Create install.sh script

Vagrantfile

@@ -0,0 +1,77 @@
+# -*- mode: ruby -*-
+# vi: set ft=ruby :
+
+# All Vagrant configuration is done below. The "2" in Vagrant.configure
+# configures the configuration version (we support older styles for
+# backwards compatibility). Please don't change it unless you know what
+# you're doing.
+Vagrant.configure("2") do |config|
+  # The most common configuration options are documented and commented below.
+  # For a complete reference, please see the online documentation at
+  # https://docs.vagrantup.com.
+
+  # Every Vagrant development environment requires a box. You can search for
+  # boxes at https://vagrantcloud.com/search.
+  config.vm.box = "debian/bookworm64"
+
+  # Disable automatic box update checking. If you disable this, then
+  # boxes will only be checked for updates when the user runs
+  # `vagrant box outdated`. This is not recommended.
+  # config.vm.box_check_update = false
+
+  # Create a forwarded port mapping which allows access to a specific port
+  # within the machine from a port on the host machine. In the example below,
+  # accessing "localhost:8080" will access port 80 on the guest machine.
+  # NOTE: This will enable public access to the opened port
+  config.vm.network "forwarded_port", guest: 80, host: 8080
+
+  # Create a forwarded port mapping which allows access to a specific port
+  # within the machine from a port on the host machine and only allow access
+  # via 127.0.0.1 to disable public access
+  # config.vm.network "forwarded_port", guest: 80, host: 8080, host_ip: "127.0.0.1"
+
+  # Create a private network, which allows host-only access to the machine
+  # using a specific IP.
+  # config.vm.network "private_network", ip: "192.168.33.10"
+
+  # Create a public network, which generally matched to bridged network.
+  # Bridged networks make the machine appear as another physical device on
+  # your network.
+  # config.vm.network "public_network"
+
+  # Share an additional folder to the guest VM. The first argument is
+  # the path on the host to the actual folder. The second argument is
+  # the path on the guest to mount the folder. And the optional third
+  # argument is a set of non-required options.
+  # config.vm.synced_folder "../data", "/vagrant_data"
+
+  # Disable the default share of the current code directory. Doing this
+  # provides improved isolation between the vagrant box and your host
+  # by making sure your Vagrantfile isn't accessible to the vagrant box.
+  # If you use this you may want to enable additional shared subfolders as
+  # shown above.
+  # config.vm.synced_folder ".", "/vagrant", disabled: true
+
+  # Provider-specific configuration so you can fine-tune various
+  # backing providers for Vagrant. These expose provider-specific options.
+  # Example for VirtualBox:
+  #
+  # config.vm.provider "virtualbox" do |vb|
+  #   # Display the VirtualBox GUI when booting the machine
+  #   vb.gui = true
+  #
+  #   # Customize the amount of memory on the VM:
+  #   vb.memory = "1024"
+  # end
+  #
+  # View the documentation for the provider you are using for more
+  # information on available options.
+
+  # Enable provisioning with a shell script. Additional provisioners such as
+  # Ansible, Chef, Docker, Puppet and Salt are also available. Please see the
+  # documentation for more information about their specific syntax and use.
+  # config.vm.provision "shell", inline: <<-SHELL
+  #   apt-get update
+  #   apt-get install -y apache2
+  # SHELL
+end

app.yml

@@ -0,0 +1,44 @@
+services:
+  app:
+    container_name: decidim
+    image: ${DECIDIM_IMAGE}
+    command: "bin/rails server -b 0.0.0.0"
+    volumes:
+      - ./storage:/app/storage
+    restart: always
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.app.rule=PathPrefix(`/`)"
+      - "traefik.http.routers.app.entrypoints=web"
+      - "traefik.http.services.app.loadbalancer.server.port=3000"
+    env_file:
+      - .env
+    environment:
+      - DATABASE_URL
+      - SECRET_KEY_BASE
+      - DECIDIM_FORCE_SSL=${DECIDIM_FORCE_SSL:-false}
+      - QUEUE_ADAPTER=${QUEUE_ADAPTER:-sidekiq}
+      - REDIS_URL=${REDIS_URL:-redis://redis:6379/0}
+      - WEB_CONCURRENCY=${WEB_CONCURRENCY:-2}
+      - LOG_LEVEL=${LOG_LEVEL:-info}
+      - DECIDIM_ENABLE_HTML_HEADER_SNIPPETS
+      - DECIDIM_ADMIN_PASSWORD_EXPIRATION_DAYS=${DECIDIM_ADMIN_PASSWORD_EXPIRATION_DAYS:-360}
+      - CHANGE_ACTIVE_STEP=${CHANGE_ACTIVE_STEP:-enabled}
+      - SEND_REMINDERS=${SEND_REMINDERS:-enabled}
+      - WEEKLY_NOTIFICATIONS_DIGEST=${WEEKLY_NOTIFICATIONS_DIGEST:-enabled}
+      - DAILY_NOTIFICATIONS_DIGEST=${DAILY_NOTIFICATIONS_DIGEST:-enabled}
+      - HEALTHCHECK_EXCLUDE_CHECKS=${HEALTHCHECK_EXCLUDE_CHECKS:-emailconf}
+      - SMTP_STARTTLS_AUTO=${SMTP_STARTTLS_AUTO:-true}
+      - SMTP_USERNAME
+      - SMTP_PASSWORD
+      - SMTP_ADDRESS
+      - SMTP_DOMAIN
+      - SMTP_PORT
+      - DECIDIM_MAILER_SENDER
+      - MAPS_API_KEY
+      - MAPS_PROVIDER=${MAPS_PROVIDER:-here}
+      - RACK_ATTACK_SECRET
+    depends_on:
+      - db
+      - cache
+

