provision webserver working

README.md

@@ -4,6 +4,7 @@ TODO
 
 ## TODO
 
+* implement option to not have remote url include hostname (i.e., bare domain)
 * convert scripts to use ssh pipes/bash here documents.
   see [ssh pipes](https://stackoverflow.com/a/4412324), [Bash Here Document](https://stackoverflow.com/a/4412338)
 * Script to export database from production database

config-example

@@ -25,6 +25,9 @@ export _wp_plugins_active="elementor wp-mail-smtp gdpr-cookie-compliance regener
 
 export _remote_host="www"
 export _domain="isnet.uk"
+# set to true to ude bare domain
+export _bare_domain='false'
+_lets_encrypt_email="letsencrpt.wp@rayelliott.dev"
 
 export _docker_user="ray"
 export _docker_base_dir="/var/docker"

production/export-data.sh

@@ -0,0 +1,5 @@
+#!/bin/sh
+
+set -e
+
+

production/webserver-setup.sh

@@ -1,11 +1,17 @@
 #!/bin/sh
 
+set -e
+
 # TODO basic error checking
 # TODO verbosity
 # TODO hardening
 
-_lets_encrypt_email="wptest@isnet.uk"
+export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-_server_base_url="wptest.isnet.uk"
+
+_server_base_url="$_domain"
+
+echo "Provisioning: $_server_base_url$ - (whoami)@$(hostname)"
+
 _docker_container_config_dir="/var/docker"
 _docker_compose_version="1.25.4"
 
@@ -18,6 +24,7 @@ cp /root/.ssh/authorized_keys /home/ray/.ssh/
 chown ray: /home/ray/.ssh/authorized_keys
 
 apt-get update
+apt-get upgrade --yes
 apt-get install \
     apt-transport-https \
     ca-certificates \
@@ -30,9 +37,9 @@ apt-get install \
 ufw allow ssh
 ufw allow http
 ufw allow https
-ufw enable
+ufw --force enable
 
-curl -fsSL https://download.docker.com/linux/debian/gpg | sudo apt-key add -
+curl -fsSL https://download.docker.com/linux/debian/gpg | apt-key add -
 add-apt-repository \
   "deb [arch=amd64] https://download.docker.com/linux/debian \
   $(lsb_release -cs) \
@@ -154,5 +161,14 @@ networks:
 " >> docker-compose.yml
 docker-compose up -d
 
-echo "VISIT PORTAINER URL NOW TO SET INITIAL LOGIN:" # or see if can set from script
+echo "-------------------------------------------------------------------------"
+echo ""
+echo "VISIT PORTAINER URL NOW TO SET INITIAL LOGIN:"
 echo "  https://$_portainer_url"
+echo ""
+echo "Traefik URl:  https://$_server_base_url"
+echo ""
+echo "WARNING: May get insecure SSL errors"
+echo "         this is temporary while certs are in process of being issued"
+
+rm /tmp/setup.sh

webserver-provision.sh

@@ -0,0 +1,9 @@
+#!/bin/sh
+
+. ./config
+
+_ssh_url="root@$_remote_host.$_domain"
+
+# ssh "$_remote_host.$_domain" '/bin/bash -s' < ./production/webserver-setup.sh
+cat config ./production/webserver-setup.sh | ssh "$_ssh_url" "cat >/tmp/setup.sh"
+ssh $_ssh_url '/bin/bash /tmp/setup.sh'