1
This commit is contained in:
Eliezer Croitoru
commit
3a124c2b6f
2
.gitattributes
vendored
Normal file
2
.gitattributes
vendored
Normal file
@ -0,0 +1,2 @@
|
|||||||
|
*.sh text eol=lf
|
||||||
|
Vagrantfile text eol=lf
|
||||||
1
.gitignore
vendored
Normal file
1
.gitignore
vendored
Normal file
@ -0,0 +1 @@
|
|||||||
|
.vagrant/
|
||||||
75
Vagrantfile
vendored
Normal file
75
Vagrantfile
vendored
Normal file
@ -0,0 +1,75 @@
|
|||||||
|
|
||||||
|
$ENALBE_SYNC_FOLDER = false
|
||||||
|
|
||||||
|
$ENALBE_SYNC_FOLDER = true if File.exist?("sync_shared")
|
||||||
|
|
||||||
|
$HOST_NET = File.readlines('net').first.chomp
|
||||||
|
$VM_NAME = File.readlines('vmname').first.chomp
|
||||||
|
$VM_MEM = File.readlines('vmmem').first.chomp.to_i
|
||||||
|
$VM_VCPU = File.readlines('vmcpu').first.chomp.to_i
|
||||||
|
|
||||||
|
$BOX = File.readlines('box').first.chomp
|
||||||
|
|
||||||
|
$PROVIDER = File.readlines('provider').first.chomp
|
||||||
|
|
||||||
|
$HOSTNAME = File.readlines('hostname').first.chomp
|
||||||
|
|
||||||
|
if $PROVIDER =~ /hyperv|virtualbox/
|
||||||
|
ENV["VAGRANT_DEFAULT_PROVIDER"] = $PROVIDER
|
||||||
|
end
|
||||||
|
|
||||||
|
# Will not work on Hyper-V
|
||||||
|
#$VM_DISK_SIZE = File.readlines('disksize').first.chomp
|
||||||
|
|
||||||
|
|
||||||
|
$PROVISION_SSH_KEY_SCRIPT=<<EOF
|
||||||
|
mkdir -p /root/.ssh
|
||||||
|
chmod 0700 /root/.ssh
|
||||||
|
cat /home/vagrant/.ssh/vagrant.pub >> /root/.ssh/authorized_keys
|
||||||
|
chmod 0600 /root/.ssh/authorized_keys
|
||||||
|
chown root:root -R /root/.ssh
|
||||||
|
mkdir -p /home/vagrant/.ssh
|
||||||
|
chmod 0700 /home/vagrant/.ssh
|
||||||
|
echo /home/vagrant/.ssh/vagrant.pub >> /home/vagrant/.ssh/authorized_keys
|
||||||
|
chmod 0600 /home/vagrant/.ssh/authorized_keys
|
||||||
|
chown vagrant:vagrant -R /home/vagrant/.ssh
|
||||||
|
EOF
|
||||||
|
|
||||||
|
|
||||||
|
Vagrant.configure("2") do |config|
|
||||||
|
config.vm.box = $BOX
|
||||||
|
|
||||||
|
## Remember to generate the vagrant private key.
|
||||||
|
## ssh-keygen -f C:\Users\eliezer\.ssh\vagrant
|
||||||
|
|
||||||
|
config.ssh.insert_key = false
|
||||||
|
config.ssh.private_key_path = ['~/.ssh/vagrant', '~/.vagrant.d/insecure_private_key' ]
|
||||||
|
|
||||||
|
config.vm.provider "hyperv" do |hv, override|
|
||||||
|
hv.vmname = $VM_NAME
|
||||||
|
hv.maxmemory = $VM_MEM
|
||||||
|
hv.memory = $VM_MEM
|
||||||
|
hv.cpus = $VM_VCPU
|
||||||
|
override.vm.allowed_synced_folder_types = [:rsync]
|
||||||
|
end
|
||||||
|
|
||||||
|
config.vm.network "public_network", bridge: $HOST_NET
|
||||||
|
|
||||||
|
config.vm.synced_folder ".", "/vagrant", disabled: true
