|
|
@@ -1,291 +0,0 @@
|
|
|
-#!/bin/bash
|
|
|
-
|
|
|
-set -e
|
|
|
-
|
|
|
-cat << "EOF"
|
|
|
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
|
|
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
|
|
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
|
|
- ______ ______ ______ __ __ __ ______ __
|
|
|
- /\ ___\ /\ == \ /\ __ \ /\ \ / / /\ \ /\__ _\ /\ \
|
|
|
- \ \ \__ \ \ \ __< \ \ __ \ \ \ \'/ \ \ \ \/_/\ \/ \ \ \____
|
|
|
- \ \_____\ \ \_\ \_\ \ \_\ \_\ \ \__| \ \_\ \ \_\ \ \_____\
|
|
|
- \/_____/ \/_/ /_/ \/_/\/_/ \/_/ \/_/ \/_/ \/_____/
|
|
|
-
|
|
|
- __ __ ______ ______ __ __ ______ __ __ ______ ______
|
|
|
-/\ "-.\ \ /\ ___\ /\__ _\ /\ "-./ \ /\ __ \ /\ \/ / /\ ___\ /\ == \
|
|
|
-\ \ \-. \ \ \ __\ \/_/\ \/ \ \ \-./\ \ \ \ __ \ \ \ _"-. \ \ __\ \ \ __<
|
|
|
- \ \_\\"\_\ \ \_____\ \ \_\ \ \_\ \ \_\ \ \_\ \_\ \ \_\ \_\ \ \_____\ \ \_\ \_\
|
|
|
- \/_/ \/_/ \/_____/ \/_/ \/_/ \/_/ \/_/\/_/ \/_/\/_/ \/_____/ \/_/ /_/
|
|
|
-
|
|
|
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
|
|
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
|
|
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
|
|
-EOF
|
|
|
-
|
|
|
-NETMAKER_BASE_DOMAIN=nm.$(curl -s ifconfig.me | tr . -).nip.io
|
|
|
-COREDNS_IP=$(ip route get 1 | sed -n 's/^.*src \([0-9.]*\) .*$/\1/p')
|
|
|
-SERVER_PUBLIC_IP=$(curl -s ifconfig.me)
|
|
|
-MASTER_KEY=$(tr -dc A-Za-z0-9 </dev/urandom | head -c 30 ; echo '')
|
|
|
-EMAIL="$(echo $RANDOM | md5sum | head -c 32)@email.com"
|
|
|
-
|
|
|
-echo "Default Base Domain: $NETMAKER_BASE_DOMAIN"
|
|
|
-echo "To Override, add a Wildcard (*.netmaker.example.com) DNS record pointing to $SERVER_PUBLIC_IP"
|
|
|
-echo "Or, add three DNS records pointing to $SERVER_PUBLIC_IP for the following (Replacing 'netmaker.example.com' with the domain of your choice):"
|
|
|
-echo " dashboard.netmaker.example.com"
|
|
|
-echo " api.netmaker.example.com"
|
|
|
-echo "-----------------------------------------------------"
|
|
|
-read -p "Domain (Hit 'enter' to use $NETMAKER_BASE_DOMAIN): " domain
|
|
|
-read -p "Contact Email: " email
|
|
|
-
|
|
|
-if [ -n "$domain" ]; then
|
|
|
- NETMAKER_BASE_DOMAIN=$domain
|
|
|
-fi
|
|
|
-if [ -n "$email" ]; then
|
|
|
- EMAIL=$email
|
|
|
-fi
|
|
|
-
|
|
|
-while true; do
|
|
|
- read -p "Configure a default network automatically (y/n)? " yn
|
|
|
- case $yn in
|
|
|
- [Yy]* ) MESH_SETUP="true"; break;;
|
|
|
- [Nn]* ) MESH_SETUP="false"; break;;
|
|
|
- * ) echo "Please answer yes or no.";;
|
|
|
- esac
|
|
|
-done
|
|
|
-
|
|
|
-while true; do
|
|
|
- read -p "Configure a VPN gateway automatically (y/n)? " yn
|
|
|
- case $yn in
|
|
|
- [Yy]* ) VPN_SETUP="true"; break;;
|
|
|
- [Nn]* ) VPN_SETUP="false"; break;;
|
|
|
- * ) echo "Please answer yes or no.";;
|
|
|
- esac
|
|
|
-done
|
|
|
-
|
|
|
-if [ "${VPN_SETUP}" == "true" ]; then
