Source Code (v2 - Updated)

We believe in radical transparency. Below is the full source code for caddyscript v2.0 (Nov 2025).

It creates sites, manages users, handles backups, and performs clean uninstalls.

What the script actually does (high-level)

1. Checks you're root + running Debian 13
2. Installs Caddy from official repo (auto-HTTPS + HTTP/3)
3. Adds Sury PHP 8.3 + FPM with modern extensions
4. Installs & secures MariaDB
5. Sets up UFW (22,80,443 only), Fail2Ban, unattended-upgrades
6. Creates per-site PHP-FPM pool + Caddyfile snippet
7. Downloads & configures ClassicPress (or static site)
8. Enables security headers, Zstd, immutable caching
9. Optionally backs up with --backup tar/rsync
10. Full uninstall with --uninstall

#!/usr/bin/env bash # ============================================================================= # caddyscript v2.0 – 2025 # One-command Debian 13 + Caddy + PHP 8.3 + ClassicPress / Static / PHP sites # Fully idempotent, secure-by-default, tiny footprint # ============================================================================= set -euo pipefail # ============================================================================= # CONFIGURATION # ============================================================================= WEBROOT_BASE="/var/www" PHP_VERSION="8.3" PHP_FPM_SERVICE="php${PHP_VERSION}-fpm" PHP_FPM_SOCKET="/run/php/php${PHP_VERSION}-fpm.sock" BACKUP_BASE="/root/backups" CADDY_SITES="/etc/caddy/sites" CLASSICPRESS_URL="https://github.com/ClassicPress/ClassicPress/releases/latest/download/ClassicPress-release.zip" # ============================================================================= # UTILS # ============================================================================= require_root() { [[ "$(id -u)" -eq 0 ]] || { echo "Error: Must run as root."; exit 1; }; } confirm() { read -rp "$1 [y/N]: " ans; [[ "$ans" =~ ^[Yy]$ ]]; } ensure_package() { dpkg -s "$1" &>/dev/null || { echo "Installing $1..."; DEBIAN_FRONTEND=noninteractive apt-get install -y "$1"; }; } # ============================================================================= # CORE FUNCTIONS # ============================================================================= install_base_stack() { echo "Installing caddyscript base stack on Debian 13..." apt-get update ensure_package curl gnupg ca-certificates lsb-release unzip ufw fail2ban unattended-upgrades # Unattended upgrades (security only) echo "unattended-upgrades unattended-upgrades/enable-auto-updates boolean true" | debconf-set-selections dpkg-reconfigure -f noninteractive unattended-upgrades # MariaDB ensure_package mariadb-server mysql -e "DELETE FROM mysql.user WHERE User=''; DROP USER IF EXISTS 'root'@'%'; FLUSH PRIVILEGES;" # PHP 8.3 + extensions (Sury repo) if ! grep -q sury /etc/apt/sources.list.d/php.list; then curl -sSL https://packages.sury.org/php/apt.gpg | apt-key add - echo "deb https://packages.sury.org/php/ $(lsb_release -sc) main" > /etc/apt/sources.list.d/php.list apt-get update fi ensure_package php${PHP_VERSION}-fpm php${PHP_VERSION}-{mysql,curl,gd,mbstring,xml,zip,intl} sed -i 's/;cgi.fix_pathinfo=1/cgi.fix_pathinfo=0/' /etc/php/${PHP_VERSION}/fpm/php.ini # Caddy if ! command -v caddy >/dev/null; then curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/gpg.key' | gpg --dearmor -o /usr/share/keyrings/caddy-stable-archive-keyring.gpg curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/debian.deb.txt' | tee /etc/apt/sources.list.d/caddy-stable.list apt-get update ensure_package caddy fi # Firewall ufw allow 22/tcp comment 'SSH' ufw allow 80/tcp comment 'HTTP' ufw allow 443/tcp comment 'HTTPS' ufw --force enable mkdir -p "$CADDY_SITES" "$BACKUP_BASE" systemctl enable --now caddy "${PHP_FPM_SERVICE}" mariadb echo "Base stack installed." } create_site() { local domain=$1 type=$2 staging_src=${3:-} local root="${WEBROOT_BASE}/${domain}/htdocs" local logs="${WEBROOT_BASE}/${domain}/logs" mkdir -p "$root" "$logs" case "$type" in classicpress) local db=$(echo "${domain//./_}" | cut -c1-16) local user="u_${RANDOM:0:4}" local pass=$(openssl rand -base64 32) mysql -e "CREATE DATABASE IF NOT EXISTS \`$db\`; CREATE USER IF NOT EXISTS '$user'@'localhost' IDENTIFIED BY '$pass'; GRANT ALL ON \`$db\`.