install.sh

#!/bin/bash

COIN_NAME='jagoancoin'

#wallet information
BOOTSTRAP_TAR='https://bootstrap.jagoancoin.org/bootstrap_with_indexes.tar.xz'
CONFIG_DIR='.jagoancoincore'
CONFIG_FILE='jagoancoin.conf'
PORT='17898'
SSHPORT='22'
COIN_DAEMON='jagoancoind'
COIN_CLI='jagoancoin-cli'
COIN_TX='jagoancoin-tx'
COIN_PATH='/usr/local/bin'
USERNAME="$(whoami)"

#color codes
RED='\033[1;31m'
YELLOW='\033[1;33m'
BLUE="\\033[38;5;27m"
SEA="\\033[38;5;49m"
GREEN='\033[1;32m'
CYAN='\033[1;36m'
BLINKRED='\033[1;31;5m'
NC='\033[0m'
STOP='\e[0m'

#emoji codes
X_POINT="${BLINKRED}\xE2\x9D\x97${NC}"

#end of required details
#

echo -e "${YELLOW}==========================================================="
echo -e 'JGC Smartnode Setup'
echo -e "===========================================================${NC}"
echo -e "${BLUE}July 2021, created and updated by dk808 from AltTank${NC}"
echo -e "${BLUE}With Smartnode healthcheck by Delgon${NC}"
echo -e
echo -e "${CYAN}Node setup starting, press [CTRL-C] to cancel.${NC}"
sleep 5
if [ "$USERNAME" = "root" ]; then
  echo -e "${CYAN}You are currently logged in as ${NC}root${CYAN}, please switch to a sudo user.${NC}"
  exit
fi

#functions
function wipe_clean() {
  echo -e "${YELLOW}Removing any instances of JGC...${NC}"
  sudo systemctl stop $COIN_NAME > /dev/null 2>&1
  sudo $COIN_CLI stop > /dev/null 2>&1
  sudo killall $COIN_DAEMON > /dev/null 2>&1
  sudo rm /usr/local/bin/$COIN_NAME* > /dev/null 2>&1
  sudo rm /usr/bin/$COIN_NAME* > /dev/null 2>&1
  sudo iptables -A INPUT -p tcp --syn --dport 17899 -m connlimit --connlimit-above 2 --connlimit-mask 32 -j REJECT --reject-with tcp-reset
  rm -rf $HOME/$CONFIG_DIR > /dev/null 2>&1
  rm update.sh check.sh > /dev/null 2>&1
}

function ssh_port() {
  echo -e "${YELLOW}Detecting SSH port being used...${NC}" && sleep 1
  SSHPORT=$(grep -w Port /etc/ssh/sshd_config | sed -e 's/.*Port //')
  if ! whiptail --yesno "Detected you are using $SSHPORT for SSH is this correct?" 8 56; then
    SSHPORT=$(whiptail --inputbox "Please enter port you are using for SSH" 8 43 3>&1 1>&2 2>&3)
    echo -e "${YELLOW}Using SSH port:${SEA} $SSHPORT${NC}" && sleep 1
  else
    echo -e "${YELLOW}Using SSH port:${SEA} $SSHPORT${NC}" && sleep 1
  fi
}

function ip_confirm() {
  echo -e "${YELLOW}Detecting IP address being used...${NC}" && sleep 1
  WANIP=$(wget http://ipecho.net/plain -O - -q)
  if ! whiptail --yesno "Detected IP address is $WANIP is this correct?" 8 60; then
      WANIP=$(whiptail --inputbox "        Enter IP address" 8 36 3>&1 1>&2 2>&3)
  fi
}

function create_swap() {
  echo -e "${YELLOW}Creating swap if none detected...${NC}" && sleep 1
  if ! grep -q "swapfile" /etc/fstab; then
    if whiptail --yesno "No swapfile detected would you like to create one?" 8 54; then
      sudo fallocate -l 4G /swapfile
      sudo chmod 600 /swapfile
      sudo mkswap /swapfile
      sudo swapon /swapfile
      echo '/swapfile none swap sw 0 0' | sudo tee -a /etc/fstab
      echo -e "${YELLOW}Created ${SEA}4G${YELLOW} swapfile${NC}"
    fi
  fi
  sleep 1
}

function install_packages() { 
  echo -e "${YELLOW}Installing Packages...${NC}"
  sudo apt-get update -y
  sudo apt-get upgrade -y
  sudo apt-get install nano htop pwgen figlet unzip curl jq -y
  echo -e "${YELLOW}Packages complete...${NC}"
}

