nginx-apache-site 1.0.0

package/.github/workflows/ci.yml

@@ -0,0 +1,32 @@
+name: CI
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Shell syntax check
+        run: bash -n script/create-web-site.sh script/create-apache-site.sh script/create-nginx-site.sh tests/test-cli.sh tests/linux-smoke.sh
+
+      - name: Unit tests
+        run: npm test
+
+      - name: Linux smoke tests
+        run: npm run test:linux

package/README.md

@@ -0,0 +1,74 @@
+# nginx-apache-site
+`nginx-apache-site` is a merged replacement for `create-apache-site` and
+`create-nginx-site`.
+
+It creates:
+- Website directory and starter static files in `/var/www/<domain>/public_html`
+- Apache or Nginx virtual host config
+- Optional Certbot SSL certificate
+
+The package also ships compatibility wrappers:
+- `create-apache-site`
+- `create-nginx-site`
+
+## Install
+```bash
+npm install -g nginx-apache-site
+```
+
+## Usage
+Unified command:
+```bash
+nginx-apache-site --domain example.com --server nginx
+nginx-apache-site --domain example.com --server apache
+nginx-apache-site --domain example.com --server auto
+nginx-apache-site --domain example.com
+```
+
+If `--server` is omitted, the CLI prompts on interactive terminals with default
+`auto`. In non-interactive runs, it defaults to `auto` directly.
+
+Compatibility wrappers:
+```bash
+create-apache-site --domain example.com
+create-nginx-site --domain example.com
+```
+
+### SSL options
+- `--ssl` always run Certbot
+- `--no-ssl` skip Certbot
+- no SSL flag: interactive prompt when running in a terminal
+
+Extra Certbot controls:
+- `--certbot-email admin@example.com`
+- `--certbot-staging`
+- `--yes` auto-confirm SSL prompt
+
+## Common examples
+```bash
+# Nginx with SSL and Certbot email
+nginx-apache-site -d example.com -s nginx --ssl --certbot-email admin@example.com
+
+# Apache without SSL
+nginx-apache-site -d example.com -s apache --no-ssl
+
+# Preview actions only
+nginx-apache-site -d example.com -s nginx --ssl --dry-run
+```
+
+## Requirements
+- Ubuntu/Debian-style Apache or Nginx layout
+- Root privileges (`sudo`) for non-dry-run mode
+- Certbot plugin for your server type if using SSL
+
+## Development tests
+```bash
+npm test
+npm run test:linux
+```
+
+`npm test` runs local shell tests with mocked system commands, so it does not
+modify your host web server setup.
+
+`npm run test:linux` adds Linux-specific smoke checks. CI runs both test suites
+on `ubuntu-latest` for every push and pull request.

package/assets/server/apache.template.conf

@@ -0,0 +1,14 @@
+<VirtualHost *:80>
+    ServerName {{DOMAIN_NAME}}
+    ServerAlias www.{{DOMAIN_NAME}}
+
+    DocumentRoot {{WEB_ROOT}}/{{DOMAIN_NAME}}/public_html
+    <Directory {{WEB_ROOT}}/{{DOMAIN_NAME}}/public_html>
+        Options Indexes FollowSymLinks
+        AllowOverride All
+        Require all granted
+    </Directory>
+
+    ErrorLog ${APACHE_LOG_DIR}/{{DOMAIN_NAME}}-error.log
+    CustomLog ${APACHE_LOG_DIR}/{{DOMAIN_NAME}}-access.log combined
+</VirtualHost>

package/assets/server/nginx.template.conf

@@ -0,0 +1,12 @@
+server {
+    listen 80;
+    listen [::]:80;
+    server_name {{DOMAIN_NAME}} www.{{DOMAIN_NAME}};
+
+    root {{WEB_ROOT}}/{{DOMAIN_NAME}}/public_html;
+    index index.html index.htm;
+
+    location / {
+        try_files $uri $uri/ =404;
+    }
+}

