Change Details

#!/bin/sh # die in case of any error set -e # CONFIG: original zip file ZIPFILE_BEFORE="DUMP GIMPITALIA 2.zip" # CONFIG: what we find after extraction CONTENT_ARCHIVE_DIR="DUMP GIMPITALIA" CONTENT_ARCHIVE="gimpitalia.it.tar.bz2" CONTENT_DUMPONE="lazzameb_gimpitalia.sql" MARIADB_USER='lazzameb_gimpitalia' MARIADB_DBNM='lazzameb_gimpitalia' MARIADB_PSWD='<redacted>' # CONFIG: webserver base document root WEB_DOCUMENT_ROOT="/var/www/html" # MUST to run apt install #sudo apt-get update # SHOULD: install security patches export DEBIAN_FRONTEND=noninteractive sudo apt-get upgrade --yes # MUST sudo apt-get install --yes apache2 libapache2-mod-php \ php-mysql \ php-xml \ php-mbstring \ php-curl \ php-gd \ php-zip # MUST: enable apache2 mod rewrite sudo a2enmod rewrite # MUST: load new modules sudo systemctl reload apache2 # SHOULD sudo apt-get install --yes mariadb-server unzip # MUST remove shit sudo rm --force /var/www/html/index.html # MUST extract shit unzip "$ZIPFILE_BEFORE" # MUST enter in the unzipped directory cd "$CONTENT_ARCHIVE_DIR" # MUST: extract shit in the unzipped directory tar -xf "$CONTENT_ARCHIVE" # MUST: move shit to the web document root sudo mv gimpitalia.it/* /var/www/html # MUST: hardening (and fix unexisting Unix users) sudo chown --recursive root: /var/www/html # MUST allow write on some directories sudo chown --recursive www-data: /var/www/html/cache/ sudo chown --recursive www-data: /var/www/html/backup/ sudo chown --recursive www-data: /var/www/html/logs/ sudo chown --recursive www-data: /var/www/html/images/ sudo chown --recursive www-data: /var/www/html/assets/ sudo chown --recursive www-data: /var/www/html/user/data/ sudo chown --recursive www-data: /var/www/html/tmp/ sudo chown --recursive www-data: /var/www/html/forum/cache/ # MUST create database and a dedicated user sudo mysql --execute="CREATE USER \`$MARIADB_USER\`@localhost IDENTIFIED BY '$MARIADB_PSWD'" sudo mysql --execute="CREATE DATABASE \`$MARIADB_DBNM\`" sudo mysql --execute="GRANT ALL PRIVILEGES ON \`$MARIADB_DBNM\`.* TO \`$MARIADB_USER\`@localhost" # MUST import database sudo mysql "$MARIADB_DBNM" < "$CONTENT_DUMPONE"

#!/bin/sh # die in case of any error set -e # CONFIG: original zip file ZIPFILE_BEFORE="DUMP GIMPITALIA 2.zip" # CONFIG: what we find after extraction CONTENT_ARCHIVE_DIR="DUMP GIMPITALIA" CONTENT_ARCHIVE="gimpitalia.it.tar.bz2" CONTENT_DUMPONE="lazzameb_gimpitalia.sql" MARIADB_USER='lazzameb_gimpitalia' MARIADB_DBNM='lazzameb_gimpitalia' MARIADB_PSWD='<redacted>' # CONFIG: webserver base document root WEB_DOCUMENT_ROOT="/var/www/html" # MUST to run apt install #apt-get update # SHOULD: install security patches export DEBIAN_FRONTEND=noninteractive apt-get upgrade --yes # MUST apt-get install --yes apache2 libapache2-mod-php \ php-mysql \ php-xml \ php-mbstring \ php-curl \ php-gd \ php-zip # MUST: enable apache2 mod rewrite a2enmod rewrite # MUST: enable .htaccess cat > /etc/apache2/conf-available/my-allow-override.conf <<EOF <Directory /var/www/html> AllowOverride All </Directory> EOF # MUST: enable .htaccess really a2enconf my-allow-override # MUST: load new modules systemctl reload apache2 # SHOULD apt-get install --yes mariadb-server unzip # MUST extract shit unzip "$ZIPFILE_BEFORE" # MUST enter in the unzipped directory cd "$CONTENT_ARCHIVE_DIR" # MUST: extract shit in the unzipped directory tar -xf "$CONTENT_ARCHIVE" # MUST remove shit rm --force --recursive /var/www/html # MUST: move shit to the web document root mv gimpitalia.it /var/www/html # MUST: hardening (and fix unexisting Unix users) chown --recursive root: /var/www/html # MUST: change downloaded zip (750) to 755 (as standard FHS) chmod 755 /var/www/html # MUST allow write on some directories chown --recursive www-data: /var/www/html/cache/ chown --recursive www-data: /var/www/html/backup/ chown --recursive www-data: /var/www/html/logs/ chown --recursive www-data: /var/www/html/images/ chown --recursive www-data: /var/www/html/assets/ chown --recursive www-data: /var/www/html/user/data/ chown --recursive www-data: /var/www/html/tmp/ chown --recursive www-data: /var/www/html/forum/cache/ # MUST create database and a dedicated user mysql --execute="CREATE USER \`$MARIADB_USER\`@localhost IDENTIFIED BY '$MARIADB_PSWD'" mysql --execute="CREATE DATABASE \`$MARIADB_DBNM\`" mysql --execute="GRANT ALL PRIVILEGES ON \`$MARIADB_DBNM\`.* TO \`$MARIADB_USER\`@localhost" # MUST import database mysql "$MARIADB_DBNM" < "$CONTENT_DUMPONE"

#!/bin/sh # die in case of any error set -e # CONFIG: original zip file ZIPFILE_BEFORE="DUMP GIMPITALIA 2.zip" # CONFIG: what we find after extraction CONTENT_ARCHIVE_DIR="DUMP GIMPITALIA" CONTENT_ARCHIVE="gimpitalia.it.tar.bz2" CONTENT_DUMPONE="lazzameb_gimpitalia.sql" MARIADB_USER='lazzameb_gimpitalia' MARIADB_DBNM='lazzameb_gimpitalia' MARIADB_PSWD='<redacted>' # CONFIG: webserver base document root WEB_DOCUMENT_ROOT="/var/www/html" # MUST to run apt install #sudo apt-get update # SHOULD: install security patches export DEBIAN_FRONTEND=noninteractive sudo apt-get upgrade --yes # MUST sudo apt-get install --yes apache2 libapache2-mod-php \ php-mysql \ php-xml \ php-mbstring \ php-curl \ php-gd \ php-zip # MUST: enable apache2 mod rewrite sudo a2enmod rewrite # MUST: load new modulesenable .htaccess cat > /etc/apache2/conf-available/my-allow-override.conf <<EOF <Directory /var/www/html> AllowOverride All sudo systemctl reload apache2 </Directory> EOF # SHOULD# MUST: enable .htaccess really sudo apt-get install --yes mariadb-server unzipa2enconf my-allow-override # MUST remove shit: load new modules sudo rm --force /var/www/html/index.htmlsystemctl reload apache2 # SHOULD apt-get install --yes mariadb-server unzip # MUST extract shit unzip "$ZIPFILE_BEFORE" # MUST enter in the unzipped directory cd "$CONTENT_ARCHIVE_DIR" # MUST: extract shit in the unzipped directory tar -xf "$CONTENT_ARCHIVE" # MUST remove shit rm --force --recursive /var/www/html # MUST: move shit to the web document root sudo mv gimpitalia.it/* /var/www/html # MUST: hardening (and fix unexisting Unix users) sudo chown --recursive root:t: /var/www/html # MUST: change downloaded zip (750) to 755 (as standard FHS) chmod 755 /var/www/html # MUST allow write on some directories sudo chown --recursive www-data: /var/www/html/cache/ sudo chown --recursive www-data: /var/www/html/backup/ sudo chown --recursive www-data: /var/www/html/logs/ sudo chown --recursive www-data: /var/www/html/images/ sudo chown --recursive www-data: /var/www/html/assets/ sudo chown --recursive www-data: /var/www/html/user/data/ sudo chown --recursive www-data: /var/www/html/tmp/ sudo chown --recursive www-data: /var/www/html/forum/cache/ # MUST create database and a dedicated user sudo mysql --execute="CREATE USER \`$MARIADB_USER\`@localhost IDENTIFIED BY '$MARIADB_PSWD'" sudo mysql --execute="CREATE DATABASE \`$MARIADB_DBNM\`" sudo mysql --execute="GRANT ALL PRIVILEGES ON \`$MARIADB_DBNM\`.* TO \`$MARIADB_USER\`@localhost" # MUST import database sudo mysql "$MARIADB_DBNM" < "$CONTENT_DUMPONE"