Install and configure Cherokee web server with FastCGI and virtual hosts

#!/usr/bin/env bash
set -euo pipefail

# Cherokee Web Server Installation Script
# Installs Cherokee with FastCGI, PHP-FPM, and virtual host configuration

# Colors for output
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
NC='\033[0m'

# Default values
DOMAIN="${1:-example.com}"
SUBDOMAIN="${2:-test.example.com}"

# Print usage
usage() {
    echo "Usage: $0 [domain] [subdomain]"
    echo "Example: $0 example.com test.example.com"
    exit 1
}

# Print colored output
print_status() {
    echo -e "${GREEN}[INFO]${NC} $1"
}

print_warning() {
    echo -e "${YELLOW}[WARNING]${NC} $1"
}

print_error() {
    echo -e "${RED}[ERROR]${NC} $1"
}

# Cleanup on error
cleanup() {
    print_error "Installation failed. Cleaning up..."
    systemctl stop cherokee php-fpm 2>/dev/null || true
    exit 1
}

trap cleanup ERR

# Check if running as root or with sudo
if [[ $EUID -ne 0 ]]; then
    print_error "This script must be run as root or with sudo"
    exit 1
fi

# Validate domain arguments
if [[ ! "$DOMAIN" =~ ^[a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(\.[a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*$ ]]; then
    print_error "Invalid domain format: $DOMAIN"
    usage
fi

# Auto-detect distribution
if [ -f /etc/os-release ]; then
    . /etc/os-release
    case "$ID" in
        ubuntu|debian)
            PKG_MGR="apt"
            PKG_UPDATE="apt update && apt upgrade -y"
            PKG_INSTALL="apt install -y"
            PHP_FPM_SERVICE="php8.3-fpm"
            PHP_FPM_SOCKET="/var/run/php/php8.3-fpm.sock"
            PHP_FPM_CONFIG="/etc/php/8.3/fpm/pool.d/www.conf"
            FIREWALL_CMD="ufw"
            ;;
        almalinux|rocky|centos|rhel|ol|fedora)
            PKG_MGR="dnf"
            PKG_UPDATE="dnf update -y"
            PKG_INSTALL="dnf install -y"
            PHP_FPM_SERVICE="php-fpm"
            PHP_FPM_SOCKET="/var/run/php-fpm/www.sock"
            PHP_FPM_CONFIG="/etc/php-fpm.d/www.conf"
            FIREWALL_CMD="firewall-cmd"
            ;;
        amzn)
            PKG_MGR="yum"
            PKG_UPDATE="yum update -y"
            PKG_INSTALL="yum install -y"
            PHP_FPM_SERVICE="php-fpm"
            PHP_FPM_SOCKET="/var/run/php-fpm/www.sock"
            PHP_FPM_CONFIG="/etc/php-fpm.d/www.conf"
            FIREWALL_CMD="firewall-cmd"
            ;;
        *)
            print_error "Unsupported distribution: $ID"
            exit 1
            ;;
    esac
else
    print_error "Cannot detect distribution - /etc/os-release not found"
    exit 1
fi

print_status "Detected distribution: $ID"
print_status "Installing Cherokee for domains: $DOMAIN, $SUBDOMAIN"

# Step 1: Update system packages
echo "[1/9] Updating system packages..."
$PKG_UPDATE

# Step 2: Install Cherokee and PHP packages
echo "[2/9] Installing Cherokee and PHP packages..."
if [[ "$ID" == "ubuntu" || "$ID" == "debian" ]]; then
    $PKG_INSTALL cherokee php-fpm php-cli php-mysql php-curl php-gd php-xml
else
    $PKG_INSTALL epel-release
    $PKG_INSTALL cherokee php-fpm php-cli php-mysqlnd php-curl php-gd php-xml
fi

# Step 3: Configure PHP-FPM
echo "[3/9] Configuring PHP-FPM..."
if [[ "$ID" == "ubuntu" || "$ID" == "debian" ]]; then
    # Create PHP-FPM socket directory
    mkdir -p /var/run/php
    chown www-data:www-data /var/run/php
    
