Panel — public source drop (v0.9.0)

Self-hostable game-server control panel: controller + agent + 26 game modules. One-line install (prebuilt release, no Go required): curl -fsSL https://git.pdxtechs.com/dbledeez/panel/raw/branch/main/install.sh | sudo bash Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-14 21:17:39 -07:00
commit a00bd620a1
2160 changed files with 300574 additions and 0 deletions
@@ -0,0 +1,45 @@
+# REFERENCE ONLY — install.sh GENERATES the real unit at install time,
+# substituting the actual PANEL_DIR/ports/user (see write_unit in install.sh).
+# This static copy assumes the /opt/panel defaults; edit it by hand if you wire
+# the units up yourself (e.g. via compose) instead of running install.sh.
+[Unit]
+Description=Panel agent (Docker runtime for game-server instances)
+Documentation=https://github.com/dbledeez/panel
+After=network-online.target docker.service panel-controller.service
+Wants=network-online.target
+Requires=docker.service
+
+[Service]
+Type=simple
+# The agent user MUST be able to talk to the Docker daemon
+# (member of the "docker" group, or root). install.sh handles this.
+User=panel
+Group=panel
+SupplementaryGroups=docker
+WorkingDirectory=/opt/panel
+# Defaults first; /opt/panel/panel.env overrides (applied later).
+Environment=PANEL_GRPC_PORT=8443
+EnvironmentFile=-/opt/panel/panel.env
+# Pairing (one-time cert issuance) is done by install.sh / the operator:
+#   /opt/panel/bin/agent --pair-url http://localhost:8080 --pair-token <token> --cert-dir ./data/certs
+ExecStart=/opt/panel/bin/agent \
+    --controller localhost:${PANEL_GRPC_PORT} \
+    --modules-dir ./modules \
+    --data-root ./data/instances \
+    --meta-dir ./data/instance-meta \
+    --backup-dir ./data/backups \
+    --cert-dir ./data/certs
+Restart=on-failure
+RestartSec=3
+
+# Hardening is intentionally lighter than the controller's: the agent
+# manages Docker containers and bind-mounts instance data, so it needs
+# the docker socket and its data tree.
+NoNewPrivileges=true
+ProtectHome=true
+ReadWritePaths=/opt/panel
+PrivateTmp=true
+LockPersonality=true
+
+[Install]
+WantedBy=multi-user.target
@@ -0,0 +1,45 @@
+# REFERENCE ONLY — install.sh GENERATES the real unit at install time,
+# substituting the actual PANEL_DIR/ports/user (see write_unit in install.sh).
+# This static copy assumes the /opt/panel defaults; edit it by hand if you wire
+# the units up yourself (e.g. via compose) instead of running install.sh.
+[Unit]
+Description=Panel controller (HTTP dashboard :8080 + agent gRPC :8443)
+Documentation=https://github.com/dbledeez/panel
+After=network-online.target docker.service
+Wants=network-online.target
+
+[Service]
+Type=simple
+# install.sh creates this user; change to taste. The controller does NOT
+# need docker access — only the agent does.
+User=panel
+Group=panel
+# The controller resolves ./data (CA, admin-token, cluster stores) and
+# ./modules relative to its working directory — keep them together here.
+WorkingDirectory=/opt/panel
+# Defaults first; /opt/panel/panel.env (PANEL_DB_URL, PANEL_HTTP_PORT,
+# PANEL_ADMIN_PASSWORD, ...) overrides them because it is applied later.
+Environment=PANEL_HTTP_PORT=8080
+Environment=PANEL_GRPC_PORT=8443
+EnvironmentFile=-/opt/panel/panel.env
+ExecStart=/opt/panel/bin/controller \
+    -http :${PANEL_HTTP_PORT} \
+    -grpc :${PANEL_GRPC_PORT} \
+    -ca-dir ./data/ca
+Restart=on-failure
+RestartSec=3
+
+# Hardening — the controller only needs its own tree + the network.
+NoNewPrivileges=true
+ProtectSystem=strict
+ProtectHome=true
+ReadWritePaths=/opt/panel
+PrivateTmp=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectControlGroups=true
+RestrictSUIDSGID=true
+LockPersonality=true
+
+[Install]
+WantedBy=multi-user.target