Commit Graph

57 Commits

Author SHA1 Message Date
Justin Oros
4586a0f598 setup-opds.sh: add -hide-dot-files flag to dir2opds to filter macOS metadata files and Syncthing folders 2026-04-20 15:01:41 -07:00
Justin Oros
2999c464fa setup-opds.sh: add firewall port warning before starting Caddy 2026-04-20 14:53:44 -07:00
Justin Oros
dfa3c1ce6d setup-opds.sh: add reconfigure option to update existing OPDS setup, improve Caddyfile generation for auto and manual SSL 2026-04-20 14:45:08 -07:00
Justin Oros
9dc2b221d3 setup-opds.sh: prompt user to install Docker if not found, using same approach as setup-spoke.sh 2026-04-20 14:40:32 -07:00
Justin Oros
89e84c41c1 hub/setup-opds.sh: add OPDS server setup script with dir2opds and Caddy running in Docker on shared network, with SSL and auth options 2026-04-20 14:37:10 -07:00
Justin Oros
86688c43c7 setup-hub.sh: use fuse3 for apt systems 2026-04-19 22:26:11 -07:00
Justin Oros
972dbef11c setup-hub.sh: change AllowTcpForwarding from local to yes to allow reverse tunnels from spokes 2026-04-19 22:11:02 -07:00
Justin Oros
0af3c30f79 setup-hub.sh: change password auth disable default to N 2026-04-19 20:58:50 -07:00
Justin Oros
97aff6a741 onboard-spoke.sh: replace printf with python3 to correctly write rclone remote config with real newlines 2026-04-19 15:04:39 -07:00
Justin Oros
eaff38477c onboard-spoke.sh: restore union remote, rclone test, registry, auto-mount, and completion sections lost during rewrite 2026-04-19 14:43:05 -07:00
Justin Oros
e2ed499e58 onboard-spoke.sh: adopt Finn's cleaner tunnel verification flow, remove key selection prompt, add TCP pre-check before keyscan 2026-04-19 14:38:10 -07:00
Justin Oros
f486795154 onboard-spoke.sh: add key selection prompt for tunnel auth, use explicit -i flag for all SSH calls, clarify hub key installation header 2026-04-19 13:05:29 -07:00
Justin Oros
9bdd12ebbd onboard-spoke.sh: add rclone auto-mount via crontab @reboot entry and immediate mount on onboarding 2026-04-19 11:40:47 -07:00
Justin Oros
d3a6d406d8 setup-hub.sh: change AllowTcpForwarding from yes to local to restrict forwarding to local connections only 2026-04-19 11:26:15 -07:00
Justin Oros
e74c9b45d5 etup-hub.sh: change GatewayPorts from yes to no for improved security 2026-04-19 11:21:52 -07:00
Justin Oros
2fe94dfe9d setup-hub.sh: remove unnecessary sudo/wheel group membership for hub user 2026-04-19 10:36:32 -07:00
Justin Oros
e9c1daccce onboard-spoke.sh: replace raise SystemExit with sys.exit(0) in union duplicate check 2026-04-18 21:47:55 -07:00
Justin Oros
6db5e9769e onboard-spoke.sh: replace grep -A5 union duplicate check with python3 for reliable section parsing 2026-04-18 21:46:48 -07:00
Justin Oros
c75b29a5ea onboard-spoke.sh: fix upstream construction for empty path with tag, replace fragile sed range with python3 for reliable union upstream append 2026-04-18 21:45:02 -07:00
Justin Oros
92b74d8f67 onboard-spoke.sh: add upstream access mode prompt (ro, nc, writeback) when creating or joining a union remote 2026-04-18 21:43:24 -07:00
Justin Oros
63197799b8 setup-hub.sh: fix sed delimiter for PasswordAuthentication/PubkeyAuthentication, guard authorized_keys creation, setup-spoke.sh: fix sed delimiter, validate spoke name charset, make find_free_port vars local, offboard-spoke.sh: validate spoke name charset, setup-network.sh: replace brittle SSID grep with python3 regex 2026-04-18 14:39:01 -07:00
Justin Oros
128b41ede9 setup-hub.sh: fix sed delimiter and add file dep, onboard-spoke.sh: fix rclone append newline guard and keyscan key-type dedup, offboard-spoke.sh: fix crontab empty check and add timestamped backup, setup-network.sh: replace single bak with timestamped backup, compose.yaml: replace syncthing host network with explicit port bindings 2026-04-18 14:31:10 -07:00
Justin Oros
