LinuxArch LinuxScripts - Obsolete
,
Source
Edit
History

整合型Archlinux安裝Script - 5.nextc_arch.sh說明

前言

這個文件反而是這個系列最後寫的…但是寫完之後就遇上了準備全面改用PhotoOS+Docker,所以…就當練習囉

使用前

*Update 2021/06/16 因為我自己的Nextcloud要架設在沒有DHCP服務的DMZ區域,所以開機使用arch.sh前須要先設定網路

1
2
3
4
5
6
7
8
9
#開機後先確認你的網路卡名稱
ip link
#除了lo以外的那張ens...就是你的卡號,以下假設為ens160

#設定ip(假設是192.168.10.1)
ip address add 192.168.10.1/24 dev ens160

#設定route(假設是192.168.10.254)
ip route add default via 192.168.10.254 dev ens160

好了之後Ping一下會通就好了

  • 其實不用這個,直接用Docker搞不好還比較快

Script內容

Script內容說明

基本定義

1
2
3
4
5
6
7
8
9
10
11
#!/bin/sh
#Parmeter Pre-Define
#Color for warning
COLOR_W='\e[35m'
#Color for description
COLOR1='\e[94m'
COLOR2='\e[32m'
# Color for Highlight package
COLOR_H1='\e[96m'
COLOR_H2='\e[34m'
NC='\e[0m'

定義Script中字串的顏色

警告標語與版號

1
2
3
4
5
6
7
8
9
#Notice before use
echo -e "${COLOR_W}=====================Warning=======================\n${NC}"
echo -e "${COLOR_W}=  Kiwi's Arch linux Auto install script Ver.1.1  =\n${NC}"
echo -e "${COLOR_W}=  Arch + Nextcloud Install script Ver.1.0        =\n${NC}"
echo -e "${COLOR_W}=  This Script for Kiwi private use.              =\n${NC}"
echo -e "${COLOR_W}=  If you have any issue on usage,                =\n${NC}"
echo -e "${COLOR_W}=  Please DON'T Feedback to Kiwi                  =\n${NC}"
echo -e "${COLOR_W}=  And you should take your own responsibility    =\n${NC}"
echo -e "${COLOR_W}===================================================\n${NC}"

設定時區與硬體時間

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
#change Timezone
echo -e "${COLOR1}Please select your time zone\n${NC}${COLOR_H1}1)Taipei\n2)Shanghai\n*)Whatever..I don't care\n${NC}"
while :
do
	read ZONE
	case $ZONE in
		1)
			echo -e "${COLOR1}Set Time Zone to Asia/Taipei${NC}"
			ln -sf /usr/share/zoneinfo/Asia/Taipei /etc/localtime
			hwclock --systohc --utc
			break
			;;
		2)
			echo -e "${COLOR1}Set Time Zone to Asia/Shanghai${NC}"
			ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
			hwclock --systohc --utc
			break
			;;
		*)
			echo -e "${COLOR1}Nobody cares the local time!!${NC}"
			hwclock --systohc --utc
			break
			;;
	esac
done
echo -e "${COLOR2}Completed${NC}"

系統語系設定為UTF-8

1
2
3
4
5
6
7
8
9
10
#locale-gen to add en_US & zh_TW
echo -e "${COLOR1}Setting local file${NC}"
echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen
echo "zh_TW.UTF-8 UTF-8" >> /etc/locale.gen
echo -e "${COLOR1}Generate locale.conf${NC}"
locale-gen
echo -e "${COLOR1}Setting locale.conf${NC}"
echo LANG=en_US.UTF-8 > /etc/locale.conf
export LANG=en_US.UTF-8
echo -e "${COLOR2}Completed${NC}"

網路設定

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
#Hostname
echo -e "${COLOR1}Please input your hostname\n${NC}"
read HOSTNAME
echo ${HOSTNAME} > /etc/hostname
echo "127.0.0.1 localhost ${HOSTNAME}" >> /etc/hosts
echo -e "${COLOR2}Completed${NC}"

echo -e "${COLOR1}Define your NIC by Mac address${NC}"
echo -e "${COLOR1}Please input your MAC Address(need to be lowcase):\n${NC}"
read OUTSIDE
echo 'SUBSYSTEM=="net", ACTION=="add", ATTR{address}=="'${OUTSIDE}'", NAME="EXT0"' > /etc/udev/rules.d/10-network.rules
echo -e "${COLOR2}Completed${NC}"

echo -e "${COLOR1}Define your IP for EXT0:${NC}"
echo "Description='EXT0 IP SETTING'" > /etc/netctl/EXT0.service
echo "Interface=EXT0" >> /etc/netctl/EXT0.service
echo "Connection=ethernet" >> /etc/netctl/EXT0.service
echo "IP=static" >> /etc/netctl/EXT0.service
echo -n "${COLOR1}Please input your IP address:\n${NC}"
read EXT_IP
echo "Address=('${EXT_IP}/24')" >> /etc/netctl/EXT0.service
echo -n "${COLOR1}Please input your Gateway IP address:\n${NC}"
read GATE_IP
echo "Gateway='${GATE_IP}'" >> /etc/netctl/EXT0.service
echo -n "${COLOR1}Please input your DNS IP address:\n${NC}"
read DNS_IP
echo "DNS=('${DNS_IP}')" >> /etc/netctl/EXT0.service
echo -e "${COLOR2}Enable EXT0${NC}"
netctl enable EXT0.service
echo -e "${COLOR2}Finished.${NC}"
  • 這個設定是利用固定的**Mac Address來定義NIC Interface的名字為EXT0**
  • 這個設定是使用netctl進行的

變更root密碼與建立其他帳號

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
#Root Password
echo -e "${COLOR1}Set your root password${NC}"
passwd
chsh -s /bin/zsh
echo -e "${COLOR2}Completed${NC}"

#add User
echo -e "${COLOR1}Add user account:${NC}"
echo -n "${COLOR1}What ID you want:${NC}"
read YOURID
useradd -m -g root -s /bin/zsh ${YOURID}
passwd ${YOURID}
echo -e "${COLOR2}Completed${NC}"

echo -e "${COLOR1}Add $YOURID into sudo list${NC}"
pacman -Syu sudo
echo "${YOURID} ALL=(ALL) ALL" >> /etc/sudoers
echo -e "${COLOR2}Completed${NC}"

