commit b5e4bf3745072bdc769f3076028e61d9690cea38 · pyrox.dev/nixpkgs

+23 -20

nixos/modules/services/web-apps/kasmweb/default.nix

···

       124
        
         };

     

       125
        
       

     

       126
        
         config = lib.mkIf cfg.enable {

     

       127
       -
       

     

       128
        
           systemd.services = {

     

       129
        
             "init-kasmweb" = {

     

       130
        
               wantedBy = [

     

       131
        
                 "docker-kasm_db.service"

     

       132
       -
               ];

     

       133
       -
               before = [

     

       134
       -
                 "docker-kasm_db.service"

     

       135
       -
                 "docker-kasm_redis.service"

     

       136
       -
                 "docker-kasm_db_init.service"

     

       137
       -
                 "docker-kasm_api.service"

     

       138
       -
                 "docker-kasm_agent.service"

     

       139
       -
                 "docker-kasm_manager.service"

     

       140
       -
                 "docker-kasm_share.service"

     

       141
       -
                 "docker-kasm_guac.service"

     

       142
       -
                 "docker-kasm_proxy.service"

     

       143
        
               ];

     

       0
        
       
     

       0
        
       
     

       144
        
               serviceConfig = {

     

       145
        
                 Type = "oneshot";

     

       0
        
       
     

       146
        
                 ExecStart = pkgs.substituteAll {

     

       147
        
                   src = ./initialize_kasmweb.sh;

     

       148
        
                   isExecutable = true;

     

       149
       -
                   binPath = lib.makeBinPath [ pkgs.docker pkgs.openssl pkgs.gnused ];

     

       150
        
                   runtimeShell = pkgs.runtimeShell;

     

       151
        
                   kasmweb = pkgs.kasmweb;

     

       152
       -
                   postgresUser = cfg.postgres.user;

     

       153
       -
                   postgresPassword = cfg.postgres.password;

     

       154
        
                   inherit (cfg)

     

       155
        
                     datastorePath

     

       156
        
                     sslCertificate

     

       157
        
                     sslCertificateKey

     

       158
        
                     redisPassword

     

       0
        
       
     

       159
        
                     defaultUserPassword

     

       160
        
                     defaultAdminPassword

     

       161
        
                     defaultManagerToken

     
···

       167
        
           };

     

       168
        
       

     

       169
        
           virtualisation = {

     

       0
        
       
     

       170
        
             oci-containers.containers = {

     

       171
        
               kasm_db = {

     

       172
       -
                 image = "postgres:12-alpine";

     

       0
        
       
     

       173
        
                 environment = {

     

       174
       -
                   POSTGRES_PASSWORD = cfg.postgres.password;

     

       175
       -
                   POSTGRES_USER = cfg.postgres.user;

     

       176
        
                   POSTGRES_DB = "kasm";

     

       177
        
                 };

     

       178
        
                 volumes = [

     
···

       185
        
               kasm_db_init = {

     

       186
        
                 image = "kasmweb/api:${pkgs.kasmweb.version}";

     

       187
        
                 user = "root:root";

     

       0
        
       
     

       188
        
                 volumes = [

     

       189
        
                   "${cfg.datastorePath}/:/opt/kasm/current/"

     

       190
        
                   "kasmweb_api_data:/tmp"

     
···

       197
        
               kasm_redis = {

     

       198
        
                 image = "redis:5-alpine";

     

       199
        
                 entrypoint = "/bin/sh";

     

       0
        
       
     

       200
        
                 cmd = [

     

       201
        
                   "-c"

     

       202
        
                   "redis-server --requirepass ${cfg.redisPassword}"

     
···

       205
        
               };

     

       206
        
               kasm_api = {

     

       207
        
                 image = "kasmweb/api:${pkgs.kasmweb.version}";

     

       0
        
       
     

       208
        
                 user = "root:root";

     

       209
        
                 volumes = [

     

       210
        
                   "${cfg.datastorePath}/:/opt/kasm/current/"

