-
-
Save josephbolus/7132973 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| cd | |
| # | |
| # fix locales | |
| # | |
| echo "en_US.UTF-8 UTF-8" > /var/lib/locales/supported.d/local | |
| dpkg-reconfigure locales | |
| # | |
| # we don't need samba and it's kinda big | |
| # | |
| apt-get -y remove samba samba-common | |
| # | |
| # get up to date | |
| # | |
| apt-get update && apt-get -y upgrade | |
| # | |
| # need these for next steps | |
| # | |
| apt-get -y install curl apg | |
| # | |
| # install mysql, set mysql root pass | |
| # | |
| # | |
| # sadly, I have to deal with this in case the downloads | |
| # fail | |
| # | |
| apt-get -y remove --purge mysql-server | |
| rm -rf /etc/mysql | |
| MYSQL_PASS=`/usr/bin/apg -n 1 -m 10 -x 10` | |
| echo "mysql-server mysql-server/root_password select $MYSQL_PASS" | debconf-set-selections | |
| echo "mysql-server mysql-server/root_password_again select $MYSQL_PASS" | debconf-set-selections | |
| apt-get -y install mysql-server | |
| # | |
| # make a .my.cnf file for sanity's sake | |
| # | |
| cat <<EOF > /root/.my.cnf | |
| [client] | |
| user=root | |
| password=$MYSQL_PASS | |
| EOF | |
| chmod 600 /root/.my.cnf | |
| # | |
| # install needed php | |
| # | |
| apt-get -y install php5-cgi php5-mysql php5-curl php5-gd php5-imagick php-apc php5-cli php-pear | |
| # | |
| # defaults file for php-fastcgi | |
| # | |
| cat <<EOF > /etc/default/php-fastcgi | |
| # | |
| # Settings for php-cgi in external FASTCGI Mode | |
| # | |
| # Should php-fastcgi run automatically on startup? (default: no) | |
| START=yes | |
| # Which user runs PHP? (default: www-data) | |
| EXEC_AS_USER=wordpress | |
| # Socket location | |
| FCGI_SOCKET_DIR=/tmp | |
| FCGI_SOCKET=php-socket | |
| # Environment variables, which are processed by PHP | |
| PHP_FCGI_CHILDREN=32 | |
| PHP_FCGI_MAX_REQUESTS=1000 | |
| EOF | |
| # | |
| # Now the init script for php-fastcgi | |
| # | |
| cat <<EOF > /etc/init.d/php-fastcgi | |
| #! /bin/sh | |
| ### BEGIN INIT INFO | |
| # Provides: php-fastcgi | |
| # Required-Start: \$all | |
| # Required-Stop: \$all | |
| # Default-Start: 2 3 4 5 | |
| # Default-Stop: 0 1 6 | |
| # Short-Description: Start and stop php-cgi in external FASTCGI mode | |
| # Description: Start and stop php-cgi in external FASTCGI mode | |
| ### END INIT INFO | |
| # Author: Kurt Zankl <[EMAIL PROTECTED]> | |
| # Modified: Chris Lea http://chrislea.com | |
| # Do NOT "set -e" | |
| PATH=/sbin:/usr/sbin:/bin:/usr/bin | |
| DESC="php-cgi in external FASTCGI mode" | |
| NAME=php-fastcgi | |
| DAEMON=/usr/bin/php-cgi | |
| PIDFILE=/var/run/\$NAME.pid | |
| SCRIPTNAME=/etc/init.d/\$NAME | |
| # Exit if the package is not installed | |
| [ -x "\$DAEMON" ] || exit 0 | |
| # Read configuration variable file if it is present | |
| [ -r /etc/default/\$NAME ] && . /etc/default/\$NAME | |
| # Load the VERBOSE setting and other rcS variables | |
| . /lib/init/vars.sh | |
| # Define LSB log_* functions. | |
| # Depend on lsb-base (>= 3.0-6) to ensure that this file is present. | |
| . /lib/lsb/init-functions | |
| # If the daemon is not enabled, give the user a warning and then exit, | |
| # unless we are stopping the daemon | |
| if [ "\$START" != "yes" -a "\$1" != "stop" ]; then | |
| log_warning_msg "To enable \$NAME, edit /etc/default/\$NAME and set | |
| START=yes" | |
| exit 0 | |
| fi | |
| # Process configuration | |