安裝程式

1
2
3
4
5
6
7
8
9
10
11
12
13
#install Tools
echo -e "${COLOR1}Install Packages${NC}"
echo -e "${COLOR1}tmux${NC}"
pacman -Syu --noconfirm git go base-devel tmux mariadb php php-apcu php-fpm php-gd php-imap php-intl php-imagick nginx certbot certbot-nginx nextcloud
echo -e "${COLOR2}Completed${NC}"
echo -e "${COLOR1}Install yay${NC}"
cd /root
git clone https://aur.archlinux.org/yay.git
chomd 777 yay
cd yay
sudo -u kiwi makepkg -si
rm -rf yay
sudo -u kiwi yay -S php-smbclient

*Update 2021/06/16

Nextcloud Server基本上需要Database - MariaDB, PHP, Web Server - Nginx,所以就一口氣裝上

相關服務社定

Mariadb
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
#Setup service
#setup MariaDB
echo -e "${COLOR1}Start to Setup MariaDB${NC}"
mariadb-install-db --user=mysql --basedir=/usr --datadir=/var/lib/mysql
mkdir -pv /var/lib/mysqltmp
chown mysql:mysql /var/lib/mysqltmp
echo "tmpfs   /var/lib/mysqltmp   tmpfs   rw,gid=mysql,uid=mysql,size=100M,mode=0750,noatime   0 0" >> /etc/fstab
echo "[client]" >> /etc/my.cnf
echo "default-character-set = utf8mb4" >> /etc/my.cnf
echo "" >> /etc/my.cnf
echo "[mysql]" >> /etc/my.cnf
echo "default-character-set = utf8mb4" >> /etc/my.cnf
echo "" >> /etc/my.cnf
echo "[mysqld]" >> /etc/my.cnf
echo "collation_server = utf8mb4_unicode_ci" >> /etc/my.cnf
echo "character_set_server = utf8mb4" >> /etc/my.cnf
echo "tmpdir      = /var/lib/mysqltmp" >> /etc/my.cnf
mount /var/lib/mysqltmp
systemctl enable mariadb.service
sudo -u mysql /usr/bin/mariadbd &

mysql_secure_installation
echo -n "${COLOR1}Please input your Username for Nextcloud Database:\n${NC}"
read NCUSER
echo -n "${COLOR1}Please input your Password for Nextcloud Database User:\n${NC}"
read NCPASSWD
mysql -u root -p -e"CREATE DATABASE nextcloud DEFAULT CHARACTER SET 'utf8mb4' COLLATE 'utf8mb4_general_ci';GRANT ALL PRIVILEGES ON nextcloud.* TO '${NCUSER}'@'localhost' IDENTIFIED BY '${NCPASSWD}';FLUSH PRIVILEGES;"
echo -e "${COLOR2}MariaDB setup compleated${NC}"
PHP
1
2
3
4
#Setup PHP
echo -e "${COLOR1}change PHP setting$${NC}"
curl -o /etc/php/php.ini https://kiwi0093.github.io/script/Arch/php.ini
echo -e "${COLOR2}PHP setting completed${NC}"
Nextcloud
1
2
3
4
5
6
#Setup nextcloud
echo -e "${COLOR1}Set up Nextcloud${NC}"
echo "nexcloud ALL=(ALL) ALL" >> /etc/sudoers
sudo -u nextcloud occ maintenance:install --database mysql --database-name nextcloud --database-host localhost --database-user ${NCUSER} --database-pass=<${NCPASSWD}> --data-dir /var/lib/nextcloud/data/
curl -o /usr/share/webapps/nextcloud/config/config.php https://kiwi0093.github.io/script/Arch/config.php
echo -e "${COLOR2}nexcloud set up compleated${NC}"
PHP-FPM
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
#Set up PHP-FPM
echo -e "${COLOR1}Set up PHP-FPM${NC}"
echo "[nextcloud]" > /etc/php/php-fpm.d/nextcloud.conf
echo "user = nextcloud" >> /etc/php/php-fpm.d/nextcloud.conf
echo "group = nextcloud" >> /etc/php/php-fpm.d/nextcloud.conf
echo "listen = /run/nextcloud/nextcloud.sock" >> /etc/php/php-fpm.d/nextcloud.conf
echo "env[PATH] = /usr/local/bin:/usr/bin:/bin" >> /etc/php/php-fpm.d/nextcloud.conf
echo "env[TMP] = /tmp" >> /etc/php/php-fpm.d/nextcloud.conf
echo "" >> /etc/php/php-fpm.d/nextcloud.conf
echo "; should be accessible by your web server" >> /etc/php/php-fpm.d/nextcloud.conf
echo "listen.owner = http" >> /etc/php/php-fpm.d/nextcloud.conf
echo "listen.group = http" >> /etc/php/php-fpm.d/nextcloud.conf
echo "" >> /etc/php/php-fpm.d/nextcloud.conf
echo "pm = dynamic" >> /etc/php/php-fpm.d/nextcloud.conf
echo "pm.max_children = 15" >> /etc/php/php-fpm.d/nextcloud.conf
echo "pm.start_servers = 2" >> /etc/php/php-fpm.d/nextcloud.conf
echo "pm.min_spare_servers = 1" >> /etc/php/php-fpm.d/nextcloud.conf
echo "pm.max_spare_servers = 3" >> /etc/php/php-fpm.d/nextcloud.conf

