plomlompom.com Git - config/blob - bookworm/setup_scripts/setup_static_website.sh

   1 #!/bin/sh
   2 set -e
   3 . ./misc.sh
   4 . ../../misc.sh
   5
   6 expect_setup_finished_file setup_web_has_been_run setup_web.sh
   7
   8 expect_n_args 1 "(website template, i.e. status.plomlompom.com, tube.plomlompom.com …)" "$@"
   9 website_template="$1"
  10 shift 1
  11
  12 mirror_ip=""
  13 mirror_state="not mirroring automatically, since no IP given"
  14 domain="${website_template}"
  15 mail="plom+webmaster@plomlompom.com"
  16 if [ "$#" -gt 0 ]; then
  17     domain="$1"
  18     if [ "$#" -gt 1 ]; then
  19         mail="$2"
  20         if [ "$#" -gt 2 ]; then
  21             mirror_ip="$3"
  22             mirror_state="mirroring automatically from ${mirror_ip}"
  23         fi
  24     fi
  25 fi
  26 echo "Assuming domain ${domain} and letsencrypt support mail address ${mail} and ${mirror_state}, abort and provide as arguments in this order if other desired! (Otherwise just hit Return.)"
  27 read _
  28
  29 if [ ! -z "${mirror_ip}" ]; then
  30     # Set up connection to old server.
  31     cp "${setup_scripts_dir}/misc.sh" /home/plom/
  32     cp "${setup_scripts_dir}/prepare_to_meet_server.sh" /home/plom/
  33     chown plom:plom /home/plom/prepare_to_meet_server.sh
  34     su -lc "./prepare_to_meet_server.sh ${mirror_ip}" plom
  35     read -p 'Hit Enter when you are done.' ignore
  36     rm /home/plom/prepare_to_meet_server.sh
  37
  38     # Mirror dirs.
  39     cp "${setup_scripts_dir}/mirror_dir.sh" /home/plom/
  40     su -lc "./mirror_dir.sh ${mirror_ip} /var/www/${website_template}" plom
  41     rm /home/plom/mirror_dir.sh
  42     rm /home/plom/misc.sh
  43 fi
  44
  45 # Install configs, set up firewall.
  46 ./install_for_target.sh "${website_template}"
  47 ./copy_dirtree.sh "${config_tree_prefix}/etc_files" "" "${website_template}"
  48 nft -f /etc/nftables.conf
  49
  50 # Set up letsencrypt certificate. TODO: Is it auto-renewed?
  51 ln -sf /etc/nginx/sites-available/default /etc/nginx/sites-enabled/default
  52 certbot --nginx --agree-tos --redirect --no-eff-email -m "${mail}" -d "${domain}"
  53 rm /etc/nginx/sites-enabled/default
  54
  55 # Prepare NGINX.
  56 sed -i "s/REPLACE_fqdn_ECALPER/${domain}/g" "/etc/nginx/sites-available/${website_template}.nginx"
  57 ln -s "/etc/nginx/sites-available/${website_template}.nginx" "/etc/nginx/sites-enabled/${website_template}.nginx"
  58
  59 service nginx restart
  60