1c14bbe7c7
Moved Ente CLI installation to use fetch_and_deploy_gh_release for consistency and removed the previous manual installation block. Also updated cleanup commands to use 'apt' instead of 'apt-get'.
339 lines
11 KiB
Bash
339 lines
11 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
# Copyright (c) 2021-2025 community-scripts ORG
|
|
# Author: MickLesk
|
|
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
|
# Source: https://github.com/ente-io/ente
|
|
|
|
source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
|
|
color
|
|
verb_ip6
|
|
catch_errors
|
|
setting_up_container
|
|
network_check
|
|
update_os
|
|
|
|
msg_info "Installing Dependencies"
|
|
$STD apt-get install -y \
|
|
libsodium23 \
|
|
libsodium-dev \
|
|
pkg-config \
|
|
caddy \
|
|
gcc \
|
|
curl \
|
|
jq
|
|
msg_ok "Installed Dependencies"
|
|
|
|
PG_VERSION="17" setup_postgresql
|
|
setup_go
|
|
NODE_VERSION="24" NODE_MODULE="yarn" setup_nodejs
|
|
ENTE_CLI_VERSION=$(curl -s https://api.github.com/repos/ente-io/ente/releases | jq -r '[.[] | select(.tag_name | startswith("cli-v"))][0].tag_name')
|
|
fetch_and_deploy_gh_release "ente" "ente-io/ente" "tarball" "latest" "/opt/ente"
|
|
fetch_and_deploy_gh_release "ente" "ente-io/ente" "tarball" "$ENTE_CLI_VERSION" "/usr/local/bin/ente" "ente-cli-$ENTE_CLI_VERSION-linux-amd64.tar.gz"
|
|
|
|
msg_info "Setting up PostgreSQL"
|
|
DB_NAME="ente_db"
|
|
DB_USER="ente"
|
|
DB_PASS="$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)"
|
|
$STD sudo -u postgres psql -c "CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';"
|
|
$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER ENCODING 'UTF8' TEMPLATE template0;"
|
|
$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET client_encoding TO 'utf8';"
|
|
$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET default_transaction_isolation TO 'read committed';"
|
|
$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET timezone TO 'UTC';"
|
|
{
|
|
echo "Ente Credentials"
|
|
echo "Database Name: $DB_NAME"
|
|
echo "Database User: $DB_USER"
|
|
echo "Database Password: $DB_PASS"
|
|
echo ""
|
|
echo "Important Configuration Notes:"
|
|
echo "- Frontend is built with IP: $(hostname -I | awk '{print $1}')"
|
|
echo "- If IP changes, run: /opt/ente/rebuild-frontend.sh"
|
|
echo "- Museum API: http://$(hostname -I | awk '{print $1}'):8080"
|
|
echo "- Photos UI: http://$(hostname -I | awk '{print $1}'):3000"
|
|
echo "- Accounts UI: http://$(hostname -I | awk '{print $1}'):3001"
|
|
echo "- Auth UI: http://$(hostname -I | awk '{print $1}'):3003"
|
|
echo ""
|
|
echo "Post-Installation Steps Required:"
|
|
echo "1. Create your first user account via the web UI"
|
|
echo "2. Check museum logs for email verification code:"
|
|
echo " journalctl -u ente-museum -n 100 | grep -i 'verification'"
|
|
echo "3. Use verification code to complete account setup"
|
|
echo "4. Remove subscription limit (replace <email> with your account):"
|
|
echo " ente admin update-subscription -a <email> -u <email> --no-limit"
|
|
echo ""
|
|
echo "Note: Email verification requires manual intervention since SMTP is not configured"
|
|
} >>~/ente.creds
|
|
msg_ok "Set up PostgreSQL"
|
|
|
|
msg_info "Building Museum (server)"
|
|
