Claude
2210dd4bed
Utilities (8 modules): - mealie: recipe manager, port 9925 - actualbudget: personal finance, port 5006 - traccar: GPS tracking, ports 8082 + 5000-5150 device protocols - fmd: Android FindMyDevice server, random admin password, port 8084 - ddclient: dynamic DNS, config template, default start=n - wg-easy: WireGuard VPN+UI, auto-detects public IP, random password - meshcentral: remote device management, hostname prompt, ports 4430+4433 - magicmirror: smart mirror, 1-3 instances, MMM-* module auto-clone Cameras (2 modules): - frigate: AI NVR, auto-enables /dev/dri, starter config.yml, default start=n - frigate-notify: Frigate push alerts, auto-detects local Frigate+ntfy, no web UI https://claude.ai/code/session_01Y4dMKtkqkpvmgDKoRdzhTG
117 lines
3.8 KiB
Bash
117 lines
3.8 KiB
Bash
#!/bin/bash
|
|
# services/meshcentral.sh — Self-hosted remote device management server (MeshCentral).
|
|
# Part of the modular post-install system (sourced by setup.sh).
|
|
#
|
|
# Ported from ubuntu-post-install-24.04-crowdsec.sh (# ---- MESHCENTRAL SERVER ----).
|
|
# Own ~/docker/meshcentral/ with a standalone docker-compose.yml + .env.
|
|
# HTTPS on port 4430, agent listener on 4433. First visit: create admin account.
|
|
|
|
register_service meshcentral utilities "Self-hosted remote device management server (MeshCentral)" 4430
|
|
|
|
install_meshcentral() {
|
|
require_docker || return 1
|
|
|
|
local MC_DIR="$DOCKER_DIR/meshcentral"
|
|
|
|
if [ "$DRY_RUN" = true ]; then
|
|
echo "[DRY-RUN] MeshCentral would:"
|
|
echo " - Create $MC_DIR with docker-compose.yml + .env (data/ files/ backups/)"
|
|
echo " - Prompt for hostname (domain or IP for agent connections)"
|
|
echo " - Expose port 4430 (HTTPS web) and 4433 (agent)"
|
|
echo " - Offer a Caddy reverse proxy and to start the container"
|
|
return 0
|
|
fi
|
|
|
|
local MC_HOSTNAME=""
|
|
prompt_text "MeshCentral hostname (domain or IP) [localhost]:" "localhost" MC_HOSTNAME
|
|
MC_HOSTNAME="${MC_HOSTNAME:-localhost}"
|
|
|
|
mkdir -p "$MC_DIR"
|
|
ensure_docker_dir_ownership "$MC_DIR"
|
|
cd "$MC_DIR" || return 1
|
|
|
|
cat > docker-compose.yml << 'MC_COMPOSE'
|
|
name: meshcentral
|
|
|
|
services:
|
|
meshcentral:
|
|
image: ghcr.io/ylianst/meshcentral:latest
|
|
container_name: meshcentral
|
|
hostname: meshcentral
|
|
restart: unless-stopped
|
|
environment:
|
|
- NODE_ENV=production
|
|
- HOSTNAME=${MC_HOSTNAME:-localhost}
|
|
- REVERSE_PROXY=${MC_REVERSE_PROXY:-false}
|
|
- REVERSE_PROXY_TLS_PORT=${MC_TLS_PORT:-443}
|
|
- IFRAME=false
|
|
- ALLOW_NEW_ACCOUNTS=true
|
|
- WEBRTC=true
|
|
volumes:
|
|
- ./data:/opt/meshcentral/meshcentral-data
|
|
- ./files:/opt/meshcentral/meshcentral-files
|
|
- ./backups:/opt/meshcentral/meshcentral-backups
|
|
ports:
|
|
- "4430:443"
|
|
- "4433:4433"
|
|
MC_COMPOSE
|
|
|
|
cat > .env << MC_ENV
|
|
MC_HOSTNAME=$MC_HOSTNAME
|
|
MC_REVERSE_PROXY=false
|
|
MC_TLS_PORT=443
|
|
MC_ENV
|
|
|
|
mkdir -p data files backups
|
|
chown -R "$ACTUAL_USER:$ACTUAL_USER" "$MC_DIR"
|
|
log_success "MeshCentral configured at $MC_DIR"
|
|
|
|
configure_caddy_for_service "MeshCentral" "4430" "mesh"
|
|
|
|
write_readme "$MC_DIR" << MD
|
|
# MeshCentral
|
|
|
|
Self-hosted remote device management — remotely access, manage, and monitor
|
|
all your computers from a single web interface. Install agents on each device.
|
|
|
|
- Web UI: https://localhost:4430 (self-signed cert on first launch)
|
|
- Agent listener: port 4433 (devices connect here — forward this port if remote)
|
|
- Hostname: \`$MC_HOSTNAME\` (update \`MC_HOSTNAME\` in .env if it changes)
|
|
- App data: \`data/\`, \`files/\`, \`backups/\`
|
|
|
|
## Manage
|
|
\`\`\`bash
|
|
cd $MC_DIR
|
|
docker compose up -d # start
|
|
docker compose down # stop
|
|
docker compose logs -f # logs
|
|
docker compose pull && docker compose up -d # update
|
|
\`\`\`
|
|
|
|
## First launch
|
|
1. Open https://localhost:4430 (accept the self-signed cert warning)
|
|
2. Create your admin account
|
|
3. Go to "My Devices" → "+ Add Device" → download the agent for each OS
|
|
4. Install the agent on every computer you want to manage
|
|
|
|
## Remote access
|
|
For devices outside your LAN to connect:
|
|
- Forward **TCP port 4433** on your router to this server
|
|
- Set \`MC_HOSTNAME\` in \`.env\` to your public domain/IP, then restart
|
|
|
|
## Docs
|
|
https://meshcentral.com/docs/
|
|
MD
|
|
|
|
local START_MC=""
|
|
prompt_yn "Start MeshCentral now? (y/n):" "y" START_MC
|
|
if [ "$START_MC" = "y" ] || [ "$START_MC" = "Y" ]; then
|
|
docker compose up -d && log_success "MeshCentral started" || log_warning "Failed to start — check: docker compose logs"
|
|
fi
|
|
|
|
echo ""
|
|
echo " Access at: https://localhost:4430 (accept self-signed cert)"
|
|
echo " First visit: create your admin account"
|
|
echo ""
|
|
}
|