add windows agent install script

supplemental/scripts/install-agent.ps1

@@ -0,0 +1,183 @@
+param (
+    [switch]$Elevated,
+    [Parameter(Mandatory=$true)]
+    [string]$Key,
+    [int]$Port = 45876
+)
+
+# Check if key is provided or empty
+if ([string]::IsNullOrWhiteSpace($Key)) {
+    Write-Host "ERROR: SSH Key is required." -ForegroundColor Red
+    Write-Host "Usage: .\install-agent.ps1 -Key 'your-ssh-key-here' [-Port port-number]" -ForegroundColor Yellow
+    exit 1
+}
+
+# Stop on first error
+$ErrorActionPreference = "Stop"
+
+# Function to check if running as admin
+function Test-Admin {
+    return ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)
+}
+
+# Non-admin tasks - install Scoop and Scoop apps - Only run if we're not in elevated mode
+if (-not $Elevated) {
+    try {
+        # Check if Scoop is already installed
+        if (Get-Command scoop -ErrorAction SilentlyContinue) {
+            Write-Host "Scoop is already installed."
+        } else {
+            Write-Host "Installing Scoop..."
+            Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope CurrentUser
+            Invoke-RestMethod -Uri https://get.scoop.sh | Invoke-Expression
+            
+            if (-not (Get-Command scoop -ErrorAction SilentlyContinue)) {
+                throw "Failed to install Scoop"
+            }
+        }
+
+        # Check if git is already installed
+        if (Get-Command git -ErrorAction SilentlyContinue) {
+            Write-Host "Git is already installed."
+        } else {
+            Write-Host "Installing Git..."
+            scoop install git
+            
+            if (-not (Get-Command git -ErrorAction SilentlyContinue)) {
+                throw "Failed to install Git"
+            }
+        }
+
+        # Check if nssm is already installed
+        if (Get-Command nssm -ErrorAction SilentlyContinue) {
+            Write-Host "NSSM is already installed."
+        } else {
+            Write-Host "Installing NSSM..."
+            scoop install nssm
+            
+            if (-not (Get-Command nssm -ErrorAction SilentlyContinue)) {
+                throw "Failed to install NSSM"
+            }
+        }
+        
+        # Add bucket and install agent
+        Write-Host "Adding beszel bucket..."
+        scoop bucket add beszel https://github.com/henrygd/beszel-scoops
+        
+        Write-Host "Installing beszel-agent..."
+        scoop install beszel-agent
+        
+        if (-not (Get-Command beszel-agent -ErrorAction SilentlyContinue)) {
+            throw "Failed to install beszel-agent"
+        }
+    }
+    catch {
+        Write-Host "ERROR: $($_.Exception.Message)" -ForegroundColor Red
+        Write-Host "Installation failed. Please check the error message above." -ForegroundColor Red
+        Write-Host "Press any key to exit..." -ForegroundColor Red
+        $null = $Host.UI.RawUI.ReadKey("NoEcho,IncludeKeyDown")
+        exit 1
+    }
+
+    # Check if we need admin privileges for the NSSM part
+    if (-not (Test-Admin)) {
+        Write-Host "Admin privileges required for NSSM. Relaunching as admin..." -ForegroundColor Yellow
+        Write-Host "Check service status with 'nssm status beszel-agent'"
+        Write-Host "Edit service configuration with 'nssm edit beszel-agent'"
+        
+        # Relaunch the script with the -Elevated switch and pass parameters
+        Start-Process powershell.exe -Verb RunAs -ArgumentList "-File `"$PSCommandPath`" -Elevated -Key `"$Key`" -Port $Port"
+        exit
+    }
+}
+
+# Admin tasks - service installation and firewall rules
+try {
+    $agentPath = (Get-Command beszel-agent -ErrorAction SilentlyContinue).Path
+    if (-not $agentPath) {
+        throw "Could not find beszel-agent executable. Make sure it was properly installed."
+    }
+    
+    # Install and configure the service
+    Write-Host "Installing beszel-agent service..."
+    
+    # Check if service already exists
+    $existingService = Get-Service -Name "beszel-agent" -ErrorAction SilentlyContinue
+    if ($existingService) {
+        Write-Host "Service already exists. Stopping and removing existing service..."
+        try {
+            nssm stop beszel-agent
+            nssm remove beszel-agent confirm
+        } catch {
+            Write-Host "Warning: Failed to remove existing service: $($_.Exception.Message)" -ForegroundColor Yellow
+        }
+    }
+    
+    nssm install beszel-agent $agentPath
+    if ($LASTEXITCODE -ne 0) {
+        throw "Failed to install beszel-agent service"
+    }
+    
+    Write-Host "Configuring service environment variables..."
+    nssm set beszel-agent AppEnvironmentExtra "+KEY=$Key"
+    nssm set beszel-agent AppEnvironmentExtra "+PORT=$Port"
+    
+    # Configure log files
+    $logDir = "$env:ProgramData\beszel-agent\logs"
+    if (-not (Test-Path $logDir)) {
+        New-Item -ItemType Directory -Path $logDir -Force | Out-Null
+    }
+    nssm set beszel-agent AppStdout "$logDir\stdout.log"
+    nssm set beszel-agent AppStderr "$logDir\stderr.log"
+    
+    # Create a firewall rule if it doesn't exist
+    $ruleName = "Allow beszel-agent"
+    $existingRule = Get-NetFirewallRule -DisplayName $ruleName -ErrorAction SilentlyContinue
+    
+    # Remove existing rule if found
+    if ($existingRule) {
+        Write-Host "Removing existing firewall rule..."
+        try {
+            Remove-NetFirewallRule -DisplayName $ruleName
+            Write-Host "Existing firewall rule removed successfully."
+        } catch {
+            Write-Host "Warning: Failed to remove existing firewall rule: $($_.Exception.Message)" -ForegroundColor Yellow
+        }
+    }
+    
+    # Create new rule with current settings
+    Write-Host "Creating firewall rule for beszel-agent on port $Port..."
+    try {
+        New-NetFirewallRule -DisplayName $ruleName -Direction Inbound -Program $agentPath -Action Allow -Protocol TCP -LocalPort $Port
+        Write-Host "Firewall rule created successfully."
+    } catch {
+        Write-Host "Warning: Failed to create firewall rule: $($_.Exception.Message)" -ForegroundColor Yellow
+        Write-Host "You may need to manually create a firewall rule for port $Port." -ForegroundColor Yellow
+    }
+    
+    Write-Host "Starting beszel-agent service..."
+    nssm start beszel-agent
+    if ($LASTEXITCODE -ne 0) {
+        throw "Failed to start beszel-agent service"
+    }
+    
+    Write-Host "Checking beszel-agent service status..."
+    $serviceStatus = nssm status beszel-agent
+    
+    if ($serviceStatus -eq "SERVICE_RUNNING") {
+        Write-Host "Success! The beszel-agent service is running properly." -ForegroundColor Green
+    } else {
+        Write-Host "Warning: The service status is '$serviceStatus' instead of 'SERVICE_RUNNING'." -ForegroundColor Yellow
+        Write-Host "You may need to troubleshoot the service installation." -ForegroundColor Yellow
+    }
+}
+catch {
+    Write-Host "ERROR: $($_.Exception.Message)" -ForegroundColor Red
+    Write-Host "Installation failed. Please check the error message above." -ForegroundColor Red
+}
+
+# Pause to see results before exit if this is an elevated window
+if ($Elevated) {
+    Write-Host "Press any key to exit..." -ForegroundColor Cyan
+    $null = $Host.UI.RawUI.ReadKey("NoEcho,IncludeKeyDown")
+}