235 lines
7.1 KiB
Bash
235 lines
7.1 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
mkdir -p /opt/src/
|
|
|
|
# Adding local path to PATH
|
|
cd ~/
|
|
touch .bash_profile
|
|
echo 'export PATH=$PATH:/usr/local/bin:/usr/local/sbin:' >> .bash_profile
|
|
source ~/.bash_profile
|
|
|
|
# Disable SELINUX
|
|
setenforce 0
|
|
sed -i -e "s@SELINUX=.*@SELINUX=disabled@g" /etc/selinux/config
|
|
|
|
# Adding sysctl configs
|
|
cat > /etc/sysctl.d/10-avideo.conf <<EOF
|
|
net.core.default_qdisc=fq
|
|
net.ipv4.tcp_congestion_control=bbr
|
|
EOF
|
|
|
|
sysctl --system
|
|
|
|
|
|
# Step 1: Update the System
|
|
dnf update -y && dnf upgrade -y
|
|
|
|
dnf install -y epel-release
|
|
|
|
/usr/bin/crb enable
|
|
|
|
dnf install -y wget tar gzip git bash-completion htop fish vim rsync ruby ruby-devel rubygem-mysql2 unzip tree tmux mlocate
|
|
dnf install -y python3.9-devel python3.9 python3.9-pip
|
|
|
|
#update-alternatives --install /usr/bin/python python /usr/bin/python3.11 1
|
|
#update-alternatives --install /usr/bin/python python /usr/bin/python3.9 2
|
|
|
|
#update-alternatives --install /usr/bin/python3 python3 /usr/bin/python3.11 1
|
|
#update-alternatives --install /usr/bin/python3 python3 /usr/bin/python3.9 2
|
|
|
|
#update-alternatives --set python3 /usr/bin/python3.9
|
|
#update-alternatives --set python /usr/bin/python3.9
|
|
|
|
# Install python dependencies
|
|
python -m pip install --upgrade pip
|
|
python -m pip install mycli
|
|
|
|
python -m pip install youtube-dl
|
|
python -m pip install yt-dlp
|
|
|
|
cat > /etc/cron.d/youtube-dl <<EOF
|
|
# Run youtub-dl cron jobs
|
|
SHELL=/bin/bash
|
|
PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin
|
|
MAILTO=root
|
|
@daily python -m pip install --upgrade youtube-dl > /dev/null
|
|
@daily python -m pip install --upgrade yt-dlp > /dev/null
|
|
EOF
|
|
|
|
# Step 2: Install LAMP stack
|
|
dnf install -y httpd mod_ssl httpd-tools
|
|
|
|
sed -i -e "s@AllowOverride\ None@AllowOverride All@g" /etc/httpd/conf/httpd.conf
|
|
|
|
mv -v /etc/httpd/conf.d/welcome.conf /etc/httpd/conf.d/welcome.conf.disabled
|
|
cp -v /etc/httpd/conf.d/ssl.conf /etc/httpd/conf.d/ssl.conf.original
|
|
|
|
cat <<EOF > /etc/httpd/conf.d/ssl.conf
|
|
Listen 443 https
|
|
|
|
SSLPassPhraseDialog exec:/usr/libexec/httpd-ssl-pass-dialog
|
|
|
|
SSLSessionCache shmcb:/run/httpd/sslcache(512000)
|
|
SSLSessionCacheTimeout 300
|
|
|
|
SSLCryptoDevice builtin
|
|
#SSLCryptoDevice ubsec
|
|
EOF
|
|
|
|
mkdir -pv /etc/httpd/sites-enabled
|
|
mkdir -pv /etc/httpd/sites-avaliable
|
|
|
|
egrep "^IncludeOptional\ sites\-enabled\/\*\.conf" /etc/httpd/conf/httpd.conf || \
|
|
echo 'IncludeOptional sites-enabled/*.conf' >> /etc/httpd/conf/httpd.conf
|
|
httpd -t
|
|
httpd -S
|
|
|
|
## Gen certs
|
|
|
|
mkdir -p /etc/ssl/local
|
|
|
|
openssl req -nodes -x509 -sha256 -newkey rsa:4096 \
|
|
-keyout /etc/ssl/local/localhost.key \
|
|
-out /etc/ssl/local/localhost.crt \
|
|
-days 3560 \
|
|
-subj "/C=IL/ST=Shomron/L=Karney Shomron/O=NgTech LTD/OU=IT/CN=020-NgTech-K-AVideo-Encoder" \
|
|
-addext "subjectAltName = DNS:localhost,DNS:020-NgTech-K-AVideo-Encoder.k.ngtech.co.il,DNS:*.k.ngtech.co.il,DNS:*.ngtech.co.il"
