deployment-dcdn/install.sh

434 lines
15 KiB
Bash
Raw Normal View History

2024-02-23 14:28:42 +01:00
#!/bin/bash
2024-02-23 15:46:03 +01:00
PURPLE='\033[35m'
2024-02-25 00:38:41 +01:00
ORANGE='\033[33m'
2024-02-25 19:17:44 +01:00
BLUE='\033[34m'
2024-02-23 15:38:12 +01:00
BOLD='\033[1m'
RESET='\033[0m'
2024-02-23 20:04:32 +01:00
install_pkg() {
pkg="$1"
if ! command -v "$pkg" &> /dev/null; then
apt install -y "$pkg"
2024-02-23 20:15:32 +01:00
echo -e "${PURPLE}${BOLD}${pkg} installed${RESET}"
2024-02-23 18:05:07 +01:00
fi
}
2024-02-23 20:04:32 +01:00
get_username() {
if [[ -z "$username" ]]; then
username=$(getent passwd 1000 | cut -d: -f1)
fi
}
2024-02-25 01:55:30 +01:00
get_ip() {
if [[ -z "$ip" ]]; then
ip=$(hostname -I)
if [[ "${ip: -1}" == " " ]]; then
ip="${ip%?}"
fi
fi
}
2024-02-23 15:46:03 +01:00
echo -e "${PURPLE}${BOLD}Deployment Debian + Caddy + Directus + Nuxt${RESET}"
2024-02-23 14:28:42 +01:00
if [ "$EUID" -ne 0 ]; then
echo "Please run as root"
exit
fi
2024-02-25 22:18:51 +01:00
apt install -y php php-fpm
2024-02-25 22:59:12 +01:00
systemctl disable --now apache2
2024-02-25 22:18:51 +01:00
2024-02-23 14:28:42 +01:00
#
# USER
#
2024-02-23 20:15:32 +01:00
echo -e "${PURPLE}${BOLD}Create a user ? (y/N) ${RESET}"
2024-02-23 15:38:12 +01:00
read answer
2024-02-23 15:14:36 +01:00
if [[ "$answer" == "y" ]]; then
2024-02-23 15:46:03 +01:00
echo -e "${PURPLE}${BOLD}Create user${RESET}"
2024-02-23 14:28:42 +01:00
2024-02-23 15:14:36 +01:00
read -p "Enter username: " username
2024-02-23 14:28:42 +01:00
2024-02-23 15:14:36 +01:00
if id "$username" &>/dev/null; then
echo "User '$username' already exists."
exit 1
fi
2024-02-23 14:28:42 +01:00
2024-02-25 00:38:41 +01:00
echo -e "${ORANGE}${BOLD}Generate and store the password somewhere safe${RESET}"
2024-02-23 15:14:36 +01:00
read -s -p "Enter password: " password
echo
useradd -m "$username"
chsh -s /bin/bash $username
echo "$username:$password" | chpasswd
2024-02-23 14:28:42 +01:00
2024-02-23 15:14:36 +01:00
usermod -aG sudo $username
2024-02-23 14:28:42 +01:00
2024-02-23 15:46:03 +01:00
echo -e "${PURPLE}${BOLD}User '$username' created with password successfully.${RESET}"
2024-02-23 15:14:36 +01:00
fi
2024-02-23 14:28:42 +01:00
#
# SSH
#
2024-02-23 20:15:32 +01:00
echo -e "${PURPLE}${BOLD}Setup SSH ? (y/N) ${RESET}"
2024-02-23 15:38:12 +01:00
read answer
2024-02-23 15:14:36 +01:00
if [[ "$answer" == "y" ]]; then
2024-02-23 15:46:03 +01:00
echo -e "${PURPLE}${BOLD}Setup SSH${RESET}"
2024-02-23 15:14:36 +01:00
touch /etc/ssh/sshd_config.d/custom.conf
echo "PermitRootLogin no" >> /etc/ssh/sshd_config.d/custom.conf
echo "PermitEmptyPasswords no" >> /etc/ssh/sshd_config.d/custom.conf
systemctl reload ssh
fi
#
# FIREWALL AND FAIL2BAN
#
2024-02-23 20:15:32 +01:00
