mirror of
https://github.com/community-scripts/ProxmoxVE.git
synced 2026-08-16 01:26:12 +02:00
Compare commits
1 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| 5b8d8fe523 |
@@ -523,11 +523,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
|
||||
|
||||
## 2026-08-15
|
||||
|
||||
### 🆕 New Scripts
|
||||
|
||||
- Securo ([#16518](https://github.com/community-scripts/ProxmoxVE/pull/16518))
|
||||
- ntopng ([#16387](https://github.com/community-scripts/ProxmoxVE/pull/16387))
|
||||
|
||||
### 🚀 Updated Scripts
|
||||
|
||||
- #### 🐞 Bug Fixes
|
||||
|
||||
@@ -1,6 +0,0 @@
|
||||
__
|
||||
____ / /_____ ____ ____ ____ _
|
||||
/ __ \/ __/ __ \/ __ \/ __ \/ __ `/
|
||||
/ / / / /_/ /_/ / /_/ / / / / /_/ /
|
||||
/_/ /_/\__/\____/ .___/_/ /_/\__, /
|
||||
/_/ /____/
|
||||
@@ -1,6 +0,0 @@
|
||||
_____
|
||||
/ ___/___ _______ ___________
|
||||
\__ \/ _ \/ ___/ / / / ___/ __ \
|
||||
___/ / __/ /__/ /_/ / / / /_/ /
|
||||
/____/\___/\___/\__,_/_/ \____/
|
||||
|
||||
@@ -1,53 +0,0 @@
|
||||
#!/usr/bin/env bash
|
||||
source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
|
||||
# Copyright (c) 2021-2026 community-scripts ORG
|
||||
# Author: MickLesk (CanbiZ)
|
||||
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
||||
# Source: https://www.ntop.org/products/traffic-analysis/ntop/
|
||||
|
||||
APP="ntopng"
|
||||
var_tags="${var_tags:-network;monitoring}"
|
||||
var_cpu="${var_cpu:-2}"
|
||||
var_ram="${var_ram:-2048}"
|
||||
var_disk="${var_disk:-10}"
|
||||
var_os="${var_os:-debian}"
|
||||
var_version="${var_version:-13}"
|
||||
var_arm64="${var_arm64:-no}"
|
||||
var_unprivileged="${var_unprivileged:-1}"
|
||||
|
||||
header_info "$APP"
|
||||
variables
|
||||
color
|
||||
catch_errors
|
||||
|
||||
function update_script() {
|
||||
header_info
|
||||
check_container_storage
|
||||
check_container_resources
|
||||
|
||||
if [[ ! -f /etc/ntopng/ntopng.conf ]]; then
|
||||
msg_error "No ${APP} Installation Found!"
|
||||
exit
|
||||
fi
|
||||
|
||||
msg_info "Updating ntopng"
|
||||
$STD apt update
|
||||
$STD apt install -y ntopng
|
||||
msg_ok "Updated ntopng"
|
||||
|
||||
msg_info "Restarting Service"
|
||||
systemctl restart ntopng
|
||||
msg_ok "Restarted Service"
|
||||
msg_ok "Updated successfully!"
|
||||
exit
|
||||
}
|
||||
|
||||
start
|
||||
build_container
|
||||
description
|
||||
|
||||
msg_ok "Completed Successfully!\n"
|
||||
echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
|
||||
echo -e "${INFO}${YW}Access it using the following URL:${CL}"
|
||||
echo -e "${GATEWAY}${BGN}http://${IP}:3000${CL}"
|
||||
echo -e "${INFO}${YW}Default login: admin / admin${CL}"
|
||||
@@ -1,74 +0,0 @@
|
||||
#!/usr/bin/env bash
|
||||
source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
|
||||
# Copyright (c) 2021-2026 community-scripts ORG
|
||||
# Author: MickLesk (CanbiZ)
|
||||
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
||||
# Source: https://github.com/securo-finance/securo
|
||||
|
||||
APP="Securo"
|
||||
var_tags="${var_tags:-finance;self-hosted}"
|
||||
var_cpu="${var_cpu:-2}"
|
||||
var_ram="${var_ram:-4096}"
|
||||
var_disk="${var_disk:-12}"
|
||||
var_os="${var_os:-debian}"
|
||||
var_version="${var_version:-13}"
|
||||
#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
|
||||
var_unprivileged="${var_unprivileged:-1}"
|
||||
|
||||
header_info "$APP"
|
||||
variables
|
||||
color
|
||||
catch_errors
|
||||
|
||||
function update_script() {
|
||||
header_info
|
||||
check_container_storage
|
||||
check_container_resources
|
||||
|
||||
if [[ ! -d /opt/securo ]]; then
|
||||
msg_error "No ${APP} Installation Found!"
|
||||
exit
|
||||
fi
|
||||
|
||||
if check_for_gh_release "securo" "securo-finance/securo"; then
|
||||
msg_info "Stopping Services"
|
||||
systemctl stop securo securo-worker securo-beat
|
||||
msg_ok "Stopped Services"
|
||||
|
||||
CLEAN_INSTALL=1 fetch_and_deploy_gh_release "securo" "securo-finance/securo" "tarball"
|
||||
|
||||
msg_info "Updating Backend"
|
||||
cd /opt/securo/backend
|
||||
ln -sf /opt/securo_data/.env /opt/securo/backend/.env
|
||||
$STD uv venv --python 3.12 /opt/securo/backend/.venv
|
||||
$STD uv pip install --python /opt/securo/backend/.venv -e .
|
||||
set -a
|
||||
source /opt/securo_data/.env
|
||||
set +a
|
||||
$STD /opt/securo/backend/.venv/bin/alembic upgrade head
|
||||
msg_ok "Updated Backend"
|
||||
|
||||
msg_info "Rebuilding Frontend"
|
||||
cd /opt/securo/frontend
|
||||
export NODE_OPTIONS="--max-old-space-size=4096"
|
||||
$STD npm install
|
||||
$STD npm run build
|
||||
msg_ok "Rebuilt Frontend"
|
||||
|
||||
msg_info "Starting Services"
|
||||
systemctl start securo securo-worker securo-beat
|
||||
systemctl reload nginx
|
||||
msg_ok "Started Services"
|
||||
msg_ok "Updated successfully!"
|
||||
fi
|
||||
exit
|
||||
}
|
||||
|
||||
start
|
||||
build_container
|
||||
description
|
||||
|
||||
msg_ok "Completed Successfully!\n"
|
||||
echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
|
||||
echo -e "${INFO}${YW}Access it using the following URL:${CL}"
|
||||
echo -e "${GATEWAY}${BGN}https://${IP}${CL}"
|
||||
+3
-4
@@ -41,7 +41,6 @@ function update_script() {
|
||||
if ! grep -qxF 'BODY_SIZE_LIMIT=Infinity' /opt/tracktor.env; then
|
||||
rm /opt/tracktor.env
|
||||
cat <<EOF >/opt/tracktor.env
|
||||
cat <<EOF >/opt/tracktor.env
|
||||
NODE_ENV=production
|
||||
# Set this to the path of the database file. Default - ./tracktor.db
|
||||
DB_PATH=/opt/tracktor-data/tracktor.db
|
||||
@@ -67,13 +66,13 @@ EOF
|
||||
fi
|
||||
msg_ok "Corrected Services"
|
||||
|
||||
NODE_VERSION="24" setup_nodejs
|
||||
NODE_VERSION="22" NODE_MODULE="pnpm" setup_nodejs
|
||||
CLEAN_INSTALL=1 fetch_and_deploy_gh_release "tracktor" "javedh-dev/tracktor" "tarball" "latest" "/opt/tracktor"
|
||||
|
||||
msg_info "Updating tracktor"
|
||||
cd /opt/tracktor
|
||||
$STD npm install
|
||||
$STD npm run build
|
||||
$STD pnpm install --frozen-lockfile
|
||||
$STD pnpm run build
|
||||
msg_ok "Updated tracktor"
|
||||
|
||||
msg_info "Starting Service"
|
||||
|
||||
@@ -1,35 +0,0 @@
|
||||
#!/usr/bin/env bash
|
||||
|
||||
# Copyright (c) 2021-2026 community-scripts ORG
|
||||
# Author: MickLesk (CanbiZ)
|
||||
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
||||
# Source: https://www.ntop.org/products/traffic-analysis/ntop/
|
||||
|
||||
source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
|
||||
color
|
||||
verb_ip6
|
||||
catch_errors
|
||||
setting_up_container
|
||||
network_check
|
||||
update_os
|
||||
|
||||
fetch_and_deploy_from_url "https://packages.ntop.org/apt-stable/$(get_os_info codename)/all/apt-ntop-stable.deb" ""
