virtubox
/
ubuntu-nginx-web-server
mirror of https://github.com/VirtuBox/ubuntu-nginx-web-server
1
0
Fork 0
Code Issues Releases Wiki Activity

beta testing on script

This commit is contained in:
VirtuBox 2018-08-06 09:09:14 +02:00
parent fe249c6feb
commit 0862c2fa71
1 changed files with 144 additions and 244 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

388
scripts/init.sh
View File

@ -52,7 +52,7 @@ if [ "$mariadb_server_install" = "n" ]; then
read -p "Select an option [y/n]: " mariadb_client_install read -p "Select an option [y/n]: " mariadb_client_install
done done
fi fi
if [[ "$mariadb_server_install" = "y" || "$mariadb_client_install" = "y" ]]; then if [[ "$mariadb_server_install" == "y" || "$mariadb_client_install" == "y" ]]; then
echo "" echo ""
echo "What version of MariaDB Client/Server do you want to install, 10.1, 10.2 or 10.3 ?" echo "What version of MariaDB Client/Server do you want to install, 10.1, 10.2 or 10.3 ?"
while [[ $mariadb_version_install != "10.1" && $mariadb_version_install != "10.2" && $mariadb_version_install != "10.3" ]]; do while [[ $mariadb_version_install != "10.1" && $mariadb_version_install != "10.2" && $mariadb_version_install != "10.3" ]]; do
@ -81,17 +81,18 @@ echo ""
################################## ##################################
echo "updating packages" echo "updating packages"
apt-get update >> /tmp/ubuntu-nginx-web-server.log {
apt-get upgrade -y >> /tmp/ubuntu-nginx-web-server.log apt-get update
apt-get autoremove -y --purge >> /tmp/ubuntu-nginx-web-server.log apt-get upgrade -y
apt-get autoclean -y >> /tmp/ubuntu-nginx-web-server.log apt-get autoremove -y --purge
apt-get autoclean -y
} >>/tmp/ubuntu-nginx-web-server.log
################################## ##################################
# UFW # UFW
################################## ##################################
echo "configuring UFW"
ufw_setup() { {
if [ ! -d /etc/ufw ]; then if [ ! -d /etc/ufw ]; then
apt-get install ufw -y >>/tmp/ubuntu-nginx-web-server.log apt-get install ufw -y >>/tmp/ubuntu-nginx-web-server.log
fi fi
@ -118,40 +119,38 @@ ufw_setup() {
ufw allow 6556 ufw allow 6556
ufw allow 10050 ufw allow 10050
} } >>/tmp/ubuntu-nginx-web-server.log
################################## ##################################
# Useful packages # Useful packages
################################## ##################################
useful_packages_setup() { echo "installing useful packages"
{
echo "installing useful packages"
apt-get install haveged curl git unzip zip fail2ban htop nload nmon ntp -y >>/tmp/ubuntu-nginx-web-server.log
apt-get install haveged curl git unzip zip fail2ban htop nload nmon ntp gnupg2 wget -y
# ntp time # ntp time
systemctl enable ntp systemctl enable ntp
} } >>/tmp/ubuntu-nginx-web-server.log
################################## ##################################
# clone repository # clone repository
################################## ##################################
dl_git_repo_setup() { echo "cloning ubuntu-nginx-web-server"
{
cd /tmp || exit cd /tmp || exit
rm -rf /tmp/ubuntu-nginx-web-server rm -rf /tmp/ubuntu-nginx-web-server
git clone https://github.com/VirtuBox/ubuntu-nginx-web-server.git git clone https://github.com/VirtuBox/ubuntu-nginx-web-server.git
