svatantrya
da2124031e
- download_and_install_bitcoincore.sh: - Fix apt install with single-quoted string (was treating all deps as one package) - Add sudo to apt install commands - Fix tar extraction: now finds extracted dir and copies bitcoind/bitcoin-cli to /usr/local/bin - Fix zmqpubrawblock -> zmqpubhashblock (pusher expects hashblock topic) - Fix install check (0 was testing cd, not tar) with explicit extraction check - Handle existing user in adduser - Fix source lib.sh path - download_and_install_bal.sh: - Use curl -sfL (fail on 404, follow redirects) for Gitea download - Add null/empty check after jq download URL extraction - Change certbot --standalone to --nginx (avoids port 80 conflict) - Enable nginx site symlink (was commented out) - Handle existing 'bal' user in adduser - install_tor.sh: - Add sudo to all root-requiring commands (apt, tee, cp, sed, systemctl) - Backup torrc with timestamp before modifying - Add DisableDebuggerAttachment hardening
37 lines
1.2 KiB
Bash
37 lines
1.2 KiB
Bash
#!/bin/bash
|
|
set -euo pipefail
|
|
|
|
sudo apt-get update
|
|
sudo apt-get install -y \
|
|
gpg \
|
|
wget \
|
|
lsb-release
|
|
|
|
ARCH=$(dpkg --print-architecture)
|
|
DISTRO=$(lsb_release -cs)
|
|
|
|
sudo tee /etc/apt/sources.list.d/tor.list > /dev/null <<EOF
|
|
deb [arch=$ARCH signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org $DISTRO main
|
|
deb-src [arch=$ARCH signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org $DISTRO main
|
|
EOF
|
|
|
|
wget -qO- https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | gpg --dearmor | sudo tee /usr/share/keyrings/tor-archive-keyring.gpg >/dev/null
|
|
sudo apt-get update
|
|
sudo apt install -y tor deb.torproject.org-keyring
|
|
|
|
# Backup existing torrc before modifying
|
|
if [ -f /etc/tor/torrc ]; then
|
|
sudo cp /etc/tor/torrc /etc/tor/torrc.bak.$(date +%Y%m%d%H%M%S)
|
|
fi
|
|
sudo sed -i '/^ControlPort/d; /^CookieAuthentication/d; /^CookieAuthFileGroupReadable/d' /etc/tor/torrc
|
|
|
|
sudo tee -a /etc/tor/torrc > /dev/null << EOF
|
|
|
|
# Added by script ($(date))
|
|
ControlPort 127.0.0.1:9051
|
|
CookieAuthentication 1
|
|
CookieAuthFileGroupReadable 1
|
|
DisableDebuggerAttachment 1
|
|
EOF
|
|
sudo systemctl restart tor
|