60 lines
2.4 KiB
Bash
Executable File
60 lines
2.4 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -Eeuo pipefail
|
|
umask 077
|
|
|
|
STACK_DIR=${STACK_DIR:-/opt/mike-ai/stack}
|
|
SECRETS_DIR=${SECRETS_DIR:-/etc/mike-ai}
|
|
HERMES_DATA_DIR=${HERMES_DATA_DIR:-/data/hermes}
|
|
MUA_ENV=${MUA_ENV:-$SECRETS_DIR/mua-mcp.env}
|
|
|
|
die() { printf 'FEHLER: %s\n' "$*" >&2; exit 1; }
|
|
[[ $EUID -eq 0 ]] || die "Bitte als root ausführen."
|
|
[[ -s $SECRETS_DIR/router-api-key ]] || die "Router-API-Key fehlt."
|
|
[[ -s $STACK_DIR/platform/hermes/config.yaml ]] || die "Hermes-Konfiguration fehlt im Stack."
|
|
|
|
install -d -m 0700 "$HERMES_DATA_DIR"
|
|
install -d -m 0750 "$HERMES_DATA_DIR/workspace"
|
|
[[ -s $SECRETS_DIR/hermes-api-key ]] || openssl rand -base64 48 >"$SECRETS_DIR/hermes-api-key"
|
|
[[ -s $SECRETS_DIR/hermes-dashboard-password ]] || openssl rand -base64 24 >"$SECRETS_DIR/hermes-dashboard-password"
|
|
[[ -s $SECRETS_DIR/hermes-dashboard-secret ]] || openssl rand -base64 48 >"$SECRETS_DIR/hermes-dashboard-secret"
|
|
chmod 0600 "$SECRETS_DIR/hermes-api-key" \
|
|
"$SECRETS_DIR/hermes-dashboard-password" \
|
|
"$SECRETS_DIR/hermes-dashboard-secret"
|
|
|
|
router_key=$(<"$SECRETS_DIR/router-api-key")
|
|
mua_url=http://127.0.0.1:9/mcp
|
|
mua_token=not-configured
|
|
if [[ -s $MUA_ENV ]]; then
|
|
mua_url=$(sed -n 's/^MUA_MCP_URL=//p' "$MUA_ENV" | head -n 1)
|
|
mua_token=$(sed -n 's/^MUA_MCP_BEARER_TOKEN=//p' "$MUA_ENV" | head -n 1)
|
|
[[ -n $mua_url && -n $mua_token ]] || die "MUA URL oder Token fehlt."
|
|
fi
|
|
|
|
cat >"$HERMES_DATA_DIR/.env" <<EOF
|
|
ROUTER_API_KEY=$router_key
|
|
MUA_MCP_URL=$mua_url
|
|
MUA_MCP_BEARER_TOKEN=$mua_token
|
|
SEARXNG_URL=http://searxng:8080
|
|
API_SERVER_ENABLED=true
|
|
API_SERVER_HOST=0.0.0.0
|
|
API_SERVER_PORT=8642
|
|
API_SERVER_KEY=$(<"$SECRETS_DIR/hermes-api-key")
|
|
API_SERVER_MODEL_NAME=MikeAI-Hermes
|
|
HERMES_DASHBOARD=1
|
|
HERMES_DASHBOARD_HOST=0.0.0.0
|
|
HERMES_DASHBOARD_PORT=9119
|
|
HERMES_DASHBOARD_BASIC_AUTH_USERNAME=michael
|
|
HERMES_DASHBOARD_BASIC_AUTH_PASSWORD=$(<"$SECRETS_DIR/hermes-dashboard-password")
|
|
HERMES_DASHBOARD_BASIC_AUTH_SECRET=$(<"$SECRETS_DIR/hermes-dashboard-secret")
|
|
EOF
|
|
chmod 0600 "$HERMES_DATA_DIR/.env"
|
|
|
|
if [[ -s $HERMES_DATA_DIR/config.yaml ]] && \
|
|
! cmp -s "$STACK_DIR/platform/hermes/config.yaml" "$HERMES_DATA_DIR/config.yaml"; then
|
|
cp -a "$HERMES_DATA_DIR/config.yaml" \
|
|
"$HERMES_DATA_DIR/config.yaml.before-managed-update-$(date +%Y%m%d-%H%M%S)"
|
|
fi
|
|
install -m 0600 "$STACK_DIR/platform/hermes/config.yaml" "$HERMES_DATA_DIR/config.yaml"
|
|
chown -R 10000:10000 "$HERMES_DATA_DIR"
|
|
printf 'HERMES_CONFIG_OK %s\n' "$HERMES_DATA_DIR"
|