예제 소스

idc_install_omook_nginx.sh

#!/usr/bin/env bash
# IDC에서 실행: omook.mariago.kr nginx (omook 저장소 복사본)
#
#   chmod +x ~/idc_install_omook_nginx.sh
#   sudo ~/idc_install_omook_nginx.sh
#
# DNS: omook.mariago.kr A → ********

set -euo pipefail

REAL_HOME="${SUDO_USER:+$(getent passwd "$SUDO_USER" | cut -d: -f6)}"
REAL_HOME="${REAL_HOME:-$HOME}"
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"

CONF_AVAIL=/etc/nginx/sites-available/omook.mariago.kr.conf
CONF_EN=/etc/nginx/sites-enabled/omook.mariago.kr.conf

if [[ "$(id -u)" -ne 0 ]]; then
  echo "sudo 로 실행해 주세요: sudo $0" >&2
  exit 1
fi

CONF_SRC=""
if [[ "${1:-}" != "" && -f "$1" ]]; then
  CONF_SRC="$1"
else
  for c in \
    "$REAL_HOME/omook.mariago.kr.conf" \
    "$ROOT/deploy/omook.mariago.kr.conf" \
    "$SCRIPT_DIR/../deploy/omook.mariago.kr.conf"
  do
    if [[ -f "$c" ]]; then
      CONF_SRC="$c"
      break
    fi
  done
fi

if [[ -z "$CONF_SRC" || ! -f "$CONF_SRC" ]]; then
  echo "설정 파일 없음. 아래로 올린 뒤 다시 실행하세요:" >&2
  echo "  (Mac) scp deploy/omook.mariago.kr.conf ethtrade:~/" >&2
  exit 1
fi

echo "사용 conf: $CONF_SRC"
cp -a "$CONF_SRC" "$CONF_AVAIL"
ln -sfn "$CONF_AVAIL" "$CONF_EN"

if [[ ! -f /etc/letsencrypt/live/omook.mariago.kr/fullchain.pem ]]; then
  if [[ -f /etc/letsencrypt/live/go.mariago.kr/fullchain.pem ]]; then
    sed -i 's|/etc/letsencrypt/live/omook.mariago.kr/|/etc/letsencrypt/live/go.mariago.kr/|g' "$CONF_AVAIL"
    echo "임시 SSL: go.mariago.kr 인증서 사용"
  elif [[ -f /etc/letsencrypt/live/stoku.mariago.kr/fullchain.pem ]]; then
    sed -i 's|/etc/letsencrypt/live/omook.mariago.kr/|/etc/letsencrypt/live/stoku.mariago.kr/|g' "$CONF_AVAIL"
    echo "임시 SSL: stoku.mariago.kr 인증서 사용"
  else
    echo "경고: Let's Encrypt 인증서가 없습니다." >&2
  fi
fi

if [[ ! -f /etc/letsencrypt/ssl-dhparams.pem ]]; then
  sed -i '/ssl_dhparam/d' "$CONF_AVAIL" || true
fi

sed -i 's/listen 443 ssl http2;/listen 443 ssl;/' "$CONF_AVAIL" || true

nginx -t
systemctl reload nginx

echo "nginx 등록: omook.mariago.kr → 127.0.0.1:18082"
curl -sS -o /dev/null -w "local18082=%{http_code}\n" http://127.0.0.1:18082/ \
  || echo "local18082=DOWN (집 Mac 터널·Next :3002 확인)"
echo ""
echo "인증서: sudo certbot --nginx -d omook.mariago.kr"