BeatLink
commented
4 years ago An improved version of the script. It will be able to install a production ready version of etesync on debian using nginx and uwsgi.
# Set needed variables ------------------------------------------------------------------
export ETESYNC_HOME=/opt/etesync;
export ETESYNC_GITHUB=https://github.com/etesync/server.git;
export ETESYNC_APP_FOLDER=$ETESYNC_HOME/server;
export STATIC_ROOT=/srv/http/etesync_server/static;
# Setup etesync user --------------------------------------------------------------------
sudo useradd -M etesync -s /bin/bash;
sudo mkdir -p $ETESYNC_HOME;
sudo chown -R etesync $ETESYNC_HOME;
sudo usermod -d $ETESYNC_HOME etesync;
# Install Etesync -----------------------------------------------------------------------
sudo apt install -y python3-venv git;
sudo -u etesync bash << EOF
cd $ETESYNC_HOME
git clone $ETESYNC_GITHUB $ETESYNC_APP_FOLDER;
python3 -m venv $ETESYNC_APP_FOLDER/venv;
source $ETESYNC_APP_FOLDER/venv/bin/activate;
python3 -m pip install wheel;
python3 -m pip install -r $ETESYNC_APP_FOLDER/requirements.txt;
EOF
# Configure .ini File -------------------------------------------------------------------
sudo -u etesync tee $ETESYNC_APP_FOLDER/etesync-server.ini > /dev/null << EOF
[global]
secret_file = $ETESYNC_APP_FOLDER/secret.txt
debug = false
static_root = $STATIC_ROOT
static_url = /static/
language_code = en-us
time_zone = America/Jamaica
[allowed_hosts]
allowed_host1 = *
[database]
engine = django.db.backends.sqlite3
name = db.sqlite3
EOF
# Perform migration ---------------------------------------------------------------------
sudo -u etesync bash << EOF
cd $ETESYNC_APP_FOLDER
source $ETESYNC_APP_FOLDER/venv/bin/activate;
python3 $ETESYNC_APP_FOLDER/manage.py migrate
EOF
# Setup static files --------------------------------------------------------------------
sudo mkdir -p $STATIC_ROOT
sudo chown -R etesync $STATIC_ROOT
sudo -u etesync bash << EOF
cd $ETESYNC_APP_FOLDER
source $ETESYNC_APP_FOLDER/venv/bin/activate;
python3 $ETESYNC_APP_FOLDER/manage.py collectstatic
EOF
# Setup uwsgi ---------------------------------------------------------------------------
sudo apt install -y uwsgi uwsgi-plugin-python3;
sudo mkdir -p /etc/uwsgi/sites/;
sudo tee /etc/uwsgi/sites/etesync.ini > /dev/null << EOF
[uwsgi]
socket = $ETESYNC_APP_FOLDER.sock
chown-socket = etesync:www-data
chmod-socket = 660
vacuum = true
plugins = python3
uid = etesync
chdir = $ETESYNC_APP_FOLDER
home = %(chdir)/venv
module = etesync_server.wsgi
master = true
EOF
# Setup ssl keys ------------------------------------------------------------------------
sudo -u etesync bash << EOF
mkdir $ETESYNC_HOME/ssl_keys;
openssl req -x509 -newkey rsa:4096 -keyout $ETESYNC_HOME/ssl_keys/key.pem -out $ETESYNC_HOME/ssl_keys/cert.pem -days 365 -nodes -batch;
EOF
# Setup nginx ---------------------------------------------------------------------------
sudo apt install -y nginx;
sudo tee /etc/nginx/sites-available/etesync-server.conf > /dev/null << EOF
server {
server_name heimdall;
listen 8000 ssl http2;
listen [::]:8000 ssl http2;
root /srv/http/etesync_server;
client_max_body_size 5M;
location /static {
expires 1y;
root /srv/http/etesync_server;
}
location / {
uwsgi_pass unix:$ETESYNC_APP_FOLDER.sock;
include uwsgi_params;
}
ssl_certificate $ETESYNC_HOME/ssl_keys/cert.pem;
ssl_certificate_key $ETESYNC_HOME/ssl_keys/key.pem;
}
EOF
sudo ln -s /etc/nginx/sites-available/etesync-server.conf /etc/nginx/sites-enabled/etesync-server.conf
sudo systemctl enable nginx;
sudo systemctl start nginx;
# Setup systemd services ----------------------------------------------------------------
sudo tee /etc/systemd/system/uwsgi.service > /dev/null << EOF
[Unit]
Description=uWSGI Emperor service
[Service]
ExecStart=uwsgi --emperor /etc/uwsgi/sites
Restart=always
KillSignal=SIGQUIT
Type=notify
NotifyAccess=all
[Install]
WantedBy=multi-user.target
EOF
sudo systemctl daemon-reload
sudo systemctl enable uwsgi.service
sudo systemctl start uwsgi.service
tasn
daftaupe
lucollab
theAkito
tomkel
This script will create an etesync user, install etesync to /opt/etesync and add a service to systemd while enabling it. It should be a good start but further configuration is recommended (for example, limiting the allowed hosts that etesync will be authorized on)
TODO: Create a pull request to merge it into the repo
TODO: Create an update script to complement this one as well