} } >>/tmp/ubuntu-nginx-web-server.log
################################## ##################################
# Sysctl tweaks + open_files limits # Sysctl tweaks + open_files limits
################################## ##################################
echo "applying kernel tweaks"
sysctl_tweaks_setup() { {
sudo modprobe tcp_htcp sudo modprobe tcp_htcp
cp -f $REPO_PATH/etc/sysctl.conf /etc/sysctl.conf cp -f $REPO_PATH/etc/sysctl.conf /etc/sysctl.conf
sysctl -p sysctl -p
@ -160,98 +159,82 @@ sysctl_tweaks_setup() {
# Redis transparent_hugepage # Redis transparent_hugepage
echo never >/sys/kernel/mm/transparent_hugepage/enabled echo never >/sys/kernel/mm/transparent_hugepage/enabled
} } >>/tmp/ubuntu-nginx-web-server.log
################################## ##################################
# Add MariaDB 10.3 repository # Add MariaDB 10.3 repository
################################## ##################################
mariadb_repo_setup() { if [[ "$mariadb_server_install" == "y" || "$mariadb_client_install" == "y" ]]; then
echo "adding mariadb repository"
curl -sS https://downloads.mariadb.com/MariaDB/mariadb_repo_setup | \ curl -sS https://downloads.mariadb.com/MariaDB/mariadb_repo_setup |
sudo bash -s -- --mariadb-server-version=$mariadb_version_install --skip-maxscale -y sudo bash -s -- --mariadb-server-version=$mariadb_version_install --skip-maxscale -y
apt-get update >>/tmp/ubuntu-nginx-web-server.log apt-get update >>/tmp/ubuntu-nginx-web-server.log
fi
}
################################## ##################################
# MariaDB 10.3 install # MariaDB 10.3 install
################################## ##################################
mariadb_setup() { if [ "$mariadb_server_install" = "y" ]; then
echo "installing MariaDB $mariadb_version_install"
rootpass=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 32 | head -n 1) MYSQL_ROOT_PASS=$(date +%s | sha256sum | base64 | head -c 32)
export DEBIAN_FRONTEND=noninteractive # to avoid prompt during installation export DEBIAN_FRONTEND=noninteractive # to avoid prompt during installation
sudo debconf-set-selections <<<"mariadb-server-$mariadb_version_install mysql-server/root_password password $rootpass" sudo debconf-set-selections <<<"mariadb-server-$mariadb_version_install mysql-server/root_password password $MYSQL_ROOT_PASS"
sudo debconf-set-selections <<<"mariadb-server-$mariadb_version_install mysql-server/root_password_again password $rootpass" sudo debconf-set-selections <<<"mariadb-server-$mariadb_version_install mysql-server/root_password_again password $MYSQL_ROOT_PASS"
# install mariadb server # install mariadb server
sudo DEBIAN_FRONTEND=noninteractive apt-get install -qq mariadb-server # -qq implies -y --force-yes DEBIAN_FRONTEND=noninteractive apt-get install -qq mariadb-server >>/tmp/ubuntu-nginx-web-server.log # -qq implies -y --force-yes
sudo bash -c 'echo -e "[client]\nuser = root" > $HOME/.my.cnf'
echo "password = $MYSQL_ROOT_PASS" >>$HOME/.my.cnf
cp $HOME/.my.cnf /etc/mysql/conf.d/my.cnf
# set password to the root user and grant privileges # set password to the root user and grant privileges
Q1="GRANT ALL PRIVILEGES on *.* to 'root'@'localhost' IDENTIFIED BY '$rootpass' WITH GRANT OPTION;" Q1="GRANT ALL PRIVILEGES on *.* to 'root'@'localhost' IDENTIFIED BY '$MYSQL_ROOT_PASS' WITH GRANT OPTION;"
