|
|
|
|
@ -120,6 +120,7 @@ sudo sed -i 's/#PasswordAuthentication.*/PasswordAuthentication no/' /etc/ssh/ss
@@ -120,6 +120,7 @@ sudo sed -i 's/#PasswordAuthentication.*/PasswordAuthentication no/' /etc/ssh/ss
|
|
|
|
|
sudo sed -i 's/PasswordAuthentication.*/PasswordAuthentication no/' /etc/ssh/sshd_config |
|
|
|
|
sudo sed -i 's/#PermitRootLogin.*/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config |
|
|
|
|
sudo sed -i 's/PermitRootLogin.*/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config |
|
|
|
|
sudo systemctl enable ssh |
|
|
|
|
sudo systemctl restart ssh |
|
|
|
|
|
|
|
|
|
# Additional tools fail2ban |
|
|
|
|
@ -137,6 +138,8 @@ source ./scripts/subinstallers/wireguard.sh
@@ -137,6 +138,8 @@ source ./scripts/subinstallers/wireguard.sh
|
|
|
|
|
|
|
|
|
|
# Docker |
|
|
|
|
source ./scripts/subinstallers/docker.sh |
|
|
|
|
sudo systemctl enable docker |
|
|
|
|
sudo systemctl start docker |
|
|
|
|
|
|
|
|
|
# Unattended upgrades |
|
|
|
|
sudo apt-get install -y unattended-upgrades |
|
|
|
|
@ -160,21 +163,11 @@ figlet "Mistborn default NIC: $iface"
@@ -160,21 +163,11 @@ figlet "Mistborn default NIC: $iface"
|
|
|
|
|
#IPV4_PUBLIC=$(ip -o -4 route show default | egrep -o 'dev [^ ]*' | awk '{print $2}' | xargs ip -4 addr show | grep 'inet ' | awk '{print $2}' | grep -o "^[0-9.]*" | tr -cd '\11\12\15\40-\176' | head -1) # tail -1 to get last |
|
|
|
|
IPV4_PUBLIC="10.2.3.1" |
|
|
|
|
|
|
|
|
|
# clean |
|
|
|
|
if [ -f "/etc/systemd/system/Mistborn-base.service" ]; then |
|
|
|
|
sudo systemctl stop Mistborn*.service 2>/dev/null || true |
|
|
|
|
sudo systemctl disable Mistborn*.service 2>/dev/null || true |
|
|
|
|
fi |
|
|
|
|
|
|
|
|
|
sudo docker volume rm -f mistborn_production_postgres_data 2>/dev/null || true |
|
|
|
|
sudo docker volume rm -f mistborn_production_postgres_data_backups 2>/dev/null || true |
|
|
|
|
sudo docker volume rm -f mistborn_production_traefik 2>/dev/null || true |
|
|
|
|
sudo docker volume prune -f 2>/dev/null || true |
|
|
|
|
|
|
|
|
|
# generate production .env file |
|
|
|
|
if [ ! -d ./.envs/.production ]; then |
|
|
|
|
#if [ ! -d ./.envs/.production ]; then |
|
|
|
|
./scripts/subinstallers/gen_prod_env.sh "$MISTBORN_DEFAULT_PASSWORD" |
|
|
|
|
fi |
|
|
|
|
#fi |
|
|
|
|
|
|
|
|
|
# unattended upgrades |
|
|
|
|
sudo cp ./scripts/conf/20auto-upgrades /etc/apt/apt.conf.d/ |
|
|
|
|
@ -242,6 +235,19 @@ echo "backup up original volumes folder"
@@ -242,6 +235,19 @@ echo "backup up original volumes folder"
|
|
|
|
|
sudo mkdir -p ../mistborn_backup |
|
|
|
|
sudo tar -czf ../mistborn_backup/mistborn_volumes_backup.tar.gz ../mistborn_volumes 1>/dev/null 2>&1 |
|
|
|
|
|
|
|
|
|
# clean docker |
|
|
|
|
echo "cleaning old docker volumes" |
|
|
|
|
sudo systemctl stop Mistborn-base || true |
|
|
|
|
sudo docker-compose -f /opt/mistborn/base.yml kill |
|
|
|
|
sudo docker volume rm -f mistborn_production_postgres_data 2>/dev/null || true |
|
|
|
|
sudo docker volume rm -f mistborn_production_postgres_data_backups 2>/dev/null || true |
|
|
|
|
sudo docker volume rm -f mistborn_production_traefik 2>/dev/null || true |
|
|
|
|
sudo docker volume prune -f 2>/dev/null || true |
|
|
|
|
|
|
|
|
|
# clean Wireguard |
|
|
|
|
echo "cleaning old wireguard services" |
|
|
|
|
sudo ./scripts/env/wg_clean.sh |
|
|
|
|
|
|
|
|
|
# start base service |
|
|
|
|
sudo systemctl enable Mistborn-base.service |
|
|
|
|
sudo systemctl start Mistborn-base.service |
|
|
|
|
|