taky
taky copied to clipboard
Improve the setup and administration process
I would like to reduce the friction to setup a server, configure it, and start adding clients. I would like to see...
- [ ] An interactive script that prompts the user for questions
- [ ] Checking for hostname and public IP automatically
- [x] Automatic setup and generation of SSL certificates
- [ ] Automatic install of systemd scripts
- [ ] Generation of a QR code of sorts to help users find their data package with client certificates
- [ ] Some level of "idiot proofing"
- [ ] Support for virtual environments, docker, and other installation configurations
- [ ] Some sort of firewall check / support?
What I would like to see is something like this...
larry_larp@bluetack $ takyctl setup
Welcome to the interactive taky setup.
[x] Detected system wide installation, please re-run this script as root
larry_larp@bluetack $ sudo takyctl setup
Welcome to the interactive taky setup.
[+] Detected hostname "bluetack".
Use this hostname? (Y/n) > (enter)
[+] Here are the IP addresses I see. Which would you like to use?
1. eth0 - 192.168.1.42
2. wg0 - 10.9.0.1
3. Detect public IP with ifconfig.co
> 3
[*] Checking with ifconfig.co...
[*] Public IP detected: 103.24.x.x
[+] Do you want to use SSL? (Y/n) > (enter)
[-] Port for COT Server? (8089) > (enter)
[+] Which user do you want to run as? (larry_larp) > (enter)
[+] Do you want to run the Data Package Server? (Y/n) > (enter)
[-] Where do you want to store the files? (/var/taky) > (enter)
[+] Do you want to install the systemd scripts? (Y/n) > n (enter)
Here's the configuration I have so far.
- Hostname: bluetack
- Bind IP: 103.24.x.x
- SSL: Enabled
- COT Server Port: 8089
- User: larry_larp
- Data Package Server: Enabled
- Storage Path: /var/taky
- DPS Server Port: 8443 (Not configurable at this time)
- Install Systemd Startup Scripts: No
Does everything look correct? (Y/n) >
[-] Creating directory infrastructure
[-] Setting up permissions
[-] Generating SSL certificates
[-] Writing config file
[+] Done!
Please remember to make sure ports 8089 and 8443 are open on your system
I think the fts installer could be forked and modified to easily fulfill most of this straight away.