Mike Swanson
6c316aa701
Created comprehensive VPN setup tooling for Peaceful Spirit L2TP/IPsec connection and enhanced agent documentation framework. VPN Configuration (PST-NW-VPN): - Setup-PST-L2TP-VPN.ps1: Automated L2TP/IPsec setup with split-tunnel and DNS - Connect-PST-VPN.ps1: Connection helper with PPP adapter detection, DNS (192.168.0.2), and route config (192.168.0.0/24) - Connect-PST-VPN-Standalone.ps1: Self-contained connection script for remote deployment - Fix-PST-VPN-Auth.ps1: Authentication troubleshooting for CHAP/MSChapv2 - Diagnose-VPN-Interface.ps1: Comprehensive VPN interface and routing diagnostic - Quick-Test-VPN.ps1: Fast connectivity verification (DNS/router/routes) - Add-PST-VPN-Route-Manual.ps1: Manual route configuration helper - vpn-connect.bat, vpn-disconnect.bat: Simple batch file shortcuts - OpenVPN config files (Windows-compatible, abandoned for L2TP) Key VPN Implementation Details: - L2TP creates PPP adapter with connection name as interface description - UniFi auto-configures DNS (192.168.0.2) but requires manual route to 192.168.0.0/24 - Split-tunnel enabled (only remote traffic through VPN) - All-user connection for pre-login auto-connect via scheduled task - Authentication: CHAP + MSChapv2 for UniFi compatibility Agent Documentation: - AGENT_QUICK_REFERENCE.md: Quick reference for all specialized agents - documentation-squire.md: Documentation and task management specialist agent - Updated all agent markdown files with standardized formatting Project Organization: - Moved conversation logs to dedicated directories (guru-connect-conversation-logs, guru-rmm-conversation-logs) - Cleaned up old session JSONL files from projects/msp-tools/ - Added guru-connect infrastructure (agent, dashboard, proto, scripts, .gitea workflows) - Added guru-rmm server components and deployment configs Technical Notes: - VPN IP pool: 192.168.4.x (client gets 192.168.4.6) - Remote network: 192.168.0.0/24 (router at 192.168.0.10) - PSK: rrClvnmUeXEFo90Ol+z7tfsAZHeSK6w7 - Credentials: pst-admin / 24Hearts$ Files: 15 VPN scripts, 2 agent docs, conversation log reorganization, guru-connect/guru-rmm infrastructure additions Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
114 lines
3.1 KiB
Bash
114 lines
3.1 KiB
Bash
#!/bin/bash
|
|
# Install and configure Gitea Actions Runner
|
|
# Run as: sudo bash install-gitea-runner.sh
|
|
|
|
set -e
|
|
|
|
RED='\033[0;31m'
|
|
GREEN='\033[0;32m'
|
|
YELLOW='\033[1;33m'
|
|
NC='\033[0m'
|
|
|
|
echo "========================================="
|
|
echo "Gitea Actions Runner Installation"
|
|
echo "========================================="
|
|
echo ""
|
|
|
|
# Check if running as root
|
|
if [ "$EUID" -ne 0 ]; then
|
|
echo -e "${RED}ERROR: This script must be run as root (sudo)${NC}"
|
|
exit 1
|
|
fi
|
|
|
|
# Variables
|
|
RUNNER_VERSION="0.2.11"
|
|
RUNNER_USER="gitea-runner"
|
|
RUNNER_HOME="/home/${RUNNER_USER}"
|
|
GITEA_URL="https://git.azcomputerguru.com"
|
|
RUNNER_NAME="gururmm-runner"
|
|
|
|
echo "Installing Gitea Actions Runner v${RUNNER_VERSION}"
|
|
echo "Target: ${GITEA_URL}"
|
|
echo ""
|
|
|
|
# Create runner user
|
|
if ! id "${RUNNER_USER}" &>/dev/null; then
|
|
echo "Creating ${RUNNER_USER} user..."
|
|
useradd -m -s /bin/bash "${RUNNER_USER}"
|
|
echo -e "${GREEN}User created${NC}"
|
|
else
|
|
echo -e "${YELLOW}User ${RUNNER_USER} already exists${NC}"
|
|
fi
|
|
|
|
# Download runner binary
|
|
echo "Downloading Gitea Actions Runner..."
|
|
cd /tmp
|
|
wget -q "https://dl.gitea.com/act_runner/${RUNNER_VERSION}/act_runner-${RUNNER_VERSION}-linux-amd64" -O act_runner
|
|
|
|
# Install binary
|
|
echo "Installing binary..."
|
|
chmod +x act_runner
|
|
mv act_runner /usr/local/bin/
|
|
chown root:root /usr/local/bin/act_runner
|
|
|
|
# Create runner directory
|
|
echo "Creating runner directory..."
|
|
mkdir -p "${RUNNER_HOME}/.runner"
|
|
chown -R "${RUNNER_USER}:${RUNNER_USER}" "${RUNNER_HOME}/.runner"
|
|
|
|
echo ""
|
|
echo "========================================="
|
|
echo "Runner Registration"
|
|
echo "========================================="
|
|
echo ""
|
|
echo "To complete setup, you need to register the runner with Gitea:"
|
|
echo ""
|
|
echo "1. Go to: ${GITEA_URL}/admin/actions/runners"
|
|
echo "2. Click 'Create new Runner'"
|
|
echo "3. Copy the registration token"
|
|
echo "4. Run as ${RUNNER_USER}:"
|
|
echo ""
|
|
echo " sudo -u ${RUNNER_USER} act_runner register \\"
|
|
echo " --instance ${GITEA_URL} \\"
|
|
echo " --token YOUR_REGISTRATION_TOKEN \\"
|
|
echo " --name ${RUNNER_NAME} \\"
|
|
echo " --labels ubuntu-latest,ubuntu-22.04"
|
|
echo ""
|
|
echo "5. Then create systemd service:"
|
|
echo ""
|
|
cat > /etc/systemd/system/gitea-runner.service << 'EOF'
|
|
[Unit]
|
|
Description=Gitea Actions Runner
|
|
After=network.target
|
|
|
|
[Service]
|
|
Type=simple
|
|
User=gitea-runner
|
|
WorkingDirectory=/home/gitea-runner/.runner
|
|
ExecStart=/usr/local/bin/act_runner daemon
|
|
Restart=always
|
|
RestartSec=10
|
|
Environment="HOME=/home/gitea-runner"
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
EOF
|
|
|
|
echo "Systemd service created at /etc/systemd/system/gitea-runner.service"
|
|
echo ""
|
|
echo "After registration, enable and start the service:"
|
|
echo " sudo systemctl daemon-reload"
|
|
echo " sudo systemctl enable gitea-runner"
|
|
echo " sudo systemctl start gitea-runner"
|
|
echo " sudo systemctl status gitea-runner"
|
|
echo ""
|
|
echo "========================================="
|
|
echo "Installation Complete!"
|
|
echo "========================================="
|
|
echo ""
|
|
echo -e "${YELLOW}Next Steps:${NC}"
|
|
echo "1. Register the runner (see instructions above)"
|
|
echo "2. Start the systemd service"
|
|
echo "3. Verify runner shows up in Gitea Admin > Actions > Runners"
|
|
echo ""
|