| export PHP_FCGI_CHILDREN PHP_FCGI_MAX_REQUESTS | |
| DAEMON_ARGS="-q -b \$FCGI_SOCKET_DIR/\$FCGI_SOCKET" | |
| do_start() | |
| { | |
| # Return | |
| # 0 if daemon has been started | |
| # 1 if daemon was already running | |
| # 2 if daemon could not be started | |
| start-stop-daemon --start --quiet --pidfile \$PIDFILE --exec \$DAEMON --test > /dev/null \ | |
| || return 1 | |
| start-stop-daemon --start --quiet --pidfile \$PIDFILE --exec \$DAEMON \ | |
| --background --make-pidfile --chuid \$EXEC_AS_USER --startas \$DAEMON -- \ | |
| \$DAEMON_ARGS \ | |
| || return 2 | |
| } | |
| do_stop() | |
| { | |
| # Return | |
| # 0 if daemon has been stopped | |
| # 1 if daemon was already stopped | |
| # 2 if daemon could not be stopped | |
| # other if a failure occurred | |
| start-stop-daemon --stop --quiet --retry=TERM/30/KILL/5 --pidfile \$PIDFILE > /dev/null # --name \$DAEMON | |
| RETVAL="\$?" | |
| [ "\$RETVAL" = 2 ] && return 2 | |
| # Wait for children to finish too if this is a daemon that forks | |
| # and if the daemon is only ever run from this initscript. | |
| # If the above conditions are not satisfied then add some other code | |
| # that waits for the process to drop all resources that could be | |
| # needed by services started subsequently. A last resort is to | |
| # sleep for some time. | |
| start-stop-daemon --stop --quiet --oknodo --retry=0/30/KILL/5 --exec \$DAEMON | |
| [ "\$?" = 2 ] && return 2 | |
| # Many daemons don't delete their pidfiles when they exit. | |
| rm -f \$PIDFILE | |
| return "\$RETVAL" | |
| } | |
| case "\$1" in | |
| start) | |
| [ "\$VERBOSE" != no ] && log_daemon_msg "Starting \$DESC" "\$NAME" | |
| do_start | |
| case "\$?" in | |
| 0|1) [ "\$VERBOSE" != no ] && log_end_msg 0 ;; | |
| 2) [ "\$VERBOSE" != no ] && log_end_msg 1 ;; | |
| esac | |
| ;; | |
| stop) | |
| [ "\$VERBOSE" != no ] && log_daemon_msg "Stopping \$DESC" "\$NAME" | |
| do_stop | |
| case "\$?" in | |
| 0|1) [ "\$VERBOSE" != no ] && log_end_msg 0 ;; | |
| 2) [ "\$VERBOSE" != no ] && log_end_msg 1 ;; | |
| esac | |
| ;; | |
| restart|force-reload) | |
| log_daemon_msg "Restarting \$DESC" "\$NAME" | |
| do_stop | |
| case "\$?" in | |
| 0|1) | |
| do_start | |
| case "\$?" in | |
| 0) log_end_msg 0 ;; | |
| 1) log_end_msg 1 ;; # Old process is still running | |
| *) log_end_msg 1 ;; # Failed to start | |
| esac | |
| ;; | |
| *) | |
| # Failed to stop | |
| log_end_msg 1 | |
| ;; | |
| esac | |
| ;; | |
| *) | |
| echo "Usage: \$SCRIPTNAME {start|stop|restart|force-reload}" >&2 | |
| exit 3 | |
| ;; | |
| esac | |
| EOF | |
| # | |
| # create WordPress user | |
| # | |
| SALT=`/usr/bin/apg -n 1 -x 2 -m 2` | |
| WP_USER_PASS=`/usr/bin/apg -n 1 -x 10 -m 10` | |
| WP_USER_PASS_CRYPT=`perl -e "print crypt('$WP_USER_PASS','$SALT');"` | |
| useradd -m --password $WP_USER_PASS_CRYPT wordpress | |
| # | |
| # start php fastcgi processes | |
| # | |
| chmod 755 /etc/init.d/php-fastcgi | |
| /etc/init.d/php-fastcgi start | |
| update-rc.d php-fastcgi defaults | |
| # | |
| # get the current WordPress version | |
| # | |
| WP_VERSION=`curl -s http://api.wordpress.org/core/version-check/1.4/ | grep -r "^[0-9]"|head -1` | |
| # | |
| # create home directory for WordPress install | |
| # | |
| /bin/mkdir -p -v /var/www/$HOSTNAME | |
| # | |
| # Svn checkout of current version into web root | |
| # | |
| apt-get -y install subversion | |
