Install and configure OpenLiteSpeed with WordPress and LSCache optimization

#!/usr/bin/env bash

set -euo pipefail

# Colors for output
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
NC='\033[0m'

# Configuration
DOMAIN="${1:-localhost}"
DB_NAME="wordpress_db"
DB_USER="wordpress_user"
DB_PASS="$(openssl rand -base64 32 | tr -d "=+/" | cut -c1-25)"
ADMIN_USER="admin"
ADMIN_PASS="$(openssl rand -base64 32 | tr -d "=+/" | cut -c1-25)"
WP_PATH="/usr/local/lsws/Example/html"

# Logging
exec > >(tee -a /var/log/openlitespeed-install.log)
exec 2>&1

log() { echo -e "${BLUE}[$(date '+%Y-%m-%d %H:%M:%S')]${NC} $1"; }
success() { echo -e "${GREEN}✓${NC} $1"; }
error() { echo -e "${RED}✗${NC} $1" >&2; }
warning() { echo -e "${YELLOW}⚠${NC} $1"; }

cleanup() {
    if [ $? -ne 0 ]; then
        error "Installation failed. Check /var/log/openlitespeed-install.log for details"
        log "Rolling back..."
        systemctl stop lsws mysqld 2>/dev/null || true
    fi
}

trap cleanup ERR EXIT

show_usage() {
    echo "Usage: $0 [domain]"
    echo "Example: $0 example.com"
    exit 1
}

check_root() {
    if [[ $EUID -ne 0 ]]; then
        error "This script must be run as root"
        exit 1
    fi
}

detect_distro() {
    if [ ! -f /etc/os-release ]; then
        error "Cannot detect Linux distribution"
        exit 1
    fi
    
    . /etc/os-release
    case "$ID" in
        ubuntu|debian)
            PKG_MGR="apt"
            PKG_UPDATE="apt update && apt upgrade -y"
            PKG_INSTALL="apt install -y"
            FIREWALL_CMD="ufw"
            ;;
        almalinux|rocky|centos|rhel|ol|fedora)
            PKG_MGR="dnf"
            PKG_UPDATE="dnf update -y"
            PKG_INSTALL="dnf install -y"
            FIREWALL_CMD="firewalld"
            if ! command -v dnf &> /dev/null; then
                PKG_MGR="yum"
                PKG_UPDATE="yum update -y"
                PKG_INSTALL="yum install -y"
            fi
            ;;
        amzn)
            PKG_MGR="yum"
            PKG_UPDATE="yum update -y"
            PKG_INSTALL="yum install -y"
            FIREWALL_CMD="firewalld"
            ;;
        *)
            error "Unsupported distribution: $ID"
            exit 1
            ;;
    esac
    success "Detected distribution: $PRETTY_NAME"
}

install_dependencies() {
    log "[2/12] Installing dependencies..."
    
    if [ "$PKG_MGR" = "apt" ]; then
        $PKG_INSTALL wget curl gnupg2 software-properties-common lsb-release ca-certificates apt-transport-https openssl
    else
        $PKG_INSTALL wget curl gnupg2 epel-release openssl
    fi
    success "Dependencies installed"
}

add_litespeed_repo() {
    log "[3/12] Adding OpenLiteSpeed repository..."
    
    if [ "$PKG_MGR" = "apt" ]; then
        wget -O - https://repo.litespeed.sh | bash
        apt update
    else
        if [ "$ID" = "centos" ] && [ "${VERSION_ID%%.*}" = "8" ]; then
            rpm -Uvh http://rpms.litespeedtech.com/centos/litespeed-repo-1.1-1.el8.noarch.rpm
        else
            rpm -Uvh http://rpms.litespeedtech.com/centos/litespeed-repo-1.1-1.el7.noarch.rpm
        fi
        $PKG_MGR update -y
    fi
    success "Repository added"
}

install_openlitespeed() {
    log "[4/12] Installing OpenLiteSpeed..."
    $PKG_INSTALL openlitespeed
    success "OpenLiteSpeed installed"
}

install_php() {
    log "[5/12] Installing PHP 8.4 with LiteSpeed SAPI..."
    $PKG_INSTALL lsphp84 lsphp84-common lsphp84-curl lsphp84-mysql lsphp84-opcache lsphp84-mbstring lsphp84-xml lsphp84-gd lsphp84-zip lsphp84-imagick || {
        warning "Some PHP extensions might not be available, continuing..."
        $PKG_INSTALL lsphp84 lsphp84-common lsphp84-curl lsphp84-mysql lsphp84-opcache lsphp84-mbstring lsphp84-xml
    }
    success "PHP 8.4 installed"
}

install_mysql() {
    log "[6/12] Installing MySQL server..."
    
    if [ "$PKG_MGR" = "apt" ]; then
        $PKG_INSTALL mysql-server
    else
        $PKG_INSTALL mysql-server
    fi
    
    systemctl enable mysqld || systemctl enable mysql
    systemctl start mysqld || systemctl start mysql
    
    # Get temporary password for RHEL-based systems
    if [ "$PKG_MGR" != "apt" ]; then
        TEMP_PASS=$(grep 'temporary password' /var/log/mysqld.log 2>/dev/null | tail -1 | awk '{print $NF}' || echo "")
    fi
    
    success "MySQL installed and started"
}

configure_mysql() {
    log "[7/12] Configuring MySQL database..."
    
