mirror of
https://github.com/community-scripts/ProxmoxVE.git
synced 2026-06-30 11:15:01 +02:00
Compare commits
4 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
 CanbiZ (MickLesk)
|
dcac3e0870 | ||
|
CanbiZ (MickLesk)
|
82e3fc0d2e | ||
|
CanbiZ (MickLesk)
|
151d021f15 | ||
|
push-app-to-main[bot]
|
2ab62bea16 |
@@ -489,28 +489,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
|
||||
|
||||
</details>
|
||||
|
||||
## 2026-06-29
|
||||
|
||||
### 🆕 New Scripts
|
||||
|
||||
- Koffan ([#15467](https://github.com/community-scripts/ProxmoxVE/pull/15467))
|
||||
- Etherpad ([#15468](https://github.com/community-scripts/ProxmoxVE/pull/15468))
|
||||
- Flame ([#15464](https://github.com/community-scripts/ProxmoxVE/pull/15464))
|
||||
|
||||
### 🚀 Updated Scripts
|
||||
|
||||
- chore(ct): sync snapotter defaults with PocketBase [@github-actions[bot]](https://github.com/github-actions[bot]) ([#15472](https://github.com/community-scripts/ProxmoxVE/pull/15472))
|
||||
|
||||
- #### 🐞 Bug Fixes
|
||||
|
||||
- feat: update nginx proxy manager to trixie [@asylumexp](https://github.com/asylumexp) ([#15457](https://github.com/community-scripts/ProxmoxVE/pull/15457))
|
||||
|
||||
### 💾 Core
|
||||
|
||||
- #### ✨ New Features
|
||||
|
||||
- [tools.func]: add edit_yaml_config function [@tremor021](https://github.com/tremor021) ([#15484](https://github.com/community-scripts/ProxmoxVE/pull/15484))
|
||||
|
||||
## 2026-06-28
|
||||
|
||||
### 🚀 Updated Scripts
|
||||
|
||||
@@ -1,65 +0,0 @@
|
||||
#!/usr/bin/env bash
|
||||
source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
|
||||
# Copyright (c) 2021-2026 community-scripts ORG
|
||||
# Author: John McLear (JohnMcLear)
|
||||
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
||||
# Source: https://etherpad.org
|
||||
|
||||
APP="Etherpad"
|
||||
var_tags="${var_tags:-docs;collaboration;editor}"
|
||||
var_cpu="${var_cpu:-2}"
|
||||
var_ram="${var_ram:-2048}"
|
||||
var_disk="${var_disk:-8}"
|
||||
var_os="${var_os:-debian}"
|
||||
var_version="${var_version:-13}"
|
||||
var_arm64="${var_arm64:-yes}"
|
||||
var_unprivileged="${var_unprivileged:-1}"
|
||||
|
||||
header_info "$APP"
|
||||
variables
|
||||
color
|
||||
catch_errors
|
||||
|
||||
function update_script() {
|
||||
header_info
|
||||
check_container_storage
|
||||
check_container_resources
|
||||
|
||||
if [[ ! -d /opt/etherpad-lite ]]; then
|
||||
msg_error "No ${APP} Installation Found!"
|
||||
exit
|
||||
fi
|
||||
|
||||
if check_for_gh_release "etherpad-lite" "ether/etherpad"; then
|
||||
msg_info "Stopping Service"
|
||||
systemctl stop etherpad
|
||||
msg_ok "Stopped Service"
|
||||
|
||||
create_backup /opt/etherpad-lite/.env /opt/etherpad-lite/APIKEY.txt /opt/etherpad-lite/settings.json
|
||||
CLEAN_INSTALL=1 fetch_and_deploy_gh_release "etherpad-lite" "ether/etherpad" "tarball"
|
||||
restore_backup
|
||||
|
||||
msg_info "Rebuilding Etherpad"
|
||||
export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
|
||||
$STD corepack enable
|
||||
cd /opt/etherpad-lite
|
||||
$STD pnpm install --frozen-lockfile
|
||||
$STD pnpm run build:etherpad
|
||||
msg_ok "Rebuilt Etherpad"
|
||||
|
||||
msg_info "Starting Service"
|
||||
systemctl start etherpad
|
||||
msg_ok "Started Service"
|
||||
msg_ok "Updated successfully!"
