#!/bin/bash source "${AGENT_PATH}/common.sh" SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" # Check required environment variables _check_required_env_vars "CONTAINER_NAME" "ES_VERSION" "LS_VERSION" "KIBANA_VERSION" # Check Docker and Docker Compose are available _check_docker_installed || _die "Docker test failed" docker compose version >/dev/null 2>&1 || _die "Docker Compose is not installed (requires Docker Compose V2)" # Check vm.max_map_count for Elasticsearch current_max_map_count=$(sysctl -n vm.max_map_count 2>/dev/null || echo 0) if [ "$current_max_map_count" -lt 262144 ]; then echo "WARNING: vm.max_map_count is too low ($current_max_map_count)" echo "Elasticsearch requires at least 262144" echo "Please run: sudo sysctl -w vm.max_map_count=262144" echo "And add to /etc/sysctl.conf to persist" _die "System configuration needs adjustment" fi # Stop any existing containers bash ./stop.sh || true # Remove old containers docker compose down --remove-orphans 2>/dev/null || true # Pull the Docker images echo "Pulling ELK stack images..." docker pull docker.elastic.co/elasticsearch/elasticsearch:${ES_VERSION} || _die "Failed to pull Elasticsearch" docker pull docker.elastic.co/logstash/logstash:${LS_VERSION} || _die "Failed to pull Logstash" docker pull docker.elastic.co/kibana/kibana:${KIBANA_VERSION} || _die "Failed to pull Kibana" # Ensure config directory exists mkdir -p "${CONFIG_PATH}" # Initialize API keys file if it doesn't exist if [ ! -f "${CONFIG_PATH}/api-keys.yml" ]; then echo "No API keys configured yet." echo "Run ./generate-api-key.sh to add client keys" echo "api_keys:" > "${CONFIG_PATH}/api-keys.yml" fi # Copy Logstash configuration if it doesn't exist if [ ! -f "${CONFIG_PATH}/logstash.conf" ]; then SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" if [ -f "$SCRIPT_DIR/config/logstash.conf" ]; then cp "$SCRIPT_DIR/config/logstash.conf" "${CONFIG_PATH}/logstash.conf" echo "Copied Logstash configuration to ${CONFIG_PATH}" else echo "WARNING: logstash.conf not found in template" fi fi # Start the ELK stack echo "Starting ELK stack..." docker compose up -d --build || _die "Failed to start ELK stack" # Wait for services to be ready echo "Waiting for services to start..." sleep 10 # Check status bash ./status.sh || _die "Services failed to start properly" echo "Installation of ${CONTAINER_NAME} complete" echo "" echo "=========================================" echo "Kibana UI: ${SERVER_PUBLICBASEURL:-http://$(hostname -I | awk '{print $1}'):${KIBANA_PORT}}" echo "Username: elastic" echo "Password: ${ELASTIC_PASSWORD:-changeme}" echo "=========================================" echo "" echo "IMPORTANT: Update service.env with:" echo " - Your actual server IP/domain in SERVER_PUBLICBASEURL" echo " - A secure password in ELASTIC_PASSWORD" echo "" echo "Logstash listening on port ${LOGSTASH_BEATS_PORT} for Filebeat clients" echo "" echo "To add client authentication:" echo " ./generate-api-key.sh"