cd /opt/ente/server
|
|
$STD corepack enable
|
|
$STD go mod tidy
|
|
export CGO_ENABLED=1
|
|
CGO_CFLAGS="$(pkg-config --cflags libsodium || true)"
|
|
CGO_LDFLAGS="$(pkg-config --libs libsodium || true)"
|
|
if [ -z "$CGO_CFLAGS" ]; then
|
|
CGO_CFLAGS="-I/usr/include"
|
|
fi
|
|
if [ -z "$CGO_LDFLAGS" ]; then
|
|
CGO_LDFLAGS="-lsodium"
|
|
fi
|
|
export CGO_CFLAGS
|
|
export CGO_LDFLAGS
|
|
$STD go build cmd/museum/main.go
|
|
msg_ok "Built Museum"
|
|
|
|
msg_info "Generating Secrets"
|
|
SECRET_ENC=$(go run tools/gen-random-keys/main.go 2>/dev/null | grep "encryption" | awk '{print $2}')
|
|
SECRET_HASH=$(go run tools/gen-random-keys/main.go 2>/dev/null | grep "hash" | awk '{print $2}')
|
|
SECRET_JWT=$(go run tools/gen-random-keys/main.go 2>/dev/null | grep "jwt" | awk '{print $2}')
|
|
msg_ok "Generated Secrets"
|
|
|
|
msg_info "Creating museum.yaml"
|
|
CONTAINER_IP=$(hostname -I | awk '{print $1}')
|
|
cat <<EOF >/opt/ente/server/museum.yaml
|
|
db:
|
|
host: 127.0.0.1
|
|
port: 5432
|
|
name: $DB_NAME
|
|
user: $DB_USER
|
|
password: $DB_PASS
|
|
|
|
s3:
|
|
are_local_buckets: true
|
|
use_path_style_urls: true
|
|
local-dev:
|
|
key: dummy
|
|
secret: dummy
|
|
endpoint: localhost:3200
|
|
region: eu-central-2
|
|
bucket: ente-dev
|
|
|
|
apps:
|
|
public-albums: http://${CONTAINER_IP}:3002
|
|
cast: http://${CONTAINER_IP}:3004
|
|
accounts: http://${CONTAINER_IP}:3001
|
|
|
|
key:
|
|
encryption: $SECRET_ENC
|
|
hash: $SECRET_HASH
|
|
|
|
jwt:
|
|
secret: $SECRET_JWT
|
|
|
|
# SMTP not configured - verification codes will appear in logs
|
|
# To configure SMTP, add:
|
|
# smtp:
|
|
# host: your-smtp-server
|
|
# port: 587
|
|
# username: your-username
|
|
# password: your-password
|
|
# email: noreply@yourdomain.com
|
|
EOF
|
|
msg_ok "Created museum.yaml"
|
|
|
|
msg_info "Building Web Applications"
|
|
# Get container IP address
|
|
CONTAINER_IP=$(hostname -I | awk '{print $1}')
|
|
cd /opt/ente/web
|
|
$STD yarn install
|
|
export NEXT_PUBLIC_ENTE_ENDPOINT=http://${CONTAINER_IP}:8080
|
|
export NEXT_PUBLIC_ENTE_ALBUMS_ENDPOINT=http://${CONTAINER_IP}:3002
|
|
$STD yarn build
|
|
$STD yarn build:accounts
|
|
$STD yarn build:auth
|
|
$STD yarn build:cast
|
|
mkdir -p /var/www/ente/apps
|
|
cp -r apps/photos/out /var/www/ente/apps/photos
|
|
cp -r apps/accounts/out /var/www/ente/apps/accounts
|
|
cp -r apps/auth/out /var/www/ente/apps/auth
|
|
cp -r apps/cast/out /var/www/ente/apps/cast
|
|
|
|
# Save build configuration for future rebuilds
|
|
cat <<REBUILD_EOF >/opt/ente/rebuild-frontend.sh
|
|
#!/usr/bin/env bash
|
|
# Rebuild Ente frontend with current IP
|
|
CONTAINER_IP=\$(hostname -I | awk '{print \$1}')
|
|
echo "Building frontend with IP: \$CONTAINER_IP"
|
|
cd /opt/ente/web
|
|
export NEXT_PUBLIC_ENTE_ENDPOINT=http://\${CONTAINER_IP}:8080
|
|
export NEXT_PUBLIC_ENTE_ALBUMS_ENDPOINT=http://\${CONTAINER_IP}:3002
|
|
yarn build
|
|
yarn build:accounts
|
|
yarn build:auth
|
|
yarn build:cast
|
|
rm -rf /var/www/ente/apps/*
|
|
cp -r apps/photos/out /var/www/ente/apps/photos
|
|
cp -r apps/accounts/out /var/www/ente/apps/accounts
|
|
cp -r apps/auth/out /var/www/ente/apps/auth
|
|
cp -r apps/cast/out /var/www/ente/apps/cast
|
|
systemctl reload caddy
|
|
echo "Frontend rebuilt successfully!"
