T

Damien 3e4ede907e openbao,gitea-runner: fail loudly if lib/common.sh sourcing fails

source <(curl ...) swallows curl failures (404, network error): an empty
stream still makes `source` return 0, so the failure would otherwise only
surface later as a confusing "command not found" for one of lib/common.sh's
functions. Check that a known function landed after the source, and exit 1
with the attempted URL if not.

2026-07-30 13:34:05 +02:00

gitea-runner

openbao,gitea-runner: fail loudly if lib/common.sh sourcing fails

2026-07-30 13:34:05 +02:00

komodo

Remove KOMODO_HOST fallback from MOTD script

2026-06-14 15:33:22 +02:00

lib

lib/common.sh: template detection + autologin + update helpers

2026-07-30 11:14:20 +02:00

netlab

Remove unused timezone configuration

2026-05-30 15:57:56 +02:00

openbao

openbao,gitea-runner: fail loudly if lib/common.sh sourcing fails

2026-07-30 13:34:05 +02:00

proxy

Update proxy server installation script

2026-05-13 16:37:15 +02:00

.gitignore

Add .DS_Store to gitignore

2026-05-12 15:17:34 +02:00

README.md

Remove ferretdb (Debian LXC, no Alpine build for DocumentDB extension)

2026-07-30 11:09:05 +02:00

README.md

infra-scripts

Public infrastructure deployment scripts designed to be executed directly via curl | bash.

Philosophy

These scripts automate the deployment of personal infrastructure components. They are:

Self-contained: No external dependencies beyond standard Debian packages
Idempotent-ish: Safe to re-run (where possible)
Curl-friendly: Designed for one-liner deployment from a fresh server
Multi-OS: Supports Debian and Alpine-based deployments, chosen per-script based on that service's requirements
Loopback by default: Services bind to 127.0.0.1; Tailscale handles the reverse proxy and TLS termination
Log hygiene: Every long-running service ships with a logrotate config (no unbounded log files)
Console auto-login: Proxmox LXCs are configured for root auto-login on tty1 (fast pct enter and Web UI shell access)
Keep it simple: One script per service, plain bash, no frameworks — readability over cleverness

Available Scripts

Script	Description	Usage
`proxy/install.sh`	Reverse proxy with Tailscale + Nginx Proxy Manager	`curl -fsSL https://gitea.arnodo.fr/Damien/infra-scripts/raw/branch/main/proxy/install.sh` \| `bash`
`netlab/install.sh`	Network lab with ContainerLab	`curl -fsSL https://gitea.arnodo.fr/Damien/infra-scripts/raw/branch/main/netlab/install.sh` \| `bash`
`gitea-runner/install.sh`	Gitea Act Runner on Alpine LXC (Proxmox)	`bash -c "$(curl -fsSL https://gitea.arnodo.fr/Damien/infra-scripts/raw/branch/main/gitea-runner/install.sh)"`
`openbao/install.sh`	OpenBao secrets manager on Alpine LXC (Proxmox)	`bash -c "$(curl -fsSL https://gitea.arnodo.fr/Damien/infra-scripts/raw/branch/main/openbao/install.sh)"`
`komodo/install.sh`	Komodo (Docker + MongoDB) on Alpine VM	`bash -c "$(curl -fsSL https://gitea.arnodo.fr/Damien/infra-scripts/raw/branch/main/komodo/install.sh)"`

Requirements

Fresh Debian 12/13 installation (proxy, netlab) or Proxmox VE host (gitea-runner, openbao) or Alpine VM (komodo)
User with sudo privileges (do not run as root) — except gitea-runner, openbao, and komodo which run as root
Internet access