@rglabs/butterfly 1.0.4 → 1.2.0

package/docs/forge/legacy/php83-mysql.sh

@@ -0,0 +1,987 @@
+export DEBIAN_FRONTEND=noninteractive
+
+function provisionPing {
+  curl --insecure --data "status=$2&server_id=$1" https://forge.laravel.com/provisioning/callback/status
+}
+
+cat > /etc/apt/apt.conf.d/90lock-timeout << 'EOF'
+DPkg::Lock::Timeout "300";
+APT::Get::Lock::Timeout "300";
+EOF
+
+    if [[ $EUID -ne 0 ]]; then
+   echo "This script must be run as root."
+
+   exit 1
+fi
+    if [[ -f /root/.forge-provisioned ]]; then
+  echo "This server has already been provisioned by Laravel Forge."
+  echo "If you need to re-provision, you may remove the /root/.forge-provisioned file and try again."
+
+  exit 1
+fi
+    AVAILABLE_VERSIONS=(22.04 24.04)
+OS_NOT_SUPPORTED="Forge only supports Ubuntu ${AVAILABLE_VERSIONS[@]}."
+
+if [[ ! -f /etc/os-release ]]; then
+  echo "$OS_NOT_SUPPORTED"
+  exit 1
+fi
+
+UNAME=$(awk -F= '/^NAME/{print $2}' /etc/os-release | sed 's/\"//g')
+VERSION=$(awk -F= '/^VERSION_ID/{print $2}' /etc/os-release | sed 's/\"//g')
+
+if [[ "$UNAME" != "Ubuntu" || ! " ${AVAILABLE_VERSIONS[@]} " =~ " ${VERSION} " ]]; then
+  echo "$OS_NOT_SUPPORTED"
+  exit 1
+fi
+    FORGE_UBUNTU_VERSION="24.04"
+
+if [[ ! -f /etc/os-release ]]; then
+  echo "Could not determine OS version. /etc/os-release file not found."
+  exit 1
+fi
+
+VERSION=$(awk -F= '/^VERSION_ID/{print $2}' /etc/os-release | sed 's/\"//g')
+
+if [[ "$FORGE_UBUNTU_VERSION" != "$VERSION" ]]; then
+  echo "Forge Ubuntu version mismatch. Expected ubuntu:$FORGE_UBUNTU_VERSION but this server is ubuntu:$VERSION."
+  echo "Please recreate the server in Forge and select $VERSION as the Ubuntu version."
+  exit 1
+fi
+
+    apt-get install -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" -y --force-yes curl
+
+provisionPing 1003547 1
+
+    # Create The Root SSH Directory If Necessary
+
+if [ ! -d /root/.ssh ]
+then
+  mkdir -p /root/.ssh
+  touch /root/.ssh/authorized_keys
+fi
+
+# Check Permissions Of /root Directory
+
+chown root:root /root
+chown -R root:root /root/.ssh
+
+chmod 700 /root/.ssh
+chmod 600 /root/.ssh/authorized_keys
+
+
+# Disable MOTD
+touch /root/.hushlogin
+    # Setup Forge User
+
+useradd forge
+mkdir -p /home/forge/.ssh
+mkdir -p /home/forge/.forge
+adduser forge sudo
+
+# Setup Bash For Forge User
+
+chsh -s /bin/bash forge
+cp /root/.profile /home/forge/.profile
+cp /root/.bashrc /home/forge/.bashrc
+
+chown -R forge:forge /home/forge
+chmod -R 755 /home/forge
+
+# Disable MOTD
+touch /home/forge/.hushlogin
+
+# Authorize Forge's Unique Server Public Key
+cat > /root/.ssh/authorized_keys << EOF
+# Laravel Forge
+ssh-rsa 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 worker@forge.laravel.com
+
+EOF
+
+# Copy Root SSH Keys To Forge User
+cp /root/.ssh/authorized_keys /home/forge/.ssh/authorized_keys
+chmod 600 /home/forge/.ssh/authorized_keys
+chown -R forge:forge /home/forge/.ssh
+
+# Disable Password Authentication Over SSH
+if [ ! -d /etc/ssh/sshd_config.d ]; then mkdir /etc/ssh/sshd_config.d; fi
+
+cat << EOF > /etc/ssh/sshd_config.d/49-forge.conf
+# This file is managed by Laravel Forge.
+
+PasswordAuthentication no
+
+EOF
+
+# Generate SSH Host Keys
+ssh-keygen -A
+
+systemctl reload ssh
+
+    echo "Checking the Forge connection ..."
+response=`curl -s -w "%{http_code}" POST --url https://forge.laravel.com/servers/1003547/vps/connection --data-urlencode "forge_token=eyJpdiI6InJlUmRSZWd5aWl3c1Vvclc2U01GbUE9PSIsInZhbHVlIjoiTTd6L1k4R29wc3dRNDVpdFJIbVJEN09UMWFmRHZTSmhudjQ4Q1BKWXplWkZXckdoaHdubGZ0K3lZelR1cHZKWXU1elhGL1lGQ1h2UDFOb1lsRnJBaWNJRkhOVldOZWE5UXJleklUYlRnTVZ0RmhTZ0xudnU1ZXdyWWR2aUsxYmYiLCJtYWMiOiJlOTdhZTQxMDNhMGYzZDEyMTA3YWEwNDUwYzAyNTI5ODMxZGNiMDljZTA1MDZiNTY3MmNlYjAzZjFlNjk5NjFjIiwidGFnIjoiIn0="`
+status=$(printf "%s" "$response" | tail -c 3)
+if [ "$status" -ne "200" ]; then
+  echo "Error \"$status\" while checking the Forge connection."