Q2="FLUSH PRIVILEGES;" Q2="FLUSH PRIVILEGES;"
SQL="${Q1}${Q2}" SQL="${Q1}${Q2}"
mysql -uroot -e "$SQL" mysql -uroot -e "$SQL"
sudo bash -c 'echo -e "[client]\n\tuser = root\n\tpassword = $rootpass" > $HOME/.my.cnf' ##################################
# MariaDB tweaks
} ##################################
mariadb_client_setup() {
apt-get install -y mariadb-client >>/tmp/ubuntu-nginx-web-server.log
}
##################################
# MariaDB tweaks
##################################
mariadb_tweaks_setup() {
echo "Configuring MariaDB tweaks"
cp -f $REPO_PATH/etc/mysql/my.cnf /etc/mysql/my.cnf cp -f $REPO_PATH/etc/mysql/my.cnf /etc/mysql/my.cnf
sudo service mysql stop sudo service mysql stop >>/tmp/ubuntu-nginx-web-server.log
sudo mv /var/lib/mysql/ib_logfile0 /var/lib/mysql/ib_logfile0.bak sudo mv /var/lib/mysql/ib_logfile0 /var/lib/mysql/ib_logfile0.bak
sudo mv /var/lib/mysql/ib_logfile1 /var/lib/mysql/ib_logfile1.bak sudo mv /var/lib/mysql/ib_logfile1 /var/lib/mysql/ib_logfile1.bak
cp -f $REPO_PATH/etc/systemd/system/mariadb.service.d/limits.conf /etc/systemd/system/mariadb.service.d/limits.conf cp -f $REPO_PATH/etc/systemd/system/mariadb.service.d/limits.conf /etc/systemd/system/mariadb.service.d/limits.conf
sudo systemctl daemon-reload sudo systemctl daemon-reload >>/tmp/ubuntu-nginx-web-server.log
sudo service mysql start sudo service mysql start >>/tmp/ubuntu-nginx-web-server.log
elif [ "$mariadb_client_install" = "y" ]; then
} echo "installing mariadb-client"
apt-get install -y mariadb-client >>/tmp/ubuntu-nginx-web-server.log
fi
################################## ##################################
# EasyEngine automated install # EasyEngine automated install
################################## ##################################
ee_install_setup() { sudo bash -c 'echo -e "[user]\n\tname = $USER\n\temail = $USER@$HOSTNAME" > $HOME/.gitconfig'
sudo wget -qO ee rt.cx/ee && sudo bash ee
sudo bash -c 'echo -e "[user]\n\tname = $USER\n\temail = $USER@$HOSTNAME" > $HOME/.gitconfig' source /etc/bash_completion.d/ee_auto.rc
sudo wget -qO ee rt.cx/ee && sudo bash ee
source /etc/bash_completion.d/ee_auto.rc
}
################################## ##################################
# EasyEngine stacks install # EasyEngine stacks install
################################## ##################################
ee_setup() { ee stack install
ee stack install --php7 --redis --admin --phpredisadmin
ee stack install
ee stack install --php7 --redis --admin --phpredisadmin
}
################################## ##################################
# Fix phpmyadmin install # Fix phpmyadmin install
################################## ##################################
echo "updating phpmyadmin"
ee_fix_setup() { {
cd ~/ || exit cd ~/ || exit
curl -sS https://getcomposer.org/installer | php >>/tmp/ubuntu-nginx-web-server.log curl -sS https://getcomposer.org/installer | php >>/tmp/ubuntu-nginx-web-server.log
@ -260,13 +243,13 @@ ee_fix_setup() {
chown www-data:www-data /var/www chown www-data:www-data /var/www
