Plugin triggers

Plugin triggers (formerly pluginhooks) are a good way to jack into existing Dokku infrastructure. You can use them to modify the output of various Dokku commands or override internal configuration.

Plugin triggers are simply scripts that are executed by the system. You can use any language you want, so long as the script:

Is executable
Has the proper language requirements installed

For instance, if you wanted to write a plugin trigger in PHP, you would need to have php installed and available on the CLI prior to plugin trigger invocation.

The following is an example for the nginx-hostname plugin trigger. It reverses the hostname that is provided to nginx during deploys. If you created an executable file named nginx-hostname with the following code in your plugin trigger, it would be invoked by Dokku during the normal app deployment process:

#!/usr/bin/env bash
set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

APP="$1"; SUBDOMAIN="$2"; VHOST="$3"

NEW_SUBDOMAIN=`echo $SUBDOMAIN | rev`
echo "$NEW_SUBDOMAIN.$VHOST"

Available plugin triggers

There are a number of plugin-related triggers. These can be optionally implemented by plugins and allow integration into the standard Dokku setup/teardown process.

The following plugin triggers describe those available to a Dokku installation. As well, there is an example for each trigger that you can use as templates for your own plugin development.

Info

The example plugin trigger code is not guaranteed to be implemented as in within dokkku, and are merely simplified examples. Please look at the Dokku source for larger, more in-depth examples.

`post-config-update`

Description: Allows you to get notified when one or more configs is added or removed. Action can be set or unset
Invoked by: dokku config:set, dokku config:unset
Arguments: $APP set|unset key1=VALUE1 key2=VALUE2
Example:

#!/usr/bin/env bash

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

# TODO

`bind-external-ip`

Description: Allows you to disable binding to the external box ip
Invoked by: dokku deploy
Arguments: $APP
Example:

#!/usr/bin/env bash
# Force always binding to the docker ip, no matter
# what the settings are for a given app.

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

echo false

`check-deploy`

Description: Allows you to run checks on a deploy before Dokku allows the container to handle requests.
Invoked by: dokku deploy
Arguments: $APP $CONTAINER_ID $PROC_TYPE $PORT $IP
Example:

#!/usr/bin/env bash
# Disables deploys of containers based on whether the
# `DOKKU_DISABLE_DEPLOY` env var is set to `true` for an app

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
source "$PLUGIN_AVAILABLE_PATH/config/functions"

APP="$1"; CONTAINERID="$2"; PROC_TYPE="$3"; PORT="$4" ; IP="$5"

eval "$(config_export app $APP)"
DOKKU_DISABLE_DEPLOY="${DOKKU_DISABLE_DEPLOY:-false}"

if [[ "$DOKKU_DISABLE_DEPLOY" = "true" ]]; then
  echo -e "\033[31m\033[1mDeploys disabled, sorry.\033[0m"
  exit 1
fi

`comands help` and `commands <PLUGIN_NAME>:help`

Description: Your plugin should implement a help command in your commands file to take advantage of this plugin trigger. commands help is used by dokku help to aggregate all plugins abbreviated help output. Implementing <PLUGIN_NAME>:help in your commands file gives users looking for help, a more detailed output. 'commands help' must be implemented inside the commands plugin file. It's recommended that PLUGIN_NAME:help be added to the commands file to ensure consistency among community plugins and give you a new avenue to share rich help content with your user.
Invoked by: dokku help and commands <PLUGIN_NAME>:help
Arguments: None
Example:

#!/usr/bin/env bash
# Outputs help for the derp plugin

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

case "$1" in
  help | hello:help)
    help_content_func () {
      declare desc="return help_content string"
      cat<<help_content
    hello <app>, Says "Hello <app>"
    hello:world, Says "Hello world"
help_content
    }

    if [[ $1 = "hello:help" ]] ; then
        echo -e 'Usage: dokku hello[:world] [<app>]'
        echo ''
        echo 'Say Hello World.'
        echo ''
        echo 'Example:'
        echo ''
        echo '$ dokku hello:world'
        echo 'Hello world'
        echo ''
        echo 'Additional commands:'
        help_content_func | sort | column -c2 -t -s,
    else
        help_content_func
    fi
    ;;

