Fix EZ-Homelab scripts for successful fresh installs
- Fix Authelia config template paths (/data/ -> /config/) - Add secret placeholder replacement in deploy script - Add user database placeholder replacement - Add automatic dashboard stack deployment (Homepage, Homarr) - Remove incorrect Portainer reference from infrastructure log - Update deployment steps and final summary
This commit is contained in:
EZ-Homelab
@@ -36,23 +36,20 @@ if [ "$EUID" -ne 0 ]; then
|
||||
fi
|
||||
|
||||
# Get the actual user who invoked sudo
|
||||
ACTUAL_USER="${SUDO_USER:-$USER}"
|
||||
if [ "$ACTUAL_USER" = "root" ]; then
|
||||
log_error "Please run this script with sudo, not as root user"
|
||||
exit 1
|
||||
fi
|
||||
ACTUAL_USER=${SUDO_USER:-$USER}
|
||||
|
||||
log_info "Setting up AI-Homelab for user: $ACTUAL_USER"
|
||||
echo ""
|
||||
# Get script directory and repo directory
|
||||
SCRIPT_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
|
||||
REPO_DIR="$( cd "$SCRIPT_DIR/.." && pwd )"
|
||||
|
||||
# Step 1: System Update
|
||||
log_info "Step 1/9: Updating system packages..."
|
||||
log_info "Step 1/10: Updating system packages..."
|
||||
apt-get update && apt-get upgrade -y
|
||||
log_success "System updated successfully"
|
||||
echo ""
|
||||
|
||||
# Step 2: Install Required Packages
|
||||
log_info "Step 2/9: Installing required packages..."
|
||||
log_info "Step 2/10: Installing required packages..."
|
||||
# Update package list first to avoid issues
|
||||
apt-get update
|
||||
|
||||
@@ -80,7 +77,7 @@ log_success "Required packages installed"
|
||||
echo ""
|
||||
|
||||
# Step 3: Install Docker
|
||||
log_info "Step 3/9: Installing Docker..."
|
||||
log_info "Step 3/10: Installing Docker..."
|
||||
if command -v docker &> /dev/null && docker --version &> /dev/null; then
|
||||
log_warning "Docker is already installed ($(docker --version))"
|
||||
else
|
||||
@@ -99,12 +96,16 @@ else
|
||||
apt-get update
|
||||
apt-get install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
|
||||
|
||||
log_success "Docker installed successfully ($(docker --version))"
|
||||
# Start and enable Docker service
|
||||
systemctl start docker
|
||||
systemctl enable docker
|
||||
|
||||
log_success "Docker installed and service started ($(docker --version))"
|
||||
fi
|
||||
echo ""
|
||||
|
||||
# Step 4: Configure User Groups
|
||||
log_info "Step 4/9: Configuring user groups..."
|
||||
log_info "Step 4/10: Configuring user groups..."
|
||||
|
||||
# Add user to sudo group if not already
|
||||
if groups "$ACTUAL_USER" | grep -q '\bsudo\b'; then
|
||||
@@ -124,7 +125,7 @@ fi
|
||||
echo ""
|
||||
|
||||
# Step 5: Configure Firewall
|
||||
log_info "Step 5/9: Configuring firewall..."
|
||||
log_info "Step 5/10: Configuring firewall..."
|
||||
# Enable UFW if not already enabled
|
||||
if ufw status | grep -q "Status: active"; then
|
||||
log_warning "Firewall is already active"
|
||||
@@ -148,7 +149,7 @@ log_success "HTTP/HTTPS ports allowed in firewall"
|
||||
echo ""
|
||||
|
||||
# Step 6: Configure SSH
|
||||
log_info "Step 6/9: Configuring SSH server..."
|
||||
log_info "Step 6/10: Configuring SSH server..."
|
||||
systemctl enable ssh
|
||||
systemctl start ssh
|
||||
|
||||
@@ -163,7 +164,7 @@ fi
|
||||
echo ""
|
||||
|
||||
# Step 7: Detect and Install NVIDIA Drivers (if applicable)
|
||||
log_info "Step 7/9: Checking for NVIDIA GPU..."
|
||||
log_info "Step 7/10: Checking for NVIDIA GPU..."
|
||||
|
||||
# Detect NVIDIA GPU
|
||||
if lspci | grep -i nvidia > /dev/null; then
|
||||
@@ -177,10 +178,17 @@ if lspci | grep -i nvidia > /dev/null; then
|
||||
NVIDIA_INSTALLED=true
|
||||
else
|
||||
log_info "Installing NVIDIA drivers..."
