kastell 2.2.3 → 2.2.5

package/dist/adapters/coolify.js

@@ -10,98 +10,98 @@ export class CoolifyAdapter {
     platformPorts = [80, 443, COOLIFY_PORT, 6001, 6002];
     getCloudInit(serverName, sshPublicKey) {
         const safeName = serverName.replace(/[^a-z0-9-]/g, "");
-        return `#!/bin/bash
-set +e
-export DEBIAN_FRONTEND=noninteractive
-touch /var/log/kastell-install.log
-chmod 600 /var/log/kastell-install.log
-exec > >(tee /var/log/kastell-install.log) 2>&1
-
-echo "=================================="
-echo "Kastell Auto-Installer"
-echo "Server: ${safeName}"
-echo "=================================="
-
-# Wait for network connectivity (DO cloud-init may start before network is ready)
-echo "Waiting for network connectivity..."
-MAX_ATTEMPTS=30
-ATTEMPTS=0
-while [ $ATTEMPTS -lt $MAX_ATTEMPTS ]; do
-  if curl -s --max-time 5 https://cdn.coollabs.io > /dev/null 2>&1; then
-    echo "Network is ready!"
-    break
-  fi
-  ATTEMPTS=$((ATTEMPTS + 1))
-  echo "Network not ready (attempt $ATTEMPTS/$MAX_ATTEMPTS)..."
-  sleep 2
-done
-
-# Disable needrestart to prevent interactive prompts during Docker/package installation
-echo "Disabling needrestart..."
-if dpkg -l needrestart > /dev/null 2>&1; then
-  apt-get remove -y needrestart || true
-fi
-export NEEDRESTART_MODE=a
-export NEEDRESTART_SUSPEND=1
-
-# Update system
-echo "Updating system packages..."
-apt-get update -y
-
-# Configure firewall BEFORE installer (prevents SSH lockout if installer hangs)
-echo "Configuring firewall..."
-if command -v ufw &> /dev/null; then
-  ufw allow 22/tcp
-  ufw allow 80/tcp
-  ufw allow 443/tcp
-  ufw allow 8000/tcp
-  ufw allow 6001/tcp
-  ufw allow 6002/tcp
-  echo "y" | ufw enable || true
-else
-  iptables -A INPUT -p tcp --dport 8000 -j ACCEPT
-  iptables -A INPUT -p tcp --dport 22 -j ACCEPT
-  iptables -A INPUT -p tcp --dport 80 -j ACCEPT
-  iptables -A INPUT -p tcp --dport 443 -j ACCEPT
-  iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-  mkdir -p /etc/iptables
-  iptables-save > /etc/iptables/rules.v4 || true
-  apt-get install -y iptables-persistent || true
-fi
-
-# Switch from socket activation to traditional SSH service (prevents Ubuntu 24.04 ssh.socket bugs)
-echo "Switching to traditional SSH service..."
-systemctl disable --now ssh.socket 2>/dev/null || true
-systemctl enable --now ssh.service 2>/dev/null || true
-
-# Install Coolify
-echo "Installing Coolify..."
-curl -fsSL https://cdn.coollabs.io/coolify/install.sh -o /tmp/coolify-install.sh && head -c2 /tmp/coolify-install.sh | grep -q "#!" && [ "$(wc -c < /tmp/coolify-install.sh)" -gt 100 ] && env DEBIAN_FRONTEND=noninteractive NEEDRESTART_MODE=a NEEDRESTART_SUSPEND=1 bash /tmp/coolify-install.sh && rm -f /tmp/coolify-install.sh
-
-# Ensure SSH remains accessible after Coolify installation
-echo "Ensuring SSH service is active..."
-if ! ss -tlnp | grep -q ':22 '; then
-  systemctl restart ssh.service 2>/dev/null || systemctl restart sshd.service 2>/dev/null || true
-  sleep 2
-fi
-
-# Re-inject SSH public key (Coolify installer may overwrite authorized_keys)
-${sshPublicKey ? `echo "Re-injecting SSH public key..."
-mkdir -p /root/.ssh
-chmod 700 /root/.ssh
-grep -qF '${sshPublicKey.trim().replace(/'/g, "'\\''")}' /root/.ssh/authorized_keys 2>/dev/null || echo '${sshPublicKey.trim().replace(/'/g, "'\\''")}' >> /root/.ssh/authorized_keys
-chmod 600 /root/.ssh/authorized_keys` : "# No SSH public key provided — skipping re-injection"}
-
-# Wait for services
-echo "Waiting for Coolify services to start..."
-sleep 30
-
-echo "=================================="
-echo "Coolify installation completed!"