  *)
    exit $DOKKU_NOT_IMPLEMENTED_EXIT
    ;;

esac

`dependencies`

Description: Used to install system-level dependencies. Invoked by plugin:install-dependencies.
Invoked by: dokku plugin:install-dependencies
Arguments: None
Example:

#!/usr/bin/env bash
# Installs nginx for the current plugin
# Supports both opensuse and ubuntu

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

export DEBIAN_FRONTEND=noninteractive

case "$DOKKU_DISTRO" in
  debian|ubuntu)
    apt-get install --force-yes -qq -y nginx
    ;;

  opensuse)
    zypper -q in -y nginx
    ;;
esac

`deployed-app-image-tag`

Description: Used to manage the tag of the image being deployed. Useful for deploying a specific version of an image, or when deploying from an external registry
Invoked by: internal function dokku_deploy_cmd() (deploy phase)
Arguments: $APP
Example:

#!/usr/bin/env bash

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

# customize the tag version
echo 'not-latest'

`deployed-app-image-repo`

Description: Used to manage the full repo of the image being deployed. Useful for deploying from an external registry where the repository name is not dokku/$APP
Invoked by: internal function dokku_deploy_cmd() (deploy phase)
Arguments: $APP
Example:

#!/usr/bin/env bash

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

APP="$1"
# change the repo from dokku/APP to dokkupaas/APP
echo "dokkupaas/$APP"

`deployed-app-repository`

Description: Used to manage the remote repository of the image being deployed.
Invoked by: internal function dokku_deploy_cmd() (deploy phase)
Arguments: $APP
Example:

#!/usr/bin/env bash

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

echo 'derp.dkr.ecr.us-east-1.amazonaws.com'

`docker-args-build`

Description:
Invoked by: internal function dokku_build() (build phase)
Arguments: $APP $IMAGE_SOURCE_TYPE
Example:

#!/usr/bin/env bash
# Sets a docker build-arg called CACHEBUST which can be used
# to bust cache at any arbitrary point in a Dockerfile build
set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

cache-bust-build-arg() {
  declare desc="dockerfile cache busting plugin trigger"
  local STDIN=$(cat)
  local APP="$1" IMAGE_SOURCE_TYPE="$2"
  local output=""

  if [[ "$IMAGE_SOURCE_TYPE" == "dockerfile" ]]; then
    output=" --build-arg CACHEBUST=$(date +%s)"
  fi
  echo -n "$STDIN$output"
}

cache-bust-build-arg "$@"

`docker-args-deploy`

Description:
Invoked by: dokku deploy
Arguments: $APP $IMAGE_TAG
Example:

#!/usr/bin/env bash

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
APP="$1"; IMAGE_TAG="$2"; IMAGE=$(get_app_image_name $APP $IMAGE_TAG)
verify_app_name "$APP"

# TODO

`docker-args-run`

Description:
Invoked by: dokku run
Arguments: $APP $IMAGE_TAG
Example:

#!/usr/bin/env bash

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
APP="$1"; IMAGE_TAG="$2"; IMAGE=$(get_app_image_name $APP $IMAGE_TAG)
verify_app_name "$APP"

# TODO

`git-post-pull`

Description:
Invoked by: dokku git-upload-pack
Arguments: $APP
Example:

#!/usr/bin/env bash

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

# TODO

`git-pre-pull`

Description:
Invoked by: dokku git-upload-pack
Arguments: $APP
Example:

#!/usr/bin/env bash

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

# TODO

`install`

Description: Used to setup any files/configuration for a plugin.
Invoked by: dokku plugin:install.
Arguments: None
Example:

#!/usr/bin/env bash
# Sets the hostname of the Dokku server
# based on the output of `hostname -f`

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

if [[ ! -f  "$DOKKU_ROOT/HOSTNAME" ]]; then
  hostname -f > $DOKKU_ROOT/HOSTNAME
fi