+  echo "Forge: ${response::-3}"
+  exit 1
+else
+  echo "Forge connection was established."
+fi
+
+    sed -i "s/#precedence ::ffff:0:0\/96  100/precedence ::ffff:0:0\/96  100/" /etc/gai.conf
+    if [ -f /etc/needrestart/needrestart.conf ]; then
+  # Ubuntu 22 has this set to (i)nteractive, but we want (a)utomatic.
+  sed -i "s/^#\$nrconf{restart} = 'i';/\$nrconf{restart} = 'a';/" /etc/needrestart/needrestart.conf
+fi
+
+    provisionPing 1003547 2
+    # Configure Swap Disk
+
+if [ -f /swapfile ]; then
+    echo "Swap exists."
+else
+    fallocate -l 1G /swapfile
+    chmod 600 /swapfile
+    mkswap /swapfile
+    swapon /swapfile
+    echo "/swapfile none swap sw 0 0" >> /etc/fstab
+    echo "vm.swappiness=30" >> /etc/sysctl.conf
+    echo "vm.vfs_cache_pressure=50" >> /etc/sysctl.conf
+fi
+
+provisionPing 1003547 3
+apt-get update
+apt-get -o Dpkg::Options::="--force-confold" upgrade -y
+
+    apt-get install -y --force-yes software-properties-common
+
+# add-apt-repository -y -n ppa:fkrull/deadsnakes-python2.7
+# add-apt-repository -y -n ppa:nginx/mainline
+add-apt-repository -y -n ppa:ondrej/nginx
+# add-apt-repository -y -n ppa:chris-lea/redis-server
+
+add-apt-repository -y -n ppa:ondrej/php
+add-apt-repository -y -n universe
+
+add-apt-repository -y -n ppa:laravelphp/forge
+
+# Allow for metadata changes within PPA repositories
+apt-get update -o Acquire::AllowReleaseInfoChange=true
+
+    # See: https://redis.io/docs/getting-started/installation/install-redis-on-linux/
+curl -fsSL https://packages.redis.io/gpg | sudo gpg --dearmor -o /usr/share/keyrings/redis-archive-keyring.gpg
+sudo chmod 644 /usr/share/keyrings/redis-archive-keyring.gpg
+echo "deb [signed-by=/usr/share/keyrings/redis-archive-keyring.gpg] https://packages.redis.io/deb $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/redis.list
+sudo apt-get update
+
+    apt-get install -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" -y --force-yes \
+    acl \
+    build-essential \
+    bsdmainutils \
+    cron \
+    curl \
+    fail2ban \
+    g++ \
+    gcc \
+    git \
+    jq \
+    libmagickwand-dev \
+    libmcrypt4 \
+    libpcre2-dev \
+    libpcre3-dev \
+    libpng-dev \
+    make \
+    ncdu \
+    net-tools \
+    pkg-config \
+    python3 \
+    python3-pip \
+    rsyslog \
+    sendmail \
+    sqlite3 \
+    supervisor \
+    ufw \
+    unzip \
+    uuid-runtime \
+    whois \
+    zip \
+    zsh
+
+MKPASSWD_INSTALLED=$(type mkpasswd &> /dev/null)
+if [ $? -ne 0 ]; then
+  echo "Failed to install base dependencies."
+
+  exit 1
+fi
+    # Set The Timezone
+
+# ln -sf /usr/share/zoneinfo/UTC /etc/localtime
+ln -sf /usr/share/zoneinfo/UTC /etc/localtime
+    # Install AWSCLI
+pip3 install httpie
+
+case "$(dpkg --print-architecture)" in
+    amd64) AWSCLI_ARCH="x86_64" ;;
+    arm64) AWSCLI_ARCH="aarch64" ;;
+    *) echo "Could not install AWS CLI. Unsupported architecture $(dpkg --print-architecture)"; exit 1 ;;
+esac
+
+AWSCLI_VERSION="2.22.35"
+AWSCLI_INSTALL_TMP_DIR=$(mktemp -d)
+cd "$AWSCLI_INSTALL_TMP_DIR" || exit 1
+
+echo "Installing AWS CLI v${AWSCLI_VERSION} for ${AWSCLI_ARCH}..."
+
+curl -fsS "https://awscli.amazonaws.com/awscli-exe-linux-${AWSCLI_ARCH}-${AWSCLI_VERSION}.zip" -o "awscliv2.zip"
+unzip -q awscliv2.zip
+sudo ./aws/install
+
+cd - || exit 1
+rm -rf "$AWSCLI_INSTALL_TMP_DIR"
+    # Add The Provisioning Cleanup Script Into Root Directory
+
+cat > /root/forge-cleanup.sh << 'EOF'
+#!/usr/bin/env bash
+
+# Laravel Forge Provisioning Cleanup Script
+
+UID_MIN=$(awk '/^UID_MIN/ {print $2}' /etc/login.defs)
+UID_MAX=$(awk '/^UID_MAX/ {print $2}' /etc/login.defs)
+HOME_DIRECTORIES=$(eval getent passwd {0,{${UID_MIN}..${UID_MAX}}} | cut -d: -f6)
+
+for DIRECTORY in $HOME_DIRECTORIES
+do
+  FORGE_DIRECTORY="$DIRECTORY/.forge"
+
+  if [ ! -d $FORGE_DIRECTORY ]
+  then
+    continue
+  fi
+
+  echo "Cleaning $FORGE_DIRECTORY..."
