Initial commit - Church Music Database
This commit is contained in:
268
legacy-site/scripts/shell/ubuntu-setup-postgresql.sh
Executable file
268
legacy-site/scripts/shell/ubuntu-setup-postgresql.sh
Executable file
@@ -0,0 +1,268 @@
|
||||
#!/bin/bash
|
||||
|
||||
# PostgreSQL Ubuntu Server Setup Script for Church Song Lyric System
|
||||
# Configured for PostgreSQL on port 5100
|
||||
|
||||
set -e
|
||||
|
||||
echo "=========================================="
|
||||
echo "Church Song Lyric - PostgreSQL Ubuntu Setup"
|
||||
echo "=========================================="
|
||||
echo ""
|
||||
|
||||
RED='\033[0;31m'
|
||||
GREEN='\033[0;32m'
|
||||
YELLOW='\033[1;33m'
|
||||
NC='\033[0m'
|
||||
|
||||
if [ "$EUID" -eq 0 ]; then
|
||||
echo -e "${RED}Please do not run as root. Run as regular user with sudo privileges.${NC}"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Get configuration
|
||||
echo -e "${YELLOW}Please provide the following information:${NC}"
|
||||
read -p "Enter your server IP [192.168.10.130]: " SERVER_IP
|
||||
SERVER_IP=${SERVER_IP:-192.168.10.130}
|
||||
|
||||
read -p "Enter PostgreSQL password for songlyric_user: " -s DB_PASSWORD
|
||||
echo ""
|
||||
|
||||
read -p "Enter the installation directory [/var/www/church-songlyric]: " INSTALL_DIR
|
||||
INSTALL_DIR=${INSTALL_DIR:-/var/www/church-songlyric}
|
||||
|
||||
echo ""
|
||||
echo -e "${GREEN}Server IP: $SERVER_IP${NC}"
|
||||
echo -e "${GREEN}Installation directory: $INSTALL_DIR${NC}"
|
||||
echo ""
|
||||
|
||||
read -p "Continue with installation? (y/n): " -n 1 -r
|
||||
echo
|
||||
if [[ ! $REPLY =~ ^[Yy]$ ]]; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo ""
|
||||
echo "Step 1: Updating system packages..."
|
||||
sudo apt update
|
||||
sudo apt upgrade -y
|
||||
|
||||
echo ""
|
||||
echo "Step 2: Installing PostgreSQL..."
|
||||
sudo apt install -y postgresql postgresql-contrib libpq-dev
|
||||
|
||||
sudo systemctl start postgresql
|
||||
sudo systemctl enable postgresql
|
||||
|
||||
echo ""
|
||||
echo "Step 3: Creating PostgreSQL database and user..."
|
||||
|
||||
sudo -u postgres psql <<EOF
|
||||
CREATE DATABASE church_songlyric;
|
||||
CREATE USER songlyric_user WITH ENCRYPTED PASSWORD '$DB_PASSWORD';
|
||||
GRANT ALL PRIVILEGES ON DATABASE church_songlyric TO songlyric_user;
|
||||
\c church_songlyric
|
||||
GRANT ALL ON SCHEMA public TO songlyric_user;
|
||||
GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA public TO songlyric_user;
|
||||
GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA public TO songlyric_user;
|
||||
ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON TABLES TO songlyric_user;
|
||||
ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON SEQUENCES TO songlyric_user;
|
||||
EOF
|
||||
|
||||
echo ""
|
||||
echo "Step 4: Configuring PostgreSQL for network access..."
|
||||
|
||||
PG_VERSION=$(ls /etc/postgresql/ | head -n 1)
|
||||
PG_CONF="/etc/postgresql/$PG_VERSION/main/postgresql.conf"
|
||||
PG_HBA="/etc/postgresql/$PG_VERSION/main/pg_hba.conf"
|
||||
|
||||
sudo sed -i "s/#listen_addresses = 'localhost'/listen_addresses = '*'/" "$PG_CONF"
|
||||
echo "host church_songlyric songlyric_user 192.168.10.0/24 md5" | sudo tee -a "$PG_HBA"
|
||||
|
||||
sudo systemctl restart postgresql
|
||||
|
||||
echo ""
|
||||
echo "Step 5: Installing system packages..."
|
||||
sudo apt install -y \
|
||||
python3 \
|
||||
python3-pip \
|
||||
python3-venv \
|
||||
python3-dev \
|
||||
nodejs \
|
||||
npm \
|
||||
nginx \
|
||||
git \
|
||||
curl \
|
||||
ufw \
|
||||
tesseract-ocr \
|
||||
poppler-utils \
|
||||
libtesseract-dev \
|
||||
libleptonica-dev
|
||||
|
||||
echo ""
|
||||
echo "Step 6: Configuring firewall..."
|
||||
sudo ufw --force enable
|
||||
sudo ufw allow OpenSSH
|
||||
sudo ufw allow 'Nginx Full'
|
||||
sudo ufw allow 5432/tcp
|
||||
sudo ufw status
|
||||
|
||||
echo ""
|
||||
echo "Step 7: Creating project directory..."
|
||||
sudo mkdir -p "$INSTALL_DIR"
|
||||
sudo chown $USER:www-data "$INSTALL_DIR"
|
||||
sudo chmod 755 "$INSTALL_DIR"
|
||||
|
||||
cd "$INSTALL_DIR"
|
||||
|
||||
if [ ! -d "backend" ]; then
|
||||
echo -e "${YELLOW}Backend directory not found.${NC}"
|
||||
echo -e "${YELLOW}Please transfer your project files to $INSTALL_DIR${NC}"
|
||||
read -p "Press Enter when files are transferred..."
