2026-01-23 14:15:16 +01:00
|
|
|
|
# Customer Installer – Proxmox LXC n8n Stack
|
|
|
|
|
|
|
|
|
|
|
|
## Überblick
|
|
|
|
|
|
Dieses Projekt automatisiert die Bereitstellung **DSGVO‑konformer Kunden‑LXCs** auf einem **Proxmox‑Cluster**.
|
|
|
|
|
|
Pro Kunde wird **eine eigene LXC** erstellt, inklusive:
|
|
|
|
|
|
|
|
|
|
|
|
- Debian 12
|
|
|
|
|
|
- Docker + Docker Compose Plugin
|
|
|
|
|
|
- PostgreSQL + pgvector
|
|
|
|
|
|
- n8n
|
|
|
|
|
|
- Vorbereitung für Reverse Proxy (OPNsense / NGINX)
|
|
|
|
|
|
- VLAN‑Anbindung
|
|
|
|
|
|
- APT‑ & Docker‑Proxy (Apt‑Cacher NG)
|
|
|
|
|
|
|
|
|
|
|
|
Ziel: **reproduzierbare, schnelle und saubere Kunden‑Setups**, vollständig skriptgesteuert.
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
## Architektur
|
|
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
|
Internet
|
|
|
|
|
|
│
|
|
|
|
|
|
OPNsense (os-nginx, TLS, Wildcard-Zertifikat)
|
|
|
|
|
|
│
|
|
|
|
|
|
VLAN 90
|
|
|
|
|
|
│
|
|
|
|
|
|
Proxmox LXC (Debian 12)
|
|
|
|
|
|
├── Docker
|
|
|
|
|
|
│ ├── n8n
|
|
|
|
|
|
│ └── PostgreSQL (pgvector)
|
|
|
|
|
|
└── Kunden-Daten (isoliert)
|
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
## Voraussetzungen
|
|
|
|
|
|
|
|
|
|
|
|
### Proxmox Host
|
|
|
|
|
|
- Proxmox VE (Clusterfähig)
|
|
|
|
|
|
- Zugriff auf:
|
|
|
|
|
|
- `pct`
|
|
|
|
|
|
- `pvesm`
|
|
|
|
|
|
- `pveam`
|
|
|
|
|
|
- Storage für LXCs (z. B. `local-zfs`)
|
|
|
|
|
|
- Bridge (z. B. `vmbr0`)
|
|
|
|
|
|
- VLAN‑fähiges Netzwerk
|
|
|
|
|
|
|
|
|
|
|
|
### Netzwerk / Infrastruktur
|
|
|
|
|
|
- OPNsense Firewall
|
|
|
|
|
|
- VLAN (Standard: **VLAN 90**)
|
|
|
|
|
|
- Wildcard‑Zertifikat auf OPNsense
|
|
|
|
|
|
- os‑nginx Plugin aktiv
|
|
|
|
|
|
- Apt‑Cacher NG:
|
|
|
|
|
|
- HTTP: `http://192.168.45.2:3142`
|
|
|
|
|
|
- Docker Registry Mirror:
|
|
|
|
|
|
- `http://192.168.45.2:5000`
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
## Projektstruktur
|
|
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
|
customer-installer/
|
|
|
|
|
|
├── install.sh
|
|
|
|
|
|
├── libsupabase.sh
|
|
|
|
|
|
├── setupowner.sh
|
|
|
|
|
|
├── templates/
|
|
|
|
|
|
│ └── docker-compose.yml
|
|
|
|
|
|
└── README.md
|
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
## Installation
|
|
|
|
|
|
|
|
|
|
|
|
```bash
|
|
|
|
|
|
bash install.sh --storage local-zfs --bridge vmbr0 --ip dhcp --vlan 90
|
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
## Automatisierte Schritte
|
|
|
|
|
|
|
|
|
|
|
|
1. Template-Download (Debian 12)
|
|
|
|
|
|
2. CTID-Generierung (Unix-Zeit - 1.000.000.000)
|
|
|
|
|
|
3. LXC-Erstellung + VLAN
|
|
|
|
|
|
4. Docker + Compose Installation
|
|
|
|
|
|
5. APT & Docker Proxy Konfiguration
|
|
|
|
|
|
6. n8n + PostgreSQL Stack
|
|
|
|
|
|
7. Ausgabe aller Zugangsdaten als JSON
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
## Status
|
|
|
|
|
|
|
|
|
|
|
|
✅ produktiv einsetzbar
|
|
|
|
|
|
🟡 Reverse Proxy Automatisierung ausgelagert
|
|
|
|
|
|
🟡 Workflow & Credential Import separat
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
## Lizenz / Hinweis
|
|
|
|
|
|
|
|
|
|
|
|
Internes Projekt – kein Public Release.
|
