nginx-proxy-manager-install.sh 7.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246
  1. #!/usr/bin/env bash -ex
  2. set -euo pipefail
  3. shopt -s inherit_errexit nullglob
  4. YW=`echo "\033[33m"`
  5. RD=`echo "\033[01;31m"`
  6. BL=`echo "\033[36m"`
  7. GN=`echo "\033[1;92m"`
  8. CL=`echo "\033[m"`
  9. RETRY_NUM=10
  10. RETRY_EVERY=3
  11. NUM=$RETRY_NUM
  12. CM="${GN}✓${CL}"
  13. CROSS="${RD}✗${CL}"
  14. BFR="\\r\\033[K"
  15. HOLD="-"
  16. function msg_info() {
  17. local msg="$1"
  18. echo -ne " ${HOLD} ${YW}${msg}..."
  19. }
  20. function msg_ok() {
  21. local msg="$1"
  22. echo -e "${BFR} ${CM} ${GN}${msg}${CL}"
  23. }
  24. msg_info "Setting up Container OS "
  25. sed -i "/$LANG/ s/\(^# \)//" /etc/locale.gen
  26. locale-gen >/dev/null
  27. while [ "$(hostname -I)" = "" ]; do
  28. 1>&2 echo -en "${CROSS}${RD} No Network! "
  29. sleep $RETRY_EVERY
  30. ((NUM--))
  31. if [ $NUM -eq 0 ]
  32. then
  33. 1>&2 echo -e "${CROSS}${RD} No Network After $RETRY_NUM Tries${CL}"
  34. exit 1
  35. fi
  36. done
  37. msg_ok "Set up Container OS"
  38. msg_ok "Network Connected: ${BL}$(hostname -I)"
  39. wget -q --tries=10 --timeout=5 --spider http://google.com
  40. if [[ $? -eq 0 ]]; then
  41. msg_ok "Internet Online"
  42. else
  43. echo -e "{CROSS}${RD} Internet Offline"
  44. fi
  45. msg_info "Updating Container OS"
  46. apt update &>/dev/null
  47. apt-get -qqy upgrade &>/dev/null
  48. msg_ok "Updated Container OS"
  49. msg_info "Installing Dependencies"
  50. apt-get update &>/dev/null
  51. apt-get -qqy install \
  52. sudo \
  53. curl \
  54. wget \
  55. gnupg \
  56. openssl \
  57. ca-certificates \
  58. apache2-utils \
  59. logrotate \
  60. build-essential \
  61. python3-dev \
  62. git \
  63. lsb-release &>/dev/null
  64. msg_ok "Installed Dependencies"
  65. msg_info "Installing Dependencies"
  66. apt-get install -y -q --no-install-recommends python3 python3-pip python3-venv &>/dev/null
  67. pip3 install --upgrade setuptools &>/dev/null
  68. pip3 install --upgrade pip &>/dev/null
  69. python3 -m venv /opt/certbot/ &>/dev/null
  70. if [ "$(getconf LONG_BIT)" = "32" ]; then
  71. python3 -m pip install --no-cache-dir -U cryptography==3.3.2 &>/dev/null
  72. fi
  73. python3 -m pip install --no-cache-dir cffi certbot &>/dev/null
  74. msg_ok "Installed Dependencies"
  75. msg_info "Installing Openresty"
  76. wget -q -O - https://openresty.org/package/pubkey.gpg | apt-key add - &>/dev/null
  77. codename=`grep -Po 'VERSION="[0-9]+ \(\K[^)]+' /etc/os-release` &>/dev/null
  78. echo "deb http://openresty.org/package/debian $codename openresty" | tee /etc/apt/sources.list.d/openresty.list &>/dev/null
  79. apt-get -y update &>/dev/null
  80. apt-get -y install --no-install-recommends openresty &>/dev/null
  81. msg_ok "Installed Openresty"
  82. msg_info "Setting up Node.js Repository"
  83. sudo curl -sL https://deb.nodesource.com/setup_16.x | sudo -E bash - &>/dev/null
  84. msg_ok "Set up Node.js Repository"
  85. msg_info "Installing Node.js"
  86. sudo apt-get install -y nodejs git make g++ gcc &>/dev/null
  87. msg_ok "Installed Node.js"
  88. msg_info "Installing Yarn"
  89. npm install --global yarn &>/dev/null
  90. msg_ok "Installed Yarn"
  91. RELEASE=$(curl -s https://api.github.com/repos/NginxProxyManager/nginx-proxy-manager/releases/latest \
  92. | grep "tag_name" \
  93. | awk '{print substr($2, 3, length($2)-4) }') \
  94. msg_info "Downloading Nginx Proxy Manager v${RELEASE}"
  95. wget -q https://codeload.github.com/NginxProxyManager/nginx-proxy-manager/tar.gz/v${RELEASE} -O - | tar -xz &>/dev/null
  96. cd ./nginx-proxy-manager-${RELEASE}
  97. msg_ok "Downloaded Nginx Proxy Manager v${RELEASE}"
  98. msg_info "Setting up Enviroment"
  99. ln -sf /usr/bin/python3 /usr/bin/python
  100. ln -sf /usr/bin/certbot /opt/certbot/bin/certbot
  101. ln -sf /usr/local/openresty/nginx/sbin/nginx /usr/sbin/nginx
  102. ln -sf /usr/local/openresty/nginx/ /etc/nginx
  103. sed -i "s+0.0.0+${RELEASE}+g" backend/package.json
  104. sed -i "s+0.0.0+${RELEASE}+g" frontend/package.json
  105. sed -i 's+^daemon+#daemon+g' docker/rootfs/etc/nginx/nginx.conf
  106. NGINX_CONFS=$(find "$(pwd)" -type f -name "*.conf")
