Decentrala/dmzconf
20
0
Fork 1
Code Issues Pull Requests Packages Projects Releases Wiki Activity

add scripts from dmzscripts repo to scripts

Browse Source
This commit is contained in:
fram3d
2024-01-05 11:42:17 +01:00
parent d3e2cec3a7
commit 5e4f55af5b
10 changed files with 2256 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
scripts/addsubdomain/addsub.sh Executable file
View File

@@ -0,0 +1,25 @@
#!/bin/bash
## Generate TLS certificate for a new subdomain
DMZKEYFILE="~/.ssh/dmz"
NGINXHOST=$1
SUBDOMAIN=$2
if [[ -z "$NGINXHOST" ]]; then
echo "Set Nginx Host"
exit 1
fi
if [[ -z "$SUBDOMAIN" ]]; then
echo "Set subdomain"
exit 1
fi
ssh-add -t 200 $DMZKEYFILE
torsocks scp ./remotecmd $NGINXHOST:/root/remotecmd.sh
torsocks scp ./subdomain.krov.dmz.rs $NGINXHOST:/etc/nginx/sites-available/
torsocks scp ./subdomain.krov.dmz.rs.https $NGINXHOST:/etc/nginx/sites-available/
torsocks ssh $NGINXHOST "chmod +x /root/remotecmd.sh; /root/remotecmd.sh $SUBDOMAIN"

22
scripts/addsubdomain/remotecmd Executable file
View File

@@ -0,0 +1,22 @@
#!/bin/bash
SUBDOMAIN=$1
if [[ -z "$SUBDOMAIN" ]]; then
echo "Set subdomain"
exit 1
fi
sed -i 's/subdomain/'$SUBDOMAIN'/g' /etc/nginx/sites-available/subdomain.krov.dmz.rs
sed -i 's/subdomain/'$SUBDOMAIN'/g' /etc/nginx/sites-available/subdomain.krov.dmz.rs.https
mkdir /var/www/"$SUBDOMAIN"krovdmzrs/
mv /etc/nginx/sites-available/subdomain.krov.dmz.rs /etc/nginx/sites-available/"$SUBDOMAIN".krov.dmz.rs
mv /etc/nginx/sites-available/subdomain.krov.dmz.rs.https /etc/nginx/sites-available/"$SUBDOMAIN".krov.dmz.rs.https
ln -s /etc/nginx/sites-available/"$SUBDOMAIN".krov.dmz.rs /etc/nginx/sites-enabled/"$SUBDOMAIN".krov.dmz.rs
service nginx reload
certbot certonly -d "$SUBDOMAIN".krov.dmz.rs,"$SUBDOMAIN".krov.decentrala.org --webroot -w /var/www/"$SUBDOMAIN"krovdmzrs
cat /etc/nginx/sites-available/"$SUBDOMAIN".krov.dmz.rs /etc/nginx/sites-available/"$SUBDOMAIN".krov.dmz.rs.https > /etc/nginx/sites-available/"$SUBDOMAIN".krov.dmz.rs.all
mv /etc/nginx/sites-available/"$SUBDOMAIN".krov.dmz.rs.all /etc/nginx/sites-available/"$SUBDOMAIN".krov.dmz.rs
rm /etc/nginx/sites-available/"$SUBDOMAIN".krov.dmz.rs.https
service nginx reload
rm /root/remotecmd.sh

10
scripts/addsubdomain/subdomain.krov.dmz.rs Normal file
View File

@@ -0,0 +1,10 @@
server {
listen 80;
listen [::]:80;
index index.html index.htm index.nginx-debian.html;
server_name subdomain.krov.dmz.rs subdomain.krov.decentrala.org;
root /var/www/subdomainkrovdmzrs;
}

18
scripts/addsubdomain/subdomain.krov.dmz.rs.https Normal file
View File

@@ -0,0 +1,18 @@
server {
listen 443 ssl ;
listen [::]:443 ssl ;
index index.html index.htm index.nginx-debian.html;
server_name subdomain.krov.dmz.rs subdomain.krov.decentrala.org;
ssl_certificate /etc/letsencrypt/live/subdomain.krov.dmz.rs/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/subdomain.krov.dmz.rs/privkey.pem;
ssl_dhparam /etc/ssl/dhparam.pem;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5;
root /var/www/subdomainkrovdmzrs;
resolver 9.9.9.9;
}