Compare commits
4 Commits
develop/v0
...
master
Author | SHA1 | Date | |
---|---|---|---|
![]() |
8af3e1a3d3 | ||
![]() |
8b975e7d54 | ||
![]() |
2d22b15e85 | ||
![]() |
e93f2a634a |
@ -60,6 +60,7 @@ in {
|
|||||||
|
|
||||||
# Networking
|
# Networking
|
||||||
networking = {
|
networking = {
|
||||||
|
hostName = jsonConfig.hostname;
|
||||||
firewall = {
|
firewall = {
|
||||||
enable = true;
|
enable = true;
|
||||||
# Only allow necessary ports
|
# Only allow necessary ports
|
||||||
|
116
flake.lock
generated
116
flake.lock
generated
@ -6,32 +6,50 @@
|
|||||||
"nixpkgs-unstable": "nixpkgs-unstable"
|
"nixpkgs-unstable": "nixpkgs-unstable"
|
||||||
},
|
},
|
||||||
"locked": {
|
"locked": {
|
||||||
"lastModified": 1741872348,
|
"lastModified": 1744363797,
|
||||||
"narHash": "sha256-4d0S59c/rR5lcfqeqw3z+k4FlDwyci6dwrwMPgKuO/g=",
|
"narHash": "sha256-Zn8TIOonPBQojN5NZ9Q+y6hvwAKFvW+iLXiceGNQ40o=",
|
||||||
"ref": "stable",
|
"ref": "stable",
|
||||||
"rev": "50af8d01fb5d5d5616bd1d5c38ced9946f863ca4",
|
"rev": "45622da8ac40d404e59fa1eff9f63e42b7b95e2b",
|
||||||
"revCount": 6,
|
"revCount": 10,
|
||||||
"type": "git",
|
"type": "git",
|
||||||
"url": "https://code.m3tam3re.com/m3tam3re/self-host-playbook-base"
|
"url": "https://code.m3ta.dev/m3tam3re/self-host-playbook-base"
|
||||||
},
|
},
|
||||||
"original": {
|
"original": {
|
||||||
"ref": "stable",
|
"ref": "stable",
|
||||||
"type": "git",
|
"type": "git",
|
||||||
"url": "https://code.m3tam3re.com/m3tam3re/self-host-playbook-base"
|
"url": "https://code.m3ta.dev/m3tam3re/self-host-playbook-base"
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"deploy-rs": {
|
||||||
|
"inputs": {
|
||||||
|
"flake-compat": "flake-compat",
|
||||||
|
"nixpkgs": "nixpkgs_2",
|
||||||
|
"utils": "utils"
|
||||||
|
},
|
||||||
|
"locked": {
|
||||||
|
"lastModified": 1727447169,
|
||||||
|
"narHash": "sha256-3KyjMPUKHkiWhwR91J1YchF6zb6gvckCAY1jOE+ne0U=",
|
||||||
|
"owner": "serokell",
|
||||||
|
"repo": "deploy-rs",
|
||||||
|
"rev": "aa07eb05537d4cd025e2310397a6adcedfe72c76",
|
||||||
|
"type": "github"
|
||||||
|
},
|
||||||
|
"original": {
|
||||||
|
"owner": "serokell",
|
||||||
|
"repo": "deploy-rs",
|
||||||
|
"type": "github"
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
"disko": {
|
"disko": {
|
||||||
"inputs": {
|
"inputs": {
|
||||||
"nixpkgs": [
|
"nixpkgs": ["nixpkgs"]
|
||||||
"nixpkgs"
|
|
||||||
]
|
|
||||||
},
|
},
|
||||||
"locked": {
|
"locked": {
|
||||||
"lastModified": 1741786315,
|
"lastModified": 1744145203,
|
||||||
"narHash": "sha256-VT65AE2syHVj6v/DGB496bqBnu1PXrrzwlw07/Zpllc=",
|
"narHash": "sha256-I2oILRiJ6G+BOSjY+0dGrTPe080L3pbKpc+gCV3Nmyk=",
|
||||||
"owner": "nix-community",
|
"owner": "nix-community",
|
||||||
"repo": "disko",
|
"repo": "disko",
|
||||||
"rev": "0d8c6ad4a43906d14abd5c60e0ffe7b587b213de",
|
"rev": "76c0a6dba345490508f36c1aa3c7ba5b6b460989",
|
||||||
"type": "github"
|
"type": "github"
|
||||||
},
|
},
|
||||||
"original": {
|
"original": {
|
||||||
@ -40,6 +58,22 @@
|
|||||||
"type": "github"
|
"type": "github"
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
|
"flake-compat": {
|
||||||
|
"flake": false,
|
||||||
|
"locked": {
|
||||||
|
"lastModified": 1696426674,
|
||||||
|
"narHash": "sha256-kvjfFW7WAETZlt09AgDn1MrtKzP7t90Vf7vypd3OL1U=",
|
||||||
|
"owner": "edolstra",
|
||||||
|
"repo": "flake-compat",
|
||||||
|
"rev": "0f9255e01c2351cc7d116c072cb317785dd33b33",
|
||||||
|
"type": "github"
|
||||||
|
},
|
||||||
|
"original": {
|
||||||
|
"owner": "edolstra",
|
||||||
|
"repo": "flake-compat",
|
||||||
|
"type": "github"
|
||||||
|
}
|
||||||
|
},
|
||||||
"nixpkgs": {
|
"nixpkgs": {
|
||||||
"locked": {
|
"locked": {
|
||||||
"lastModified": 1741600792,
|
"lastModified": 1741600792,
|
||||||
@ -72,17 +106,61 @@
|
|||||||
"type": "github"
|
"type": "github"
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
|
"nixpkgs_2": {
|
||||||
|
"locked": {
|
||||||
|
"lastModified": 1702272962,
|
||||||
|
"narHash": "sha256-D+zHwkwPc6oYQ4G3A1HuadopqRwUY/JkMwHz1YF7j4Q=",
|
||||||
|
"owner": "NixOS",
|
||||||
|
"repo": "nixpkgs",
|
||||||
|
"rev": "e97b3e4186bcadf0ef1b6be22b8558eab1cdeb5d",
|
||||||
|
"type": "github"
|
||||||
|
},
|
||||||
|
"original": {
|
||||||
|
"owner": "NixOS",
|
||||||
|
"ref": "nixpkgs-unstable",
|
||||||
|
"repo": "nixpkgs",
|
||||||
|
"type": "github"
|
||||||
|
}
|
||||||
|
},
|
||||||
"root": {
|
"root": {
|
||||||
"inputs": {
|
"inputs": {
|
||||||
"base-config": "base-config",
|
"base-config": "base-config",
|
||||||
"deploy-rs": [
|
"deploy-rs": "deploy-rs",
|
||||||
"nixpkgs"
|
|
||||||
],
|
|
||||||
"disko": "disko",
|
"disko": "disko",
|
||||||
"nixpkgs": [
|
"nixpkgs": ["base-config", "nixpkgs"]
|
||||||
"base-config",
|
}
|
||||||
"nixpkgs"
|
},
|
||||||
]
|
"systems": {
|
||||||
|
"locked": {
|
||||||
|
"lastModified": 1681028828,
|
||||||
|
"narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
|
||||||
|
"owner": "nix-systems",
|
||||||
|
"repo": "default",
|
||||||
|
"rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
|
||||||
|
"type": "github"
|
||||||
|
},
|
||||||
|
"original": {
|
||||||
|
"owner": "nix-systems",
|
||||||
|
"repo": "default",
|
||||||
|
"type": "github"
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"utils": {
|
||||||
|
"inputs": {
|
||||||
|
"systems": "systems"
|
||||||
|
},
|
||||||
|
"locked": {
|
||||||
|
"lastModified": 1701680307,
|
||||||
|
"narHash": "sha256-kAuep2h5ajznlPMD9rnQyffWG8EM/C73lejGofXvdM8=",
|
||||||
|
"owner": "numtide",
|
||||||
|
"repo": "flake-utils",
|
||||||
|
"rev": "4022d587cbbfd70fe950c1e2083a02621806a725",
|
||||||
|
"type": "github"
|
||||||
|
},
|
||||||
|
"original": {
|
||||||
|
"owner": "numtide",
|
||||||
|
"repo": "flake-utils",
|
||||||
|
"type": "github"
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
|
11
flake.nix
11
flake.nix
@ -4,7 +4,7 @@
|
|||||||
inputs = {
|
inputs = {
|
||||||
base-config = {
|
base-config = {
|
||||||
# url = "path:/home/m3tam3re/p/nix/self-host-playbook-base";
|
# url = "path:/home/m3tam3re/p/nix/self-host-playbook-base";
|
||||||
url = "git+https://code.m3tam3re.com/m3tam3re/self-host-playbook-base?ref=stable";
|
url = "git+https://code.m3ta.dev/m3tam3re/self-host-playbook-base?ref=stable";
|
||||||
};
|
};
|
||||||
nixpkgs = {
|
nixpkgs = {
|
||||||
url = "github:NixOS/nixpkgs/nixos-24.11";
|
url = "github:NixOS/nixpkgs/nixos-24.11";
|
||||||
@ -16,7 +16,6 @@
|
|||||||
};
|
};
|
||||||
deploy-rs = {
|
deploy-rs = {
|
||||||
url = "github:serokell/deploy-rs";
|
url = "github:serokell/deploy-rs";
|
||||||
follows = "nixpkgs";
|
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
@ -29,7 +28,7 @@
|
|||||||
} @ inputs: let
|
} @ inputs: let
|
||||||
jsonConfig = builtins.fromJSON (builtins.readFile ./config.json);
|
jsonConfig = builtins.fromJSON (builtins.readFile ./config.json);
|
||||||
in {
|
in {
|
||||||
nixosConfigurations.nixos = nixpkgs.lib.nixosSystem {
|
nixosConfigurations.${jsonConfig.hostname} = nixpkgs.lib.nixosSystem {
|
||||||
system = "x86_64-linux";
|
system = "x86_64-linux";
|
||||||
modules = [
|
modules = [
|
||||||
(base-config.nixosModules.default {
|
(base-config.nixosModules.default {
|
||||||
@ -43,15 +42,15 @@
|
|||||||
inherit self;
|
inherit self;
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
deploy.nodes.nixos = {
|
deploy.nodes.${jsonConfig.hostname} = {
|
||||||
hostname = "self-host-playbook";
|
hostname = jsonConfig.hostname;
|
||||||
profiles.system = {
|
profiles.system = {
|
||||||
sshUser = jsonConfig.username;
|
sshUser = jsonConfig.username;
|
||||||
user = "root";
|
user = "root";
|
||||||
interactiveSudo = true;
|
interactiveSudo = true;
|
||||||
path =
|
path =
|
||||||
deploy-rs.lib.x86_64-linux.activate.nixos
|
deploy-rs.lib.x86_64-linux.activate.nixos
|
||||||
self.nixosConfigurations.nixos;
|
self.nixosConfigurations.${jsonConfig.hostname};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
76
install.sh
76
install.sh
@ -50,7 +50,7 @@ fi
|
|||||||
get_latest_version() {
|
get_latest_version() {
|
||||||
local LATEST_VERSION
|
local LATEST_VERSION
|
||||||
|
|
||||||
latest_version=$(curl -s "https://code.m3tam3re.com/api/v1/repos/m3tam3re/self-host-playbook/tags" | jq -r '.[] | select(.name | startswith("v")) | .name' | sort -V | tail -n1)
|
latest_version=$(curl -s "https://code.m3ta.dev/api/v1/repos/m3tam3re/self-host-playbook/tags" | jq -r '.[] | select(.name | startswith("v")) | .name' | sort -V | tail -n1)
|
||||||
|
|
||||||
if [ -z "$latest_version" ]; then
|
if [ -z "$latest_version" ]; then
|
||||||
echo "❌ Error: Could not fetch latest version from repository"
|
echo "❌ Error: Could not fetch latest version from repository"
|
||||||
@ -65,6 +65,14 @@ setup_latest_version() {
|
|||||||
local target_version=$1
|
local target_version=$1
|
||||||
local dir_name=$2
|
local dir_name=$2
|
||||||
|
|
||||||
|
# Safety check: Ensure we're in the self-host-playbook directory
|
||||||
|
local current_dir=$(basename "$(pwd)")
|
||||||
|
if [ "$current_dir" != "self-host-playbook" ]; then
|
||||||
|
echo "❌ Error: Must be in 'self-host-playbook' directory to setup latest version"
|
||||||
|
echo "Current directory: $(pwd)"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
echo "⬇️ Downloading version $target_version..."
