Bob Mottram il y a 9 ans
Parent
révision
efd1433b15
1 fichiers modifiés avec 101 ajouts et 100 suppressions
  1. 101
    100
      src/freedombone

+ 101
- 100
src/freedombone Voir le fichier

@@ -8620,108 +8620,109 @@ function install_gnu_social {
8620 8620
     CURRENT_DDNS_DOMAIN=$MICROBLOG_DOMAIN_NAME
8621 8621
     add_ddns_domain
8622 8622
 
8623
+	microblog_nginx_site=/etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8623 8624
     if [[ $ONION_ONLY == "no" ]]; then
8624
-        echo 'server {' > /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8625
-        echo '  listen 80;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8626
-        echo '  listen [::]:80;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8627
-        echo "  server_name $MICROBLOG_DOMAIN_NAME;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8628
-        echo '  rewrite ^ https://$server_name$request_uri? permanent;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8629
-        echo '}' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8630
-        echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8631
-        echo 'server {' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8632
-        echo '  listen 443 ssl;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8633
-        echo "  server_name $MICROBLOG_DOMAIN_NAME;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8634
-        echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8635
-        echo '  # Security' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8636
-        echo '  ssl on;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8637
-        echo "  ssl_certificate /etc/ssl/certs/$MICROBLOG_DOMAIN_NAME.pem;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8638
-        echo "  ssl_certificate_key /etc/ssl/private/$MICROBLOG_DOMAIN_NAME.key;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8639
-        echo "  ssl_dhparam /etc/ssl/certs/$MICROBLOG_DOMAIN_NAME.dhparam;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8640
-        echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8641
-        echo '  ssl_session_timeout 60m;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8642
-        echo '  ssl_prefer_server_ciphers on;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8643
-        echo '  ssl_session_cache  builtin:1000  shared:SSL:10m;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8644
-        echo "  ssl_protocols $SSL_PROTOCOLS; # not possible to do exclusive" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8645
-        echo "  ssl_ciphers '$SSL_CIPHERS';" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8646
-        echo '  add_header X-Frame-Options DENY;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8647
-        echo '  add_header X-Content-Type-Options nosniff;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8648
-        echo '  add_header Strict-Transport-Security max-age=15768000;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8649
-        echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8650
-        echo '  # Logs' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8651
-        echo '  access_log off;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8652
-        echo '  error_log off;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8653
-        echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8654
-        echo '  # Root' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8655
-        echo "  root /var/www/$MICROBLOG_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8656
-        echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8657
-        echo '  # Index' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8658
-        echo '  index index.php;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8659
-        echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8660
-        echo '  # PHP' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8661
-        echo '  location ~ \.php {' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8662
-        echo '    include snippets/fastcgi-php.conf;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8663
-        echo '    fastcgi_pass unix:/var/run/php5-fpm.sock;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8664
-        echo '  }' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8665
-        echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8666
-        echo '  # Location' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8667
-        echo '  location / {' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8668
-        echo '    try_files $uri $uri/ @gnusocial;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8669
-        echo '  }' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8670
-        echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8671
-        echo '  # Fancy URLs' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8672
-        echo '  location @gnusocial {' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8673
-        echo '    rewrite ^(.*)$ /index.php?p=$1 last;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8674
-        echo '  }' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8675
