mirror of
https://github.com/community-scripts/ProxmoxVE.git
synced 2026-08-14 16:46:14 +02:00
Compare commits
2 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| 2d95033255 | |||
| a5a25c2471 |
+63
@@ -0,0 +1,63 @@
|
||||
#!/usr/bin/env bash
|
||||
source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
|
||||
# Copyright (c) 2021-2026 community-scripts ORG
|
||||
# Author: MickLesk (CanbiZ)
|
||||
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
||||
# Source: https://github.com/fleetdm/fleet
|
||||
|
||||
APP="Fleet"
|
||||
var_tags="${var_tags:-monitoring;device-management;security}"
|
||||
var_cpu="${var_cpu:-2}"
|
||||
var_ram="${var_ram:-2048}"
|
||||
var_disk="${var_disk:-8}"
|
||||
var_os="${var_os:-ubuntu}"
|
||||
var_version="${var_version:-24.04}"
|
||||
#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
|
||||
var_unprivileged="${var_unprivileged:-1}"
|
||||
|
||||
header_info "$APP"
|
||||
variables
|
||||
color
|
||||
catch_errors
|
||||
|
||||
function update_script() {
|
||||
header_info
|
||||
check_container_storage
|
||||
check_container_resources
|
||||
|
||||
if [[ ! -f /opt/fleet/fleet ]]; then
|
||||
msg_error "No ${APP} Installation Found!"
|
||||
exit
|
||||
fi
|
||||
|
||||
if check_for_gh_release "fleet" "fleetdm/fleet"; then
|
||||
msg_info "Stopping Service"
|
||||
systemctl stop fleet
|
||||
msg_ok "Stopped Service"
|
||||
|
||||
fetch_and_deploy_gh_release "fleet" "fleetdm/fleet" "prebuild" "latest" "/opt/fleet" "fleet_v*_linux.tar.gz"
|
||||
chmod +x /opt/fleet/fleet
|
||||
|
||||
msg_info "Running Database Migrations"
|
||||
set -a && source /opt/fleet/.env && set +a
|
||||
$STD /opt/fleet/fleet prepare db --no-prompt
|
||||
msg_ok "Ran Database Migrations"
|
||||
|
||||
msg_info "Starting Service"
|
||||
systemctl start fleet
|
||||
msg_ok "Started Service"
|
||||
msg_ok "Updated successfully!"
|
||||
fi
|
||||
exit
|
||||
}
|
||||
|
||||
start
|
||||
build_container
|
||||
description
|
||||
|
||||
msg_ok "Completed Successfully!\n"
|
||||
echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
|
||||
echo -e "${INFO}${YW}Access it using the following URL:${CL}"
|
||||
echo -e "${GATEWAY}${BGN}http://${IP}:8080${CL}"
|
||||
echo -e "${INFO}${YW} Admin Email:${CL} ${BGN}admin@fleet.local${CL}"
|
||||
echo -e "${INFO}${YW} Admin Password:${CL} ${BGN}Check inside the container: cat /opt/fleet/.env${CL}"
|
||||
@@ -1,64 +0,0 @@
|
||||
#!/usr/bin/env bash
|
||||
source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
|
||||
# Copyright (c) 2021-2026 community-scripts ORG
|
||||
# Author: MickLesk (CanbiZ) | Co-Authors: yusing
|
||||
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
||||
# Source: https://github.com/yusing/godoxy
|
||||
|
||||
APP="GoDoxy"
|
||||
var_tags="${var_tags:-reverse-proxy;webserver;network}"
|
||||
var_cpu="${var_cpu:-1}"
|
||||
var_ram="${var_ram:-512}"
|
||||
var_disk="${var_disk:-2}"
|
||||
var_os="${var_os:-debian}"
|
||||
var_version="${var_version:-13}"
|
||||
var_arm64="${var_arm64:-yes}"
|
||||
var_unprivileged="${var_unprivileged:-1}"
|
||||
|
||||
header_info "$APP"
|
||||
variables
|
||||
color
|
||||
catch_errors
|
||||
|
||||
function update_script() {
|
||||
header_info
|
||||
check_container_storage
|
||||
check_container_resources
|
||||
|
||||
if [[ ! -f /opt/godoxy/godoxy ]]; then
|
||||
msg_error "No ${APP} Installation Found!"
|
||||
exit
|
||||
fi
|
||||
|
||||
if check_for_gh_release "godoxy" "yusing/godoxy"; then
|
||||
msg_info "Stopping Service"
|
||||
systemctl stop godoxy
|
||||
msg_ok "Stopped Service"
|
||||
|
||||
create_backup \
|
||||
/opt/godoxy/config \
|
||||
/opt/godoxy/data \
|
||||
/opt/godoxy/error_pages \
|
||||
/etc/godoxy.env \
|
||||
/etc/ssl/godoxy
|
||||
|
||||
CLEAN_INSTALL=1 fetch_and_deploy_gh_release "godoxy" "yusing/godoxy" "singlefile" "latest" "/opt/godoxy" "godoxy-linux-$(arch_resolve)"
|
||||
restore_backup
|
||||
|
||||
msg_info "Starting Service"
|
||||
systemctl start godoxy
|
||||
msg_ok "Started Service"
|
||||
msg_ok "Updated successfully!"
