Скрипты настройки стенда

#!/bin/bash
# cups.sh - Установка и настройка CUPS на SRV
set -e
echo "[*] Установка CUPS..."
apt-get update -y
apt-get install -y cups cups-client

echo "[*] Пользователь print..."
useradd -r -s /bin/bash print 2>/dev/null || echo "print уже существует"
echo "print:P@ssword" | chpasswd

echo "[*] Логи и лимиты..."
sed -i 's/^ErrorLog.*/ErrorLog /var/log/cups/error_log/' /etc/cups/cups-files.conf
sed -i 's/^PageLog.*/PageLog /var/log/cups/page_log/' /etc/cups/cups-files.conf
sed -i 's/^AccessLog.*/AccessLog /var/log/cups/access_log/' /etc/cups/cups-files.conf

grep -q "PageLogFormat" /etc/cups/cupsd.conf || 
echo 'PageLogFormat %p %u %j %T %P %C %{job-billing} %{job-originating-host-name} %{job-name} %{media} %{sides}' >> /etc/cups/cupsd.conf
sed -i 's/^LogLevel.*/LogLevel info/' /etc/cups/cupsd.conf

grep -q "MaxJobs" /etc/cups/cupsd.conf || echo "MaxJobs 300" >> /etc/cups/cupsd.conf

# ВАЖНО: Исправляем localhost на 0.0.0.0, чтобы CUPS был доступен по сети

sed -i 's/Listen localhost:631/Listen 0.0.0.0:631/' /etc/cups/cupsd.conf
sed -i 's/Listen 127.0.0.1:631/Listen 0.0.0.0:631/' /etc/cups/cupsd.conf
grep -q "Listen 0.0.0.0:631" /etc/cups/cupsd.conf || echo "Listen 0.0.0.0:631" >> /etc/cups/cupsd.conf

sed -i '//a\  Order allow,deny\n  Allow 192.168.101.0/24\n  Allow 192.168.120.0/24' /etc/cups/cupsd.conf

echo "[*] Перезапуск CUPS..."
systemctl enable --now cups
systemctl restart cups

echo "[+] Добавьте print (192.168.101.10:631)"

#!/bin/bash
# zabbix6.sh - Установка Zabbix Server на SRV (Alt Linux p11)
set -e
echo "==============================================="
echo " Zabbix Server на SRV (Alt Linux p11)"
echo "==============================================="

ZABBIX_WEB_ROOT="/var/www/webapps/zabbix/ui"

echo "[1/10] Установка PostgreSQL, Zabbix Server, Agent, fping..."
apt-get update -y
apt-get install -y postgresql17-server zabbix-server-pgsql zabbix-agent fping

echo "[2/10] Настройка PHP-FPM и лимитов..."
rpm -qa | grep -q "php8.3-fpm-fcgi" || apt-get install -y php8.3-fpm-fcgi
systemctl enable --now php8.3-fpm

PHP_INI=$(find /etc -name php.ini -path "*8.3*fpm*" | head -n1)
if [ -n "$PHP_INI" ]; then
sed -i 's/^;*\s*max_execution_time\s*=.*/max_execution_time = 300/' "PHP_INI"
    sed -i 's/^;*\s*max_input_time\s*=.*/max_input_time = 300/' "PHP_INI"
sed -i 's/^;*\s*date.timezone\s*=.*/date.timezone = Europe/Moscow/' "$PHP_INI"
systemctl restart php8.3-fpm
echo "    Лимиты PHP обновлены (max_execution_time=300, max_input_time=300)"
fi

echo "[3/10] Установка фронтенда Zabbix..."
apt-get install -y zabbix-phpfrontend-nginx-php8.3-fpm-fcgi zabbix-phpfrontend-engine

if [ ! -f "$ZABBIX_WEB_ROOT/index.php" ]; then
    echo "[!]$ZABBIX_WEB_ROOT/index.php не найден"
exit 1
fi
echo "    Фронтенд: $ZABBIX_WEB_ROOT/index.php"

chown -R _php_fpm:_webserver "$ZABBIX_WEB_ROOT"
chmod -R 775 "$ZABBIX_WEB_ROOT"
chmod -R 775 "$ZABBIX_WEB_ROOT/conf"

if ! id _nginx 2>/dev/null | grep -q "_webserver"; then
usermod -a -G _webserver _nginx
fi

echo "[4/10] Инициализация PostgreSQL..."
[ -d /var/lib/pgsql/data/base ] || /etc/init.d/postgresql initdb
systemctl enable --now postgresql
sleep 2

echo "[5/10] Пользователь и БД zabbix..."
DB_EXISTS=$(su - postgres -s /bin/sh -c "psql -tAc \"SELECT 1 FROM pg_database WHERE datname='zabbix'\"" 2>/dev/null)
if [ "$DB_EXISTS" != "1" ]; then
su - postgres -s /bin/sh -c 'createuser --no-superuser --no-createdb --no-createrole --encrypted --pwprompt zabbix' <$(ls -d /usr/share/doc/zabbix-common-database-pgsql-* 2>/dev/null | head -n1)
[ -z "$SCHEMA_DIR" ] && { echo "[!] Нет схемы Zabbix"; exit 1; }

export PGPASSWORD=zabbix
TABLES=$(su - postgres -s /bin/sh -c \
    "psql -U zabbix -d zabbix -tAc \"SELECT count(*) FROM information_schema.tables WHERE table_schema='public'\"")
if [ "$TABLES" = "0" ]; then
su - postgres -s /bin/sh -c "psql -U zabbix -f ${SCHEMA_DIR}/schema.sql zabbix"
    su - postgres -s /bin/sh -c "psql -U zabbix -f${SCHEMA_DIR}/images.sql zabbix"
su - postgres -s /bin/sh -c "psql -U zabbix -f ${SCHEMA_DIR}/data.sql   zabbix"
else
    echo "    Схема уже загружена ($TABLES таблиц)"
fi
unset PGPASSWORD

