#!/bin/bash # # HOWTOish set up gocd exit 0 echo "deb https://download.gocd.org /" | sudo tee /etc/apt/sources.list.d/gocd.list curl https://download.gocd.org/GOCD-GPG-KEY.asc | sudo apt-key add - sudo apt update sudo apt install go-server sudo systemctl start go-server # Run this on workstation: ssh -N -C -L 8153:localhost:8153 gocd # On workstation, go to: # http://127.0.0.1:8153/ # See: https://docs.gocd.org/current/configuration/dev_authentication.html # Configure to set up admin user (before opening to public) # http://127.0.0.1:8153/go/admin/security/auth_configs # Create a new authorization configuration # Name it "forksand" for Id. # Plugin: Password File Authentication Plugin # Password file path: /etc/go/password.properties # No: touch /etc/go/password.properties chown go:go /etc/go/password.properties # meh, use apache utils for password, but use nginx for proxy apt install apache2-utils # Create password: htpasswd -B /etc/go/password.properties jebba # Then login again with new user created above: # http://127.0.0.1:8153/ # Go here: # http://127.0.0.1:8153/go/admin/users # And enable the new user as an admin # Users must log in once before they can be made admins! # Set up reverse proxy like: # https://docs.gocd.org/current/installation/configure-reverse-proxy.html # Set up nginx apt install nginx # Note, install barfs because it tries to set up IPv6 by default # Edit this file and remove the line after: vim /etc/nginx/sites-available/default listen [::]:80 default_server; # Then run to finish nginx install: apt -f install # Open up firewall ports on main firewall and iptables. # Set up certbot: apt install python3-certbot-nginx certbot \ --authenticator standalone \ --installer nginx \ -d gocd.forksand.com \ --email letsencrypt@forksand.com \ --pre-hook "systemctl stop nginx" \ --post-hook "systemctl start nginx" # Make sure all is good, if so, set up nginx as proxy. # Disks # Check here: # /var/lib/go-server/ # /var/lib/go-server/artifacts