORT} ${CLI_PROXY_HOST} ${CLI_PROXY_PORT}' \
+if [ -z "${MANAGEMENT_KEY:-}" ] && [ -f "${CONFIG_PATH}" ]; then
+  MGMT_KEY_LINE="$(sed -n 's/^[[:space:]]*secret-key[[:space:]]*:[[:space:]]*//p' "${CONFIG_PATH}" | head -n 1)"
+  MGMT_KEY_LINE="$(printf '%s' "${MGMT_KEY_LINE}" | sed 's/[[:space:]]*$//')"
+  MANAGEMENT_KEY="${MGMT_KEY_LINE#\"}"
+  MANAGEMENT_KEY="${MANAGEMENT_KEY%\"}"
+  MANAGEMENT_KEY="${MANAGEMENT_KEY#\'}"
+  MANAGEMENT_KEY="${MANAGEMENT_KEY%\'}"
+  export MANAGEMENT_KEY
+fi
+
+export PROXY_PATH CLI_PROXY_HOST CLI_PROXY_PORT PORT MANAGEMENT_KEY
+envsubst '${PORT} ${CLI_PROXY_HOST} ${CLI_PROXY_PORT} ${MANAGEMENT_KEY}' \
   < /etc/nginx/templates/default.conf.template \
   > "${NGINX_CONF_DIR}/default.conf"