run_only_local.sh

#!/bin/bash

# Asegurar PATH completo
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"

set -e

echo "Instalacion automatica de n8n con HTTPS autofirmado y respaldos diarios"
echo "============================================================"

# === 1. Pedir datos al usuario ===
read -p "Dominio local o IP (ej: localhost, 192.168.1.100): " DOMAIN
read -p "Usuario de n8n: " N8N_USER
read -s -p "Contrasena de n8n: " N8N_PASS
echo

# === 2. Instalar dependencias ===
echo "Instalando paquetes..."
apt update
apt install -y nginx docker.io openssl

# === 3. Generar certificado SSL autofirmado ===
echo "Generando certificado SSL autofirmado..."
SSL_DIR="/etc/ssl/n8n"
mkdir -p "$SSL_DIR"

# Generar certificado válido por 10 años (3650 días)
openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
  -keyout "$SSL_DIR/n8n.key" \
  -out "$SSL_DIR/n8n.crt" \
  -subj "/C=UY/ST=Montevideo/L=Montevideo/O=n8n/CN=$DOMAIN" \
  -addext "subjectAltName=DNS:$DOMAIN,IP:$DOMAIN"

chmod 600 "$SSL_DIR/n8n.key"
chmod 644 "$SSL_DIR/n8n.crt"

# === 4. Configurar Nginx con HTTPS ===
echo "Configurando Nginx como proxy inverso con HTTPS..."
cat > /etc/nginx/sites-available/n8n <<EOF
# Redireccionar HTTP a HTTPS
server {
    listen 80;
    server_name $DOMAIN;
    return 301 https://\$host\$request_uri;
}

# Servidor HTTPS
server {
    server_name $DOMAIN;
    
    listen 443 ssl http2;
    ssl_certificate /etc/ssl/n8n/n8n.crt;
    ssl_certificate_key /etc/ssl/n8n/n8n.key;
    
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers on;
    
    location / {
        proxy_pass http://127.0.0.1:5678;
        proxy_set_header Host \$host;
        proxy_set_header X-Real-IP \$remote_addr;
        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto \$scheme;
        proxy_set_header X-Forwarded-Host \$host;
        proxy_set_header X-Forwarded-Port 443;
        proxy_set_header X-Forwarded-Ssl on;
        proxy_http_version 1.1;
        proxy_set_header Upgrade \$http_upgrade;
        proxy_set_header Connection 'upgrade';
    }
}
EOF

# Habilitar sitio
rm -f /etc/nginx/sites-enabled/default
ln -sf /etc/nginx/sites-available/n8n /etc/nginx/sites-enabled/
/usr/sbin/nginx -t && systemctl reload nginx

# === 5. Preparar directorios ===
DATA_DIR="/opt/n8n-data"
BACKUP_DIR="/opt/n8n-backups"
mkdir -p "$DATA_DIR" "$BACKUP_DIR"
chown -R 1000:1000 "$DATA_DIR"
chmod 700 "$BACKUP_DIR"

# === 6. Iniciar n8n (HTTPS con certificado autofirmado) ===
echo "Iniciando n8n..."
docker run -d \
  --name n8n \
  --restart unless-stopped \
  -p 127.0.0.1:5678:5678 \
  -v /opt/n8n-data:/home/node/.n8n \
  -e GENERIC_TIMEZONE=America/Montevideo \
  -e N8N_BASIC_AUTH_ACTIVE=true \
  -e N8N_BASIC_AUTH_USER="$N8N_USER" \
  -e N8N_BASIC_AUTH_PASSWORD="$N8N_PASS" \
  -e N8N_HOST="$DOMAIN" \
  -e N8N_PROTOCOL=https \
  -e NODE_ENV=production \
  -e N8N_RUNNERS_ENABLED=true \
  -e WEBHOOK_URL="https://$DOMAIN" \
  docker.n8n.io/n8nio/n8n:latest

