manifest.json

{
  "version": "1.1.0",
  "name": "XT Systems Deployment Library",
  "description": "Public collection of cross-platform deployment scripts for XT Systems managed machines",
  "repository": "https://github.com/DevXT-LLC/DeploymentLibrary",
  "deployments": [
    {
      "id": "reboot-machine",
      "name": "Reboot Machine",
      "description": "Gracefully reboots the machine after a configurable delay (default 5 seconds).",
      "category": "System",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/reboot.ps1",
        "linux": "linux/reboot.sh",
        "macos": "linux/reboot.sh"
      },
      "environment_variables": [
        {
          "key": "REBOOT_DELAY",
          "value": "5",
          "required": false,
          "description": "Delay in seconds before rebooting"
        }
      ]
    },
    {
      "id": "shutdown-machine",
      "name": "Shutdown Machine",
      "description": "Gracefully shuts down the machine after a configurable delay.",
      "category": "System",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/shutdown.ps1",
        "linux": "linux/shutdown.sh",
        "macos": "linux/shutdown.sh"
      },
      "environment_variables": [
        {
          "key": "SHUTDOWN_DELAY",
          "value": "5",
          "required": false,
          "description": "Delay in seconds before shutting down"
        }
      ]
    },
    {
      "id": "system-info",
      "name": "Collect System Information",
      "description": "Gathers detailed system information including OS, hardware, disk, and network details.",
      "category": "Diagnostics",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/system-info.ps1",
        "linux": "linux/system-info.sh",
        "macos": "linux/system-info.sh"
      },
      "environment_variables": []
    },
    {
      "id": "flush-dns",
      "name": "Flush DNS Cache",
      "description": "Clears the local DNS resolver cache.",
      "category": "Network",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/flush-dns.ps1",
        "linux": "linux/flush-dns.sh",
        "macos": "macos/flush-dns.sh"
      },
      "environment_variables": []
    },
    {
      "id": "install-homebrew",
      "name": "Install Homebrew",
      "description": "Installs the Homebrew package manager for macOS.",
      "category": "Software",
      "platforms": ["macos"],
      "script_language": "bash",
      "scripts": {
        "macos": "macos/install-homebrew.sh"
      },
      "environment_variables": []
    },
    {
      "id": "install-brave-browser",
      "name": "Install Brave Browser",
      "description": "Downloads and silently installs the latest Brave Browser.",
      "category": "Software",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/install-brave.ps1",
        "linux": "linux/install-brave.sh",
        "macos": "macos/install-brave.sh"
      },
      "environment_variables": []
    },
    {
      "id": "install-chrome",
      "name": "Install Google Chrome",
      "description": "Downloads and silently installs the latest Google Chrome.",
      "category": "Software",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/install-chrome.ps1",
        "linux": "linux/install-chrome.sh",
        "macos": "macos/install-chrome.sh"
      },
      "environment_variables": []
    },
    {
      "id": "install-firefox",
      "name": "Install Mozilla Firefox",
      "description": "Downloads and silently installs the latest Mozilla Firefox.",
      "category": "Software",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/install-firefox.ps1",
        "linux": "linux/install-firefox.sh",
        "macos": "macos/install-firefox.sh"
      },
      "environment_variables": []
    },
    {
      "id": "install-vscode",
      "name": "Install Visual Studio Code",
      "description": "Downloads and silently installs the latest Visual Studio Code.",
      "category": "Software",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/install-vscode.ps1",
        "linux": "linux/install-vscode.sh",
        "macos": "macos/install-vscode.sh"
      },
      "environment_variables": []
    },
    {
      "id": "install-git",
      "name": "Install Git",
      "description": "Downloads and silently installs the latest Git.",
      "category": "Software",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/install-git.ps1",
        "linux": "linux/install-git.sh",
        "macos": "macos/install-git.sh"
      },
      "environment_variables": []
    },
    {
      "id": "install-python",
      "name": "Install Python",
      "description": "Downloads and installs a specified version of Python (default 3.11).",
      "category": "Software",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/install-python.ps1",
        "linux": "linux/install-python.sh",
        "macos": "macos/install-python.sh"
      },
      "environment_variables": [
        {
          "key": "PYTHON_VERSION",
          "value": "3.11",
          "required": false,
          "description": "Python version to install (e.g. 3.11, 3.12)"
        }
      ]
    },
    {
      "id": "install-nodejs",
      "name": "Install Node.js",
      "description": "Installs Node.js LTS via the official installer or package manager.",
      "category": "Software",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/install-nodejs.ps1",
        "linux": "linux/install-nodejs.sh",
        "macos": "macos/install-nodejs.sh"
      },
      "environment_variables": [
        {
          "key": "NODE_VERSION",
          "value": "22",
          "required": false,
          "description": "Major Node.js version to install (e.g. 20, 22)"
        }
      ]
    },
    {
      "id": "install-docker",
      "name": "Install Docker",
      "description": "Installs Docker Engine and Docker Compose (Desktop on macOS/Windows).",
      "category": "Software",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/install-docker.ps1",
        "linux": "linux/install-docker.sh",
        "macos": "macos/install-docker.sh"
      },
      "environment_variables": []
    },
    {
      "id": "install-rust",
      "name": "Install Rust",
      "description": "Installs the Rust programming language and Cargo via rustup.",
      "category": "Software",
      "platforms": ["macos"],
      "script_language": "bash",
      "scripts": {
        "macos": "macos/install-rust.sh"
      },
      "environment_variables": []
    },
    {
      "id": "install-zoom",
      "name": "Install Zoom",
      "description": "Downloads and silently installs the latest Zoom client.",
      "category": "Software",
      "platforms": ["windows", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/install-zoom.ps1",
        "macos": "macos/install-zoom.sh"
      },
      "environment_variables": []
    },
    {
      "id": "install-slack",
      "name": "Install Slack",
      "description": "Downloads and silently installs the latest Slack client.",
      "category": "Software",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/install-slack.ps1",
        "linux": "linux/install-slack.sh",
        "macos": "macos/install-slack.sh"
      },
      "environment_variables": []
    },
    {
      "id": "install-nvidia-cuda",
      "name": "Install NVIDIA CUDA Toolkit",
      "description": "Downloads and installs the NVIDIA CUDA toolkit for GPU computing.",
      "category": "Software",
      "platforms": ["windows", "linux"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/install-nvidia-cuda.ps1",
        "linux": "linux/install-nvidia-cuda.sh"
      },
      "environment_variables": [
        {
          "key": "CUDA_VERSION",
          "value": "12.8",
          "required": false,
          "description": "CUDA toolkit version to install"
        }
      ]
    },
    {
      "id": "install-powershell",
      "name": "Install PowerShell (Linux)",
      "description": "Installs the latest PowerShell on Linux distributions.",
      "category": "Software",
      "platforms": ["linux"],
      "script_language": "bash",
      "scripts": {
        "linux": "linux/install-powershell.sh"
      },
      "environment_variables": []
    },
    {
      "id": "install-7zip",
      "name": "Install 7-Zip",
      "description": "Downloads and silently installs 7-Zip file archiver.",
      "category": "Software",
      "platforms": ["windows"],
      "script_language": "powershell",
      "scripts": {
        "windows": "windows/install-7zip.ps1"
      },
      "environment_variables": []
    },
    {
      "id": "windows-update",
      "name": "Run Windows Update",
      "description": "Checks for and installs available Windows updates via PSWindowsUpdate.",
      "category": "Maintenance",
      "platforms": ["windows"],
      "script_language": "powershell",
      "scripts": {
        "windows": "windows/windows-update.ps1"
      },
      "environment_variables": [
        {
          "key": "AUTO_REBOOT",
          "value": "false",
          "required": false,
          "description": "Whether to auto-reboot after updates (true/false)"
        }
      ]
    },
    {
      "id": "linux-update",
      "name": "Run Linux Updates",
      "description": "Updates all packages on apt, yum, or dnf based Linux distributions.",