mkdir /etc/systemd/system/php-fpm.service.d/
echo "[Service]" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "# Your data directory" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "ReadWritePaths=/var/lib/nextcloud/data" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "# Optional: add if you've set the default apps directory to be writable in config.php" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "ReadWritePaths=/usr/share/webapps/nextcloud/apps" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "# Optional: unnecessary if you've set 'config_is_read_only' => true in your config.php" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "ReadWritePaths=/usr/share/webapps/nextcloud/config" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "ReadWritePaths=/etc/webapps/nextcloud/config" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "# Optional: add if you want to use Nextcloud's internal update process" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "# ReadWritePaths=/usr/share/webapps/nextcloud" > /etc/systemd/system/php-fpm.service.d/override.conf
systemctl enable php-fpm.service
echo -e "${COLOR2}PHP-FPM setting completed${NC}"
Nginx
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
#set up nginx
echo -e "${COLOR1}Set up Nginx${NC}"
echo -n "${COLOR1}Please input you Domain for your Nextcloud Server${NC}"
read NCDOMAIN
mv /etc/nginx/nginx.conf /etc/nginx.conf.old
mkdir /etc/nginx/conf.d
mkdir /etc/nginx/sites-enabled
echo "user http;" > /etc/nginx/nginx.conf
echo "worker_processes auto;" >> /etc/nginx/nginx.conf
echo "worker_cpu_affinity auto;" >> /etc/nginx/nginx.conf
echo "" >> /etc/nginx/nginx.conf
echo "events {" >> /etc/nginx/nginx.conf
echo "    multi_accept on;" >> /etc/nginx/nginx.conf
echo "    worker_connections 1024;" >> /etc/nginx/nginx.conf
echo "}" >> /etc/nginx/nginx.conf
echo "" >> /etc/nginx/nginx.conf
echo "http {" >> /etc/nginx/nginx.conf
echo "    charset utf-8;" >> /etc/nginx/nginx.conf
echo "    sendfile on;" >> /etc/nginx/nginx.conf
echo "    tcp_nopush on;" >> /etc/nginx/nginx.conf
echo "    tcp_nodelay on;" >> /etc/nginx/nginx.conf
echo "    server_tokens off;" >> /etc/nginx/nginx.conf
echo "    log_not_found off;" >> /etc/nginx/nginx.conf
echo "    types_hash_max_size 4096;" >> /etc/nginx/nginx.conf
echo "    client_max_body_size 16M;" >> /etc/nginx/nginx.conf
echo "" >> /etc/nginx/nginx.conf
echo "    # MIME" >> /etc/nginx/nginx.conf
echo "    include mime.types;" >> /etc/nginx/nginx.conf
echo "    default_type application/octet-stream;" >> /etc/nginx/nginx.conf
echo "" >> /etc/nginx/nginx.conf
echo "    # logging" >> /etc/nginx/nginx.conf
echo "    access_log /var/log/nginx/access.log;" >> /etc/nginx/nginx.conf
echo "    error_log /var/log/nginx/error.log warn;" >> /etc/nginx/nginx.conf
echo "" >> /etc/nginx/nginx.conf
echo "    # load configs" >> /etc/nginx/nginx.conf
echo "    include /etc/nginx/conf.d/*.conf;" >> /etc/nginx/nginx.conf
echo "    include /etc/nginx/sites-enabled/*;" >> /etc/nginx/nginx.conf
echo "}" >> /etc/nginx/nginx.conf

