server-for-web

One-time fully automated shell script to install all needed software to run any php framework on Ubuntu 18.04 LTS. Creates user, installs ufw, nginx (or apache), php, nodejs/yarn, MariaDB/MySQL, PostgreSQL, Certbot (Let's Encrypt), Redis, Memcached, Beanstalkd, fail2ban, mosh. Optional parameters available.

Beyond the description, here some things that this script does (by default):

• Enables ubuntu auto-upgrade security releases
• Uses apt-fast to speed-up instalation
• CLI tools: ncdu, awscli, whois, httpie, mc, speedtest, micro, mosh
• Installs and enable zsh with oh-my-zsh, pure, neofetch
• Creates swap file to avoid lack of memory
• Auto-generates secure and easy-to-copy passwords
• Installs and enable ufw, and fail2ban
• nginx with better gzip on, or Apache if you prefer.
• Installs php7.4 (with FPM) (and others versions), many popular extensions, composer, prestissimo
• Secure install MariaDB (mysql) and PostgreSQL
• Installs supervisor daemon
• Certbot with DNS plugins:cloudflare,digitalocean,dnsimple,google,rfc2136,route53
• Generates server ssh key
• Import keys from popular git services (github, bitbucket, gitlab)

To better choose what to install, check Parameters section

Requisites

• Ubuntu 18.04 LTS (DEPRECATED HERE) or Ubuntu 20.04 LTS (BETA HERE)
• root/sudo as current user
• curl or wget should be installed (unless you clone the repo)
• a new server. We are not responsible for any loss you may suffer.
  • My referral links: Vultr - DigitalOcean

Without a new server, the script possible will ask things to replace files. Never recommended.

Full Installation

This script is installed by running one of the following commands in your terminal. You can install this via the command-line with either curl or wget.

At the end you'll receive a report with all passwords. Keep it safe.

via curl

bash -c "$(curl -fsSL https://git.io/Jv9a6)"

via wget

bash -c "$(wget -qO- https://git.io/Jv9a6)"

Manual inspection

It's a good idea to inspect the install script from projects you don't yet know. You can do that by downloading the install script first, looking through it so everything looks normal, then running it:

curl -Lo install.sh https://raw.githubusercontent.com/insign/server-for-laravel/master/install.sh
bash install.sh

Parameters (all optional)

• -u|--user= - set new user name. Default: laravel
• -p|--pass= - set new user password. Default is random (shown at the end)
• --name= - set your name. Default is DevOps
• --email= - set your e-mail. Default is none@none
• --dont-create-new-user - don't creates a new user (not recommended)
• --keep-existing-user - keep existent user if it exists
• --skip-swap - skip creation swapfile (not recommended unless already exists)
• --swap-size - set swap file size in MB. Default is 2048 (2GB)
• --skip-updates - Skip updates and upgrade the system (not recommended)
• --no-omz - don't install oh-my-zsh framework (not recommended)
• --no-mosh - don't install mosh (ssh alternative)
• --no-ufw - don't install or configure UFW firewall (not recommended)
• --prefer-apache - Install Apache Server (and don't install or configure nginx)
• --no-nginx - don't install or configure nginx
• --no-php - don't install or configure php
• --no-node - don't install or configure yarn/node/npm
• --no-mysql - don't install or configure mysql (MariaDB actually)
• --my-pass-root= - set the mysql root password. Default is random (shown at the end)
• --my-pass-user= - set the mysql user password. Default is random (shown at the end)
• --no-postgres - don't install or configure postgresql
• --pg-pass= - set the system user 'postgres' password. Default is random (shown at the end)
• --pg-pass-root= - set the pg postgres user password. Default is random (shown at the end)
• --pg-pass-user= - set the pg user password. Default is random (shown at the end)
• --no-supervisor - don't install or configure supervisor daemon
• --no-certbot - don't install or configure certbot (let's encrypt)
• --no-redis - don't install or configure redis-server
• --redis-pass - set the redis master password. Default is random (shown at the end)
• --no-memcached - don't install or configure memcached
• --no-beanstalkd - don't install or configure beanstalkd
• --key-only= - put here (with quotes) your personal ssh pubkey if you want to disable login using password. WARNING: Be sure to know what you are doing.
• --reboot - reboot the system at the end of the script executation. Normally should not be used.
• --human - If there is a human waiting for the end. Then enters new terminal.

Examples

Directly from you computer

Importing your SSH pubkey

ssh [email protected] "bash -c \"\$(curl -fsSL https://git.io/Jv9a6)\" \"\" --reboot --key-only=\"$(cat ~/.ssh/id_rsa.pub)\""

In the above case, it is safe to use --reboot parameter.

Web Server

with nginx & php

bash -c "$(curl -fsSL https://git.io/Jv9a6)" "" --no-mysql --no-postgres --no-redis --no-memcached --no-beanstalkd

Database Server

UFW are not configured to allow remote ports to db or cache. You should prefer private networking.

with mysql

bash -c "$(curl -fsSL https://git.io/Jv9a6)" "" --no-nginx --no-php --no-postgres --no-node --no-certbot --no-redis --no-memcached --no-beanstalkd

with postgresql

bash -c "$(curl -fsSL https://git.io/Jv9a6)" "" --no-mysql --no-nginx --no-php --no-node --no-certbot --no-redis --no-memcached --no-beanstalkd

Cache Server / Queue Server

bash -c "$(curl -fsSL https://git.io/Jv9a6)" "" --no-mysql --no-nginx --no-php --no-node --no-postgres --no-certbot

Roadmap

• Add pm2 and support for node sites
• Adjust composer install to checksum https://getcomposer.org/doc/faqs/how-to-install-composer-programmatically.md
• Add qrcp
• Add Apache Server as alternative to nginx
• Configure private network
• Allow only some IPs via as parameter
• Disable MySQL log and log bin
• Fine tune our apps
• Make the maintenance time random
• Add mysql as alternative to MariaDB
• Add colorls
• Install fdfind, fzf on 19.04+
• Add zsh some plugins by default (sudo, fd, fzf, zsh-interactive-cd, artisan)
• Add insign/server-scripts
• Finish postgresql installation
• Finish Certbot installation
• Finish supervisord installation
• Finish Redis server installation
• Finish Memcached installation
• Finish Beanstalkd installation
• Finish fail2ban installation
• Enable better gzip config for nginx by default
• Import popular git services ssh keys
• Generate ssh key
• Import private key
• Remove password login (ssh key only)
• Support for multiple php versions
• Install mosh as alternative of ssh
• Send report via e-mail
  • Hide report at the end
  • Run quiet installation with minimum verbosity
  • Reboot after done
• Count time passed during installation
• Add CI for this script.
• Add docker and docker-compose
• Add better support for ufw
• A SPA with command gen
• Add tests
• Add notifications via services like telegram, discord, etc

Contributing

You are welcome, just do a PR with some explanation.

License

Licensed under lgpl-3.0. Check the GNU GPL3 License file for more details.