mirror of
https://github.com/openoms/bitcoin-tutorials.git
synced 2025-12-18 20:44:20 +01:00
82 lines
2.5 KiB
Bash
82 lines
2.5 KiB
Bash
#!/bin/bash
|
|
|
|
echo "
|
|
Input your email:
|
|
"
|
|
read EMAIL
|
|
|
|
echo "
|
|
Input a subdomain set up with an A record pointing to this server:
|
|
eg.: electrum.example.com
|
|
"
|
|
read SUBDOMAIN
|
|
|
|
echo "
|
|
Input the TCP port of the Electrum Server to be redirected to:
|
|
eg.: https://192.168.1.42:50021
|
|
"
|
|
read REDIRECT
|
|
|
|
|
|
sudo certbot certonly -a standalone -m $EMAIL --agree-tos \
|
|
-d $SUBDOMAIN --expand -n --pre-hook "service nginx stop" \
|
|
--post-hook "service nginx start" || exit 1
|
|
|
|
|
|
# Setting up the nginx.conf
|
|
isConfigured=$(sudo cat /etc/nginx/nginx.conf 2>/dev/null | grep -c 'upstream fulcrum')
|
|
if [ ${isConfigured} -gt 0 ]; then
|
|
echo "fulcrum is already configured with Nginx. To edit manually run \`sudo nano /etc/nginx/nginx.conf\`"
|
|
|
|
elif [ ${isConfigured} -eq 0 ]; then
|
|
|
|
isStream=$(sudo cat /etc/nginx/nginx.conf 2>/dev/null | grep -c 'stream {')
|
|
if [ ${isStream} -eq 0 ]; then
|
|
|
|
echo "\
|
|
stream {
|
|
upstream fulcrum {
|
|
server $REDIRECT;
|
|
}
|
|
server {
|
|
listen 50022 ssl;
|
|
proxy_pass fulcrum;
|
|
ssl_certificate /etc/letsencrypt/live/$SUBDOMAIN/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/$SUBDOMAIN/privkey.pem ;
|
|
ssl_session_cache shared:SSL-fulcrum:1m;
|
|
ssl_session_timeout 4h;
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
|
|
ssl_prefer_server_ciphers on;
|
|
}
|
|
}" | sudo tee -a /etc/nginx/nginx.conf
|
|
|
|
elif [ ${isStream} -eq 1 ]; then
|
|
sudo truncate -s-2 /etc/nginx/nginx.conf
|
|
echo "\
|
|
upstream fulcrum {
|
|
server $REDIRECT;
|
|
}
|
|
server {
|
|
listen 50022 ssl;
|
|
proxy_pass fulcrum;
|
|
ssl_certificate /etc/letsencrypt/live/$SUBDOMAIN/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/$SUBDOMAIN/privkey.pem;
|
|
ssl_session_cache shared:SSL-fulcrum:1m;
|
|
ssl_session_timeout 4h;
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
|
|
ssl_prefer_server_ciphers on;
|
|
}
|
|
}" | sudo tee -a /etc/nginx/nginx.conf
|
|
|
|
elif [ ${isStream} -gt 1 ]; then
|
|
echo " Too many 'stream' commands in nginx.conf. Please edit manually: \`sudo nano /etc/nginx/nginx.conf\` and retry"
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
# test nginx
|
|
sudo nginx -t || exit 1
|
|
|
|
# restart
|
|
sudo systemctl restart nginx
|