package/assets/static/css/styles.css

@@ -0,0 +1,45 @@
+/* reset */
+* {
+    font-family: sans-serif;
+}
+*::selection {
+    background: #f00;
+    color: #fff;
+}
+
+    /* background-color: #3600d9; */
+
+body,
+    h1,
+    p {
+      margin: 0;
+      padding: 0;
+    }
+
+    /* Center align the content */
+    body {
+      display: flex;
+      justify-content: center;
+      align-items: center;
+      height: 100vh;
+      background-color: #f5f5f5;
+      font-family: Arial, sans-serif;
+    }
+
+    /* Style for the title */
+    h1 {
+      font-size: 36px;
+      font-weight: bold;
+      text-align: center;
+      margin-bottom: 20px;
+    }
+
+    /* Style for the subtitle */
+    p {
+      font-size: 18px;
+      text-align: center;
+    }
+    
+    strong {
+        color: #ff0f33;
+    }

package/assets/static/img/site.webmanifest

@@ -0,0 +1 @@
+{"name":"","short_name":"","icons":[{"src":"/android-chrome-192x192.png","sizes":"192x192","type":"image/png"},{"src":"/android-chrome-512x512.png","sizes":"512x512","type":"image/png"}],"theme_color":"#ffffff","background_color":"#ffffff","display":"standalone"}

package/assets/static/index.html

@@ -0,0 +1,33 @@
+<!DOCTYPE html>
+<html lang="en">
+
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    
+    <!-- title -->
+    <title>HI | {{DOMAIN_NAME}}</title>
+    
+    <!-- CSS -->
+    <link rel="stylesheet" href="./css/styles.css">
+    
+    <!-- base SEO -->
+    <meta name="description" content="">
+    <meta name="keywords" content="">
+
+    <!-- favicon -->
+    <link rel="apple-touch-icon" sizes="180x180" href="./img/apple-touch-icon.png">
+    <link rel="icon" type="image/png" sizes="32x32" href="./img/favicon-32x32.png">
+    <link rel="icon" type="image/png" sizes="16x16" href="./img/favicon-16x16.png">
+    <link rel="manifest" href="./img/site.webmanifest">
+
+</head>
+
+<body>
+    <div id="container">
+        <h1>Welcome to <strong>{{DOMAIN_NAME}}</strong></h1>
+        <p>Thank you for visiting our website. Please check back later for more information.</p>
+    </div>
+</body>
+
+</html>

package/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "nginx-apache-site",
+  "version": "1.0.0",
+  "description": "Create Apache or Nginx website configs and optional Certbot SSL certificates on Ubuntu.",
+  "bin": {
+    "nginx-apache-site": "script/create-web-site.sh",
+    "create-apache-site": "script/create-apache-site.sh",
+    "create-nginx-site": "script/create-nginx-site.sh"
+  },
+  "scripts": {
+    "test": "bash tests/test-cli.sh",
+    "test:linux": "bash tests/linux-smoke.sh"
+  },
+  "keywords": [
+    "apache",
+    "nginx",
+    "certbot",
+    "ssl",
+    "ubuntu",
+    "website",
+    "virtual-host",
+    "server-config"
+  ],
+  "author": "ai-armageddon",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ai-armageddon/create-web-site.git"
+  },
+  "homepage": "https://github.com/ai-armageddon/create-web-site"
+}

package/script/create-apache-site.sh

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+exec "${script_dir}/create-web-site.sh" --server apache "$@"

package/script/create-nginx-site.sh

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+exec "${script_dir}/create-web-site.sh" --server nginx "$@"

