- Replace $EUID with $(id -u) for root checks across all bin/*.sh and install.sh: dash (Debian's /bin/sh) never sets $EUID, so the check was silently broken everywhere. - lemp.sh: make apt-get upgrade non-interactive (--yes), align the Redis PHP module and php-fpm restart with $PHP_VERSION instead of a hardcoded 8.1, and template the nginx PHP-FPM socket path via a PHP_FPM_SOCK placeholder substituted at install time. - nginx-phpmyadmin.conf: fix docroot to match the actual phpMyAdmin symlink location created by lemp.sh. - mysql-db.sh: inline the root check instead of sourcing the nonexistent bin/checkroot.sh. - webhook.sh: fix chowm typo (chown). - urbackup.sh: copy the systemd unit from assets/ instead of a relative path to a file that doesn't exist in the repo. - _addUserSite.sh: fix invalid `$var=value` assignment and an empty if-block that was a POSIX sh syntax error. Also carries over pending fixes to deploy-drupal.sh (drush now invoked via vendor/bin/drush) and gitbarrerepos.sh (comment cleanup). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
30 lines
697 B
Bash
Executable File
30 lines
697 B
Bash
Executable File
#!/bin/sh
|
|
|
|
# TODO check if root
|
|
|
|
echo -e '\033[35m
|
|
______________ _______ _____ __ __
|
|
/ ____/ _/ __ \/ ____/ | / / | / / / /
|
|
/ /_ / // /_/ / __/ | | /| / / /| | / / / /
|
|
/ __/ _/ // _, _/ /___ | |/ |/ / ___ |/ /___/ /___
|
|
/_/ /___/_/ |_/_____/ |__/|__/_/ |_/_____/_____/
|
|
\033[0m'
|
|
echo -e "\033[35;1mInstalling ufw and setup firewall (allowing only ssh and http) \033[0m"
|
|
|
|
if [ "$(id -u)" -ne 0 ]; then
|
|
echo "Please run as root"
|
|
exit
|
|
fi
|
|
|
|
sleep 2
|
|
apt-get --yes install ufw
|
|
ufw allow ssh
|
|
ufw allow http
|
|
ufw allow https
|
|
|
|
# TODO ask for allowing ssh for some ip
|
|
|
|
ufw enable
|
|
ufw status verbose
|
|
echo -e "\033[92;1mufw installed and firwall configured\033[Om"
|