mirror of
https://github.com/community-scripts/ProxmoxVE.git
synced 2026-04-29 05:30:53 +00:00
PatchMon: v2.0.0 migration (#14015)
Co-authored-by: CanbiZ (MickLesk) <47820557+MickLesk@users.noreply.github.com>
This commit is contained in:
Chris
+61
-49
@@ -29,63 +29,75 @@ function update_script() {
|
|||||||
exit
|
exit
|
||||||
fi
|
fi
|
||||||
|
|
||||||
if ! grep -q "PORT=3001" /opt/patchmon/backend/.env; then
|
RELEASE="v2.0.1"
|
||||||
msg_warn "⚠️ The next PatchMon update will include breaking changes (port changes)."
|
|
||||||
msg_warn "See details here: https://github.com/community-scripts/ProxmoxVE/pull/11888"
|
|
||||||
msg_warn "Press Enter to continue with the update, or Ctrl+C to abort..."
|
|
||||||
read -r
|
|
||||||
fi
|
|
||||||
|
|
||||||
RELEASE="v1.4.2"
|
|
||||||
NODE_VERSION="24" setup_nodejs
|
|
||||||
if check_for_gh_release "PatchMon" "PatchMon/PatchMon" "${RELEASE}"; then
|
if check_for_gh_release "PatchMon" "PatchMon/PatchMon" "${RELEASE}"; then
|
||||||
msg_info "Stopping Service"
|
msg_info "Stopping Service"
|
||||||
systemctl stop patchmon-server
|
systemctl stop patchmon-server
|
||||||
msg_ok "Stopped Service"
|
msg_ok "Stopped Service"
|
||||||
|
|
||||||
msg_info "Creating Backup"
|
if [[ -d /opt/patchmon/backend ]]; then
|
||||||
cp /opt/patchmon/backend/.env /opt/backend.env
|
msg_info "Legacy install detected - creating full backup, please wait..."
|
||||||
cp /opt/patchmon/frontend/.env /opt/frontend.env
|
$STD tar czf ~/patchmon_legacy.tar.gz /opt/patchmon
|
||||||
msg_ok "Backup Created"
|
cp /opt/patchmon/backend/.env /opt/legacy.env
|
||||||
|
msg_ok "Full backup saved in /root"
|
||||||
CLEAN_INSTALL=1 fetch_and_deploy_gh_release "PatchMon" "PatchMon/PatchMon" "tarball" "${RELEASE}" "/opt/patchmon"
|
msg_info "Starting migration to PatchMon v2.x.x"
|
||||||
|
systemctl disable -q --now nginx
|
||||||
msg_info "Updating PatchMon"
|
$STD npm cache clean --force
|
||||||
VERSION=$(get_latest_github_release "PatchMon/PatchMon")
|
$STD apt autoremove --purge -y {nginx,nodejs}
|
||||||
SERVER_PORT="$(sed -n '/SERVER_PORT/s/[^=]*=//p' /opt/backend.env)"
|
if [[ -f /etc/apt/sources.list.d/nodesource.sources ]]; then
|
||||||
sed -i 's/PORT=3399/PORT=3001/' /opt/backend.env
|
cp /etc/apt/sources.list.d/nodesource.sources /etc/apt/sources.list.d/nodesource.sources.bak
|
||||||
sed -i -e "s/VERSION=.*/VERSION=$VERSION/" \
|
rm -f /etc/apt/sources.list.d/nodesource.sources
|
||||||
-e '/^VITE_API_URL/d' /opt/frontend.env
|
elif [[ -f /etc/apt/sources.list.d/nodesource.list ]]; then
|
||||||
export NODE_ENV=production
|
cp /etc/apt/sources.list.d/nodesource.list /etc/apt/sources.list.d/nodesource.list.bak
|
||||||
cd /opt/patchmon
|
rm -f /etc/apt/sources.list.d/nodesource.list
|
||||||
$STD npm install --no-audit --no-fund --no-save --ignore-scripts
|
fi
|
||||||
cd /opt/patchmon/frontend
|
rm -rf /opt/patchmon
|
||||||
mv /opt/frontend.env /opt/patchmon/frontend/.env
|
mkdir -p /opt/patchmon/agents
|
||||||
$STD npm install --no-audit --no-fund --no-save --ignore-scripts --include=dev
|
cp /opt/legacy.env /opt/patchmon/.env
|
||||||
$STD npm run build
|
sed -i -e 's/^PORT=.*/PORT=3000/' \
|