package/script/create-web-site.sh

@@ -0,0 +1,439 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+readonly SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+readonly PROJECT_DIR="$(cd "${SCRIPT_DIR}/.." && pwd)"
+readonly STATIC_DIR="${PROJECT_DIR}/assets/static"
+readonly SERVER_TEMPLATE_DIR="${PROJECT_DIR}/assets/server"
+
+WEB_ROOT="${WEB_SITE_ROOT:-/var/www}"
+APACHE_AVAILABLE_DIR="${WEB_SITE_APACHE_AVAILABLE_DIR:-/etc/apache2/sites-available}"
+NGINX_AVAILABLE_DIR="${WEB_SITE_NGINX_AVAILABLE_DIR:-/etc/nginx/sites-available}"
+NGINX_ENABLED_DIR="${WEB_SITE_NGINX_ENABLED_DIR:-/etc/nginx/sites-enabled}"
+SYSTEMCTL_BIN="${WEB_SITE_SYSTEMCTL_BIN:-systemctl}"
+A2ENSITE_BIN="${WEB_SITE_A2ENSITE_BIN:-a2ensite}"
+CERTBOT_BIN="${WEB_SITE_CERTBOT_BIN:-certbot}"
+
+fail() {
+    printf 'Error: %s\n' "$1" >&2
+    exit 1
+}
+
+print_usage() {
+    cat <<'EOF'
+Usage:
+  nginx-apache-site -d|--domain <domain> [-s|--server <apache|nginx|auto>] [options]
+
+Server shortcuts:
+  create-apache-site -d|--domain <domain> [options]
+  create-nginx-site -d|--domain <domain> [options]
+
+Options:
+  -d, --domain <domain>       Domain name to configure.
+  -s, --server <type>         Web server: apache, nginx, or auto.
+      --auto                  Shortcut for --server auto.
+      --apache                Shortcut for --server apache.
+      --nginx                 Shortcut for --server nginx.
+      --ssl                   Always request a Certbot certificate.
+      --no-ssl                Skip Certbot certificate request.
+      --certbot-email <email> Email address for Certbot.
+      --certbot-staging       Use Certbot staging endpoint.
+      --yes                   Auto-confirm SSL prompt when applicable.
+      --dry-run               Print planned actions without making changes.
+  -h, --help                  Show this message.
+EOF
+}
+
+is_command_available() {
+    command -v "$1" >/dev/null 2>&1
+}
+
+escape_for_sed_replacement() {
+    printf '%s' "$1" | sed -e 's/[\/&#\\]/\\&/g'
+}
+
+run_cmd() {
+    if [[ "${dry_run}" == "true" ]]; then
+        printf '[dry-run] %q' "$1"
+        shift
+        for arg in "$@"; do
+            printf ' %q' "${arg}"
+        done
+        printf '\n'
+        return 0
+    fi
+
+    "$@"
+}
+
+replace_placeholders_in_file() {
+    local file_path="$1"
+    local escaped_domain
+    local escaped_web_root
+
+    escaped_domain="$(escape_for_sed_replacement "${domain_name}")"
+    escaped_web_root="$(escape_for_sed_replacement "${WEB_ROOT}")"
+
+    if [[ "${dry_run}" == "true" ]]; then
+        printf '[dry-run] render template %s\n' "${file_path}"
+        return 0
+    fi
+
+    sed -i.bak \
+        -e "s/{{DOMAIN_NAME}}/${escaped_domain}/g" \
+        -e "s/{{WEB_ROOT}}/${escaped_web_root}/g" \
+        "${file_path}"
+    rm -f "${file_path}.bak"
+}
+
+validate_domain() {
+    [[ "${domain_name}" =~ ^[A-Za-z0-9][A-Za-z0-9.-]*[A-Za-z0-9]$ ]] \
+        || fail "Invalid domain '${domain_name}'."
+
+    [[ "${domain_name}" == *.* ]] \