|
||||
fi
|
||||
exit
|
||||
}
|
||||
|
||||
start
|
||||
build_container
|
||||
description
|
||||
|
||||
msg_ok "Completed Successfully!\n"
|
||||
echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
|
||||
echo -e "${INFO}${YW} Access it using the following URL:${CL}"
|
||||
echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:9001${CL}"
|
||||
-69
@@ -1,69 +0,0 @@
|
||||
#!/usr/bin/env bash
|
||||
source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
|
||||
# Copyright (c) 2021-2026 community-scripts ORG
|
||||
# Author: CrazyWolf13
|
||||
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
||||
# Source: https://github.com/pawelmalak/flame
|
||||
|
||||
APP="Flame"
|
||||
var_tags="${var_tags:-dashboard;startpage}"
|
||||
var_cpu="${var_cpu:-2}"
|
||||
var_ram="${var_ram:-2048}"
|
||||
var_disk="${var_disk:-4}"
|
||||
var_os="${var_os:-debian}"
|
||||
var_version="${var_version:-13}"
|
||||
var_arm64="${var_arm64:-yes}"
|
||||
var_unprivileged="${var_unprivileged:-1}"
|
||||
|
||||
header_info "$APP"
|
||||
variables
|
||||
color
|
||||
catch_errors
|
||||
|
||||
function update_script() {
|
||||
header_info
|
||||
check_container_storage
|
||||
check_container_resources
|
||||
|
||||
if [[ ! -d /opt/flame ]]; then
|
||||
msg_error "No ${APP} Installation Found!"
|
||||
exit
|
||||
fi
|
||||
|
||||
if check_for_gh_release "flame" "pawelmalak/flame"; then
|
||||
msg_info "Stopping Service"
|
||||
systemctl stop flame
|
||||
msg_ok "Stopped Service"
|
||||
|
||||
create_backup /opt/flame/.env \
|
||||
/opt/flame/data
|
||||
CLEAN_INSTALL=1 fetch_and_deploy_gh_release "flame" "pawelmalak/flame" "tarball"
|
||||
restore_backup
|
||||
|
||||
msg_info "Rebuilding Application"
|
||||
cd /opt/flame
|
||||
mkdir -p data public
|
||||
$STD npm install --production
|
||||
cd /opt/flame/client
|
||||
$STD npm install --production
|
||||
$STD npm run build
|
||||
cd /opt/flame
|
||||
cp -r client/build/. public/
|
||||
msg_ok "Rebuilt Application"
|
||||
|
||||
msg_info "Starting Service"
|
||||
systemctl start flame
|
||||
msg_ok "Started Service"
|
||||
msg_ok "Updated successfully!"
|
||||
fi
|
||||
exit
|
||||
}
|
||||
|
||||
start
|
||||
build_container
|
||||
description
|
||||
|
||||
msg_ok "Completed Successfully!\n"
|
||||
echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
|
||||
echo -e "${INFO}${YW} Access it using the following URL:${CL}"
|
||||
echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:5005${CL}"
|
||||
@@ -1,6 +0,0 @@
|
||||
________ __ __
|
||||
/ ____/ /_/ /_ ___ _________ ____ _____/ /
|
||||
/ __/ / __/ __ \/ _ \/ ___/ __ \/ __ `/ __ /
|
||||
/ /___/ /_/ / / / __/ / / /_/ / /_/ / /_/ /
|
||||
/_____/\__/_/ /_/\___/_/ / .___/\__,_/\__,_/
|
||||
/_/
|
||||
@@ -1,6 +0,0 @@
|
||||
________
|
||||
/ ____/ /___ _____ ___ ___
|
||||
/ /_ / / __ `/ __ `__ \/ _ \
|
||||
/ __/ / / /_/ / / / / / / __/
|
||||
/_/ /_/\__,_/_/ /_/ /_/\___/
|
||||
|
||||
@@ -1,6 +0,0 @@
|
||||
__ __ ________
|
||||
/ //_/___ / __/ __/___ _____
|
||||
/ ,< / __ \/ /_/ /_/ __ `/ __ \
|
||||
/ /| / /_/ / __/ __/ /_/ / / / /
|
||||
/_/ |_\____/_/ /_/ \__,_/_/ /_/
|
||||
|
||||
@@ -0,0 +1,6 @@
|
||||
____ __ __
|
||||
/ __ \____ ______/ /____ __/ /___ _
|
||||
/ /_/ / __ `/ ___/ //_/ / / / / __ `/
|
||||
/ _, _/ /_/ / /__/ ,< / /_/ / / /_/ /
|
||||
/_/ |_|\__,_/\___/_/|_|\__,_/_/\__,_/
|
||||
|
||||
@@ -1,63 +0,0 @@
|
||||
#!/usr/bin/env bash
|
||||
source <(curl -s https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
|
||||
# Copyright (c) 2021-2026 community-scripts ORG
|
||||
# Author: (AminGholizad)
|
||||
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
||||
# Source: https://github.com/PanSalut/Koffan
|
||||
|
||||
APP="Koffan"
|
||||
var_tags="${var_tags:-productivity}"
|
||||
var_cpu="${var_cpu:-1}"
|
||||
var_ram="${var_ram:-1024}"
|
||||
var_disk="${var_disk:-4}"
|
||||
var_os="${var_os:-debian}"
|
||||
var_version="${var_version:-13}"
|
||||
var_arm64="${var_arm64:-yes}"
|
||||
var_arm64="${var_arm64:-no}"
|
||||
var_unprivileged="${var_unprivileged:-1}"
|
||||
|
||||
header_info "$APP"
|
||||
variables
|
||||
color
|
||||
catch_errors
|
||||
|
||||
function update_script() {
|
||||
header_info
|
||||
check_container_storage
|
||||
check_container_resources
|
||||
|
||||
if [[ ! -f /opt/koffan/koffan ]]; then
|
||||
msg_error "No ${APP} Installation Found!"
