288 lines
9.4 KiB
Bash
Executable File
288 lines
9.4 KiB
Bash
Executable File
#!/bin/sh
|
||
set -eu
|
||
|
||
script_dir=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
|
||
config_dir=/etc/nodeflare
|
||
config_file=$config_dir/config.toml
|
||
install_dir=/opt/nodeflare
|
||
theme_dir=$config_dir/themes
|
||
default_database_url=sqlite:///etc/nodeflare/nodeflare.db
|
||
share_dir=$install_dir/share
|
||
public_frontend_dir=$share_dir/frontend
|
||
admin_frontend_dir=$share_dir/admin
|
||
agent_installer_dir=$share_dir/agent
|
||
server_binary=$install_dir/nodeflare
|
||
service_name=nodeflare
|
||
service_file=/etc/systemd/system/nodeflare.service
|
||
build_target_dir=""
|
||
config_temp=""
|
||
tty_state=""
|
||
|
||
usage() {
|
||
printf '%s\n' \
|
||
'NodeFlare 面板安装脚本' \
|
||
'' \
|
||
'用法：' \
|
||
' sudo ./install.sh' \
|
||
' sudo ./install.sh --uninstall' \
|
||
' sudo ./install.sh --uninstall --purge' \
|
||
'' \
|
||
'首次安装会询问管理员用户名、密码和可选数据库连接。' \
|
||
'数据库设置可直接回车跳过，其他设置也可在安装后编辑。' \
|
||
'重复运行会保留已有配置和数据库。' \
|
||
'--uninstall 保留配置和数据；只有同时指定 --purge 才彻底删除。'
|
||
}
|
||
|
||
log() {
|
||
printf '[NodeFlare] %s\n' "$1"
|
||
}
|
||
|
||
fail() {
|
||
printf '[NodeFlare] 错误：%s\n' "$1" >&2
|
||
exit 1
|
||
}
|
||
|
||
restore_tty() {
|
||
if [ -n "$tty_state" ]; then
|
||
stty "$tty_state" < /dev/tty 2>/dev/null || true
|
||
tty_state=""
|
||
fi
|
||
}
|
||
|
||
cleanup() {
|
||
restore_tty
|
||
[ -z "$config_temp" ] || rm -f -- "$config_temp"
|
||
[ -z "$build_target_dir" ] || rm -rf -- "$build_target_dir"
|
||
}
|
||
|
||
trap cleanup EXIT HUP INT TERM
|
||
|
||
toml_escape() {
|
||
printf '%s' "$1" | sed -e 's/\\/\\\\/g' -e 's/"/\\"/g'
|
||
}
|
||
|
||
prompt_line() {
|
||
printf '%s' "$1" > /dev/tty
|
||
IFS= read -r prompt_value < /dev/tty || fail "无法读取输入"
|
||
}
|
||
|
||
prompt_secret() {
|
||
printf '%s' "$1" > /dev/tty
|
||
tty_state=$(stty -g < /dev/tty) || fail "无法读取终端状态"
|
||
stty -echo < /dev/tty
|
||
if ! IFS= read -r prompt_value < /dev/tty; then
|
||
restore_tty
|
||
printf '\n' > /dev/tty
|
||
fail "无法读取密码"
|
||
fi
|
||
restore_tty
|
||
printf '\n' > /dev/tty
|
||
}
|
||
|
||
prompt_credentials() {
|
||
[ -r /dev/tty ] && [ -w /dev/tty ] || fail "首次安装必须在交互式终端中运行"
|
||
while :; do
|
||
prompt_line "管理员用户名 [admin]: "
|
||
admin_username=${prompt_value:-admin}
|
||
username_length=$(printf '%s' "$admin_username" | wc -m | tr -d '[:space:]')
|
||
case "$admin_username" in
|
||
*[!A-Za-z0-9_.-]*)
|
||
printf '%s\n' "用户名只能包含字母、数字、点、下划线和连字符。" > /dev/tty
|
||
;;
|
||
*)
|
||
if [ "$username_length" -gt 64 ]; then
|
||
printf '%s\n' "用户名不能超过 64 个字符。" > /dev/tty
|
||
else
|
||
break
|
||
fi
|
||
;;
|
||
esac
|
||
done
|
||
|
||
while :; do
|
||
prompt_secret "管理员密码（8-128 个字符）: "
|
||
admin_password=$prompt_value
|
||
password_length=$(printf '%s' "$admin_password" | wc -m | tr -d '[:space:]')
|
||
if [ "$password_length" -lt 8 ] || [ "$password_length" -gt 128 ]; then
|
||
printf '%s\n' "密码长度必须在 8-128 个字符之间。" > /dev/tty
|
||
continue
|
||
fi
|
||
if LC_ALL=C printf '%s' "$admin_password" | grep -q '[[:cntrl:]]'; then
|
||
printf '%s\n' "密码不能包含控制字符。" > /dev/tty
|
||
continue
|
||
fi
|
||
