192 lines
6.1 KiB
Bash
Executable file
192 lines
6.1 KiB
Bash
Executable file
#!/bin/bash
|
|
|
|
source assets/shell/colors
|
|
source assets/config/deps/dependencies
|
|
|
|
### DEPENDENCY CHECK & INSTALLER
|
|
|
|
echo -e "\n ${LCY}Dependency and Privilege Check running...${CRS}\n"
|
|
|
|
### PRIVILEGES
|
|
|
|
if (( $(id -u) == 0 )); then ### AM I ROOT ?
|
|
echo -e " ${GRN}Privilege check passed...${CRS}\n"
|
|
|
|
else
|
|
echo -e " ${RED}Privilege check failed... Please run script with sudo or as root!${CRS}\n"
|
|
exit 1
|
|
|
|
fi
|
|
|
|
### DEPENDENCIES
|
|
|
|
dep_check() { ### MISSING PKGS ?
|
|
local pkg="$1"
|
|
|
|
if dpkg -s "$pkg" >/dev/null 2>&1; then
|
|
echo "$pkg" >>/tmp/installed_dev
|
|
else
|
|
echo "$pkg" >>/tmp/missing_dev
|
|
fi
|
|
}
|
|
|
|
for pkg in "${deps[@]}"; do
|
|
dep_check "$pkg"
|
|
done
|
|
|
|
installed="$(cat /tmp/installed_dev 2>/dev/null)"
|
|
missing="$(cat /tmp/missing_dev 2>/dev/null)"
|
|
|
|
if ! [ "$missing" ]; then
|
|
echo -e "\n ${GRN}Dependencies met. Proceeding...${CRS}\n"
|
|
|
|
else ### INSTALLING PKGS
|
|
echo -e "\n ${RED}Following dependencies are missing :${CRS}\n\n$missing"
|
|
|
|
while true; do
|
|
echo -e "\n ${YEL}Do you wish to install via APT?"
|
|
read -p " (Y/n) --> " install_dep
|
|
echo -e "${CRS}"
|
|
|
|
if [[ "$install_dep" = "" || "$install_dep" = "y" || "$install_dep" = "Y" ]]; then
|
|
sudo apt update && sudo apt install -y $missing
|
|
echo -e "\n ${GRN}Dependencies installed. Proceeding...${CRS}\n"
|
|
sudo rm /tmp/installed_dev /tmp/missing_dev 2>/dev/null
|
|
break
|
|
|
|
elif [[ "$install_dep" == "n" || "$install_dep" = "N" ]]; then
|
|
echo -e "\n ${RED}Missing dependencies... Exiting!${CRS}\n"
|
|
sudo rm /tmp/installed_dev /tmp/missing_dev 2>/dev/null
|
|
exit 1
|
|
|
|
else
|
|
echo -e "\n ${YEL}Invalid response... Try again...\n\n ${GRN}Y ${YEL}= (Yes, install dependencies and continue)\n ${RED}N ${YEL}= (No, don't install dependencies and exit)${CRS}\n "
|
|
|
|
fi
|
|
done
|
|
fi
|
|
|
|
### NGINX SETUP & CONFIG
|
|
|
|
###### HOST
|
|
|
|
onif=$(/sbin/ip route get 162.249.72.1 | awk '{print $5}' | cut -d/ -f1) ### GET ACTIVE NETWORK INTERFACE
|
|
|
|
while true; do
|
|
echo -e " ${YEL}What network interface will nginx be using?${CRS}"
|
|
read -p " current = "$onif" --> " nif
|
|
|
|
if ! [ "$nif" ]; then
|
|
nif="$onif"
|
|
break
|
|
|
|
elif [ -d "/sys/class/net/$nif" ]; then
|
|
break
|
|
|
|
else
|
|
echo -e "\n ${LRD}Interface not found... Try again!${CRS}\n"
|
|
|
|
fi
|
|
done
|
|
|
|
ip4=$(/sbin/ip -o -4 addr list "$nif" | awk '{print $4}' | cut -d/ -f1) ### GET IP FOR CHOSEN INTERFACE
|
|
echo -e "\n ${YEL}Current hostname : ${LCY}$(hostname)${CRS}"
|
|
echo -e " ${YEL}Current ip address : ${LCY}$ip4 ${YEL}@ ${LCY}$nif${CRS}"
|
|
echo -e "\n ${YEL}This information will be used to configure ${LCY}nginx.conf ${YEL}during the next steps.${CRS}"
|
|
|
|
while true; do
|
|
read -p " Would you like to change the hostname? (y/N) --> " conf_hostname
