#cloud-config autoinstall: version: 1 interactive-sections: - network - storage locale: "ru_RU.UTF-8" keyboard: layout: us,ru toggle: alt_shift_toggle apt: primary: - arches: [default] uri: mirror://mirrors.ubuntu.com/mirrors.txt debconf-selections: | ttf-mscorefonts-installer msttcorefonts/accepted-mscorefonts-eula select true packages: - openssh-server - openssh-client - mosh - mc - htop - ca-certificates - curl - wget - apt-transport-https - apt-utils - locales-all - language-pack-ru - language-pack-ru-base - unixodbc - libfreetype6 - fontconfig - t1utils - apache2 - nginx - unzip - libc6-i386 - git - build-essential - python-is-python3 - python3-pip - python3-virtualenv - dkms - samba - fusesmb - samba-vfs-modules - cifs-utils - avahi-daemon - avahi-dnsconfd - libnss-winbind - libnss-mdns - cups - wsdd - libxt6 late-commands: - stat /cdrom/1c/install >/dev/null 2>/dev/null && sh -exc "mkdir -p /target/var/install/1c && cp /cdrom/1c/install/* /target/var/install/1c/" || echo skip 1c distr copy - sync - echo --- done! --- user-data: hostname: srv1c groups: - postgres - grp1cv8 - www-data users: - default - name: admin1c gecos: Admin 1C shell: /bin/bash primary_group: admin1c groups: users, adm, cdrom, sudo, dip, plugdev, lxd, postgres, grp1cv8, www-data lock_passwd: false sudo: ALL=(ALL) NOPASSWD:ALL passwd: $6$rounds=4096$X0PCsEEYkoirzYwF$vFfmCzOhzPQUsdXbrlt0cyX0wEiuRc2WecIUMyO2ZkTYzSh8oz2Sp87OFVxCHp0sPklRDmdwkK56EZCar.N1o/ ssh_import_id: - gh:b4tman #ssh_authorized_keys: # - - name: postgres primary_group: postgres groups: grp1cv8 system: true passwd: $6$rounds=4096$7HbuIwc5Gbm.$eDOOBbMBh9teE82CE9MGJXJuK3nRuJpjIbkUqOmPN7FyH/Nj.3bgDosdM1WoztBXHYwgCyd1dhya/5aR36Njm1 locale: "ru_RU.UTF-8" timezone: Europe/Moscow ntp: enabled: true ntp_client: auto package_update: true package_upgrade: true write_files: - path: /etc/systemd/system/srv1cv83@.service encoding: gzip+base64 owner: root:root permissions: '0644' content: | H4sIAAAAAAAAA61VS2/aQBC++1es2kZqpfJwEyIaaQ+EWAilIQhMekgjtNgDrLLedXfXJKjiv3d2 bQuS+lgfQJ7HN49vZvy4kNw+BTdgEs1zy5Wk4fAqkhZ0rrkBMge9A0367XPy+Wz8JZjB74JrMFSC fVH6uW2Z3oANgkdnyRN4CuJ9DtTwLBcQLAxoWhgdJrt+MNKqyOlG5/4t+EimzG6JVSRFxMQqvScv HCWJYAYTICmzLIjkjmslM5CWzmcP4fChv7wZxAPa2aoMOhV2p+1/w2HH/zvwSZGtEEStid0CYhYe M1fakkQDs5CS1Z6ksGaFsCQtNJcbsubaWHQWrJDJ1jlrtsHQjWlM72cxDXsX3bfh6lDekWSMSx+1 TeItN2UC+F+YMgFMDr1rn0RJowS4prA0xT6bMntE0kwQ49lok+FpCHSvQZkwipgcEr7mCM9K7/G0 NKha4WhztVZgjaXNolFdXeiZcv6ayQ2QtfJpSmQMxwWRlWiGGExGEQJcdq/C3nePMocE22z3RMAO xBVKuqRFCplrZREOMz4CG9SGqG3UESXF3mfiCrI8A1cctlSjFz6sQLm0PGHOHGXfHBLojEkUo2tz xKYy5tHwR/RAPcdvV6PsnwNY802hfSicp1WxIZlKHasrweQzRq6HrHWidnSp9RqtWqXwHyXm3Tz9 0fViRF0+wy0kz64urtL3vAiFs5OC9Yv1lWRcCEwaDdLmOqfjyWg5jWbj+xsadru+3hmYHPtSdlgV 9r/EiMd30f0ipr0qSGNTn2Fv2QrXUUAbbY4NrPb9vH1iQXDDmlDKWSgfLo1lQlQk1ffmTZa3s+ve 8jaeDO4i2lG5LU/Ja/9yeXnRORvXp6aKHATRKyRzPH+WdlZcdsyWtBLyocmzvCFINPn05/SGHUjL L+ZR6pYOpRo27xTVQjqd38ITjduzA/kVtLD1uFgnqnJ2XRTc92k5JiexjoxXJnFF8zubirHDafZu Bg8f8HNgfAeYeGF7U7/intNeMNV8h2c2znIqFX4gxiUF7mvj2fTvMgGKR0G7O/aTIYPp9Z5mqOUt t87V5+UvY8op1KcGAAA= - path: /etc/systemd/system/srv1cv83-ras@.service encoding: gzip+base64 owner: root:root permissions: '0644' content: | H4sIAAAAAAAAA11QwWpCMRC85yuCILSHNAgqUsjBtiKPQik+pQeRksZ9djEvSTeJ1b9vfFQPHmd2 Z3Zm1yuHacNeIBrCkNA7NXh+nLkEFAgj8AW0PgGfblt0GBPp8w6vgQ5ogN/1q3u2gJ+MBFE5SL+e 9g9J0w4SmzbF5Ybk1PmJJl4IF6Ow3u9zuOjY+t9+w5anACpiGyywVSxuOdLAHCZsTj4HtaPQITY7 gqmLPCn5hU7Gby7gaHgPCs+lD0me9+RxMv4cD2W/kqQjNzbHkpALEXxRDkbDUY+9orU17py2qq7m 1duSvRMedIJlG1SiDKVu7C55JxqNNtOVqsGoUYlfuQKtPb+10dmmDjsDymQicIl96PLg7dNJtWWK Ipdm1/J/2tGhvJIBAAA= - path: /etc/nginx/sites-available/apache-proxy encoding: gzip+base64 owner: root:root permissions: '0644' content: | H4sIAAAAAAAAA41VXW/aMBR9z6+4YrxNIV+0Q4n6gLpurdauVbOHTtMUmeQCHokd2aaDTvvvu46B Qj+2OSgk95xz4/ge3yxbbRSyBljLyjnCLw9oaFT3qCCK3w1COqI0SZJRmHXYArFlNb9HOB5m3m/P c+TCyAUKDXI6zTyv5g03RSmFKB6kQOhPuGBqXShspMGCVZUCC5y0qHibRmGTPddsEgvW4I7sYk7g lTVHYYqJrNbFZDmdElnzBwSIjj9lW3SOrCJgHx8udmjDVk7fAVEYD69oJkzNsHhJryGGJCa59wa4 MKgarDgzCDTtKZ8tFTNcCk/rumiVNLKUtYYvl/l9NIg3/0nWwSVv5zbf2en78zOfzvnYH5/lUTzy P55e+fn5OD46Th16+xdsp6TQFk1Gw0Pli5hTnp6P6ReH/s315dcoCY/2lM+x12fz6tMy741bDuzW 39V0+/bOLRbXqDUtXVF2NtRzprBK8/wyPbKltgwsq3lRLklP/ixbSq0iEivUsrZuHQ26w9Zm9sBb kCLz7EVh1i1qMLgyQVszLsjrbc3LrlTBDy2Fw0qtDxF2z3RJ9jQH4ZW/B3TCp/erpj5UPLlXWr99 GmNGNm9XfTfhhouiRjEzc3JkGG5egwy14lgBE2t6R9pCG2vCnf9B0R7xr1ubSkM+vjq7vr34ePE5 O6SdSrKsMP4XWpAdW0gtuC3DAfUuz/0bcjCWlgW9KINGVngyqWW56GXbXb/pFzXXlBjcGIVQ4ZQt a7Opdvac8y1Nv6f/QxwOE6Diw9yYNn4t0Quk/d4BNGdWz6U2DnMEuwdRGT61JUCXLUBTBmLGxSog PLD4oMUme0lRLHD9TEGxR0F32lvV3Che0uorJnQrlfFzJDtzs4YetSGfzfDkOAnfxbbk1F3Kellh vpxUsiHT6gxoC9WSVb297I89E7pOSi17tA9LZy8INoWyw/rIduKKK6ou7Ea3Fw9JGrf9bxu/82+R 1f7FDfT3evn/6D5I9ZOpCit7BX1HtKuzKqZbyF79O9c5VRL6j/V85FoDFFR320lcPBpE/05I+0Js jd57Sm8Z9YWDYZ+SBoH7YgaO/5u+hH8Ao392zUwHAAA= runcmd: # --- force locale install --- - | set -x locale-gen ru_RU.UTF-8 en_US.UTF-8 update-locale LANG=ru_RU.UTF-8 export LC_ALL=ru_RU.UTF-8 export LANG=ru_RU.UTF-8 # --- force set timezone --- - timedatectl set-timezone Europe/Moscow # --- force apt update --- - | set -x apt-get update apt-get -y dist-upgrade apt-get clean # --- install hasp --- - | set -x mkdir -p /tmp/ldk curl -SLo /tmp/ldk/installer.tar.gz https://b4tman.ru/Sentinel_LDK_Ubuntu_DEB_Runtime_Installer.tar.gz