|
|
|
-while :; do
|
|
|
- read -ep '# of VPN clients to configure by default: ' num_clients
|
|
|
- [[ $num_clients =~ ^[[:digit:]]+$ ]] || continue
|
|
|
- (( ( (num_clients=(10#$num_clients)) <= 200 ) && num_clients >= 0 )) || continue
|
|
|
- break
|
|
|
-done
|
|
|
-fi
|
|
|
-
|
|
|
-if [ -n "$num_clients" ]; then
|
|
|
- NUM_CLIENTS=$num_clients
|
|
|
-fi
|
|
|
-
|
|
|
-while true; do
|
|
|
- read -p "Override master key ($MASTER_KEY) (y/n)? " yn
|
|
|
- case $yn in
|
|
|
- [Yy]* ) override="true"; break;;
|
|
|
- [Nn]* ) override="false"; break;;
|
|
|
- * ) echo "Please answer yes or no.";;
|
|
|
- esac
|
|
|
-done
|
|
|
-
|
|
|
-if [ "${override}" == "true" ]; then
|
|
|
-while :; do
|
|
|
- read -ep 'New Master Key: ' key
|
|
|
- result="$(cracklib-check <<<"$key")"
|
|
|
- okay="$(awk -F': ' '{ print $2}' <<<"$result")"
|
|
|
- if [[ "$okay" == "OK" ]]
|
|
|
- then
|
|
|
- MASTER_KEY=$key
|
|
|
- break
|
|
|
- else
|
|
|
- echo "Your password was rejected - $result"
|
|
|
- echo "Try again."
|
|
|
- fi
|
|
|
-done
|
|
|
-fi
|
|
|
-
|
|
|
-echo "-----------------------------------------------------------------"
|
|
|
-echo " SETUP ARGUMENTS"
|
|
|
-echo "-----------------------------------------------------------------"
|
|
|
-echo " domain: $NETMAKER_BASE_DOMAIN"
|
|
|
-echo " email: $EMAIL"
|
|
|
-echo " coredns ip: $COREDNS_IP"
|
|
|
-echo " public ip: $SERVER_PUBLIC_IP"
|
|
|
-echo " master key: $MASTER_KEY"
|
|
|
-echo " setup mesh?: $MESH_SETUP"
|
|
|
-echo " setup vpn?: $VPN_SETUP"
|
|
|
-if [ "${VPN_SETUP}" == "true" ]; then
|
|
|
-echo " # clients: $NUM_CLIENTS"
|
|
|
-fi
|
|
|
-
|
|
|
-while true; do
|
|
|
- read -p "Does everything look right (y/n)? " yn
|
|
|
- case $yn in
|
|
|
- [Yy]* ) override="true"; break;;
|
|
|
- [Nn]* ) echo "exiting..."; exit;;
|
|
|
- * ) echo "Please answer yes or no.";;
|
|
|
- esac
|
|
|
-done
|
|
|
-
|
|
|
-
|
|
|
-echo "Beginning installation in 5 seconds..."
|
|
|
-
|
|
|
-sleep 5
|
|
|
-
|
|
|
-
|
|
|
-echo "Setting Caddyfile..."
|
|
|
-
|
|
|
-sed -i "s/NETMAKER_BASE_DOMAIN/$NETMAKER_BASE_DOMAIN/g" /root/Caddyfile
|
|
|
-sed -i "s/YOUR_EMAIL/$EMAIL/g" /root/Caddyfile
|
|
|
-
|
|
|
-echo "Setting docker-compose..."
|
|
|
-
|
|
|
-sed -i "s/NETMAKER_BASE_DOMAIN/$NETMAKER_BASE_DOMAIN/g" /root/docker-compose.yml
|
|
|
-sed -i "s/SERVER_PUBLIC_IP/$SERVER_PUBLIC_IP/g" /root/docker-compose.yml
|
|
|
-sed -i "s/COREDNS_IP/$COREDNS_IP/g" /root/docker-compose.yml
|
|
|
-sed -i "s/REPLACE_MASTER_KEY/$MASTER_KEY/g" /root/docker-compose.yml
|
|
|
-sed -i "s/YOUR_EMAIL/$EMAIL/g" /root/docker-compose.yml
|
|
|
-
|
|
|
-
|
|
|
-echo "Starting containers..."
|
|
|
-
|
|
|
-docker-compose -f /root/docker-compose.yml up -d
|
|
|
-
|
|
|
-sleep 2
|
|
|
-
|
|
|
-setup_mesh() {
|
|
|
-echo "Creating default network (10.101.0.0/16)..."
