Deploy-LEMP/deploylemp.sh at master · kenstuddy/Deploy-LEMP · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
#!/bin/bash
if [[ "$EUID" != 0 ]]
then
    echo "Please run this script as root."
    exit
fi
#We can run this script as root, but we do not want to put the username as root
until [[ $username != "" && $username != root ]]; do
    echo "Please enter your username: "
    read -s username
done
#Add repository for PHP 7.x
sudo add-apt-repository ppa:ondrej/php -y
#We used to be able to have sudo LC_ALL=C.UTF-8 add-apt-repository ppa:ondrej/php -y however this syntax is no longer valid in Ubuntu 18.04
export LC_ALL=C.UTF-8
#Add repository for Node.js LTS 10.x
curl -sL https://deb.nodesource.com/setup_10.x | sudo -E bash -
sudo apt-get update && sudo apt-get dist-upgrade -y
sudo ufw allow 80
sudo ufw allow 443
sudo ufw allow 22
sudo apt-get install uptimed nodejs p7zip-full openssh-server nginx apache2-utils mysql-server php7.4 php7.4-curl php7.4-cgi php7.4-gd php-fpm php-mysql php7.4-dom php7.4-mbstring php-zip unzip php7.4-xml php7.4-zip libxslt1.1 php7.4-sqlite3 webp php-imagick -y
sudo mysql_secure_installation
#Done with installing LAMP, now it is time to secure the server
sudo apt-get install fail2ban psad rkhunter chkrootkit -y
sudo groupadd admin
sudo usermod -a -G admin $username
sudo dpkg-statoverride --update --add root admin 4750 /bin/su
if ! grep -lir "tmpfs /run/shm tmpfs defaults,noexec,nosuid 0 0" "/etc/fstab"
then
    sudo su -c "echo 'tmpfs /run/shm tmpfs defaults,noexec,nosuid 0 0' >> /etc/fstab"
fi
sudo find /var/www/html \( -type f -execdir chmod 644 {} \; \) \
                  -o \( -type d -execdir chmod 711 {} \; \)
sudo chown -R www-data:www-data /var/www/html
sudo service nginx restart
sudo ufw enable

#To enable php 7.4
sudo update-alternatives --set php /usr/bin/php7.4
sudo update-alternatives --set phar /usr/bin/phar7.4
sudo update-alternatives --set phar.phar /usr/bin/phar.phar7.4
#To enable php 7.3
#sudo update-alternatives --set php /usr/bin/php7.3
#sudo update-alternatives --set phar /usr/bin/phar7.3
#sudo update-alternatives --set phar.phar /usr/bin/phar.phar7.3
#To enable php 7.2
#sudo update-alternatives --set php /usr/bin/php7.2
#sudo update-alternatives --set phar /usr/bin/phar7.2
#sudo update-alternatives --set phar.phar /usr/bin/phar.phar7.2