LEMPer/lemper.sh

#!/bin/bash

# +-------------------------------------------------------------------------+
# | LEMPer.sh is a Simple LNMP Installer for Ubuntu                         |
# |-------------------------------------------------------------------------+
# | Features    :                                                           |
# |     - Nginx 1.10                                                        |
# |     - PHP 5.6/7.0/7.1/7.2/7.3                                           |
# |     - Zend OpCache 7.0.3                                                |
# |     - Memcached 1.4.14                                                  |
# |     - ionCube Loader                                                    |
# |     - SourceGuardian Loader                                             |
# |     - MariaDB 10 (MySQL drop-in replacement)                            |
# |     - Adminer (PhpMyAdmin replacement)                                  |
# | Min requirement   : GNU/Linux Ubuntu 14.04 or Linux Mint 17             |
# | Last Update       : 02/07/2019                                          |
# | Author            : ESLabs.ID (eslabs.id@gmail.com)                     |
# | Version           : 1.0.0                                               |
# +-------------------------------------------------------------------------+
# | Copyright (c) 2014-2019 ESLabs (https://eslabs.id/lemper)               |
# +-------------------------------------------------------------------------+
# | This source file is subject to the GNU General Public License           |
# | that is bundled with this package in the file LICENSE.md.               |
# |                                                                         |
# | If you did not receive a copy of the license and are unable to          |
# | obtain it through the world-wide-web, please send an email              |
# | to license@eslabs.id so we can send you a copy immediately.             |
# +-------------------------------------------------------------------------+
# | Authors: Edi Septriyanto <eslabs.id@gmail.com>                          |
# +-------------------------------------------------------------------------+

set -e  # Work even if somebody does "sh thisscript.sh".

# Include decorator
if [ "$(type -t run)" != "function" ]; then
    . scripts/helper.sh
fi

# Make sure only root can run this installer script
if [ $(id -u) -ne 0 ]; then
    error "You need to be root to run this script"
    exit 1
fi

# Make sure this script only run on Ubuntu install
if [ ! -f "/etc/lsb-release" ]; then
    warning -e "\nThis installer only work on Ubuntu server..."
    exit 1
else
    # Variables
    arch=$(uname -p)
    IPAddr=$(hostname -i)

    # export lsb-release vars
    . /etc/lsb-release

    MAJOR_RELEASE_NUMBER=$(echo $DISTRIB_RELEASE | awk -F. '{print $1}')

    if [[ "$DISTRIB_ID" == "LinuxMint" ]]; then
        DISTRIB_RELEASE="LM${MAJOR_RELEASE_NUMBER}"
    fi
fi

function create_swap() {
    echo "Enabling 1GiB swap..."

    L_SWAP_FILE="/lemper-swapfile"
    fallocate -l 1G $L_SWAP_FILE && \
    chmod 600 $L_SWAP_FILE && \
    chown root:root $L_SWAP_FILE && \
    mkswap $L_SWAP_FILE && \
    swapon $L_SWAP_FILE
}

function check_swap() {
    echo -e "\nChecking swap..."

    if free | awk '/^Swap:/ {exit !$2}'; then
        swapsize=$(free -m | awk '/^Swap:/ { print $2 }')
        status "Swap size ${swapsize}MiB."
    else
        warning "No swap detected"
        create_swap
        status "Adding swap completed..."
    fi
}

function create_account() {
    if [[ -n $1 ]]; then
        USERNAME="$1"
    else
        USERNAME="lemper" # default account
    fi

    echo -e "\nCreating default LEMPer account..."

    if [[ -z $(getent passwd "${USERNAME}") ]]; then
        PASSWORD=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 12 | head -n 1)
        run useradd -d /home/${USERNAME} -m -s /bin/bash ${USERNAME}
        echo "${USERNAME}:${PASSWORD}" | chpasswd
        run usermod -aG sudo ${USERNAME}

        if [ -d /home/${USERNAME} ]; then
            run mkdir /home/${USERNAME}/webapps
            run chown -hR ${USERNAME}:${USERNAME} /home/${USERNAME}/webapps
        fi

        status "Username ${USERNAME} created."
    else
        warning "Username ${USERNAME} already exists."
    fi
}

