Initial commit

create_pod_traefik.sh

@@ -0,0 +1,85 @@
+#!/bin/bash
+
+# To be run by user trf to create the pod and container with
+# Traefik and to create the systemd service
+
+# Environment variables
+POD_NAME='traefik_pod'
+CTR_NAME='traefik_ctr'
+IMAGE='docker.io/library/traefik:v3.5.4'
+TRAEFIK_HOST_PORT='8080'
+DASH_HOST_PORT='8085'
+HOST_INGRESS_IP='10.8.0.6'
+HOST_LOCAL_IP='127.0.0.1'
+NET_OPTS='slirp4netns:allow_host_loopback=true,port_handler=slirp4netns'
+BIND_DIR="$HOME/.local/share/traefik"
+DYNAMIC_DIR="$BIND_DIR/dynamic"
+STATIC_CFG="$BIND_DIR/traefik.yml"
+USER_SYSTEMD_DIR="$HOME/.config/systemd/user"
+POD_UNIT_FILE="$USER_SYSTEMD_DIR/pod-${POD_NAME}.service"
+
+# Prepare directories
+mkdir -p "$BIND_DIR" "$DYNAMIC_DIR" "$USER_SYSTEMD_DIR"
+
+# Create pod if not yet existing
+if ! podman pod exists "$POD_NAME"; then
+  podman pod create \
+    -n "$POD_NAME" \
+    --network "$NET_OPTS" \
+    -p ${HOST_INGRESS_IP}:${TRAEFIK_HOST_PORT}:${TRAEFIK_HOST_PORT} \
+    -p ${HOST_LOCAL_IP}:${DASH_HOST_PORT}:${DASH_HOST_PORT}
+  echo "Pod '$POD_NAME' created (rc=$?)"
+else
+  echo "Pod '$POD_NAME' already exists."
+fi
+
+# Traefik container
+# Remove old container
+podman rm -f "$CTR_NAME"
+# New container
+podman run -d --name "$CTR_NAME" --pod "$POD_NAME" \
+  -v "$STATIC_CFG":/etc/traefik/traefik.yml:ro \
+  -v "$DYNAMIC_DIR":/etc/traefik/dynamic:ro \
+  "$IMAGE"
+echo "Started $CTR_NAME container (rc=$?)"
+
+# Generate systemd service files
+cd "$USER_SYSTEMD_DIR"
+podman generate systemd --files --new --name "$POD_NAME"
+echo "Generated systemd service files (rc=$?)"
+
+# Inject WireGuard IP readiness check into pod-${POD_NAME}.service
+awk -v ip="$HOST_INGRESS_IP" '
+BEGIN { inserted=0 }
+# Insert the readiness check immediately BEFORE the pod create ExecStartPre
+/^ExecStartPre=\/usr\/bin\/podman pod create/ && inserted==0 {
+  # Wait up to ~60s for ip to show up on any interface (safer than assuming wg0)
+  # Uses grep -F to avoid regex escaping issues with dots in the IP.
+  print "ExecStartPre=/bin/sh -ceu \047for i in $(seq 1 30); do ip -4 addr show | grep -Fq \" " ip "/\" && exit 0; sleep 2; done; echo \"IP " ip " not up\" >&2; exit 1\047"
+  inserted=1
+}
+{ print }
+' "$POD_UNIT_FILE" > "${POD_UNIT_FILE}.tmp"
+mv "${POD_UNIT_FILE}.tmp" "$POD_UNIT_FILE"
+echo "Injected WG IP readiness check for ${HOST_INGRESS_IP} into pod unit"
+
+# Stop & remove live pod and containers
+podman pod stop --ignore --time 15 "$POD_NAME"
+podman pod rm -f --ignore "$POD_NAME"
+if podman pod exists "$POD_NAME"; then
+  echo "ERROR: Pod $POD_NAME still exists."
+  exit 1
+else
+  echo "Stopped & removed live pod $POD_NAME and containers"
+fi
+
+# Enable systemd services
+systemctl --user daemon-reload
+systemctl --user enable --now "pod-${POD_NAME}.service"
+echo "Enabled systemd service pod-${POD_NAME}.service (rc=$?)"
+echo "Status: systemctl --user status pod-${POD_NAME}.service"
+echo "View logs: journalctl --user -u pod-${POD_NAME}.service -f"
+systemctl --user enable --now "container-${CTR_NAME}.service"
+echo "Enabled systemd service container-${CTR_NAME}.service (rc=$?)"
+echo "Status: systemctl --user status container-${CTR_NAME}.service"
+echo "View logs: journalctl --user -u container-${CTR_NAME}.service -f"