infrastructure-ng/id.tjo.space/install.sh

#!/bin/bash
set -euo pipefail

echo "== Fetch Source Code (from git)"
cd "/root/service"
# Clone if not yet cloned
if [ ! -d .git ]; then
  git clone \
    --depth 1 \
    --no-checkout \
    --filter=tree:0 \
    https://github.com/tjo-space/tjo-space-infrastructure.git .
  git sparse-checkout set --no-cone /id.tjo.space
  git checkout
else
  git fetch --depth=1
  git reset --hard origin/main
fi

echo "=== Installing Dependencies"
apt update -y
apt install -y \
  git \
  podman

echo "=== Configure Firewall"
ufw allow 22/tcp  # SSH
ufw allow 443/tcp # HTTPS
ufw allow 636/tcp # LDAPS
ufw enable

echo "=== Setup Containers"
cp -r /id.tjo.space/containers /etc/containers/systemd/