# init log
run touch lemper.log

### Main ###
case $1 in
    --install)
        header_msg
        echo -e "\nStarting LEMP stack installation...\nPlease ensure that you're on a fresh machine install!"
        read -t 10 -p "Press [Enter] to continue..." </dev/tty

        ### Clean-up server ###
        if [ -f scripts/cleanup_server.sh ]; then
            . scripts/cleanup_server.sh
        fi

        ### Check swap ###
        check_swap

        ### Create default account ###
        create_account "lemper"

        ### ADD repositories ###
        if [ -f scripts/add_repo.sh ]; then
            . scripts/add_repo.sh
        fi

        ### Nginx installation ###
        if [ -f scripts/install_nginx.sh ]; then
            . scripts/install_nginx.sh
        fi

        ### PHP installation ###
        if [ -f scripts/install_php.sh ]; then
            . scripts/install_php.sh
        fi

        ### Memcached installation ###
        if [ -f scripts/install_memcache.sh ]; then
            . scripts/install_memcache.sh
        fi

        ### MySQL database installation ###
        if [ -f scripts/install_mariadb.sh ]; then
            . scripts/install_mariadb.sh
        fi

        ### Redis database installation ###
        if [ -f scripts/install_redis.sh ]; then
            . scripts/install_redis.sh
        fi

        ### Certbot Let's Encrypt SSL installation ###
        if [ -f scripts/install_letsencrypt.sh ]; then
            . scripts/install_letsencrypt.sh
        fi

        ### Mail server installation ###
        if [ -f scripts/install_mailer.sh ]; then
            . scripts/install_mailer.sh
        fi

        ### Addon-tools installation ###
        if [ -f scripts/install_tools.sh ]; then
            . scripts/install_tools.sh
        fi

        ### Basic server security
        echo -en "Do you want to enable basic server security? [y/n]: "
        read secureServer
        if [[ "${secureServer}" == Y* || "${secureServer}" == y* ]]; then
            if [ -f scripts/secure_server.sh ]; then
                . scripts/secure_server.sh
            fi
        fi

        ### FINAL STEP ###
        # Cleaning up all build dependencies hanging around on production server?
        run apt-get autoremove -y >> lemper.log 2>&1

        status -e "\nLEMPer installation has been completed."

        ### Recap ###
        if [[ ! -z "$PASSWORD" ]]; then
            status -e "\nHere is your default system account information:

        Server IP : ${IPAddr}
        SSH Port  : ${SSHPort}
        Username  : ${USERNAME}
        Password  : ${PASSWORD}

        Access to your Database administration (Adminer):
        http://${IPAddr}:8082/

        Access to your File manager (FileRun):
        http://${IPAddr}:8083/

        Please Save & Keep It Private!
        "
        fi

        echo -e "\nSee the log file (lemper.log) for more information.
        \nNow, you can reboot your server and enjoy it!\n"
    ;;
    --uninstall)
        header_msg
        echo -e "\nAre you sure to remove LEMP stack installation?"
        read -t 10 -p "Press [Enter] to continue..." </dev/tty

        # Remove nginx
        echo -e "\nUninstalling Nginx..."

        if [[ -n $(which nginx) ]]; then
            # Stop Nginx web server process
            run service nginx stop

