1
0
mirror of https://github.com/bitwarden/server.git synced 2024-12-05 14:23:30 +01:00
bitwarden-server/util/Setup/EnvironmentFileBuilder.cs

227 lines
8.5 KiB
C#
Raw Normal View History

using Microsoft.Data.SqlClient;
2017-10-24 04:45:59 +02:00
2022-08-29 22:06:55 +02:00
namespace Bit.Setup;
public class EnvironmentFileBuilder
2017-10-24 04:45:59 +02:00
{
2022-08-29 22:06:55 +02:00
private readonly Context _context;
private IDictionary<string, string> _globalValues;
private IDictionary<string, string> _mssqlValues;
private IDictionary<string, string> _globalOverrideValues;
private IDictionary<string, string> _mssqlOverrideValues;
private IDictionary<string, string> _keyConnectorOverrideValues;
public EnvironmentFileBuilder(Context context)
2017-10-24 04:45:59 +02:00
{
2022-08-29 22:06:55 +02:00
_context = context;
_globalValues = new Dictionary<string, string>
{
["ASPNETCORE_ENVIRONMENT"] = "Production",
["globalSettings__selfHosted"] = "true",
["globalSettings__baseServiceUri__vault"] = "http://localhost",
["globalSettings__pushRelayBaseUri"] = "https://push.bitwarden.com",
};
_mssqlValues = new Dictionary<string, string>
{
["ACCEPT_EULA"] = "Y",
["MSSQL_PID"] = "Express",
["SA_PASSWORD"] = "SECRET",
};
}
2018-08-30 17:35:44 +02:00
2022-08-29 22:06:55 +02:00
public void BuildForInstaller()
{
Directory.CreateDirectory("/bitwarden/env/");
Init();
Build();
}
2017-11-07 04:55:15 +01:00
2022-08-29 22:06:55 +02:00
public void BuildForUpdater()
{
Init();
LoadExistingValues(_globalOverrideValues, "/bitwarden/env/global.override.env");
LoadExistingValues(_mssqlOverrideValues, "/bitwarden/env/mssql.override.env");
LoadExistingValues(_keyConnectorOverrideValues, "/bitwarden/env/key-connector.override.env");
if (_context.Config.PushNotifications &&
_globalOverrideValues.ContainsKey("globalSettings__pushRelayBaseUri") &&
_globalOverrideValues["globalSettings__pushRelayBaseUri"] == "REPLACE")
2018-08-30 17:35:44 +02:00
{
2022-08-29 22:06:55 +02:00
_globalOverrideValues.Remove("globalSettings__pushRelayBaseUri");
2018-08-30 17:35:44 +02:00
}
2017-10-24 04:45:59 +02:00
2022-08-29 22:06:55 +02:00
Build();
}
private void Init()
{
var dbPassword = _context.Stub ? "RANDOM_DATABASE_PASSWORD" : Helpers.SecureRandomString(32);
var dbConnectionString = new SqlConnectionStringBuilder
{
DataSource = "tcp:mssql,1433",
InitialCatalog = _context.Install?.Database ?? "vault",
UserID = "sa",
Password = dbPassword,
MultipleActiveResultSets = false,
Encrypt = true,
ConnectTimeout = 30,
TrustServerCertificate = true,
PersistSecurityInfo = false
}.ConnectionString;
_globalOverrideValues = new Dictionary<string, string>
{
["globalSettings__baseServiceUri__vault"] = _context.Config.Url,
["globalSettings__baseServiceUri__cloudRegion"] = _context.Install?.CloudRegion.ToString(),
2022-08-29 22:06:55 +02:00
["globalSettings__sqlServer__connectionString"] = $"\"{dbConnectionString.Replace("\"", "\\\"")}\"",
["globalSettings__identityServer__certificatePassword"] = _context.Install?.IdentityCertPassword,