    # Configure PHP-FPM pool
    cat > "$PHP_FPM_CONFIG" << EOF
[www]
user = www-data
group = www-data
listen = $PHP_FPM_SOCKET
listen.owner = www-data
listen.group = www-data
listen.mode = 0660
pm = dynamic
pm.max_children = 50
pm.start_servers = 5
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.process_idle_timeout = 10s
pm.max_requests = 500
EOF
else
    # RHEL-based systems
    mkdir -p /var/run/php-fpm
    chown apache:apache /var/run/php-fpm
    
    sed -i 's/user = apache/user = cherokee/' "$PHP_FPM_CONFIG"
    sed -i 's/group = apache/group = cherokee/' "$PHP_FPM_CONFIG"
    sed -i "s|listen = 127.0.0.1:9000|listen = $PHP_FPM_SOCKET|" "$PHP_FPM_CONFIG"
    sed -i "s/;listen.owner = nobody/listen.owner = cherokee/" "$PHP_FPM_CONFIG"
    sed -i "s/;listen.group = nobody/listen.group = cherokee/" "$PHP_FPM_CONFIG"
    sed -i "s/;listen.mode = 0660/listen.mode = 0660/" "$PHP_FPM_CONFIG"
fi

# Step 4: Create web directories
echo "[4/9] Creating web directories..."
mkdir -p "/var/www/$DOMAIN/public_html"
mkdir -p "/var/www/$SUBDOMAIN/public_html"

if [[ "$ID" == "ubuntu" || "$ID" == "debian" ]]; then
    chown -R www-data:www-data /var/www/
else
    chown -R cherokee:cherokee /var/www/
fi

chmod -R 755 /var/www/

# Step 5: Create test pages
echo "[5/9] Creating test pages..."
cat > "/var/www/$DOMAIN/public_html/index.php" << EOF
<?php
echo "<h1>Welcome to $DOMAIN</h1>";
echo "<p>Server: " . \$_SERVER['SERVER_NAME'] . "</p>";
echo "<p>PHP Version: " . phpversion() . "</p>";
echo "<p>Current Time: " . date('Y-m-d H:i:s') . "</p>";
?>
EOF

cat > "/var/www/$SUBDOMAIN/public_html/index.php" << EOF
<?php
echo "<h1>Welcome to $SUBDOMAIN</h1>";
echo "<p>Server: " . \$_SERVER['SERVER_NAME'] . "</p>";
echo "<p>PHP Version: " . phpversion() . "</p>";
echo "<p>Current Time: " . date('Y-m-d H:i:s') . "</p>";
?>
EOF

if [[ "$ID" == "ubuntu" || "$ID" == "debian" ]]; then
    chown -R www-data:www-data /var/www/
else
    chown -R cherokee:cherokee /var/www/
fi

chmod -R 644 /var/www/*/public_html/*.php

# Step 6: Start and enable services
echo "[6/9] Starting and enabling services..."
systemctl enable --now cherokee
systemctl enable --now "$PHP_FPM_SERVICE"

# Wait for services to start
sleep 3

# Step 7: Configure firewall
echo "[7/9] Configuring firewall..."
if [[ "$FIREWALL_CMD" == "ufw" ]]; then
    if command -v ufw >/dev/null 2>&1; then
        ufw --force enable
        ufw allow 80/tcp
        ufw allow 443/tcp
        ufw allow 9090/tcp
    fi
else
    if command -v firewall-cmd >/dev/null 2>&1; then
        systemctl enable --now firewalld
        firewall-cmd --permanent --add-port=80/tcp
        firewall-cmd --permanent --add-port=443/tcp
        firewall-cmd --permanent --add-port=9090/tcp
        firewall-cmd --reload
    fi
fi

# Step 8: Basic Cherokee configuration
echo "[8/9] Configuring Cherokee basic settings..."
# Create a basic Cherokee configuration
mkdir -p /etc/cherokee/sites-available

# Step 9: Verification
echo "[9/9] Verifying installation..."
if systemctl is-active --quiet cherokee; then
    print_status "Cherokee is running"
else
    print_error "Cherokee is not running"
    exit 1
fi

if systemctl is-active --quiet "$PHP_FPM_SERVICE"; then
    print_status "PHP-FPM is running"
else
    print_error "PHP-FPM is not running"
    exit 1
fi

print_status "Cherokee installation completed successfully!"
print_status "Web directories created at:"
print_status "  - /var/www/$DOMAIN/public_html"
print_status "  - /var/www/$SUBDOMAIN/public_html"
print_status ""
print_status "To configure Cherokee admin interface, run:"
print_status "  sudo cherokee-admin -b -t 60"
print_status ""
print_status "Then access the admin interface at:"
print_status "  http://your-server-ip:9090"
print_status ""
print_warning "Remember to configure your DNS records to point to this server"
print_warning "Configure SSL certificates for production use"