Monitor system resources with Netdata real-time performance dashboard

#!/usr/bin/env bash

set -euo pipefail

# Colors for output
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
NC='\033[0m' # No Color

# Global variables
NETWORK_RANGE=""
ADMIN_EMAIL=""

# Usage function
usage() {
    echo "Usage: $0 [--network NETWORK_RANGE] [--email EMAIL]"
    echo "  --network: Network range for web access (e.g., 192.168.1.0/24)"
    echo "  --email: Admin email for alerts (e.g., admin@example.com)"
    echo "Example: $0 --network 192.168.1.0/24 --email admin@example.com"
    exit 1
}

# Parse arguments
while [[ $# -gt 0 ]]; do
    case $1 in
        --network)
            NETWORK_RANGE="$2"
            shift 2
            ;;
        --email)
            ADMIN_EMAIL="$2"
            shift 2
            ;;
        -h|--help)
            usage
            ;;
        *)
            echo -e "${RED}Unknown option: $1${NC}"
            usage
            ;;
    esac
done

# Cleanup function for rollback
cleanup() {
    echo -e "${YELLOW}Installation failed. Performing cleanup...${NC}"
    systemctl stop netdata 2>/dev/null || true
    systemctl disable netdata 2>/dev/null || true
}

# Set trap for cleanup on error
trap cleanup ERR

# Check if running as root or with sudo
if [[ $EUID -ne 0 ]]; then
    echo -e "${RED}This script must be run as root or with sudo${NC}"
    exit 1
fi

# Auto-detect distribution
echo -e "${BLUE}[1/10] Detecting distribution...${NC}"
if [ -f /etc/os-release ]; then
    . /etc/os-release
    case "$ID" in
        ubuntu|debian)
            PKG_MGR="apt"
            PKG_UPDATE="apt update && apt upgrade -y"
            PKG_INSTALL="apt install -y"
            FIREWALL_CMD="ufw"
            MAIL_PACKAGE="mailutils"
            ;;
        almalinux|rocky|centos|rhel|ol|fedora)
            PKG_MGR="dnf"
            PKG_UPDATE="dnf update -y"
            PKG_INSTALL="dnf install -y"
            FIREWALL_CMD="firewalld"
            MAIL_PACKAGE="mailx"
            ;;
        amzn)
            PKG_MGR="yum"
            PKG_UPDATE="yum update -y"
            PKG_INSTALL="yum install -y"
            FIREWALL_CMD="firewalld"
            MAIL_PACKAGE="mailx"
            ;;
        *)
            echo -e "${RED}Unsupported distribution: $ID${NC}"
            exit 1
            ;;
    esac
    echo -e "${GREEN}Detected: $PRETTY_NAME${NC}"
else
    echo -e "${RED}Cannot detect distribution${NC}"
    exit 1
fi

# Update system packages
echo -e "${BLUE}[2/10] Updating system packages...${NC}"
$PKG_UPDATE

# Install required dependencies
echo -e "${BLUE}[3/10] Installing dependencies...${NC}"
if [[ "$PKG_MGR" == "apt" ]]; then
    $PKG_INSTALL curl wget git build-essential autoconf automake pkg-config \
        zlib1g-dev libssl-dev libuv1-dev cmake libjson-c-dev libelf-dev liblz4-dev
else
    $PKG_INSTALL curl wget git gcc gcc-c++ make autoconf automake pkgconfig \
        zlib-devel openssl-devel libuv-devel cmake json-c-devel elfutils-libelf-devel lz4-devel
fi

# Download and install Netdata
echo -e "${BLUE}[4/10] Installing Netdata...${NC}"
curl -Ss https://get.netdata.cloud/kickstart.sh | bash -s -- --stable-channel --disable-telemetry

# Enable and start Netdata service
echo -e "${BLUE}[5/10] Configuring Netdata service...${NC}"
systemctl enable netdata
systemctl start netdata
sleep 3

# Verify service is running
if ! systemctl is-active --quiet netdata; then
    echo -e "${RED}Netdata service failed to start${NC}"
    exit 1
fi

# Configure firewall
echo -e "${BLUE}[6/10] Configuring firewall...${NC}"
if [[ "$FIREWALL_CMD" == "ufw" ]]; then
    if command -v ufw >/dev/null 2>&1; then
        ufw allow 19999/tcp
        ufw --force enable || true
    fi
else
    if systemctl is-active --quiet firewalld; then
        firewall-cmd --permanent --add-port=19999/tcp
        firewall-cmd --reload
    fi
fi

# Create Netdata configuration directory if it doesn't exist
echo -e "${BLUE}[7/10] Configuring Netdata...${NC}"
mkdir -p /etc/netdata
chown netdata:netdata /etc/netdata
chmod 755 /etc/netdata

# Configure Netdata web settings
/usr/libexec/netdata/edit-config netdata.conf <<EOF
[web]
    bind to = *
    allow connections from = localhost 127.0.0.1 ::1${NETWORK_RANGE:+ }${NETWORK_RANGE}
    allow management from = localhost 127.0.0.1
    enable gzip compression = yes
    web files owner = netdata
    web files group = netdata

[global]
    update every = 1
    memory mode = dbengine
    page cache size = 32
    dbengine disk space = 256
EOF

# Set up basic authentication if available
if command -v htpasswd >/dev/null 2>&1; then
    echo -e "${YELLOW}Setting up web authentication...${NC}"
    echo -e "${BLUE}Please enter password for 'admin' user:${NC}"
    htpasswd -c /etc/netdata/netdata.htpasswd admin
    chown netdata:netdata /etc/netdata/netdata.htpasswd
    chmod 644 /etc/netdata/netdata.htpasswd
else
    echo -e "${YELLOW}htpasswd not available, skipping web authentication setup${NC}"
fi

# Install email notification dependencies if email is provided
if [[ -n "$ADMIN_EMAIL" ]]; then
    echo -e "${BLUE}[8/10] Setting up email notifications...${NC}"
    $PKG_INSTALL $MAIL_PACKAGE
    
    # Configure health alert notifications
    /usr/libexec/netdata/edit-config health_alarm_notify.conf <<EOF
# Email configuration
SEND_EMAIL="YES"
DEFAULT_RECIPIENT_EMAIL="$ADMIN_EMAIL"
EMAIL_SENDER="netdata@$(hostname -f)"

# Email command
SENDMAIL="/usr/bin/mail"

# Enable notifications for specific roles
role_recipients_email[sysadmin]="$ADMIN_EMAIL"
EOF
    
    chown netdata:netdata /etc/netdata/health_alarm_notify.conf
    chmod 644 /etc/netdata/health_alarm_notify.conf
else
    echo -e "${BLUE}[8/10] Skipping email notifications (no email provided)...${NC}"
fi

# Restart Netdata to apply configuration
echo -e "${BLUE}[9/10] Restarting Netdata service...${NC}"
systemctl restart netdata
sleep 5

# Verify installation
echo -e "${BLUE}[10/10] Verifying installation...${NC}"

# Check if service is running
if ! systemctl is-active --quiet netdata; then
    echo -e "${RED}Netdata service is not running${NC}"
    exit 1
fi

# Check if port 19999 is listening
if ! netstat -tuln 2>/dev/null | grep -q :19999 && ! ss -tuln 2>/dev/null | grep -q :19999; then
    echo -e "${RED}Netdata is not listening on port 19999${NC}"
    exit 1
fi

# Test web interface
if curl -s -o /dev/null -w "%{http_code}" http://localhost:19999 | grep -q "200"; then
    echo -e "${GREEN}Netdata web interface is accessible${NC}"
else
    echo -e "${YELLOW}Netdata web interface test failed, but service is running${NC}"
fi

echo -e "${GREEN}✓ Netdata installation completed successfully!${NC}"
echo -e "${GREEN}✓ Web dashboard available at: http://$(hostname -I | awk '{print $1}'):19999${NC}"
echo -e "${GREEN}✓ Service status: $(systemctl is-active netdata)${NC}"

if [[ -n "$ADMIN_EMAIL" ]]; then
    echo -e "${GREEN}✓ Email alerts configured for: $ADMIN_EMAIL${NC}"
fi

if [[ -n "$NETWORK_RANGE" ]]; then
    echo -e "${GREEN}✓ Web access configured for network: $NETWORK_RANGE${NC}"
fi

echo -e "${BLUE}Additional configuration files located in: /etc/netdata/${NC}"
echo -e "${BLUE}Service logs: journalctl -u netdata -f${NC}"

# Disable trap on successful completion
trap - ERR