first commit

builder/debian/install.sh

@@ -0,0 +1,29 @@
+#!/bin/bash
+set -euo pipefail
+
+if [[ ${EUID} -ne 0 ]]; then
+    echo "Run as root" >&2
+    exit 1
+fi
+
+REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+
+apt-get update
+DEBIAN_FRONTEND=noninteractive apt-get install -y \
+    ca-certificates cron git openssh-client rsync util-linux curl jq
+
+install -d -m 0755 /srv/rustproxy-opnsense
+install -d -m 0755 /var/lib/rustproxy-opnsense-builder
+install -m 0755 "$REPO_ROOT/builder/debian/hourly-build.sh" /usr/local/sbin/rustproxy-opnsense-hourly
+install -m 0644 "$REPO_ROOT/builder/debian/rustproxy-opnsense.cron" /etc/cron.d/rustproxy-opnsense
+
+if [[ ! -e /etc/rustproxy-opnsense-builder.env ]]; then
+    install -m 0600 "$REPO_ROOT/builder.env.example" /etc/rustproxy-opnsense-builder.env
+    echo "Created /etc/rustproxy-opnsense-builder.env. Edit it before the first cron run."
+fi
+
+touch /var/log/rustproxy-opnsense-builder.log
+chmod 0640 /var/log/rustproxy-opnsense-builder.log
+systemctl enable --now cron
+
+echo "Debian scheduler installed."