From d9f315cd8f4cfca122cc5177192fb07475d5f3c2 Mon Sep 17 00:00:00 2001
From: MReenen <mail@matsvanreenen.nl>
Date: Mon, 4 Jun 2018 14:27:52 +0200
Subject: [PATCH] first commit

---
 adddomain              | 20 ++++++++++++++++++++
 bugs.md                | 23 +++++++++++++++++++++++
 dns/adddomain          | 20 ++++++++++++++++++++
 dns/named.conf         |  2 ++
 dns/named.conf.options | 10 ++++++++++
 named.conf             |  2 ++
 named.conf.options     | 10 ++++++++++
 proxy/enablesite       |  3 +++
 proxy/newsite          | 12 ++++++++++++
 readme.md              |  0
 setup.sh               | 33 +++++++++++++++++++++++++++++++++
 tmpTsServer.sh         | 40 ++++++++++++++++++++++++++++++++++++++++
 12 files changed, 175 insertions(+)
 create mode 100644 adddomain
 create mode 100644 bugs.md
 create mode 100644 dns/adddomain
 create mode 100644 dns/named.conf
 create mode 100644 dns/named.conf.options
 create mode 100644 named.conf
 create mode 100644 named.conf.options
 create mode 100644 proxy/enablesite
 create mode 100644 proxy/newsite
 create mode 100644 readme.md
 create mode 100644 setup.sh
 create mode 100644 tmpTsServer.sh

diff --git a/adddomain b/adddomain
new file mode 100644
index 0000000..005fec3
--- /dev/null
+++ b/adddomain
@@ -0,0 +1,20 @@
+#!/bin/bash
+
+cat > /etc/bind/named.conf.domains/$1.conf <<EOF
+zone "$1" {
+  type master;
+  file "/etc/bind/named.conf.domain/db.$1";
+};
+EOF
+
+cat > /etc/bind/named.conf.domain/db.$1 <<EOF
+$TTL	604800
+@	IN	SOA	$1. root.$1. (
+			      2		; Serial
+			 604800		; Refresh
+			  86400		; Retry
+			2419200		; Expire
+			 604800 )	; Negative Cache TTL
+;
+@	          IN  A    $2
+EOF
diff --git a/bugs.md b/bugs.md
new file mode 100644
index 0000000..cf9e8aa
--- /dev/null
+++ b/bugs.md
@@ -0,0 +1,23 @@
+#all bugs and improfments of the installer
+
+##bugs
+no bugs known yet
+
+##maiger improfments
+ - add ssl support to nginx
+ - proxy/dns: add static IP or add firewall
+ - dns: edit dns record
+
+##improfments
+ - hard set containers to correct storage and bridge
+ - add IP and NAT to the bridge
+ - proxy/enablesite: check if site exist
+ - proxy/newsite: check is site already exist
+ - proxy: remove and update site
+ - dns: add record template
+
+## for next version
+ - add software support for nextcloud, webmail, etc.
+ - add NAS
+ - add mail servers
+ - add management server
diff --git a/dns/adddomain b/dns/adddomain
new file mode 100644
index 0000000..005fec3
--- /dev/null
+++ b/dns/adddomain
@@ -0,0 +1,20 @@
+#!/bin/bash
+
+cat > /etc/bind/named.conf.domains/$1.conf <<EOF
+zone "$1" {
+  type master;
+  file "/etc/bind/named.conf.domain/db.$1";
+};
+EOF
+
+cat > /etc/bind/named.conf.domain/db.$1 <<EOF
+$TTL	604800
+@	IN	SOA	$1. root.$1. (
+			      2		; Serial
+			 604800		; Refresh
+			  86400		; Retry
+			2419200		; Expire
+			 604800 )	; Negative Cache TTL
+;
+@	          IN  A    $2
+EOF
diff --git a/dns/named.conf b/dns/named.conf
new file mode 100644
index 0000000..23ab493
--- /dev/null
+++ b/dns/named.conf
@@ -0,0 +1,2 @@
+include "/etc/bind/named.conf.options";
+include "/etc/bind/named.conf.domains/*.conf";
diff --git a/dns/named.conf.options b/dns/named.conf.options
new file mode 100644
index 0000000..377ee8e
--- /dev/null
+++ b/dns/named.conf.options
@@ -0,0 +1,10 @@
+options {
+  directory "/var/cache/bind";
+  forwarders {
+    8.8.8.8;
+    8.8.4.4;
+  };
+  dnssec-validation auto;
+  auth-nxdomain no;
+  listen-on-v6 { any; };
+};
diff --git a/named.conf b/named.conf