+        || fail "Domain '${domain_name}' must include at least one dot."
+}
+
+validate_requested_server_type() {
+    case "${server_type}" in
+        ""|auto|apache|nginx) ;;
+        *)
+            fail "Unsupported server '${server_type}'. Use apache, nginx, or auto."
+            ;;
+    esac
+}
+
+validate_server_type() {
+    case "${server_type}" in
+        apache|nginx) ;;
+        *)
+            fail "Unsupported server '${server_type}'. Use apache or nginx."
+            ;;
+    esac
+}
+
+prompt_for_server_type_if_needed() {
+    local selection
+
+    if [[ -n "${server_type}" ]]; then
+        return
+    fi
+
+    if [[ -t 0 ]]; then
+        read -r -p "Web server [auto/apache/nginx] (default: auto): " selection || true
+        selection="${selection,,}"
+        server_type="${selection:-auto}"
+    else
+        server_type="auto"
+    fi
+
+    validate_requested_server_type
+}
+
+resolve_auto_server_type() {
+    local apache_score=0
+    local nginx_score=0
+
+    if [[ "${server_type}" != "auto" ]]; then
+        return
+    fi
+
+    if [[ -d "${APACHE_AVAILABLE_DIR}" ]]; then
+        apache_score=$((apache_score + 2))
+    fi
+    if is_command_available "${A2ENSITE_BIN}"; then
+        apache_score=$((apache_score + 2))
+    fi
+    if [[ -d "/etc/apache2" ]]; then
+        apache_score=$((apache_score + 1))
+    fi
+
+    if [[ -d "${NGINX_AVAILABLE_DIR}" ]]; then
+        nginx_score=$((nginx_score + 2))
+    fi
+    if [[ -d "${NGINX_ENABLED_DIR}" ]]; then
+        nginx_score=$((nginx_score + 1))
+    fi
+    if is_command_available nginx; then
+        nginx_score=$((nginx_score + 1))
+    fi
+    if [[ -d "/etc/nginx" ]]; then
+        nginx_score=$((nginx_score + 1))
+    fi
+
+    if [[ "${nginx_score}" -eq 0 ]] && [[ "${apache_score}" -eq 0 ]]; then
+        fail "Auto-detection could not find Apache or Nginx. Use --server apache or --server nginx."
+    fi
+
+    if [[ "${nginx_score}" -ge "${apache_score}" ]]; then
+        server_type="nginx"
+    else
+        server_type="apache"
+    fi
+
+    printf 'Auto-selected server: %s\n' "${server_type}"
+}
+
+warn_if_not_root() {
+    if [[ "${dry_run}" == "false" ]] && [[ "${EUID}" -ne 0 ]]; then
+        printf 'Warning: running without root; writes may fail for system paths.\n' >&2
+    fi
+}
+
+ask_yes_no() {
+    local question="$1"
+    local response
+    read -r -p "${question} [y/N]: " response || true
+    [[ "${response}" =~ ^[Yy]([Ee][Ss])?$ ]]
+}
+
+decide_ssl_mode() {
+    case "${ssl_mode}" in
+        yes)
+            should_run_ssl="true"
+            ;;
+        no)
+            should_run_ssl="false"
+            ;;
+        ask)
+            if [[ "${assume_yes}" == "true" ]]; then
+                should_run_ssl="true"
+            elif [[ -t 0 ]]; then
+                if ask_yes_no "Request SSL certificate from Certbot now?"; then
+                    should_run_ssl="true"
+                else
+                    should_run_ssl="false"
+                fi
+            else
+                should_run_ssl="false"
+            fi