      "category": "Maintenance",
      "platforms": ["linux"],
      "script_language": "bash",
      "scripts": {
        "linux": "linux/linux-update.sh"
      },
      "environment_variables": [
        {
          "key": "AUTO_REBOOT",
          "value": "false",
          "required": false,
          "description": "Whether to auto-reboot if a kernel update was installed (true/false)"
        }
      ]
    },
    {
      "id": "macos-update",
      "name": "Run macOS Updates",
      "description": "Checks for and installs available macOS software updates via softwareupdate.",
      "category": "Maintenance",
      "platforms": ["macos"],
      "script_language": "bash",
      "scripts": {
        "macos": "macos/macos-update.sh"
      },
      "environment_variables": [
        {
          "key": "AUTO_REBOOT",
          "value": "false",
          "required": false,
          "description": "Whether to auto-reboot after updates if required (true/false)"
        }
      ]
    },
    {
      "id": "disk-cleanup",
      "name": "Disk Cleanup",
      "description": "Frees disk space by cleaning temporary files, caches, and logs.",
      "category": "Maintenance",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/disk-cleanup.ps1",
        "linux": "linux/disk-cleanup.sh",
        "macos": "macos/disk-cleanup.sh"
      },
      "environment_variables": []
    },
    {
      "id": "enable-rdp",
      "name": "Enable Remote Desktop",
      "description": "Enables Windows Remote Desktop Protocol (RDP) and configures firewall rules.",
      "category": "Configuration",
      "platforms": ["windows"],
      "script_language": "powershell",
      "scripts": {
        "windows": "windows/enable-rdp.ps1"
      },
      "environment_variables": []
    },
    {
      "id": "enable-ssh",
      "name": "Enable SSH Server",
      "description": "Installs and enables the OpenSSH server for remote access.",
      "category": "Configuration",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/enable-ssh.ps1",
        "linux": "linux/enable-ssh.sh",
        "macos": "macos/enable-ssh.sh"
      },
      "environment_variables": []
    },
    {
      "id": "enable-screen-sharing",
      "name": "Enable Screen Sharing",
      "description": "Enables VNC-based screen sharing for remote access on macOS.",
      "category": "Configuration",
      "platforms": ["macos"],
      "script_language": "bash",
      "scripts": {
        "macos": "macos/enable-screen-sharing.sh"
      },
      "environment_variables": []
    },
    {
      "id": "set-hostname",
      "name": "Set Hostname",
      "description": "Changes the machine's hostname. Requires a reboot to take effect.",
      "category": "Configuration",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/set-hostname.ps1",
        "linux": "linux/set-hostname.sh",
        "macos": "macos/set-hostname.sh"
      },
      "environment_variables": [
        {
          "key": "NEW_HOSTNAME",
          "value": "",
          "required": true,
          "description": "The new hostname to set"
        }
      ]
    },
    {
      "id": "set-timezone",
      "name": "Set Timezone",
      "description": "Sets the system timezone to a specified IANA timezone identifier.",
      "category": "Configuration",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/set-timezone.ps1",
        "linux": "linux/set-timezone.sh",
        "macos": "macos/set-timezone.sh"
      },
      "environment_variables": [
        {
          "key": "TIMEZONE",
          "value": "",
          "required": true,
          "description": "IANA timezone identifier (e.g. America/New_York, Europe/London, US/Pacific)"
        }
      ]
    },
    {
      "id": "create-local-user",
      "name": "Create Local User Account",
      "description": "Creates a new local user account with optional admin privileges.",
      "category": "Configuration",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/create-local-user.ps1",
        "linux": "linux/create-local-user.sh",
        "macos": "macos/create-local-user.sh"
      },
      "environment_variables": [
        {
          "key": "USERNAME",
          "value": "",
          "required": true,
          "description": "Username for the new account"
        },
        {
          "key": "PASSWORD",
          "value": "",
          "required": true,
          "description": "Password for the new account"
        },
        {
          "key": "FULL_NAME",
          "value": "",
          "required": false,
          "description": "Full display name for the account"
        },
        {
          "key": "IS_ADMIN",