echo -e "${PURPLE}${BOLD}Setup Firewall and Fail2ban ? (y/N) ${RESET}"
2024-02-23 15:38:12 +01:00
read answer
2024-02-23 15:14:36 +01:00
if [[ "$answer" == "y" ]]; then
2024-02-23 15:46:03 +01:00
echo -e "${PURPLE}${BOLD}Setup Firewall and Fail2ban${RESET}"
2024-02-23 15:14:36 +01:00
apt install -y ufw fail2ban
systemctl enable fail2ban
ufw allow ssh
ufw allow http
ufw allow https
fi
#
# CADDY
#
2024-02-23 20:15:32 +01:00
echo -e "${PURPLE}${BOLD}Install Caddy webserver ? (y/N) ${RESET}"
2024-02-23 15:38:12 +01:00
read answer
2024-02-23 15:14:36 +01:00
if [[ "$answer" == "y" ]]; then
2024-02-23 15:46:03 +01:00
echo -e "${PURPLE}${BOLD}Install Caddy Webserver${RESET}"
2024-02-23 15:14:36 +01:00
apt install -y debian-keyring debian-archive-keyring apt-transport-https curl
curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/gpg.key' | gpg --dearmor -o /usr/share/keyrings/caddy-stable-archive-keyring.gpg
curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/debian.deb.txt' | tee /etc/apt/sources.list.d/caddy-stable.list
apt update
apt install -y caddy
2024-02-24 13:11:47 +01:00
> /etc/caddy/Caddyfile
2024-02-23 15:38:12 +01:00
fi
2024-02-23 15:46:03 +01:00
#
# MARIADB
#
2024-02-23 20:15:32 +01:00
echo -e "${PURPLE}${BOLD}Install MariaDB ? (y/N) ${RESET}"
2024-02-23 15:46:03 +01:00
read answer
if [[ "$answer" == "y" ]]; then
apt install -y mariadb-server
2024-02-25 00:38:41 +01:00
echo -e "${ORANGE}${BOLD}Generate and store the password somewhere safe${RESET}"
2024-02-23 15:46:03 +01:00
echo -e "${PURPLE}${BOLD}Enter the MariaDB root password : ${RESET}"
read -s db_root_password
echo
2024-02-23 20:04:32 +01:00
install_pkg expect
2024-02-23 16:21:55 +01:00
SECURE_MYSQL=$(expect -c "
set timeout 3
spawn mysql_secure_installation
expect \"Enter current password for root (enter for none):\"
send \"\r\"
2024-02-23 16:34:56 +01:00
expect \"Switch to unix_socket authentication \\[Y/n\\]\"
2024-02-23 16:30:50 +01:00
send \"n\r\"
2024-02-23 16:34:56 +01:00
expect \"Change the root password? \\[Y/n\\]\"
2024-02-23 16:21:55 +01:00
send \"y\r\"
expect \"New password:\"
2024-02-23 17:07:19 +01:00
send \"$db_root_password\r\"
2024-02-23 16:21:55 +01:00
expect \"Re-enter new password:\"
2024-02-23 17:07:19 +01:00
send \"$db_root_password\r\"
2024-02-23 16:21:55 +01:00
expect \"Remove anonymous users?\"
send \"y\r\"
expect \"Disallow root login remotely?\"
send \"y\r\"
expect \"Remove test database and access to it?\"
send \"y\r\"
expect \"Reload privilege tables now?\"
send \"y\r\"
expect eof
")
echo "${SECURE_MYSQL}"
# https://gist.github.com/coderua/5592d95970038944d099
2024-02-23 15:46:03 +01:00
fi
2024-02-23 17:07:19 +01:00
#
# DIRECTUS DB
#
2024-02-23 20:15:32 +01:00
echo -e "${PURPLE}${BOLD}Setup Directus database ? (y/N) ${RESET}"
2024-02-23 15:46:03 +01:00
read answer
