Add setup_server_laravel.sh
This commit is contained in:
parent
1425d044b9
commit
81198bc1a5
1 changed files with 360 additions and 0 deletions
360
setup_server_laravel.sh
Normal file
360
setup_server_laravel.sh
Normal file
|
|
@ -0,0 +1,360 @@
|
||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# Script configuration
|
||||||
|
SCRIPT_VERSION="1.0.0"
|
||||||
|
SCRIPT_LOG_FILE="/var/log/server_setup.log"
|
||||||
|
BACKUP_DIR="/var/backups/server_setup"
|
||||||
|
MYSQL_ROOT_PASSWORD=$(openssl rand -base64 16)
|
||||||
|
PROMETHEUS_VERSION="2.37.0"
|
||||||
|
NODE_EXPORTER_VERSION="1.3.1"
|
||||||
|
|
||||||
|
# Color codes for output
|
||||||
|
RED='\033[0;31m'
|
||||||
|
GREEN='\033[0;32m'
|
||||||
|
YELLOW='\033[1;33m'
|
||||||
|
NC='\033[0m' # No Color
|
||||||
|
|
||||||
|
# Logging function
|
||||||
|
log() {
|
||||||
|
local level=$1
|
||||||
|
shift
|
||||||
|
local message=$@
|
||||||
|
local timestamp=$(date '+%Y-%m-%d %H:%M:%S')
|
||||||
|
echo -e "${timestamp} [${level}] ${message}" | tee -a ${SCRIPT_LOG_FILE}
|
||||||
|
}
|
||||||
|
|
||||||
|
# Error handling function
|
||||||
|
handle_error() {
|
||||||
|
local exit_code=$?
|
||||||
|
local line_number=$1
|
||||||
|
if [ $exit_code -ne 0 ]; then
|
||||||
|
log "ERROR" "Failed at line ${line_number} with exit code ${exit_code}"
|
||||||
|
exit $exit_code
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
trap 'handle_error ${LINENO}' ERR
|
||||||
|
|
||||||
|
# System health check function
|
||||||
|
check_system_health() {
|
||||||
|
log "INFO" "Performing system health checks..."
|
||||||
|
|
||||||
|
# Check disk space
|
||||||
|
local disk_usage=$(df -h / | awk 'NR==2 {print $5}' | sed 's/%//')
|
||||||
|
if [ $disk_usage -gt 85 ]; then
|
||||||
|
log "WARNING" "Disk usage is above 85% (${disk_usage}%)"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Check available memory
|
||||||
|
local available_memory=$(free -m | awk 'NR==2 {print $7}')
|
||||||
|
if [ $available_memory -lt 1024 ]; then
|
||||||
|
log "WARNING" "Available memory is less than 1GB (${available_memory}MB)"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
log "INFO" "System health checks passed"
|
||||||
|
return 0
|
||||||
|
}
|
||||||
|
|
||||||
|
# Backup function
|
||||||
|
create_backup() {
|
||||||
|
local backup_date=$(date +%Y%m%d_%H%M%S)
|
||||||
|
local backup_path="${BACKUP_DIR}/${backup_date}"
|
||||||
|
|
||||||
|
log "INFO" "Creating backup at ${backup_path}"
|
||||||
|
mkdir -p "${backup_path}" || handle_error ${LINENO}
|
||||||
|
|
||||||
|
# Backup existing configurations
|
||||||
|
if [ -d "/etc/nginx" ]; then
|
||||||
|
cp -r /etc/nginx "${backup_path}/nginx" || handle_error ${LINENO}
|
||||||
|
fi
|
||||||
|
if [ -d "/etc/php" ]; then
|
||||||
|
cp -r /etc/php "${backup_path}/php" || handle_error ${LINENO}
|
||||||
|
fi
|
||||||
|
|
||||||
|
log "INFO" "Backup completed successfully"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Prepare Installation Function
|
||||||
|
prepare_installation() {
|
||||||
|
log "INFO" "Preparing for installation"
|
||||||
|
|
||||||
|
# Your original prepare installing block, enhanced with logging and error handling
|
||||||
|
rm -rf /var/lib/dpkg/lock || handle_error ${LINENO}
|
||||||
|
rm -rf /var/lib/dpkg/lock-frontend || handle_error ${LINENO}
|
||||||
|
rm -rf /var/cache/apt/archives/lock || handle_error ${LINENO}
|
||||||
|
|
||||||
|
log "INFO" "Updating package lists"
|
||||||
|
sudo apt-get update || handle_error ${LINENO}
|
||||||
|
|
||||||
|