||||||
cd /opt/patchmon/backend
|
-e 's/^NODE_/APP_/' \
|
||||||
mv /opt/backend.env /opt/patchmon/backend/.env
|
-e '/^SERVER_*/d' \
|
||||||
$STD npm run db:generate
|
-e '/^# API*/,+2d' /opt/patchmon/.env
|
||||||
$STD npx prisma migrate deploy
|
{
|
||||||
cp /opt/patchmon/docker/nginx.conf.template /etc/nginx/sites-available/patchmon.conf
|
echo ""
|
||||||
sed -i -e 's|proxy_pass .*|proxy_pass http://127.0.0.1:3001;|' \
|
echo "SESSION_SECRET=$(openssl rand -hex 64)"
|
||||||
-e '\|try_files |i\ root /opt/patchmon/frontend/dist;' \
|
echo "AI_ENCRYPTION_KEY=$(openssl rand -hex 64)"
|
||||||
-e 's|alias.*|alias /opt/patchmon/frontend/dist/assets;|' \
|
echo "AGENT_BINARIES_DIR=/opt/patchmon/agents"
|
||||||
-e '\|expires 1y|i\ root /opt/patchmon/frontend/dist;' /etc/nginx/sites-available/patchmon.conf
|
} >>/opt/patchmon/.env
|
||||||
if [[ -n "$SERVER_PORT" ]] && [[ "$SERVER_PORT" != "443" ]]; then
|
sed -i -e '\|Directory|s|/backend||' \
|
||||||
sed -i "s/listen [[:digit:]].*/listen ${SERVER_PORT};/" /etc/nginx/sites-available/patchmon.conf
|
-e 's|^ExecStart=.*|ExecStart=/opt/patchmon/patchmon-server|' \
|
||||||
|
-e 's|^Environment=NODE_.*|EnvironmentFile=/opt/patchmon/.env|' \
|
||||||
|
/etc/systemd/system/patchmon-server.service
|
||||||
|
systemctl daemon-reload
|
||||||
|
rm /opt/legacy.env
|
||||||
|
msg_ok "Migration complete!"
|
||||||
fi
|
fi
|
||||||
ln -sf /etc/nginx/sites-available/patchmon.conf /etc/nginx/sites-enabled/
|
|
||||||
rm -f /etc/nginx/sites-enabled/default
|
CLEAN_INSTALL=1 fetch_and_deploy_gh_release "PatchMon" "PatchMon/PatchMon" "singlefile" "${RELEASE}" "/opt/patchmon" "patchmon-server-linux-amd64"
|
||||||
$STD nginx -t
|
mv /opt/patchmon/PatchMon /opt/patchmon/patchmon-server
|
||||||
systemctl restart nginx
|
|
||||||
msg_ok "Updated PatchMon"
|
msg_info "Fetching PatchMon agent binaries"
|
||||||
|
[[ ! -d /opt/patchmon/agents ]] && mkdir -p /opt/patchmon/agents
|
||||||
|
FILE_URL="https://github.com/PatchMon/PatchMon/releases/download/${RELEASE}/patchmon-agent-"
|
||||||
|
AGENT_NAME=(
|
||||||
|
"linux-amd64"
|
||||||
|
"linux-arm64"
|
||||||
|
"linux-arm"
|
||||||
|
"linux-386"
|
||||||
|
"freebsd-amd64"
|
||||||
|
"freebsd-arm64"
|
||||||
|
"freebsd-arm"
|
||||||
|
"freebsd-386"
|
||||||
|
"windows-amd64.exe"
|
||||||
|
"windows-arm64.exe"
|
||||||
|
)
|
||||||
|
for arch in "${AGENT_NAME[@]}"; do
|
||||||
|
curl_with_retry "${FILE_URL}${arch}" "/opt/patchmon/agents/patchmon-agent-${arch}"
|
||||||
|
[[ "${arch}" != *.exe ]] && chmod 755 "/opt/patchmon/agents/patchmon-agent-${arch}"
|
||||||
|
done
|
||||||
|
msg_ok "Fetched PatchMon agent binaries"
|
||||||
|
|
||||||
msg_info "Starting Service"
|
msg_info "Starting Service"
|
||||||
if grep -q '/usr/bin/node' /etc/systemd/system/patchmon-server.service; then
|
|
||||||
sed -i 's|ExecStart=.*|ExecStart=/usr/bin/npm run start|' /etc/systemd/system/patchmon-server.service
|
|
||||||
systemctl daemon-reload
|
|
||||||
fi
|
|
||||||
systemctl start patchmon-server
|
systemctl start patchmon-server
|
||||||
msg_ok "Started Service"
|
msg_ok "Started Service"
|
||||||
msg_ok "Updated successfully!"
|
msg_ok "Updated successfully!"