new file mode 100644
index 0000000..23ab493
--- /dev/null
+++ b/named.conf
@@ -0,0 +1,2 @@
+include "/etc/bind/named.conf.options";
+include "/etc/bind/named.conf.domains/*.conf";
diff --git a/named.conf.options b/named.conf.options
new file mode 100644
index 0000000..377ee8e
--- /dev/null
+++ b/named.conf.options
@@ -0,0 +1,10 @@
+options {
+  directory "/var/cache/bind";
+  forwarders {
+    8.8.8.8;
+    8.8.4.4;
+  };
+  dnssec-validation auto;
+  auth-nxdomain no;
+  listen-on-v6 { any; };
+};
diff --git a/proxy/enablesite b/proxy/enablesite
new file mode 100644
index 0000000..869eb84
--- /dev/null
+++ b/proxy/enablesite
@@ -0,0 +1,3 @@
+#!/bin/bash
+
+ln -s /etc/nginx/site-available/$1 /etc/nginx/site-enabled/$1
diff --git a/proxy/newsite b/proxy/newsite
new file mode 100644
index 0000000..fdf8396
--- /dev/null
+++ b/proxy/newsite
@@ -0,0 +1,12 @@
+#!/bin/bash
+
+cat > /etc/nginx/sites-available/$1 <<EOF
+server {
+  listen 80 default_server;
+  #listen 443 ssl default_server;
+  server_name $1;
+  location / {
+    proxy_pass $2
+  }
+}
+EOF
diff --git a/readme.md b/readme.md
new file mode 100644
index 0000000..e69de29
diff --git a/setup.sh b/setup.sh
new file mode 100644
index 0000000..19287fc
--- /dev/null
+++ b/setup.sh
@@ -0,0 +1,33 @@
+#/bin/bash
+
+apt-get update
+apt-get upgrade -y
+
+apt-get install lxd
+
+lxc storage create SSD dir
+#TODO: add IP and NAT.
+lxc network create brlive0
+
+# create proxy
+lxc launch ubuntu:18.04 proxy
+lxc exec proxy -- apt-get update
+lxc exec proxy -- apt-get upgrade -y
+lxc exec proxy -- apt-get install nginx
+lxc file push ./proxy/newsite proxy/root/newsite
+lxc file puxh ./proxy/enablesite proxy/root/enablesite
+lxc exec proxy -- chmod +x /root/newsite
+lxc exec proxy -- chmod +x /root/enablesite
+
+# create DNS
+lxc lanch ubuntu:18.04 dns
+lxc exec dns -- apt-get update
+lxc exec dns -- apt-get upgrade -y
+lxc exec dns -- apt-get install bind9
+lxc exec dns -- mkdir /etc/bind/named.conf.domains
+lxc exec dns -- mv /etc/bind/named.conf.options /etc/bind/named.conf.options.backup
+lxc exec dns -- mv /etc/bind/named.conf.local /etc/bind/named.conf.local.backup
+lxc exec dns -- mv /etc/bind/named.conf.default-zones /etc/bind/named.conf.default-zones.backup
+lxc exec dns -- ./dns/*.conf.* dns/etc/nginx/
+lxc file push ./dns/adddomain dns/root/adddomain
+lxc exec dns -- chmod +x /root/adddomain
diff --git a/tmpTsServer.sh b/tmpTsServer.sh
new file mode 100644
index 0000000..a4f4971
--- /dev/null
+++ b/tmpTsServer.sh
@@ -0,0 +1,40 @@
+#/bin/bash
+
+apt-get update
+apt-get upgrade -y
+
+snap install openscad-plars
+snap install spotify
+snap isntall atom --classic
+snap install kicad-snap
+
+apt-get install x11vnc unzip
+
+wget -O novnc.zip https://github.com/novnc/noVNC/archive/v1.0.0.zip
+unzip novnc.zip
+mkdir /usr/share/novnc
+mv noVNC-1.0.0/* /usr/share/novnc/
+x11vnc -storepasswd
+mkdir /etc/x11vnc
+mv /root/.vnc/passwd /etc/x11vnc/
+chmod 700 /etc/x11vnc/passwd
+chown root:root /etc/x11vnc/passwd
+
+cat >> /etc/bash.bashrc <<EOF
+#added by setup script
+# launch noVNC
+/usr/share/novnc/utils/launch.sh --vnc localhost:5900 --listen 80
+# launch x11vnc
+/usr/bin/x11vnc -auth guess -forever -loop -noxdamage -repeat -rfbauth /etc/x11vnc/passwd -rfbport 5900 -shared
+EOF
+
+cat > /usr/local/applications/openscad.desktop <<EOF
+[Desktop Entry]
+Name=OpenSCAD
+Comment=Opensource CAD software
+Exec=openscad-plars
+Icon=/snap/openscad-plars/current/icon.png
+Type=Application
+StartupNotify=false
+#Categories=
+EOF