tar xzf /tmp/ldk/installer.tar.gz --strip-components=1 -C /tmp/ldk sh -xc 'dpkg -i $(find /tmp/ldk -name "aksusb*amd64.deb" -type f)' rm -rf /tmp/ldk # --- install ttf-mscorefonts --- - | set -x export DEBIAN_FRONTEND=noninteractive mkdir -p /var/lib/update-notifier/package-data-downloads/partial chown _apt:root /var/lib/update-notifier/package-data-downloads/partial/ apt-get install --no-install-recommends --no-install-suggests -y ttf-mscorefonts-installer rm -rf /var/lib/update-notifier/package-data-downloads/partial/* # --- install postgres --- - | set -x curl -SLo /tmp/pgpro-repo-add.sh https://repo.postgrespro.ru/pg1c-14/keys/pgpro-repo-add.sh sh /tmp/pgpro-repo-add.sh rm -f /tmp/pgpro-repo-add.sh apt-get install -y postgrespro-1c-14-contrib # --- postgres init --- - | set -x echo postgres > /tmp/pgpswd /opt/pgpro/1c-14/bin/pg-setup initdb --tune=1c -k -E UTF8 -g --locale ru_RU.UTF-8 -T russian --pwfile=/tmp/pgpswd rm -f /tmp/pgpswd sed -i 's%\=\s0MB%\=\ 1GB%g' /var/lib/pgpro/1c-14/data/postgresql.conf echo >> /var/lib/pgpro/1c-14/data/postgresql.conf echo \#--- >> /var/lib/pgpro/1c-14/data/postgresql.conf echo row_security=off >> /var/lib/pgpro/1c-14/data/postgresql.conf echo max_wal_senders=0 >> /var/lib/pgpro/1c-14/data/postgresql.conf echo wal_level=minimal >> /var/lib/pgpro/1c-14/data/postgresql.conf /opt/pgpro/1c-14/bin/pg-setup service enable /opt/pgpro/1c-14/bin/pg-setup service start apt-get install -y postgrespro-1c-14 # --- install 1c --- - | set -x stat /var/install/1c >/dev/null 2>/dev/null && mkdir -p /tmp/1c || echo skip 1c install stat /var/install/1c >/dev/null 2>/dev/null && tar xzf $(find /var/install/1c -name "server64_*.tar.gz" -type f) -C /tmp/1c || echo skip 1c install # install only server (without GUI) stat /var/install/1c >/dev/null 2>/dev/null && $(find /tmp/1c -name "setup-full-*.run" -type f) --mode unattended --enable-components additional_admin_functions,integrity_monitoring,config_storage_server,liberica_jre,server,server_admin,ws,ru || echo skip 1c install # install with GUI (with all X deps) # stat /var/install/1c >/dev/null 2>/dev/null && $(find /tmp/1c -name "setup-full-*.run" -type f) --mode unattended --enable-components additional_admin_functions,integrity_monitoring,config_storage_server,client_full,client_thin_fib,liberica_jre,server,server_admin,ws,ru || echo skip 1c install stat /tmp/1c >/dev/null 2>/dev/null && rm -rf /tmp/1c || echo skip 1c install stat /opt/1cv8/x86_64 >/dev/null 2>/dev/null && ln -s $(find /opt/1cv8/x86_64 -name "8.3.*" -type d) /opt/1cv8/x86_64/current || echo skip 1c install # --- 1c web init --- - | set -x # stop services systemctl stop apache2 systemctl stop nginx # remove defaul sites rm -f /etc/apache2/sites-enabled/000-default.conf rm -f /etc/nginx/sites-enabled/default # dirs and files mkdir -p /var/www-1c/html mkdir -p /etc/nginx/ssl echo Hello 1C > /var/www-1c/html/index.html #create apache cfg from default cp /etc/apache2/sites-available/000-default.conf /etc/apache2/sites-available/001-1c.conf sed -i 's%VirtualHost\s\*\:80%VirtualHost\ \*\:33380%' /etc/apache2/sites-available/001-1c.conf sed -i 's%DocumentRoot\s\/var\/www\/html%DocumentRoot \/var\/www-1c\/html%' /etc/apache2/sites-available/001-1c.conf sed -i 's%\#Include.*$%Include /etc/apache2/conf-available/1c.conf%' /etc/apache2/sites-available/001-1c.conf # load 1c handler module echo LoadModule _1cws_module "/opt/1cv8/x86_64/current/wsap24.so" >> /etc/apache2/conf-available/1c.conf # allow www root echo \ >> /etc/apache2/conf-available/1c.conf echo \ \ \ \ Options Indexes Includes >> /etc/apache2/conf-available/1c.conf echo \ \ \ \ AllowOverride All >> /etc/apache2/conf-available/1c.conf echo \ \ \ \ Require all granted >> /etc/apache2/conf-available/1c.conf echo \ >> /etc/apache2/conf-available/1c.conf # set apache http port sed -i 's%Listen\s80%Listen\ 33380%' /etc/apache2/ports.conf # gen self signed ssl cert openssl req -x509 -newkey rsa:4096 -keyout /etc/nginx/ssl/key.pem -out /etc/nginx/ssl/cert.pem -days 3650 -nodes -subj "/C=RU/ST=Tula/L=Novomoskovsk/O=Company Name/OU=Org/CN=$(hostname)" # set apache hostname sed -i "s%server_name\slocalhost;%server_name $(hostname);%" /etc/nginx/sites-available/apache-proxy sed -i "s%\#ServerName.*$%ServerName $(hostname)%" /etc/apache2/sites-available/001-1c.conf # fix 1c thin client auto update (with url_path=/1c/test1) sed -E '/^\s*location\s+\/\s+/i\ \ \ \ rewrite ^/1c/e1cibdst/(.*) /1c/test1/e1cibdst/$1 last;\n' -i /etc/nginx/sites-available/apache-proxy # enable new configs ln -s /etc/apache2/sites-available/001-1c.conf /etc/apache2/sites-enabled/001-1c.conf ln -s /etc/nginx/sites-available/apache-proxy /etc/nginx/sites-enabled/apache-proxy # start services systemctl enable apache2 --now systemctl enable nginx --now # enable+start 1c service stat /opt/1cv8/x86_64/current/ragent >/dev/null 2>/dev/null && systemctl enable srv1cv83@current --now || echo ignoring 1c service stat /opt/1cv8/x86_64/current/ras >/dev/null 2>/dev/null && systemctl enable srv1cv83-ras@current --now || echo ignoring 1c ras service # --- install & config webpub1c --- - | set -x sudo -u admin1c sh -exc "git clone https://github.com/b4tman/webpub1c /home/admin1c/webpub1c && cd /home/admin1c/webpub1c && virtualenv venv && . venv/bin/activate && pip install -r requirements.txt" sed -i "s%apache_config:.