|
||||
# Install kernel headers first (required for NVIDIA driver)
|
||||
apt-get install -y linux-headers-amd64
|
||||
# Install NVIDIA driver (non-interactive)
|
||||
apt-get install -y nvidia-driver
|
||||
log_success "NVIDIA drivers installed"
|
||||
NVIDIA_INSTALLED=false
|
||||
if apt-get install -y nvidia-driver; then
|
||||
log_success "NVIDIA drivers installed"
|
||||
NVIDIA_INSTALLED=false
|
||||
else
|
||||
log_warning "NVIDIA driver installation failed. You may need to install manually after reboot."
|
||||
log_info "Try: sudo apt update && sudo apt install nvidia-driver"
|
||||
NVIDIA_INSTALLED=false # Still set to false to trigger reboot reminder
|
||||
fi
|
||||
fi
|
||||
|
||||
# Check if NVIDIA Container Toolkit is installed
|
||||
@@ -214,7 +222,7 @@ else
|
||||
fi
|
||||
|
||||
# Step 8: Create Directory Structure
|
||||
log_info "Step 8/9: Creating directory structure..."
|
||||
log_info "Step 8/10: Creating directory structure..."
|
||||
mkdir -p /opt/stacks
|
||||
mkdir -p /opt/dockge/data
|
||||
mkdir -p /mnt/media/{movies,tv,music,books,photos}
|
||||
@@ -251,7 +259,7 @@ log_success "Directory structure created"
|
||||
echo ""
|
||||
|
||||
# Step 9: Create Docker Networks
|
||||
log_info "Step 9/9: Creating Docker networks..."
|
||||
log_info "Step 9/10: Creating Docker networks..."
|
||||
su - "$ACTUAL_USER" -c "docker network create homelab-network 2>/dev/null || true"
|
||||
su - "$ACTUAL_USER" -c "docker network create traefik-network 2>/dev/null || true"
|
||||
su - "$ACTUAL_USER" -c "docker network create media-network 2>/dev/null || true"
|
||||
@@ -259,6 +267,127 @@ su - "$ACTUAL_USER" -c "docker network create dockerproxy-network 2>/dev/null ||
|
||||
log_success "Docker networks created"
|
||||
echo ""
|
||||
|
||||
# Step 10: Generate Authelia Secrets
|
||||
log_info "Step 10/10: Generating Authelia secrets..."
|
||||
|
||||
# Check if .env file exists, create from example if needed
|
||||
if [ ! -f "$REPO_DIR/.env" ]; then
|
||||
if [ -f "$REPO_DIR/.env.example" ]; then
|
||||
cp "$REPO_DIR/.env.example" "$REPO_DIR/.env"
|
||||
log_info ".env file created from .env.example"
|
||||
else
|
||||
log_error ".env and .env.example files not found in $REPO_DIR"
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
|
||||
# Generate cryptographic secrets
|
||||
log_info "Generating Authelia JWT secret..."
|
||||
AUTHELIA_JWT_SECRET=$(openssl rand -hex 64)
|
||||
|
||||
log_info "Generating Authelia session secret..."
|
||||
AUTHELIA_SESSION_SECRET=$(openssl rand -hex 64)
|
||||
|
||||
log_info "Generating Authelia storage encryption key..."
|
||||
AUTHELIA_STORAGE_ENCRYPTION_KEY=$(openssl rand -hex 64)
|
||||
|
||||
# Check for existing default credentials in .env
|
||||
source "$REPO_DIR/.env"
|
||||
USE_DEFAULTS=false
|
||||
if [ -n "$DEFAULT_USER" ] && [ -n "$DEFAULT_PASSWORD" ] && [ -n "$DEFAULT_EMAIL" ]; then
|
||||
echo ""
|
||||
echo "Found existing default credentials in .env:"
|
||||
echo " User: $DEFAULT_USER"
|
||||
echo " Email: $DEFAULT_EMAIL"
|
||||
echo " Password: [hidden]"
|
||||
echo ""
|
||||
read -p "Use these for Authelia admin? (Y/n): " USE_DEFAULT
|
||||
USE_DEFAULT=${USE_DEFAULT:-y}
|
||||
if [[ "$USE_DEFAULT" =~ ^[Yy]$ ]]; then
|
||||
USE_DEFAULTS=true
|
||||
ADMIN_USER=$DEFAULT_USER
|
||||
ADMIN_EMAIL=$DEFAULT_EMAIL
|
||||
ADMIN_PASSWORD=$DEFAULT_PASSWORD
|
||||
fi
|
||||
fi
|
||||
|
||||
if [ "$USE_DEFAULTS" = false ]; then
|
||||
# Prompt for admin credentials
|
||||
log_info "Configuring Authelia admin user..."
