mirror of
https://github.com/ej52/proxmox-scripts.git
synced 2025-11-23 17:30:27 +01:00
refactor: Overhaul create and install scripts
This commit is contained in:
Elton Renda
41
apps/nginx-proxy-manager/config.sh
Normal file
41
apps/nginx-proxy-manager/config.sh
Normal file
@@ -0,0 +1,41 @@
|
||||
#!/usr/bin/env bash
|
||||
|
||||
pms_header() {
|
||||
clear
|
||||
cat <<"EOF"
|
||||
_ __ _ ____ __ ___
|
||||
/ | / /___ _(_)___ _ __ / __ \_________ __ ____ __ / |/ /___ _____ ____ _____ ____ _____
|
||||
/ |/ / __ / / __ \| |/_/ / /_/ / ___/ __ \| |/_/ / / / / /|_/ / __ / __ \/ __ / __ / _ \/ ___/
|
||||
/ /| / /_/ / / / / /> < / ____/ / / /_/ /> </ /_/ / / / / / /_/ / / / / /_/ / /_/ / __/ /
|
||||
/_/ |_/\__, /_/_/ /_/_/|_| /_/ /_/ \____/_/|_|\__, / /_/ /_/\__,_/_/ /_/\__,_/\__, /\___/_/
|
||||
/____/ /____/ /____/
|
||||
|
||||
EOF
|
||||
}
|
||||
|
||||
EPS_SUPPORTED_DISTROS="alpine debian ubuntu"
|
||||
# Override default CT settings
|
||||
EPS_CT_CPU_CORES=${EPS_CT_CPU_CORES:-1}
|
||||
EPS_CT_DISK_SIZE=${EPS_CT_DISK_SIZE:-4}
|
||||
EPS_CT_MEMORY=${EPS_CT_MEMORY:-512}
|
||||
EPS_CT_SWAP=${EPS_CT_SWAP:-0}
|
||||
# NPM package versions
|
||||
NODE_VERSION="v16.20.2"
|
||||
YARN_VERSION="1.22.19"
|
||||
RUST_VERSION="1.74.0"
|
||||
|
||||
EPS_SERVICE_FILE=/etc/init.d/npm
|
||||
EPS_SERVICE_DATA="#!/sbin/openrc-run\ndescription=\"Nginx Proxy Manager\"\n\ncommand=\"/usr/local/bin/node\"\ncommand_args=\"index.js --abort_on_uncaught_exception --max_old_space_size=250\"\ncommand_background=\"yes\"\ndirectory=\"/app\"\n\npidfile=\"/var/run/npm.pid\"\noutput_log=\"/var/log/npm.log\"\nerror_log=\"/var/log/npm.err\"\n\ndepends () {\n before openresty\n}\n\nstart_pre() {\n mkdir -p /tmp/nginx/body /data/letsencrypt-acme-challenge\n export NODE_ENV=production\n}\n\nstop() {\n pkill -9 -f node\n return 0\n}\n\nrestart() {\n \$0 stop\n \$0 start\n}"
|
||||
EPS_DEPENDENCIES="gcc g++ make musl-dev openssl-dev git libffi-dev python3-dev"
|
||||
|
||||
if [ "$EPS_OS_DISTRO" = "debian" -o "$EPS_OS_DISTRO" = "ubuntu" ]; then
|
||||
EPS_SERVICE_FILE=/lib/systemd/system/npm.service
|
||||
EPS_SERVICE_DATA="[Unit]\nDescription=Nginx Proxy Manager\nAfter=network.target\nWants=openresty.service\n\n[Service]\nType=simple\nEnvironment=NODE_ENV=production\nExecStartPre=-/bin/mkdir -p /tmp/nginx/body /data/letsencrypt-acme-challenge\nExecStart=/usr/local/bin/node index.js --abort_on_uncaught_exception --max_old_space_size=250\nWorkingDirectory=/app\nRestart=on-failure\n\n[Install]\nWantedBy=multi-user.target"
|
||||
EPS_DEPENDENCIES="build-essential libssl-dev git libffi-dev python3-dev"
|
||||
fi
|
||||
|
||||
lxc_checks() {
|
||||
if [ "$EPS_CT_DISK_SIZE" -lt 4 ]; then
|
||||
log "warn" "This LXC container requires at least 4GB of disk space" 1
|
||||
fi
|
||||
}
|
||||
309
apps/nginx-proxy-manager/install.sh
Normal file
309
apps/nginx-proxy-manager/install.sh
Normal file
@@ -0,0 +1,309 @@
|
||||
#!/usr/bin/env bash
|
||||
EPS_BASE_URL=${EPS_BASE_URL:-}
|
||||
EPS_OS_DISTRO=${EPS_OS_DISTRO:-}
|
||||
EPS_UTILS=${EPS_UTILS:-}
|
||||
EPS_APP_CONFIG=${EPS_APP_CONFIG:-}
|
||||
EPS_CLEANUP=${EPS_CLEANUP:-false}
|
||||
EPS_CT_INSTALL=${EPS_CT_INSTALL:-false}
|
||||
|
||||
if [ -z "$EPS_BASE_URL" -o -z "$EPS_OS_DISTRO" -o -z "$EPS_UTILS" -o -z "$EPS_APP_CONFIG" ]; then
|
||||
printf "Script looded incorrectly!\n\n";
|
||||
exit 1;
|
||||
fi
|
||||
|
||||
source <(echo -n "$EPS_UTILS")
|
||||
source <(echo -n "$EPS_APP_CONFIG")
|
||||
source <(wget --no-cache -qO- ${EPS_BASE_URL}/utils/${EPS_OS_DISTRO}.sh)
|
||||
|
||||
pms_bootstrap
|
||||
pms_settraps
|
||||
if [ $EPS_CT_INSTALL = false ]; then
|
||||
pms_header
|
||||
fi
|
||||
|
||||
EPS_OS_ARCH=$(os_arch)
|
||||
EPS_OS_CODENAME=$(os_codename)
|
||||
EPS_OS_VERSION=${EPS_OS_VERSION:-$(os_version)}
|
||||
|
||||
# Check for previous install
|
||||
if [ -f "$EPS_SERVICE_FILE" ]; then
|
||||
step_start "Previous Installation" "Cleaning" "Cleaned"
|
||||
svc_stop npm
|
||||
svc_stop openresty
|
||||
|
||||
# Remove old installation files
|
||||
rm -rf /app \
|
||||
/var/www/html \
|
||||
/etc/nginx \
|
||||
/var/log/nginx \
|
||||
/var/lib/nginx \
|
||||
/var/cache/nginx \
|
||||
/opt/certbot/bin/certbot
|
||||
fi
|
||||
|
||||
step_start "Operating System" "Updating" "Updated"
|
||||
pkg_update
|
||||
pkg_upgrade
|
||||
|
||||
step_start "Dependencies" "Installing" "Installed"
|
||||
# Remove potential conflicting depenedencies
|
||||
pkg_del nodejs npm yarn *certbot rust* cargo*
|
||||
# Install required depenedencies
|
||||
pkg_add ca-certificates gnupg openssl apache2-utils logrotate $EPS_DEPENDENCIES
|
||||
|
||||
step_start "Rust" "Installing" "Installed"
|
||||
_rustArch=""
|
||||
_rustClibtype="gnu"
|
||||
|
||||
if [ "$EPS_OS_DISTRO" = "alpine" ]; then
|
||||
_rustClibtype="musl"
|
||||
fi
|
||||
|
||||
case "${EPS_OS_ARCH##*-}" in
|
||||
amd64 | x86_64) _rustArch="x86_64-unknown-linux-${_rustClibtype}";;
|
||||
arm64 | aarch64) _rustArch="aarch64-unknown-linux-${_rustClibtype}";;
|
||||
armhf) _rustArch="armv7-unknown-linux-gnueabihf";;
|
||||
i386 | x86) _rustArch="i686-unknown-linux-${_rustClibtype}";;
|
||||
*) step_end "Architecture not supported: ${CLR_CYB}$EPS_OS_ARCH${CLR}" 1;;
|
||||
esac
|
||||
|
||||
if [ "$EPS_OS_DISTRO" = "alpine" ]; then
|
||||
if [ "$EPS_OS_ARCH" != "x86_64" -a "$EPS_OS_ARCH" != "aarch64" ]; then
|
||||
step_end "Architecture not supported: ${CLR_CYB}$EPS_OS_ARCH${CLR}" 1
|
||||
fi
|
||||
fi
|
||||
|
||||
os_fetch -O ./rustup-init https://static.rust-lang.org/rustup/archive/1.26.0/$_rustArch/rustup-init
|
||||
chmod +x ./rustup-init
|
||||
./rustup-init -q -y --no-modify-path --profile minimal --default-toolchain $RUST_VERSION --default-host $_rustArch &>$__OUTPUT
|
||||
rm ./rustup-init
|
||||
|
||||
ln -sf ~/.cargo/bin/cargo /usr//bin/cargo
|
||||
ln -sf ~/.cargo/bin/rustc /usr/bin/rustc
|
||||
ln -sf ~/.cargo/bin/rustup /usr/bin/rustup
|
||||
|
||||
step_end "Rust ${CLR_CYB}v$RUST_VERSION${CLR} ${CLR_GN}Installed"
|
||||
|
||||
step_start "Python"
|
||||
export PIP_ROOT_USER_ACTION=ignore
|
||||
# Remove old venv and global pip packages
|
||||
rm -rf /opt/certbot/ /usr/bin/certbot
|
||||
if [ "$(command -v pip)" ]; then
|
||||
pip uninstall -q -y cryptography cffi certbot tldextract --break-system-packages &>$__OUTPUT
|
||||
fi
|
||||
|
||||
# Remove potential conflicting depenedencies
|
||||
pkg_del *3-pip *3-cffi *3-cryptography *3-tldextract *3-distutils *3-venv
|
||||
|
||||
# Install python depenedencies
|
||||
pkg_add python3
|
||||
if [ "$EPS_OS_DISTRO" != "alpine" ]; then
|
||||
pkg_add python3-venv
|
||||
fi
|
||||
|
||||
PYTHON_VERSION=$(python3 -V | sed 's/.* \([0-9]\).\([0-9]*\).*/\1.\2/')
|
||||
if printf "$PYTHON_VERSION\n3.2" | sort -cV &>/dev/null; then
|
||||
step_end "Python 3.2+ required, you currently have ${CLR_CYB}v$PYTHON_VERSION${CLR} installed" 1
|
||||
fi
|
||||
|
||||
_pipGetScript="https://bootstrap.pypa.io/get-pip.py"
|
||||
if printf "$PYTHON_VERSION\n3.7" | sort -cV &>/dev/null; then
|
||||
_pipGetScript="https://bootstrap.pypa.io/pip/$PYTHON_VERSION/get-pip.py"
|
||||
fi
|
||||
|
||||
# Setup venv and install pip packages in venv
|
||||
python3 -m venv /opt/certbot/
|
||||
. /opt/certbot/bin/activate
|
||||
os_fetch -O- $_pipGetScript | python3 >$__OUTPUT
|
||||
pip install -q -U --no-cache-dir cryptography cffi certbot tldextract
|
||||
PIP_VERSION=$(pip -V 2>&1 | grep -o 'pip [0-9.]* ' | awk '{print $2}')
|
||||
deactivate
|
||||
|
||||
ln -sf /usr/bin/python3 /usr/bin/python
|
||||
ln -sf /opt/certbot/bin/pip /usr/bin/pip
|
||||
ln -sf /opt/certbot/bin/certbot /usr/bin/certbot
|
||||
|
||||
step_end "Python ${CLR_CYB}v$PYTHON_VERSION${CLR} ${CLR_GN}and Pip${CLR} ${CLR_CYB}v$PIP_VERSION${CLR} ${CLR_GN}Installed"
|
||||
|
||||
step_start "Openresty"
|
||||
if [ "$EPS_OS_DISTRO" = "alpine" ]; then
|
||||
os_fetch -O /etc/apk/keys/admin@openresty.com-5ea678a6.rsa.pub 'http://openresty.org/package/admin@openresty.com-5ea678a6.rsa.pub'
|
||||
sed -i '/openresty.org/d' /etc/apk/repositories >$__OUTPUT
|
||||
printf "http://openresty.org/package/alpine/v$EPS_OS_VERSION/main"| tee -a /etc/apk/repositories >$__OUTPUT
|
||||
else
|
||||
