Work_Archive/VPS-scripts_Ubuntu-Web-V1
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 1 Wiki Activity

Merge branch 'dev' of VPS-scripts/Ubuntu-Web into master

Browse Source
This commit was merged in pull request #3.
This commit is contained in:
tbergervoet
2018-10-19 11:19:04 +02:00
committed by Gitea
parent 99c74069df 8d827e51c6
commit 4b555591f4
3 changed files with 30 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
Apache-Installer.sh
View File

@@ -148,7 +148,9 @@ fi
##-------------## ##-------------##
apt install -y python-certbot-apache apt install -y python-certbot-apache
certbot --apache -n -d "$domain" -d "www.$domain" -m "$email" --hsts --redirect --no-eff-email --agree-tos certbot --apache -n -d "$domain" -m "$email" --hsts --redirect --no-eff-email --agree-tos
certbot --apache -n -d "www.$domain" -m "$email" --hsts --redirect --no-eff-email --agree-tos
##---------------## ##---------------##
# Wordpress # # Wordpress #

32
Main-Installer.sh
View File

@@ -43,6 +43,18 @@ do
esac esac
done done
while true; do
read -p "Password login uit zetten -> yes/no?" yn
case $yn in
[Yy]* ) sshkey=1
break;;
[Nn]* ) sshkey=0
break;;
* ) echo "Kies yes of no.";;
esac
done
while true; do while true; do
read -p "Installeer Cockpit -> yes/no?" yn read -p "Installeer Cockpit -> yes/no?" yn
case $yn in case $yn in
@@ -102,7 +114,7 @@ done
# Pre-Config # # Pre-Config #
##----------------## ##----------------##
sed -i 's/PermitRootLogin yes/PermitRootLogin prohibit-password/g' /etc/ssh/sshd_config echo "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOtJ4ZiLi+SntA3m54oEJjlA8bE73gggkhGjOaVHsLNo6YmKtZlPaxwWiGvoATv4Vm41WWxKbUWbYGHVTe8DusqKpf/JCgB1r/8rQe828qwaEGXWGxta1Ykq+ndDeBLFGhVp0nNdcnND5HIwarEW4zhBDXUMzYw7IBxPYb48tVIobs/yPN6nSWT2G8FX7XDJNifS+ThVLnCHHS3i/uio8b8jz1oT2s6UH09EBwxg99+0yVaSQV2q8CthDZ8rSgz8pAhQ6FwVfUd9c/PQjtbUSQStvKvr3muv5Q8UnzAvKiO83rsM91aDwv0E6kqpB77BrkpfQXOJNDmdqlnsa2AlkL ICTMaatwerk@Key" >> ~/.ssh/authorized_keys
echo "root:$password" | chpasswd echo "root:$password" | chpasswd
cd /tmp cd /tmp
#mv /boot/grub/menu.lst /boot/grub/menu.lst.bck #mv /boot/grub/menu.lst /boot/grub/menu.lst.bck
@@ -118,10 +130,8 @@ sed -i 's/;preserve_hostname: false/preserve_hostname: true/g' /etc/cloud/cloud.
timedatectl set-timezone Europe/Amsterdam timedatectl set-timezone Europe/Amsterdam
sed -i 's/#/vm.swappiness=10/g' /etc/sysctl.conf sed -i 's/#/vm.swappiness=10/g' /etc/sysctl.conf
sed -i 's/#/vm.vfs_cache_pressure=50/g' /etc/sysctl.conf sed -i 's/#/vm.vfs_cache_pressure=50/g' /etc/sysctl.conf
cat <<EOF > /etc/crontab
# m h dom mon dow user command sed -i "\$a0 3 * * 1 root apt update && apt upgrade -y > /dev/null 2>&1" /etc/crontab
0 3 * * 1 root apt update && apt upgrade -y
EOF
systemctl restart cron systemctl restart cron
ufw allow OpenSSH ufw allow OpenSSH
ufw allow 443/tcp ufw allow 443/tcp
@@ -193,13 +203,21 @@ if [ $cockpit = 1 ]; then
source Slave-Installer.sh source Slave-Installer.sh
fi fi
if [ $sshkey = 1 ]; then
sed -i 's/PermitRootLogin yes/PermitRootLogin prohibit-password/g' /etc/ssh/sshd_config
fi
##-------------------## ##-------------------##
# Backup Script # # Backup Script #
##-------------------## ##-------------------##
wget https://git.ictmaatwerk.com/VPS-scripts/Ubuntu-Backup/raw/branch/master/WP_Ftp-Backup.sh -O /root/WP_Ftp-Backup.sh wget https://git.ictmaatwerk.com/VPS-scripts/Ubuntu-Backup/raw/branch/master/WP_Ftp-Backup.sh -O /root/backup.sh
chmod +x /root/backup.sh
wget https://git.ictmaatwerk.com/VPS-scripts/Ubuntu-Backup/raw/branch/master/WP_Ftp-Backup_Setup.sh -O /root/install-backup-tools.sh
chmod +x /root/install-backup-tools.sh
echo "Installatie geslaagd!" echo "Installatie geslaagd!"

3
NGINX-Installer.sh
View File

@@ -264,7 +264,8 @@ fi
##-------------## ##-------------##
apt install -y python-certbot-nginx apt install -y python-certbot-nginx
certbot --nginx -n -d "$domain" -d "www.$domain" -m "$email" --hsts --redirect --no-eff-email --agree-tos certbot --nginx -n -d "$domain" -m "$email" --hsts --redirect --no-eff-email --agree-tos
certbot --nginx -n -d "www.$domain" -m "$email" --hsts --redirect --no-eff-email --agree-tos
sed -i 's/ssl ipv6only/ssl http2 ipv6only/g' /etc/nginx/sites-available/"$domain" sed -i 's/ssl ipv6only/ssl http2 ipv6only/g' /etc/nginx/sites-available/"$domain"
sed -i 's/listen 443 ssl/listen 443 ssl http2/g' /etc/nginx/sites-available/"$domain" sed -i 's/listen 443 ssl/listen 443 ssl http2/g' /etc/nginx/sites-available/"$domain"
sed -i 's#include /etc/letsencrypt/options-ssl-nginx.conf;#ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;#g' /etc/nginx/sites-available/"$domain" sed -i 's#include /etc/letsencrypt/options-ssl-nginx.conf;#ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;#g' /etc/nginx/sites-available/"$domain"