|
||||
fi
|
||||
|
||||
if [ -d "backend" ]; then
|
||||
cd backend
|
||||
|
||||
echo "Creating Python virtual environment..."
|
||||
python3 -m venv venv
|
||||
|
||||
echo "Installing Python dependencies..."
|
||||
source venv/bin/activate
|
||||
pip install --upgrade pip
|
||||
|
||||
if [ -f "requirements.txt" ]; then
|
||||
pip install -r requirements.txt
|
||||
fi
|
||||
|
||||
# Create .env file
|
||||
cat > .env <<ENV_EOF
|
||||
# PostgreSQL connection
|
||||
POSTGRESQL_URI=postgresql://songlyric_user:$DB_PASSWORD@$SERVER_IP:5432/church_songlyric
|
||||
|
||||
# Flask configuration
|
||||
FLASK_PORT=5100
|
||||
FLASK_ENV=production
|
||||
SECRET_KEY=$(openssl rand -base64 32)
|
||||
|
||||
# Allowed origins
|
||||
ALLOWED_ORIGINS=http://$SERVER_IP,http://192.168.10.178:3000
|
||||
ENV_EOF
|
||||
|
||||
echo "Migrating data to PostgreSQL..."
|
||||
python migrate_to_postgresql.py || echo "Migration skipped or failed"
|
||||
|
||||
deactivate
|
||||
cd ..
|
||||
fi
|
||||
|
||||
echo ""
|
||||
echo "Step 8: Setting up frontend..."
|
||||
if [ -d "frontend" ]; then
|
||||
cd frontend
|
||||
|
||||
npm install
|
||||
|
||||
cat > .env.production <<FRONTEND_ENV
|
||||
REACT_APP_API_URL=http://$SERVER_IP/api
|
||||
GENERATE_SOURCEMAP=false
|
||||
FRONTEND_ENV
|
||||
|
||||
npm run build
|
||||
cd ..
|
||||
fi
|
||||
|
||||
echo ""
|
||||
echo "Step 9: Creating systemd service..."
|
||||
sudo tee /etc/systemd/system/church-songlyric-backend.service > /dev/null <<EOF
|
||||
[Unit]
|
||||
Description=Church Song Lyric Backend (Flask)
|
||||
After=network.target postgresql.service
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=www-data
|
||||
Group=www-data
|
||||
WorkingDirectory=$INSTALL_DIR/backend
|
||||
Environment="PATH=$INSTALL_DIR/backend/venv/bin"
|
||||
ExecStart=$INSTALL_DIR/backend/venv/bin/python app.py
|
||||
Restart=always
|
||||
RestartSec=10
|
||||
StandardOutput=journal
|
||||
StandardError=journal
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
|
||||
echo ""
|
||||
echo "Step 10: Configuring Nginx..."
|
||||
sudo tee /etc/nginx/sites-available/church-songlyric > /dev/null <<EOF
|
||||
server {
|
||||
listen 80;
|
||||
server_name $SERVER_IP;
|
||||
|
||||
root $INSTALL_DIR/frontend/build;
|
||||
index index.html;
|
||||
|
||||
location / {
|
||||
try_files \$uri \$uri/ /index.html;
|
||||
}
|
||||
|
||||
location /api {
|
||||
proxy_pass http://localhost:5100;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade \$http_upgrade;
|
||||
proxy_set_header Connection 'upgrade';
|
||||
proxy_set_header Host \$host;
|
||||
proxy_cache_bypass \$http_upgrade;
|
||||
proxy_set_header X-Real-IP \$remote_addr;
|
||||
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto \$scheme;
|
||||
proxy_connect_timeout 600;
|
||||
proxy_send_timeout 600;
|
||||
proxy_read_timeout 600;
|
||||
send_timeout 600;
|
||||
}
|
||||
|
||||
location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {
|
||||
expires 1y;
|
||||
add_header Cache-Control "public, immutable";
|
||||
}
|
||||
|
||||
client_max_body_size 50M;
|
||||
}
|
||||
EOF
|
||||
|
||||
sudo ln -sf /etc/nginx/sites-available/church-songlyric /etc/nginx/sites-enabled/
|
||||
sudo rm -f /etc/nginx/sites-enabled/default
|
||||
sudo nginx -t
|
||||
|
||||
echo ""
|
||||
echo "Step 11: Setting permissions..."
|
||||
sudo chown -R www-data:www-data "$INSTALL_DIR"
|
||||
sudo chmod -R 755 "$INSTALL_DIR"
|
||||
|
||||
echo ""
|
||||
echo "=========================================="
|
||||
echo "Installation Complete!"
|
||||
echo "=========================================="
|
||||
echo ""
|
||||
echo -e "${GREEN}Starting services...${NC}"
|
||||
sudo systemctl daemon-reload
|
||||
sudo systemctl enable church-songlyric-backend
|
||||
sudo systemctl start church-songlyric-backend
|
||||
sudo systemctl restart nginx
|
||||
|
||||
echo ""
|
||||
echo -e "${GREEN}Service Status:${NC}"
|
||||
sudo systemctl status church-songlyric-backend --no-pager
|
||||
echo ""
|
||||
|
||||
echo -e "${GREEN}Access your application at: http://$SERVER_IP${NC}"
|
||||
echo ""
|
||||
echo "Management commands:"
|
||||
echo " sudo systemctl status church-songlyric-backend"
|
||||
echo " sudo systemctl restart church-songlyric-backend"
|
||||
echo " sudo journalctl -u church-songlyric-backend -f"
|
||||
echo ""
|
||||
Reference in New Issue
Block a user