vaultwarden-ldap/overlay/usr/local/bin/entrypoint

#!/usr/bin/env sh

set -eo pipefail

/usr/local/bin/gomplate -o /app/config.toml -f /etc/templates/config.toml.tmpl

if [ -z "$VAULTWARDEN_LDAP_VAULTWARDEN_URL" ] || [ -z "$VAULTWARDEN_LDAP_HOST" ]
then
  printf "Error: Vaultwarden and/or LDAP server not configured. Exiting ...\n"
  exit 1
fi

if [ -n "$VAULTWARDEN_LDAP_VAULTWARDEN_URL" ]
then
  WAITFOR_BW_SCHEME=$(/usr/local/bin/url-parser scheme --url "$VAULTWARDEN_LDAP_VAULTWARDEN_URL")
  WAITFOR_BW_HOST=$(/usr/local/bin/url-parser host --url "$VAULTWARDEN_LDAP_VAULTWARDEN_URL")
  WAITFOR_BW_PORT=$(/usr/local/bin/url-parser port --url "$VAULTWARDEN_LDAP_VAULTWARDEN_URL")

  if [ -z "$WAITFOR_BW_PORT" ]
  then
    [ "$WAITFOR_BW_SCHEME" = "https" ] && WAITFOR_BW_PORT=433 || WAITFOR_BW_PORT=80
  fi

  printf "Wait for vaultwarden server on '%s:%s'...\n" "${WAITFOR_BW_HOST}" "${WAITFOR_BW_PORT}"
  /usr/local/bin/wait-for "${WAITFOR_BW_HOST}":"${WAITFOR_BW_PORT}"
fi

if [ -n "$VAULTWARDEN_LDAP_HOST" ]
then
  WAITFOR_LDAP_SSL=$(/usr/local/bin/gomplate -i '{{ getenv "VAULTWARDEN_LDAP_SSL" "true" | conv.Bool }}')

  if [ -z "$VAULTWARDEN_LDAP_PORT" ]
  then
    [ "$WAITFOR_LDAP_SSL" = true ] && VAULTWARDEN_LDAP_PORT=636 || VAULTWARDEN_LDAP_PORT=389
  fi

  printf "Wait for ldap server on '%s:%s'...\n" "${VAULTWARDEN_LDAP_HOST}" "${VAULTWARDEN_LDAP_PORT}"
  /usr/local/bin/wait-for "${VAULTWARDEN_LDAP_HOST}":"${VAULTWARDEN_LDAP_PORT}"

  # TODO: add delay to minimize connection errors
  sleep 10
fi

exec env CONFIG_PATH=/app/config.toml /app/vaultwarden_ldap