`nginx-hostname`

Description: Allows you to customize the hostname for a given application.
Invoked by: dokku domains:setup
Arguments: $APP $SUBDOMAIN $VHOST
Example:

#!/usr/bin/env bash
# Reverses the hostname for the application

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

APP="$1"; SUBDOMAIN="$2"; VHOST="$3"

NEW_SUBDOMAIN=`echo $SUBDOMAIN | rev`
echo "$NEW_SUBDOMAIN.$VHOST"

`nginx-pre-reload`

Description: Run before nginx reloads hosts
Invoked by: dokku nginx:build-config
Arguments: $APP $INTERNAL_PORT $INTERNAL_IP_ADDRESS
Example:

#!/usr/bin/env bash
# Runs a check against all nginx conf files
# to ensure they are valid

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

nginx -t

`post-build-buildpack`

Description: Allows you to run commands after the build image is create for a given app. Only applies to applications using buildpacks.
Invoked by: internal function dokku_build() (build phase)
Arguments: $APP
Example:

#!/usr/bin/env bash

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

# TODO

`post-build-dockerfile`

Description: Allows you to run commands after the build image is create for a given app. Only applies to applications using a dockerfile.
Invoked by: internal function dokku_build() (build phase)
Arguments: $APP
Example:

#!/usr/bin/env bash

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

# TODO

`post-create`

Description: Can be used to run commands after an application is created.
Invoked by: dokku apps:create
Arguments: $APP
Example:

#!/usr/bin/env bash
# Runs a command to ensure that an app
# has a postgres database when it is starting

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

APP="$1";
POSTGRES="$1"

dokku postgres:create $POSTGRES
dokku postgres:link $POSTGRES $APP

`post-delete`

Description: Can be used to run commands after an application is deleted.
Invoked by: dokku apps:destroy
Arguments: $APP $IMAGE_TAG
Example:

#!/usr/bin/env bash
# Runs a command to ensure that an app's
# postgres installation is removed

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

APP="$1";

dokku postgres:destroy $APP

`post-deploy`

Description: Allows running of commands after an application's processes have been scaled up, but before old containers are torn down. Dokku core currently uses this to switch traffic on nginx.
Invoked by: dokku deploy
Arguments: $APP $INTERNAL_PORT $INTERNAL_IP_ADDRESS $IMAGE_TAG
Example:

#!/usr/bin/env bash
# Notify an external service that a successful deploy has occurred.

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

curl "http://httpstat.us/200"

`post-domains-update`

Description: Allows you to run commands once the domain for an application has been updated. It also sends in the command that has been used. This can be "add", "clear" or "remove". The third argument will be the optional list of domains
Invoked by: dokku domains:add, dokku domains:clear, dokku domains:remove
Arguments: $APP action name domains
Example:

#!/usr/bin/env bash
# Reloads haproxy for our imaginary haproxy plugin
# that replaces the nginx-vhosts plugin

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

sudo service haproxy reload

`post-proxy-ports-update`

Description: Allows you to run commands once the proxy port mappings for an application have been updated. It also sends the invoking command. This can be "add", "clear" or "remove".
Invoked by: dokku proxy:ports-add, dokku proxy:ports-clear, dokku proxy:ports-remove
Arguments: $APP action name
Example:

#!/usr/bin/env bash
# Rebuilds haproxy config for our imaginary haproxy plugin
# that replaces the nginx-vhosts plugin

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
source "$PLUGIN_AVAILABLE_PATH/haproxy/functions"
APP="$1"; verify_app_name "$APP"

haproxy-build-config "$APP"

`post-release-buildpack`

Description: Allows you to run commands after environment variables are set for the release step of the deploy. Only applies to applications using buildpacks.
Invoked by: internal function dokku_release() (release phase)
Arguments: $APP $IMAGE_TAG
Example:

#!/usr/bin/env bash
# Installs a package specified by the `CONTAINER_PACKAGE` env var

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
APP="$1"; IMAGE_TAG="$2"; IMAGE=$(get_app_image_name $APP $IMAGE_TAG)
verify_app_name "$APP"

dokku_log_info1 "Installing $CONTAINER_PACKAGE..."

