main.sh

#!/bin/bash

# DEBUG: Exit immediately if any failures
# set -e

# DEBUG: Output each command as they are executed, for more visibility
# set -x

# Set temp filepath names
INSTALLATION_OUTPUT_FILEPATH=output.txt
PRIVATE_KEY_FILENAME=private.pem

touch $INSTALLATION_OUTPUT_FILEPATH

# Remove temp files on exit
trap "rm -f $INSTALLATION_OUTPUT_FILEPATH" EXIT
trap "rm -f $PRIVATE_KEY_FILENAME" EXIT

# Default values
AVAILABILITY_ZONE=ap-northeast-2a
DELETE_INSTANCES=1
RAND=$(openssl rand -hex 16 | tr -d '\n') # Generate random string for instance name
INSTANCE_NAME="Outline-Server-$RAND" # Assign default name

# If `env.sh` file exists, then run it on bash
if [ -f env.sh ]; then
  echo "Loading env variables from local env.sh file"
  source env.sh
fi

# Check if env variables are loaded, either locally or from GitHub secrets, or other places. If not, exit with code 1
if [ -z "$LIGHTSAIL_PRIVATE_KEY_BASE64" ]; then
  echo $LIGHTSAIL_PRIVATE_KEY_BASE64
  echo "LIGHTSAIL_PRIVATE_KEY_BASE64 is not set"
  exit 1
fi

# Get private key from env and save locally
echo $LIGHTSAIL_PRIVATE_KEY_BASE64 | base64 --decode > $PRIVATE_KEY_FILENAME
chmod 400 $PRIVATE_KEY_FILENAME

# Check that the private key file exists
if [ ! -f $PRIVATE_KEY_FILENAME ]; then
  echo "Private key file does not exist"
  exit 1
fi

# Check that the private key file contains a private key
if ! grep -q "PRIVATE KEY" "$PRIVATE_KEY_FILENAME"; then
  echo "Private key file does not contain a private key"
  exit 1
fi

# Get optional arguments
while [[ $# -gt 0 ]]
do
  key="$1"

  case $key in

    --name)
    # Name of server
    INSTANCE_NAME="$2"
    shift # past argument
    shift # past value
    ;;

    --zone)
    # Set the availability zone of the server
    AVAILABILITY_ZONE="$2"
    shift # past argument
    shift # past value
    ;;

    --verbose)
    # Turn on logging
    set -x
    shift # past argument
    ;;

    --do-not-delete)
    # Do not automatically delete instances after successfully creating servers
    DELETE_INSTANCES=0
    shift # past argument
    ;;

    *)    # unknown option
    ;;
  esac
done

# Launch a new AWS Lightsail instance
echo "Creating new AWS Lightsail instance with name $INSTANCE_NAME in availability zone $AVAILABILITY_ZONE"
echo "Delete instances? $DELETE_INSTANCES"
aws lightsail create-instances --instance-name $INSTANCE_NAME --availability-zone $AVAILABILITY_ZONE --blueprint-id "ubuntu_20_04" --bundle-id "nano_2_0"

if [ $? -ne 0 ]; then
    echo "Did not create instance successfully"
    exit 1
fi

# Wait for the instance to be launched
echo "Waiting for instance to finish launching"
while true; do
    state=$(aws lightsail get-instance --instance-name $INSTANCE_NAME | jq -r '.instance.state.name')
    if [ "$state" == "running" ]; then
        break
    fi
    echo "State: $state"
    sleep 5
done

# Get the public IP address of the instance
echo "Getting public IP address of instance"
instance_ip=$(aws lightsail get-instance --instance-name $INSTANCE_NAME | jq -r '.instance.publicIpAddress')
echo $instance_ip

# Open the necessary ports in the instance's firewall
echo "Opening necessary ports on the instance"
aws lightsail open-instance-public-ports --instance-name $INSTANCE_NAME --port-info fromPort=0,protocol=all,toPort=65535

# Set the maximum number of attempts
max_attempts=5

# Set a counter variable to track the number of attempts
attempts=0

# Attempt to connect to the server in a loop
echo "Attempting to ssh into the server"
while [ $attempts -lt $max_attempts ]; do
  # Connect to the instance and run the remote-script, and save the output to `INSTALLATION_OUTPUT_FILEPATH`
  ssh -o StrictHostKeyChecking=no -i $PRIVATE_KEY_FILENAME ubuntu@$instance_ip 'bash -s' < ./scripts/remote-script.sh > $INSTALLATION_OUTPUT_FILEPATH
  if [ $? -eq 0 ]; then
    # The connection succeeded, so break out of the loop
    break
  else
    # The connection failed, so increment the attempts counter and try again
    attempts=$((attempts+1))
    echo "Failed attempt #$attempts"
    sleep 10
  fi
done

# Exit if 
if [ $attempts -eq $max_attempts ]; then
    echo "Could not connect to instance"
    exit 1
fi

# Pull the connection API out of the INSTALLATION_OUTPUT_FILEPATH
echo "Getting Outline server API URL"
apiURL=$(cat $INSTALLATION_OUTPUT_FILEPATH | sed -n 's/.*"\(https:\/\/[^"]*\)".*/\1/p')
echo $apiURL

# Reset `attempts` variable back to 0
attempts=0

# Attempt to make curl request
echo "Attempting to get access keys"
while [ $attempts -lt $max_attempts ]; do
    # Get the list of access keys, and get the first access key
    ssLink=$(curl --insecure $apiURL/access-keys | jq -r '.accessKeys[0].accessUrl')
    echo $ssLink

    if [ $? -eq 0 ]; then
        # The connection succeeded, so break out of the loop
        break
    else
        # The connection failed, so increment the attempts counter and try again
        attempts=$((attempts+1))
        echo "Failed attempt #$attempts"
        sleep 1
    fi
done

# Upload the new ssLink to S3
. ./scripts/upload-sslink-to-s3.sh $ssLink

if [ $DELETE_INSTANCES -eq 1 ]; then
    # Once all setup, delete all older Lightsail instances, except for the newest one installed
    . ./scripts/delete-all-lightsail-instances-except-this.sh $INSTANCE_NAME
fi