From 79b82405920f8ce594e78ebcc130300f4540ba9c Mon Sep 17 00:00:00 2001 From: Egor Matveev Date: Tue, 10 Jun 2025 00:41:27 +0300 Subject: [PATCH] fix --- nginx/nginx-dev/prepare.py | 87 ++++++++++++++++++++------------------ 1 file changed, 47 insertions(+), 40 deletions(-) diff --git a/nginx/nginx-dev/prepare.py b/nginx/nginx-dev/prepare.py index 2e056d1..21a95a3 100644 --- a/nginx/nginx-dev/prepare.py +++ b/nginx/nginx-dev/prepare.py @@ -3,50 +3,57 @@ import os from minio import Minio -minio_client = Minio( - "minio.develop.sprinthub.ru:9000", - access_key="serviceminioadmin", - secret_key=os.getenv("MINIO_SECRET_KEY", "minioadmin"), - secure=False -) +def main(): + minio_client = Minio( + "minio.develop.sprinthub.ru:9000", + access_key="serviceminioadmin", + secret_key=os.getenv("MINIO_SECRET_KEY", "minioadmin"), + secure=False + ) -hosts = get('http://configurator/api/v1/fetch?project=certupdater&stage=development').json()['configs']['hosts'] -hosts = {**hosts, 'platform.develop.sprinthub.ru': {'host': 'platform-nginx', 'port': 1238}} + hosts = get('http://configurator/api/v1/fetch?project=certupdater&stage=development').json()['configs']['hosts'] + hosts = {**hosts, 'platform.develop.sprinthub.ru': {'host': 'platform-nginx', 'port': 1238}} -config = '' -for host, params in hosts.items(): - config += ''' - server {{ - listen 443 ssl http2; - listen [::]:443 ssl http2; - server_name {host}; + config = '' + for host, params in hosts.items(): + config += ''' + server {{ + listen 443 ssl http2; + listen [::]:443 ssl http2; + server_name {host}; - ssl_certificate /etc/nginx/{host}/fullchain.pem; - ssl_certificate_key /etc/nginx/{host}/privkey.pem; + ssl_certificate /etc/nginx/{host}/fullchain.pem; + ssl_certificate_key /etc/nginx/{host}/privkey.pem; - add_header X-Frame-Options "SAMEORIGIN" always; - add_header X-XSS-Protection "1; mode=block" always; - add_header X-Content-Type-Options "nosniff" always; - add_header Referrer-Policy "no-refferer-when-downgrade" always; - add_header Content-Security-Policy "default-src * data: 'unsafe-eval' 'unsafe-inline'" always; + add_header X-Frame-Options "SAMEORIGIN" always; + add_header X-XSS-Protection "1; mode=block" always; + add_header X-Content-Type-Options "nosniff" always; + add_header Referrer-Policy "no-refferer-when-downgrade" always; + add_header Content-Security-Policy "default-src * data: 'unsafe-eval' 'unsafe-inline'" always; - location / {{ - resolver 127.0.0.11; - proxy_pass http://{target_host}:{port}$request_uri; - }} - }}\n\n - '''.format(host=host, target_host=params['host'], port=params['port']) - fullchain = minio_client.get_object("certupdater", f'certificates/{host}/fullchain.pem') - privkey = minio_client.get_object("certupdater", f'certificates/{host}/privkey.pem') - try: - os.mkdir(f'/etc/nginx/{host}') - except FileExistsError: - ... - with open(f"/etc/nginx/{host}/fullchain.pem", 'wb') as fp: - fp.write(fullchain.data) - with open(f"/etc/nginx/{host}/privkey.pem", 'wb') as fp: - fp.write(privkey.data) + location / {{ + resolver 127.0.0.11; + proxy_pass http://{target_host}:{port}$request_uri; + }} + }}\n\n + '''.format(host=host, target_host=params['host'], port=params['port']) + fullchain = minio_client.get_object("certupdater", f'certificates/{host}/fullchain.pem') + privkey = minio_client.get_object("certupdater", f'certificates/{host}/privkey.pem') + try: + os.mkdir(f'/etc/nginx/{host}') + except FileExistsError: + ... + with open(f"/etc/nginx/{host}/fullchain.pem", 'wb') as fp: + fp.write(fullchain.data) + with open(f"/etc/nginx/{host}/privkey.pem", 'wb') as fp: + fp.write(privkey.data) -with open('/etc/nginx/hosts.conf', 'w') as fp: - fp.write(config) + with open('/etc/nginx/hosts.conf', 'w') as fp: + fp.write(config) + + +try: + main() +except Exception as e: + print(e) -- 2.45.2