*\$%apache_config: /etc/apache2/conf-available/1c.conf%" /home/admin1c/webpub1c/webpub1c.yml mkdir -p /var/www-1c/vrd mkdir -p /var/www-1c/pub chown admin1c:www-data /var/www-1c/vrd chown admin1c:www-data /var/www-1c/pub chown admin1c:root /etc/apache2/conf-available/1c.conf sed -i "s%vrd_path:.*\$%vrd_path: /var/www-1c/vrd%" /home/admin1c/webpub1c/webpub1c.yml sed -i "s%dir_path:.*\$%dir_path: /var/www-1c/pub%" /home/admin1c/webpub1c/webpub1c.yml # --- install opt tools --- - | set -x snap install ripgrep --classic snap install lsd snap install yq snap install jq snap install nvim --classic apt-get install -y bat fd-find echo "alias bat=batcat" >> /home/admin1c/.bashrc # --- install onescript --- - | set -x apt-get install -y mono-runtime libmono-i18n4.0-all curl -SLo /tmp/onescript-engine.deb https://github.com/EvilBeaver/OneScript/releases/download/v1.8.0/onescript-engine_1.8.0_all.deb dpkg -i /tmp/onescript-engine.deb # --- install wsdd --- #- | # set -x # apt-key adv --fetch-keys https://pkg.ltec.ch/public/conf/ltec-ag.gpg.key # echo "deb https://pkg.ltec.ch/public/ $(lsb_release -cs) main" >> /etc/apt/sources.list.d/wsdd.list # apt-get update # apt-get install -y wsdd # systemctl enable wsdd.service --now # --- create bases --- - | set -x export PATH="$PATH:/opt/1cv8/x86_64/current" export DB_ADDR=localhost export CLUSTER_ADDR=localhost export CLUSTER_ID=$(rac cluster list $CLUSTER_ADDR | rg -e "^cluster\s*:" -m 1 | rg -e "[[:xdigit:]-]{36}" -o) rac infobase --cluster=$CLUSTER_ID create --create-database --name=test1 --dbms=PostgreSQL --db-server=$DB_ADDR --db-name=test1 --locale=ru --db-user=postgres --db-pwd=postgres --license-distribution=allow $CLUSTER_ADDR rac infobase --cluster=$CLUSTER_ID create --create-database --name=test2 --dbms=PostgreSQL --db-server=$DB_ADDR --db-name=test2 --locale=ru --db-user=postgres --db-pwd=postgres --license-distribution=allow $CLUSTER_ADDR rac infobase --cluster=$CLUSTER_ID create --create-database --name=test3 --dbms=PostgreSQL --db-server=$DB_ADDR --db-name=test3 --locale=ru --db-user=postgres --db-pwd=postgres --license-distribution=allow $CLUSTER_ADDR sudo -u admin1c sh -exc "cd /home/admin1c/webpub1c && . venv/bin/activate && python webpub1c.py add_module && python webpub1c.py add test1 && python webpub1c.py add test2 && python webpub1c.py add test3" systemctl restart apache2 # --- final --- - | set -x # disable boot to GUI systemctl set-default multi-user.target # remove default user folder rm -rf /home/ubuntu echo -- done! ---