     
···

       215
        
               };

     

       216
        
               kasm_manager = {

     

       217
        
                 image = "kasmweb/manager:${pkgs.kasmweb.version}";

     

       0
        
       
     

       218
        
                 user = "root:root";

     

       219
        
                 volumes = [

     

       220
        
                   "${cfg.datastorePath}/:/opt/kasm/current/"

     

       221
        
                 ];

     

       222
       -
                 dependsOn = [ "kasm_db" "kasm_api" ];

     

       223
        
                 extraOptions = [ "--network=kasm_default_network" "--userns=host" "--read-only"];

     

       224
        
               };

     

       225
        
               kasm_agent = {

     

       226
        
                 image = "kasmweb/agent:${pkgs.kasmweb.version}";

     

       0
        
       
     

       227
        
                 user = "root:root";

     

       228
        
                 volumes = [

     

       229
        
                   "${cfg.datastorePath}/:/opt/kasm/current/"

     
···

       236
        
               };

     

       237
        
               kasm_share = {

     

       238
        
                 image = "kasmweb/share:${pkgs.kasmweb.version}";

     

       0
        
       
     

       239
        
                 user = "root:root";

     

       240
        
                 volumes = [

     

       241
        
                   "${cfg.datastorePath}/:/opt/kasm/current/"

     

       242
        
                 ];

     

       243
       -
                 dependsOn = [ "kasm_db" "kasm_redis" ];

     

       244
        
                 extraOptions = [ "--network=kasm_default_network" "--userns=host" "--read-only" ];

     

       245
        
               };

     

       246
        
               kasm_guac = {

     

       247
        
                 image = "kasmweb/kasm-guac:${pkgs.kasmweb.version}";

     

       0
        
       
     

       248
        
                 user = "root:root";

     

       249
        
                 volumes = [

     

       250
        
                   "${cfg.datastorePath}/:/opt/kasm/current/"

     
···

       254
        
               };

     

       255
        
               kasm_proxy = {

     

       256
        
                 image = "kasmweb/nginx:latest";

     

       0
        
       
     

       257
        
                 ports = [ "${cfg.listenAddress}:${toString cfg.listenPort}:443" ];

     

       258
        
                 user = "root:root";

     

       259
        
                 volumes = [

···

       124
        
         };

     

       125
        
       

     

       126
        
         config = lib.mkIf cfg.enable {

     

       0
        
       
     

       127
        
           systemd.services = {

     

       128
        
             "init-kasmweb" = {

     

       129
        
               wantedBy = [

     

       130
        
                 "docker-kasm_db.service"

     

       131
       +
                 "podman-kasm_db.service"

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       132
        
               ];

     

       133
       +
               wants = ["network-online.target"];

     

       134
       +
               after = ["network-online.target"];

     

       135
        
               serviceConfig = {

     

       136
        
                 Type = "oneshot";

     

       137
       +
                 TimeoutStartSec = 300;

     

       138
        
                 ExecStart = pkgs.substituteAll {

     

       139
        
                   src = ./initialize_kasmweb.sh;

     

       140
        
                   isExecutable = true;

     

       141
       +
                   binPath = lib.makeBinPath [ pkgs.docker pkgs.openssl pkgs.gnused pkgs.yq-go ];

     

       142
        
                   runtimeShell = pkgs.runtimeShell;

     

       143
        
                   kasmweb = pkgs.kasmweb;

     

       144
       +
                   postgresUser = "postgres";

     

       145
       +
                   postgresPassword = "postgres";

     

       146
        
                   inherit (cfg)

     

       147
        
                     datastorePath

     

       148
        
                     sslCertificate

     

       149
        
                     sslCertificateKey

     

       150
        
                     redisPassword

     

       151
       +
                     networkSubnet

     

       152
        
                     defaultUserPassword

     

       153
        
                     defaultAdminPassword

     

       154
        
                     defaultManagerToken

     
···

       160
        
           };

     

       161
        
       

     