|
||||
|
||||
msg_info "Installing ntopng"
|
||||
$STD apt update
|
||||
$STD apt install -y ntopng
|
||||
msg_ok "Installed ntopng"
|
||||
|
||||
msg_info "Configuring ntopng"
|
||||
cat <<EOF >/etc/ntopng/ntopng.conf
|
||||
-i=$(ip -4 route | awk '/default/ {print $5; exit}')
|
||||
-w=3000
|
||||
-d=/var/lib/ntopng
|
||||
--community
|
||||
EOF
|
||||
systemctl restart ntopng
|
||||
msg_ok "Configured ntopng"
|
||||
|
||||
motd_ssh
|
||||
customize
|
||||
cleanup_lxc
|
||||
@@ -1,164 +0,0 @@
|
||||
#!/usr/bin/env bash
|
||||
|
||||
# Copyright (c) 2021-2026 community-scripts ORG
|
||||
# Author: MickLesk (CanbiZ)
|
||||
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
||||
# Source: https://github.com/securo-finance/securo
|
||||
|
||||
source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
|
||||
color
|
||||
verb_ip6
|
||||
catch_errors
|
||||
setting_up_container
|
||||
network_check
|
||||
update_os
|
||||
|
||||
msg_info "Installing Dependencies"
|
||||
$STD apt install -y \
|
||||
nginx \
|
||||
redis-server \
|
||||
build-essential
|
||||
systemctl enable -q --now redis-server
|
||||
msg_ok "Installed Dependencies"
|
||||
|
||||
PG_VERSION="16" PG_MODULES="pgvector" setup_postgresql
|
||||
PG_DB_NAME="securo" PG_DB_USER="securo" PG_DB_EXTENSIONS="vector" setup_postgresql_db
|
||||
NODE_VERSION="22" setup_nodejs
|
||||
UV_PYTHON="3.12" setup_uv
|
||||
|
||||
fetch_and_deploy_gh_release "securo" "securo-finance/securo" "tarball"
|
||||
|
||||
msg_info "Setting up Backend"
|
||||
cd /opt/securo/backend
|
||||
$STD uv venv --python 3.12 /opt/securo/backend/.venv
|
||||
$STD uv pip install --python /opt/securo/backend/.venv -e .
|
||||
msg_ok "Set up Backend"
|
||||
|
||||
msg_info "Configuring Securo"
|
||||
mkdir -p /opt/securo_data
|
||||
SECRET_KEY=$(openssl rand -hex 32)
|
||||
cat <<EOF >/opt/securo_data/.env
|
||||
DATABASE_URL=postgresql+asyncpg://securo:${PG_DB_PASS}@127.0.0.1:5432/securo
|
||||
REDIS_URL=redis://127.0.0.1:6379/0
|
||||
SECRET_KEY=${SECRET_KEY}
|
||||
DEBUG=false
|
||||
FRONTEND_URL=https://${LOCAL_IP}
|
||||
EOF
|
||||
ln -sf /opt/securo_data/.env /opt/securo/backend/.env
|
||||
set -a
|
||||
source /opt/securo_data/.env
|
||||
set +a
|
||||
$STD /opt/securo/backend/.venv/bin/alembic upgrade head
|
||||
msg_ok "Configured Securo"
|
||||
|
||||
msg_info "Building Frontend (Patience)"
|
||||
cd /opt/securo/frontend
|
||||
export NODE_OPTIONS="--max-old-space-size=4096"
|
||||
$STD npm install
|
||||
$STD npm run build
|
||||
msg_ok "Built Frontend"
|
||||
|
||||
msg_info "Generating Self-Signed Certificate"
|
||||
create_self_signed_cert "securo"
|
||||
msg_ok "Generated Self-Signed Certificate"
|
||||
|
||||
msg_info "Creating Services"
|
||||
cat <<EOF >/etc/systemd/system/securo.service
|
||||
[Unit]
|
||||
Description=Securo Backend (FastAPI)
|
||||
After=network-online.target postgresql.service redis-server.service
|
||||
Wants=network-online.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=root
|
||||
