Refactor credentials output to use heredoc syntax

ct/discourse.sh

@@ -0,0 +1,73 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://www.discourse.org/
+
+APP="Discourse"
+var_tags="${var_tags:-forum;community;discussion}"
+var_cpu="${var_cpu:-4}"
+var_ram="${var_ram:-4096}"
+var_disk="${var_disk:-20}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-no}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/discourse ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if [[ ! -f /opt/discourse/.env ]]; then
+    msg_error "No Discourse Configuration Found!"
+    exit
+  fi
+
+  msg_info "Stopping Service"
+  systemctl stop discourse
+  msg_ok "Stopped Service"
+
+  create_backup /opt/discourse/.env
+
+  msg_info "Updating Discourse"
+  PG_VERSION="16" PG_MODULES="pgvector" setup_postgresql
+  cd /opt/discourse
+  git pull origin main
+  $STD bundle install --deployment --without test development
+  $STD yarn install
+  $STD runuser -u postgres -- psql -d discourse -c "CREATE EXTENSION IF NOT EXISTS vector;"
+  $STD bundle exec rails assets:precompile
+  $STD bundle exec rails db:migrate
+  msg_ok "Updated Discourse"
+
+    restore_backup
+
+  msg_info "Starting Service"
+  systemctl start discourse
+  msg_ok "Started Service"
+  msg_ok "Updated successfully!"
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}${CL}"
+echo -e "${INFO}${YW} Credentials saved in:${CL}"
+echo -e "${TAB}/root/discourse.creds"

ct/headers/discourse

@@ -0,0 +1,6 @@
+    ____  _                                    
+   / __ \(_)_____________  __  _______________ 
+  / / / / / ___/ ___/ __ \/ / / / ___/ ___/ _ \
+ / /_/ / (__  ) /__/ /_/ / /_/ / /  (__  )  __/
+/_____/_/____/\___/\____/\__,_/_/  /____/\___/ 
+                                               

ct/headers/mastodon

@@ -1,6 +0,0 @@
-    __  ___           __            __          
-   /  |/  /___ ______/ /_____  ____/ /___  ____ 
-  / /|_/ / __ `/ ___/ __/ __ \/ __  / __ \/ __ \
- / /  / / /_/ (__  ) /_/ /_/ / /_/ / /_/ / / / /
-/_/  /_/\__,_/____/\__/\____/\__,_/\____/_/ /_/ 
-                                                

ct/mastodon.sh

@@ -1,81 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/mastodon/mastodon
-
-APP="Mastodon"
-var_tags="${var_tags:-social;fediverse;activitypub}"
-var_cpu="${var_cpu:-4}"
-var_ram="${var_ram:-4096}"
-var_disk="${var_disk:-20}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/mastodon ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "mastodon" "mastodon/mastodon"; then
-    msg_info "Stopping Services"
-    systemctl stop mastodon-web mastodon-sidekiq mastodon-streaming
-    msg_ok "Stopped Services"
-
-    create_backup /opt/mastodon/public/system /opt/mastodon/.env.production
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "mastodon" "mastodon/mastodon" "tarball"
-    sed -i "s/config.force_ssl = true/config.force_ssl = ENV.fetch('LOCAL_HTTPS', 'false') == 'true'/" /opt/mastodon/config/environments/production.rb
-    sed -i "s/https = Rails.env.production? || ENV\['LOCAL_HTTPS'\] == 'true'/https = ENV.fetch('LOCAL_HTTPS', 'false') == 'true'/" /opt/mastodon/config/initializers/1_hosts.rb
-
-    msg_info "Installing Ruby Dependencies"
-    cd /opt/mastodon
-    export PATH="$HOME/.rbenv/shims:$HOME/.rbenv/bin:$PATH"
-    $STD bundle config set --local without 'development test'
-    $STD bundle config set --local deployment 'true'
-    $STD bundle install -j"$(nproc)"
-    msg_ok "Installed Ruby Dependencies"
-
-    msg_info "Installing Node.js Dependencies"
-    $STD yarn install
-    msg_ok "Installed Node.js Dependencies"
-
-    restore_backup
-
-    msg_info "Running Database Migrations"
-    RAILS_ENV=production $STD bundle exec rails db:migrate
-    msg_ok "Ran Database Migrations"
-
-    msg_info "Precompiling Assets"
-    RAILS_ENV=production SECRET_KEY_BASE_DUMMY=1 $STD bundle exec rails assets:precompile
-    msg_ok "Precompiled Assets"
-
-    msg_info "Starting Services"
-    systemctl start mastodon-web mastodon-sidekiq mastodon-streaming
-    msg_ok "Started Services"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}${CL}"