+
+  find $FORGE_DIRECTORY -type f -mtime +30 -print0 | xargs -r0 rm --
+done
+EOF
+
+chmod +x /root/forge-cleanup.sh
+
+echo "" | tee -a /etc/crontab
+echo "# Laravel Forge Provisioning Cleanup" | tee -a /etc/crontab
+tee -a /etc/crontab <<"CRONJOB"
+0 0 * * * root bash /root/forge-cleanup.sh 2>&1
+CRONJOB
+    echo "forge ALL=NOPASSWD: /usr/sbin/service php8.4-fpm reload" > /etc/sudoers.d/php-fpm
+echo "forge ALL=NOPASSWD: /usr/sbin/service php8.3-fpm reload" >> /etc/sudoers.d/php-fpm
+echo "forge ALL=NOPASSWD: /usr/sbin/service php8.2-fpm reload" >> /etc/sudoers.d/php-fpm
+echo "forge ALL=NOPASSWD: /usr/sbin/service php8.1-fpm reload" >> /etc/sudoers.d/php-fpm
+echo "forge ALL=NOPASSWD: /usr/sbin/service php8.0-fpm reload" >> /etc/sudoers.d/php-fpm
+echo "forge ALL=NOPASSWD: /usr/sbin/service php7.4-fpm reload" >> /etc/sudoers.d/php-fpm
+echo "forge ALL=NOPASSWD: /usr/sbin/service php7.3-fpm reload" >> /etc/sudoers.d/php-fpm
+echo "forge ALL=NOPASSWD: /usr/sbin/service php7.2-fpm reload" >> /etc/sudoers.d/php-fpm
+echo "forge ALL=NOPASSWD: /usr/sbin/service php7.1-fpm reload" >> /etc/sudoers.d/php-fpm
+echo "forge ALL=NOPASSWD: /usr/sbin/service php7.0-fpm reload" >> /etc/sudoers.d/php-fpm
+echo "forge ALL=NOPASSWD: /usr/sbin/service php5.6-fpm reload" >> /etc/sudoers.d/php-fpm
+echo "forge ALL=NOPASSWD: /usr/sbin/service php5-fpm reload" >> /etc/sudoers.d/php-fpm
+
+echo "forge ALL=NOPASSWD: /usr/sbin/service nginx *" >> /etc/sudoers.d/nginx
+
+#  supervisorctl needs to have restricted permissions to ensure the "forge" user
+#  does not have arbitrary file read / append permissions.
+echo "forge ALL=NOPASSWD: /usr/bin/supervisorctl reload" >> /etc/sudoers.d/supervisor
+echo "forge ALL=NOPASSWD: /usr/bin/supervisorctl reread" >> /etc/sudoers.d/supervisor
+echo "forge ALL=NOPASSWD: /usr/bin/supervisorctl restart *" >> /etc/sudoers.d/supervisor
+echo "forge ALL=NOPASSWD: /usr/bin/supervisorctl start *" >> /etc/sudoers.d/supervisor
+echo "forge ALL=NOPASSWD: /usr/bin/supervisorctl status *" >> /etc/sudoers.d/supervisor
+echo "forge ALL=NOPASSWD: /usr/bin/supervisorctl status" >> /etc/sudoers.d/supervisor
+echo "forge ALL=NOPASSWD: /usr/bin/supervisorctl stop *" >> /etc/sudoers.d/supervisor
+echo "forge ALL=NOPASSWD: /usr/bin/supervisorctl update *" >> /etc/sudoers.d/supervisor
+echo "forge ALL=NOPASSWD: /usr/bin/supervisorctl update" >> /etc/sudoers.d/supervisor
+
+# Set The Hostname If Necessary
+echo "app01" > /etc/hostname
+sed -i 's/127\.0\.0\.1.*localhost/127.0.0.1	app01.localdomain app01 localhost/' /etc/hosts
+hostname app01
+
+# Set The Sudo Password For Forge
+
+PASSWORD=$(mkpasswd -m sha-512 'JCFCX2DTyTOM$9*5oP[d')
+usermod --password $PASSWORD forge
+# Create The Server SSH Key
+
+ssh-keygen -f /home/forge/.ssh/id_rsa -t ed25519 -N ''
+chown -R forge:forge /home/forge/.ssh
+chmod 700 /home/forge/.ssh/id_rsa
+apt-get install -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" -y --force-yes sendmail
+# Copy Source Control Public Keys Into Known Hosts File
+
+ssh-keyscan -H github.com >> /home/forge/.ssh/known_hosts
+ssh-keyscan -H bitbucket.org >> /home/forge/.ssh/known_hosts
+ssh-keyscan -H gitlab.com >> /home/forge/.ssh/known_hosts
+
+chown forge:forge /home/forge/.ssh/known_hosts
+# Configure Git Settings
+
+git config --global user.name "Gokhan Efendi"
+git config --global user.email "gokhan.efendi@gmail.com"
+# Setup UFW Firewall
+
+ufw allow 22
+ufw allow 80
+ufw allow 443
+
+
+ufw --force enable
+
+provisionPing 1003547 4
+
+    # Ensure apt-get Is Up To Date
+apt-get update -o Acquire::AllowReleaseInfoChange=true
+
+# Install Base PHP Packages
+
+apt-get install -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" -y --force-yes \
+php8.3-fpm php8.3-cli php8.3-dev \
+php8.3-pgsql php8.3-sqlite3 php8.3-gd php8.3-curl \
+php8.3-imap php8.3-mysql php8.3-mbstring \
+php8.3-xml php8.3-zip php8.3-bcmath php8.3-soap \
+php8.3-intl php8.3-readline php8.3-gmp \
+php8.3-redis php8.3-memcached php8.3-msgpack php8.3-igbinary php8.3-swoole
+
+# Install Composer Package Manager
+
+if [ ! -f /usr/local/bin/composer ]; then
+  curl -sS https://getcomposer.org/installer | php
+mv composer.phar /usr/local/bin/composer
+