  107. for NGINX_CONF in $NGINX_CONFS; do
  108. sed -i 's+include conf.d+include /etc/nginx/conf.d+g' "$NGINX_CONF"
  109. done
  110. mkdir -p /var/www/html /etc/nginx/logs
  111. cp -r docker/rootfs/var/www/html/* /var/www/html/
  112. cp -r docker/rootfs/etc/nginx/* /etc/nginx/
  113. cp docker/rootfs/etc/letsencrypt.ini /etc/letsencrypt.ini
  114. cp docker/rootfs/etc/logrotate.d/nginx-proxy-manager /etc/logrotate.d/nginx-proxy-manager
  115. ln -sf /etc/nginx/nginx.conf /etc/nginx/conf/nginx.conf
  116. rm -f /etc/nginx/conf.d/dev.conf
  117. mkdir -p /tmp/nginx/body \
  118. /run/nginx \
  119. /data/nginx \
  120. /data/custom_ssl \
  121. /data/logs \
  122. /data/access \
  123. /data/nginx/default_host \
  124. /data/nginx/default_www \
  125. /data/nginx/proxy_host \
  126. /data/nginx/redirection_host \
  127. /data/nginx/stream \
  128. /data/nginx/dead_host \
  129. /data/nginx/temp \
  130. /var/lib/nginx/cache/public \
  131. /var/lib/nginx/cache/private \
  132. /var/cache/nginx/proxy_temp
  133. chmod -R 777 /var/cache/nginx
  134. chown root /tmp/nginx
  135. echo resolver "$(awk 'BEGIN{ORS=" "} $1=="nameserver" {print ($2 ~ ":")? "["$2"]": $2}' /etc/resolv.conf);" > /etc/nginx/conf.d/include/resolvers.conf
  136. if [ ! -f /data/nginx/dummycert.pem ] || [ ! -f /data/nginx/dummykey.pem ]; then
  137. echo -en "${GN} Generating dummy SSL Certificate... "
  138. openssl req -new -newkey rsa:2048 -days 3650 -nodes -x509 -subj "/O=Nginx Proxy Manager/OU=Dummy Certificate/CN=localhost" -keyout /data/nginx/dummykey.pem -out /data/nginx/dummycert.pem &>/dev/null
  139. fi
  140. mkdir -p /app/global /app/frontend/images
  141. cp -r backend/* /app
  142. cp -r global/* /app/global
  143. msg_ok "Set up Enviroment"
  144. msg_info "Building Frontend"
  145. cd ./frontend
  146. export NODE_ENV=development
  147. yarn install --network-timeout=30000 &>/dev/null
  148. yarn build &>/dev/null
  149. cp -r dist/* /app/frontend
  150. cp -r app-images/* /app/frontend/images
  151. msg_ok "Built Frontend"
  152. msg_info "Initializing Backend"
  153. rm -rf /app/config/default.json &>/dev/null
  154. if [ ! -f /app/config/production.json ]; then
  155. cat << 'EOF' > /app/config/production.json
  156. {
  157. "database": {
  158. "engine": "knex-native",
  159. "knex": {
  160. "client": "sqlite3",
  161. "connection": {
  162. "filename": "/data/database.sqlite"
  163. }
  164. }
  165. }
  166. }
  167. EOF
  168. fi
  169. cd /app
  170. export NODE_ENV=development
  171. yarn install --network-timeout=30000 &>/dev/null
  172. msg_ok "Initialized Backend"
  173. msg_info "Creating Service"
  174. cat << 'EOF' > /lib/systemd/system/npm.service
  175. [Unit]
  176. Description=Nginx Proxy Manager
  177. After=network.target
  178. Wants=openresty.service
  179. [Service]
  180. Type=simple
  181. Environment=NODE_ENV=production
  182. ExecStartPre=-mkdir -p /tmp/nginx/body /data/letsencrypt-acme-challenge
  183. ExecStart=/usr/bin/node index.js --abort_on_uncaught_exception --max_old_space_size=250
  184. WorkingDirectory=/app
  185. Restart=on-failure
  186. [Install]
  187. WantedBy=multi-user.target
  188. EOF
  189. msg_ok "Created Service"
  190. PASS=$(grep -w "root" /etc/shadow | cut -b6);
  191. if [[ $PASS != $ ]]; then
  192. msg_info "Customizing Container"
  193. rm /etc/motd
  194. rm /etc/update-motd.d/10-uname
  195. touch ~/.hushlogin
  196. GETTY_OVERRIDE="/etc/systemd/system/container-getty@1.service.d/override.conf"
  197. mkdir -p $(dirname $GETTY_OVERRIDE)
  198. cat << EOF > $GETTY_OVERRIDE
  199. [Service]
  200. ExecStart=
  201. ExecStart=-/sbin/agetty --autologin root --noclear --keep-baud tty%I 115200,38400,9600 \$TERM
  202. EOF
  203. systemctl daemon-reload
  204. systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
  205. msg_ok "Customized Container"
  206. fi
  207. msg_info "Starting Services"
  208. systemctl enable npm &>/dev/null
  209. systemctl start openresty
  210. systemctl start npm
  211. msg_ok "Started Services"
  212. msg_info "Cleaning up"
  213. apt-get autoremove >/dev/null
  214. apt-get autoclean >/dev/null
  215. rm -rf /var/{cache,log}/* /var/lib/apt/lists/*
  216. msg_ok "Cleaned"