3ecf213cab
Container-plane docker now routes through the mode-aware helpers instead of sudo: simple calls (exec/ps/run/build/images/inspect/port/logs across ~15 app/check scripts) -> runFileOp docker (rootless socket as the install user; rooted via the docker group). The cd && docker compose paths drop the sudo on the rooted branch (the rootless branch already used dockerCommandRunInstallUser -- byte-identical now, manager-ready later); gluetun, which had no rootless branch, now uses dockerCommandRun so force-recreate works in both modes. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> Signed-off-by: librelad <librelad@digitalangels.vip>
61 lines
2.6 KiB
Bash
61 lines
2.6 KiB
Bash
#!/bin/bash
|
|
|
|
_mattermostMmctl() {
|
|
runFileOp docker exec -i mattermost mmctl --local "$@" 2>&1
|
|
}
|
|
|
|
authAdapter_mattermost_setPassword() {
|
|
local user="$1" password="$2"
|
|
[[ -z "$user" ]] && { isError "Username/email is required."; return 1; }
|
|
[[ -z "$password" ]] && password=$(generateRandomPassword)
|
|
|
|
local out; out=$(_mattermostMmctl user change-password "$user" --password "$password")
|
|
if [[ $? -ne 0 ]]; then isError "Mattermost reset failed: $out"; return 1; fi
|
|
|
|
if [[ "$user" == "${CFG_MATTERMOST_ADMIN_USER:-}" ]]; then
|
|
authPersistCfg mattermost ADMIN_PASSWORD "$password"
|
|
fi
|
|
isSuccessful "Mattermost password set for $user — New password: $password"
|
|
}
|
|
|
|
authAdapter_mattermost_createUser() {
|
|
local user="$1" password="$2" email="$3" isAdmin="$4"
|
|
[[ -z "$user" || -z "$email" ]] && { isError "Username and email are required."; return 1; }
|
|
[[ -z "$password" ]] && password=$(generateRandomPassword)
|
|
|
|
local args=(user create --username "$user" --email "$email" --password "$password")
|
|
[[ "$isAdmin" == "true" ]] && args+=(--system-admin)
|
|
local out; out=$(_mattermostMmctl "${args[@]}")
|
|
if [[ $? -ne 0 ]]; then isError "Mattermost create failed: $out"; return 1; fi
|
|
|
|
if [[ "$isAdmin" == "true" && -z "${CFG_MATTERMOST_ADMIN_USER:-}" ]]; then
|
|
authPersistCfg mattermost ADMIN_USER "$user"
|
|
authPersistCfg mattermost ADMIN_PASSWORD "$password"
|
|
fi
|
|
isSuccessful "Mattermost user created — User: $user — Email: $email — Password: $password"
|
|
}
|
|
|
|
authAdapter_mattermost_listUsers() {
|
|
_mattermostMmctl user list --json 2>/dev/null \
|
|
| jq -r '.[] | "EZ_USER\t\(.email)\t\(.username)\t\(if .roles | test("system_admin") then "admin" else "user" end)"' 2>/dev/null \
|
|
|| _mattermostMmctl user list | awk 'NF>=2 {printf "EZ_USER\t-\t%s\t-\n", $1}'
|
|
}
|
|
|
|
authAdapter_mattermost_deleteUser() {
|
|
local user="$1"
|
|
[[ -z "$user" ]] && { isError "Username/email is required."; return 1; }
|
|
local out; out=$(_mattermostMmctl user delete "$user" --confirm)
|
|
[[ $? -ne 0 ]] && { isError "Mattermost delete failed: $out"; return 1; }
|
|
isSuccessful "Mattermost user '$user' deleted."
|
|
}
|
|
|
|
authAdapter_mattermost_setAdmin() {
|
|
local user="$1" isAdmin="$2"
|
|
[[ -z "$user" ]] && { isError "Username/email is required."; return 1; }
|
|
local sub
|
|
if [[ "$isAdmin" == "true" ]]; then sub="roles system user system_admin"; else sub="roles system user"; fi
|
|
local out; out=$(_mattermostMmctl user $sub "$user" 2>&1)
|
|
[[ $? -ne 0 ]] && { isError "Mattermost role change failed: $out"; return 1; }
|
|
isSuccessful "Mattermost user '$user' admin → $isAdmin."
|
|
}
|