+echo "forge ALL=(root) NOPASSWD: /usr/local/bin/composer self-update*" > /etc/sudoers.d/composer
+fi
+
+# Misc. PHP CLI Configuration
+
+sudo sed -i "s/error_reporting = .*/error_reporting = E_ALL/" /etc/php/8.3/cli/php.ini
+sudo sed -i "s/display_errors = .*/display_errors = On/" /etc/php/8.3/cli/php.ini
+sudo sed -i "s/;cgi.fix_pathinfo=1/cgi.fix_pathinfo=0/" /etc/php/8.3/cli/php.ini
+sudo sed -i "s/memory_limit = .*/memory_limit = 512M/" /etc/php/8.3/cli/php.ini
+sudo sed -i "s/;date.timezone.*/date.timezone = UTC/" /etc/php/8.3/cli/php.ini
+
+# Misc. PHP FPM Configuration
+
+sudo sed -i "s/display_errors = .*/display_errors = Off/" /etc/php/8.3/fpm/php.ini
+
+
+# Ensure Imagick Is Available
+
+echo "Configuring Imagick"
+
+apt-get install -y --force-yes libmagickwand-dev
+echo "extension=imagick.so" > /etc/php/8.3/mods-available/imagick.ini
+yes '' | apt-get install php8.3-imagick
+
+# Configure FPM Pool Settings
+
+sed -i "s/^user = www-data/user = forge/" /etc/php/8.3/fpm/pool.d/www.conf
+sed -i "s/^group = www-data/group = forge/" /etc/php/8.3/fpm/pool.d/www.conf
+sed -i "s/;listen\.owner.*/listen.owner = forge/" /etc/php/8.3/fpm/pool.d/www.conf
+sed -i "s/;listen\.group.*/listen.group = forge/" /etc/php/8.3/fpm/pool.d/www.conf
+sed -i "s/;listen\.mode.*/listen.mode = 0666/" /etc/php/8.3/fpm/pool.d/www.conf
+sed -i "s/;request_terminate_timeout .*/request_terminate_timeout = 60/" /etc/php/8.3/fpm/pool.d/www.conf
+
+# Optimize FPM Processes
+
+sed -i "s/^pm.max_children.*=.*/pm.max_children = 20/" /etc/php/8.3/fpm/pool.d/www.conf
+
+# Ensure Sudoers Is Up To Date
+
+LINE="ALL=NOPASSWD: /usr/sbin/service php8.3-fpm reload"
+FILE="/etc/sudoers.d/php-fpm"
+grep -q -- "^forge $LINE" "$FILE" || echo "forge $LINE" >> "$FILE"
+
+# Configure Sessions Directory Permissions
+
+chmod 733 /var/lib/php/sessions
+chmod +t /var/lib/php/sessions
+
+# Write Systemd File For Linode
+
+
+
+
+
+
+
+
+
+if [[ $(grep --count "maxsize" /etc/logrotate.d/php8.3-fpm) == 0 ]]; then
+    sed -i -r "s/^(\s*)(daily|weekly|monthly|yearly)$/\1\2\n\1maxsize 100M/" /etc/logrotate.d/php8.3-fpm
+else
+    sed -i -r "s/^(\s*)maxsize.*$/\1maxsize 100M/" /etc/logrotate.d/php8.3-fpm
+fi
+    update-alternatives --set php /usr/bin/php8.3
+
+provisionPing 1003547 5
+
+    # Install Nginx & PHP-FPM
+apt-get install -y --force-yes nginx
+
+systemctl enable nginx.service
+
+# Generate dhparam File
+
+openssl dhparam -out /etc/nginx/dhparams.pem 2048
+
+# Tweak Some PHP-FPM Settings
+
+sed -i "s/error_reporting = .*/error_reporting = E_ALL/" /etc/php/8.3/fpm/php.ini
+sed -i "s/display_errors = .*/display_errors = Off/" /etc/php/8.3/fpm/php.ini
+sed -i "s/;cgi.fix_pathinfo=1/cgi.fix_pathinfo=0/" /etc/php/8.3/fpm/php.ini
+sed -i "s/memory_limit = .*/memory_limit = 512M/" /etc/php/8.3/fpm/php.ini
+sed -i "s/;date.timezone.*/date.timezone = UTC/" /etc/php/8.3/fpm/php.ini
+
+# Configure FPM Pool Settings
+
+sed -i "s/^user = www-data/user = forge/" /etc/php/8.3/fpm/pool.d/www.conf
+sed -i "s/^group = www-data/group = forge/" /etc/php/8.3/fpm/pool.d/www.conf
+sed -i "s/;listen\.owner.*/listen.owner = forge/" /etc/php/8.3/fpm/pool.d/www.conf
+sed -i "s/;listen\.group.*/listen.group = forge/" /etc/php/8.3/fpm/pool.d/www.conf
+sed -i "s/;listen\.mode.*/listen.mode = 0666/" /etc/php/8.3/fpm/pool.d/www.conf
+sed -i "s/;request_terminate_timeout .*/request_terminate_timeout = 60/" /etc/php/8.3/fpm/pool.d/www.conf
+
+# Configure Primary Nginx Settings
+
+sed -i "s/user www-data;/user forge;/" /etc/nginx/nginx.conf
+sed -i "s/worker_processes.*/worker_processes auto;/" /etc/nginx/nginx.conf
+sed -i "s/# multi_accept.*/multi_accept on;/" /etc/nginx/nginx.conf
+sed -i "s/# server_names_hash_bucket_size.*/server_names_hash_bucket_size 128;/" /etc/nginx/nginx.conf
+
+# Configure Gzip
+
+cat > /etc/nginx/conf.d/gzip.conf << EOF
+gzip_comp_level 5;
+gzip_min_length 256;
+gzip_proxied any;
+gzip_vary on;
+gzip_http_version 1.1;
+
+gzip_types
+application/atom+xml
+application/javascript
+application/json
+application/ld+json
+application/manifest+json
+application/rss+xml
+application/vnd.geo+json
+application/vnd.ms-fontobject
+application/x-font-ttf
+application/x-web-app-manifest+json
+application/xhtml+xml
