librelad 4430edc40e fix(apps): de-sudo the remaining per-app .sh file ops via runFileOp
Sweep of every containers/<app>/<app>.sh after the install-side fix that
went into config_file_setup_data.sh — these were the same class of bug:
bare `sudo sed -i` / `sudo docker exec` calls left over from when the
manager carried NOPASSWD:ALL. After the rootless+de-sudo hardening (Model
A, sudoers scoped to LP_HELPERS + LP_SYSTEM only) those calls fail at
runtime, so every per-app routine that uses one would refuse on install
or in its post-install tweak step.

Each call routes through the existing `runFileOp` shim, which picks the
right path per CFG_DOCKER_INSTALL_TYPE (dockerinstall in rootless, manager
in rootful) — same pattern setup_dns.sh / authelia.sh / config_file_setup_data.sh
already use.

Fixed:
  gitea.sh:65       — sync GITEA_METRICS_TOKEN into prometheus-scrape.yml
  owncloud.sh:88    — fill OWNCLOUD_SETUP_* in the setup-webform html
  searxng.sh:87     — flip simple_style: auto → CFG_SEARXNG_THEME
  trilium.sh:89     — rewrite trilium-data/config.ini port=
  bookstack.sh:139  — bookstack:create-admin via `docker exec`
  bookstack.sh:148  — admin@admin.com cleanup via `docker exec ... tinker`

`bash -n` clean on every touched file. Untested live (none of these apps
are installed on the verify VM) but mechanically equivalent to the
already-validated config_file_setup_data.sh fix.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Signed-off-by: librelad <librelad@digitalangels.vip>
2026-05-26 17:48:00 +01:00

136 lines
3.6 KiB
Bash
Executable File

#!/bin/bash
# Category : Privacy & Security Tools
# Description : SearxNG - Privacy-focused Search Engine (c/u/s/r/i):
installSearxng()
{
local config_variables="$1"
if [[ "$searxng" == *[cCtTuUsSrRiI]* ]]; then
dockerConfigSetupToContainer silent searxng;
local app_name=$CFG_SEARXNG_APP_NAME
initializeAppVariables $app_name;
fi
if [[ "$searxng" == *[cC]* ]]; then
editAppConfig $app_name;
fi
if [[ "$searxng" == *[uU]* ]]; then
dockerUninstallApp $app_name;
fi
if [[ "$searxng" == *[sS]* ]]; then
dockerComposeDown $app_name;
fi
if [[ "$searxng" == *[rR]* ]]; then
dockerComposeRestart $app_name;
fi
if [[ "$searxng" == *[iI]* ]]; then
isHeader "Install $app_name"
((menu_number++))
echo ""
echo "---- $menu_number. Setting up install folder and config file for $app_name."
echo ""
dockerConfigSetupToContainer "loud" "$app_name" "install" "$config_variables";
isSuccessful "Install folders and Config files have been setup for $app_name."
((menu_number++))
echo ""
((menu_number++))
echo ""
echo "---- $menu_number. Setting up the $app_name docker-compose.yml file."
echo ""
dockerComposeSetupFile $app_name;
((menu_number++))
echo ""
echo "---- $menu_number. Updating file permissions before starting."
echo ""
fixPermissionsBeforeStart $app_name;
((menu_number++))
echo ""
echo "---- $menu_number. Running the docker-compose.yml to install and start $app_name"
echo ""
dockerComposeUpdateAndStartApp $app_name install;
local searxng_timeout=10
local searxng_counter=0
# Loop to check for the existence of the file every second
while [ ! -f "$containers_dir$app_name/searxng-data/settings.yml" ]; do
if [ "$searxng_counter" -ge "$searxng_timeout" ]; then
isNotice "File not found after 10 seconds. Exiting..."
break
fi
isNotice "Waiting for the file to appear..."
read -t 1 # Wait for 1 second
# Increment the counter
local searxng_counter=$((searxng_counter + 1))
done
# Check if the file was found or if we timed out
if [ -f "$containers_dir$app_name/searxng-data/settings.yml" ]; then
# Perform the required operation on the file once it exists
local result=$(runFileOp sed -i "s/simple_style: auto/simple_style: $CFG_SEARXNG_THEME/" "$containers_dir$app_name/searxng-data/settings.yml")
checkSuccess "Changing from light mode to dark mode to avoid eye strain installs"
dockerComposeRestart $app_name;
fi
((menu_number++))
echo ""
echo "---- $menu_number. Running Application specific updates (if required)"
echo ""
appUpdateSpecifics $app_name;
((menu_number++))
echo ""
echo "---- $menu_number. Running Headscale setup (if required)"
echo ""
setupHeadscale $app_name;
((menu_number++))
echo ""
echo "---- $menu_number. Adding $app_name to the Apps Database table."
echo ""
databaseInstallApp $app_name;
((menu_number++))
echo ""
echo "---- $menu_number. Updating WebUI config file."
echo ""
webuiContainerSetup $app_name install;
((menu_number++))
echo ""
echo "---- $menu_number. You can find $app_name files at $containers_dir$app_name"
echo ""
echo " You can now navigate to your $app_name service using any of the options below : "
echo ""
menuShowFinalMessages $app_name;
menu_number=0
#sleep 3s
cd
fi
searxng=n
}