mirror of
https://github.com/community-scripts/ProxmoxVE.git
synced 2026-10-24 04:05:03 +00:00
MickLesk
3f0dd1b09b
Every interactive prompt takes a var_<app>_<name> override and treats a closed stdin like Enter (`|| true`), so an install keeps going after the console that started it is gone. Values the script cannot do without end with exit 64 and name the variable to set. Validation loops stop asking when nobody can answer instead of spinning on an empty read.
113 lines
3.2 KiB
Bash
113 lines
3.2 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
# Copyright (c) 2021-2026 community-scripts ORG
|
|
# Author: pshankinclarke (lazarillo)
|
|
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
|
# Source: https://valkey.io/
|
|
|
|
source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
|
|
color
|
|
verb_ip6
|
|
catch_errors
|
|
setting_up_container
|
|
network_check
|
|
update_os
|
|
|
|
setup_deb_based() {
|
|
msg_info "Installing Valkey"
|
|
apt_update_safe
|
|
$STD apt install -y valkey openssl
|
|
sed -i 's/^bind .*/bind 0.0.0.0/' /etc/valkey/valkey.conf
|
|
|
|
PASS="$(random_password 32)"
|
|
echo "requirepass $PASS" >>/etc/valkey/valkey.conf
|
|
echo "$PASS" >~/valkey.creds
|
|
chmod 600 ~/valkey.creds
|
|
|
|
MEMTOTAL_MB=$(free -m | grep ^Mem: | awk '{print $2}')
|
|
# reserve 25% of a node type's maxmemory value for system use
|
|
MAXMEMORY_MB=$((MEMTOTAL_MB * 75 / 100))
|
|
|
|
echo "" >>/etc/valkey/valkey.conf
|
|
echo "# Memory-optimized settings for small-scale deployments" >>/etc/valkey/valkey.conf
|
|
echo "maxmemory ${MAXMEMORY_MB}mb" >>/etc/valkey/valkey.conf
|
|
echo "maxmemory-policy allkeys-lru" >>/etc/valkey/valkey.conf
|
|
echo "maxmemory-samples 10" >>/etc/valkey/valkey.conf
|
|
msg_ok "Installed Valkey"
|
|
|
|
echo
|
|
prompt="${var_valkey_tls:-}"
|
|
[[ -n "$prompt" ]] || read -r -p "${TAB3}Enable TLS for Valkey (Sentinel mode does not supported)? [y/N]: " prompt || true
|
|
if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
|
|
tls_only="${var_valkey_tls_only:-}"
|
|
[[ -n "$tls_only" ]] || read -r -p "${TAB3}Use TLS-only mode (disable TCP port 6379)? [y/N]: " tls_only || true
|
|
msg_info "Configuring TLS for Valkey..."
|
|
|
|
create_self_signed_cert "Valkey"
|
|
TLS_DIR="/etc/ssl/valkey"
|
|
TLS_CERT="$TLS_DIR/valkey.crt"
|
|
TLS_KEY="$TLS_DIR/valkey.key"
|
|
chown valkey:valkey "$TLS_CERT" "$TLS_KEY"
|
|
|
|
if [[ ${tls_only,,} =~ ^(y|yes)$ ]]; then
|
|
cat <<EOF >/etc/valkey/valkey.conf
|
|
|
|
# TLS configuration generated by Proxmox VE Valkey helper-script
|
|
port 0
|
|
tls-port 6379
|
|
tls-cert-file $TLS_DIR/valkey.crt
|
|
tls-key-file $TLS_DIR/valkey.key
|
|
tls-auth-clients no
|
|
EOF
|
|
msg_ok "Enabled TLS-only mode on port 6379"
|
|
else
|
|
cat <<EOF >/etc/valkey/valkey.conf
|
|
|
|
# TLS configuration generated by Proxmox VE Valkey helper-script
|
|
tls-port 6380
|
|
tls-cert-file $TLS_DIR/valkey.crt
|
|
tls-key-file $TLS_DIR/valkey.key
|
|
tls-auth-clients no
|
|
EOF
|
|
msg_ok "Enabled TLS on port 6380 and TCP on 6379"
|
|
fi
|
|
fi
|
|
|
|
systemctl enable -q --now valkey-server
|
|
systemctl restart valkey-server
|
|
}
|
|
|
|
setup_alpine() {
|
|
msg_info "Installing Valkey"
|
|
$STD apk add valkey valkey-openrc valkey-cli
|
|
sed -i 's/^bind .*/bind 0.0.0.0/' /etc/valkey/valkey.conf
|
|
|
|
PASS="$(random_password 32)"
|
|
echo "requirepass $PASS" >>/etc/valkey/valkey.conf
|
|
echo "$PASS" >~/valkey.creds
|
|
chmod 600 ~/valkey.creds
|
|
|
|
MEMTOTAL_MB=$(free -m | grep ^Mem: | awk '{print $2}')
|
|
MAXMEMORY_MB=$((MEMTOTAL_MB * 75 / 100))
|
|
|
|
cat <<EOF >/etc/valkey/valkey.conf
|
|
# Memory-optimized settings for small-scale deployments
|
|
maxmemory ${MAXMEMORY_MB}mb
|
|
maxmemory-policy allkeys-lru
|
|
maxmemory-samples 10
|
|
EOF
|
|
msg_ok "Installed Valkey"
|
|
|
|
# Note: Alpine's valkey package is compiled without TLS support
|
|
# For TLS, use the Debian-based valkey script instead
|
|
|
|
$STD rc-update add valkey default
|
|
$STD rc-service valkey start
|
|
}
|
|
|
|
run_os_setup
|
|
|
|
motd_ssh
|
|
customize
|
|
cleanup_lxc
|