Linode easy setup via StackScript

[shanelord01]

Hi all,

I've cobbled together a StackScript for easy setup on Linode. It is based on Debian 12 and includes Linode domain auto setup via Linode API (assumes the root domain is already running on Linode). A Nanode 1 GB seems to be enough to run this.

Not sure if this link will work (first time writing a StackScript so used ChatGPT to clean it up), otherwise the script is below also: https://cloud.linode.com/stackscripts/1536630

I haven't heavily tested it but it is working for my PDS OK.

Please feel free to iterate and provide updates if required.

Thanks,
Shane.

#!/bin/bash
# Linode StackScript for Bluesky PDS
# Description: Automates the deployment of Bluesky PDS with dynamic DNS configuration and systemd management.

# ================================================================
# Centralized Environment Variables
# ================================================================

# User-Defined Fields (UDFs)
#<UDF name="hostname" label="Hostname" example="Enter the hostname for your Linode (e.g., bluesky)">
#<UDF name="api_key" label="Linode API Key" example="Enter your Linode API token with domain read/write access">
#<UDF name="domain" label="Domain for your Bluesky PDS server" example="e.g., bluesky.example.com">
#<UDF name="main_domain" label="Root Domain Hosted on Linode" example="e.g., example.com">
#<UDF name="smtp_url" label="SMTP Server URL" example="Enter your SMTP URL (e.g., smtps://[email protected]:465/)">
#<UDF name="smtp_email" label="SMTP From Email" example="Enter the email address for outgoing emails (e.g., [email protected])">
#<UDF name="admin_email" label="Admin Email Address" example="Enter the admin email for PDS (e.g., [email protected])">
#<UDF name="admin_handle" label="Admin Handle" example="Enter the admin handle for PDS (e.g., admin.bsky.social)">
#<UDF name="admin_password" label="Admin Password" example="Enter the admin password for PDS">

# ================================================================
# Start of Script Execution
# ================================================================

# Update the system
apt update && apt upgrade -y

# Set the hostname
hostnamectl set-hostname "$HOSTNAME"
echo "$HOSTNAME" > /etc/hostname
cat <<EOF > /etc/hosts
127.0.0.1   localhost
127.0.1.1   $HOSTNAME $DOMAIN

# The following lines are desirable for IPv6 capable hosts
::1         localhost ip6-localhost ip6-loopback
ff02::1     ip6-allnodes
ff02::2     ip6-allrouters
EOF

# ================================================================
# Install Required Tools
# ================================================================
apt install -y curl wget gnupg2 ufw jq apt-transport-https ca-certificates software-properties-common

# ================================================================
# Install Docker and Dependencies
# ================================================================
# Add Docker's official GPG key and repository
curl -fsSL https://download.docker.com/linux/debian/gpg | gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg
echo "deb [arch=amd64 signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/debian $(lsb_release -cs) stable" \
    | tee /etc/apt/sources.list.d/docker.list > /dev/null

# Install Docker
apt update && apt install -y docker-ce docker-ce-cli containerd.io

# Enable and start Docker
systemctl enable docker
systemctl start docker

# Verify Docker installation
docker --version

# ================================================================
# Configure Firewall
# ================================================================
ufw allow 80/tcp  # HTTP
ufw allow 443/tcp # HTTPS
ufw --force enable

# ================================================================
# Set Up DNS Records
# ================================================================

# Extract the subdomain and root domain
SUBDOMAIN=$(echo "$DOMAIN" | cut -d '.' -f 1)
ROOT_DOMAIN=$(echo "$DOMAIN" | cut -d '.' -f 2-)

echo "Configuring DNS for $SUBDOMAIN.$ROOT_DOMAIN..."
IP=$(curl -4 -s http://icanhazip.com)
DOMAIN_ID=$(curl -s -H "Authorization: Bearer $API_KEY" \
    https://api.linode.com/v4/domains | jq -r ".data[] | select(.domain == \"$ROOT_DOMAIN\") | .id")

if [ -n "$DOMAIN_ID" ]; then
    # Create A record for the subdomain
    curl -s -X POST -H "Content-Type: application/json" -H "Authorization: Bearer $API_KEY" \
        -d "{
            \"type\": \"A\",
            \"name\": \"$SUBDOMAIN\",
            \"target\": \"$IP\",
            \"ttl_sec\": 600
        }" https://api.linode.com/v4/domains/$DOMAIN_ID/records

    # Create wildcard A record
    curl -s -X POST -H "Content-Type: application/json" -H "Authorization: Bearer $API_KEY" \
        -d "{
            \"type\": \"A\",
            \"name\": \"*.$SUBDOMAIN\",
            \"target\": \"$IP\",
            \"ttl_sec\": 600
        }" https://api.linode.com/v4/domains/$DOMAIN_ID/records

    echo "DNS records created for $SUBDOMAIN.$ROOT_DOMAIN and *.$SUBDOMAIN.$ROOT_DOMAIN."
else
    echo "Error: Could not find domain $ROOT_DOMAIN in your Linode account."
    exit 1
fi

# ================================================================
# Install Bluesky PDS
# ================================================================
wget https://raw.githubusercontent.com/bluesky-social/pds/main/installer.sh

# Automate prompts with environment variables
export PDS_HOSTNAME="$DOMAIN"
export PDS_ADMIN_EMAIL="$ADMIN_EMAIL"

# Run the installer
sudo bash installer.sh

# ================================================================
# Configure SMTP for PDS
# ================================================================
PDS_ENV="/pds/pds.env"
if [ -f "$PDS_ENV" ]; then
    echo "PDS_EMAIL_SMTP_URL=$SMTP_URL" >> "$PDS_ENV"
    echo "PDS_EMAIL_FROM_ADDRESS=$SMTP_EMAIL" >> "$PDS_ENV"
    systemctl restart pds
else
    echo "Error: PDS environment file not found. SMTP configuration skipped."
fi

# ================================================================
# Verify the Bluesky PDS
# ================================================================
echo "Verifying health of the PDS..."
curl -s https://"$DOMAIN"/xrpc/_health

# ================================================================
# Create Admin Account
# ================================================================
docker exec pds pdsadmin account create <<EOF
$ADMIN_HANDLE
$ADMIN_PASSWORD
$ADMIN_EMAIL
EOF

# ================================================================
# Output Final Instructions
# ================================================================
echo "=================================================="
echo "Bluesky PDS setup is complete!"
echo "=================================================="