install.sh

#!/usr/bin/bash 
#
#           SABU Server Installer Script v2.0.0
#
#   GitHub: https://github.com/sabu-ws/server
#   Issues: https://github.com/sabu-ws/server/issues
#
#   This script installs SABU Server to your system.
#   Usage:
#
#   	$ wget -qO- https://get.server.sabu.it/ | bash
#   	  or
#   	$ curl -fsSL https://get.server.sabu.it/ | bash
#
#   In automated environments, you may want to run as root.
#   If using curl, we recommend using the -fsSL flags.
#

# VARS
DATA_MOUNTPOINT="/tmp/"
PACKAGES_PART_1="dirmngr apt-transport-https lsb-release ca-certificates gnupg nodejs nginx openssl python3 python3-pip python3-venv postgresql nftables rsyslog gnupg postgresql-common wget ipcalc clamav yara"
PACKAGES_PART_2="timescaledb-2-postgresql-15 redis"

# DEFINE COLORS
readonly COLOUR_RESET='\e[0m'
readonly COLOURS=(
    '\e[38;5;154m' # green
    '\e[1m'        # Bold white
    '\e[90m'       # Grey
    '\e[91m'       # Red
    '\e[33m'       # Yellow
    '\e[36m'       # Blue Cyan
)

show() {

    # OK
    if (( $1 == 0 ))
    then
        echo -e "${COLOURS[2]}[$COLOUR_RESET${COLOURS[0]}  OK  $COLOUR_RESET${COLOURS[2]}]$COLOUR_RESET $2"
    
    # FAILED
    elif (( $1 == 1 ))
    then
        echo -e "${COLOURS[2]}[$COLOUR_RESET${COLOURS[3]}FAILED$COLOUR_RESET${COLOURS[2]}]$COLOUR_RESET $2"
        exit 1

    # INFO
    elif (( $1 == 2 ))
    then
        echo -e "${COLOURS[2]}[$COLOUR_RESET${COLOURS[5]} INFO $COLOUR_RESET${COLOURS[2]}]$COLOUR_RESET $2"

    # NOTICE
    elif (( $1 == 3 ))
    then
        echo -e "${COLOURS[2]}[$COLOUR_RESET${COLOURS[4]}NOTICE$COLOUR_RESET${COLOURS[2]}]$COLOUR_RESET $2"
    
    # ASK
    elif (( $1 == 4))
    then
        echo -e "${COLOURS[2]}[${COLOURS[4]} ASK  ${COLOURS[2]}]${COLOUR_RESET} $2"
 
    fi
}

color_reset() {

    echo -e "$COLOUR_RESET\c"
}

color_gray() {

    echo -e "${COLOURS[2]}\c"
}

color_red() {

    echo -e "${COLOURS[3]}\c"
}

# BANNER
banner() {

    echo -e "
      _____         ____  _    _      _____ ______ _______      ________ _____  
     / ____|  /\   |  _ \| |  | |    / ____|  ____|  __ \ \    / /  ____|  __ \ 
    | (___   /  \  | |_) | |  | |   | (___ | |__  | |__) \ \  / /| |__  | |__) |
     \___ \ / /\ \ |  _ <| |  | |    \___ \|  __| |  _  / \ \/ / |  __| |  _  / 
     ____) / ____ \| |_) | |__| |    ____) | |____| | \ \  \  /  | |____| | \ \ 
    |_____/_/    \_\____/ \____/    |_____/|______|_|  \_\  \/   |______|_|  \_\\
    
                      --- Made by CyberCrackito with ❤️  ---
    "                                                                                                                
}

# CHECK_REQUIREMENTS
check_requirements() {

    # DHECK DISK
    show 2 "Checking requirements..."

    show 2 "Checking disk..."
    while true
    do

        show 4 "Do you have a second disk to store data ? (${COLOURS[0]}yes${COLOUR_RESET}/${COLOURS[3]}no${COLOUR_RESET})"
        read -p "- " choice

        case $choice in 
            yes ) 
                show 2 "Perfect"
                break;;
            no )
                show 1 "You don't have the prerequisites"
                exit 1;;
            * )
                show 4 "Invalid response";;
        esac

    done

    # DISK + CHECK PATH
    show 4 "What is the mountpoint ?"
    read -p "- " DATA_MOUNTPOINT
    show 2 "Path ${COLOURS[2]}(${DATA_MOUNTPOINT})${COLOUR_RESET}"

    if [ -d "$DATA_MOUNTPOINT" ]
    then
        show 2 "Folder exist"
    else
        show 1 "Folder not exist, cancel installation."
    fi