+            ;;
+        *)
+            fail "Unexpected SSL mode '${ssl_mode}'."
+            ;;
+    esac
+}
+
+resolve_certbot_identity() {
+    if [[ "${should_run_ssl}" != "true" ]]; then
+        return
+    fi
+
+    if [[ -z "${certbot_email}" ]] && [[ -t 0 ]] && [[ "${assume_yes}" != "true" ]]; then
+        read -r -p "Certbot email (leave blank to skip): " certbot_email || true
+    fi
+}
+
+check_required_commands() {
+    local needed=("cp" "mkdir" "sed")
+    if [[ "${server_type}" == "apache" ]]; then
+        needed+=("${A2ENSITE_BIN}" "${SYSTEMCTL_BIN}")
+    else
+        needed+=("ln" "${SYSTEMCTL_BIN}")
+    fi
+
+    if [[ "${should_run_ssl}" == "true" ]]; then
+        needed+=("${CERTBOT_BIN}")
+    fi
+
+    local cmd
+    for cmd in "${needed[@]}"; do
+        if ! is_command_available "${cmd}"; then
+            fail "Missing required command: ${cmd}"
+        fi
+    done
+}
+
+create_site_directory() {
+    local site_path="${WEB_ROOT}/${domain_name}/public_html"
+    run_cmd mkdir -p "${site_path}"
+    run_cmd cp -R "${STATIC_DIR}/." "${site_path}/"
+    replace_placeholders_in_file "${site_path}/index.html"
+    printf 'Created site files in %s\n' "${site_path}"
+}
+
+create_server_config() {
+    local template_path
+    local config_path
+
+    if [[ "${server_type}" == "apache" ]]; then
+        template_path="${SERVER_TEMPLATE_DIR}/apache.template.conf"
+        config_path="${APACHE_AVAILABLE_DIR}/${domain_name}.conf"
+        run_cmd mkdir -p "${APACHE_AVAILABLE_DIR}"
+    else
+        template_path="${SERVER_TEMPLATE_DIR}/nginx.template.conf"
+        config_path="${NGINX_AVAILABLE_DIR}/${domain_name}.conf"
+        run_cmd mkdir -p "${NGINX_AVAILABLE_DIR}"
+    fi
+
+    [[ -f "${template_path}" ]] || fail "Missing template file: ${template_path}"
+
+    run_cmd cp "${template_path}" "${config_path}"
+    replace_placeholders_in_file "${config_path}"
+    printf 'Created %s config: %s\n' "${server_type}" "${config_path}"
+}
+
+enable_apache_site() {
+    run_cmd "${A2ENSITE_BIN}" "${domain_name}.conf"
+    run_cmd "${SYSTEMCTL_BIN}" reload apache2
+    run_cmd "${SYSTEMCTL_BIN}" restart apache2
+    printf 'Enabled Apache site %s\n' "${domain_name}"
+}
+
+enable_nginx_site() {
+    local config_path="${NGINX_AVAILABLE_DIR}/${domain_name}.conf"
+    local symlink_path="${NGINX_ENABLED_DIR}/${domain_name}.conf"
+
+    run_cmd mkdir -p "${NGINX_ENABLED_DIR}"
+
+    if [[ -e "${symlink_path}" ]] || [[ -L "${symlink_path}" ]]; then
+        printf 'Nginx symlink already exists: %s\n' "${symlink_path}"
+    else
+        run_cmd ln -s "${config_path}" "${symlink_path}"
+        printf 'Created Nginx symlink: %s\n' "${symlink_path}"
+    fi
+
+    run_cmd "${SYSTEMCTL_BIN}" reload nginx
+    run_cmd "${SYSTEMCTL_BIN}" restart nginx
+    printf 'Enabled Nginx site %s\n' "${domain_name}"
+}
+
+run_certbot() {
+    local certbot_args=(
+        "--${server_type}"
+        "-d" "${domain_name}"
+        "-d" "www.${domain_name}"
+        "--redirect"
+        "--non-interactive"
