freedombone-app-ghost 20KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # Ghost blog
  12. # Only works with nodejs version ^6.9.0
  13. #
  14. # License
  15. # =======
  16. #
  17. # Copyright (C) 2016-2017 Bob Mottram <bob@freedombone.net>
  18. #
  19. # This program is free software: you can redistribute it and/or modify
  20. # it under the terms of the GNU Affero General Public License as published by
  21. # the Free Software Foundation, either version 3 of the License, or
  22. # (at your option) any later version.
  23. #
  24. # This program is distributed in the hope that it will be useful,
  25. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  26. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  27. # GNU Affero General Public License for more details.
  28. #
  29. # You should have received a copy of the GNU Affero General Public License
  30. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  31. VARIANTS="full full-vim writer"
  32. IN_DEFAULT_INSTALL=0
  33. SHOW_ON_ABOUT=1
  34. GHOST_DOMAIN_NAME=
  35. GHOST_CODE=
  36. GHOST_ONION_PORT=8104
  37. GHOST_PORT=2368
  38. ghost_variables=(GHOST_DOMAIN_NAME
  39. GHOST_CODE
  40. GHOST_ADMIN_PASSWORD
  41. ONION_ONLY
  42. DDNS_PROVIDER
  43. MY_USERNAME)
  44. function ghost_bust {
  45. # kill the started ghost process
  46. kill_pid=$(ps aux | grep "ghost run" | awk -F ' ' '{print $2}' | head -n 1)
  47. kill $kill_pid
  48. }
  49. function logging_on_ghost {
  50. echo -n ''
  51. }
  52. function logging_off_ghost {
  53. echo -n ''
  54. }
  55. function ghost_replace_jquery {
  56. curr_domain="https://$GHOST_DOMAIN_NAME"
  57. if [[ "$ONION_ONLY" != 'no' ]]; then
  58. curr_domain="http://$GHOST_ONION_HOSTNAME"
  59. fi
  60. sed -i "s|src=\"https://code.jquery.com/jquery-.*|src=\"$curr_domain/jquery-${jquery_version}.js\"|g" current/content/themes/casper/default.hbs
  61. sed -i "s|src=\"https://code.jquery.com/jquery-.*|src=\"$curr_domain/jquery-${jquery_version}.js\"></script>|g" current/node_modules/gscan/app/tpl/layouts/default.hbs
  62. sed -i "s|http://code.jquery.com/jquery.js|$curr_domain/jquery-${jquery_version}.js|g" current/node_modules/jsdom/README.md
  63. sed -i "s|https://code.jquery.com/jquery.js|$curr_domain/jquery-${jquery_version}.js|g" current/node_modules/jsdom/README.md
  64. cd /var/www/${GHOST_DOMAIN_NAME}/htdocs/current
  65. find ./ -type f -exec sed -i -e 's|https://code.jquery.com|$curr_domain|g' {} \;
  66. find ./ -type f -exec sed -i -e 's|http://code.jquery.com|$curr_domain|g' {} \;
  67. }
  68. function ghost_rss_button {
  69. # remove feedly -aaargh!