|
echo "⬇️ Downloading version $target_version..."
|
||||||
|
|
||||||
TEMP_DIR=$(mktemp -d)
|
TEMP_DIR=$(mktemp -d)
|
||||||
@ -75,11 +83,17 @@ setup_latest_version() {
|
|||||||
mkdir -p "$CLONE_DIR"
|
mkdir -p "$CLONE_DIR"
|
||||||
|
|
||||||
# Clone to temporary directory with --quiet flag
|
# Clone to temporary directory with --quiet flag
|
||||||
if ! nix flake clone --quiet "git+https://code.m3tam3re.com/m3tam3re/self-host-playbook?ref=v${target_version}" --dest "$CLONE_DIR" 2>/dev/null; then
|
if ! nix flake clone --quiet "git+https://code.m3ta.dev/m3tam3re/self-host-playbook?ref=v${target_version}" --dest "$CLONE_DIR" 2>/dev/null; then
|
||||||
echo "❌ Failed to clone repository"
|
echo "❌ Failed to clone repository"
|
||||||
return 1
|
return 1
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
# Additional safety check before copying files
|
||||||
|
if [ ! -f "$CLONE_DIR/flake.nix" ]; then
|
||||||
|
echo "❌ Error: Downloaded content doesn't appear to be a valid self-host-playbook"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
# Copy files from clone to target directory
|
# Copy files from clone to target directory
|
||||||
cp -r "$CLONE_DIR"/* "$dir_name/"
|
cp -r "$CLONE_DIR"/* "$dir_name/"
|
||||||
|
|
||||||
@ -88,12 +102,25 @@ setup_latest_version() {
|
|||||||
|
|
||||||
# Function to setup from template
|
# Function to setup from template
|
||||||
setup_from_template() {
|
setup_from_template() {
|
||||||
|
# Ensure we're in the correct directory
|
||||||
|
local current_dir=$(basename "$(pwd)")
|
||||||
|
if [ "$current_dir" != "self-host-playbook" ]; then
|
||||||
|
echo "❌ Error: Must be in 'self-host-playbook' directory"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
# Create backup if directory is not empty
|
# Create backup if directory is not empty
|
||||||
if [ -n "$(ls -A)" ]; then
|
if [ -n "$(ls -A)" ]; then
|
||||||
local CURRENT_VERSION=$(date +%Y%m%d_%H%M%S)
|
local CURRENT_VERSION=$(date +%Y%m%d_%H%M%S)
|
||||||
local backup_dir="backup_${CURRENT_VERSION}_$(date +%Y%m%d_%H%M%S)"
|
local backup_dir="backup_${CURRENT_VERSION}_$(date +%Y%m%d_%H%M%S)"
|
||||||
echo "📑 Creating backup in $backup_dir..."
|
echo "📑 Creating backup in $backup_dir..."