log "SUCCESS" "Installation preparation completed"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Setup NGINX Function
|
||||||
|
setup_nginx() {
|
||||||
|
log "INFO" "Setting up NGINX"
|
||||||
|
|
||||||
|
# Remove Apache
|
||||||
|
log "INFO" "Removing Apache if exists"
|
||||||
|
sudo apt-get purge apache -y || log "WARNING" "Apache removal returned non-zero exit code"
|
||||||
|
sudo apt-get purge apache* -y || log "WARNING" "Apache cleanup returned non-zero exit code"
|
||||||
|
sudo kill -9 $(sudo lsof -t -i:80) 2>/dev/null || true
|
||||||
|
sudo kill -9 $(sudo lsof -t -i:443) 2>/dev/null || true
|
||||||
|
|
||||||
|
# Install NGINX
|
||||||
|
log "INFO" "Installing NGINX"
|
||||||
|
sudo apt-get update || handle_error ${LINENO}
|
||||||
|
sudo apt install nginx -y || handle_error ${LINENO}
|
||||||
|
|
||||||
|
# Configure firewall
|
||||||
|
log "INFO" "Configuring firewall for NGINX"
|
||||||
|
echo "y" | sudo ufw enable
|
||||||
|
sudo ufw allow 'Nginx HTTP' || handle_error ${LINENO}
|
||||||
|
sudo ufw allow 'Nginx HTTPS' || handle_error ${LINENO}
|
||||||
|
sudo ufw allow '8443' || handle_error ${LINENO}
|
||||||
|
sudo ufw allow OpenSSH || handle_error ${LINENO}
|
||||||
|
|
||||||
|
log "SUCCESS" "NGINX setup completed"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Setup PHP Function
|
||||||
|
setup_php() {
|
||||||
|
log "INFO" "Setting up PHP"
|
||||||
|
|
||||||
|
# Install PHP 8.2
|
||||||
|
sudo apt-get update || handle_error ${LINENO}
|
||||||
|
sudo apt install lsb-release ca-certificates apt-transport-https software-properties-common -y || handle_error ${LINENO}
|
||||||
|
sudo add-apt-repository ppa:ondrej/php -y || handle_error ${LINENO}
|
||||||
|
|
||||||
|
# Install PHP and extensions
|
||||||
|
log "INFO" "Installing PHP 8.2 and extensions"
|
||||||
|
sudo apt install php8.2 php8.2-fpm php8.2-common redis-server php8.2-redis openssl \
|
||||||
|
php8.2-curl php8.2-mbstring php8.2-mysql php8.2-xml php8.2-zip php8.2-gd \
|
||||||
|
php8.2-cli php8.2-imagick php8.2-intl -y || handle_error ${LINENO}
|
||||||
|
|
||||||
|
# Install PHP 8.3
|
||||||
|
log "INFO" "Installing PHP 8.3 and extensions"
|
||||||
|
sudo apt install php8.3 php8.3-fpm php8.3-redis openssl php8.3-common \
|
||||||
|
php8.3-curl php8.3-mbstring php8.3-mysql php8.3-xml php8.3-zip php8.3-gd \
|
||||||
|
php8.3-cli php8.3-imagick php8.3-intl -y || handle_error ${LINENO}
|
||||||
|
|
||||||
|
log "SUCCESS" "PHP setup completed"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Setup Redis Function
|
||||||
|
setup_redis() {
|
||||||
|
log "INFO" "Setting up Redis"
|
||||||
|
|
||||||
|
sudo apt-get install redis-server -y || handle_error ${LINENO}
|
||||||
|
|
||||||
|
# Configure Redis
|
||||||
|
sudo cp /etc/redis/redis.conf /etc/redis/redis.conf.backup || handle_error ${LINENO}
|
||||||
|
sudo sed -i 's/# maxmemory <bytes>/maxmemory 512mb/' /etc/redis/redis.conf
|
||||||
|
sudo sed -i 's/# maxmemory-policy noeviction/maxmemory-policy allkeys-lru/' /etc/redis/redis.conf
|
||||||
|
|
||||||
|
sudo systemctl restart redis-server || handle_error ${LINENO}
|
||||||
|
|
||||||
|
log "SUCCESS" "Redis setup completed"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Setup Domain Function
|
||||||
|
setup_domain() {
|
||||||
|
local domain=$1
|
||||||
|
log "INFO" "Setting up domain: ${domain}"
|
||||||
|
|
||||||
|
# Create nginx configuration
|
||||||
|
sudo rm -rf /etc/nginx/sites-available/default /etc/nginx/sites-enabled/default
|
||||||
|
sudo touch /etc/nginx/sites-available/$domain || handle_error ${LINENO}
|
||||||
|
|
||||||
|
# Your original nginx configuration block here
|
