312 lines
14 KiB
Plaintext
312 lines
14 KiB
Plaintext
#cloud-config
|
|
autoinstall:
|
|
version: 1
|
|
interactive-sections:
|
|
- network
|
|
- storage
|
|
locale: "ru_RU.UTF-8"
|
|
keyboard:
|
|
layout: us,ru
|
|
toggle: alt_shift_toggle
|
|
apt:
|
|
primary:
|
|
- arches: [default]
|
|
uri: mirror://mirrors.ubuntu.com/mirrors.txt
|
|
debconf-selections: |
|
|
ttf-mscorefonts-installer msttcorefonts/accepted-mscorefonts-eula select true
|
|
packages:
|
|
- openssh-server
|
|
- openssh-client
|
|
- mosh
|
|
- mc
|
|
- htop
|
|
- ca-certificates
|
|
- curl
|
|
- wget
|
|
- apt-transport-https
|
|
- apt-utils
|
|
- locales-all
|
|
- language-pack-ru
|
|
- language-pack-ru-base
|
|
- unixodbc
|
|
- libfreetype6
|
|
- fontconfig
|
|
- t1utils
|
|
- apache2
|
|
- nginx
|
|
- unzip
|
|
- libc6-i386
|
|
- git
|
|
- build-essential
|
|
- python-is-python3
|
|
- python3-pip
|
|
- python3-virtualenv
|
|
- dkms
|
|
- samba
|
|
- fusesmb
|
|
- samba-vfs-modules
|
|
- cifs-utils
|
|
- avahi-daemon
|
|
- avahi-dnsconfd
|
|
- libnss-winbind
|
|
- libnss-mdns
|
|
- cups
|
|
- wsdd
|
|
- libxt6
|
|
late-commands:
|
|
- stat /cdrom/1c/install >/dev/null 2>/dev/null && sh -exc "mkdir -p /target/var/install/1c && cp /cdrom/1c/install/* /target/var/install/1c/" || echo skip 1c distr copy
|
|
- sync
|
|
- echo --- done! ---
|
|
user-data:
|
|
hostname: srv1c
|
|
|
|
groups:
|
|
- postgres
|
|
- grp1cv8
|
|
- www-data
|
|
|
|
users:
|
|
- default
|
|
- name: admin1c
|
|
gecos: Admin 1C
|
|
shell: /bin/bash
|
|
primary_group: admin1c
|
|
groups: users, adm, cdrom, sudo, dip, plugdev, lxd, postgres, grp1cv8, www-data
|
|
lock_passwd: false
|
|
sudo: ALL=(ALL) NOPASSWD:ALL
|
|
passwd: $6$rounds=4096$X0PCsEEYkoirzYwF$vFfmCzOhzPQUsdXbrlt0cyX0wEiuRc2WecIUMyO2ZkTYzSh8oz2Sp87OFVxCHp0sPklRDmdwkK56EZCar.N1o/
|
|
ssh_import_id:
|
|
- gh:b4tman
|
|
#ssh_authorized_keys:
|
|
# - <ssh pub key 1>
|
|
- name: postgres
|
|
primary_group: postgres
|
|
groups: grp1cv8
|
|
system: true
|
|
passwd: $6$rounds=4096$7HbuIwc5Gbm.$eDOOBbMBh9teE82CE9MGJXJuK3nRuJpjIbkUqOmPN7FyH/Nj.3bgDosdM1WoztBXHYwgCyd1dhya/5aR36Njm1
|
|
|
|
locale: "ru_RU.UTF-8"
|
|
timezone: Europe/Moscow
|
|
ntp:
|
|
enabled: true
|
|
ntp_client: auto
|
|
|
|
package_update: true
|
|
package_upgrade: true
|
|
|
|
write_files:
|
|
- path: /etc/systemd/system/srv1cv83@.service
|
|
encoding: gzip+base64
|
|
owner: root:root
|
|
permissions: '0644'
|
|
content: |
|
|
H4sIAAAAAAAAA61VS2/aQBC++1es2kZqpfJwEyIaaQ+EWAilIQhMekgjtNgDrLLedXfXJKjiv3d2
|
|
bQuS+lgfQJ7HN49vZvy4kNw+BTdgEs1zy5Wk4fAqkhZ0rrkBMge9A0367XPy+Wz8JZjB74JrMFSC
|
|