install/discourse-install.sh

@@ -0,0 +1,220 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://www.discourse.org/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  build-essential \
+  git \
+  libssl-dev \
+  libreadline-dev \
+  zlib1g-dev \
+  libyaml-dev \
+  imagemagick \
+  gsfonts \
+  brotli \
+  nginx \
+  redis-server
+msg_ok "Installed Dependencies"
+
+PG_VERSION="17" PG_MODULES="pgvector" setup_postgresql
+NODE_VERSION="24" setup_nodejs
+RUBY_VERSION="3.4.4" setup_ruby
+
+msg_info "Configuring PostgreSQL for Discourse"
+DISCOURSE_DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
+PG_HBA=$(find /etc/postgresql -name pg_hba.conf 2>/dev/null | head -n1)
+sed -i 's/^local\s\+all\s\+all\s\+peer$/local   all             all                                     md5/' "$PG_HBA"
+$STD systemctl restart postgresql
+PG_DB_NAME="discourse" PG_DB_USER="discourse" PG_DB_PASS="$DISCOURSE_DB_PASS" PG_DB_EXTENSIONS="vector" setup_postgresql_db
+msg_ok "Configured PostgreSQL for Discourse"
+
+msg_info "Configuring Discourse"
+DISCOURSE_SECRET_KEY=$(openssl rand -hex 64)
+$STD git clone --depth 1 https://github.com/discourse/discourse.git /opt/discourse
+cd /opt/discourse
+cat <<EOF >/opt/discourse/.env
+RAILS_ENV=production
+RAILS_LOG_TO_STDOUT=true
+RAILS_SERVE_STATIC_FILES=true
+SECRET_KEY_BASE=${DISCOURSE_SECRET_KEY}
+DISCOURSE_DB_HOST=/var/run/postgresql
+DISCOURSE_DB_PORT=5432
+DISCOURSE_DB_NAME=discourse
+DISCOURSE_DB_USERNAME=discourse
+DISCOURSE_DB_PASSWORD=${DISCOURSE_DB_PASS}
+DISCOURSE_REDIS_URL=redis://localhost:6379
+DISCOURSE_DEVELOPER_EMAILS=admin@discourse.local
+DISCOURSE_HOSTNAME=${LOCAL_IP}
+DISCOURSE_SMTP_ADDRESS=localhost
+DISCOURSE_SMTP_PORT=25
+DISCOURSE_SMTP_AUTHENTICATION=none
+DISCOURSE_NOTIFICATION_EMAIL=noreply@${LOCAL_IP}
+DISCOURSE_SKIP_NEW_ACCOUNT_EMAIL=true
+APP_ROOT=/opt/discourse
+EOF
+
+mkdir -p /opt/discourse/tmp/sockets /opt/discourse/tmp/pids /opt/discourse/log
+chown -R root:root /opt/discourse
+chmod 755 /opt/discourse
+msg_ok "Configured Discourse"
+
+msg_info "Installing Discourse Dependencies"
+$STD systemctl enable --now redis-server
+cd /opt/discourse
+export PATH="$HOME/.rbenv/bin:$HOME/.rbenv/shims:$PATH"
+eval "$(rbenv init - bash)" 2>/dev/null || true
+export RAILS_ENV=production
+export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
+$STD corepack enable
+$STD bundle config set --local deployment true
+$STD bundle config set --local without 'test development'
+$STD bundle install
+$STD pnpm install
+msg_ok "Installed Discourse Dependencies"
+
+msg_info "Setting Up Database"
+cd /opt/discourse
+export PATH="$HOME/.rbenv/bin:$HOME/.rbenv/shims:$PATH"
+eval "$(rbenv init - bash)" 2>/dev/null || true
+export RAILS_ENV=production
+set -a
+source /opt/discourse/.env
+set +a
+$STD bundle exec rails db:migrate
+$STD bundle exec rails db:seed
+msg_ok "Set Up Database"
+
+msg_info "Creating Admin Account"
+ADMIN_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c16)
+$STD bundle exec rails runner "
+user = User.new(email: 'admin@discourse.local', username: 'admin', password: '${ADMIN_PASS}')