if [[ "$answer" == "y" ]]; then
2024-02-25 00:38:41 +01:00
echo -e "${ORANGE}${BOLD}Generate and store the password somewhere safe${RESET}"
2024-02-23 17:07:19 +01:00
echo -e "${PURPLE}${BOLD}Enter the MariaDB Directus password : ${RESET}"
read -s db_directus_password
echo
2024-02-23 18:05:07 +01:00
if [[ -z "$db_root_password" ]]; then
echo -e "${PURPLE}${BOLD}Enter the MariaDB root password : ${RESET}"
read -s db_root_password
echo
fi
2024-02-23 20:04:32 +01:00
install_pkg expect
2024-02-23 18:10:27 +01:00
CREATE_DIRECTUS_DB=$(expect -c "
2024-02-23 18:28:14 +01:00
spawn mariadb -u root -p
2024-02-23 18:10:27 +01:00
expect \"Enter password:\"
send \"$db_root_password\r\"
2024-02-23 18:26:16 +01:00
expect \"mysql>\"
send \"CREATE USER 'directus'@'localhost' IDENTIFIED BY '${db_directus_password}';\r\"
send \"CREATE DATABASE directus;\r\"
send \"GRANT ALL PRIVILEGES ON directus.* TO 'directus'@'localhost' IDENTIFIED BY '${db_directus_password}';\r\"
send \"FLUSH PRIVILEGES;\r\"
expect \"mysql>\"
send \"quit;\r\"
expect eof
2024-02-23 18:10:27 +01:00
")
2024-02-23 18:40:03 +01:00
echo "${CREATE_DIRECTUS_DB}" >& /dev/null
echo -e "${PURPLE}${BOLD}Directus database created${RESET}"
fi
2024-02-23 20:04:32 +01:00
#
# NODE
#
2024-02-23 20:15:32 +01:00
echo -e "${PURPLE}${BOLD}Install Node ? (y/N) ${RESET}"
2024-02-23 18:40:03 +01:00
read answer
if [[ "$answer" == "y" ]]; then
2024-02-23 20:04:32 +01:00
get_username
2024-02-23 19:09:09 +01:00
su -c 'curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.7/install.sh | bash &&\
2024-02-23 19:19:36 +01:00
export NVM_DIR="$HOME/.nvm" &&\
2024-02-23 19:09:09 +01:00
[ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh" &&\
[ -s "$NVM_DIR/bash_completion" ] && \. "$NVM_DIR/bash_completion" &&\
2024-02-23 21:36:05 +01:00
nvm install v18' $username
ln -sf /home/$username/.nvm/versions/node/v18.19.1/bin/node /usr/bin/node
ln -sf /home/$username/.nvm/versions/node/v18.19.1/bin/npm /usr/bin/npm
2024-02-23 22:43:16 +01:00
ln -sf /home/$username/.nvm/versions/node/v18.19.1/bin/npx /usr/bin/npx
2024-02-25 22:46:38 +01:00
mkdir /var/www/.npm
2024-02-26 00:13:52 +01:00
chown -R www-data:www-data /var/www/.npm
2024-02-23 21:28:20 +01:00
echo -e "${PURPLE}${BOLD}Node installed${RESET}";
2024-02-23 18:05:07 +01:00
fi
2024-02-23 20:04:32 +01:00
#
# SET THE URL
#
echo -e "${PURPLE}${BOLD}Enter the domain name of the website${RESET}"
read domain_name
2024-02-25 01:55:30 +01:00
get_ip
cms_folder="cms_${domain_name}"
2024-02-23 20:04:32 +01:00
echo -e "${PURPLE}${BOLD}Configure the ${domain_name} DNS ZONE as the following${RESET}"
2024-02-25 19:17:44 +01:00
echo -e "${BLUE}Domain : ${domain_name} | Type : A | Target : ${ip}${RESET}"
echo -e "${BLUE}Domain : cms.${domain_name} | Type : A | Target : ${ip}${RESET}"