# === 7. Script de respaldo diario (ultimos 10) ===
cat > /usr/local/bin/n8n-backup <<'EOF'
#!/bin/bash
DATA_DIR="/opt/n8n-data"
BACKUP_DIR="/opt/n8n-backups"
TIMESTAMP=$(date +%Y%m%d_%H%M%S)
BACKUP_FILE="$BACKUP_DIR/n8n-backup-$TIMESTAMP.tar.gz"

# Crear respaldo
tar -czf "$BACKUP_FILE" -C /opt n8n-data 2>/dev/null

# Rotacion: mantener solo ultimos 10
cd "$BACKUP_DIR" || exit 1
ls -t n8n-backup-*.tar.gz 2>/dev/null | tail -n +11 | xargs -r rm
EOF
chmod +x /usr/local/bin/n8n-backup

# === 8. Cron para respaldo diario ===
cat > /etc/cron.d/n8n-backup <<'EOF'
# Respaldo diario a las 02:30 AM (mantiene ultimos 10)
30 2 * * * root /usr/local/bin/n8n-backup
EOF

# === 9. Script para actualizar (misma estructura EXACTA) ===
cat > /usr/local/bin/n8n-update <<EOF
#!/bin/bash
DATA_DIR="/opt/n8n-data"
DOMAIN="\$(docker inspect n8n --format '{{range .Config.Env}}{{println .}}{{end}}' 2>/dev/null | grep N8N_HOST= | cut -d= -f2)"
USER="\$(docker inspect n8n --format '{{range .Config.Env}}{{println .}}{{end}}' 2>/dev/null | grep N8N_BASIC_AUTH_USER= | cut -d= -f2)"
PASS="\$(docker inspect n8n --format '{{range .Config.Env}}{{println .}}{{end}}' 2>/dev/null | grep N8N_BASIC_AUTH_PASSWORD= | cut -d= -f2)"

echo "Creando respaldo pre-actualizacion..."
/usr/local/bin/n8n-backup

echo "Deteniendo contenedor..."
docker stop n8n >/dev/null 2>&1 || true
docker rm n8n >/dev/null 2>&1 || true

echo "Descargando ultima version..."
docker pull docker.n8n.io/n8nio/n8n:latest >/dev/null

echo "Iniciando nueva version..."
docker run -d \
  --name n8n \
  --restart unless-stopped \
  -p 127.0.0.1:5678:5678 \
  -v /opt/n8n-data:/home/node/.n8n \
  -e GENERIC_TIMEZONE=America/Montevideo \
  -e N8N_BASIC_AUTH_ACTIVE=true \
  -e N8N_BASIC_AUTH_USER="\$USER" \
  -e N8N_BASIC_AUTH_PASSWORD="\$PASS" \
  -e N8N_HOST="\$DOMAIN" \
  -e N8N_PROTOCOL=https \
  -e NODE_ENV=production \
  -e N8N_RUNNERS_ENABLED=true \
  -e WEBHOOK_URL="https://\$DOMAIN" \
  docker.n8n.io/n8nio/n8n:latest >/dev/null

echo "Actualizacion completada."
EOF
chmod +x /usr/local/bin/n8n-update

# === 10. Script de administracion visual ===
cat > /usr/local/bin/n8n-admin <<'EOF'
#!/bin/bash
BACKUP_DIR="/opt/n8n-backups"

listar_respaldos() {
    echo "Respaldos disponibles (ultimos 10):"
    echo "-----------------------------------"
    if [ -z "$(ls -A $BACKUP_DIR/n8n-backup-*.tar.gz 2>/dev/null)" ]; then
        echo "  [NINGUNO]"
        return 1
    fi
    C=1
    for f in $(ls -tr $BACKUP_DIR/n8n-backup-*.tar.gz 2>/dev/null | tail -n 10 | tac); do
        base=$(basename "$f")
        size=$(du -h "$f" 2>/dev/null | cut -f1)
        fecha=$(echo "$base" | sed -n 's/.*backup-\([0-9]\{8\}\).*/\1/p' | sed 's/\(....\)\(..\)\(..\)/\3\/\2\/\1/')
        echo " [$C] $fecha - $size"
        C=$((C+1))
    done
    return 0
}

