Skip to content

Latest commit

 

History

History
161 lines (139 loc) · 4.51 KB

README.md

File metadata and controls

161 lines (139 loc) · 4.51 KB
Raw

A script to install ghost blog with ssl automatically

中文文档

Recommend to use Ghost on docker

Easy and nice!
Step1,install docker:

curl -sSL https://get.docker.com/ | sh

Step2,install Ghost:

docker run --name ghost \
 -p 127.0.0.1:Yourport:2368 \
 -e url=https://Yourdomain \
 -v /var/www/ghost/content:/var/lib/ghost/content \
 --restart=always \
  -d ghost

There are two editions of Ghost.*plus is the version over 1.0.0.And non-plus is the version bellow 1.0.0.

Firewall settings

ufw

  • For Ubuntu/Debian
apt install ufw
ufw enable
ufw allow 80 && ufw allow 443
ufw reload
  • For CentOS(ufw)
yum install -y ufw
ufw enable
ufw allow 80 && ufw allow 443
ufw reload

Or ipables/fillwlld

  • For CentOS6(iptables for ubuntu/debian as the same)
service iptables start
iptables -I INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
iptables -I INPUT -m state --state NEW -m udp -p udp --dport 80 -j ACCEPT
iptables -I INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT
iptables -I INPUT -m state --state NEW -m udp -p udp --dport 443 -j ACCEPT
service iptables restart
  • For CentOS7
systemctl start firewalld.service
systemctl enable firewalld.service
firewall-cmd --zone=public --add-port=80/tcp --permanent  
firewall-cmd --zone=public --add-port=80/udp --permanent  
firewall-cmd --zone=public --add-port=443/tcp --permanent 
firewall-cmd --zone=public --add-port=443/udp --permanent  
firewall-cmd --reload

Usage

Usage of *plus

wget --no-check-certificate -O GbSplus.sh https://raw.githubusercontent.com/xratzh/GhostBlog_SSL/master/GbSplus.sh && chmod +x GbSplus.sh && sudo bash GbSplus.sh

Usage of non-plus

wget --no-check-certificate -O GbS.sh https://raw.githubusercontent.com/xratzh/GhostBlog_SSL/master/GbS.sh && chmod +x GbS.sh && sudo bash GbS.sh
  1. Enter your domain(no-www,or you need to edit ghost.conf)
  2. Soon later,Choose 'Y'
  3. Enter your email address

You can do it yourself manually

*plus edition
  • For "apt" get-package based
wget --no-check-certificate -O debplus.sh https://raw.githubusercontent.com/xratzh/GhostBlog_SSL/master/debplus.sh && sudo bash debplus.sh
  • For "yum" get-package based
wget --no-check-certificate -O rpmplus.sh https://raw.githubusercontent.com/xratzh/GhostBlog_SSL/master/rpmplus.sh && sudo bash rpmplus.sh
non-plus edition
  • For "apt" get-package based
wget --no-check-certificate -O deb.sh https://raw.githubusercontent.com/xratzh/GhostBlog_SSL/master/deb.sh && sudo bash deb.sh
  • For "yum" get-package based
wget --no-check-certificate -O rpm.sh https://raw.githubusercontent.com/xratzh/GhostBlog_SSL/master/rpm.sh && sudo bash rpm.sh

Upgrade Ghost Version

*plus update
cd /var/www/ghost && ghost update
non-plus update to 0.11.11
wget --no-check-certificate -O update.sh https://raw.githubusercontent.com/xratzh/GhostBlog_SSL/master/update.sh && sudo bash update.sh
0.11.11 update to 1.0.0 and later

Official migrating guide

Tips

  • In rpm.sh,"sleep 5" in /etc/rc.d/rc.local is to fix "502 bad gateway" in CentOS7 whoes RAM is less than 512MB after reboot(5 seconds later to restart nginx service).The number can be changed,but might not less than 2 seconds.It seems necessary for CentOS7,no matter with CentOS6 and etc. 
  • "ghost.conf" in /etc/nginx/ rewrite www.yourdomain.com to yourdomain.com.If you never need it,you can delete www.${URL} in the yum.sh or deb.sh.
  • In CentOS7,firewalld may should be changed to anable 80 port and 443 port
server {
    listen 80
    server_name ${URL} www.${URL};               #rewrite www.yourdomain.com to yourdomain.com
    location ~ /.well-known {
        root /var/www/ghost;
    }
    location / {
        return 301 https://${URL}\$request_uri;
    }
}
  • Certbot-auto will renew your SSL on the 1st every 2 months.(crontab job)

Packages

*plus
  • curl
  • sqlite3
  • unzip
  • nodejs
  • watchdog
  • nginx
  • certbot-auto
non-plus
  • iptables-persistent(ubuntu)
  • curl
  • sqlite3
  • unzip
  • nodejs
  • forever（or you can use pm2）
  • watchdog
  • nginx
  • certbot-auto

LICENSE  

MIT