sudo -u www-data -H composer update -d /var/www/22222/htdocs/db/pma/ sudo -u www-data -H composer update -d /var/www/22222/htdocs/db/pma/
} } >>/tmp/ubuntu-nginx-web-server.log
################################## ##################################
# Allow www-data shell access for SFTP + add .bashrc settings et completion # Allow www-data shell access for SFTP + add .bashrc settings et completion
################################## ##################################
echo "configuring www-data permissions"
web_user_setup() { {
usermod -s /bin/bash www-data usermod -s /bin/bash www-data
@ -279,14 +262,15 @@ web_user_setup() {
sudo -u www-data -H wget https://raw.githubusercontent.com/scopatz/nanorc/files/install.sh -O- | sh sudo -u www-data -H wget https://raw.githubusercontent.com/scopatz/nanorc/files/install.sh -O- | sh
} } >>/tmp/ubuntu-nginx-web-server.log
################################## ##################################
# Install php7.1-fpm # Install php7.1-fpm
################################## ##################################
php71_setup() { if [ "$phpfpm71_install" = "y" ]; then
echo "installing php7.1-fpm"
apt-get install php7.1-fpm php7.1-cli php7.1-zip php7.1-opcache php7.1-mysql php7.1-mcrypt php7.1-mbstring php7.1-json php7.1-intl \ apt-get install php7.1-fpm php7.1-cli php7.1-zip php7.1-opcache php7.1-mysql php7.1-mcrypt php7.1-mbstring php7.1-json php7.1-intl \
php7.1-gd php7.1-curl php7.1-bz2 php7.1-xml php7.1-tidy php7.1-soap php7.1-bcmath -y php7.1-xsl >>/tmp/ubuntu-nginx-web-server.log php7.1-gd php7.1-curl php7.1-bz2 php7.1-xml php7.1-tidy php7.1-soap php7.1-bcmath -y php7.1-xsl >>/tmp/ubuntu-nginx-web-server.log
@ -296,27 +280,27 @@ php71_setup() {
cp -f $REPO_PATH/etc/php/7.1/cli/php.ini /etc/php/7.1/cli/php.ini cp -f $REPO_PATH/etc/php/7.1/cli/php.ini /etc/php/7.1/cli/php.ini
sudo service php7.1-fpm restart sudo service php7.1-fpm restart
} fi
################################## ##################################
# Install php7.2-fpm # Install php7.2-fpm
################################## ##################################
php72_setup() { if [ "$phpfpm72_install" = "y" ]; then
echo "installing php7.2-fpm"
apt-get install php7.2-fpm php7.2-xml php7.2-bz2 php7.2-zip php7.2-mysql php7.2-intl php7.2-gd php7.2-curl php7.2-soap php7.2-mbstring -y >>/tmp/ubuntu-nginx-web-server.log apt-get install php7.2-fpm php7.2-xml php7.2-bz2 php7.2-zip php7.2-mysql php7.2-intl php7.2-gd php7.2-curl php7.2-soap php7.2-mbstring -y >>/tmp/ubuntu-nginx-web-server.log
cp -f $REPO_PATH/etc/php/7.2/fpm/pool.d/www.conf /etc/php/7.2/fpm/pool.d/www.conf cp -f $REPO_PATH/etc/php/7.2/fpm/pool.d/www.conf /etc/php/7.2/fpm/pool.d/www.conf
cp -f $REPO_PATH/etc/php/7.2/cli/php.ini /etc/php/7.2/cli/php.ini cp -f $REPO_PATH/etc/php/7.2/cli/php.ini /etc/php/7.2/cli/php.ini
service php7.2-fpm restart service php7.2-fpm restart
} fi
################################## ##################################
# Update php7.0-fpm config # Update php7.0-fpm config
################################## ##################################
echo "updating php7.0 configuration"
php7_conf_setup() { {
if [ ! -d /etc/php/7.0 ]; then if [ ! -d /etc/php/7.0 ]; then
@ -325,25 +309,21 @@ php7_conf_setup() {
fi fi
} } >>/tmp/ubuntu-nginx-web-server.log