echo "upstream php-handler {" > /etc/nginx/sites-enabled/nextcloud
echo "    server 127.0.0.1:9000;" >> /etc/nginx/sites-enabled/nextcloud
echo "    #server unix:/var/run/php/php7.4-fpm.sock;" >> /etc/nginx/sites-enabled/nextcloud
echo "}" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "server {" >> /etc/nginx/sites-enabled/nextcloud
echo "    listen 80;" >> /etc/nginx/sites-enabled/nextcloud
echo "    listen [::]:80;" >> /etc/nginx/sites-enabled/nextcloud
echo "    server_name ${NCDOMAIN};" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    # Enforce HTTPS" >> /etc/nginx/sites-enabled/nextcloud
echo '    return 301 https://$server_name$request_uri;' >> /etc/nginx/sites-enabled/nextcloud
echo "}" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "server {" >> /etc/nginx/sites-enabled/nextcloud
echo "    listen 443      ssl http2;" >> /etc/nginx/sites-enabled/nextcloud
echo "    listen [::]:443 ssl http2;" >> /etc/nginx/sites-enabled/nextcloud
echo "    server_name ${NCDOMAIN};" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    ssl_certificate     /etc/ssl/nginx/${NCDOMAIN}.crt;" >> /etc/nginx/sites-enabled/nextcloud
echo "    ssl_certificate_key /etc/ssl/nginx/${NCDOMAIN}.key;" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    # set max upload size" >> /etc/nginx/sites-enabled/nextcloud
echo "    client_max_body_size 16G;" >> /etc/nginx/sites-enabled/nextcloud
echo "    fastcgi_buffers 64 4K;" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    # Enable gzip but do not remove ETag headers" >> /etc/nginx/sites-enabled/nextcloud
echo "    gzip on;" >> /etc/nginx/sites-enabled/nextcloud
echo "    gzip_vary on;" >> /etc/nginx/sites-enabled/nextcloud
echo "    gzip_comp_level 4;" >> /etc/nginx/sites-enabled/nextcloud
echo "    gzip_min_length 256;" >> /etc/nginx/sites-enabled/nextcloud
echo "    gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;" >> /etc/nginx/sites-enabled/nextcloud
echo "    gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    # HTTP response headers borrowed from Nextcloud \`.htaccess\`" >> /etc/nginx/sites-enabled/nextcloud
echo "    add_header Referrer-Policy                      \"no-referrer\"   always;" >> /etc/nginx/sites-enabled/nextcloud
echo "    add_header X-Content-Type-Options               \"nosniff\"       always;" >> /etc/nginx/sites-enabled/nextcloud
echo "    add_header X-Download-Options                   \"noopen\"        always;" >> /etc/nginx/sites-enabled/nextcloud
echo "    add_header X-Frame-Options                      \"SAMEORIGIN\"    always;" >> /etc/nginx/sites-enabled/nextcloud
echo "    add_header X-Permitted-Cross-Domain-Policies    \"none\"          always;" >> /etc/nginx/sites-enabled/nextcloud
echo "    add_header X-Robots-Tag                         \"none\"          always;" >> /etc/nginx/sites-enabled/nextcloud
echo "    add_header X-XSS-Protection                     \"1; mode=block\" always;" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    # Remove X-Powered-By, which is an information leak" >> /etc/nginx/sites-enabled/nextcloud
echo "    fastcgi_hide_header X-Powered-By;" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    # Path to the root of your installation" >> /etc/nginx/sites-enabled/nextcloud
echo "    root /var/www/nextcloud;" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo '    index index.php index.html /index.php$request_uri;' >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    location = / {" >> /etc/nginx/sites-enabled/nextcloud
echo '        if ( $http_user_agent ~ ^DavClnt ) {' >> /etc/nginx/sites-enabled/nextcloud
echo '            return 302 /remote.php/webdav/$is_args$args;' >> /etc/nginx/sites-enabled/nextcloud
echo "        }" >> /etc/nginx/sites-enabled/nextcloud
echo "    }" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    location = /robots.txt {" >> /etc/nginx/sites-enabled/nextcloud
echo "        allow all;" >> /etc/nginx/sites-enabled/nextcloud
echo "        log_not_found off;" >> /etc/nginx/sites-enabled/nextcloud
echo "        access_log off;" >> /etc/nginx/sites-enabled/nextcloud
echo "    }" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo '    location ^~ /.well-known {' >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "        location = /.well-known/carddav { return 301 /remote.php/dav/; }" >> /etc/nginx/sites-enabled/nextcloud
echo "        location = /.well-known/caldav  { return 301 /remote.php/dav/; }" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo '        location /.well-known/acme-challenge    { try_files $uri $uri/ =404; }' >> /etc/nginx/sites-enabled/nextcloud
echo '        location /.well-known/pki-validation    { try_files $uri $uri/ =404; }' >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo '        return 301 /index.php$request_uri;' >> /etc/nginx/sites-enabled/nextcloud
echo "    }" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo '    location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)(?:$|/)  { return 404; }' >> /etc/nginx/sites-enabled/nextcloud
echo '    location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console)                { return 404; }' >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo '    location ~ \.php(?:$|/) {' >> /etc/nginx/sites-enabled/nextcloud
echo '        fastcgi_split_path_info ^(.+?\.php)(/.*)$;' >> /etc/nginx/sites-enabled/nextcloud
echo '        set $path_info $fastcgi_path_info;' >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo '        try_files $fastcgi_script_name =404;' >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "        include fastcgi_params;" >> /etc/nginx/sites-enabled/nextcloud
echo '        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;' >> /etc/nginx/sites-enabled/nextcloud
echo '        fastcgi_param PATH_INFO $path_info;' >> /etc/nginx/sites-enabled/nextcloud
echo "        fastcgi_param HTTPS on;" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "        fastcgi_param modHeadersAvailable true;         # Avoid sending the security headers twice" >> /etc/nginx/sites-enabled/nextcloud
echo "        fastcgi_param front_controller_active true;     # Enable pretty urls" >> /etc/nginx/sites-enabled/nextcloud
echo "        fastcgi_pass php-handler;" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "        fastcgi_intercept_errors on;" >> /etc/nginx/sites-enabled/nextcloud
echo "        fastcgi_request_buffering off;" >> /etc/nginx/sites-enabled/nextcloud
echo "    }" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo '    location ~ \.(?:css|js|svg|gif)$ {' >> /etc/nginx/sites-enabled/nextcloud
echo '        try_files $uri /index.php$request_uri;' >> /etc/nginx/sites-enabled/nextcloud
echo "        expires 6M;         # Cache-Control policy borrowed from \`.htaccess\`" >> /etc/nginx/sites-enabled/nextcloud
echo "        access_log off;     # Optional: Don't log access to assets" >> /etc/nginx/sites-enabled/nextcloud
echo "    }" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo '    location ~ \.woff2?$ {' >> /etc/nginx/sites-enabled/nextcloud
echo '        try_files $uri /index.php$request_uri;' >> /etc/nginx/sites-enabled/nextcloud
echo "        expires 7d;         # Cache-Control policy borrowed from \`.htaccess\`" >> /etc/nginx/sites-enabled/nextcloud
echo "        access_log off;     # Optional: Don't log access to assets" >> /etc/nginx/sites-enabled/nextcloud
echo "    }" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    location /remote {" >> /etc/nginx/sites-enabled/nextcloud
echo '        return 301 /remote.php$request_uri;' >> /etc/nginx/sites-enabled/nextcloud
echo "    }" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    location / {" >> /etc/nginx/sitqes-enabled/nextcloud
echo '        try_files $uri $uri/ /index.php$request_uri;' >> /etc/nginx/sites-enabled/nextcloud
echo "    }" >> /etc/nginx/sites-enabled/nextcloud
echo "}" >> /etc/nginx/sites-enabled/nextcloud

systemctl enable nginx.service
echo -e "${COLOR2}Nginx setup complted${NC}"

這裡要特別注意設定檔內有特殊符號的要把**" "換成’ '**不然會有問題

Certbot
1
2
3
4
#set up certbot
echo -e "${COLOR1}Set up Cetbot for SSL${NC}"
certbot --nginx -d ${NCDOMAIN}
echo -e "${COLOR2}SSL set up Completed${NC}"
sshd
1
2
3
4
#sshd
echo -e "${COLOR1} Enable sshd${NC}"
systemctl enable sshd.service
echo -e "${COLOR2}sshd enabled${NC}"

安裝Bootloader

1
2
3
4
5
#install Bootloader
echo -e "${COLOR1}Install grub Boot Loader into /dev/sda${NC}"
grub-install --target=i386-pc /dev/sda
grub-mkconfig -o /boot/grub/grub.cfg
echo -e "${COLOR2}Completed${NC}"

同步後離開Arch-chroot

1
2
3
4
5
#Finished install
sync
sync
sync
exit

完整版的script

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
#!/bin/sh
#Parmeter Pre-Define
#Color for warning
COLOR_W='\e[35m'
#Color for description
COLOR1='\e[94m'
COLOR2='\e[32m'
# Color for Highlight package
COLOR_H1='\e[96m'
COLOR_H2='\e[34m'
NC='\e[0m'

#Notice before use
echo -e "${COLOR_W}=====================Warning=======================\n${NC}"
echo -e "${COLOR_W}=  Kiwi's Arch linux Auto install script Ver.1.1  =\n${NC}"
echo -e "${COLOR_W}=  Arch + Nextcloud Install script Ver.1.0        =\n${NC}"
echo -e "${COLOR_W}=  This Script for Kiwi private use.              =\n${NC}"
echo -e "${COLOR_W}=  If you have any issue on usage,                =\n${NC}"
echo -e "${COLOR_W}=  Please DON'T Feedback to Kiwi                  =\n${NC}"
echo -e "${COLOR_W}=  And you should take your own responsibility    =\n${NC}"
echo -e "${COLOR_W}===================================================\n${NC}"

