Initial code commit
This commit is contained in:
Warezpeddler
196
internal/services/installer.go
Normal file
196
internal/services/installer.go
Normal file
@@ -0,0 +1,196 @@
|
||||
package services
|
||||
|
||||
import (
|
||||
"fmt"
|
||||
"strings"
|
||||
)
|
||||
|
||||
type ServiceInstaller struct {
|
||||
Service Service
|
||||
}
|
||||
|
||||
func (si *ServiceInstaller) GenerateInstallScript() string {
|
||||
var script strings.Builder
|
||||
|
||||
script.WriteString("#!/bin/bash\n")
|
||||
script.WriteString("set -e\n\n")
|
||||
|
||||
switch si.Service.Name {
|
||||
case "ssh":
|
||||
script.WriteString(si.installSSH())
|
||||
case "https":
|
||||
script.WriteString(si.installNginx())
|
||||
case "smb":
|
||||
script.WriteString(si.installSamba())
|
||||
case "ldap", "ldaps":
|
||||
script.WriteString(si.installLDAP())
|
||||
case "mysql":
|
||||
script.WriteString(si.installMySQL())
|
||||
case "postgres":
|
||||
script.WriteString(si.installPostgreSQL())
|
||||
case "redis":
|
||||
script.WriteString(si.installRedis())
|
||||
case "mongodb":
|
||||
script.WriteString(si.installMongoDB())
|
||||
default:
|
||||
script.WriteString(si.installGeneric())
|
||||
}
|
||||
|
||||
return script.String()
|
||||
}
|
||||
|
||||
func (si *ServiceInstaller) installSSH() string {
|
||||
return `# Configure SSH to listen on localhost only
|
||||
sed -i 's/#ListenAddress 0.0.0.0/ListenAddress 127.0.0.1/' /etc/ssh/sshd_config
|
||||
sed -i 's/ListenAddress 0.0.0.0/ListenAddress 127.0.0.1/' /etc/ssh/sshd_config
|
||||
systemctl restart sshd
|
||||
`
|
||||
}
|
||||
|
||||
func (si *ServiceInstaller) installNginx() string {
|
||||
return `# Configure Nginx to listen on localhost:8444 for HTTPS
|
||||
# Create demo page directory
|
||||
mkdir -p /var/www/demo
|
||||
cat > /var/www/demo/index.html <<'HTML'
|
||||
<!DOCTYPE html>
|
||||
<html>
|
||||
<head>
|
||||
<title>Demo App Page</title>
|
||||
<meta charset="utf-8">
|
||||
<style>
|
||||
body {
|
||||
font-family: Arial, sans-serif;
|
||||
display: flex;
|
||||
justify-content: center;
|
||||
align-items: center;
|
||||
height: 100vh;
|
||||
margin: 0;
|
||||
background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
|
||||
color: white;
|
||||
}
|
||||
.container {
|
||||
text-align: center;
|
||||
padding: 2rem;
|
||||
background: rgba(255, 255, 255, 0.1);
|
||||
border-radius: 10px;
|
||||
backdrop-filter: blur(10px);
|
||||
}
|
||||
h1 {
|
||||
margin: 0;
|
||||
font-size: 3rem;
|
||||
}
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
<div class="container">
|
||||
<h1>Demo app page</h1>
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
||||
HTML
|
||||
|
||||
# Configure Nginx for root domain and subdomains
|
||||
cat > /etc/nginx/sites-available/sslh-proxy <<'EOF'
|
||||
# Default server for root domain (HTTPS on port 443 via SSLH)
|
||||
server {
|
||||
listen 127.0.0.1:8444 ssl http2;
|
||||
server_name _;
|
||||
|
||||
ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem;
|
||||
ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key;
|
||||
ssl_protocols TLSv1.2 TLSv1.3;
|
||||
ssl_ciphers HIGH:!aNULL:!MD5;
|
||||
|
||||
root /var/www/demo;
|
||||
index index.html;
|
||||
|
||||
location / {
|
||||
try_files $uri $uri/ =404;
|
||||
}
|
||||
}
|
||||
EOF
|
||||
ln -sf /etc/nginx/sites-available/sslh-proxy /etc/nginx/sites-enabled/
|
||||
rm -f /etc/nginx/sites-enabled/default
|
||||
nginx -t && systemctl restart nginx
|
||||
`
|
||||
}
|
||||
|
||||
func (si *ServiceInstaller) installSamba() string {
|
||||
return `# Configure Samba to listen on localhost only
|
||||
sed -i 's/; interfaces = 127.0.0.0\\/8/ interfaces = 127.0.0.1/' /etc/samba/smb.conf
|
||||
sed -i 's/; bind interfaces only = yes/ bind interfaces only = yes/' /etc/samba/smb.conf
|
||||
systemctl restart smbd
|
||||
`
|
||||
}
|
||||
|
||||
func (si *ServiceInstaller) installLDAP() string {
|
||||
return `# Install and configure OpenLDAP
|
||||
DEBIAN_FRONTEND=noninteractive apt-get install -y slapd ldap-utils
|
||||
# Configure OpenLDAP to listen on localhost only
|
||||
sed -i 's|^SLAPD_SERVICES=.*|SLAPD_SERVICES="ldap://127.0.0.1:389/ ldaps://127.0.0.1:636/"|' /etc/default/slapd || true
|
||||
systemctl enable slapd
|
||||
systemctl restart slapd
|
||||
`
|
||||
}
|
||||
|
||||
func (si *ServiceInstaller) installMySQL() string {
|
||||
return `# Install MySQL/MariaDB and configure to listen on localhost
|
||||
DEBIAN_FRONTEND=noninteractive apt-get install -y mysql-server || DEBIAN_FRONTEND=noninteractive apt-get install -y mariadb-server
|
||||
if [ -f /etc/mysql/mysql.conf.d/mysqld.cnf ]; then
|
||||
sed -i 's/bind-address.*/bind-address = 127.0.0.1/' /etc/mysql/mysql.conf.d/mysqld.cnf
|
||||
elif [ -f /etc/mysql/mariadb.conf.d/50-server.cnf ]; then
|
||||
sed -i 's/bind-address.*/bind-address = 127.0.0.1/' /etc/mysql/mariadb.conf.d/50-server.cnf
|
||||
fi
|
||||
systemctl restart mysql || systemctl restart mariadb
|
||||
`
|
||||
}
|
||||
|
||||
func (si *ServiceInstaller) installPostgreSQL() string {
|
||||
return `# Install PostgreSQL and configure to listen on localhost
|
||||
apt-get install -y postgresql postgresql-contrib
|
||||
for conf in /etc/postgresql/*/main/postgresql.conf; do
|
||||
if [ -f "$conf" ]; then
|
||||
sed -i "s/#listen_addresses = 'localhost'/listen_addresses = 'localhost'/" "$conf" || \
|
||||
sed -i "s/listen_addresses = '.*'/listen_addresses = 'localhost'/" "$conf" || \
|
||||
echo "listen_addresses = 'localhost'" >> "$conf"
|
||||
fi
|
||||
done
|
||||
systemctl restart postgresql
|
||||
`
|
||||
}
|
||||
|
||||
func (si *ServiceInstaller) installRedis() string {
|
||||
return `# Install Redis and configure to listen on localhost
|
||||
apt-get install -y redis-server
|
||||
sed -i 's/bind 127.0.0.1 ::1/bind 127.0.0.1/' /etc/redis/redis.conf
|
||||
systemctl restart redis-server
|
||||
`
|
||||
}
|
||||
|
||||
func (si *ServiceInstaller) installMongoDB() string {
|
||||
return `# Install MongoDB and configure to listen on localhost
|
||||
# Detect Ubuntu version for correct repository
|
||||
. /etc/os-release
|
||||
UBUNTU_VERSION=${VERSION_ID:-22.04}
|
||||
UBUNTU_CODENAME=${UBUNTU_CODENAME:-jammy}
|
||||
|
||||
# Add MongoDB GPG key using modern method
|
||||
mkdir -p /etc/apt/keyrings
|
||||
curl -fsSL https://www.mongodb.org/static/pgp/server-6.0.asc | gpg --dearmor -o /etc/apt/keyrings/mongodb-server-6.0.gpg
|
||||
chmod 644 /etc/apt/keyrings/mongodb-server-6.0.gpg
|
||||
|
||||
# Add MongoDB repository
|
||||
echo "deb [ arch=amd64,arm64 signed-by=/etc/apt/keyrings/mongodb-server-6.0.gpg ] https://repo.mongodb.org/apt/ubuntu ${UBUNTU_CODENAME}/mongodb-org/6.0 multiverse" | tee /etc/apt/sources.list.d/mongodb-org-6.0.list
|
||||
apt-get update
|
||||
apt-get install -y mongodb-org
|
||||
sed -i 's/bindIp: .*/bindIp: 127.0.0.1/' /etc/mongod.conf
|
||||
systemctl enable mongod
|
||||
systemctl restart mongod
|
||||
`
|
||||
}
|
||||
|
||||
func (si *ServiceInstaller) installGeneric() string {
|
||||
return fmt.Sprintf(`# Generic service installation for %s
|
||||
echo "Service %s would be installed here"
|
||||
`, si.Service.Name, si.Service.Name)
|
||||
}
|
||||
Reference in New Issue
Block a user