| svn co http://svn.automattic.com/wordpress/tags/$WP_VERSION/ /var/www/$HOSTNAME/ | |
| # | |
| # permissions | |
| # | |
| chown -R wordpress: /var/www/$HOSTNAME | |
| # | |
| # create database for WordPress | |
| # | |
| mysql -e "CREATE DATABASE wordpress" | |
| mysql -e "GRANT ALL PRIVILEGES ON wordpress.* to wordpress@localhost IDENTIFIED BY '$WP_USER_PASS'" | |
| mysql -e "FLUSH PRIVILEGES" | |
| # | |
| # Install postfix | |
| # | |
| echo "postfix postfix/mailname string $HOSTNAME" | debconf-set-selections | |
| echo "postfix postfix/main_mailer_type select Internet Site" | debconf-set-selections | |
| apt-get -y install postfix | |
| # | |
| # Install nginx | |
| # | |
| apt-get -y install nginx | |
| # | |
| # and configure it | |
| # | |
| perl -p -i -e 's|www-data|wordpress|g;' /etc/nginx/nginx.conf | |
| cat <<EOF > /etc/nginx/sites-available/$HOSTNAME.conf | |
| server { | |
| listen 80; | |
| server_name $HOSTNAME www.$HOSTNAME; | |
| if ( \$host = www.$HOSTNAME ) { | |
| rewrite ^\/(.*)\$ http://$HOSTNAME/\$1 permanent; | |
| } | |
| access_log /var/log/nginx/$HOSTNAME-access.log; | |
| location ~ /\.svn/* { | |
| deny all; | |
| } | |
| location ~ \.ht* { | |
| deny all; | |
| } | |
| location / { | |
| root /var/www/$HOSTNAME; | |
| index index.php index.html; | |
| charset UTF-8; | |
| gzip on; | |
| gzip_comp_level 2; | |
| gzip_vary on; | |
| gzip_proxied any; | |
| gzip_types text/plain text/xml text/css application/x-javascript; | |
| if (-f \$request_filename) { | |
| break; | |
| } | |
| set \$supercache_file ''; | |
| set \$supercache_uri \$request_uri; | |
| if (\$request_method = POST) { | |
| set \$supercache_uri ''; | |
| } | |
| if (\$query_string) { | |
| set \$supercache_uri ''; | |
| } | |
| if (\$http_cookie ~* "comment_author_|wordpress|wp-postpass_" ) { | |
| set \$supercache_uri ''; | |
| } | |
| if (\$supercache_uri ~ ^(.+)\$) { | |
| set \$supercache_file /wp-content/cache/supercache/\$http_host/\$1index.html; | |
| } | |
| if (-f \$document_root\$supercache_file) { | |
| rewrite ^(.*)\$ \$supercache_file break; | |
| } | |
| if (!-e \$request_filename) { | |
| rewrite . /index.php last; | |
| } | |
| } | |
| location ~ \.(jpg|jpeg|png|gif|ico)\$ { | |
| root /var/www/$HOSTNAME; | |
| expires 7d; | |
| } | |
| error_page 404 = /index.php?q=\$request_uri; | |
| location ~ \.php\$ { | |
| fastcgi_pass unix:/tmp/php-socket; | |
| fastcgi_index index.php; | |
| fastcgi_param SCRIPT_FILENAME /var/www/$HOSTNAME\$fastcgi_script_name; | |
| include fastcgi_params; | |
| } | |
| } | |
| EOF | |
| # | |
| # install munin and set it up | |
| # | |
| apt-get -y install munin munin-node | |
| cd /etc/munin/plugins | |
| rm -fv ./* | |
| for i in cpu df df_inode entropy forks interrupts load memory open_files \ | |
| open_inodes postfix_mailqueue postfix_mailvolume processes vmstat \ | |
| mysql_queries mysql_slowqueries mysql_bytes mysql_threads; \ | |
| do ln -s -v /usr/share/munin/plugins/$i . ; done | |
| ln -s -v /usr/share/munin/plugins/if_ if_venet0 | |
| /etc/init.d/munin-node restart | |
| # | |
| # configure nginx for munin too | |
| # | |
| echo "wordpress:$WP_USER_PASS_CRYPT" > /etc/nginx/htpasswd | |
| cat <<EOF > /etc/nginx/sites-available/munin.conf | |
| server { | |
| listen 7131; | |
| server_name $HOSTNAME www.$HOSTNAME; | |
| if ( \$host = www.$HOSTNAME ) { | |
| rewrite ~\/(.*)\$ http://$HOSTNAME/\$1 permanent; | |
| } | |