echo -e "${BLUE}Domain : www.${domain_name} | Type : A | Target : ${ip}${RESET}"
2024-02-23 20:04:32 +01:00
echo -e "${PURPLE}${BOLD}Press any key when done${RESET}"
read
2024-02-23 18:05:07 +01:00
2024-02-23 20:04:32 +01:00
#
# DIRECTUS
#
2024-02-23 20:15:32 +01:00
echo -e "${PURPLE}${BOLD}Install Directus ? (y/N) ${RESET}"
2024-02-23 20:04:32 +01:00
read answer
if [[ "$answer" == "y" ]]; then
2024-02-23 20:15:32 +01:00
install_pkg tmux
get_username
2024-02-23 22:32:51 +01:00
if [[ -z "$db_directus_password" ]]; then
echo -e "${PURPLE}${BOLD}Enter the MariaDB Directus password : ${RESET}"
read -s db_directus_password
echo
fi
2024-02-25 00:38:41 +01:00
echo -e "${ORANGE}${BOLD}Generate and store the credentials somewhere safe${RESET}"
2024-02-23 22:32:51 +01:00
echo -e "${PURPLE}${BOLD}Enter the Directus admin email : ${RESET}"
2024-02-23 22:43:16 +01:00
read directus_admin_email
2024-02-23 22:32:51 +01:00
echo -e "${PURPLE}${BOLD}Enter the Directus admin password : ${RESET}"
read -s directus_admin_password
env_file="${cms_folder}/.env"
2024-02-24 12:58:37 +01:00
port=8055
2024-02-23 22:32:51 +01:00
key=$(head -c 16 /dev/urandom | od -An -tx1 | tr -d ' \n')
secret=$(head -c 16 /dev/urandom | od -An -tx1 | tr -d ' \n')
2024-02-23 20:55:36 +01:00
su -c "cd &&\
2024-02-23 22:36:55 +01:00
mkdir ${cms_folder} &&\
mkdir ${cms_folder}/uploads &&\
2024-02-23 22:45:14 +01:00
echo \"HOST='${ip}'\" >> ${env_file} &&\
2024-02-24 12:58:37 +01:00
echo \"PORT=${port}\" >> ${env_file} &&\
2024-02-24 13:53:30 +01:00
echo \"PUBLIC_URL='https://cms.${domain_name}'\" >> ${env_file} &&\
2024-02-23 22:45:14 +01:00
echo \"DB_CLIENT='mysql'\" >> ${env_file} &&\
echo \"DB_HOST='127.0.0.1'\" >> ${env_file} &&\
echo \"DB_PORT='3306'\" >> ${env_file} &&\
echo \"DB_DATABASE='directus'\" >> ${env_file} &&\
echo \"DB_USER='directus'\" >> ${env_file} &&\
echo \"DB_PASSWORD='${db_directus_password}'\" >> ${env_file} &&\
echo \"SECRET='${secret}'\" >> ${env_file} &&\
echo \"KEY='${key}'\" >> ${env_file} &&\
2024-02-25 19:17:44 +01:00
echo \"CORS_ENABLED='true'\" >> ${env_file} &&\
2024-02-25 23:43:02 +01:00
echo \"CORS_ORIGIN='true'\" >> ${env_file}" $username
2024-02-24 12:58:37 +01:00
2024-02-25 22:18:51 +01:00
echo "set -g default-shell /bin/sh" >> /etc/tmux.conf
chown www-data:www-data /home/$username/$cms_folder
2024-02-25 23:43:02 +01:00
su -s /bin/bash -c "cd /home/${username}/${cms_folder} &&\
npm init -y &&\
npx directus bootstrap --skipAdminInit &&\
tmux new-session -d -s directus &&\
2024-02-25 22:18:51 +01:00
tmux send-keys -t directus \"cd /home/${username}/${cms_folder} && npx directus start\" C-m" www-data
2024-02-24 12:58:37 +01:00
2024-02-25 22:39:56 +01:00
su -s /bin/bash -c "cd /home/${username}/${cms_folder} &&\
2024-02-24 22:08:30 +01:00