  70. sed -i 's|http://cloud.feedly.com/#subscription/feed/{{@blog.url}}/rss/|{{@blog.url}}/rss/|g' /var/www/$GHOST_DOMAIN_NAME/htdocs/current/content/themes/casper/partials/site-nav.hbs
  71. sed -i 's|http://cloud.feedly.com/#subscription/feed/{{url absolute="true"}}/rss/|{{url absolute="true"}}rss/|g' /var/www/$GHOST_DOMAIN_NAME/htdocs/current/content/themes/casper/author.hbs
  72. }
  73. function ghost_remove_offsite_links {
  74. curr_domain="$GHOST_DOMAIN_NAME"
  75. if [[ "$ONION_ONLY" != 'no' ]]; then
  76. curr_domain="$GHOST_ONION_HOSTNAME"
  77. fi
  78. ghost_rss_button
  79. # remove google font links
  80. cd /var/www/$GHOST_DOMAIN_NAME/htdocs/current
  81. find ./ -type f -exec sed -i -e 's/fonts.googleapis.com/$curr_domain/g' {} \;
  82. # copy jquery locally
  83. previous_jquery_version='1.12.0'
  84. jquery_version='1.12.4'
  85. if [ ! -f /var/www/$GHOST_DOMAIN_NAME/htdocs/jquery-${jquery_version}.js ]; then
  86. cd /var/www/$GHOST_DOMAIN_NAME/htdocs
  87. wget https://code.jquery.com/jquery-${jquery_version}.js
  88. jquery_hash=$(sha256sum jquery-${jquery_version}.js | awk -F ' ' '{print $1}')
  89. if [[ "$jquery_hash" != '430f36f9b5f21aae8cc9dca6a81c4d3d84da5175eaedcf2fdc2c226302cb3575' ]]; then
  90. echo $'Unexpected jquery hash value'
  91. exit 258442
  92. fi
  93. fi
  94. ghost_replace_jquery
  95. previous_jquery_version='1.11.3'
  96. ghost_replace_jquery
  97. }
  98. function ghost_replace_proprietary_services {
  99. replace_file=$1
  100. sed -i 's|Twitter Profile|GNU Social Profile|g' $replace_file
  101. sed -i 's|Twitter profile|GNU Social Profile|g' $replace_file
  102. sed -i 's|Twitter Username|GNU Social Username|g' $replace_file
  103. sed -i 's|twitter.com|quitter.se|g' $replace_file
  104. sed -i 's|Facebook Page|Hubzilla Channel|g' $replace_file
  105. sed -i 's|Facebook Profile|Hubzilla Channel|g' $replace_file
  106. sed -i 's|Facebook profile|Hubzilla Channel|g' $replace_file
  107. sed -i 's|www.facebook.com/username|hubzilladomain/username|g' $replace_file
  108. sed -i 's|www.facebook.com/ghost|hubzilladomain/username|g' $replace_file
  109. sed -i 's|www.facebook.com/testuser|hubzilladomain/username|g' $replace_file
  110. sed -i 's|www.facebook.com/testing|hubzilladomain/username|g' $replace_file
  111. sed -i 's|www.facebook.com/test|hubzilladomain/username|g' $replace_file
  112. sed -i 's|www.facebook.com/yourUsername|hubzilladomain/username|g' $replace_file
  113. sed -i 's|www.facebook.com/yourPage|hubzilladomain/username|g' $replace_file
  114. sed -i 's|Facebook Username|Hubzilla Channel|g' $replace_file
  115. sed -i 's|www.facebook.com|hubzilladomain|g' $replace_file
  116. sed -i 's|facebook value|hubzilla value|g' $replace_file
  117. sed -i '/<section class="share">/,/<\/section>/d' $replace_file
  118. }
  119. function ghost_replace_services {
  120. ghost_replace_proprietary_services /var/www/${GHOST_DOMAIN_NAME}/htdocs/content/themes/casper/post.hbs
  121. }
  122. function remove_user_ghost {
  123. remove_username="$1"
  124. }
  125. function add_user_ghost {
  126. if [[ $(app_is_installed ghost) == "0" ]]; then
  127. echo '0'
  128. return
  129. fi
  130. new_username="$1"
  131. new_user_password="$2"
  132. echo '0'
  133. }
  134. function install_interactive_ghost {
  135. if [ ! $ONION_ONLY ]; then
  136. ONION_ONLY='no'
  137. fi
  138. if [[ $ONION_ONLY != "no" ]]; then
  139. GHOST_DOMAIN_NAME='ghost.local'
  140. write_config_param "GHOST_DOMAIN_NAME" "$GHOST_DOMAIN_NAME"
  141. else
  142. function_check interactive_site_details
  143. interactive_site_details "ghost" "GHOST_DOMAIN_NAME" "GHOST_CODE"
  144. fi
  145. APP_INSTALLED=1
  146. }
  147. function change_password_ghost {
  148. GHOST_USERNAME="$1"