|
||||
exit
|
||||
fi
|
||||
|
||||
if check_for_gh_release "koffan" "PanSalut/Koffan"; then
|
||||
msg_info "Stopping Service"
|
||||
systemctl stop koffan
|
||||
msg_ok "Stopped Service"
|
||||
|
||||
create_backup /opt/koffan/data
|
||||
CLEAN_INSTALL=1 fetch_and_deploy_gh_release "koffan" "PanSalut/Koffan" "tarball"
|
||||
restore_backup
|
||||
|
||||
msg_info "Rebuilding Koffan"
|
||||
cd /opt/koffan
|
||||
$STD go build -o koffan main.go
|
||||
msg_ok "Rebuild Koffan"
|
||||
|
||||
msg_info "Starting Service"
|
||||
systemctl start koffan
|
||||
msg_ok "Started Service"
|
||||
msg_ok "Updated successfully!"
|
||||
fi
|
||||
exit
|
||||
}
|
||||
|
||||
start
|
||||
build_container
|
||||
description
|
||||
|
||||
msg_ok "Completed successfully!\n"
|
||||
echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
|
||||
echo -e "${INFO}${YW} Access it using the following URL:${CL}"
|
||||
echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"
|
||||
@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-2}"
|
||||
var_ram="${var_ram:-2048}"
|
||||
var_disk="${var_disk:-8}"
|
||||
var_os="${var_os:-debian}"
|
||||
var_version="${var_version:-13}"
|
||||
var_version="${var_version:-12}"
|
||||
var_arm64="${var_arm64:-yes}"
|
||||
var_unprivileged="${var_unprivileged:-1}"
|
||||
|
||||
@@ -60,9 +60,8 @@ function update_script() {
|
||||
fi
|
||||
$STD apt install -y build-essential "$pcre_pkg" libssl-dev zlib1g-dev
|
||||
|
||||
OPENRESTY_VERSION="1.29.2.5"
|
||||
if [[ "$(cat ~/.openresty 2>/dev/null)" != "$OPENRESTY_VERSION" ]]; then
|
||||
CLEAN_INSTALL=1 fetch_and_deploy_from_url "https://openresty.org/download/openresty-${OPENRESTY_VERSION}.tar.gz" "/opt/openresty"
|
||||
if check_for_gh_release "openresty" "openresty/openresty"; then
|
||||
CLEAN_INSTALL=1 fetch_and_deploy_gh_release "openresty" "openresty/openresty" "prebuild" "${CHECK_UPDATE_RELEASE}" "/opt/openresty" "openresty-*.tar.gz"
|
||||
|
||||
msg_info "Building OpenResty"
|
||||
cd /opt/openresty
|
||||
@@ -78,7 +77,6 @@ function update_script() {
|
||||
--with-stream_ssl_module
|
||||
$STD make -j"$(nproc)"
|
||||
$STD make install
|
||||
echo "${OPENRESTY_VERSION}" >~/.openresty
|
||||
rm -rf /opt/openresty
|
||||
cat <<'EOF' >/lib/systemd/system/openresty.service
|
||||
[Unit]
|
||||
|
||||
Executable
+81
@@ -0,0 +1,81 @@
|
||||
#!/usr/bin/env bash
|
||||
source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
|
||||
# Copyright (c) 2021-2026 community-scripts ORG
|
||||
# Author: gVNS (ggfevans)
|
||||
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
||||
# Source: https://github.com/RackulaLives/Rackula
|
||||
|
||||
APP="Rackula"
|
||||
var_tags="${var_tags:-homelab}"
|
||||
var_cpu="${var_cpu:-1}"
|
||||
var_ram="${var_ram:-512}"
|
||||
var_disk="${var_disk:-8}"
|
||||
var_os="${var_os:-debian}"
|
||||
var_version="${var_version:-13}"
|
||||
var_arm64="${var_arm64:-yes}"
|
||||
var_unprivileged="${var_unprivileged:-1}"
|
||||
|
||||
header_info "$APP"
|
||||
variables
|
||||
color
|
||||
catch_errors
|
||||
|
||||
function update_script() {
|
||||
header_info
|
||||
check_container_storage
|
||||
check_container_resources
|
||||
|
||||
if [[ ! -d /opt/rackula ]]; then
|
||||