+        "--agree-tos"
+    )
+
+    if [[ -n "${certbot_email}" ]]; then
+        certbot_args+=("--email" "${certbot_email}")
+    else
+        certbot_args+=("--register-unsafely-without-email")
+    fi
+
+    if [[ "${certbot_staging}" == "true" ]]; then
+        certbot_args+=("--staging")
+    fi
+
+    run_cmd "${CERTBOT_BIN}" "${certbot_args[@]}"
+    printf 'Requested SSL certificate via Certbot for %s\n' "${domain_name}"
+}
+
+domain_name=""
+server_type=""
+ssl_mode="ask"
+should_run_ssl="false"
+certbot_email=""
+certbot_staging="false"
+assume_yes="false"
+dry_run="false"
+
+case "$(basename "$0")" in
+    create-apache-site|create-apache-site.sh)
+        server_type="apache"
+        ;;
+    create-nginx-site|create-nginx-site.sh)
+        server_type="nginx"
+        ;;
+esac
+
+while [[ $# -gt 0 ]]; do
+    case "$1" in
+        -d|--domain)
+            [[ $# -ge 2 ]] || fail "Missing value for $1"
+            domain_name="$2"
+            shift 2
+            ;;
+        -s|--server)
+            [[ $# -ge 2 ]] || fail "Missing value for $1"
+            server_type="$2"
+            shift 2
+            ;;
+        --auto)
+            server_type="auto"
+            shift
+            ;;
+        --apache)
+            server_type="apache"
+            shift
+            ;;
+        --nginx)
+            server_type="nginx"
+            shift
+            ;;
+        --ssl)
+            ssl_mode="yes"
+            shift
+            ;;
+        --no-ssl)
+            ssl_mode="no"
+            shift
+            ;;
+        --certbot-email)
+            [[ $# -ge 2 ]] || fail "Missing value for $1"
+            certbot_email="$2"
+            shift 2
+            ;;
+        --certbot-staging)
+            certbot_staging="true"
+            shift
+            ;;
+        --yes|-y)
+            assume_yes="true"
+            shift
+            ;;
+        --dry-run)
+            dry_run="true"
+            shift
+            ;;
+        -h|--help)
+            print_usage
+            exit 0
+            ;;
+        *)
+            fail "Invalid option: $1"
+            ;;
+    esac
+done
+
+[[ -n "${domain_name}" ]] || fail "You must provide -d|--domain."
+
+server_type="${server_type,,}"
+
+validate_domain
+validate_requested_server_type
+prompt_for_server_type_if_needed
+resolve_auto_server_type
+validate_server_type
+decide_ssl_mode
+resolve_certbot_identity
+check_required_commands
+warn_if_not_root
+
+printf 'Domain: %s\n' "${domain_name}"
+printf 'Server: %s\n' "${server_type}"
+printf 'SSL: %s\n' "${should_run_ssl}"
+if [[ -n "${certbot_email}" ]]; then
+    printf 'Certbot email: %s\n' "${certbot_email}"
+fi
+if [[ "${dry_run}" == "true" ]]; then
+    printf 'Dry run mode enabled.\n'
+fi
+
+create_site_directory
+create_server_config
+
+if [[ "${server_type}" == "apache" ]]; then
+    enable_apache_site
+else
+    enable_nginx_site
+fi
+
+if [[ "${should_run_ssl}" == "true" ]]; then
+    run_certbot
+fi
+
+printf 'Setup complete for %s (%s)\n' "${domain_name}" "${server_type}"