||||||
|
sudo bash -c "cat > /etc/nginx/sites-available/$domain << 'EOF'
|
||||||
|
server {
|
||||||
|
listen 80;
|
||||||
|
listen [::]:80;
|
||||||
|
root /var/www/html/$domain/public;
|
||||||
|
index index.php index.html index.htm index.nginx-debian.html;
|
||||||
|
server_name $domain www.$domain;
|
||||||
|
|
||||||
|
# Enhanced security headers
|
||||||
|
add_header X-Frame-Options "SAMEORIGIN";
|
||||||
|
add_header X-XSS-Protection "1; mode=block";
|
||||||
|
add_header X-Content-Type-Options "nosniff";
|
||||||
|
|
||||||
|
location / {
|
||||||
|
try_files \$uri \$uri/ /index.php?\$query_string;
|
||||||
|
}
|
||||||
|
|
||||||
|
location ~ \.php$ {
|
||||||
|
include snippets/fastcgi-php.conf;
|
||||||
|
fastcgi_pass unix:/var/run/php/php8.2-fpm.sock;
|
||||||
|
fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;
|
||||||
|
include fastcgi_params;
|
||||||
|
}
|
||||||
|
|
||||||
|
location ~ /\.ht {
|
||||||
|
deny all;
|
||||||
|
}
|
||||||
|
|
||||||
|
# Enhanced static file caching
|
||||||
|
location ~* \.(js|css|png|jpg|jpeg|gif|ico)$ {
|
||||||
|
expires 30d;
|
||||||
|
add_header Cache-Control "public, no-transform";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
EOF" || handle_error ${LINENO}
|
||||||
|
|
||||||
|
# Create symbolic link and directory structure
|
||||||
|
ln -s /etc/nginx/sites-available/$domain /etc/nginx/sites-enabled/ || handle_error ${LINENO}
|
||||||
|
sudo mkdir -p /var/www/html/$domain/public || handle_error ${LINENO}
|
||||||
|
|
||||||
|
log "SUCCESS" "Domain setup completed"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Setup SSL Function
|
||||||
|
setup_ssl() {
|
||||||
|
local domain=$1
|
||||||
|
log "INFO" "Setting up SSL for domain: ${domain}"
|
||||||
|
|
||||||
|
# Install certbot if not already installed
|
||||||
|
if ! command -v certbot &> /dev/null; then
|
||||||
|
log "INFO" "Installing Certbot"
|
||||||
|
sudo snap install --classic certbot || handle_error ${LINENO}
|
||||||
|
sudo ln -s /snap/bin/certbot /usr/bin/certbot || handle_error ${LINENO}
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Generate SSL certificate
|
||||||
|
log "INFO" "Generating SSL certificate"
|
||||||
|
certbot --nginx -d $domain -d www.$domain --non-interactive --agree-tos -m admin@$domain || handle_error ${LINENO}
|
||||||
|
|
||||||
|
log "SUCCESS" "SSL setup completed"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Setup Database Function
|
||||||
|
setup_mysql() {
|
||||||
|
log "INFO" "Setting up MySQL"
|
||||||
|
|
||||||
|
if ! command -v mysql &> /dev/null; then
|
||||||
|
export DEBIAN_FRONTEND=noninteractive
|
||||||
|
|
||||||
|
# Install MySQL
|
||||||
|
echo debconf mysql-server/root_password password $MYSQL_ROOT_PASSWORD | sudo debconf-set-selections
|
||||||
|
echo debconf mysql-server/root_password_again password $MYSQL_ROOT_PASSWORD | sudo debconf-set-selections
|
||||||
|
sudo apt-get -y install mysql-server || handle_error ${LINENO}
|
||||||
|
|
||||||
|
# Secure MySQL installation
|
||||||
|
sudo mysql_secure_installation --password="$MYSQL_ROOT_PASSWORD" << EOF
|
||||||
|
y
|
||||||
|
0
|
||||||
|
n
|
||||||
|
y
|
||||||
|
y
|
||||||
|
y
|
||||||
|
y
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Save MySQL password securely
|
||||||
|
echo $MYSQL_ROOT_PASSWORD | sudo tee /root/.mysql_root_password > /dev/null
|
||||||
|
chmod 600 /root/.mysql_root_password
|
||||||
|
|
||||||
|
log "SUCCESS" "MySQL setup completed. Root password saved to /root/.mysql_root_password"
|
||||||
|
else
|
||||||
|
