Merge branch 'community-scripts:main' into step-ca

install/powerdns-install.sh

@@ -31,6 +31,10 @@ Pin: origin repo.powerdns.com
 Pin-Priority: 600
 EOF
 
+escape_sql() {
+    printf '%s' "$1" | sed "s/'/''/g"
+}
+
 msg_info "Setting up PowerDNS"
 $STD apt install -y pdns-server \
   pdns-backend-sqlite3
@@ -39,7 +43,23 @@ msg_ok "Setup PowerDNS"
 fetch_and_deploy_gh_release "poweradmin" "poweradmin/poweradmin" "tarball"
 
 msg_info "Setting up Poweradmin"
-sqlite3 /opt/poweradmin/powerdns.db < /usr/share/doc/pdns-backend-sqlite3/schema.sqlite3.sql
+sqlite3 /opt/poweradmin/powerdns.db < /opt/poweradmin/sql/poweradmin-sqlite-db-structure.sql
+sqlite3 /opt/poweradmin/powerdns.db < /opt/poweradmin/sql/pdns/49/schema.sqlite3.sql
+PA_ADMIN_USERNAME="admin"
+PA_ADMIN_EMAIL="admin@example.com"
+PA_ADMIN_FULLNAME="Administrator"
+PA_ADMIN_PASSWORD=$(openssl rand -base64 16 | tr -d "=+/" | cut -c1-16)
+PA_SESSION_KEY=$(openssl rand -base64 75 | tr -dc 'A-Za-z0-9^@#!(){}[]%_\-+=~' | head -c 50)
+PASSWORD_HASH=$(php -r "echo password_hash(\$argv[1], PASSWORD_DEFAULT);" -- "${PA_ADMIN_PASSWORD}" 2>/dev/null)
+sqlite3 /opt/poweradmin/powerdns.db "INSERT INTO users (username, password, fullname, email, description, perm_templ, active, use_ldap) \
+  VALUES ('$(escape_sql "${PA_ADMIN_USERNAME}")', '$(escape_sql "${PASSWORD_HASH}")', '$(escape_sql "${PA_ADMIN_FULLNAME}")', \
+  '$(escape_sql "${PA_ADMIN_EMAIL}")', 'System Administrator', 1, 1, 0);"
+
+cat <<EOF >~/poweradmin.creds
+Admin Username: ${PA_ADMIN_USERNAME}
+Admin Password: ${PA_ADMIN_PASSWORD}
+EOF
+
 cat <<EOF >/opt/poweradmin/config/settings.php
 <?php
 
@@ -62,7 +82,7 @@ return [
      * Security Settings
      */
     'security' => [
-        'session_key' => '5c\$^vK#l!*@mj4Id(WWzsosruN\$fkhaqLQo@i-s6ZBV)8C',
+        'session_key' => '${PA_SESSION_KEY}',
     ],
 
     /**
@@ -82,13 +102,14 @@ return [
     ]
 ];
 EOF
+rm -rf /opt/poweradmin/install
 msg_ok "Setup Poweradmin"
 
 msg_info "Creating Service"
 rm /etc/apache2/sites-enabled/000-default.conf
 cat <<EOF >/etc/apache2/sites-enabled/poweradmin.conf
 <VirtualHost *:80>
-    ServerName $HOSTNAME
+    ServerName localhost
     DocumentRoot /opt/poweradmin
 
     <Directory /opt/poweradmin>

install/wealthfolio-install.sh

@@ -1,89 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: CrazyWolf13
-# License: MIT | https://github.com/community-scripts/ProxmoxVED/raw/main/LICENSE
-# Source: https://wealthfolio.app/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  pkg-config \
-  libssl-dev \
-  build-essential \
-  libsqlite3-dev \
-  argon2
-msg_ok "Installed Dependencies"
-
-setup_rust
-NODE_MODULE="pnpm" setup_nodejs
-fetch_and_deploy_gh_release "wealthfolio" "afadil/wealthfolio" "tarball"
-
-msg_info "Building Frontend (patience)"
-cd /opt/wealthfolio
-$STD pnpm install --frozen-lockfile
-$STD pnpm tsc
-$STD pnpm vite build
-msg_ok "Built Frontend"
-
-msg_info "Building Backend (patience)"
-cd /opt/wealthfolio/src-server
-$STD cargo build --release --manifest-path Cargo.toml
-cp /opt/wealthfolio/src-server/target/release/wealthfolio-server /usr/local/bin/wealthfolio-server
-chmod +x /usr/local/bin/wealthfolio-server
-msg_ok "Built Backend"
-
-msg_info "Configuring Wealthfolio"
-mkdir -p /opt/wealthfolio_data
-SECRET_KEY=$(openssl rand -base64 32)
-WF_PASSWORD=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-16)
-WF_PASSWORD_HASH=$(echo -n "$WF_PASSWORD" | argon2 "$(openssl rand -base64 16)" -id -e)
-cat <<EOF >/opt/wealthfolio/.env
-WF_LISTEN_ADDR=0.0.0.0:8080
-WF_DB_PATH=/opt/wealthfolio_data/wealthfolio.db
-WF_SECRET_KEY=${SECRET_KEY}
-WF_AUTH_PASSWORD_HASH=${WF_PASSWORD_HASH}
-WF_STATIC_DIR=/opt/wealthfolio/dist
-WF_CORS_ALLOW_ORIGINS=*
-WF_REQUEST_TIMEOUT_MS=30000
-EOF
-echo "WF_PASSWORD=${WF_PASSWORD}" >~/wealthfolio.creds
-msg_ok "Configured Wealthfolio"
-
-msg_info "Cleaning Up"
-rm -rf /opt/wealthfolio/src-server/target
-rm -rf /root/.cargo/registry
-rm -rf /opt/wealthfolio/node_modules
-msg_ok "Cleaned Up"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/wealthfolio.service
-[Unit]
-Description=Wealthfolio Investment Tracker
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/wealthfolio
-EnvironmentFile=/opt/wealthfolio/.env
-ExecStart=/usr/local/bin/wealthfolio-server
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now wealthfolio
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc