docker-mods/root/app/auto-proxy.sh

#!/usr/bin/with-contenv bash

AUTO_GEN=""
ENABLED_CONTAINERS=$(docker ps -f "label=swag=enable" --format "{{.Names}}" && docker ps -a  -f "status=exited" -f "label=swag=enable" -f "label=swag_ondemand=enable" --format "{{.Names}}")
# figure out which containers to generate confs for or which confs to remove
if [ ! -f /auto-proxy/enabled_containers ]; then
    echo "${ENABLED_CONTAINERS}" > /auto-proxy/enabled_containers
    AUTO_GEN=$(cat /auto-proxy/enabled_containers)
else
    for CONTAINER in ${ENABLED_CONTAINERS}; do
        if [ ! -f "/auto-proxy/${CONTAINER}.conf" ]; then
            echo "**** New container ${CONTAINER} detected, will generate new conf. ****"
            AUTO_GEN="${CONTAINER} ${AUTO_GEN}"
        else
            INSPECTION=$(docker inspect ${CONTAINER})
            for VAR in swag_address swag_port swag_proto swag_url swag_auth swag_auth_bypass swag_server_custom_directive swag_preset_conf; do
                VAR_VALUE=$(echo ${INSPECTION} | jq -r ".[0].Config.Labels[\"${VAR}\"]")
                if [ "${VAR_VALUE}" == "null" ]; then
                    VAR_VALUE=""
                fi
                if ! grep -F -q "${VAR}=\"${VAR_VALUE}\"" "/auto-proxy/${CONTAINER}.conf"; then
                    AUTO_GEN="${CONTAINER} ${AUTO_GEN}"
                    echo "**** Labels for ${CONTAINER} changed, will generate new conf. ****"
                    break
                fi
            done
        fi
    done
    EXISTING_CONFS=$(cat /auto-proxy/enabled_containers)
    for CONTAINER in $EXISTING_CONFS; do
        if ! grep -q "${CONTAINER}" <<< "${ENABLED_CONTAINERS}"; then
            echo "**** Removing conf for ${CONTAINER} ****"
            rm -rf "/auto-proxy/${CONTAINER}.conf" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            REMOVED_CONTAINERS="true"
        fi
    done
    echo "${ENABLED_CONTAINERS}" > /auto-proxy/enabled_containers
fi

