From 77159ce1cdbb2702718549ed464ce48adecabda8 Mon Sep 17 00:00:00 2001 From: Pouzor Date: Tue, 26 May 2026 15:13:14 +0200 Subject: [PATCH] feat(scripts): add LXC/bare-metal MCP install script Adds scripts/lxc-mcp-install.sh for Proxmox LXC and other non-Docker hosts. Creates a homelable-mcp systemd service, prompts for MCP_API_KEY / MCP_SERVICE_KEY (auto-generated on Enter), and skips prompts when mcp/.env already exists so user edits are preserved. Closes #132 --- README.md | 4 + scripts/lxc-mcp-install.sh | 153 +++++++++++++++++++++++++++++++++++++ 2 files changed, 157 insertions(+) create mode 100755 scripts/lxc-mcp-install.sh diff --git a/README.md b/README.md index 8b5ada9..592376c 100644 --- a/README.md +++ b/README.md @@ -223,6 +223,10 @@ docker compose up -d mcp # MCP server is now listening on http://:8001 ``` +> **Proxmox LXC / bare-metal (no Docker):** run `sudo bash scripts/lxc-mcp-install.sh`. +> Installs a `homelable-mcp` systemd service, prompts for `MCP_API_KEY` / `MCP_SERVICE_KEY` +> (auto-generated if you press Enter), and skips prompts if `mcp/.env` already exists. + **3. Configure your AI client:** **Claude Code** — run this command in your terminal: diff --git a/scripts/lxc-mcp-install.sh b/scripts/lxc-mcp-install.sh new file mode 100755 index 0000000..957c5a4 --- /dev/null +++ b/scripts/lxc-mcp-install.sh @@ -0,0 +1,153 @@ +#!/bin/bash +# Install / enable the Homelable MCP server as a systemd service on a +# Proxmox LXC (or any Debian/Ubuntu host) where Docker is NOT used. +# +# Idempotent: re-running is safe. If mcp/.env already exists, the script +# keeps it untouched and only refreshes the venv + systemd unit. +# +# Usage (run as root inside the LXC): +# bash scripts/lxc-mcp-install.sh +# INSTALL_DIR=/srv/homelable bash scripts/lxc-mcp-install.sh +set -euo pipefail + +INSTALL_DIR="${INSTALL_DIR:-/opt/homelable}" +SERVICE_USER="${SERVICE_USER:-homelable}" +SERVICE_NAME="homelable-mcp" +MCP_PORT="${MCP_PORT:-8001}" +DEFAULT_BACKEND_URL="http://127.0.0.1:8000" + +log() { printf '\033[1;36m==>\033[0m %s\n' "$*"; } +warn() { printf '\033[1;33m!!\033[0m %s\n' "$*" >&2; } +fail() { printf '\033[1;31mxx\033[0m %s\n' "$*" >&2; exit 1; } + +# --- preflight --------------------------------------------------------------- +[[ $EUID -eq 0 ]] || fail "Run as root (sudo bash $0)." + +MCP_DIR="$INSTALL_DIR/mcp" +[[ -d "$MCP_DIR" ]] || fail "Not found: $MCP_DIR — clone the repo to $INSTALL_DIR first, or set INSTALL_DIR=..." +[[ -f "$MCP_DIR/requirements.txt" ]] || fail "Missing $MCP_DIR/requirements.txt — repo layout unexpected." + +if ss -ltn 2>/dev/null | awk '{print $4}' | grep -qE "[:.]${MCP_PORT}$"; then + warn "Port $MCP_PORT already in use. If it's a previous $SERVICE_NAME instance this is fine; otherwise abort and free the port." +fi + +# --- packages ---------------------------------------------------------------- +log "Installing OS dependencies (python3-venv, curl)" +apt-get update -qq +DEBIAN_FRONTEND=noninteractive apt-get install -y -qq python3 python3-venv python3-pip curl >/dev/null + +# --- service user ------------------------------------------------------------ +if ! id -u "$SERVICE_USER" >/dev/null 2>&1; then + log "Creating service user '$SERVICE_USER'" + useradd --system --home "$INSTALL_DIR" --shell /usr/sbin/nologin "$SERVICE_USER" +fi + +# --- .env -------------------------------------------------------------------- +ENV_FILE="$MCP_DIR/.env" +if [[ -f "$ENV_FILE" ]]; then + log ".env already present at $ENV_FILE — keeping user values (prompts skipped)" +else + [[ -f "$MCP_DIR/.env.example" ]] || fail "Missing $MCP_DIR/.env.example" + log "No .env found — generating one (press Enter to accept defaults)" + + gen_key() { python3 -c "import secrets;print('$1' + secrets.token_hex(24))"; } + default_api_key="$(gen_key mcp_sk_)" + default_svc_key="$(gen_key svc_)" + + read -rp "MCP_API_KEY (client → MCP) [default: auto-generate]: " api_key + api_key="${api_key:-$default_api_key}" + + read -rp "MCP_SERVICE_KEY (MCP → backend, must match backend .env) [default: auto-generate]: " svc_key + svc_key="${svc_key:-$default_svc_key}" + + read -rp "BACKEND_URL [$DEFAULT_BACKEND_URL]: " backend_url + backend_url="${backend_url:-$DEFAULT_BACKEND_URL}" + + umask 077 + cat >"$ENV_FILE" <"$UNIT" </dev/null 2>&1; then + ok=1; break + fi + sleep 1 +done +if [[ "$ok" -ne 1 ]]; then + warn "MCP did not respond on /health within 10s. Check: journalctl -u $SERVICE_NAME -n 50" +else + log "MCP server is up." +fi + +# --- summary ----------------------------------------------------------------- +LXC_IP="$(hostname -I 2>/dev/null | awk '{print $1}')" +API_KEY_VALUE="$(grep -E '^MCP_API_KEY=' "$ENV_FILE" | cut -d= -f2-)" + +cat <}:${MCP_PORT}/mcp + Env file: $ENV_FILE + Logs: journalctl -u $SERVICE_NAME -f + +Claude Code client setup: + claude mcp add --transport sse homelable http://${LXC_IP:-}:${MCP_PORT}/mcp \\ + --header "X-API-Key: $API_KEY_VALUE" +---------------------------------------------------------------- +EOF