mirror of
https://github.com/community-scripts/ProxmoxVE.git
synced 2026-04-18 00:12:17 +00:00
a3498644fc
Security fixes across multiple files: - install.func: Quote command substitutions in mkdir/systemctl to prevent word splitting and globbing on GETTY_OVERRIDE path - build.func: Escape sed special chars (& \) in current_os/hostname/ip before using them as sed replacement strings in update_motd_ip - build.func: Escape regex metacharacters (. |) in $LANG before sed use - build.func: Validate render_gid/video_gid as numeric before sed injection - build.func: Use HTTPS for Alpine APK repositories instead of HTTP - tools.func: Verify GPG dearmor output is non-empty (-s check) - tools.func: Tighten GPU device permissions from 666 to 660 (owner+group) - tools.func: Add chgrp render for /dev/kfd (AMD ROCm) - shinobi-install.sh: chmod 777 -> 644 on version.json - tasmoadmin-install.sh: chmod 777 -> 775 on tmp/data directories - runtipi.sh: chmod 666 -> 660 on settings.json
53 lines
1.4 KiB
Bash
53 lines
1.4 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
# Copyright (c) 2021-2026 tteck
|
|
# Author: tteck (tteckster)
|
|
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
|
# Source: https://github.com/TasmoAdmin/TasmoAdmin
|
|
|
|
source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
|
|
color
|
|
verb_ip6
|
|
catch_errors
|
|
setting_up_container
|
|
network_check
|
|
update_os
|
|
|
|
msg_info "Installing Dependencies"
|
|
$STD apt install -y git
|
|
msg_ok "Installed Dependencies"
|
|
|
|
PHP_VERSION="8.4" PHP_APACHE="YES" setup_php
|
|
fetch_and_deploy_gh_release "tasmoadmin" "TasmoAdmin/TasmoAdmin" "prebuild" "latest" "/var/www/tasmoadmin" "tasmoadmin_v*.tar.gz"
|
|
|
|
msg_info "Configuring TasmoAdmin"
|
|
rm -rf /etc/php/8.4/apache2/conf.d/10-opcache.ini
|
|
chown -R www-data:www-data /var/www/tasmoadmin
|
|
chmod 775 /var/www/tasmoadmin/tmp /var/www/tasmoadmin/data
|
|
cat <<EOF >/etc/apache2/sites-available/tasmoadmin.conf
|
|
<VirtualHost *:9999>
|
|
ServerName tasmoadmin
|
|
ServerAdmin webmaster@localhost
|
|
DocumentRoot /var/www/tasmoadmin
|
|
<Directory /var/www/tasmoadmin>
|
|
AllowOverride All
|
|
Order allow,deny
|
|
allow from all
|
|
</Directory>
|
|
ErrorLog /var/log/apache2/error.log
|
|
LogLevel warn
|
|
CustomLog /var/log/apache2/access.log combined
|
|
ServerSignature On
|
|
</VirtualHost>
|
|
EOF
|
|
sed -i '6iListen 9999' /etc/apache2/ports.conf
|
|
$STD a2ensite tasmoadmin
|
|
$STD a2enmod rewrite
|
|
systemctl reload apache2
|
|
systemctl restart apache2
|
|
msg_ok "Configured TasmoAdmin"
|
|
|
|
motd_ssh
|
|
customize
|
|
cleanup_lxc
|