mirror of
https://github.com/community-scripts/ProxmoxVE.git
synced 2026-04-18 00:12:17 +00:00
6c0d7d4482
- checkmk: use github_api_call+jq for tag fetch, get_os_info codename in deb URL, strip +security suffix, bump default to Debian 13 - cockpit: remove source /etc/os-release, use get_os_info codename for backports suite/install, get_os_version_major for version check - flaresolverr: replace raw grep on /etc/os-release with get_os_version_major - lldap: remove source /etc/os-release, use get_os_info id+version for repo URL - mqtt: remove unused source /etc/os-release - pangolin: replace . /etc/os-release + VERSION_CODENAME with get_os_info codename - paperless-ngx: replace both . /etc/os-release + VERSION_CODENAME checks with get_os_info codename - photoprism: replace hardcoded bookworm in libheif URL with get_os_info codename - proxmox-datacenter-manager: replace grep on os-release string with get_os_version_major - wireguard: replace . /etc/os-release + VERSION_CODENAME with get_os_info codename - zabbix: replace . /etc/os-release + VERSION_CODENAME with get_os_info codename
84 lines
2.4 KiB
Bash
84 lines
2.4 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
# Copyright (c) 2021-2026 tteck
|
|
# Author: tteck (tteckster)
|
|
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
|
# Source: https://www.wireguard.com/
|
|
|
|
source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
|
|
color
|
|
verb_ip6
|
|
catch_errors
|
|
setting_up_container
|
|
network_check
|
|
update_os
|
|
|
|
msg_info "Installing Dependencies"
|
|
$STD apt install -y git
|
|
msg_ok "Installed Dependencies"
|
|
|
|
msg_info "Installing WireGuard"
|
|
$STD apt install -y wireguard wireguard-tools net-tools iptables
|
|
DEBIAN_FRONTEND=noninteractive apt -o Dpkg::Options::="--force-confnew" install -y iptables-persistent &>/dev/null
|
|
$STD netfilter-persistent reload
|
|
msg_ok "Installed WireGuard"
|
|
|
|
read -r -p "${TAB3}Would you like to add WGDashboard? <y/N> " prompt
|
|
if [[ "${prompt,,}" =~ ^(y|yes)$ ]]; then
|
|
git clone -q https://github.com/WGDashboard/WGDashboard.git /etc/wgdashboard
|
|
|
|
msg_info "Installing WGDashboard"
|
|
cd /etc/wgdashboard/src
|
|
chmod u+x wgd.sh
|
|
$STD ./wgd.sh install
|
|
if [ "$(get_os_info codename)" = "trixie" ]; then
|
|
echo "net.ipv4.ip_forward=1" >>/etc/sysctl.d/sysctl.conf
|
|
$STD sysctl -p /etc/sysctl.d/sysctl.conf
|
|
else
|
|
echo "net.ipv4.ip_forward=1" >>/etc/sysctl.conf
|
|
$STD sysctl -p /etc/sysctl.conf
|
|
fi
|
|
msg_ok "Installed WGDashboard"
|
|
|
|
msg_info "Create Example Config for WGDashboard"
|
|
private_key=$(wg genkey)
|
|
cat <<EOF >/etc/wireguard/wg0.conf
|
|
[Interface]
|
|
PrivateKey = ${private_key}
|
|
Address = 10.0.0.1/24
|
|
SaveConfig = true
|
|
PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -A FORWARD -o wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE;
|
|
PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -D FORWARD -o wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE;
|
|
ListenPort = 51820
|
|
EOF
|
|
msg_ok "Created Example Config for WGDashboard"
|
|
|
|
msg_info "Creating Service"
|
|
cat <<EOF >/etc/systemd/system/wg-dashboard.service
|
|
[Unit]
|
|
After=syslog.target network-online.target
|
|
Wants=wg-quick.target
|
|
ConditionPathIsDirectory=/etc/wireguard
|
|
|
|
[Service]
|
|
Type=forking
|
|
PIDFile=/etc/wgdashboard/src/gunicorn.pid
|
|
WorkingDirectory=/etc/wgdashboard/src
|
|
ExecStart=/etc/wgdashboard/src/wgd.sh start
|
|
ExecStop=/etc/wgdashboard/src/wgd.sh stop
|
|
ExecReload=/etc/wgdashboard/src/wgd.sh restart
|
|
TimeoutSec=120
|
|
PrivateTmp=yes
|
|
Restart=always
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
EOF
|
|
systemctl enable -q --now wg-dashboard
|
|
msg_ok "Created Service"
|
|
fi
|
|
|
|
motd_ssh
|
|
customize
|
|
cleanup_lxc
|