normalized_password=$(printf '%s' "$admin_password" | tr '[:upper:]' '[:lower:]')
|
||
case "$normalized_password" in
|
||
change_me_with_a_strong_password|change-me-with-a-strong-password)
|
||
printf '%s\n' "请不要使用示例占位密码。" > /dev/tty
|
||
continue
|
||
;;
|
||
esac
|
||
prompt_secret "再次输入密码: "
|
||
[ "$admin_password" = "$prompt_value" ] || {
|
||
printf '%s\n' "两次输入的密码不一致。" > /dev/tty
|
||
continue
|
||
}
|
||
break
|
||
done
|
||
}
|
||
|
||
prompt_database() {
|
||
while :; do
|
||
printf '%s\n' \
|
||
"SQLite 示例：sqlite:///path/to/database.db" \
|
||
"PostgreSQL 示例：postgres://用户:密码@ip:端口/数据库?sslmode=require" > /dev/tty
|
||
prompt_line "数据库 URL [$default_database_url]: "
|
||
database_url=${prompt_value:-$default_database_url}
|
||
if LC_ALL=C printf '%s' "$database_url" | grep -q '[[:space:][:cntrl:]]'; then
|
||
printf '%s\n' "数据库 URL 不能包含空白或控制字符。" > /dev/tty
|
||
continue
|
||
fi
|
||
case "$database_url" in
|
||
sqlite://*|postgres://*|postgresql://*) break ;;
|
||
*) printf '%s\n' "数据库 URL 必须使用 sqlite://、postgres:// 或 postgresql://。" > /dev/tty ;;
|
||
esac
|
||
done
|
||
}
|
||
|
||
write_config() {
|
||
escaped_database_url=$(toml_escape "$database_url")
|
||
escaped_username=$(toml_escape "$admin_username")
|
||
escaped_password=$(toml_escape "$admin_password")
|
||
config_temp=$(mktemp "$config_dir/.config.toml.XXXXXX")
|
||
{
|
||
printf '%s\n' '# NodeFlare 服务端配置'
|
||
printf '%s\n' '# 修改后运行：systemctl restart nodeflare'
|
||
printf '\n'
|
||
printf '%s\n' '# SQLite：sqlite:///path/to/database.db'
|
||
printf '%s\n' '# PostgreSQL：postgres://用户:密码@ip:端口/数据库?sslmode=require'
|
||
printf '%s\n' '# URL 中的特殊字符需要进行百分号编码'
|
||
printf 'database_url = "%s"\n' "$escaped_database_url"
|
||
printf 'bind_addr = "127.0.0.1:8080"\n'
|
||
printf 'admin_username = "%s"\n' "$escaped_username"
|
||
printf 'admin_password = "%s"\n' "$escaped_password"
|
||
printf '\n'
|
||
printf '%s\n' '# Cloudflare Turnstile：两项留空即禁用'
|
||
printf 'turnstile_site_key = ""\n'
|
||
printf 'turnstile_secret_key = ""\n'
|
||
printf '\n'
|
||
printf 'frontend_dir = "/opt/nodeflare/share/frontend"\n'
|
||
printf 'admin_frontend_dir = "/opt/nodeflare/share/admin"\n'
|
||
printf 'agent_dir = "/opt/nodeflare/share/agent"\n'
|
||
printf 'theme_dir = "/etc/nodeflare/themes"\n'
|
||
printf 'session_ttl_hours = 168\n'
|
||
} > "$config_temp"
|
||
chown root:root "$config_temp"
|
||
chmod 0600 "$config_temp"
|
||
mv -f -- "$config_temp" "$config_file"
|
||
config_temp=""
|
||
admin_password=""
|
||
database_url=""
|
||
prompt_value=""
|
||
}
|
||
|
||
uninstall_server() {
|
||
purge=$1
|
||
log "停止并移除 NodeFlare 面板服务"
|
||
if command -v systemctl >/dev/null 2>&1; then
|
||
systemctl disable --now "$service_name.service" >/dev/null 2>&1 || true
|
||
fi
|
||
rm -f -- "$service_file" "$server_binary"
|
||
rm -rf -- "$share_dir"
|
||
if command -v systemctl >/dev/null 2>&1; then
|
||
systemctl daemon-reload >/dev/null 2>&1 || true
|
||
systemctl reset-failed "$service_name.service" >/dev/null 2>&1 || true
|
||
fi
|
||
|
||
if [ "$purge" = true ]; then
|
||
rm -rf -- "$config_dir"
|
||
log "已删除配置和全部服务端持久数据"
|
||
else
|
||
log "已保留配置和服务端持久数据：$config_dir"
|
||
log "如需彻底删除，运行：sudo ./install.sh --uninstall --purge"
|
||
