mirror of https://github.com/tteck/Proxmox
vrozaksen
12 months ago
parent
f59c1227be
commit
3e0729aef2
2 changed files with 358 additions and 0 deletions
@ -0,0 +1,83 @@ |
||||
#!/usr/bin/env bash |
||||
source <(curl -s https://raw.githubusercontent.com/tteck/Proxmox/main/misc/build.func) |
||||
# Copyright (c) 2021-2024 tteck |
||||
# Author: tteck (tteckster) |
||||
# Co-author: Rogue-King |
||||
# License: MIT |
||||
# https://github.com/tteck/Proxmox/raw/main/LICENSE |
||||
|
||||
function header_info { |
||||
clear |
||||
cat <<"EOF" |
||||
____ ___ ____ __ |
||||
/ __ \___ / (_)________ _____ / __ \____ _____ ___ / / |
||||
/ /_/ / _ \/ / / ___/ __ `/ __ \______/ /_/ / __ `/ __ \/ _ \/ / |
||||
/ ____/ __/ / / /__/ /_/ / / / /_____/ ____/ /_/ / / / / __/ / |
||||
/_/ \___/_/_/\___/\__,_/_/ /_/ /_/ \__,_/_/ /_/\___/_/ |
||||
|
||||
EOF |
||||
} |
||||
header_info |
||||
echo -e "Loading..." |
||||
APP="Pelican-Panel" |
||||
var_disk="8" |
||||
var_cpu="1" |
||||
var_ram="1024" |
||||
var_os="debian" |
||||
var_version="12" |
||||
variables |
||||
color |
||||
catch_errors |
||||
|
||||
function default_settings() { |
||||
CT_TYPE="1" |
||||
PW="" |
||||
CT_ID=$NEXTID |
||||
HN=$NSAPP |
||||
DISK_SIZE="$var_disk" |
||||
CORE_COUNT="$var_cpu" |
||||
RAM_SIZE="$var_ram" |
||||
BRG="vmbr0" |
||||
NET="dhcp" |
||||
GATE="" |
||||
APT_CACHER="" |
||||
APT_CACHER_IP="" |
||||
DISABLEIP6="no" |
||||
MTU="" |
||||
SD="" |
||||
NS="" |
||||
MAC="" |
||||
VLAN="" |
||||
SSH="no" |
||||
VERB="no" |
||||
echo_default |
||||
} |
||||
|
||||
function update_script() { |
||||
header_info |
||||
if [[ ! -d /var/www/pelican || ! $(ls -A /var/www/pelican) ]]; then msg_error "No ${APP} Installation Found!"; exit; fi |
||||
RELEASE=$(wget -q https://github.com/pelican-dev/panel/releases/latest -O - | grep "title>Release" | cut -d " " -f 4 | sed 's/^v//') |
||||
msg_info "Updating $APP to ${RELEASE}" |
||||
cd /var/www/pelican |
||||
php artisan down |
||||
curl -L https://github.com/pelican-dev/panel/releases/latest/download/panel.tar.gz |
||||
$STD tar -xzvf panel.tar.gz |
||||
chmod -R 755 storage/* bootstrap/cache |
||||
composer install --no-dev --optimize-autoloader |
||||
php artisan view:clear |
||||
php artisan config:clear |
||||
php artisan migrate --seed --force |
||||
chown -R www-data:www-data /var/www/pelican/* |
||||
php artisan queue:restart |
||||
php artisan up |
||||
msg_ok "Updated $APP Successfully" |
||||
exit |
||||
} |
||||
|
||||
start |
||||
build_container |
||||
description |
||||
|
||||
msg_ok "Completed Successfully!\n" |
||||
echo -e "${APP} should be reachable by going to the following URL. |
||||
${BL}http://${IP}:80${CL} \n" |
||||
@ -0,0 +1,275 @@ |
||||
#!/usr/bin/env bash |
||||
|
||||
# Copyright (c) 2021-2024 tteck |
||||
# Author: tteck (tteckster) |
||||
# Co-author: Rogue-King |
||||
# License: MIT |
||||
# https://github.com/tteck/Proxmox/raw/main/LICENSE |
||||
|
||||
source /dev/stdin <<< "$FUNCTIONS_FILE_PATH" |
||||
color |
||||
verb_ip6 |
||||
catch_errors |