package/tests/linux-smoke.sh

@@ -0,0 +1,87 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+if [[ "$(uname -s)" != "Linux" ]]; then
+    echo "Skipping Linux smoke tests on non-Linux host."
+    exit 0
+fi
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+CLI="${ROOT_DIR}/script/create-web-site.sh"
+
+fail() {
+    echo "FAIL: $*" >&2
+    exit 1
+}
+
+assert_file_exists() {
+    [[ -f "$1" ]] || fail "Expected file to exist: $1"
+}
+
+assert_symlink_exists() {
+    [[ -L "$1" ]] || fail "Expected symlink to exist: $1"
+}
+
+assert_contains() {
+    local file="$1"
+    local pattern="$2"
+    grep -F "$pattern" "$file" >/dev/null || fail "Expected '$pattern' in $file"
+}
+
+create_mock_bin() {
+    local dir="$1"
+
+    cat >"${dir}/systemctl" <<'EOF'
+#!/usr/bin/env bash
+echo "systemctl $*" >> "${MOCK_LOG}"
+EOF
+
+    cat >"${dir}/a2ensite" <<'EOF'
+#!/usr/bin/env bash
+echo "a2ensite $*" >> "${MOCK_LOG}"
+EOF
+
+    cat >"${dir}/certbot" <<'EOF'
+#!/usr/bin/env bash
+echo "certbot $*" >> "${MOCK_LOG}"
+EOF
+
+    chmod +x "${dir}/systemctl" "${dir}/a2ensite" "${dir}/certbot"
+}
+
+main() {
+    chmod +x "${CLI}"
+
+    SANDBOX="$(mktemp -d)"
+    trap 'rm -rf "${SANDBOX}"' EXIT
+
+    local mock_bin="${SANDBOX}/mock-bin"
+    mkdir -p "${mock_bin}"
+    create_mock_bin "${mock_bin}"
+
+    export PATH="${mock_bin}:${PATH}"
+    export MOCK_LOG="${SANDBOX}/mock.log"
+    : > "${MOCK_LOG}"
+
+    export WEB_SITE_ROOT="${SANDBOX}/www"
+    export WEB_SITE_APACHE_AVAILABLE_DIR="${SANDBOX}/apache/sites-available"
+    export WEB_SITE_NGINX_AVAILABLE_DIR="${SANDBOX}/nginx/sites-available"
+    export WEB_SITE_NGINX_ENABLED_DIR="${SANDBOX}/nginx/sites-enabled"
+    export WEB_SITE_SYSTEMCTL_BIN="systemctl"
+    export WEB_SITE_A2ENSITE_BIN="a2ensite"
+    export WEB_SITE_CERTBOT_BIN="certbot"
+
+    bash "${CLI}" --server apache --domain linux-apache.test --ssl --certbot-email ops@linux-apache.test
+    bash "${CLI}" --server nginx --domain linux-nginx.test --no-ssl
+
+    assert_file_exists "${WEB_SITE_APACHE_AVAILABLE_DIR}/linux-apache.test.conf"
+    assert_file_exists "${WEB_SITE_NGINX_AVAILABLE_DIR}/linux-nginx.test.conf"
+    assert_symlink_exists "${WEB_SITE_NGINX_ENABLED_DIR}/linux-nginx.test.conf"
+    assert_contains "${MOCK_LOG}" "certbot --apache -d linux-apache.test -d www.linux-apache.test --redirect --non-interactive --agree-tos --email ops@linux-apache.test"
+    assert_contains "${MOCK_LOG}" "systemctl restart apache2"
+    assert_contains "${MOCK_LOG}" "systemctl restart nginx"
+
+    echo "Linux smoke tests passed."
+}
+
+main "$@"

