A set of bash scripts for standing up a Lucee server using nginx and Tomcat on Ubuntu. Uses the
Tomcat from the Ubuntu distribution so you can update Tomcat using apt-get update tomcat9
The master branch is now using Ubuntu 20.04 (and is currently a bit unstable). For Lucee 5 on Ubuntu 16.04 or 18.04 see the branch lucee5-ubuntu18, for Lucee 4.5 see the lucee45-ubuntu14 branch.
- You want to run nginx as your web server
- You want to update Tomcat via
apt-get
Note: when this script was first created Tomcat was part of the
mainrepository on Ubuntu, it is now part ofuniversalwhich means it is community updated. I've noticed that it is not getting updated with security patches frequently like it did when it was part ofmain. This means you will still want to keep an eye on Tomcat Security. You can use HackMyCF (made by foundeo) to help you monitor when your server needs to be updated. Even if you use the default lucee installer, you will still need to keep an eye on the version of Tomcat you are running.
- Updates Ubuntu - simply runs
apt-get updateandapt-get upgrade - Downloads Lucee - uses curl to download lucee jars from BitBucket places jars in
/opt/lucee/current/ - Installs & Configures Tomcat 8 - runs
apt-get install tomcat9updates theweb.xmlserver.xmlandcatalina.propertiesto configure Lucee servlets and mod_cfml Valve. (Tomcat/Lucee run on port 8080 by default). - JVM - in previous versions this step installed an Oracle JVM, but now we just use OpenJDK.
- Installs & Configures nginx - runs
apt-get install nginxto install nginx. Creates a web root directory. Creates alucee.configfile so you can justinclude lucee.configfor any site that uses CFML - Set Default Lucee Admin Password - uses cfconfig to set the Lucee server context password and default web context password. If environment variable ADMIN_PASSWORD exists that is used, otherwise a random password is set.
Take a look in the scripts/ subfolder to see the script for each step.
- Download this repository -
curl -Lo /root/ubuntu-nginx-lucee.tar.gz https://api.github.com/repos/foundeo/ubuntu-nginx-lucee/tarball/master - Extract repository -
tar -xzvf /root/ubuntu-nginx-lucee.tar.gz - Configuration - You can either Edit the
install.shand change any configuration options such as the Lucee Version or JVM version - or you can use environment variables (see below). - Run install.sh - make sure you are root or sudo and run
./install.shyou may need tochmod u+x install.shto give execute permissions to the script.
- The servlet definitions and mappings (located in
/etc/tomcat9/web.xml) are slimmed down, so if you need things like REST web services, flash/flex remoting support see the Railo docs for web.xml config - The
/lucee/uri is blocked in/etc/nginx/lucee.confyou must add in your ip address and restart nginx. - There is no uninstall option
- This version of the script has been tested on Ubuntu 20.04 LTS only. See the branches of this repository for older versions of Ubuntu / Lucee.
The script can be configured with the following environment variables:
LUCEE_VERSION- sets the version of Lucee that it will attempt to install (eg 5.2.4.37).JVM_MAX_HEAP_SIZE- sets the amount of memory that java / tomcat can use (eg 512m).ADMIN_PASSWORD- sets the Lucee server context password and default web context password. If variable is not defined a random password is generated and set.WHITELIST_IP- if specified this IP will be whitelisted to allow access to /lucee/LUCEE_JAR_SHA256- if specified checks the sha256sum of the the downloaded lucee.jar
By default nginx on Ubuntu looks in the folder /etc/nginx/sites-enabled/ for configuration nginx files. To setup a site create a file in that folder (another technique you can use is to create the file in /etc/nginx/sites-available/ and then create a symbolic link in sites-enabled to enable the site), for example /etc/nginx/sites-enabled/me.example.com.conf at a minimum it will look like this:
server {
listen 80;
server_name me.example.com;
root /web/me.example.com/wwwroot/;
include lucee.conf;
}
You may also want to break logging for this site out into its own file, like this:
server {
listen 80;
server_name me.example.com;
root /web/me.example.com/wwwroot/;
access_log /var/log/nginx/me.example.com.access.log;
error_log /var/log/nginx/me.example.com.error.log;
include lucee.conf;
}
If you don't need Lucee/CFML for a given site, simply omit the include lucee.conf; line, like this:
server {
listen 80;
server_name img.example.com;
root /web/img.example.com/wwwroot/;
}
Create the symbolic link in sites-enabled to enable the site:
sudo ln -s /etc/nginx/sites-available/me.example.com.conf /etc/nginx/sites-enabled/
After making changes you need to restart or reload nginx:
sudo service nginx restart
For more information on configuring nginx see the nginx Wiki
Thanks go to Booking Boss for funding the initial work on this script.
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent