Update 'Installer.sh'
This commit is contained in:
parent
ebc858227f
commit
88b1a1c26d
198
Installer.sh
198
Installer.sh
@ -4,21 +4,21 @@
|
|||||||
# Static Vars #
|
# Static Vars #
|
||||||
##---------------##
|
##---------------##
|
||||||
|
|
||||||
#APTMODE="debconf-apt-progress -- apt"
|
###DEBIAN###
|
||||||
#PKGM="$APTMODE"
|
APTMODE="debconf-apt-progress -- apt"
|
||||||
#PKGUD="$PKGM update"
|
PKGM="$APTMODE"
|
||||||
#PKGUP="$PKGM upgrade -y"
|
PKGUD="$PKGM update"
|
||||||
#PKGI="${PKGM} install -y"
|
PKGUP="$PKGM upgrade -y"
|
||||||
#PKRM="$PKGM remove --purge -y"
|
PKGI="${PKGM} install -y"
|
||||||
#PKARM="$PKGM autoremove -y"
|
###DEBIAN###
|
||||||
|
|
||||||
|
alias pihole="/usr/local/bin/pihole"
|
||||||
REPO=Pi-Hole
|
REPO=Pi-Hole
|
||||||
BRANCH=main
|
BRANCH=main
|
||||||
GIT=https://git.ictcorpnet.com/b.waal/$REPO/raw
|
GIT=https://git.ictcorpnet.com/b.waal/$REPO/raw
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
https://git.ictcorpnet.com/b.waal/Pi-Hole/raw/branch/main
|
|
||||||
|
|
||||||
##-----------##
|
##-----------##
|
||||||
# Check OS #
|
# Check OS #
|
||||||
##-----------##
|
##-----------##
|
||||||
@ -26,12 +26,184 @@ https://git.ictcorpnet.com/b.waal/Pi-Hole/raw/branch/main
|
|||||||
wget $GIT/$BRANCH/Config/OScheck.sh -O /tmp/OScheck.sh
|
wget $GIT/$BRANCH/Config/OScheck.sh -O /tmp/OScheck.sh
|
||||||
source /tmp/OScheck.sh
|
source /tmp/OScheck.sh
|
||||||
|
|
||||||
echo $dist
|
|
||||||
|
##----------##
|
||||||
|
# Menu #
|
||||||
|
##----------##
|
||||||
|
|
||||||
|
if [[ $dist == "Alpine" ]]; then
|
||||||
|
if (whiptail --title "Setup" --yesno "Use an APT-Cacher?" 8 78); then
|
||||||
|
CACHE=$(whiptail --inputbox "What is the IP address for APT-Cacher?" 8 78 192.168.1.102 --title "Setup" 3>&1 1>&2 2>&3)
|
||||||
|
echo "http://XXX.XXX.XXX.XXX/alpine/v3.18/main" > /etc/apk/repositories
|
||||||
|
echo "http://XXX.XXX.XXX.XXX/alpine/v3.18/community" >> /etc/apk/repositories
|
||||||
|
echo "http://XXX.XXX.XXX.XXX/alpine/edge/testing/" >> /etc/apk/repositories
|
||||||
|
sed -i "s/XXX.XXX.XXX.XXX/$CACHE/g" /etc/apk/repositories
|
||||||
|
else
|
||||||
|
echo ""
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
if [[ $dist == "Debian" ]]; then
|
||||||
|
if (whiptail --title "Setup" --yesno "Use an APT-Cacher?" 8 78); then
|
||||||
|
CACHE=$(whiptail --inputbox "What is the IP address for APT-Cacher?" 8 78 192.168.1.102 --title "Setup" 3>&1 1>&2 2>&3)
|
||||||
|
echo 'Acquire::http::Proxy "http://XXX.XXX.XXX.XXX:80";'> /etc/apt/apt.conf.d/01prox
|
||||||
|
sed -i "s/XXX.XXX.XXX.XXX/$CACHE/g" /etc/apt/apt.conf.d/01prox
|
||||||
|
echo 'APT::Install-Recommends "false";' >> /etc/apt/apt.conf.d/01Recommends
|
||||||
|
echo 'APT::Install-Suggests "false";' >> /etc/apt/apt.conf.d/01Suggests
|
||||||
|
else
|
||||||
|
echo ""
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
if (whiptail --title "Setup" --yesno "Install Unbound?" 8 78); then
|
||||||
|
UNBOUND=true
|
||||||
|
else
|
||||||
|
UNBOUND=false
|
||||||
|
fi
|
||||||
|
if (whiptail --title "Setup" --yesno "Install UFW?" 8 78); then
|
||||||
|
UFW=true
|
||||||
|
else
|
||||||
|
UFW=false
|
||||||
|
fi
|