  149. GHOST_PASSWORD="$2"
  150. if [ ${#GHOST_PASSWORD} -lt 8 ]; then
  151. echo $'Ghost password is too short'
  152. return
  153. fi
  154. #${PROJECT_NAME}-pass -u $GHOST_USERNAME -a ghost -p "$GHOST_PASSWORD"
  155. }
  156. function reconfigure_ghost {
  157. echo -n ''
  158. }
  159. function upgrade_ghost {
  160. if [ ! -d /var/www/$GHOST_DOMAIN_NAME/htdocs ]; then
  161. return
  162. fi
  163. systemctl stop ghost
  164. cd /var/www/$GHOST_DOMAIN_NAME/htdocs
  165. npm i -g ghost-cli
  166. /usr/local/bin/ghost update
  167. ghost_bust
  168. ghost_replace_services
  169. ghost_remove_offsite_links
  170. chown -R ghost: /var/www/${GHOST_DOMAIN_NAME}/htdocs
  171. systemctl restart ghost
  172. }
  173. function backup_local_ghost {
  174. GHOST_DOMAIN_NAME='ghost.local'
  175. if grep -q "ghost domain" $COMPLETION_FILE; then
  176. GHOST_DOMAIN_NAME=$(get_completion_param "ghost domain")
  177. fi
  178. ghost_path=/var/www/${GHOST_DOMAIN_NAME}/htdocs/content
  179. if [ -d $ghost_path ]; then
  180. suspend_site ${GHOST_DOMAIN_NAME}
  181. systemctl stop ghost
  182. backup_directory_to_usb $ghost_path ghostcontent
  183. systemctl start ghost
  184. restart_site
  185. fi
  186. }
  187. function restore_local_ghost {
  188. GHOST_DOMAIN_NAME='ghost.local'
  189. if grep -q "ghost domain" $COMPLETION_FILE; then
  190. GHOST_DOMAIN_NAME=$(get_completion_param "ghost domain")
  191. fi
  192. if [ $GHOST_DOMAIN_NAME ]; then
  193. suspend_site ${GHOST_DOMAIN_NAME}
  194. systemctl stop ghost
  195. temp_restore_dir=/root/tempghostcontent
  196. function_check restore_directory_from_usb
  197. restore_directory_from_usb $temp_restore_dir ghostcontent
  198. if [ -d $temp_restore_dir ]; then
  199. cp -r $temp_restore_dir/var/www/$GHOST_DOMAIN_NAME/htdocs/content/* /var/www/$GHOST_DOMAIN_NAME/htdocs/content/
  200. chown -R ghost:ghost /var/www/$GHOST_DOMAIN_NAME/htdocs/content
  201. rm -rf $temp_restore_dir
  202. fi
  203. systemctl start ghost
  204. restart_site
  205. fi
  206. }
  207. function backup_remote_ghost {
  208. GHOST_DOMAIN_NAME='ghost.local'
  209. if grep -q "ghost domain" $COMPLETION_FILE; then
  210. GHOST_DOMAIN_NAME=$(get_completion_param "ghost domain")
  211. fi
  212. temp_backup_dir=/var/www/${GHOST_DOMAIN_NAME}/htdocs/content
  213. if [ -d $temp_backup_dir ]; then
  214. suspend_site ${GHOST_DOMAIN_NAME}
  215. backup_directory_to_friend $temp_backup_dir ghostcontent
  216. restart_site
  217. else
  218. echo $"Ghost domain specified but not found in /var/www/${GHOST_DOMAIN_NAME}"
  219. exit 2578
  220. fi
  221. }
  222. function restore_remote_ghost {
  223. GHOST_DOMAIN_NAME='ghost.local'
  224. if grep -q "ghost domain" $COMPLETION_FILE; then
  225. GHOST_DOMAIN_NAME=$(get_completion_param "ghost domain")
  226. fi
  227. suspend_site ${GHOST_DOMAIN_NAME}
  228. systemctl stop ghost
  229. temp_restore_dir=/root/tempghostcontent
  230. function_check restore_directory_from_friend
  231. restore_directory_from_friend $temp_restore_dir ghostcontent
  232. if [ -d $temp_restore_dir ]; then
  233. cp -r $temp_restore_dir/var/www/$GHOST_DOMAIN_NAME/htdocs/content/* /var/www/$GHOST_DOMAIN_NAME/htdocs/content/
  234. chown -R ghost: /var/www/$GHOST_DOMAIN_NAME/htdocs
  235. rm -rf $temp_restore_dir
  236. fi
  237. systemctl start ghost
  238. restart_site
  239. }
  240. function remove_ghost {
  241. if [ ${#GHOST_DOMAIN_NAME} -eq 0 ]; then
  242. return
  243. fi
  244. systemctl stop ghost
  245. systemctl disable ghost
  246. rm /etc/systemd/system/ghost.service
  247. systemctl daemon-reload
  248. function_check remove_nodejs
  249. remove_nodejs ghost
  250. read_config_param "GHOST_DOMAIN_NAME"
  251. nginx_dissite $GHOST_DOMAIN_NAME
  252. remove_certs ${GHOST_DOMAIN_NAME}
  253. if [ -f /etc/nginx/sites-available/$GHOST_DOMAIN_NAME ]; then
  254. rm -f /etc/nginx/sites-available/$GHOST_DOMAIN_NAME
  255. fi
  256. if [ -d /var/www/$GHOST_DOMAIN_NAME ]; then
  257. rm -rf /var/www/$GHOST_DOMAIN_NAME
  258. fi
  259. remove_config_param GHOST_DOMAIN_NAME
  260. remove_config_param GHOST_CODE
  261. function_check remove_onion_service
  262. remove_onion_service ghost ${GHOST_ONION_PORT}
  263. remove_completion_param "install_ghost"
  264. sed -i '/Ghost/d' $COMPLETION_FILE
  265. sed -i '/ghost/d' $COMPLETION_FILE
  266. groupdel -f ghost
  267. userdel -r ghost
  268. function_check remove_ddns_domain
  269. remove_ddns_domain $GHOST_DOMAIN_NAME
  270. }
  271. function install_ghost {
  272. if [ ! $ONION_ONLY ]; then
  273. ONION_ONLY='no'
  274. fi
  275. if [ ! $GHOST_DOMAIN_NAME ]; then
  276. echo $'The ghost domain name was not specified'
  277. exit 5062
  278. fi
  279. # for the avatar changing command
  280. apt-get -yq install unzip wget
  281. if [ ! -d /var/www/$GHOST_DOMAIN_NAME/htdocs ]; then
  282. mkdir -p /var/www/$GHOST_DOMAIN_NAME/htdocs
  283. fi
  284. cd /var/www/$GHOST_DOMAIN_NAME/htdocs
  285. function_check install_nodejs
  286. install_nodejs ghost
  287. # Some dependencies of ghost
  288. npm install -g jison@0.4.13 --save
  289. npm install moment-timezone@0.5.13
  290. npm install express@4.15.3
  291. npm install lodash@4.17.4
  292. npm install uuid@3.0.1
  293. npm install bluebird@3.5.0
  294. npm install chalk@1.1.3
  295. npm install intl-messageformat@1.3.0
  296. npm install validator@7.0.0
  297. npm install express-hbs@1.0.4
  298. npm install glob@7.1.2
  299. npm install unidecode@0.1.8
  300. npm install csv-parser@1.11.0
  301. npm install archiver@1.3.0
  302. npm install fs-extra@3.0.1
  303. npm install extract-zip-fork@1.5.1
  304. npm install moment@2.18.1
  305. npm install nodemailer@4.0.1
  306. npm install html-to-text@3.3.0
  307. npm install gscan@1.1.0
  308. npm install body-parser@1.17.2
  309. npm install compression@1.6.2
  310. npm install morgan@1.8.2
  311. npm install semver@5.3.0
  312. npm install path-match@1.2.4
  313. npm install downsize@0.0.8
  314. npm install rss@1.2.2
  315. npm install cheerio@1.0.0-rc.1
  316. npm install passport@0.3.2
  317. npm install xml@1.0.1
  318. npm install multer@1.3.0
  319. npm install oauth2orize@1.8.0
  320. npm install connect-slashes@1.3.1
  321. npm install cors@2.8.3
  322. npm install netjet@1.1.3
  323. npm install jsonpath@0.2.11
  324. npm install image-size@0.5.4
  325. npm install passport-oauth2-client-password@0.1.2
  326. npm install passport-http-bearer@1.0.1
  327. npm install amperize@0.3.4
  328. npm install bcryptjs@2.4.3
  329. npm install knex@0.12.9
  330. npm install bookshelf@0.10.2
  331. npm install cookie-session@1.2.0
  332. npm install ghost-gql@0.0.6
  333. npm install intl@1.2.5
  334. npm install sanitize-html@1.14.1
  335. npm install showdown-ghost@0.3.6
  336. npm install superagent@3.5.2
  337. npm install mysql@2.1.1
  338. npm install mariasql@0.2.6
  339. npm install debug@2.6.8
  340. npm install nconf@0.8.4
  341. npm install -g knex-migrator
  342. knex-migrator init
  343. # now install ghost itself
  344. npm install -g ghost-cli
  345. GHOST_ONION_HOSTNAME=$(add_onion_service ghost 80 ${GHOST_ONION_PORT})
  346. ghost install local --port ${GHOST_PORT}
  347. ghost_bust
  348. # NOTE: this has to be http, not https
  349. sed -i "s|\"url\":|\"url\": \"http://${GHOST_DOMAIN_NAME}/\",|g" /var/www/${GHOST_DOMAIN_NAME}/htdocs/config.development.json
  350. adduser --system --home=/var/www/${GHOST_DOMAIN_NAME}/htdocs/ --group ghost