#change Timezone
echo -e "${COLOR1}Please select your time zone\n${NC}${COLOR_H1}1)Taipei\n2)Shanghai\n*)Whatever..I don't care\n${NC}"
while :
do
	read ZONE
	case $ZONE in
		1)
			echo -e "${COLOR1}Set Time Zone to Asia/Taipei${NC}"
			ln -sf /usr/share/zoneinfo/Asia/Taipei /etc/localtime
			hwclock --systohc --utc
			break
			;;
		2)
			echo -e "${COLOR1}Set Time Zone to Asia/Shanghai${NC}"
			ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
			hwclock --systohc --utc
			break
			;;
		*)
			echo -e "${COLOR1}Nobody cares the local time!!${NC}"
			hwclock --systohc --utc
			break
			;;
	esac
done
echo -e "${COLOR2}Completed${NC}"

#locale-gen to add en_US & zh_TW
echo -e "${COLOR1}Setting local file${NC}"
echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen
echo "zh_TW.UTF-8 UTF-8" >> /etc/locale.gen
echo -e "${COLOR1}Generate locale.conf${NC}"
locale-gen
echo -e "${COLOR1}Setting locale.conf${NC}"
echo LANG=en_US.UTF-8 > /etc/locale.conf
export LANG=en_US.UTF-8
echo -e "${COLOR2}Completed${NC}"

#Hostname
echo -e "${COLOR1}Please input your hostname\n${NC}"
read HOSTNAME
echo ${HOSTNAME} > /etc/hostname
echo "127.0.0.1 localhost ${HOSTNAME}" >> /etc/hosts
echo -e "${COLOR2}Completed${NC}"

echo -e "${COLOR1}Define your NIC by Mac address${NC}"
echo -e "${COLOR1}Please input your MAC Address(need to be lowcase):\n${NC}"
read OUTSIDE
echo 'SUBSYSTEM=="net", ACTION=="add", ATTR{address}=="'${OUTSIDE}'", NAME="EXT0"' > /etc/udev/rules.d/10-network.rules
echo -e "${COLOR2}Completed${NC}"

echo -e "${COLOR1}Define your IP for EXT0:${NC}"
echo "Description='EXT0 IP SETTING'" > /etc/netctl/EXT0.service
echo "Interface=EXT0" >> /etc/netctl/EXT0.service
echo "Connection=ethernet" >> /etc/netctl/EXT0.service
echo "IP=static" >> /etc/netctl/EXT0.service
echo -n "${COLOR1}Please input your IP address:\n${NC}"
read EXT_IP
echo "Address=('${EXT_IP}/24')" >> /etc/netctl/EXT0.service
echo -n "${COLOR1}Please input your Gateway IP address:\n${NC}"
read GATE_IP
echo "Gateway='${GATE_IP}'" >> /etc/netctl/EXT0.service
echo -n "${COLOR1}Please input your DNS IP address:\n${NC}"
read DNS_IP
echo "DNS=('${DNS_IP}')" >> /etc/netctl/EXT0.service
echo -e "${COLOR2}Enable EXT0${NC}"
netctl enable EXT0.service
echo -e "${COLOR2}Finished.${NC}"

#Root Password
echo -e "${COLOR1}Set your root password${NC}"
passwd
chsh -s /bin/zsh
echo -e "${COLOR2}Completed${NC}"

#add User
echo -e "${COLOR1}Add user account:${NC}"
echo -n "${COLOR1}What ID you want:${NC}"
read YOURID
useradd -m -g root -s /bin/zsh ${YOURID}
passwd ${YOURID}
echo -e "${COLOR2}Completed${NC}"

echo -e "${COLOR1}Add $YOURID into sudo list${NC}"
pacman -Syu sudo
echo "${YOURID} ALL=(ALL) ALL" >> /etc/sudoers
echo -e "${COLOR2}Completed${NC}"

#install Tools
echo -e "${COLOR1}Install Packages${NC}"
echo -e "${COLOR1}tmux${NC}"
pacman -Syu --noconfirm git go base-devel tmux mariadb php php-apcu php-fpm php-gd php-imap php-intl php-imagick nginx certbot certbot-nginx nextcloud
echo -e "${COLOR2}Completed${NC}"
echo -e "${COLOR1}Install yay${NC}"
git clone https://aur.archlinux.org/yay.git
chomd 777 yay
cd yay
sudo -u kiwi makepkg -si
rm -rf yay
sudo -u kiwi yay -S php-smbclient

