From 60ee082f13de59080dd263c76ba048b83483eb01 Mon Sep 17 00:00:00 2001
From: Arpit Bhayani <arpit.b.bhayani@gmail.com>
Date: Tue, 10 Dec 2024 17:44:34 +0530
Subject: [PATCH] Setup script

---
 README.md |  8 +++++-
 setup.sh  | 80 +++++++++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 87 insertions(+), 1 deletion(-)
 create mode 100644 setup.sh

diff --git a/README.md b/README.md
index 8ab9489..8a81bcb 100644
--- a/README.md
+++ b/README.md
@@ -70,4 +70,10 @@ Open your browser and go to:
 ```bash
 http://localhost:8080/health
 ```
-This endpoint should return a status indicating that the server is up and running.
\ No newline at end of file
+This endpoint should return a status indicating that the server is up and running.
+
+## Setting up Production Instance
+
+```
+bash setup.sh
+```
diff --git a/setup.sh b/setup.sh
new file mode 100644
index 0000000..cbef7d3
--- /dev/null
+++ b/setup.sh
@@ -0,0 +1,80 @@
+#!/bin/bash
+
+# Nginx and SSL Setup Script for dicedb.io
+# Usage: sudo bash setup_nginx_ssl.sh <your-email>
+
+# Check if script is run with sudo
+if [[ $EUID -ne 0 ]]; then
+   echo "This script must be run with sudo or as root" 
+   exit 1
+fi
+
+# Email for Let's Encrypt registration
+LETSENCRYPT_EMAIL=arpit@dicedb.io
+
+# Update system packages
+echo "Updating system packages..."
+apt update && apt upgrade -y
+
+# Install required packages
+echo "Installing Nginx and Certbot..."
+apt install -y nginx certbot python3-certbot-nginx
+
+# Create Nginx configuration file
+echo "Creating Nginx configuration..."
+cat > /etc/nginx/sites-available/dicedb <<EOL
+server {
+    listen 80;
+    server_name *.dicedb.io dicedb.io;
+
+    location / {
+        proxy_pass http://localhost:8080;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade \$http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host \$host;
+        proxy_cache_bypass \$http_upgrade;
+        proxy_set_header X-Real-IP \$remote_addr;
+        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto \$scheme;
+    }
+}
+EOL
+
+# Enable the site configuration
+echo "Enabling Nginx site configuration..."
+ln -sf /etc/nginx/sites-available/dicedb /etc/nginx/sites-enabled/
+
+# Test Nginx configuration
+echo "Testing Nginx configuration..."
+nginx -t
+
+# Restart Nginx to apply changes
+echo "Restarting Nginx..."
+systemctl restart nginx
+
+# Obtain SSL certificate
+echo "Obtaining SSL certificate..."
+certbot --nginx -d dicedb.io -d '*.dicedb.io' --email "$LETSENCRYPT_EMAIL" --agree-tos --no-ew
+
+# Enable automatic renewal
+echo "Setting up automatic SSL certificate renewal..."
+systemctl enable certbot.timer
+systemctl start certbot.timer
+
+# Configure UFW firewall
+echo "Configuring UFW firewall..."
+ufw allow 'Nginx Full'
+
+# Verify SSL renewal
+echo "Performing dry run of SSL certificate renewal..."
+certbot renew --dry-run
+
+# Final status checks
+echo "Checking Nginx status..."
+systemctl status nginx
+
+echo "Setup complete!"
+echo "Don't forget to:"
+echo "1. Ensure your DNS is correctly configured for *.dicedb.io"
+echo "2. Verify SSL configuration at https://www.ssllabs.com/ssltest/"