npx directus roles create --role Administrator --admin true &&\
npx directus roles create --role Website &&\
2024-02-25 22:18:51 +01:00
npx directus roles create --role User" www-data
2024-02-24 22:08:30 +01:00
2024-02-24 21:55:20 +01:00
admin_role_uuid=$(echo $(mariadb -u directus -p${db_directus_password} \
2024-02-25 00:38:41 +01:00
-e "SELECT id FROM directus.directus_roles WHERE name='Administrator'") | awk '{print $2}')
2024-02-24 22:08:30 +01:00
website_role_uuid=$(echo $(mariadb -u directus -p${db_directus_password} \
2024-02-25 00:38:41 +01:00
-e "SELECT id FROM directus.directus_roles WHERE name='Website'") | awk '{print $2}')
2024-02-24 22:08:30 +01:00
user_role_uuid=$(echo $(mariadb -u directus -p${db_directus_password} \
2024-02-25 00:38:41 +01:00
-e "SELECT id FROM directus.directus_roles WHERE name='User'") | awk '{print $2}')
2024-02-24 21:55:20 +01:00
2024-02-25 01:55:30 +01:00
website_password=$(head -c 16 /dev/urandom | od -An -tx1 | tr -d ' \n')
2024-02-25 22:18:51 +01:00
2024-02-25 22:39:56 +01:00
su -s /bin/bash -c "cd /home/${username}/${cms_folder} &&\
2024-02-24 21:55:20 +01:00
npx directus users create --email \"${directus_admin_email}\" \
2024-02-25 00:38:41 +01:00
--password \"${directus_admin_password}\" --role \"${admin_role_uuid}\" &&\
2024-02-25 22:18:51 +01:00
npx directus users create --email \"website@${domain_name}\" --password \"${website_password}\" --role \"${website_role_uuid}\"" www-data
2024-02-25 00:38:41 +01:00
website_token=$(head -c 16 /dev/urandom | od -An -tx1 | tr -d ' \n')
mariadb -u directus -p${db_directus_password} -e "UPDATE directus.directus_roles SET icon='robot' WHERE name='Website'";
mariadb -u directus -p${db_directus_password} -e "UPDATE directus.directus_roles SET app_access='0' WHERE name='Website'";
2024-02-25 01:01:13 +01:00
mariadb -u directus -p${db_directus_password} -e "UPDATE directus.directus_users SET token=\"${website_token}\" WHERE email=\"website@${domain_name}\"";
2024-02-24 21:44:37 +01:00
2024-02-24 12:58:37 +01:00
caddyfile="/etc/caddy/Caddyfile"
echo "cms.${domain_name} {" >> $caddyfile
2024-02-24 13:11:47 +01:00
echo "reverse_proxy ${ip}:${port}" >> $caddyfile
2024-02-24 12:58:37 +01:00
echo "}" >> $caddyfile
2024-02-24 13:11:47 +01:00
caddy fmt $caddyfile -w
2024-02-24 13:05:13 +01:00
caddy reload -c $caddyfile
2024-02-25 17:14:22 +01:00
echo -e "${PURPLE}${BOLD}Import Directus data model ? (y/N) ${RESET}"
read answer
if [[ "$answer" == "y" ]]; then
echo -e "${PURPLE}${BOLD}Import local Directus data model${RESET}"
2024-02-25 19:17:44 +01:00
echo -e "${BLUE}npx directus schema snapshot ./snapshot.yaml${RESET}"
echo -e "${BLUE}scp /local/path/to/snapshot.yaml ${username}@${ip}:/home/${username}/snapshot.yaml${RESET}"
2024-02-25 17:14:22 +01:00
echo -e "${PURPLE}${BOLD}Press any key when done${RESET}"
