secured phpmyadmin with basic_auth

assets/lemp/default.nginxconf

@@ -33,6 +33,8 @@ server {
 
 	location /phpmyadmin {
 		root /usr/share/webapps/;
+		auth_basic "Admin Login";
+    auth_basic_user_file passwds;
 
     # Deny static files
     location ~ ^/phpMyAdmin/(README|LICENSE|ChangeLog|DCO)$ {

bin/lemp.sh

@@ -103,19 +103,14 @@ service php-fpm7 restart
 
 chmod +r /etc/phpmyadmin/config.inc.php
 
-# ln -s /usr/share/phpmyadmin /var/www/html/
+echo -e "securing phpMyAdmin"
-# cp "$_assets"/nginx-phpmyadmin.conf > /etc/nginx/sites-available/phpmyadmin.conf
+_pass="$(< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c8)"
-# ln -s /etc/nginx/sites-available/phpmyadmin.conf /etc/nginx/sites-enabled/phpmyadmin.conf
+_encrypted=$(openssl passwd -apr1 $_pass)
-
+echo -e "pma:$_encrypted" > /etc/nginx/passwds
-# echo -e "securing phpMyAdmin"
-# sed -i "s/DirectoryIndex index.php/DirectoryIndex index.php\nAllowOverride all/"
-# cp "$_assets"/phpmyadmin_htaccess > /usr/share/phpmyadmin/.htaccess
-# echo -n "define a user name for phpmyadmin : "
-# read un
-# htpasswd -c /etc/phpmyadmin/.htpasswd $un
 # service apache2 restart
 echo -e "phpMyAdmin installed"
 echo -e "You can access it at yourip/phpmyadmin"
+echo -e "please note the credentials user: pma passwd:$_pass"
 
 echo -e '
              _ _