21 lines
621 B
Bash
21 lines
621 B
Bash
#!/bin/sh
|
|
|
|
# install dependencies
|
|
apk --no-cache add certbot libstdc++ libmaxminddb geoip pcre yajl fail2ban clamav apache2-utils rsyslog openssl lua libgd go jq mariadb-connector-c bash brotli
|
|
|
|
# make scripts executable
|
|
chmod +x /opt/entrypoint/* /opt/scripts/*
|
|
mkdir /opt/entrypoint.d
|
|
|
|
# log files/folders rights
|
|
rm -f /var/log/nginx/*
|
|
chown root:nginx /var/log/nginx
|
|
chmod 750 /var/log/nginx
|
|
touch /var/log/nginx/error.log /var/log/nginx/modsec_audit.log /var/log/jobs.log
|
|
chown nginx:nginx /var/log/nginx/*.log
|
|
|
|
# let's encrypt webroot
|
|
mkdir /acme-challenge
|
|
chown root:nginx /acme-challenge
|
|
chmod 750 /acme-challenge
|