Configure Apache web server with virtual hosts and SSL certificates

#!/usr/bin/env bash

set -euo pipefail

# Colors for output
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
NC='\033[0m' # No Color

# Default values
DOMAIN1="${1:-example.com}"
DOMAIN2="${2:-blog.example.com}"
EMAIL="${3:-admin@${DOMAIN1}}"

# Usage function
usage() {
    echo "Usage: $0 [domain1] [domain2] [email]"
    echo "Example: $0 mysite.com blog.mysite.com admin@mysite.com"
    exit 1
}

# Cleanup function for rollback
cleanup() {
    echo -e "${RED}[ERROR]${NC} Installation failed. Cleaning up..."
    systemctl stop ${SERVICE_NAME} 2>/dev/null || true
    rm -f ${VHOST_DIR}/${DOMAIN1}.conf 2>/dev/null || true
    rm -f ${VHOST_DIR}/${DOMAIN2}.conf 2>/dev/null || true
    rm -rf /var/www/${DOMAIN1} 2>/dev/null || true
    rm -rf /var/www/${DOMAIN2} 2>/dev/null || true
}

trap cleanup ERR

# Check if running as root or with sudo
if [[ $EUID -eq 0 ]]; then
    SUDO=""
elif command -v sudo &> /dev/null && sudo -n true 2>/dev/null; then
    SUDO="sudo"
else
    echo -e "${RED}Error:${NC} This script requires root privileges or sudo access"
    exit 1
fi

# Detect distribution and set variables
if [ -f /etc/os-release ]; then
    . /etc/os-release
    case "$ID" in
        ubuntu|debian)
            PKG_MGR="apt"
            PKG_INSTALL="apt install -y"
            PKG_UPDATE="apt update && apt upgrade -y"
            SERVICE_NAME="apache2"
            APACHE_PACKAGES="apache2 apache2-utils ssl-cert"
            APACHE_USER="www-data"
            VHOST_DIR="/etc/apache2/sites-available"
            ENABLE_SITE="a2ensite"
            FIREWALL_CMD="ufw allow 'Apache Full'"
            ;;
        almalinux|rocky|centos|rhel|ol|fedora)
            PKG_MGR="dnf"
            PKG_INSTALL="dnf install -y"
            PKG_UPDATE="dnf update -y"
            SERVICE_NAME="httpd"
            APACHE_PACKAGES="httpd mod_ssl openssl"
            APACHE_USER="apache"
            VHOST_DIR="/etc/httpd/conf.d"
            ENABLE_SITE=""
            FIREWALL_CMD="firewall-cmd --permanent --add-service=http && firewall-cmd --permanent --add-service=https && firewall-cmd --reload"
            ;;
        amzn)
            PKG_MGR="yum"
            PKG_INSTALL="yum install -y"
            PKG_UPDATE="yum update -y"
            SERVICE_NAME="httpd"
            APACHE_PACKAGES="httpd mod_ssl openssl"
            APACHE_USER="apache"
            VHOST_DIR="/etc/httpd/conf.d"
            ENABLE_SITE=""
            FIREWALL_CMD="firewall-cmd --permanent --add-service=http && firewall-cmd --permanent --add-service=https && firewall-cmd --reload"
            ;;
        *)
            echo -e "${RED}Error:${NC} Unsupported distribution: $ID"
            exit 1
            ;;
    esac
else
    echo -e "${RED}Error:${NC} Cannot detect operating system"
    exit 1
fi

echo -e "${GREEN}Apache Virtual Host Setup Script${NC}"
echo "Setting up virtual hosts for: $DOMAIN1, $DOMAIN2"
echo ""

# Step 1: Update system packages
echo -e "${YELLOW}[1/8]${NC} Updating system packages..."
$SUDO $PKG_UPDATE

# Step 2: Install Apache web server
echo -e "${YELLOW}[2/8]${NC} Installing Apache web server..."
$SUDO $PKG_INSTALL $APACHE_PACKAGES

# Step 3: Enable and start Apache service
echo -e "${YELLOW}[3/8]${NC} Enabling and starting Apache service..."
$SUDO systemctl enable --now $SERVICE_NAME

# Step 4: Configure firewall rules
echo -e "${YELLOW}[4/8]${NC} Configuring firewall rules..."
if command -v ufw &> /dev/null && [[ "$ID" =~ ^(ubuntu|debian)$ ]]; then
    $SUDO ufw --force enable 2>/dev/null || true
    $SUDO $FIREWALL_CMD
elif command -v firewall-cmd &> /dev/null; then
    $SUDO bash -c "$FIREWALL_CMD"
fi

# Step 5: Create directory structure for websites
echo -e "${YELLOW}[5/8]${NC} Creating directory structure..."
$SUDO mkdir -p /var/www/${DOMAIN1}/{html,logs}
$SUDO mkdir -p /var/www/${DOMAIN2}/{html,logs}

