Build Real-World Bash Automation Projects

#!/bin/bash
set -e

LOG_FILE="/var/log/nginx/access.log"
REPORT_FILE="/tmp/security_report_$(date +%F).txt"

# Validation
if [ ! -f "$LOG_FILE" ]; then
    echo "ERROR: Log file missing!" >&2
    exit 1
fi

echo "Initiating Forensic Log Analysis..."

# Create the report header
echo "=== TOP 5 SUSPICIOUS IP ADDRESSES ===" > "$REPORT_FILE"
echo "Count | IP Address" >> "$REPORT_FILE"
echo "-----------------------------------" >> "$REPORT_FILE"

# The Text Processing Pipeline
# 1. awk prints the 1st column (IPs)
# 2. sort groups them
# 3. uniq -c counts the occurrences
# 4. sort -nr ranks them highest to lowest
# 5. head -n 5 grabs the top 5
awk '{print $1}' "$LOG_FILE" | sort | uniq -c | sort -nr | head -n 5 >> "$REPORT_FILE"

echo "Analysis complete. Report generated at $REPORT_FILE."
cat "$REPORT_FILE"

#!/bin/bash

# Configuration
LOAD_THRESHOLD=4.0
SERVICE_TO_HEAL="nginx"
LOG_DEST="/var/log/system_health.log"

TIMESTAMP=$(date +"%Y-%m-%d %H:%M:%S")

# Extract the 1-minute load average using uptime and awk
# Note: uptime outputs something like: load average: 0.45, 0.50, 0.61
# We use awk to grab the 10th column and sed to strip the comma.
CURRENT_LOAD=$(uptime | awk '{print $10}' | sed 's/,//')

# Use bc to do decimal math comparison! (Returns 1 if true, 0 if false)
IS_OVERLOADED=$(echo "$CURRENT_LOAD > $LOAD_THRESHOLD" | bc)

if [ "$IS_OVERLOADED" -eq 1 ]; then
    echo "[$TIMESTAMP] CRITICAL: CPU Load is $CURRENT_LOAD. Executing self-healing protocol..." >> "$LOG_DEST"
    
    # Attempt to restart the heavy service safely
    sudo systemctl restart "$SERVICE_TO_HEAL"
    
    if [ $? -eq 0 ]; then
        echo "[$TIMESTAMP] RECOVERY: $SERVICE_TO_HEAL restarted successfully." >> "$LOG_DEST"
    else
        echo "[$TIMESTAMP] FATAL: Failed to restart service. Manual intervention required!" >> "$LOG_DEST"
    fi
else
    # Silent success for cron (Send to dev/null or just don't echo)
    : 
fi

#!/bin/bash
set -e
set -u

SOURCE_DIR="/var/www/html"
BACKUP_DIR="/archive/web_backups"
DATE=$(date +"%Y%m%d_%H%M%S")
BACKUP_FILE="${BACKUP_DIR}/website_backup_${DATE}.tar.gz"

# 1. Self-Healing Environment Setup
if [ ! -d "$BACKUP_DIR" ]; then
    mkdir -p "$BACKUP_DIR"
    chmod 700 "$BACKUP_DIR" # Restrict access for security
fi

# 2. Trap for Cleanup on Failure
cleanup() {
    echo "ERROR: Backup failed! Cleaning up partial files..." >&2
    rm -f "$BACKUP_FILE"
}
trap cleanup ERR SIGINT

# 3. Execution
echo "Starting secure backup sequence..."

# Compress securely, discarding standard output to keep cron quiet, but allowing errors to trigger the trap
tar -czf "$BACKUP_FILE" "$SOURCE_DIR" > /dev/null

echo "SUCCESS: Backup securely stored at $BACKUP_FILE."

# Clear the trap since we succeeded
trap - ERR SIGINT