################################## ##################################
# Compile latest nginx release from source # Compile latest nginx release from source
################################## ##################################
nginx_ee_setup() { wget https://raw.githubusercontent.com/VirtuBox/nginx-ee/master/nginx-build.sh
chmod +x nginx-build.sh
wget https://raw.githubusercontent.com/VirtuBox/nginx-ee/master/nginx-build.sh ./nginx-build.sh
chmod +x nginx-build.sh
./nginx-build.sh
}
################################## ##################################
# Add nginx additional conf # Add nginx additional conf
################################## ##################################
echo "optimizing nginx configuration"
nginx_conf_setup() { {
# php7.1 & 7.2 common configurations # php7.1 & 7.2 common configurations
@ -357,17 +337,17 @@ nginx_conf_setup() {
CONF_UPSTREAM=$(grep -c netdata /etc/nginx/conf.d/upstream.conf) CONF_UPSTREAM=$(grep -c netdata /etc/nginx/conf.d/upstream.conf)
CONF_DEFAULT=$(grep -c status /etc/nginx/sites-available/default) CONF_DEFAULT=$(grep -c status /etc/nginx/sites-available/default)
if [ "$CONF_22222" = 0 ]; then if [ "$CONF_22222" = "0" ]; then
# add nginx reverse-proxy for netdata on https://yourserver.hostname:22222/netdata/ # add nginx reverse-proxy for netdata on https://yourserver.hostname:22222/netdata/
sudo cp -f $REPO_PATH/etc/nginx/sites-available/22222 /etc/nginx/sites-available/22222 sudo cp -f $REPO_PATH/etc/nginx/sites-available/22222 /etc/nginx/sites-available/22222
fi fi
if [ "$CONF_UPSTREAM" = 0 ]; then if [ "$CONF_UPSTREAM" = "0" ]; then
# add netdata, php7.1 and php7.2 upstream # add netdata, php7.1 and php7.2 upstream
sudo cp -f $REPO_PATH/etc/nginx/conf.d/upstream.conf /etc/nginx/conf.d/upstream.conf sudo cp -f $REPO_PATH/etc/nginx/conf.d/upstream.conf /etc/nginx/conf.d/upstream.conf
fi fi
if [ "$CONF_DEFAULT" = 0 ]; then if [ "$CONF_DEFAULT" = "0" ]; then
# additional nginx locations for monitoring # additional nginx locations for monitoring
sudo cp -f $REPO_PATH/etc/nginx/sites-available/default /etc/nginx/sites-available/default sudo cp -f $REPO_PATH/etc/nginx/sites-available/default /etc/nginx/sites-available/default
fi fi
@ -378,28 +358,28 @@ nginx_conf_setup() {
nginx -t nginx -t
service nginx reload service nginx reload
} } >>/tmp/ubuntu-nginx-web-server.log
################################## ##################################
# Add fail2ban configurations # Add fail2ban configurations
################################## ##################################
echo "configuring fail2ban"
f2b_setup() { {
cp -f $REPO_PATH/etc/fail2ban/filter.d/ddos.conf /etc/fail2ban/filter.d/ddos.conf cp -f $REPO_PATH/etc/fail2ban/filter.d/ddos.conf /etc/fail2ban/filter.d/ddos.conf
cp -f $REPO_PATH/etc/fail2ban/filter.d/ee-wordpress.conf /etc/fail2ban/filter.d/ee-wordpress.conf cp -f $REPO_PATH/etc/fail2ban/filter.d/ee-wordpress.conf /etc/fail2ban/filter.d/ee-wordpress.conf
cp -f $REPO_PATH/etc/fail2ban/jail.d/custom.conf /etc/fail2ban/jail.d/custom.conf cp -f $REPO_PATH/etc/fail2ban/jail.d/custom.conf /etc/fail2ban/jail.d/custom.conf
cp -f $REPO_PATH/etc/fail2ban/jail.d/ddos.conf /etc/fail2ban/jail.d/ddos.conf cp -f $REPO_PATH/etc/fail2ban/jail.d/ddos.conf /etc/fail2ban/jail.d/ddos.conf