|
||||||
|
|||||||
+62
-46
@@ -14,74 +14,90 @@ network_check
|
|||||||
update_os
|
update_os
|
||||||
|
|
||||||
msg_info "Installing Dependencies"
|
msg_info "Installing Dependencies"
|
||||||
$STD apt install -y \
|
$STD apt install -y redis-server
|
||||||
build-essential \
|
|
||||||
nginx \
|
|
||||||
redis-server
|
|
||||||
msg_ok "Installed Dependencies"
|
msg_ok "Installed Dependencies"
|
||||||
|
|
||||||
NODE_VERSION="24" setup_nodejs
|
|
||||||
PG_VERSION="17" setup_postgresql
|
PG_VERSION="17" setup_postgresql
|
||||||
PG_DB_NAME="patchmon_db" PG_DB_USER="patchmon_usr" setup_postgresql_db
|
PG_DB_NAME="patchmon_db" PG_DB_USER="patchmon_usr" setup_postgresql_db
|
||||||
|
|
||||||
fetch_and_deploy_gh_release "PatchMon" "PatchMon/PatchMon" "tarball" "v1.4.2" "/opt/patchmon"
|
RELEASE="v2.0.1"
|
||||||
|
fetch_and_deploy_gh_release "PatchMon" "PatchMon/PatchMon" "singlefile" "$RELEASE" "/opt/patchmon" "patchmon-server-linux-amd64"
|
||||||
|
mv /opt/patchmon/PatchMon /opt/patchmon/patchmon-server
|
||||||
|
|
||||||
msg_info "Configuring PatchMon"
|
msg_info "Configuring PatchMon"
|
||||||
VERSION=$(get_latest_github_release "PatchMon/PatchMon")
|
cat <<EOF >/opt/patchmon/.env
|
||||||
export NODE_ENV=production
|
DATABASE_URL="postgresql://$PG_DB_USER:$PG_DB_PASS@localhost:5432/$PG_DB_NAME"
|
||||||
cd /opt/patchmon
|
|
||||||
$STD npm install --no-audit --no-fund --no-save --ignore-scripts
|
|
||||||
|
|
||||||
cd /opt/patchmon/frontend
|
|
||||||
cat <<EOF >./.env
|
|
||||||
VITE_APP_NAME=PatchMon
|
|
||||||
VITE_APP_VERSION=${VERSION}
|
|
||||||
EOF
|
|
||||||
$STD npm install --no-audit --no-fund --no-save --ignore-scripts --include=dev
|
|
||||||
$STD npm run build
|
|
||||||
|
|
||||||
JWT_SECRET="$(openssl rand -hex 64)"
|
JWT_SECRET="$(openssl rand -hex 64)"
|
||||||
mv /opt/patchmon/backend/env.example /opt/patchmon/backend/.env
|
SESSION_SECRET="$(openssl rand -hex 64)"
|
||||||
sed -i -e "s|DATABASE_URL=.*|DATABASE_URL=\"postgresql://$PG_DB_USER:$PG_DB_PASS@localhost:5432/$PG_DB_NAME\"|" \
|
AI_ENCRYPTION_KEY="$(openssl rand -hex 64)"
|
||||||
-e "/JWT_SECRET/s/[=$].*/=$JWT_SECRET/" \
|
CORS_ORIGIN=http://${LOCAL_IP}:3000
|
||||||
-e "\|CORS_ORIGIN|s|localhost|$LOCAL_IP|" \
|
PORT=3000
|
||||||
-e "/PORT=3001/aSERVER_PROTOCOL=http \\
|
APP_ENV=production
|
||||||
SERVER_HOST=$LOCAL_IP \\
|
|
||||||
SERVER_PORT=3000" \
|
|
||||||
-e '/_ENV=production/aTRUST_PROXY=1' \
|
|
||||||
-e '/REDIS_USER=.*/,+1d' /opt/patchmon/backend/.env
|
|
||||||
|
|
||||||
cd /opt/patchmon/backend
|
# Redis
|
||||||
$STD npm run db:generate
|
REDIS_HOST=localhost
|
||||||
$STD npx prisma migrate deploy
|
REDIS_PORT=6379
|
||||||
|
|
||||||
|
## OIDC / SSO (when OIDC_ENABLED=true, issuer/client/secret/redirect required)
|
||||||
|
# OIDC_ENABLED=false
|
||||||
|
# OIDC_ISSUER_URL=
|
||||||
|
# OIDC_CLIENT_ID=
|
||||||
|
# OIDC_CLIENT_SECRET=
|
||||||
|
# OIDC_REDIRECT_URI=
|
||||||
|
# OIDC_SCOPES=openid email profile groups
|
||||||
|
# OIDC_AUTO_CREATE_USERS=false
|
||||||
|