          "value": "false",
          "required": false,
          "description": "Whether to grant admin/sudo privileges (true/false)"
        }
      ]
    },
    {
      "id": "enable-filevault",
      "name": "Enable FileVault Encryption",
      "description": "Enables FileVault full-disk encryption on macOS and saves the recovery key.",
      "category": "Security",
      "platforms": ["macos"],
      "script_language": "bash",
      "scripts": {
        "macos": "macos/enable-filevault.sh"
      },
      "environment_variables": []
    },
    {
      "id": "enable-bitlocker",
      "name": "Enable BitLocker Encryption",
      "description": "Enables BitLocker full-disk encryption on Windows with TPM and saves the recovery key.",
      "category": "Security",
      "platforms": ["windows"],
      "script_language": "powershell",
      "scripts": {
        "windows": "windows/enable-bitlocker.ps1"
      },
      "environment_variables": []
    },
    {
      "id": "configure-firewall",
      "name": "Configure macOS Firewall",
      "description": "Enables and configures the macOS Application Firewall with stealth mode.",
      "category": "Security",
      "platforms": ["macos"],
      "script_language": "bash",
      "scripts": {
        "macos": "macos/configure-firewall.sh"
      },
      "environment_variables": []
    },
    {
      "id": "vulnerability-scan",
      "name": "Vulnerability Scan",
      "description": "Enterprise security vulnerability assessment with 18 scan categories: OS patching, user/auth security, SSH/RDP configuration, network security, filesystem permissions, services, logging/audit, cryptography, malware/rootkit detection, container security, network discovery & neighbor scanning, external exposure & DNS, email security (SPF/DKIM/DMARC), credential & secret hygiene, EDR/XDR detection, backup & recovery verification, data classification & PII scanning, and cyber insurance readiness assessment. Outputs actionable report with severity ratings, remediation steps, and insurance alignment scoring.",
      "category": "Security",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/vulnerability-scan.ps1",
        "linux": "linux/vulnerability-scan.sh",
        "macos": "macos/vulnerability-scan.sh"
      },
      "environment_variables": []
    },
    {
      "id": "hipaa-compliance-scan",
      "name": "HIPAA Compliance Scan",
      "description": "Comprehensive HIPAA Security Rule assessment covering §164.312 Technical Safeguards (Access Controls, Audit Controls, Integrity, Authentication, Transmission Security), §164.310 Physical Safeguards, §164.308 Administrative Safeguards (Risk Analysis, Incident Response, Evaluation, Workforce Security), §164.530 Data Retention & Disposal, sensitive data/ePHI scanning (SSN, MRN, database detection), and cyber insurance alignment mapping. Outputs compliance report with HIPAA section references, remediation steps, and insurance readiness scoring.",
      "category": "Security",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/hipaa-compliance-scan.ps1",
        "linux": "linux/hipaa-compliance-scan.sh",
        "macos": "macos/hipaa-compliance-scan.sh"
      },
      "environment_variables": []
    },
    {
      "id": "deploy-ezlocalai",
      "name": "Deploy ezlocalai",
      "description": "Deploys ezlocalai local AI inference server. Clones the repo, creates a Python venv, installs via pip, configures model/token defaults, and sets up the service. Supports NVIDIA CUDA and AMD ROCm GPUs with automatic detection.",
      "category": "Software",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/deploy-ezlocalai.ps1",
        "linux": "linux/deploy-ezlocalai.sh",
        "macos": "macos/deploy-ezlocalai.sh"
      },
      "environment_variables": [
        {
          "key": "EZLOCALAI_INSTALL_DIR",
          "value": "",
          "required": false,
          "description": "Installation directory (default: /opt/ezlocalai on Linux, ~/ezlocalai on macOS, C:\\ezlocalai on Windows)"
        },
        {
          "key": "EZLOCALAI_DEFAULT_MODEL",
          "value": "unsloth/Qwen3.5-4B-GGUF",
          "required": false,
          "description": "Default LLM model to use"
        },
        {
          "key": "EZLOCALAI_MAX_TOKENS",
          "value": "40000",
          "required": false,
          "description": "Maximum input tokens for the LLM"
        },
        {
          "key": "EZLOCALAI_PORT",
          "value": "8091",
          "required": false,
          "description": "Port for the ezlocalai API server"
        },
        {
          "key": "EZLOCALAI_API_KEY",