#Setup service
#setup MariaDB
echo -e "${COLOR1}Start to Setup MariaDB${NC}"
mariadb-install-db --user=mysql --basedir=/usr --datadir=/var/lib/mysql
mkdir -pv /var/lib/mysqltmp
chown mysql:mysql /var/lib/mysqltmp
echo "tmpfs   /var/lib/mysqltmp   tmpfs   rw,gid=mysql,uid=mysql,size=100M,mode=0750,noatime   0 0" >> /etc/fstab
echo "[client]" >> /etc/my.cnf
echo "default-character-set = utf8mb4" >> /etc/my.cnf
echo "" >> /etc/my.cnf
echo "[mysql]" >> /etc/my.cnf
echo "default-character-set = utf8mb4" >> /etc/my.cnf
echo "" >> /etc/my.cnf
echo "[mysqld]" >> /etc/my.cnf
echo "collation_server = utf8mb4_unicode_ci" >> /etc/my.cnf
echo "character_set_server = utf8mb4" >> /etc/my.cnf
echo "tmpdir      = /var/lib/mysqltmp" >> /etc/my.cnf
mount /var/lib/mysqltmp
mysql_secure_installation
systemctl enable mariadb.service
systemctl start mariadb.service
echo -n "${COLOR1}Please input your Username for Nextcloud Database:\n${NC}"
read NCUSER
echo -n "${COLOR1}Please input your Password for Nextcloud Database User:\n${NC}"
read NCPASSWD
mysql -u root -p -e"CREATE DATABASE nextcloud DEFAULT CHARACTER SET 'utf8mb4' COLLATE 'utf8mb4_general_ci';GRANT ALL PRIVILEGES ON nextcloud.* TO '${NCUSER}'@'localhost' IDENTIFIED BY '${NCPASSWD}';FLUSH PRIVILEGES;"
echo -e "${COLOR2}MariaDB setup compleated${NC}"
#Setup PHP
echo -e "${COLOR1}change PHP setting$${NC}"
curl -o /etc/php/php.ini https://kiwi0093.github.io/script/Arch/php.ini
echo -e "${COLOR2}PHP setting completed${NC}"
#Setup nextcloud
echo -e "${COLOR1}Set up Nextcloud${NC}"
echo "nexcloud ALL=(ALL) ALL" >> /etc/sudoers
sudo -u nextcloud occ maintenance:install --database mysql --database-name nextcloud --database-host localhost --database-user ${NCUSER} --database-pass=<${NCPASSWD}> --data-dir /var/lib/nextcloud/data/
curl -o /usr/share/webapps/nextcloud/config/config.php https://kiwi0093.github.io/script/Arch/config.php
echo -e "${COLOR2}nexcloud set up compleated${NC}"
#Set up PHP-FPM
echo -e "${COLOR1}Set up PHP-FPM${NC}"
echo "[nextcloud]" > /etc/php/php-fpm.d/nextcloud.conf
echo "user = nextcloud" >> /etc/php/php-fpm.d/nextcloud.conf
echo "group = nextcloud" >> /etc/php/php-fpm.d/nextcloud.conf
echo "listen = /run/nextcloud/nextcloud.sock" >> /etc/php/php-fpm.d/nextcloud.conf
echo "env[PATH] = /usr/local/bin:/usr/bin:/bin" >> /etc/php/php-fpm.d/nextcloud.conf
echo "env[TMP] = /tmp" >> /etc/php/php-fpm.d/nextcloud.conf
echo "" >> /etc/php/php-fpm.d/nextcloud.conf
echo "; should be accessible by your web server" >> /etc/php/php-fpm.d/nextcloud.conf
echo "listen.owner = http" >> /etc/php/php-fpm.d/nextcloud.conf
echo "listen.group = http" >> /etc/php/php-fpm.d/nextcloud.conf
echo "" >> /etc/php/php-fpm.d/nextcloud.conf
echo "pm = dynamic" >> /etc/php/php-fpm.d/nextcloud.conf
echo "pm.max_children = 15" >> /etc/php/php-fpm.d/nextcloud.conf
echo "pm.start_servers = 2" >> /etc/php/php-fpm.d/nextcloud.conf
echo "pm.min_spare_servers = 1" >> /etc/php/php-fpm.d/nextcloud.conf
echo "pm.max_spare_servers = 3" >> /etc/php/php-fpm.d/nextcloud.conf

mkdir /etc/systemd/system/php-fpm.service.d/
echo "[Service]" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "# Your data directory" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "ReadWritePaths=/var/lib/nextcloud/data" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "# Optional: add if you've set the default apps directory to be writable in config.php" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "ReadWritePaths=/usr/share/webapps/nextcloud/apps" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "# Optional: unnecessary if you've set 'config_is_read_only' => true in your config.php" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "ReadWritePaths=/usr/share/webapps/nextcloud/config" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "ReadWritePaths=/etc/webapps/nextcloud/config" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "# Optional: add if you want to use Nextcloud's internal update process" > /etc/systemd/system/php-fpm.service.d/override.conf
echo "# ReadWritePaths=/usr/share/webapps/nextcloud" > /etc/systemd/system/php-fpm.service.d/override.conf
systemctl enable php-fpm.service
echo -e "${COLOR2}PHP-FPM setting completed${NC}"

#set up nginx
echo -e "${COLOR1}Set up Nginx${NC}"
echo -n "${COLOR1}Please input you Domain for your Nextcloud Server${NC}"
read NCDOMAIN
mv /etc/nginx/nginx.conf /etc/nginx.conf.old
mkdir /etc/nginx/conf.d
mkdir /etc/nginx/sites-enable
echo "user http;" > /etc/nginx/nginx.conf
echo "worker_processes auto;" >> /etc/nginx/nginx.conf
echo "worker_cpu_affinity auto;" >> /etc/nginx/nginx.conf
echo "" >> /etc/nginx/nginx.conf
echo "events {" >> /etc/nginx/nginx.conf
echo "    multi_accept on;" >> /etc/nginx/nginx.conf
echo "    worker_connections 1024;" >> /etc/nginx/nginx.conf
echo "}" >> /etc/nginx/nginx.conf
echo "" >> /etc/nginx/nginx.conf
echo "http {" >> /etc/nginx/nginx.conf
echo "    charset utf-8;" >> /etc/nginx/nginx.conf
echo "    sendfile on;" >> /etc/nginx/nginx.conf
echo "    tcp_nopush on;" >> /etc/nginx/nginx.conf
echo "    tcp_nodelay on;" >> /etc/nginx/nginx.conf
echo "    server_tokens off;" >> /etc/nginx/nginx.conf
echo "    log_not_found off;" >> /etc/nginx/nginx.conf
echo "    types_hash_max_size 4096;" >> /etc/nginx/nginx.conf
echo "    client_max_body_size 16M;" >> /etc/nginx/nginx.conf
echo "" >> /etc/nginx/nginx.conf
echo "    # MIME" >> /etc/nginx/nginx.conf
echo "    include mime.types;" >> /etc/nginx/nginx.conf
echo "    default_type application/octet-stream;" >> /etc/nginx/nginx.conf
echo "" >> /etc/nginx/nginx.conf
echo "    # logging" >> /etc/nginx/nginx.conf
echo "    access_log /var/log/nginx/access.log;" >> /etc/nginx/nginx.conf
echo "    error_log /var/log/nginx/error.log warn;" >> /etc/nginx/nginx.conf
echo "" >> /etc/nginx/nginx.conf
echo "    # load configs" >> /etc/nginx/nginx.conf
echo "    include /etc/nginx/conf.d/*.conf;" >> /etc/nginx/nginx.conf
echo "    include /etc/nginx/sites-enabled/*;" >> /etc/nginx/nginx.conf
echo "}" >> /etc/nginx/nginx.conf