||||
setting_up_container |
||||
network_check |
||||
update_os |
||||
|
||||
msg_info "Installing Dependencies" |
||||
$STD apt-get install -y curl |
||||
$STD apt-get install -y sudo |
||||
$STD apt-get install -y mc |
||||
$STD apt-get install -y tar |
||||
$STD apt-get install -y unzip |
||||
$STD apt-get install -y git |
||||
$STD apt-get install -y software-properties-common |
||||
$STD apt-get install -y libapache2-mod-php |
||||
$STD apt-get install -y certbot |
||||
msg_ok "Installed Dependencies" |
||||
|
||||
read -r -p "Would you like to install Redis? <y/N> (If you want to use external Redis server select 'N') " prompt |
||||
if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then |
||||
msg_info "Installing Redis" |
||||
wget -qO- https://packages.redis.io/gpg | gpg --dearmor >/usr/share/keyrings/redis-archive-keyring.gpg |
||||
echo "deb [signed-by=/usr/share/keyrings/redis-archive-keyring.gpg] https://packages.redis.io/deb $(lsb_release -cs) main" >/etc/apt/sources.list.d/redis.list |
||||
$STD apt-get update |
||||
$STD apt-get install -y redis |
||||
sed -i 's/^bind .*/bind 0.0.0.0/' /etc/redis/redis.conf |
||||
systemctl enable -q --now redis-server.service |
||||
msg_ok "Installed Redis" |
||||
fi |
||||
|
||||
read -r -p "Would you like to install MariaDB? <y/N> (If you want to use external MariaDB server select 'N') " prompt |
||||
if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then |
||||
msg_info "Installing MariaDB" |
||||
$STD bash <(curl -fsSL https://r.mariadb.com/downloads/mariadb_repo_setup) |
||||
$STD apt-get update |
||||
$STD apt-get install -y mariadb-server |
||||
sed -i 's/^# *\(port *=.*\)/\1/' /etc/mysql/my.cnf |
||||
sed -i 's/^bind-address/#bind-address/g' /etc/mysql/mariadb.conf.d/50-server.cnf |
||||
msg_ok "Installed MariaDB" |
||||
fi |
||||
|
||||
msg_info "Installing PHP" |
||||
$STD add-apt-repository ppa:ondrej/php |
||||
$STD apt-get update |
||||
$STD apt-get install -y php8.3 php8.3-{gd,mysql,mbstring,bcmath,xml,curl,zip,intl,sqlite3,fpm} |
||||
msg_ok "Installed PHP" |
||||
|
||||
msg_info "Installing Composer" |
||||
curl -sS https://getcomposer.org/installer | sudo php -- --install-dir=/usr/local/bin --filename=composer |
||||
msg_ok "Installed Composer" |
||||
|
||||
while true; do |
||||
CHOICE=$( |
||||
whiptail --backtitle "Proxmox VE Helper Scripts" --title "SUPPORT" --menu "Select option" 11 58 2 \ |
||||
"1" "Install Nginx" \ |
||||
"2" "Install Apache" 3>&2 2>&1 1>&3 |
||||
) |
||||
exit_status=$? |
||||
if [ $exit_status == 1 ]; then |
||||
clear |
||||
exit-script |
||||
fi |
||||
header_info |
||||
case $CHOICE in |
||||
1) |
||||
$STD apt-get update |
||||
$STD apt-get install -y nginx |
||||
exit |
||||
;; |
||||
2) |
||||
$STD apt-get update |
||||
$STD apt-get install -y apache2 |
||||
exit |
||||
;; |
||||
esac |
||||
done |
||||
|
||||
msg_info "Downloading Panel" |
||||
mkdir -p /var/www/pelican |
||||
cd /var/www/pelican |
||||
curl -L https://github.com/pelican-dev/panel/releases/latest/download/panel.tar.gz |
