raspiblitz/home.admin/config.scripts/bonus.strfry.sh
2024-09-03 08:36:41 +02:00

118 lines
3.1 KiB
Bash
Executable file

#!/bin/bash
# https://github.com/hoytech/strfry/commits/master/
VERSION="32a367738c6db7430780058c4a6c98b271af73b2"
portTCP=7777
portSSL=7778
# command info
if [ $# -eq 0 ] || [ "$1" = "-h" ] || [ "$1" = "-help" ]; then
echo "config script to switch the strfry nostr relay on or off"
echo "bonus.strfry.sh [on|off]"
echo "installs the version $VERSION"
exit 1
fi
if [ "$1" = "on" ]; then
LIMITS=("strfry soft nofile 1000000" "strfry hard nofile 1000000")
# Loop through each limit
for LIMIT in "${LIMITS[@]}"; do
# Check if the limit already exists
if ! grep -q "$LIMIT" /etc/security/limits.conf; then
echo "$LIMIT" | sudo tee -a /etc/security/limits.conf >/dev/null
echo "Limit added: $LIMIT"
else
echo "Limit already exists: $LIMIT"
fi
done
sudo adduser --system --group --shell /bin/bash --home /home/strfry strfry || exit 1
sudo apt install -y build-essential libyaml-perl libtemplate-perl libregexp-grammars-perl libssl-dev zlib1g-dev liblmdb-dev libflatbuffers-dev libsecp256k1-dev libzstd-dev
cd /home/strfry || exit 1
sudo -u strfry git clone https://github.com/hoytech/strfry.git
cd strfry || exit 1
sudo -u strfry git reset --hard ${VERSION}
sudo -u strfry git submodule update --init
sudo -u strfry make setup-golpe
sudo -u strfry make -j2
sudo mkdir /mnt/hdd/app-storage/strfry-db
sudo chown strfry:strfry /mnt/hdd/app-storage/strfry-db
sudo chmod 755 /mnt/hdd/app-storage/strfry-db
# config
sudo mkdir -p /mnt/hdd/app-data/strfry
sudo chown -R strfry:strfry /mnt/hdd/app-data/strfry
sudo chmod 755 /mnt/hdd/app-data/strfry
sudo -u strfry cp ./strfry.conf /mnt/hdd/app-data/strfry/strfry.conf
# symlink
sudo ln -s /mnt/hdd/app-data/strfry/strfry.conf /etc/strfry.conf
# systemd
echo "# Create a systemd service"
echo "\
[Unit]
Description=strfry relay service
[Service]
User=strfry
ExecStart=/home/strfry/strfry/strfry relay
Restart=on-failure
RestartSec=5
NoNewPrivileges=yes
ProtectSystem=full
LimitCORE=1000000000
[Install]
WantedBy=multi-user.target
" | sudo tee /etc/systemd/system/strfry.service
sudo systemctl enable strfry
source <(/home/admin/_cache.sh get state)
if [ "${state}" == "ready" ]; then
echo "# Starting the strfry.service"
sudo systemctl start strfry
fi
sudo ufw allow ${portTCP} comment 'strfry TCP'
sudo ufw allow ${portSSL} comment 'strfry SSL'
# nginx
# test and reload nginx
sudo nginx -t && sudo systemctl reload nginx
# Tor
/home/admin/config.scripts/tor.onion-service.sh strfry ${portTCP} ${portTCP} ${portSSL} ${portSSL}
# setting value in raspiblitz config
/home/admin/config.scripts/blitz.conf.sh set strfry "on"
exit 0
fi
if [ "$1" = "off" ]; then
sudo systemctl disable --now strfry
sudo rm -f /etc/strfry.conf
sudo rm -f /etc/systemd/system/strfry.service
sudo ufw delete allow ${portTCP}
sudo ufw delete allow ${portSSL}
# Tor
/home/admin/config.scripts/tor.onion-service.sh strfry off
sudo userdel -rf strfry
# setting value in raspiblitz config
/home/admin/config.scripts/blitz.conf.sh set strfry "off"
exit 0
fi