-        echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8676
-        echo '  # Restrict access that is unnecessary anyway' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8677
-        echo '  location ~ /\.(ht|git) {' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8678
-        echo '    deny all;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8679
-        echo '  }' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8680
-        echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8681
-        echo '  client_max_body_size 15m;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8682
-        echo '}' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8625
+        echo 'server {' > $microblog_nginx_site
8626
+        echo '  listen 80;' >> $microblog_nginx_site
8627
+        echo '  listen [::]:80;' >> $microblog_nginx_site
8628
+        echo "  server_name $MICROBLOG_DOMAIN_NAME;" >> $microblog_nginx_site
8629
+        echo '  rewrite ^ https://$server_name$request_uri? permanent;' >> $microblog_nginx_site
8630
+        echo '}' >> $microblog_nginx_site
8631
+        echo '' >> $microblog_nginx_site
8632
+        echo 'server {' >> $microblog_nginx_site
8633
+        echo '  listen 443 ssl;' >> $microblog_nginx_site
8634
+        echo "  server_name $MICROBLOG_DOMAIN_NAME;" >> $microblog_nginx_site
8635
+        echo '' >> $microblog_nginx_site
8636
+        echo '  # Security' >> $microblog_nginx_site
8637
+        echo '  ssl on;' >> $microblog_nginx_site
8638
+        echo "  ssl_certificate /etc/ssl/certs/$MICROBLOG_DOMAIN_NAME.pem;" >> $microblog_nginx_site
8639
+        echo "  ssl_certificate_key /etc/ssl/private/$MICROBLOG_DOMAIN_NAME.key;" >> $microblog_nginx_site
8640
+        echo "  ssl_dhparam /etc/ssl/certs/$MICROBLOG_DOMAIN_NAME.dhparam;" >> $microblog_nginx_site
8641
+        echo '' >> $microblog_nginx_site
8642
+        echo '  ssl_session_timeout 60m;' >> $microblog_nginx_site
8643
+        echo '  ssl_prefer_server_ciphers on;' >> $microblog_nginx_site
8644
+        echo '  ssl_session_cache  builtin:1000  shared:SSL:10m;' >> $microblog_nginx_site
8645
+        echo "  ssl_protocols $SSL_PROTOCOLS; # not possible to do exclusive" >> $microblog_nginx_site
8646
+        echo "  ssl_ciphers '$SSL_CIPHERS';" >> $microblog_nginx_site
8647
+        echo '  add_header X-Frame-Options DENY;' >> $microblog_nginx_site
8648
+        echo '  add_header X-Content-Type-Options nosniff;' >> $microblog_nginx_site
8649
+        echo '  add_header Strict-Transport-Security max-age=15768000;' >> $microblog_nginx_site
8650
+        echo '' >> $microblog_nginx_site
8651
+        echo '  # Logs' >> $microblog_nginx_site
8652
+        echo '  access_log off;' >> $microblog_nginx_site
8653
+        echo '  error_log off;' >> $microblog_nginx_site
8654
+        echo '' >> $microblog_nginx_site
8655
+        echo '  # Root' >> $microblog_nginx_site
8656
+        echo "  root /var/www/$MICROBLOG_DOMAIN_NAME/htdocs;" >> $microblog_nginx_site
8657
+        echo '' >> $microblog_nginx_site
8658
+        echo '  # Index' >> $microblog_nginx_site
8659
+        echo '  index index.php;' >> $microblog_nginx_site
8660
+        echo '' >> $microblog_nginx_site
8661
+        echo '  # PHP' >> $microblog_nginx_site
8662
+        echo '  location ~ \.php {' >> $microblog_nginx_site
8663
+        echo '    include snippets/fastcgi-php.conf;' >> $microblog_nginx_site
8664
+        echo '    fastcgi_pass unix:/var/run/php5-fpm.sock;' >> $microblog_nginx_site
8665
+        echo '  }' >> $microblog_nginx_site
8666
+        echo '' >> $microblog_nginx_site
8667
+        echo '  # Location' >> $microblog_nginx_site
8668
+        echo '  location / {' >> $microblog_nginx_site
8669
+        echo '    try_files $uri $uri/ @gnusocial;' >> $microblog_nginx_site
8670
+        echo '  }' >> $microblog_nginx_site
8671
+        echo '' >> $microblog_nginx_site
8672
+        echo '  # Fancy URLs' >> $microblog_nginx_site
8673
+        echo '  location @gnusocial {' >> $microblog_nginx_site
8674
+        echo '    rewrite ^(.*)$ /index.php?p=$1 last;' >> $microblog_nginx_site
8675
+        echo '  }' >> $microblog_nginx_site
8676
+        echo '' >> $microblog_nginx_site
8677
+        echo '  # Restrict access that is unnecessary anyway' >> $microblog_nginx_site
8678
+        echo '  location ~ /\.(ht|git) {' >> $microblog_nginx_site
8679
+        echo '    deny all;' >> $microblog_nginx_site
8680
+        echo '  }' >> $microblog_nginx_site
8681
+        echo '' >> $microblog_nginx_site
8682
+        echo '  client_max_body_size 15m;' >> $microblog_nginx_site
8683
+        echo '}' >> $microblog_nginx_site
8683 8684
     else
8684
-        echo -n '' > /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8685
-    fi
8686
-    echo 'server {' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8687
-    echo "    listen 127.0.0.1:$MICROBLOG_ONION_PORT default_server;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8688
-    echo "    server_name $MICROBLOG_DOMAIN_NAME;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8689
-    echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8690
-    echo '  # Logs' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8691
-    echo '  access_log off;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8692
-    echo '  error_log off;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8693
-    echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8694
-    echo '  # Root' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8695
-    echo "  root /var/www/$MICROBLOG_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8696
-    echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8697
-    echo '  # Index' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8698
-    echo '  index index.php;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8699
-    echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8700
-    echo '  # PHP' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8701
-    echo '  location ~ \.php {' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8702
-    echo '    include snippets/fastcgi-php.conf;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8703
-    echo '    fastcgi_pass unix:/var/run/php5-fpm.sock;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8704
-    echo '  }' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8705
-    echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8706
-    echo '  # Location' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8707
-    echo '  location / {' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8708
-    echo '    try_files $uri $uri/ @gnusocial;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8709
-    echo '  }' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8710
-    echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8711
-    echo '  # Fancy URLs' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8712
-    echo '  location @gnusocial {' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8713
-    echo '    rewrite ^(.*)$ /index.php?p=$1 last;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8714
-    echo '  }' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8715
-    echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8716
-    echo '  # Restrict access that is unnecessary anyway' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8717
-    echo '  location ~ /\.(ht|git) {' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8718
-    echo '    deny all;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8719
-    echo '  }' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8720
-    echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8721
-    echo '  add_header X-Frame-Options DENY;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8722
-    echo '  add_header X-Content-Type-Options nosniff;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8723
-    echo '  client_max_body_size 15m;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8724
-    echo '}' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
8685
+        echo -n '' > $microblog_nginx_site
8686
+    fi
8687
+    echo 'server {' >> $microblog_nginx_site
8688
+    echo "    listen 127.0.0.1:$MICROBLOG_ONION_PORT default_server;" >> $microblog_nginx_site
8689
+    echo "    server_name $MICROBLOG_DOMAIN_NAME;" >> $microblog_nginx_site
8690
+    echo '' >> $microblog_nginx_site
8691
+    echo '  # Logs' >> $microblog_nginx_site
8692
+    echo '  access_log off;' >> $microblog_nginx_site
8693
+    echo '  error_log off;' >> $microblog_nginx_site
8694
+    echo '' >> $microblog_nginx_site
8695
+    echo '  # Root' >> $microblog_nginx_site
8696
+    echo "  root /var/www/$MICROBLOG_DOMAIN_NAME/htdocs;" >> $microblog_nginx_site
8697
+    echo '' >> $microblog_nginx_site
8698
+    echo '  # Index' >> $microblog_nginx_site
8699
+    echo '  index index.php;' >> $microblog_nginx_site
8700
+    echo '' >> $microblog_nginx_site
8701
+    echo '  # PHP' >> $microblog_nginx_site
8702
+    echo '  location ~ \.php {' >> $microblog_nginx_site
8703
+    echo '    include snippets/fastcgi-php.conf;' >> $microblog_nginx_site
8704
+    echo '    fastcgi_pass unix:/var/run/php5-fpm.sock;' >> $microblog_nginx_site
8705
+    echo '  }' >> $microblog_nginx_site
8706
+    echo '' >> $microblog_nginx_site
8707
+    echo '  # Location' >> $microblog_nginx_site
8708
+    echo '  location / {' >> $microblog_nginx_site
8709
+    echo '    try_files $uri $uri/ @gnusocial;' >> $microblog_nginx_site
8710
+    echo '  }' >> $microblog_nginx_site
8711
+    echo '' >> $microblog_nginx_site
8712
+    echo '  # Fancy URLs' >> $microblog_nginx_site
8713
+    echo '  location @gnusocial {' >> $microblog_nginx_site
8714
+    echo '    rewrite ^(.*)$ /index.php?p=$1 last;' >> $microblog_nginx_site
8715
+    echo '  }' >> $microblog_nginx_site
8716
+    echo '' >> $microblog_nginx_site
8717
+    echo '  # Restrict access that is unnecessary anyway' >> $microblog_nginx_site
8718
+    echo '  location ~ /\.(ht|git) {' >> $microblog_nginx_site
8719
+    echo '    deny all;' >> $microblog_nginx_site
8720
+    echo '  }' >> $microblog_nginx_site
8721
+    echo '' >> $microblog_nginx_site
8722
+    echo '  add_header X-Frame-Options DENY;' >> $microblog_nginx_site
8723
+    echo '  add_header X-Content-Type-Options nosniff;' >> $microblog_nginx_site
8724
+    echo '  client_max_body_size 15m;' >> $microblog_nginx_site
8725
+    echo '}' >> $microblog_nginx_site
8725 8726
 
8726 8727
     configure_php
8727 8728