|
|
REBUILD_EOF
|
|
chmod +x /opt/ente/rebuild-frontend.sh
|
|
msg_ok "Built Web Applications"
|
|
|
|
msg_info "Creating Museum Service"
|
|
cat <<EOF >/etc/systemd/system/ente-museum.service
|
|
[Unit]
|
|
Description=Ente Museum Server
|
|
After=network.target postgresql.service
|
|
|
|
[Service]
|
|
WorkingDirectory=/opt/ente/server
|
|
ExecStart=/opt/ente/server/main -config /opt/ente/server/museum.yaml
|
|
Restart=always
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
EOF
|
|
systemctl enable -q --now ente-museum
|
|
msg_ok "Created Museum Service"
|
|
|
|
msg_info "Configuring Caddy"
|
|
CONTAINER_IP=$(hostname -I | awk '{print $1}')
|
|
cat <<EOF >/etc/caddy/Caddyfile
|
|
# Ente Photos - Main Application
|
|
:3000 {
|
|
root * /var/www/ente/apps/photos
|
|
file_server
|
|
try_files {path} {path}.html /index.html
|
|
|
|
header {
|
|
Access-Control-Allow-Origin *
|
|
Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS"
|
|
Access-Control-Allow-Headers *
|
|
}
|
|
}
|
|
|
|
# Ente Accounts
|
|
:3001 {
|
|
root * /var/www/ente/apps/accounts
|
|
file_server
|
|
try_files {path} {path}.html /index.html
|
|
|
|
header {
|
|
Access-Control-Allow-Origin *
|
|
Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS"
|
|
Access-Control-Allow-Headers *
|
|
}
|
|
}
|
|
|
|
# Public Albums
|
|
:3002 {
|
|
root * /var/www/ente/apps/photos
|
|
file_server
|
|
try_files {path} {path}.html /index.html
|
|
|
|
header {
|
|
Access-Control-Allow-Origin *
|
|
Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS"
|
|
Access-Control-Allow-Headers *
|
|
}
|
|
}
|
|
|
|
# Auth
|
|
:3003 {
|
|
root * /var/www/ente/apps/auth
|
|
file_server
|
|
try_files {path} {path}.html /index.html
|
|
|
|
header {
|
|
Access-Control-Allow-Origin *
|
|
Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS"
|
|
Access-Control-Allow-Headers *
|
|
}
|
|
}
|
|
|
|
# Cast
|
|
:3004 {
|
|
root * /var/www/ente/apps/cast
|
|
file_server
|
|
try_files {path} {path}.html /index.html
|
|
|
|
header {
|
|
Access-Control-Allow-Origin *
|
|
Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS"
|
|
Access-Control-Allow-Headers *
|
|
}
|
|
}
|
|
|
|
# Museum API Proxy
|
|
:8080 {
|
|
reverse_proxy localhost:8080
|
|
|
|
header {
|
|
Access-Control-Allow-Origin *
|
|
Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS"
|
|
Access-Control-Allow-Headers *
|
|
}
|
|
}
|
|
EOF
|
|
systemctl reload caddy
|
|
msg_ok "Configured Caddy"
|
|
|
|
motd_ssh
|
|
customize
|
|
|
|
msg_info "Creating helper scripts"
|
|
cat <<'HELPER_EOF' >/usr/local/bin/ente-get-verification
|
|
#!/usr/bin/env bash
|
|
echo "Searching for verification codes in museum logs..."