-echo "=================================="
-echo ""
-echo "Please wait 3-5 more minutes for Coolify to fully initialize."
-echo "Then access your instance at: http://YOUR_SERVER_IP:8000"
+        return `#!/bin/bash
+set +e
+export DEBIAN_FRONTEND=noninteractive
+touch /var/log/kastell-install.log
+chmod 600 /var/log/kastell-install.log
+exec > >(tee /var/log/kastell-install.log) 2>&1
+
+echo "=================================="
+echo "Kastell Auto-Installer"
+echo "Server: ${safeName}"
+echo "=================================="
+
+# Wait for network connectivity (DO cloud-init may start before network is ready)
+echo "Waiting for network connectivity..."
+MAX_ATTEMPTS=30
+ATTEMPTS=0
+while [ $ATTEMPTS -lt $MAX_ATTEMPTS ]; do
+  if curl -s --max-time 5 https://cdn.coollabs.io > /dev/null 2>&1; then
+    echo "Network is ready!"
+    break
+  fi
+  ATTEMPTS=$((ATTEMPTS + 1))
+  echo "Network not ready (attempt $ATTEMPTS/$MAX_ATTEMPTS)..."
+  sleep 2
+done
+
+# Disable needrestart to prevent interactive prompts during Docker/package installation
+echo "Disabling needrestart..."
+if dpkg -l needrestart > /dev/null 2>&1; then
+  apt-get remove -y needrestart || true
+fi
+export NEEDRESTART_MODE=a
+export NEEDRESTART_SUSPEND=1
+
+# Update system
+echo "Updating system packages..."
+apt-get update -y
+
+# Configure firewall BEFORE installer (prevents SSH lockout if installer hangs)
+echo "Configuring firewall..."
+if command -v ufw &> /dev/null; then
+  ufw allow 22/tcp
+  ufw allow 80/tcp
+  ufw allow 443/tcp
+  ufw allow 8000/tcp
+  ufw allow 6001/tcp
+  ufw allow 6002/tcp
+  echo "y" | ufw enable || true
+else
+  iptables -A INPUT -p tcp --dport 8000 -j ACCEPT
+  iptables -A INPUT -p tcp --dport 22 -j ACCEPT
+  iptables -A INPUT -p tcp --dport 80 -j ACCEPT
+  iptables -A INPUT -p tcp --dport 443 -j ACCEPT
+  iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
+  mkdir -p /etc/iptables
+  iptables-save > /etc/iptables/rules.v4 || true
+  apt-get install -y iptables-persistent || true
+fi
+
+# Switch from socket activation to traditional SSH service (prevents Ubuntu 24.04 ssh.socket bugs)
+echo "Switching to traditional SSH service..."
+systemctl disable --now ssh.socket 2>/dev/null || true
+systemctl enable --now ssh.service 2>/dev/null || true
+
+# Install Coolify
+echo "Installing Coolify..."
+curl -fsSL https://cdn.coollabs.io/coolify/install.sh -o /tmp/coolify-install.sh && head -c2 /tmp/coolify-install.sh | grep -q "#!" && [ "$(wc -c < /tmp/coolify-install.sh)" -gt 100 ] && env DEBIAN_FRONTEND=noninteractive NEEDRESTART_MODE=a NEEDRESTART_SUSPEND=1 bash /tmp/coolify-install.sh && rm -f /tmp/coolify-install.sh
+
+# Ensure SSH remains accessible after Coolify installation
+echo "Ensuring SSH service is active..."
+if ! ss -tlnp | grep -q ':22 '; then
+  systemctl restart ssh.service 2>/dev/null || systemctl restart sshd.service 2>/dev/null || true
+  sleep 2
+fi
+
+# Re-inject SSH public key (Coolify installer may overwrite authorized_keys)
+${sshPublicKey ? `echo "Re-injecting SSH public key..."
+mkdir -p /root/.ssh
+chmod 700 /root/.ssh
+grep -qF '${sshPublicKey.trim().replace(/'/g, "'\\''")}' /root/.ssh/authorized_keys 2>/dev/null || echo '${sshPublicKey.trim().replace(/'/g, "'\\''")}' >> /root/.ssh/authorized_keys
+chmod 600 /root/.ssh/authorized_keys` : "# No SSH public key provided — skipping re-injection"}
+
+# Wait for services
+echo "Waiting for Coolify services to start..."
+sleep 30
+
+echo "=================================="
+echo "Coolify installation completed!"
+echo "=================================="
+echo ""
+echo "Please wait 3-5 more minutes for Coolify to fully initialize."
