Otomatisasi Webserver Ubuntu 24 (LEMP): Nginx, PHP-FPM, MariaDB, Certbot — Domain Siap HTTPS

dig +short A example.com
dig +short A www.example.com

#!/usr/bin/env bash
# File: /root/bootstrap-lemp-ubuntu24.sh
# OS    : Ubuntu 24.04 LTS
# Goal  : Automate LEMP + domain + HTTPS (Let's Encrypt) end-to-end

set -euo pipefail

# ---------------- Helpers ----------------
log() { echo -e "[\e[32mINFO\e[0m] $*"; }
warn(){ echo -e "[\e[33mWARN\e[0m] $*"; }
err() { echo -e "[\e[31mERROR\e[0m] $*" 1>&2; }

require_root() {
  if [[ $EUID -ne 0 ]]; then
    err "Jalankan sebagai root. Gunakan: sudo -i"
    exit 1
  fi
}

get_server_ip() {
  local ip4
  ip4="$(curl -4s https://api.ipify.org || true)"
  echo "$ip4"
}

resolve_domain_ip() {
  local d="$1"
  local ip
  ip="$(getent ahostsv4 "$d" | awk '/STREAM/ {print $1; exit}' || true)"
  if [[ -z "$ip" ]]; then
    ip="$(dig +short A "$d" 2>/dev/null | head -n1 || true)"
  fi
  echo "$ip"
}

random_password() {
  tr -dc 'A-Za-z0-9_@#%+=' < /dev/urandom | head -c 24 } # ---------------- Inputs ------------------ DOMAIN="${DOMAIN:-}" ADMIN_EMAIL="${ADMIN_EMAIL:-}" DB_NAME="${DB_NAME:-}" DB_USER="${DB_USER:-}" DB_PASS="${DB_PASS:-}" STAGING="${STAGING:-false}" # true|false # -------------- Pre-flight ---------------- require_root command -v curl >/dev/null 2>&1 || apt-get update -y && apt-get install -y curl

log "Memulai bootstrap LEMP Ubuntu 24..."

if [[ -z "$DOMAIN" ]]; then
  read -rp "Masukkan DOMAIN (contoh: example.com): " DOMAIN
fi
if [[ -z "$ADMIN_EMAIL" ]]; then
  read -rp "Masukkan EMAIL admin untuk Let's Encrypt: " ADMIN_EMAIL
fi

if [[ -n "$DB_NAME" || -n "$DB_USER" || -n "$DB_PASS" ]]; then
  log "Mode DB: pembuatan kredensial untuk ${DB_NAME:-}"
  if [[ -z "${DB_NAME}" ]]; then read -rp "Masukkan DB_NAME: " DB_NAME; fi
  if [[ -z "${DB_USER}" ]]; then read -rp "Masukkan DB_USER: " DB_USER; fi
  if [[ -z "${DB_PASS}" ]]; then
    read -rp "Masukkan DB_PASS (kosongkan untuk acak): " DB_PASS || true
    if [[ -z "${DB_PASS}" ]]; then DB_PASS="$(random_password)"; fi
  fi
fi

SERVER_IP="$(get_server_ip || true)"
if [[ -z "$SERVER_IP" ]]; then
  warn "Gagal mendeteksi IP publik via api.ipify.org. Pastikan koneksi internet tersedia."
else
  log "IP publik server terdeteksi: $SERVER_IP"
fi

DNS_IP_ROOT="$(resolve_domain_ip "$DOMAIN" || true)"
DNS_IP_WWW="$(resolve_domain_ip "www.${DOMAIN}" || true)"

if [[ -z "$DNS_IP_ROOT" || "$DNS_IP_ROOT" != "$SERVER_IP" ]]; then
  warn "A record untuk ${DOMAIN} belum mengarah ke IP server ($SERVER_IP). Deteksi: ${DNS_IP_ROOT:-}"
fi
if [[ -z "$DNS_IP_WWW" || "$DNS_IP_WWW" != "$SERVER_IP" ]]; then
  warn "A record untuk www.${DOMAIN} belum mengarah ke IP server ($SERVER_IP). Deteksi: ${DNS_IP_WWW:-}"
fi

# -------------- System Prep ----------------
log "Update & upgrade paket..."
export DEBIAN_FRONTEND=noninteractive
apt-get update -y
apt-get upgrade -y

log "Instal paket umum..."
apt-get install -y software-properties-common unzip ca-certificates gnupg ufw

log "Set firewall (UFW)..."
ufw allow OpenSSH >/dev/null 2>&1 || true
ufw allow 80/tcp   >/dev/null 2>&1 || true
ufw allow 443/tcp  >/dev/null 2>&1 || true
echo "y" | ufw enable >/dev/null 2>&1 || true

# -------------- Install LEMP ---------------
log "Instal Nginx, PHP-FPM, ekstensi, MariaDB, Certbot..."
apt-get install -y nginx \
  php-fpm php-cli php-mysql php-curl php-xml php-mbstring php-zip php-gd php-intl \
  mariadb-server \
  certbot python3-certbot-nginx

systemctl enable --now nginx
systemctl enable --now mariadb

# PHP-FPM service name and socket autodetect
if systemctl list-units | grep -q 'php8.3-fpm'; then
  systemctl enable --now php8.3-fpm
else
  systemctl enable --now php-fpm || true
fi
PHP_SOCK="$(find /run/php -maxdepth 1 -type s -name 'php*-fpm.sock' | head -n1)"
if [[ -z "$PHP_SOCK" ]]; then
  PHP_SOCK="/run/php/php8.3-fpm.sock"
fi
log "Menggunakan PHP-FPM socket: ${PHP_SOCK}"

# --------- (Optional) Create DB ------------
create_db_user() {
  local dbn="$1" dbu="$2" dbp="$3"
  log "Membuat database & user MariaDB untuk ${DOMAIN}..."
  mysql < "/root/${DOMAIN}-db.txt" < "${WEBROOT}/index.php" <<'PHP'

      Copy