read
2024-02-25 22:39:56 +01:00
su -s /bin/bash -c "cd /home/${username}/${cms_folder} &&\
2024-02-25 22:18:51 +01:00
npx directus schema apply --yes ../snapshot.yaml" www-data
2024-02-25 17:14:22 +01:00
echo -e "${PURPLE}${BOLD}You can now add some content${RESET}"
echo -e "${ORANGE}${BOLD}Do not forget to set the permissions${RESET}"
echo -e "${ORANGE}${BOLD}Website role ${RESET}${ORANGE}Read content collections and directus_files${RESET}"
echo -e "${ORANGE}${BOLD}User role ${RESET}${ORANGE}All permissions on content collections and directus_files${RESET}"
fi
echo -e "${PURPLE}${BOLD}Access Directus ${RESET}${PURPLE}https://cms.${domain_name}${RESET}"
2024-02-23 20:04:32 +01:00
fi
2024-02-23 22:32:51 +01:00
2024-02-25 01:55:30 +01:00
#
2024-02-25 17:14:22 +01:00
# NUXT
2024-02-25 01:55:30 +01:00
#
2024-02-25 17:14:22 +01:00
echo -e "${PURPLE}${BOLD}Install the front-end ? (y/N) ${RESET}"
2024-02-25 01:55:30 +01:00
read answer
if [[ "$answer" == "y" ]]; then
get_username
2024-02-25 17:18:43 +01:00
get_ip
2024-02-25 01:55:30 +01:00
2024-02-25 17:14:22 +01:00
echo -e "${PURPLE}${BOLD}Create and push a prod branch on the repo${RESET}"
2024-02-25 19:17:44 +01:00
echo -e "${BLUE}git checkout -b prod${RESET}"
echo -e "${BLUE}git add . && git commit -m "first commit to prod"${RESET}"
echo -e "${BLUE}git push origin prod${RESET}"
2024-02-25 23:20:03 +01:00
echo -e "${PURPLE}${BOLD}Enter the .git url of the repo${RESET}"
2024-02-25 17:14:22 +01:00
read repo_url
front_folder=$(echo "$repo_url" | sed 's#.*/\([^/]*\)\.git#\1#')
if [[ -z "$website_token" ]]; then
echo -e "${PURPLE}${BOLD}Enter the Directus Website user static token${RESET}"
2024-02-25 17:34:14 +01:00
read -s website_token
2024-02-25 17:14:22 +01:00
fi
su -c "cd /home/${username} &&\
git clone ${repo_url} &&\
cd ${front_folder} &&\
git checkout prod &&\
echo \"DIRECTUS_API_TOKEN=${website_token}\" > .env &&\
echo \"URL=https://${domain_name}\" >> .env &&\
2024-02-25 22:18:51 +01:00
echo \"DIRECTUS_URL=https://cms.${domain_name}\" >> .env" $username
2024-02-26 00:13:52 +01:00
su -s /bin/bash -c "tmux send-keys -t directus C-c" www-data
su -c "cd /home/${username}/${front_folder} &&\
2024-02-26 00:54:02 +01:00
npm install &&\
NUXT_TELEMETRY_DISABLED=1 bash -c \"npm run build\"" $username
2024-02-26 00:13:52 +01:00
2024-02-25 23:20:03 +01:00
mkdir /var/www/.nuxtrc
chown -R www-data:www-data /var/www/.nuxtrc
2024-02-26 00:13:52 +01:00
chown -R www-data:www-data /home/$username/.nvm
chown -R www-data:www-data /home/$username/.npm
2024-02-25 22:18:51 +01:00
chown -R www-data:www-data /home/$username/$front_folder
2024-02-26 00:54:02 +01:00
su -s /bin/bash -c "tmux new-session -d -s front &&\
2024-02-25 17:14:22 +01:00
tmux send-keys -t front \"cd /home/${username}/${front_folder} && node .output/server/index.mjs\" C-m &&\