+echo "Then access your instance at: http://YOUR_SERVER_IP:8000"
 `;
     }
     async healthCheck(ip, domain) {

package/dist/adapters/dokploy.js

@@ -10,105 +10,105 @@ export class DokployAdapter {
     platformPorts = [80, 443, DOKPLOY_PORT];
     getCloudInit(serverName, sshPublicKey) {
         const safeName = serverName.replace(/[^a-z0-9-]/g, "");
-        return `#!/bin/bash
-set +e
-export DEBIAN_FRONTEND=noninteractive
-touch /var/log/kastell-install.log
-chmod 600 /var/log/kastell-install.log
-exec > >(tee /var/log/kastell-install.log) 2>&1
-
-echo "=================================="
-echo "Kastell Auto-Installer"
-echo "Server: ${safeName}"
-echo "Platform: Dokploy"
-echo "=================================="
-
-# Wait for network connectivity
-echo "Waiting for network connectivity..."
-MAX_ATTEMPTS=30
-ATTEMPTS=0
-while [ $ATTEMPTS -lt $MAX_ATTEMPTS ]; do
-  if curl -s --max-time 5 https://dokploy.com > /dev/null 2>&1; then
-    echo "Network is ready!"
-    break
-  fi
-  ATTEMPTS=$((ATTEMPTS + 1))
-  echo "Network not ready (attempt $ATTEMPTS/$MAX_ATTEMPTS)..."
-  sleep 2
-done
-
-# Disable needrestart to prevent interactive prompts during Docker/package installation
-echo "Disabling needrestart..."
-if dpkg -l needrestart > /dev/null 2>&1; then
-  apt-get remove -y needrestart || true
-fi
-export NEEDRESTART_MODE=a
-export NEEDRESTART_SUSPEND=1
-
-# Update system
-echo "Updating system packages..."
-apt-get update -y
-
-# Configure firewall BEFORE installer (prevents SSH lockout if installer hangs)
-echo "Configuring firewall..."
-if command -v ufw &> /dev/null; then
-  ufw allow 22/tcp
-  ufw allow 80/tcp
-  ufw allow 443/tcp
-  ufw allow 3000/tcp
-  ufw allow 2377/tcp
-  ufw allow 7946/tcp
-  ufw allow 7946/udp
-  ufw allow 4789/udp
-  echo "y" | ufw enable || true
-else
-  iptables -A INPUT -p tcp --dport 3000 -j ACCEPT
-  iptables -A INPUT -p tcp --dport 22 -j ACCEPT
-  iptables -A INPUT -p tcp --dport 80 -j ACCEPT
-  iptables -A INPUT -p tcp --dport 443 -j ACCEPT
-  iptables -A INPUT -p tcp --dport 2377 -j ACCEPT
-  iptables -A INPUT -p tcp --dport 7946 -j ACCEPT
-  iptables -A INPUT -p udp --dport 7946 -j ACCEPT
-  iptables -A INPUT -p udp --dport 4789 -j ACCEPT
-  iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-  mkdir -p /etc/iptables
-  iptables-save > /etc/iptables/rules.v4 || true
-  apt-get install -y iptables-persistent || true
-fi
-
-# Switch from socket activation to traditional SSH service (prevents Ubuntu 24.04 ssh.socket bugs)
-echo "Switching to traditional SSH service..."
-systemctl disable --now ssh.socket 2>/dev/null || true
-systemctl enable --now ssh.service 2>/dev/null || true
-
-# Install Dokploy
-echo "Installing Dokploy..."
-curl -sSL https://dokploy.com/install.sh -o /tmp/dokploy-install.sh && head -c2 /tmp/dokploy-install.sh | grep -q "#!" && [ "$(wc -c < /tmp/dokploy-install.sh)" -gt 100 ] && env DEBIAN_FRONTEND=noninteractive NEEDRESTART_MODE=a NEEDRESTART_SUSPEND=1 sh /tmp/dokploy-install.sh && rm -f /tmp/dokploy-install.sh
-
-# Ensure SSH remains accessible after installation
-echo "Ensuring SSH service is active..."
-if ! ss -tlnp | grep -q ':22 '; then
-  systemctl restart ssh.service 2>/dev/null || systemctl restart sshd.service 2>/dev/null || true
-  sleep 2
-fi
-
-# Re-inject SSH public key (platform installer may overwrite authorized_keys)
-${sshPublicKey ? `echo "Re-injecting SSH public key..."