function spinning_timer() {
  animation=( ⠋ ⠙ ⠹ ⠸ ⠼ ⠴ ⠦ ⠧ ⠇ ⠏ )
  end=$((SECONDS+NUM))
  while [ $SECONDS -lt $end ]; do
    for i in "${animation[@]}"; do
      echo -ne "${RED}\r$i ${CYAN}${MSG1}${NC}"
      sleep 0.1
    done
  done
  echo -e "${MSG2}"
}

smartnodeblsprivkey=""
# If $1 is provided, just ask about BLS key.
function create_conf() {
  if [[ ! -z $1 ]]; then
    # Force user to provide BLS key.
    while [[ -z $smartnodeblsprivkey ]]; do
      smartnodeblsprivkey=$(whiptail --inputbox "Enter your SmartNode BLS Privkey" 8 75 3>&1 1>&2 2>&3)
    done
    return
  fi
  # Force user to provide BLS key. Sanity check here.
  while [[ -z $smartnodeblsprivkey ]]; do
    smartnodeblsprivkey=$(whiptail --inputbox "Enter your SmartNode BLS Privkey" 8 75 3>&1 1>&2 2>&3)
  done
  if [ -f $HOME/$CONFIG_DIR/$CONFIG_FILE ]; then
    echo -e "${CYAN}Existing conf file found backing up to $COIN_NAME.old ...${NC}"
    mv $HOME/$CONFIG_DIR/$CONFIG_FILE $HOME/$CONFIG_DIR/$COIN_NAME.old;
  fi
  RPCUSER=$(pwgen -1 8 -n)
  PASSWORD=$(pwgen -1 20 -n)
  echo -e "${YELLOW}Creating Conf File...${NC}"
  sleep 1
  mkdir $HOME/$CONFIG_DIR > /dev/null 2>&1
  touch $HOME/$CONFIG_DIR/$CONFIG_FILE
  cat << EOF > $HOME/$CONFIG_DIR/$CONFIG_FILE
rpcuser=$RPCUSER
rpcpassword=$PASSWORD
rpcallowip=127.0.0.1
rpcbind=127.0.0.1
rpcport=$PORT
server=1
daemon=1
listen=1
index=1
txindex=1
addressindex=1
smartnodeblsprivkey=$smartnodeblsprivkey
externalip=$WANIP
maxconnections=125
par=2
dbcache=1024
onlynet=ipv4
addnode=194.233.175.188
addnode=203.194.112.206
addnode=47.254.192.216
addnode=108.136.131.161
addnode=47.250.38.177
addnode=93.114.133.183
EOF
}

function install_bins() {
  echo -e "${YELLOW}Installing latest binaries...${NC}"
  if [[ $(lsb_release -r) = *18* ]]; then
    VERSION='ubuntu18'
  elif [[ $(lsb_release -r) = *20* ]]; then
    VERSION='ubuntu20'
  fi
  WALLET_TAR=$(curl -s https://api.github.com/repos/jagoanpilot/jagoancoin/releases/latest | jq -r '.assets[] | select(.name|test("'$VERSION'.")) | .browser_download_url')
  mkdir temp
  curl -L $WALLET_TAR | tar xz -C ./temp; sudo mv ./temp/$COIN_DAEMON ./temp/$COIN_CLI ./temp/$COIN_TX $COIN_PATH
  sudo chmod 755 ${COIN_PATH}/${COIN_NAME}*
  rm -rf temp
}

BOOTSTRAP_ANS=""
# If $1 is provided, just ask about bootstrap.
function bootstrap() {
  if [[ ! -z $1 ]]; then
    if whiptail --yesno "Would you like to bootstrap the chain?" 8 42; then
      BOOTSTRAP_ANS=1
    fi
  elif [[ ! -z $BOOTSTRAP_ANS ]]; then
    echo -e "${YELLOW}Downloading wallet bootstrap please be patient...${NC}"
    curl -L $BOOTSTRAP_TAR | tar xJ -C $HOME/$CONFIG_DIR
  else
    echo -e "${YELLOW}Skipping bootstrap...${NC}"
  fi
}

function update_script() {
    echo -e "${YELLOW}Creating a script to update binaries for future updates...${NC}"
    touch $HOME/update.sh
    cat << EOF > $HOME/update.sh
#!/bin/bash
if [[ \$(lsb_release -r) = *18* ]]; then
  VERSION='ubuntu18'
elif [[ \$(lsb_release -r) = *20* ]]; then
  VERSION='ubuntu20'
fi
WALLET_TAR=\$(curl -s https://api.github.com/repos/jagoanpilot/jagoancoin/releases/latest | jq -r '.assets[] | select(.name|test("'\$VERSION'.")) | .browser_download_url')
COIN_NAME='jagoancoin'
COIN_DAEMON='jagoancoind'
COIN_CLI='jagoancoin-cli'
COIN_TX='jagoancoin-tx'
COIN_PATH='/usr/local/bin'
sudo systemctl stop \$COIN_NAME
\$COIN_CLI stop > /dev/null 2>&1 && sleep 2
sudo killall \$COIN_DAEMON > /dev/null 2>&1
mkdir temp
curl -L \$WALLET_TAR | tar xz -C ./temp; sudo mv ./temp/\$COIN_DAEMON ./temp/\$COIN_CLI ./temp/\$COIN_TX \$COIN_PATH
rm -rf temp
sudo chmod 755 \${COIN_PATH}/\${COIN_NAME}*
sudo systemctl start \$COIN_NAME > /dev/null 2>&1
EOF
    sudo chmod 775 $HOME/update.sh
}