fail2ban-client reload >>/tmp/ubuntu-nginx-web-server.log fail2ban-client reload
} } >>/tmp/ubuntu-nginx-web-server.log
################################## ##################################
# Install cheat & nanorc # Install cheat & nanorc
################################## ##################################
echo "installing cheat CLI"
bashrc_extra_setup() { {
curl https://cht.sh/:cht.sh >/usr/bin/cht.sh curl https://cht.sh/:cht.sh >/usr/bin/cht.sh
chmod +x /usr/bin/cht.sh chmod +x /usr/bin/cht.sh
@ -412,25 +392,13 @@ bashrc_extra_setup() {
wget https://raw.githubusercontent.com/scopatz/nanorc/files/install.sh -O- | sh wget https://raw.githubusercontent.com/scopatz/nanorc/files/install.sh -O- | sh
} } >>/tmp/ubuntu-nginx-web-server.log
##################################
# Install ucaresystem
##################################
ucaresystem_setup() {
add-apt-repository ppa:utappia/stable -y >>/tmp/ubuntu-nginx-web-server.log
apt-get update >>/tmp/ubuntu-nginx-web-server.log
apt-get install ucaresystem-core -y >>/tmp/ubuntu-nginx-web-server.log
}
################################## ##################################
# Install ProFTPd # Install ProFTPd
################################## ##################################
proftpd_setup() { if [ "$proftpd_install" = "y" ]; then
echo "installing proftpd" echo "installing proftpd"
apt-get install proftpd -y >>/tmp/ubuntu-nginx-web-server.log apt-get install proftpd -y >>/tmp/ubuntu-nginx-web-server.log
@ -443,80 +411,67 @@ proftpd_setup() {
sudo service proftpd restart sudo service proftpd restart
if [ "$ufw_install" = "y" ]; then if [ -d /etc/ufw ]; then
# ftp passive ports # ftp passive ports
ufw allow 49000:50000/tcp ufw allow 49000:50000/tcp
fi fi
} fi
################################## ##################################
# Install Netdata # Install Netdata
################################## ##################################
netdata_setup() { if [ ! -d /etc/netdata ]; then
echo "installing netdata"
## install dependencies
apt-get install autoconf autoconf-archive autogen automake gcc libmnl-dev lm-sensors make nodejs pkg-config python python-mysqldb python-psycopg2 python-pymongo python-yaml uuid-dev zlib1g-dev -y >>/tmp/ubuntu-nginx-web-server.log
if [ ! -d /etc/netdata ]; then ## install nedata
wget https://my-netdata.io/kickstart.sh >>/tmp/ubuntu-nginx-web-server.log
chmod +x kickstart.sh
./kickstart.sh all --dont-wait
## install dependencies ## optimize netdata resources usage
apt-get install autoconf autoconf-archive autogen automake gcc libmnl-dev lm-sensors make nodejs pkg-config python python-mysqldb python-psycopg2 python-pymongo python-yaml uuid-dev zlib1g-dev -y >>/tmp/ubuntu-nginx-web-server.log echo 1 >/sys/kernel/mm/ksm/run
echo 1000 >/sys/kernel/mm/ksm/sleep_millisecs
## install nedata ## disable email notifigrep -cions
wget https://my-netdata.io/kickstart.sh >>/tmp/ubuntu-nginx-web-server.log sudo sed -i 's/SEND_EMAIL="YES"/SEND_EMAIL="NO"/' /etc/netdata/health_alarm_notify.conf
chmod +x kickstart.sh sudo service netdata restart
./kickstart.sh all --dont-wait
## optimize netdata resources usage fi
echo 1 >/sys/kernel/mm/ksm/run
echo 1000 >/sys/kernel/mm/ksm/sleep_millisecs
