source /usr/local/bin/enginescript/enginescript-variables.txt || { echo "Error: Failed to source /usr/local/bin/enginescript/enginescript-variables.txt" >&2; exit 1; }

source /home/EngineScript/enginescript-install-options.txt || { echo "Error: Failed to source /home/EngineScript/enginescript-install-options.txt" >&2; exit 1; }

source /usr/local/bin/enginescript/scripts/functions/shared/enginescript-common.sh || { echo "Error: Failed to source /usr/local/bin/enginescript/scripts/functions/shared/enginescript-common.sh" >&2; exit 1; }

source /usr/local/bin/enginescript/scripts/functions/shared/enginescript-shared-vhost.sh || { echo "Error: Failed to source /usr/local/bin/enginescript/scripts/functions/shared/enginescript-shared-vhost.sh" >&2; exit 1; }

source /usr/local/bin/enginescript/scripts/functions/shared/enginescript-db-credentials.sh || { echo "Error: Failed to source /usr/local/bin/enginescript/scripts/functions/shared/enginescript-db-credentials.sh" >&2; exit 1; }

WORDPRESS_PROMPT_TIMEOUT=300

MIN_WP_ADMIN_USERNAME_LENGTH=3

MAX_WP_ADMIN_USERNAME_LENGTH=60

MIN_WP_ADMIN_PASSWORD_LENGTH=12

check_required_services

echo ""

echo "-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-"

echo "| Domain Creation |"

echo "-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-"

echo ""

echo "WARNING: Do not run this script on a site that already exists."

echo "If you do, things will break."

echo ""

sleep 1

echo "For the domain name, enter only the domain portion (e.g., 'wordpresstesting')."

echo "Note: lowercase text only, no spaces or special characters. Do not include https:// or www."

echo ""

echo "Then, select a valid TLD from the provided list."

echo ""

while true; do

read -p "Enter the domain name (e.g., 'wordpresstesting'): " DOMAIN_NAME

if [[ "$DOMAIN_NAME" =~ ^[a-z0-9]([a-z0-9-]*[a-z0-9])?$ ]]; then

echo "You entered: ${DOMAIN_NAME}"

break

else

echo "Invalid domain name. Only lowercase letters, numbers, and hyphens are allowed. Hyphens cannot be at the start or end."

fi

echo ""

echo "Select a valid TLD from the list below:"

VALID_TLDS=(

# Common gTLDs

"com" "net" "org" "info" "biz" "name" "pro" "int"

# Popular gTLDs

"io" "dev" "app" "tech" "ai" "cloud" "store" "online" "site" "xyz" "club"

"design" "media" "agency" "solutions" "services" "digital" "studio" "live"

"blog" "news" "shop" "art" "finance" "health" "law" "marketing" "software"

# Country-code TLDs (ccTLDs)

"us" "uk" "ca" "au" "de" "fr" "es" "it" "nl" "se" "no" "fi" "dk" "jp" "cn"

"in" "br" "ru" "za" "mx" "ar" "ch" "at" "be" "pl" "gr" "pt" "tr" "kr" "hk"

"sg" "id" "my" "th" "ph" "vn" "nz" "ie" "il" "sa" "ae" "eg" "ng" "ke" "gh"

# Common multi-part public suffixes

"co.uk" "co.jp" "com.au" "co.nz" "com.sg" "com.my" "com.br" "com.mx" "co.za" "com.tr" "com.hk"

)

select TLD in "${VALID_TLDS[@]}"; do

if [[ -n "$TLD" ]]; then

echo "You selected: ${TLD}"

break

else

echo "Invalid selection. Please choose a valid TLD from the list."

fi

DOMAIN="${DOMAIN_NAME}.${TLD}"

echo ""

echo "Full domain: ${DOMAIN}"

sleep 2

if grep -Fxq "${DOMAIN}" /home/EngineScript/sites-list/sites.sh; then

echo -e "\n\n${BOLD}Preinstallation Check: Failed${NORMAL}\n\n${DOMAIN} is already installed.${NORMAL}\n\nIf you believe this is an error, please remove the domain by using the ${BOLD}es.menu${NORMAL} command and selecting the Server & Site Tools option\n\n"

exit 1

echo "${BOLD}Preinstallation Check: Passed${NORMAL}"