|
||||
echo ""
|
||||
echo "Authelia Admin Configuration:"
|
||||
echo "=============================="
|
||||
|
||||
read -p "Admin username (default: admin): " ADMIN_USER
|
||||
ADMIN_USER=${ADMIN_USER:-admin}
|
||||
|
||||
read -p "Admin email: " ADMIN_EMAIL
|
||||
while [ -z "$ADMIN_EMAIL" ]; do
|
||||
log_error "Email is required"
|
||||
read -p "Admin email: " ADMIN_EMAIL
|
||||
done
|
||||
|
||||
# Prompt for password with confirmation
|
||||
while true; do
|
||||
read -s -p "Admin password: " ADMIN_PASSWORD
|
||||
echo ""
|
||||
read -s -p "Confirm password: " ADMIN_PASSWORD_CONFIRM
|
||||
echo ""
|
||||
if [ "$ADMIN_PASSWORD" = "$ADMIN_PASSWORD_CONFIRM" ]; then
|
||||
break
|
||||
else
|
||||
log_error "Passwords do not match. Please try again."
|
||||
fi
|
||||
done
|
||||
fi
|
||||
|
||||
# Generate password hash using Authelia Docker image
|
||||
log_info "Generating password hash (this may take 30-60 seconds)..."
|
||||
|
||||
# Check if Docker is running
|
||||
if ! docker info > /dev/null 2>&1; then
|
||||
log_error "Docker is not running. Please check Docker installation."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Pull the Authelia image first
|
||||
log_info "Pulling Authelia image..."
|
||||
if ! docker pull authelia/authelia:latest > /dev/null 2>&1; then
|
||||
log_error "Failed to pull Authelia image. Please check internet connectivity."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Generate the hash
|
||||
ADMIN_PASSWORD_HASH=$(docker run --rm authelia/authelia:latest authelia crypto hash generate argon2 --password "$ADMIN_PASSWORD" 2>&1 | grep -o '"[^"]*"' | tr -d '"')
|
||||
|
||||
if [ -z "$ADMIN_PASSWORD_HASH" ]; then
|
||||
log_error "Failed to generate password hash. Please check Docker connectivity."
|
||||
log_info "Debug: Trying manual hash generation..."
|
||||
# Fallback: generate a basic hash using openssl (not recommended for production)
|
||||
ADMIN_PASSWORD_HASH=$(echo -n "$ADMIN_PASSWORD" | openssl dgst -sha256 | cut -d' ' -f2)
|
||||
if [ -n "$ADMIN_PASSWORD_HASH" ]; then
|
||||
log_warning "Using fallback hash method. Please regenerate with proper Authelia hash later."
|
||||
else
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
|
||||
# Update .env file with generated values
|
||||
log_info "Updating .env file with generated secrets..."
|
||||
|
||||
# Use sed to replace the placeholder values
|
||||
sed -i "s/AUTHELIA_JWT_SECRET=.*/AUTHELIA_JWT_SECRET=$AUTHELIA_JWT_SECRET/" "$REPO_DIR/.env"
|
||||
sed -i "s/AUTHELIA_SESSION_SECRET=.*/AUTHELIA_SESSION_SECRET=$AUTHELIA_SESSION_SECRET/" "$REPO_DIR/.env"
|
||||
sed -i "s/AUTHELIA_STORAGE_ENCRYPTION_KEY=.*/AUTHELIA_STORAGE_ENCRYPTION_KEY=$AUTHELIA_STORAGE_ENCRYPTION_KEY/" "$REPO_DIR/.env"
|
||||
|
||||
# Uncomment and set admin credentials
|
||||
sed -i "s/# AUTHELIA_ADMIN_USER=.*/AUTHELIA_ADMIN_USER=$ADMIN_USER/" "$REPO_DIR/.env"
|
||||
sed -i "s/# AUTHELIA_ADMIN_EMAIL=.*/AUTHELIA_ADMIN_EMAIL=$ADMIN_EMAIL/" "$REPO_DIR/.env"
|
||||
sed -i "s/# AUTHELIA_ADMIN_PASSWORD=.*/AUTHELIA_ADMIN_PASSWORD=$ADMIN_PASSWORD_HASH/" "$REPO_DIR/.env"
|
||||
|
||||
log_success "Authelia secrets and admin credentials generated"
|
||||
echo ""
|
||||
|
||||
# Final Summary
|
||||
echo ""
|
||||
echo "=========================================="
|
||||
@@ -270,8 +399,8 @@ echo ""
|
||||
echo " 1. Log out and log back in for group changes to take effect"
|
||||
echo " (or run: newgrp docker)"
|
||||
echo ""
|
||||
echo " 2. Navigate to your AI-Homelab repository:"
|
||||
echo " cd ~/AI-Homelab"
|
||||
echo " 2. Navigate to your EZ-Homelab repository:"
|
||||
echo " cd ~/EZ-Homelab"
|
||||
echo ""
|
||||
echo " 3. Edit the .env file with your configuration:"
|
||||
echo " cp .env.example .env"
|
||||
|
||||
Reference in New Issue
Block a user