msg_error "No ${APP} Installation Found!"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if check_for_gh_release "rackula" "RackulaLives/Rackula"; then
|
||||
msg_info "Stopping Services"
|
||||
systemctl stop rackula-api nginx
|
||||
msg_ok "Stopped Services"
|
||||
|
||||
create_backup /opt/rackula/data
|
||||
CLEAN_INSTALL=1 fetch_and_deploy_gh_release "rackula" "RackulaLives/Rackula" "prebuild" "latest" "/opt/rackula" "rackula-lxc-*.tar.gz"
|
||||
restore_backup
|
||||
|
||||
msg_info "Updating Configuration"
|
||||
cp /opt/rackula/config/nginx.conf /etc/nginx/sites-available/rackula
|
||||
cp /opt/rackula/config/security-headers.conf /etc/nginx/snippets/security-headers.conf
|
||||
cp /opt/rackula/config/rackula-api.service /etc/systemd/system/rackula-api.service
|
||||
if grep -q '^User=' /etc/systemd/system/rackula-api.service; then
|
||||
sed -i 's/^User=.*/User=root/' /etc/systemd/system/rackula-api.service
|
||||
else
|
||||
sed -i '/^\[Service\]/a User=root' /etc/systemd/system/rackula-api.service
|
||||
fi
|
||||
if grep -q '^Group=' /etc/systemd/system/rackula-api.service; then
|
||||
sed -i 's/^Group=.*/Group=root/' /etc/systemd/system/rackula-api.service
|
||||
else
|
||||
sed -i '/^\[Service\]/a Group=root' /etc/systemd/system/rackula-api.service
|
||||
fi
|
||||
mkdir -p /etc/systemd/system/nginx.service.d
|
||||
cp /opt/rackula/config/nginx.service.d-override.conf /etc/systemd/system/nginx.service.d/override.conf
|
||||
chown -R root:root /opt/rackula/frontend
|
||||
find /opt/rackula/frontend -type d -exec chmod 755 {} \;
|
||||
find /opt/rackula/frontend -type f -exec chmod 644 {} \;
|
||||
chmod 750 /opt/rackula/data
|
||||
msg_ok "Updated Configuration"
|
||||
|
||||
msg_info "Starting Services"
|
||||
$STD nginx -t
|
||||
systemctl daemon-reload
|
||||
systemctl start nginx rackula-api
|
||||
msg_ok "Started Services"
|
||||
msg_ok "Updated successfully!"
|
||||
fi
|
||||
exit
|
||||
}
|
||||
|
||||
start
|
||||
build_container
|
||||
description
|
||||
|
||||
msg_ok "Completed Successfully!\n"
|
||||
echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
|
||||
echo -e "${INFO}${YW} Access it using the following URL:${CL}"
|
||||
echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"
|
||||
+1
-1
@@ -8,7 +8,7 @@ source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxV
|
||||
APP="SnapOtter"
|
||||
var_tags="${var_tags:-media;image}"
|
||||
var_cpu="${var_cpu:-2}"
|
||||
var_ram="${var_ram:-4096}"
|
||||
var_ram="${var_ram:-2048}"
|
||||
var_disk="${var_disk:-20}"
|
||||
var_os="${var_os:-debian}"
|
||||
var_version="${var_version:-13}"
|
||||
|
||||
@@ -1,71 +0,0 @@
|
||||
#!/usr/bin/env bash
|
||||
|
||||
# Copyright (c) 2021-2026 community-scripts ORG
|
||||
# Author: John McLear (JohnMcLear)
|
||||
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
||||
# Source: https://etherpad.org
|
||||
|
||||
source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
|
||||
color
|
||||
verb_ip6
|
||||
catch_errors
|
||||
setting_up_container
|
||||
network_check
|
||||
update_os
|
||||
|
||||
msg_info "Installing Dependencies"
|
||||
$STD apt install -y \
|
||||
build-essential \
|
||||
pkg-config \
|
||||
libsqlite3-dev
|
||||
msg_ok "Installed Dependencies"
|
||||
|
||||
