79 lines
3.5 KiB
Bash
79 lines
3.5 KiB
Bash
#!/usr/bin/env bash
|
|
# =============================================================================
|
|
# setup.sh — One-time setup for vSphere Backup Manager (Nginx + Gunicorn + HTTPS)
|
|
# Run as a user with sudo privileges.
|
|
# Usage: bash setup.sh
|
|
# =============================================================================
|
|
set -e
|
|
|
|
APP_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
SSL_DIR="/etc/ssl/vsphere-backup"
|
|
NGINX_CONF="/etc/nginx/sites-available/vsphere-backup-manager"
|
|
NGINX_LINK="/etc/nginx/sites-enabled/vsphere-backup-manager"
|
|
|
|
echo ""
|
|
echo "=========================================="
|
|
echo " vSphere Backup Manager — Setup Script"
|
|
echo "=========================================="
|
|
echo ""
|
|
|
|
# ── 1. Install system packages ────────────────────────────────────────────────
|
|
echo "[1/6] Installing Nginx..."
|
|
sudo apt update
|
|
sudo apt install -y nginx
|
|
|
|
# ── 2. Install Python packages ────────────────────────────────────────────────
|
|
echo "[2/6] Installing Python dependencies (including gunicorn)..."
|
|
# If you use a virtualenv, activate it first:
|
|
# source ./venv/bin/activate
|
|
pip install -r "$APP_DIR/requirements.txt"
|
|
|
|
# ── 3. Generate self-signed SSL certificate (10-year validity) ────────────────
|
|
echo "[3/6] Generating self-signed TLS certificate (10 years)..."
|
|
sudo mkdir -p "$SSL_DIR"
|
|
sudo openssl req -x509 -nodes -newkey rsa:4096 \
|
|
-days 3650 \
|
|
-keyout "$SSL_DIR/key.pem" \
|
|
-out "$SSL_DIR/cert.pem" \
|
|
-subj "/C=XX/ST=Local/L=Local/O=vSphereBackup/CN=vsphere-backup-manager" \
|
|
-addext "subjectAltName=IP:127.0.0.1,IP:$(hostname -I | awk '{print $1}')"
|
|
sudo chmod 600 "$SSL_DIR/key.pem"
|
|
sudo chmod 644 "$SSL_DIR/cert.pem"
|
|
echo " Certificate saved to: $SSL_DIR"
|
|
|
|
# ── 4. Install Nginx config ───────────────────────────────────────────────────
|
|
echo "[4/6] Installing Nginx config..."
|
|
sudo cp "$APP_DIR/nginx.conf" "$NGINX_CONF"
|
|
# Remove default site if it exists
|
|
sudo rm -f /etc/nginx/sites-enabled/default
|
|
# Create symlink to enable our site
|
|
sudo ln -sf "$NGINX_CONF" "$NGINX_LINK"
|
|
sudo nginx -t # validate config before applying
|
|
sudo systemctl enable nginx
|
|
sudo systemctl restart nginx
|
|
echo " Nginx configured and running."
|
|
|
|
# ── 5. Create logs directory ──────────────────────────────────────────────────
|
|
echo "[5/6] Creating logs directory..."
|
|
mkdir -p "$APP_DIR/logs"
|
|
|
|
# ── 6. (Re)start with PM2 ────────────────────────────────────────────────────
|
|
echo "[6/6] Starting app with PM2..."
|
|
cd "$APP_DIR"
|
|
# Stop old instance if running (ignore error if not)
|
|
pm2 delete vsphere-backup-manager 2>/dev/null || true
|
|
pm2 start ecosystem.config.js
|
|
pm2 save
|
|
|
|
echo ""
|
|
echo "=========================================="
|
|
echo " Setup complete!"
|
|
echo ""
|
|
echo " Access the app at:"
|
|
echo " https://$(hostname -I | awk '{print $1}')"
|
|
echo ""
|
|
echo " First visit: browser will warn about self-signed cert."
|
|
echo " Click: Advanced → Proceed (one-time per browser)"
|
|
echo "=========================================="
|
|
echo ""
|