add wings installer script
This commit is contained in:
parent
5853ca433f
commit
137a6f1f00
GPG key ID:
37783FE2501AE402
2 changed files with 370 additions and 1 deletions
137
README.md
137
README.md
|
|
@ -1,2 +1,137 @@
|
|||
# sebys-hosting-scripts
|
||||
# Seby’s Hosting Scripts
|
||||
|
||||
Interactive installation scripts for **Calagopus Wings** nodes.
|
||||
|
||||
This script installs:
|
||||
|
||||
- Docker (optional, prompted)
|
||||
- Certbot SSL (optional, prompted)
|
||||
- Calagopus Wings (auto-detects x86_64 or ARM64)
|
||||
- Systemd service (via `wings service-install`)
|
||||
- Optional SSL configuration auto-wiring in `config.yml`
|
||||
|
||||
---
|
||||
|
||||
## 🚀 Quick Install (Copy & Paste)
|
||||
|
||||
```bash
|
||||
curl -fsSL https://git.okseby.com/okseby/sebys-hosting-scripts/raw/branch/main/install-wings.sh | bash
|
||||
```
|
||||
|
||||
> ⚠️ Make sure ports 80 and 443 are open if you plan to enable SSL.
|
||||
|
||||
---
|
||||
|
||||
## 📦 What the Script Does
|
||||
|
||||
### 1️⃣ Docker
|
||||
- Checks if Docker is installed
|
||||
- Prompts to install if missing
|
||||
- Default answer: **No**
|
||||
|
||||
### 2️⃣ SSL (Optional)
|
||||
|
||||
If you choose to enable SSL:
|
||||
|
||||
- Installs `certbot`
|
||||
- Runs:
|
||||
```bash
|
||||
certbot certonly --standalone -d yourdomain.com
|
||||
```
|
||||
- Automatically modifies:
|
||||
|
||||
`/etc/calagopus/config.yml`
|
||||
|
||||
From:
|
||||
|
||||
```yaml
|
||||
ssl:
|
||||
enabled: false
|
||||
cert: ''
|
||||
key: ''
|
||||
```
|
||||
|
||||
To:
|
||||
|
||||
```yaml
|
||||
ssl:
|
||||
enabled: true
|
||||
cert: /etc/letsencrypt/live/yourdomain.com/fullchain.pem
|
||||
key: /etc/letsencrypt/live/yourdomain.com/privkey.pem
|
||||
```
|
||||
|
||||
A backup of the config is created as:
|
||||
|
||||
```
|
||||
/etc/calagopus/config.yml.bak
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
### 3️⃣ Wings Binary
|
||||
|
||||
- Detects architecture:
|
||||
- `x86_64`
|
||||
- `aarch64`
|
||||
- Downloads the correct release from:
|
||||
|
||||
https://github.com/calagopus/wings
|
||||
|
||||
Installed to:
|
||||
|
||||
```
|
||||
/usr/local/bin/wings
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
### 4️⃣ Configuration
|
||||
|
||||
Optionally runs:
|
||||
|
||||
```bash
|
||||
wings configure --join-data <token>
|
||||
```
|
||||
|
||||
Then optionally installs as a systemd service:
|
||||
|
||||
```bash
|
||||
wings service-install
|
||||
```
|
||||
|
||||
`service-install` automatically:
|
||||
- Creates systemd unit
|
||||
- Reloads daemon
|
||||
- Enables service
|
||||
- Starts service
|
||||
|
||||
---
|
||||
|
||||
## 🧱 Requirements
|
||||
|
||||
- Debian / Ubuntu based system
|
||||
- `apt`
|
||||
- Root or sudo access
|
||||
- Ports 80/443 open (for SSL standalone mode)
|
||||
|
||||
---
|
||||
|
||||
## 🔐 Security Note
|
||||
|
||||
Always inspect remote scripts before running them:
|
||||
|
||||
```bash
|
||||
curl -fsSL https://git.okseby.com/okseby/sebys-hosting-scripts/raw/branch/main/install-wings.sh
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 🛠 Manual Install Option
|
||||
|
||||
If you prefer not to pipe to bash:
|
||||
|
||||
```bash
|
||||
curl -O https://git.okseby.com/okseby/sebys-hosting-scripts/raw/branch/main/install-wings.sh
|
||||
chmod +x install-wings.sh
|
||||
./install-wings.sh
|
||||
```
|
||||
|
|
|
|||
234
install-wings.sh
Normal file
234
install-wings.sh
Normal file
|
|
@ -0,0 +1,234 @@
|
|||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
# Interactive installer for Docker + (optional) Certbot SSL + Calagopus Wings (calagopus/wings)
|
||||
# Intended usage:
|
||||
# curl -fsSL https://example.com/install-wings.sh | bash
|
||||
#
|
||||
# Notes:
|
||||
# - Prompts read from /dev/tty so it still works when piped from curl.
|
||||
# - Default answers are conservative (Docker install: NO, SSL setup: NO, reboot: NO).
|
||||
|
||||
########################################
|
||||
# helpers
|
||||
########################################
|
||||
TTY="/dev/tty"
|
||||
|
||||
say() { printf "\n\033[1m%s\033[0m\n" "$*"; }
|
||||
warn() { printf "\n\033[33m[warn]\033[0m %s\n" "$*"; }
|
||||
err() { printf "\n\033[31m[error]\033[0m %s\n" "$*"; }
|
||||
|
||||
have() { command -v "$1" >/dev/null 2>&1; }
|
||||
|
||||
need_tty() {
|
||||
if [[ ! -r "$TTY" || ! -w "$TTY" ]]; then
|
||||
err "No TTY available for interactive prompts. Run in an interactive shell."
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
prompt() {
|
||||
local msg="$1"
|
||||
local out
|
||||
printf "%s" "$msg" >"$TTY"
|
||||
IFS= read -r out <"$TTY"
|
||||
printf "%s" "$out"
|
||||
}
|
||||
|
||||
confirm_default_no() {
|
||||
local msg="$1"
|
||||
local ans
|
||||
ans="$(prompt "$msg [y/N]: ")"
|
||||
[[ "${ans,,}" == "y" || "${ans,,}" == "yes" ]]
|
||||
}
|
||||
|
||||
require_root_or_sudo() {
|
||||
if [[ "${EUID:-$(id -u)}" -ne 0 ]]; then
|
||||
if have sudo; then
|
||||
SUDO="sudo"
|
||||
else
|
||||
err "This script needs root privileges (or sudo). Re-run as root or install sudo."
|
||||
exit 1
|
||||
fi
|
||||
else
|
||||
SUDO=""
|
||||
fi
|
||||
}
|
||||
|
||||
apt_install() {
|
||||
local pkgs=("$@")
|
||||
$SUDO apt-get update -y
|
||||
$SUDO apt-get install -y "${pkgs[@]}"
|
||||
}
|
||||
|
||||
update_wings_ssl_config() {
|
||||
local domain="$1"
|
||||
local cfg="/etc/calagopus/config.yml"
|
||||
local cert="/etc/letsencrypt/live/${domain}/fullchain.pem"
|
||||
local key="/etc/letsencrypt/live/${domain}/privkey.pem"
|
||||
|
||||
if [[ ! -f "$cfg" ]]; then
|
||||
warn "Calagopus config not found at $cfg; skipping SSL config update."
|
||||
return 0
|
||||
fi
|
||||
|
||||
if [[ ! -f "$cert" || ! -f "$key" ]]; then
|
||||
warn "Certbot files not found ($cert / $key); skipping SSL config update."
|
||||
return 0
|
||||
fi
|
||||
|
||||
say "Updating Calagopus SSL settings in $cfg (backup: ${cfg}.bak)..."
|
||||
$SUDO cp -a "$cfg" "${cfg}.bak"
|
||||
|
||||
# Update the 'ssl:' block values (assumes the block exists with standard indentation)
|
||||
$SUDO awk -v cert="$cert" -v key="$key" '
|
||||
BEGIN { inssl=0 }
|
||||
{
|
||||
if ($0 ~ /^ ssl:[[:space:]]*$/) { inssl=1; print; next }
|
||||
|
||||
if (inssl==1) {
|
||||
# leave ssl block when we hit the next top-level (two-space) section
|
||||
if ($0 ~ /^ [^[:space:]]/ && $0 !~ /^ ssl:/) { inssl=0 }
|
||||
else if ($0 ~ /^ enabled:/) { print " enabled: true"; next }
|
||||
else if ($0 ~ /^ cert:/) { print " cert: " cert; next }
|
||||
else if ($0 ~ /^ key:/) { print " key: " key; next }
|
||||
}
|
||||
|
||||
print
|
||||
}
|
||||
' "$cfg" | $SUDO tee "$cfg" >/dev/null
|
||||
|
||||
say "Calagopus SSL block updated."
|
||||
}
|
||||
|
||||
########################################
|
||||
# checks
|
||||
########################################
|
||||
need_tty
|
||||
require_root_or_sudo
|
||||
|
||||
if ! have apt-get; then
|
||||
err "This script currently supports Debian/Ubuntu (apt)."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
say "Calagopus Wings bootstrap (Docker + optional SSL + Wings binary)"
|
||||
|
||||
########################################
|
||||
# Docker
|
||||
########################################
|
||||
if have docker; then
|
||||
say "Docker detected: $(docker --version || true)"
|
||||
else
|
||||
warn "Docker is NOT installed."
|
||||
if confirm_default_no "Install Docker now?"; then
|
||||
say "Installing Docker via get.docker.com (CHANNEL=stable)..."
|
||||
apt_install ca-certificates curl
|
||||
curl -fsSL https://get.docker.com/ | CHANNEL=stable $SUDO bash
|
||||
say "Docker installed: $(docker --version || true)"
|
||||
else
|
||||
err "Docker is required for Wings. Exiting because you chose not to install Docker."
