| 
				
			 | 
			
			
				@@ -1,165 +0,0 @@ 
			 | 
		
	
		
			
			| 
				1
			 | 
			
				
			 | 
			
			
				-#!/bin/bash 
			 | 
		
	
		
			
			| 
				2
			 | 
			
				
			 | 
			
			
				-# 
			 | 
		
	
		
			
			| 
				3
			 | 
			
				
			 | 
			
			
				-# .---.                  .              . 
			 | 
		
	
		
			
			| 
				4
			 | 
			
				
			 | 
			
			
				-# |                      |              | 
			 | 
		
	
		
			
			| 
				5
			 | 
			
				
			 | 
			
			
				-# |--- .--. .-.  .-.  .-.|  .-. .--.--. |.-.  .-. .--.  .-. 
			 | 
		
	
		
			
			| 
				6
			 | 
			
				
			 | 
			
			
				-# |    |   (.-' (.-' (   | (   )|  |  | |   )(   )|  | (.-' 
			 | 
		
	
		
			
			| 
				7
			 | 
			
				
			 | 
			
			
				-# '    '     --'  --'  -' -  -' '  '   -' -'   -' '   -  --' 
			 | 
		
	
		
			
			| 
				8
			 | 
			
				
			 | 
			
			
				-# 
			 | 
		
	
		
			
			| 
				9
			 | 
			
				
			 | 
			
			
				-#                    Freedom in the Cloud 
			 | 
		
	
		
			
			| 
				10
			 | 
			
				
			 | 
			
			
				-# 
			 | 
		
	
		
			
			| 
				11
			 | 
			
				
			 | 
			
			
				-# An initialisation script which can be run after installing 
			 | 
		
	
		
			
			| 
				12
			 | 
			
				
			 | 
			
			
				-# a disk image 
			 | 
		
	
		
			
			| 
				13
			 | 
			
				
			 | 
			
			
				-# 
			 | 
		
	
		
			
			| 
				14
			 | 
			
				
			 | 
			
			
				-# License 
			 | 
		
	
		
			
			| 
				15
			 | 
			
				
			 | 
			
			
				-# ======= 
			 | 
		
	
		
			
			| 
				16
			 | 
			
				
			 | 
			
			
				-# 
			 | 
		
	
		
			
			| 
				17
			 | 
			
				
			 | 
			
			
				-# Copyright (C) 2015 Bob Mottram <bob@robotics.uk.to> 
			 | 
		
	
		
			
			| 
				18
			 | 
			
				
			 | 
			
			
				-# 
			 | 
		
	
		
			
			| 
				19
			 | 
			
				
			 | 
			
			
				-# This program is free software: you can redistribute it and/or modify 
			 | 
		
	
		
			
			| 
				20
			 | 
			
				
			 | 
			
			
				-# it under the terms of the GNU General Public License as published by 
			 | 
		
	
		
			
			| 
				21
			 | 
			
				
			 | 
			
			
				-# the Free Software Foundation, either version 3 of the License, or 
			 | 
		
	
		
			
			| 
				22
			 | 
			
				
			 | 
			
			
				-# (at your option) any later version. 
			 | 
		
	
		
			
			| 
				23
			 | 
			
				
			 | 
			
			
				-# 
			 | 
		
	
		
			
			| 
				24
			 | 
			
				
			 | 
			
			
				-# This program is distributed in the hope that it will be useful, 
			 | 
		
	
		
			
			| 
				25
			 | 
			
				
			 | 
			
			
				-# but WITHOUT ANY WARRANTY; without even the implied warranty of 
			 | 
		
	
		
			
			| 
				26
			 | 
			
				
			 | 
			
			
				-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 
			 | 
		
	
		
			
			| 
				27
			 | 
			
				
			 | 
			
			
				-# GNU General Public License for more details. 
			 | 
		
	
		
			
			| 
				28
			 | 
			
				
			 | 
			
			
				-# 
			 | 
		
	
		
			
			| 
				29
			 | 
			
				
			 | 
			
			
				-# You should have received a copy of the GNU General Public License 
			 | 
		
	
		
			
			| 
				30
			 | 
			
				
			 | 
			
			
				-# along with this program. If not, see <http://www.gnu.org/licenses/>. 
			 | 
		
	
		