|
|
|
|
|
|
## Setup vhosts
|
|
cat <<EOF > /etc/httpd/sites-avaliable/avideo.conf
|
|
<VirtualHost *:80>
|
|
ServerName kids-tube.k.ngtech.co.il
|
|
ServerAlias kids-tube.ngtech.co.il
|
|
|
|
DocumentRoot /var/www/AVideo
|
|
|
|
<Directory /var/www/AVideo>
|
|
DirectoryIndex index.php
|
|
Options +FollowSymLinks
|
|
AllowOverride All
|
|
Require all granted
|
|
</Directory>
|
|
|
|
</VirtualHost>
|
|
<VirtualHost *:443>
|
|
ServerName kids-tube.k.ngtech.co.il
|
|
ServerAlias kids-tube.ngtech.co.il
|
|
DocumentRoot /var/www/AVideo
|
|
|
|
ErrorLog logs/ssl_error_log
|
|
TransferLog logs/ssl_access_log
|
|
LogLevel warn
|
|
|
|
SSLEngine on
|
|
|
|
SSLHonorCipherOrder on
|
|
SSLCipherSuite PROFILE=SYSTEM
|
|
SSLProxyCipherSuite PROFILE=SYSTEM
|
|
SSLCertificateFile /etc/ssl/local/localhost.crt
|
|
SSLCertificateKeyFile /etc/ssl/local/localhost.key
|
|
#SSLCertificateChainFile /etc/pki/tls/certs/server-chain.crt
|
|
#SSLCACertificateFile /etc/pki/tls/certs/ca-bundle.crt
|
|
|
|
<FilesMatch "\.(cgi|shtml|phtml|php)$">
|
|
SSLOptions +StdEnvVars
|
|
</FilesMatch>
|
|
<Directory "/var/www/cgi-bin">
|
|
SSLOptions +StdEnvVars
|
|
</Directory>
|
|
|
|
BrowserMatch "MSIE [2-5]" \
|
|
nokeepalive ssl-unclean-shutdown \
|
|
downgrade-1.0 force-response-1.0
|
|
|
|
# Per-Server Logging:
|
|
# The home of a custom SSL log file. Use this when you want a
|
|
# compact non-error SSL logfile on a virtual host basis.
|
|
CustomLog logs/ssl_request_log \
|
|
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
|
|
|
|
<Directory /var/www/AVideo>
|
|
DirectoryIndex index.php
|
|
Options +FollowSymLinks
|
|
AllowOverride All
|
|
Require all granted
|
|
</Directory>
|
|
|
|
</VirtualHost>
|
|
EOF
|
|
|
|
cd /etc/httpd/sites-enabled && ln -s ../sites-avaliable/avideo.conf && cd -
|
|
|
|
httpd -t
|
|
httpd -S
|
|
|
|
systemctl enable httpd
|
|
systemctl start httpd
|
|
|
|
dnf install -y php php-cli php-fpm php-curl php-mysqlnd php-gd php-readline php-mbstring php-apcu php-xml php-dom php-opcache php-zip php-intl php-common php-bcmath php-json
|
|
dnf install -y perl-Image-ExifTool
|
|
|
|
sed -i -e "s@^post_max_size.*@post_max_size = 1024M@g" \
|
|
-e "s@^upload_max_filesize.*@upload_max_filesize = 1024M@g" \
|
|
-e "s@^memory_limit.*@memory_limit = 1024M@g" \
|
|
-e "s@^max_execution_time.*@max_execution_time = 7200@g" /etc/php.ini
|
|
sed -i -e "s@^\;env\[PATH\]@env[PATH]@g" /etc/php-fpm.d/www.conf
