├── .htaccess
├── README.md
├── backup-site-to-s3.sh
├── setupsite-tui.sh
└── setupsite.sh


/.htaccess:
--------------------------------------------------------------------------------
 1 | # BEGIN WordPress
 2 | <IfModule mod_rewrite.c>
 3 | RewriteEngine On
 4 | RewriteBase /
 5 | RewriteRule ^index\.php$ - [L]
 6 | RewriteCond %{REQUEST_FILENAME} !-f
 7 | RewriteCond %{REQUEST_FILENAME} !-d
 8 | RewriteRule . /index.php [L]
 9 | </IfModule>
10 | 
11 | # END WordPress
12 | # Add correct content-type for fonts 
13 | AddType application/vnd.ms-fontobject .eot
14 | AddType font/ttf .ttf
15 | AddType font/otf .otf
16 | AddType font/x-woff .woff
17 | AddType image/svg+xml .svg
18 | AddOutputFilterByType DEFLATE text/text text/html text/plain text/xml text/css application/x- javascript application/javascript text/javascript
19 | 
20 | # Compress compressible fonts
21 | AddOutputFilterByType DEFLATE font/ttf font/otf image/svg+xml
22 | 
23 | # ----------------------------------------------------------------------
24 | # Expires headers (for better cache control)
25 | # ----------------------------------------------------------------------
26 |  
27 | #
28 | # These are pretty far-future expires headers
29 | # They assume you control versioning with cachebusting query params like:
30 | #   <script src="application.js?20100608">
31 | # Additionally, consider that outdated proxies may miscache
32 | #
33 | #   www.stevesouders.com/blog/2008/08/23/revving-filenames-dont-use-querystring/
34 |  
35 | #
36 | # If you don`t use filenames to version, lower the css and js to something like "access plus 1 week"
37 | #
38 |  
39 | <IfModule mod_expires.c>
40 |   ExpiresActive on
41 |  
42 | # Perhaps better to whitelist expires rules? Perhaps.
43 |   ExpiresDefault                          "access plus 1 month"
44 |  
45 | # cache.appcache needs re-requests in FF 3.6 (thx Remy ~Introducing HTML5)
46 |   ExpiresByType text/cache-manifest       "access plus 0 seconds"
47 |  
48 |  
49 |  
50 | # Your document html
51 |   ExpiresByType text/html                 "access plus 0 seconds"
52 |    
53 | # Data
54 |   ExpiresByType text/xml                  "access plus 0 seconds"
55 |   ExpiresByType application/xml           "access plus 0 seconds"
56 |   ExpiresByType application/json          "access plus 0 seconds"
57 |  
58 | # RSS feed
59 |   ExpiresByType application/rss+xml       "access plus 1 hour"
60 |  
61 | # Favicon (cannot be renamed)
62 |   ExpiresByType image/x-icon              "access plus 1 week"
63 |  
64 | # Media: images, video, audio
65 |   ExpiresByType image/gif                 "access plus 1 month"
66 |   ExpiresByType image/png                 "access plus 1 month"
67 |   ExpiresByType image/jpg                 "access plus 1 month"
68 |   ExpiresByType image/jpeg                "access plus 1 month"
69 |   ExpiresByType video/ogg                 "access plus 1 month"
70 |   ExpiresByType audio/ogg                 "access plus 1 month"
71 |   ExpiresByType video/mp4                 "access plus 1 month"
72 |   ExpiresByType video/webm                "access plus 1 month"
73 |    
74 | # HTC files  (css3pie)
75 |   ExpiresByType text/x-component          "access plus 1 month"
76 |    
77 | # Webfonts
78 |   ExpiresByType font/truetype             "access plus 1 month"
79 |   ExpiresByType font/opentype             "access plus 1 month"
80 |   ExpiresByType application/x-font-woff   "access plus 1 month"
81 |   ExpiresByType image/svg+xml             "access plus 1 month"
82 |   ExpiresByType application/vnd.ms-fontobject "access plus 1 month"
83 |      
84 | # CSS and JavaScript
85 |   ExpiresByType text/css                  "access plus 1 year"
86 |   ExpiresByType application/javascript    "access plus 1 year"
87 |   ExpiresByType text/javascript           "access plus 1 year"
88 |    
89 |   <IfModule mod_headers.c>
90 |     Header append Cache-Control "public"
91 |   </IfModule>
92 |    
93 | </IfModule>
94 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # ubuntu-server-wp-bash-scripts
 2 | 
 3 | # .htaccess 
 4 | (download, and keep in the same folder as your setupsite.sh script)
 5 |  
 6 | #setupsite-tui.sh (new)
 7 | 
 8 | Same as setupsite.sh, but all done through a TUI (whiptail). Options to either use theme or not, use LetsEncrypt or not, and pick which plugins you want to install.
 9 |  
10 | # setupsite.sh : 
11 | Designed for Ubuntu 16.04 or other Debian system. Requires LetsEncrypt and WP-CLI to be installed. The DNS MUST be set up for the SSL cert to work correctly.