2024-02-25 22:18:51 +01:00
tmux send-keys -t directus \"npx directus start\" C-m" www-data
2024-02-25 17:14:22 +01:00
2024-02-25 17:18:43 +01:00
caddyfile="/etc/caddy/Caddyfile"
echo "www.${domain_name} {" >> $caddyfile
echo "redir ${domain_name}{uri} permanent" >> $caddyfile
echo "}" >> $caddyfile
echo "${domain_name} {" >> $caddyfile
echo "reverse_proxy ${ip}:3000" >> $caddyfile
echo "}" >> $caddyfile
caddy fmt $caddyfile -w
caddy reload -c $caddyfile
2024-02-25 17:14:22 +01:00
echo -e "${PURPLE}${BOLD}Setup a webhook ? (y/N) ${RESET}"
read answer
if [[ "$answer" == "y" ]]; then
2024-02-25 19:17:44 +01:00
echo -e "${PURPLE}${BOLD}If it does not already exists, create a webhook at the following url${RESET}"
2024-02-25 22:18:51 +01:00
echo -e "${PURPLE}${BOLD}${repo_url}/settings/hooks/gitea/new${RESET}"
2024-02-25 19:17:44 +01:00
echo -e "${BLUE}${BOLD}Target URL ${RESET}${BLUE}https://${domain_name}/webhook.php${RESET}"
echo -e "${BLUE}${BOLD}Branch filter ${RESET}${BLUE}prod${RESET}"
echo -e "${BLUE}${BOLD}Authorization Header ${RESET}${ORANGE}Generate a safe string using \`openssl rand -base64 32\`${RESET}"
echo -e "${PURPLE}${BOLD}Enter the Authorization Header${RESET}"
read -s auth_header
rm /var/www/html/index.html
cp ./assets/webhook.php /var/www/html/
mkdir /var/www/webhook
2024-02-25 22:18:51 +01:00
cp ./assets/webhook.sh /var/www/webhook
2024-02-25 19:17:44 +01:00
chown www-data:www-data /var/www/webhook/webhook.sh
chmod u+x /var/www/webhook/webhook.sh
2024-02-25 22:18:51 +01:00
head -n $(($(wc -l < $caddyfile) - 2)) $caddyfile > temp_Caddyfile && mv temp_Caddyfile $caddyfile
2024-02-25 19:17:44 +01:00
echo "handle /webhook.php {" >> $caddyfile
2024-02-25 22:18:51 +01:00
echo "@unauthorized not header Authorization \"${auth_header}\"" >> $caddyfile
echo "respond @unauthorized \"Unauthorized access\"" >> $caddyfile
2024-02-25 19:17:44 +01:00
echo "root * /var/www/html" >> $caddyfile
echo "php_fastcgi unix//run/php/php8.2-fpm.sock" >> $caddyfile
echo "file_server" >> $caddyfile
echo "}" >> $caddyfile
2024-02-25 22:18:51 +01:00
echo "handle {" >> $caddyfile
echo "reverse_proxy ${ip}:3000" >> $caddyfile
echo "}" >> $caddyfile
2024-02-25 19:17:44 +01:00
echo "}" >> $caddyfile
caddy fmt $caddyfile -w
caddy reload -c $caddyfile
2024-02-25 17:14:22 +01:00
fi
2024-02-25 01:55:30 +01:00
fi
2024-02-25 17:14:22 +01:00
2024-02-24 12:58:37 +01:00
# TODO
2024-02-25 19:17:44 +01:00
#
2024-02-24 12:58:37 +01:00
# REMOVE EXPECT AT THE END IF IT IS INSTALLED
# CREATE AN ASSETS FOLDER WITH THE DIRECTUS ENV
2024-02-25 01:55:30 +01:00
# ZABBIX
# URBACKUP
# DIRECTUS EMAIL
# DIRECTUS REDIS
2024-02-24 13:18:10 +01:00
# LOGING DE TOUT
2024-02-25 19:17:44 +01:00
# IMPORT DIRECTUS FULL DB
# CADDYFILE EN JSON
# MÀJ