echo "upstream php-handler {" > /etc/nginx/sites-enabled/nextcloud
echo "    server 127.0.0.1:9000;" >> /etc/nginx/sites-enabled/nextcloud
echo "    #server unix:/var/run/php/php7.4-fpm.sock;" >> /etc/nginx/sites-enabled/nextcloud
echo "}" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "server {" >> /etc/nginx/sites-enabled/nextcloud
echo "    listen 80;" >> /etc/nginx/sites-enabled/nextcloud
echo "    listen [::]:80;" >> /etc/nginx/sites-enabled/nextcloud
echo "    server_name ${NCDOMAIN};" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    # Enforce HTTPS" >> /etc/nginx/sites-enabled/nextcloud
echo "    return 301 https://$server_name$request_uri;" >> /etc/nginx/sites-enabled/nextcloud
echo "}" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "server {" >> /etc/nginx/sites-enabled/nextcloud
echo "    listen 443      ssl http2;" >> /etc/nginx/sites-enabled/nextcloud
echo "    listen [::]:443 ssl http2;" >> /etc/nginx/sites-enabled/nextcloud
echo "    server_name ${NCDOMAIN};" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    # Use Mozilla's guidelines for SSL/TLS settings" >> /etc/nginx/sites-enabled/nextcloud
echo "    # https://mozilla.github.io/server-side-tls/ssl-config-generator/" >> /etc/nginx/sites-enabled/nextcloud
echo "    ssl_certificate     /etc/ssl/nginx/${NCDOMAIN}.crt;" >> /etc/nginx/sites-enabled/nextcloud
echo "    ssl_certificate_key /etc/ssl/nginx/${NCDOMAIN}.key;" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    # HSTS settings" >> /etc/nginx/sites-enabled/nextcloud
echo "    # WARNING: Only add the preload option once you read about" >> /etc/nginx/sites-enabled/nextcloud
echo "    # the consequences in https://hstspreload.org/. This option" >> /etc/nginx/sites-enabled/nextcloud
echo "    # will add the domain to a hardcoded list that is shipped" >> /etc/nginx/sites-enabled/nextcloud
echo "    # in all major browsers and getting removed from this list" >> /etc/nginx/sites-enabled/nextcloud
echo "    # could take several months." >> /etc/nginx/sites-enabled/nextcloud
echo "    #add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;" always;" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    # set max upload size" >> /etc/nginx/sites-enabled/nextcloud
echo "    client_max_body_size 16G;" >> /etc/nginx/sites-enabled/nextcloud
echo "    fastcgi_buffers 64 4K;" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    # Enable gzip but do not remove ETag headers" >> /etc/nginx/sites-enabled/nextcloud
echo "    gzip on;" >> /etc/nginx/sites-enabled/nextcloud
echo "    gzip_vary on;" >> /etc/nginx/sites-enabled/nextcloud
echo "    gzip_comp_level 4;" >> /etc/nginx/sites-enabled/nextcloud
echo "    gzip_min_length 256;" >> /etc/nginx/sites-enabled/nextcloud
echo "    gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;" >> /etc/nginx/sites-enabled/nextcloud
echo "    gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    # Pagespeed is not supported by Nextcloud, so if your server is built" >> /etc/nginx/sites-enabled/nextcloud
echo "    # with the `ngx_pagespeed` module, uncomment this line to disable it." >> /etc/nginx/sites-enabled/nextcloud
echo "    #pagespeed off;" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    # HTTP response headers borrowed from Nextcloud `.htaccess`" >> /etc/nginx/sites-enabled/nextcloud
echo "    add_header Referrer-Policy                      "no-referrer"   always;" >> /etc/nginx/sites-enabled/nextcloud
echo "    add_header X-Content-Type-Options               "nosniff"       always;" >> /etc/nginx/sites-enabled/nextcloud
echo "    add_header X-Download-Options                   "noopen"        always;" >> /etc/nginx/sites-enabled/nextcloud
echo "    add_header X-Frame-Options                      "SAMEORIGIN"    always;" >> /etc/nginx/sites-enabled/nextcloud
echo "    add_header X-Permitted-Cross-Domain-Policies    "none"          always;" >> /etc/nginx/sites-enabled/nextcloud
echo "    add_header X-Robots-Tag                         "none"          always;" >> /etc/nginx/sites-enabled/nextcloud
echo "    add_header X-XSS-Protection                     "1; mode=block" always;" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    # Remove X-Powered-By, which is an information leak" >> /etc/nginx/sites-enabled/nextcloud
echo "    fastcgi_hide_header X-Powered-By;" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    # Path to the root of your installation" >> /etc/nginx/sites-enabled/nextcloud
echo "    root /var/www/nextcloud;" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    # Specify how to handle directories -- specifying `/index.php$request_uri`" >> /etc/nginx/sites-enabled/nextcloud
echo "    # here as the fallback means that Nginx always exhibits the desired behaviour" >> /etc/nginx/sites-enabled/nextcloud
echo "    # when a client requests a path that corresponds to a directory that exists" >> /etc/nginx/sites-enabled/nextcloud
echo "    # on the server. In particular, if that directory contains an index.php file," >> /etc/nginx/sites-enabled/nextcloud
echo "    # that file is correctly served; if it doesn't, then the request is passed to" >> /etc/nginx/sites-enabled/nextcloud
echo "    # the front-end controller. This consistent behaviour means that we don't need" >> /etc/nginx/sites-enabled/nextcloud
echo "    # to specify custom rules for certain paths (e.g. images and other assets," >> /etc/nginx/sites-enabled/nextcloud
echo "    # `/updater`, `/ocm-provider`, `/ocs-provider`), and thus" >> /etc/nginx/sites-enabled/nextcloud
echo "    # `try_files $uri $uri/ /index.php$request_uri`" >> /etc/nginx/sites-enabled/nextcloud
echo "    # always provides the desired behaviour." >> /etc/nginx/sites-enabled/nextcloud
echo "    index index.php index.html /index.php$request_uri;" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    # Rule borrowed from `.htaccess` to handle Microsoft DAV clients" >> /etc/nginx/sites-enabled/nextcloud
echo "    location = / {" >> /etc/nginx/sites-enabled/nextcloud
echo "        if ( $http_user_agent ~ ^DavClnt ) {" >> /etc/nginx/sites-enabled/nextcloud
echo "            return 302 /remote.php/webdav/$is_args$args;" >> /etc/nginx/sites-enabled/nextcloud
echo "        }" >> /etc/nginx/sites-enabled/nextcloud
