patchmon: use fetch_and_deploy_gh_release for SCAP content

ct/godoxy.sh

@@ -1,64 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ) | Co-Authors: yusing
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/yusing/godoxy
-
-APP="GoDoxy"
-var_tags="${var_tags:-reverse-proxy;webserver;network}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-2}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /opt/godoxy/godoxy ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "godoxy" "yusing/godoxy"; then
-    msg_info "Stopping Service"
-    systemctl stop godoxy
-    msg_ok "Stopped Service"
-
-    create_backup \
-      /opt/godoxy/config \
-      /opt/godoxy/data \
-      /opt/godoxy/error_pages \
-      /etc/godoxy.env \
-      /etc/ssl/godoxy
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "godoxy" "yusing/godoxy" "singlefile" "latest" "/opt/godoxy" "godoxy-linux-$(arch_resolve)"
-    restore_backup
-
-    msg_info "Starting Service"
-    systemctl start godoxy
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}https://${IP}${CL}"
-echo -e "${INFO}${YW}Login as admin; the generated password is stored in /etc/godoxy.env.${CL}"

ct/headers/godoxy

@@ -1,6 +0,0 @@
-   ______      ____                  
-  / ____/___  / __ \____  _  ____  __
- / / __/ __ \/ / / / __ \| |/_/ / / /
-/ /_/ / /_/ / /_/ / /_/ />  </ /_/ / 
-\____/\____/_____/\____/_/|_|\__, /  
-                            /____/   

ct/patchmon.sh

@@ -9,7 +9,7 @@ APP="PatchMon"
 var_tags="${var_tags:-monitoring}"
 var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-4}"
+var_disk="${var_disk:-8}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
 var_arm64="${var_arm64:-yes}"
@@ -30,6 +30,8 @@ function update_script() {
     exit
   fi
 
+  CLEAN_INSTALL=1 fetch_and_deploy_gh_release "ssg-content" "ComplianceAsCode/content" "prebuild" "latest" "/opt/patchmon/ssg-content" "scap-security-guide-*.tar.gz"
+
   if check_for_gh_release "PatchMon" "PatchMon/PatchMon"; then
     msg_info "Stopping Service"
     systemctl stop patchmon-server

install/godoxy-install.sh

@@ -1,88 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# Co-Authors: yusing
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/yusing/godoxy
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-fetch_and_deploy_gh_release "godoxy" "yusing/godoxy" "singlefile" "latest" "/opt/godoxy" "godoxy-linux-$(arch_resolve)"
-
-msg_info "Generating Self-Signed Certificate"
-create_self_signed_cert "godoxy"
-msg_ok "Generated Self-Signed Certificate"
-
-msg_info "Configuring GoDoxy"
-mkdir -p \
-  /opt/godoxy/config/middlewares \
-  /opt/godoxy/data \
-  /opt/godoxy/error_pages
-
-cat <<EOF >/opt/godoxy/config/config.yml
-autocert:
-  provider: local
-  cert_path: /etc/ssl/godoxy/godoxy.crt
-  key_path: /etc/ssl/godoxy/godoxy.key
-
-providers:
-  include:
-    - routes.yml
-
-webui:
-  aliases:
-    - "${LOCAL_IP}"
-EOF
-
-cat <<'EOF' >/opt/godoxy/config/routes.yml
-{}
-EOF
-
-cat <<EOF >/etc/godoxy.env
-GODOXY_API_USER="admin"
-GODOXY_API_PASSWORD="$(openssl rand -hex 16)"
-GODOXY_API_JWT_SECRET="$(openssl rand -base64 32)"
-EOF
-chmod 600 /etc/godoxy.env
-msg_ok "Configured GoDoxy"
-
-msg_info "Creating Service"
-cat <<'EOF' >/etc/systemd/system/godoxy.service
-[Unit]
-Description=GoDoxy Reverse Proxy
-Wants=network-online.target
-After=network-online.target
-
-[Service]
-Type=simple
-User=root
-Group=root
-WorkingDirectory=/opt/godoxy
-EnvironmentFile=/etc/godoxy.env
-ExecStart=/opt/godoxy/godoxy
-Restart=on-failure
-RestartSec=5
-CapabilityBoundingSet=CAP_NET_BIND_SERVICE
-NoNewPrivileges=true
-PrivateTmp=true
-ProtectHome=true
-ProtectSystem=full
-ReadWritePaths=/opt/godoxy /etc/ssl/godoxy
-UMask=0077
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now godoxy
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

install/patchmon-install.sh

@@ -60,6 +60,7 @@ REDIS_PORT=6379
 # OIDC_ENFORCE_HTTPS=true
 
 AGENT_BINARIES_DIR=/opt/patchmon/agents
+SSG_CONTENT_DIR=/opt/patchmon/ssg-content
 EOF
 msg_ok "Configured PatchMon"
 
@@ -85,6 +86,8 @@ for arch in "${AGENT_NAME[@]}"; do
 done
 msg_ok "Fetched PatchMon agent binaries"
 
+fetch_and_deploy_gh_release "ssg-content" "ComplianceAsCode/content" "prebuild" "latest" "/opt/patchmon/ssg-content" "scap-security-guide-*.tar.gz"
+
 msg_info "Creating service"
 cat <<EOF >/etc/systemd/system/patchmon-server.service
 [Unit]