Mop/terraform
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add(module): add girasol module

Browse Source 
Add(module): add amap module
Add(module): add common lib and services
Add(module): add base structure for keycloak
Add(module): add base structure for rocket
Add(module): add n8n and windmill modules
Add(docker): add install docker script in common module
Add(template): add root for aldon.fr and mathieu.wiki in traefik.service template
This commit is contained in:
Julien Aldon
2026-04-21 16:52:41 +02:00
parent 905cc8b43d
commit a56911b896
65 changed files with 1893 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
modules/apps/gateway/lib/scripts/create-backup.sh Normal file
View File

@@ -0,0 +1,10 @@
#!/bin/bash
set -euo pipefail
source /opt/environment/.env
TIMESTAMP=$(date +'%Y-%m-%d_%H%M%S')
sudo -u $USERNAME docker cp crowdsec-metabase:/metabase-data/metabase.db/metabase.db.mv.db $SERVICE_BACKUPS_DIR/$SERVICE_BACKUPS_PREFIX-$TIMESTAMP.$SERVICE_BACKUPS_EXTENSION
ls -1dt $SERVICE_BACKUPS_DIR/$SERVICE_BACKUPS_PREFIX-*.$SERVICE_BACKUPS_EXTENSION | tail -n +5 | xargs -r rm -f

17
modules/apps/gateway/lib/scripts/install-crowdsec.sh Normal file
View File

@@ -0,0 +1,17 @@
set -e
sudo apt update
sudo apt install -y curl gnupg lsb-release
sudo apt install crowdsec
sudo cscli collections install crowdsecurity/traefik
sudo cscli collections install crowdsecurity/http-cve
sudo cscli collections install crowdsecurity/base-http-scenarios
sudo cscli parsers install crowdsecurity/geoip-enrich
sudo systemctl enable crowdsec
sudo systemctl restart crowdsec
sudo cscli hub update
cscli dashboard setup -l 0.0.0.0

10
modules/apps/gateway/lib/scripts/install-traefik.sh
View File

@@ -32,6 +32,10 @@ chown $TRAEFIK_USER:$TRAEFIK_USER /etc/traefik/acme.json
chmod 600 /etc/traefik/acme.json
setcap 'cap_net_bind_service=+ep' /usr/local/bin/traefik
sudo mkdir -p /var/log/traefik
sudo touch /var/log/traefik/access.log
sudo chown -R traefik:adm /var/log/traefik
cat > "$TRAEFIK_CONF" <<EOF
entryPoints:
web:
@@ -47,7 +51,9 @@ api:
insecure: false
log:
level: INFO
accessLog: {}
accessLog:
filePath: "/var/log/traefik/access.log"
bufferingSize: 100
certificatesResolvers:
letsencrypt:
acme:
@@ -58,4 +64,4 @@ certificatesResolvers:
EOF
systemctl enable traefik.service
systemctl start traefik.service
systemctl start traefik.service

10
modules/apps/gateway/lib/scripts/restore-backup.sh Normal file
View File

@@ -0,0 +1,10 @@
#!/bin/bash
set -euo pipefail
source /opt/environment/.env
LATEST_BACKUP=$(ls -1 $SERVICE_BACKUPS_DIR/$SERVICE_BACKUPS_PREFIX-*.$SERVICE_BACKUPS_EXTENSION 2>/dev/null | sort | tail -n1)
if [ -n "$LATEST_BACKUP" ] && [ -f "$LATEST_BACKUP" ]; then
sudo -u $USERNAME docker cp "$LATEST_BACKUP" "crowdsec-metabase:/metabase-data/metabase.db/metabase.db.mv.db"
fi