fVH6uW2Z3oANgkdnyRN4CuJ9DtTwLBcQLAxoWhgdJrt+MNKqyOlG5/4t+EimzG6JVSRFxMQqvScv
|
|
HCWJYAYTICmzLIjkjmslM5CWzmcP4fChv7wZxAPa2aoMOhV2p+1/w2HH/zvwSZGtEEStid0CYhYe
|
|
M1fakkQDs5CS1Z6ksGaFsCQtNJcbsubaWHQWrJDJ1jlrtsHQjWlM72cxDXsX3bfh6lDekWSMSx+1
|
|
TeItN2UC+F+YMgFMDr1rn0RJowS4prA0xT6bMntE0kwQ49lok+FpCHSvQZkwipgcEr7mCM9K7/G0
|
|
NKha4WhztVZgjaXNolFdXeiZcv6ayQ2QtfJpSmQMxwWRlWiGGExGEQJcdq/C3nePMocE22z3RMAO
|
|
xBVKuqRFCplrZREOMz4CG9SGqG3UESXF3mfiCrI8A1cctlSjFz6sQLm0PGHOHGXfHBLojEkUo2tz
|
|
xKYy5tHwR/RAPcdvV6PsnwNY802hfSicp1WxIZlKHasrweQzRq6HrHWidnSp9RqtWqXwHyXm3Tz9
|
|
0fViRF0+wy0kz64urtL3vAiFs5OC9Yv1lWRcCEwaDdLmOqfjyWg5jWbj+xsadru+3hmYHPtSdlgV
|
|
9r/EiMd30f0ipr0qSGNTn2Fv2QrXUUAbbY4NrPb9vH1iQXDDmlDKWSgfLo1lQlQk1ffmTZa3s+ve
|
|
8jaeDO4i2lG5LU/Ja/9yeXnRORvXp6aKHATRKyRzPH+WdlZcdsyWtBLyocmzvCFINPn05/SGHUjL
|
|
L+ZR6pYOpRo27xTVQjqd38ITjduzA/kVtLD1uFgnqnJ2XRTc92k5JiexjoxXJnFF8zubirHDafZu
|
|
Bg8f8HNgfAeYeGF7U7/intNeMNV8h2c2znIqFX4gxiUF7mvj2fTvMgGKR0G7O/aTIYPp9Z5mqOUt
|
|
t87V5+UvY8op1KcGAAA=
|
|
- path: /etc/systemd/system/srv1cv83-ras@.service
|
|
encoding: gzip+base64
|
|
owner: root:root
|
|
permissions: '0644'
|
|
content: |
|
|
H4sIAAAAAAAAA11QwWpCMRC85yuCILSHNAgqUsjBtiKPQik+pQeRksZ9djEvSTeJ1b9vfFQPHmd2
|
|
Z3Zm1yuHacNeIBrCkNA7NXh+nLkEFAgj8AW0PgGfblt0GBPp8w6vgQ5ogN/1q3u2gJ+MBFE5SL+e
|
|
9g9J0w4SmzbF5Ybk1PmJJl4IF6Ow3u9zuOjY+t9+w5anACpiGyywVSxuOdLAHCZsTj4HtaPQITY7
|
|
gqmLPCn5hU7Gby7gaHgPCs+lD0me9+RxMv4cD2W/kqQjNzbHkpALEXxRDkbDUY+9orU17py2qq7m
|
|
1duSvRMedIJlG1SiDKVu7C55JxqNNtOVqsGoUYlfuQKtPb+10dmmDjsDymQicIl96PLg7dNJtWWK
|
|
Ipdm1/J/2tGhvJIBAAA=
|
|
- path: /etc/nginx/sites-available/apache-proxy
|
|
encoding: gzip+base64
|
|
owner: root:root
|
|
permissions: '0644'
|
|
content: |
|
|
H4sIAAAAAAAAA41VXW/aMBR9z6+4YrxNIV+0Q4n6gLpurdauVbOHTtMUmeQCHokd2aaDTvvvu46B
|
|
Qj+2OSgk95xz4/ge3yxbbRSyBljLyjnCLw9oaFT3qCCK3w1COqI0SZJRmHXYArFlNb9HOB5m3m/P
|
|
c+TCyAUKDXI6zTyv5g03RSmFKB6kQOhPuGBqXShspMGCVZUCC5y0qHibRmGTPddsEgvW4I7sYk7g
|
|
lTVHYYqJrNbFZDmdElnzBwSIjj9lW3SOrCJgHx8udmjDVk7fAVEYD69oJkzNsHhJryGGJCa59wa4
|
|
MKgarDgzCDTtKZ8tFTNcCk/rumiVNLKUtYYvl/l9NIg3/0nWwSVv5zbf2en78zOfzvnYH5/lUTzy
|
|
P55e+fn5OD46Th16+xdsp6TQFk1Gw0Pli5hTnp6P6ReH/s315dcoCY/2lM+x12fz6tMy741bDuzW
|
|
39V0+/bOLRbXqDUtXVF2NtRzprBK8/wyPbKltgwsq3lRLklP/ixbSq0iEivUsrZuHQ26w9Zm9sBb
|
|
kCLz7EVh1i1qMLgyQVszLsjrbc3LrlTBDy2Fw0qtDxF2z3RJ9jQH4ZW/B3TCp/erpj5UPLlXWr99
|
|
GmNGNm9XfTfhhouiRjEzc3JkGG5egwy14lgBE2t6R9pCG2vCnf9B0R7xr1ubSkM+vjq7vr34ePE5
|
|
O6SdSrKsMP4XWpAdW0gtuC3DAfUuz/0bcjCWlgW9KINGVngyqWW56GXbXb/pFzXXlBjcGIVQ4ZQt
|
|
a7Opdvac8y1Nv6f/QxwOE6Diw9yYNn4t0Quk/d4BNGdWz6U2DnMEuwdRGT61JUCXLUBTBmLGxSog
|
|
PLD4oMUme0lRLHD9TEGxR0F32lvV3Che0uorJnQrlfFzJDtzs4YetSGfzfDkOAnfxbbk1F3Kellh