CMD="cat > gm && \
  dpkg -s CONTAINER_PACKAGE > /dev/null 2>&1 || \
  (apt-get update && apt-get install -y CONTAINER_PACKAGE && apt-get clean)"

ID=$(docker run $DOKKU_GLOBAL_RUN_ARGS -i -a stdin $IMAGE /bin/bash -c "$CMD")
test $(docker wait $ID) -eq 0
docker commit $ID $IMAGE > /dev/null

`post-release-dockerfile`

Description: Allows you to run commands after environment variables are set for the release step of the deploy. Only applies to applications using a dockerfile.
Invoked by: internal function dokku_release() (release phase)
Arguments: $APP $IMAGE_TAG
Example:

#!/usr/bin/env bash

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
APP="$1"; IMAGE_TAG="$2"; IMAGE=$(get_app_image_name $APP $IMAGE_TAG)
verify_app_name "$APP"

# TODO

`post-stop`

Description: Can be used to run commands after an application is manually stopped
Invoked by: dokku ps:stop
Arguments: $APP
Example:

#!/usr/bin/env bash
# Marks an application as manually stopped

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

APP="$1";

dokku config:set --no-restart $APP MANUALLY_STOPPED=1

`pre-build-buildpack`

Description: Allows you to run commands before the build image is created for a given app. For instance, this can be useful to add env vars to your container. Only applies to applications using buildpacks.
Invoked by: internal function dokku_build() (build phase)
Arguments: $APP
Example:

#!/usr/bin/env bash

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

# TODO

`pre-build-dockerfile`

Description: Allows you to run commands before the build image is created for a given app. For instance, this can be useful to add env vars to your container. Only applies to applications using a dockerfile.
Invoked by: internal function dokku_build() (build phase)
Arguments: $APP
Example:

#!/usr/bin/env bash

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

# TODO

`pre-delete`

Description: Can be used to run commands before an app is deleted.
Invoked by: dokku apps:destroy
Arguments: $APP $IMAGE_TAG
Example:

#!/usr/bin/env bash
# Clears out the gulp asset build cache for applications

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"

APP="$1"; GULP_CACHE_DIR="$DOKKU_ROOT/$APP/gulp"; IMAGE=$(get_app_image_name $APP $IMAGE_TAG)
verify_app_name "$APP"

if [[ -d $GULP_CACHE_DIR ]]; then
  docker run $DOKKU_GLOBAL_RUN_ARGS --rm -v "$GULP_CACHE_DIR:/gulp" "$IMAGE" find /gulp -depth -mindepth 1 -maxdepth 1 -exec rm -Rf {} \; || true
fi

`pre-deploy`

Description: Allows the running of code before the application's processes are scaled up and after the docker images are prepared.
Invoked by: dokku deploy
Arguments: $APP $IMAGE_TAG
Example:

#!/usr/bin/env bash
# Runs gulp in our container

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
APP="$1"; IMAGE_TAG="$2"; IMAGE=$(get_app_image_name $APP $IMAGE_TAG)
verify_app_name "$APP"

dokku_log_info1 "Running gulp"
id=$(docker run $DOKKU_GLOBAL_RUN_ARGS -d $IMAGE /bin/bash -c "cd /app && gulp default")
test $(docker wait $id) -eq 0
docker commit $id $IMAGE > /dev/null
dokku_log_info1 "Building UI Complete"

`pre-receive-app`

Description: Allows you to customize the contents of an application directory before they are processed for deployment. The IMAGE_SOURCE_TYPE can be any of [herokuish, dockerfile]
Invoked by: dokku git-hook, dokku tar-build-locked
Arguments: $APP $IMAGE_SOURCE_TYPE $TMP_WORK_DIR $REV
Example:

#!/usr/bin/env bash
# Adds a file called `dokku-is-awesome` to the repository
# the contents will be the application name

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

APP="$1"; IMAGE_SOURCE_TYPE="$2"; TMP_WORK_DIR="$3"; REV="$4"

echo "$APP" > "$TMP_WORK_DIR/dokku-is-awesome"

