103 lines
4.2 KiB
Bash
103 lines
4.2 KiB
Bash
|
#!/bin/sh
|
||
|
|
|
||
|
|
|
||
|
|
## Title: new_nginx_vhost.sh
|
||
|
|
## Description: Deploy a new nginx vhost in the "Contegix" way, covers SSL vhosts as well
|
||
|
|
## Authors: Bradley McCrorey (initial script, in 2012)
|
||
|
|
## Kevin Dreyer ( update of script, altered deployment method and provided more structure to the deployment, created custom templates for use by script )
|
||
|
|
## Matt Burchett ( nginx modifications )
|
||
|
|
## Version: 0.1
|
||
|
|
##
|
||
|
|
## Usage:
|
||
|
|
# export FQDN=www.domain.com USESSL=Y/N INTERFACE=eth0/eth1; svn cat --username=your.username --no-auth-cache https://jira.com/svn/NSAK/trunk/toolbox/common/bin/new_nginx_vhost.sh | bash
|
||
|
|
|
||
|
|
echo -e "FQDN: $FQDN"
|
||
|
|
echo -e "USESSL: $USESSL"
|
||
|
|
echo -e "NET: $INTERFACE\n"
|
||
|
|
|
||
|
|
|
||
|
|
# Check to see if they set FQDN, if not ask for user input
|
||
|
|
if [ -z "$FQDN" ]; then
|
||
|
|
echo -e "No FQDN variable set. Please enter the FQDN (e.g. www.example.com), followed by [ENTER]:"
|
||
|
|
read FQDN
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Check to see if they set SSL, if not ask for user input
|
||
|
|
if [ -z "$USESSL" ]; then
|
||
|
|
echo -e "No SSL variable set. Do you want an SSL enabled vhost? Please enter Y or N, followed by [ENTER]:"
|
||
|
|
read USESSL
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Check to see if they set an interface, if not ask for user input
|
||
|
|
if [ -z "$INTERFACE" ]; then
|
||
|
|
echo -e "No interface set. Please enter the interface name (e.g. eth0, eth1, eth1:3), followed by [ENTER]:"
|
||
|
|
read INTERFACE
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Strip the FQDN down to its basic parts
|
||
|
|
set -- $(echo $FQDN |awk -F\. '{print $1,$2,$3}')
|
||
|
|
HOST_NAME=$1
|
||
|
|
DOMAIN_NAME="$2.$3"
|
||
|
|
|
||
|
|
|
||
|
|
# Extract the IP address out of ifconfig.
|
||
|
|
IPADDR=$(ifconfig $INTERFACE | grep 'inet addr:'| grep -v '127.0.0.1' | cut -d: -f2 | awk '{ print $1}' |tr -d '\n')
|
||
|
|
|
||
|
|
# Just in case, create directory structure
|
||
|
|
mkdir -p /etc/nginx/vhosts.d/includes/
|
||
|
|
|
||
|
|
# Do the thang.
|
||
|
|
cd /etc/nginx/vhosts.d
|
||
|
|
|
||
|
|
# Configure port 80 loader
|
||
|
|
cat /etc/nginx/templates.d/vhosts.d/vhost-template.conf | \
|
||
|
|
sed "s/IP_ADDRESS/${IPADDR}/g;s/DOMAIN_NAME/${DOMAIN_NAME}/g;s/HOST_NAME/${HOST_NAME}/g" \
|
||
|
|
> /etc/nginx/vhosts.d/${HOST_NAME}.${DOMAIN_NAME}.conf
|
||
|
|
|
||
|
|
# Configure port 443 loader
|
||
|
|
cat /etc/nginx/templates.d/vhosts.d/vhost-template-ssl.conf | \
|
||
|
|
sed "s/IP_ADDRESS/${IPADDR}/g;s/DOMAIN_NAME/${DOMAIN_NAME}/g;s/HOST_NAME/${HOST_NAME}/g" \
|
||
|
|
> /etc/nginx/vhosts.d/${HOST_NAME}.${DOMAIN_NAME}-ssl.conf
|
||
|
|
|
||
|
|
# Configure Main vhost
|
||
|
|
cat /etc/nginx/templates.d/vhosts.d/includes/vhost-template.conf | \
|
||
|
|
sed "s/IP_ADDRESS/${IPADDR}/g;s/DOMAIN_NAME/${DOMAIN_NAME}/g;s/HOST_NAME/${HOST_NAME}/g" \
|
||
|
|
> /etc/nginx/vhosts.d/includes/${HOST_NAME}.${DOMAIN_NAME}.conf
|
||
|
|
|
||
|
|
|
||
|
|
# create the dir structure under /var/www
|
||
|
|
mkdir -p /var/www/domains/${DOMAIN_NAME}/${HOST_NAME}/{htdocs,logs,cgi-bin,ssl}
|
||
|
|
|
||
|
|
if [ "$USESSL" = "Y" ] || [ "$USESSL" = "y" ] || [ "$USESSL" = "yes" ] || [ "$USESSL" = "Yes" ] || [ "$USESSL" = "YES" ]; then
|
||
|
|
export USESSL="Y"
|
||
|
|
echo -e "**************WITHSSL****************** \n"
|
||
|
|
echo -e "The basic vhost is configured, you will still need to create/upload a SSL cert, then fix the appropriate lines in \n"
|
||
|
|
echo -e "/etc/nginx/vhosts.d/${HOST_NAME}.${DOMAIN_NAME}-ssl.conf \n "
|
||
|
|
echo -e "The nginx -t that will run in a moment will likely fail until this is completed.\n \n"
|
||
|
|
else
|
||
|
|
echo -e "--------------NOSSL------------------- \n"
|
||
|
|
echo -e "SSL will not be in use. Disabling the SSL config file.\n"
|
||
|
|
echo -e "The port 443 loader has been renamed to *.OFF, simply rename to *.conf and kick nginx to re-enable\n"
|
||
|
|
mv /etc/nginx/vhosts.d/${HOST_NAME}.${DOMAIN_NAME}-ssl.conf{,.OFF}
|
||
|
|
fi
|
||
|
|
|
||
|
|
|
||
|
|
# Notify user what is expected now
|
||
|
|
|
||
|
|
if [ "$USESSL" = "Y" ]; then
|
||
|
|
echo -e "**************WITHSSL****************** \n"
|
||
|
|
echo -e "Now we will test the nginx configuration as-is. If you are using SSL but don't have the SSL certs in place yet, \n"
|
||
|
|
echo -e "This test will likely fail citing that as the reason. You can solve that by creating/uploading the SSL certs to the proper spot\n"
|
||
|
|
echo -e "Then ensuring the ssl vhost config points to those certs, then finally you can run the command again to test the config. \n"
|
||
|
|
echo -e "/usr/sbin/nginx -t \n"
|
||
|
|
else
|
||
|
|
echo -e "--------------NOSSL-------------------- \n"
|
||
|
|
echo "Now we will test the nginx configuration as-is. Since you are not utilizing SSL, it should result with no errors.\n"
|
||
|
|
fi
|
||
|
|
|
||
|
|
# check the nginx config
|
||
|
|
/usr/sbin/nginx -t 2>&1 && echo -e "\n nginx config looks good. restart nginx when ready.\n"
|
||
|
|
|
||
|
|
|
||
|
|
## EOF
|