|
||||||
|
|
||||||
|
if $ENALBE_SYNC_FOLDER == true
|
||||||
|
config.vm.synced_folder "shared/", "/vagrant", type: "rsync"
|
||||||
|
end
|
||||||
|
|
||||||
|
config.vm.provision "file", source: "~/.ssh/vagrant.pub", destination: "/home/vagrant/.ssh/vagrant.pub"
|
||||||
|
config.vm.provision 'shell', inline: $PROVISION_SSH_KEY_SCRIPT
|
||||||
|
|
||||||
|
if $ENALBE_SYNC_FOLDER == true
|
||||||
|
config.vm.provision 'shell', inline: "stat /vagrant/init.sh && cd /vagrant && bash init.sh;true"
|
||||||
|
end
|
||||||
|
|
||||||
|
if not $HOSTNAME.empty?
|
||||||
|
config.vm.provision 'shell', inline: "hostnamectl set-hostname #{$HOSTNAME}"
|
||||||
|
end
|
||||||
|
|
||||||
|
end
|
||||||
234
shared/init.sh
Normal file
234
shared/init.sh
Normal file
@ -0,0 +1,234 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
|
||||||
|
mkdir -p /opt/src/
|
||||||
|
|
||||||
|
# Adding local path to PATH
|
||||||
|
cd ~/
|
||||||
|
touch .bash_profile
|
||||||
|
echo 'export PATH=$PATH:/usr/local/bin:/usr/local/sbin:' >> .bash_profile
|
||||||
|
source ~/.bash_profile
|
||||||
|
|
||||||
|
# Disable SELINUX
|
||||||
|
setenforce 0
|
||||||
|
sed -i -e "s@SELINUX=.*@SELINUX=disabled@g" /etc/selinux/config
|
||||||
|
|
||||||
|
# Adding sysctl configs
|
||||||
|
cat > /etc/sysctl.d/10-avideo.conf <<EOF
|
||||||
|
net.core.default_qdisc=fq
|
||||||
|
net.ipv4.tcp_congestion_control=bbr
|
||||||
|
EOF
|
||||||
|
|
||||||
|
sysctl --system
|
||||||
|
|
||||||
|
|
||||||
|
# Step 1: Update the System
|
||||||
|
dnf update -y && dnf upgrade -y
|
||||||
|
|
||||||
|
dnf install -y epel-release
|
||||||
|
|
||||||
|
/usr/bin/crb enable
|
||||||
|
|
||||||
|
dnf install -y wget tar gzip git bash-completion htop fish vim rsync ruby ruby-devel rubygem-mysql2 unzip tree tmux mlocate
|
||||||
|
dnf install -y python3.9-devel python3.9 python3.9-pip
|
||||||
|
|
||||||
|
#update-alternatives --install /usr/bin/python python /usr/bin/python3.11 1
|
||||||
|
#update-alternatives --install /usr/bin/python python /usr/bin/python3.9 2
|
||||||
|
|
||||||
|
#update-alternatives --install /usr/bin/python3 python3 /usr/bin/python3.11 1
|
||||||
|
#update-alternatives --install /usr/bin/python3 python3 /usr/bin/python3.9 2
|
||||||
|
|
||||||
|
#update-alternatives --set python3 /usr/bin/python3.9
|
||||||
|
#update-alternatives --set python /usr/bin/python3.9
|
||||||
|
|
||||||
|
# Install python dependencies
|
||||||
|
python -m pip install --upgrade pip
|
||||||
|
python -m pip install mycli
|
||||||
|
|
||||||
|
python -m pip install youtube-dl
|
||||||
|
python -m pip install yt-dlp
|
||||||