`pre-release-buildpack`

Description: Allows you to run commands before environment variables are set for the release step of the deploy. Only applies to applications using buildpacks.
Invoked by: internal function dokku_release() (release phase)
Arguments: $APP $IMAGE_TAG
Example:

#!/usr/bin/env bash
# Installs the graphicsmagick package into the container

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
APP="$1"; IMAGE_TAG="$2"; IMAGE=$(get_app_image_name $APP $IMAGE_TAG)
verify_app_name "$APP"

dokku_log_info1 "Installing GraphicsMagick..."

CMD="cat > gm && \
  dpkg -s graphicsmagick > /dev/null 2>&1 || \
  (apt-get update && apt-get install -y graphicsmagick && apt-get clean)"

ID=$(docker run $DOKKU_GLOBAL_RUN_ARGS -i -a stdin $IMAGE /bin/bash -c "$CMD")
test $(docker wait $ID) -eq 0
docker commit $ID $IMAGE > /dev/null

`pre-release-dockerfile`

Description: Allows you to run commands before environment variables are set for the release step of the deploy. Only applies to applications using a dockerfile.
Invoked by: internal function dokku_release() (release phase)
Arguments: $APP $IMAGE_TAG
Example:

#!/usr/bin/env bash

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
APP="$1"; IMAGE_TAG="$2"; IMAGE=$(get_app_image_name $APP $IMAGE_TAG)
verify_app_name "$APP"

# TODO

`pre-disable-vhost`

Description: Allows you to run commands before the VHOST feature is disabled
Invoked by: dokku domains:disable
Arguments: $APP
Example:

#!/usr/bin/env bash

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
APP="$1"; verify_app_name "$APP"

# TODO

`pre-enable-vhost`

Description: Allows you to run commands before the VHOST feature is enabled
Invoked by: dokku domains:enable
Arguments: $APP
Example:

#!/usr/bin/env bash

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
APP="$1"; verify_app_name "$APP"

# TODO

`post-certs-update`

Description: Allows you to run commands after a cert is added/updated
Invoked by: dokku certs:add, dokku certs:update
Arguments: $APP
Example:

#!/usr/bin/env bash

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
APP="$1"; verify_app_name "$APP"

# TODO

`post-certs-remove`

Description: Allows you to run commands after a cert is removed
Invoked by: dokku certs:remove
Arguments: $APP
Example:

#!/usr/bin/env bash

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
APP="$1"; verify_app_name "$APP"

# TODO

`receive-app`

Description: Allows you to customize what occurs when an app is received. Normally just triggers an application build.
Invoked by: dokku git-hook, dokku ps:rebuild
Arguments: $APP $REV ($REV may not be included in cases where a repository is not pushed)
Example:

#!/usr/bin/env bash
# For our imaginary mercurial plugin, triggers a rebuild

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

APP="$1"; REV="$2"

dokku hg-build $APP $REV

`receive-branch`

Description: Allows you to customize what occurs when a specific branch is received. Can be used to add support for specific branch names
Invoked by: dokku git-hook, dokku ps:rebuild
Arguments: $APP $REV $REFNAME
Example:

#!/bin/bash
# Gives Dokku the ability to support multiple branches for a given service
# Allowing you to have multiple staging environments on a per-branch basis

reference_app=$1
refname=$3
newrev=$2
APP=${refname/*\//}.$reference_app

if [[ ! -d "$DOKKU_ROOT/$APP" ]]; then
  REFERENCE_REPO="$DOKKU_ROOT/$reference_app
  git clone --bare --shared --reference "$REFERENCE_REPO" "$REFERENCE_REPO" "$DOKKU_ROOT/$APP" > /dev/null
fi
plugn trigger receive-app $APP $newrev

`retire-container-failed`

Description: Allows you to run commands if/when retiring old containers has failed
Invoked by: dokku deploy
Arguments: $APP
Example:

#!/usr/bin/env bash
# Send an email when a container failed to retire

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
APP="$1"; HOSTNAME=$(hostname -s)

mail -s "$APP containers on $HOSTNAME failed to retire" ops@example.com

`tags-create`

Description: Allows you to run commands once a tag for an application image has been added
Invoked by: dokku tags:create
Arguments: $APP $IMAGE_TAG
Example:

#!/usr/bin/env bash
# Upload an application image to docker hub

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
APP="$1"; IMAGE_TAG="$2"; IMAGE=$(get_app_image_name $APP $IMAGE_TAG)

IMAGE_ID=$(docker inspect --format '{{ .Id }}' $IMAGE)
docker tag -f $IMAGE_ID $DOCKER_HUB_USER/$APP:$IMAGE_TAG
docker push $DOCKER_HUB_USER/$APP:$IMAGE_TAG

`tags-destroy`

Description: Allows you to run commands once a tag for an application image has been removed
Invoked by: dokku tags:destroy
Arguments: $APP $IMAGE_TAG
Example:

#!/usr/bin/env bash
# Remove an image tag from docker hub

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
APP="$1"; IMAGE_TAG="$2"

some code to remove a docker hub tag because it's not implemented in the CLI....

`update`

Description: Can be used to run plugin updates on a regular interval. You can schedule the invoker in a cron-task to ensure your system gets regular updates.
Invoked by: dokku plugin:update.
Arguments: None
Example:

#!/usr/bin/env bash
# Update the herokuish image from git source

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

cd /root/dokku
sudo BUILD_STACK=true make install

`user-auth`

This is a special plugin trigger that is executed on every command run. As Dokku sometimes internally invokes the dokku command, special care should be taken to properly handle internal command redirects.

Note that the trigger should exit as follows:

0 to continue running as normal
1 to halt execution of the command

The SSH_USER is the original ssh user. If you are running remote commands, this user will typically be dokku, and as such should not be trusted when checking permissions. If you are connected via ssh as a different user who then invokes dokku, the value of this variable will be that user's name (root, myuser, etc.).

The SSH_NAME is the NAME variable set via the sshcommand acl-add command. If you have set a user via the dokku-installer, this value will be set to admin. For installs via debian package, this value may be default. For reference, the following command can be run as the root user to specify a specific NAME for a given ssh key:

sshcommand acl-add dokku NAME < $PATH_TO_SSH_KEY

Note that the NAME value is set at the first ssh key match. If an ssh key is set in the /home/dokku/.ssh/authorized_keys multiple times, the first match will decide the value.

Description: Allows you to deny access to a Dokku command by either ssh user or associated ssh-command NAME user.
Invoked by dokku
Arguments: $SSH_USER $SSH_NAME $DOKKU_COMMAND
Example:

#!/usr/bin/env bash
# Allow root/admin users to do everything
# Deny plugin access to default users
# Allow access to all other commands

set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x

SSH_USER=$1
SSH_NAME=$2
shift 2
[[ "$SSH_USER" == "root" ]] && exit 0
[[ "$SSH_NAME" == "admin" ]] && exit 0
[[ "$SSH_NAME" == "default" && $1 == plugin:* ]] && exit 1
exit 0

Plugin triggers

Available plugin triggers

post-config-update

bind-external-ip

check-deploy

comands help and commands <PLUGIN_NAME>:help

dependencies

deployed-app-image-tag

deployed-app-image-repo

deployed-app-repository

docker-args-build

docker-args-deploy

docker-args-run

git-post-pull

git-pre-pull

install

nginx-hostname

nginx-pre-reload

post-build-buildpack

post-build-dockerfile

post-create

post-delete

post-deploy

post-domains-update

post-proxy-ports-update

post-release-buildpack

post-release-dockerfile

post-stop

pre-build-buildpack

pre-build-dockerfile

pre-delete

pre-deploy

pre-receive-app

pre-release-buildpack

pre-release-dockerfile

pre-disable-vhost

pre-enable-vhost

post-certs-update

post-certs-remove

receive-app

receive-branch

retire-container-failed

tags-create

tags-destroy

update

user-auth