# Set correct ownership and permissions
$SUDO chown -R ${APACHE_USER}:${APACHE_USER} /var/www/
$SUDO chmod -R 755 /var/www/

# Step 6: Create sample HTML files
echo -e "${YELLOW}[6/8]${NC} Creating sample HTML files..."
$SUDO tee /var/www/${DOMAIN1}/html/index.html > /dev/null << EOF
<!DOCTYPE html>
<html>
<head>
    <title>Welcome to ${DOMAIN1}</title>
</head>
<body>
    <h1>Success! ${DOMAIN1} virtual host is working</h1>
    <p>This is the main website.</p>
</body>
</html>
EOF

$SUDO tee /var/www/${DOMAIN2}/html/index.html > /dev/null << EOF
<!DOCTYPE html>
<html>
<head>
    <title>Welcome to ${DOMAIN2}</title>
</head>
<body>
    <h1>Success! ${DOMAIN2} virtual host is working</h1>
    <p>This is the blog subdomain.</p>
</body>
</html>
EOF

# Set proper permissions for HTML files
$SUDO chmod 644 /var/www/${DOMAIN1}/html/index.html
$SUDO chmod 644 /var/www/${DOMAIN2}/html/index.html

# Step 7: Create virtual host configuration files
echo -e "${YELLOW}[7/8]${NC} Creating virtual host configuration files..."

# Virtual host for domain1
if [[ "$ID" =~ ^(ubuntu|debian)$ ]]; then
    VHOST_FILE="${VHOST_DIR}/${DOMAIN1}.conf"
else
    VHOST_FILE="${VHOST_DIR}/${DOMAIN1}.conf"
fi

$SUDO tee $VHOST_FILE > /dev/null << EOF
<VirtualHost *:80>
    ServerName ${DOMAIN1}
    ServerAlias www.${DOMAIN1}
    DocumentRoot /var/www/${DOMAIN1}/html
    ErrorLog /var/www/${DOMAIN1}/logs/error.log
    CustomLog /var/www/${DOMAIN1}/logs/access.log combined
    
    <Directory /var/www/${DOMAIN1}/html>
        Options -Indexes +FollowSymLinks
        AllowOverride All
        Require all granted
    </Directory>
</VirtualHost>
EOF

# Virtual host for domain2
if [[ "$ID" =~ ^(ubuntu|debian)$ ]]; then
    VHOST_FILE2="${VHOST_DIR}/${DOMAIN2}.conf"
else
    VHOST_FILE2="${VHOST_DIR}/${DOMAIN2}.conf"
fi

$SUDO tee $VHOST_FILE2 > /dev/null << EOF
<VirtualHost *:80>
    ServerName ${DOMAIN2}
    DocumentRoot /var/www/${DOMAIN2}/html
    ErrorLog /var/www/${DOMAIN2}/logs/error.log
    CustomLog /var/www/${DOMAIN2}/logs/access.log combined
    
    <Directory /var/www/${DOMAIN2}/html>
        Options -Indexes +FollowSymLinks
        AllowOverride All
        Require all granted
    </Directory>
</VirtualHost>
EOF

# Enable sites on Debian/Ubuntu systems
if [[ "$ID" =~ ^(ubuntu|debian)$ ]] && [[ -n "$ENABLE_SITE" ]]; then
    $SUDO $ENABLE_SITE ${DOMAIN1}.conf
    $SUDO $ENABLE_SITE ${DOMAIN2}.conf
    $SUDO a2dissite 000-default 2>/dev/null || true
fi

# Step 8: Restart Apache and verify
echo -e "${YELLOW}[8/8]${NC} Restarting Apache and verifying configuration..."
$SUDO systemctl restart $SERVICE_NAME

# Verify Apache configuration
if $SUDO ${SERVICE_NAME%d} -t 2>/dev/null || $SUDO httpd -t 2>/dev/null; then
    echo -e "${GREEN}✓${NC} Apache configuration is valid"
else
    echo -e "${RED}✗${NC} Apache configuration has errors"
    exit 1
fi

# Verify service status
if systemctl is-active --quiet $SERVICE_NAME; then
    echo -e "${GREEN}✓${NC} Apache service is running"
else
    echo -e "${RED}✗${NC} Apache service is not running"
    exit 1
fi

echo ""
echo -e "${GREEN}Installation completed successfully!${NC}"
echo ""
echo "Next steps:"
echo "1. Point your domains (${DOMAIN1}, ${DOMAIN2}) to this server's IP address"
echo "2. Install Certbot for SSL certificates:"
if [[ "$ID" =~ ^(ubuntu|debian)$ ]]; then
    echo "   sudo apt install -y certbot python3-certbot-apache"
else
    echo "   sudo dnf install -y certbot python3-certbot-apache"
fi
echo "3. Obtain SSL certificates:"
echo "   sudo certbot --apache -d ${DOMAIN1} -d www.${DOMAIN1} -d ${DOMAIN2}"
echo ""
echo "Your virtual hosts are now configured and ready to serve content!"