plomlompom.com Git - config/blob - bookworm/setup_scripts/setup_web.sh

   1 #!/bin/sh
   2 set -e
   3
   4 expect_n_args 1 "(domain name)" "$@"
   5 domain="$1"
   6
   7 # Install configs, set up firewall.
   8 ./install_for_target.sh web
   9 ./copy_dirtree.sh "${config_tree_prefix}/etc_files" "" web
  10 nft -f /etc/nftables.conf
  11
  12 # Set up letsencrypt certificate. TODO: Is it auto-renewed?
  13 ln -sf /etc/nginx/sites-available/default /etc/nginx/sites-enabled/default
  14 certbot --nginx --agree-tos --redirect --no-eff-email -m "${mail}" -d "${domain}"
  15 rm /etc/nginx/sites-enabled/default
  16
  17 # Prepare NGINX.
  18 sed -i "s/REPLACE_fqdn_ECALPER/${domain}/g" /etc/nginx/sites-available/dumpsite.nginx
  19 ln -s /etc/nginx/sites-available/dumpsite.nginx /etc/nginx/sites-enabled/dumpsite.nginx
  20
  21 service nginx restart