+application/xml
+font/opentype
+image/bmp
+image/svg+xml
+image/x-icon
+text/cache-manifest
+text/css
+text/plain
+text/vcard
+text/vnd.rim.location.xloc
+text/vtt
+text/x-component
+text/x-cross-domain-policy;
+
+EOF
+
+# Configure Cloudflare Real IPs
+
+cat > /etc/nginx/conf.d/cloudflare.conf << EOF
+set_real_ip_from 173.245.48.0/20;
+set_real_ip_from 103.21.244.0/22;
+set_real_ip_from 103.22.200.0/22;
+set_real_ip_from 103.31.4.0/22;
+set_real_ip_from 141.101.64.0/18;
+set_real_ip_from 108.162.192.0/18;
+set_real_ip_from 190.93.240.0/20;
+set_real_ip_from 188.114.96.0/20;
+set_real_ip_from 197.234.240.0/22;
+set_real_ip_from 198.41.128.0/17;
+set_real_ip_from 162.158.0.0/15;
+set_real_ip_from 104.16.0.0/13;
+set_real_ip_from 104.24.0.0/14;
+set_real_ip_from 172.64.0.0/13;
+set_real_ip_from 131.0.72.0/22;
+set_real_ip_from 2400:cb00::/32;
+set_real_ip_from 2606:4700::/32;
+set_real_ip_from 2803:f800::/32;
+set_real_ip_from 2405:b500::/32;
+set_real_ip_from 2405:8100::/32;
+set_real_ip_from 2a06:98c0::/29;
+set_real_ip_from 2c0f:f248::/32;
+real_ip_header X-Forwarded-For;
+
+EOF
+# Disable The Default Nginx Site
+
+rm /etc/nginx/sites-enabled/default
+rm /etc/nginx/sites-available/default
+service nginx restart
+
+# Install A Catch All Server
+mkdir -p /etc/nginx/ssl/
+cat > /etc/nginx/ssl/catch-all.invalid.crt << EOF
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+EOF
+cat > /etc/nginx/ssl/catch-all.invalid.key << EOF
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
+EOF
+
+# Convert a version string into an integer.
+
+function version { echo "$@" | awk -F. '{ printf("%d%03d%03d%03d\n", $1,$2,$3,$4); }'; }
+if [ $(version $(nginx -v 2>&1 | grep -o '[0-9.]\+')) -ge $(version "1.26") ]; then
+cat > /etc/nginx/sites-available/000-catch-all << EOF
+server {
+    http2 on;
+    listen 80 default_server;
+    listen [::]:80 default_server;
+    listen 443 ssl default_server;
+    listen [::]:443 ssl default_server;
+    server_name _;
+    server_tokens off;
+
+    ssl_certificate /etc/nginx/ssl/catch-all.invalid.crt;
+    ssl_certificate_key /etc/nginx/ssl/catch-all.invalid.key;
+
+    ssl_protocols TLSv1.2 TLSv1.3;
+ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
+ssl_prefer_server_ciphers off;
+ssl_dhparam /etc/nginx/dhparams.pem;
+    ssl_reject_handshake on;
+
+    return 444;
+}
+EOF
+else
+cat > /etc/nginx/sites-available/000-catch-all << EOF
+server {
+    listen 80 default_server;
+    listen [::]:80 default_server;
+    listen 443 ssl http2 default_server;
+    listen [::]:443 ssl http2 default_server;
+    server_name _;
+    server_tokens off;
+
+    ssl_certificate /etc/nginx/ssl/catch-all.invalid.crt;
+    ssl_certificate_key /etc/nginx/ssl/catch-all.invalid.key;
+
+    ssl_protocols TLSv1.2 TLSv1.3;
+ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
+ssl_prefer_server_ciphers off;
+ssl_dhparam /etc/nginx/dhparams.pem;
+    ssl_reject_handshake on;
+
+    return 444;
+}
+EOF
+fi
+
+ln -s /etc/nginx/sites-available/000-catch-all /etc/nginx/sites-enabled/000-catch-all
+
+# Restart Nginx & PHP-FPM Services
+
+# Restart Nginx & PHP-FPM Services
+
+#service nginx restart
+NGINX=$(ps aux | grep nginx | grep -v grep)
+if [[ -z $NGINX ]]; then
+    service nginx start
+    echo "Started Nginx"
+else
+    service nginx reload
+    echo "Reloaded Nginx"
+fi
+
+PHP=$(ps aux | grep php-fpm | grep -v grep)
+if [[ ! -z $PHP ]]; then
+    service php8.4-fpm reload > /dev/null 2>&1 || true
+    service php8.3-fpm reload > /dev/null 2>&1 || true
+    service php8.2-fpm reload > /dev/null 2>&1 || true
+    service php8.1-fpm reload > /dev/null 2>&1 || true
+    service php8.0-fpm reload > /dev/null 2>&1 || true
+    service php7.4-fpm reload > /dev/null 2>&1 || true
+    service php7.3-fpm reload > /dev/null 2>&1 || true
+    service php7.2-fpm reload > /dev/null 2>&1 || true
+    service php7.1-fpm reload > /dev/null 2>&1 || true
+    service php7.0-fpm reload > /dev/null 2>&1 || true
+    service php5.6-fpm reload > /dev/null 2>&1 || true
+    service php5-fpm reload > /dev/null 2>&1 || true
+fi
+
+# Add Forge User To www-data Group
+
+usermod -a -G www-data forge
+id forge
+groups forge
+