["globalSettings__internalIdentityKey"] = _context.Stub ? "RANDOM_IDENTITY_KEY" :
Helpers.SecureRandomString(64, alpha: true, numeric: true),
["globalSettings__oidcIdentityClientKey"] = _context.Stub ? "RANDOM_IDENTITY_KEY" :
Helpers.SecureRandomString(64, alpha: true, numeric: true),
["globalSettings__duo__aKey"] = _context.Stub ? "RANDOM_DUO_AKEY" :
Helpers.SecureRandomString(64, alpha: true, numeric: true),
["globalSettings__installation__id"] = _context.Install?.InstallationId.ToString(),
["globalSettings__installation__key"] = _context.Install?.InstallationKey,
["globalSettings__yubico__clientId"] = "REPLACE",
["globalSettings__yubico__key"] = "REPLACE",
["globalSettings__mail__replyToEmail"] = $"no-reply@{_context.Config.Domain}",
["globalSettings__mail__smtp__host"] = "REPLACE",
["globalSettings__mail__smtp__port"] = "587",
["globalSettings__mail__smtp__ssl"] = "false",
["globalSettings__mail__smtp__username"] = "REPLACE",
["globalSettings__mail__smtp__password"] = "REPLACE",
["globalSettings__disableUserRegistration"] = "false",
["globalSettings__hibpApiKey"] = "REPLACE",
["adminSettings__admins"] = string.Empty,
};
if (!_context.Config.PushNotifications)
2017-10-24 04:45:59 +02:00
{
2022-08-29 22:06:55 +02:00
_globalOverrideValues.Add("globalSettings__pushRelayBaseUri", "REPLACE");
2017-11-07 04:55:15 +01:00
}
2022-08-29 22:06:55 +02:00
_mssqlOverrideValues = new Dictionary<string, string>
2017-11-07 04:55:15 +01:00
{
2022-08-29 22:06:55 +02:00
["SA_PASSWORD"] = dbPassword,
["DATABASE"] = _context.Install?.Database ?? "vault"
2022-08-29 22:06:55 +02:00
};
2018-08-30 17:35:44 +02:00
2022-08-29 22:06:55 +02:00
_keyConnectorOverrideValues = new Dictionary<string, string>
{
["keyConnectorSettings__webVaultUri"] = _context.Config.Url,
["keyConnectorSettings__identityServerUri"] = "http://identity:5000",
["keyConnectorSettings__database__provider"] = "json",
["keyConnectorSettings__database__jsonFilePath"] = "/etc/bitwarden/key-connector/data.json",
["keyConnectorSettings__rsaKey__provider"] = "certificate",
["keyConnectorSettings__certificate__provider"] = "filesystem",
["keyConnectorSettings__certificate__filesystemPath"] = "/etc/bitwarden/key-connector/bwkc.pfx",
["keyConnectorSettings__certificate__filesystemPassword"] = Helpers.SecureRandomString(32, alpha: true, numeric: true),
};
}
2018-08-30 17:35:44 +02:00
2022-08-29 22:06:55 +02:00
private void LoadExistingValues(IDictionary<string, string> _values, string file)
{
if (!File.Exists(file))
{
return;
2017-11-07 04:55:15 +01:00
}
2022-08-29 22:06:55 +02:00
var fileLines = File.ReadAllLines(file);
foreach (var line in fileLines)
2017-11-07 04:55:15 +01:00
{
2022-08-29 22:06:55 +02:00
if (!line.Contains("="))
2017-11-07 04:55:15 +01:00
{
2022-08-29 22:06:55 +02:00
continue;
2017-11-07 04:55:15 +01:00
}
2022-08-29 22:06:55 +02:00
var value = string.Empty;
var lineParts = line.Split("=", 2);
if (lineParts.Length < 1)
2017-10-24 04:45:59 +02:00
{
2022-08-29 22:06:55 +02:00
continue;
}
2022-08-29 22:06:55 +02:00
if (lineParts.Length > 1)
{
2022-08-29 22:06:55 +02:00
value = lineParts[1];
}
