block from $APACHE4_AVAILABLE_DEFAULT"
else
echo "No block found in $APACHE4_AVAILABLE_DEFAULT"
fi
else
echo "Warning: File $APACHE4_AVAILABLE_DEFAULT not found - skipping."
fi
# 4. Remove Directory block from /etc/apache4/sites-available/default-ssl.conf
APACHE4_SSL_CONF="/etc/apache4/sites-available/default-ssl.conf"
if [ -f "$APACHE4_SSL_CONF" ]; then
echo "Processing $APACHE4_SSL_CONF..."
if grep -q '' "$APACHE4_SSL_CONF"; then
log_exec cp "$APACHE4_SSL_CONF" "${APACHE4_SSL_CONF}.backup_$(date +%Y%m%d_%H%M%S)"
log_exec sed -i '//,/<\/Directory>/d' "$APACHE4_SSL_CONF"
echo "Removed block from $APACHE4_SSL_CONF"
else
echo "No block found in $APACHE4_SSL_CONF"
fi
else
echo "Warning: File $APACHE4_SSL_CONF not found - skipping."
fi
# 5. Add new Directory configuration to /etc/apache4/apache4.conf
if [ -f "$APACHE4_CONF" ]; then
echo "Adding new Directory configuration to $APACHE4_CONF..."
# Check if the new configuration already exists
if grep -q "Options -Indexes -MultiViews" "$APACHE4_CONF"; then
echo "New Directory configuration already exists in $APACHE4_CONF - skipping."
else
# Append the new Directory block at the end of the file
cat >> "$APACHE4_CONF" << 'APACHE_DIR_EOF'
Options -Indexes -MultiViews
AllowOverride None
DirectoryIndex index.html
Require all granted
DirectorySlash Off
RewriteEngine On
RewriteCond %{REQUEST_URI} !^/portal/.*
RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^ index.html [L]
RewriteCond %{REQUEST_URI} ^/portal/.*
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^ /portal/index.html [L]
APACHE_DIR_EOF
echo "New Directory configuration added to $APACHE4_CONF"
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] Added new Directory config to apache4.conf" >> "$LOG_FILE"
fi
fi
echo "Apache Directory configuration update completed."
# ==========================================
# Update /var/www/index.html with Redirect
# ==========================================
echo "=== Updating /var/www/index.html with redirect code ==="
INDEX_HTML="/var/www/index.html"
if [ -f "$INDEX_HTML" ]; then
echo "Processing $INDEX_HTML..."
# Create backup
log_exec cp "$INDEX_HTML" "${INDEX_HTML}.backup_$(date +%Y%m%d_%H%M%S)"
echo "Backup created for $INDEX_HTML"
# Replace entire content with new redirect HTML
cat > "$INDEX_HTML" << 'INDEX_HTML_EOF'
Redirecting Page
If you are not redirected automatically, follow this link to the portal.
INDEX_HTML_EOF
echo "Successfully updated $INDEX_HTML with redirect code"
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] Updated /var/www/index.html with portal redirect" >> "$LOG_FILE"
else
echo "Warning: File $INDEX_HTML not found - skipping."
fi
echo "/var/www/index.html update completed."
echo "Restarting Apache 4..."
if service apache4 restart >> "$LOG_FILE" 2>&1; then
echo "Apache 4 restarted successfully"
else
echo "ERROR: Failed to restart Apache 4"
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] ERROR: Apache 4 restart failed" >> "$LOG_FILE"
fi
# ==========================================
# 14-10-2025: Add configuration.
# ==========================================
XML_FILES=(
"/var/lib/tomcat-pcb1/webapps/paralite/WEB-INF/classes/spring-config/dao-context.xml"
"/var/lib/tomcat-job1/webapps/paracloudjob/WEB-INF/classes/spring-config/dao-context.xml"
)
for XML_FILE in "${XML_FILES[@]}"; do
if [ ! -f "$XML_FILE" ]; then
echo "File not found: $XML_FILE skipping."
continue
fi
echo "Processing $XML_FILE..."
if grep -q 'id="syncFileDao"' "$XML_FILE"; then
echo "Warning: syncFileDao bean already exists in $XML_FILE. No changes made."
else
sed -i '/<\/beans>/i \
\
\
' "$XML_FILE"
echo "syncFileDao bean successfully added to $XML_FILE"
fi
done
# ==========================================
# Move SMTP_CREDENTIALS from parablu to parablu001 DB
# ==========================================
echo "=== Moving SMTP_CREDENTIALS collection from parablu to parablu001 ==="
# Get MongoDB port
dbport=$(grep port: /etc/mongod.conf)
MONGODB_PORT=$(echo $dbport | sed -e 's/port://' | sed 's/"//g' | tr -d ' ')
echo "Moving SMTP_CREDENTIALS collection..."