|
|
|
-
|
|
|
-curl -s -o /dev/null -d '{"addressrange":"10.101.0.0/16","netid":"default"}' -H "Authorization: Bearer $MASTER_KEY" -H 'Content-Type: application/json' localhost:8081/api/networks
|
|
|
-
|
|
|
-sleep 2
|
|
|
-
|
|
|
-echo "Creating default key..."
|
|
|
-
|
|
|
-curlresponse=$(curl -s -d '{"uses":99999,"name":"defaultkey"}' -H "Authorization: Bearer $MASTER_KEY" -H 'Content-Type: application/json' localhost:8081/api/networks/default/keys)
|
|
|
-ACCESS_TOKEN=$(jq -r '.accessstring' <<< ${curlresponse})
|
|
|
-
|
|
|
-sleep 2
|
|
|
-
|
|
|
-echo "Configuring Netmaker server as ingress gateway..."
|
|
|
-
|
|
|
-curlresponse=$(curl -s -H "Authorization: Bearer $MASTER_KEY" -H 'Content-Type: application/json' localhost:8081/api/nodes/default)
|
|
|
-SERVER_ID=$(jq -r '.[0].macaddress' <<< ${curlresponse})
|
|
|
-
|
|
|
-curl -o /dev/null -s -X POST -H "Authorization: Bearer $MASTER_KEY" -H 'Content-Type: application/json' localhost:8081/api/nodes/default/$SERVER_ID/createingress
|
|
|
-
|
|
|
-VPN_ACCESS_TOKEN=$ACCESS_TOKEN
|
|
|
-
|
|
|
-}
|
|
|
-
|
|
|
-mesh_connect_logs() {
|
|
|
-sleep 5
|
|
|
-echo "-----------------------------------------------------------------"
|
|
|
-echo "-----------------------------------------------------------------"
|
|
|
-echo "DEFAULT NETWORK CLIENT INSTALL INSTRUCTIONS:"
|
|
|
-echo "-----------------------------------------------------------------"
|
|
|
-echo "-----------------------------------------------------------------"
|
|
|
-sleep 5
|
|
|
-echo "For Linux and Mac clients, install with the following command:"
|
|
|
-echo "- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -"
|
|
|
-echo "curl -sfL https://raw.githubusercontent.com/gravitl/netmaker/develop/scripts/netclient-install.sh | sudo KEY=$VPN_ACCESS_TOKEN sh -"
|
|
|
-sleep 5
|
|
|
-echo "-----------------------------------------------------------------"
|
|
|
-echo "-----------------------------------------------------------------"
|
|
|
-echo "For Windows clients, perform the following from powershell, as administrator:"
|
|
|
-echo "- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -"
|
|
|
-echo "1. Make sure WireGuardNT is installed - https://download.wireguard.com/windows-client/wireguard-installer.exe"
|
|
|
-echo "2. Download netclient.exe - wget https://github.com/gravitl/netmaker/releases/download/latest/netclient.exe"
|
|
|
-echo "3. Install Netclient - powershell.exe .\\netclient.exe join -t $VPN_ACCESS_TOKEN"
|
|
|
-echo "4. Whitelist C:\ProgramData\Netclient in Windows Defender"
|
|
|
-sleep 5
|
|
|
-echo "-----------------------------------------------------------------"
|
|
|
-echo "-----------------------------------------------------------------"
|
|
|
-echo "For Android and iOS clients, perform the following steps:"
|
|
|
-echo "- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -"
|
|
|
-echo "1. Log into UI at dashboard.$NETMAKER_BASE_DOMAIN"
|
|
|
-echo "2. Navigate to \"EXTERNAL CLIENTS\" tab"
|
|
|
-echo "3. Select the gateway and create clients"
|
|
|
-echo "4. Scan the QR Code from WireGuard app in iOS or Android"
|
|
|
-echo "-----------------------------------------------------------------"
|
|
|
-echo "-----------------------------------------------------------------"
|
|
|
-sleep 5
|
|
|
-}
|
|
|
-
|
|
|
-setup_vpn() {
|
|
|
-echo "Creating vpn network (10.201.0.0/16)..."
|
|
|
-
|
|
|
-curl -s -o /dev/null -d '{"addressrange":"10.201.0.0/16","netid":"vpn","defaultextclientdns":"8.8.8.8"}' -H "Authorization: Bearer $MASTER_KEY" -H 'Content-Type: application/json' localhost:8081/api/networks
|
|
|
-
|
|
|
-sleep 2
|
|
|
-
|
|
|
-echo "Configuring Netmaker server as vpn inlet..."