function create_service() {
  echo -e "${YELLOW}Creating JGC service...${NC}"
  sudo touch /etc/systemd/system/$COIN_NAME.service
  sudo chown $USERNAME:$USERNAME /etc/systemd/system/$COIN_NAME.service
  cat << EOF > /etc/systemd/system/$COIN_NAME.service
[Unit]
Description=$COIN_NAME service
After=network.target
[Service]
Type=forking
User=$USERNAME
Group=$USERNAME
WorkingDirectory=/home/$USERNAME/$CONFIG_DIR/
ExecStart=$COIN_PATH/$COIN_DAEMON -datadir=/home/$USERNAME/$CONFIG_DIR/ -conf=/home/$USERNAME/$CONFIG_DIR/$CONFIG_FILE -daemon
ExecStop=$COIN_PATH/$COIN_CLI stop
Restart=always
RestartSec=3
PrivateTmp=true
TimeoutStopSec=60s
TimeoutStartSec=10s
StartLimitInterval=120s
StartLimitBurst=5
[Install]
WantedBy=multi-user.target
EOF
  sudo chown root:root /etc/systemd/system/$COIN_NAME.service
  sudo systemctl daemon-reload
  sudo systemctl enable $COIN_NAME > /dev/null 2>&1
}

SECURITY_ANS=""
# If $1 is provided, just ask about bootstrap
function basic_security() {
  if [[ ! -z $1 ]]; then
    if whiptail --yesno "Would you like to setup basic firewall and fail2ban?" 8 56; then
      SECURITY_ANS=1
    fi
  elif [[ ! -z $SECURITY_ANS ]]; then
    echo -e "${YELLOW}Configuring firewall and enabling fail2ban...${NC}"
    sudo apt-get install ufw fail2ban -y
    sudo ufw allow $SSHPORT/tcp
    sudo ufw allow $PORT/tcp
    sudo ufw logging on
    sudo ufw default deny incoming
    sudo ufw default allow outgoing
    sudo ufw limit OpenSSH
    echo "y" | sudo ufw enable > /dev/null 2>&1
    sudo touch /etc/fail2ban/jail.local
    sudo chown $USERNAME:$USERNAME /etc/fail2ban/jail.local
    cat << EOF > /etc/fail2ban/jail.local
[sshd]
enabled = true
port = $SSHPORT
filter = sshd
logpath = /var/log/auth.log
maxretry = 3
EOF
    sudo chown root:root /etc/fail2ban/jail.local
    sudo systemctl restart fail2ban > /dev/null 2>&1
    sudo systemctl enable fail2ban > /dev/null 2>&1
  else
    echo -e "${YELLOW}Skipping basic security...${NC}"
  fi
}

function start_daemon() {
  NUM='180'
  MSG1='Starting daemon service & syncing chain please be patient this will take few min...'
  MSG=''
  if sudo systemctl start $COIN_NAME > /dev/null 2>&1; then
    echo && spinning_timer
    NUM='5'
    MSG1='Getting blockchain info...'
    MSG2=''
    echo && spinning_timer
    echo
    $COIN_CLI getblockchaininfo
  else
    echo -e "${RED}Something is not right the daemon did not start. Will exit out so try and run the script again.${NC}"
    exit
  fi
}

function log_rotate() {
  echo -e "${YELLOW}Configuring logrotate function for debug log...${NC}"
  if [ -f /etc/logrotate.d/jgcdebuglog ]; then
    echo -e "${YELLOW}Existing log rotate conf found, backing up to ~/jgcdebuglogrotate.old ...${NC}"
    sudo mv /etc/logrotate.d/jgcdebuglog ~/jgcdebuglogrotate.old
  fi
  sudo touch /etc/logrotate.d/jgcdebuglog
  sudo chown $USERNAME:$USERNAME /etc/logrotate.d/jgcdebuglog
  cat << EOF > /etc/logrotate.d/jgcdebuglog
/home/$USERNAME/.jagoancoincore/debug.log {
  compress
  copytruncate
  missingok
  daily
  rotate 7
}
EOF
  sudo chown root:root /etc/logrotate.d/jgcdebuglog
}

CRON_ANS=""
PROTX_HASH=""
# If $1 is provided, just ask about bootstrap.
function cron_job() {
  if [[ ! -z $1 ]]; then
    if whiptail --yesno "Would you like Cron to check on daemon's health every 15 minutes?" 8 63; then
      CRON_ANS=1
      PROTX_HASH=$(whiptail --inputbox "Please enter your protx hash for this SmartNode" 8 51 3>&1 1>&2 2>&3)
    fi
  elif [[ ! -z $CRON_ANS ]]; then
    cat <(curl -s https://raw.githubusercontent.com/dk808/Jagoancoin_Smartnode/main/check.sh) >$HOME/check.sh
    sed -i "s/#NODE_PROTX=/NODE_PROTX=\"${PROTX_HASH}\"/g" $HOME/check.sh
    sudo chmod 775 $HOME/check.sh
    crontab -l | grep -v "SHELL=/bin/bash" | crontab -
    crontab -l | grep -v "JAGOANCOIN_CLI=$(which $COIN_CLI)" | crontab -
    crontab -l | grep -v "HOME=$HOME" | crontab -
    crontab -l | grep -v "$HOME/check.sh >> $HOME/check.log" | crontab -
    crontab -l > tempcron
    echo "SHELL=/bin/bash" >> tempcron
    echo "JAGOANCOIN_CLI=$(which $COIN_CLI)" >> tempcron
    echo "HOME=$HOME" >> tempcron
    echo "*/15 * * * * $HOME/check.sh >> $HOME/check.log" >> tempcron
    crontab tempcron
    rm tempcron
    rm -f /tmp/height 2>/dev/null
    rm -f /tmp/pose_score 2>/dev/null
    rm -f /tmp/was_stuck 2>/dev/null
    rm -f /tmp/prev_stuck 2>/dev/null
  fi
}

function create_motd() {
  touch $HOME/99-smartnode
  sudo cat << EOF >$HOME/99-smartnode
#!/bin/bash
COIN_NAME='jagoancoin'
COIN_CLI='jagoancoin-cli'

#color codes
RED='\033[1;31m'
YELLOW='\033[1;33m'
BLUE="\\033[38;5;27m"
SEA="\\033[38;5;49m"
GREEN='\033[1;32m'
CYAN='\033[1;36m'
BLINKRED='\033[1;31;5m'
NC='\033[0m'
STOP='\e[0m'
X_POINT="\${BLINKRED}\xE2\x9D\x97\${NC}"

printf "\${BLUE}"
figlet -t -k "JGC  SMARTNODES"
printf "\${STOP}"

echo -e "\${YELLOW}================================================================================================"
echo -e "\${CYAN}COURTESY OF DK808 FROM ALTTANK ARMY\${NC}"
echo -e "\${CYAN}Smartnode healthcheck by Delgon\${NC}"
echo
echo -e "\${YELLOW}Commands to manage \$COIN_NAME service\${NC}"
echo -e "  TO START- \${CYAN}sudo systemctl start \$COIN_NAME\${NC}"
echo -e "  TO STOP - \${CYAN}sudo systemctl stop \$COIN_NAME\${NC}"
echo -e "  STATUS  - \${CYAN}sudo systemctl status \$COIN_NAME\${NC}"
echo -e "In the event server \${RED}reboots\${NC} daemon service will \${GREEN}auto-start\${NC}"
echo
echo -e "\${X_POINT}\${X_POINT} \${YELLOW}To use \$COIN_CLI simply start command with \$COIN_CLI" \${X_POINT}\${X_POINT}
echo -e "     \${YELLOW}E.g \${CYAN}\$COIN_CLI getblockchaininfo\${NC}"
echo -e "     \${YELLOW}E.g \${CYAN}\$COIN_CLI smartnode status\${NC}"
echo
echo -e "\${YELLOW}To update binaries when new ones are released enter \${SEA}./update.sh\${NC}"
echo -e "\${YELLOW}================================================================================================\${NC}"
EOF
  sudo chmod 775 $HOME/99-smartnode
  bash $HOME/99-smartnode
  sudo cp $HOME/99-smartnode /etc/update-motd.d 2>/dev/null
  sudo chown root:root /etc/update-motd.d/99-smartnode 2>/dev/null
  rm $HOME/99-smartnode
}

#
#end of functions

# Clean the enviroment from possibly previous setup.
  wipe_clean

# Ask about about things first for quick setup.
  ssh_port
  ip_confirm
  create_swap
  create_conf true
  basic_security true
  bootstrap true
  cron_job true

#Run functionis.
  install_packages
  install_bins
  create_conf
  bootstrap
  create_service
  basic_security
  start_daemon
  cron_job
  log_rotate
  update_script
  create_motd