fi
|
||
rmdir "$install_dir" 2>/dev/null || true
|
||
log "卸载完成"
|
||
}
|
||
|
||
mode=install
|
||
purge=false
|
||
case "$#:${1:-}:${2:-}" in
|
||
0::) ;;
|
||
1:-h:|1:--help:) usage; exit 0 ;;
|
||
1:--uninstall:) mode=uninstall ;;
|
||
2:--uninstall:--purge) mode=uninstall; purge=true ;;
|
||
*) usage >&2; fail "参数无效" ;;
|
||
esac
|
||
|
||
[ "$(id -u)" -eq 0 ] || fail "请使用 root 权限运行：sudo ./install.sh"
|
||
if [ "$mode" = uninstall ]; then
|
||
uninstall_server "$purge"
|
||
exit 0
|
||
fi
|
||
[ -d /run/systemd/system ] && command -v systemctl >/dev/null 2>&1 \
|
||
|| fail "当前系统未使用 systemd"
|
||
for required_command in bun install mktemp sed grep wc tr id chown chmod mv cp stty; do
|
||
command -v "$required_command" >/dev/null 2>&1 || fail "缺少命令：$required_command"
|
||
done
|
||
|
||
new_config=false
|
||
if [ ! -f "$config_file" ]; then
|
||
new_config=true
|
||
prompt_credentials
|
||
prompt_database
|
||
else
|
||
log "保留已有配置：$config_file"
|
||
fi
|
||
|
||
log "构建前端和服务端"
|
||
build_target_dir=$(mktemp -d /tmp/nodeflare-build.XXXXXX)
|
||
CARGO_TARGET_DIR=$build_target_dir/cargo
|
||
export CARGO_TARGET_DIR
|
||
sh "$script_dir/scripts/build-frontend.sh"
|
||
sh "$script_dir/scripts/build-backend.sh"
|
||
|
||
install -d -m 0700 -o root -g root "$config_dir"
|
||
install -d -m 0700 -o root -g root "$theme_dir"
|
||
install -d -m 0755 -o root -g root "$install_dir"
|
||
chown -R root:root "$config_dir"
|
||
install -d -m 0755 -o root -g root "$share_dir"
|
||
rm -rf -- "$public_frontend_dir" "$admin_frontend_dir" "$agent_installer_dir"
|
||
install -d -m 0755 -o root -g root "$public_frontend_dir" "$admin_frontend_dir" "$agent_installer_dir"
|
||
cp -a "$script_dir/frontend/dist/." "$public_frontend_dir/"
|
||
cp -a "$script_dir/frontend/admin-dist/." "$admin_frontend_dir/"
|
||
install -m 0755 "$script_dir/agent/agent.sh" "$agent_installer_dir/agent.sh"
|
||
install -m 0755 "$script_dir/agent/install-macos.sh" "$agent_installer_dir/install-macos.sh"
|
||
install -m 0755 "$script_dir/agent/install-freebsd.sh" "$agent_installer_dir/install-freebsd.sh"
|
||
install -m 0644 "$script_dir/agent/install.ps1" "$agent_installer_dir/install.ps1"
|
||
chown -R root:root "$share_dir"
|
||
chmod -R u=rwX,go=rX "$share_dir"
|
||
install -m 0755 "$CARGO_TARGET_DIR/release/nodeflare" "$server_binary"
|
||
install -m 0644 "$script_dir/deploy/nodeflare.service" "$service_file"
|
||
|
||
if [ "$new_config" = true ]; then
|
||
write_config
|
||
else
|
||
chown root:root "$config_file"
|
||
chmod 0600 "$config_file"
|
||
fi
|
||
|
||
systemctl daemon-reload
|
||
systemctl enable "$service_name.service" >/dev/null
|
||
if ! systemctl restart "$service_name.service"; then
|
||
journalctl -u "$service_name.service" -n 30 --no-pager >&2 || true
|
||
fail "NodeFlare 服务启动失败"
|
||
fi
|
||
if ! systemctl is-active --quiet "$service_name.service"; then
|
||
journalctl -u "$service_name.service" -n 30 --no-pager >&2 || true
|
||
fail "NodeFlare 服务未进入运行状态"
|
||
fi
|
||
|
||
log "安装完成"
|
||
printf '%s\n' \
|
||
"配置文件：$config_file" \
|
||
"程序目录：$install_dir" \
|
||
"持久数据：$config_dir" \
|
||
'服务状态：systemctl status nodeflare' \
|
||
'默认访问：http://127.0.0.1:8080'
|