227 lines
6.5 KiB
Bash
Executable File
227 lines
6.5 KiB
Bash
Executable File
#!/bin/bash
|
|
SCRIPTHOME=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )
|
|
export SSLHOME=$SCRIPTHOME/SSL
|
|
|
|
secho() {
|
|
for ((i=0;i<$1;i++)); do echo ""; done
|
|
echo $2
|
|
}
|
|
|
|
sudo echo -n ""
|
|
if [ $(whoami) = "root" ]; then
|
|
echo "sudo せずに実行してください"
|
|
exit 0
|
|
fi
|
|
|
|
echo "0" > $SCRIPTHOME/.setupphase.txt
|
|
|
|
echo "================================================"
|
|
echo " 認証局の作成"
|
|
echo "================================================"
|
|
cd $SSLHOME
|
|
|
|
./CA.pl -newca
|
|
|
|
if [ $? -ne 0 ]; then
|
|
echo "処理を中止します"
|
|
exit
|
|
fi
|
|
|
|
secho 3 "=== CA証明書部分を切り出す"
|
|
sed -n "/-----BEGIN/,/CERTIFICATE-----/p" exampleCA/cacert.pem > exampleCA/example.net.ca.crt
|
|
|
|
secho 3 "=== OSにCA証明書を登録"
|
|
sudo cp exampleCA/example.net.ca.crt /usr/local/share/ca-certificates/
|
|
sudo update-ca-certificates
|
|
|
|
echo "1" > $SCRIPTHOME/.setupphase.txt
|
|
|
|
secho 5
|
|
echo "================================================"
|
|
echo " SSL証明書の作成"
|
|
echo "================================================"
|
|
cd exampleCA/certs/
|
|
|
|
echo "=== 証明書署名要求の作成"
|
|
SSLCERTDIR=$(date +%Y%m%d%H%M)_wildcard.example.net
|
|
mkdir $SSLCERTDIR
|
|
cd $SSLCERTDIR
|
|
$SSLHOME/CA.pl -newreq
|
|
|
|
if [ $? -ne 0 ]; then
|
|
echo "処理を中止します"
|
|
exit
|
|
fi
|
|
|
|
secho 3 "=== CAで署名"
|
|
$SSLHOME/CA.pl -sign
|
|
|
|
secho 3 "=== SSL証明書部分を切り出す"
|
|
sed -n "/-----BEGIN/,/CERTIFICATE-----/p" newcert.pem > wildcard.example.net.crt
|
|
|
|
secho 3 "=== 秘密鍵からパスフレーズを削除"
|
|
openssl pkey -in newkey.pem -out wildcard.example.net.key
|
|
|
|
if [ $? -ne 0 ]; then
|
|
echo "処理を中止します"
|
|
exit
|
|
fi
|
|
|
|
secho 3 "=== SSL証明書と秘密鍵を配置"
|
|
sudo cp wildcard.example.net.crt /etc/ssl/private
|
|
sudo cp wildcard.example.net.key /etc/ssl/private
|
|
|
|
echo "2" > $SCRIPTHOME/.setupphase.txt
|
|
|
|
secho 5
|
|
echo "================================================"
|
|
echo " Apacheの設定"
|
|
echo "================================================"
|
|
cd $SCRIPTHOME
|
|
|
|
echo "=== Apacheのインストール"
|
|
sudo apt -y install apache2
|
|
|
|
if [ $? -ne 0 ]; then
|
|
echo "処理を中止します"
|
|
exit
|
|
fi
|
|
|
|
secho 3 "=== サイト設定"
|
|
sudo a2dissite 000-default
|
|
sudo cp apache/*.conf /etc/apache2/sites-available/
|
|
sudo a2ensite example.net gitea kopano test
|
|
[ ! -d /var/www/test ] && sudo mkdir /var/www/test && sudo chown $(whoami):$(whoami) /var/www/test
|
|
|
|
secho 3 "=== モジュールの有効化"
|
|
sudo a2enmod ssl rewrite proxy_http headers http2
|
|
|
|
secho 3 "=== 警告を止める設定"
|
|
echo "ServerName localhost" | sudo tee /etc/apache2/conf-available/fqdn.conf > /dev/null
|
|
sudo a2enconf fqdn
|
|
|
|
secho 3 "=== Apacheの再起動"
|
|
sudo systemctl restart apache2
|
|
|
|
echo "3" > $SCRIPTHOME/.setupphase.txt
|
|
|
|
secho 5
|
|
echo "================================================"
|
|
echo " git接続設定の構成"
|
|
echo "================================================"
|
|
sudo apt -y install ssh
|
|
|
|
if [ $? -ne 0 ]; then
|
|
echo "処理を中止します"
|
|
exit
|
|
fi
|
|
|
|
ssh-keygen -t ed25519 -C "$(whoami) git key" -f ~/.ssh/git-key
|
|
cat <<EOF >> ~/.ssh/config
|
|
host git.example.net
|
|
HostName git.example.net
|
|
User $(whoami)
|
|
IdentityFile ~/.ssh/git-key
|
|
EOF
|
|
|
|
echo "4" > $SCRIPTHOME/.setupphase.txt
|
|
|
|
secho 5
|
|
echo "================================================"