os_fetch -O- https://openresty.org/package/pubkey.gpg | gpg --yes --dearmor -o /usr/share/keyrings/openresty.gpg &>$__OUTPUT
|
||||
|
||||
repository=http://openresty.org/package/$EPS_OS_DISTRO
|
||||
if [ "$EPS_OS_ARCH" != "amd64" ]; then
|
||||
repository=http://openresty.org/package/$EPS_OS_ARCH/$EPS_OS_DISTRO
|
||||
fi
|
||||
|
||||
source="deb [arch=$EPS_OS_ARCH signed-by=/usr/share/keyrings/openresty.gpg] $repository $EPS_OS_CODENAME "
|
||||
if [ "$EPS_OS_DISTRO" = "debian" ]; then
|
||||
source+="openresty"
|
||||
else
|
||||
source+="main"
|
||||
fi
|
||||
printf "$source" | tee /etc/apt/sources.list.d/openresty.list >$__OUTPUT
|
||||
fi
|
||||
|
||||
pkg_update
|
||||
pkg_add openresty
|
||||
ln -sf /usr/local/openresty/nginx/sbin/nginx /usr/sbin/nginx
|
||||
ln -sf /usr/local/openresty/nginx/ /etc/nginx
|
||||
OPENRESTY_VERSION=$(openresty -v 2>&1 | grep -o '[0-9.]*$')
|
||||
step_end "Openresty ${CLR_CYB}v$OPENRESTY_VERSION${CLR} ${CLR_GN}Installed"
|
||||
|
||||
step_start "Node.js"
|
||||
_nodePackage=""
|
||||
_nodeArch=""
|
||||
_opensslArch="linux*"
|
||||
|
||||
case "${EPS_OS_ARCH##*-}" in
|
||||
amd64 | x86_64) _nodeArch="x64" _opensslArch="linux-x86_64";;
|
||||
ppc64el) _nodeArch="ppc64le" _opensslArch="linux-ppc64le";;
|
||||
s390x) _nodeArch="s390x" _opensslArch="linux-s390x";;
|
||||
arm64 | aarch64) _nodeArch="arm64" _opensslArch="linux-aarch64";;
|
||||
armhf) _nodeArch="armv7l" _opensslArch="linux-armv4";;
|
||||
i386 | x86) _nodeArch="x86" _opensslArch="linux-elf";;
|
||||
*) step_end "Architecture not supported: ${CLR_CYB}$EPS_OS_ARCH${CLR}" 1;;
|
||||
esac
|
||||
|
||||
if [ "$EPS_OS_DISTRO" = "alpine" ]; then
|
||||
if [ "$_nodeArch" != "x64" ]; then
|
||||
step_end "Architecture not supported: ${CLR_CYB}$EPS_OS_ARCH${CLR}" 1
|
||||
fi
|
||||
|
||||
_nodePackage="node-$NODE_VERSION-linux-$_nodeArch-musl.tar.xz"
|
||||
os_fetch -O $_nodePackage https://unofficial-builds.nodejs.org/download/release/$NODE_VERSION/$_nodePackage
|
||||
os_fetch -O SHASUMS256.txt https://unofficial-builds.nodejs.org/download/release/$NODE_VERSION/SHASUMS256.txt
|
||||
else
|
||||
_nodePackage="node-$NODE_VERSION-linux-$_nodeArch.tar.xz"
|
||||
os_fetch -O $_nodePackage https://nodejs.org/dist/$NODE_VERSION/$_nodePackage
|
||||
os_fetch -O SHASUMS256.txt https://nodejs.org/dist/$NODE_VERSION/SHASUMS256.txt
|
||||
fi
|
||||
|
||||
grep " $_nodePackage\$" SHASUMS256.txt | sha256sum -c >$__OUTPUT
|
||||
tar -xJf "$_nodePackage" -C /usr/local --strip-components=1 --no-same-owner >$__OUTPUT
|
||||
ln -sf /usr/local/bin/node /usr/local/bin/nodejs
|
||||
rm "$_nodePackage" SHASUMS256.txt
|
||||
find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name "$_opensslArch" -exec rm -rf {} \; >$__OUTPUT
|
||||