+user.active = true
+user.admin = true
+user.approved = true
+user.save!(validate: false)
+user.activate
+user.grant_admin!
+user.change_trust_level!(TrustLevel[4])
+SiteSetting.has_login_hint = false
+SiteSetting.wizard_enabled = false
+"
+cat <<EOF >~/discourse.creds
+  Discourse Credentials
+  Admin Username: admin
+  Admin Email: admin@discourse.local
+  Admin Password: ${ADMIN_PASS}
+  Database Password: ${DISCOURSE_DB_PASS}
+EOF
+msg_ok "Created Admin Account"
+
+msg_info "Building Discourse Assets"
+cd /opt/discourse
+export PATH="$HOME/.rbenv/bin:$HOME/.rbenv/shims:$PATH"
+eval "$(rbenv init - bash)" 2>/dev/null || true
+export RAILS_ENV=production
+set -a && source /opt/discourse/.env && set +a
+$STD bundle exec rails assets:precompile
+msg_ok "Built Discourse Assets"
+
+msg_info "Creating Services"
+cat <<EOF >/etc/systemd/system/discourse.service
+[Unit]
+Description=Discourse Forum
+After=network.target postgresql.service redis-server.service
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/discourse
+EnvironmentFile=/opt/discourse/.env
+Environment=PATH=/root/.rbenv/shims:/root/.rbenv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+ExecStart=/root/.rbenv/shims/bundle exec pitchfork -c config/pitchfork.conf.rb
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+cat <<EOF >/etc/systemd/system/discourse-sidekiq.service
+[Unit]
+Description=Discourse Sidekiq
+After=network.target postgresql.service redis-server.service
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/discourse
+EnvironmentFile=/opt/discourse/.env
+Environment=PATH=/root/.rbenv/shims:/root/.rbenv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+ExecStart=/root/.rbenv/shims/bundle exec sidekiq -q critical -q default -q low -q ultra_low
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now discourse discourse-sidekiq
+msg_ok "Created Services"
+
+msg_info "Configuring Nginx"
+cat <<EOF >/etc/nginx/sites-available/discourse
+server {
+  listen 80 default_server;
+  server_name _;
+  root /opt/discourse/public;
+
+  client_max_body_size 100M;
+  proxy_busy_buffers_size 512k;
+  proxy_buffers 4 512k;
+
+  location /assets/ {
+    gzip_static on;
+    expires max;
+    add_header Cache-Control public,immutable;
+  }
+
+  location /uploads/ {
+    expires 1h;
+  }
+
+  location / {
+    try_files \$uri @discourse;
+  }
+
+  location @discourse {
+    proxy_pass http://127.0.0.1:3000;
+    proxy_http_version 1.1;
+    proxy_set_header Upgrade \$http_upgrade;
+    proxy_set_header Connection "upgrade";
+    proxy_set_header Host \$host;
+    proxy_set_header X-Real-IP \$remote_addr;
+    proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto \$scheme;
+    proxy_set_header X-Accel-Mapping /opt/discourse/public/=/downloads/;
+  }
+}
+EOF
+
+ln -sf /etc/nginx/sites-available/discourse /etc/nginx/sites-enabled/discourse
+rm -f /etc/nginx/sites-enabled/default
+$STD nginx -t
+$STD systemctl enable --now nginx
+$STD systemctl reload nginx
+msg_ok "Configured Nginx"
+
+motd_ssh
+customize
+cleanup_lxc