    # Set root password and create WordPress database
    if [ "$PKG_MGR" = "apt" ]; then
        mysql -e "CREATE DATABASE IF NOT EXISTS $DB_NAME;"
        mysql -e "CREATE USER IF NOT EXISTS '$DB_USER'@'localhost' IDENTIFIED BY '$DB_PASS';"
        mysql -e "GRANT ALL PRIVILEGES ON $DB_NAME.* TO '$DB_USER'@'localhost';"
        mysql -e "FLUSH PRIVILEGES;"
    else
        if [ -n "${TEMP_PASS:-}" ]; then
            mysql -u root -p"$TEMP_PASS" --connect-expired-password -e "ALTER USER 'root'@'localhost' IDENTIFIED BY '$DB_PASS';" || true
        fi
        mysql -u root -e "CREATE DATABASE IF NOT EXISTS $DB_NAME;"
        mysql -u root -e "CREATE USER IF NOT EXISTS '$DB_USER'@'localhost' IDENTIFIED BY '$DB_PASS';"
        mysql -u root -e "GRANT ALL PRIVILEGES ON $DB_NAME.* TO '$DB_USER'@'localhost';"
        mysql -u root -e "FLUSH PRIVILEGES;"
    fi
    success "Database configured"
}

configure_openlitespeed() {
    log "[8/12] Configuring OpenLiteSpeed admin password..."
    
    echo "$ADMIN_USER" > /tmp/ols_admin_user
    echo "$ADMIN_PASS" >> /tmp/ols_admin_user
    /usr/local/lsws/admin/misc/admpass.sh < /tmp/ols_admin_user
    rm -f /tmp/ols_admin_user
    success "Admin password set"
}

start_services() {
    log "[9/12] Starting and enabling services..."
    
    systemctl enable lsws
    systemctl start lsws
    systemctl status lsws --no-pager
    success "OpenLiteSpeed started"
}

configure_firewall() {
    log "[10/12] Configuring firewall..."
    
    if [ "$FIREWALL_CMD" = "ufw" ]; then
        ufw allow 80/tcp
        ufw allow 443/tcp  
        ufw allow 7080/tcp
        ufw allow 8088/tcp
        ufw --force enable
    else
        systemctl enable firewalld
        systemctl start firewalld
        firewall-cmd --permanent --add-port=80/tcp
        firewall-cmd --permanent --add-port=443/tcp
        firewall-cmd --permanent --add-port=7080/tcp
        firewall-cmd --permanent --add-port=8088/tcp
        firewall-cmd --reload
    fi
    success "Firewall configured"
}

install_wordpress() {
    log "[11/12] Installing WordPress..."
    
    cd /tmp
    wget https://wordpress.org/latest.tar.gz
    tar -xzf latest.tar.gz
    
    # Backup existing files and copy WordPress
    if [ -d "$WP_PATH" ]; then
        mv "$WP_PATH" "${WP_PATH}.bak.$(date +%s)"
    fi
    mkdir -p "$(dirname "$WP_PATH")"
    cp -r wordpress "$WP_PATH"
    
    # Set permissions
    chown -R nobody:nogroup "$WP_PATH"
    find "$WP_PATH" -type d -exec chmod 755 {} \;
    find "$WP_PATH" -type f -exec chmod 644 {} \;
    
    # Create wp-config.php
    cp "$WP_PATH/wp-config-sample.php" "$WP_PATH/wp-config.php"
    sed -i "s/database_name_here/$DB_NAME/g" "$WP_PATH/wp-config.php"
    sed -i "s/username_here/$DB_USER/g" "$WP_PATH/wp-config.php"
    sed -i "s/password_here/$DB_PASS/g" "$WP_PATH/wp-config.php"
    
    # Add security keys
    SALT=$(wget -qO- https://api.wordpress.org/secret-key/1.1/salt/)
    printf '%s\n' "g?put your unique phrase here?d?$SALT?g" w | ed -s "$WP_PATH/wp-config.php"
    
    chown nobody:nogroup "$WP_PATH/wp-config.php"
    chmod 644 "$WP_PATH/wp-config.php"
    
    rm -rf /tmp/wordpress /tmp/latest.tar.gz
    success "WordPress installed"
}

verify_installation() {
    log "[12/12] Verifying installation..."
    
    # Check services
    if ! systemctl is-active --quiet lsws; then
        error "OpenLiteSpeed is not running"
        return 1
    fi
    
    if ! systemctl is-active --quiet mysqld && ! systemctl is-active --quiet mysql; then
        error "MySQL is not running"  
        return 1
    fi
    
    # Check ports
    if ! ss -tlnp | grep -q ":8088"; then
        error "OpenLiteSpeed is not listening on port 8088"
        return 1
    fi
    
    success "All services are running correctly"
}

show_summary() {
    log "Installation completed successfully!"
    echo
    echo "=========================================="
    echo "OpenLiteSpeed Installation Summary"
    echo "=========================================="
    echo "Domain: $DOMAIN"
    echo "OpenLiteSpeed Admin Panel: https://$(hostname -I | awk '{print $1}'):7080"
    echo "Admin Username: $ADMIN_USER"
    echo "Admin Password: $ADMIN_PASS"
    echo
    echo "WordPress Site: http://$(hostname -I | awk '{print $1}'):8088"
    echo "WordPress Path: $WP_PATH"
    echo
    echo "Database Name: $DB_NAME"
    echo "Database User: $DB_USER"
    echo "Database Password: $DB_PASS"
    echo
    echo "Log file: /var/log/openlitespeed-install.log"
    echo "=========================================="
    echo
    warning "Save these credentials securely!"
}

main() {
    log "[1/12] Starting OpenLiteSpeed installation..."
    
    check_root
    detect_distro
    
    eval $PKG_UPDATE
    install_dependencies
    add_litespeed_repo
    install_openlitespeed
    install_php
    install_mysql
    configure_mysql
    configure_openlitespeed
    start_services
    configure_firewall
    install_wordpress
    verify_installation
    
    show_summary
}

if [[ "${1:-}" == "-h" ]] || [[ "${1:-}" == "--help" ]]; then
    show_usage
fi

main "$@"