## disable email notifigrep -cions
sudo sed -i 's/SEND_EMAIL="YES"/SEND_EMAIL="NO"/' /etc/netdata/health_alarm_notify.conf
sudo service netdata restart
fi
}
##################################
# Install eXtplorer
##################################
extplorer_setup() {
if [ ! -d /var/www/22222/htdocs/files ]; then
mkdir /var/www/22222/htdocs/files
wget http://extplorer.net/attachments/download/74/eXtplorer_$EXTPLORER_VER.zip -O /var/www/22222/htdocs/files/ex.zip >>/tmp/ubuntu-nginx-web-server.log
cd /var/www/22222/htdocs/files || exit
unzip ex.zip >>/tmp/ubuntu-nginx-web-server.log
rm ex.zip
fi
}
################################## ##################################
# Install EasyEngine Dashboard # Install EasyEngine Dashboard
################################## ##################################
ee_dashboard_setup() { echo "installing easyengine-dashboard"
{
if [ ! -d /var/www/22222/htdocs/files ]; then
mkdir /var/www/22222/htdocs/files
wget http://extplorer.net/attachments/download/74/eXtplorer_$EXTPLORER_VER.zip -O /var/www/22222/htdocs/files/ex.zip
cd /var/www/22222/htdocs/files || exit 1
unzip ex.zip
rm ex.zip
fi
cd /var/www/22222 || exit cd /var/www/22222 || exit
## download latest version of EasyEngine-dashboard ## download latest version of EasyEngine-dashboard
cd /tmp || exit cd /tmp || exit
git clone https://github.com/VirtuBox/easyengine-dashboard.git >>/tmp/ubuntu-nginx-web-server.log git clone https://github.com/VirtuBox/easyengine-dashboard.git
cp -rf /tmp/easyengine-dashboard/* /var/www/22222/htdocs/ >>/tmp/ubuntu-nginx-web-server.log cp -rf /tmp/easyengine-dashboard/* /var/www/22222/htdocs/
chown -R www-data:www-data /var/www/22222/htdocs >>/tmp/ubuntu-nginx-web-server.log chown -R www-data:www-data /var/www/22222/htdocs
} } >>/tmp/ubuntu-nginx-web-server.log
################################## ##################################
# Install Acme.sh # Install Acme.sh
################################## ##################################
echo "installing acme.sh"
acme_sh_setup() { {
# install acme.sh if needed # install acme.sh if needed
echo "" echo ""
@ -524,105 +479,50 @@ acme_sh_setup() {
echo "" echo ""
if [ ! -f $HOME/.acme.sh/acme.sh ]; then if [ ! -f $HOME/.acme.sh/acme.sh ]; then
echo "" echo ""
echo "installing acme.sh"
echo "" echo ""
wget -O - https://get.acme.sh | sh wget -O - https://get.acme.sh | sh
cd || exit cd || exit
source .bashrc source .bashrc
fi fi
} } >>/tmp/ubuntu-nginx-web-server.log
################################## ##################################
# Secure EasyEngine Dashboard with Acme.sh # Secure EasyEngine Dashboard with Acme.sh
################################## ##################################
ee-acme-22222() { MY_HOSTNAME=$(hostname -f)
MY_IP=$(curl -s v4.vtbox.net)
MY_HOSTNAME=$(hostname -f) MY_HOSTNAME_IP=$(dig +short @8.8.8.8 "$MY_HOSTNAME")
MY_IP=$(curl -s v4.vtbox.net)
MY_HOSTNAME_IP=$(dig +short @8.8.8.8 "$MY_HOSTNAME")
if [[ "$MY_IP" == "$MY_HOSTNAME_IP" ]]; then
if [ ! -f /etc/systemd/system/multi-user.target.wants/nginx.service ]; then
systemctl enable nginx.service >>/tmp/ubuntu-nginx-web-server.log
fi
if [ ! -d $HOME/.acme.sh/${MY_HOSTNAME}_ecc ]; then