cache.yml

@@ -0,0 +1,11 @@
+services:
+  app:
+    depends_on:
+      - cache
+  cache:
+    image: redis
+    volumes:
+      - redis_data:/data
+    restart: always
+volumes:
+  redis_data: {}

db.yml

@@ -0,0 +1,12 @@
+services:
+  app:
+    depends_on:
+      - db
+  db:
+    image: postgres:17
+    env_file:
+      - .env
+    environment:
+      POSTGRES_USER: ${POSTGRES_USER:-decidim}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-decidim}
+      POSTGRES_DB: ${POSTGRES_DB:-decidim}

scripts/dependencies/build_env.sh

@@ -0,0 +1,102 @@
+#!/bin/bash
+set -e # exit on error
+
+BUILD_ENV_PATH="$REPOSITORY_PATH/.env"
+
+echo "───────────────────────────────────────────────"
+echo "📦 Now we need to get some information about the instance you are building."
+echo
+read -p "What are you going to name your instance? " DECIDIM_APPLICATION_NAME
+echo "The name of the instance is: $DECIDIM_APPLICATION_NAME"
+echo
+echo "Who's going to administer this instance?"
+read -p "email: " DECIDIM_SYSTEM_ADMIN_EMAIL
+read -p "name: " DECIDIM_SYSTEM_ADMIN_NAME
+echo "The administrator will be $DECIDIM_SYSTEM_ADMIN_NAME, $DECIDIM_SYSTEM_ADMIN_EMAIL"
+echo
+echo "Now we need to know how people will access this instance (e.g., decidim.example.org)"
+read -p "domain: " DECIDIM_DOMAIN
+
+echo "───────────────────────────────────────────────"
+echo "To set up the Database we also need some information"
+read -p "Do you have an external database already set up? [y/N] " yn
+
+case $yn in
+[Yy]*)
+  EXTERNAL_DATABASE=true
+  ;;
+[Nn]*)
+  EXTERNAL_DATABASE=false
+  ;;
+*)
+  echo "Please answer yes or no."
+  exit 1
+  ;;
+esac
+
+read -p "Name of the database: " DATABASE_NAME
+read -p "Database user: " DATABASE_USER
+
+if [ "$EXTERNAL_DATABASE" = true ]; then
+  read -p "Database host (ip or domain): " DATABASE_HOST
+else
+  DATABASE_HOST="db"
+fi
+
+read -p "Database password: " DATABASE_PASSWORD
+
+DATABASE_URL="postgres://$DATABASE_USER:$DATABASE_PASSWORD@$DATABASE_HOST/$DATABASE_NAME"
+
+echo "───────────────────────────────────────────────"
+echo "Now we have to set your SMTP server."
+echo "You can check the documentation to know what to do here."
+read -p "SMTP_USERNAME: " SMTP_USERNAME
+read -p "SMTP_PASSWORD: " SMTP_PASSWORD
+read -p "SMTP_ADDRESS: " SMTP_ADDRESS
+read -p "SMTP_DOMAIN: " SMTP_DOMAIN
+
+echo "───────────────────────────────────────────────"
+echo "To start, we are going to store assets locally"
+read -p "Do you have an external bucket [y/N] " yn
+STORAGE="local"
+
+echo "───────────────────────────────────────────────"
+echo "To be able to have the maps working inside the Decidim application,"
+echo "is necessary to configure a maps provider."
+read -p "Maps provider: " MAPS_PROVIDER
+read -p "Maps API KEY: " MAPS_API_KEY
+
+if [ -f .env ]; then
+  echo "❌ Failing: .env file already exists."
+  exit 1
+else
+  echo "✅ Writing the environment variables to .env file..."
+
+  SECRET_KEY_BASE=$(openssl rand -hex 64)
+
+  cat >.env <<EOF
+DECIDIM_IMAGE=$DECIDIM_IMAGE
+DECIDIM_APPLICATION_NAME="$DECIDIM_APPLICATION_NAME"
+DECIDIM_SYSTEM_ADMIN_EMAIL="$DECIDIM_SYSTEM_ADMIN_EMAIL"
+DECIDIM_SYSTEM_ADMIN_NAME="$DECIDIM_SYSTEM_ADMIN_NAME"
+DECIDIM_DOMAIN="$DECIDIM_DOMAIN"
+
+SECRET_KEY_BASE=$SECRET_KEY_BASE
+
+POSTGRES_DB="$DATABASE_NAME"
+POSTGRES_NAME="$DATABASE_USER"
+DATABASE_HOST="$DATABASE_HOST"
+POSTGRES_PASSWORD="$DATABASE_PASSWORD"
+DATABASE_URL="$DATABASE_URL"
+
+SMTP_USERNAME="$SMTP_USERNAME"
+SMTP_PASSWORD="$SMTP_PASSWORD"
+SMTP_ADDRESS="$SMTP_ADDRESS"
+SMTP_DOMAIN="$SMTP_DOMAIN"
+
+MAPS_PROVIDER="$MAPS_PROVIDER"
+MAPS_API_KEY="$MAPS_API_KEY"
+EOF
+fi
+
+echo "✅ All environment variables saved to .env successfully!"

scripts/dependencies/check_docker.sh

@@ -0,0 +1,24 @@
+#!/bin/bash
+
+if ! command -v docker; then
+  echo "Installing docker..."
+
+  # Add Docker's official GPG key:
+  sudo apt update && sudo apt upgrade -y
+  sudo apt-get install -y ca-certificates curl
+  sudo install -m 0755 -d /etc/apt/keyrings
+  sudo curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc
+  sudo chmod a+r /etc/apt/keyrings/docker.asc
+
+  # Add the repository to Apt sources:
+  echo \
+    "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/debian \
+  $(. /etc/os-release && echo "$VERSION_CODENAME") stable" |
+    sudo tee /etc/apt/sources.list.d/docker.list >/dev/null
+  sudo apt-get update
+  sudo apt-get install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin
+else
+  echo "Docker is installed $(docker --version)"
+fi
+
+sudo usermod -aG docker ${USER}

scripts/dependencies/decidim_version.sh

@@ -0,0 +1,17 @@
+echo "───────────────────────────────────────────────"
+echo "📦 What version of Decidim do you want to use?"
+echo
+echo "The default image is: decidim/decidim:latest"
+echo
+echo "You can also specify a custom image, for example:"
+echo "  • decidim/decidim:0.30"
+echo "  • ghcr.io/decidim/decidim:0.28"
+echo "  • ghcr.io/my-org/custom-decidim:1.0.0"
+echo
+read -p "👉 Enter the Decidim image (or press Enter to use the default): " DECIDIM_IMAGE
+
+# Use default if none entered
+DECIDIM_IMAGE=${DECIDIM_IMAGE:-decidim/decidim:latest}
+
+echo "✅ Using Decidim image: $DECIDIM_IMAGE"
+echo "───────────────────────────────────────────────"

scripts/dependencies/open_ports.sh

@@ -0,0 +1,17 @@
+echo "───────────────────────────────────────────────"
+echo "Now we are going to open the necessary ports for Decidim to work."
+echo
+echo "To handle the SSL certificate we will have to open the port 80 and the port 443"
+echo
+
+if ! command -v ufw; then
+  echo "UFW nos intalled. We are going to install it to allow openning ports 80 and 443 on this machine."
+  sudo apt install ufw
+fi
+
+sudo ufw allow 22
+sudo ufw allow 80
+sudo ufw allow 443
+sudo ufw enable
+
+echo "───────────────────────────────────────────────"

scripts/dependencies/os_version.sh

@@ -0,0 +1,9 @@
+#!/bin/bash
+
+if [ ! -f /etc/os-release ]; then
+  echo "Error: Unable to determine OS. /etc/os-release file not found."
+  echo "Installation stopped."
+  exit 1
+fi
+
+cat /etc/os-release

scripts/entrypoint.sh

@@ -6,9 +6,9 @@ USER_GID=$(stat -c %g /code/Gemfile)
 export USER_UID
 export USER_GID
 
-usermod -u "$USER_UID" decidim 2> /dev/null
-groupmod -g "$USER_GID" decidim 2> /dev/null
-usermod -g "$USER_GID" decidim 2> /dev/null
+usermod -u "$USER_UID" decidim 2>/dev/null
+groupmod -g "$USER_GID" decidim 2>/dev/null
+usermod -g "$USER_GID" decidim 2>/dev/null
 
 chown -R -h "$USER_UID" "$BUNDLE_PATH"
 chgrp -R -h "$USER_GID" "$BUNDLE_PATH"