    # CHECK USERS
    show 2 "Checking users..."
    id sabu > /dev/null 2>&1

    if [ $? -eq 0 ]
    then
        while true
        do

        show 4 "A user named ${COLOURS[4]}sabu ${COLOUR_RESET}was found. This user was deleted and recreate. (${COLOURS[0]}yes${COLOUR_RESET}/${COLOURS[3]}no${COLOUR_RESET})"
        read -p "- " choice1

        case $choice1 in 
            yes ) 
                show 2 "User sabu was recreated after."
                deluser sabu > /dev/null 2>&1
                break;;
            no )
                show 1 "Installation was cancelled"
                exit 1;;
            * )
                show 4 "Invalid response";;
        esac

        done

    else
        show 0 "User sabu check"
    fi

    id svc-sabu > /dev/null 2>&1

    if [ $? -eq 0 ]
    then
        while true
        do

        show 4 "A user named ${COLOURS[4]}svc-sabu ${COLOUR_RESET}was found. This user was deleted and recreate. (${COLOURS[0]}yes${COLOUR_RESET}/${COLOURS[3]}no${COLOUR_RESET})"
        read -p "- " choice2

        case $choice2 in 
            yes ) 
                show 2 "User svc-sabu was recreated after."
                deluser svc-sabu > /dev/null 2>&1
                break;;
            no )
                show 1 "Installation was cancelled"
                exit 1;;
            * )
                show 4 "Invalid response";;
        esac

        done

    else
        show 0 "User svc-sabu check"
    fi
}

# INSTALL_PACKAGES
install_packages() {

    # UPDATE & UPGRADE
    show 2 "Updating and upgrade package manager..."
    color_red
    apt-get update > /dev/null 2>&1
    apt-get upgrade -y > /dev/null 2>&1
    show 0 "Updating and upgrade package manager complete."

    # REQUIREMENTS PKG
    apt-get install gpg curl git sudo -y > /dev/null 2>&1

    # REPO NODEJS
    show 2 "Add repositories: ${COLOURS[4]}${PACKAGES_PART_2}"
    color_red
    curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor --yes -o /etc/apt/keyrings/nodesource.gpg > /dev/null 2>&1
    echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_18.x nodistro main" | tee /etc/apt/sources.list.d/nodesource.list > /dev/null 2>&1

    # REPO TIMESCALE
    curl -fsSL https://packagecloud.io/timescale/timescaledb/gpgkey | gpg --dearmor --yes -o /etc/apt/keyrings/timescale.gpg > /dev/null 2>&1
    echo "deb [signed-by=/etc/apt/keyrings/timescale.gpg] https://packagecloud.io/timescale/timescaledb/debian/ $(lsb_release -c -s) main" | tee /etc/apt/sources.list.d/timescale.list > /dev/null 2>&1

    # REPO REDIS
    curl -fsSL https://packages.redis.io/gpg | gpg --dearmor -o /usr/share/keyrings/redis-archive-keyring.gpg > /dev/null 2>&1
    echo "deb [signed-by=/usr/share/keyrings/redis-archive-keyring.gpg] https://packages.redis.io/deb $(lsb_release -cs) main" | tee /etc/apt/sources.list.d/redis.list > /dev/null 2>&1

    apt-get update > /dev/null 2>&1
    show 0 "Repositories added successfully."

    # INSTALL
    show 2 "Install necessary packages: ${COLOURS[4]}${PACKAGES_PART_1} ${PACKAGES_PART_2}"
    color_red
    apt-get install ${PACKAGES_PART_1} -y > /dev/null 2>&1
    apt-get install ${PACKAGES_PART_2} -y > /dev/null 2>&1
    show 0 "Install necessary packages complete."

    # REMOVE & CLEAN
    show 2 "Remove and cleaning packages..."
    color_red
    apt-get autoremove -y > /dev/null 2>&1
    apt-get clean > /dev/null 2>&1
    show 0 "Remove and cleaning complete."
}

# USERS
users() {

    # SABU
    show 2 "Creating users..."
    color_red
    useradd sabu --home /home/sabu --create-home --shell /bin/bash --password '$1$Av4Qv9gg$flzrWXMp0qC8aVEuu6XBF1' > /dev/null 2>&1
    usermod -a -G adm sabu > /dev/null 2>&1

    # SVC-SABU
    mkdir -p /sabu/
    useradd svc-sabu --home /sabu/ --shell /bin/false > /dev/null 2>&1
    usermod -a -G adm svc-sabu > /dev/null 2>&1

    chown -R svc-sabu:svc-sabu /sabu/ > /dev/null 2>&1
    chmod -R 0750 /sabu/ > /dev/null 2>&1
    show 0 "Creating complete."
}

# GIT CLONE
clone_git() {

    # CLONE REPO
    show 2 "Clone git repository"
    cd /sabu
    git clone https://github.com/sabu-ws/server.git > /dev/null 2>&1
    show 0 "Clone complete."
}

# CONFIG SYSTEM
config_system() {

    # DISABLE IPV6
    show 2 "IPV6 setup..."
    cp /sabu/server/deploy/10-disable-ipv6.conf /etc/sysctl.d/10-disable-ipv6.conf > /dev/null 2>&1
    sysctl -p -f /etc/sysctl.d/10-disable-ipv6.conf > /dev/null 2>&1
    show 0 "IPV6 setup Complete"

    # SSH CONFIGURATION
    show 2 "SSH setup..."
    cp /sabu/server/deploy/sshd_config /etc/ssh/sshd_config > /dev/null 2>&1
    systemctl enable ssh > /dev/null 2>&1
    systemctl restart ssh > /dev/null 2>&1
    show 0 "SSH setup Complete"

    # SUDO COMMAND
    show 2 "Sudo setup..."
    cp /sabu/server/deploy/sabu.sudo /etc/sudoers.d/sabu > /dev/null 2>&1
    show 0 "Sudo setup Complete"
}

# DEPLOY NGINX
deploy_nginx() {

    # NGINX CONF
    show 2 "Nginx setup..."
    rm /etc/nginx/sites-available/default > /dev/null 2>&1
    rm /etc/nginx/sites-enabled/default > /dev/null 2>&1

    mkdir -p /sabu/nginx/
    mkdir -p /sabu/logs/server/nginx/
    cp /sabu/server/deploy/nginx/maintenance.html /sabu/nginx/maintenance.html
    sed -i 's/www-data/svc-sabu/g' /etc/nginx/nginx.conf

    mkdir -p /sabu/ssl/private/

    # GEN AUTOIGN CERTIF
    show 0 "SSL Generate selfsign certificate"
    openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /sabu/ssl/private/sabu.key -out /sabu/ssl/sabu.crt -subj "/C=FR/ST=BRITTANY/L=Rennes/O=SABU/OU=SABU/CN=sabu.local" > /dev/null 2>&1

    cp /sabu/server/deploy/nginx/sabu.conf /etc/nginx/sites-available/sabu.conf > /dev/null 2>&1
    ln -s /etc/nginx/sites-available/sabu.conf /etc/nginx/sites-enabled/sabu.conf > /dev/null 2>&1

    nginx -t > /dev/null 2>&1
    systemctl enable nginx > /dev/null 2>&1
    systemctl restart nginx > /dev/null 2>&1
    show 0 "Nginx setup Complete"
}

# DEPLOY PYTHON
deploy_python() {

    # PYTHON CONF
    show 2 "Python setup..."
    cd /sabu/
    python3 -m venv venv-sabu > /dev/null 2>&1
    source /sabu/venv-sabu/bin/activate > /dev/null 2>&1
    show 0 "Python setup complete"

    # PIP INSTALL
    show 2 "Installing requirements..."
    pip3 install -r /sabu/server/requirements.txt > /dev/null 2>&1
    # pip3 freeze
    show 0 "Install requirements complete"
}

