From 7b058a18e9e764ab66b1f904f39f06170323eeb1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=D0=92=D0=B8=D0=BA=D1=82=D0=BE=D1=80?=
 <78488229+viktor138irk@users.noreply.github.com>
Date: Sat, 9 May 2026 15:32:58 +0900
Subject: [PATCH] =?UTF-8?q?=D0=9E=D0=B1=D0=BD=D0=BE=D0=B2=D0=BB=D0=B5?=
 =?UTF-8?q?=D0=BD=20installer=20=D0=BF=D0=BE=D0=B4=20private=20proxy=20bin?=
 =?UTF-8?q?d?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 scripts/install.sh | 19 ++++++++++++++-----
 1 file changed, 14 insertions(+), 5 deletions(-)

diff --git a/scripts/install.sh b/scripts/install.sh
index f572313..793e4f5 100644
--- a/scripts/install.sh
+++ b/scripts/install.sh
@@ -11,6 +11,7 @@ ENV_FILE="${ENV_FILE:-$INSTALL_DIR/.env}"
 COMPOSE_FILE="${COMPOSE_FILE:-$SOURCE_DIR/docker-compose.yml}"
 SERVER_NAME="${SERVER_NAME:-matrix.stackworks.ru}"
 REPORT_STATS="${REPORT_STATS:-no}"
+MATRIX_BIND_HOST="${MATRIX_BIND_HOST:-127.0.0.1}"
 AUTO_START="${AUTO_START:-yes}"
 AUTO_INSTALL_DOCKER="${AUTO_INSTALL_DOCKER:-yes}"
 
@@ -94,14 +95,14 @@ install_docker() {
 
 safe_mkdirs() {
     log "Creating project directories"
-    mkdir -p "$INSTALL_DIR" "$SOURCE_DIR" "$DATA_DIR" "$BACKUP_DIR"
+    mkdir -p "$INSTALL_DIR" "$SOURCE_DIR" "$DATA_DIR" "$BACKUP_DIR" "$INSTALL_DIR/logs"
     mkdir -p "$DATA_DIR/postgres" "$DATA_DIR/synapse" "$DATA_DIR/coturn"
 }
 
 check_protected_assets() {
     log "Split-server policy"
-    echo "  - This installer configures SWChat Core only"
-    echo "  - FastPanel server is not involved"
+    echo "  - This installer configures SWChat/Pulse Core only"
+    echo "  - FastPanel server is not modified"
     echo "  - ArtistFlow is not involved"
     echo "  - widget.stackworks.ru is not involved"
 }
@@ -119,6 +120,10 @@ check_requirements() {
 write_env() {
     if [ -f "$ENV_FILE" ]; then
         warn ".env already exists, keeping it: $ENV_FILE"
+        if ! grep -q '^MATRIX_BIND_HOST=' "$ENV_FILE"; then
+            echo "MATRIX_BIND_HOST=$MATRIX_BIND_HOST" >> "$ENV_FILE"
+            warn "Added missing MATRIX_BIND_HOST=$MATRIX_BIND_HOST to existing .env"
+        fi
         return
     fi
 
@@ -131,6 +136,7 @@ write_env() {
     cat > "$ENV_FILE" <<EOF
 SERVER_NAME=$SERVER_NAME
 REPORT_STATS=$REPORT_STATS
+MATRIX_BIND_HOST=$MATRIX_BIND_HOST
 POSTGRES_DB=synapse
 POSTGRES_USER=synapse
 POSTGRES_PASSWORD=$POSTGRES_PASSWORD
@@ -210,8 +216,9 @@ show_next_steps() {
     echo
     echo "== Installation complete =="
     echo
-    echo "SWChat Core installed on this server"
+    echo "SWChat/Pulse Core installed on this server"
     echo "Matrix local endpoint: http://127.0.0.1:8008"
+    echo "Matrix bind host: $MATRIX_BIND_HOST"
     echo "Public Matrix server name: $SERVER_NAME"
     echo "Install dir: $INSTALL_DIR"
     echo
@@ -219,7 +226,9 @@ show_next_steps() {
     echo "  sudo bash $SOURCE_DIR/scripts/healthcheck.sh"
     echo "  curl http://127.0.0.1:8008/_matrix/client/versions"
     echo
-    echo "Next infrastructure step: point DNS $SERVER_NAME to this Core server IP and configure public HTTPS endpoint."
+    echo "If FastPanel reverse proxy is used over private LAN:"
+    echo "  1) set MATRIX_BIND_HOST to the Core private IP in $ENV_FILE"
+    echo "  2) run: sudo FASTPANEL_PROXY_IP=192.168.0.221 MATRIX_PORT=8008 bash $SOURCE_DIR/scripts/firewall_private_proxy.sh"
     echo
 }