            # Remove Nginx
            if [ $(dpkg-query -l | grep nginx-common | awk '/nginx-common/ { print $2 }') ]; then
            	echo "Nginx-common package found. Removing..."
                run apt-get --purge remove -y nginx-common >> lemper.log 2>&1
                run add-apt-repository -y --remove ppa:nginx/stable >> lemper.log 2>&1
            elif [ $(dpkg-query -l | grep nginx-custom | awk '/nginx-custom/ { print $2 }') ]; then
            	echo "Nginx-custom package found. Removing..."
                run apt-get --purge remove -y nginx-custom >> lemper.log 2>&1
                run add-apt-repository -y --remove ppa:rtcamp/nginx >> lemper.log 2>&1
                run rm -f /etc/apt/sources.list.d/nginx-*.list
            elif [ $(dpkg-query -l | grep nginx-full | awk '/nginx-full/ { print $2 }') ]; then
            	echo "Nginx-full package found. Removing..."
                run apt-get --purge remove -y nginx-full >> lemper.log 2>&1
                run add-apt-repository -y --remove ppa:nginx/stable >> lemper.log 2>&1
            elif [ $(dpkg-query -l | grep nginx-stable | awk '/nginx-stable/ { print $2 }') ]; then
            	echo "Nginx-stable package found. Removing..."
                run apt-get --purge remove -y nginx-stable >> lemper.log 2>&1
                run add-apt-repository -y --remove ppa:nginx/stable >> lemper.log 2>&1
            else
            	echo "Nginx package not found. Possibly installed from source."

                # Only if nginx package not installed / nginx installed from source
                if [ -f /usr/sbin/nginx ]; then
                    run rm -f /usr/sbin/nginx
                fi

                if [ -f /etc/init.d/nginx ]; then
                    run rm -f /etc/init.d/nginx
                fi

                if [ -f /lib/systemd/system/nginx.service ]; then
                    run rm -f /lib/systemd/system/nginx.service
                fi

                if [ -d /usr/lib/nginx/ ]; then
                    run rm -fr /usr/lib/nginx/
                fi

                if [ -d /etc/nginx/modules-available ]; then
                    run rm -fr /etc/nginx/modules-available
                fi

                if [ -d /etc/nginx/modules-enabled ]; then
                    run rm -fr /etc/nginx/modules-enabled
                fi
            fi

            echo -n "Completely remove Nginx configuration files (this action is not reversible)? [y/n]: "
            read rmngxconf
            if [[ "${rmngxconf}" == Y* || "${rmngxconf}" == y* ]]; then
        	    echo "All your Nginx configuration files deleted permanently..."
        	    run rm -fr /etc/nginx
        	    # Remove nginx-cache
        	    run rm -fr /var/cache/nginx
        	    # Remove nginx html
        	    run rm -fr /usr/share/nginx
            fi

            if [[ -z $(which nginx) ]]; then
                status "Nginx web server removed."
            fi
        else
            warning "Nginx installation not found."
        fi

        # Remove PHP
        echo -e "\nUninstalling PHP & FPM..."

        if [[ -n $(which php-fpm5.6) \
            || -n $(which php-fpm7.0) \
            || -n $(which php-fpm7.1) \
            || -n $(which php-fpm7.2) \
            || -n $(which php-fpm7.3) ]]; then

            # Related PHP packages to be removed
            DEBPackages="fcgiwrap php-* pkg-php-tools spawn-fcgi geoip-database snmp"

            # Stop default PHP FPM process
            if [[ $(ps -ef | grep -v grep | grep php5.6-fpm | grep "php/5.6" | wc -l) > 0 ]]; then
                run service php5.6-fpm stop
                DEBPackages+=" php5.6-*"
            fi

            if [[ $(ps -ef | grep -v grep | grep php7.0-fpm | grep "php/7.0" | wc -l) > 0 ]]; then
                run service php7.0-fpm stop
                DEBPackages+=" php7.0-*"
            fi

            if [[ $(ps -ef | grep -v grep | grep php7.1-fpm | grep "php/7.1" | wc -l) > 0 ]]; then
                run service php7.1-fpm stop
                DEBPackages+=" php7.1-*"
            fi

            if [[ $(ps -ef | grep -v grep | grep php7.2-fpm | grep "php/7.2" | wc -l) > 0 ]]; then
                run service php7.2-fpm stop
                DEBPackages+=" php7.2-*"
            fi