|
|
||||||
|
cat > /etc/cron.d/youtube-dl <<EOF
|
||||||
|
# Run youtub-dl cron jobs
|
||||||
|
SHELL=/bin/bash
|
||||||
|
PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin
|
||||||
|
MAILTO=root
|
||||||
|
@daily python -m pip install --upgrade youtube-dl > /dev/null
|
||||||
|
@daily python -m pip install --upgrade yt-dlp > /dev/null
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Step 2: Install LAMP stack
|
||||||
|
dnf install -y httpd mod_ssl httpd-tools
|
||||||
|
|
||||||
|
sed -i -e "s@AllowOverride\ None@AllowOverride All@g" /etc/httpd/conf/httpd.conf
|
||||||
|
|
||||||
|
mv -v /etc/httpd/conf.d/welcome.conf /etc/httpd/conf.d/welcome.conf.disabled
|
||||||
|
cp -v /etc/httpd/conf.d/ssl.conf /etc/httpd/conf.d/ssl.conf.original
|
||||||
|
|
||||||
|
cat <<EOF > /etc/httpd/conf.d/ssl.conf
|
||||||
|
Listen 443 https
|
||||||
|
|
||||||
|
SSLPassPhraseDialog exec:/usr/libexec/httpd-ssl-pass-dialog
|
||||||
|
|
||||||
|
SSLSessionCache shmcb:/run/httpd/sslcache(512000)
|
||||||
|
SSLSessionCacheTimeout 300
|
||||||
|
|
||||||
|
SSLCryptoDevice builtin
|
||||||
|
#SSLCryptoDevice ubsec
|
||||||
|
EOF
|
||||||
|
|
||||||
|
mkdir -pv /etc/httpd/sites-enabled
|
||||||
|
mkdir -pv /etc/httpd/sites-avaliable
|
||||||
|
|
||||||
|
egrep "^IncludeOptional\ sites\-enabled\/\*\.conf" /etc/httpd/conf/httpd.conf || \
|
||||||
|
echo 'IncludeOptional sites-enabled/*.conf' >> /etc/httpd/conf/httpd.conf
|
||||||
|
httpd -t
|
||||||
|
httpd -S
|
||||||
|
|
||||||
|
## Gen certs
|
||||||
|
|
||||||
|
mkdir -p /etc/ssl/local
|
||||||
|
|
||||||
|
openssl req -nodes -x509 -sha256 -newkey rsa:4096 \
|
||||||
|
-keyout /etc/ssl/local/localhost.key \
|
||||||
|
-out /etc/ssl/local/localhost.crt \
|
||||||
|
-days 3560 \
|
||||||
|
-subj "/C=IL/ST=Shomron/L=Karney Shomron/O=NgTech LTD/OU=IT/CN=020-NgTech-K-AVideo-Encoder" \
|
||||||
|
-addext "subjectAltName = DNS:localhost,DNS:020-NgTech-K-AVideo-Encoder.k.ngtech.co.il,DNS:*.k.ngtech.co.il,DNS:*.ngtech.co.il"
|
||||||
|
|
||||||
|
|
||||||
|
## Setup vhosts
|
||||||
|
cat <<EOF > /etc/httpd/sites-avaliable/avideo.conf
|
||||||
|
<VirtualHost *:80>
|
||||||
|
ServerName kids-tube.k.ngtech.co.il
|
||||||
|
ServerAlias kids-tube.ngtech.co.il
|
||||||
|
|
||||||
|
DocumentRoot /var/www/AVideo
|
||||||
|
|
||||||
|
<Directory /var/www/AVideo>
|
||||||
|
DirectoryIndex index.php
|
||||||
|
Options +FollowSymLinks
|
||||||
|
AllowOverride All
|
||||||
|
Require all granted
|
||||||
|
</Directory>
|
||||||
|
|
||||||
|
</VirtualHost>
|
||||||
|
<VirtualHost *:443>
|
||||||
|
ServerName kids-tube.k.ngtech.co.il
|
||||||
|
ServerAlias kids-tube.ngtech.co.il