|
|
vpxUsiHT6gxoC9WSVb297I89E7pOSi17tA9LZy8INoWyw/rIduKKK6ou7Ea3Fw9JGrf9bxu/82+R
|
|
1f7FDfT3evn/6D5I9ZOpCit7BX1HtKuzKqZbyF79O9c5VRL6j/V85FoDFFR320lcPBpE/05I+0Js
|
|
jd57Sm8Z9YWDYZ+SBoH7YgaO/5u+hH8Ao392zUwHAAA=
|
|
runcmd:
|
|
# --- force locale install ---
|
|
- |
|
|
set -x
|
|
locale-gen ru_RU.UTF-8 en_US.UTF-8
|
|
update-locale LANG=ru_RU.UTF-8
|
|
export LC_ALL=ru_RU.UTF-8
|
|
export LANG=ru_RU.UTF-8
|
|
|
|
# --- force set timezone ---
|
|
- timedatectl set-timezone Europe/Moscow
|
|
|
|
# --- force apt update ---
|
|
- |
|
|
set -x
|
|
apt-get update
|
|
apt-get -y dist-upgrade
|
|
apt-get clean
|
|
|
|
# --- install hasp ---
|
|
- |
|
|
set -x
|
|
mkdir -p /tmp/ldk
|
|
curl -SLo /tmp/ldk/installer.tar.gz https://b4tman.ru/Sentinel_LDK_Ubuntu_DEB_Runtime_Installer.tar.gz
|
|
tar xzf /tmp/ldk/installer.tar.gz --strip-components=1 -C /tmp/ldk
|
|
sh -xc 'dpkg -i $(find /tmp/ldk -name "aksusb*amd64.deb" -type f)'
|
|
rm -rf /tmp/ldk
|
|
|
|
# --- install ttf-mscorefonts ---
|
|
- |
|
|
set -x
|
|
export DEBIAN_FRONTEND=noninteractive
|
|
mkdir -p /var/lib/update-notifier/package-data-downloads/partial
|
|
chown _apt:root /var/lib/update-notifier/package-data-downloads/partial/
|
|
apt-get install --no-install-recommends --no-install-suggests -y ttf-mscorefonts-installer
|
|
rm -rf /var/lib/update-notifier/package-data-downloads/partial/*
|
|
|
|
# --- install postgres ---
|
|
- |
|
|
set -x
|
|
curl -SLo /tmp/pgpro-repo-add.sh https://repo.postgrespro.ru/pg1c-14/keys/pgpro-repo-add.sh
|
|
sh /tmp/pgpro-repo-add.sh
|
|
rm -f /tmp/pgpro-repo-add.sh
|
|
apt-get install -y postgrespro-1c-14-contrib
|
|
|
|
# --- postgres init ---
|
|
- |
|
|
set -x
|
|
echo postgres > /tmp/pgpswd
|
|
/opt/pgpro/1c-14/bin/pg-setup initdb --tune=1c -k -E UTF8 -g --locale ru_RU.UTF-8 -T russian --pwfile=/tmp/pgpswd
|
|
rm -f /tmp/pgpswd
|
|
sed -i 's%\=\s0MB%\=\ 1GB%g' /var/lib/pgpro/1c-14/data/postgresql.conf
|
|
echo >> /var/lib/pgpro/1c-14/data/postgresql.conf
|
|
echo \#--- >> /var/lib/pgpro/1c-14/data/postgresql.conf
|
|
echo row_security=off >> /var/lib/pgpro/1c-14/data/postgresql.conf
|
|
echo max_wal_senders=0 >> /var/lib/pgpro/1c-14/data/postgresql.conf
|
|
echo wal_level=minimal >> /var/lib/pgpro/1c-14/data/postgresql.conf
|
|
/opt/pgpro/1c-14/bin/pg-setup service enable
|
|
/opt/pgpro/1c-14/bin/pg-setup service start
|
|
apt-get install -y postgrespro-1c-14
|
|
|
|
# --- install 1c ---
|
|
- |
|
|
set -x
|
|
stat /var/install/1c >/dev/null 2>/dev/null && mkdir -p /tmp/1c || echo skip 1c install
|
|