||||||
|
if [[ $dist == "Debian" ]]; then
|
||||||
|
if (whiptail --title "Setup" --yesno "Unattended-Upgrades" 8 78); then
|
||||||
|
UNATTENDED=true
|
||||||
|
else
|
||||||
|
UNATTENDED=false
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
if (whiptail --title "Setup" --yesno "Disable IPv6?" 8 78); then
|
||||||
|
IPv6=false
|
||||||
|
else
|
||||||
|
IPv6=true
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
##-----------##
|
||||||
|
# Updater #
|
||||||
|
##-----------##
|
||||||
|
|
||||||
|
if [[ $dist == "Alpine" ]]; then
|
||||||
|
apk update
|
||||||
|
apk upgrade
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ $dist == "Debian" ]]; then
|
||||||
|
apt update
|
||||||
|
apt list --upgradeable 2>/dev/null | cut -d/ -f1 | grep -v Listing >> /tmp/install.list
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
##--------------##
|
||||||
|
# Pre-Config #
|
||||||
|
##--------------##
|
||||||
|
|
||||||
|
mkdir -p /etc/pihole
|
||||||
|
wget $GIT/$BRANCH/Config/Pihole/pihole-FTL.conf -O /etc/pihole/pihole-FTL.conf
|
||||||
|
wget $GIT/$BRANCH/Config/Pihole/setupVars.conf -O /etc/pihole/setupVars.conf
|
||||||
|
|
||||||
|
if [[ $UNBOUND == "false" ]]; then
|
||||||
|
sed -i 's/INSTALL_UNBOUND=0/INSTALL_UNBOUND=1/g' /etc/pihole/setupVars.conf
|
||||||
|
sed -i 's/PIHOLE_DNS_1=127.0.0.1#5335/PIHOLE_DNS_1=1.1.1.1/g' /etc/pihole/setupVars.conf
|
||||||
|
fi
|
||||||
|
if [[ $IPv6 == "true" ]]; then
|
||||||
|
sed -i 's/RESOLVE_IPV6=no/RESOLVE_IPV6=yes/g' /etc/pihole/pihole-FTL.conf
|
||||||
|
else
|
||||||
|
if [[ $dist == "Alpine" ]]; then
|
||||||
|
wget $GIT/$BRANCH/Config/Alpine/Alpine-local.conf -O /etc/sysctl.d/local.conf
|
||||||
|
sysctl -p
|
||||||
|
fi
|
||||||
|
if [[ $dist == "Debian" ]]; then
|
||||||
|
echo "" >> /etc/sysctl.conf
|
||||||
|
echo "#Disable IPv6" >> /etc/sysctl.conf
|
||||||
|
echo "net.ipv6.conf.all.disable_ipv6 = 1" >> /etc/sysctl.conf
|
||||||
|
echo "net.ipv6.conf.default.disable_ipv6 = 1" >> /etc/sysctl.conf
|
||||||
|
echo "net.ipv6.conf.lo.disable_ipv6 = 1" >> /etc/sysctl.conf
|
||||||
|
sysctl -p
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
##-------------##
|
||||||
|
# Installer #
|
||||||
|
##-------------##
|
||||||
|
|
||||||
|
if [[ $dist == "Alpine" ]]; then
|
||||||
|
apk add dialog git newt procps dhcpcd openrc ncurses newt curl bind-tools nmap-ncat psmisc sudo unzip libidn nettle libcap openresolv iproute2-ss jq
|
||||||
|
apk add --no-cache --upgrade grep
|
||||||
|
if [[ $UFW == "true" ]]; then
|
||||||
|
apk add ufw
|
||||||
|
fi
|
||||||
|
git clone https://gitlab.com/yvelon/pi-hole /tmp/pi-hole
|
||||||
|
bash /tmp/pi-hole/automated\ install/basic-install.sh --unattended
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ $dist == "Debian" ]]; then
|
||||||
|
echo "git iproute2 dialog ca-certificates cron curl iputils-ping psmisc sudo unzip idn2 libcap2-bin dns-root-data libcap2 netcat-openbsd procps jq" /tmp/install.list
|
||||||
|
if [[ $UFW == "true" ]]; then
|
||||||
|
echo "ufw" >> /tmp/install.list
|
||||||
|
fi
|
||||||
|
if [[ $UNATTENDED == "true" ]]; then
|
||||||
|
echo "unattended-upgrades apt-listchanges" >> /tmp/install.list
|
||||||
|
fi
|
||||||
|
xargs < /tmp/install.list xargs apt install -y
|
||||||
|
git clone --depth 1 https://github.com/pi-hole/pi-hole.git /tmp/pi-hole
|
||||||
|
bash /tmp/pi-hole/automated\ install/basic-install.sh --unattended
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
##---------------##
|
##---------------##
|
||||||
# Dependencies #
|
# Configuring #
|
||||||
##---------------##
|
##---------------##
|
||||||
|
|
||||||
#$PKGI curl wget whiptail
|
if [[ $UNBOUND == "true" ]]; then
|
||||||
apk update && apk add curl wget newt
|
if [[ $dist == "Alpine" ]]; then
|
||||||
|
service unbound stop && service pihole-FTL stop
|
||||||
|
mkdir -p /etc/unbound/unbound.conf.d
|
||||||
|
rm /etc/unbound/unbound.conf
|
||||||
|
wget $GIT/$BRANCH/Config/Unbound/unbound.conf -O /etc/unbound/unbound.conf
|
||||||
|
wget $GIT/$BRANCH/Config/Unbound/pi-hole.conf -O /etc/unbound/unbound.conf.d/pi-hole.conf
|
||||||
|
wget $GIT/$BRANCH/Config/Unbound/privacy.conf -O /etc/unbound/unbound.conf.d/privacy.conf
|
||||||
|
wget $GIT/$BRANCH/Config/Unbound/qname-minimisation.conf -O /etc/unbound/unbound.conf.d/qname-minimisation.conf
|
||||||
|
service unbound start && service pihole-FTL start
|
||||||
|
pihole restartdns
|
||||||
|
fi
|
||||||
|
if [[ $dist == "Debian" ]]; then
|
||||||
|
systemctl stop unbound && systemctl stop pihole-FTL
|
||||||
|
wget https://www.internic.net/domain/named.root -qO- | sudo tee /var/lib/unbound/root.hints
|
||||||
|
wget $GIT/$BRANCH/Config/Unbound/pi-hole.conf -O /etc/unbound/unbound.conf.d/pi-hole.conf
|
||||||
|
wget $GIT/$BRANCH/Config/Unbound/privacy.conf -O /etc/unbound/unbound.conf.d/privacy.conf
|
||||||
|
wget $GIT/$BRANCH/Config/Unbound/qname-minimisation.conf -O /etc/unbound/unbound.conf.d/qname-minimisation.conf
|
||||||
|
systemctl start unbound && systemctl start pihole-FTL
|
||||||
|
pihole restartdns
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ $UFW == "true" ]]; then
|
||||||
|
if [[ $IPv6 == "false" ]]; then
|
||||||
|
sed -i 's/IPV6=yes/IPV6=no/g' /etc/default/ufw
|
||||||
|
ufw allow 80/tcp
|
||||||
|
ufw allow 53/tcp
|
||||||
|
ufw limit 22/tcp
|
||||||
|
echo "y" | ufw enable
|
||||||
|
fi
|
||||||
|
if [[ $IPv6 == "true" ]]; then
|
||||||
|
ufw allow 80/tcp
|
||||||
|
ufw allow 53/tcp
|
||||||
|
ufw limit 22/tcp
|
||||||
|
echo "y" | ufw enable
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ $UNATTENDED == "true" ]]; then
|
||||||
|
wget https://git.ictcorpnet.com/b.waal/PiAutomation/raw/branch/main/Unattended-Security-Updates/20auto-upgrades -O /etc/apt/apt.conf.d/20auto-upgrades
|
||||||
|
wget https://git.ictcorpnet.com/b.waal/PiAutomation/raw/branch/main/Unattended-Security-Updates/50debian-unattended-upgrades -O /etc/apt/apt.conf.d/50unattended-upgrades
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
##-------------##
|
||||||
|
# Finishing #
|
||||||
|
##-------------##
|
||||||
|
|
||||||
|
ln -s /usr/local/bin/pihole /usr/bin/pihole
|
||||||
|
whiptail --title "Done!" --msgbox "Pihole is now available on http://LXC.IP.ADDRESS.HERE/admin\n\nPress OK to continue." 10 78
|
||||||
|
exit
|
||||||
Loading…
x
Reference in New Issue
Block a user