From 2a1ad6595b16f378bc45d8c13a40babe26f6dbc4 Mon Sep 17 00:00:00 2001
From: boban <boban@git.bave.dev>
Date: Thu, 2 Jul 2026 20:14:29 +0200
Subject: [PATCH] =?UTF-8?q?chore(install):=20don't=20prompt=20for=20a=20do?=
 =?UTF-8?q?main=20=E2=80=94=20install=20over=20IP,=20set=20it=20later=20in?=
 =?UTF-8?q?=20the=20dashboard?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The panel domain is a dashboard concern now (System page → panel_domain override + Caddy
on-demand TLS), so the installer no longer asks for it. A fresh interactive install goes
straight to bare-IP/HTTP (prompts only for the HTTP port + admin email). The domain still
works everywhere it needs to: CLUSEV_DOMAIN=… preset for scripted installs is kept, and a
non-interactive re-run (update.sh) still preserves the existing .env domain; the closing
banner and the bare-IP warning now point the operator to Dashboard → System for the domain.

shellcheck clean; bash -n OK.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 install.sh | 15 ++++++++++-----
 1 file changed, 10 insertions(+), 5 deletions(-)

diff --git a/install.sh b/install.sh
index dd50efc..ad2118e 100755
--- a/install.sh
+++ b/install.sh
@@ -6,8 +6,10 @@
 # random password, and installs a themed MOTD. Safe to re-run: existing secrets
 # and the clusev user are preserved, never regenerated.
 #
-#   sudo ./install.sh                 # interactive (prompts for domain + admin email)
-#   sudo CLUSEV_DOMAIN=app.host.tld CLUSEV_ADMIN_EMAIL=admin@host.tld ./install.sh
+# The panel installs over IP/HTTP by default — set a domain (auto-TLS) later in the dashboard
+# (System page). Power users can still preset one at install with CLUSEV_DOMAIN=.
+#   sudo ./install.sh                 # interactive (prompts for HTTP port + admin email)
+#   sudo CLUSEV_DOMAIN=app.host.tld CLUSEV_ADMIN_EMAIL=admin@host.tld ./install.sh   # preset a domain
 set -euo pipefail
 
 cd "$(dirname "$0")"
@@ -138,8 +140,8 @@ ADMIN_EMAIL="${CLUSEV_ADMIN_EMAIL:-$(env_get ACME_EMAIL)}"
 HTTP_PORT="${CLUSEV_HTTP_PORT:-80}"
 if [ -t 0 ]; then
   echo; bold "Clusev Installer"; echo "================"
-  printf '%s' "Domain (leer = Zugriff per IP ueber HTTP): "; read -r in_domain || true
-  [ -n "${in_domain:-}" ] && DOMAIN="$in_domain"
+  # The panel domain is NOT asked here — install over IP/HTTP, then set a domain later in the
+  # dashboard (System page → automatic TLS). Power users can still pass CLUSEV_DOMAIN=… to preset it.
   if [ -z "$DOMAIN" ]; then
     printf '%s' "HTTP-Port (Standard 80):                   "; read -r in_port || true
     [ -n "${in_port:-}" ] && HTTP_PORT="$in_port"
@@ -193,7 +195,7 @@ else
   SITE_ADDRESS=":${HTTP_PORT}"
   if [ "$HTTP_PORT" = "80" ]; then APP_URL="http://${HOST_IP}"; else APP_URL="http://${HOST_IP}:${HTTP_PORT}"; fi
   REVERB_HOST="$HOST_IP"; REVERB_PORT="$HTTP_PORT"; REVERB_SCHEME="http"
-  warn "Bare-IP-Modus: Panel inkl. 2FA/Audit laeuft ueber KLARTEXT-HTTP. Fuer Produktion Domain + TLS setzen."
+  warn "Bare-IP-Modus: Panel inkl. 2FA/Audit laeuft ueber KLARTEXT-HTTP. Fuer Produktion spaeter im Dashboard (System) eine Domain setzen — TLS kommt automatisch."
 fi
 
 # ── [3/9] .env + secrets (idempotent) ────────────────────────────────
@@ -438,4 +440,7 @@ if [ "$USER_CREATED" = 1 ]; then
   info "  Host-Passwort:  ${CLUSEV_USER_PW}"
 fi
 info "+----------------------------------------------------------+"
+if [ -z "$DOMAIN" ]; then
+  info "Domain + HTTPS spaeter im Dashboard unter System setzen — TLS kommt automatisch."
+fi
 info "Diese Passwoerter werden nur jetzt angezeigt."