NODE_VERSION="24" NODE_MODULE="corepack" setup_nodejs
|
||||
fetch_and_deploy_gh_release "etherpad-lite" "ether/etherpad" "tarball"
|
||||
|
||||
msg_info "Building Etherpad"
|
||||
export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
|
||||
cd /opt/etherpad-lite
|
||||
$STD pnpm install --frozen-lockfile
|
||||
$STD pnpm run build:etherpad
|
||||
msg_ok "Built Etherpad"
|
||||
|
||||
msg_info "Configuring Etherpad"
|
||||
cp /opt/etherpad-lite/settings.json.template /opt/etherpad-lite/settings.json
|
||||
mkdir -p /var/lib/etherpad
|
||||
sed -i \
|
||||
-e 's#"ip": *"127.0.0.1"#"ip": "0.0.0.0"#' \
|
||||
-e 's#"dbType" *: *"dirty"#"dbType": "sqlite"#' \
|
||||
-e 's#"filename" *: *"var/dirty.db"#"filename": "/var/lib/etherpad/etherpad.db"#' \
|
||||
/opt/etherpad-lite/settings.json
|
||||
msg_ok "Configured Etherpad"
|
||||
|
||||
msg_info "Creating Service"
|
||||
cat <<EOF >/etc/systemd/system/etherpad.service
|
||||
[Unit]
|
||||
Description=Etherpad Collaborative Editor
|
||||
Documentation=https://etherpad.org/doc
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=root
|
||||
WorkingDirectory=/opt/etherpad-lite
|
||||
Environment=NODE_ENV=production
|
||||
Environment=COREPACK_ENABLE_DOWNLOAD_PROMPT=0
|
||||
ExecStart=/usr/bin/pnpm run prod
|
||||
Restart=always
|
||||
RestartSec=5
|
||||
LimitNOFILE=65536
|
||||
StandardOutput=journal
|
||||
StandardError=journal
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
systemctl enable -q --now etherpad
|
||||
msg_ok "Created Service"
|
||||
|
||||
motd_ssh
|
||||
customize
|
||||
cleanup_lxc
|
||||
@@ -1,62 +0,0 @@
|
||||
#!/usr/bin/env bash
|
||||
|
||||
# Copyright (c) 2021-2026 community-scripts ORG
|
||||
# Author: CrazyWolf13
|
||||
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
||||
# Source: https://github.com/pawelmalak/flame
|
||||
|
||||
source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
|
||||
color
|
||||
verb_ip6
|
||||
catch_errors
|
||||
setting_up_container
|
||||
network_check
|
||||
update_os
|
||||
|
||||
msg_info "Installing Dependencies"
|
||||
$STD apt install -y build-essential
|
||||
msg_ok "Installed Dependencies"
|
||||
|
||||
NODE_VERSION="22" setup_nodejs
|
||||
fetch_and_deploy_gh_release "flame" "pawelmalak/flame" "tarball"
|
||||
|
||||
msg_info "Setting up Flame"
|
||||
cd /opt/flame
|
||||
mkdir -p data public
|
||||
$STD npm install --production
|
||||
cd /opt/flame/client
|
||||
$STD npm install --production
|
||||
$STD npm run build
|
||||
cd /opt/flame
|
||||
cp -r client/build/. public/
|
||||
FLAME_VERSION=$(cat ~/.flame)
|
||||
cat <<EOF >/opt/flame/.env
|
||||
NODE_ENV=production
|
||||
VERSION=${FLAME_VERSION}
|
||||
PASSWORD=
|
||||
EOF
|
||||
msg_ok "Set up Flame"
|
||||
|
||||
msg_info "Creating Service"
|
||||
cat <<EOF >/etc/systemd/system/flame.service
|
||||
[Unit]
|
||||
Description=Flame Startpage
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=root
|
||||
WorkingDirectory=/opt/flame
|
||||
ExecStart=/usr/bin/node server.js
|
||||
Restart=on-failure
|
||||
RestartSec=5
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
systemctl enable -q --now flame
|
||||
msg_ok "Created Service"
|
||||
|
||||
motd_ssh
|
||||
customize
|
||||
cleanup_lxc
|
||||