|
||||||
mkdir -p "$backup_dir"
|
mkdir -p "$backup_dir"
|
||||||
|
# Add safety check for backup creation
|
||||||
|
if [ ! -d "$backup_dir" ]; then
|
||||||
|
echo "❌ Error: Failed to create backup directory"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
find . -maxdepth 1 ! -name "." ! -name ".." ! -name "$backup_dir" -exec cp -r {} "$backup_dir/" \;
|
find . -maxdepth 1 ! -name "." ! -name ".." ! -name "$backup_dir" -exec cp -r {} "$backup_dir/" \;
|
||||||
echo "✅ Backup created successfully"
|
echo "✅ Backup created successfully"
|
||||||
|
|
||||||
@ -112,7 +139,7 @@ setup_from_template() {
|
|||||||
generate_ssh_key() {
|
generate_ssh_key() {
|
||||||
local KEY_NAME="self-host-playbook"
|
local KEY_NAME="self-host-playbook"
|
||||||
local KEY_PATH="$HOME/.ssh/${KEY_NAME}"
|
local KEY_PATH="$HOME/.ssh/${KEY_NAME}"
|
||||||
W
|
|
||||||
if [ ! -f "$KEY_PATH" ]; then
|
if [ ! -f "$KEY_PATH" ]; then
|
||||||
mkdir -p "$HOME/.ssh"
|
mkdir -p "$HOME/.ssh"
|
||||||
echo "🔑 Generating new SSH key pair..." >&2
|
echo "🔑 Generating new SSH key pair..." >&2
|
||||||
@ -195,6 +222,7 @@ get_device_name() {
|
|||||||
setup_ssh_config() {
|
setup_ssh_config() {
|
||||||
local username=$1
|
local username=$1
|
||||||
local ip_address=$2
|
local ip_address=$2
|
||||||
|
local hostname=$3 # Add hostname parameter
|
||||||
local ssh_config_dir="$HOME/.ssh"
|
local ssh_config_dir="$HOME/.ssh"
|
||||||
local ssh_config_file="$ssh_config_dir/config"
|
local ssh_config_file="$ssh_config_dir/config"
|
||||||
local ssh_key_file="$ssh_config_dir/self-host-playbook"
|
local ssh_key_file="$ssh_config_dir/self-host-playbook"
|
||||||
@ -203,19 +231,20 @@ setup_ssh_config() {
|
|||||||
mkdir -p "$ssh_config_dir"
|
mkdir -p "$ssh_config_dir"
|
||||||
chmod 700 "$ssh_config_dir"
|
chmod 700 "$ssh_config_dir"
|
||||||
|
|
||||||
# Create or append to SSH config
|
# Create or append to SSH config using hostname as the Host name
|
||||||
local config_entry="Host self-host-playbook
|
local config_entry="Host $hostname
|
||||||
HostName $ip_address
|
HostName $ip_address
|
||||||
User $username
|
User $username
|
||||||
|
Port 2222
|
||||||
IdentityFile $ssh_key_file"
|
IdentityFile $ssh_key_file"
|
||||||
|
|
||||||
# Check if entry already exists
|
# Check if entry already exists
|
||||||
if ! grep -q "Host self-host-playbook" "$ssh_config_file" 2>/dev/null; then
|
if ! grep -q "Host $hostname" "$ssh_config_file" 2>/dev/null; then
|
||||||
echo -e "\n$config_entry" >> "$ssh_config_file"
|
echo -e "\n$config_entry" >> "$ssh_config_file"
|
||||||
echo "✅ Added SSH config entry"
|
echo "✅ Added SSH config entry"
|
||||||
else
|
else
|
||||||
# Update existing entry
|
# Update existing entry
|
||||||
sed -i.bak "/Host self-host-playbook/,/IdentityFile.*/{
|
sed -i.bak "/Host $hostname/,/IdentityFile.*/{
|
||||||
s/HostName.*/HostName $ip_address/
|
s/HostName.*/HostName $ip_address/
|
||||||
s/User.*/User $username/
|
s/User.*/User $username/
|
||||||
}" "$ssh_config_file"
|
}" "$ssh_config_file"
|
||||||
@ -265,11 +294,11 @@ SSH_PUB_KEY=$(cat "${SSH_KEY_PATH}.pub") || {
|
|||||||
echo
|
echo
|
||||||
echo "🔑 Here is your public key:"
|
echo "🔑 Here is your public key:"
|
||||||
echo
|
echo
|
||||||
cat $SSH_KEY_PATH.pub
|
cat "$SSH_KEY_PATH.pub"
|
||||||
echo ""
|
echo ""
|
||||||
echo "📁 You can also find the keyfile here:"
|
echo "📁 You can also find the keyfile here:"
|
||||||
echo
|
echo
|
||||||
echo $SSH_KEY_PATH.pub
|
echo "$SSH_KEY_PATH.pub"
|
||||||
echo
|
echo
|
||||||
read -p "Press ENTER to continue or CTRL + C to abort..."
|
read -p "Press ENTER to continue or CTRL + C to abort..."
|
||||||
|
|
||||||
@ -278,15 +307,23 @@ echo ""
|
|||||||
echo "📝 Please provide the following information:"
|
echo "📝 Please provide the following information:"
|
||||||
echo "-------------------------------------------"
|
echo "-------------------------------------------"
|
||||||
read -p "1. Enter target server IP address: " IP_ADDRESS
|
read -p "1. Enter target server IP address: " IP_ADDRESS
|
||||||
read -p "2. Enter desired username for server access: " USERNAME
|
read -p "2. Enter hostname for the server: " HOSTNAME
|
||||||
read -s -p "3. Enter desired password: " PASSWORD
|
|
||||||
|
# Validate hostname format
|
||||||
|
while ! [[ $HOSTNAME =~ ^[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?(\.[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?)*$ ]]; do
|
||||||
|
echo "❌ Invalid hostname format. Please use a valid hostname (e.g., my-server.example.com)"
|
||||||
|
read -p "Enter hostname for the server: " HOSTNAME
|
||||||
|
done
|
||||||
|
|
||||||
|
read -p "3. Enter desired username for server access: " USERNAME
|
||||||
|
read -s -p "4. Enter desired password: " PASSWORD
|
||||||
echo
|
echo
|
||||||
echo "4. Enter domain names for services (must point to $IP_ADDRESS):"
|
echo "5. Enter domain names for services (must point to $IP_ADDRESS):"
|
||||||
read -p " - Domain for Portainer: " PORTAINER_DOMAIN
|
read -p " - Domain for Portainer: " PORTAINER_DOMAIN
|
||||||
read -p " - Domain for n8n: " N8N_DOMAIN
|
read -p " - Domain for n8n: " N8N_DOMAIN
|
||||||
read -p " - Domain for Baserow: " BASEROW_DOMAIN
|
read -p " - Domain for Baserow: " BASEROW_DOMAIN
|
||||||
echo
|
echo
|
||||||
echo "5. How do you authentiate to the target machine?"
