bfb26d9aa5
When the background Logto process exits during bootstrap, `kill $LOGTO_PID` returns non-zero. Under `set -e`, this terminates the entrypoint before reaching the production-mode restart, causing the container to error on first startup and only recover via restart policy. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
66 lines
2.2 KiB
Bash
66 lines
2.2 KiB
Bash
#!/bin/sh
|
|
set -e
|
|
|
|
# Save the real public endpoints for after bootstrap
|
|
REAL_ENDPOINT="$ENDPOINT"
|
|
REAL_ADMIN_ENDPOINT="$ADMIN_ENDPOINT"
|
|
|
|
echo "[entrypoint] Seeding Logto database..."
|
|
npm run cli db seed -- --swe 2>/dev/null || true
|
|
|
|
echo "[entrypoint] Deploying database alterations..."
|
|
npm run cli db alteration deploy 2>/dev/null || true
|
|
|
|
# Start Logto with localhost endpoints so it can reach itself without Traefik
|
|
export ENDPOINT="http://localhost:3001"
|
|
export ADMIN_ENDPOINT="http://localhost:3002"
|
|
|
|
echo "[entrypoint] Starting Logto (bootstrap mode)..."
|
|
npm start &
|
|
LOGTO_PID=$!
|
|
|
|
echo "[entrypoint] Waiting for Logto to be ready..."
|
|
for i in $(seq 1 120); do
|
|
if node -e "require('http').get('http://localhost:3001/oidc/.well-known/openid-configuration', r => process.exit(r.statusCode === 200 ? 0 : 1)).on('error', () => process.exit(1))" 2>/dev/null; then
|
|
echo "[entrypoint] Logto is ready."
|
|
break
|
|
fi
|
|
if [ "$i" -eq 120 ]; then
|
|
echo "[entrypoint] ERROR: Logto not ready after 120s"
|
|
exit 1
|
|
fi
|
|
sleep 1
|
|
done
|
|
|
|
# Run bootstrap — use localhost endpoints, skip Host headers (BOOTSTRAP_LOCAL flag)
|
|
# PUBLIC_HOST and PUBLIC_PROTOCOL stay real for redirect URI generation
|
|
BOOTSTRAP_FILE="/data/logto-bootstrap.json"
|
|
export LOGTO_ENDPOINT="http://localhost:3001"
|
|
export LOGTO_ADMIN_ENDPOINT="http://localhost:3002"
|
|
export BOOTSTRAP_LOCAL="true"
|
|
|
|
if [ -f "$BOOTSTRAP_FILE" ]; then
|
|
CACHED_SECRET=$(jq -r '.m2mClientSecret // empty' "$BOOTSTRAP_FILE" 2>/dev/null)
|
|
CACHED_SPA=$(jq -r '.spaClientId // empty' "$BOOTSTRAP_FILE" 2>/dev/null)
|
|
if [ -n "$CACHED_SECRET" ] && [ -n "$CACHED_SPA" ]; then
|
|
echo "[entrypoint] Bootstrap already complete."
|
|
else
|
|
echo "[entrypoint] Incomplete bootstrap found, re-running..."
|
|
/scripts/logto-bootstrap.sh
|
|
fi
|
|
else
|
|
echo "[entrypoint] Running bootstrap..."
|
|
/scripts/logto-bootstrap.sh
|
|
fi
|
|
|
|
# Restart Logto with real public endpoints
|
|
echo "[entrypoint] Bootstrap done. Restarting Logto with public endpoints..."
|
|
kill $LOGTO_PID 2>/dev/null || true
|
|
wait $LOGTO_PID 2>/dev/null || true
|
|
|
|
export ENDPOINT="$REAL_ENDPOINT"
|
|
export ADMIN_ENDPOINT="$REAL_ADMIN_ENDPOINT"
|
|
|
|
echo "[entrypoint] Starting Logto (production mode)..."
|
|
exec npm start
|