From befe42eea5df6076a7c6f4c393520b017eb8fe27 Mon Sep 17 00:00:00 2001
From: Thomas <github.passage306@passmail.net>
Date: Tue, 9 Dec 2025 17:00:52 +0100
Subject: [PATCH] fix et ajout docker

---
 set_new_nginx_app.sh        |   2 +-
 set_new_nginx_docker_app.sh | 156 ++++++++++++++++++++++++++++++++++++
 2 files changed, 157 insertions(+), 1 deletion(-)
 create mode 100644 set_new_nginx_docker_app.sh

diff --git a/set_new_nginx_app.sh b/set_new_nginx_app.sh
index 50b8cca..66c41ba 100644
--- a/set_new_nginx_app.sh
+++ b/set_new_nginx_app.sh
@@ -76,7 +76,7 @@ sudo systemctl enable nginx
 sudo systemctl start nginx
 
 # ------------------------------
-# Configurer Nginx pour l'app (wildcard)
+# Configurer Nginx pour l'app (wildcard) sur port 80 only le temps de mettre en place SSL
 # ------------------------------
 NGINX_CONF="/etc/nginx/sites-available/$DOMAIN"
 sudo tee $NGINX_CONF > /dev/null <<EOF
diff --git a/set_new_nginx_docker_app.sh b/set_new_nginx_docker_app.sh
new file mode 100644
index 0000000..8770597
--- /dev/null
+++ b/set_new_nginx_docker_app.sh
@@ -0,0 +1,156 @@
+#!/bin/bash
+
+# ------------------------------
+# Script réutilisable Node.js LTS + pnpm + Nginx + Certbot Cloudflare
+# Arguments :
+#   $1 = Domaine (ex: exemple.com)
+#   $2 = Port Node.js (ex: 3000)
+#   $3 = Email pour SSL (ex: email@example.com)
+# ------------------------------
+
+if [ "$#" -ne 3 ]; then
+    echo "Usage: $0 <domain> <app_port> <email>"
+    exit 1
+fi
+
+DOMAIN="$1"
+APP_PORT="$2"
+EMAIL="$3"
+CLOUDFLARE_CREDENTIALS="$HOME/.secrets/certbot/cloudflare.ini"
+
+echo "⚙️  Configuration pour :"
+echo "Domaine: $DOMAIN"
+echo "Port Node.js: $APP_PORT"
+echo "Email SSL: $EMAIL"
+
+# ------------------------------
+# Fonction pour installer un paquet si absent
+# ------------------------------
+install_if_missing() {
+    if ! command -v $1 &> /dev/null; then
+        echo "Installation de $1..."
+        sudo apt install -y $2
+    else
+        echo "$1 déjà installé, skipping..."
+    fi
+}
+
+# ------------------------------
+# Mise à jour système
+# ------------------------------
+sudo apt update && sudo apt upgrade -y
+
+# Installer dépendances de base
+install_if_missing curl curl
+install_if_missing git git
+install_if_missing build-essential build-essential
+install_if_missing software-properties-common software-properties-common
+
+# Installer Node.js LTS si absent
+if ! command -v node &> /dev/null; then
+    curl -fsSL https://deb.nodesource.com/setup_lts.x | sudo -E bash -
+    sudo apt install -y nodejs
+else
+    echo "Node.js déjà installé, skipping..."
+fi
+
+# Installer pnpm si absent
+if ! command -v pnpm &> /dev/null; then
+    sudo npm install -g pnpm
+else
+    echo "pnpm déjà installé, skipping..."
+fi
+
+# Installer docker et docker-compose si absent
+install_if_missing docker docker.io
+install_if_missing docker-compose docker-compose
+
+# Installer Nginx si absent
+install_if_missing nginx nginx
+sudo systemctl enable nginx
+sudo systemctl start nginx
+
+# ------------------------------
+# Configurer Nginx pour l'app (wildcard) sur port 80 only le temps de mettre en place SSL
+# ------------------------------
+NGINX_CONF="/etc/nginx/sites-available/$DOMAIN"
+sudo tee $NGINX_CONF > /dev/null <<EOF
+server {
+    listen 80;
+    server_name $DOMAIN *.$DOMAIN;
+
+    location / {
+        proxy_pass http://127.0.0.1:$APP_PORT;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade \$http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host \$host;
+        proxy_cache_bypass \$http_upgrade;
+    }
+}
+EOF
+
+sudo ln -sf $NGINX_CONF /etc/nginx/sites-enabled/
+sudo nginx -t && sudo systemctl reload nginx
+
+# ------------------------------
+# Installer Certbot et plugin Cloudflare
+# ------------------------------
+install_if_missing certbot certbot
+install_if_missing python3-certbot-dns-cloudflare python3-certbot-dns-cloudflare
+
+# Générer certificat wildcard SSL via Cloudflare si absent
+if [ ! -d "/etc/letsencrypt/live/$DOMAIN" ]; then
+    sudo certbot certonly \
+      --dns-cloudflare \
+      --dns-cloudflare-credentials $CLOUDFLARE_CREDENTIALS \
+      -d $DOMAIN -d *.$DOMAIN \
+      -m $EMAIL \
+      --agree-tos \
+      --non-interactive
+else
+    echo "Certificat SSL déjà existant pour $DOMAIN, skipping..."
+fi
+
+# Configurer Nginx pour SSL
+sudo tee /etc/nginx/sites-available/$DOMAIN > /dev/null <<EOF
+server {
+    listen 80;
+    server_name $DOMAIN *.$DOMAIN;
+    return 301 https://\$host\$request_uri;
+}
+
+server {
+    listen 443 ssl;
+    server_name $DOMAIN *.$DOMAIN;
+
+    ssl_certificate /etc/letsencrypt/live/$DOMAIN/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/$DOMAIN/privkey.pem;
+
+    location / {
+        proxy_pass http://127.0.0.1:$APP_PORT;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade \$http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host \$host;
+        proxy_cache_bypass \$http_upgrade;
+        proxy_redirect off;
+        proxy_set_header X-Real-IP \$remote_addr;
+        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
+        proxy_set_header X-Real-IP \$remote_addr;
+        
+        # Pour les requêtes de streaming
+        proxy_buffering off;
+        proxy_cache off;
+        proxy_request_buffering off;
+        proxy_read_timeout 3600s;
+        proxy_send_timeout 3600s;
+    }
+}
+EOF
+
+sudo nginx -t && sudo systemctl reload nginx
+
+echo "✅ Installation terminée !"
+echo "Port Node.js: $APP_PORT"
+echo "Nginx configuré avec SSL wildcard pour $DOMAIN et *.$DOMAIN"
\ No newline at end of file
-- 
2.51.2