added old deployment scripts for reference
This commit is contained in:
156
_archive/deploy.sh
Executable file
156
_archive/deploy.sh
Executable file
@@ -0,0 +1,156 @@
|
||||
#!/bin/bash
|
||||
|
||||
# ==============================================================================
|
||||
# NGINX CONFIG & SSL DEPLOYMENT SCRIPT (v10)
|
||||
#
|
||||
# This script handles the "chicken-and-egg" problem of deploying a new site
|
||||
# with SSL. It first deploys a temporary HTTP-only version of the site by
|
||||
# commenting out the ENTIRE SSL server block, runs Certbot to acquire the
|
||||
# certificate (which then automatically re-enables HTTPS), and reloads Nginx.
|
||||
#
|
||||
# INSTRUCTIONS:
|
||||
# 1. Ensure Certbot is installed on the remote server.
|
||||
# (e.g., `sudo apt install certbot python3-certbot-nginx`)
|
||||
# 2. Make the script executable: chmod +x <script_name>.sh
|
||||
# 3. Run the script: ./<script_name>.sh
|
||||
# ==============================================================================
|
||||
|
||||
# --- Configuration ---
|
||||
REMOTE_USER="ubuntu" # The user you SSH in with (e.g., ubuntu, ec2-user)
|
||||
REMOTE_HOST="3.9.182.122" # The IP address or domain of your server
|
||||
CERTBOT_EMAIL="azeem.fidahusein@gmail.com" # Email for Let's Encrypt account
|
||||
|
||||
# --- File & Path Definitions ---
|
||||
KEY_FILE="~/repos/azeem-macbookair.pem"
|
||||
SOURCE_NGINX_CONF="nginx.conf"
|
||||
SOURCE_SITES_DIR="sites-available"
|
||||
|
||||
# Destination paths on the remote server
|
||||
DEST_NGINX_PATH="/etc/nginx/"
|
||||
DEST_SITES_PATH="/etc/nginx/sites-available/"
|
||||
|
||||
# Temporary directory on the remote server
|
||||
REMOTE_TEMP_DIR="nginx_deploy_temp"
|
||||
|
||||
# --- Script Logic ---
|
||||
|
||||
echo "🚀 Starting NGINX & SSL deployment to $REMOTE_HOST..."
|
||||
echo "--------------------------------------------------------"
|
||||
|
||||
# Expand the tilde (~) in the key file path to an absolute path.
|
||||
EVAL_KEY_FILE=$(eval echo "$KEY_FILE")
|
||||
|
||||
# --- Pre-flight Checks ---
|
||||
if [ ! -f "$EVAL_KEY_FILE" ]; then
|
||||
echo "❌ ERROR: SSH key not found at $EVAL_KEY_FILE"
|
||||
exit 1
|
||||
fi
|
||||
if [ ! -f "$SOURCE_NGINX_CONF" ]; then
|
||||
echo "❌ ERROR: Source file '$SOURCE_NGINX_CONF' not found."
|
||||
exit 1
|
||||
fi
|
||||
if [ ! -d "$SOURCE_SITES_DIR" ]; then
|
||||
echo "❌ ERROR: Source directory '$SOURCE_SITES_DIR' not found."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# --- Local Operations ---
|
||||
CONFIG_FILES=$(ls "$SOURCE_SITES_DIR" | tr '\n' ' ')
|
||||
echo "-> Found site config files to process: $CONFIG_FILES"
|
||||
|
||||
echo "-> Scanning local 'sites-available' for unique domain names..."
|
||||
ALL_DOMAINS=$(grep -h -r "server_name" "$SOURCE_SITES_DIR" | sed 's/.*server_name\s*//' | sed 's/;//' | xargs -n1 | sort -u | tr '\n' ' ' | sed 's/ *$//')
|
||||
|
||||
if [ -z "$ALL_DOMAINS" ]; then
|
||||
echo "⚠️ WARNING: No domains found. Skipping Certbot step later."
|
||||
else
|
||||
echo " ✅ Found domains: $ALL_DOMAINS"
|
||||
fi
|
||||
echo
|
||||
|
||||
# --- Remote Operations ---
|
||||
|
||||
# Step 1: Transfer files to a temporary directory
|
||||
echo "-> Creating temporary directory and transferring files..."
|
||||
ssh -i "$EVAL_KEY_FILE" "${REMOTE_USER}@${REMOTE_HOST}" "mkdir -p $REMOTE_TEMP_DIR"
|
||||
scp -i "$EVAL_KEY_FILE" -r "$SOURCE_NGINX_CONF" "$SOURCE_SITES_DIR" "${REMOTE_USER}@${REMOTE_HOST}:${REMOTE_TEMP_DIR}/"
|
||||
if [ $? -ne 0 ]; then
|
||||
echo "❌ ERROR: File transfer failed. Aborting."