@@ -1,62 +0,0 @@
|
||||
#!/usr/bin/env bash
|
||||
|
||||
# Copyright (c) 2021-2026 community-scripts ORG
|
||||
# Author: (AminGholizad)
|
||||
# License: MIT | https://github.com/AminGholizad/ProxmoxVED/raw/main/LICENSE
|
||||
# Source: https://github.com/PanSalut/Koffan
|
||||
|
||||
source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
|
||||
color
|
||||
verb_ip6
|
||||
catch_errors
|
||||
setting_up_container
|
||||
network_check
|
||||
update_os
|
||||
|
||||
msg_info "Installing Dependencies"
|
||||
$STD apt install -y build-essential
|
||||
msg_ok "Installed Dependencies"
|
||||
|
||||
setup_go
|
||||
fetch_and_deploy_gh_release "koffan" "PanSalut/Koffan" "tarball"
|
||||
|
||||
msg_info "Building Koffan"
|
||||
cd /opt/koffan
|
||||
$STD go build -o koffan main.go
|
||||
msg_ok "Built Koffan"
|
||||
|
||||
msg_info "Configuring Koffan"
|
||||
APP_PASSWD=$(openssl rand -base64 12)
|
||||
mkdir /opt/koffan/data
|
||||
cat <<EOF >/opt/koffan/data/.env
|
||||
APP_ENV=production
|
||||
APP_PASSWORD=${APP_PASSWD}
|
||||
PORT=3000
|
||||
DB_PATH=/opt/koffan/data/shopping.db
|
||||
EOF
|
||||
cat <<EOF >~/koffan.creds
|
||||
Password: ${APP_PASSWD}
|
||||
EOF
|
||||
msg_ok "Configured Koffan"
|
||||
|
||||
msg_info "Creating systemd service"
|
||||
cat <<EOF >/etc/systemd/system/koffan.service
|
||||
[Unit]
|
||||
Description=Koffan Service
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
EnvironmentFile=/opt/koffan/data/.env
|
||||
WorkingDirectory=/opt/koffan
|
||||
ExecStart=/opt/koffan/koffan
|
||||
Restart=always
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
systemctl enable -q --now koffan
|
||||
msg_ok "Created systemd service"
|
||||
|
||||
motd_ssh
|
||||
customize
|
||||
cleanup_lxc
|
||||
@@ -18,7 +18,7 @@ $STD apt install -y \
|
||||
apache2-utils \
|
||||
logrotate \
|
||||
build-essential \
|
||||
libpcre2-dev \
|
||||
libpcre3-dev \
|
||||
libssl-dev \
|
||||
zlib1g-dev \
|
||||
git \
|
||||
@@ -36,8 +36,7 @@ $STD /opt/certbot/bin/pip install certbot certbot-dns-cloudflare
|
||||
ln -sf /opt/certbot/bin/certbot /usr/local/bin/certbot
|
||||
msg_ok "Set up Certbot"
|
||||
|
||||
OPENRESTY_VERSION="1.29.2.5"
|
||||
fetch_and_deploy_from_url "https://openresty.org/download/openresty-${OPENRESTY_VERSION}.tar.gz" "/opt/openresty"
|
||||
fetch_and_deploy_gh_release "openresty" "openresty/openresty" "prebuild" "latest" "/opt/openresty" "openresty-*.tar.gz"
|
||||
|
||||
msg_info "Building OpenResty"
|
||||
cd /opt/openresty
|
||||
@@ -53,7 +52,6 @@ $STD ./configure \
|
||||
--with-stream_ssl_module
|
||||
$STD make -j"$(nproc)"
|
||||
$STD make install
|
||||
echo "${OPENRESTY_VERSION}" >~/.openresty
|
||||
rm -rf /opt/openresty
|
||||
|
||||
cat <<'EOF' >/lib/systemd/system/openresty.service
|
||||
|
||||
Executable
+96
@@ -0,0 +1,96 @@
|
||||
#!/usr/bin/env bash
|
||||
|
||||
# Copyright (c) 2021-2026 community-scripts ORG
|
||||
# Author: gVNS (ggfevans)
|
||||
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
||||
# Source: https://github.com/RackulaLives/Rackula
|
||||
|
||||
source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
|
||||
color
|
||||
verb_ip6
|
||||
catch_errors
|
||||
setting_up_container
|
||||
network_check
|
||||
update_os
|
||||
|