# DEPLOY POSTGRESQL
deploy_postgresql() {

    # POSTGRESQL CONF
    show 2 "Postgresql setup..."
    sed -i "/listen_addresses = 'localhost'/s/^#//g" /etc/postgresql/15/main/postgresql.conf > /dev/null 2>&1
    cp /sabu/server/.env.model /sabu/server/.env > /dev/null 2>&1
    source /sabu/server/.env > /dev/null 2>&1
    show 0 "Postgresql setup complete"

    # POSTGRESQL INIT DATABASE
    show 2 "Postgresql initialisation user and database..."
    su - postgres -c "createuser $POSTGRES_USER" > /dev/null 2>&1
    sudo -u postgres psql -c "ALTER USER $POSTGRES_USER WITH password '$POSTGRES_PASSWORD'" > /dev/null 2>&1
    su - postgres -c "createdb $POSTGRES_DB -O $POSTGRES_USER" > /dev/null 2>&1
    show 0 "Postgresql initialisation complete"
}

# DEPLOY TIMESCALE
deploy_timescale() {

    # TIMESCALE CONF
    show 2 "Timescale setup..."
    timescaledb-tune --quiet --yes > /dev/null 2>&1
    echo "shared_preload_libraries = 'timescaledb'" >> /etc/postgresql/15/main/postgresql.conf > /dev/null 2>&1
    show 0 "Timescale setup complete"
}

# DEPLOY REDIS
deploy_redis() {

    show 2 "Redis setup..."
    redis-cli -h $REDIS_HOST -p $REDIS_PORT config set requirepass $REDIS_PASSWORD
    systemctl enable redis-server.service > /dev/null 2>&1
    show 0 "Redis setup complete"
}

# DEPLOY NFTABLES
deploy_nftables() {

    show 2 "Nftables setup..."
    systemctl start nftables.service > /dev/null 2>&1
    systemctl enable nftables.service > /dev/null 2>&1
    show 0 "Nftables setup complete"
}

# DEPLOY SABU
deploy_sabu() {

    # UPDATE CONFIG.PY
    sed -i 's|^DATA_PATH=.*|DATA_PATH="'"$DATA_MOUNTPOINT"'"|' /sabu/server/.env

    # SABU SERVICE & DIR
    show 2 "SABU setup..."
    mkdir -p /sabu/logs/{server,endpoints}
    
    cp /sabu/server/deploy/sabu.service /etc/systemd/system/sabu.service > /dev/null 2>&1
    cp /sabu/server/deploy/celery.service /etc/systemd/system/celery.service > /dev/null 2>&1
    
    systemctl daemon-reload > /dev/null 2>&1
    
    systemctl start sabu.service > /dev/null 2>&1
    systemctl enable sabu.service > /dev/null 2>&1

    systemctl start celery.service > /dev/null 2>&1
    systemctl enable celery.service > /dev/null 2>&1
    
    show 0 "SABU setup complete"
}

# END INSTALL
end_install() {

    # FIX PERM
    show 2 "End install..."
    chown -R svc-sabu:svc-sabu /sabu/
    chmod -R 0750 /sabu/
    chown -R svc-sabu:svc-sabu $DATA_MOUNTPOINT > /dev/null 2>&1
    chmod -R 0750 $DATA_MOUNTPOINT > /dev/null 2>&1
    show 0 "End install complete"

    # APPLY FILETRING
    INT=$(ip -br a | tail -n 1 | awk '{print $1}')
    sh /sabu/server/core/scripts/filtering_dev.sh $INT

    # REBOOT
    show 2 "Waiting reboot..."
    sleep 1
    show 2 "Press a ${COLOURS[4]}KEY ${COLOUR_RESET}to reboot"
    read -s -n 1
    reboot
}

# MAIN
# BANNER
banner

# REQUIREMENTS
check_requirements

# INSTALL PACKAGES
install_packages

# USERS
users

# GIT
clone_git

# SYSTEM CONFIG
config_system

# DEPLOY NGINX
deploy_nginx

# DEPLOY PYTHON
deploy_python

# DEPLOY POSTGRESQL
deploy_postgresql

# DEPLOY TIMESCALE
deploy_timescale

# DEPLOY REDIS
deploy_redis

# DEPLOY SABU
deploy_sabu

# DEPLOY NFTABLES
deploy_nftables

# END INSTALL
end_install