  351. echo '[Unit]' > /etc/systemd/system/ghost.service
  352. echo 'Description=Ghost Blog' >> /etc/systemd/system/ghost.service
  353. echo 'After=syslog.target' >> /etc/systemd/system/ghost.service
  354. echo 'After=network.target' >> /etc/systemd/system/ghost.service
  355. echo '' >> /etc/systemd/system/ghost.service
  356. echo '[Service]' >> /etc/systemd/system/ghost.service
  357. echo 'Type=simple' >> /etc/systemd/system/ghost.service
  358. echo 'User=ghost' >> /etc/systemd/system/ghost.service
  359. echo 'Group=ghost' >> /etc/systemd/system/ghost.service
  360. echo "WorkingDirectory=/var/www/${GHOST_DOMAIN_NAME}/htdocs" >> /etc/systemd/system/ghost.service
  361. echo "ExecStart=/usr/local/bin/ghost run -D" >> /etc/systemd/system/ghost.service
  362. echo "ExecStop=/usr/local/bin/ghost stop" >> /etc/systemd/system/ghost.service
  363. echo "ExecRestart=/usr/local/bin/ghost restart" >> /etc/systemd/system/ghost.service
  364. echo 'Restart=always' >> /etc/systemd/system/ghost.service
  365. echo 'RestartSec=60' >> /etc/systemd/system/ghost.service
  366. echo "Environment=NODE_ENV=development PORT=${GHOST_PORT}" >> /etc/systemd/system/ghost.service
  367. echo '' >> /etc/systemd/system/ghost.service
  368. echo '[Install]' >> /etc/systemd/system/ghost.service
  369. echo 'WantedBy=multi-user.target' >> /etc/systemd/system/ghost.service
  370. ghost_remove_offsite_links
  371. chown -R ghost: /var/www/${GHOST_DOMAIN_NAME}/htdocs
  372. systemctl enable ghost
  373. systemctl daemon-reload
  374. systemctl start ghost
  375. if [[ ${ONION_ONLY} == "no" ]]; then
  376. function_check nginx_http_redirect
  377. nginx_http_redirect ${GHOST_DOMAIN_NAME}
  378. echo 'server {' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  379. echo ' listen 443 ssl;' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  380. echo ' listen [::]:443 ssl;' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  381. echo " root /var/www/${GHOST_DOMAIN_NAME}/htdocs;" >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  382. echo " server_name ${GHOST_DOMAIN_NAME};" >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  383. echo ' access_log /dev/null;' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  384. echo " error_log /dev/null;" >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  385. echo '' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  386. function_check nginx_ssl
  387. nginx_ssl ${GHOST_DOMAIN_NAME}
  388. function_check nginx_disable_sniffing
  389. nginx_disable_sniffing ${GHOST_DOMAIN_NAME}
  390. echo ' add_header Strict-Transport-Security max-age=0;' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  391. echo '' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  392. echo ' location / {' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  393. function_check nginx_limits
  394. nginx_limits ${GHOST_DOMAIN_NAME} '10G'
  395. echo " proxy_pass http://localhost:${GHOST_PORT};" >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  396. echo ' }' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  397. echo '' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  398. echo ' fastcgi_buffers 64 4K;' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  399. echo '' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  400. echo ' error_page 403 /core/templates/403.php;' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  401. echo ' error_page 404 /core/templates/404.php;' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  402. echo '' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  403. echo ' location = /robots.txt {' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  404. echo ' allow all;' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  405. echo ' log_not_found off;' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  406. echo ' access_log /dev/null;' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  407. echo ' }' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  408. echo '' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  409. nginx_keybase $GHOST_DOMAIN_NAME
