mirror of
https://github.com/warmbly/warmbly.git
synced 2026-09-08 08:03:28 +00:00
29 lines
1.1 KiB
Bash
29 lines
1.1 KiB
Bash
#!/bin/sh
|
|
# Render the runtime config from container env so a single built image serves
|
|
# any deployment. Runs before nginx starts (nginx /docker-entrypoint.d hook).
|
|
set -eu
|
|
|
|
# Values are written into JavaScript string literals, so a double quote, a
|
|
# backslash or a line break in one would end the literal early and take the
|
|
# whole config with it, leaving the app with no API_URL at all. Escape rather
|
|
# than trust whatever ended up in .env.
|
|
js() {
|
|
printf '%s' "$1" | sed -e 's/\\/\\\\/g' -e 's/"/\\"/g' | tr -d '\r\n'
|
|
}
|
|
|
|
cat > /usr/share/nginx/html/config.js <<EOF
|
|
window.__WARMBLY_ENV__ = {
|
|
API_URL: "$(js "${WARMBLY_API_URL:-}")",
|
|
APP_URL: "$(js "${WARMBLY_APP_URL:-}")",
|
|
TURNSTILE_KEY: "$(js "${WARMBLY_TURNSTILE_KEY:-}")",
|
|
SENTRY_DSN: "$(js "${WARMBLY_SENTRY_DSN:-}")",
|
|
SENTRY_ENVIRONMENT: "$(js "${WARMBLY_SENTRY_ENVIRONMENT:-}")",
|
|
POSTHOG_KEY: "$(js "${WARMBLY_POSTHOG_KEY:-}")",
|
|
POSTHOG_HOST: "$(js "${WARMBLY_POSTHOG_HOST:-}")"
|
|
};
|
|
EOF
|
|
|
|
# The redirect truncates in place and keeps whatever mode the built file had, so
|
|
# a restrictive umask or checkout leaves nginx serving 403 for the whole config.
|
|
chmod 644 /usr/share/nginx/html/config.js
|