|
|
echo " ユーザーgitの作成"
|
|
echo "================================================"
|
|
sudo useradd -m git
|
|
|
|
if [ $? -ne 0 ]; then
|
|
echo "処理を中止します"
|
|
exit
|
|
fi
|
|
|
|
echo "=== UID/GIDの書き換え"
|
|
sed -i "s/\(- USER_UID=\)[[:digit:]]\+/\1$(id -u git)/" docker/docker-compose.yml
|
|
sed -i "s/\(- USER_GID=\)[[:digit:]]\+/\1$(id -g git)/" docker/docker-compose.yml
|
|
|
|
echo "=== gitの証明書の作成"
|
|
sudo -u git ssh-keygen -t rsa -b 4096 -C "Gitea Host Key" -f /home/git/.ssh/id_rsa
|
|
sudo -u git cp /home/git/.ssh/id_rsa.pub /home/git/.ssh/authorized_keys
|
|
sudo -u git chmod 600 /home/git/.ssh/authorized_keys
|
|
|
|
echo "=== SSHパススルー用のコマンドを生成"
|
|
cat <<"EOF" | sudo tee /usr/local/bin/gitea > /dev/null
|
|
#!/bin/sh
|
|
ssh -p 2222 -o StrictHostKeyChecking=no git@127.0.0.1 "SSH_ORIGINAL_COMMAND=\"$SSH_ORIGINAL_COMMAND\" $0 $@"
|
|
EOF
|
|
sudo chmod +x /usr/local/bin/gitea
|
|
|
|
echo "5" > $SCRIPTHOME/.setupphase.txt
|
|
|
|
secho 5
|
|
echo "================================================"
|
|
echo " コンテナの起動"
|
|
echo "================================================"
|
|
cd $SCRIPTHOME/docker
|
|
|
|
SSLCERTDIR=$SCRIPTHOME/SSL/exampleCA/certs/$(ls -r ../SSL/exampleCA/certs | head -n1)
|
|
|
|
echo "=== 証明書の配置"
|
|
if [ ! -d config/kopano/packages/cert ]; then
|
|
mkdir config/kopano/packages/cert
|
|
fi
|
|
cp $SSLCERTDIR/wildcard.example.net.crt config/kopano/packages/cert/server.crt
|
|
cp $SSLCERTDIR/wildcard.example.net.key config/kopano/packages/cert/server.key
|
|
if [ ! -d config/gitea/cert ]; then
|
|
mkdir config/gitea/cert
|
|
fi
|
|
cp ../SSL/exampleCA/example.net.ca.crt config/gitea/cert/ca.crt
|
|
|
|
secho 3 "=== Kopanoパッケージの配置"
|
|
echo "Kopano Community Edition の core と webapp をダウンロードして"
|
|
echo "$SCRIPTHOME/docker/config/kopano/packagesにコピーしてください。"
|
|
echo " core-XX.X.X.XX.XXXXXXX-Ubuntu_20.04-amd64.tar.gz"
|
|
echo " webapp-X.X.X.XX.XXXXXXX-Ubuntu_20.04-all.tar.gz"
|
|
echo " ※Xはバージョンを表す英数字になっています。"
|
|
echo "https://download.kopano.io/community/"
|
|
read -p "コピーが終わったらEnterキーを押してください。"
|
|
|
|
secho 3 "=== コンテナの起動"
|
|
sudo docker compose up -d --build
|
|
|
|
if [ $? -ne 0 ]; then
|
|
echo "処理を中止します"
|
|
exit
|
|
fi
|
|
|
|
echo "6" > $SCRIPTHOME/.setupphase.txt
|
|
|
|
secho 5
|
|
echo "================================================"
|
|
echo " rvmのインストール"
|
|
echo "================================================"
|
|
cd $SCRIPTHOME
|
|
|
|
sudo apt install gnupg2
|
|
gpg --recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3 7D2BAF1CF37B13E2069D6956105BD0E739499BDB
|
|
\curl -sSL https://get.rvm.io | bash -s stable
|
|
|
|
sed -i '$ a \\n[[ -s "$HOME/.rvm/scripts/rvm" ]] && source "$HOME/.rvm/scripts/rvm" # Load RVM into a shell session *as a function*' ~/.bashrc
|
|
|
|
if [ $(stat -c %s ~/.bash_profile) -eq 200 ]; then rm ~/.bash_profile; fi
|
|
if [ $(stat -c %s ~/.mkshrc) -eq 118 ]; then rm ~/.mkshrc; fi
|
|
if [ $(stat -c %s ~/.zlogin) -eq 118 ]; then rm ~/.zlogin; fi
|
|
if [ $(stat -c %s ~/.zshrc) -eq 118 ]; then rm ~/.zshrc; fi
|
|
|
|
echo "7" > $SCRIPTHOME/.setupphase.txt
|
|
|
|
secho 5
|
|
echo "================================================"
|
|
echo " hostsの設定"
|
|
echo "================================================"
|
|
|
|
./10-hosts.sh
|
|
|
|
echo "8" > $SCRIPTHOME/.setupphase.txt
|
|
|
|
secho 3 "=== セットアップ完了"
|
|
echo "rmvコマンドが正しく動作するように、一度端末を開き直してください"
|
|
exit
|