|
echo "6. How do you authenticate to the target machine?"
|
||||||
echo "-------------------------------------------"
|
echo "-------------------------------------------"
|
||||||
echo " 1) Password"
|
echo " 1) Password"
|
||||||
echo " 2) SSH Key"
|
echo " 2) SSH Key"
|
||||||
@ -295,10 +332,10 @@ read -p "Enter your choice (1-2): " KEY_CHOICE
|
|||||||
|
|
||||||
case $KEY_CHOICE in
|
case $KEY_CHOICE in
|
||||||
1)
|
1)
|
||||||
INSTALL_COMMAND="nix run github:nix-community/nixos-anywhere -- --flake .#server root@$IP_ADDRESS"
|
INSTALL_COMMAND="nix run github:nix-community/nixos-anywhere -- --flake .#$HOSTNAME root@$IP_ADDRESS"
|
||||||
;;
|
;;
|
||||||
2)
|
2)
|
||||||
INSTALL_COMMAND="nix run github:nix-community/nixos-anywhere -- --flake .#server -i $SSH_KEY_PATH root@$IP_ADDRESS"
|
INSTALL_COMMAND="nix run github:nix-community/nixos-anywhere -- --flake .#$HOSTNAME -i $SSH_KEY_PATH root@$IP_ADDRESS"
|
||||||
;;
|
;;
|
||||||
*)
|
*)
|
||||||
echo "❌ Invalid choice"
|
echo "❌ Invalid choice"
|
||||||
@ -309,7 +346,7 @@ esac
|
|||||||
setup_from_template
|
setup_from_template
|
||||||
|
|
||||||
echo
|
echo
|
||||||
echo "6. Select your cloud provider:"
|
echo "7. Select your cloud provider:"
|
||||||
echo " 1) AWS (Newer instances with NVMe)"
|
echo " 1) AWS (Newer instances with NVMe)"
|
||||||
echo " 2) AWS (Older instances)"
|
echo " 2) AWS (Older instances)"
|
||||||
echo " 3) Google Cloud Platform"
|
echo " 3) Google Cloud Platform"
|
||||||
@ -387,7 +424,8 @@ cat > config.json << EOF
|
|||||||
"baserow": "$BASEROW_DOMAIN"
|
"baserow": "$BASEROW_DOMAIN"
|
||||||
},
|
},
|
||||||
"rootDevice": "$DEVICE_NAME",
|
"rootDevice": "$DEVICE_NAME",
|
||||||
"ipAddress": "$IP_ADDRESS"
|
"ipAddress": "$IP_ADDRESS",
|
||||||
|
"hostname": "$HOSTNAME"
|
||||||
}
|
}
|
||||||
EOF
|
EOF
|
||||||
|
|
||||||
@ -416,7 +454,7 @@ echo "This process might take several minutes..."
|
|||||||
# Run nixos-anywhere installation
|
# Run nixos-anywhere installation
|
||||||
$INSTALL_COMMAND && {
|
$INSTALL_COMMAND && {
|
||||||
echo "🔧 Setting up SSH configuration..."
|
echo "🔧 Setting up SSH configuration..."
|
||||||
setup_ssh_config "$USERNAME" "$IP_ADDRESS"
|
setup_ssh_config "$USERNAME" "$IP_ADDRESS" "$HOSTNAME"
|
||||||
echo
|
echo
|
||||||
echo "🎉 Installation completed successfully!"
|
echo "🎉 Installation completed successfully!"
|
||||||
echo "=====================================>"
|
echo "=====================================>"
|
||||||
@ -426,7 +464,7 @@ $INSTALL_COMMAND && {
|
|||||||
echo "- Baserow: https://$BASEROW_DOMAIN"
|
echo "- Baserow: https://$BASEROW_DOMAIN"
|
||||||
echo
|
echo
|
||||||
echo "To connect to your server, use:"
|
echo "To connect to your server, use:"
|
||||||
echo "ssh self-host-playbook"
|
echo "ssh $HOSTNAME"
|
||||||
echo
|
echo
|
||||||
install_deploy_rs
|
install_deploy_rs
|
||||||
echo
|
echo
|
||||||
|
109
update.sh
109
update.sh
@ -26,9 +26,9 @@ get_current_version() {
|
|||||||
}
|
}
|
||||||
|
|
||||||
get_latest_version() {
|
get_latest_version() {
|
||||||
local LATEST_VERSION
|
local latest_version
|
||||||
|
|
||||||
latest_version=$(curl -s "https://code.m3tam3re.com/api/v1/repos/m3tam3re/self-host-playbook/tags" | jq -r '.[] | select(.name | startswith("v")) | .name' | sort -V | tail -n1)
|
latest_version=$(curl -s "https://code.m3ta.dev/api/v1/repos/m3tam3re/self-host-playbook/tags" | jq -r '.[] | select(.name | startswith("v")) | .name' | sort -V | tail -n1)
|
||||||
|
|
||||||
if [ -z "$latest_version" ]; then
|
if [ -z "$latest_version" ]; then
|
||||||
echo "❌ Error: Could not fetch latest version from repository"
|
echo "❌ Error: Could not fetch latest version from repository"
|
||||||
@ -51,7 +51,7 @@ check_compatibility() {
|
|||||||
fi
|
fi
|
||||||
|
|
||||||
local min_compatible_version
|
local min_compatible_version
|
||||||
min_compatible_version=$(curl -s "https://code.m3tam3re.com/m3tam3re/self-host-playbook/raw/branch/develop/v${target_version}/$version_file" | jq -r '.minCompatibleVersion')
|
min_compatible_version=$(curl -s "https://code.m3ta.dev/m3tam3re/self-host-playbook/raw/branch/develop/v${target_version}/$version_file" | jq -r '.minCompatibleVersion')
|
||||||
|
|
||||||
if version_lt "$current_version" "$min_compatible_version"; then
|
if version_lt "$current_version" "$min_compatible_version"; then
|
||||||
echo "❌ Your current version ($current_version) is too old for direct upgrade."