-mkdir -p /root/.ssh
-chmod 700 /root/.ssh
-grep -qF '${sshPublicKey.trim().replace(/'/g, "'\\''")}' /root/.ssh/authorized_keys 2>/dev/null || echo '${sshPublicKey.trim().replace(/'/g, "'\\''")}' >> /root/.ssh/authorized_keys
-chmod 600 /root/.ssh/authorized_keys` : "# No SSH public key provided — skipping re-injection"}
-
-# Wait for services
-echo "Waiting for Dokploy services to start..."
-sleep 30
-
-echo "=================================="
-echo "Dokploy installation completed!"
-echo "=================================="
-echo ""
-echo "Please wait 3-5 more minutes for Dokploy to fully initialize."
-echo "Then access your instance at: http://YOUR_SERVER_IP:3000"
+        return `#!/bin/bash
+set +e
+export DEBIAN_FRONTEND=noninteractive
+touch /var/log/kastell-install.log
+chmod 600 /var/log/kastell-install.log
+exec > >(tee /var/log/kastell-install.log) 2>&1
+
+echo "=================================="
+echo "Kastell Auto-Installer"
+echo "Server: ${safeName}"
+echo "Platform: Dokploy"
+echo "=================================="
+
+# Wait for network connectivity
+echo "Waiting for network connectivity..."
+MAX_ATTEMPTS=30
+ATTEMPTS=0
+while [ $ATTEMPTS -lt $MAX_ATTEMPTS ]; do
+  if curl -s --max-time 5 https://dokploy.com > /dev/null 2>&1; then
+    echo "Network is ready!"
+    break
+  fi
+  ATTEMPTS=$((ATTEMPTS + 1))
+  echo "Network not ready (attempt $ATTEMPTS/$MAX_ATTEMPTS)..."
+  sleep 2
+done
+
+# Disable needrestart to prevent interactive prompts during Docker/package installation
+echo "Disabling needrestart..."
+if dpkg -l needrestart > /dev/null 2>&1; then
+  apt-get remove -y needrestart || true
+fi
+export NEEDRESTART_MODE=a
+export NEEDRESTART_SUSPEND=1
+
+# Update system
+echo "Updating system packages..."
+apt-get update -y
+
+# Configure firewall BEFORE installer (prevents SSH lockout if installer hangs)
+echo "Configuring firewall..."
+if command -v ufw &> /dev/null; then
+  ufw allow 22/tcp
+  ufw allow 80/tcp
+  ufw allow 443/tcp
+  ufw allow 3000/tcp
+  ufw allow 2377/tcp
+  ufw allow 7946/tcp
+  ufw allow 7946/udp
+  ufw allow 4789/udp
+  echo "y" | ufw enable || true
+else
+  iptables -A INPUT -p tcp --dport 3000 -j ACCEPT
+  iptables -A INPUT -p tcp --dport 22 -j ACCEPT
+  iptables -A INPUT -p tcp --dport 80 -j ACCEPT
+  iptables -A INPUT -p tcp --dport 443 -j ACCEPT
+  iptables -A INPUT -p tcp --dport 2377 -j ACCEPT
+  iptables -A INPUT -p tcp --dport 7946 -j ACCEPT
+  iptables -A INPUT -p udp --dport 7946 -j ACCEPT
+  iptables -A INPUT -p udp --dport 4789 -j ACCEPT
+  iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
+  mkdir -p /etc/iptables
+  iptables-save > /etc/iptables/rules.v4 || true
+  apt-get install -y iptables-persistent || true
+fi
+
+# Switch from socket activation to traditional SSH service (prevents Ubuntu 24.04 ssh.socket bugs)
+echo "Switching to traditional SSH service..."
+systemctl disable --now ssh.socket 2>/dev/null || true
+systemctl enable --now ssh.service 2>/dev/null || true
+
+# Install Dokploy
+echo "Installing Dokploy..."
+curl -sSL https://dokploy.com/install.sh -o /tmp/dokploy-install.sh && head -c2 /tmp/dokploy-install.sh | grep -q "#!" && [ "$(wc -c < /tmp/dokploy-install.sh)" -gt 100 ] && env DEBIAN_FRONTEND=noninteractive NEEDRESTART_MODE=a NEEDRESTART_SUSPEND=1 sh /tmp/dokploy-install.sh && rm -f /tmp/dokploy-install.sh
+
+# Ensure SSH remains accessible after installation
+echo "Ensuring SSH service is active..."
+if ! ss -tlnp | grep -q ':22 '; then
+  systemctl restart ssh.service 2>/dev/null || systemctl restart sshd.service 2>/dev/null || true
+  sleep 2
+fi
+
+# Re-inject SSH public key (platform installer may overwrite authorized_keys)
+${sshPublicKey ? `echo "Re-injecting SSH public key..."
