نصب عامل نمایک

( set -eutest -s namayek-release.pub || { echo "namayek-release.pub not found: save the Ed25519 release key from the Namayek docs next to this script (never from the download server)" >&2; exit 1; }V="0.2.0"BASE="https://vault.namayek.com/releases/agent/$V"case "$(uname -m)" in  x86_64)  ARCH=x64 ;;  aarch64) ARCH=arm64 ;;  *) echo "unsupported architecture" >&2; exit 1 ;;esaccurl -fsSLO "$BASE/namayek-agent-$V-linux-$ARCH"curl -fsSLO "$BASE/SHA256SUMS"curl -fsSLO "$BASE/SHA256SUMS.sig"# 1) Ed25519 signature of the checksum list (OpenSSL >= 3.0; namayek-release.pub from the docs); only the exact success line countsopenssl pkeyutl -verify -pubin -inkey namayek-release.pub -rawin -in SHA256SUMS -sigfile SHA256SUMS.sig | grep -q '^Signature Verified Successfully'# 2) checksum of the downloaded filesha256sum --ignore-missing -c SHA256SUMSsudo install -m 0755 "namayek-agent-$V-linux-$ARCH" /usr/local/bin/namayek-agentid -u namayek-agent >/dev/null 2>&1 || sudo useradd --system --home /var/lib/namayek-agent --shell /usr/sbin/nologin namayek-agentsudo install -d -o namayek-agent -m 0700 /var/lib/namayek-agent /etc/namayek-agent)

( set -eutest -s namayek-release.pub || { echo "namayek-release.pub not found: save the Ed25519 release key from the Namayek docs next to this script (never from the download server)" >&2; exit 1; }V="0.2.0"BASE="https://vault.namayek.com/releases/agent/$V"curl -fsSLO "$BASE/namayek-agent-$V-amd64.oci.tar.zst"curl -fsSLO "$BASE/SHA256SUMS"curl -fsSLO "$BASE/SHA256SUMS.sig"# 1) Ed25519 signature of the checksum list (OpenSSL >= 3.0; namayek-release.pub from the docs); only the exact success line countsopenssl pkeyutl -verify -pubin -inkey namayek-release.pub -rawin -in SHA256SUMS -sigfile SHA256SUMS.sig | grep -q '^Signature Verified Successfully'# 2) checksum of the downloaded filesha256sum --ignore-missing -c SHA256SUMSzstd -dc "namayek-agent-$V-amd64.oci.tar.zst" | docker loaddocker run -d --name namayek-agent --restart unless-stopped \  --env-file /etc/namayek-agent/agent.env \  -v namayek-agent:/var/lib/namayek-agent \  -v /etc/namayek-agent/config.json:/etc/namayek-agent/config.json:ro \  namayek/agent:$V run)

# /etc/systemd/system/namayek-agent.service[Unit]Description=Namayek backup agentAfter=network-online.targetWants=network-online.target [Service]User=namayek-agentEnvironmentFile=/etc/namayek-agent/agent.envExecStart=/usr/local/bin/namayek-agent runNoNewPrivileges=yesProtectSystem=strictReadWritePaths=/var/lib/namayek-agentPrivateTmp=yesProtectHome=yesRestrictAddressFamilies=AF_UNIX AF_INET AF_INET6Restart=on-failure [Install]WantedBy=multi-user.target

sudo systemctl daemon-reloadsudo systemctl enable --now namayek-agentnamayek-agent status

# /etc/namayek-agent/agent.env  (chmod 0600 — values stay on your server)NMK_ENROLL_TOKEN=PASTE_ENROLLMENT_TOKEN_FROM_PANELPG_MAIN_DSN=postgres://backup@db.internal:5432/shop?sslmode=verify-fullPG_MAIN_PASSWORD=

sudo -u namayek-agent namayek-agent enroll --token "$NMK_ENROLL_TOKEN" --name "db-main"sudo -u namayek-agent namayek-agent source add {sourceId} --engine postgres --dsn-env PG_MAIN_DSN --password-env PG_MAIN_PASSWORDsudo -u namayek-agent namayek-agent source test {sourceId}