install/mastodon-install.sh

@@ -1,275 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/mastodon/mastodon
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  git \
-  imagemagick \
-  libvips-tools \
-  libpq-dev \
-  libxslt1-dev \
-  file \
-  protobuf-compiler \
-  pkg-config \
-  autoconf \
-  bison \
-  build-essential \
-  libssl-dev \
-  libyaml-dev \
-  libreadline-dev \
-  zlib1g-dev \
-  libffi-dev \
-  libgdbm-dev \
-  libidn-dev \
-  libicu-dev \
-  libjemalloc-dev \
-  libjemalloc2 \
-  redis-server \
-  nginx
-msg_ok "Installed Dependencies"
-
-setup_ffmpeg
-NODE_VERSION="24" NODE_MODULE="corepack" setup_nodejs
-$STD corepack enable
-
-PG_VERSION="17" setup_postgresql
-PG_DB_NAME="mastodon_production" PG_DB_USER="mastodon" PG_DB_SKIP_ALTER_ROLE="true" setup_postgresql_db
-$STD sudo -u postgres psql -c "ALTER USER mastodon CREATEDB;"
-
-RUBY_VERSION="4.0.5" RUBY_INSTALL_RAILS="false" setup_ruby
-export PATH="$HOME/.rbenv/shims:$HOME/.rbenv/bin:$PATH"
-
-fetch_and_deploy_gh_release "mastodon" "mastodon/mastodon" "tarball"
-sed -i "s/config.force_ssl = true/config.force_ssl = ENV.fetch('LOCAL_HTTPS', 'false') == 'true'/" /opt/mastodon/config/environments/production.rb
-sed -i "s/https = Rails.env.production? || ENV\['LOCAL_HTTPS'\] == 'true'/https = ENV.fetch('LOCAL_HTTPS', 'false') == 'true'/" /opt/mastodon/config/initializers/1_hosts.rb
-
-msg_info "Installing Ruby Dependencies"
-cd /opt/mastodon
-$STD bundle config set --local without 'development test'
-$STD bundle config set --local deployment 'true'
-$STD bundle install -j"$(nproc)"
-msg_ok "Installed Ruby Dependencies"
-
-msg_info "Installing Node.js Dependencies"
-$STD yarn install
-msg_ok "Installed Node.js Dependencies"
-
-msg_info "Configuring Mastodon"
-SECRET_KEY_BASE=$(RAILS_ENV=production bundle exec rails secret)
-OTP_SECRET=$(RAILS_ENV=production bundle exec rails secret)
-
-VAPID_OUTPUT=$(RAILS_ENV=production bundle exec rails mastodon:webpush:generate_vapid_key 2>/dev/null)
-VAPID_PRIVATE_KEY=$(echo "$VAPID_OUTPUT" | grep "^VAPID_PRIVATE_KEY=" | cut -d= -f2-)
-VAPID_PUBLIC_KEY=$(echo "$VAPID_OUTPUT" | grep "^VAPID_PUBLIC_KEY=" | cut -d= -f2-)
-
-ENCRYPT_OUTPUT=$(RAILS_ENV=production bundle exec rails db:encryption:init 2>/dev/null)
-AR_DET_KEY=$(echo "$ENCRYPT_OUTPUT" | grep "^ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY=" | cut -d= -f2-)
-AR_SALT=$(echo "$ENCRYPT_OUTPUT" | grep "^ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT=" | cut -d= -f2-)
-AR_PRIMARY=$(echo "$ENCRYPT_OUTPUT" | grep "^ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY=" | cut -d= -f2-)
-
-mkdir -p /opt/mastodon/public/system
-cat <<EOF >/opt/mastodon/.env.production
-LOCAL_DOMAIN=${LOCAL_IP}
-LOCAL_HTTPS=false
-REDIS_HOST=127.0.0.1
-REDIS_PORT=6379
-DB_HOST=127.0.0.1
-DB_USER=mastodon
-DB_NAME=mastodon_production
-DB_PASS=${PG_DB_PASS}
-DB_PORT=5432
-RAILS_ENV=production
-NODE_ENV=production
-RAILS_SERVE_STATIC_FILES=true
-BIND=0.0.0.0
-SECRET_KEY_BASE=${SECRET_KEY_BASE}
-OTP_SECRET=${OTP_SECRET}
-VAPID_PRIVATE_KEY=${VAPID_PRIVATE_KEY}
-VAPID_PUBLIC_KEY=${VAPID_PUBLIC_KEY}
-ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY=${AR_DET_KEY}
-ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT=${AR_SALT}
-ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY=${AR_PRIMARY}
-SMTP_SERVER=
-SMTP_PORT=587
-SMTP_FROM_ADDRESS=notifications@${LOCAL_IP}
-EOF
-msg_ok "Configured Mastodon"
-
-msg_info "Setting up Database"
-RAILS_ENV=production $STD bundle exec rails db:setup
-msg_ok "Set up Database"
-
-msg_info "Precompiling Assets (Patience)"
-RAILS_ENV=production SECRET_KEY_BASE_DUMMY=1 $STD bundle exec rails assets:precompile
-msg_ok "Precompiled Assets"
-
-msg_info "Creating Admin Account"
-if ! ADMIN_OUTPUT=$(EMAIL_DOMAIN_ALLOWLIST="${LOCAL_IP}" RAILS_ENV=production bundle exec bin/tootctl accounts create admin \
