mirror of
https://github.com/community-scripts/ProxmoxVE.git
synced 2026-10-04 07:59:41 +00:00
CanbiZ (MickLesk)
7f57d0998c
* Scripts: close every msg_info block with msg_ok Past-tense msg_info calls that should have been msg_ok, notices that opened a block before a prompt, and blocks without a closing msg_ok. These already left a stale spinner; with core's block stack they would resume it after every later msg_ok. * Generate passwords with random_password openssl rand -base64 | tr -dc | head -c returned fewer characters than asked for, and the unfiltered | cut variants put / and + into passwords that end up in DSNs and sed expressions. Secrets an app decodes as base64 are unchanged. Requires community-scripts/core#61. * Keep data directories through CLEAN_INSTALL instead of copying them create_backup copied uploads, storage and similar directories twice per update and needed their size again in free space. CLEAN_INSTALL_KEEP moves them aside instead. Only directories the upstream release does not ship, in scripts that restored right after the fetch. Requires community-scripts/core#61. * Drop the 300s uv timeout overrides setup_uv exports UV_HTTP_TIMEOUT=600 now; the scripts' 300 only lowered it. Requires community-scripts/core#61.
108 lines
3.4 KiB
Bash
108 lines
3.4 KiB
Bash
#!/usr/bin/env bash
|
|
_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
|
|
source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
|
|
|
|
# Copyright (c) 2021-2026 community-scripts ORG
|
|
# Author: Sander Koenders (sanderkoenders)
|
|
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
|
# Source: https://www.borgbackup.org/
|
|
|
|
APP="Alpine-BorgBackup-Server"
|
|
var_tags="${var_tags:-alpine;backup}"
|
|
var_cpu="${var_cpu:-2}"
|
|
var_ram="${var_ram:-1024}"
|
|
var_disk="${var_disk:-20}"
|
|
var_os="${var_os:-alpine}"
|
|
var_version="${var_version:-3.24}"
|
|
var_arm64="${var_arm64:-yes}"
|
|
var_unprivileged="${var_unprivileged:-1}"
|
|
|
|
header_info "$APP"
|
|
variables
|
|
color
|
|
catch_errors
|
|
|
|
function update_script() {
|
|
header_info
|
|
|
|
if [[ ! -f /usr/bin/borg ]]; then
|
|
msg_error "No ${APP} Installation Found!"
|
|
exit
|
|
fi
|
|
|
|
CHOICE=$(msg_menu "BorgBackup Server Update Options" \
|
|
"1" "Update BorgBackup Server" \
|
|
"2" "Reset SSH Access" \
|
|
"3" "Enable password authentication for backup user (not recommended, use SSH key instead)" \
|
|
"4" "Disable password authentication for backup user (recommended for security, use SSH key)")
|
|
|
|
case $CHOICE in
|
|
1)
|
|
msg_info "Updating $APP LXC"
|
|
$STD apk -U upgrade
|
|
msg_ok "Updated $APP LXC successfully!"
|
|
;;
|
|
2)
|
|
if [[ "${PHS_SILENT:-0}" == "1" ]]; then
|
|
msg_warn "Reset SSH Public key requires interactive mode, skipping."
|
|
exit
|
|
fi
|
|
|
|
echo -e "${INFO}${YW}Please paste your SSH public key (e.g., ssh-rsa AAAAB3... user@host):${CL}"
|
|
read -p "Key: " SSH_PUBLIC_KEY
|
|
echo
|
|
|
|
if [[ -z "$SSH_PUBLIC_KEY" ]]; then
|
|
msg_error "No SSH public key provided!"
|
|
exit 1
|
|
fi
|
|
|
|
if [[ ! "$SSH_PUBLIC_KEY" =~ ^(ssh-rsa|ssh-dss|ssh-ed25519|ecdsa-sha2-) ]]; then
|
|
msg_error "Invalid SSH public key format!"
|
|
exit 1
|
|
fi
|
|
|
|
msg_info "Setting up SSH access"
|
|
mkdir -p /home/backup/.ssh
|
|
echo "$SSH_PUBLIC_KEY" >/home/backup/.ssh/authorized_keys
|
|
|
|
chown -R backup:backup /home/backup/.ssh
|
|
chmod 700 /home/backup/.ssh
|
|
chmod 600 /home/backup/.ssh/authorized_keys
|
|
|
|
msg_ok "SSH access configured for backup user"
|
|
;;
|
|
3)
|
|
if [[ "${PHS_SILENT:-0}" == "1" ]]; then
|
|
msg_warn "Enabling password authentication requires interactive mode, skipping."
|
|
exit
|
|
fi
|
|
|
|
msg_info "Enabling password authentication for backup user"
|
|
msg_warn "Password authentication is less secure than using SSH keys. Consider using SSH keys instead."
|
|
passwd backup
|
|
sed -i 's/^#*\s*PasswordAuthentication\s\+\(yes\|no\)/PasswordAuthentication yes/' /etc/ssh/sshd_config
|
|
rc-service sshd restart
|
|
msg_ok "Password authentication enabled for backup user"
|
|
;;
|
|
4)
|
|
msg_info "Disabling password authentication for backup user"
|
|
sed -i 's/^#*\s*PasswordAuthentication\s\+\(yes\|no\)/PasswordAuthentication no/' /etc/ssh/sshd_config
|
|
rc-service sshd restart
|
|
msg_ok "Password authentication disabled for backup user"
|
|
;;
|
|
esac
|
|
|
|
exit 0
|
|
}
|
|
|
|
start
|
|
build_container
|
|
description
|
|
|
|
msg_ok "Completed successfully!\n"
|
|
echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
|
|
echo -e "${INFO}${YW}Connection information:${CL}"
|
|
echo -e "${GATEWAY}${BGN}ssh backup@${IP}${CL}"
|
|
echo -e "${TAB}${VERIFYPW}${YW}To set SSH key, run this script with the 'update' option and select option 2${CL}"
|