step_end "Node.js ${CLR_CYB}$NODE_VERSION${CLR} ${CLR_GN}Installed"
|
||||
|
||||
step_start "Yarn"
|
||||
export GNUPGHOME="$(mktemp -d)"
|
||||
for key in 6A010C5166006599AA17F08146C2130DFD2497F5; do
|
||||
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" ;
|
||||
done
|
||||
|
||||
os_fetch -O yarn-v$YARN_VERSION.tar.gz https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz
|
||||
os_fetch -O yarn-v$YARN_VERSION.tar.gz.asc https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz.asc
|
||||
gpg -q --batch --verify yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz >$__OUTPUT
|
||||
gpgconf --kill all
|
||||
tar -xzf yarn-v$YARN_VERSION.tar.gz -C /opt/
|
||||
ln -sf /opt/yarn-v$YARN_VERSION/bin/yarn /usr/local/bin/yarn
|
||||
ln -sf /opt/yarn-v$YARN_VERSION/bin/yarnpkg /usr/local/bin/yarnpkg
|
||||
rm -rf "$GNUPGHOME" yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz
|
||||
step_end "Yarn ${CLR_CYB}v$YARN_VERSION${CLR} ${CLR_GN}Installed"
|
||||
|
||||
step_start "Nginx Proxy Manager" "Downloading" "Downloaded"
|
||||
NPM_VERSION=$(os_fetch -O- https://api.github.com/repos/NginxProxyManager/nginx-proxy-manager/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
|
||||
os_fetch -O- https://codeload.github.com/NginxProxyManager/nginx-proxy-manager/tar.gz/v$NPM_VERSION | tar -xz
|
||||
cd ./nginx-proxy-manager-$NPM_VERSION
|
||||
step_end "Nginx Proxy Manager ${CLR_CYB}v$NPM_VERSION${CLR} ${CLR_GN}Downloaded"
|
||||
|
||||
step_start "Enviroment" "Setting up" "Setup"
|
||||
# Update NPM version in package.json files
|
||||
sed -i "s+0.0.0+$NPM_VERSION+g" backend/package.json
|
||||
sed -i "s+0.0.0+$NPM_VERSION+g" frontend/package.json
|
||||
|
||||
# Fix nginx config files for use with openresty defaults
|
||||
sed -i 's/user npm/user root/g; s/^pid/#pid/g; s+^daemon+#daemon+g' docker/rootfs/etc/nginx/nginx.conf
|
||||
sed -i 's/include-system-site-packages = false/include-system-site-packages = true/g' /opt/certbot/pyvenv.cfg
|
||||
_nginxConfigs=$(find ./ -type f -name "*.conf")
|
||||
for _nginxConfig in $_nginxConfigs; do
|
||||
sed -i 's+include conf.d+include /etc/nginx/conf.d+g' "$_nginxConfig"
|
||||
done
|
||||
|
||||
# Copy runtime files
|
||||
mkdir -p /var/www/html /etc/nginx/logs
|
||||
cp -r docker/rootfs/var/www/html/* /var/www/html/
|
||||
cp -r docker/rootfs/etc/nginx/* /etc/nginx/
|
||||
cp docker/rootfs/etc/letsencrypt.ini /etc/letsencrypt.ini
|
||||
cp docker/rootfs/etc/logrotate.d/nginx-proxy-manager /etc/logrotate.d/nginx-proxy-manager
|
||||
ln -sf /etc/nginx/nginx.conf /etc/nginx/conf/nginx.conf
|
||||
rm -f /etc/nginx/conf.d/dev.conf
|
||||
|
||||
# Create required folders
|
||||
mkdir -p \
|
||||
/data/nginx \
|
||||
/data/custom_ssl \
|
||||
/data/logs \
|
||||