echo "[7/10] Настройка zabbix_server.conf..."
if grep -qE "^# *DBPassword=" /etc/zabbix/zabbix_server.conf; then
sed -i 's/^# *DBPassword=.*/DBPassword=zabbix/' /etc/zabbix/zabbix_server.conf
elif ! grep -qE "^DBPassword=" /etc/zabbix/zabbix_server.conf; then
echo "DBPassword=zabbix" >> /etc/zabbix/zabbix_server.conf
fi

echo "[8/10] Настройка zabbix_agentd.conf..."
sed -i 's/^Server=.*/Server=0.0.0.0/0/'           /etc/zabbix/zabbix_agentd.conf
sed -i 's/^ServerActive=.*/ServerActive=127.0.0.1/' /etc/zabbix/zabbix_agentd.conf

echo "[9/10] Nginx-конфиг для Zabbix на 8080..."
PHP_SOCK=$(find /run -name "*.sock" 2>/dev/null | grep -iE "php.*fpm" | grep -v zoneminder | head -n1)
[ -z "$PHP_SOCK" ] && { echo "[!] Сокет PHP-FPM не найден"; exit 1; }
echo "    Сокет: $PHP_SOCK"

# Создаем конфиг напрямую в sites-enabled.d

mkdir -p /etc/nginx/sites-enabled.d
cat > /etc/nginx/sites-enabled.d/zabbix.conf <$s" "$(systemctl is-active "$s" 2>&1)"
done

echo ""
echo "[+] Готово."
echo "    Веб-интерфейс: http://192.168.101.10:8080/"
echo "    Логин: Admin / пароль: zabbix"
echo "    БД: localhost / zabbix / public / zabbix / zabbix"

#!/bin/bash
# cb.sh - Сервер управления КиберБэкап на SRV
set -e
URL="https://download.cyberprotect.ru/releases/CyberBackup/19.0.43991/CyberBackup_19_64-bit.x86_64"
INSTALLER="/home/CyberBackup_19_64-bit.x86_64"

echo "[*] Скачивание дистрибутива..."
wget -O "$INSTALLER" "$URL"

echo "[*] Установка..."
chmod +x "$INSTALLER"
"$INSTALLER"

echo "[*] Каталог /var/backup..."
mkdir -p /var/backup
chmod 755 /var/backup

echo "[+] Готово. Дальше — через веб-интерфейс (пользователи, планы)."

echo "[3/5] Установка и настройка Zabbix-агента..."
apt-get install -y zabbix-agent
ZBX_CONF="/etc/zabbix/zabbix_agentd.conf"
[ -f "ZBX_CONF не найден"; exit 1; }

# Server — адрес SRV Zabbix (192.168.101.10), ServerActive — тоже

sed -i 's/^Server=.*/Server=192.168.101.10/'              "$ZBX_CONF"
sed -i 's/^ServerActive=.*/ServerActive=192.168.101.10/'  "$ZBX_CONF"
sed -i 's/^Hostname=.*/Hostname=admin.au.team/'           "$ZBX_CONF"

# В Alt Linux служба называется zabbix_agentd

ZBX_SVC=""
for s in zabbix_agentd zabbix-agent zabbix-agentd; do
if systemctl list-unit-files 2>/dev/null | grep -q "^${s}\.service"; then
        ZBX_SVC="$s"; break
fi
done

if [ -z "$ZBX_SVC" ]; then
    echo "[!] Служба Zabbix-агента не найдена"
else
    echo "    Служба:$ZBX_SVC"
systemctl enable --now "$ZBX_SVC"
    systemctl status "$ZBX_SVC" --no-pager | head -n 5
fi

#!/bin/bash
# admin_client.sh - Настройка ADMIN-PC (Альт Рабочая станция 11)
set -e
echo "[*] DHCP через etcnet..."
IFACE=$(ip -o link show | awk -F': ' '{print $2}' | grep -v lo | head -n1)
if [ -n "$IFACE" ]; then
    mkdir -p /etc/net/ifaces/$IFACE
cat > /etc/net/ifaces/$IFACE/options </dev/null || systemctl restart network 2>/dev/null || true
else
echo "[-] Не удалось определить сетевой интерфейс!"
fi

echo "[*] CUPS-клиент..."
apt-get update -y
apt-get install -y cups-client

echo "[*] Zabbix-агент..."
apt-get install -y zabbix-agent
sed -i 's/^Server=.*/Server=192.168.101.10/' /etc/zabbix/zabbix_agentd.conf
sed -i 's/^ServerActive=.*/ServerActive=192.168.101.10/' /etc/zabbix/zabbix_agentd.conf
sed -i 's/^Hostname=.*/Hostname=admin.au.team/' /etc/zabbix/zabbix_agentd.conf
systemctl enable --now zabbix_agentd.service

echo "[*] Агент КиберБэкап..."
AGENT_URL="https://download.cyberprotect.ru/releases/CyberBackup/19.0.43991/CyberBackup_Agent_19_64-bit.x86_64"
wget -O /tmp/cb_agent "$AGENT_URL" || echo "Не удалось скачать агент — проверьте URL"
if [ -f /tmp/cb_agent ]; then
chmod +x /tmp/cb_agent
/tmp/cb_agent
fi

echo "[+] Готово."
echo "    - Принтер print (192.168.101.100) → http://localhost:631"
echo "    - Хост admin.au.team → в веб-интерфейсе Zabbix"
echo "    - План SYSTEM-BACKUP → в веб-интерфейсе КиберБэкап"