echo "    }" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    location = /robots.txt {" >> /etc/nginx/sites-enabled/nextcloud
echo "        allow all;" >> /etc/nginx/sites-enabled/nextcloud
echo "        log_not_found off;" >> /etc/nginx/sites-enabled/nextcloud
echo "        access_log off;" >> /etc/nginx/sites-enabled/nextcloud
echo "    }" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    # Make a regex exception for `/.well-known` so that clients can still" >> /etc/nginx/sites-enabled/nextcloud
echo "    # access it despite the existence of the regex rule" >> /etc/nginx/sites-enabled/nextcloud
echo "    # `location ~ /(\.|autotest|...)` which would otherwise handle requests" >> /etc/nginx/sites-enabled/nextcloud
echo "    # for `/.well-known`." >> /etc/nginx/sites-enabled/nextcloud
echo "    location ^~ /.well-known {" >> /etc/nginx/sites-enabled/nextcloud
echo "        # The rules in this block are an adaptation of the rules" >> /etc/nginx/sites-enabled/nextcloud
echo "        # in `.htaccess` that concern `/.well-known`." >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "        location = /.well-known/carddav { return 301 /remote.php/dav/; }" >> /etc/nginx/sites-enabled/nextcloud
echo "        location = /.well-known/caldav  { return 301 /remote.php/dav/; }" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "        location /.well-known/acme-challenge    { try_files $uri $uri/ =404; }" >> /etc/nginx/sites-enabled/nextcloud
echo "        location /.well-known/pki-validation    { try_files $uri $uri/ =404; }" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "        # Let Nextcloud's API for `/.well-known` URIs handle all other" >> /etc/nginx/sites-enabled/nextcloud
echo "        # requests by passing them to the front-end controller." >> /etc/nginx/sites-enabled/nextcloud
echo "        return 301 /index.php$request_uri;" >> /etc/nginx/sites-enabled/nextcloud
echo "    }" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    # Rules borrowed from `.htaccess` to hide certain paths from clients" >> /etc/nginx/sites-enabled/nextcloud
echo "    location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)(?:$|/)  { return 404; }" >> /etc/nginx/sites-enabled/nextcloud
echo "    location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console)                { return 404; }" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    # Ensure this block, which passes PHP files to the PHP process, is above the blocks" >> /etc/nginx/sites-enabled/nextcloud
echo "    # which handle static assets (as seen below). If this block is not declared first," >> /etc/nginx/sites-enabled/nextcloud
echo "    # then Nginx will encounter an infinite rewriting loop when it prepends `/index.php`" >> /etc/nginx/sites-enabled/nextcloud
echo "    # to the URI, resulting in a HTTP 500 error response." >> /etc/nginx/sites-enabled/nextcloud
echo "    location ~ \.php(?:$|/) {" >> /etc/nginx/sites-enabled/nextcloud
echo "        fastcgi_split_path_info ^(.+?\.php)(/.*)$;" >> /etc/nginx/sites-enabled/nextcloud
echo "        set $path_info $fastcgi_path_info;" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "        try_files $fastcgi_script_name =404;" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "        include fastcgi_params;" >> /etc/nginx/sites-enabled/nextcloud
echo "        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;" >> /etc/nginx/sites-enabled/nextcloud
echo "        fastcgi_param PATH_INFO $path_info;" >> /etc/nginx/sites-enabled/nextcloud
echo "        fastcgi_param HTTPS on;" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "        fastcgi_param modHeadersAvailable true;         # Avoid sending the security headers twice" >> /etc/nginx/sites-enabled/nextcloud
echo "        fastcgi_param front_controller_active true;     # Enable pretty urls" >> /etc/nginx/sites-enabled/nextcloud
echo "        fastcgi_pass php-handler;" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "        fastcgi_intercept_errors on;" >> /etc/nginx/sites-enabled/nextcloud
echo "        fastcgi_request_buffering off;" >> /etc/nginx/sites-enabled/nextcloud
echo "    }" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    location ~ \.(?:css|js|svg|gif)$ {" >> /etc/nginx/sites-enabled/nextcloud
echo "        try_files $uri /index.php$request_uri;" >> /etc/nginx/sites-enabled/nextcloud
echo "        expires 6M;         # Cache-Control policy borrowed from `.htaccess`" >> /etc/nginx/sites-enabled/nextcloud
echo "        access_log off;     # Optional: Don't log access to assets" >> /etc/nginx/sites-enabled/nextcloud
echo "    }" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    location ~ \.woff2?$ {" >> /etc/nginx/sites-enabled/nextcloud
echo "        try_files $uri /index.php$request_uri;" >> /etc/nginx/sites-enabled/nextcloud
echo "        expires 7d;         # Cache-Control policy borrowed from `.htaccess`" >> /etc/nginx/sites-enabled/nextcloud
echo "        access_log off;     # Optional: Don't log access to assets" >> /etc/nginx/sites-enabled/nextcloud
echo "    }" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    # Rule borrowed from `.htaccess`" >> /etc/nginx/sites-enabled/nextcloud
echo "    location /remote {" >> /etc/nginx/sites-enabled/nextcloud
echo "        return 301 /remote.php$request_uri;" >> /etc/nginx/sites-enabled/nextcloud
echo "    }" >> /etc/nginx/sites-enabled/nextcloud
echo "" >> /etc/nginx/sites-enabled/nextcloud
echo "    location / {" >> /etc/nginx/sites-enabled/nextcloud
echo "        try_files $uri $uri/ /index.php$request_uri;" >> /etc/nginx/sites-enabled/nextcloud
echo "    }" >> /etc/nginx/sites-enabled/nextcloud
echo "}" >> /etc/nginx/sites-enabled/nextcloud

systemctl enable nginx.service
echo -e "${COLOR2}Nginx setup complted${NC}"

#set up certbot
echo -e "${COLOR1}Set up Cetbot for SSL${NC}"
certbot --nginx -d ${NCDOMAIN}
echo -e "${COLOR2}SSL set up Completed${NC}"

#sshd
echo -e "${COLOR1} Enable sshd${NC}"
systemctl enable sshd.service
echo -e "${COLOR2}sshd enabled${NC}"

#install Bootloader
echo -e "${COLOR1}Install grub Boot Loader into /dev/sda${NC}"
grub-install --target=i386-pc /dev/sda
grub-mkconfig -o /boot/grub/grub.cfg
echo -e "${COLOR2}Completed${NC}"

#Finished install
sync
sync
sync
exit