Pouzor
a56204a5f2
All settings (auth credentials, scanner ranges, status_checker interval) now live in a single .env file via pydantic-settings. config.yml and config.yml.example are deleted. - Settings: add auth_username, auth_password_hash, scanner_ranges, status_checker_interval; add load_overrides()/save_overrides() for persisting runtime changes to data/scan_config.json - auth.py: read credentials directly from settings - scan.py: read ranges/interval from settings; write-back via save_overrides() - scheduler.py: read interval directly from settings - main.py: call settings.load_overrides() at startup - docker-compose.yml: remove config.yml volume mount, add new env vars - conftest.py: set settings fields directly instead of writing a temp config.yml
145 lines
5.7 KiB
Bash
Executable File
145 lines
5.7 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Homelable — LXC/VM bootstrap installer
|
|
# Compatible with Proxmox VE (Debian/Ubuntu LXC containers)
|
|
# Usage: bash <(curl -fsSL https://raw.githubusercontent.com/Pouzor/homelable/main/scripts/lxc-install.sh)
|
|
|
|
set -euo pipefail
|
|
|
|
INSTALL_DIR=/opt/homelable
|
|
DATA_DIR=/opt/homelable/data
|
|
SERVICE_USER=homelable
|
|
|
|
RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'; NC='\033[0m'
|
|
info() { echo -e "${GREEN}[homelable]${NC} $*"; }
|
|
warn() { echo -e "${YELLOW}[homelable]${NC} $*"; }
|
|
error() { echo -e "${RED}[homelable]${NC} $*"; exit 1; }
|
|
|
|
[[ $EUID -ne 0 ]] && error "Run as root (sudo bash ...)"
|
|
|
|
# ── Detect OS ────────────────────────────────────────────────────────────────
|
|
if [[ -f /etc/os-release ]]; then
|
|
. /etc/os-release
|
|
OS=$ID
|
|
else
|
|
error "Cannot detect OS"
|
|
fi
|
|
|
|
info "Detected: $PRETTY_NAME"
|
|
[[ "$OS" =~ ^(debian|ubuntu)$ ]] || error "Requires Debian or Ubuntu"
|
|
|
|
# ── System deps ──────────────────────────────────────────────────────────────
|
|
info "Installing system dependencies..."
|
|
apt-get update -qq
|
|
apt-get install -y -qq \
|
|
python3 python3-pip python3-venv \
|
|
nmap curl git nginx
|
|
|
|
# ── Node.js (for frontend build) ─────────────────────────────────────────────
|
|
if ! command -v node &>/dev/null; then
|
|
info "Installing Node.js 20..."
|
|
curl -fsSL https://deb.nodesource.com/setup_20.x | bash -
|
|
apt-get install -y -qq nodejs
|
|
fi
|
|
|
|
# ── Service user ─────────────────────────────────────────────────────────────
|
|
if ! id "$SERVICE_USER" &>/dev/null; then
|
|
useradd --system --shell /sbin/nologin "$SERVICE_USER"
|
|
info "Created user: $SERVICE_USER"
|
|
fi
|
|
|
|
# ── Clone / update repo ───────────────────────────────────────────────────────
|
|
REPO_URL="https://github.com/Pouzor/homelable.git"
|
|
if [[ -d "$INSTALL_DIR/.git" ]]; then
|
|
info "Updating existing installation..."
|
|
git -C "$INSTALL_DIR" pull
|
|
else
|
|
info "Cloning repository..."
|
|
git clone "$REPO_URL" "$INSTALL_DIR"
|
|
fi
|
|
|
|
mkdir -p "$DATA_DIR"
|
|
|
|
# ── Backend ───────────────────────────────────────────────────────────────────
|
|
info "Setting up Python backend..."
|
|
cd "$INSTALL_DIR/backend"
|
|
python3 -m venv .venv
|
|
.venv/bin/pip install --quiet -r requirements.txt
|
|
|
|
# Generate config.yml if missing
|
|
if [[ ! -f config.yml ]]; then
|
|
cp config.yml.example config.yml 2>/dev/null || cat > config.yml <<'CONF'
|
|
auth:
|
|
username: admin
|
|
password_hash: "$2b$12$o/LWyvmBc978CNpSsHxcveXN0WqjAGW/gBR0.U.HURWbaYD3GCDqS"
|
|
|
|
scanner:
|
|
ranges:
|
|
- "192.168.1.0/24"
|
|
|
|
status_checker:
|
|
interval_seconds: 60
|
|
CONF
|
|
warn "Created default config.yml — change admin password!"
|
|
fi
|
|
|
|
# Generate .env if missing
|
|
if [[ ! -f .env ]]; then
|
|
SECRET=$(python3 -c "import secrets; print(secrets.token_hex(32))")
|
|
cat > .env <<EOF
|
|
SECRET_KEY=$SECRET
|
|
SQLITE_PATH=$DATA_DIR/homelab.db
|
|
CONFIG_PATH=$INSTALL_DIR/backend/config.yml
|
|
CORS_ORIGINS=http://localhost
|
|
EOF
|
|
fi
|
|
|
|
chown -R "$SERVICE_USER":"$SERVICE_USER" "$DATA_DIR"
|
|
chown -R "$SERVICE_USER":"$SERVICE_USER" "$INSTALL_DIR/backend/.venv"
|
|
|
|
# ── systemd: backend ─────────────────────────────────────────────────────────
|
|
cat > /etc/systemd/system/homelable-backend.service <<EOF
|
|
[Unit]
|
|
Description=Homelable Backend
|
|
After=network.target
|
|
|
|
[Service]
|
|
Type=simple
|
|
User=$SERVICE_USER
|
|
WorkingDirectory=$INSTALL_DIR/backend
|
|
EnvironmentFile=$INSTALL_DIR/backend/.env
|
|
ExecStart=$INSTALL_DIR/backend/.venv/bin/uvicorn app.main:app --host 127.0.0.1 --port 8000
|
|
Restart=always
|
|
RestartSec=5
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
EOF
|
|
|
|
# ── Frontend ──────────────────────────────────────────────────────────────────
|
|
info "Building frontend..."
|
|
cd "$INSTALL_DIR/frontend"
|
|
npm ci --silent
|
|
VITE_API_BASE=/api npm run build
|
|
|
|
# ── nginx ─────────────────────────────────────────────────────────────────────
|
|
cp "$INSTALL_DIR/docker/nginx.conf" /etc/nginx/sites-available/homelable
|
|
# Adjust for local backend (not docker network)
|
|
sed -i 's/http:\/\/backend:8000/http:\/\/127.0.0.1:8000/g' /etc/nginx/sites-available/homelable
|
|
# Adjust root to dist
|
|
sed -i "s|/usr/share/nginx/html|$INSTALL_DIR/frontend/dist|g" /etc/nginx/sites-available/homelable
|
|
ln -sf /etc/nginx/sites-available/homelable /etc/nginx/sites-enabled/homelable
|
|
rm -f /etc/nginx/sites-enabled/default
|
|
nginx -t && systemctl reload nginx
|
|
|
|
# ── Enable & start ────────────────────────────────────────────────────────────
|
|
systemctl daemon-reload
|
|
systemctl enable --now homelable-backend
|
|
systemctl enable --now nginx
|
|
|
|
info "Done!"
|
|
echo ""
|
|
echo -e " ${GREEN}Homelable is running at http://$(hostname -I | awk '{print $1}')${NC}"
|
|
echo -e " Default login: admin / admin"
|
|
echo -e " ${YELLOW}Change the password in $INSTALL_DIR/backend/config.yml${NC}"
|
|
echo ""
|