Install cpleks

For a server with internet access: one command, run on the server.

Not published yet. The command appears here with the first release, with the address of the installer host in it.

On the server the software is called cplex: its commands, services and folders carry that name. Without --license-key-file the installer asks for a key on the terminal; press Enter to skip.

What it checks

• Downloads the release’s manifest and checks its Ed25519 signature, with OpenSSL, against the publisher key carried in the script. A manifest signed by any other key stops the install.
• Downloads the release for this machine’s processor and checks it against the signed manifest before unpacking anything.
• Installs nginx, acl, rsyslog and logrotate from your system’s own mirror — only the ones that are missing — after a dry run. A plan that would remove any installed package stops the install before anything changes.
• If nginx has to be installed and another program already listens on port 80 or 443, it stops and names that program.

The signature proves the release, not this script: the script is trusted only as far as the HTTPS connection to the host it comes from. To check everything yourself, use the offline installer and check it against the signed manifest below.

Do this on any Linux machine with OpenSSL 3 before carrying an offline installer to a server. It checks the manifest’s signature with the publisher key, then checks your files against the manifest.

The publisher key is published on this page with the first signed release. Until it is here, the online installer — which carries the key itself — is the one that checks a signature.

The commands for this check appear here with the first release, when there are files to check.

1. The installer prints the panel’s address, https://<your server>:8443, and a one-time password for the first administrator. The panel’s certificate is self-signed at first, so your browser warns; once one of your sites has a real certificate, the panel can show that one at the site’s name.
2. Sign in with it; the panel asks you to choose a new password before anything else.
3. Install what you need from the Modules screen — PHP, a database, mail — and add your first site.
4. When your domains point at the server, switch its certificates from Let’s Encrypt’s test service to real ones with the button in Settings, under This server; each site is then reissued from its Security tab.