|
||||||
|
DocumentRoot /var/www/AVideo
|
||||||
|
|
||||||
|
ErrorLog logs/ssl_error_log
|
||||||
|
TransferLog logs/ssl_access_log
|
||||||
|
LogLevel warn
|
||||||
|
|
||||||
|
SSLEngine on
|
||||||
|
|
||||||
|
SSLHonorCipherOrder on
|
||||||
|
SSLCipherSuite PROFILE=SYSTEM
|
||||||
|
SSLProxyCipherSuite PROFILE=SYSTEM
|
||||||
|
SSLCertificateFile /etc/ssl/local/localhost.crt
|
||||||
|
SSLCertificateKeyFile /etc/ssl/local/localhost.key
|
||||||
|
#SSLCertificateChainFile /etc/pki/tls/certs/server-chain.crt
|
||||||
|
#SSLCACertificateFile /etc/pki/tls/certs/ca-bundle.crt
|
||||||
|
|
||||||
|
<FilesMatch "\.(cgi|shtml|phtml|php)$">
|
||||||
|
SSLOptions +StdEnvVars
|
||||||
|
</FilesMatch>
|
||||||
|
<Directory "/var/www/cgi-bin">
|
||||||
|
SSLOptions +StdEnvVars
|
||||||
|
</Directory>
|
||||||
|
|
||||||
|
BrowserMatch "MSIE [2-5]" \
|
||||||
|
nokeepalive ssl-unclean-shutdown \
|
||||||
|
downgrade-1.0 force-response-1.0
|
||||||
|
|
||||||
|
# Per-Server Logging:
|
||||||
|
# The home of a custom SSL log file. Use this when you want a
|
||||||
|
# compact non-error SSL logfile on a virtual host basis.
|
||||||
|
CustomLog logs/ssl_request_log \
|
||||||
|
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
|
||||||
|
|
||||||
|
<Directory /var/www/AVideo>
|
||||||
|
DirectoryIndex index.php
|
||||||
|
Options +FollowSymLinks
|
||||||
|
AllowOverride All
|
||||||
|
Require all granted
|
||||||
|
</Directory>
|
||||||
|
|
||||||
|
</VirtualHost>
|
||||||
|
EOF
|
||||||
|
|
||||||
|
cd /etc/httpd/sites-enabled && ln -s ../sites-avaliable/avideo.conf && cd -
|
||||||
|
|
||||||
|
httpd -t
|
||||||
|
httpd -S
|
||||||
|
|
||||||
|
systemctl enable httpd
|
||||||
|
systemctl start httpd
|
||||||
|
|
||||||
|
dnf install -y php php-cli php-fpm php-curl php-mysqlnd php-gd php-readline php-mbstring php-apcu php-xml php-dom php-opcache php-zip php-intl php-common php-bcmath php-json
|
||||||
|
dnf install -y perl-Image-ExifTool
|
||||||
|
|
||||||
|
sed -i -e "s@^post_max_size.*@post_max_size = 1024M@g" \
|
||||||
|
-e "s@^upload_max_filesize.*@upload_max_filesize = 1024M@g" \
|
||||||
|
-e "s@^memory_limit.*@memory_limit = 1024M@g" \
|
||||||
|
-e "s@^max_execution_time.*@max_execution_time = 7200@g" /etc/php.ini
|
||||||
|
sed -i -e "s@^\;env\[PATH\]@env[PATH]@g" /etc/php-fpm.d/www.conf
|
||||||
|
|
||||||
|
systemctl start php-fpm
|
||||||
|
systemctl enable php-fpm
|
||||||
|
|
||||||
|
dnf module reset -y mariadb
|
||||||
|
dnf module enable -y mariadb:10.5
|
||||||
|
|
||||||
|
dnf install -y mariadb-server
|
||||||
|
|
||||||
|
systemctl start mariadb
|
||||||
|