|
||||
fi
|
||||
exit
|
||||
}
|
||||
|
||||
start
|
||||
build_container
|
||||
description
|
||||
|
||||
msg_ok "Completed Successfully!\n"
|
||||
echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
|
||||
echo -e "${INFO}${YW}Access it using the following URL:${CL}"
|
||||
echo -e "${GATEWAY}${BGN}https://${IP}${CL}"
|
||||
echo -e "${INFO}${YW}Login as admin; the generated password is stored in /etc/godoxy.env.${CL}"
|
||||
@@ -0,0 +1,6 @@
|
||||
________ __
|
||||
/ ____/ /__ ___ / /_
|
||||
/ /_ / / _ \/ _ \/ __/
|
||||
/ __/ / / __/ __/ /_
|
||||
/_/ /_/\___/\___/\__/
|
||||
|
||||
@@ -1,6 +0,0 @@
|
||||
______ ____
|
||||
/ ____/___ / __ \____ _ ____ __
|
||||
/ / __/ __ \/ / / / __ \| |/_/ / / /
|
||||
/ /_/ / /_/ / /_/ / /_/ /> </ /_/ /
|
||||
\____/\____/_____/\____/_/|_|\__, /
|
||||
/____/
|
||||
@@ -0,0 +1,93 @@
|
||||
#!/usr/bin/env bash
|
||||
|
||||
# Copyright (c) 2021-2026 community-scripts ORG
|
||||
# Author: MickLesk (CanbiZ)
|
||||
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
||||
# Source: https://github.com/fleetdm/fleet
|
||||
|
||||
source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
|
||||
color
|
||||
verb_ip6
|
||||
catch_errors
|
||||
setting_up_container
|
||||
network_check
|
||||
update_os
|
||||
|
||||
msg_info "Installing Dependencies"
|
||||
$STD apt install -y redis-server mysql-server
|
||||
msg_ok "Installed Dependencies"
|
||||
|
||||
MYSQL_DB_NAME="fleet" MYSQL_DB_USER="fleet" setup_mysql_db
|
||||
fetch_and_deploy_gh_release "fleet" "fleetdm/fleet" "prebuild" "latest" "/opt/fleet" "fleet_v*_linux.tar.gz"
|
||||
|
||||
msg_info "Configuring Application"
|
||||
chmod +x /opt/fleet/fleet
|
||||
PRIVATE_KEY=$(openssl rand -hex 32)
|
||||
cat <<EOF >/opt/fleet/.env
|
||||
FLEET_MYSQL_ADDRESS=127.0.0.1:3306
|
||||
FLEET_MYSQL_DATABASE=fleet
|
||||
FLEET_MYSQL_USERNAME=fleet
|
||||
FLEET_MYSQL_PASSWORD=${MYSQL_DB_PASS}
|
||||
FLEET_SERVER_ADDRESS=0.0.0.0:8080
|
||||
FLEET_SERVER_TLS=false
|
||||
FLEET_SERVER_PRIVATE_KEY=${PRIVATE_KEY}
|
||||
FLEET_REDIS_ADDRESS=127.0.0.1:6379
|
||||
FLEET_LOGGING_JSON=true
|
||||
EOF
|
||||
msg_ok "Configured Application"
|
||||
|
||||
msg_info "Running Database Migrations"
|
||||
set -a && source /opt/fleet/.env && set +a
|
||||
$STD /opt/fleet/fleet prepare db --no-prompt
|
||||
msg_ok "Ran Database Migrations"
|
||||
|
||||
msg_info "Creating Service"
|
||||
cat <<EOF >/etc/systemd/system/fleet.service
|
||||
[Unit]
|
||||
Description=Fleet
|
||||
After=network.target mysql.service redis-server.service
|
||||
Requires=mysql.service redis-server.service
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=root
|
||||
WorkingDirectory=/opt/fleet
|
||||
EnvironmentFile=/opt/fleet/.env
|
||||
ExecStart=/opt/fleet/fleet serve
|
||||
Restart=on-failure
|
||||
RestartSec=5
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
systemctl enable -q --now fleet redis-server
|
||||
msg_ok "Created Service"
|
||||
|
||||
msg_info "Initializing Fleet"
|
||||
FLEET_ADMIN_EMAIL="admin@fleet.local"
|
||||
FLEET_ADMIN_PASS="$(openssl rand -hex 8)1!"
