Merge pull request #150 from Ctrlpanel-gg/feat/delete-installer-step

Add instructions for deleting installer after setup

Author: MrWeez

docs/getting-started/_parts/install/os/debian.mdx

@@ -14,6 +14,7 @@ import ApacheNoSSL from '../steps/webserver/deb-apache-no-ssl.mdx';
 
 import QueueListeners from '../steps/queue-listeners.mdx';
 import NavigateToWeb from '../steps/navigate-to-web.mdx';
+import DeleteInstaller from '../steps/delete-installer.mdx';
 
 ## Dependencies
 
@@ -104,4 +105,6 @@ chmod -R 755 storage/* bootstrap/cache/
 
 <NavigateToWeb />
 
+<DeleteInstaller />
+
 export const toc = []

docs/getting-started/_parts/install/os/ubuntu.mdx

@@ -14,6 +14,7 @@ import ApacheNoSSL from '../steps/webserver/deb-apache-no-ssl.mdx';
 
 import QueueListeners from '../steps/queue-listeners.mdx';
 import NavigateToWeb from '../steps/navigate-to-web.mdx';
+import DeleteInstaller from '../steps/delete-installer.mdx';
 
 ## Dependencies
 
@@ -103,4 +104,6 @@ chmod -R 755 storage/* bootstrap/cache/
 
 <NavigateToWeb />
 
+<DeleteInstaller />
+
 export const toc = []

docs/getting-started/_parts/install/steps/delete-installer.mdx

@@ -0,0 +1,9 @@
+## Deleting the installer
+
+After successfully completing the installation, delete the installer directory for security reasons by running the following command:
+
+```bash
+rm -rf /var/www/ctrlpanel/public/installer
+```
+
+This is necessary because a vulnerability in the installer was recently reported. To prevent abuse, we strongly recommend removing it.

docs/getting-started/_parts/install/steps/navigate-to-web.mdx

@@ -1,5 +1,9 @@
 ## Navigate to the installer
 
+:::danger
+Please read the documentation to the end before continuing! It contains a critical step to secure your infrastructure.
+:::
+
 To begin installation, go to `https://YOUR_DOMAIN_HERE.com/installer` and follow the installer instructions.
 
 If you encounter problems with the email setup, you can skip it and set it up later.