systemctl enable mariadb
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
# Step 3: Create a database and user for avideo and avideoEncoder
|
||||||
|
echo "CREATE DATABASE avideo CHARACTER SET utf8 COLLATE utf8_general_ci;" | mysql -u root
|
||||||
|
echo "CREATE USER 'avideo'@'localhost' IDENTIFIED BY 'avideo';" | mysql -u root
|
||||||
|
echo "GRANT ALL PRIVILEGES ON avideo.* TO 'avideo'@'localhost';" | mysql -u root
|
||||||
|
echo "FLUSH PRIVILEGES;" | mysql -u root
|
||||||
|
|
||||||
|
echo "CREATE DATABASE avideoEncoder CHARACTER SET utf8 COLLATE utf8_general_ci;" | mysql -u root
|
||||||
|
echo "CREATE USER 'avideoEncoder'@'localhost' IDENTIFIED BY 'avideoEncoder';" | mysql -u root
|
||||||
|
echo "GRANT ALL PRIVILEGES ON avideoEncoder.* TO 'avideoEncoder'@'localhost';" | mysql -u root
|
||||||
|
echo "FLUSH PRIVILEGES;" | mysql -u root
|
||||||
|
|
||||||
|
echo "CREATE DATABASE AVideoResources CHARACTER SET utf8 COLLATE utf8_general_ci;" | mysql -u root
|
||||||
|
echo "CREATE USER 'AVideoResources'@'localhost' IDENTIFIED BY 'AVideoResources';" | mysql -u root
|
||||||
|
echo "GRANT ALL PRIVILEGES ON AVideoResources.* TO 'AVideoResources'@'localhost';" | mysql -u root
|
||||||
|
echo "FLUSH PRIVILEGES;" | mysql -u root
|
||||||
|
|
||||||
|
|
||||||
|
# Step 4: Install Avideo
|
||||||
|
mkdir -p /var/www/src
|
||||||
|
|
||||||
|
git clone --depth 1 https://github.com/WWBN/AVideo.git /var/www/AVideo
|
||||||
|
|
||||||
|
git clone --depth 1 https://github.com/WWBN/AVideo-Encoder.git /var/www/AVideo-Encoder
|
||||||
|
|
||||||
|
chown -R apache:apache /var/www/
|
||||||
|
find /var/www/ -type d -exec chmod 775 {} \;
|
||||||
|
find /var/www/ -type f -exec chmod 664 {} \;
|
||||||
|
|
||||||
|
systemctl restart httpd
|
||||||
|
|
||||||
|
firewall-cmd --add-service=http --permanent
|
||||||
|
firewall-cmd --add-service=https --permanent
|
||||||
|
firewall-cmd --add-service=mysql --permanent
|
||||||
|
|
||||||
|
firewall-cmd --reload
|
||||||
|
|
||||||
|
|
||||||
|
# Install ffmpeg
|
||||||
|
#https://johnvansickle.com/ffmpeg/releases/ffmpeg-release-amd64-static.tar.xz
|
||||||
|
|
||||||
|
|
||||||
|
stat /opt/src/ffmpeg-release-amd64-static.tar.xz || wget https://johnvansickle.com/ffmpeg/releases/ffmpeg-release-amd64-static.tar.xz -O /opt/src/ffmpeg-release-amd64-static.tar.xz
|
||||||
|
tar xvf /opt/src/ffmpeg-release-amd64-static.tar.xz -C /opt/src/
|
||||||
|
cp -v /opt/src/ffmpeg-*amd64-static/{ffmpeg,ffprobe,qt-faststart} /usr/local/bin/
|
||||||
1
sync_shared
Normal file
1
sync_shared
Normal file
@ -0,0 +1 @@
|
|||||||
|
|
||||||
Loading…
Reference in New Issue
Block a user