diff --git a/ct/passbolt.sh b/ct/passbolt.sh new file mode 100644 index 000000000..a2b94fa5f --- /dev/null +++ b/ct/passbolt.sh @@ -0,0 +1,44 @@ +#!/usr/bin/env bash +source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func) +# Copyright (c) 2021-2025 community-scripts ORG +# Author: Slaviša Arežina (tremor021) +# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE +# Source: https://www.passbolt.com/ + +APP="Passbolt" +var_tags="${var_tags:-auth}" +var_cpu="${var_cpu:-2}" +var_ram="${var_ram:-2048}" +var_disk="${var_disk:-2}" +var_os="${var_os:-debian}" +var_version="${var_version:-13}" +var_unprivileged="${var_unprivileged:-1}" + +header_info "$APP" +variables +color +catch_errors + +function update_script() { + header_info + check_container_storage + check_container_resources + if [[ ! -d /var ]]; then + msg_error "No ${APP} Installation Found!" + exit + fi + msg_info "Updating $APP LXC" + $STD apt update + $STD apt upgrade -y + msg_ok "Updated $APP LXC" + exit +} + +start +build_container +description + +msg_ok "Completed Successfully!\n" +echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}" +echo -e "${INFO}${YW} Access it using the following URL:${CL}" +echo -e "${TAB}${GATEWAY}${BGN}https://${IP}${CL}" diff --git a/frontend/public/json/passbolt.json b/frontend/public/json/passbolt.json new file mode 100644 index 000000000..09359e49d --- /dev/null +++ b/frontend/public/json/passbolt.json @@ -0,0 +1,44 @@ +{ + "name": "Passbolt", + "slug": "passbolt", + "categories": [ + 6 + ], + "date_created": "2025-09-04", + "type": "ct", + "updateable": true, + "privileged": false, + "interface_port": 443, + "documentation": "https://www.passbolt.com/docs/", + "config_path": "/etc/passbolt/passbolt.php", + "website": "https://www.passbolt.com/", + "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/passbolt.webp", + "description": "Passbolt is a hybrid credential platform. It is built-first for modern IT teams, yet simple enough for everyone. A sovereign, battle-tested solution that delivers for a team of 5, or an organisation of 5000.", + "install_methods": [ + { + "type": "default", + "script": "ct/passbolt.sh", + "resources": { + "cpu": 2, + "ram": 2048, + "hdd": 2, + "os": "Debian", + "version": "13" + } + } + ], + "default_credentials": { + "username": null, + "password": null + }, + "notes": [ + { + "text": "Type `cat ~/.Passbolt.creds` to see MariaDB database credentials. You will need those to setup Passbolt.", + "type": "info" + }, + { + "text": "The application uses self-signed certificates. You can also use Let's Encrypt to get a valid certificate for your domain. Please read the documentation for more information.", + "type": "info" + } + ] +} diff --git a/install/passbolt-install.sh b/install/passbolt-install.sh new file mode 100644 index 000000000..5a1d36b4c --- /dev/null +++ b/install/passbolt-install.sh @@ -0,0 +1,51 @@ +#!/usr/bin/env bash + +# Copyright (c) 2021-2025 community-scripts ORG +# Author: Slaviša Arežina (tremor021) +# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE +# Source: https://www.passbolt.com/ + +source /dev/stdin <<<"$FUNCTIONS_FILE_PATH" +color +verb_ip6 +catch_errors +setting_up_container +network_check +update_os + +msg_info "Installing dependencies" +$STD apt install -y \ + apt-transport-https \ + python3-certbot-nginx \ + debconf-utils +msg_ok "Installed dependencies" + +setup_mariadb +MARIADB_DB_NAME="passboltdb" MARIADB_DB_USER="passbolt" MARIADB_DB_PASS="$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)" setup_mariadb_db +setup_deb822_repo \ + "passbolt" \ + "https://keys.openpgp.org/pks/lookup?op=get&options=mr&search=0x3D1A0346C8E1802F774AEF21DE8B853FC155581D" \ + "https://download.passbolt.com/ce/debian" \ + "buster" \ + "stable" +create_self_signed_cert "passbolt" + +msg_info "Setting up Passbolt (Patience)" +export DEBIAN_FRONTEND=noninteractive +IP_ADDR=$(hostname -I | awk '{print $1}') +echo passbolt-ce-server passbolt/mysql-configuration boolean true | debconf-set-selections +echo passbolt-ce-server passbolt/mysql-passbolt-username string $MARIADB_DB_USER | debconf-set-selections +echo passbolt-ce-server passbolt/mysql-passbolt-password password $MARIADB_DB_PASS | debconf-set-selections +echo passbolt-ce-server passbolt/mysql-passbolt-password-repeat password $MARIADB_DB_PASS | debconf-set-selections +echo passbolt-ce-server passbolt/mysql-passbolt-dbname string $MARIADB_DB_NAME | debconf-set-selections +echo passbolt-ce-server passbolt/nginx-configuration boolean true | debconf-set-selections +echo passbolt-ce-server passbolt/nginx-configuration-three-choices select manual | debconf-set-selections +echo passbolt-ce-server passbolt/nginx-domain string $IP_ADDR | debconf-set-selections +echo passbolt-ce-server passbolt/nginx-certificate-file string /etc/ssl/passbolt/passbolt.crt | debconf-set-selections +echo passbolt-ce-server passbolt/nginx-certificate-key-file string /etc/ssl/passbolt/passbolt.key | debconf-set-selections +$STD apt install -y --no-install-recommends passbolt-ce-server +msg_ok "Setup Passbolt" + +motd_ssh +customize +cleanup_lxc