|
echo "❌ Your current version ($current_version) is too old for direct upgrade."
|
||||||
@ -71,7 +71,7 @@ show_changelog() {
|
|||||||
echo "------------------------------------------------"
|
echo "------------------------------------------------"
|
||||||
|
|
||||||
local changelog
|
local changelog
|
||||||
changelog=$(curl -s "https://code.m3tam3re.com/m3tam3re/self-host-playbook/raw/branch/develop/v${target_version}/$version_file" | jq -r '.changelog')
|
changelog=$(curl -s "https://code.m3ta.dev/m3tam3re/self-host-playbook/raw/branch/develop/v${target_version}/$version_file" | jq -r '.changelog')
|
||||||
|
|
||||||
# Process each version once, then all its changes
|
# Process each version once, then all its changes
|
||||||
echo "$changelog" | jq -r --arg cv "$current_version" --arg tv "$target_version" '
|
echo "$changelog" | jq -r --arg cv "$current_version" --arg tv "$target_version" '
|
||||||
@ -86,6 +86,13 @@ show_changelog() {
|
|||||||
perform_update() {
|
perform_update() {
|
||||||
local target_version=$1
|
local target_version=$1
|
||||||
local backup_dir=$2
|
local backup_dir=$2
|
||||||
|
|
||||||
|
# Verify essential files exist before proceeding
|
||||||
|
if [ ! -f "config.json" ] || [ ! -d "env" ]; then
|
||||||
|
echo "❌ Error: Essential files missing. Are you in the correct directory?"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
echo "⬇️ Downloading version $target_version..."
|
echo "⬇️ Downloading version $target_version..."
|
||||||
|
|
||||||
TEMP_DIR=$(mktemp -d)
|
TEMP_DIR=$(mktemp -d)
|
||||||
@ -96,11 +103,17 @@ perform_update() {
|
|||||||
mkdir -p "$CLONE_DIR"
|
mkdir -p "$CLONE_DIR"
|
||||||
|
|
||||||
# Clone to temporary directory with --quiet flag
|
# Clone to temporary directory with --quiet flag
|
||||||
if ! nix flake clone --quiet "git+https://code.m3tam3re.com/m3tam3re/self-host-playbook?ref=v${target_version}" --dest "$CLONE_DIR" 2>/dev/null; then
|
if ! nix flake clone --quiet "git+https://code.m3ta.dev/m3tam3re/self-host-playbook?ref=v${target_version}" --dest "$CLONE_DIR" 2>/dev/null; then
|
||||||
echo "❌ Failed to clone repository"
|
echo "❌ Failed to clone repository"
|
||||||
return 1
|
return 1
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
# Verify downloaded content
|
||||||
|
if [ ! -f "$CLONE_DIR/flake.nix" ]; then
|
||||||
|
echo "❌ Error: Downloaded content appears invalid"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
# Remove current directory contents except backup
|
# Remove current directory contents except backup
|
||||||
echo "🗑️ Cleaning current directory..."
|
echo "🗑️ Cleaning current directory..."
|
||||||
find . -maxdepth 1 ! -name "." ! -name ".." ! -name "$backup_dir" -exec rm -rf {} +
|
find . -maxdepth 1 ! -name "." ! -name ".." ! -name "$backup_dir" -exec rm -rf {} +
|
||||||
@ -109,11 +122,27 @@ perform_update() {
|
|||||||
echo "📋 Installing new version..."
|
echo "📋 Installing new version..."
|
||||||
cp -r "$CLONE_DIR"/* .
|
cp -r "$CLONE_DIR"/* .
|
||||||
|
|
||||||
# Restore configuration files from backup
|
# Verify essential files were copied
|
||||||
echo "🔄 Restoring configuration files..."
|
if [ ! -f "flake.nix" ]; then
|
||||||
cp -r "${backup_dir}/config.json" \
|
echo "❌ Error: Failed to copy new version files"
|
||||||
"${backup_dir}/env" . 2>/dev/null || true
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Restore configuration files from backup with validation
|
||||||
|
echo "🔄 Restoring configuration files..."
