# Install web server and secure it on alpine linux 3.12
/!\ WARNING if your file system is ZFS, will not be compatible with drupal 9 because of mariadb bug

https://bugs.alpinelinux.org/issues/9046

## Branches
each alpine linux stable release has it's branch (master is a clone of the last one)
- [3.8](https://figureslibres.io/gogs/bachir/alpine-web-werver/src/3.8)
- [3.9](https://figureslibres.io/gogs/bachir/alpine-web-werver/src/3.9)
- [3.10](https://figureslibres.io/gogs/bachir/alpine-web-werver/src/3.10)
- [3.11](https://figureslibres.io/gogs/bachir/alpine-web-werver/src/3.11)
- [3.12](https://figureslibres.io/gogs/bachir/alpine-web-werver/src/3.12) ([master](https://figureslibres.io/gogs/bachir/alpine-web-werver))

## Features

- [x] upgrade
- [x] bash
- [x] misc (procps vim curl tmux etckeeper htop lynx unzip grep shadow coreutils certbot pwgen tzdata)
- [x] dotfiles
- [x] user
- [x] secure openssh
- [x] Ufw@edgecommunity
- [x] Fail2ban
- [ ] Knockd
- [x] Mariadb (bug https://bugs.alpinelinux.org/issues/9046)
- [x] mysql backups
- [x] php7-fpm (7.3.22)
- [x] redis
- [x] Nginx
- [x] drush
- [x] composer
- [x] vhosts
- [x] letsencrypt
- [x] git barre repos
- [x] zabbix-agent (3.4 || 4)
- [x] urbackup-client
- [ ] solr
- [ ] Proftpd

## how to use it
on a fresh install
as root

0 you may need to install ssh server
```
apk add openssh
rc-update add sshd
/etc/init.d/sshd start
```

1 install git
```
apk add git
```

2 clone the repo
```
git clone -b 3.12 --single-branch https://figureslibres.io/gogs/bachir/alpine-web-werver.git
```

3 you have to be root
```
su
```

4 install bash
```
cd alpine-web-server
. bin/bash
```

5 run the full install
```
. install.sh
```

All script in bin/ can be ran seperatly, but from the repos source exclusively eg: ```. bin/vhost.sh```. Be aware that all scripts need bash and some depends on packages and config installed by bin/misc.sh, run it once right after bin/bash.sh if you wont use the full install.sh.


## ref
[Alpine Linux wiki](https://wiki.alpinelinux.org)