12 | - Create directory for the site
13 | - Creates an apache sites-available .conf file, and then enables it, before restarting apache.
14 | - Creates SSL certs for the site, suing lets-encrypt auto (*note, you must have your dns set up to point to your server before running this script, if you want this option).
15 | - Creates mysql database and password for your wordpress installation. 
16 | - Downloads latest version of core, makes wp-config.php, and installs wordpress.
17 | - Installs a theme of your choice, and creates a blank child theme from it automatically, before activating.
18 | - Installs and activates a list of pre-selected plugins I use on every site.
19 | - Installs other plugins that I don't want activated yet (CDN Enabler, others that need more config).
20 | - Removes Akismet, Hello Dolly
21 | - Removes Default Themes
22 | - Copies .htaccess to active folder
23 | 
24 | # .backup-site-to-s3
25 | 
26 | Requires the following:
27 | - AWS account
28 | - S3 bucket pre-created
29 | - AWS-CLI installed
30 | - AWS-CLI configure run (set your keys, account, etc)
31 | 


--------------------------------------------------------------------------------
/backup-site-to-s3.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/bash
 2 | ###########################
 3 | ###### CONFIGURATION ######
 4 | ###########################
 5 | DATE=`date +%Y-%m-%d`
 6 | DOMAIN="www.example.com"
 7 | SITE_DIR="/var/www/www.example.com/"
 8 | TEMP_DIR="/tmp/www-backups/${DOMAIN}_${DATE}"
 9 | TEMP_DB="$TEMP_DIR/database"
10 | DB_NAME="dbname"
11 | DB_USER="dbuser"
12 | DB_PASSWORD="db_pass"
13 | S3_DIR="s3://bucket-name/personal/${DOMAIN}/${DATE}"
14 | MSG_COLOR='\033[0;97m'
15 | MSG_COLOR_DONE='\033[0;96m'
16 | MSG_END='\033[0m'
17 | RUN_SLEEP="0.5"
18 | ###########################
19 | 
20 | ### OPENING LINE
21 | printf "${MSG_COLOR}\n"'%*s\n\n'"${MSG_END}" "${COLUMNS:-$(tput cols)}" '' | tr ' ' -;
22 | 
23 | ### CREATE TEMPORARY FOLDERS
24 | printf "${MSG_COLOR}Creating temporary folder...${MSG_END}";
25 | while true; do printf "${MSG_COLOR}.${MSG_END}"; sleep $RUN_SLEEP; done &
26 | mkdir -p $TEMP_DB
27 | kill $!; trap 'kill $!' SIGTERM
28 | printf "${MSG_COLOR}...done!${MSG_END}\n\n";
29 | 
30 | ### EXPORT DATABASE
31 | printf "${MSG_COLOR}Exporting database...${MSG_END}";
32 | while true; do printf "${MSG_COLOR}.${MSG_END}"; sleep $RUN_SLEEP; done &
33 | mysqldump -u $DB_USER -p$DB_PASSWORD $DB_NAME > $TEMP_DB/$DB_NAME.sql
34 | kill $!; trap 'kill $!' SIGTERM
35 | printf "${MSG_COLOR}...done!${MSG_END}\n\n";
36 | 
37 | ### COMPRESS & DELETE ORIGINAL DATABASE FILE
38 | printf "${MSG_COLOR}Compressing database file...${MSG_END}";
39 | while true; do printf "${MSG_COLOR}.${MSG_END}"; sleep $RUN_SLEEP; done &
40 | tar -zcf $TEMP_DIR/database.tar.gz -C $TEMP_DIR . --warning=no-all
41 | rm -rf $TEMP_DB
42 | kill $!; trap 'kill $!' SIGTERM
43 | printf "${MSG_COLOR}...done!${MSG_END}\n\n";
44 | 
45 | ### COMPRESS WEBSITE FILES
46 | printf "${MSG_COLOR}Compressing website files...${MSG_END}";
47 | while true; do printf "${MSG_COLOR}.${MSG_END}"; sleep $RUN_SLEEP; done &
48 | tar -zcf $TEMP_DIR/html.tar.gz -C $SITE_DIR . --warning=no-all
49 | kill $!; trap 'kill $!' SIGTERM
50 | printf "${MSG_COLOR}...done!${MSG_END}\n\n";
51 | 
52 | ### SYNC ARCHIVE TO S3
53 | printf "${MSG_COLOR}Uploading to Amazon S3...${MSG_END}";
54 | while true; do printf "${MSG_COLOR}.${MSG_END}"; sleep $RUN_SLEEP; done &
55 | /usr/local/bin/aws s3 mv $TEMP_DIR $S3_DIR --recursive --quiet
56 | kill $!; trap 'kill $!' SIGTERM
57 | printf "${MSG_COLOR}...done!${MSG_END}\n\n";
58 | 
59 | ### DELETE BACKUP DIRECTORY
60 | printf "${MSG_COLOR}Cleaning up temporary folders...${MSG_END}";
61 | while true; do printf "${MSG_COLOR}.${MSG_END}"; sleep $RUN_SLEEP; done &
62 | rm -rf $TEMP_DIR
63 | kill $!; trap 'kill $!' SIGTERM
64 | printf "${MSG_COLOR}...done!${MSG_END}\n\n";
65 | 
66 | ### COMPELTED MESSAGE
67 | printf "${MSG_COLOR_DONE}Backup complete!${MSG_END}\n\n";
68 | pkill 'backup-site-to-s3';
69 | ### CLOSING LINE
70 | ##printf "${MSG_COLOR}"'%*s\n\n'"${MSG_END}" "${COLUMNS:-$(tput cols)}" '' | tr ' ' -;
71 | 


--------------------------------------------------------------------------------
/setupsite-tui.sh:
--------------------------------------------------------------------------------
  1 | #!/bin/bash
  2 | ##################################
  3 | ## Things you must do first ######
  4 | ##################################
  5 | 
  6 | #Requires: Ubuntu 16.04 (or other Debian), LetsEncrypt, WP-CLI (with wp alias), Apache2
  7 | 
  8 | #1) Configure DNS to point to this server for the domain you want, and allow time to propogate
  9 | 
 10 | ###########################
 11 | ###### CONFIGURATION ######
 12 | ###########################
 13 | 
 14 | if (whiptail --title "WordPress Quick Setup" --yesno "This script must be run as root. You must have the following installed: Ubuntu 16.04 / Debian equivalent, Apache2, LetsEncrypt (only if using SSL), MySql, and WP CLI configured with an alias of: wp . Are you currently running as root, and ready to begin?" 14 78) then
 15 | 
 16 |     echo "Please Ensure the following are correct: " > fun.txt
 17 |     echo "" >> fun.txt
 18 | 
 19 | else
 20 |     echo "Chose not to run" > fun.txt
 21 |     exit 0
 22 | fi
 23 | 
 24 | 
 25 | ##Stuff used for MySQL Database / User Creation (account must have database / user creation privileges)
 26 | 
 27 | MYSQL_CREATE_USER=$(whiptail --inputbox "Please enter the account name for a MySQL account that has user / database create privilages: " 8 78 root --title "MySQL Account Name w/ Create Privilages" 3>&1 1>&2 2>&3)
 28 | 
 29 | exitstatus=$?
 30 | 
 31 | if [ $exitstatus = 0 ]; then
 32 |     echo "MySQL User: " $MYSQL_CREATE_USER >> fun.txt
 33 | else
 34 |     rm fun.txt
 35 |     echo "Site Setup Aborted"
 36 |     exit 0
 37 | fi
 38 | 
 39 | 
 40 | MYSQL_CREATE_PASSWORD=$(whiptail --inputbox "Please enter the password for the MySQL account on the previous screen: " 8 78 pw --title "MySQL Account Password w/ Create Privilages" 3>&1 1>&2 2>&3)
 41 | 
 42 | exitstatus=$?
 43 | 
 44 | if [ $exitstatus = 0 ]; then
 45 |     echo "MySQL Password: " $MYSQL_CREATE_PASSWORD >> fun.txt
 46 | else
 47 |     rm fun.txt
 48 |     echo "Site Setup Aborted"
 49 |     exit 0
 50 | fi
 51 | 
 52 | #Stuff used for apache config file
 53 | 
 54 | NO_WWW_SITE_URL=$(whiptail --inputbox "Please your site URL, without the leading www. If this is a subdomain, enter the whole url (sub.example.com) : " 8 78 example.com --title "No WWW URL" 3>&1 1>&2 2>&3)
 55 | 
 56 | exitstatus=$?
 57 | 
 58 | if [ $exitstatus = 0 ]; then
 59 |     echo "Site URL (No www): " $NO_WWW_SITE_URL >> fun.txt
 60 | else
 61 |     rm fun.txt
 62 |     echo "Site Setup Aborted"
 63 |     exit 0
 64 | fi
 65 | 
 66 | DOCUMENT_ROOT=$(whiptail --inputbox "Please enter the full path to the directory you want to create for this installation (must not exist): " 8 78 "/var/www/$NO_WWW_SITE_URL" --title "Site Directory Path" 3>&1 1>&2 2>&3)
 67 | exitstatus=$?
 68 | 
 69 | if [ $exitstatus = 0 ]; then
 70 |     echo "Directory Path: " $DOCUMENT_ROOT >> fun.txt
 71 | else
 72 |     rm fun.txt
 73 |     echo "Site Setup Aborted"
 74 |     exit 0
 75 | fi
 76 | 
 77 | 
 78 | if (whiptail --title "Subdomain Check" --yesno "Was the URL you just entered a subdomain? (sub.example.com)" 8 78) then
 79 | 
 80 |     #echo "URL Type: Subdomain" >> fun.txt
 81 |     IS_SUB=true
 82 |     SITE_URL=$NO_WWW_SITE_URL
 83 |     APACHE_CONF="<VirtualHost *:80>\n      ServerName $SITE_URL\n ServerAdmin webmaster@localhost\n      DocumentRoot $DOCUMENT_ROOT\n     ErrorLog \${APACHE_LOG_DIR}/error.log\n      CustomLog \${APACHE_LOG_DIR}/access.log combined\n</VirtualHost>"
 84 | 
 85 | else
 86 | 
 87 |     #echo "URL Type: Full Domain" >> fun.txt
 88 | 	IS_SUB=false
 89 | 	SITE_URL="www."$NO_WWW_SITE_URL
 90 | 	APACHE_CONF="<VirtualHost *:80>\n      ServerName $SITE_URL\n       ServerAlias $NO_WWW_SITE_URL\n ServerAdmin webmaster@localhost\n      DocumentRoot $DOCUMENT_ROOT\n     ErrorLog \${APACHE_LOG_DIR}/error.log\n      CustomLog \${APACHE_LOG_DIR}/access.log combined\n</VirtualHost>"
 91 | 
 92 | fi
 93 | 
 94 | 
 95 | ##Checks if you want SSL Enabled
 96 | if (whiptail --title "SSL Enabled?" --yesno "Would you like to automatically enable SSL via LetsEncrypt for your site now? (domain must be already pointing to the correct IP)" 8 78) then
 97 | 
 98 |     echo "LetsEncrypt SSL: Yes" >> fun.txt
 99 | 
100 |     USE_SSL=true   
101 |     WP_SITE_URL="https://"$SITE_URL
102 | 
103 | else
104 |     echo "LetsEncrypt SSL: No" >> fun.txt
105 |     USE_SSL=false
106 |     WP_SITE_URL=$SITE_URL
107 | fi
108 | 
109 | 
110 | whiptail --textbox fun.txt 15 80
111 | 
112 | ##Checks config so far
113 | if (whiptail --title "Setup Check" --yesno "Were the settings on the previous box correct? Hit Yes to Continue, and No to cancel and restart" 8 78) then
114 | 
115 |     echo "Please Ensure the following are correct: " > fun.txt
116 |     echo "" >> fun.txt
117 | 
118 | else
119 |     echo "Site Setup Aborted"
120 |     rm fun.txt
121 |     exit 0
122 | fi
123 | 
124 | 
125 | #Database Stuff
126 | 
127 | 
128 | DB_NAME=$(whiptail --inputbox "Please enter the desired name for your WordPress database for this site (must not exist). The database user will be identical: " 8 78 ex_db --title "WordPress Database / User Name" 3>&1 1>&2 2>&3)
129 | exitstatus=$?
130 | 
131 | if [ $exitstatus = 0 ]; then
132 | 	DB_USER=$DB_NAME
133 |     echo "WP DB and User: " $DB_NAME >> fun.txt
134 | else
135 |     rm fun.txt
136 |     echo "Site Setup Aborted"
137 |     exit 0
138 | fi
139 | 
140 | DB_PASS=`openssl rand -hex 16` #Per suggestion from /u/chocolate-cake
141 | echo "WP DB Password: $DB_PASS" >> fun.txt
142 | 
143 | 
144 | DB_PREFIX=$(whiptail --inputbox "Please enter the desired prefix for your WP Tables: " 8 78 "wp_" --title "WP Table Prefix" 3>&1 1>&2 2>&3)
145 | exitstatus=$?
146 | 
147 | if [ $exitstatus = 0 ]; then
148 |     echo "DB Prefix: " $DB_PREFIX >> fun.txt
149 | else
150 |     rm fun.txt
151 |     echo "Site Setup Aborted"
152 |     exit 0
153 | fi
154 | 
155 | 
156 | #Wordpress Config Stuff
157 | SITE_TITLE=$(whiptail --inputbox "Please enter the desired site title for your WP Site (no spaces): " 8 78 "site" --title "WP Site Title" 3>&1 1>&2 2>&3)
158 | exitstatus=$?
159 | 
160 | if [ $exitstatus = 0 ]; then
161 |     echo "Site Title: " $SITE_TITLE >> fun.txt
162 | else
163 |     rm fun.txt
164 |     echo "Site Setup Aborted"
165 |     exit 0
166 | fi
167 | 
168 | ADMIN_USER=$(whiptail --inputbox "Please enter the desired admin username: " 8 78 "uname" --title "WP Admin Username" 3>&1 1>&2 2>&3)
169 | exitstatus=$?
170 | 
171 | if [ $exitstatus = 0 ]; then
172 |     echo "WP Admin Name: " $ADMIN_USER >> fun.txt
173 | else
174 |     rm fun.txt
175 |     echo "Site Setup Aborted"
176 |     exit 0
177 | fi
178 | 
179 | ADMIN_PASSWORD=$(whiptail --inputbox "Please enter the desired admin password: " 8 78 "upass" --title "WP Admin Password" 3>&1 1>&2 2>&3)
180 | exitstatus=$?
181 | 
182 | if [ $exitstatus = 0 ]; then
183 |     echo "WP Admin PW: " $ADMIN_PASSWORD >> fun.txt
184 | else
185 |     rm fun.txt
186 |     echo "Site Setup Aborted"
187 |     exit 0
188 | fi
189 | 
190 | ADMIN_EMAIL=$(whiptail --inputbox "Please enter the desired admin email: " 8 78 "test@gmail.com" --title "WP Admin Email" 3>&1 1>&2 2>&3)
191 | exitstatus=$?
192 | 
193 | if [ $exitstatus = 0 ]; then
194 |     echo "WP Admin Email: " $ADMIN_EMAIL >> fun.txt
195 | else
196 |     rm fun.txt
197 |     echo "Site Setup Aborted"
198 |     exit 0
199 | fi
200 | 
201 | 
202 | WP_THEME=$(whiptail --inputbox "If you want to use a theme from wordpress.org, please enter the appropriate slug here. This will install, activate, and create a child-theme. Otherwise, click cancel to use a default theme for now, and pick your own later.: " 15 78 "ultra" --title "WP Theme" 3>&1 1>&2 2>&3)
203 | exitstatus=$?
204 | 
205 | if [ $exitstatus = 0 ]; then
206 |     echo "WP Theme: " $WP_THEME >> fun.txt
207 |     DL_THEME=true
208 | else
209 |     WP_THEME="twentysixteen"
210 |     echo "WP THEME: " $WP_THEME >> fun.txt
211 |     DL_THEME=false
212 | fi
213 | 
214 | 
215 | 
216 | whiptail --textbox fun.txt 20 80
217 | 
218 | ##Checks config so far
219 | if (whiptail --title "WP Setup Check" --yesno "Were the settings on the previous box correct? Hit Yes to Continue, and No to cancel and restart" 8 78) then
220 | 
221 |     echo "Please Ensure the following are correct: " > fun.txt
222 |     echo "" >> fun.txt
223 | 
224 | else
225 |     echo "Site Setup Aborted"
226 |     rm fun.txt
227 |     exit 0
228 | fi
229 | 
230 | rm fun.txt
231 | 
232 | 
233 | #Makes site root, and moves there.
234 | mkdir $DOCUMENT_ROOT
235 | cd $DOCUMENT_ROOT
236 | 
237 | #Creates mysql database and user on it.
238 | mysql -u$MYSQL_CREATE_USER -p$MYSQL_CREATE_PASSWORD -e "CREATE DATABASE $DB_NAME"
239 | 
240 | mysql -u$MYSQL_CREATE_USER -p$MYSQL_CREATE_PASSWORD -e "GRANT ALL PRIVILEGES ON $DB_NAME.* TO '$DB_USER'@'localhost' IDENTIFIED BY '$DB_PASS'"
241 | 
242 | mysql -u$MYSQL_CREATE_USER -p$MYSQL_CREATE_PASSWORD -e "FLUSH PRIVILEGES"
243 | 
244 | 
245 | ##Creats the apache config file, and loads it (Debian / Ubuntu Only)
246 | echo -e "$APACHE_CONF" > /etc/apache2/sites-available/$SITE_URL.conf
247 | a2ensite $SITE_URL.conf
248 | service apache2 reload
249 | 
250 | ##Uses LetsEncrypt to set up SSL for the site
251 | 
252 | if $USE_SSL
253 | then
254 | 
255 | 	if $IS_SUB
256 | 	then
257 | 
258 | 		/opt/letsencrypt/certbot-auto --apache -d $SITE_URL -n
259 | 	else
260 | 
261 | 		/opt/letsencrypt/certbot-auto --apache -d $SITE_URL -d $NO_WWW_SITE_URL -n
262 | 	fi
263 | 	
264 | fi
265 | 
266 | ##Downloads Wordpress Files to current folder
267 | wp core download --allow-root 
268 | 
269 | ##Creates wp-config.php
270 | wp core config --dbname=$DB_NAME --dbuser=$DB_USER --dbpass=$DB_PASS --dbhost=localhost --dbprefix=$DB_PREFIX --allow-root
271 | 
272 | ##Installs Wordpress, using settings above
273 | wp core install --url=$WP_SITE_URL --title=$SITE_TITLE --admin_user=$ADMIN_USER --admin_password=$ADMIN_PASSWORD --admin_email=$ADMIN_EMAIL --allow-root
274 | 
275 | 
276 | ##Installs theme if selected
277 | 
278 | if $DL_THEME
279 | then
280 | 	wp theme install $WP_THEME --allow-root
281 | fi
282 | 
283 | ##Creates blank child theme and enables it
284 | wp scaffold child-theme $WP_THEME-child --parent_theme=$WP_THEME --theme_name="$WP_THEME  Child" --author='Your Name' --author_uri='https://www.example.com' --theme_uri='https://www.example.com' --activate --allow-root
285 | 
286 | ###Installing Pluggins
287 | ##Plugins to Install and Activate
288 | 
289 | whiptail --title "Choose Plugins To Install and Activate" --checklist --separate-output \
290 | "Choose plugins to install and activate, or cancel to not install any: (space to select, tab to move to Ok / Cancel)" 30 110 20 \
291 | "async-javascript" "Sets js files to be deferred" ON \
292 | "autoptimize" "Compresses and combines CSS, JS, and HTML Files " ON \
293 | "tiny-compress-images" "Auto compresses images on upload" ON \
294 | "cachify" "Simple Cache Plugin" ON \
295 | "login-lockdown" "Locks out wrong pw attempts by IP" ON \
296 | "stop-user-enumeration" "Security, prevents leak of admin login" ON \
297 | "remove-category-url" "Removes category from the url on permalinks" ON \
298 | "remove-query-strings-from-static-resources" "Nice for PageSpeed ratings" ON \
299 | "wp-force-https" "Forces the site to use https" OFF \
300 | "contact-form-7" "Free contact form" ON \
301 | "contact-form-7-accessible-defaults" "Makes Contact Form 7 more accessible" ON \
302 | "ml-slider" "Slider plugin (works well with Ultra Theme)" OFF \
303 | "baw-login-logout-menu" "Adds log in / log out menu item" OFF \
304 | "siteorigin-panels" "WYSIWYG layout editor" OFF \
305 | "black-studio-tinymce-widget" "Various Widgets" OFF \
306 | "so-widgets-bundle" "Widgets for Site Origin" OFF \
307 | "codelights-shortcodes-and-widgets" "More Useful Widgets" OFF \
308 | "widgets-for-siteorigin" "Yet more Widgets for Site Origin" OFF \
309 | "olevmedia-shortcodes" "Allows responsive shortcode layouts" ON \
310 | "all-in-one-seo-pack" "SEO Plugin" ON 2>results
311 | 
312 | while read choice
313 | do
314 | 	wp plugin install $choice --activate --allow-root
315 | 	
316 | done < results
317 | rm results
318 | 
319 | ##Plugins to be installed but not activated ##
320 | 
321 | whiptail --title "Choose Plugins To Install but NOT Activate" --checklist --separate-output \
322 | "Choose plugins to install but not yet activate, or cancel to not install any: (space to select, tab to move to Ok / Cancel)" 30 110 20 \
323 | "cdn-enabler" "Set up to use a CDN of your choice" ON \
324 | "easy-wp-smtp" "Set up your site to use a smtp e-mail" ON \
325 | "wps-hide-login" "Prevents most brute force attacks by hiding login screen" ON \
326 | "google-apps-login" "Allows login using oAuth google account instead of password" ON 2>results2
327 | 
328 | while read notactivate
329 | do
330 | 	wp plugin install $notactivate --allow-root 
331 | 	
332 | done < results2
333 | rm results2
334 | 
335 | #Removes default plugins
336 | 
337 | 	wp plugin uninstall akismet --allow-root 
338 | 	wp plugin uninstall hello --allow-root
339 | 
340 | #removes default themes
341 | 
342 | wp theme uninstall twentyfourteen --allow-root
343 | wp theme uninstall twentyfifteen --allow-root 
344 | 
345 | chmod -R 755 $DOCUMENT_ROOT
346 | 
347 | #Settings for Autoptimize
348 | wp option add autoptimize_html on --allow-root
349 | wp option add autoptimize_js on --allow-root
350 | wp option add autoptimize_js_exclude s_sid,smowtion_size,sc_project,WAU_,wau_add,comment-form-quicktags,edToolbar,ch_client,seal.js,jquery.js --allow-root
351 | wp option add autoptimize_js_trycatch on --allow-root
352 | wp option add autoptimize_css on --allow-root
353 | wp option add autoptimize_css_exclude admin-bar.min.css, dashicons.min.css --allow-root 
354 | wp option add autoptimize_css_datauris on --allow-root
355 | wp option add autoptimize_css_nogooglefont on --allow-root
356 | wp option add autoptimize_cache_nogzip on --allow-root
357 | 
358 | #Settings for Async Javascript
359 | 
360 | wp option add aj_enabled 1 --allow-root
361 | wp option add aj_method defer --allow-root
362 | wp option add aj_exclusions jquery.min.js,public-main.min.js,pikaday-jquery.min.js,moment.min.js,checkout.js,pikaday.min.js,public-main.min.js,jquery.js --allow-root 
363 | 
364 | #copies .htaccess file provided to your wordpress folder. Make sure the .htaccess is in the same file as this script runs from. (I used /var/www/other-scripts, you can modify as needed).