log "INFO" "MySQL is already installed"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# Setup Monitoring Function
|
||||||
|
setup_monitoring() {
|
||||||
|
log "INFO" "Setting up monitoring with Prometheus and Node Exporter"
|
||||||
|
|
||||||
|
# Install Node Exporter
|
||||||
|
useradd --no-create-home --shell /bin/false node_exporter || log "WARNING" "User node_exporter already exists"
|
||||||
|
wget "https://github.com/prometheus/node_exporter/releases/download/v${NODE_EXPORTER_VERSION}/node_exporter-${NODE_EXPORTER_VERSION}.linux-amd64.tar.gz" || handle_error ${LINENO}
|
||||||
|
tar xvf "node_exporter-${NODE_EXPORTER_VERSION}.linux-amd64.tar.gz"
|
||||||
|
sudo cp node_exporter-${NODE_EXPORTER_VERSION}.linux-amd64/node_exporter /usr/local/bin/ || handle_error ${LINENO}
|
||||||
|
|
||||||
|
# Create Node Exporter service
|
||||||
|
sudo bash -c 'cat > /etc/systemd/system/node_exporter.service << EOF
|
||||||
|
[Unit]
|
||||||
|
Description=Node Exporter
|
||||||
|
After=network.target
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
User=node_exporter
|
||||||
|
Group=node_exporter
|
||||||
|
Type=simple
|
||||||
|
ExecStart=/usr/local/bin/node_exporter
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
||||||
|
EOF'
|
||||||
|
|
||||||
|
# Start and enable services
|
||||||
|
sudo systemctl daemon-reload
|
||||||
|
sudo systemctl start node_exporter || handle_error ${LINENO}
|
||||||
|
sudo systemctl enable node_exporter || handle_error ${LINENO}
|
||||||
|
|
||||||
|
log "SUCCESS" "Monitoring setup completed"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Main function
|
||||||
|
main() {
|
||||||
|
local domain=""
|
||||||
|
|
||||||
|
# Parse command line arguments
|
||||||
|
while getopts "d:h" flag; do
|
||||||
|
case "${flag}" in
|
||||||
|
d) domain=${OPTARG};;
|
||||||
|
h)
|
||||||
|
echo "Usage: $0 -d domain.com"
|
||||||
|
exit 0
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo "Invalid option. Usage: $0 -d domain.com"
|
||||||
|
exit 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
|
||||||
|
if [ -z "$domain" ]; then
|
||||||
|
log "ERROR" "Domain parameter is required. Usage: $0 -d domain.com"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Start installation process
|
||||||
|
log "INFO" "Starting server setup for ${domain}"
|
||||||
|
|
||||||
|
# Perform system health check
|
||||||
|
check_system_health || {
|
||||||
|
log "ERROR" "System health check failed. Please resolve the issues before continuing."
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
|
||||||
|
# Create initial backup
|
||||||
|
create_backup
|
||||||
|
|
||||||
|
# Run installation steps
|
||||||
|
prepare_installation
|
||||||
|
setup_nginx
|
||||||
|
setup_php
|
||||||
|
setup_redis
|
||||||
|
setup_domain "$domain"
|
||||||
|
setup_ssl "$domain"
|
||||||
|
setup_mysql
|
||||||
|
setup_monitoring
|
||||||
|
|
||||||
|
# Create final backup
|
||||||
|
create_backup
|
||||||
|
|
||||||
|
# Print completion message
|
||||||
|
log "INFO" "Installation completed successfully"
|
||||||
|
echo -e "${GREEN}Installation completed successfully!${NC}"
|
||||||
|
echo -e "${YELLOW}Important Information:${NC}"
|
||||||
|
echo -e "MySQL Root Password: ${MYSQL_ROOT_PASSWORD}"
|
||||||
|
echo -e "Installation Log: ${SCRIPT_LOG_FILE}"
|
||||||
|
echo -e "Backup Directory: ${BACKUP_DIR}"
|
||||||
|
echo -e "Monitoring URLs:"
|
||||||
|
echo -e " - Node Exporter: http://localhost:9100/metrics"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Start script execution
|
||||||
|
main "$@"
|
||||||
Loading…
Reference in a new issue