+mkdir -p /root/.ssh
+chmod 700 /root/.ssh
+grep -qF '${sshPublicKey.trim().replace(/'/g, "'\\''")}' /root/.ssh/authorized_keys 2>/dev/null || echo '${sshPublicKey.trim().replace(/'/g, "'\\''")}' >> /root/.ssh/authorized_keys
+chmod 600 /root/.ssh/authorized_keys` : "# No SSH public key provided — skipping re-injection"}
+
+# Wait for services
+echo "Waiting for Dokploy services to start..."
+sleep 30
+
+echo "=================================="
+echo "Dokploy installation completed!"
+echo "=================================="
+echo ""
+echo "Please wait 3-5 more minutes for Dokploy to fully initialize."
+echo "Then access your instance at: http://YOUR_SERVER_IP:3000"
 `;
     }
     async healthCheck(ip, domain) {

package/dist/core/audit/formatters/badge.js

@@ -21,26 +21,26 @@ export function formatBadge(result) {
     const labelWidth = 62;
     const valueWidth = 48;
     const totalWidth = labelWidth + valueWidth;
-    return `<svg xmlns="http://www.w3.org/2000/svg" width="${totalWidth}" height="20" role="img" aria-label="security: ${value}">
-  <title>security: ${value}</title>
-  <linearGradient id="s" x2="0" y2="100%">
-    <stop offset="0" stop-color="#bbb" stop-opacity=".1"/>
-    <stop offset="1" stop-opacity=".1"/>
-  </linearGradient>
-  <clipPath id="r">
-    <rect width="${totalWidth}" height="20" rx="3" fill="#fff"/>
-  </clipPath>
-  <g clip-path="url(#r)">
-    <rect width="${labelWidth}" height="20" fill="#555"/>
-    <rect x="${labelWidth}" width="${valueWidth}" height="20" fill="${color}"/>
-    <rect width="${totalWidth}" height="20" fill="url(#s)"/>
-  </g>
-  <g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="110">
-    <text aria-hidden="true" x="${labelWidth * 5}" y="150" fill="#010101" fill-opacity=".3" transform="scale(.1)" textLength="${(labelWidth - 10) * 10}">security</text>
-    <text x="${labelWidth * 5}" y="140" transform="scale(.1)" fill="#fff" textLength="${(labelWidth - 10) * 10}">security</text>
-    <text aria-hidden="true" x="${(labelWidth + valueWidth / 2) * 10}" y="150" fill="#010101" fill-opacity=".3" transform="scale(.1)" textLength="${(valueWidth - 10) * 10}">${value}</text>
-    <text x="${(labelWidth + valueWidth / 2) * 10}" y="140" transform="scale(.1)" fill="#fff" textLength="${(valueWidth - 10) * 10}">${value}</text>
-  </g>
+    return `<svg xmlns="http://www.w3.org/2000/svg" width="${totalWidth}" height="20" role="img" aria-label="security: ${value}">
+  <title>security: ${value}</title>
+  <linearGradient id="s" x2="0" y2="100%">
+    <stop offset="0" stop-color="#bbb" stop-opacity=".1"/>
+    <stop offset="1" stop-opacity=".1"/>
+  </linearGradient>
+  <clipPath id="r">
+    <rect width="${totalWidth}" height="20" rx="3" fill="#fff"/>
+  </clipPath>
+  <g clip-path="url(#r)">
+    <rect width="${labelWidth}" height="20" fill="#555"/>
+    <rect x="${labelWidth}" width="${valueWidth}" height="20" fill="${color}"/>
+    <rect width="${totalWidth}" height="20" fill="url(#s)"/>
+  </g>
+  <g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="110">
+    <text aria-hidden="true" x="${labelWidth * 5}" y="150" fill="#010101" fill-opacity=".3" transform="scale(.1)" textLength="${(labelWidth - 10) * 10}">security</text>
+    <text x="${labelWidth * 5}" y="140" transform="scale(.1)" fill="#fff" textLength="${(labelWidth - 10) * 10}">security</text>
+    <text aria-hidden="true" x="${(labelWidth + valueWidth / 2) * 10}" y="150" fill="#010101" fill-opacity=".3" transform="scale(.1)" textLength="${(valueWidth - 10) * 10}">${value}</text>
+    <text x="${(labelWidth + valueWidth / 2) * 10}" y="140" transform="scale(.1)" fill="#fff" textLength="${(valueWidth - 10) * 10}">${value}</text>
+  </g>
 </svg>`;
 }
 //# sourceMappingURL=badge.js.map