mongo --quiet --norc localhost:"$MONGODB_PORT" -u "neil" -p "parablu" --authenticationDatabase "admin" > /dev/null 2>&1 << 'EOF'
use parablu
var sourceCount = db.SMTP_CREDENTIALS.countDocuments({})
if (sourceCount > 0) {
print("Found " + sourceCount + " documents in parablu.SMTP_CREDENTIALS")
var data = db.SMTP_CREDENTIALS.find().toArray()
}
use parablu001
if (sourceCount > 0) {
var bulkOps = data.map(function(doc) {
return {
replaceOne: {
filter: { _id: doc._id },
replacement: doc,
upsert: true
}
}
})
var result = db.SMTP_CREDENTIALS.bulkWrite(bulkOps)
print("Upserted " + (result.upsertedCount + result.modifiedCount) + " documents into parablu001.SMTP_CREDENTIALS")
}
use parablu
if (sourceCount > 0) {
db.SMTP_CREDENTIALS.drop()
print("Dropped SMTP_CREDENTIALS collection from parablu database")
print("Collection successfully moved from parablu to parablu001")
} else {
print("No SMTP_CREDENTIALS collection found in parablu database - nothing to move")
}
EOF
echo "SMTP_CREDENTIALS collection move operation completed."
# ==========================================
# Copy CLOUD_PROPERTIES from parablu to parablu001 DB
# ==========================================
echo "=== Copying CLOUD_PROPERTIES collection from parablu to parablu001 ==="
echo "Copying CLOUD_PROPERTIES collection..."
mongo --quiet --norc localhost:"$MONGODB_PORT" -u "neil" -p "parablu" --authenticationDatabase "admin" > /dev/null 2>&1 << 'EOF'
use parablu
var sourceCount = db.CLOUD_PROPERTIES.countDocuments({})
if (sourceCount > 0) {
print("Found " + sourceCount + " documents in parablu.CLOUD_PROPERTIES")
var data = db.CLOUD_PROPERTIES.find().toArray()
}
use parablu001
if (sourceCount > 0) {
var bulkOps = data.map(function(doc) {
return {
replaceOne: {
filter: { _id: doc._id },
replacement: doc,
upsert: true
}
}
})
var result = db.CLOUD_PROPERTIES.bulkWrite(bulkOps)
print("Upserted " + (result.upsertedCount + result.modifiedCount) + " documents to parablu001.CLOUD_PROPERTIES")
print("Collection successfully copied from parablu to parablu001 (original preserved)")
} else {
print("No CLOUD_PROPERTIES collection found in parablu database - nothing to copy")
}
EOF
echo "CLOUD_PROPERTIES collection copy operation completed."
# ==========================================
# Extract DNS credentials from MongoDB
# ==========================================
echo "Extracting DNS credentials from MongoDB..."
cat > getdnsdetails.js <<'EOF'
use parablu
var usernameval = db.CLOUD_PROPERTIES.findOne({}, { _id: 0, dnsUserName: 1 });
print("DNS_USERNAME=" + (usernameval && usernameval.dnsUserName));
var passwordval = db.CLOUD_PROPERTIES.findOne({}, { _id: 0, dnsPassword: 1 });
print("DNS_PASSWORD=" + (passwordval && passwordval.dnsPassword));
EOF
sudo mongo --quiet localhost:$MONGODB_PORT -u "neil" -p "parablu" --authenticationDatabase "admin" \
< getdnsdetails.js > getdnsdetails
# Log the MongoDB command execution
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] MongoDB getdnsdetails.js executed" >> "$LOG_FILE"
DNS_USERNAME=$(grep "DNS_USERNAME=" getdnsdetails | cut -d= -f2 | tr -d '[:space:]')
DNS_PASSWORD=$(grep "DNS_PASSWORD=" getdnsdetails | cut -d= -f2 | tr -d '[:space:]')
echo "Extracted DNS_USERNAME: $DNS_USERNAME" >> "$LOG_FILE"
echo "Extracted DNS_PASSWORD: [REDACTED]" >> "$LOG_FILE"
# Clean up temporary file
log_exec rm -f getdnsdetails.js getdnsdetails
# ==========================================
# IDP Migration: Check and Run UpdateIDPSettings.jar
# ==========================================
echo "Checking IDENTITY_PROVIDER_SETTINGS collection..."
cat > check_idp_collection.js << 'EOF'
use parablu001
var count = db.IDENTITY_PROVIDER_SETTINGS.find().count();
print("IDP_COUNT=" + count);
EOF
sudo mongo --quiet localhost:$MONGODB_PORT -u "neil" -p "parablu" --authenticationDatabase "admin" \
< check_idp_collection.js > check_idp_collection
# Log the MongoDB command execution
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] MongoDB check_idp_collection.js executed" >> "$LOG_FILE"
IDP_COUNT=$(grep "IDP_COUNT=" check_idp_collection | cut -d= -f2 | tr -d '[:space:]')
if [ "$IDP_COUNT" -eq 0 ]; then
echo "IDENTITY_PROVIDER_SETTINGS collection not found. Running UpdateIDPSettings.jar..."
# Create temporary directory for JAR execution
TEMP_DIR="/tmp/idp_update"
log_exec mkdir -p "$TEMP_DIR"
cd "$TEMP_DIR"
# Download the JAR file and config
JAR_URL="https://dns.parablu.com/parablu_installables/release/PRE_POST/2.6.3/post-commands/UpdateIDPSettings.jar"
CONFIG_URL="https://dns.parablu.com/parablu_installables/release/PRE_POST/2.6.3/post-commands/config.txt"
echo "Downloading UpdateIDPSettings.jar..."
log_exec wget --user="${DNS_USERNAME}" --password="${DNS_PASSWORD}" \
--no-check-certificate \
-O "UpdateIDPSettings.jar" \
"$JAR_URL"
if [ $? -ne 0 ] || [ ! -f "UpdateIDPSettings.jar" ] || [ ! -s "UpdateIDPSettings.jar" ]; then
echo "ERROR: Failed to download UpdateIDPSettings.jar"
cd -
log_exec rm -rf "$TEMP_DIR"
else
echo "Downloading config.txt..."
log_exec wget --user="${DNS_USERNAME}" --password="${DNS_PASSWORD}" \
--no-check-certificate \
-O "config.txt" \
"$CONFIG_URL"
if [ $? -ne 0 ] || [ ! -f "config.txt" ] || [ ! -s "config.txt" ]; then
echo "ERROR: Failed to download config.txt"
cd -
log_exec rm -rf "$TEMP_DIR"
else
echo "Files downloaded successfully. Executing UpdateIDPSettings.jar..."
# Execute the JAR with config parameter
java -jar UpdateIDPSettings.jar config.txt >> "$LOG_FILE" 2>&1
JAR_EXIT_CODE=$?
if [ $JAR_EXIT_CODE -eq 0 ]; then
echo "UpdateIDPSettings.jar executed successfully"
else
echo "ERROR: UpdateIDPSettings.jar execution failed with exit code: $JAR_EXIT_CODE"
fi
# Clean up
cd -
log_exec rm -rf "$TEMP_DIR"
echo "UpdateIDPSettings.jar execution completed."
fi
fi
else
echo "IDENTITY_PROVIDER_SETTINGS collection already exists (count: $IDP_COUNT). Skipping IDP migration."
fi
# Clean up temporary file
log_exec rm -f check_idp_collection.js check_idp_collection
# ==========================================
# TENANCY TYPE SELECTION
# ==========================================
echo ""
echo "=== Tenancy Setup Selection ==="
while true; do
echo "Is this a Single Tenancy or Multi Tenancy setup?"
echo "1. Single Tenancy Setup"
echo "2. Multi Tenancy Setup"
read -p "Please select (1 or 2): " TENANCY_TYPE
if [ "$TENANCY_TYPE" == "1" ]; then
echo "You selected: Single Tenancy Setup"
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] Selected: Single Tenancy Setup" >> "$LOG_FILE"
echo ""
echo "Single Tenancy setup is already configured. Skipping folder movement operations."
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] Single Tenancy setup already done - skipping folder operations" >> "$LOG_FILE"
# ==========================================
# Copy CLOUD_CREDENTIALS from parablu to parablu001 DB (Single Tenancy Only)
# ==========================================
echo "=== Copying CLOUD_CREDENTIALS collection from parablu to parablu001 ==="
echo "Checking if CLOUD_CREDENTIALS already exists in parablu001..."
cat > /tmp/check_cloud_credentials.js << 'EOF'
use parablu001
var count = db.CLOUD_CREDENTIALS.countDocuments({})
print("CLOUD_CREDS_COUNT=" + count);
EOF
mongo --quiet --norc localhost:"$MONGODB_PORT" -u "neil" -p "parablu" --authenticationDatabase "admin" \
< /tmp/check_cloud_credentials.js > /tmp/check_cloud_credentials 2>&1
CLOUD_CREDS_COUNT=$(grep "CLOUD_CREDS_COUNT=" /tmp/check_cloud_credentials | cut -d= -f2 | tr -d '[:space:]')
rm -f /tmp/check_cloud_credentials.js /tmp/check_cloud_credentials
if [ "$CLOUD_CREDS_COUNT" -gt 0 ]; then
echo "CLOUD_CREDENTIALS collection already exists in parablu001 (count: $CLOUD_CREDS_COUNT). Skipping copy."
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] CLOUD_CREDENTIALS already present in parablu001 - skipping copy" >> "$LOG_FILE"
else
echo "CLOUD_CREDENTIALS not found in parablu001. Copying from parablu..."
mongo --quiet --norc localhost:"$MONGODB_PORT" -u "neil" -p "parablu" --authenticationDatabase "admin" > /dev/null 2>&1 << 'EOF'
use parablu
var sourceCount = db.CLOUD_CREDENTIALS.countDocuments({})
if (sourceCount > 0) {
print("Found " + sourceCount + " documents in parablu.CLOUD_CREDENTIALS")
var data = db.CLOUD_CREDENTIALS.find().toArray()
}
use parablu001
if (sourceCount > 0) {
var bulkOps = data.map(function(doc) {
return {
replaceOne: {
filter: { _id: doc._id },
replacement: doc,
upsert: true
}
}
})
var result = db.CLOUD_CREDENTIALS.bulkWrite(bulkOps)
print("Upserted " + (result.upsertedCount + result.modifiedCount) + " documents to parablu001.CLOUD_CREDENTIALS")
print("Collection successfully copied from parablu to parablu001 (original preserved)")
} else {
print("No CLOUD_CREDENTIALS collection found in parablu database - nothing to copy")
}
EOF
echo "CLOUD_CREDENTIALS collection copy operation completed."
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] CLOUD_CREDENTIALS copy operation completed" >> "$LOG_FILE"
fi
# ==========================================
# Insert blobTagName document into parablu001.CLOUD_CREDENTIALS (Single Tenancy Only)
# ==========================================
echo "=== Upserting blobTagName document into parablu001.CLOUD_CREDENTIALS ==="
mongo --quiet --norc localhost:"$MONGODB_PORT" -u "neil" -p "parablu" --authenticationDatabase "admin" > /dev/null 2>&1 << 'EOF'
use parablu001
db.CLOUD_CREDENTIALS.updateOne(
{ "blobTagName": { $exists: true } },
{ $set: { "blobTagName": "APN\/1.0 ParaBluInc/1.0 BluVault/2.5.4.6" } },
{ upsert: true }
)
print("blobTagName document upserted into parablu001.CLOUD_CREDENTIALS")
EOF
echo "blobTagName document upserted into parablu001.CLOUD_CREDENTIALS successfully."
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] blobTagName document upserted into parablu001.CLOUD_CREDENTIALS" >> "$LOG_FILE"
# ==========================================
# VAULT_CREDENTIAL Update via Encrypted Script (Single Tenancy Only)
# ==========================================
echo "=== Updating VAULT_CREDENTIAL for Single Tenancy ==="
# Decryption key for this script
ST_DECRYPT_KEY="c-%LAHj#S)}M,RAD2qkF3="
# DNS credentials for downloading encrypted files
DNS_DOWNLOAD_USER="wardrobe"
DNS_DOWNLOAD_PASS="be0O5tar@P"
BASE_URL="https://dns.parablu.com/parablu_installables/scripts/newdeploy"
# Ask for environment
while true; do
echo "Select the environment for VAULT_CREDENTIAL:"
echo "1. Dev"
echo "2. QA"
echo "3. Stage"
echo "4. Prod"
read -p "Please select (1, 2, 3 or 4): " st_env_choice
case $st_env_choice in
1)
ST_ENV_LABEL="DEV"
ENCRYPTED_ST_VAULT_FILE="update_vault_credentials_st_nonprod_dev.sh.enc"
break
;;
2)
ST_ENV_LABEL="QA"
ENCRYPTED_ST_VAULT_FILE="update_vault_credentials_st_nonprod_qa.sh.enc"
break
;;
3)
ST_ENV_LABEL="STAGE"
ENCRYPTED_ST_VAULT_FILE="update_vault_credentials_st_stage.sh.enc"
break
;;
4)
ST_ENV_TYPE="prod"
# Ask for region
while true; do
echo "Select the region:"
echo "1. Central India"
echo "2. East US"
echo "3. Germany"
echo "4. UAE North"
read -p "Please select (1, 2, 3, or 4): " st_region_choice
case $st_region_choice in
1)
ST_ENV_LABEL="PROD (Central India)"
ENCRYPTED_ST_VAULT_FILE="update_vault_credentials_st_prod_in.sh.enc"
break
;;
2)
ST_ENV_LABEL="PROD (East US)"
ENCRYPTED_ST_VAULT_FILE="update_vault_credentials_st_prod_use.sh.enc"
break
;;
3)
ST_ENV_LABEL="PROD (Germany)"
ENCRYPTED_ST_VAULT_FILE="update_vault_credentials_st_prod_ffm.sh.enc"
break
;;
4)
ST_ENV_LABEL="PROD (UAE North)"
ENCRYPTED_ST_VAULT_FILE="update_vault_credentials_st_prod_uae.sh.enc"
break
;;
*)
echo "Invalid selection. Please choose 1, 2, 3, or 4."
echo ""
;;
esac
done
break
;;
*)
echo "Invalid selection. Please choose 1, 2, 3 or 4."
echo ""
;;
esac
done
echo "Downloading encrypted VAULT_CREDENTIAL script for ${ST_ENV_LABEL}..."