||||
$STD tar -xzvf panel.tar.gz |
||||
chmod -R 755 storage/* bootstrap/cache/ |
||||
msg_ok "Downloaded Panel" |
||||
|
||||
msg_info "Installing Panel" |
||||
composer install --no-dev --optimize-autoloader |
||||
php artisan p:environment:setup |
||||
php artisan p:environment:database |
||||
read -r -p "Would you like to setup Mail? <y/N> " prompt |
||||
if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then |
||||
php artisan p:environment:mail |
||||
fi |
||||
php artisan migrate --seed --force |
||||
php artisan p:user:make |
||||
msg_ok "Installed Panel" |
||||
|
||||
msg_info "Setting up Crontab and Permissions" |
||||
echo "* * * * * php /var/www/pelican/artisan schedule:run >> /dev/null 2>&1" >> /var/spool/cron/crontabs/root |
||||
chown -R www-data:www-data /var/www/pelican/* |
||||
msg_ok "Setup Crontab and Permissions" |
||||
|
||||
if FQDN=$(whiptail --backtitle "Proxmox VE Helper Scripts" --inputbox "Set FQDN" 8 58 "panel.example.com" --title "FQDN" 3>&1 1>&2 2>&3); then |
||||
if [ -z "$FQDN" ]; then |
||||
FQDN="panel.example.com" |
||||
else |
||||
FQDN=$(echo ${FQDN,,} | tr -d ' ') |
||||
fi |
||||
echo -e "${DGN}Using FQDN: ${BGN}$FQDN${CL}" |
||||
else |
||||
exit-script |
||||
fi |
||||
|
||||
msg_info "Creating Webserver Configuration" |
||||
while true; do |
||||
CHOICE=$( |
||||
whiptail --backtitle "Proxmox VE Helper Scripts" --title "SUPPORT" --menu "Select option" 11 58 4 \ |
||||
"1" "Setup Nginx (http)" \ |
||||
"2" "Setup Nginx (https)" \ |
||||
"3" "TBD: Setup Apache (http)" \ |
||||
"4" "TBD: Setup Apache (https)" 3>&2 2>&1 1>&3 |
||||
) |
||||
exit_status=$? |
||||
if [ $exit_status == 1 ]; then |
||||
clear |
||||
exit-script |
||||
fi |
||||
header_info |
||||
case $CHOICE in |
||||
1) |
||||
rm /etc/nginx/sites-enabled/default |
||||
cat <<EOF >/etc/nginx/sites-available/pelican.conf |
||||
server { |
||||
listen 80; |
||||
server_name $FQDN; |
||||
|
||||
|
||||
root /var/www/pelican/public; |
||||
index index.html index.htm index.php; |
||||
charset utf-8; |
||||
|
||||
location / { |
||||
try_files $uri $uri/ /index.php?$query_string; |
||||
} |
||||
|
||||
location = /favicon.ico { access_log off; log_not_found off; } |
||||
location = /robots.txt { access_log off; log_not_found off; } |
||||
|
||||
access_log off; |
||||
error_log /var/log/nginx/pelican.app-error.log error; |
||||
|
||||
# allow larger file uploads and longer script runtimes |
||||
client_max_body_size 100m; |
||||
client_body_timeout 120s; |
||||
|
||||
sendfile off; |
||||
|
||||
location ~ \.php$ { |
||||
fastcgi_split_path_info ^(.+\.php)(/.+)$; |
||||
fastcgi_pass unix:/run/php/php8.3-fpm.sock; |
||||
fastcgi_index index.php; |
||||
include fastcgi_params; |
||||
fastcgi_param PHP_VALUE "upload_max_filesize = 100M \n post_max_size=100M"; |
||||
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; |
||||
fastcgi_param HTTP_PROXY ""; |
||||
fastcgi_intercept_errors off; |
||||
fastcgi_buffer_size 16k; |
||||
fastcgi_buffers 4 16k; |
||||
fastcgi_connect_timeout 300; |