|
|
|
|
systemctl start php-fpm
|
|
systemctl enable php-fpm
|
|
|
|
dnf module reset -y mariadb
|
|
dnf module enable -y mariadb:10.5
|
|
|
|
dnf install -y mariadb-server
|
|
|
|
systemctl start mariadb
|
|
systemctl enable mariadb
|
|
|
|
|
|
|
|
# Step 3: Create a database and user for avideo and avideoEncoder
|
|
echo "CREATE DATABASE avideo CHARACTER SET utf8 COLLATE utf8_general_ci;" | mysql -u root
|
|
echo "CREATE USER 'avideo'@'localhost' IDENTIFIED BY 'avideo';" | mysql -u root
|
|
echo "GRANT ALL PRIVILEGES ON avideo.* TO 'avideo'@'localhost';" | mysql -u root
|
|
echo "FLUSH PRIVILEGES;" | mysql -u root
|
|
|
|
echo "CREATE DATABASE avideoEncoder CHARACTER SET utf8 COLLATE utf8_general_ci;" | mysql -u root
|
|
echo "CREATE USER 'avideoEncoder'@'localhost' IDENTIFIED BY 'avideoEncoder';" | mysql -u root
|
|
echo "GRANT ALL PRIVILEGES ON avideoEncoder.* TO 'avideoEncoder'@'localhost';" | mysql -u root
|
|
echo "FLUSH PRIVILEGES;" | mysql -u root
|
|
|
|
echo "CREATE DATABASE AVideoResources CHARACTER SET utf8 COLLATE utf8_general_ci;" | mysql -u root
|
|
echo "CREATE USER 'AVideoResources'@'localhost' IDENTIFIED BY 'AVideoResources';" | mysql -u root
|
|
echo "GRANT ALL PRIVILEGES ON AVideoResources.* TO 'AVideoResources'@'localhost';" | mysql -u root
|
|
echo "FLUSH PRIVILEGES;" | mysql -u root
|
|
|
|
|
|
# Step 4: Install Avideo
|
|
mkdir -p /var/www/src
|
|
|
|
git clone --depth 1 https://github.com/WWBN/AVideo.git /var/www/AVideo
|
|
|
|
git clone --depth 1 https://github.com/WWBN/AVideo-Encoder.git /var/www/AVideo-Encoder
|
|
|
|
chown -R apache:apache /var/www/
|
|
find /var/www/ -type d -exec chmod 775 {} \;
|
|
find /var/www/ -type f -exec chmod 664 {} \;
|
|
|
|
systemctl restart httpd
|
|
|
|
firewall-cmd --add-service=http --permanent
|
|
firewall-cmd --add-service=https --permanent
|
|
firewall-cmd --add-service=mysql --permanent
|
|
|
|
firewall-cmd --reload
|
|
|
|
|
|
# Install ffmpeg
|
|
#https://johnvansickle.com/ffmpeg/releases/ffmpeg-release-amd64-static.tar.xz
|
|
|
|
|
|
stat /opt/src/ffmpeg-release-amd64-static.tar.xz || wget https://johnvansickle.com/ffmpeg/releases/ffmpeg-release-amd64-static.tar.xz -O /opt/src/ffmpeg-release-amd64-static.tar.xz
|
|
tar xvf /opt/src/ffmpeg-release-amd64-static.tar.xz -C /opt/src/
|
|
cp -v /opt/src/ffmpeg-*amd64-static/{ffmpeg,ffprobe,qt-faststart} /usr/local/bin/
|