  410. echo '}' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  411. echo '' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  412. else
  413. echo -n '' > /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  414. fi
  415. echo 'server {' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  416. echo " listen 127.0.0.1:${GHOST_ONION_PORT} default_server;" >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  417. echo " root /var/www/$GHOST_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  418. echo " server_name $GHOST_ONION_HOSTNAME;" >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  419. echo ' access_log /dev/null;' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  420. echo " error_log /dev/null;" >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  421. echo '' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  422. function_check nginx_disable_sniffing
  423. nginx_disable_sniffing ${GHOST_DOMAIN_NAME}
  424. echo ' add_header Strict-Transport-Security max-age=0;' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  425. echo '' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  426. echo ' location / {' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  427. function_check nginx_limits
  428. nginx_limits ${GHOST_DOMAIN_NAME} '10G'
  429. echo " proxy_pass http://localhost:${GHOST_PORT};" >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  430. echo ' }' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  431. echo '' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  432. echo ' fastcgi_buffers 64 4K;' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  433. echo '' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  434. echo ' error_page 403 /core/templates/403.php;' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  435. echo ' error_page 404 /core/templates/404.php;' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  436. echo '' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  437. echo ' location = /robots.txt {' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  438. echo ' allow all;' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  439. echo ' log_not_found off;' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  440. echo ' access_log /dev/null;' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  441. echo ' }' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  442. echo '' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  443. nginx_keybase ${GHOST_DOMAIN_NAME}
  444. echo '}' >> /etc/nginx/sites-available/${GHOST_DOMAIN_NAME}
  445. function_check create_site_certificate
  446. create_site_certificate $GHOST_DOMAIN_NAME 'yes'
  447. ghost_replace_services
  448. function_check nginx_ensite
  449. nginx_ensite $GHOST_DOMAIN_NAME
  450. systemctl restart nginx
  451. ${PROJECT_NAME}-pass -u $MY_USERNAME -a ghost -p "$GHOST_ADMIN_PASSWORD"
  452. function_check add_ddns_domain
  453. add_ddns_domain $GHOST_DOMAIN_NAME
  454. chown -R ghost: /var/www/${GHOST_DOMAIN_NAME}/htdocs
  455. set_completion_param "ghost domain" "$GHOST_DOMAIN_NAME"
  456. if ! grep -q "ghost version:" ${COMPLETION_FILE}; then
  457. echo "ghost version:${GHOST_VERSION}" >> ${COMPLETION_FILE}
  458. else
  459. sed -i "s|ghost version.*|ghost version:${GHOST_VERSION}|g" ${COMPLETION_FILE}
  460. fi
  461. APP_INSTALLED=1
  462. }
  463. # NOTE: deliberately no exit 0