          "value": "",
          "required": false,
          "description": "API key for the ezlocalai server (empty for no auth)"
        },
        {
          "key": "EZLOCALAI_WHISPER_MODEL",
          "value": "large-v3",
          "required": false,
          "description": "Whisper model for speech-to-text"
        },
        {
          "key": "EZLOCALAI_IMG_MODEL",
          "value": "Tongyi-MAI/Z-Image-Turbo",
          "required": false,
          "description": "Model for image generation (empty to disable)"
        },
        {
          "key": "EZLOCALAI_TTS_ENABLED",
          "value": "true",
          "required": false,
          "description": "Enable text-to-speech (true/false)"
        },
        {
          "key": "EZLOCALAI_STT_ENABLED",
          "value": "true",
          "required": false,
          "description": "Enable speech-to-text (true/false)"
        },
        {
          "key": "EZLOCALAI_QUANT_TYPE",
          "value": "Q4_K_XL",
          "required": false,
          "description": "Quantization type for the model"
        },
        {
          "key": "EZLOCALAI_BATCH_SIZE",
          "value": "2048",
          "required": false,
          "description": "LLM batch size"
        },
        {
          "key": "EZLOCALAI_VOICE_SERVER",
          "value": "",
          "required": false,
          "description": "Voice server URL for offloading TTS/STT, or 'true' to make this a dedicated voice server"
        },
        {
          "key": "EZLOCALAI_IMAGE_SERVER",
          "value": "",
          "required": false,
          "description": "Image server URL for offloading image/video generation, or 'true' to make this a dedicated image server"
        },
        {
          "key": "EZLOCALAI_TEXT_SERVER",
          "value": "",
          "required": false,
          "description": "Text server URL for offloading LLM requests, or 'true' to explicitly mark as text server"
        }
      ]
    },
    {
      "id": "restart-ezlocalai",
      "name": "Restart ezlocalai",
      "description": "Restarts the ezlocalai local AI inference server. Uses systemd on Linux if available, otherwise uses the ezlocalai CLI directly.",
      "category": "Software",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/restart-ezlocalai.ps1",
        "linux": "linux/restart-ezlocalai.sh",
        "macos": "macos/restart-ezlocalai.sh"
      },
      "environment_variables": [
        {
          "key": "EZLOCALAI_INSTALL_DIR",
          "value": "",
          "required": false,
          "description": "Installation directory (must match deploy-ezlocalai)"
        }
      ]
    },
    {
      "id": "stop-ezlocalai",
      "name": "Stop ezlocalai",
      "description": "Stops the ezlocalai local AI inference server.",
      "category": "Software",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/stop-ezlocalai.ps1",
        "linux": "linux/stop-ezlocalai.sh",
        "macos": "macos/stop-ezlocalai.sh"
      },
      "environment_variables": [
        {
          "key": "EZLOCALAI_INSTALL_DIR",
          "value": "",
          "required": false,
          "description": "Installation directory (must match deploy-ezlocalai)"
        }
      ]
    },
    {
      "id": "status-ezlocalai",
      "name": "ezlocalai Status",
      "description": "Checks the status of the ezlocalai local AI inference server.",
      "category": "Diagnostics",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/status-ezlocalai.ps1",
        "linux": "linux/status-ezlocalai.sh",
        "macos": "macos/status-ezlocalai.sh"
      },
      "environment_variables": [
        {
          "key": "EZLOCALAI_INSTALL_DIR",
          "value": "",
          "required": false,
          "description": "Installation directory (must match deploy-ezlocalai)"
        }
      ]
    },
    {
      "id": "uninstall-ezlocalai",
      "name": "Uninstall ezlocalai",
      "description": "Removes the ezlocalai installation including the venv, systemd service (Linux), and LaunchAgent (macOS). Does not remove Docker images.",
      "category": "Software",
      "platforms": ["windows", "linux", "macos"],
      "script_language": "cross-platform",
      "scripts": {
        "windows": "windows/uninstall-ezlocalai.ps1",
        "linux": "linux/uninstall-ezlocalai.sh",
        "macos": "macos/uninstall-ezlocalai.sh"
      },
      "environment_variables": [
        {
          "key": "EZLOCALAI_INSTALL_DIR",
          "value": "",
          "required": false,
          "description": "Installation directory (must match deploy-ezlocalai)"
        }
      ]
    }
  ]
}