for CONTAINER in ${AUTO_GEN}; do
    INSPECTION=$(docker inspect ${CONTAINER})
    rm -rf "/auto-proxy/${CONTAINER}.conf"
    for VAR in swag_address swag_port swag_proto swag_url swag_auth swag_auth_bypass swag_server_custom_directive swag_preset_conf; do
        VAR_VALUE=$(echo ${INSPECTION} | jq -r ".[0].Config.Labels[\"${VAR}\"]")
        if [ "${VAR_VALUE}" == "null" ]; then
            VAR_VALUE=""
        fi
        echo "${VAR}=\"${VAR_VALUE}\"" >> "/auto-proxy/${CONTAINER}.conf"
    done
    . /auto-proxy/${CONTAINER}.conf
    if [ -f "/config/nginx/proxy-confs/${CONTAINER}.subdomain.conf.sample" ] || [ -f "/config/nginx/proxy-confs/${swag_preset_conf}.subdomain.conf.sample" ]; then
        if [ -f "/config/nginx/proxy-confs/${CONTAINER}.subdomain.conf.sample" ]; then
            echo "**** Container name matches a preset proxy conf, using ${CONTAINER}.subdomain.conf for container ${CONTAINER} ****"
            cp "/config/nginx/proxy-confs/${CONTAINER}.subdomain.conf.sample" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
        elif [ -f "/config/nginx/proxy-confs/${swag_preset_conf}.subdomain.conf.sample" ]; then
            echo "**** Label swag_preset_conf matches a preset proxy conf, using ${swag_preset_conf}.subdomain.conf for container ${CONTAINER} ****"
            cp "/config/nginx/proxy-confs/${swag_preset_conf}.subdomain.conf.sample" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
        fi
        if [ -n "${swag_auth_bypass}" ]; then
            echo "**** Swag auth bypass is auto managed via preset confs and cannot be overridden via env vars ****"
        fi
        if [ -n "${swag_address}" ]; then
            sed -i "s|set \$upstream_app .*|set \$upstream_app ${swag_address};|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            echo "**** Overriding address as ${swag_address} for ${CONTAINER} ****"
        elif [ ! -f "/config/nginx/proxy-confs/${CONTAINER}.subdomain.conf.sample" ] && [ -n "${swag_preset_conf}" ] && [ -f "/config/nginx/proxy-confs/${swag_preset_conf}.subdomain.conf.sample" ]; then
            sed -i "s|set \$upstream_app .*|set \$upstream_app ${CONTAINER};|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            echo "**** Overriding address as ${CONTAINER} for ${CONTAINER} ****"
        fi
        if [ -n "${swag_port}" ]; then
            sed -i "s|set \$upstream_port .*|set \$upstream_port ${swag_port};|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            echo "**** Overriding port as ${swag_port} for ${CONTAINER} ****"
        fi
        if [ -n "${swag_proto}" ]; then
            sed -i "s|set \$upstream_proto .*|set \$upstream_proto ${swag_proto};|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            echo "**** Overriding proto as ${swag_proto} for ${CONTAINER} ****"
        fi
        if [ -n "${swag_url}" ]; then
            SED_swag_url=$(sed -e 's/[&\\|]/\\&/g; s|$|\\|; $s|\\$||' <<<"${swag_url}")
            sed -i "s|server_name .*|server_name ${SED_swag_url};|" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            echo "**** Overriding url as ${swag_url} for ${CONTAINER} ****"
        elif [ ! -f "/config/nginx/proxy-confs/${CONTAINER}.subdomain.conf.sample" ] && [ -n "${swag_preset_conf}" ] && [ -f "/config/nginx/proxy-confs/${swag_preset_conf}.subdomain.conf.sample" ]; then
            sed -i "s|server_name .*|server_name ${CONTAINER}.*;|" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            echo "**** Overriding url as ${CONTAINER}.* for ${CONTAINER} ****"
        fi
        if [ -n "${swag_server_custom_directive}" ]; then
            SED_swag_server_custom_directive=$(sed -e 's/[&\\|]/\\&/g; s|$|\\|; $s|\\$||' <<<"${swag_server_custom_directive}")
            sed -i -e '/include.*ssl.conf;/a\' -e "    ${SED_swag_server_custom_directive}" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            echo "**** Adding custom directive from the swag_server_custom_directive label for ${CONTAINER} ****"
        fi
        if [ "${swag_auth}" == "authelia" ]; then
            sed -i "s|#include /config/nginx/authelia|include /config/nginx/authelia|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            echo "**** Enabling Authelia for ${CONTAINER} ****"
        elif [ "${swag_auth}" == "authentik" ]; then
            sed -i "s|#include /config/nginx/authentik|include /config/nginx/authentik|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            echo "**** Enabling Authentik for ${CONTAINER} ****"
        elif [ "${swag_auth}" == "http" ]; then
            sed -i "s|#auth_basic|auth_basic|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            echo "**** Enabling basic http auth for ${CONTAINER} ****"
        elif [ "${swag_auth}" == "ldap" ]; then
            # Old (before standard-base)
            sed -i "s|#include /config/nginx/ldap.conf;|include /config/nginx/ldap.conf;|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            sed -i "s|#auth_request /auth;|auth_request /auth;|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            sed -i "s|#error_page 401 =200 /ldaplogin;|error_page 401 =200 /ldaplogin;|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            # New (after standard-base)
            sed -i "s|#include /config/nginx/ldap-server.conf;|include /config/nginx/ldap-server.conf;|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            sed -i "s|#include /config/nginx/ldap-location.conf;|include /config/nginx/ldap-location.conf;|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            echo "**** Enabling basic http auth for ${CONTAINER} ****"
        fi
    else
        if [ -n "${swag_preset_conf}" ] && [ ! "/config/nginx/proxy-confs/${swag_preset_conf}.subdomain.conf.sample" ]; then
            echo "**** Label swag_preset_conf is set, but no preset proxy conf found with the name ${swag_preset_conf}.subdomain.conf.sample ****"
        fi
        echo "**** No preset proxy conf found for ${CONTAINER}, generating from scratch ****"
        cp "/config/nginx/proxy-confs/_template.subdomain.conf.sample" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
        if [ -n "${swag_auth_bypass}" ]; then
            sed -i 's|^}$||' "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            for location in $(echo ${swag_auth_bypass} | tr "," " "); do
                cat <<DUDE >> "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"

    location ~ ${location} {
        include /config/nginx/proxy.conf;
        include /config/nginx/resolver.conf;
        set \$upstream_app <container_name>;
        set \$upstream_port <port_number>;
        set \$upstream_proto <http or https>;
        proxy_pass \$upstream_proto://\$upstream_app:\$upstream_port;