|
||||||
|
if [ -f "${backup_dir}/config.json" ]; then
|
||||||
|
cp -r "${backup_dir}/config.json" . || {
|
||||||
|
echo "❌ Error: Failed to restore config.json"
|
||||||
|
return 1
|
||||||
|
}
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -d "${backup_dir}/env" ]; then
|
||||||
|
cp -r "${backup_dir}/env" . || {
|
||||||
|
echo "❌ Error: Failed to restore env directory"
|
||||||
|
return 1
|
||||||
|
}
|
||||||
|
fi
|
||||||
|
|
||||||
return 0
|
return 0
|
||||||
}
|
}
|
||||||
@ -121,67 +150,60 @@ perform_update() {
|
|||||||
setup_ssh_config() {
|
setup_ssh_config() {
|
||||||
local username=$1
|
local username=$1
|
||||||
local ip_address=$2
|
local ip_address=$2
|
||||||
|
local hostname=$3
|
||||||
local ssh_config_dir="$HOME/.ssh"
|
local ssh_config_dir="$HOME/.ssh"
|
||||||
local ssh_config_file="$ssh_config_dir/config"
|
local ssh_config_file="$ssh_config_dir/config"
|
||||||
local ssh_key_file="$ssh_config_dir/self-host-playbook"
|
local ssh_key_file="$ssh_config_dir/self-host-playbook"
|
||||||
|
|
||||||
# Create .ssh directory if it doesn't exist
|
|
||||||
mkdir -p "$ssh_config_dir"
|
mkdir -p "$ssh_config_dir"
|
||||||
chmod 700 "$ssh_config_dir"
|
chmod 700 "$ssh_config_dir"
|
||||||
|
|
||||||
# Create or append to SSH config
|
local config_entry="Host $hostname
|
||||||
local config_entry="Host self-host-playbook
|
|
||||||
HostName $ip_address
|
HostName $ip_address
|
||||||
User $username
|
User $username
|
||||||
|
Port 2222
|
||||||
IdentityFile $ssh_key_file"
|
IdentityFile $ssh_key_file"
|
||||||
|
|
||||||
# Check if entry already exists
|
if ! grep -q "Host $hostname" "$ssh_config_file" 2>/dev/null; then
|
||||||
if ! grep -q "Host self-host-playbook" "$ssh_config_file" 2>/dev/null; then
|
|
||||||
echo -e "\n$config_entry" >> "$ssh_config_file"
|
echo -e "\n$config_entry" >> "$ssh_config_file"
|
||||||
echo "✅ Added SSH config entry"
|
echo "✅ Added SSH config entry"
|
||||||
else
|
else
|
||||||
# Update existing entry
|
sed -i.bak "/Host $hostname/,/IdentityFile.*/{
|
||||||
sed -i.bak "/Host self-host-playbook/,/IdentityFile.*/{
|
|
||||||
s/HostName.*/HostName $ip_address/
|
s/HostName.*/HostName $ip_address/
|
||||||
s/User.*/User $username/
|
s/User.*/User $username/
|
||||||
}" "$ssh_config_file"
|
}" "$ssh_config_file"
|
||||||
echo "✅ Updated existing SSH config entry"
|
echo "✅ Updated existing SSH config entry"
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# Set appropriate permissions
|
|
||||||
chmod 600 "$ssh_config_file"
|
chmod 600 "$ssh_config_file"
|
||||||
}
|
}
|
||||||
|
|
||||||
update_config_json() {
|
update_config_value() {
|
||||||
local ip_address=$1
|
local key=$1
|
||||||
|
local value=$2
|
||||||
local config_file="config.json"
|
local config_file="config.json"
|
||||||
|
|
||||||
# Read existing config
|
|
||||||
local config
|
local config
|
||||||
config=$(cat "$config_file")
|
config=$(cat "$config_file")
|
||||||
|
|
||||||
# Update or add ipAddress field
|
if jq -e ".$key" "$config_file" >/dev/null 2>&1; then
|
||||||
if jq -e '.ipAddress' "$config_file" >/dev/null 2>&1; then
|
config=$(echo "$config" | jq --arg key "$key" --arg value "$value" '.[$key] = $value')
|
||||||
config=$(echo "$config" | jq --arg ip "$ip_address" '.ipAddress = $ip')
|
|
||||||
else
|
else
|
||||||
config=$(echo "$config" | jq --arg ip "$ip_address" '. + {ipAddress: $ip}')
|
config=$(echo "$config" | jq --arg key "$key" --arg value "$value" '. + {($key): $value}')
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# Write back to file
|
|
||||||
echo "$config" | jq '.' > "$config_file"
|
echo "$config" | jq '.' > "$config_file"
|
||||||
echo "✅ Updated IP address in config.json"
|
echo "✅ Updated $key in config.json"
|
||||||
}
|
}
|
||||||
|
|
||||||
install_deploy_rs() {
|
install_deploy_rs() {
|
||||||
echo "🔧 Installing deploy-rs to user environment..."
|
echo "🔧 Installing deploy-rs to user environment..."
|
||||||
|
|
||||||
# Check if deploy is already installed
|
|
||||||
if command -v deploy >/dev/null 2>&1; then
|
if command -v deploy >/dev/null 2>&1; then
|
||||||
echo "ℹ️ deploy-rs is already installed"
|
echo "ℹ️ deploy-rs is already installed"
|
||||||
return 0
|
return 0
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# Install deploy-rs using nix profile
|
|
||||||
if nix profile install 'github:serokell/deploy-rs'; then
|
if nix profile install 'github:serokell/deploy-rs'; then
|
||||||
echo "✅ deploy-rs installed successfully"
|
echo "✅ deploy-rs installed successfully"
|
||||||
else
|
else
|
||||||
@ -190,12 +212,10 @@ install_deploy_rs() {
|
|||||||
fi
|
fi
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
# Main script
|
# Main script
|
||||||
echo "🔄 Self-Host Playbook Update Assistant"
|
echo "🔄 Self-Host Playbook Update Assistant"
|
||||||
echo "======================================"
|
echo "======================================"
|
||||||
|
|
||||||
# Check if we're in the right directory
|
|
||||||
if [ ! -f "config.json" ]; then
|
if [ ! -f "config.json" ]; then
|
||||||
echo "❌ Error: config.json not found. Please run this script in your self-host-playbook directory."
|
echo "❌ Error: config.json not found. Please run this script in your self-host-playbook directory."