       162
        
           virtualisation = {

     

       163
       +
             oci-containers.backend = "docker";

     

       164
        
             oci-containers.containers = {

     

       165
        
               kasm_db = {

     

       166
       +
                 image = "postgres:16-alpine";

     

       167
       +
                 autoStart = true;

     

       168
        
                 environment = {

     

       169
       +
                   POSTGRES_PASSWORD = "postgres";

     

       170
       +
                   POSTGRES_USER = "postgres";

     

       171
        
                   POSTGRES_DB = "kasm";

     

       172
        
                 };

     

       173
        
                 volumes = [

     
···

       180
        
               kasm_db_init = {

     

       181
        
                 image = "kasmweb/api:${pkgs.kasmweb.version}";

     

       182
        
                 user = "root:root";

     

       183
       +
                 autoStart = true;

     

       184
        
                 volumes = [

     

       185
        
                   "${cfg.datastorePath}/:/opt/kasm/current/"

     

       186
        
                   "kasmweb_api_data:/tmp"

     
···

       193
        
               kasm_redis = {

     

       194
        
                 image = "redis:5-alpine";

     

       195
        
                 entrypoint = "/bin/sh";

     

       196
       +
                 autoStart = true;

     

       197
        
                 cmd = [

     

       198
        
                   "-c"

     

       199
        
                   "redis-server --requirepass ${cfg.redisPassword}"

     
···

       202
        
               };

     

       203
        
               kasm_api = {

     

       204
        
                 image = "kasmweb/api:${pkgs.kasmweb.version}";

     

       205
       +
                 autoStart = false;

     

       206
        
                 user = "root:root";

     

       207
        
                 volumes = [

     

       208
        
                   "${cfg.datastorePath}/:/opt/kasm/current/"

     
···

       213
        
               };

     

       214
        
               kasm_manager = {

     

       215
        
                 image = "kasmweb/manager:${pkgs.kasmweb.version}";

     

       216
       +
                 autoStart = false;

     

       217
        
                 user = "root:root";

     

       218
        
                 volumes = [

     

       219
        
                   "${cfg.datastorePath}/:/opt/kasm/current/"

     

       220
        
                 ];

     

       221
       +
                 dependsOn = [ "kasm_db_init" "kasm_db" "kasm_api" ];

     

       222
        
                 extraOptions = [ "--network=kasm_default_network" "--userns=host" "--read-only"];

     

       223
        
               };

     

       224
        
               kasm_agent = {

     

       225
        
                 image = "kasmweb/agent:${pkgs.kasmweb.version}";

     

       226
       +
                 autoStart = false;

     

       227
        
                 user = "root:root";

     

       228
        
                 volumes = [

     

       229
        
                   "${cfg.datastorePath}/:/opt/kasm/current/"

     
···

       236
        
               };

     

       237
        
               kasm_share = {

     

       238
        
                 image = "kasmweb/share:${pkgs.kasmweb.version}";

     

       239
       +
                 autoStart = false;

     

       240
        
                 user = "root:root";

     

       241
        
                 volumes = [

     

       242
        
                   "${cfg.datastorePath}/:/opt/kasm/current/"

     

       243
        
                 ];

     

       244
       +
                 dependsOn = [ "kasm_db_init" "kasm_db" "kasm_redis" ];

     

       245
        
                 extraOptions = [ "--network=kasm_default_network" "--userns=host" "--read-only" ];

     

       246
        
               };

     

       247
        
               kasm_guac = {

     

       248
        
                 image = "kasmweb/kasm-guac:${pkgs.kasmweb.version}";

     

       249
       +
                 autoStart = false;

     

       250
        
                 user = "root:root";

     

       251
        
                 volumes = [

     

       252
        
                   "${cfg.datastorePath}/:/opt/kasm/current/"

     
···

       256
        
               };

     

       257
        
               kasm_proxy = {

     

       258
        
                 image = "kasmweb/nginx:latest";

     

       259
       +
                 autoStart = false;

     

       260
        
                 ports = [ "${cfg.listenAddress}:${toString cfg.listenPort}:443" ];

     

       261
        
                 user = "root:root";

     

       262
        
                 volumes = [

+60 -49

nixos/modules/services/web-apps/kasmweb/initialize_kasmweb.sh

···

       11
        
       chmod -R a+rw @datastorePath@/conf

     

       12
        
       ln -sf @kasmweb@/www @datastorePath@

     

       13
        
       

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       14
        
       

     

       15
        
       docker network inspect kasm_default_network >/dev/null || docker network create kasm_default_network --subnet @networkSubnet@

     

       16
       -
       if docker volume inspect kasmweb_db >/dev/null; then

     

       17
        
           source @datastorePath@/ids.env

     

       18
       -
           echo 'echo "skipping database init"' > @datastorePath@/init_seeds.sh

     

       19
       -
           echo 'while true; do sleep 10 ; done' >> @datastorePath@/init_seeds.sh

     

       20
        
       else

     

       21
        
           API_SERVER_ID=$(cat /proc/sys/kernel/random/uuid)

     

       22
        
           MANAGER_ID=$(cat /proc/sys/kernel/random/uuid)

     
···

       30
        
           mkdir -p @datastorePath@/certs

     

       31
        
           openssl req -x509 -nodes -days 1825 -newkey rsa:2048 -keyout @datastorePath@/certs/kasm_nginx.key -out @datastorePath@/certs/kasm_nginx.crt -subj "/C=US/ST=VA/L=None/O=None/OU=DoFu/CN=$(hostname)/emailAddress=none@none.none" 2> /dev/null

     

       32
        
       

     

       33
       -
           docker volume create kasmweb_db

     

       0
        
       
     

       0
        
       
     

       34
        
           rm @datastorePath@/.done_initing_data

     

       35
       -
           cat >@datastorePath@/init_seeds.sh <<EOF

     

       36
       -
       #!/bin/bash

     

       37
       -
       if [ ! -e /opt/kasm/current/.done_initing_data ]; then

     

       38
       -
         sleep 4

     

       39
       -
         /usr/bin/kasm_server.so --initialize-database --cfg \

     

       40
       -
           /opt/kasm/current/conf/app/api.app.config.yaml \

     

       41
       -
           --populate-production \

     

       42
       -
           --seed-file \

     

       43
       -
           /opt/kasm/current/conf/database/seed_data/default_properties.yaml \

     

       44
       -
           2>&1 | grep -v UserWarning

     

       45
       -
         /usr/bin/kasm_server.so --cfg \

     

       46
       -
           /opt/kasm/current/conf/app/api.app.config.yaml \

     

       47
       -
           --populate-production \

     

       48
       -
           --seed-file \

     

       49
       -
           /opt/kasm/current/conf/database/seed_data/default_agents.yaml \

     

       50
       -
           2>&1 | grep -v UserWarning

     

       51
       -
         /usr/bin/kasm_server.so --cfg \

     

       52
       -
           /opt/kasm/current/conf/app/api.app.config.yaml \

     

       53
       -
           --populate-production \

     

       54
       -
           --seed-file \

     

       55
       -
           /opt/kasm/current/conf/database/seed_data/default_connection_proxies.yaml \

     

       56
       -
           2>&1 | grep -v UserWarning

     

       57
       -
         /usr/bin/kasm_server.so --cfg \

     

       58
       -
           /opt/kasm/current/conf/app/api.app.config.yaml \

     

       59
       -
           --populate-production \

     

       60
       -
           --seed-file \

     

       61
       -
           /opt/kasm/current/conf/database/seed_data/default_images_amd64.yaml \

     

       62
       -
           2>&1 | grep -v UserWarning

     

       63
       -
         touch /opt/kasm/current/.done_initing_data

     

       64
       -
         while true; do sleep 10 ; done

     

       65
       -
       else

     

       66
       -
        echo "skipping database init"

     

       67
       -
         while true; do sleep 10 ; done

     

       68
       -
       fi

     

       69
       -
       EOF

     

       70
        
       fi

     

       71
        
       

     

       72
        
       chmod +x @datastorePath@/init_seeds.sh

     
···

       77
        
           cp @sslCertificateKey@ @datastorePath@/certs/kasm_nginx.key

     

       78
        
       fi

     

       79
        
       

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       80
        
       sed -i -e "s/username.*/username: @postgresUser@/g" \

     

       81
        
           -e "s/password.*/password: @postgresPassword@/g" \

     

       82
        
           -e "s/host.*db/host: kasm_db/g" \

     

       83
        
           -e "s/ssl: true/ssl: false/g" \

     

       84
       -
           -e "s/redisPassword.*/redisPassword: @redisPassword@/g" \

     

       85
        
           -e "s/server_hostname.*/server_hostname: kasm_api/g" \

     

       86
        
           -e "s/server_id.*/server_id: $API_SERVER_ID/g" \

     

       87
        
           -e "s/manager_id.*/manager_id: $MANAGER_ID/g" \

     
···

       93
        
           -e "s/server_id.*/server_id: $SERVER_ID/g" \

     

       94
        
           @datastorePath@/conf/app/agent.app.config.yaml

     

       95
        
       

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       96
        
       

     

       97
       -
       sed -i -e "s/password: admin.*/password: \"@defaultAdminPassword@\"/g" \

     

       98
       -
           -e "s/password: user.*/password: \"@defaultUserPassword@\"/g" \

     

       99
       -
           -e "s/default-manager-token/@defaultManagerToken@/g" \

     

       100
       -
           -e "s/default-registration-token/@defaultRegistrationToken@/g" \

     

       101
       -
           -e "s/upstream_auth_address:.*/upstream_auth_address: 'proxy'/g" \

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       102
        
           @datastorePath@/conf/database/seed_data/default_properties.yaml

     

       103
        
       

     

       104
        
       sed -i -e "s/GUACTOKEN/@defaultGuacToken@/g" \

     

       105
        
           -e "s/APIHOSTNAME/proxy/g" \

     

       106
        
           @datastorePath@/conf/app/kasmguac.app.config.yaml

     

       107
        
       

     

       108
       -
       sed -i -e "s/GUACTOKEN/@defaultGuacToken@/g" \

     

       109
       -
           -e "s/APIHOSTNAME/proxy/g" \

     

       110
       -
           @datastorePath@/conf/database/seed_data/default_connection_proxies.yaml

     

       111
       -
       

     

       112
        
       sed -i "s/00000000-0000-0000-0000-000000000000/$SERVER_ID/g" \

     

       113
        
           @datastorePath@/conf/database/seed_data/default_agents.yaml

     

       114
        
       

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0

···

       11
        
       chmod -R a+rw @datastorePath@/conf

     

       12
        
       ln -sf @kasmweb@/www @datastorePath@

     

       13
        
       

     

       14
       +
       cat >@datastorePath@/init_seeds.sh <<EOF

     

       15
       +
       #!/bin/bash

     

       16
       +
       if [ ! -e /opt/kasm/current/.done_initing_data ]; then

     

       17
       +
         while true; do

     

       18
       +
             sleep 15;

     

       19
       +
             /usr/bin/kasm_server.so --initialize-database --cfg \

     

       20
       +
               /opt/kasm/current/conf/app/api.app.config.yaml \

     

       21
       +
               --seed-file \

     

       22
       +
               /opt/kasm/current/conf/database/seed_data/default_properties.yaml \

     

       23
       +
               --populate-production \

     

       24
       +
               && break

     

       25
       +
         done  && /usr/bin/kasm_server.so --cfg \

     

       26
       +
           /opt/kasm/current/conf/app/api.app.config.yaml \

     

       27
       +
           --populate-production \

     

       28
       +
           --seed-file \

     

       29
       +
           /opt/kasm/current/conf/database/seed_data/default_agents.yaml \

     

       30
       +
         && /usr/bin/kasm_server.so --cfg \

     

       31
       +
           /opt/kasm/current/conf/app/api.app.config.yaml \

     

       32
       +
           --populate-production \

     

       33
       +
           --seed-file \

     

       34
       +
           /opt/kasm/current/conf/database/seed_data/default_images_amd64.yaml \

     

       35
       +
         && touch /opt/kasm/current/.done_initing_data

     

       36
       +
       

     

       37
       +
         while true; do sleep 10 ; done

     

       38
       +
       else

     

       39
       +
        echo "skipping database init"

     

       40
       +
         while true; do sleep 10 ; done

     

       41
       +
       fi

     

       42
       +
       EOF

     

       43
        
       

     

       44
        
       docker network inspect kasm_default_network >/dev/null || docker network create kasm_default_network --subnet @networkSubnet@

     

       45
       +
       if [ -e @datastorePath@/ids.env ]; then

     

       46
        
           source @datastorePath@/ids.env

     

       0
        
       
     

       0
        
       
     

       47
        
       else

     

       48
        
           API_SERVER_ID=$(cat /proc/sys/kernel/random/uuid)

     

       49
        
           MANAGER_ID=$(cat /proc/sys/kernel/random/uuid)

     
···

       57
        
           mkdir -p @datastorePath@/certs

     

       58
        
           openssl req -x509 -nodes -days 1825 -newkey rsa:2048 -keyout @datastorePath@/certs/kasm_nginx.key -out @datastorePath@/certs/kasm_nginx.crt -subj "/C=US/ST=VA/L=None/O=None/OU=DoFu/CN=$(hostname)/emailAddress=none@none.none" 2> /dev/null

     

       59
        
       

     

       60
       +
           mkdir -p @datastorePath@/file_mappings

     

       61
       +
       

     

       62
       +
           docker volume create kasmweb_db || true

     

       63
        
           rm @datastorePath@/.done_initing_data

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       64
        
       fi

     

       65
        
       

     

       66
        
       chmod +x @datastorePath@/init_seeds.sh

     
···

       71
        
           cp @sslCertificateKey@ @datastorePath@/certs/kasm_nginx.key

     

       72
        
       fi

     

       73
        
       

     

       74
       +
       yq -i '.server.zone_name = "'default'"' @datastorePath@/conf/app/api.app.config.yaml

     

       75
       +
       yq -i '(.zones.[0]) .zone_name = "'default'"' @datastorePath@/conf/database/seed_data/default_properties.yaml

     

       76
       +
       

     

       77
        
       sed -i -e "s/username.*/username: @postgresUser@/g" \

     

       78
        
           -e "s/password.*/password: @postgresPassword@/g" \

     

       79
        
           -e "s/host.*db/host: kasm_db/g" \

     

       80
        
           -e "s/ssl: true/ssl: false/g" \

     

       81
       +
           -e "s/redis_password.*/redis_password: @redisPassword@/g" \

     

       82
        
           -e "s/server_hostname.*/server_hostname: kasm_api/g" \

     

       83
        
           -e "s/server_id.*/server_id: $API_SERVER_ID/g" \

     

       84
        
           -e "s/manager_id.*/manager_id: $MANAGER_ID/g" \

     
···

       90
        
           -e "s/server_id.*/server_id: $SERVER_ID/g" \

     

       91
        
           @datastorePath@/conf/app/agent.app.config.yaml

     

       92
        
       

     

       93
       +
       # Generate a salt and hash for the desired passwords. Update the yaml

     

       94
       +
       ADMIN_SALT=$(cat /proc/sys/kernel/random/uuid)

     

       95
       +
       ADMIN_HASH=$(printf @defaultAdminPassword@${ADMIN_SALT} | sha256sum | cut -c-64)

     

       96
       +
       USER_SALT=$(cat /proc/sys/kernel/random/uuid)

     

       97
       +
       USER_HASH=$(printf @defaultUserPassword@${USER_SALT} | sha256sum | cut -c-64)