# OIDC_DEFAULT_ROLE=user
|
||||||
|
# OIDC_DISABLE_LOCAL_AUTH=false
|
||||||
|
# OIDC_BUTTON_TEXT=Login with SSO
|
||||||
|
# OIDC_SESSION_TTL=600
|
||||||
|
# OIDC_POST_LOGOUT_URI=
|
||||||
|
# OIDC_SYNC_ROLES=false
|
||||||
|
# OIDC_ADMIN_GROUP=
|
||||||
|
# OIDC_SUPERADMIN_GROUP=
|
||||||
|
# OIDC_HOST_MANAGER_GROUP=
|
||||||
|
# OIDC_READONLY_GROUP=
|
||||||
|
# OIDC_USER_GROUP=
|
||||||
|
# OIDC_ENFORCE_HTTPS=true
|
||||||
|
|
||||||
|
AGENT_BINARIES_DIR=/opt/patchmon/agents
|
||||||
|
EOF
|
||||||
msg_ok "Configured PatchMon"
|
msg_ok "Configured PatchMon"
|
||||||
|
|
||||||
msg_info "Configuring Nginx"
|
msg_info "Fetching PatchMon agent binaries"
|
||||||
cp /opt/patchmon/docker/nginx.conf.template /etc/nginx/sites-available/patchmon.conf
|
mkdir -p /opt/patchmon/agents
|
||||||
sed -i -e 's|proxy_pass .*|proxy_pass http://127.0.0.1:3001;|' \
|
FILE_URL="https://github.com/PatchMon/PatchMon/releases/download/${RELEASE}/patchmon-agent-"
|
||||||
-e '\|try_files |i\ root /opt/patchmon/frontend/dist;' \
|
AGENT_NAME=(
|
||||||
-e 's|alias.*|alias /opt/patchmon/frontend/dist/assets;|' \
|
"linux-amd64"
|
||||||
-e '\|expires 1y|i\ root /opt/patchmon/frontend/dist;' /etc/nginx/sites-available/patchmon.conf
|
"linux-arm64"
|
||||||
ln -sf /etc/nginx/sites-available/patchmon.conf /etc/nginx/sites-enabled/
|
"linux-arm"
|
||||||
rm -f /etc/nginx/sites-enabled/default
|
"linux-386"
|
||||||
$STD nginx -t
|
"freebsd-amd64"
|
||||||
systemctl restart nginx
|
"freebsd-arm64"
|
||||||
msg_ok "Configured Nginx"
|
"freebsd-arm"
|
||||||
|
"freebsd-386"
|
||||||
|
"windows-amd64.exe"
|
||||||
|
"windows-arm64.exe"
|
||||||
|
)
|
||||||
|
for arch in "${AGENT_NAME[@]}"; do
|
||||||
|
curl_with_retry "${FILE_URL}${arch}" "/opt/patchmon/agents/patchmon-agent-${arch}"
|
||||||
|
[[ "${arch}" != *.exe ]] && chmod 755 "/opt/patchmon/agents/patchmon-agent-${arch}"
|
||||||
|
done
|
||||||
|
msg_ok "Fetched PatchMon agent binaries"
|
||||||
|
|
||||||
msg_info "Creating service"
|
msg_info "Creating service"
|
||||||
cat <<EOF >/etc/systemd/system/patchmon-server.service
|
cat <<EOF >/etc/systemd/system/patchmon-server.service
|
||||||
[Unit]
|
[Unit]
|
||||||
Description=PatchMon Service
|
Description=PatchMon Server
|
||||||
After=network.target postgresql.service
|
After=network.target postgresql.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=simple
|
Type=simple
|
||||||
WorkingDirectory=/opt/patchmon/backend
|
WorkingDirectory=/opt/patchmon
|
||||||
ExecStart=/usr/bin/npm run start
|
ExecStart=/opt/patchmon/patchmon-server
|
||||||
Restart=always
|
Restart=always
|
||||||
RestartSec=10
|
RestartSec=10
|
||||||
Environment=NODE_ENV=production
|
|
||||||
Environment=PATH=/usr/bin:/usr/local/bin
|
Environment=PATH=/usr/bin:/usr/local/bin
|
||||||
|
EnvironmentFile=/opt/patchmon/.env
|
||||||
NoNewPrivileges=true
|
NoNewPrivileges=true
|
||||||
PrivateTmp=true
|
PrivateTmp=true
|
||||||
ProtectSystem=strict
|
ProtectSystem=strict
|
||||||
|
|||||||
Reference in New Issue
Block a user