Improve the setup and administration process

tkuester commented 3 years ago

I would like to reduce the friction to setup a server, configure it, and start adding clients. I would like to see...

[ ] An interactive script that prompts the user for questions
[ ] Checking for hostname and public IP automatically
[x] Automatic setup and generation of SSL certificates
[ ] Automatic install of systemd scripts
[ ] Generation of a QR code of sorts to help users find their data package with client certificates
[ ] Some level of "idiot proofing"
[ ] Support for virtual environments, docker, and other installation configurations
[ ] Some sort of firewall check / support?

tkuester commented 3 years ago

What I would like to see is something like this...

larry_larp@bluetack $ takyctl setup
Welcome to the interactive taky setup.
[x] Detected system wide installation, please re-run this script as root

larry_larp@bluetack $ sudo takyctl setup
Welcome to the interactive taky setup.
[+] Detected hostname "bluetack".
Use this hostname? (Y/n) > (enter)

[+] Here are the IP addresses I see. Which would you like to use?
1. eth0 - 192.168.1.42
2. wg0 - 10.9.0.1
3. Detect public IP with ifconfig.co
> 3
[*] Checking with ifconfig.co...
[*] Public IP detected: 103.24.x.x

[+] Do you want to use SSL? (Y/n) > (enter)
[-] Port for COT Server? (8089) > (enter)

[+] Which user do you want to run as? (larry_larp) > (enter)

[+] Do you want to run the Data Package Server? (Y/n) > (enter)
[-] Where do you want to store the files? (/var/taky) > (enter)

[+] Do you want to install the systemd scripts? (Y/n) > n (enter)

Here's the configuration I have so far.
 - Hostname: bluetack
 - Bind IP: 103.24.x.x
 - SSL: Enabled
 - COT Server Port: 8089
 - User: larry_larp
 - Data Package Server: Enabled
   - Storage Path: /var/taky
   - DPS Server Port: 8443 (Not configurable at this time)
 - Install Systemd Startup Scripts: No

Does everything look correct? (Y/n) >
[-] Creating directory infrastructure
  [-] Setting up permissions
[-] Generating SSL certificates
[-] Writing config file

[+] Done!

Please remember to make sure ports 8089 and 8443 are open on your system

lennisthemenace commented 2 years ago

I think the fts installer could be forked and modified to easily fulfill most of this straight away.

tkuester / taky

Improve the setup and administration process #16