83801d2499
Start Logto with localhost endpoints so bootstrap can reach the Management API without going through Traefik. After bootstrap completes, restart Logto with the real public endpoints for production use. This eliminates the Traefik race condition entirely. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
64 lines
2.1 KiB
Bash
64 lines
2.1 KiB
Bash
#!/bin/sh
|
|
set -e
|
|
|
|
# Save the real public endpoints for after bootstrap
|
|
REAL_ENDPOINT="$ENDPOINT"
|
|
REAL_ADMIN_ENDPOINT="$ADMIN_ENDPOINT"
|
|
|
|
echo "[entrypoint] Seeding Logto database..."
|
|
npm run cli db seed -- --swe 2>/dev/null || true
|
|
|
|
echo "[entrypoint] Deploying database alterations..."
|
|
npm run cli db alteration deploy 2>/dev/null || true
|
|
|
|
# Start Logto with localhost endpoints so it can reach itself without Traefik
|
|
export ENDPOINT="http://localhost:3001"
|
|
export ADMIN_ENDPOINT="http://localhost:3002"
|
|
|
|
echo "[entrypoint] Starting Logto (bootstrap mode)..."
|
|
npm start &
|
|
LOGTO_PID=$!
|
|
|
|
echo "[entrypoint] Waiting for Logto to be ready..."
|
|
for i in $(seq 1 120); do
|
|
if node -e "require('http').get('http://localhost:3001/oidc/.well-known/openid-configuration', r => process.exit(r.statusCode === 200 ? 0 : 1)).on('error', () => process.exit(1))" 2>/dev/null; then
|
|
echo "[entrypoint] Logto is ready."
|
|
break
|
|
fi
|
|
if [ "$i" -eq 120 ]; then
|
|
echo "[entrypoint] ERROR: Logto not ready after 120s"
|
|
exit 1
|
|
fi
|
|
sleep 1
|
|
done
|
|
|
|
# Run bootstrap if not already done — use localhost since we're inside the container
|
|
BOOTSTRAP_FILE="/data/logto-bootstrap.json"
|
|
export LOGTO_ENDPOINT="http://localhost:3001"
|
|
export LOGTO_ADMIN_ENDPOINT="http://localhost:3002"
|
|
|
|
if [ -f "$BOOTSTRAP_FILE" ]; then
|
|
CACHED_SECRET=$(jq -r '.m2mClientSecret // empty' "$BOOTSTRAP_FILE" 2>/dev/null)
|
|
CACHED_SPA=$(jq -r '.spaClientId // empty' "$BOOTSTRAP_FILE" 2>/dev/null)
|
|
if [ -n "$CACHED_SECRET" ] && [ -n "$CACHED_SPA" ]; then
|
|
echo "[entrypoint] Bootstrap already complete."
|
|
else
|
|
echo "[entrypoint] Incomplete bootstrap found, re-running..."
|
|
/scripts/logto-bootstrap.sh
|
|
fi
|
|
else
|
|
echo "[entrypoint] Running bootstrap..."
|
|
/scripts/logto-bootstrap.sh
|
|
fi
|
|
|
|
# Restart Logto with real public endpoints
|
|
echo "[entrypoint] Bootstrap done. Restarting Logto with public endpoints..."
|
|
kill $LOGTO_PID 2>/dev/null
|
|
wait $LOGTO_PID 2>/dev/null || true
|
|
|
|
export ENDPOINT="$REAL_ENDPOINT"
|
|
export ADMIN_ENDPOINT="$REAL_ADMIN_ENDPOINT"
|
|
|
|
echo "[entrypoint] Starting Logto (production mode)..."
|
|
exec npm start
|