ubuntu-post-install/CHANGELOG.md

Changelog

All notable changes to this project. Versions follow MAJOR.MINOR.PATCH. The project is pre-1.0 while the modular system reaches parity with the monolithic ubuntu-post-install-*.sh scripts.

[0.9.7] - 2026-06-03

Added

• services/caddy.sh (homelab) — Caddy reverse proxy + automatic HTTPS, own ~/docker/caddy/ folder (compose + starter Caddyfile + README). Services add their site blocks to its Caddyfile.
• services/crowdsec.sh (homelab) — system-level intrusion prevention (agent + firewall bouncer + Caddy log acquisition + optional ntfy ban alerts); README in ~/docker/crowdsec/.
• Guided menu redesign in setup.sh:
  • Prints the required set (essential packages incl. glow + a Docker check) up front and lets you cancel before anything changes.
  • Offers Caddy first (most services depend on it).
  • Category menu loop: pick a category → checklist (already-installed shown as [installed]) → install → back to the menu for the next category, until you choose Done. whiptail UI with a plain-text fallback.

Changed

• Categories reorganized: base · homelab · utilities · media · cameras · gaming · backup. Moved ntfy, filebrowser, portainer, uptimekuma, watchtower to utilities. Within homelab, Caddy → CrowdSec → Authelia sort first.

[0.9.6] - 2026-06-03

Added

• Per-service README generation. New write_readme helper in lib/common.sh; every module now writes a README.md into its ~/docker/<service>/ folder (what it is, access URL, start/stop, data location, reverse-proxy notes) — so each service folder is self-documenting.
• Migrated 6 services from the monolith into modules (all in the homelab group, each with a README):
  • authelia — SSO + 2FA portal, ported from the authelia-setup repo + the monolith's working block: prompts for domain/SMTP, generates jwt/session/storage secrets + the admin Argon2 hash, writes compose/config/users, creates caddy_net, and injects the forward-auth snippet + portal block into the Caddyfile. Won't clobber an existing install.
  • filebrowser (8085), ntfy (8090), uptimekuma (3001), portainer (9443), watchtower (no web port).

Notes

• homelab group now: authelia, filebrowser, homeassistant, ntfy, portainer, uptimekuma, watchtower.
• Remaining monolith services still to migrate: ActualBudget, ARM, AudioBookshelf, Caddy, CrowdSec, Emby, FindMyDevice, Frigate, Frigate-Notify, Immich, Jellyfin, Lyrion, MagicMirror, Mealie, MeshCentral, Traccar, ddclient, wg-easy.

[0.9.5] - 2026-06-03

Added

• services/minecraft.sh (gaming) — full port of the standalone setupminecraft.sh, converted to the per-service-folder model. Each server is its own ~/docker/<instance>/ with a standalone compose, so multiple servers run side by side (port auto-bumps 25565→25566…). Preserves all the niceties: Fabric/Quilt/Paper/Vanilla/Forge flavours, the live Modrinth version/mod-availability picker, curated mods, Vanilla Tweaks datapacks, whitelist UUID pre-population, LuckPerms bootstrap, Chunky pre-gen, playit.gg tunnel, generated MINECRAFT_NETWORKING.md / CLIENT_MODS.md, and the client-mods download web page (its own folder + compose).

Fixed

• Minecraft compose env-block emission (trailing-newline bug from the original that glued ports: onto the last env line — now valid YAML).

Notes

• gaming group now: js99er, minecraft, wolf.
• Still pending: whitelist Minecraft helper; migrating the ~65 monolith services into services/.

[0.9.4] - 2026-06-03

The first versioned release. Introduces the modular post-install system so you can install the whole box at once or run a single service, with one source of truth (no per-service script duplication, nothing generated).

Added

• setup.sh dispatcher: interactive menu, run-one (sudo ./setup.sh <name>), --list, --dry-run, --unattended, --version.
• lib/common.sh: shared helpers (logging, prompts, ownership, Caddy wiring) and a self-registration service registry — one implementation of each.
• Service modules (each its own ~/docker/<name>/ folder + standalone compose):
  • base — essential CLI packages, now including glow.
  • glow — terminal markdown reader (charmbracelet), standalone too.
  • homeassistant — bridge/host networking choice, trusted_proxies pre-seed.
  • js99er (gaming) — self-hosted TI-99/4A emulator (Selkies launcher tie-in removed).
  • wolf (gaming) — Games-on-Whales Moonlight streaming (wolf-pair dropped; pin workflow kept).
  • backup — Kopia encrypted backups (paths adapted to ~/docker).
• MODULAR.md documenting the architecture, how to add a module, migration status.
• Service groups: base / homelab / gaming / backup.
• glow also added to the live -crowdsec monolith scripts' essential packages.

Known gaps / next (0.9.5)

• minecraft module (rich, multi-instance port of setupminecraft.sh) — not yet written; the background port hit a session limit.
• whitelist Minecraft helper not yet shipped.
• ~65 services still live only in the monolith, to migrate into services/.

Earlier history (pre-versioning)

• Removed Keycloak; standardized on Authelia for SSO.
• Added -no-keycloak and -crowdsec script tiers (originals kept as the evolution record).
• CrowdSec replaces fail2ban in the -crowdsec tier (SSH + Caddy, geo + IP reputation, optional ntfy ban alerts).
• Home Assistant added to the -crowdsec tier.