106 lines
3.4 KiB
Bash
106 lines
3.4 KiB
Bash
|
#!/bin/bash
|
||
|
|
|
||
|
|
# Setup script for Forgejo domain (code.mnemo-cards.online)
|
||
|
|
# Usage: ./setup-forgejo-domain.sh
|
||
|
|
|
||
|
|
set -e
|
||
|
|
|
||
|
|
# Load configuration
|
||
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||
|
|
source "$SCRIPT_DIR/config.sh"
|
||
|
|
|
||
|
|
echo "🚀 Setting up Forgejo domain: code.mnemo-cards.online..."
|
||
|
|
|
||
|
|
# Colors for output
|
||
|
|
RED='\033[0;31m'
|
||
|
|
GREEN='\033[0;32m'
|
||
|
|
YELLOW='\033[1;33m'
|
||
|
|
BLUE='\033[0;34m'
|
||
|
|
NC='\033[0m' # No Color
|
||
|
|
|
||
|
|
print_status() {
|
||
|
|
echo -e "${GREEN}[INFO]${NC} $1"
|
||
|
|
}
|
||
|
|
|
||
|
|
print_warning() {
|
||
|
|
echo -e "${YELLOW}[WARNING]${NC} $1"
|
||
|
|
}
|
||
|
|
|
||
|
|
print_error() {
|
||
|
|
echo -e "${RED}[ERROR]${NC} $1"
|
||
|
|
}
|
||
|
|
|
||
|
|
print_success() {
|
||
|
|
echo -e "${GREEN}[SUCCESS]${NC} $1"
|
||
|
|
}
|
||
|
|
|
||
|
|
print_info() {
|
||
|
|
echo -e "${BLUE}[INFO]${NC} $1"
|
||
|
|
}
|
||
|
|
|
||
|
|
# Upload nginx config for Forgejo
|
||
|
|
print_status "Uploading Forgejo nginx configuration..."
|
||
|
|
scp "$SCRIPT_DIR/forgejo-nginx.conf" "$SERVER_USER@$SERVER_IP:/tmp/forgejo-nginx.conf"
|
||
|
|
|
||
|
|
print_status "Setting up Forgejo domain on server..."
|
||
|
|
# Execute setup commands on server
|
||
|
|
ssh "$SERVER_USER@$SERVER_IP" << EOF
|
||
|
|
set -e
|
||
|
|
|
||
|
|
echo "Setting up Forgejo domain configuration..."
|
||
|
|
|
||
|
|
# Install SSL certificate for code.mnemo-cards.online
|
||
|
|
if [ ! -d "/etc/letsencrypt/live/code.mnemo-cards.online" ]; then
|
||
|
|
echo "🔐 Getting Let's Encrypt SSL certificate for code.mnemo-cards.online..."
|
||
|
|
|
||
|
|
# Stop nginx temporarily for certificate issuance
|
||
|
|
systemctl stop nginx 2>/dev/null || true
|
||
|
|
|
||
|
|
if certbot certonly --standalone -d code.mnemo-cards.online --non-interactive --agree-tos --email admin@memo-cards.online; then
|
||
|
|
echo "✅ Let's Encrypt certificate obtained successfully for code.mnemo-cards.online!"
|
||
|
|
else
|
||
|
|
echo "❌ Failed to get Let's Encrypt certificate. Generating self-signed certificate..."
|
||
|
|
if [ ! -f "/etc/ssl/certs/nginx-selfsigned-forgejo.crt" ]; then
|
||
|
|
openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
|
||
|
|
-keyout /etc/ssl/private/nginx-selfsigned-forgejo.key \
|
||
|
|
-out /etc/ssl/certs/nginx-selfsigned-forgejo.crt \
|
||
|
|
-subj "/C=RU/ST=Moscow/L=Moscow/O=MnemoCards/OU=IT/CN=code.mnemo-cards.online"
|
||
|
|
fi
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Start nginx again
|
||
|
|
systemctl start nginx 2>/dev/null || true
|
||
|
|
else
|
||
|
|
echo "✅ Let's Encrypt certificate already exists for code.mnemo-cards.online"
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Configure nginx for Forgejo
|
||
|
|
echo "Configuring nginx for Forgejo..."
|
||
|
|
|
||
|
|
# Copy Forgejo nginx configuration
|
||
|
|
cp /tmp/forgejo-nginx.conf /etc/nginx/sites-available/forgejo
|
||
|
|
|
||
|
|
# Enable Forgejo site
|
||
|
|
ln -sf /etc/nginx/sites-available/forgejo /etc/nginx/sites-enabled/forgejo
|
||
|
|
|
||
|
|
# Test nginx configuration
|
||
|
|
nginx -t
|
||
|
|
|
||
|
|
# Restart nginx
|
||
|
|
systemctl restart nginx
|
||
|
|
systemctl enable nginx
|
||
|
|
|
||
|
|
# Setup cron for certificate renewal (if not already configured)
|
||
|
|
if ! crontab -l | grep -q "code.mnemo-cards.online"; then
|
||
|
|
echo "Setting up cron job for Forgejo certificate renewal..."
|
||
|
|
(crontab -l ; echo "0 12 * * * certbot renew --quiet --cert-name code.mnemo-cards.online") | crontab -
|
||
|
|
fi
|
||
|
|
|
||
|
|
echo "Forgejo domain setup completed successfully!"
|
||
|
|
echo "Forgejo is now available at: https://code.mnemo-cards.online"
|
||
|
|
EOF
|
||
|
|
|
||
|
|
print_success "Forgejo domain setup completed successfully! 🎉"
|
||
|
|
print_success "Forgejo is now available at: https://code.mnemo-cards.online"
|
||
|
|
print_info "Make sure DNS is configured: code.mnemo-cards.online -> $SERVER_IP"
|