f3792a38fc setup-spoke.sh: fix port scan range and user@host sed regex, offboard/onboard-spoke.sh: fix registry grep-v empty-output clobber, setup-network.sh: fix wifi password colon handling 2026-04-18 14:25:24 -07:00
Justin Oros
e450456638 spoke/setup-spoke.sh
Fix check_permissions to check group bits; fix ssh-keyscan dedup to iterate per key type; fix HUB_USER@HUB_HOST sed regex to handle trailing whitespace
hub/offboard-spoke.sh
Drop root requirement; fix crontab running as root; fix registry .tmp not cleaned on failure
hub/onboard-spoke.sh
Fix registry .tmp not cleaned on failure; chmod 600 key immediately after generation
hub/setup-hub.sh
Check permissions on existing SSH private keys in setup
2026-04-18 14:12:05 -07:00
Justin Oros
d925cd944a onboard-spoke.sh: remove comment syntax from manual key instructions
setup-spoke.sh, setup-network.sh: fix check_permissions false alarm on pubkeys, TUNNEL_UP boolean comparison, DNS_YAML trailing newline, backup file guard
2026-04-18 14:07:02 -07:00
Justin Oros
74e1a9d1a0 offboard-spoke.sh: run as root, remove sudo from python3 install 2026-04-18 14:04:24 -07:00
Justin Oros
72a58cc390 fix SSH service detection across distros; fix misleading key copied message 2026-04-18 13:43:33 -07:00
Justin Oros
e3bb7fb1ca fix known_hosts dedup in setup-spoke; handle ssh-copy-id failure in onboard-spoke 2026-04-18 13:37:35 -07:00
Justin Oros
aeda90799d fix KEY_PATH init, compose.yaml sed, registry write, known_hosts dedup, fusermount3 compat 2026-04-18 13:34:59 -07:00
Justin Oros
26b623eef7 configure ClientAliveInterval/CountMax in setup-hub.sh 2026-04-18 13:31:14 -07:00
Justin Oros
0f76283605 remove stale crontab dep from setup-hub.sh 2026-04-16 14:08:20 -07:00
Justin Oros
a02a83cae4 fix execute permissions on scripts 2026-04-16 13:53:48 -07:00
Justin Oros
4a1983d46d remove unused legacy scripts and rclone template 2026-04-16 13:48:28 -07:00
Justin Oros
395ab4ed0e add spoke registry, per-spoke crontab, and offboard-spoke.sh 2026-04-16 13:41:56 -07:00
Justin Oros
4c08f3b389 fix function ordering, hardcoded armbian user, and key name prefix in onboard-spoke.sh 2026-04-16 13:17:12 -07:00
Justin Oros
ccd324dc79 fix function ordering and RCLONE_CONF used before definition in setup-hub.sh 2026-04-16 13:15:40 -07:00
Justin Oros
58f6445c72 add check_deps function and dependency checks to all scripts 2026-04-16 13:05:45 -07:00
Justin Oros
08799f0f7f add SSH key permission checks with auto-fix to hub and spoke scripts 2026-04-16 12:58:06 -07:00
Justin Oros
3d366cd74a add disable password auth prompt with SSH restart warning to hub and spoke scripts 2026-04-16 10:42:04 -07:00
Justin Oros
50fb313f9a fix hardcoded armbian string in user creation log message 2026-04-16 10:30:47 -07:00
Justin Oros
d21997af43 prompt for hub username with armbian as default, replace all hardcoded references 2026-04-16 10:29:53 -07:00
Justin Oros
95a56ef4f0 fix usermod group assignment to use if blocks instead of && chain 2026-04-16 10:26:28 -07:00
Justin Oros
b706dd211d fix pkg update handling, curl dependency, sudo group check, systemctl blocks 2026-04-16 10:25:26 -07:00
Justin Oros
c86dca283f add retry or abort prompt to all connection tests 2026-04-16 09:30:47 -07:00
Justin Oros
9015ff46c9 fix root check to use if block instead of fragile && chain 2026-04-16 09:23:36 -07:00
Justin Oros
87c08fb543 fix known_hosts ownership, ssh dir creation, and root user guard 2026-04-16 09:22:19 -07:00
Justin Oros
7bdafd316c fix keyscan validation to die early if spoke tunnel is not up 2026-04-16 09:18:40 -07:00
Justin Oros
c71ad59629 fix windows line endings in pasted key and rclone remote mount hint 2026-04-16 09:13:17 -07:00
Justin Oros
2abd6ac6a4 fix tunnel reachability check to be safe with set -e 2026-04-16 09:09:45 -07:00
Justin Oros
ccd9b205b8 fix hub onboard-spoke script: keyscan, rclone check, dir creation, tunnel verify 2026-04-16 09:08:07 -07:00