|
|
|
-
|
|
|
-curlresponse=$(curl -s -H "Authorization: Bearer $MASTER_KEY" -H 'Content-Type: application/json' localhost:8081/api/nodes/vpn)
|
|
|
-SERVER_ID=$(jq -r '.[0].macaddress' <<< ${curlresponse})
|
|
|
-
|
|
|
-curl -s -o /dev/null -X POST -H "Authorization: Bearer $MASTER_KEY" -H 'Content-Type: application/json' localhost:8081/api/nodes/vpn/$SERVER_ID/createingress
|
|
|
-
|
|
|
-echo "Waiting 10 seconds for server to apply configuration..."
|
|
|
-
|
|
|
-sleep 10
|
|
|
-
|
|
|
-echo "Configuring Netmaker server VPN gateway..."
|
|
|
-
|
|
|
-[ -z "$GATEWAY_IFACE" ] && GATEWAY_IFACE=$(ip -4 route ls | grep default | grep -Po '(?<=dev )(\S+)' | grep -v default)
|
|
|
-
|
|
|
-curlresponse=$(curl -s -H "Authorization: Bearer $MASTER_KEY" -H 'Content-Type: application/json' localhost:8081/api/nodes/vpn)
|
|
|
-SERVER_ID=$(jq -r '.[0].macaddress' <<< ${curlresponse})
|
|
|
-
|
|
|
-EGRESS_JSON=$( jq -n \
|
|
|
- --arg gw "$GATEWAY_IFACE" \
|
|
|
- '{ranges: ["0.0.0.0/0"], interface: $gw}' )
|
|
|
-
|
|
|
-curl -s -o /dev/null -X POST -d "$EGRESS_JSON" -H "Authorization: Bearer $MASTER_KEY" -H 'Content-Type: application/json' localhost:8081/api/nodes/vpn/$SERVER_ID/creategateway
|
|
|
-
|
|
|
-echo "Creating client configs..."
|
|
|
-
|
|
|
-for ((a=1; a <= $NUM_CLIENTS; a++))
|
|
|
-do
|
|
|
- CLIENT_JSON=$( jq -n \
|
|
|
- --arg clientid "vpnclient-$a" \
|
|
|
- '{clientid: $clientid}' )
|
|
|
-
|
|
|
- curl -s -o /dev/null -d "$CLIENT_JSON" -H "Authorization: Bearer $MASTER_KEY" -H 'Content-Type: application/json' localhost:8081/api/extclients/vpn/$SERVER_ID
|
|
|
-done
|
|
|
-
|
|
|
-}
|
|
|
-
|
|
|
-vpn_connect_logs() {
|
|
|
-sleep 5
|
|
|
-echo "-----------------------------------------------------------------"
|
|
|
-echo "-----------------------------------------------------------------"
|
|
|
-echo "VPN GATEWAY CLIENT INSTALL INSTRUCTIONS:"
|
|
|
-echo "- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -"
|
|
|
-echo "1. log into dashboard.$NETMAKER_BASE_DOMAIN"
|
|
|
-echo "2. Navigate to \"EXTERNAL CLIENTS\" tab"
|
|
|
-echo "3. Download or scan a client config (vpnclient-x) to the appropriate device"
|
|
|
-echo "4. Follow the steps for your system to configure WireGuard on the appropriate device"
|
|
|
-echo "5. Create and delete clients as necessary. Changes to netmaker server settings require regenerating ext clients."
|
|
|
-echo "-----------------------------------------------------------------"
|
|
|
-echo "-----------------------------------------------------------------"
|
|
|
-sleep 5
|
|
|
-}
|
|
|
-
|
|
|
-if [ "${MESH_SETUP}" != "false" ]; then
|
|
|
- setup_mesh
|
|
|
-fi
|
|
|
-
|
|
|
-if [ "${VPN_SETUP}" == "true" ]; then
|
|
|
- setup_vpn
|
|
|
-fi
|
|
|
-
|
|
|
-if [ "${MESH_SETUP}" != "false" ]; then
|
|
|
- mesh_connect_logs
|
|
|
-fi
|
|
|
-
|
|
|
-if [ "${VPN_SETUP}" == "true" ]; then
|
|
|
- vpn_connect_logs
|
|
|
-fi
|
|
|
-
|
|
|
-echo "Netmaker setup is now complete. You are ready to begin using Netmaker."
|
|
|
-echo "Visit dashboard.$NETMAKER_BASE_DOMAIN to log in"
|
|
|
-
|
|
|
-cp -f /etc/skel/.bashrc /root/.bashrc
|
dcarns