wordpress-tools/install.sh

#!/bin/bash
#
# wordpress-tools
# https://git.stack-source.com/msb/wordpress-tools
# Copyright (c) 2022 Matthew Saunders Brown <matthewsaundersbrown@gmail.com>\
# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)

if [ "${EUID}" -ne 0 ]; then
  echo "You must be root to run this installer."
  exit
fi

# download & install wp-cli
curl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar
sudo mv wp-cli.phar /usr/local/bin/wp
chmod +x /usr/local/bin/wp

# configure wp-cli bash completion
cp bash_completion.d/wp-cli /etc/bash_completion.d/
chmod 644 /etc/bash_completion.d/wp-cli

# install wp user scripts
cp bin/wp-* /usr/local/bin
chmod 755 /usr/local/bin/wp-*

# install & enable wp systemd cron
cp sbin/wp-cron.sh /usr/local/sbin/
chmod 755 /usr/local/sbin/wp-cron.sh
if [[ ! -d /usr/local/lib/systemd/system ]]; then
  mkdir -p /usr/local/lib/systemd/system
fi
cp systemd/wp-cron.* /usr/local/lib/systemd/system/
chmod 644 /usr/local/lib/systemd/system/wp-cron.*
systemctl enable wp-cron.timer
systemctl start wp-cron.timer

# enable wp-security, restricts access to wordpress directories
cp apache2/conf-available/wp-secuirty.conf /etc/apache2/conf-available/wp-secuirty.conf
chmod 644 /etc/apache2/conf-available/wp-secuirty.conf
a2enconf wp-secuirty
systemctl reload apache2

# fail2ban wordpress configs
if [[ -d /etc/fail2ban/ ]]; then
  chmod 644 fail2ban/filter.d/*
  cp -a fail2ban/filter.d/* /etc/fail2ban/filter.d/
  chmod 644 fail2ban/jail.d/*
  cp -a fail2ban/jail.d/* /etc/fail2ban/jail.d/
  systemctl restart fail2ban
else
  echo "Fail2ban not installed, skipping fail2ban wordpress configs."
fi