|
|
|
|
if [[ "$conf_hostname" = "" || "$conf_hostname" = "n" || "$conf_hostname" = "N" ]]; then
|
|
new_hostname=$(hostname)
|
|
break
|
|
|
|
elif [[ "$conf_hostname" = "y" || "$conf_hostname" = "Y" ]]; then
|
|
read -p " Enter new hostname --> " new_hostname
|
|
sudo sed -i.backup "s/$(hostname)/$new_hostname/g" /etc/hosts
|
|
sudo echo "$new_hostname" > /etc/hostname
|
|
sudo systemctl restart NetworkManager
|
|
hostname -F /etc/hostname
|
|
echo -e "\n ${GRN}Host name changed to ${LCY}$(hostname)${CRS}"
|
|
break
|
|
|
|
else
|
|
echo -e "\n ${YEL}Invalid response... Try again...\n\n Y = (Yes, set new hostname)\n N = (No, leave as is)${CRS}\n "
|
|
|
|
fi
|
|
done
|
|
|
|
###### CERTIFICATION & CONFIGURATION
|
|
|
|
while true; do
|
|
echo -e "\n ${YEL}Configure SSL and create a self signed cetrificate?${CRS}"
|
|
read -p " (Y/n) --> " installSSL
|
|
|
|
if [[ "$installSSL" = "" || "$installSSL" = "y" || "$installSSL" = "Y" ]]; then
|
|
echo -e " ${YEL}Enter path to certificates folder${CRS}"
|
|
read -p " default = /etc/nginx/ssl --> " cert_path
|
|
|
|
if ! [ "$cert_path" ]; then
|
|
cert_path=/etc/nginx/ssl
|
|
|
|
elif [[ "$cert_path" = "." ]]; then
|
|
cert_path=$PWD
|
|
|
|
else
|
|
:
|
|
|
|
fi
|
|
echo -e " ${YEL}Enter file name for certificate and key${CRS}"
|
|
read -p " default = $(hostname) --> " cert_name
|
|
|
|
if ! [ "$cert_name" ]; then
|
|
cert_name=$(hostname)
|
|
|
|
else
|
|
:
|
|
|
|
fi
|
|
echo ""
|
|
sudo mkdir -p "$cert_path"
|
|
sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout "$cert_path"/"$cert_name".key -out "$cert_path"/"$cert_name".crt
|
|
echo -e "\n ${GRN}SSL certificate files ${LCY}$cert_name.crt ${GRN}and ${LCY}$cert_name.key ${GRN}created and stored in ${LCY}$cert_path${CRS}\n"
|
|
sudo chmod 644 "$cert_path"/"$cert_name".crt
|
|
sudo chmod 600 "$cert_path"/"$cert_name".key
|
|
sudo cp assets/config/nginx/nginx_SSL.conf /etc/nginx/sites-enabled/$(hostname).conf
|
|
sudo sed -i "s/DOMAIN/$(hostname).local/g" /etc/nginx/sites-enabled/$(hostname).conf
|
|
sudo sed -i "s/IPADDR/$ip4/g" /etc/nginx/sites-enabled/$(hostname).conf
|
|
sudo sed -i "s|CERTPATH|$cert_path/$cert_name|" /etc/nginx/sites-enabled/$(hostname).conf
|
|
sudo sed -i "s|KEYPATH|$cert_path/$cert_name|" /etc/nginx/sites-enabled/$(hostname).conf
|
|
break
|
|
|
|
elif [[ "$installSSL" == "n" || "$installSSL" = "N" ]]; then
|
|
echo -e "\n ${RED}Encryption disabled${CRS}\n"
|
|
break
|
|
|
|
else
|
|
echo -e "\n ${YEL}Invalid response... Try again...\n\n Y = (Yes, configure SSL certificate and continue)\n N = (No, leave unencrypted and continue)${CRS}\n "
|
|
|
|
fi
|
|
done
|
|
|
|
###### MAINTENANCE
|
|
|
|
sudo nginx -t
|
|
sudo systemctl restart NetworkManager
|
|
sudo nginx -s reload
|
|
|
|
###### STATUS
|
|
|
|
|
|
|
|
### DEV STATUS
|
|
|
|
echo -e "\n ${LGN}Script ran through...${CRS}"
|
|
|
|
###### JEFF ######
|
|
#
|
|
# test nginx config
|
|
# restart nginx
|
|
#
|
|
###### JEFF END ######
|
|
|