From 313af9efa65641516ae41f1c1ea0549ee445e455 Mon Sep 17 00:00:00 2001
From: Sam Chudnick <sam@chudnick.com>
Date: Sun, 17 Apr 2022 12:30:41 -0400
Subject: Added sections for configuring director, monitoring module, and the
 web server. Fixed a few mistakes.

---
 monitoring/icinga-master | 99 ++++++++++++++++++++++++++++++++----------------
 1 file changed, 67 insertions(+), 32 deletions(-)

diff --git a/monitoring/icinga-master b/monitoring/icinga-master
index ed82bc5..f8cedd1 100755
--- a/monitoring/icinga-master
+++ b/monitoring/icinga-master
@@ -15,57 +15,60 @@ admin_user="admin"
 admin_password="changeme"
 
 # Install packages
-apt install -y incinga2 icingaweb2 icinga2-ido-mysql icingaweb2-module-director \
-			   monitoring-plugins monitoring-plugins-contrib
+apt install -y icinga2 icingaweb2 icinga2-ido-mysql icingaweb2-module-director \
+			   monitoring-plugins monitoring-plugins-contrib default-mysql-server
 
 # Secure mysql
 mysql_secure_installation
 
 # Create primary monitoring database
-mysql -u root -e "CREATE DATABASE icinga2;
-GRANT SELECT, INSERT, UPDATE, DELETE, DROP, CREATE VIEW, INDEX, EXECUTE
-ON icinga2.* TO '$ido_user'@'localhost' IDENTIFIED BY '$ido_password';
-FLUSH PRIVILEGES; "
-mysql -u root icinga2 </usr/share/icinga2-ido-mysql/scheme/mysql.sql
+echo "Creating IDO database..."
+mysql -u root -e "CREATE DATABASE icinga2; GRANT SELECT, INSERT, UPDATE, DELETE, DROP, CREATE VIEW, INDEX, EXECUTE ON icinga2.* TO '$ido_user'@'localhost' IDENTIFIED BY '$ido_password'; FLUSH PRIVILEGES;"
+mysql -u root icinga2 </usr/share/icinga2-ido-mysql/schema/mysql.sql
 echo "library \"db_ido_mysql\"
 object IdoMysqlConnection \"ido-mysql\" {
   user = \"$ido_user\",
   password = \"$ido_password\",
   host = \"localhost\",
-  databse = \"icinga2\"
+  database = \"icinga2\"
 }" > /etc/icinga2/features-available/ido-mysql.conf
 icinga2 feature enable ido-mysql
 
 # Create icingaweb2 database
-mysql -u root -e "CREATE DATABASE icingaweb2;
-GRANT ALL ON icingaweb2.* TO '$icingaweb2_user'@'localhost'
-IDENTIFIED BY '$icingaweb2_password';
-FLUSH PRIVILEGES;"
-mysql icingaweb2 </usr/share/icingaweb2/etc/scheme/mysql.schema.sql
+echo "Creating icingaweb2 database..."
+mysql -u root -e "CREATE DATABASE icingaweb2;GRANT ALL ON icingaweb2.* TO '$icingaweb2_user'@'localhost' IDENTIFIED BY '$icingaweb2_password'; FLUSH PRIVILEGES;"
+mysql icingaweb2 </usr/share/icingaweb2/etc/schema/mysql.schema.sql
 # Create initial admin user to login to icingaweb2
 passhash="$(php -r "echo password_hash(\"$admin_password\", PASSWORD_DEFAULT);")"
-mysql -u root -e "USE icingaweb2; 
-INSERT INTO icingaweb_user (name, active, password_hash)
-VALUES (\"$admin_user\", 1, \"$passhash\");
-FLUSH PRIVILEGES; "
+mysql -u root -e "USE icingaweb2; INSERT INTO icingaweb_user (name, active, password_hash) VALUES (\"$admin_user\", 1, \"$passhash\"); FLUSH PRIVILEGES;"
 
 # Create director database
-mysql -u root -e "CREATE DATABASE director CHARACTER SET 'utf8';
-GRANT ALL on director.* TO '$director_user'@'localhost'
-IDENTIFIED BY '$director_password';
-FLUSH PRIVILEGES;"
-icingacli module enable director
-icingacli director migration run --verbose
+echo "Creating director database..."
+mysql -u root -e "CREATE DATABASE director CHARACTER SET 'utf8'; GRANT ALL on director.* TO '$director_user'@'localhost' IDENTIFIED BY '$director_password';FLUSH PRIVILEGES;"
 
 # Setup API
+echo "Setting up API..."
 icinga2 api setup
 
 # Restart service
 systemctl restart icinga2
 
+# Configure web server
+websrv=
+webstr=
+[ -d /etc/apache2 ] && websrv="apache" && webstr="apache2"
+[ -d /etc/nginx ] && websrv="nginx" && webstr="nginx"
+sitefile="/etc/$webstr/sites-available/icingaweb2.conf"
+icingacli module enable setup
+icingacli setup config webserver $websrv --file $sitefile
+ln -s $sitefile /etc/$webstr/sites-enabled
+[ "$websrv" = "apache" ] && a2enmod ssl && a2enmod php7.4 && a2enconf icingaweb2 && a2ensite default-ssl.conf
+systemctl restart $webstr
+icingacli module disable setup
 
-# -- Icingaweb2 Configuration --
 
+# -- Icingaweb2 Configuration --
+echo "Configuring icingaweb2..."
 # Configure authentication
 echo "[icingaweb2]
 backend = \"db\"
@@ -76,18 +79,18 @@ resource = \"icingaweb2\"
 echo "[icinga2]
 type = \"db\"
 db = \"mysql\"
-host \"localhost\"
+host = \"localhost\"
 port = \"\"
 dbname = \"icinga2\"
-username = \"$icinga2_user\"
-password = \"$icinga2_password\"
+username = \"$ido_user\"
+password = \"$ido_password\"
 charset = \"\"
 use_ssl = \"0\"
 
 [icingaweb2]
 type = \"db\"
 db = \"mysql\"
-host \"localhost\"
+host = \"localhost\"
 port = \"\"
 dbname = \"icingaweb2\"
 username = \"$icingaweb2_user\"
@@ -95,10 +98,10 @@ password = \"$icingaweb2_password\"
 charset = \"\"
 use_ssl = \"0\"
 
-[icingaweb2]
+[director]
 type = \"db\"
 db = \"mysql\"
-host \"localhost\"
+host = \"localhost\"
 port = \"\"
 dbname = \"director\"
 username = \"$director_user\"
@@ -112,9 +115,41 @@ echo "[admins]
 users = \"$admin_user\"
 permissions = \"*\" " > /etc/icingaweb2/roles.ini
 
+# Configure monitoring module
+echo "Configuring monitoring..."
+echo "[icinga]
+type = \"ido\"
+resource = \"icinga2\"
+" > /etc/icingaweb2/modules/monitoring/backends.ini
+api_pass="$(grep password /etc/icinga2/conf.d/api-users.conf | tr -d ' "' | cut -d '=' -f 2)"
+echo "[icinga2]
+transport = \"api\"
+host = \"$(hostname)\"
+port = \"5665\"
+username = \"root\"
+password = \"$api_pass\"
+" > /etc/icingaweb2/modules/monitoring/commandtransports.ini
+
+echo "[security]
+protected_customvars = \"*pw*,*pass*,*community*\"
+" > /etc/icingaweb2/modules/monitoring/config.ini
+
+
 # Configure director
+echo "Configuring director..."
 echo "[db]
 resource = \"director\"
 " > /etc/icingaweb2/modules/director/config.ini
-
-echo "NOW\nBrowse to http://$(hostname)/icingaweb2/ and login as $admin_user"
+icingacli module enable director
+icingacli director migration run
+echo "[config]
+endpoint = \"monitoring.home.local\"
+username = \"root\"
+password = \"$api_pass\"
+" > /etc/icingaweb2/modules/director/kickstart.ini
+icingacli director kickstart run
+icingacli director config render
+icingacli director config deploy
+shred -uz /etc/icingaweb2/modules/director/kickstart.ini
+
+echo "\n\nNOW\n\nBrowse to http://$(hostname)/icingaweb2/ and login as $admin_user"
-- 
cgit v1.2.3