84 lines
2.4 KiB
Bash
84 lines
2.4 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
# Copyright (c) 2021-2026 community-scripts ORG
|
|
# Author: pshankinclarke (lazarillo)
|
|
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
|
# Source: https://valkey.io/
|
|
|
|
source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
|
|
color
|
|
verb_ip6
|
|
catch_errors
|
|
setting_up_container
|
|
network_check
|
|
update_os
|
|
|
|
msg_info "Installing Valkey"
|
|
$STD apk add valkey valkey-openrc valkey-cli openssl
|
|
sed -i 's/^bind .*/bind 0.0.0.0/' /etc/valkey/valkey.conf
|
|
|
|
PASS="$(openssl rand -base64 48 | tr -dc 'a-zA-Z0-9' | head -c32)"
|
|
echo "requirepass $PASS" >>/etc/valkey/valkey.conf
|
|
echo "$PASS" >~/valkey.creds
|
|
chmod 600 ~/valkey.creds
|
|
|
|
MEMTOTAL_MB=$(free -m | grep ^Mem: | awk '{print $2}')
|
|
MAXMEMORY_MB=$((MEMTOTAL_MB * 75 / 100))
|
|
|
|
{
|
|
echo ""
|
|
echo "# Memory-optimized settings for small-scale deployments"
|
|
echo "maxmemory ${MAXMEMORY_MB}mb"
|
|
echo "maxmemory-policy allkeys-lru"
|
|
echo "maxmemory-samples 10"
|
|
} >>/etc/valkey/valkey.conf
|
|
msg_ok "Installed Valkey"
|
|
|
|
echo
|
|
read -r -p "${TAB3}Enable TLS for Valkey (Sentinel mode not supported)? [y/N]: " prompt
|
|
if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
|
|
read -r -p "${TAB3}Use TLS-only mode (disable TCP port 6379)? [y/N]: " tls_only
|
|
msg_info "Configuring TLS for Valkey..."
|
|
|
|
TLS_DIR="/etc/ssl/valkey"
|
|
mkdir -p "$TLS_DIR"
|
|
$STD openssl req -new -newkey rsa:2048 -days 365 -nodes -x509 \
|
|
-subj "/CN=Valkey" \
|
|
-addext "subjectAltName=DNS:Valkey" \
|
|
-keyout "$TLS_DIR/valkey.key" \
|
|
-out "$TLS_DIR/valkey.crt"
|
|
chmod 600 "$TLS_DIR/valkey.key"
|
|
chmod 644 "$TLS_DIR/valkey.crt"
|
|
chown valkey:valkey "$TLS_DIR/valkey.crt" "$TLS_DIR/valkey.key"
|
|
|
|
if [[ ${tls_only,,} =~ ^(y|yes)$ ]]; then
|
|
{
|
|
echo ""
|
|
echo "# TLS configuration generated by Proxmox VE Valkey helper-script"
|
|
echo "port 0"
|
|
echo "tls-port 6379"
|
|
echo "tls-cert-file $TLS_DIR/valkey.crt"
|
|
echo "tls-key-file $TLS_DIR/valkey.key"
|
|
echo "tls-auth-clients no"
|
|
} >>/etc/valkey/valkey.conf
|
|
msg_ok "Enabled TLS-only mode on port 6379"
|
|
else
|
|
{
|
|
echo ""
|
|
echo "# TLS configuration generated by Proxmox VE Valkey helper-script"
|
|
echo "tls-port 6380"
|
|
echo "tls-cert-file $TLS_DIR/valkey.crt"
|
|
echo "tls-key-file $TLS_DIR/valkey.key"
|
|
echo "tls-auth-clients no"
|
|
} >>/etc/valkey/valkey.conf
|
|
msg_ok "Enabled TLS on port 6380 and TCP on 6379"
|
|
fi
|
|
fi
|
|
|
|
$STD rc-update add valkey default
|
|
$STD rc-service valkey start
|
|
|
|
motd_ssh
|
|
customize
|
|
cleanup_lxc
|