223 lines
7.5 KiB
Bash
Executable File
223 lines
7.5 KiB
Bash
Executable File
#!/bin/bash
|
|
set -euo pipefail
|
|
|
|
ENV_FILE="/etc/activitywatch/aw-server.env"
|
|
if [[ ! -f "$ENV_FILE" ]]; then
|
|
echo "missing env file: $ENV_FILE" >&2
|
|
exit 1
|
|
fi
|
|
|
|
source "$ENV_FILE"
|
|
|
|
WEBUI_DIR="${AW_SERVER_WEBUI_DIR:-${AW_WEBUI_DIR:-/opt/activitywatch/webui-ru}}"
|
|
SERVER_PUBLIC_HOST="${AW_SERVER_PUBLIC_HOST:-${AW_SERVER_HOST:-$(hostname -f 2>/dev/null || hostname)}}"
|
|
REPORT_BASE="${AW_WORKTIME_REPORT_BASE:-http://${SERVER_PUBLIC_HOST}:5610}"
|
|
CASE_PORT="${AW_DLP_CASE_PORT:-5602}"
|
|
CASE_BASE="${AW_DLP_CASE_PUBLIC_BASE:-}"
|
|
PATCH_JS_SRC="/opt/detmir/bootstrap/aw-ru-patch.js"
|
|
SW_CLEANUP_SRC="/opt/detmir/bootstrap/aw-sw-cleanup.js"
|
|
WORKTIME_PANEL_SRC="/opt/detmir/bootstrap/aw-worktime-panel.js"
|
|
HOST_GROUPS_SRC="/opt/detmir/bootstrap/aw-host-groups.json"
|
|
INDEX_HTML="$WEBUI_DIR/index.html"
|
|
SERVICE_WORKER="$WEBUI_DIR/service-worker.js"
|
|
TS=$(date +%Y%m%d%H%M%S)
|
|
PATCH_TARGET="$WEBUI_DIR/js/ru-patch-v5.js"
|
|
SW_TARGET="$WEBUI_DIR/js/sw-cleanup.js"
|
|
WORKTIME_PANEL_TARGET="$WEBUI_DIR/js/aw-worktime-panel.js"
|
|
HOST_GROUPS_TARGET="$WEBUI_DIR/js/aw-host-groups.json"
|
|
TRENDS_NEEDLE='this.activityStore.query_category_time_by_period(r)'
|
|
TRENDS_REPLACEMENT='this.activityStore.ensure_loaded(r)'
|
|
TIMESPIRAL_NEEDLE='start:new Date("2022-08-08")'
|
|
TIMESPIRAL_REPLACEMENT='start:new Date(Date.now()-12*36e5)'
|
|
CATEGORY_HELPER_NEEDLE='hostname:t.hostnameChoices[0]'
|
|
CATEGORY_HELPER_REPLACEMENT='hostname:t.hostnameChoices.filter((function(t){return"unknown"!==t&&"undefined"!==t}))[0]||t.hostnameChoices[0]'
|
|
|
|
[[ -f "$PATCH_JS_SRC" ]] || { echo "missing $PATCH_JS_SRC" >&2; exit 1; }
|
|
[[ -f "$SW_CLEANUP_SRC" ]] || { echo "missing $SW_CLEANUP_SRC" >&2; exit 1; }
|
|
[[ -f "$WORKTIME_PANEL_SRC" ]] || { echo "missing $WORKTIME_PANEL_SRC" >&2; exit 1; }
|
|
[[ -f "$HOST_GROUPS_SRC" ]] || { echo "missing $HOST_GROUPS_SRC" >&2; exit 1; }
|
|
[[ -f "$INDEX_HTML" ]] || { echo "missing $INDEX_HTML" >&2; exit 1; }
|
|
|
|
if [[ ! -s "$INDEX_HTML" ]]; then
|
|
latest_nonempty_backup="$(find "$WEBUI_DIR" -maxdepth 1 -type f -name 'index.html.bak.*' -size +0c | sort | tail -n 1 || true)"
|
|
if [[ -n "$latest_nonempty_backup" ]]; then
|
|
cp "$latest_nonempty_backup" "$INDEX_HTML"
|
|
echo "restored empty index.html from backup: $latest_nonempty_backup"
|
|
else
|
|
echo "index.html is empty and no non-empty backup exists: $INDEX_HTML" >&2
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
install -d "$WEBUI_DIR/js"
|
|
install -m 0644 "$PATCH_JS_SRC" "$PATCH_TARGET"
|
|
install -m 0644 "$SW_CLEANUP_SRC" "$SW_TARGET"
|
|
install -m 0644 "$WORKTIME_PANEL_SRC" "$WORKTIME_PANEL_TARGET"
|
|
install -m 0644 "$HOST_GROUPS_SRC" "$HOST_GROUPS_TARGET"
|
|
cp "$INDEX_HTML" "$INDEX_HTML.bak.$TS"
|
|
|
|
patch_hash="$(sha1sum "$PATCH_TARGET" | awk '{print substr($1,1,12)}')"
|
|
sw_hash="$(sha1sum "$SW_TARGET" | awk '{print substr($1,1,12)}')"
|
|
worktime_panel_hash="$(sha1sum "$WORKTIME_PANEL_TARGET" | awk '{print substr($1,1,12)}')"
|
|
|
|
if [[ -z "$CASE_BASE" ]]; then
|
|
CASE_BASE="$(python3 - "$REPORT_BASE" "$CASE_PORT" <<'PY'
|
|
from urllib.parse import urlsplit, urlunsplit
|
|
import os
|
|
import socket
|
|
import sys
|
|
|
|
report_base = sys.argv[1]
|
|
case_port = sys.argv[2]
|
|
parts = urlsplit(report_base)
|
|
hostname = (
|
|
parts.hostname
|
|
or os.environ.get("AW_SERVER_PUBLIC_HOST")
|
|
or os.environ.get("AW_SERVER_HOST")
|
|
or socket.getfqdn()
|
|
)
|
|
scheme = parts.scheme or "http"
|
|
print(urlunsplit((scheme, f"{hostname}:{case_port}", "", "", "")))
|
|
PY
|
|
)"
|
|
fi
|
|
|
|
python3 - "$WORKTIME_PANEL_TARGET" "$REPORT_BASE" <<'PY'
|
|
from pathlib import Path
|
|
import sys
|
|
|
|
path = Path(sys.argv[1])
|
|
report_base = sys.argv[2]
|
|
text = path.read_text()
|
|
text = text.replace("__AW_WORKTIME_REPORT_BASE__", report_base)
|
|
path.write_text(text)
|
|
PY
|
|
|
|
python3 - "$INDEX_HTML" "$sw_hash" "$patch_hash" "$worktime_panel_hash" "$REPORT_BASE" "$CASE_BASE" <<'PY'
|
|
from pathlib import Path
|
|
import re
|
|
import sys
|
|
from urllib.parse import urlsplit
|
|
|
|
path = Path(sys.argv[1])
|
|
sw_hash = sys.argv[2]
|
|
patch_hash = sys.argv[3]
|
|
panel_hash = sys.argv[4]
|
|
report_base = sys.argv[5]
|
|
case_base = sys.argv[6]
|
|
content = path.read_text()
|
|
|
|
content = re.sub(
|
|
r'<script[^>]+(?:ru-patch-v5\.js|sw-cleanup\.js|aw-ru-patch\.js|aw-sw-cleanup\.js|aw-worktime-panel\.js)[^>]*></script>',
|
|
'',
|
|
content,
|
|
)
|
|
content = re.sub(r";\s*frame-src 'self' [^\";>]*", "", content)
|
|
content = re.sub(r";\s*connect-src 'self' [^\";>]*", "", content)
|
|
report_origin = urlsplit(report_base)
|
|
case_origin = urlsplit(case_base)
|
|
connect_targets = " ".join(
|
|
[
|
|
f"{report_origin.scheme}://{report_origin.netloc}",
|
|
f"{case_origin.scheme}://{case_origin.netloc}",
|
|
]
|
|
)
|
|
content = re.sub(
|
|
r"script-src 'self' 'unsafe-eval'(?:;\s*connect-src 'self' [^\";>]*)?(?:;\s*frame-src 'self' [^\";>]*)?",
|
|
f"script-src 'self' 'unsafe-eval'; connect-src 'self' {connect_targets}; frame-src 'self' {report_base}",
|
|
content,
|
|
count=1,
|
|
)
|
|
content = content.replace(
|
|
"</head>",
|
|
(
|
|
f'<script src="/js/sw-cleanup.js?v={sw_hash}"></script>'
|
|
f'<script src="/js/ru-patch-v5.js?v={patch_hash}"></script></head>'
|
|
),
|
|
1,
|
|
)
|
|
content = content.replace(
|
|
"</body>",
|
|
f'<script defer="defer" src="/js/aw-worktime-panel.js?v={panel_hash}"></script></body>',
|
|
1,
|
