mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-09-22 13:39:35 +00:00
122 lines
3.4 KiB
Go
122 lines
3.4 KiB
Go
package gateway
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
"os/exec"
|
|
"path/filepath"
|
|
"runtime"
|
|
|
|
"github.com/rs/zerolog/log"
|
|
)
|
|
|
|
const systemdServiceTemplate = `[Unit]
|
|
Description=Infisical Gateway Service
|
|
After=network.target
|
|
|
|
[Service]
|
|
Type=notify
|
|
NotifyAccess=all
|
|
EnvironmentFile=/etc/infisical/gateway.conf
|
|
ExecStart=infisical gateway
|
|
Restart=on-failure
|
|
InaccessibleDirectories=/home
|
|
PrivateTmp=yes
|
|
LimitCORE=infinity
|
|
LimitNOFILE=1000000
|
|
LimitNPROC=60000
|
|
LimitRTPRIO=infinity
|
|
LimitRTTIME=7000000
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
`
|
|
|
|
func InstallGatewaySystemdService(token string, domain string) error {
|
|
if runtime.GOOS != "linux" {
|
|
log.Info().Msg("Skipping systemd service installation - not on Linux")
|
|
return nil
|
|
}
|
|
|
|
if os.Geteuid() != 0 {
|
|
log.Info().Msg("Skipping systemd service installation - not running as root/sudo")
|
|
return nil
|
|
}
|
|
|
|
configDir := "/etc/infisical"
|
|
if err := os.MkdirAll(configDir, 0755); err != nil {
|
|
return fmt.Errorf("failed to create config directory: %v", err)
|
|
}
|
|
|
|
configContent := fmt.Sprintf("INFISICAL_UNIVERSAL_AUTH_ACCESS_TOKEN=%s\n", token)
|
|
if domain != "" {
|
|
configContent += fmt.Sprintf("INFISICAL_API_URL=%s\n", domain)
|
|
}
|
|
|
|
configPath := filepath.Join(configDir, "gateway.conf")
|
|
if err := os.WriteFile(configPath, []byte(configContent), 0600); err != nil {
|
|
return fmt.Errorf("failed to write config file: %v", err)
|
|
}
|
|
|
|
servicePath := "/etc/systemd/system/infisical-gateway.service"
|
|
if err := os.WriteFile(servicePath, []byte(systemdServiceTemplate), 0644); err != nil {
|
|
return fmt.Errorf("failed to write systemd service file: %v", err)
|
|
}
|
|
|
|
reloadCmd := exec.Command("systemctl", "daemon-reload")
|
|
if err := reloadCmd.Run(); err != nil {
|
|
return fmt.Errorf("failed to reload systemd: %v", err)
|
|
}
|
|
|
|
log.Info().Msg("Successfully installed systemd service")
|
|
log.Info().Msg("To start the service, run: sudo systemctl start infisical-gateway")
|
|
log.Info().Msg("To enable the service on boot, run: sudo systemctl enable infisical-gateway")
|
|
|
|
return nil
|
|
}
|
|
|
|
func UninstallGatewaySystemdService() error {
|
|
if runtime.GOOS != "linux" {
|
|
log.Info().Msg("Skipping systemd service uninstallation - not on Linux")
|
|
return nil
|
|
}
|
|
|
|
if os.Geteuid() != 0 {
|
|
log.Info().Msg("Skipping systemd service uninstallation - not running as root/sudo")
|
|
return nil
|
|
}
|
|
|
|
// Stop the service if it's running
|
|
stopCmd := exec.Command("systemctl", "stop", "infisical-gateway")
|
|
if err := stopCmd.Run(); err != nil {
|
|
log.Warn().Msgf("Failed to stop service: %v", err)
|
|
}
|
|
|
|
// Disable the service
|
|
disableCmd := exec.Command("systemctl", "disable", "infisical-gateway")
|
|
if err := disableCmd.Run(); err != nil {
|
|
log.Warn().Msgf("Failed to disable service: %v", err)
|
|
}
|
|
|
|
// Remove the service file
|
|
servicePath := "/etc/systemd/system/infisical-gateway.service"
|
|
if err := os.Remove(servicePath); err != nil && !os.IsNotExist(err) {
|
|
return fmt.Errorf("failed to remove systemd service file: %v", err)
|
|
}
|
|
|
|
// Remove the configuration file
|
|
configPath := "/etc/infisical/gateway.conf"
|
|
if err := os.Remove(configPath); err != nil && !os.IsNotExist(err) {
|
|
return fmt.Errorf("failed to remove config file: %v", err)
|
|
}
|
|
|
|
// Reload systemd to apply changes
|
|
reloadCmd := exec.Command("systemctl", "daemon-reload")
|
|
if err := reloadCmd.Run(); err != nil {
|
|
return fmt.Errorf("failed to reload systemd: %v", err)
|
|
}
|
|
|
|
log.Info().Msg("Successfully uninstalled Infisical Gateway systemd service")
|
|
return nil
|
|
}
|