#!/usr/bin/env bash # Aztec V5 monitoring installer — self-hosted Prometheus/Grafana/Alertmanager + Telegram. # Runs on the Aztec node (metrics setup) or a monitoring machine (dashboard/alerts). # ---- portability layer ---- OS="other" case "$(uname -s 2>/dev/null || echo other)" in Linux) OS="linux" ;; Darwin) OS="macos" ;; esac lower() { printf '%s' "$1" | tr '[:upper:]' '[:lower:]'; } # sed_inplace — portable in-place edit (BSD & GNU) via temp file. sed_inplace() { local _si_expr="$1" _si_file="$2" _si_tmp="${2}.sitmp.$$" sed "$_si_expr" "$_si_file" > "$_si_tmp" && mv "$_si_tmp" "$_si_file" || { rm -f "$_si_tmp"; return 1; } } # readlink_f — portable "resolve to absolute" (no GNU readlink -f). readlink_f() { ( cd "$(dirname "$1")" 2>/dev/null && printf '%s/%s\n' "$(pwd)" "$(basename "$1")" ) } # b64_decode — portable base64 decode (GNU --decode/-d, BSD/macOS -D). b64_decode() { if printf '' | base64 --decode >/dev/null 2>&1; then base64 --decode elif printf '' | base64 -d >/dev/null 2>&1; then base64 -d else base64 -D; fi } c_red() { printf '\033[31m%s\033[0m\n' "$*"; } c_green() { printf '\033[32m%s\033[0m\n' "$*"; } c_yellow(){ printf '\033[33m%s\033[0m\n' "$*"; } info() { printf '%s\n' "$*"; } # color only when stdout is a TTY and not explicitly disabled if [ -t 1 ] && [ "${NO_COLOR:-}" != "1" ]; then _C_RESET="$(printf '\033[0m')"; _C_BOLD="$(printf '\033[1m')"; _C_CYAN="$(printf '\033[36m')"; _C_DIM="$(printf '\033[2m')" else _C_RESET=""; _C_BOLD=""; _C_CYAN=""; _C_DIM="" fi # header — a bold, cyan section header (honors the TTY color guard; plain when piped). header() { printf '%s%s%s\n' "${_C_BOLD}${_C_CYAN}" "$*" "${_C_RESET}"; } # primary_ip — best-effort LAN/primary IP of this machine (Linux + macOS). Empty if unknown. primary_ip() { _ip="" if command -v ip >/dev/null 2>&1; then _ip="$(ip route get 1.1.1.1 2>/dev/null | grep -oE 'src [0-9.]+' | awk '{print $2}' | head -1)" fi if [ -z "$_ip" ] && command -v hostname >/dev/null 2>&1; then _ip="$(hostname -I 2>/dev/null | awk '{print $1}')" # Linux fi if [ -z "$_ip" ] && command -v ipconfig >/dev/null 2>&1; then _ip="$(ipconfig getifaddr en0 2>/dev/null)" # macOS fi printf '%s' "$_ip" } # ---- state ---- STATE_DIR="${STATE_DIR:-$HOME/.aztec-monitoring}" STATE_FILE="${STATE_FILE:-$STATE_DIR/state.env}" state_load() { [ -f "$STATE_FILE" ] || return 0 local _line _k _v while IFS= read -r _line || [ -n "$_line" ]; do case "$_line" in ''|'#'*) continue ;; # skip blanks and comments *=*) : ;; # must look like KEY=VALUE *) continue ;; esac _k=${_line%%=*} # everything before first = _v=${_line#*=} # everything after first = # only accept plausible env-var key names (no metachars); ignore junk lines case "$_k" in [A-Za-z_]*) : ;; *) continue ;; esac export "${_k}=${_v}" done < "$STATE_FILE" } # state_set KEY VALUE — write/replace KEY=VALUE, no duplicates. Never store secrets here. state_set() { local _sk="$1" _sv="$2" mkdir -p "$STATE_DIR"; chmod 700 "$STATE_DIR" 2>/dev/null || true touch "$STATE_FILE" if grep -q "^${_sk}=" "$STATE_FILE" 2>/dev/null; then # grep -v exits 1 when it removes the only line(s); don't let that skip the mv. grep -v "^${_sk}=" "$STATE_FILE" > "${STATE_FILE}.tmp.$$" || true mv "${STATE_FILE}.tmp.$$" "$STATE_FILE" fi printf '%s=%s\n' "$_sk" "$_sv" >> "$STATE_FILE" # export so the current process sees it immediately (no eval; safe for any value) export "${_sk}=${_sv}" } # state_unset KEY — remove KEY from the state file and the current environment. state_unset() { local _uk="$1" if [ -f "$STATE_FILE" ] && grep -q "^${_uk}=" "$STATE_FILE" 2>/dev/null; then grep -v "^${_uk}=" "$STATE_FILE" > "${STATE_FILE}.tmp.$$" || true mv "${STATE_FILE}.tmp.$$" "$STATE_FILE" fi unset "$_uk" 2>/dev/null || true } # state_prune_if_empty — delete the state file + dir if no meaningful keys remain. state_prune_if_empty() { [ -f "$STATE_FILE" ] || return 0 # count lines that look like KEY=VALUE (ignore blanks and comments) if ! grep -qE '^[A-Za-z_][A-Za-z0-9_]*=' "$STATE_FILE" 2>/dev/null; then rm -f "$STATE_FILE" rmdir "$STATE_DIR" 2>/dev/null || true fi } # ---- node list (multi-node) ---- # MON_NODES format: nodes joined by ';', each node "endpoint|label" (label may be empty). # ';' and '|' cannot occur in a host:port or a sanitized label ([A-Za-z0-9._-]), so # splitting on them is unambiguous. # nodes_load_string — prints the current MON_NODES ';'-joined string, migrating a # legacy single-node state (NODE_ENDPOINT/MON_INSTANCE_NAME) if MON_NODES is unset. nodes_load_string() { state_load if [ -z "${MON_NODES:-}" ] && [ -n "${NODE_ENDPOINT:-}" ]; then MON_NODES="${NODE_ENDPOINT}|${MON_INSTANCE_NAME:-}" fi printf '%s' "${MON_NODES:-}" } # node_list_print — print a numbered list (label + endpoint). # `read` drops a final line with no trailing newline, so the last (or only) node would # be skipped; `|| [ -n "$_n" ]` keeps it (same pattern as state_load). node_list_print() { _i=1 printf '%s' "$1" | tr ';' '\n' | while IFS= read -r _n || [ -n "$_n" ]; do [ -z "$_n" ] && continue _ep="${_n%%|*}"; _lb="${_n#*|}" printf ' %s. %s %s\n' "$_i" "${_lb:-}" "$_ep" _i=$((_i+1)) done } # node_list_count — print the number of nodes. node_list_count() { printf '%s' "$1" | tr ';' '\n' | grep -c '.' ; } # node_list_has_label