|
||||
exit 1
|
||||
fi
|
||||
echo " ✅ All files successfully transferred to temporary location."
|
||||
echo
|
||||
|
||||
# Step 2: Move files, TEMPORARILY disable SSL blocks, enable sites, and reload Nginx
|
||||
echo "- Moving files and enabling HTTP-only sites for Certbot validation..."
|
||||
ssh -i "$EVAL_KEY_FILE" "${REMOTE_USER}@${REMOTE_HOST}" << EOF
|
||||
# Move the main config file and site configs
|
||||
sudo mv "$REMOTE_TEMP_DIR/nginx.conf" "${DEST_NGINX_PATH}nginx.conf"
|
||||
sudo mv "$REMOTE_TEMP_DIR/sites-available/"* "$DEST_SITES_PATH"
|
||||
|
||||
# --- NEW: Temporarily disable the entire SSL server block ---
|
||||
echo " -> Temporarily commenting out SSL server blocks in configs..."
|
||||
for CONFIG_FILE in $CONFIG_FILES
|
||||
do
|
||||
# Use awk to comment out the entire server block containing 'listen 443'
|
||||
sudo awk '/server\s*{/{f=1} f && /listen\s+443/{p=1} f{b=b\$0"\\n"} /\s*}/ && f{f=0; if(!p){printf "%s", b} p=0; b=""}' "$DEST_SITES_PATH\$CONFIG_FILE" > "\$CONFIG_FILE.tmp" && sudo mv "\$CONFIG_FILE.tmp" "$DEST_SITES_PATH\$CONFIG_FILE"
|
||||
done
|
||||
# --- END NEW ---
|
||||
|
||||
# Enable sites by creating symbolic links
|
||||
echo " -> Checking and creating symbolic links in sites-enabled..."
|
||||
for CONFIG_FILE in $CONFIG_FILES
|
||||
do
|
||||
SOURCE_FILE="/etc/nginx/sites-available/\$CONFIG_FILE"
|
||||
LINK_FILE="/etc/nginx/sites-enabled/\$CONFIG_FILE"
|
||||
if [ ! -L "\$LINK_FILE" ]; then
|
||||
if [ -f "\$SOURCE_FILE" ]; then
|
||||
echo " -> Creating link for \$CONFIG_FILE..."
|
||||
sudo ln -s "\$SOURCE_FILE" "\$LINK_FILE"
|
||||
fi
|
||||
else
|
||||
echo " -> Link for \$CONFIG_FILE already exists."
|
||||
fi
|
||||
done
|
||||
|
||||
echo " -> Verifying and reloading Nginx for initial validation..."
|
||||
sudo nginx -t && sudo systemctl reload nginx
|
||||
EOF
|
||||
|
||||
if [ $? -ne 0 ]; then
|
||||
echo "⚠️ WARNING: An error occurred on the remote server during initial setup."
|
||||
echo "This might happen if your base HTTP config is invalid. Please check manually."
|
||||
exit 1
|
||||
fi
|
||||
echo " ✅ Initial Nginx config loaded successfully."
|
||||
echo
|
||||
|
||||
# Step 3: Run Certbot to acquire certificates and update configs to HTTPS
|
||||
if [ -n "$ALL_DOMAINS" ]; then
|
||||
read -p "Run Certbot for the discovered domains? (y/n) " -n 1 -r
|
||||
echo
|
||||
if [[ $REPLY =~ ^[Yy]$ ]]; then
|
||||
CERTBOT_DOMAINS=$(echo "$ALL_DOMAINS" | sed 's/ / -d /g' | sed 's/^/-d /')
|
||||
|
||||
echo "- Running Certbot to acquire certificates and enable SSL..."
|
||||
echo " Certbot will now automatically update your Nginx configs for HTTPS."
|
||||
|
||||
ssh -t -i "$EVAL_KEY_FILE" "${REMOTE_USER}@${REMOTE_HOST}" \
|
||||
"sudo certbot --nginx --non-interactive --agree-tos --email $CERTBOT_EMAIL --redirect --expand $CERTBOT_DOMAINS"
|
||||
|
||||
if [ $? -eq 0 ]; then
|
||||
echo " ✅ Certbot process completed successfully."
|
||||
else
|
||||
echo "⚠️ WARNING: Certbot process finished with errors. Please check the logs on the server."
|
||||
fi
|
||||
fi
|
||||
else
|
||||
echo "-> Skipping Certbot step as no domains were found."
|
||||
fi
|
||||
|
||||
# Final cleanup
|
||||
ssh -i "$EVAL_KEY_FILE" "${REMOTE_USER}@${REMOTE_HOST}" "rm -rf $REMOTE_TEMP_DIR"
|
||||
|
||||
# --- Completion ---
|
||||
echo "--------------------------------------------------------"
|
||||
echo "🎉 Deployment complete!"
|
||||
Reference in New Issue
Block a user