			
			| 
				31
			 | 
			
				
			 | 
			
			
				- 
			 | 
		
	
		
			
			| 
				32
			 | 
			
				
			 | 
			
			
				-PROJECT_NAME='freedombone' 
			 | 
		
	
		
			
			| 
				33
			 | 
			
				
			 | 
			
			
				- 
			 | 
		
	
		
			
			| 
				34
			 | 
			
				
			 | 
			
			
				-export TEXTDOMAIN=${PROJECT_NAME}-deploy 
			 | 
		
	
		
			
			| 
				35
			 | 
			
				
			 | 
			
			
				-export TEXTDOMAINDIR="/usr/share/locale" 
			 | 
		
	
		
			
			| 
				36
			 | 
			
				
			 | 
			
			
				- 
			 | 
		
	
		
			
			| 
				37
			 | 
			
				
			 | 
			
			
				-# Default username for disk images 
			 | 
		
	
		
			
			| 
				38
			 | 
			
				
			 | 
			
			
				-DEFAULT_IMAGE_USERNAME='freedom' 
			 | 
		
	
		
			
			| 
				39
			 | 
			
				
			 | 
			
			
				- 
			 | 
		
	
		
			
			| 
				40
			 | 
			
				
			 | 
			
			
				-MY_NAME='fbn' 
			 | 
		
	
		
			
			| 
				41
			 | 
			
				
			 | 
			
			
				-MY_USERNAME=$MY_NAME 
			 | 
		
	
		
			
			| 
				42
			 | 
			
				
			 | 
			
			
				-MY_EMAIL_ADDRESS=$MY_USERNAME@$(hostname) 
			 | 
		
	
		
			
			| 
				43
			 | 
			
				
			 | 
			
			
				- 
			 | 
		
	
		
			
			| 
				44
			 | 
			
				
			 | 
			
			
				-# various passwords 
			 | 
		
	
		
			
			| 
				45
			 | 
			
				
			 | 
			
			
				-CJDNS_PASSWORD= 
			 | 
		
	
		
			
			| 
				46
			 | 
			
				
			 | 
			
			
				-MARIADB_PASSWORD= 
			 | 
		
	
		
			
			| 
				47
			 | 
			
				
			 | 
			
			
				-MICROBLOG_ADMIN_PASSWORD= 
			 | 
		
	
		
			
			| 
				48
			 | 
			
				
			 | 
			
			
				-GIT_ADMIN_PASSWORD= 
			 | 
		
	
		
			
			| 
				49
			 | 
			
				
			 | 
			
			
				-HUBZILLA_ADMIN_PASSWORD= 
			 | 
		
	
		
			
			| 
				50
			 | 
			
				
			 | 
			
			
				-OWNCLOUD_ADMIN_PASSWORD= 
			 | 
		
	
		
			
			| 
				51
			 | 
			
				
			 | 
			
			
				-WIKI_ADMIN_PASSWORD= 
			 | 
		
	
		
			
			| 
				52
			 | 
			
				
			 | 
			
			
				-FULLBLOG_ADMIN_PASSWORD= 
			 | 
		
	
		
			
			| 
				53
			 | 
			
				
			 | 
			
			
				-VOIP_SERVER_PASSWORD= 
			 | 
		
	
		
			
			| 
				54
			 | 
			
				
			 | 
			
			
				-SIP_SERVER_PASSWORD= 
			 | 
		
	
		
			
			| 
				55
			 | 
			
				
			 | 
			
			
				- 
			 | 
		
	
		
			
			| 
				56
			 | 
			
				
			 | 
			
			
				-function create_backup_gpg_key { 
			 | 
		
	
		
			
			| 
				57
			 | 
			
				
			 | 
			
			
				-    echo 'Key-Type: 1' > /home/$MY_USERNAME/gpg-genkey.conf 
			 | 
		
	
		
			
			| 
				58
			 | 
			
				
			 | 
			
			
				-    echo 'Key-Length: 4096' >> /home/$MY_USERNAME/gpg-genkey.conf 
			 | 
		
	
		
			
			| 
				59
			 | 
			
				
			 | 
			
			
				-    echo 'Subkey-Type: 1' >> /home/$MY_USERNAME/gpg-genkey.conf 
			 | 
		
	
		