|
|
journalctl -u ente-museum --no-pager | grep -i "verification\|verify\|code" | tail -20
|
|
HELPER_EOF
|
|
chmod +x /usr/local/bin/ente-get-verification
|
|
|
|
cat <<'HELPER_EOF' >/usr/local/bin/ente-upgrade-subscription
|
|
#!/usr/bin/env bash
|
|
if [ -z "$1" ]; then
|
|
echo "Usage: ente-upgrade-subscription <email>"
|
|
echo "Example: ente-upgrade-subscription user@example.com"
|
|
exit 1
|
|
fi
|
|
EMAIL="$1"
|
|
echo "Upgrading subscription for: $EMAIL"
|
|
ente admin update-subscription -a "$EMAIL" -u "$EMAIL" --no-limit
|
|
HELPER_EOF
|
|
chmod +x /usr/local/bin/ente-upgrade-subscription
|
|
|
|
msg_ok "Created helper scripts"
|
|
|
|
msg_info "Cleaning up"
|
|
$STD apt -y autoremove
|
|
$STD apt -y autoclean
|
|
msg_ok "Cleaned"
|
|
|
|
# Final setup summary
|
|
CONTAINER_IP=$(hostname -I | awk '{print $1}')
|
|
echo -e "\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
|
|
echo -e " ${GN}Ente Installation Complete!${CL}"
|
|
echo -e "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
|
|
echo -e "\n${BL}Access URLs:${CL}"
|
|
echo -e " Photos: http://${CONTAINER_IP}:3000"
|
|
echo -e " Accounts: http://${CONTAINER_IP}:3001"
|
|
echo -e " Auth: http://${CONTAINER_IP}:3003"
|
|
echo -e " API: http://${CONTAINER_IP}:8080"
|
|
echo -e "\n${YW}⚠️ Important Post-Installation Steps:${CL}"
|
|
echo -e "\n${BL}1. Create your first account:${CL}"
|
|
echo -e " • Open http://${CONTAINER_IP}:3000 in your browser"
|
|
echo -e " • Click 'Sign Up' and create an account"
|
|
echo -e "\n${BL}2. Verify your email (required):${CL}"
|
|
echo -e " • Run: ${GN}ente-get-verification${CL}"
|
|
echo -e " • Look for the verification code in the output"
|
|
echo -e " • Enter the code in the web UI to complete registration"
|
|
echo -e "\n${BL}3. Remove storage limit:${CL}"
|
|
echo -e " • After email verification is complete"
|
|
echo -e " • Run: ${GN}ente-upgrade-subscription your@email.com${CL}"
|
|
echo -e " • This removes the 10GB limit"
|
|
echo -e "\n${BL}4. If IP changes:${CL}"
|
|
echo -e " • Run: ${GN}/opt/ente/rebuild-frontend.sh${CL}"
|
|
echo -e " • This rebuilds the frontend with the new IP"
|
|
echo -e "\n${YW}Known Limitations:${CL}"
|
|
echo -e " • Email verification requires checking logs (no SMTP configured)"
|
|
echo -e " • Account creation must be done manually via web UI"
|
|
echo -e " • Subscription upgrade requires CLI after account creation"
|
|
echo -e " • Frontend must be rebuilt if container IP changes"
|
|
echo -e "\n${BL}Credentials saved to:${CL} ~/ente.creds"
|
|
echo -e "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n"
|