$HOME/.acme.sh/acme.sh --issue -d $MY_HOSTNAME --keylength ec-384 --standalone --pre-hook "service nginx stop " --post-hook "service nginx start"
fi
if [ -d /etc/letsencrypt/live/$MY_HOSTNAME ]; then
rm -rf /etc/letsencrypt/live/$MY_HOSTNAME/*
else
mkdir -p /etc/letsencrypt/live/$MY_HOSTNAME
fi
# install the cert and reload nginx
$HOME/.acme.sh/acme.sh --install-cert -d ${MY_HOSTNAME} --ecc \
--cert-file /etc/letsencrypt/live/${MY_HOSTNAME}/cert.pem \
--key-file /etc/letsencrypt/live/${MY_HOSTNAME}/key.pem \
--fullchain-file /etc/letsencrypt/live/${MY_HOSTNAME}/fullchain.pem \
--reloadcmd "systemctl reload nginx.service"
if [ -f /etc/letsencrypt/live/${MY_HOSTNAME}/fullchain.pem ] && [ -f /etc/letsencrypt/live/${MY_HOSTNAME}/key.pem ]; then
sed -i "s/ssl_certificate \\/var\\/www\\/22222\\/cert\\/22222.crt;/ssl_certificate \\/etc\\/letsencrypt\\/live\\/${MY_HOSTNAME}\\/fullchain.pem;/" /etc/nginx/sites-available/22222
sed -i "s/ssl_certificate_key \\/var\\/www\\/22222\\/cert\\/22222.key;/ssl_certificate_key \\/etc\\/letsencrypt\\/live\\/${MY_HOSTNAME}\\/key.pem;/" /etc/nginx/sites-available/22222
fi
service nginx reload
if [[ "$MY_IP" == "$MY_HOSTNAME_IP" ]]; then
echo "securing easyengine backend"
if [ ! -f /etc/systemd/system/multi-user.target.wants/nginx.service ]; then
systemctl enable nginx.service >>/tmp/ubuntu-nginx-web-server.log
fi fi
}
################################## if [ ! -d $HOME/.acme.sh/${MY_HOSTNAME}_ecc ]; then
# Functions $HOME/.acme.sh/acme.sh --issue -d $MY_HOSTNAME --keylength ec-384 --standalone --pre-hook "service nginx stop " --post-hook "service nginx start"
################################## fi
useful_packages_setup if [ -d /etc/letsencrypt/live/$MY_HOSTNAME ]; then
dl_git_repo_setup rm -rf /etc/letsencrypt/live/$MY_HOSTNAME/*
sysctl_tweaks_setup else
mkdir -p /etc/letsencrypt/live/$MY_HOSTNAME
fi
ufw_setup # install the cert and reload nginx
$HOME/.acme.sh/acme.sh --install-cert -d ${MY_HOSTNAME} --ecc \
--cert-file /etc/letsencrypt/live/${MY_HOSTNAME}/cert.pem \
--key-file /etc/letsencrypt/live/${MY_HOSTNAME}/key.pem \
--fullchain-file /etc/letsencrypt/live/${MY_HOSTNAME}/fullchain.pem \
--reloadcmd "systemctl reload nginx.service"
mariadb_repo_setup if [ -f /etc/letsencrypt/live/${MY_HOSTNAME}/fullchain.pem ] && [ -f /etc/letsencrypt/live/${MY_HOSTNAME}/key.pem ]; then
sed -i "s/ssl_certificate \\/var\\/www\\/22222\\/cert\\/22222.crt;/ssl_certificate \\/etc\\/letsencrypt\\/live\\/${MY_HOSTNAME}\\/fullchain.pem;/" /etc/nginx/sites-available/22222
sed -i "s/ssl_certificate_key \\/var\\/www\\/22222\\/cert\\/22222.key;/ssl_certificate_key \\/etc\\/letsencrypt\\/live\\/${MY_HOSTNAME}\\/key.pem;/" /etc/nginx/sites-available/22222
fi
service nginx reload
if [ "$mariadb_server_install" = "y" ]; then
mariadb_setup
mariadb_tweaks_setup
elif [ "$mariadb_client_install" = "y" ]; then
mariadb_client_setup
fi fi
ee_install_setup
ee_setup
ee_fix_setup
web_user_setup
php7_conf_setup
if [ "$phpfpm71_install" = "y" ]; then
php71_setup
fi
if [ "$phpfpm72_install" = "y" ]; then
php72_setup
fi
nginx_ee_setup
nginx_conf_setup
f2b_setup
if [ "$proftpd_install" = "y" ]; then
proftpd_setup
fi
bashrc_extra_setup
#ucaresystem
netdata_setup
extplorer_setup
ee_dashboard_setup
acme_sh_setup
ee-acme-22222