stat /var/install/1c >/dev/null 2>/dev/null && tar xzf $(find /var/install/1c -name "server64_*.tar.gz" -type f) -C /tmp/1c || echo skip 1c install
|
|
# install only server (without GUI)
|
|
stat /var/install/1c >/dev/null 2>/dev/null && $(find /tmp/1c -name "setup-full-*.run" -type f) --mode unattended --enable-components additional_admin_functions,integrity_monitoring,config_storage_server,liberica_jre,server,server_admin,ws,ru || echo skip 1c install
|
|
# install with GUI (with all X deps)
|
|
# stat /var/install/1c >/dev/null 2>/dev/null && $(find /tmp/1c -name "setup-full-*.run" -type f) --mode unattended --enable-components additional_admin_functions,integrity_monitoring,config_storage_server,client_full,client_thin_fib,liberica_jre,server,server_admin,ws,ru || echo skip 1c install
|
|
stat /tmp/1c >/dev/null 2>/dev/null && rm -rf /tmp/1c || echo skip 1c install
|
|
stat /opt/1cv8/x86_64 >/dev/null 2>/dev/null && ln -s $(find /opt/1cv8/x86_64 -name "8.3.*" -type d) /opt/1cv8/x86_64/current || echo skip 1c install
|
|
|
|
# --- 1c web init ---
|
|
- |
|
|
set -x
|
|
# stop services
|
|
systemctl stop apache2
|
|
systemctl stop nginx
|
|
# remove defaul sites
|
|
rm -f /etc/apache2/sites-enabled/000-default.conf
|
|
rm -f /etc/nginx/sites-enabled/default
|
|
# dirs and files
|
|
mkdir -p /var/www-1c/html
|
|
mkdir -p /etc/nginx/ssl
|
|
echo Hello 1C > /var/www-1c/html/index.html
|
|
#create apache cfg from default
|
|
cp /etc/apache2/sites-available/000-default.conf /etc/apache2/sites-available/001-1c.conf
|
|
sed -i 's%VirtualHost\s\*\:80%VirtualHost\ \*\:33380%' /etc/apache2/sites-available/001-1c.conf
|
|
sed -i 's%DocumentRoot\s\/var\/www\/html%DocumentRoot \/var\/www-1c\/html%' /etc/apache2/sites-available/001-1c.conf
|
|
sed -i 's%\#Include.*$%Include /etc/apache2/conf-available/1c.conf%' /etc/apache2/sites-available/001-1c.conf
|
|
# allow www root
|
|
echo \<Directory\ \"/var/www-1c/html\"\> >> /etc/apache2/conf-available/1c.conf
|
|
echo \ \ \ \ Options Indexes Includes >> /etc/apache2/conf-available/1c.conf
|
|
echo \ \ \ \ AllowOverride All >> /etc/apache2/conf-available/1c.conf
|
|
echo \ \ \ \ Require all granted >> /etc/apache2/conf-available/1c.conf
|
|
echo \</Directory\> >> /etc/apache2/conf-available/1c.conf
|
|
# set apache http port
|
|
sed -i 's%Listen\s80%Listen\ 33380%' /etc/apache2/ports.conf
|
|
# gen self signed ssl cert
|
|
openssl req -x509 -newkey rsa:4096 -keyout /etc/nginx/ssl/key.pem -out /etc/nginx/ssl/cert.pem -days 3650 -nodes -subj "/C=RU/ST=Tula/L=Novomoskovsk/O=Company Name/OU=Org/CN=$(hostname)"
|
|
# set apache hostname
|
|