2017-11-07 04:55:15 +01:00
2022-08-29 22:06:55 +02:00
if (_values.ContainsKey(lineParts[0]))
2017-11-07 04:55:15 +01:00
{
2022-08-29 22:06:55 +02:00
_values[lineParts[0]] = value;
2017-11-07 04:55:15 +01:00
}
2022-08-29 22:06:55 +02:00
else
2017-11-07 04:55:15 +01:00
{
2022-08-29 22:06:55 +02:00
_values.Add(lineParts[0], value.Replace("\\\"", "\""));
2017-10-24 04:45:59 +02:00
}
2017-11-07 04:55:15 +01:00
}
2022-08-29 22:06:55 +02:00
}
2017-10-24 04:45:59 +02:00
2022-08-29 22:06:55 +02:00
private void Build()
{
var template = Helpers.ReadTemplate("EnvironmentFile");
Helpers.WriteLine(_context, "Building docker environment files.");
Directory.CreateDirectory("/bitwarden/docker/");
using (var sw = File.CreateText("/bitwarden/docker/global.env"))
2017-11-07 04:55:15 +01:00
{
2022-08-29 22:06:55 +02:00
sw.Write(template(new TemplateModel(_globalValues)));
}
Helpers.Exec("chmod 600 /bitwarden/docker/global.env");
2018-08-30 17:35:44 +02:00
2022-08-29 22:06:55 +02:00
using (var sw = File.CreateText("/bitwarden/docker/mssql.env"))
{
sw.Write(template(new TemplateModel(_mssqlValues)));
}
Helpers.Exec("chmod 600 /bitwarden/docker/mssql.env");
2017-12-21 04:31:30 +01:00
2022-08-29 22:06:55 +02:00
Helpers.WriteLine(_context, "Building docker environment override files.");
Directory.CreateDirectory("/bitwarden/env/");
using (var sw = File.CreateText("/bitwarden/env/global.override.env"))
{
sw.Write(template(new TemplateModel(_globalOverrideValues)));
}
Helpers.Exec("chmod 600 /bitwarden/env/global.override.env");
2017-12-21 04:31:30 +01:00
2022-08-29 22:06:55 +02:00
using (var sw = File.CreateText("/bitwarden/env/mssql.override.env"))
{
sw.Write(template(new TemplateModel(_mssqlOverrideValues)));
}
Helpers.Exec("chmod 600 /bitwarden/env/mssql.override.env");
2017-12-21 04:31:30 +01:00
2022-08-29 22:06:55 +02:00
if (_context.Config.EnableKeyConnector)
{
using (var sw = File.CreateText("/bitwarden/env/key-connector.override.env"))
2017-11-07 04:55:15 +01:00
{
2022-08-29 22:06:55 +02:00
sw.Write(template(new TemplateModel(_keyConnectorOverrideValues)));
2017-10-24 04:45:59 +02:00
}
2018-03-27 21:23:02 +02:00
2022-08-29 22:06:55 +02:00
Helpers.Exec("chmod 600 /bitwarden/env/key-connector.override.env");
}
2022-08-29 22:06:55 +02:00
// Empty uid env file. Only used on Linux hosts.
if (!File.Exists("/bitwarden/env/uid.env"))
{
using (var sw = File.CreateText("/bitwarden/env/uid.env")) { }
2017-10-24 04:45:59 +02:00
}
2022-08-29 22:06:55 +02:00
}
2018-08-30 17:35:44 +02:00
2022-08-29 22:06:55 +02:00
public class TemplateModel
{
public TemplateModel(IEnumerable<KeyValuePair<string, string>> variables)
2018-08-30 17:35:44 +02:00
{
2022-08-29 22:06:55 +02:00
Variables = variables.Select(v => new Kvp { Key = v.Key, Value = v.Value });
}
2018-08-30 17:35:44 +02:00
2022-08-29 22:06:55 +02:00
public IEnumerable<Kvp> Variables { get; set; }
2018-08-30 17:35:44 +02:00
2022-08-29 22:06:55 +02:00
public class Kvp
{
public string Key { get; set; }
public string Value { get; set; }
2018-08-30 17:35:44 +02:00
}
2017-10-24 04:45:59 +02:00
}
}