1
0
mirror of git://f0xx.org/ac/ac-deploy synced 2026-07-29 02:37:39 +03:00

deploy: auto-install iptables + modprobe wg in deploy-remote-access-lab; DB_BACKEND in cluster.env

- deploy-remote-access-lab.sh: install iptables via apk if missing; modprobe wireguard
- cluster.env: add DB_BACKEND=1 (MariaDB default; 2=Postgres, 3=SQLite)

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Anton Afanasyeu
2026-06-25 17:48:51 +02:00
parent 6c2403aae9
commit fbefc98792
2 changed files with 12 additions and 0 deletions

View File

@@ -17,6 +17,9 @@ CAST_DOMAIN=intra.raptor.org
PRIMARY_DB_HOST=cast01
PRIMARY_DB_PORT=3306
# DB_BACKEND: 1=MariaDB (default), 2=PostgreSQL/TimescaleDB, 3=SQLite3
DB_BACKEND=1
ARTC0_HOST=artc0
ARTC0_IP=10.7.16.128
# DEPRECATED: legacy dev VM — FE/compose no longer target artc0; kept for DNS cleanup only.

View File

@@ -9,6 +9,15 @@ load_secrets_lab 2>/dev/null || true
is_primary_node || { log "deploy-remote-access-lab: skip (not primary)"; exit 0; }
# Ensure iptables is available (needed for WireGuard PostUp/PostDown NAT rules)
if ! command -v iptables >/dev/null 2>&1; then
log "iptables not found; installing via apk"
apk add --no-cache iptables >/dev/null 2>&1 || log "WARN: iptables install failed — PostUp/PostDown may error"
fi
# Load wireguard kernel module if not already loaded
modprobe wireguard 2>/dev/null || true
WG_EXAMPLES="${AC_WORKSPACE_ROOT:-/var/www/ac/workspace}/ac-ms-remote-access/examples/wireguard"
[ -d "$WG_EXAMPLES" ] || die "missing $WG_EXAMPLES (init ac-ms-remote-access submodule)"