            if [[ $(ps -ef | grep -v grep | grep php7.3-fpm | grep "php/7.3" | wc -l) > 0 ]]; then
                run service php7.3-fpm stop
                DEBPackages+=" php7.3-*"
            fi

            run apt-get remove -y ${DEBPackages} >> lemper.log 2>&1
            run add-apt-repository -y --remove ppa:ondrej/php >> lemper.log 2>&1

            echo -n "Completely remove PHP-FPM configuration files (This action is not reversible)? [y/n]: "
            read rmfpmconf
            if [[ "${rmfpmconf}" == Y* || "${rmfpmconf}" == y* ]]; then
        	    echo "All your PHP-FPM configuration files deleted permanently..."
        	    run rm -fr /etc/php/
        	    # Remove ioncube
                run rm -fr /usr/lib/php/loaders/
            fi

            status "PHP & FPM removed."
        else
            warning "PHP installation not found."
        fi

        # Remove Memcached if exists
        if [[ -n $(which memcached) ]]; then
            echo -e "\nUninstalling Memcached..."

            # Stop Memcached server process
            if [[ $(ps -ef | grep -v grep | grep memcached | wc -l) > 0 ]]; then
                run service memcached stop
            fi

            run apt-get remove -y memcached php-memcached php-memcache >> lemper.log 2>&1
            run rm -f /etc/memcached.conf

            if [[ -z $(which memcached) ]]; then
                status "Memcached server removed."
            fi
        fi

        # Remove Redis if exists
        if [[ -n $(which redis-server) ]]; then
            echo -e "\nUninstalling Redis..."

            # Stop Redis server process
            if [[ $(ps -ef | grep -v grep | grep redis-server | wc -l) > 0 ]]; then
                run service redis-server stop
            fi

            run apt-get remove -y redis-server >> lemper.log 2>&1
            run add-apt-repository -y --remove ppa:chris-lea/redis-server >> lemper.log 2>&1
            run rm -f /etc/redis/redis.conf

            if [[ -z $(which redis-server) ]]; then
                status "Redis server removed."
            fi
        fi

        # Remove MySQL
        echo -e "\nUninstalling MariaDB (MySQL)..."

        if [[ -n $(which mysql) ]]; then
            # Stop MariaDB mysql server process
            run service mysql stop

            run apt-get remove -y mariadb-server libmariadbclient18 >> lemper.log 2>&1

            # Remove repo
            run rm -f /etc/apt/sources.list.d/MariaDB-*.list

            echo -n "Completely remove MariaDB SQL database and configuration files (This action is not reversible)? [y/n]: "
            read rmsqlconf
            if [[ "${rmsqlconf}" == Y* || "${rmsqlconf}" == y* ]]; then
        	    echo "All your SQL database and configuration files deleted permanently."
        	    run rm -fr /etc/mysql
        	    run rm -fr /var/lib/mysql
            fi

            if [[ -z $(which memcached) ]]; then
                status "MariaDB (MySQL) server removed."
            fi
        else
            warning -e "MariaDB installation not found."
        fi

        # Remove default user
        echo -en "\nRemove default LEMPer account? [y/n]: "
        read rmdefaultuser
        if [[ "${rmdefaultuser}" == Y* || "${rmdefaultuser}" == y* ]]; then
            USERNAME="lemper" # default system account for LEMPer
            if [[ ! -z $(getent passwd "${USERNAME}") ]]; then
                run userdel -r ${USERNAME} >> lemper.log 2>&1
                status "Default LEMPer account deleted."
            else
                warning "Default LEMPer account not found."
            fi
        fi

        # Remove unnecessary packages
        echo -e "\nCleaning up unnecessary packages..."
        run apt-get autoremove -y >> lemper.log 2>&1

        status -e "LEMP stack has been removed completely.\n"
    ;;
    --help)
        echo "Please read the README file for more information!"
        exit 0
    ;;
    *)
        fail "Invalid argument: $1"
        exit 1
    ;;
esac

footer_msg