||||
msg_info "Installing Dependencies"
|
||||
$STD apt install -y nginx
|
||||
msg_ok "Installed Dependencies"
|
||||
|
||||
msg_info "Installing Bun"
|
||||
ensure_dependencies unzip ca-certificates
|
||||
BUN_VERSION="${BUN_VERSION:-1.3.14}"
|
||||
case "$(uname -m)" in
|
||||
x86_64) grep -q avx2 /proc/cpuinfo && BUN_VARIANT="x64" || BUN_VARIANT="x64-baseline" ;;
|
||||
aarch64) BUN_VARIANT="aarch64" ;;
|
||||
*)
|
||||
msg_error "Unsupported architecture: $(uname -m)"
|
||||
exit 1
|
||||
;;
|
||||
esac
|
||||
export BUN_INSTALL="/root/.bun"
|
||||
curl -fsSL https://bun.sh/install | $STD bash
|
||||
ln -sf /root/.bun/bin/bun /usr/local/bin/bun
|
||||
fetch_and_deploy_gh_release "rackula" "RackulaLives/Rackula" "prebuild" "latest" "/opt/rackula" "rackula-lxc-*.tar.gz"
|
||||
mkdir -p /opt/rackula/data /etc/nginx/snippets
|
||||
|
||||
SECURITY_HEADERS_SRC="/opt/rackula/config/security-headers.conf"
|
||||
if [ ! -f "$SECURITY_HEADERS_SRC" ]; then
|
||||
msg_error "Required config file missing: $SECURITY_HEADERS_SRC (release may be incomplete)"
|
||||
exit 1
|
||||
fi
|
||||
cp "$SECURITY_HEADERS_SRC" /etc/nginx/snippets/security-headers.conf
|
||||
|
||||
chown -R root:root /opt/rackula/frontend
|
||||
find /opt/rackula/frontend -type d -exec chmod 755 {} \;
|
||||
find /opt/rackula/frontend -type f -exec chmod 644 {} \;
|
||||
chmod 750 /opt/rackula/data
|
||||
|
||||
API_WRITE_TOKEN=$(openssl rand -hex 32)
|
||||
cat <<EOF >/opt/rackula/data/.env
|
||||
RACKULA_API_WRITE_TOKEN=${API_WRITE_TOKEN}
|
||||
CORS_ORIGIN=http://localhost
|
||||
ALLOW_INSECURE_CORS=false
|
||||
EOF
|
||||
chmod 600 /opt/rackula/data/.env
|
||||
|
||||
cat <<EOF >/etc/nginx/snippets/rackula-api-token.conf
|
||||
map \$host \$rackula_api_write_token {
|
||||
default "${API_WRITE_TOKEN}";
|
||||
}
|
||||
map \$host \$rackula_has_api_write_token {
|
||||
default 1;
|
||||
}
|
||||
EOF
|
||||
chmod 640 /etc/nginx/snippets/rackula-api-token.conf
|
||||
msg_ok "Set up Rackula"
|
||||
|
||||
msg_info "Configuring nginx"
|
||||
cp /opt/rackula/config/nginx.conf /etc/nginx/sites-available/rackula
|
||||
rm -f /etc/nginx/sites-enabled/default
|
||||
ln -sf /etc/nginx/sites-available/rackula /etc/nginx/sites-enabled/rackula
|
||||
$STD nginx -t
|
||||
msg_ok "Configured nginx"
|
||||
|
||||
msg_info "Creating Services"
|
||||
cp /opt/rackula/config/rackula-api.service /etc/systemd/system/rackula-api.service
|
||||
if grep -q '^User=' /etc/systemd/system/rackula-api.service; then
|
||||
sed -i 's/^User=.*/User=root/' /etc/systemd/system/rackula-api.service
|
||||
else
|
||||
sed -i '/^\[Service\]/a User=root' /etc/systemd/system/rackula-api.service
|
||||
fi
|
||||
if grep -q '^Group=' /etc/systemd/system/rackula-api.service; then
|
||||
sed -i 's/^Group=.*/Group=root/' /etc/systemd/system/rackula-api.service
|
||||
else
|
||||
sed -i '/^\[Service\]/a Group=root' /etc/systemd/system/rackula-api.service
|
||||
fi
|
||||
mkdir -p /etc/systemd/system/nginx.service.d
|
||||
cp /opt/rackula/config/nginx.service.d-override.conf /etc/systemd/system/nginx.service.d/override.conf
|
||||
systemctl daemon-reload
|
||||
systemctl enable -q nginx rackula-api
|
||||
systemctl restart nginx rackula-api
|
||||
msg_ok "Created Services"
