Go to file

Damien 5caf885d83 fix(ferretdb): pin template to debian-12 and fail fast on bad SCRIPT_URL

- detect_latest_debian_template now selects the newest debian-12 template only.
  Auto-detecting the newest Debian overall picked debian-13, which would pair the
  deb12-only DocumentDB extension with a mismatched libicu. Trixie now requires
  setting TEMPLATE + DOCUMENTDB_DISTRO explicitly.
- Add preflight_script_url: verify SCRIPT_URL is reachable on the host before
  creating the LXC, so a branch/path that 404s fails immediately with guidance
  instead of dying mid-install after the container is built.

2026-05-29 10:56:51 +02:00

ferretdb

fix(ferretdb): pin template to debian-12 and fail fast on bad SCRIPT_URL

2026-05-29 10:56:51 +02:00

gitea-runner

chore(gitea-runner): fix tty1 autologin on Alpine LXC

2026-05-27 11:01:41 +02:00

netlab

feat(netlab): support TAILSCALE_AUTHKEY for headless cloud-init deployment

2026-04-22 08:58:39 +00:00

openbao

Force tty1 respawn after autologin change

2026-05-26 17:52:54 +02:00

proxy

Update proxy server installation script

2026-05-13 16:37:15 +02:00

.gitignore

Add .DS_Store to gitignore

2026-05-12 15:17:34 +02:00

README.md

Update README with FerretDB installation script and requirements

2026-05-29 09:26:15 +02:00

README.md

infra-scripts

Public infrastructure deployment scripts designed to be executed directly via curl | bash.

Philosophy

These scripts automate the deployment of personal infrastructure components. They are:

Self-contained: No external dependencies beyond standard Debian packages
Idempotent-ish: Safe to re-run (where possible)
Curl-friendly: Designed for one-liner deployment from a fresh server
Multi-OS: Supports Debian and Alpine-based deployments
Loopback by default: Services bind to 127.0.0.1; Tailscale handles the reverse proxy and TLS termination
Log hygiene: Every long-running service ships with a logrotate config (no unbounded log files)
Console auto-login: Proxmox LXCs are configured for root auto-login on tty1 (fast pct enter and Web UI shell access)
Keep it simple: One script per service, plain bash, no frameworks — readability over cleverness

Available Scripts

Script	Description	Usage
`proxy/install.sh`	Reverse proxy with Tailscale + Nginx Proxy Manager	`curl -fsSL https://gitea.arnodo.fr/Damien/infra-scripts/raw/branch/main/proxy/install.sh` \| `bash`
`netlab/install.sh`	Network lab with ContainerLab	`curl -fsSL https://gitea.arnodo.fr/Damien/infra-scripts/raw/branch/main/netlab/install.sh` \| `bash`
`gitea-runner/install.sh`	Gitea Act Runner on Alpine LXC (Proxmox)	`bash -c "$(curl -fsSL https://gitea.arnodo.fr/Damien/infra-scripts/raw/branch/main/gitea-runner/install.sh)"`
`openbao/install.sh`	OpenBao secrets manager on Alpine LXC (Proxmox)	`bash -c "$(curl -fsSL https://gitea.arnodo.fr/Damien/infra-scripts/raw/branch/main/openbao/install.sh)"`
`ferretdb/install.sh`	FerretDB (MongoDB-compatible) on Debian LXC (Proxmox)	`bash -c "$(curl -fsSL https://gitea.arnodo.fr/Damien/infra-scripts/raw/branch/main/ferretdb/install.sh)"`

Requirements

Fresh Debian 12/13 installation (proxy, netlab) or Proxmox VE host (gitea-runner, openbao, ferretdb)
User with sudo privileges (do not run as root) — except gitea-runner, openbao and ferretdb which run as root on Proxmox
Internet access