			
			| 
				60
			 | 
			
				
			 | 
			
			
				-    echo 'Subkey-Length: 4096' >> /home/$MY_USERNAME/gpg-genkey.conf 
			 | 
		
	
		
			
			| 
				61
			 | 
			
				
			 | 
			
			
				-    echo "Name-Real:  $MY_NAME" >> /home/$MY_USERNAME/gpg-genkey.conf 
			 | 
		
	
		
			
			| 
				62
			 | 
			
				
			 | 
			
			
				-    echo "Name-Email: $MY_EMAIL_ADDRESS" >> /home/$MY_USERNAME/gpg-genkey.conf 
			 | 
		
	
		
			
			| 
				63
			 | 
			
				
			 | 
			
			
				-    echo "Name-Comment: backup key" >> /home/$MY_USERNAME/gpg-genkey.conf 
			 | 
		
	
		
			
			| 
				64
			 | 
			
				
			 | 
			
			
				-    echo 'Expire-Date: 0' >> /home/$MY_USERNAME/gpg-genkey.conf 
			 | 
		
	
		
			
			| 
				65
			 | 
			
				
			 | 
			
			
				-    chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/gpg-genkey.conf 
			 | 
		
	
		
			
			| 
				66
			 | 
			
				
			 | 
			
			
				-    su -c "gpg --batch --gen-key /home/$MY_USERNAME/gpg-genkey.conf" - $MY_USERNAME 
			 | 
		
	
		
			
			| 
				67
			 | 
			
				
			 | 
			
			
				-    shred -zu /home/$MY_USERNAME/gpg-genkey.conf 
			 | 
		
	
		
			
			| 
				68
			 | 
			
				
			 | 
			
			
				-    BACKUP_KEY_EXISTS=$(su -c "gpg --list-keys \"$MY_NAME (backup key)\"" - $MY_USERNAME) 
			 | 
		
	
		
			
			| 
				69
			 | 
			
				
			 | 
			
			
				-    if [ ! "$?" = "0" ]; then 
			 | 
		
	
		
			
			| 
				70
			 | 
			
				
			 | 
			
			
				-        echo 'Backup key could not be created' 
			 | 
		
	
		
			
			| 
				71
			 | 
			
				
			 | 
			
			
				-        exit 43382 
			 | 
		
	
		
			
			| 
				72
			 | 
			
				
			 | 
			
			
				-    fi 
			 | 
		
	
		
			
			| 
				73
			 | 
			
				
			 | 
			
			
				- 
			 | 
		
	
		
			
			| 
				74
			 | 
			
				
			 | 
			
			
				-	MY_BACKUP_KEY_ID=$(su -c "gpg --list-keys \"$MY_NAME (backup key)\" | grep 'pub '" - $MY_USERNAME | awk -F ' ' '{print $2}' | awk -F '/' '{print $2}') 
			 | 
		
	
		
			
			| 
				75
			 | 
			
				
			 | 
			
			
				-	echo "Backup key: $MY_BACKUP_KEY_ID" 
			 | 
		
	
		
			
			| 
				76
			 | 
			
				
			 | 
			
			
				-	MY_BACKUP_KEY=/home/$MY_USERNAME/backup_key 
			 | 
		
	
		
			
			| 
				77
			 | 
			
				
			 | 
			
			
				-	su -c "gpg --output ${MY_BACKUP_KEY}_public.asc --armor --export $MY_BACKUP_KEY_ID" - $MY_USERNAME 
			 | 
		
	
		
			
			| 
				78
			 | 
			
				
			 | 
			
			
				-	su -c "gpg --output ${MY_BACKUP_KEY}_private.asc --armor --export-secret-key $MY_BACKUP_KEY_ID" - $MY_USERNAME 
			 | 
		