|
||||
|
||||
motd_ssh
|
||||
customize
|
||||
cleanup_lxc
|
||||
@@ -20,11 +20,6 @@ $STD apt install -y \
|
||||
potrace \
|
||||
libopenjp2-tools \
|
||||
libegl1 \
|
||||
libgl1 \
|
||||
libglib2.0-0 \
|
||||
libsm6 \
|
||||
libxext6 \
|
||||
libxrender1 \
|
||||
libwayland-client0 \
|
||||
libwayland-cursor0 \
|
||||
libwayland-egl1 \
|
||||
|
||||
+19
-47
@@ -266,47 +266,6 @@ download_gpg_key() {
|
||||
return 7
|
||||
}
|
||||
|
||||
# ------------------------------------------------------------------------------
|
||||
# Edit a key-value pair in a YAML configuration file.
|
||||
#
|
||||
# Description:
|
||||
# - Finds the first occurrence of the given key in the YAML file and replaces
|
||||
# its value in-place using sed.
|
||||
# - Handles both quoted and unquoted values on the same line.
|
||||
# - The key is matched at the start of a line (optionally preceded by spaces),
|
||||
# followed by a colon and optional whitespace.
|
||||
# - If the key is not found, the function exits with a non-zero status and
|
||||
# prints an error message.
|
||||
#
|
||||
# Usage:
|
||||
# edit_yaml_config "/opt/myapp/config.yml" "database_host" "localhost"
|
||||
# edit_yaml_config "/opt/myapp/config.yml" "port" "5432"
|
||||
#
|
||||
# Parameters:
|
||||
# $1 - Path to the YAML file
|
||||
# $2 - Key to find (e.g. "database_host")
|
||||
# $3 - New value to set (e.g. "localhost")
|
||||
#
|
||||
# Returns: 0 on success, 1 if the file does not exist or the key is not found
|
||||
# ------------------------------------------------------------------------------
|
||||
edit_yaml_config() {
|
||||
local file="$1"
|
||||
local key="$2"
|
||||
local value="$3"
|
||||
|
||||
if [[ ! -f "$file" ]]; then
|
||||
msg_error "edit_yaml_config: file not found: $file"
|
||||
return 1
|
||||
fi
|
||||
|
||||
if ! grep -qE "^[[:space:]]*${key}[[:space:]]*:" "$file"; then
|
||||
msg_error "edit_yaml_config: key '${key}' not found in $file"
|
||||
return 1
|
||||
fi
|
||||
|
||||
sed -i "s|^\([[:space:]]*${key}[[:space:]]*:\).*|\1 ${value}|" "$file"
|
||||
}
|
||||
|
||||
# ------------------------------------------------------------------------------
|
||||
# Cache installed version to avoid repeated checks
|
||||
# ------------------------------------------------------------------------------
|
||||
@@ -6164,6 +6123,7 @@ _setup_gpu_permissions() {
|
||||
# - Requires: build-essential, libtool, libjpeg-dev, libpng-dev, etc.
|
||||
# ------------------------------------------------------------------------------
|
||||
setup_imagemagick() {
|
||||
local TMP_DIR=$(mktemp -d)
|
||||
local BINARY_PATH="/usr/local/bin/magick"
|
||||
|
||||
# Get currently installed version
|
||||
@@ -6194,39 +6154,51 @@ setup_imagemagick() {
|
||||
pkg-config \
|
||||
ghostscript
|
||||
|
||||
# Fetch and deploy source tarball from GitHub Releases
|
||||
fetch_and_deploy_gh_release "imagemagick" "ImageMagick/ImageMagick" "tarball" || {
|
||||
msg_error "Failed to download ImageMagick source from GitHub"
|
||||
msg_error "Hint: Check connectivity to github.com/ImageMagick/ImageMagick"
|
||||
if ! CURL_TIMEOUT=180 curl_with_retry "https://imagemagick.org/archive/ImageMagick.tar.gz" "$TMP_DIR/ImageMagick.tar.gz"; then
|
||||
msg_error "Failed to download ImageMagick"
|
||||
msg_error "Hint: Check connectivity to imagemagick.org/archive"
|
||||
rm -rf "$TMP_DIR"
|
||||
return 250
|
||||
fi
|
||||
|
||||
tar -xzf "$TMP_DIR/ImageMagick.tar.gz" -C "$TMP_DIR" || {
|
||||
msg_error "Failed to extract ImageMagick"
|
||||
rm -rf "$TMP_DIR"
|
||||
return 251
|
||||
}
|
||||
|
||||
cd /opt/imagemagick || {
|
||||
msg_error "Failed to enter ImageMagick source directory"
|
||||
cd "$TMP_DIR"/ImageMagick-* || {
|
||||
msg_error "Source extraction failed"
|
||||
rm -rf "$TMP_DIR"
|
||||
return 251
|
||||
}
|
||||
|
||||
$STD ./configure --disable-static || {
|
||||
msg_error "ImageMagick configure failed"
|
||||
rm -rf "$TMP_DIR"
|
||||
return 150
|
||||
}
|
||||
$STD make -j"$(nproc)" || {
|
||||
msg_error "ImageMagick compilation failed"
|
||||
rm -rf "$TMP_DIR"
|
||||
return 150
|
||||
}
|
||||
$STD make install || {
|
||||
msg_error "ImageMagick installation failed"
|
||||
rm -rf "$TMP_DIR"
|
||||
return 150
|
||||
}
|
||||
$STD ldconfig /usr/local/lib
|
||||
|
||||
if [[ ! -x "$BINARY_PATH" ]]; then
|
||||
msg_error "ImageMagick installation failed"
|
||||
rm -rf "$TMP_DIR"
|
||||
return 150
|
||||
fi
|
||||
|
||||
local FINAL_VERSION
|
||||
FINAL_VERSION=$("$BINARY_PATH" -version | awk '/^Version/ {print $3}')
|
||||
rm -rf "$TMP_DIR"
|
||||
cache_installed_version "imagemagick" "$FINAL_VERSION"
|
||||
ensure_usr_local_bin_persist
|
||||
|
||||
|
||||
Reference in New Issue
Block a user