As a software engineer or DevOps engineer, you may frequently encounter mundane tasks, such as setting up a new cloud environment for deploying your web apps or microservices. With the following script though, you can eliminate this tedious process. Simply obtain the script, run it with bash, and you will have a complete environment with the latest stable versions of Docker, Docker Compose, and Nginx. You might wanna convert it to an Ansible playbook.

In some cases, you may get stuck due to docker and docker compose version. Let’s follow up on docker official documentation: 1 2 3 4 5 6 apt remove docker docker-engine docker.io containerd runc # purging the legacy version if exists apt install apt-transport-https ca-certificates curl gnupg-agent software-properties-common curl -fsSL https://download.docker.com/linux/ubuntu/gpg | apt-key add - apt-key fingerprint 0EBFCD88 add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable" apt update && apt install docker-ce docker-ce-cli containerd.

Deploy your Jenkins instance first. We are going to use password login for automatic deployment, note that it’s not the most secure way, but for simplicity for now. CHANGE SSH PORT - FOR DESTINATION SERVER 1 sudo vim /etc/ssh/sshd_config Find out the line #port 22 and uncomment it to change into port ${YOUR_NEW_SSH_PORT}, then reload the sshd service like so: 1 sudo systemctl restart sshd One more additional step for firewall (ufw in Ubuntu, firewall-cmd in CentOS), but we will refer to tons of materials out there, instead of mentioning it here.

Install Certbot Install snapd. Remove old version of certbot: sudo apt-get remove certbot # or sudo dnf remove certbot Install certbot: sudo snap install --classic certbot sudo ln -s /snap/bin/certbot /usr/bin/certbot Run it! sudo certbot --nginx Caution! In case you have an IP access blocking config in nginx, you need to disable it, temporarily at least. For example, imagine you have this nginx block for IP access blocking: 1 2 3 4 5 6 server { listen 80 default_server; return 444; } Then disable it like so:

One of the popular package managers for Arch Linux is “pacman”. 1 2 3 4 5 sudo pacman -Syu # Update and upgrade system packages sudo pacman -S package_name # Install a new package sudo pacman -R package_name # Remove a package sudo pacman -Rn package_name # Remove along with backup-ed config files sudo pacman -Rsu package_name # Remove along with dependencies If you do not have wget on your machine, you can install like so: