#!/bin/sh

# This script will install a new BookStack instance on a fresh Ubuntu 18.04 server.

# This script is experimental and does not ensure any security.

# Fetch domain to use from first provided parameter,

# Otherwise request the user to input their domain

DOMAIN=$1

if [ -z $1 ]

then

echo ""

printf "Enter the domain you want to host BookStack and press [ENTER]\nExamples: my-site.com or docs.my-site.com\n"

read DOMAIN

fi

# Get the current machine IP address

CURRENT_IP=$(ip addr | grep 'state UP' -A2 | tail -n1 | awk '{print $2}' | cut -f1 -d'/')

# Install core system packages

apt update

apt install -y software-properties-common

export DEBIAN_FRONTEND=noninteractive

add-apt-repository universe

add-apt-repository -yu ppa:ondrej/php

apt install -y git apache2 curl php8.2 php8.2-curl php8.2-mbstring php8.2-ldap \

php8.2-xml php8.2-zip php8.2-gd php8.2-mysql mysql-server-5.7 libapache2-mod-php8.2

# Set up database

DB_PASS="$(head /dev/urandom | tr -dc A-Za-z0-9 | head -c 13)"

mysql -u root --execute="CREATE DATABASE bookstack;"

mysql -u root --execute="CREATE USER 'bookstack'@'localhost' IDENTIFIED BY '$DB_PASS';"

mysql -u root --execute="GRANT ALL ON bookstack.* TO 'bookstack'@'localhost';FLUSH PRIVILEGES;"

# Download BookStack

cd /var/www

git clone https://github.com/BookStackApp/BookStack.git --branch release --single-branch bookstack

BOOKSTACK_DIR="/var/www/bookstack"

cd $BOOKSTACK_DIR

# Install composer

EXPECTED_SIGNATURE=$(wget https://composer.github.io/installer.sig -O - -q)

curl -s https://getcomposer.org/installer > composer-setup.php

ACTUAL_SIGNATURE=$(php -r "echo hash_file('SHA384', 'composer-setup.php');")

if [ "$EXPECTED_SIGNATURE" = "$ACTUAL_SIGNATURE" ]

then

php composer-setup.php --quiet

RESULT=$?

rm composer-setup.php

else

>&2 echo 'ERROR: Invalid composer installer signature'

rm composer-setup.php

exit 1

fi

# Install BookStack composer dependencies

export COMPOSER_ALLOW_SUPERUSER=1

php composer.phar install --no-dev --no-plugins

# Copy and update BookStack environment variables

cp .env.example .env

sed -i.bak "s@APP_URL=.*\$@APP_URL=http://$DOMAIN@" .env

sed -i.bak 's/DB_DATABASE=.*$/DB_DATABASE=bookstack/' .env

sed -i.bak 's/DB_USERNAME=.*$/DB_USERNAME=bookstack/' .env

sed -i.bak "s/DB_PASSWORD=.*\$/DB_PASSWORD=$DB_PASS/" .env

# Generate the application key

php artisan key:generate --no-interaction --force

# Migrate the databases

php artisan migrate --no-interaction --force

# Set file and folder permissions

chown www-data:www-data -R bootstrap/cache public/uploads storage && chmod -R 755 bootstrap/cache public/uploads storage

# Set up apache

a2enmod rewrite

a2enmod php8.2

cat >/etc/apache2/sites-available/bookstack.conf <<EOL

<VirtualHost *:80>

ServerName ${DOMAIN}

ServerAdmin webmaster@localhost

DocumentRoot /var/www/bookstack/public/

<Directory /var/www/bookstack/public/>

Options Indexes FollowSymLinks

AllowOverride None

Require all granted

<IfModule mod_rewrite.c>

<IfModule mod_negotiation.c>

Options -MultiViews -Indexes

</IfModule>

RewriteEngine On

# Handle Authorization Header

RewriteCond %{HTTP:Authorization} .

RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]

# Redirect Trailing Slashes If Not A Folder...

RewriteCond %{REQUEST_FILENAME} !-d

RewriteCond %{REQUEST_URI} (.+)/$

RewriteRule ^ %1 [L,R=301]

# Handle Front Controller...

RewriteCond %{REQUEST_FILENAME} !-d

RewriteCond %{REQUEST_FILENAME} !-f

RewriteRule ^ index.php [L]

</IfModule>

</Directory>

ErrorLog \${APACHE_LOG_DIR}/error.log

CustomLog \${APACHE_LOG_DIR}/access.log combined

</VirtualHost>

EOL

a2dissite 000-default.conf

a2ensite bookstack.conf

# Restart apache to load new config

systemctl restart apache2

echo ""

echo "Setup Finished, Your BookStack instance should now be installed."

echo "You can login with the email 'admin@admin.com' and password of 'password'"

echo "MySQL was installed without a root password, It is recommended that you set a root MySQL password."

echo ""

echo "You can access your BookStack instance at: http://$CURRENT_IP/ or http://$DOMAIN/"