|
||||
ELAPSED=0
|
||||
until curl -sf "http://127.0.0.1:8080/healthz" >/dev/null 2>&1; do
|
||||
sleep 2
|
||||
ELAPSED=$((ELAPSED + 2))
|
||||
[[ $ELAPSED -ge 60 ]] && break
|
||||
done
|
||||
SETUP_RESPONSE=$(curl -s -X POST "http://127.0.0.1:8080/api/v1/setup" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d "{\"admin\":{\"admin\":true,\"email\":\"${FLEET_ADMIN_EMAIL}\",\"name\":\"Admin\",\"password\":\"${FLEET_ADMIN_PASS}\"},\"org_info\":{\"org_name\":\"Fleet\",\"org_logo_url\":\"\"},\"server_url\":\"http://127.0.0.1:8080\"}")
|
||||
FLEET_TOKEN=$(echo "${SETUP_RESPONSE}" | grep -o '"token":"[^"]*"' | cut -d'"' -f4) || true
|
||||
if [[ -n "${FLEET_TOKEN}" ]]; then
|
||||
curl -s -X PATCH "http://127.0.0.1:8080/api/latest/fleet/config" \
|
||||
-H "Content-Type: application/json" \
|
||||
-H "Authorization: Bearer ${FLEET_TOKEN}" \
|
||||
-d "{\"server_settings\":{\"server_url\":\"http://${LOCAL_IP}:8080\"}}" >/dev/null
|
||||
fi
|
||||
cat <<EOF >>/opt/fleet/.env
|
||||
FLEET_ADMIN_EMAIL=${FLEET_ADMIN_EMAIL}
|
||||
FLEET_ADMIN_PASSWORD=${FLEET_ADMIN_PASS}
|
||||
EOF
|
||||
msg_ok "Initialized Fleet"
|
||||
|
||||
motd_ssh
|
||||
customize
|
||||
cleanup_lxc
|
||||
@@ -1,88 +0,0 @@
|
||||
#!/usr/bin/env bash
|
||||
|
||||
# Copyright (c) 2021-2026 community-scripts ORG
|
||||
# Author: MickLesk (CanbiZ)
|
||||
# Co-Authors: yusing
|
||||
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
||||
# Source: https://github.com/yusing/godoxy
|
||||
|
||||
source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
|
||||
color
|
||||
verb_ip6
|
||||
catch_errors
|
||||
setting_up_container
|
||||
network_check
|
||||
update_os
|
||||
|
||||
fetch_and_deploy_gh_release "godoxy" "yusing/godoxy" "singlefile" "latest" "/opt/godoxy" "godoxy-linux-$(arch_resolve)"
|
||||
|
||||
msg_info "Generating Self-Signed Certificate"
|
||||
create_self_signed_cert "godoxy"
|
||||
msg_ok "Generated Self-Signed Certificate"
|
||||
|
||||
msg_info "Configuring GoDoxy"
|
||||
mkdir -p \
|
||||
/opt/godoxy/config/middlewares \
|
||||
/opt/godoxy/data \
|
||||
/opt/godoxy/error_pages
|
||||
|
||||
cat <<EOF >/opt/godoxy/config/config.yml
|
||||
autocert:
|
||||
provider: local
|
||||
cert_path: /etc/ssl/godoxy/godoxy.crt
|
||||
key_path: /etc/ssl/godoxy/godoxy.key
|
||||
|
||||
providers:
|
||||
include:
|
||||
- routes.yml
|
||||
|
||||
webui:
|
||||
aliases:
|
||||
- "${LOCAL_IP}"
|
||||
EOF
|
||||
|
||||
cat <<'EOF' >/opt/godoxy/config/routes.yml
|
||||
{}
|
||||
EOF
|
||||
|
||||
cat <<EOF >/etc/godoxy.env
|
||||
GODOXY_API_USER="admin"
|
||||
GODOXY_API_PASSWORD="$(openssl rand -hex 16)"
|
||||
GODOXY_API_JWT_SECRET="$(openssl rand -base64 32)"
|
||||
EOF
|
||||
chmod 600 /etc/godoxy.env
|
||||
msg_ok "Configured GoDoxy"
|
||||
|
||||
msg_info "Creating Service"
|
||||
cat <<'EOF' >/etc/systemd/system/godoxy.service
|
||||
[Unit]
|
||||
Description=GoDoxy Reverse Proxy
|
||||
Wants=network-online.target
|
||||
After=network-online.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=root
|
||||
Group=root
|
||||
WorkingDirectory=/opt/godoxy
|
||||
EnvironmentFile=/etc/godoxy.env
|
||||
ExecStart=/opt/godoxy/godoxy
|
||||
Restart=on-failure
|
||||
RestartSec=5
|
||||
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
|
||||
NoNewPrivileges=true
|
||||
PrivateTmp=true
|
||||
ProtectHome=true
|
||||
ProtectSystem=full
|
||||
ReadWritePaths=/opt/godoxy /etc/ssl/godoxy
|
||||
UMask=0077
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
systemctl enable -q --now godoxy
|
||||
msg_ok "Created Service"
|
||||
|
||||
motd_ssh
|
||||
customize
|
||||
cleanup_lxc
|
||||
Reference in New Issue
Block a user