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
|
||||
########################################
|
||||
# Optional SSL (Certbot standalone)
|
||||
########################################
|
||||
DO_SSL=false
|
||||
DOMAIN=""
|
||||
|
||||
if confirm_default_no "Set up SSL with certbot (standalone) now?"; then
|
||||
DO_SSL=true
|
||||
DOMAIN="$(prompt "Enter the domain name to issue a cert for (e.g. node1.example.com): ")"
|
||||
if [[ -z "$DOMAIN" ]]; then
|
||||
err "No domain entered. Skipping SSL."
|
||||
DO_SSL=false
|
||||
fi
|
||||
fi
|
||||
|
||||
if $DO_SSL; then
|
||||
say "Installing certbot..."
|
||||
apt_install certbot
|
||||
|
||||
say "Requesting certificate for: $DOMAIN"
|
||||
warn "Certbot standalone requires ports 80/443 to be reachable and not in use."
|
||||
$SUDO certbot certonly --standalone -d "$DOMAIN"
|
||||
|
||||
# Update Calagopus config.yml ssl section
|
||||
update_wings_ssl_config "$DOMAIN"
|
||||
fi
|
||||
|
||||
########################################
|
||||
# Download Wings binary (calagopus/wings)
|
||||
########################################
|
||||
say "Downloading Wings binary..."
|
||||
|
||||
ARCH="$(uname -m)"
|
||||
case "$ARCH" in
|
||||
x86_64|amd64)
|
||||
WINGS_ARCH="x86_64"
|
||||
;;
|
||||
aarch64|arm64)
|
||||
WINGS_ARCH="aarch64"
|
||||
;;
|
||||
*)
|
||||
err "Unsupported architecture: $ARCH (expected x86_64/amd64 or aarch64/arm64)."
|
||||
exit 1
|
||||
;;
|
||||
esac
|
||||
|
||||
WINGS_URL="https://github.com/calagopus/wings/releases/latest/download/wings-rs-${WINGS_ARCH}-linux"
|
||||
WINGS_BIN="/usr/local/bin/wings"
|
||||
|
||||
say "Detected arch: $ARCH -> using asset: wings-rs-${WINGS_ARCH}-linux"
|
||||
say "Downloading: $WINGS_URL"
|
||||
$SUDO curl -fL "$WINGS_URL" -o "$WINGS_BIN"
|
||||
$SUDO chmod +x "$WINGS_BIN"
|
||||
|
||||
say "Wings installed to $WINGS_BIN"
|
||||
"$WINGS_BIN" version || true
|
||||
|
||||
########################################
|
||||
# Configure Wings (join-data)
|
||||
########################################
|
||||
say "Wings configuration"
|
||||
|
||||
JOIN_DATA=""
|
||||
if confirm_default_no "Run 'wings configure --join-data ...' now?"; then
|
||||
JOIN_DATA="$(prompt "Paste the join-data string from your Calagopus panel (it can be long): ")"
|
||||
if [[ -z "$JOIN_DATA" ]]; then
|
||||
err "No join-data provided; skipping wings configure."
|
||||
else
|
||||
$SUDO mkdir -p /etc/calagopus
|
||||
$SUDO "$WINGS_BIN" configure --join-data "$JOIN_DATA"
|
||||
say "Wings configured."
|
||||
fi
|
||||
else
|
||||
warn "Skipping 'wings configure'. You'll need to configure manually later."
|
||||
fi
|
||||
|
||||
if [[ -t 0 ]] && [[ -t 1 ]] && confirm_default_no "Open /etc/calagopus/config.yml in nano now?"; then
|
||||
$SUDO nano /etc/calagopus/config.yml
|
||||
fi
|
||||
|
||||
########################################
|
||||
# Install & start service
|
||||
########################################
|
||||
if confirm_default_no "Install Wings as a systemd service now? (wings service-install)"; then
|
||||
$SUDO "$WINGS_BIN" service-install
|
||||
say "Service status:"
|
||||
$SUDO systemctl --no-pager status wings || true
|
||||
else
|
||||
warn "Skipping service installation."
|
||||
fi
|
||||
|
||||
########################################
|
||||
# Optional reboot
|
||||
########################################
|
||||
if confirm_default_no "Reboot now?"; then
|
||||
say "Rebooting..."
|
||||
$SUDO reboot
|
||||
else
|
||||
say "Done. No reboot performed."
|
||||
fi
|
||||
Loading…
Add table
Add a link
Reference in a new issue