WorkingDirectory=/opt/securo/backend
|
||||
EnvironmentFile=/opt/securo_data/.env
|
||||
ExecStart=/opt/securo/backend/.venv/bin/uvicorn app.main:app --host 127.0.0.1 --port 8000
|
||||
Restart=always
|
||||
RestartSec=5
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
|
||||
cat <<EOF >/etc/systemd/system/securo-worker.service
|
||||
[Unit]
|
||||
Description=Securo Celery Worker
|
||||
After=network-online.target postgresql.service redis-server.service
|
||||
Wants=network-online.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=root
|
||||
WorkingDirectory=/opt/securo/backend
|
||||
EnvironmentFile=/opt/securo_data/.env
|
||||
ExecStart=/opt/securo/backend/.venv/bin/celery -A app.worker worker --loglevel=info --concurrency=2
|
||||
Restart=always
|
||||
RestartSec=5
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
|
||||
cat <<EOF >/etc/systemd/system/securo-beat.service
|
||||
[Unit]
|
||||
Description=Securo Celery Beat
|
||||
After=network-online.target postgresql.service redis-server.service
|
||||
Wants=network-online.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=root
|
||||
WorkingDirectory=/opt/securo/backend
|
||||
EnvironmentFile=/opt/securo_data/.env
|
||||
ExecStart=/opt/securo/backend/.venv/bin/celery -A app.worker beat --loglevel=info
|
||||
Restart=always
|
||||
RestartSec=5
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
systemctl enable -q --now securo securo-worker securo-beat
|
||||
msg_ok "Created Services"
|
||||
|
||||
msg_info "Configuring Nginx"
|
||||
cat <<'EOF' >/etc/nginx/sites-available/securo.conf
|
||||
server {
|
||||
listen 80 default_server;
|
||||
server_name _;
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
server {
|
||||
listen 443 ssl default_server;
|
||||
http2 on;
|
||||
server_name _;
|
||||
|
||||
ssl_certificate /etc/ssl/securo/securo.crt;
|
||||
ssl_certificate_key /etc/ssl/securo/securo.key;
|
||||
|
||||
client_max_body_size 25m;
|
||||
|
||||
root /opt/securo/frontend/dist;
|
||||
index index.html;
|
||||
|
||||
location /api/ {
|
||||
proxy_pass http://127.0.0.1:8000;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
}
|
||||
|
||||
location / {
|
||||
try_files $uri $uri/ /index.html;
|
||||
}
|
||||
}
|
||||
EOF
|
||||
nginx_enable_site securo.conf
|
||||
msg_ok "Configured Nginx"
|
||||
|
||||
motd_ssh
|
||||
customize
|
||||
cleanup_lxc
|
||||
@@ -13,13 +13,13 @@ setting_up_container
|
||||
network_check
|
||||
update_os
|
||||
|
||||
NODE_VERSION="24" setup_nodejs
|
||||
NODE_VERSION="22" NODE_MODULE="pnpm" setup_nodejs
|
||||
fetch_and_deploy_gh_release "tracktor" "javedh-dev/tracktor" "tarball" "latest" "/opt/tracktor"
|
||||
|
||||
msg_info "Configuring Tracktor"
|
||||
cd /opt/tracktor
|
||||
$STD npm install
|
||||
$STD npm run build
|
||||
$STD pnpm install --frozen-lockfile
|
||||
$STD pnpm run build
|
||||
mkdir -p /opt/tracktor-data/{uploads,logs}
|
||||
cat <<EOF >/opt/tracktor.env
|
||||
NODE_ENV=production
|
||||
|
||||
Reference in New Issue
Block a user