restaurar() {
    if ! listar_respaldos; then
        read -p "Presione Enter..."
        return
    fi
    echo ""
    read -p "Numero de respaldo a restaurar (1-10) o 'q': " sel
    [ "$sel" = "q" ] && return
    [ -z "$sel" ] && return
    ! [[ "$sel" =~ ^[0-9]+$ ]] && { echo "Invalido"; read -p "Presione Enter..."; return; }
    
    archivos=($(ls -tr $BACKUP_DIR/n8n-backup-*.tar.gz 2>/dev/null | tail -n 10 | tac))
    idx=$((sel-1))
    [ $idx -lt 0 ] || [ $idx -ge ${#archivos[@]} ] && { echo "Fuera de rango"; read -p "Presione Enter..."; return; }
    
    archivo="${archivos[$idx]}"
    fecha=$(basename "$archivo" | sed -n 's/.*backup-\([0-9]\{8\}\).*/\1/p' | sed 's/\(....\)\(..\)\(..\)/\3\/\2\/\1/')
    
    echo ""
    echo "ADVERTENCIA: Restaurara la version del $fecha"
    echo "Se detendra el servicio y se sobrescribiran datos actuales."
    read -p "CONFIRMAR? Escriba 'SI' en mayusculas: " conf
    [ "$conf" != "SI" ] && { echo "Cancelado"; sleep 2; return; }
    
    docker stop n8n >/dev/null 2>&1 || true
    /usr/local/bin/n8n-backup >/dev/null 2>&1
    rm -rf /opt/n8n-data/*
    tar -xzf "$archivo" -C /opt
    chown -R 1000:1000 /opt/n8n-data
    docker start n8n >/dev/null 2>&1 || true
    echo "Restauracion completada."
    sleep 3
}

while true; do
    clear
    echo "======================================="
    echo "          ADMINISTRACION N8N (HTTPS LOCAL)"
    echo "======================================="
    listar_respaldos
    echo ""
    echo " 1) Actualizar contenedor"
    echo " 2) Restaurar version anterior"
    echo " 3) Salir"
    echo "======================================="
    read -p "Opcion [1-3]: " op
    case $op in
        1) /usr/local/bin/n8n-update; read -p "Presione Enter...";;
        2) restaurar;;
        3) exit 0;;
        *) echo "Invalido"; sleep 1;;
    esac
done
EOF
chmod +x /usr/local/bin/n8n-admin

# === 11. Mensaje final ===
echo ""
echo "======================================="
echo " INSTALACION COMPLETADA (HTTPS LOCAL)"
echo "======================================="
echo "Acceso: https://$DOMAIN"
echo "Usuario: $N8N_USER"
echo ""
echo "NOTA IMPORTANTE:"
echo "  - El navegador mostrara una advertencia de seguridad"
echo "  - Haz clic en 'Avanzado' y luego 'Aceptar el riesgo y continuar'"
echo "  - El certificado es valido por 10 años"
echo ""
echo "Comandos disponibles:"
echo "  n8n-admin    -> Menu visual para actualizar/restaurar"
echo "  n8n-update   -> Actualizar contenedor (misma configuracion)"
echo "  n8n-backup   -> Crear respaldo manual"
echo ""
echo "Respaldos:"
echo "  - Diarios automaticos a las 02:30 AM"
echo "  - Se mantienen solo los ultimos 10 respaldos"
echo "  - Directorio: /opt/n8n-backups"
echo ""
echo "Certificado:"
echo "  - Ubicacion: /etc/ssl/n8n/"
echo "  - Validez: 10 años"