if [ "$EUID" -ne 0 ]
then
    echo "* [ERROR] Run this script under 'sudo -s' or as root"
    exit 1
fi
 

local status
local process=$(ps aux | grep "[p]hp -S ${host}:${port}" | awk '{print $2}')

if [[ $process != '' ]]
    then status=1
  else
    status=0
  fi

 

#! /bin/bash
# This script will install Jenkins on CentOS 7 minimal ISO

PASSWORD="nekipass"
DOMAIN="jenkins.domain.cc"

jenkinsrepo="http://pkg.jenkins-ci.org/redhat/jenkins.repo"
jenkinskey="https://jenkins-ci.org/redhat/jenkins-ci.org.key"

vhost=$(cat <<EOF
server {

listen 80;
server_name $DOMAIN;

        location / {

          proxy_set_header        Host \$host:\$server_port;
          proxy_set_header        X-Real-IP \$remote_addr;
          proxy_set_header        X-Forwarded-For \$proxy_add_x_forwarded_for;
          proxy_set_header        X-Forwarded-Proto \$scheme;

                # Fix the "It appears that your reverse proxy set up is broken" error.
                proxy_pass          http://127.0.0.1:8080;
                proxy_read_timeout  90;

                proxy_redirect      http://127.0.0.1:8080 http://$DOMAIN;

                # Required for new HTTP-based CLI
                proxy_http_version 1.1;
                proxy_request_buffering off;
                # workaround for https://issues.jenkins-ci.org/browse/JENKINS-45651
                add_header X-SSH-Endpoint jenkins.domain.tld:50022 always;
        }
}
EOF
)


# User with root privileges is required
if [ "$EUID" -ne 0 ]
then
    echo "* [ERROR] Run this script under 'sudo -s' or as root"
    exit 1
fi


# installing useful tools
yum -y install vim net-tools wget telnet


# install nginx and create vhost
yum -y install epel-release
yum -y install nginx

if [ ! -d "/etc/nginx/sites-available"  ]; then
        mkdir /etc/nginx/sites-available
else
        echo "directory /etc/nginx/sites-available already exist"
fi

if [ ! -d "/etc/nginx/sites-enabled"  ]; then
        mkdir /etc/nginx/sites-enabled
else
        echo "directory /etc/nginx/sites-enabled already exist"
fi

if [[ ! -e /etc/nginx/sites-available/$DOMAIN.conf ]]; then
     echo "${vhost}" > /etc/nginx/sites-available/$DOMAIN.conf
else

echo "$DOMAIN.conf already exist"
echo "Do you want to overwrite .conf file?"
while true; do
read -r -p "[Y/N]: " overwrite
case $overwrite in
[nN]) break ;;
[yY]) echo "${vhost}" > /etc/nginx/sites-available/$DOMAIN.conf
break;;
esac
done
fi

incld=`grep -r "include \/etc\/nginx\/sites-enabled\/\*.conf;" /etc/nginx/nginx.conf | wc -l`
if [[ $incld  == 0 ]]; then
sed -i '/http {/a include /etc/nginx/sites-enabled/*.conf;' /etc/nginx/nginx.conf
else
echo "this line is included in conf file"
fi

bcktsize=`grep -r "#server_names_hash_bucket_size 64;" /etc/nginx/nginx.conf | wc -l`
if [[ $bcktsize  == 0 ]]; then
sed -i '/http {/a #server_names_hash_bucket_size 64;' /etc/nginx/nginx.conf
else
echo "this line is included in conf file"
fi

if [[ ! -L "/etc/nginx/sites-enabled/$DOMAIN.conf" ]]; then
ln -s /etc/nginx/sites-available/$DOMAIN.conf /etc/nginx/sites-enabled/$DOMAIN.conf
else
echo "symlink elready exist"
echo "Do you want to overwrite symlink?"

while true; do
        read -r -p "[Y/N]: " status
        case $status in
                [nN]) break ;;
                [yY]) ln -s /etc/nginx/sites-available/$DOMAIN.conf /etc/nginx/sites-enabled/$DOMAIN.conf ;;
        esac
done
fi

systemctl enable nginx
systemctl start nginx
systemctl is-active --quiet nginx
if [ $? == 0 ]; then
        echo "nginx service is up and running"
else
        echo "* [ERROR] nxinx service did not started successfully"
        echo ""
        tail /var/log/nginx/error.log
        echo ""
        echo "Do you want to continue with script, and later fix nginx issues?"

while true; do
        read -r -p "[Y/N]: " status
        case $status in
                [nN]) exit 1 ;;
                [yY]) break ;;
        esac
done
fi


