mirror of
https://github.com/community-scripts/ProxmoxVE.git
synced 2026-08-25 05:45:45 +02:00
CanbiZ (MickLesk)
a876ad22bb
* netbox: serve on plain HTTP too, port 80 forced HTTPS redirect broke reverse proxies * Update netbox-install.sh for Apache configuration Modify Apache configuration to serve NetBox on port 80.
143 lines
3.9 KiB
Bash
143 lines
3.9 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
# Copyright (c) 2021-2026 community-scripts ORG
|
|
# Author: bvdberg01
|
|
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
|
# Source: https://netboxlabs.com/ | Github: https://github.com/netbox-community/netbox
|
|
|
|
source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
|
|
color
|
|
verb_ip6
|
|
catch_errors
|
|
setting_up_container
|
|
network_check
|
|
update_os
|
|
|
|
msg_info "Installing Dependencies"
|
|
$STD apt install -y \
|
|
apache2 \
|
|
redis-server \
|
|
build-essential \
|
|
libxml2-dev \
|
|
libxslt1-dev \
|
|
libffi-dev \
|
|
libpq-dev \
|
|
libssl-dev \
|
|
zlib1g-dev
|
|
msg_ok "Installed Dependencies"
|
|
|
|
PG_VERSION="16" setup_postgresql
|
|
PG_DB_NAME="netbox" PG_DB_USER="netbox" setup_postgresql_db
|
|
|
|
msg_info "Installing Python"
|
|
$STD apt install -y \
|
|
python3 \
|
|
python3-pip \
|
|
python3-venv \
|
|
python3-dev
|
|
msg_ok "Installed Python"
|
|
|
|
fetch_and_deploy_gh_release "netbox" "netbox-community/netbox" "tarball"
|
|
|
|
msg_info "Configuring NetBox (Patience)"
|
|
cd /opt/netbox
|
|
mkdir -p /opt/netbox/netbox/media
|
|
|
|
$STD adduser --system --group netbox
|
|
chown -R netbox /opt/netbox/netbox
|
|
|
|
mv /opt/netbox/netbox/netbox/configuration_example.py /opt/netbox/netbox/netbox/configuration.py
|
|
|
|
SECRET_KEY=$(python3 /opt/netbox/netbox/generate_secret_key.py)
|
|
ESCAPED_SECRET_KEY=$(printf '%s\n' "$SECRET_KEY" | sed 's/[&/\]/\\&/g')
|
|
|
|
sed -i -e 's/ALLOWED_HOSTS = \[\]/ALLOWED_HOSTS = ["*"]/' \
|
|
-e "s|SECRET_KEY = ''|SECRET_KEY = '${ESCAPED_SECRET_KEY}'|" \
|
|
-e "/DATABASES = {/,/}/s/'USER': '[^']*'/'USER': '$PG_DB_USER'/" \
|
|
-e "/DATABASES = {/,/}/s/'PASSWORD': '[^']*'/'PASSWORD': '$PG_DB_PASS'/" /opt/netbox/netbox/netbox/configuration.py
|
|
|
|
$STD /opt/netbox/upgrade.sh
|
|
ln -s /opt/netbox/contrib/netbox-housekeeping.sh /etc/cron.daily/netbox-housekeeping
|
|
|
|
$STD openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/netbox.key -out /etc/ssl/certs/netbox.crt -subj "/C=US/O=NetBox/OU=Certificate/CN=localhost"
|
|
cat <<EOF >/etc/apache2/sites-available/netbox.conf
|
|
<VirtualHost *:80>
|
|
ProxyPreserveHost On
|
|
|
|
Alias /static /opt/netbox/netbox/static
|
|
|
|
<Directory /opt/netbox/netbox/static>
|
|
Options FollowSymLinks MultiViews
|
|
AllowOverride None
|
|
Require all granted
|
|
</Directory>
|
|
|
|
<Location /static>
|
|
ProxyPass !
|
|
</Location>
|
|
|
|
RequestHeader set "X-Forwarded-Proto" expr=%{REQUEST_SCHEME}
|
|
ProxyPass / http://127.0.0.1:8001/
|
|
ProxyPassReverse / http://127.0.0.1:8001/
|
|
</VirtualHost>
|
|
|
|
<VirtualHost *:443>
|
|
ProxyPreserveHost On
|
|
|
|
SSLEngine on
|
|
SSLCertificateFile /etc/ssl/certs/netbox.crt
|
|
SSLCertificateKeyFile /etc/ssl/private/netbox.key
|
|
|
|
Alias /static /opt/netbox/netbox/static
|
|
|
|
<Directory /opt/netbox/netbox/static>
|
|
Options FollowSymLinks MultiViews
|
|
AllowOverride None
|
|
Require all granted
|
|
</Directory>
|
|
|
|
<Location /static>
|
|
ProxyPass !
|
|
</Location>
|
|
|
|
RequestHeader set "X-Forwarded-Proto" expr=%{REQUEST_SCHEME}
|
|
ProxyPass / http://127.0.0.1:8001/
|
|
ProxyPassReverse / http://127.0.0.1:8001/
|
|
</VirtualHost>
|
|
EOF
|
|
$STD a2enmod ssl proxy proxy_http headers rewrite
|
|
$STD a2ensite netbox
|
|
systemctl restart apache2
|
|
|
|
mv /opt/netbox/contrib/gunicorn.py /opt/netbox/gunicorn.py
|
|
mv /opt/netbox/contrib/*.service /etc/systemd/system/
|
|
systemctl daemon-reload
|
|
systemctl enable -q --now netbox netbox-rq
|
|
echo -e "Netbox Secret: \e[32m$SECRET_KEY\e[0m" >>~/netbox.creds
|
|
msg_ok "Configured NetBox"
|
|
|
|
msg_info "Setting up Django Admin"
|
|
DJANGO_USER=Admin
|
|
DJANGO_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)
|
|
|
|
source /opt/netbox/venv/bin/activate
|
|
$STD python3 /opt/netbox/netbox/manage.py shell <<EOF
|
|
from django.contrib.auth import get_user_model
|
|
UserModel = get_user_model()
|
|
user = UserModel.objects.create_user('$DJANGO_USER', password='$DJANGO_PASS')
|
|
user.is_superuser = True
|
|
user.is_staff = True
|
|
user.save()
|
|
EOF
|
|
cat <<EOF >~/netbox.creds
|
|
|
|
Netbox-Django-Credentials
|
|
Django User: $DJANGO_USER
|
|
Django Password: $DJANGO_PASS
|
|
EOF
|
|
msg_ok "Setup Django Admin"
|
|
|
|
motd_ssh
|
|
customize
|
|
cleanup_lxc
|