+if [[ $(grep --count "maxsize" /etc/logrotate.d/nginx) == 0 ]]; then
+    sed -i -r "s/^(\s*)(daily|weekly|monthly|yearly)$/\1\2\n\1maxsize 100M/" /etc/logrotate.d/nginx
+else
+    sed -i -r "s/^(\s*)maxsize.*$/\1maxsize 100M/" /etc/logrotate.d/nginx
+fi
+
+    mkdir -p /etc/apt/keyrings
+
+curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg
+
+NODE_MAJOR=22
+echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_$NODE_MAJOR.x nodistro main" > /etc/apt/sources.list.d/nodesource.list
+
+apt-get update
+sudo apt-get install -y --force-yes nodejs
+
+npm install -g pm2
+npm install -g gulp
+npm install -g yarn
+npm install -g pnpm
+npm install -g bun
+
+    provisionPing 1003547 6
+    export DEBIAN_FRONTEND=noninteractive
+
+# Add MySQL Keys...
+
+sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 467B942D3A79BD29
+
+# Configure MySQL Repositories If Required
+
+# Convert a version string into an integer.
+
+function version { echo "$@" | awk -F. '{ printf("%d%03d%03d%03d\n", $1,$2,$3,$4); }'; }
+
+UBUNTU_VERSION=$(lsb_release -rs)
+echo "Server on Ubuntu ${UBUNTU_VERSION}"
+if [ $(version $UBUNTU_VERSION) -le $(version "20.04") ]; then
+    wget -c https://dev.mysql.com/get/mysql-apt-config_0.8.15-1_all.deb
+    dpkg --install mysql-apt-config_0.8.15-1_all.deb
+
+    apt-get update
+fi
+
+# Set The Automated Root Password
+
+debconf-set-selections <<< "mysql-community-server mysql-community-server/data-dir select ''"
+debconf-set-selections <<< "mysql-community-server mysql-community-server/root-pass password kLYlbEwx1Fbdi7IMeUH0"
+debconf-set-selections <<< "mysql-community-server mysql-community-server/re-root-pass password kLYlbEwx1Fbdi7IMeUH0"
+
+# Install MySQL
+
+apt-get install -y mysql-community-server
+apt-get install -y mysql-server
+
+# Configure Password Expiration
+
+echo "default_password_lifetime = 0" >> /etc/mysql/mysql.conf.d/mysqld.cnf
+
+# Set Character Set
+
+echo "" >> /etc/mysql/my.cnf
+echo "[mysqld]" >> /etc/mysql/my.cnf
+echo "default_authentication_plugin=mysql_native_password" >> /etc/mysql/my.cnf
+echo "skip-log-bin" >> /etc/mysql/my.cnf
+
+# Configure Max Connections
+
+RAM=$(awk '/^MemTotal:/{printf "%3.0f", $2 / (1024 * 1024)}' /proc/meminfo)
+MAX_CONNECTIONS=$(( 70 * $RAM ))
+REAL_MAX_CONNECTIONS=$(( MAX_CONNECTIONS>70 ? MAX_CONNECTIONS : 100 ))
+sed -i "s/^max_connections.*=.*/max_connections=${REAL_MAX_CONNECTIONS}/" /etc/mysql/my.cnf
+
+# Configure Access Permissions For Root & Forge Users
+
+if grep -q "bind-address" /etc/mysql/mysql.conf.d/mysqld.cnf; then
+  sed -i '/^bind-address/s/bind-address.*=.*/bind-address = */' /etc/mysql/mysql.conf.d/mysqld.cnf
+else
+  echo "bind-address = *" >> /etc/mysql/mysql.conf.d/mysqld.cnf
+fi
+
+export MYSQL_TEST_LOGIN_FILE="$(mktemp --suffix .mylogin.cnf)"
+
+cat > "$MYSQL_TEST_LOGIN_FILE" <<EOF
+[client]
+user=root
+password=kLYlbEwx1Fbdi7IMeUH0
+EOF
+
+chmod 600 "$MYSQL_TEST_LOGIN_FILE"
+
+mysql -e "CREATE USER 'root'@'164.90.158.39' IDENTIFIED BY 'kLYlbEwx1Fbdi7IMeUH0';"
+mysql -e "CREATE USER 'root'@'%' IDENTIFIED BY 'kLYlbEwx1Fbdi7IMeUH0';"
+mysql -e "GRANT ALL PRIVILEGES ON *.* TO root@'164.90.158.39' WITH GRANT OPTION;"
+mysql -e "GRANT ALL PRIVILEGES ON *.* TO root@'%' WITH GRANT OPTION;"
+service mysql restart
+
+mysql -e "CREATE USER 'forge'@'164.90.158.39' IDENTIFIED BY 'kLYlbEwx1Fbdi7IMeUH0';"
+mysql -e "CREATE USER 'forge'@'%' IDENTIFIED BY 'kLYlbEwx1Fbdi7IMeUH0';"
+mysql -e "GRANT ALL PRIVILEGES ON *.* TO 'forge'@'164.90.158.39' WITH GRANT OPTION;"
+mysql -e "GRANT ALL PRIVILEGES ON *.* TO 'forge'@'%' WITH GRANT OPTION;"
+mysql -e "FLUSH PRIVILEGES;"
+
+# Create The Initial Database If Specified
+
+mysql -e "CREATE DATABASE forge CHARACTER SET utf8 COLLATE utf8_unicode_ci;"
+
+rm -f "$MYSQL_TEST_LOGIN_FILE"
+unset MYSQL_TEST_LOGIN_FILE
+
+if [[ $(grep --count "maxsize" /etc/logrotate.d/mysql-server) == 0 ]]; then
+    sed -i -r "s/^(\s*)(daily|weekly|monthly|yearly)$/\1\2\n\1maxsize 100M/" /etc/logrotate.d/mysql-server
+else
+    sed -i -r "s/^(\s*)maxsize.*$/\1maxsize 100M/" /etc/logrotate.d/mysql-server
+fi
+
+    # If MySQL Fails To Start, Re-Install It
+
+    service mysql restart
+
+    if [[ $? -ne 0 ]]; then
+        echo "Purging previous MySQL8 installation..."