||||
fastcgi_send_timeout 300; |
||||
fastcgi_read_timeout 300; |
||||
} |
||||
|
||||
location ~ /\.ht { |
||||
deny all; |
||||
} |
||||
} |
||||
EOF |
||||
ln -s /etc/nginx/sites-available/pelican.conf /etc/nginx/sites-enabled/pelican.conf |
||||
systemctl restart nginx |
||||
exit |
||||
;; |
||||
2) |
||||
certbot certonly --standalone --preferred-challenges http -d $FQDN |
||||
rm /etc/nginx/sites-enabled/default |
||||
cat <<EOF >/etc/nginx/sites-available/pelican.conf |
||||
server { |
||||
listen 80; |
||||
server_name $FQDN; |
||||
return 301 https://$server_name$request_uri; |
||||
} |
||||
|
||||
server { |
||||
listen 443 ssl http2; |
||||
server_name $FQDN; |
||||
|
||||
root /var/www/pelican/public; |
||||
index index.php; |
||||
|
||||
access_log /var/log/nginx/pelican.app-access.log; |
||||
error_log /var/log/nginx/pelican.app-error.log error; |
||||
|
||||
# allow larger file uploads and longer script runtimes |
||||
client_max_body_size 100m; |
||||
client_body_timeout 120s; |
||||
|
||||
sendfile off; |
||||
|
||||
ssl_certificate /etc/letsencrypt/live/$FQDN/fullchain.pem; |
||||
ssl_certificate_key /etc/letsencrypt/live/$FQDN/privkey.pem; |
||||
ssl_session_cache shared:SSL:10m; |
||||
ssl_protocols TLSv1.2 TLSv1.3; |
||||
ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384"; |
||||
ssl_prefer_server_ciphers on; |
||||
|
||||
# See https://hstspreload.org/ before uncommenting the line below. |
||||
# add_header Strict-Transport-Security "max-age=15768000; preload;"; |
||||
add_header X-Content-Type-Options nosniff; |
||||
add_header X-XSS-Protection "1; mode=block"; |
||||
add_header X-Robots-Tag none; |
||||
add_header Content-Security-Policy "frame-ancestors 'self'"; |
||||
add_header X-Frame-Options DENY; |
||||
add_header Referrer-Policy same-origin; |
||||
|
||||
location / { |
||||
try_files $uri $uri/ /index.php?$query_string; |
||||
} |
||||
|
||||
location ~ \.php$ { |
||||
fastcgi_split_path_info ^(.+\.php)(/.+)$; |
||||
fastcgi_pass unix:/run/php/php8.3-fpm.sock; |
||||
fastcgi_index index.php; |
||||
include fastcgi_params; |
||||
fastcgi_param PHP_VALUE "upload_max_filesize = 100M \n post_max_size=100M"; |
||||
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; |
||||
fastcgi_param HTTP_PROXY ""; |
||||
fastcgi_intercept_errors off; |
||||
fastcgi_buffer_size 16k; |
||||
fastcgi_buffers 4 16k; |
||||
fastcgi_connect_timeout 300; |
||||
fastcgi_send_timeout 300; |
||||
fastcgi_read_timeout 300; |
||||
include /etc/nginx/fastcgi_params; |
||||
} |
||||
|
||||
location ~ /\.ht { |
||||
deny all; |
||||
} |
||||
} |
||||
EOF |
||||
ln -s /etc/nginx/sites-available/pelican.conf /etc/nginx/sites-enabled/pelican.conf |
||||
systemctl restart nginx |
||||
exit |
||||
;; |
||||
esac |
||||
done |
||||
msg_ok "Created Webserver Configuration" |
||||
|
||||
motd_ssh |
||||
customize |
||||
|
||||
msg_info "Cleaning up" |
||||
$STD apt-get -y autoremove |
||||
$STD apt-get -y autoclean |
||||
msg_ok "Cleaned" |
||||
Loading…
Reference in new issue