|
||||||
exit 1
|
exit 1
|
||||||
@ -203,25 +223,35 @@ fi
|
|||||||
|
|
||||||
USERNAME=$(jq -r '.username' config.json)
|
USERNAME=$(jq -r '.username' config.json)
|
||||||
IP_ADDRESS=$(jq -r '.ipAddress // empty' config.json)
|
IP_ADDRESS=$(jq -r '.ipAddress // empty' config.json)
|
||||||
|
HOSTNAME=$(jq -r '.hostname // empty' config.json)
|
||||||
|
|
||||||
if [ -z "$USERNAME" ]; then
|
if [ -z "$USERNAME" ]; then
|
||||||
echo "❌ Error: Could not read username from config.json"
|
echo "❌ Error: Could not read username from config.json"
|
||||||
exit 1
|
exit 1
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# If IP address is not in config.json, prompt for it
|
|
||||||
if [ -z "$IP_ADDRESS" ]; then
|
if [ -z "$IP_ADDRESS" ]; then
|
||||||
echo "ℹ️ No IP address found in config.json"
|
echo "ℹ️ No IP address found in config.json"
|
||||||
read -p "Enter the IP address of your server: " IP_ADDRESS
|
read -p "Enter the IP address of your server: " IP_ADDRESS
|
||||||
|
|
||||||
# Validate IP address format
|
|
||||||
if ! [[ $IP_ADDRESS =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
|
if ! [[ $IP_ADDRESS =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
|
||||||
echo "❌ Error: Invalid IP address format"
|
echo "❌ Error: Invalid IP address format"
|
||||||
exit 1
|
exit 1
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# Update config.json with the new IP address
|
update_config_value "ipAddress" "$IP_ADDRESS"
|
||||||
update_config_json "$IP_ADDRESS"
|
fi
|
||||||
|
|
||||||
|
if [ -z "$HOSTNAME" ]; then
|
||||||
|
echo "ℹ️ No hostname found in config.json"
|
||||||
|
read -p "Enter the hostname for your server: " HOSTNAME
|
||||||
|
|
||||||
|
if ! [[ $HOSTNAME =~ ^[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?(\.[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?)*$ ]]; then
|
||||||
|
echo "❌ Error: Invalid hostname format"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
update_config_value "hostname" "$HOSTNAME"
|
||||||
fi
|
fi
|
||||||
|
|
||||||
VERSION_FILE="version.json"
|
VERSION_FILE="version.json"
|
||||||
@ -248,26 +278,21 @@ read -p "Do you want to update to version $LATEST_VERSION? (y/N) " -n 1 -r
|
|||||||
echo
|
echo
|
||||||
|
|
||||||
if [[ $REPLY =~ ^[Yy]$ ]]; then
|
if [[ $REPLY =~ ^[Yy]$ ]]; then
|
||||||
# Create backup
|
|
||||||
backup_dir="backup_${CURRENT_VERSION}_$(date +%Y%m%d_%H%M%S)"
|
backup_dir="backup_${CURRENT_VERSION}_$(date +%Y%m%d_%H%M%S)"
|
||||||
echo "📑 Creating backup in $backup_dir..."
|
echo "📑 Creating backup in $backup_dir..."
|
||||||
mkdir -p "$backup_dir"
|
mkdir -p "$backup_dir"
|
||||||
find . -maxdepth 1 ! -name "." ! -name ".." ! -name "$backup_dir" -exec cp -r {} "$backup_dir/" \;
|
find . -maxdepth 1 ! -name "." ! -name ".." ! -name "$backup_dir" -exec cp -r {} "$backup_dir/" \;
|
||||||
|
|
||||||
|
|
||||||
# Perform update
|
|
||||||
if perform_update "$LATEST_VERSION" "$backup_dir"; then
|
if perform_update "$LATEST_VERSION" "$backup_dir"; then
|
||||||
echo
|
echo
|
||||||
echo "✅ Update completed successfully!"
|
echo "✅ Update completed successfully!"
|
||||||
# Setup SSH configuration
|
|
||||||
echo
|
echo
|
||||||
echo "🔧 Setting up SSH configuration..."
|
echo "🔧 Setting up SSH configuration..."
|
||||||
setup_ssh_config "$USERNAME" "$IP_ADDRESS"
|
setup_ssh_config "$USERNAME" "$IP_ADDRESS" "$HOSTNAME"
|
||||||
echo
|
echo
|
||||||
install_deploy_rs
|
install_deploy_rs
|
||||||
echo
|
echo "🚀 Applying the update to your system..."
|
||||||
echo "To apply the changes, run:"
|
deploy .#$HOSTNAME
|
||||||
echo "sudo nixos-rebuild switch"
|
|
||||||
echo
|
echo
|
||||||
echo "If you encounter any issues, your backup is available in $backup_dir"
|
echo "If you encounter any issues, your backup is available in $backup_dir"
|
||||||
else
|
else
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
{
|
{
|
||||||
"version": "0.1.0",
|
"version": "0.1.0",
|
||||||
"minCompatibleVersion": "0.0.0",
|
"minCompatibleVersion": "0.0.0",
|
||||||
"updateUrl": "https://code.m3tam3re.com/m3tam3re/self-host-playbook",
|
"updateUrl": "https://code.m3ta.dev/m3tam3re/self-host-playbook",
|
||||||
"changelog": {
|
"changelog": {
|
||||||
"0.1.0": [
|
"0.1.0": [
|
||||||
"Added a management CLI for easily adding custom services.",
|
"Added a management CLI for easily adding custom services.",
|
||||||
|
Loading…
x
Reference in New Issue
Block a user