     

       98
        
       

     

       99
       +
       yq -i  '(.users.[] | select(.username=="admin@kasm.local") | .salt) = "'${ADMIN_SALT}'"'  @datastorePath@/conf/database/seed_data/default_properties.yaml

     

       100
       +
       yq -i  '(.users.[] | select(.username=="admin@kasm.local") | .pw_hash) = "'${ADMIN_HASH}'"'  @datastorePath@/conf/database/seed_data/default_properties.yaml

     

       101
       +
       

     

       102
       +
       yq -i  '(.users.[] | select(.username=="user@kasm.local") | .salt) = "'${USER_SALT}'"'  @datastorePath@/conf/database/seed_data/default_properties.yaml

     

       103
       +
       yq -i  '(.users.[] | select(.username=="user@kasm.local") | .pw_hash) = "'${USER_HASH}'"'  @datastorePath@/conf/database/seed_data/default_properties.yaml

     

       104
       +
       

     

       105
       +
       yq -i   '(.settings.[] | select(.name=="token") | select(.category == "manager")) .value = "'@defaultManagerToken@'"'   @datastorePath@/conf/database/seed_data/default_properties.yaml

     

       106
       +
       

     

       107
       +
       yq -i   '(.settings.[] | select(.name=="registration_token") | select(.category == "auth")) .value = "'@defaultRegistrationToken@'"'   @datastorePath@/conf/database/seed_data/default_properties.yaml

     

       108
       +
       

     

       109
       +
       sed -i -e "s/upstream_auth_address:.*/upstream_auth_address: 'proxy'/g" \

     

       110
        
           @datastorePath@/conf/database/seed_data/default_properties.yaml

     

       111
        
       

     

       112
        
       sed -i -e "s/GUACTOKEN/@defaultGuacToken@/g" \

     

       113
        
           -e "s/APIHOSTNAME/proxy/g" \

     

       114
        
           @datastorePath@/conf/app/kasmguac.app.config.yaml

     

       115
        
       

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       116
        
       sed -i "s/00000000-0000-0000-0000-000000000000/$SERVER_ID/g" \

     

       117
        
           @datastorePath@/conf/database/seed_data/default_agents.yaml

     

       118
        
       

     

       119
       +
       

     

       120
       +
       while [ ! -e @datastorePath@/.done_initing_data ]; do

     

       121
       +
           sleep 10;

     

       122
       +
       done

     

       123
       +
       

     

       124
       +
       systemctl restart docker-kasm_proxy.service

     

       125
       +

+3 -3

pkgs/servers/web-apps/kasmweb/default.nix

···

       5
        
       

     

       6
        
       stdenv.mkDerivation rec {

     

       7
        
         pname = "kasmweb";

     

       8
       -
         version = "1.12.0";

     

       9
       -
         build = "d4fd8a";

     

       10
        
       

     

       11
        
         src = fetchzip {

     

       12
        
           url = "https://kasm-static-content.s3.amazonaws.com/kasm_release_${version}.${build}.tar.gz";

     

       13
       -
           sha256 = "sha256-dCjWmI8gYtoMiMHVNgTg2ZROHXvT4ulynNvnKfMxURo=";

     

       14
        
         };

     

       15
        
       

     

       16
        
         dontConfigure = true;

···

       5
        
       

     

       6
        
       stdenv.mkDerivation rec {

     

       7
        
         pname = "kasmweb";

     

       8
       +
         version = "1.15.0";

     

       9
       +
         build = "06fdc8";

     

       10
        
       

     

       11
        
         src = fetchzip {

     

       12
        
           url = "https://kasm-static-content.s3.amazonaws.com/kasm_release_${version}.${build}.tar.gz";

     

       13
       +
           sha256 = "sha256-7z5lc4QEpQQdVGMEMc04wXlJTK5VXJ4rufZmDEflJLw=";

     

       14
        
         };

     

       15
        
       

     

       16
        
         dontConfigure = true;