-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathsetup.conf
173 lines (129 loc) · 3.75 KB
/
setup.conf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
##### PROJECT NAME #####
# This will be used to "namespace" the app code
PROJECTNAME='KingChesney'
LOWERCASEPROJECTNAME=`echo "$PROJECTNAME" | tr '[:upper:]' '[:lower:]'`
##### PROJECT META DATA #####
DESCRIPTION='An attempt to build a fullstack project end to end using enterprise grade techniques for teaching purposes'
PROJECTINFOURL='https://github.com/bradchesney79/2017-Debian-Jessie-Secure-WebApp-Server'
BUGREPORTING='https://github.com/bradchesney79/2017-Debian-Jessie-Secure-WebApp-Server/issues'
PROJECTKEYWORDS='"debian", "php", "angularJS"'
VERSION='0.0.1'
##### HOST INFO #####
HOSTNAME='www'
DOMAIN='kingchesney.com'
IPV4='45.33.112.226'
IPV6='2600:3c00::f03c:91ff:fe26:42cf'
TIMEZONE='Etc/UTC' # This is a server, UTC is the only appropriate timezone
HOSTINGSERV='linode' # Other valid values may be 'local', 'docker', 'aws',...
# The conditionals below look for "true", everything else is no
DEV=true # "true" = dev env; anything else, essentially, is a production install
DEMO=true # Create some generic logic and data to play with
##### THE USER INFO, SCRIPT LOCATION, & DATE #####
SCRIPTLOCATION=`pwd`
UNIXTIMESTAMP=`date +%s`
DATE=`date +%Y-%m-%d`
YEAR=`date +%Y`
NTH_RUN='FALSE' # Set this to 'TRUE to skip over the things that should happen only once.'
##### SYSTEM USER RESPONSIBLE FOR DEFAULT DOMAIN #####
WEBUSER='default-web'
PASSWORD='dummypassword'
EMAIL="$USER@$DOMAIN"
##### TOP LEVEL HUMAN USER #####
USERID1001='bradchesney79'
USERID1001EMAIL='[email protected]'
USERID1001PASSWORD='password1001'
# There is an interesting dynamic that I just want to send myself mail.
# No fuss, no muss-- that means in many cases no DNS, SPF, DKIM, and/or DMARC.
# "Disposable Email Service", email launderers for hire essentially.
# (Free providers exist...)
# What equates to 'sketchy' emails from your unverified host to the service.
# From the service, a fully qualified & clean email out to your target inbox.
# 33mail.com is the service I use. Shameless plug for them in my example...
TARGETEMAIL='[email protected]'
##### WEB SITE PARTICULARS #####
PROJECTROOT='/var/www'
HTTPSWEBROOT="$PROJECTROOT/html"
APIWEBROOT="$PROJECTROOT/api"
LOGDIR="$PROJECTROOT/logs"
ERRORLOGLEVEL='warn'
##### SSL KEY PARTICULARS #####
KEYSIZE='4096'
ALGORITHM='-sha256'
##### DEFAULT DOMAIN INFO FOR SSL #####
# letsencrypt
SSLPROVIDER='lets-encrypt'
# '' (empty single quotes, it is go time), '--staging' (for not hitting letsencrypt rate limits)
STAGING='--staging'
#STAGING=''
# Also, for staging certs to work, you need to add the CA cert to your browser.
# Heed the instrucations and warnings at https://letsencrypt.org/docs/staging-environment/
SUBDOMAINS=(
admin
alpha
app
api
beta
blog
css
dev
feed
files
forum
ftp
help
image
images
imap
img
info
js
lists
live
m
mail
media
mobile
mysql
news
photos
pic
pop
search
secure
smtp
static
status
store
support
test
videos
vpn
webmail
wiki
www
)
COUNTRY='US'
STATE='Ohio'
LOCALITY='Eastlake'
ORGANIZATION='Rust Belt Rebellion'
ORGANIZATIONALUNIT='Web Development'
##### DATABASE INFO #####
#"root"
DBROOTUSER='datalord'
DBROOTPASSWORD='seconddummypassword'
#1 non-root website user
DEFAULTSITEDBUSER='administrator'
DEFAULTSITEDBPASSWORD='thirddummypassword'
#2 non-root human user
DBWEBUSER="$USERID1001"
DBWEBUSERPASSWORD="$USERID1001PASSWORD"
#3 root level user for the Debian OS
DBBACKUPUSERPASSWORD='fourthdummypassword'
PROJECTDB="$PROJECTNAME"
PROJECTDBHOST='localhost'
SENTINELDB='sentinel'
SENTINELDBHOST='localhost'
##### ADDITIONAL SITE "STUFF" #####
##### GIT REPO INFORMATION #####
# Probably a private repo, use SSH/RSA keys.
GITREPO='git+https://github.com/bradchesney79/2017-Debian-Jessie-Secure-WebApp-Server.git'