-  --email "admin@${LOCAL_IP}" \
-  --confirmed \
-  --approve \
-  --role Owner); then
-  msg_error "Failed to create Mastodon admin account"
-  exit 1
-fi
-ADMIN_PASS=$(echo "$ADMIN_OUTPUT" | sed -n 's/^New password: //p')
-if [[ -z "$ADMIN_PASS" ]]; then
-  msg_error "Failed to retrieve Mastodon admin password"
-  exit 1
-fi
-RAILS_ENV=production $STD bundle exec bin/tootctl settings registrations approved
-cat <<EOF > ~/mastodon.creds
-  Mastodon Admin Credentials
-  URL:      http://${LOCAL_IP}
-  Email:    admin@${LOCAL_IP}
-  Password: ${ADMIN_PASS}
-EOF
-msg_ok "Created Admin Account"
-
-msg_info "Creating Services"
-cat <<EOF >/etc/systemd/system/mastodon-web.service
-[Unit]
-Description=mastodon-web
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/mastodon
-Environment=RAILS_ENV=production
-Environment=PORT=3000
-Environment=PATH=/root/.rbenv/shims:/root/.rbenv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
-ExecStart=/root/.rbenv/shims/bundle exec puma -C config/puma.rb
-ExecReload=/bin/kill -SIGUSR1 \$MAINPID
-TimeoutSec=15
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-cat <<EOF >/etc/systemd/system/mastodon-sidekiq.service
-[Unit]
-Description=mastodon-sidekiq
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/mastodon
-Environment=RAILS_ENV=production
-Environment=DB_POOL=25
-Environment=PATH=/root/.rbenv/shims:/root/.rbenv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
-ExecStart=/root/.rbenv/shims/bundle exec sidekiq -c 25
-TimeoutSec=15
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-cat <<EOF >/etc/systemd/system/mastodon-streaming.service
-[Unit]
-Description=mastodon-streaming
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/mastodon
-Environment=NODE_ENV=production
-Environment=PORT=4000
-ExecStart=/usr/bin/node ./streaming
-TimeoutSec=15
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now mastodon-web mastodon-sidekiq mastodon-streaming
-msg_ok "Created Services"
-
-msg_info "Configuring Nginx"
-cat <<'EOF' >/etc/nginx/sites-available/mastodon
-map $http_upgrade $connection_upgrade {
-  default upgrade;
-  ''      close;
-}
-
-upstream mastodon_web {
-  server 127.0.0.1:3000 fail_timeout=0;
-}
-
-upstream mastodon_streaming {
-  server 127.0.0.1:4000 fail_timeout=0;
-}
-
-server {
-  listen 80;
-  server_name _;
-  client_max_body_size 99m;
-  root /opt/mastodon/public;
-
-  gzip on;
-  gzip_types text/plain application/json application/javascript text/css image/svg+xml;
-
-  location / {
-    try_files $uri @proxy;
-  }
-
-  location ~ ^/assets/ {
-    add_header Cache-Control "public, max-age=2419200, must-revalidate";
-    try_files $uri =404;
-  }
-
-  location ^~ /api/v1/streaming {
-    proxy_set_header Host $host;
-    proxy_set_header X-Real-IP $remote_addr;
-    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-    proxy_set_header X-Forwarded-Proto $scheme;
-    proxy_pass http://mastodon_streaming;
-    proxy_buffering off;
-    proxy_redirect off;
-    proxy_http_version 1.1;
-    proxy_set_header Upgrade $http_upgrade;
-    proxy_set_header Connection $connection_upgrade;
-    tcp_nodelay on;
-  }
-
-  location @proxy {
-    proxy_set_header Host $host;
-    proxy_set_header X-Real-IP $remote_addr;
-    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-    proxy_set_header X-Forwarded-Proto $scheme;
-    proxy_pass http://mastodon_web;
-    proxy_buffering on;
-    proxy_redirect off;
-    proxy_http_version 1.1;
-    proxy_set_header Upgrade $http_upgrade;
-    proxy_set_header Connection $connection_upgrade;
-  }
-}
-EOF
-ln -sf /etc/nginx/sites-available/mastodon /etc/nginx/sites-enabled/mastodon
-rm -f /etc/nginx/sites-enabled/default
-$STD nginx -t
-systemctl enable -q --now redis-server
-systemctl enable -q --now nginx
-systemctl reload nginx
-msg_ok "Configured Nginx"
-
-motd_ssh
-customize
-cleanup_lxc