LOG_FILE="/var/log/EngineScript/vhost-install.log"

exec > >(tee -a "${LOG_FILE}") 2>&1

echo "Starting domain installation for ${DOMAIN} at $(date)"

echo ""

echo "-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-"

echo "| Installation Type |"

echo "-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-"

echo ""

echo "You can install this domain with or without WordPress."

echo ""

echo " With WordPress: Full LEMP stack with WordPress, database,"

echo " plugins, Redis caching, and backups."

echo ""

echo " Without WordPress: Nginx vhost, SSL certificates, and a"

echo " placeholder page. No database or CMS."

echo ""

if prompt_yes_no "Would you like to install WordPress on this domain?" "y" "${WORDPRESS_PROMPT_TIMEOUT}"; then

INSTALL_WORDPRESS="1"

echo "WordPress will be installed on ${DOMAIN}."

INSTALL_WORDPRESS="0"

echo "Skipping WordPress. A placeholder page will be installed on ${DOMAIN}."

echo ""

sleep 1

configure_cloudflare_settings "${DOMAIN}"

create_nginx_vhost "${DOMAIN}"

create_ssl_certificate "${DOMAIN}"

echo "System Date: $(date)"

create_backup_directories "${DOMAIN}"

mkdir -p "/var/www/sites/${DOMAIN}/html"

cd "/var/www/sites/${DOMAIN}/html"

create_domain_logs "${DOMAIN}"

if [[ "${INSTALL_WORDPRESS}" == "1" ]]; then

#----------------------------------------------------------------------------------

# WordPress Installation Path

#----------------------------------------------------------------------------------

# Domain Creation Variables

# Generate random credential strings using main variables file

source /usr/local/bin/enginescript/enginescript-variables.txt

PREFIX="${RAND_CHAR2}"

# Generate the database name using the install method (domain parsing, hash, suffix)

generate_install_db_name "${DOMAIN}" || exit 1

database_name="${ES_DB_NAME}"

database_user="${RAND_CHAR16}"

database_password="${RAND_CHAR32}"

# Validate generated credentials before writing any sensitive data to disk.

validate_install_credentials "${database_user}" "${database_password}" "${DOMAIN}" || exit 1

# Write credentials file and source it (sets DB, USR, PSWD)

write_credentials_file "/home/EngineScript/mysql-credentials" "${DOMAIN}" "${database_name}" "${database_user}" "${database_password}"

echo "Randomly generated MySQL database credentials for ${DOMAIN}."

# Execute the SQL statements to create the database, user, and grant privileges

execute_install_sql "${DB}" "${USR}" "${PSWD}" "${DOMAIN}" || exit 1

# Download WordPress using WP-CLI

wp core download --allow-root

if ! wp plugin delete hello-dolly --allow-root; then

echo "Notice: Could not delete 'hello-dolly' via WP-CLI. This is expected on newer WordPress versions where the plugin is not installed by default. Continuing installation."

fi

# Create Extra WordPress Directories

# WordPress often doesn't include these directories by default, despite them being used or checked in the Health Check plugin.

create_extra_wp_dirs "${DOMAIN}"

# Create wp-config.php

cp -rf /usr/local/bin/enginescript/config/var/www/wordpress/wp-config.php "/var/www/sites/${DOMAIN}/html/wp-config.php"

sed -i "s|SEDWPDB|${DB}|g" "/var/www/sites/${DOMAIN}/html/wp-config.php"

sed -i "s|SEDWPUSER|${USR}|g" "/var/www/sites/${DOMAIN}/html/wp-config.php"

sed -i "s|SEDWPPASS|${PSWD}|g" "/var/www/sites/${DOMAIN}/html/wp-config.php"

sed -i "s|SEDPREFIX|${PREFIX}|g" "/var/www/sites/${DOMAIN}/html/wp-config.php"

sed -i "s|SEDURL|${DOMAIN}|g" "/var/www/sites/${DOMAIN}/html/wp-config.php"

# Configure Redis for WordPress

configure_redis "${DOMAIN}" "/var/www/sites/${DOMAIN}/html/wp-config.php"

# WP Salt Creation

fetch_wp_salts "/var/www/sites/${DOMAIN}/html/wp-config.php"

# Configure wp-config.php settings

configure_wpconfig_settings "${DOMAIN}" "/var/www/sites/${DOMAIN}/html/wp-config.php"

# Create robots.txt file

create_robots_txt "${DOMAIN}" "/var/www/sites/${DOMAIN}/html"

# WP File Permissions

find "/var/www/sites/${DOMAIN}" -type d -print0 | sudo xargs -0 chmod 0755

find "/var/www/sites/${DOMAIN}" -type f -print0 | sudo xargs -0 chmod 0644

chown -R www-data:www-data "/var/www/sites/${DOMAIN}"

chmod +x "/var/www/sites/${DOMAIN}/html/wp-cron.php"

chmod 600 "/var/www/sites/${DOMAIN}/html/wp-config.php"

# WP-CLI Finalizing Install

clear

echo "============================================="

echo "Finalizing ${DOMAIN} Install:"

echo "============================================="

# WP-CLI Install WordPress

cd "/var/www/sites/${DOMAIN}/html"

# Validate WordPress admin credentials before install

if [[ -z "${WP_ADMIN_USERNAME}" || -z "${WP_ADMIN_PASSWORD}" || -z "${WP_ADMIN_EMAIL}" ]]; then

echo "Error: WP admin credentials must not be empty (WP_ADMIN_USERNAME, WP_ADMIN_PASSWORD, WP_ADMIN_EMAIL)." >&2

exit 1

fi

# Username: 3-60 chars, must start with alphanumeric, letters/numbers/underscore/dot/hyphen

# Use explicit length checks for clarity and maintainability, then validate allowed characters.

if [[ ${#WP_ADMIN_USERNAME} -lt ${MIN_WP_ADMIN_USERNAME_LENGTH} || ${#WP_ADMIN_USERNAME} -gt ${MAX_WP_ADMIN_USERNAME_LENGTH} ]]; then

echo "Error: WP_ADMIN_USERNAME must be between ${MIN_WP_ADMIN_USERNAME_LENGTH} and ${MAX_WP_ADMIN_USERNAME_LENGTH} characters long." >&2

exit 1

fi

if [[ ! "${WP_ADMIN_USERNAME}" =~ ^[A-Za-z0-9][A-Za-z0-9_.-]*$ ]]; then

echo "Error: WP_ADMIN_USERNAME is invalid. Use letters, numbers, underscore, dot, or hyphen, and start with a letter or number." >&2

exit 1

fi

# Email: basic format validation (practical, non-RFC-complete).

# Accepts common addresses like [email protected] and [email protected].

EMAIL_REGEX='^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}$'

if [[ ! "${WP_ADMIN_EMAIL}" =~ ${EMAIL_REGEX} ]]; then

echo "Error: WP_ADMIN_EMAIL is not a valid email address format." >&2

exit 1

fi

# Password: minimum complexity requirements

if [[ ${#WP_ADMIN_PASSWORD} -lt ${MIN_WP_ADMIN_PASSWORD_LENGTH} ]] || \

[[ ! "${WP_ADMIN_PASSWORD}" =~ [A-Z] ]] || \

[[ ! "${WP_ADMIN_PASSWORD}" =~ [a-z] ]] || \

[[ ! "${WP_ADMIN_PASSWORD}" =~ [0-9] ]] || \

[[ ! "${WP_ADMIN_PASSWORD}" =~ [^A-Za-z0-9] ]]; then

echo "Error: WP_ADMIN_PASSWORD must be at least ${MIN_WP_ADMIN_PASSWORD_LENGTH} characters and include uppercase, lowercase, number, and special character." >&2

exit 1

fi

wp core install --admin_user="${WP_ADMIN_USERNAME}" --admin_password="${WP_ADMIN_PASSWORD}" --admin_email="${WP_ADMIN_EMAIL}" --url="https://${DOMAIN}" --title='New Site' --skip-email --allow-root

# Install and activate required WordPress plugins

install_required_wp_plugins

# Install extra WordPress plugins if enabled

if [[ "${INSTALL_EXTRA_WP_PLUGINS}" == "1" ]]; then

install_extra_wp_plugins

else

echo "Skipping extra WordPress plugins installation (disabled in config)..."