|
)
|
|
if 'id="aw-report-links"' not in content:
|
|
content = content.replace(
|
|
"</body>",
|
|
'<div id="aw-report-links" style="position:fixed;right:12px;bottom:12px;z-index:99999;background:#111;color:#fff;padding:8px 10px;border-radius:8px;font:12px/1.4 sans-serif;opacity:.9">RDP report: loading...</div></body>',
|
|
1,
|
|
)
|
|
path.write_text(content)
|
|
PY
|
|
cp "$SW_CLEANUP_SRC" "$SERVICE_WORKER"
|
|
|
|
if [[ ! -s "$INDEX_HTML" ]]; then
|
|
echo "index.html became empty after RU patch: $INDEX_HTML" >&2
|
|
exit 1
|
|
fi
|
|
|
|
trends_chunk="$(grep -Rsl "$TRENDS_NEEDLE" "$WEBUI_DIR/js"/*.js 2>/dev/null | head -n 1 || true)"
|
|
if [[ -n "$trends_chunk" ]]; then
|
|
cp "$trends_chunk" "$trends_chunk.bak.$TS"
|
|
python3 - "$trends_chunk" "$TRENDS_NEEDLE" "$TRENDS_REPLACEMENT" <<'PY'
|
|
from pathlib import Path
|
|
import sys
|
|
|
|
path = Path(sys.argv[1])
|
|
old = sys.argv[2]
|
|
new = sys.argv[3]
|
|
content = path.read_text()
|
|
if old in content:
|
|
path.write_text(content.replace(old, new, 1))
|
|
print(f"Trends hotfix applied to {path}")
|
|
else:
|
|
print(f"Trends hotfix already present in {path}")
|
|
PY
|
|
else
|
|
echo "Trends hotfix skipped: chunk not found"
|
|
fi
|
|
|
|
timespiral_chunk="$(grep -Rsl "$TIMESPIRAL_NEEDLE" "$WEBUI_DIR/js"/*.js 2>/dev/null | head -n 1 || true)"
|
|
if [[ -n "$timespiral_chunk" ]]; then
|
|
cp "$timespiral_chunk" "$timespiral_chunk.bak.$TS"
|
|
python3 - "$timespiral_chunk" "$TIMESPIRAL_NEEDLE" "$TIMESPIRAL_REPLACEMENT" <<'PY'
|
|
from pathlib import Path
|
|
import sys
|
|
|
|
path = Path(sys.argv[1])
|
|
old = sys.argv[2]
|
|
new = sys.argv[3]
|
|
content = path.read_text()
|
|
if old in content:
|
|
path.write_text(content.replace(old, new, 1))
|
|
print(f"Timespiral hotfix applied to {path}")
|
|
else:
|
|
print(f"Timespiral hotfix already present in {path}")
|
|
PY
|
|
else
|
|
echo "Timespiral hotfix skipped: chunk not found"
|
|
fi
|
|
|
|
category_helper_chunk="$(grep -Rsl "$CATEGORY_HELPER_NEEDLE" "$WEBUI_DIR/js"/*.js 2>/dev/null | head -n 1 || true)"
|
|
if [[ -n "$category_helper_chunk" ]]; then
|
|
cp "$category_helper_chunk" "$category_helper_chunk.bak.$TS"
|
|
python3 - "$category_helper_chunk" "$CATEGORY_HELPER_NEEDLE" "$CATEGORY_HELPER_REPLACEMENT" <<'PY'
|
|
from pathlib import Path
|
|
import sys
|
|
|
|
path = Path(sys.argv[1])
|
|
old = sys.argv[2]
|
|
new = sys.argv[3]
|
|
content = path.read_text()
|
|
if old in content:
|
|
path.write_text(content.replace(old, new, 1))
|
|
print(f"Category helper host hotfix applied to {path}")
|
|
else:
|
|
print(f"Category helper host hotfix already present in {path}")
|
|
PY
|
|
else
|
|
echo "Category helper host hotfix skipped: chunk not found"
|
|
fi
|
|
|
|
echo "RU patch applied to $WEBUI_DIR (ru-patch-v5.js?v=$patch_hash)"
|