Added new upgrade port env var

Signed-off-by: Matt Bentley <mbentley@mbentley.net>

Author: mbentley

README.md

@@ -382,6 +382,7 @@ The Helm charts are published to [mbentley/omada-controller-helm](https://hub.do
 | `SSL_KEY_NAME` | `tls.key` | _any_ | Name of the private cert mounted to `/cert`; see [Custom Certificates](#custom-certificates) | >= `3.2` |
 | `TLS_1_11_ENABLED` | `false` | `true`, `false` | Re-enables TLS 1.0 & 1.1 if set to `true` | >= `4.1` |
 | `TZ` | `Etc/UTC` | _\<many\>_ | See [Time Zones](#time-zones) for more detail | >= `3.2` |
+| `UPGRADE_HTTPS_PORT` | `8043` | `1024`-`65535` | Dedicated HTTPS port for upgrades, separate from the main Controller port | >= `6.1` |
 
 Documentation on the ports used by the controller can be found in the [TP-Link FAQ](https://support.omadanetworks.com/us/document/13090/).
 

entrypoint-unified.sh

@@ -32,6 +32,7 @@ setup_environment() {
   PORT_TRANSFER_V2="${PORT_TRANSFER_V2:-29815}"
   PORT_RTTY="${PORT_RTTY:-29816}"
   PORT_DEVICE_MONITOR="${PORT_DEVICE_MONITOR:-29817}"
+  UPGRADE_HTTPS_PORT="${UPGRADE_HTTPS_PORT:-8043}"
 
   # EXTERNAL MONGODB
   MONGO_EXTERNAL="${MONGO_EXTERNAL:-false}"
@@ -91,7 +92,7 @@ print_timezone_info() {
 
 update_port_configuration() {
   # update stored ports when different of enviroment defined ports (works for numbers only)
-  for ELEM in MANAGE_HTTP_PORT MANAGE_HTTPS_PORT PORTAL_HTTP_PORT PORTAL_HTTPS_PORT PORT_ADOPT_V1 PORT_APP_DISCOVERY PORT_UPGRADE_V1 PORT_MANAGER_V1 PORT_MANAGER_V2 PORT_DISCOVERY PORT_TRANSFER_V2 PORT_RTTY PORT_DEVICE_MONITOR
+  for ELEM in MANAGE_HTTP_PORT MANAGE_HTTPS_PORT PORTAL_HTTP_PORT PORTAL_HTTPS_PORT PORT_ADOPT_V1 PORT_APP_DISCOVERY PORT_UPGRADE_V1 PORT_MANAGER_V1 PORT_MANAGER_V2 PORT_DISCOVERY PORT_TRANSFER_V2 PORT_RTTY PORT_DEVICE_MONITOR UPGRADE_HTTPS_PORT
   do
     # convert element to key name
     KEY="$(echo "${ELEM}" | tr '[:upper:]' '[:lower:]' | tr '_' '.')"
@@ -706,4 +707,4 @@ then
   main_rootless
 else
   main_root
-fi
+fi