fi

# Install EngineScript custom plugins if enabled

install_enginescript_custom_plugins "${DOMAIN}"

# Clear WordPress caches, transients, and rewrite rules

clear_wordpress_caches

# Enable Redis Cache via WP-CLI

if wp plugin is-active redis-cache --allow-root; then

echo "Enabling Redis object cache..."

wp redis enable --allow-root

else

echo "Warning: Redis Cache plugin not active. Skipping 'wp redis enable'."

fi

# WP-CLI set permalink structure for FastCGI Cache

wp option get permalink_structure --allow-root

wp option update permalink_structure '/%category%/%postname%/' --allow-root

flush_wordpress_rewrites

# Setting Permissions Again

# For whatever reason, using WP-CLI to install plugins with --allow-root reassigns

# the ownership of the /uploads, /upgrade, and plugin directories to root:root.

cd "/var/www/sites/${DOMAIN}"

chown -R www-data:www-data "/var/www/sites/${DOMAIN}"

chmod +x "/var/www/sites/${DOMAIN}/html/wp-cron.php"

find "/var/www/sites/${DOMAIN}" -type d -print0 | sudo xargs -0 chmod 0755

find "/var/www/sites/${DOMAIN}" -type f -print0 | sudo xargs -0 chmod 0644

chmod 600 "/var/www/sites/${DOMAIN}/html/wp-config.php"

clear

# Perform site backup

perform_site_backup "${DOMAIN}" "/var/www/sites/${DOMAIN}/html"

# Display final credentials summary

display_credentials_summary "${DOMAIN}" "${DB}" "${PREFIX}" "${USR}" "${PSWD}"

#----------------------------------------------------------------------------------

# Non-WordPress Installation Path (Placeholder Page)

#----------------------------------------------------------------------------------

echo "Installing placeholder page for ${DOMAIN}..."

# Install placeholder page

cp -f /usr/local/bin/enginescript/config/var/www/placeholder/index.html "/var/www/sites/${DOMAIN}/html/index.html"

sed -i "s|YOURDOMAIN|${DOMAIN}|g" "/var/www/sites/${DOMAIN}/html/index.html"

# Set file permissions

find "/var/www/sites/${DOMAIN}" -type d -print0 | sudo xargs -0 chmod 0755

find "/var/www/sites/${DOMAIN}" -type f -print0 | sudo xargs -0 chmod 0644

chown -R www-data:www-data "/var/www/sites/${DOMAIN}"

# Backup nginx vhost and SSL keys

BACKUP_DATE_HOUR=$(date +%m-%d-%Y-%H)

gzip -cf "/etc/nginx/sites-enabled/${DOMAIN}.conf" > "/home/EngineScript/site-backups/${DOMAIN}/nginx/${BACKUP_DATE_HOUR}-nginx-vhost.conf.gz"

tar -zcf "/home/EngineScript/site-backups/${DOMAIN}/ssl-keys/${BACKUP_DATE_HOUR}-ssl-keys.gz" "/etc/nginx/ssl/${DOMAIN}"

clear

echo ""

echo "-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-"

echo "|${BOLD} Domain Summary (No WordPress)${NORMAL} |"

echo "-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-"

echo ""

echo "${BOLD}URL:${NORMAL} ${DOMAIN}"

echo ""

echo "Site root: /var/www/sites/${DOMAIN}/html"

echo "Nginx vhost: /etc/nginx/sites-enabled/${DOMAIN}.conf"

echo "SSL certificates: /etc/nginx/ssl/${DOMAIN}/"

echo "Backups: /home/EngineScript/site-backups/${DOMAIN}/"

echo ""

echo "A placeholder page has been installed. Replace"

echo "/var/www/sites/${DOMAIN}/html/index.html with your own content."

echo "-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-"

echo ""

sleep 3

/usr/local/bin/enginescript/scripts/functions/alias/alias-restart.sh

echo ""

echo "============================================================="

echo ""

echo " Domain setup completed."

echo ""

echo " Your domain should be available now at:"

echo " https://${DOMAIN}"

echo ""

echo " Returning to main menu in 5 seconds."

echo ""

echo "============================================================="

echo ""

sleep 5