sed -i "s%server_name\slocalhost;%server_name $(hostname);%" /etc/nginx/sites-available/apache-proxy
|
|
sed -i "s%\#ServerName.*$%ServerName $(hostname)%" /etc/apache2/sites-available/001-1c.conf
|
|
# enable new configs
|
|
ln -s /etc/apache2/sites-available/001-1c.conf /etc/apache2/sites-enabled/001-1c.conf
|
|
ln -s /etc/nginx/sites-available/apache-proxy /etc/nginx/sites-enabled/apache-proxy
|
|
# start services
|
|
systemctl enable apache2 --now
|
|
systemctl enable nginx --now
|
|
# enable+start 1c service
|
|
stat /opt/1cv8/x86_64/current/ragent >/dev/null 2>/dev/null && systemctl enable srv1cv83@current --now || echo ignoring 1c service
|
|
stat /opt/1cv8/x86_64/current/ras >/dev/null 2>/dev/null && systemctl enable srv1cv83-ras@current --now || echo ignoring 1c ras service
|
|
|
|
# --- install & config webpub1c ---
|
|
- |
|
|
set -x
|
|
sudo -u admin1c sh -exc "git clone https://github.com/b4tman/webpub1c /home/admin1c/webpub1c && cd /home/admin1c/webpub1c && virtualenv venv && . venv/bin/activate && pip install -r requirements.txt"
|
|
sed -i "s%apache_config:.*\$%apache_config: /etc/apache2/conf-available/1c.conf%" /home/admin1c/webpub1c/webpub1c.yml
|
|
mkdir -p /var/www-1c/vrd
|
|
mkdir -p /var/www-1c/pub
|
|
chown admin1c:www-data /var/www-1c/vrd
|
|
chown admin1c:www-data /var/www-1c/pub
|
|
chown admin1c:root /etc/apache2/conf-available/1c.conf
|
|
sed -i "s%vrd_path:.*\$%vrd_path: /var/www-1c/vrd%" /home/admin1c/webpub1c/webpub1c.yml
|
|
sed -i "s%dir_path:.*\$%dir_path: /var/www-1c/pub%" /home/admin1c/webpub1c/webpub1c.yml
|
|
|
|
# --- install opt tools ---
|
|
- |
|
|
set -x
|
|
snap install ripgrep --classic
|
|
snap install lsd
|
|
snap install yq
|
|
snap install jq
|
|
snap install nvim --classic
|
|
apt-get install -y bat fd-find
|
|
echo "alias bat=batcat" >> /home/admin1c/.bashrc
|
|
|
|
# --- install onescript ---
|
|
- |
|
|
set -x
|
|
apt-get install -y mono-runtime libmono-i18n4.0-all
|
|
curl -SLo /tmp/onescript-engine.deb https://github.com/EvilBeaver/OneScript/releases/download/v1.8.0/onescript-engine_1.8.0_all.deb
|
|
dpkg -i /tmp/onescript-engine.deb
|
|
|
|
# --- install wsdd ---
|
|
#- |
|
|
# set -x
|
|
# apt-key adv --fetch-keys https://pkg.ltec.ch/public/conf/ltec-ag.gpg.key
|
|
# echo "deb https://pkg.ltec.ch/public/ $(lsb_release -cs) main" >> /etc/apt/sources.list.d/wsdd.list
|
|
# apt-get update
|
|
# apt-get install -y wsdd
|
|
# systemctl enable wsdd.service --now
|
|
|
|
# --- final ---
|
|
- |
|
|
set -x
|
|
# disable boot to GUI
|
|
systemctl set-default multi-user.target
|
|
# remove default user folder
|
|
rm -rf /home/ubuntu
|
|
echo -- done! ---
|
|
|