97 lines
2.8 KiB
Bash
97 lines
2.8 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
# Copyright (c) 2021-2026 community-scripts ORG
|
|
# Author: MickLesk (CanbiZ)
|
|
# License: MIT | https://github.com/community-scripts/ProxmoxVED/raw/main/LICENSE
|
|
# Source: https://github.com/fleetdm/fleet
|
|
|
|
source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
|
|
color
|
|
verb_ip6
|
|
catch_errors
|
|
setting_up_container
|
|
network_check
|
|
update_os
|
|
|
|
setup_mysql
|
|
|
|
MYSQL_DB_NAME="fleet" MYSQL_DB_USER="fleet" setup_mysql_db
|
|
|
|
msg_info "Installing Dependencies"
|
|
$STD apt install -y redis-server
|
|
msg_ok "Installed Dependencies"
|
|
|
|
fetch_and_deploy_gh_release "fleet" "fleetdm/fleet" "prebuild" "latest" "/opt/fleet" "fleet_v*_linux.tar.gz"
|
|
|
|
msg_info "Configuring Application"
|
|
chmod +x /opt/fleet/fleet
|
|
PRIVATE_KEY=$(openssl rand -hex 32)
|
|
cat <<EOF >/opt/fleet/.env
|
|
FLEET_MYSQL_ADDRESS=127.0.0.1:3306
|
|
FLEET_MYSQL_DATABASE=fleet
|
|
FLEET_MYSQL_USERNAME=fleet
|
|
FLEET_MYSQL_PASSWORD=${MYSQL_DB_PASS}
|
|
FLEET_SERVER_ADDRESS=0.0.0.0:8080
|
|
FLEET_SERVER_TLS=false
|
|
FLEET_SERVER_PRIVATE_KEY=${PRIVATE_KEY}
|
|
FLEET_REDIS_ADDRESS=127.0.0.1:6379
|
|
FLEET_LOGGING_JSON=true
|
|
EOF
|
|
msg_ok "Configured Application"
|
|
|
|
msg_info "Running Database Migrations"
|
|
set -a && source /opt/fleet/.env && set +a
|
|
$STD /opt/fleet/fleet prepare db --no-prompt
|
|
msg_ok "Ran Database Migrations"
|
|
|
|
msg_info "Creating Service"
|
|
cat <<EOF >/etc/systemd/system/fleet.service
|
|
[Unit]
|
|
Description=Fleet
|
|
After=network.target mysql.service redis-server.service
|
|
Requires=mysql.service redis-server.service
|
|
|
|
[Service]
|
|
Type=simple
|
|
User=root
|
|
WorkingDirectory=/opt/fleet
|
|
EnvironmentFile=/opt/fleet/.env
|
|
ExecStart=/opt/fleet/fleet serve
|
|
Restart=on-failure
|
|
RestartSec=5
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
EOF
|
|
systemctl enable -q --now fleet redis-server
|
|
msg_ok "Created Service"
|
|
|
|
msg_info "Initializing Fleet"
|
|
FLEET_ADMIN_EMAIL="admin@fleet.local"
|
|
FLEET_ADMIN_PASS="$(openssl rand -hex 8)1!"
|
|
ELAPSED=0
|
|
until curl -sf "http://127.0.0.1:8080/healthz" >/dev/null 2>&1; do
|
|
sleep 2
|
|
ELAPSED=$((ELAPSED + 2))
|
|
[[ $ELAPSED -ge 60 ]] && break
|
|
done
|
|
SETUP_RESPONSE=$(curl -s -X POST "http://127.0.0.1:8080/api/v1/setup" \
|
|
-H "Content-Type: application/json" \
|
|
-d "{\"admin\":{\"admin\":true,\"email\":\"${FLEET_ADMIN_EMAIL}\",\"name\":\"Admin\",\"password\":\"${FLEET_ADMIN_PASS}\"},\"org_info\":{\"org_name\":\"Fleet\",\"org_logo_url\":\"\"},\"server_url\":\"http://127.0.0.1:8080\"}")
|
|
FLEET_TOKEN=$(echo "${SETUP_RESPONSE}" | grep -o '"token":"[^"]*"' | cut -d'"' -f4) || true
|
|
if [[ -n "${FLEET_TOKEN}" ]]; then
|
|
curl -s -X PATCH "http://127.0.0.1:8080/api/latest/fleet/config" \
|
|
-H "Content-Type: application/json" \
|
|
-H "Authorization: Bearer ${FLEET_TOKEN}" \
|
|
-d "{\"server_settings\":{\"server_url\":\"http://${LOCAL_IP}:8080\"}}" >/dev/null
|
|
fi
|
|
cat <<EOF >>/opt/fleet/.env
|
|
FLEET_ADMIN_EMAIL=${FLEET_ADMIN_EMAIL}
|
|
FLEET_ADMIN_PASSWORD=${FLEET_ADMIN_PASS}
|
|
EOF
|
|
msg_ok "Initialized Fleet"
|
|
|
|
motd_ssh
|
|
customize
|
|
cleanup_lxc
|