+
+        sudo apt-get purge mysql-server mysql-community-server
+        sudo apt-get autoclean && sudo apt-get clean
+
+        export DEBIAN_FRONTEND=noninteractive
+
+# Add MySQL Keys...
+
+sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 467B942D3A79BD29
+
+# Configure MySQL Repositories If Required
+
+# Convert a version string into an integer.
+
+function version { echo "$@" | awk -F. '{ printf("%d%03d%03d%03d\n", $1,$2,$3,$4); }'; }
+
+UBUNTU_VERSION=$(lsb_release -rs)
+echo "Server on Ubuntu ${UBUNTU_VERSION}"
+if [ $(version $UBUNTU_VERSION) -le $(version "20.04") ]; then
+    wget -c https://dev.mysql.com/get/mysql-apt-config_0.8.15-1_all.deb
+    dpkg --install mysql-apt-config_0.8.15-1_all.deb
+
+    apt-get update
+fi
+
+# Set The Automated Root Password
+
+debconf-set-selections <<< "mysql-community-server mysql-community-server/data-dir select ''"
+debconf-set-selections <<< "mysql-community-server mysql-community-server/root-pass password kLYlbEwx1Fbdi7IMeUH0"
+debconf-set-selections <<< "mysql-community-server mysql-community-server/re-root-pass password kLYlbEwx1Fbdi7IMeUH0"
+
+# Install MySQL
+
+apt-get install -y mysql-community-server
+apt-get install -y mysql-server
+
+# Configure Password Expiration
+
+echo "default_password_lifetime = 0" >> /etc/mysql/mysql.conf.d/mysqld.cnf
+
+# Set Character Set
+
+echo "" >> /etc/mysql/my.cnf
+echo "[mysqld]" >> /etc/mysql/my.cnf
+echo "default_authentication_plugin=mysql_native_password" >> /etc/mysql/my.cnf
+echo "skip-log-bin" >> /etc/mysql/my.cnf
+
+# Configure Max Connections
+
+RAM=$(awk '/^MemTotal:/{printf "%3.0f", $2 / (1024 * 1024)}' /proc/meminfo)
+MAX_CONNECTIONS=$(( 70 * $RAM ))
+REAL_MAX_CONNECTIONS=$(( MAX_CONNECTIONS>70 ? MAX_CONNECTIONS : 100 ))
+sed -i "s/^max_connections.*=.*/max_connections=${REAL_MAX_CONNECTIONS}/" /etc/mysql/my.cnf
+
+# Configure Access Permissions For Root & Forge Users
+
+if grep -q "bind-address" /etc/mysql/mysql.conf.d/mysqld.cnf; then
+  sed -i '/^bind-address/s/bind-address.*=.*/bind-address = */' /etc/mysql/mysql.conf.d/mysqld.cnf
+else
+  echo "bind-address = *" >> /etc/mysql/mysql.conf.d/mysqld.cnf
+fi
+
+export MYSQL_TEST_LOGIN_FILE="$(mktemp --suffix .mylogin.cnf)"
+
+cat > "$MYSQL_TEST_LOGIN_FILE" <<EOF
+[client]
+user=root
+password=kLYlbEwx1Fbdi7IMeUH0
+EOF
+
+chmod 600 "$MYSQL_TEST_LOGIN_FILE"
+
+mysql -e "CREATE USER 'root'@'164.90.158.39' IDENTIFIED BY 'kLYlbEwx1Fbdi7IMeUH0';"
+mysql -e "CREATE USER 'root'@'%' IDENTIFIED BY 'kLYlbEwx1Fbdi7IMeUH0';"
+mysql -e "GRANT ALL PRIVILEGES ON *.* TO root@'164.90.158.39' WITH GRANT OPTION;"
+mysql -e "GRANT ALL PRIVILEGES ON *.* TO root@'%' WITH GRANT OPTION;"
+service mysql restart
+
+mysql -e "CREATE USER 'forge'@'164.90.158.39' IDENTIFIED BY 'kLYlbEwx1Fbdi7IMeUH0';"
+mysql -e "CREATE USER 'forge'@'%' IDENTIFIED BY 'kLYlbEwx1Fbdi7IMeUH0';"
+mysql -e "GRANT ALL PRIVILEGES ON *.* TO 'forge'@'164.90.158.39' WITH GRANT OPTION;"
+mysql -e "GRANT ALL PRIVILEGES ON *.* TO 'forge'@'%' WITH GRANT OPTION;"
+mysql -e "FLUSH PRIVILEGES;"
+
+# Create The Initial Database If Specified
+
+mysql -e "CREATE DATABASE forge CHARACTER SET utf8 COLLATE utf8_unicode_ci;"
+
+rm -f "$MYSQL_TEST_LOGIN_FILE"
+unset MYSQL_TEST_LOGIN_FILE
+
+if [[ $(grep --count "maxsize" /etc/logrotate.d/mysql-server) == 0 ]]; then
+    sed -i -r "s/^(\s*)(daily|weekly|monthly|yearly)$/\1\2\n\1maxsize 100M/" /etc/logrotate.d/mysql-server
+else
+    sed -i -r "s/^(\s*)maxsize.*$/\1maxsize 100M/" /etc/logrotate.d/mysql-server
+fi
+    fi
+
+    provisionPing 1003547 7
+    # Install & Configure Redis Server
+
+apt-get install -y redis-server
+sed -i 's/bind 127.0.0.1/bind 0.0.0.0/' /etc/redis/redis.conf
+service redis-server restart
+systemctl enable redis-server
+
+yes '' | pecl install -f redis
+
+# Ensure PHPRedis extension is available
+if pecl list | grep redis >/dev/null 2>&1;
+then
+echo "Configuring PHPRedis"
+fi
+
+if [[ $(grep --count "maxsize" /etc/logrotate.d/redis-server) == 0 ]]; then
+    sed -i -r "s/^(\s*)(daily|weekly|monthly|yearly)$/\1\2\n\1maxsize 100M/" /etc/logrotate.d/redis-server
+else
+    sed -i -r "s/^(\s*)maxsize.*$/\1maxsize 100M/" /etc/logrotate.d/redis-server
+fi
+
+    provisionPing 1003547 8
+    # Install & Configure Memcached
+
+apt-get install -y memcached
+sed -i 's/-l 127.0.0.1/-l 0.0.0.0/' /etc/memcached.conf
+service memcached restart
+
+
+provisionPing 1003547 10
+
+    # Configure Supervisor Autostart
+
+systemctl enable supervisor.service
+service supervisor start
+    apt-get install -y --force-yes unattended-upgrades
+
+cat > /etc/apt/apt.conf.d/50unattended-upgrades << 'EOF'
+Unattended-Upgrade::Allowed-Origins {
+    "${distro_id}:${distro_codename}-security";
+};
+Unattended-Upgrade::Package-Blacklist {
+    //
+};
+EOF
+
+cat > /etc/apt/apt.conf.d/10periodic << EOF
+APT::Periodic::Update-Package-Lists "1";
+APT::Periodic::Download-Upgradeable-Packages "1";
+APT::Periodic::AutocleanInterval "7";
+APT::Periodic::Unattended-Upgrade "1";
+EOF
+
+# Disable protected_regular
+
+sudo sed -i "s/fs.protected_regular = .*/fs.protected_regular = 0/" /usr/lib/sysctl.d/99-protect-links.conf
+
+sysctl --system
+# Configure Additional Log Rotation
+
+if [[ $(grep --count "maxsize" /etc/logrotate.d/fail2ban) == 0 ]]; then
+    sed -i -r "s/^(\s*)(daily|weekly|monthly|yearly)$/\1\2\n\1maxsize 100M/" /etc/logrotate.d/fail2ban
+else
+    sed -i -r "s/^(\s*)maxsize.*$/\1maxsize 100M/" /etc/logrotate.d/fail2ban
+fi
+if [[ $(grep --count "maxsize" /etc/logrotate.d/rsyslog) == 0 ]]; then
+    sed -i -r "s/^(\s*)(daily|weekly|monthly|yearly)$/\1\2\n\1maxsize 100M/" /etc/logrotate.d/rsyslog
+else
+    sed -i -r "s/^(\s*)maxsize.*$/\1maxsize 100M/" /etc/logrotate.d/rsyslog
+fi
+if [[ $(grep --count "maxsize" /etc/logrotate.d/ufw) == 0 ]]; then
+    sed -i -r "s/^(\s*)(daily|weekly|monthly|yearly)$/\1\2\n\1maxsize 100M/" /etc/logrotate.d/ufw
+else
+    sed -i -r "s/^(\s*)maxsize.*$/\1maxsize 100M/" /etc/logrotate.d/ufw
+fi
+
+cat > /etc/systemd/system/timers.target.wants/logrotate.timer << EOF
+[Unit]
+Description=Rotation of log files
+Documentation=man:logrotate(8) man:logrotate.conf(5)
+
+[Timer]
+OnCalendar=*:0/1
+
+[Install]
+WantedBy=timers.target
+EOF
+
+systemctl daemon-reload
+systemctl restart logrotate.timer
+
+# Fix incorrect logrotate default configuration
+sed -i -r "s/^create 0640 www-data adm/create 0640 forge adm/" /etc/logrotate.d/nginx
+
+curl --insecure --data "event_id=150840661&server_id=1003547&recipe_id=" https://forge.laravel.com/provisioning/callback/app
+
+touch /root/.forge-provisioned