# Install Java and Jenkins
if [[ `whereis jenkins | wc -l` == 0 ]]; then
        httpcoderepo=`curl --write-out %{http_code} --silent --output /dev/null $jenkinsrepo`
        httpcodekey=`curl --write-out %{http_code} --silent --output /dev/null $jenkinskey`
        if ([ $httpcoderepo ==  200 ] || [ $httpcoderepo ==  301 ]) && ([ $httpcodekey ==  200 ] || [ $httpcodekey ==  301 ]); then
                echo "Starting with Jenkins installation"
        else
                echo "[ERROR] repo links are outdated"
                echo "Please check https://wiki.jenkins.io/displa...nkins+on+Red+Hat+distributions"
                echo "and update links at the begining of this script."
                echo ""
                echo "Do you want to continue with script, and later fix outdated links?"
        while true; do
                read -r -p "[Y/N]: " status
                case $status in
                        [nN]) exit 1 ;;
                        [yY]) break ;;
                esac
        done
        fi
wget -O /etc/yum.repos.d/jenkins.repo http://pkg.jenkins-ci.org/redhat/jenkins.repo
rpm --import https://jenkins-ci.org/redhat/jenkins-ci.org.key
yum -y install jenkins java
else
        echo "Jenkins is already installed"
fi

systemctl enable jenkins
systemctl start jenkins
systemctl is-active --quiet nginx
if [ $? == 0 ]; then
        echo "jenkins is up and running"
else
        echo "* [ERROR] jenkins service did not started successfully"
        echo ""
        tail /var/log/jenkins/jenkins.log
        echo ""
        echo "Do you want to continue with script, and later fix jenkins issues?"
while true; do
        read -r -p "[Y/N]: " status
        case $status in
                [nN]) exit 1 ;;
                [yY]) break ;;
        esac
done
fi

# Setup firewall rules
systemctl stop firewalld
systemctl disable firewalld

#set selinux
yum install -y setroubleshoot-server selinux-policy-devel
semanage port -m -t http_port_t -p tcp 8080
systemctl restart nginx jenkins

# enable jenkins user to login to ssh and create keys
essstatus=`passwd --status jenkins | awk '{print $2}'`
if [[ $passstatus == "P" ]] || [[ $passstatus == "PS" ]]; then
        echo "password for username jenkins is already set. Do you want to reset it?"
        while true; do
                read -r -p "[Y/N]: " passyesno
                case $passyesno in
                [yY])
                echo -e "$PASSWORD\n$PASSWORD" | passwd jenkins
                break;;
                [nN]) break ;;
                esac
        done
else
echo -e "$PASSWORD\n$PASSWORD" | passwd jenkins
fi

usermod -s /bin/bash jenkins

if [[ ! -e /var/lib/.ssh/id_rsa ]]; then
        mkdir /var/lib/jenkins/.ssh
        ssh-keygen -f /var/lib/jenkins/.ssh/id_rsa -t rsa -N ''
        cat /var/lib/jenkins/.ssh/id_rsa.pub >> /var/lib/jenkins/.ssh/authorized_keys
        chown -R jenkins /var/lib/jenkins/.ssh/
else
        echo "file /var/lib/.ssh/id_rsa already exist"
        echo "do you want to overwrite it? Be carefull, because existing key if is in a function will be overwriten"
        while true; do
                read -r -p "[Y/N]: " status
                case $status in
                [nN]) break ;;
                [yY])
                mkdir /var/lib/jenkins/.ssh
                ssh-keygen -f /var/lib/jenkins/.ssh/id_rsa -t rsa -N ''
                cat /var/lib/jenkins/.ssh/id_rsa.pub >> /var/lib/jenkins/.ssh/authorized_keys
                chown -R jenkins /var/lib/jenkins/.ssh/
                ;;
                esac
        done
fi


hst=`grep -r "Host *" /var/lib/jenkins/.ssh/config | wc -l`
keychk=`grep -r "StrictHostKeyChecking=no" /var/lib/jenkins/.ssh/config | wc -l`
if ([ $hst  == 0 ] &&  [ $keychk  == 0 ]) || [ ! -f  /var/lib/jenkins/.ssh/config ]; then
echo -e 'Host *\nStrictHostKeyChecking=no' >> /var/lib/jenkins/.ssh/config
else
echo "this line is included in config file"
fi
 

# enable jenkins user to login to ssh and create keys
essstatus=`passwd --status jenkins | awk '{print $2}'`
if [[ $passstatus == "P" ]] || [[ $passstatus == "PS" ]]; then
        echo "password for username jenkins is already set. Do you want to reset it?"
        while true; do
                read -r -p "[Y/N]: " passyesno
                case $passyesno in
                [yY])
                echo -e "$PASSWORD\n$PASSWORD" | passwd jenkins
                break;;
                [nN]) break ;;
                esac
        done
else
echo -e "$PASSWORD\n$PASSWORD" | passwd jenkins
fi