mirror of
https://github.com/IT4Change/gradido.git
synced 2026-02-06 09:56:05 +00:00
60 lines
1.3 KiB
Bash
60 lines
1.3 KiB
Bash
#!/bin/bash
|
|
|
|
# Note: This is needed - since there is Summer-Time included in the default server Setup - UTC is REQUIRED for production data
|
|
timedatectl set-timezone UTC
|
|
timedatectl set-ntp on
|
|
apt purge ntp
|
|
systemctl start systemd-timesyncd
|
|
|
|
set -o allexport
|
|
SCRIPT_PATH=$(realpath ../bare_metal)
|
|
SCRIPT_DIR=$(dirname $SCRIPT_PATH)
|
|
PROJECT_ROOT=$SCRIPT_DIR/../..
|
|
set +o allexport
|
|
|
|
# Load .env or .env.dist if not present
|
|
# NOTE: all config values will be in process.env when starting
|
|
# the services and will therefore take precedence over the .env
|
|
if [ -f "./.env" ]; then
|
|
set -o allexport
|
|
source ./.env
|
|
set +o allexport
|
|
else
|
|
set -o allexport
|
|
source $SCRIPT_DIR/.env.dist
|
|
set +o allexport
|
|
fi
|
|
|
|
# Configure git
|
|
git config pull.ff only
|
|
|
|
# Secure mysql https://gist.github.com/Mins/4602864
|
|
SECURE_MYSQL=$(expect -c "
|
|
|
|
set timeout 10
|
|
spawn mysql_secure_installation
|
|
|
|
expect \"Enter current password for root (enter for none):\"
|
|
send \"\r\"
|
|
|
|
expect \"Switch to unix_socket authentication:\"
|
|
send \"Y\r\"
|
|
|
|
expect \"Change the root password?\"
|
|
send \"n\r\"
|
|
|
|
expect \"Remove anonymous users?\"
|
|
send \"y\r\"
|
|
|
|
expect \"Disallow root login remotely?\"
|
|
send \"y\r\"
|
|
|
|
expect \"Remove test database and access to it?\"
|
|
send \"y\r\"
|
|
|
|
expect \"Reload privilege tables now?\"
|
|
send \"y\r\"
|
|
|
|
expect eof
|
|
")
|
|
echo "$SECURE_MYSQL" |