Spotter-VM/50-pandora.sh

113 lines
4.4 KiB
Bash

#!/bin/bash
# Add pandora repository
echo "deb http://ppa.launchpad.net/j/pandora/ubuntu zesty main" > /etc/apt/sources.list.d/pandora.list
apt-key add - <<EOF
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1
mI0ESXYhEgEEALl9jDTdmgpApPbjN+7b85dC92HisPUp56ifEkKJOBj0X5HhRqxs
Wjx/zlP4/XJGrHnxJyrdPxjSwAXz7bNdeggkN4JWdusTkr5GOXvggQnng0X7f/rX
oJwoEGtYOCODLPs6PC0qjh5yPzJVeiRsKUOZ7YVNnwNwdfS4D8RZvtCrABEBAAG0
FExhdW5jaHBhZCBQUEEgZm9yIGpeiLYEEwECACAFAkl2IRICGwMGCwkIBwMCBBUC
CAMEFgIDAQIeAQIXgAAKCRAohRM8AZde82FfA/9OB/64/YLaCpizHZ8f6DK3rGgF
e6mX3rFK8yOKGGL06316VhDzfzMiZSauUZ0t+lKHR/KZYeSaFwEoUoblTG/s4IIo
9aBMHWhVXJW6eifKUmTGqEn2/0UxoWQq2C3F6njMkCaP+ALOD5uzaSYGdjqAUAwS
pAAGSEQ4uz6bYSeM4Q==
=SM2a
-----END PGP PUBLIC KEY BLOCK-----
EOF
# Install packages
apt-get -y update
apt-get -y --no-install-recommends install gpac poppler-utils rabbitmq-server python3-setuptools python3-pip virtualenv python3-virtualenv python3-pil python3-numpy python3-psycopg2 python3-pyinotify python3-simplejson python3-lxml python3-html5lib python3-ox oxframe ffmpeg mkvtoolnix youtube-dl
# python3-dev imagemagick
# Clone git repositories
git clone --depth 1 https://git.0x2620.org/pandora.git /srv/pandora
git clone --depth 1 https://git.0x2620.org/oxjs.git /srv/pandora/static/oxjs
git clone --depth 1 https://git.0x2620.org/oxtimelines.git /srv/pandora/src/oxtimelines
git clone --depth 1 https://git.0x2620.org/python-ox.git /srv/pandora/src/python-ox
# Create python virtualenv
virtualenv --system-site-packages -p /usr/bin/python3 /srv/pandora
cd /srv/pandora/src/oxtimelines && /srv/pandora/bin/python setup.py develop
cd /srv/pandora/src/python-ox && /srv/pandora/bin/python setup.py develop
/srv/pandora/bin/pip install -r /srv/pandora/requirements.txt
# Create PostgreSQL user and database
export PANDORA_PWD=$(head -c 260 /dev/urandom | tr -cd '[:alnum:]' | head -c 26)
cat <<EOF >/tmp/pandora-createdb.sql
CREATE ROLE pandora NOSUPERUSER NOCREATEDB NOCREATEROLE NOINHERIT LOGIN ENCRYPTED PASSWORD '${PANDORA_PWD}';
CREATE DATABASE pandora;
REVOKE ALL ON DATABASE pandora FROM public;
ALTER DATABASE pandora OWNER TO pandora;
\c pandora;
CREATE EXTENSION pg_trgm;
EOF
sudo -u postgres psql -f /tmp/pandora-createdb.sql
rm -f /tmp/pandora-createdb.sql
# Configure RabbitMQ
export PANDORA_RABBIT_PWD=$(head -c 260 /dev/urandom | tr -cd '[:alnum:]' | head -c 26)
rabbitmqctl add_user pandora ${PANDORA_RABBIT_PWD}
rabbitmqctl add_vhost /pandora
rabbitmqctl set_permissions -p /pandora pandora ".*" ".*" ".*"
export PANDORA_BROKER_URL="amqp://pandora:${PANDORA_RABBIT_PWD}@localhost:5672//pandora"
# Configure Pandora
mkdir /srv/pandora/data
cp /srv/pandora/pandora/config.pandora.jsonc /srv/pandora/pandora/config.jsonc
sed 's/127.0.0.1/0.0.0.0/' /srv/pandora/pandora/gunicorn_config.py.in >/srv/pandora/pandora/gunicorn_config.py
cat <<EOF >/srv/pandora/pandora/local_settings.py
DATABASES = {
'default': {
'NAME': 'pandora',
'ENGINE': 'django.db.backends.postgresql_psycopg2',
'USER': 'pandora',
'PASSWORD': '${PANDORA_PWD}',
}
}
DB_GIN_TRGM = True
BROKER_URL = '${PANDORA_BROKER_URL}'
XACCELREDIRECT = True
MEDIA_URL = '/pandora/data/'
STATIC_URL = '/pandora/static/'
WEBSOCKET = True
WEBSOCKET_ADDRESS = "0.0.0.0"
DEBUG = False
TEMPLATE_DEBUG = DEBUG
JSON_DEBUG = False
EOF
sed -i "s|url(r'^|url(r'^pandora/|g" /srv/pandora/pandora/urls.py
sed -i 's|href="/|href="/pandora/|g' /srv/pandora/pandora/templates/*.html
sed -i 's|src="/|src="/pandora/|g' /srv/pandora/pandora/templates/*.html
sed -i "s|build_absolute_uri('/|build_absolute_uri('/pandora/|g" ./item/views.py ./item/tasks.py ./archive/views.py ./user/views.py ./app/views.py ./text/views.py
# Create OS user
adduser --system --group --home /srv/pandora --shell /bin/false pandora
chown -R pandora:pandora /srv/pandora
# Populate database
sudo -u pandora /srv/pandora/pandora/manage.py init_db
# Install systemd services
cp /srv/pandora/etc/systemd/system/*.service /etc/systemd/system/
cp /srv/pandora/etc/tmpfiles.d/pandora.conf /etc/tmpfiles.d/
systemd-tmpfiles --create /etc/tmpfiles.d/pandora.conf
systemctl daemon-reload
# Start services
for SERVICE in "pandora pandora-tasks pandora-encoding pandora-cron pandora-websocketd"; do
systemctl enable ${SERVICE}
systemctl start ${SERVICE}
done
# TODO: LXC
# TODO: nginx configuration