/data/access \
|
||||
/data/nginx/default_host \
|
||||
/data/nginx/default_www \
|
||||
/data/nginx/proxy_host \
|
||||
/data/nginx/redirection_host \
|
||||
/data/nginx/stream \
|
||||
/data/nginx/dead_host \
|
||||
/data/nginx/temp \
|
||||
/data/letsencrypt-acme-challenge \
|
||||
/run/nginx \
|
||||
/tmp/nginx/body \
|
||||
/var/log/nginx \
|
||||
/var/lib/nginx/cache/public \
|
||||
/var/lib/nginx/cache/private \
|
||||
/var/cache/nginx/proxy_temp
|
||||
|
||||
# Set permissions
|
||||
touch /var/log/nginx/error.log
|
||||
chmod 777 /var/log/nginx/error.log
|
||||
chmod -R 777 /var/cache/nginx
|
||||
chmod 644 /etc/logrotate.d/nginx-proxy-manager
|
||||
chown root /tmp/nginx
|
||||
chmod -R 777 /var/cache/nginx
|
||||
|
||||
# Dynamically generate resolvers file, if resolver is IPv6, enclose in `[]`
|
||||
echo resolver "$(awk 'BEGIN{ORS=" "} $1=="nameserver" { sub(/%.*$/,"",$2); print ($2 ~ ":")? "["$2"]": $2}' /etc/resolv.conf) valid=10s;" > /etc/nginx/conf.d/include/resolvers.conf
|
||||
|
||||
# Copy app files
|
||||
mkdir -p /app/global /app/frontend/images
|
||||
cp -r backend/* /app
|
||||
cp -r global/* /app/global
|
||||
|
||||
step_start "Frontend" "Building" "Built"
|
||||
cd ./frontend
|
||||
export NODE_ENV=development
|
||||
yarn cache clean --silent --force >$__OUTPUT
|
||||
yarn install --silent --network-timeout=30000 >$__OUTPUT
|
||||
yarn build >$__OUTPUT
|
||||
cp -r dist/* /app/frontend
|
||||
cp -r app-images/* /app/frontend/images
|
||||
|
||||
step_start "Backend" "Initializing" "Initialized"
|
||||
rm -rf /app/config/default.json &>$__OUTPUT
|
||||
if [ ! -f /app/config/production.json ]; then
|
||||
_npmConfig="{\n \"database\": {\n \"engine\": \"knex-native\",\n \"knex\": {\n \"client\": \"sqlite3\",\n \"connection\": {\n \"filename\": \"/data/database.sqlite\"\n }\n }\n }\n}"
|
||||
printf "$_npmConfig\n" | tee /app/config/production.json >$__OUTPUT
|
||||
fi
|
||||
cd /app
|
||||
export NODE_ENV=development
|
||||
yarn install --silent --network-timeout=30000 >$__OUTPUT
|
||||
|
||||
step_start "Services" "Starting" "Started"
|
||||
printf "$EPS_SERVICE_DATA\n" | tee $EPS_SERVICE_FILE >$__OUTPUT
|
||||
chmod a+x $EPS_SERVICE_FILE
|
||||
|
||||
svc_add openresty
|
||||
svc_add npm
|
||||
|
||||
step_start "Enviroment" "Cleaning" "Cleaned"
|
||||
yarn cache clean --silent --force >$__OUTPUT
|
||||
# find /tmp -mindepth 1 -maxdepth 1 -not -name nginx -exec rm -rf '{}' \;
|
||||
if [ "$EPS_CLEANUP" = true ]; then
|
||||
pkg_del "$EPS_DEPENDENCIES"
|
||||
fi
|
||||
pkg_clean
|
||||
|
||||
step_end "Installation complete"
|
||||
printf "\nNginx Proxy Manager should be reachable at ${CLR_CYB}http://$(os_ip):81${CLR}\n\n"
|
||||
Reference in New Issue
Block a user