package/tests/test-cli.sh

@@ -0,0 +1,142 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+CLI="${ROOT_DIR}/script/create-web-site.sh"
+APACHE_WRAPPER="${ROOT_DIR}/script/create-apache-site.sh"
+NGINX_WRAPPER="${ROOT_DIR}/script/create-nginx-site.sh"
+SANDBOX=""
+
+fail() {
+    echo "FAIL: $*" >&2
+    exit 1
+}
+
+assert_file_exists() {
+    [[ -f "$1" ]] || fail "Expected file to exist: $1"
+}
+
+assert_symlink_exists() {
+    [[ -L "$1" ]] || fail "Expected symlink to exist: $1"
+}
+
+assert_contains() {
+    local file="$1"
+    local pattern="$2"
+    grep -F "$pattern" "$file" >/dev/null || fail "Expected '$pattern' in $file"
+}
+
+create_mock_bin() {
+    local dir="$1"
+
+    cat >"${dir}/systemctl" <<'EOF'
+#!/usr/bin/env bash
+echo "systemctl $*" >> "${MOCK_LOG}"
+EOF
+
+    cat >"${dir}/a2ensite" <<'EOF'
+#!/usr/bin/env bash
+echo "a2ensite $*" >> "${MOCK_LOG}"
+EOF
+
+    cat >"${dir}/certbot" <<'EOF'
+#!/usr/bin/env bash
+echo "certbot $*" >> "${MOCK_LOG}"
+EOF
+
+    chmod +x "${dir}/systemctl" "${dir}/a2ensite" "${dir}/certbot"
+}
+
+setup_env() {
+    local sandbox="$1"
+
+    export WEB_SITE_ROOT="${sandbox}/www"
+    export WEB_SITE_APACHE_AVAILABLE_DIR="${sandbox}/apache/sites-available"
+    export WEB_SITE_NGINX_AVAILABLE_DIR="${sandbox}/nginx/sites-available"
+    export WEB_SITE_NGINX_ENABLED_DIR="${sandbox}/nginx/sites-enabled"
+    export WEB_SITE_SYSTEMCTL_BIN="systemctl"
+    export WEB_SITE_A2ENSITE_BIN="a2ensite"
+    export WEB_SITE_CERTBOT_BIN="certbot"
+}
+
+test_apache_no_ssl() {
+    local sandbox="$1"
+    : > "${MOCK_LOG}"
+    setup_env "${sandbox}"
+
+    bash "${CLI}" --server apache --domain example.com --no-ssl
+
+    assert_file_exists "${WEB_SITE_ROOT}/example.com/public_html/index.html"
+    assert_contains "${WEB_SITE_ROOT}/example.com/public_html/index.html" "example.com"
+    assert_file_exists "${WEB_SITE_APACHE_AVAILABLE_DIR}/example.com.conf"
+    assert_contains "${WEB_SITE_APACHE_AVAILABLE_DIR}/example.com.conf" "ServerName example.com"
+    assert_contains "${MOCK_LOG}" "a2ensite example.com.conf"
+    assert_contains "${MOCK_LOG}" "systemctl reload apache2"
+    assert_contains "${MOCK_LOG}" "systemctl restart apache2"
+}
+
+test_nginx_with_ssl() {
+    local sandbox="$1"
+    : > "${MOCK_LOG}"
+    setup_env "${sandbox}"
+
+    bash "${CLI}" --server nginx --domain example.net --ssl --certbot-email admin@example.net
+
+    assert_file_exists "${WEB_SITE_NGINX_AVAILABLE_DIR}/example.net.conf"
+    assert_contains "${WEB_SITE_NGINX_AVAILABLE_DIR}/example.net.conf" "server_name example.net www.example.net;"
+    assert_symlink_exists "${WEB_SITE_NGINX_ENABLED_DIR}/example.net.conf"
+    assert_contains "${MOCK_LOG}" "systemctl reload nginx"
+    assert_contains "${MOCK_LOG}" "systemctl restart nginx"
+    assert_contains "${MOCK_LOG}" "certbot --nginx -d example.net -d www.example.net --redirect --non-interactive --agree-tos --email admin@example.net"
+}
+
+test_wrappers() {
+    local sandbox="$1"
+    : > "${MOCK_LOG}"
+    setup_env "${sandbox}"
+
+    bash "${APACHE_WRAPPER}" --domain wrapped-apache.com --no-ssl
+    bash "${NGINX_WRAPPER}" --domain wrapped-nginx.com --no-ssl
+
+    assert_file_exists "${WEB_SITE_APACHE_AVAILABLE_DIR}/wrapped-apache.com.conf"
+    assert_file_exists "${WEB_SITE_NGINX_AVAILABLE_DIR}/wrapped-nginx.com.conf"
+}
+
+test_auto_server_mode() {
+    local sandbox="$1"
+    : > "${MOCK_LOG}"
+    setup_env "${sandbox}"
+
+    mkdir -p "${WEB_SITE_NGINX_AVAILABLE_DIR}" "${WEB_SITE_NGINX_ENABLED_DIR}"
+    export WEB_SITE_A2ENSITE_BIN="missing-a2ensite"
+
+    bash "${CLI}" --server auto --domain auto-mode.com --no-ssl
+    bash "${CLI}" --domain auto-default.com --no-ssl
+
+    assert_file_exists "${WEB_SITE_NGINX_AVAILABLE_DIR}/auto-mode.com.conf"
+    assert_file_exists "${WEB_SITE_NGINX_AVAILABLE_DIR}/auto-default.com.conf"
+    assert_contains "${MOCK_LOG}" "systemctl reload nginx"
+}
+
+main() {
+    chmod +x "${CLI}" "${APACHE_WRAPPER}" "${NGINX_WRAPPER}"
+
+    SANDBOX="$(mktemp -d)"
+    trap 'rm -rf "${SANDBOX}"' EXIT
+
+    local mock_bin="${SANDBOX}/mock-bin"
+    mkdir -p "${mock_bin}"
+    create_mock_bin "${mock_bin}"
+    export MOCK_LOG="${SANDBOX}/mock.log"
+    touch "${MOCK_LOG}"
+    export PATH="${mock_bin}:${PATH}"
+
+    test_apache_no_ssl "${SANDBOX}"
+    test_nginx_with_ssl "${SANDBOX}"
+    test_wrappers "${SANDBOX}"
+    test_auto_server_mode "${SANDBOX}"
+
+    echo "All tests passed."
+}
+
+main "$@"