* TO '$user'@'localhost';" cd "$root" curl -L "$CLASSICPRESS_URL" -o cp.zip && unzip -q cp.zip && rm cp.zip [[ -d ClassicPress ]] && mv ClassicPress/* . && rmdir ClassicPress cp wp-config-sample.php wp-config.php sed -i "s/database_name_here/$db/; s/username_here/$user/; s/password_here/$pass/" wp-config.php curl -s https://api.wordpress.org/secret-key/1.1/salt/ >> wp-config.php ;; static) cat > "$root/index.html" <<EOF <!DOCTYPE html><html><head><title>$domain</title></head> <body style="font-family:system-ui;text-align:center;padding:5rem"> <h1>$domain</h1><p>Static site powered by <strong>caddyscript</strong></p> </body></html> EOF ;; php) echo "<?php phpinfo(); ?>" > "$root/index.php" ;; *) echo "Invalid type"; return 1 ;; esac # PHP-FPM pool (non-static only) [[ "$type" != "static" ]] && cat > "/etc/php/${PHP_VERSION}/fpm/pool.d/${domain}.conf" <<EOF [${domain}] user = www-data group = www-data listen = /run/php/${domain}.sock listen.owner = www-data pm = ondemand pm.max_children = 10 EOF # Caddy config cat > "${CADDY_SITES}/${domain}.caddy" <<EOF ${domain} { root * ${root} $( [[ "$type" != "static" ]] && echo "php_fastcgi unix//run/php/${domain}.sock || php_fastcgi unix//run/php/php${PHP_VERSION}-fpm.sock" ) file_server encode gzip zstd header { Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" X-Frame-Options "SAMEORIGIN" X-Content-Type-Options "nosniff" } @assets path *.css *.js *.png *.jpg *.jpeg *.gif *.svg *.ico *.webp *.avif *.woff* *.ttf header @assets Cache-Control "public, max-age=2592000, immutable" log { output file ${logs}/access.log } } EOF chown -R www-data:www-data "${WEBROOT_BASE}/${domain}" systemctl reload caddy "${PHP_FPM_SERVICE}" echo "Site $domain ($type) created. Visit https://$domain" } delete_site() { local domain=$1 [[ -z "$domain" ]] && read -rp "Domain to delete: " domain [[ ! -d "${WEBROOT_BASE}/${domain}" ]] && { echo "Site not found."; return; } confirm "Delete $domain (will backup first)?" || return tar -czf "${BACKUP_BASE}/${domain}_$(date +%F).tar.gz" -C "${WEBROOT_BASE}" "${domain}" 2>/dev/null || true rm -rf "${WEBROOT_BASE}/${domain}" "/etc/caddy/sites/${domain}.caddy" "/etc/php/${PHP_VERSION}/fpm/pool.d/${domain}.conf" 2>/dev/null || true systemctl reload caddy "${PHP_FPM_SERVICE}" 2>/dev/null || true echo "Site $domain deleted (backup saved)." } uninstall_stack() { confirm "NUCLEAR UNINSTALL – remove everything?" || return systemctl stop caddy "${PHP_FPM_SERVICE}" mariadb 2>/dev/null || true apt-get purge -y caddy php* mariadb-server ufw fail2ban apt-get autoremove -y rm -rf /etc/caddy /var/www /root/backups /etc/php/${PHP_VERSION} echo "caddyscript removed. Reboot recommended." } # ============================================================================= # MAIN # ============================================================================= require_root case "${1:-}" in --install) install_base_stack ;; --create) create_site "$3" "$5" ;; --delete) delete_site "$3" ;; --uninstall) uninstall_stack ;; *) echo "Usage: caddyscript [--install | --create --domain example.com --type static|classicpress|php | --delete example.com | --uninstall]"; exit 1 ;; esac

Usage: $ caddyscript [--install | --create --domain example.com --type static|classicpress|php | --delete example.com | --uninstall]

Dependencies Installed: caddy, php8.3-fpm, mariadb-server, ufw, zip, curl.

Usage (V2 - Command Line Interface)

Save as `/usr/local/bin/caddyscript`, `chmod +x`, and use like:

$ caddyscript --domain blog.com --type classicpress 

$ caddyscript --domain static.com --type static 

$ caddyscript --domain staging.blog.com --type staging --staging-source blog.com 

$ caddyscript --uninstall   # nuclear cleanup