	
		
			
			| 
				79
			 | 
			
				
			 | 
			
			
				-	if [ ! -f ${MY_BACKUP_KEY}_public.asc ]; then 
			 | 
		
	
		
			
			| 
				80
			 | 
			
				
			 | 
			
			
				-		echo 'Public backup key could not be exported' 
			 | 
		
	
		
			
			| 
				81
			 | 
			
				
			 | 
			
			
				-		exit 36829 
			 | 
		
	
		
			
			| 
				82
			 | 
			
				
			 | 
			
			
				-	fi 
			 | 
		
	
		
			
			| 
				83
			 | 
			
				
			 | 
			
			
				-	if [ ! -f ${MY_BACKUP_KEY}_private.asc ]; then 
			 | 
		
	
		
			
			| 
				84
			 | 
			
				
			 | 
			
			
				-		echo 'Private backup key could not be exported' 
			 | 
		
	
		
			
			| 
				85
			 | 
			
				
			 | 
			
			
				-		exit 29235 
			 | 
		
	
		
			
			| 
				86
			 | 
			
				
			 | 
			
			
				-	fi 
			 | 
		
	
		
			
			| 
				87
			 | 
			
				
			 | 
			
			
				- 
			 | 
		
	
		
			
			| 
				88
			 | 
			
				
			 | 
			
			
				-	# import backup key to root user 
			 | 
		
	
		
			
			| 
				89
			 | 
			
				
			 | 
			
			
				-	gpg --import --import ${MY_BACKUP_KEY}_public.asc 
			 | 
		
	
		
			
			| 
				90
			 | 
			
				
			 | 
			
			
				-	gpg --allow-secret-key-import --import ${MY_BACKUP_KEY}_private.asc 
			 | 
		
	
		
			
			| 
				91
			 | 
			
				
			 | 
			
			
				- 
			 | 
		
	
		
			
			| 
				92
			 | 
			
				
			 | 
			
			
				-	shred -zu ${MY_BACKUP_KEY}_public.asc 
			 | 
		
	
		
			
			| 
				93
			 | 
			
				
			 | 
			
			
				-	shred -zu ${MY_BACKUP_KEY}_private.asc 
			 | 
		
	
		
			
			| 
				94
			 | 
			
				
			 | 
			
			
				-	echo 'New backup gpg key created' 
			 | 
		
	
		
			
			| 
				95
			 | 
			
				
			 | 
			
			
				-} 
			 | 
		
	
		
			
			| 
				96
			 | 
			
				
			 | 
			
			
				- 
			 | 
		
	
		
			
			| 
				97
			 | 
			
				
			 | 
			
			
				-function regenerate_ssh_host_keys { 
			 | 
		
	
		
			
			| 
				98
			 | 
			
				
			 | 
			
			
				-    rm -f /etc/ssh/ssh_host_* 
			 | 
		
	
		
			
			| 
				99
			 | 
			
				
			 | 
			
			
				-    dpkg-reconfigure openssh-server 
			 | 
		
	
		
			
			| 
				100
			 | 
			
				
			 | 
			
			
				-    echo 'ssh host keys regenerated' 
			 | 
		
	
		
			
			| 
				101
			 | 
			
				
			 | 
			
			
				-    # remove small moduli 
			 | 
		
	
		
			
			| 
				102
			 | 
			
				
			 | 
			
			
				-    awk '$5 > 2000' /etc/ssh/moduli > ~/moduli 
			 | 
		
	
		
			
			| 
				103
			 | 
			
				
			 | 
			
			
				-    mv ~/moduli /etc/ssh/moduli 
			 | 
		
	
		
			
			| 
				104
			 | 
			
				
			 | 
			
			
				-    echo 'ssh small moduli removed' 
			 | 
		
	
		
			
			| 
				105
			 | 
			
				
			 | 
			
			
				-    systemctl restart ssh 
			 | 
		
	
		
			
			| 
				106
			 | 
			
				
			 | 
			
			
				-} 
			 | 
		
	
		
			
			| 
				107
			 | 
			
				
			 | 
			
			
				- 
			 | 
		
	
		
			
			| 
				108
			 | 
			
				
			 | 
			
			
				-function get_passwords_from_readme { 
			 | 
		
	
		
			
			| 
				109
			 | 
			
				
			 | 
			
			
				-	readme_file=$1 
			 | 
		
	
		
			
			| 
				110
			 | 
			
				
			 | 
			
			
				-	if [ ! -f $readme_file ]; then 
			 | 
		
	
		
			
			| 
				111
			 | 
			
				
			 | 
			
			
				-		return 
			 | 
		
	
		
			
			| 
				112
			 | 
			
				
			 | 
			
			
				-	fi 
			 | 
		
	
		
			
			| 
				113
			 | 
			
				
			 | 
			
			
				- 
			 | 
		
	
		
			
			| 
				114
			 | 
			
				
			 | 
			
			
				-    if grep -q "cjdns password" $readme_file; then 
			 | 
		
	
		
			
			| 
				115
			 | 
			
				
			 | 
			
			
				-        if [ ! $CJDNS_PASSWORD ]; then 
			 | 
		
	
		
			
			| 
				116
			 | 
			
				
			 | 
			
			
				-            CJDNS_PASSWORD=$(cat $readme_file | grep "cjdns password" | awk -F ':' '{print $2}' | sed 's/^ *//') 
			 | 
		
	
		
			
			| 
				117
			 | 
			
				
			 | 
			
			
				-        fi 
			 | 
		
	
		
			
			| 
				118
			 | 
			
				
			 | 
			
			
				-    fi 
			 | 
		
	
		
			
			| 
				119
			 | 
			
				
			 | 
			
			
				-    if grep -q "MariaDB password" $readme_file; then 
			 | 
		
	
		
			
			| 
				120
			 | 
			
				
			 | 
			
			
				-        if [ -f $DATABASE_PASSWORD_FILE ]; then 
			 | 
		
	
		
			
			| 
				121
			 | 
			
				
			 | 
			
			
				-            MARIADB_PASSWORD=$(cat $DATABASE_PASSWORD_FILE) 
			 | 
		
	
		
			
			| 
				122
			 | 
			
				
			 | 
			
			
				-        else 
			 | 
		
	
		
			
			| 
				123
			 | 
			
				
			 | 
			
			
				-            MARIADB_PASSWORD=$(cat $readme_file | grep "MariaDB password" | awk -F ':' '{print $2}' | sed 's/^ *//') 
			 | 
		
	
		
			
			| 
				124
			 | 
			
				
			 | 
			
			
				-            echo "$MARIADB_PASSWORD" > $DATABASE_PASSWORD_FILE 
			 | 
		
	
		
			
			| 
				125
			 | 
			
				
			 | 
			
			
				-            chmod 600 $DATABASE_PASSWORD_FILE 
			 | 
		
	
		
			
			| 
				126
			 | 
			
				
			 | 
			
			
				-        fi 
			 | 
		
	
		
			
			| 
				127
			 | 
			
				
			 | 
			
			
				-    fi 
			 | 
		
	
		
			
			| 
				128
			 | 
			
				
			 | 
			
			
				-    if grep -q "MariaDB gnusocial admin password" $readme_file; then 
			 | 
		
	
		
			
			| 
				129
			 | 
			
				
			 | 
			
			
				-        MICROBLOG_ADMIN_PASSWORD=$(cat $readme_file | grep "MariaDB gnusocial admin password" | awk -F ':' '{print $2}' | sed 's/^ *//') 
			 | 
		
	
		
			
			| 
				130
			 | 
			
				
			 | 
			
			
				-    fi 
			 | 
		
	
		
			
			| 
				131
			 | 
			
				
			 | 
			
			
				-    if grep -q "Gogs admin user password" $readme_file; then 
			 | 
		
	
		
			
			| 
				132
			 | 
			
				
			 | 
			
			
				-        GIT_ADMIN_PASSWORD=$(cat $readme_file | grep "Gogs admin user password" | awk -F ':' '{print $2}' | sed 's/^ *//') 
			 | 
		
	
		
			
			| 
				133
			 | 
			
				
			 | 
			
			
				-    fi 
			 | 
		
	
		
			
			| 
				134
			 | 
			
				
			 | 
			
			
				-    if grep -q "MariaDB Hubzilla admin password" $readme_file; then 
			 | 
		
	
		
			
			| 
				135
			 | 
			
				
			 | 
			
			
				-        HUBZILLA_ADMIN_PASSWORD=$(cat $readme_file | grep "MariaDB Hubzilla admin password" | awk -F ':' '{print $2}' | sed 's/^ *//') 
			 | 
		
	
		
			
			| 
				136
			 | 
			
				
			 | 
			
			
				-    fi 
			 | 
		
	
		
			
			| 
				137
			 | 
			
				
			 | 
			
			
				-    if grep -q "Owncloud database password" $readme_file; then 
			 | 
		
	
		
			
			| 
				138
			 | 
			
				
			 | 
			
			
				-        OWNCLOUD_ADMIN_PASSWORD=$(cat $readme_file | grep "Owncloud database password" | awk -F ':' '{print $2}' | sed 's/^ *//') 
			 | 
		
	
		
			
			| 
				139
			 | 
			
				
			 | 
			
			
				-    fi 
			 | 
		
	
		
			
			| 
				140
			 | 
			
				
			 | 
			
			
				-    if grep -q "Wiki password" $readme_file; then 
			 | 
		
	
		
			
			| 
				141
			 | 
			
				
			 | 
			
			
				-        WIKI_ADMIN_PASSWORD=$(cat $readme_file | grep "Wiki password:" | awk -F ':' '{print $2}' | sed 's/^ *//') 
			 | 
		
	
		
			
			| 
				142
			 | 
			
				
			 | 
			
			
				-    fi 
			 | 
		
	
		
			
			| 
				143
			 | 
			
				
			 | 
			
			
				-} 
			 | 
		
	
		
			
			| 
				144
			 | 
			
				
			 | 
			
			
				- 
			 | 
		
	
		
			
			| 
				145
			 | 
			
				
			 | 
			
			
				-function set_admin_user { 
			 | 
		
	
		
			
			| 
				146
			 | 
			
				
			 | 
			
			
				-    sed -i "s|Admin user:.*|Admin user:$MY_USERNAME|g" $COMPLETION_FILE 
			 | 
		
	
		
			
			| 
				147
			 | 
			
				
			 | 
			
			
				-} 
			 | 
		
	
		
			
			| 
				148
			 | 
			
				
			 | 
			
			
				- 
			 | 
		
	
		
			
			| 
				149
			 | 
			
				
			 | 
			
			
				-if [ ! -d /home/$DEFAULT_IMAGE_USERNAME ]; then 
			 | 
		
	
		
			
			| 
				150
			 | 
			
				
			 | 
			
			
				-	echo "User $DEFAULT_IMAGE_USERNAME not found" 
			 | 
		
	
		
			
			| 
				151
			 | 
			
				
			 | 
			
			
				-	exit 52372 
			 | 
		
	
		
			
			| 
				152
			 | 
			
				
			 | 
			
			
				-fi 
			 | 
		
	
		
			
			| 
				153
			 | 
			
				
			 | 
			
			
				- 
			 | 
		
	
		
			
			| 
				154
			 | 
			
				
			 | 
			
			
				-if [ -d /home/$MY_USERNAME ]; then 
			 | 
		
	
		
			
			| 
				155
			 | 
			
				
			 | 
			
			
				-	echo "User $MY_USERNAME already exists" 
			 | 
		
	
		
			
			| 
				156
			 | 
			
				
			 | 
			
			
				-	exit 73538 
			 | 
		
	
		
			
			| 
				157
			 | 
			
				
			 | 
			
			
				-fi 
			 | 
		
	
		
			
			| 
				158
			 | 
			
				
			 | 
			
			
				- 
			 | 
		
	
		
			
			| 
				159
			 | 
			
				
			 | 
			
			
				-get_passwords_from_readme /home/$DEFAULT_IMAGE_USERNAME/README 
			 | 
		
	
		
			
			| 
				160
			 | 
			
				
			 | 
			
			
				-#${PROJECT_NAME}-adduser $MY_USERNAME > ~/setup.txt 
			 | 
		
	
		
			
			| 
				161
			 | 
			
				
			 | 
			
			
				-#set_admin_user 
			 | 
		
	
		
			
			| 
				162
			 | 
			
				
			 | 
			
			
				-#create_backup_gpg_key 
			 | 
		
	
		
			
			| 
				163
			 | 
			
				
			 | 
			
			
				-#regenerate_ssh_host_keys 
			 | 
		
	
		
			
			| 
				164
			 | 
			
				
			 | 
			
			
				- 
			 | 
		
	
		
			
			| 
				165
			 | 
			
				
			 | 
			
			
				-exit 0 
			 |