Compare commits
1 Commits
a8fb815103
...
a8c7dc74c1
| Author | SHA1 | Date | |
|---|---|---|---|
| a8c7dc74c1 |
12
action.yml
12
action.yml
@@ -7,11 +7,6 @@ branding:
|
||||
color: 'blue'
|
||||
|
||||
inputs:
|
||||
admin_password:
|
||||
description: 'Admin password for Stalwart web interface (use GitHub Secrets). If not provided, defaults to "changeme"'
|
||||
required: false
|
||||
default: ''
|
||||
|
||||
domains:
|
||||
description: 'JSON array of domains to create. Example: [{"name":"example.com","description":"Primary domain"}]'
|
||||
required: false
|
||||
@@ -59,17 +54,12 @@ runs:
|
||||
|
||||
- name: Configure Stalwart
|
||||
shell: bash
|
||||
if: ${{ inputs.admin_password != '' || inputs.domains != '' || inputs.users != '' }}
|
||||
if: ${{ inputs.domains != '' || inputs.users != '' }}
|
||||
env:
|
||||
STALWART_ADMIN_PASSWORD: ${{ inputs.admin_password }}
|
||||
STALWART_DOMAINS: ${{ inputs.domains }}
|
||||
STALWART_USERS: ${{ inputs.users }}
|
||||
STALWART_INSTALL_PATH: '/opt/stalwart'
|
||||
run: |
|
||||
# Mask sensitive data
|
||||
if [ -n "$STALWART_ADMIN_PASSWORD" ]; then
|
||||
echo "::add-mask::$STALWART_ADMIN_PASSWORD"
|
||||
fi
|
||||
|
||||
# Mask user passwords from JSON
|
||||
if [ -n "$STALWART_USERS" ]; then
|
||||
|
||||
@@ -29,7 +29,6 @@ fi
|
||||
readonly DEFAULT_ADMIN_PASSWORD
|
||||
|
||||
# Environment variables (passed from action.yml)
|
||||
ADMIN_PASSWORD="${STALWART_ADMIN_PASSWORD:-}"
|
||||
DOMAINS_JSON="${STALWART_DOMAINS:-}"
|
||||
USERS_JSON="${STALWART_USERS:-}"
|
||||
|
||||
@@ -54,32 +53,8 @@ main() {
|
||||
fi
|
||||
|
||||
log_success "API authentication verified"
|
||||
|
||||
# Update admin password if provided and different from generated one
|
||||
if [ -n "$ADMIN_PASSWORD" ] && [ "$ADMIN_PASSWORD" != "$current_password" ]; then
|
||||
log_info "Updating admin password..."
|
||||
if update_admin_password "$current_password" "$ADMIN_PASSWORD"; then
|
||||
log_success "Admin password updated successfully"
|
||||
|
||||
# Give Stalwart a moment to apply the change
|
||||
sleep 2
|
||||
|
||||
# Verify the new password works
|
||||
if test_auth "$ADMIN_PASSWORD"; then
|
||||
log_success "New password verified"
|
||||
current_password="$ADMIN_PASSWORD"
|
||||
else
|
||||
log_error "New password verification failed"
|
||||
return 1
|
||||
fi
|
||||
else
|
||||
log_error "Failed to update admin password"
|
||||
return 1
|
||||
fi
|
||||
else
|
||||
log_info "No custom admin password provided"
|
||||
log_warning "⚠️ Using generated password. Save it securely!"
|
||||
fi
|
||||
log_info "📝 Generated admin password: ${current_password}"
|
||||
log_warning "⚠️ Save this password securely - it won't be shown again!"
|
||||
|
||||
# Create domains if provided
|
||||
if [ -n "$DOMAINS_JSON" ]; then
|
||||
@@ -158,44 +133,6 @@ test_auth() {
|
||||
fi
|
||||
}
|
||||
|
||||
# Update admin password
|
||||
# Args: $1 = current password, $2 = new password
|
||||
update_admin_password() {
|
||||
local current_password="$1"
|
||||
local new_password="$2"
|
||||
|
||||
local http_code
|
||||
local response
|
||||
|
||||
# Stalwart requires password to be hashed with SHA-512 crypt
|
||||
local hashed_password
|
||||
if command -v mkpasswd >/dev/null 2>&1; then
|
||||
hashed_password=$(mkpasswd -m sha-512 "$new_password")
|
||||
elif command -v openssl >/dev/null 2>&1; then
|
||||
hashed_password=$(openssl passwd -6 "$new_password")
|
||||
else
|
||||
log_error "Neither mkpasswd nor openssl available for password hashing"
|
||||
return 1
|
||||
fi
|
||||
|
||||
# Stalwart uses /api/account/auth with array format
|
||||
response=$(curl -s -w "\n%{http_code}" -X POST "${API_URL}/account/auth" \
|
||||
-u "admin:${current_password}" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d "[{\"type\":\"setPassword\",\"password\":\"${hashed_password}\"}]" 2>&1)
|
||||
|
||||
http_code=$(echo "$response" | tail -n 1)
|
||||
response=$(echo "$response" | sed '$d')
|
||||
|
||||
if [ "$http_code" = "200" ] || [ "$http_code" = "204" ]; then
|
||||
return 0
|
||||
else
|
||||
log_error "Password update failed with HTTP $http_code"
|
||||
log_error "Response: $response"
|
||||
return 1
|
||||
fi
|
||||
}
|
||||
|
||||
# Create domains from JSON array
|
||||
# Args: $1 = password, $2 = domains JSON array
|
||||
create_domains() {
|
||||
|
||||
Reference in New Issue
Block a user