Files
Tailscale-scripts/Linux/deploy-vpr.sh
2023-11-13 09:47:57 +00:00

62 lines
2.4 KiB
Bash

#!/bin/sh
echo "*** PURPLE LINODE VPR DEPLOYMENT SCRIPT ***"
###############################################################################################
#
# ******
# *...../ / ******
# ************** *****/ *****/*****/***/*************/ ****** /**********
# ******/..*****/ *****/ *****/********//******/ ,*****/******,***** ,*****/
# *****/ ***** *****/ *****/*****/ *****/ /**************************
# *******//*****/ *************/*****/ *********************/*******./*/* ())
# ************* ******/*****/*****/ *****/******/. ****** ********** (()))
# *****/ *****/ ())
# *****/ *****/
#
#
###############################################################################################
# NOTICE: LINUX SPECIFIC SCRIPT
###############################################################################################
DIR01="/opt/PurpleComputing/Tailscale"
if [ -d "$DIR01" ]; then
echo "PURPLE LINODE VPR DEPLOYMENT SCRIPT has been run before"
echo "Script Quit"
else
echo "PURPLE LINODE VPR DEPLOYMENT SCRIPT has not been run before"
hostname secure-vpr
echo INSTALLING TAILSCALE
curl -fsSL https://tailscale.com/install.sh | sh
echo TAILSCALE INSTALLER COMPLETED
sleep 2
echo Continuing...
echo ADDING IP ROUTING RULES
echo 'net.ipv4.ip_forward = 1' | sudo tee -a /etc/sysctl.conf
echo 'net.ipv6.conf.all.forwarding = 1' | sudo tee -a /etc/sysctl.conf
sudo sysctl -p /etc/sysctl.conf
echo IP RULES ADDED
echo
echo Please enter Tailscale AUTH key":"
echo For more info visit "https://tailscale.com/kb/1085/auth-keys/"":"
read TSAUTHKEY
tailscale up --authkey $TSAUTHKEY --advertise-exit-node --hostname "secure-vpr"
mkdir -p "/opt/PurpleComputing/"
mkdir -p "/opt/PurpleComputing/Tailscale"
echo "Tailscale deployed successfully!"
echo "Please enable as an Exit Node in Tailscale admin under machines, edit route settings"
fi
echo
echo "Enabling Auto Update:"
crontab <<EOF
0 5 * * * /usr/bin/tailscale update --yes
EOF
echo DONE
echo
echo "Enabling Firewall:"
ufw allow in on tailscale0
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw enable
sudo ufw status
echo DONE