365 | #cp /var/www/other-scripts/.htaccess $DOCUMENT_ROOT/.htaccess
366 | 
367 | 


--------------------------------------------------------------------------------
/setupsite.sh:
--------------------------------------------------------------------------------
  1 | #!/bin/bash
  2 | ##################################
  3 | ## Things you must do first ######
  4 | ##################################
  5 | 
  6 | #Requires: Ubuntu 16.04 (or other Debian), LetsEncrypt, WP-CLI (with wp alias), Apache2
  7 | 
  8 | #1) Configure DNS to point to this server for the domain you want, and allow time to propogate
  9 | 
 10 | ###########################
 11 | ###### CONFIGURATION ######
 12 | ###########################
 13 | 
 14 | ##Stuff used for MySQL Database / User Creation (account must have database / user creation privileges)
 15 | MYSQL_CREATE_USER="MYSQL_USER"
 16 | MYSQL_CREATE_PASSWORD="MYSQL_PASSWORD"
 17 | 
 18 | #Stuff used for apache config file
 19 | SITE_URL="www.example.com"
 20 | NO_WWW_SITE_URL="example.com"
 21 | DOCUMENT_ROOT="/var/www/www.example.com"
 22 | APACHE_CONF="<VirtualHost *:80>\n      ServerName $SITE_URL\n       ServerAlias $NO_WWW_SITE_URL\n ServerAdmin webmaster@localhost\n      DocumentRoot $DOCUMENT_ROOT\n     ErrorLog \${APACHE_LOG_DIR}/error.log\n      CustomLog \${APACHE_LOG_DIR}/access.log combined\n</VirtualHost>"
 23 | 
 24 | HTTPS_URL="https://www.example.com"
 25 | 
 26 | #Database Stuff
 27 | DB_NAME="example_db"
 28 | DB_USER="example_db"
 29 | DB_PASS=`openssl rand -hex 16` #Per suggestion from /u/chocolate-cake
 30 | DB_PREFIX="wp_example_"
 31 | 
 32 | 
 33 | #Wordpress Config Stuff
 34 | SITE_TITLE="Example"
 35 | ADMIN_USER="somereallynonobvioususernamehere"
 36 | ADMIN_PASSWORD="somecomplexadminpwhere"
 37 | ADMIN_EMAIL="test@gmail.com"
 38 | WP_THEME="ultra" #If you use this one, it needs to be a theme from wordpress.org. I haven't worked in being able to add another from zip, yet.
 39 | 
 40 | #Makes site root, and moves there.
 41 | mkdir $DOCUMENT_ROOT
 42 | cd $DOCUMENT_ROOT
 43 | 
 44 | #Creates mysql database and user on it.
 45 | mysql -u$MYSQL_CREATE_USER -p$MYSQL_CREATE_PASSWORD -e "CREATE DATABASE $DB_NAME"
 46 | 
 47 | mysql -u$MYSQL_CREATE_USER -p$MYSQL_CREATE_PASSWORD -e "GRANT ALL PRIVILEGES ON $DB_NAME.* TO '$DB_USER'@'localhost' IDENTIFIED BY '$DB_PASS'"
 48 | 
 49 | mysql -u$MYSQL_CREATE_USER -p$MYSQL_CREATE_PASSWORD -e "FLUSH PRIVILEGES"
 50 | 
 51 | 
 52 | ##Creats the apache config file, and loads it (Debian / Ubuntu Only)
 53 | echo -e "$APACHE_CONF" > /etc/apache2/sites-available/$SITE_URL.conf
 54 | a2ensite $SITE_URL.conf
 55 | service apache2 reload
 56 | 
 57 | ##Uses LetsEncrypt to set up SSL for the site (If you haven't pointed your domain yet, comment this line out)
 58 | /opt/letsencrypt/certbot-auto --apache -d $SITE_URL -n
 59 | 
 60 | ##sets file perms
 61 | 
 62 | 
 63 | ##Downloads Wordpress Files to current folder
 64 | wp core download 
 65 | 
 66 | ##Creates wp-config.php
 67 | wp core config --dbname=$DB_NAME --dbuser=$DB_USER --dbpass=$DB_PASS --dbhost=localhost --dbprefix=$DB_PREFIX 
 68 | 
 69 | ##Installs Wordpress, using settings above
 70 | wp core install --url=$HTTPS_URL --title=$SITE_TITLE --admin_user=$ADMIN_USER --admin_password=$ADMIN_PASSWORD --admin_email=$ADMIN_EMAIL 
 71 | 
 72 | ##Installs theme
 73 | wp theme install $WP_THEME 
 74 | 
 75 | ##Creates blank child theme and enables it
 76 | wp scaffold child-theme $WP_THEME-child --parent_theme=$WP_THEME --theme_name="$WP_THEME  Child" --author='Your Name' --author_uri='https://www.example.com' --theme_uri='https://www.example.com' --activate 
 77 | 
 78 | ###Installing Pluggins
 79 | 
 80 | ### Plugins to be activated
 81 | 
 82 | #####Plugin List#####
 83 | 
 84 | #All Plugins Here are From wordpress.org
 85 | 
 86 | #all-in-one-seo-pack : SEO Plugin
 87 | #async-javascript : Sets, where possible, js files to be deferred (helping page render time)
 88 | #autoptimize : Compresses and combines CSS, JS, and HTML Files 
