#!/bin/sh

sudo apt upgrade
sudo apt install -y tmux ufw certbot

sudo ufw allow ssh
sudo ufw allow http
sudo ufw allow https
sudo ufw allow 7080
sudo ufw enable

wget --no-check-certificate https://raw.githubusercontent.com/litespeedtech/ols1clk/master/ols1clk.sh && sudo bash ols1clk.sh -w

ln -s /usr/local/lsws/wordpress
sudo rm -Rf /usr/local/lsws/wordpress/*
mkdir site-archive

sudo certbot certonly --webroot --webroot-path /usr/local/lsws/wordpress

sudo /usr/local/lsws/admin/misc/admpass.sh

echo "NOW VISIT <IP>:7080"
echo "  login and set SSL"
echo "    Listeners > SSL > SSL Private Key & Certificate"
echo "    Private Key File: /etc/letsencrypt/live/YOUR_DOMAIN/privkey.pem"
echo "    Private Key File: /etc/letsencrypt/live/YOUR_DOMAIN/privkey.pem"