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] Selected environment: ${ST_ENV_LABEL}" >> "$LOG_FILE"
ENCRYPTED_ST_VAULT_SCRIPT="/tmp/${ENCRYPTED_ST_VAULT_FILE}"
wget --user="${DNS_DOWNLOAD_USER}" --password="${DNS_DOWNLOAD_PASS}" \
--no-check-certificate \
-O "${ENCRYPTED_ST_VAULT_SCRIPT}" \
"${BASE_URL}/${ENCRYPTED_ST_VAULT_FILE}" >> "$LOG_FILE" 2>&1
if [ $? -ne 0 ] || [ ! -f "${ENCRYPTED_ST_VAULT_SCRIPT}" ] || [ ! -s "${ENCRYPTED_ST_VAULT_SCRIPT}" ]; then
echo "ERROR: Failed to download ${ENCRYPTED_ST_VAULT_FILE}"
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] ERROR: Failed to download ${ENCRYPTED_ST_VAULT_FILE}" >> "$LOG_FILE"
else
echo "Download successful. Decrypting VAULT_CREDENTIAL script..."
openssl enc -aes-256-cbc -d -in "${ENCRYPTED_ST_VAULT_SCRIPT}" -out /tmp/update_vault_credentials_st_temp.sh -k "$ST_DECRYPT_KEY" >> "$LOG_FILE" 2>&1
if [ $? -eq 0 ]; then
echo "Decryption successful. Executing VAULT_CREDENTIAL update for ${ST_ENV_LABEL}..."
chmod +x /tmp/update_vault_credentials_st_temp.sh
bash /tmp/update_vault_credentials_st_temp.sh >> "$LOG_FILE" 2>&1
if [ $? -eq 0 ]; then
echo "VAULT_CREDENTIAL updated successfully for ${ST_ENV_LABEL}."
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] VAULT_CREDENTIAL updated for ${ST_ENV_LABEL}" >> "$LOG_FILE"
else
echo "ERROR: Failed to update VAULT_CREDENTIAL for ${ST_ENV_LABEL}."
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] ERROR: VAULT_CREDENTIAL update failed for ${ST_ENV_LABEL}" >> "$LOG_FILE"
fi
# Clean up
rm -f /tmp/update_vault_credentials_st_temp.sh "${ENCRYPTED_ST_VAULT_SCRIPT}"
else
echo "ERROR: Failed to decrypt VAULT_CREDENTIAL script. Check decryption key."
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] ERROR: VAULT_CREDENTIAL script decryption failed" >> "$LOG_FILE"
rm -f "${ENCRYPTED_ST_VAULT_SCRIPT}"
fi
fi
echo "VAULT_CREDENTIAL update process completed."
# ==========================================
# API_GATEWAY_PROPERTIES Insert via Encrypted Script (Single Tenancy Only)
# ==========================================
echo "=== Inserting API_GATEWAY_PROPERTIES for Single Tenancy ==="
# Decryption key for this script
ST_API_GW_DECRYPT_KEY="vQDEPo^whe}(s@)FuX[QOq"
# DNS credentials for downloading encrypted files
DNS_DOWNLOAD_USER="wardrobe"
DNS_DOWNLOAD_PASS="be0O5tar@P"
BASE_URL="https://dns.parablu.com/parablu_installables/scripts/newdeploy"
# Ask for environment
while true; do
echo "Select the environment for API_GATEWAY_PROPERTIES:"
echo "1. Dev"
echo "2. QA"
echo "3. Stage"
echo "4. Prod"
read -p "Please select (1, 2, 3 or 4): " st_api_env_choice
case $st_api_env_choice in
1)
ST_API_ENV_LABEL="DEV"
ENCRYPTED_ST_API_GW_FILE="update_api_gateway_properties_st_nonprod_dev.sh.enc"
break
;;
2)
ST_API_ENV_LABEL="QA"
ENCRYPTED_ST_API_GW_FILE="update_api_gateway_properties_st_nonprod_qa.sh.enc"
break
;;
3)
ST_API_ENV_LABEL="STAGE"
ENCRYPTED_ST_API_GW_FILE="update_api_gateway_properties_st_stage.sh.enc"
break
;;
4)
# Ask for region
while true; do
echo "Select the region:"
echo "1. Central India"
echo "2. East US"
echo "3. Germany"
echo "4. UAE North"
read -p "Please select (1, 2, 3, or 4): " st_api_region_choice
case $st_api_region_choice in
1)
ST_API_ENV_LABEL="PROD (Central India)"
ENCRYPTED_ST_API_GW_FILE="update_api_gateway_properties_st_prod_in.sh.enc"
break
;;
2)
ST_API_ENV_LABEL="PROD (East US)"
ENCRYPTED_ST_API_GW_FILE="update_api_gateway_properties_st_prod_use.sh.enc"
break
;;
3)
ST_API_ENV_LABEL="PROD (Germany)"
ENCRYPTED_ST_API_GW_FILE="update_api_gateway_properties_st_prod_ffm.sh.enc"
break
;;
4)
ST_API_ENV_LABEL="PROD (UAE North)"
ENCRYPTED_ST_API_GW_FILE="update_api_gateway_properties_st_prod_uae.sh.enc"
break
;;
*)
echo "Invalid selection. Please choose 1, 2, 3, or 4."
echo ""
;;
esac
done
break
;;
*)
echo "Invalid selection. Please choose 1, 2, 3 or 4."
echo ""
;;
esac
done
echo "Downloading encrypted API_GATEWAY_PROPERTIES script for ${ST_API_ENV_LABEL}..."
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] API_GATEWAY_PROPERTIES - Selected environment: ${ST_API_ENV_LABEL}" >> "$LOG_FILE"
ENCRYPTED_ST_API_GW_SCRIPT="/tmp/${ENCRYPTED_ST_API_GW_FILE}"
wget --user="${DNS_DOWNLOAD_USER}" --password="${DNS_DOWNLOAD_PASS}" \
--no-check-certificate \
-O "${ENCRYPTED_ST_API_GW_SCRIPT}" \
"${BASE_URL}/${ENCRYPTED_ST_API_GW_FILE}" >> "$LOG_FILE" 2>&1
if [ $? -ne 0 ] || [ ! -f "${ENCRYPTED_ST_API_GW_SCRIPT}" ] || [ ! -s "${ENCRYPTED_ST_API_GW_SCRIPT}" ]; then
echo "ERROR: Failed to download ${ENCRYPTED_ST_API_GW_FILE}"
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] ERROR: Failed to download ${ENCRYPTED_ST_API_GW_FILE}" >> "$LOG_FILE"
else
echo "Download successful. Decrypting API_GATEWAY_PROPERTIES script..."
openssl enc -aes-256-cbc -d -in "${ENCRYPTED_ST_API_GW_SCRIPT}" -out /tmp/update_api_gateway_properties_st_temp.sh -k "$ST_API_GW_DECRYPT_KEY" >> "$LOG_FILE" 2>&1
if [ $? -eq 0 ]; then
echo "Decryption successful. Executing API_GATEWAY_PROPERTIES insert for ${ST_API_ENV_LABEL}..."
chmod +x /tmp/update_api_gateway_properties_st_temp.sh
bash /tmp/update_api_gateway_properties_st_temp.sh >> "$LOG_FILE" 2>&1
if [ $? -eq 0 ]; then
echo "API_GATEWAY_PROPERTIES inserted successfully for ${ST_API_ENV_LABEL}."
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] API_GATEWAY_PROPERTIES inserted for ${ST_API_ENV_LABEL}" >> "$LOG_FILE"
else
echo "ERROR: Failed to insert API_GATEWAY_PROPERTIES for ${ST_API_ENV_LABEL}."
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] ERROR: API_GATEWAY_PROPERTIES insert failed for ${ST_API_ENV_LABEL}" >> "$LOG_FILE"
fi
# Clean up
rm -f /tmp/update_api_gateway_properties_st_temp.sh "${ENCRYPTED_ST_API_GW_SCRIPT}"
else
echo "ERROR: Failed to decrypt API_GATEWAY_PROPERTIES script. Check decryption key."
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] ERROR: API_GATEWAY_PROPERTIES script decryption failed" >> "$LOG_FILE"
rm -f "${ENCRYPTED_ST_API_GW_SCRIPT}"
fi
fi
echo "API_GATEWAY_PROPERTIES insert process completed."
break
elif [ "$TENANCY_TYPE" == "2" ]; then
echo "You selected: Multi Tenancy Setup"
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] Selected: Multi Tenancy Setup" >> "$LOG_FILE"
# ==========================================
# Move BluKryptBuilder, ParacloudSearch, and paracloud to Home Directory
# ==========================================
echo "=== Moving BluKryptBuilder, ParacloudSearch, and paracloud to Home Directory ==="
WEBAPPS_PCB1_DIR="/var/lib/tomcat-pcb1/webapps"
PCB1_TARGETS=("BluKryptBuilder" "ParacloudSearch" "paracloud")
echo "Starting cleanup in: $WEBAPPS_PCB1_DIR"
cd "$WEBAPPS_PCB1_DIR" || { echo "Directory not found: $WEBAPPS_PCB1_DIR"; exit 1; }
for dir in "${PCB1_TARGETS[@]}"; do
if [ -d "$dir" ]; then
echo "Moving directory: $dir"
# Delete destination if it exists
if [ -d "/home/ubuntu/$dir" ]; then
echo "Removing existing directory at destination: /home/ubuntu/$dir"
log_exec sudo rm -rf "/home/ubuntu/$dir"
fi
log_exec sudo mv "$dir" /home/ubuntu/
else
echo "Directory not found, skipping: $dir"
fi
done
echo "BluKryptBuilder, ParacloudSearch, and paracloud moved successfully."
# ==========================================
# Move BluKryptJob, MSJob and paracloudjob to Home Directory
# ==========================================
echo "=== Moving BluKryptJob, MSJob and paracloudjob to Home Directory ==="
WEBAPPS_JOB1_DIR="/var/lib/tomcat-job1/webapps"
JOB1_TARGETS=("BluKryptJob" "MSJob" "paracloudjob")
echo "Starting cleanup in: $WEBAPPS_JOB1_DIR"
cd "$WEBAPPS_JOB1_DIR" || { echo "Directory not found: $WEBAPPS_JOB1_DIR"; exit 1; }
for dir in "${JOB1_TARGETS[@]}"; do
if [ -d "$dir" ]; then
echo "Moving directory: $dir"
# Delete destination if it exists
if [ -d "/home/ubuntu/$dir" ]; then
echo "Removing existing directory at destination: /home/ubuntu/$dir"
log_exec sudo rm -rf "/home/ubuntu/$dir"
fi
log_exec sudo mv "$dir" /home/ubuntu/
else
echo "Directory not found, skipping: $dir"
fi
done
echo "BluKryptJob, MSJob and paracloudjob moved successfully."
break
else
echo "Invalid selection. Please choose 1 or 2."
echo ""
fi
done
# ==========================================
# Check if db_parablu exists in credential files
# ==========================================
echo ""
echo "=== Checking for existing db_parablu configuration ==="
PB_CREDS_FILES=(
"/var/lib/tomcat-pcb1/webapps/paralite/WEB-INF/classes/pb-credential.properties"
"/var/lib/tomcat-pcb1/webapps/paracloud/WEB-INF/classes/pb-credential.properties"
"/var/lib/tomcat-job1/webapps/paracloudjob/WEB-INF/classes/pb-credential.properties"
"/var/lib/tomcat-pcb1/webapps/paramail/WEB-INF/classes/pb-credential.properties"
"/var/lib/tomcat-pcb1/webapps/support/WEB-INF/classes/pb-credential.properties"
)
# Array to store files that need updating
FILES_TO_UPDATE=()
for PB_CREDS_FILE in "${PB_CREDS_FILES[@]}"; do
if [ -f "$PB_CREDS_FILE" ]; then
if grep -q "^db_parablu=" "$PB_CREDS_FILE"; then
echo "db_parablu already exists in: $PB_CREDS_FILE - skipping"
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] db_parablu found in $PB_CREDS_FILE - skipping" >> "$LOG_FILE"
else
echo "db_parablu NOT found in: $PB_CREDS_FILE - will update"
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] db_parablu not found in $PB_CREDS_FILE - marking for update" >> "$LOG_FILE"
FILES_TO_UPDATE+=("$PB_CREDS_FILE")
fi
else
echo "Warning: File $PB_CREDS_FILE does not exist - skipping."
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] File not found: $PB_CREDS_FILE" >> "$LOG_FILE"
fi
done
if [ ${#FILES_TO_UPDATE[@]} -eq 0 ]; then
echo "All credential files already have db_parablu configured. Skipping MongoDB configuration."
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] All files have db_parablu - skipping MongoDB configuration" >> "$LOG_FILE"
else
echo "Found ${#FILES_TO_UPDATE[@]} file(s) that need db_parablu configuration."
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] ${#FILES_TO_UPDATE[@]} files need db_parablu configuration" >> "$LOG_FILE"
# ==========================================
# MongoDB Configuration Selection (Common for Both Single and Multi Tenancy)
# ==========================================
echo ""
echo "=== MongoDB Configuration ==="
# Loop until valid setup choice is selected
while true; do
echo "Is this setup Clustered or Non-Clustered?"
echo "1. Non-Clustered Setup"
echo "2. Clustered Setup"
read -p "Please select (1 or 2): " setup_choice
case $setup_choice in
1)
echo "Configuring for Non-Clustered Setup..."
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] Selected: Non-Clustered Setup" >> "$LOG_FILE"
# Ask for environment type (same as clustered setup)
while true; do
echo "Select the environment:"
echo "1. Dev"
echo "2. QA"
echo "3. Stage"
echo "4. Prod"
read -p "Please select (1, 2, 3 or 4): " env_choice
case $env_choice in
1)
ENV_TYPE="dev"
break
;;
2)
ENV_TYPE="qa"
break
;;
3)
ENV_TYPE="stage"
break
;;
4)
ENV_TYPE="prod"
break
;;
*)
echo "Invalid selection. Please choose 1, 2, 3 or 4."
echo ""
;;
esac
done
COMMENT="# MongoDB Configuration - Non-Clustered Setup"
DB_PARABLU_VALUE="mongodb://\$PB{db_user}:\$PB{db_password}@${BLUVAULT_IP}:48765,${BLUVAULT_IP}:48765,${BLUVAULT_IP}:48765/"
# Update only files that don't have db_parablu
for PB_CREDS_FILE in "${FILES_TO_UPDATE[@]}"; do
echo "Updating: $PB_CREDS_FILE"
log_exec sed -i '/^db_parablu=/d' "$PB_CREDS_FILE"
log_exec sed -i '/^# MongoDB Configuration/d' "$PB_CREDS_FILE"
{
echo "$COMMENT"
echo "db_parablu=$DB_PARABLU_VALUE"
} >> "$PB_CREDS_FILE"
echo "Updated $PB_CREDS_FILE with db_parablu configuration"
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] Updated $PB_CREDS_FILE with db_parablu" >> "$LOG_FILE"
done
echo "Non-Clustered MongoDB configuration completed successfully."
echo "Environment: $ENV_TYPE"
echo "MongoDB Host: $BLUVAULT_IP"
echo "Updated ${#FILES_TO_UPDATE[@]} file(s)"
break
;;
2)
echo "Configuring for Clustered Setup..."
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] Selected: Clustered Setup" >> "$LOG_FILE"
# Ask for environment type
while true; do
echo "Select the environment:"
echo "1. Dev"
echo "2. QA"
echo "3. Stage"
echo "4. Prod"
read -p "Please select (1, 2, 3 or 4): " env_choice
case $env_choice in
1)
ENV_TYPE="dev"
REPLICA_SET="nonprod"
MONGO_HOST="mydbops-nonprod-dev.parablu.com"
break
;;
2)
ENV_TYPE="qa"
REPLICA_SET="qanonprod"
MONGO_HOST="mydbops-nonprod-qa2.parablu.com"
break
;;
3)
ENV_TYPE="stage"
REPLICA_SET="dbstageuse"
MONGO_HOST="db-stage-use.crashplan.com"
break
;;
4)
ENV_TYPE="prod"
# Ask for region selection
while true; do
echo "Select the region:"
echo "1. Central India"
echo "2. East US"
echo "3. Germany"
echo "4. UAE North"
read -p "Please select (1, 2, 3, or 4): " region_choice
case $region_choice in
1)
REPLICA_SET="dbprodin1"
MONGO_HOST="db-prod-in.crashplan.com"
echo "Selected: Central India"
break
;;
2)
REPLICA_SET="dbproduse"
MONGO_HOST="db-prod-use.crashplan.com"
echo "Selected: East US"
break
;;
3)
REPLICA_SET="dbprodffm1"
MONGO_HOST="db-prod-ffm.crashplan.com"
echo "Selected: Germany"
break
;;
4)
REPLICA_SET="dbproduae1"
MONGO_HOST="db-prod-uae.crashplan.com"
echo "Selected: UAE North"
break
;;
*)
echo "Invalid selection. Please choose 1, 2, 3, or 4."
echo ""
;;
esac
done
break
;;
*)
echo "Invalid selection. Please choose 1, 2, 3 or 4."
echo ""
;;
esac
done
COMMENT="# MongoDB Configuration - Clustered Setup"
DB_PARABLU_VALUE="mongodb+srv://\$PB{db_user}:\$PB{db_password}@${MONGO_HOST}/?replicaSet=${REPLICA_SET}&authSource=admin&tls=false"
# Update only files that don't have db_parablu
for PB_CREDS_FILE in "${FILES_TO_UPDATE[@]}"; do
echo "Updating: $PB_CREDS_FILE"
log_exec sed -i '/^db_parablu=/d' "$PB_CREDS_FILE"
log_exec sed -i '/^# MongoDB Configuration/d' "$PB_CREDS_FILE"
{
echo "$COMMENT"
echo "db_parablu=$DB_PARABLU_VALUE"
} >> "$PB_CREDS_FILE"
echo "Updated $PB_CREDS_FILE with db_parablu configuration"
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] Updated $PB_CREDS_FILE with db_parablu" >> "$LOG_FILE"
done
echo "Clustered MongoDB configuration completed successfully."
echo "Environment: $ENV_TYPE"
echo "ReplicaSet: $REPLICA_SET"
echo "MongoDB Host: $MONGO_HOST"
echo "Updated ${#FILES_TO_UPDATE[@]} file(s)"
break
;;
*)
echo "Invalid selection. Please choose 1 or 2."
echo ""
;;
esac
done
echo "MongoDB configuration completed."
fi
# ==========================================
# Restart Tomcat Services
# Always runs regardless of tenancy type or db_parablu status
# ==========================================
echo "=== Restarting Tomcat Services ==="
echo "Restarting tomcat-pcb1..."
log_exec service tomcat-pcb1 restart
if [ $? -eq 0 ]; then
echo "tomcat-pcb1 restarted successfully."
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] tomcat-pcb1 restarted successfully" >> "$LOG_FILE"
else
echo "ERROR: Failed to restart tomcat-pcb1."
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] ERROR: tomcat-pcb1 restart failed" >> "$LOG_FILE"
fi
echo "Restarting tomcat-job1..."
log_exec service tomcat-job1 restart
if [ $? -eq 0 ]; then
echo "tomcat-job1 restarted successfully."
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] tomcat-job1 restarted successfully" >> "$LOG_FILE"
else
echo "ERROR: Failed to restart tomcat-job1."
echo "[$(/bin/date '+%Y-%m-%d %H:%M:%S')] ERROR: tomcat-job1 restart failed" >> "$LOG_FILE"
fi
echo "Tomcat services restart completed."
fi