    }

DUDE
            done
            echo "}" >> "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
        fi
        if [ -z "${swag_address}" ]; then
            swag_address="${CONTAINER}"
        fi
        sed -i "s|<container_name>|${swag_address}|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
        echo "**** Setting upstream address ${swag_address} for ${CONTAINER} ****"
        if [ -z "${swag_port}" ]; then
            swag_port=$(docker inspect ${CONTAINER} | jq -r '.[0].NetworkSettings.Ports | keys[0]' | sed 's|/.*||')
            if [ "${swag_port}" == "null" ]; then
                echo "**** No exposed ports found for ${CONTAINER}. Setting reverse proxy port to 80. ****"
                swag_port="80"
            fi
        fi
        sed -i "s|set \$upstream_port .*|set \$upstream_port ${swag_port};|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
        echo "**** Setting port ${swag_port} for ${CONTAINER} ****"
        if [ -z "${swag_proto}" ]; then
            swag_proto="http"
        fi
        sed -i "s|set \$upstream_proto .*|set \$upstream_proto ${swag_proto};|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
        echo "**** Setting proto ${swag_proto} for ${CONTAINER} ****"
        if [ -z "${swag_url}" ]; then
            swag_url="${CONTAINER}.*"
        fi
        SED_swag_url=$(sed -e 's/[&\\|]/\\&/g; s|$|\\|; $s|\\$||' <<<"${swag_url}")
        sed -i "s|server_name .*|server_name ${SED_swag_url};|" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
        echo "**** Setting url ${swag_url} for ${CONTAINER} ****"
        if [ -n "${swag_server_custom_directive}" ]; then
            SED_swag_server_custom_directive=$(sed -e 's/[&\\|]/\\&/g; s|$|\\|; $s|\\$||' <<<"${swag_server_custom_directive}")
            sed -i -e '/include.*ssl.conf;/a\' -e "    ${SED_swag_server_custom_directive}" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            echo "**** Adding custom directive from the swag_server_custom_directive label for ${CONTAINER} ****"
        fi
        if [ "${swag_auth}" == "authelia" ]; then
            sed -i "s|#include /config/nginx/authelia|include /config/nginx/authelia|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            echo "**** Enabling Authelia for ${CONTAINER} ****"
        elif [ "${swag_auth}" == "authentik" ]; then
            sed -i "s|#include /config/nginx/authentik|include /config/nginx/authentik|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            echo "**** Enabling Authentik for ${CONTAINER} ****"
        elif [ "${swag_auth}" == "http" ]; then
            sed -i "s|#auth_basic|auth_basic|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            echo "**** Enabling basic http auth for ${CONTAINER} ****"
        elif [ "${swag_auth}" == "ldap" ]; then
            # Old (before standard-base)
            sed -i "s|#include /config/nginx/ldap.conf;|include /config/nginx/ldap.conf;|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            sed -i "s|#auth_request /auth;|auth_request /auth;|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            sed -i "s|#error_page 401 =200 /ldaplogin;|error_page 401 =200 /ldaplogin;|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            # New (after standard-base)
            sed -i "s|#include /config/nginx/ldap-server.conf;|include /config/nginx/ldap-server.conf;|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            sed -i "s|#include /config/nginx/ldap-location.conf;|include /config/nginx/ldap-location.conf;|g" "/etc/nginx/http.d/auto-proxy-${CONTAINER}.subdomain.conf"
            echo "**** Enabling basic http auth for ${CONTAINER} ****"
        fi
    fi
done

if ([ -n "${AUTO_GEN}" ] || [ "${REMOVED_CONTAINERS}" == "true" ]) && ps aux | grep [n]ginx: > /dev/null; then 
    if /usr/sbin/nginx -c /config/nginx/nginx.conf -t; then
        echo "**** Changes to nginx config are valid, reloading nginx ****"
        /usr/sbin/nginx -c /config/nginx/nginx.conf -s reload
    else
        echo "**** Changes to nginx config are not valid, skipping nginx reload. Please double check the config including the auto-proxy confs. ****"
    fi
fi