 89 | #baw-login-logout-menu : Adds log in / log out menu item option (shows opposite of current status)
 90 | #black-studio-tinymce-widget : Various Widgets
 91 | #tiny-compress-images : Requires some config, auto compresses images on upload (limit on free / month)
 92 | #contact-form-7 : Free contact form, requires mail settings to be correct
 93 | #contact-form-7-accessible-defaults : Makes Contact Form 7 more accessible
 94 | #login-lockdown : Locks out wrong attempts after x number of tries, for a set amount of time
 95 | #ml-slider : Slider plugin (works well with Ultra Theme)
 96 | #siteorigin-panels : WYSIWYG layout editor
 97 | #remove-category-url : Removes category from the url on permalinks
 98 | #remove-query-strings-from-static-resources : Removes query strings from resources, nice for PageSpeed ratings
 99 | #so-widgets-bundle : Widgets for Site Origin
100 | #codelights-shortcodes-and-widgets : More Useful Widgets
101 | #widgets-for-siteorigin : Yet more Widgets for Site Origin
102 | #wp-force-https : Forces the site to use https, remove this move to install but not activate if not using SSL
103 | #stop-user-enumeration : Security, prevents yoursite.com/?author=1 from giving away root login name
104 | #olevmedia-shortcodes : Allows accordions, columns, and more. Responsive, uses shortcodes.
105 | 
106 | declare -a arr=("all-in-one-seo-pack" "async-javascript" "autoptimize" "baw-login-logout-menu" "black-studio-tinymce-widget" "tiny-compress-images" "contact-form-7" "contact-form-7-accessible-defaults" "login-lockdown" "ml-slider" "siteorigin-panels" "remove-category-url" "remove-query-strings-from-static-resources" "so-widgets-bundle" "codelights-shortcodes-and-widgets" "widgets-for-siteorigin" "wp-force-https" "stop-user-enumeration" "olevmedia-shortcodes")
107 | for i in "${arr[@]}"
108 | do
109 | 
110 | 	wp plugin install $i --activate 
111 | 
112 | 
113 | done
114 | 
115 | ###Plugins to install but not activate (require further config)
116 | #
117 | # cdn-enabler : Set up to use a CDN of your choice
118 | # easy-wp-smtp : Set up your site to use a smtp e-mail (gmail, or gapps)
119 | # wps-hide-login : changes /wp-login.php, /wp-admin/ to something custom of your choice. Prevents most brute force attacks by hiding login screen
120 | # google-apps-login : Allows login using oAuth google account instead of password
121 | 
122 | declare -a twoarr=("cdn-enabler" "easy-wp-smtp" "wps-hide-login" "google-apps-login")
123 | for i in "${twoarr[@]}"
124 | do
125 | 
126 | 	wp plugin install $i  
127 | done
128 | 
129 | #Removes default plugins
130 | 
131 | 	wp plugin uninstall akismet 
132 | 	wp plugin uninstall hello 
133 | 
134 | #removes default themes
135 | 
136 | wp theme uninstall twentysixteen 
137 | wp theme uninstall twentyfourteen 
138 | wp theme uninstall twentyfifteen 
139 | 
140 | chmod -R 755 $DOCUMENT_ROOT
141 | 
142 | 
143 | #Settings for Autoptimize
144 | wp option add autoptimize_html on 
145 | wp option add autoptimize_js on 
146 | wp option add autoptimize_js_exclude s_sid,smowtion_size,sc_project,WAU_,wau_add,comment-form-quicktags,edToolbar,ch_client,seal.js,jquery.js 
147 | wp option add autoptimize_js_trycatch on 
148 | wp option add autoptimize_css on 
149 | wp option add autoptimize_css_exclude admin-bar.min.css, dashicons.min.css 
150 | wp option add autoptimize_css_datauris on 
151 | wp option add autoptimize_css_nogooglefont on 
152 | wp option add autoptimize_cache_nogzip on 
153 | 
154 | #Settings for Async Javascript
155 | 
156 | wp option add aj_enabled 1 
157 | wp option add aj_method defer 
158 | wp option add aj_exclusions jquery.min.js,public-main.min.js,pikaday-jquery.min.js,moment.min.js,checkout.js,pikaday.min.js,public-main.min.js,jquery.js 
159 | 
160 | #copies .htaccess file provided to your wordpress folder. Make sure the .htaccess is in the same file as this script runs from. (I used /var/www/other-scripts, you can modify as needed).
161 | cp /var/www/other-scripts/.htaccess $DOCUMENT_ROOT/.htaccess
162 | 
163 | 


--------------------------------------------------------------------------------