| access_log /var/log/nginx/munin.$HOSTNAME-access.log; | |
| location / { | |
| root /var/www/munin; | |
| index index.html index.htm; | |
| auth_basic "Authorization Required"; | |
| auth_basic_user_file htpasswd; | |
| } | |
| error_page 404 /404.html; | |
| error_page 500 502 503 504 /50x.html; | |
| location = /50x.html { | |
| root /var/www/nginx-default; | |
| } | |
| } | |
| EOF | |
| # | |
| # finish nginx config | |
| # | |
| cd /etc/nginx/sites-enabled | |
| rm -fv default | |
| ln -s -v ../sites-available/$HOSTNAME.conf 001-$HOSTNAME.conf | |
| ln -s -v ../sites-available/munin.conf 002-munin.conf | |
| /etc/init.d/nginx restart | |
| # | |
| # configure WordPress itself | |
| # | |
| cd /var/www/$HOSTNAME | |
| perl -p -i -e "s|putyourdbnamehere|wordpress|;" wp-config-sample.php | |
| perl -p -i -e "s|usernamehere|wordpress|;" wp-config-sample.php | |
| perl -p -i -e "s|yourpasswordhere|$WP_USER_PASS|;" wp-config-sample.php | |
| mv wp-config-sample.php wp-config.php | |
| # | |
| # friendly finishing up message for the user | |
| # | |
| echo "" | |
| echo "" | |
| echo "" | |
| echo "########################################################################" | |
| echo "########################################################################" | |
| echo "########################################################################" | |
| echo "" | |
| echo "Hi! We've installed WordPress for you. You have the currently newest" | |
| echo "version which is $WP_VERSION." | |
| echo "" | |
| echo "There are some things to be aware of. First is that everything is running" | |
| echo "as the 'WordPress' user. If that doesn't mean a lot to you, don't worry." | |
| echo "Practically, it's just saying that things like WordPress upgrades will work" | |
| echo "smoothly from inside the WordPress admin area." | |
| echo "" | |
| echo "If you need to, you can ssh or sftp into this server as the WordPress user" | |
| echo "using the following password:" | |
| echo "" | |
| echo "$WP_USER_PASS" | |
| echo "" | |
| echo "Requests to http://www.$HOSTNAME will automagically be redirected to:" | |
| echo "" | |
| echo "http://$HOSTNAME" | |
| echo "" | |
| echo "If you want to see graphs of how your server is doing, you can do so here:" | |
| echo "" | |
| echo "http://$HOSTNAME:7131" | |
| echo "" | |
| echo "This is password protected with the username WordPress and the password" | |
| echo "listed above. It may take a few more minutes before you can get there," | |
| echo "since there's not any data to graph just yet." | |
| echo "" | |
| echo "IMPORTANT: This server is configured to make use of the wp-super-cache" | |
| echo "WordPress plugin. You can and should install this plugin as it will let your" | |
| echo "blog handle vastly more traffic than it otherwise could. You can install it" | |
| echo "very easily from the WordPress admin with the following steps:" | |
| echo "" | |
| echo "1) Log into the WordPress admin." | |
| echo "2) Click on Plugins, then Add New, then search for wp-super-cache." | |
| echo "3) When it comes up, click the links to install it." | |
| echo "4) Be sure to enable it, turn it on, and then enable Super Cache Compression." | |
| echo "5) Ignore warnings about mod_rewrite or writable directories, they don't apply." | |
| echo "" | |
| echo "Enjoy http://$HOSTNAME !" | |
| echo "" |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment