freedombone-restore-remote 32KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # Restore from a given remote server
  12. # License
  13. # =======
  14. #
  15. # Copyright (C) 2015-2018 Bob Mottram <bob@freedombone.net>
  16. #
  17. # This program is free software: you can redistribute it and/or modify
  18. # it under the terms of the GNU Affero General Public License as published by
  19. # the Free Software Foundation, either version 3 of the License, or
  20. # (at your option) any later version.
  21. #
  22. # This program is distributed in the hope that it will be useful,
  23. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  24. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  25. # GNU Affero General Public License for more details.
  26. #
  27. # You should have received a copy of the GNU Affero General Public License
  28. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  29. PROJECT_NAME='freedombone'
  30. COMPLETION_FILE=$HOME/${PROJECT_NAME}-completed.txt
  31. CONFIGURATION_FILE=$HOME/${PROJECT_NAME}.cfg
  32. MONGODB_APPS_FILE=$HOME/.mongodbapps
  33. BACKUP_EXTRA_DIRECTORIES=/root/backup-extra-dirs.csv
  34. export TEXTDOMAIN=${PROJECT_NAME}-restore-remote
  35. export TEXTDOMAINDIR="/usr/share/locale"
  36. UTILS_FILES=/usr/share/${PROJECT_NAME}/utils/${PROJECT_NAME}-utils-*
  37. for f in $UTILS_FILES
  38. do
  39. source $f
  40. done
  41. SERVER_NAME=$1
  42. # whether to restore everything or just a specific application
  43. RESTORE_APP='all'
  44. if [ ${2} ]; then
  45. RESTORE_APP=${2}
  46. fi
  47. ADMIN_USERNAME=$(get_completion_param "Admin user")
  48. ADMIN_EMAIL_ADDRESS=${ADMIN_USERNAME}@${HOSTNAME}
  49. # Temporary location for data to be backed up to other servers
  50. SERVER_DIRECTORY=/root/remoterestore
  51. BACKUP_LIST=/home/${ADMIN_USERNAME}/backup.list
  52. if [ ! $SERVER_NAME ]; then
  53. echo $'restorefromfriend [server]'
  54. exit 1
  55. fi
  56. if [ ! -f $BACKUP_LIST ]; then
  57. echo $"No friends list found at $BACKUP_LIST"
  58. exit 2
  59. fi
  60. if ! grep -q "$SERVER_NAME" $BACKUP_LIST; then
  61. echo $"Server not found within the friends list"
  62. exit 3
  63. fi
  64. REMOTE_SERVER=$(grep -i "$SERVER_NAME" $BACKUP_LIST | awk -F ' ' '{print $1}')
  65. REMOTE_SSH_PORT=$(grep -i "$SERVER_NAME" $BACKUP_LIST | awk -F ' ' '{print $2}')
  66. REMOTE_DIRECTORY=$(grep -i "$SERVER_NAME" $BACKUP_LIST | awk -F ' ' '{print $3}')
  67. REMOTE_PASSWORD=$(grep -i "$SERVER_NAME" $BACKUP_LIST | awk -F ' ' '{print $4}')
  68. REMOTE_SERVER=$REMOTE_SERVER:$REMOTE_DIRECTORY
  69. NOW=$(date +"%Y-%m-%d %H:%M:%S")
  70. echo "$NOW Starting restore from $REMOTE_SERVER" >> /var/log/remotebackups.log
  71. rsync -ratlzv --rsh="/usr/bin/sshpass -p $REMOTE_PASSWORD ssh -p $REMOTE_SSH_PORT -o StrictHostKeyChecking=no" $REMOTE_SERVER/backup $SERVER_DIRECTORY
  72. if [ ! "$?" = "0" ]; then
  73. echo "$NOW Restore from $REMOTE_SERVER failed" >> /var/log/remotebackups.log
  74. # Send a warning email
  75. echo "Restore from $REMOTE_SERVER failed" | mail -s "${PROJECT_NAME} restore from friend" $ADMIN_EMAIL_ADDRESS
  76. exit 790
  77. else
  78. echo "$NOW Restored encrypted data from $REMOTE_SERVER" >> /var/log/remotebackups.log
  79. fi
  80. # MariaDB password
  81. DATABASE_PASSWORD=$(${PROJECT_NAME}-pass -u root -a mariadb)
  82. function copy_gpg_keys {
  83. echo $"Copying GPG keys from admin user to root"
  84. cp -r /home/$ADMIN_USERNAME/.gnupg /root
  85. gpg_set_permissions root
  86. }
  87. function restore_blocklist {
  88. if [[ $RESTORE_APP != 'all' ]]; then
  89. if [[ $RESTORE_APP != 'blocklist' ]]; then
  90. return
  91. fi
  92. fi
  93. if [ -d $USB_MOUNT/backup/blocklist ]; then
  94. echo $"Restoring blocklist"
  95. temp_restore_dir=/root/tempblocklist
  96. restore_directory_from_friend $temp_restore_dir blocklist
  97. if [ -d $temp_restore_dir/root/tempbackupblocklist ]; then
  98. cp -f $temp_restore_dir/root/tempbackupblocklist/${PROJECT_NAME}-firewall-domains.cfg /root/${PROJECT_NAME}-firewall-domains.cfg
  99. else
  100. cp -f $temp_restore_dir/${PROJECT_NAME}-firewall-domains.cfg /root/${PROJECT_NAME}-firewall-domains.cfg
  101. fi
  102. rm -rf $temp_restore_dir
  103. firewall_refresh_blocklist
  104. fi
  105. }
  106. function restore_configfiles {
  107. if [[ $RESTORE_APP != 'all' ]]; then
  108. if [[ $RESTORE_APP != 'configfiles' ]]; then
  109. return
  110. fi
  111. fi
  112. if [ -d $SERVER_DIRECTORY/backup/configfiles ]; then
  113. echo $"Restoring configuration files"
  114. temp_restore_dir=/root/tempconfigfiles
  115. restore_directory_from_friend $temp_restore_dir configfiles
  116. if [ -d $temp_restore_dir/root ]; then
  117. if [ -f $temp_restore_dir/root/.nostore ]; then
  118. if [ ! -f /root/.nostore ]; then
  119. touch /root/.nostore
  120. fi
  121. else
  122. if [ -f /root/.nostore ]; then
  123. rm /root/.nostore
  124. fi
  125. fi
  126. else
  127. if [ -f $temp_restore_dir/.nostore ]; then
  128. if [ ! -f /root/.nostore ]; then
  129. touch /root/.nostore
  130. fi
  131. else
  132. if [ -f /root/.nostore ]; then
  133. rm /root/.nostore
  134. fi
  135. fi
  136. fi
  137. #if [ -f $temp_restore_dir$NODEJS_INSTALLED_APPS_FILE ]; then
  138. # cp -f $temp_restore_dir$NODEJS_INSTALLED_APPS_FILE $NODEJS_INSTALLED_APPS_FILE
  139. #fi
  140. #if [ -f $temp_restore_dir/root/${PROJECT_NAME}.cfg ]; then
  141. # cp -f $temp_restore_dir/root/${PROJECT_NAME}.cfg $CONFIGURATION_FILE
  142. # if [ ! "$?" = "0" ]; then
  143. # unmount_drive
  144. # rm -rf $temp_restore_dir
  145. # exit 5372
  146. # fi
  147. #fi
  148. if [ -f $temp_restore_dir$MONGODB_APPS_FILE ]; then
  149. cp -f $temp_restore_dir$MONGODB_APPS_FILE $MONGODB_APPS_FILE
  150. if [ ! "$?" = "0" ]; then
  151. unmount_drive
  152. rm -rf $temp_restore_dir
  153. exit 7835335
  154. fi
  155. fi
  156. #if [ -f $CONFIGURATION_FILE ]; then
  157. # # install according to the config file
  158. # freedombone -c $CONFIGURATION_FILE
  159. #fi
  160. #if [ -f $temp_restore_dir/root/${PROJECT_NAME}-completed.txt ]; then
  161. # cp -f $temp_restore_dir/root/${PROJECT_NAME}-completed.txt $COMPLETION_FILE
  162. # if [ ! "$?" = "0" ]; then
  163. # unmount_drive
  164. # rm -rf $temp_restore_dir
  165. # exit 7252
  166. # fi
  167. #fi
  168. if [ -f ${temp_restore_dir}${BACKUP_EXTRA_DIRECTORIES} ]; then
  169. cp -f ${temp_restore_dir}${BACKUP_EXTRA_DIRECTORIES} ${BACKUP_EXTRA_DIRECTORIES}
  170. if [ ! "$?" = "0" ]; then
  171. unmount_drive
  172. rm -rf $temp_restore_dir
  173. exit 62121
  174. fi
  175. fi
  176. # restore nginx password hashes
  177. if [ -f $temp_restore_dir/root/htpasswd ]; then
  178. cp -f $temp_restore_dir/root/htpasswd /etc/nginx/.htpasswd
  179. fi
  180. rm -rf $temp_restore_dir
  181. fi
  182. }
  183. function restore_mariadb {
  184. if [[ $RESTORE_APP != 'all' ]]; then
  185. if [[ $RESTORE_APP != 'mariadb' ]]; then
  186. return
  187. fi
  188. fi
  189. if [[ $(is_completed install_mariadb) == "0" ]]; then
  190. function_check install_mariadb
  191. install_mariadb
  192. fi
  193. if [ -d $SERVER_DIRECTORY/backup/mariadb ]; then
  194. echo $"Restoring MariaDB settings"
  195. temp_restore_dir=/root/tempmariadb
  196. restore_directory_from_friend $temp_restore_dir mariadb
  197. store_original_mariadb_password
  198. echo $'Obtaining MariaDB password'
  199. db_pass=$(cat /root/.mariadboriginal)
  200. if [ ${#db_pass} -gt 0 ]; then
  201. echo $"Restore the MariaDB user table"
  202. if [ -d ${temp_restore_dir}${temp_restore_dir} ]; then
  203. mysqlsuccess=$(mysql -u root --password="$db_pass" mysql -o < ${temp_restore_dir}${temp_restore_dir}/mysql.sql)
  204. else
  205. mysqlsuccess=$(mysql -u root --password="$db_pass" mysql -o < ${temp_restore_dir}/mysql.sql)
  206. fi
  207. if [ ! "$?" = "0" ]; then
  208. echo $"Try again using the password obtained from backup"
  209. db_pass=$(${PROJECT_NAME}-pass -u root -a mariadb)
  210. if [ -d ${temp_restore_dir}${temp_restore_dir} ]; then
  211. mysqlsuccess=$(mysql -u root --password="$db_pass" mysql -o < ${temp_restore_dir}${temp_restore_dir}/mysql.sql)
  212. else
  213. mysqlsuccess=$(mysql -u root --password="$db_pass" mysql -o < ${temp_restore_dir}/mysql.sql)
  214. fi
  215. fi
  216. if [ ! "$?" = "0" ]; then
  217. echo "$mysqlsuccess"
  218. exit 962
  219. fi
  220. echo $"Restarting database"
  221. systemctl restart mariadb
  222. echo $"Ensure MariaDB handles authentication"
  223. MARIADB_PASSWORD=$(${PROJECT_NAME}-pass -u root -a mariadb)
  224. mariadb_fix_authentication
  225. fi
  226. rm -rf ${temp_restore_dir}
  227. fi
  228. }
  229. function restore_postgresql {
  230. if [[ $RESTORE_APP != 'all' ]]; then
  231. if [[ $RESTORE_APP != 'postgresql' ]]; then
  232. return
  233. fi
  234. fi
  235. if [[ $(is_completed install_postgresql) == "0" ]]; then
  236. function_check install_postgresql
  237. install_postgresql
  238. fi
  239. if [ -d $SERVER_DIRECTORY/backup/postgresql ]; then
  240. echo $"Restoring Postgresql settings"
  241. temp_restore_dir=/root/temppostgresql
  242. restore_directory_from_friend $temp_restore_dir postgresql
  243. store_original_postgresql_password
  244. echo $'Obtaining Postgresql password'
  245. db_pass=$(cat /root/.postgresqloriginal)
  246. if [ ${#db_pass} -gt 0 ]; then
  247. echo $"Restore the Postgresql user table"
  248. if [ -d ${temp_restore_dir}${temp_restore_dir} ]; then
  249. mysqlsuccess=$(sudo -u postgres pg_restore ${temp_restore_dir}${temp_restore_dir}/postgresql.sql)
  250. else
  251. mysqlsuccess=$(sudo -u postgres pg_restore ${temp_restore_dir}/postgresql.sql)
  252. fi
  253. if [ ! "$?" = "0" ]; then
  254. echo $"Try again using the password obtained from backup"
  255. db_pass=$(${PROJECT_NAME}-pass -u root -a postgresql)
  256. if [ -d ${temp_restore_dir}${temp_restore_dir} ]; then
  257. mysqlsuccess=$(sudo -u postgres pg_restore ${temp_restore_dir}${temp_restore_dir}/postgresql.sql)
  258. else
  259. mysqlsuccess=$(sudo -u postgres pg_restore ${temp_restore_dir}/postgresql.sql)
  260. fi
  261. fi
  262. if [ ! "$?" = "0" ]; then
  263. echo "$mysqlsuccess"
  264. exit 962
  265. fi
  266. echo $"Restarting database"
  267. systemctl restart postgresql
  268. echo $"Ensure postgresql handles authentication"
  269. POSTGRESQL_PASSWORD=$(${PROJECT_NAME}-pass -u root -a postgresql)
  270. fi
  271. rm -rf ${temp_restore_dir}
  272. fi
  273. }
  274. function restore_letsencrypt {
  275. if [[ $RESTORE_APP != 'all' ]]; then
  276. if [[ $RESTORE_APP != 'letsencrypt' ]]; then
  277. return
  278. fi
  279. fi
  280. if [ -d $SERVER_DIRECTORY/backup/letsencrypt ]; then
  281. echo $"Restoring Lets Encrypt settings"
  282. restore_directory_from_friend /etc/letsencrypt letsencrypt
  283. fi
  284. }
  285. function restore_passwordstore {
  286. if [[ $RESTORE_APP != 'all' ]]; then
  287. if [[ $RESTORE_APP != 'passwords' ]]; then
  288. return
  289. fi
  290. fi
  291. if [ -d $SERVER_DIRECTORY/backup/passwordstore ]; then
  292. store_original_mariadb_password
  293. echo $"Restoring password store"
  294. restore_directory_from_friend /root/.passwords passwordstore
  295. fi
  296. }
  297. function restore_tor {
  298. if [[ $RESTORE_APP != 'all' ]]; then
  299. if [[ $RESTORE_APP != 'tor' ]]; then
  300. return
  301. fi
  302. fi
  303. if [ -d $SERVER_DIRECTORY/backup/tor ]; then
  304. echo $"Restoring Tor settings"
  305. restore_directory_from_friend /var/lib/tor tor
  306. fi
  307. }
  308. function restore_mutt_settings {
  309. if [[ $RESTORE_APP != 'all' ]]; then
  310. if [[ $RESTORE_APP != 'mutt' ]]; then
  311. return
  312. fi
  313. fi
  314. for d in $SERVER_DIRECTORY/backup/mutt/*/ ; do
  315. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  316. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  317. if [ -d $SERVER_DIRECTORY/backup/mutt/$USERNAME ]; then
  318. if [ ! -d /home/$USERNAME ]; then
  319. ${PROJECT_NAME}-adduser $USERNAME
  320. fi
  321. echo $"Restoring Mutt settings for $USERNAME"
  322. temp_restore_dir=/root/tempmutt
  323. restore_directory_from_friend ${temp_restore_dir} mutt/$USERNAME
  324. if [ -d ${temp_restore_dir}/home/$USERNAME/tempbackup ]; then
  325. if [ -f ${temp_restore_dir}/home/$USERNAME/tempbackup/.muttrc ]; then
  326. cp -f ${temp_restore_dir}/home/$USERNAME/tempbackup/.muttrc /home/$USERNAME/.muttrc
  327. sed -i '/set sidebar_delim/d' /home/$USERNAME/.muttrc
  328. sed -i '/set sidebar_sort/d' /home/$USERNAME/.muttrc
  329. fi
  330. if [ -f ${temp_restore_dir}/home/$USERNAME/tempbackup/Muttrc ]; then
  331. cp -f ${temp_restore_dir}/home/$USERNAME/tempbackup/Muttrc /etc/Muttrc
  332. sed -i '/set sidebar_delim/d' /etc/Muttrc
  333. sed -i '/set sidebar_sort/d' /etc/Muttrc
  334. fi
  335. else
  336. if [ -f ${temp_restore_dir}/.muttrc ]; then
  337. cp -f ${temp_restore_dir}/.muttrc /home/$USERNAME/.muttrc
  338. sed -i '/set sidebar_delim/d' /home/$USERNAME/.muttrc
  339. sed -i '/set sidebar_sort/d' /home/$USERNAME/.muttrc
  340. fi
  341. if [ -f ${temp_restore_dir}/Muttrc ]; then
  342. cp -f ${temp_restore_dir}/Muttrc /etc/Muttrc
  343. sed -i '/set sidebar_delim/d' /etc/Muttrc
  344. sed -i '/set sidebar_sort/d' /etc/Muttrc
  345. fi
  346. fi
  347. if [ ! "$?" = "0" ]; then
  348. rm -rf ${temp_restore_dir}
  349. exit 276
  350. fi
  351. rm -rf ${temp_restore_dir}
  352. fi
  353. fi
  354. done
  355. }
  356. function restore_gpg {
  357. if [[ $RESTORE_APP != 'gpg' ]]; then
  358. return
  359. fi
  360. for d in $SERVER_DIRECTORY/backup/gnupg/*/ ; do
  361. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  362. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  363. if [ -d $SERVER_DIRECTORY/backup/gnupg/$USERNAME ]; then
  364. if [ ! -d /home/$USERNAME ]; then
  365. ${PROJECT_NAME}-adduser $USERNAME
  366. fi
  367. echo $"Restoring gnupg settings for $USERNAME"
  368. temp_restore_dir=/root/tempgnupg
  369. restore_directory_from_friend ${temp_restore_dir} gnupg/$USERNAME
  370. if [ -d ${temp_restore_dir}/home/$USERNAME/.gnupg ]; then
  371. cp -r ${temp_restore_dir}/home/$USERNAME/.gnupg /home/$USERNAME/
  372. else
  373. if [ ! -d /home/$USERNAME/.gnupg ]; then
  374. mkdir /home/$USERNAME/.gnupg
  375. fi
  376. cp -r ${temp_restore_dir}/* /home/$USERNAME/.gnupg/
  377. fi
  378. if [ ! "$?" = "0" ]; then
  379. rm -rf ${temp_restore_dir}
  380. exit 276
  381. fi
  382. rm -rf ${temp_restore_dir}
  383. if [[ "$USERNAME" == "$ADMIN_USERNAME" ]]; then
  384. cp -r /home/$USERNAME/.gnupg /root
  385. if [ ! "$?" = "0" ]; then
  386. exit 283
  387. fi
  388. gpg_set_permissions root
  389. fi
  390. fi
  391. fi
  392. done
  393. }
  394. function restore_procmail {
  395. if [[ $RESTORE_APP != 'all' ]]; then
  396. if [[ $RESTORE_APP != 'procmail' ]]; then
  397. return
  398. fi
  399. fi
  400. for d in $SERVER_DIRECTORY/backup/procmail/*/ ; do
  401. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  402. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  403. if [ -d $SERVER_DIRECTORY/backup/procmail/$USERNAME ]; then
  404. if [ ! -d /home/$USERNAME ]; then
  405. ${PROJECT_NAME}-adduser $USERNAME
  406. fi
  407. echo $"Restoring procmail settings for $USERNAME"
  408. temp_restore_dir=/root/tempprocmail
  409. restore_directory_from_friend ${temp_restore_dir} procmail/$USERNAME
  410. if [ -d ${temp_restore_dir}/home/$USERNAME/tempbackup ]; then
  411. cp -f ${temp_restore_dir}/home/$USERNAME/tempbackup/.procmailrc /home/$USERNAME/
  412. else
  413. cp -f ${temp_restore_dir}/.procmailrc /home/$USERNAME/.procmailrc
  414. fi
  415. if [ ! "$?" = "0" ]; then
  416. rm -rf ${temp_restore_dir}
  417. exit 276
  418. fi
  419. rm -rf ${temp_restore_dir}
  420. fi
  421. fi
  422. done
  423. }
  424. function restore_spamassassin {
  425. if [[ $RESTORE_APP != 'all' ]]; then
  426. if [[ $RESTORE_APP != 'spamassassin' ]]; then
  427. return
  428. fi
  429. fi
  430. for d in $SERVER_DIRECTORY/backup/spamassassin/*/ ; do
  431. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  432. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  433. if [ -d $SERVER_DIRECTORY/backup/spamassassin/$USERNAME ]; then
  434. if [ ! -d /home/$USERNAME ]; then
  435. ${PROJECT_NAME}-adduser $USERNAME
  436. fi
  437. echo $"Restoring spamassassin settings for $USERNAME"
  438. temp_restore_dir=/root/tempspamassassin
  439. restore_directory_from_friend $temp_restore_dir spamassassin/$USERNAME
  440. if [ -d $temp_restore_dir/home/$USERNAME ]; then
  441. cp -rf $temp_restore_dir/home/$USERNAME/.spamassassin /home/$USERNAME/
  442. else
  443. if [ ! -d /home/$USERNAME/.spamassassin ]; then
  444. mkdir /home/$USERNAME/.spamassassin
  445. fi
  446. cp -rf $temp_restore_dir/* /home/$USERNAME/.spamassassin/
  447. fi
  448. if [ ! "$?" = "0" ]; then
  449. rm -rf $temp_restore_dir
  450. exit 276
  451. fi
  452. rm -rf $temp_restore_dir
  453. fi
  454. fi
  455. done
  456. }
  457. function restore_admin_readme {
  458. if [[ $RESTORE_APP != 'all' ]]; then
  459. if [[ $RESTORE_APP != 'readme' ]]; then
  460. return
  461. fi
  462. fi
  463. if [ -d $SERVER_DIRECTORY/backup/readme ]; then
  464. echo $"Restoring README"
  465. temp_restore_dir=/root/tempreadme
  466. restore_directory_from_friend $temp_restore_dir readme
  467. if [ -d $temp_restore_dir/home/$ADMIN_USERNAME/tempbackup ]; then
  468. cp -f $temp_restore_dir/home/$ADMIN_USERNAME/tempbackup/README /home/$ADMIN_USERNAME/
  469. else
  470. cp -f $temp_restore_dir/README /home/$ADMIN_USERNAME/README
  471. fi
  472. if [ ! "$?" = "0" ]; then
  473. rm -rf $temp_restore_dir
  474. exit 276
  475. fi
  476. rm -rf $temp_restore_dir
  477. fi
  478. }
  479. function restore_ssh_keys {
  480. if [[ $RESTORE_APP != 'all' ]]; then
  481. if [[ $RESTORE_APP != 'ssh' ]]; then
  482. return
  483. fi
  484. fi
  485. for d in $SERVER_DIRECTORY/backup/ssh/*/ ; do
  486. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  487. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  488. if [ -d $SERVER_DIRECTORY/backup/ssh/$USERNAME ]; then
  489. if [ ! -d /home/$USERNAME ]; then
  490. ${PROJECT_NAME}-adduser $USERNAME
  491. fi
  492. echo $"Restoring ssh keys for $USERNAME"
  493. temp_restore_dir=/root/tempssh
  494. restore_directory_from_friend $temp_restore_dir ssh/$USERNAME
  495. if [ -d $temp_restore_dir/home/$USERNAME/.ssh ]; then
  496. cp -r $temp_restore_dir/home/$USERNAME/.ssh /home/$USERNAME/
  497. else
  498. if [ ! -d /home/$USERNAME/.ssh ]; then
  499. mkdir /home/$USERNAME/.ssh
  500. fi
  501. cp -r $temp_restore_dir/* /home/$USERNAME/.ssh/
  502. fi
  503. if [ ! "$?" = "0" ]; then
  504. rm -rf $temp_restore_dir
  505. exit 664
  506. fi
  507. rm -rf $temp_restore_dir
  508. fi
  509. fi
  510. done
  511. }
  512. function restore_user_config {
  513. if [[ $RESTORE_APP != 'all' ]]; then
  514. if [[ $RESTORE_APP != 'userconfig' ]]; then
  515. return
  516. fi
  517. fi
  518. for d in $SERVER_DIRECTORY/backup/config/*/ ; do
  519. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  520. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  521. if [ -d $SERVER_DIRECTORY/backup/config/$USERNAME ]; then
  522. if [ ! -d /home/$USERNAME ]; then
  523. ${PROJECT_NAME}-adduser $USERNAME
  524. fi
  525. echo $"Restoring config files for $USERNAME"
  526. temp_restore_dir=/root/tempconfig
  527. restore_directory_from_friend $temp_restore_dir config/$USERNAME
  528. if [ -d $temp_restore_dir/home/$USERNAME ]; then
  529. cp -r $temp_restore_dir/home/$USERNAME/.config /home/$USERNAME/
  530. else
  531. if [ ! -d /home/$USERNAME/.config ]; then
  532. mkdir /home/$USERNAME/.config
  533. fi
  534. cp -r $temp_restore_dir/* /home/$USERNAME/.config/
  535. fi
  536. if [ ! "$?" = "0" ]; then
  537. rm -rf $temp_restore_dir
  538. exit 664
  539. fi
  540. rm -rf $temp_restore_dir
  541. fi
  542. fi
  543. done
  544. }
  545. function restore_user_monkeysphere {
  546. if [[ $RESTORE_APP != 'all' ]]; then
  547. if [[ $RESTORE_APP != 'usermonkeysphere' ]]; then
  548. return
  549. fi
  550. fi
  551. for d in $SERVER_DIRECTORY/backup/monkeysphere/*/ ; do
  552. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  553. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  554. if [ -d $SERVER_DIRECTORY/backup/monkeysphere/$USERNAME ]; then
  555. if [ ! -d /home/$USERNAME ]; then
  556. ${PROJECT_NAME}-adduser $USERNAME
  557. fi
  558. echo $"Restoring monkeysphere ids for $USERNAME"
  559. temp_restore_dir=/root/tempmonkeysphere
  560. restore_directory_from_friend $temp_restore_dir monkeysphere/$USERNAME
  561. if [ -d $temp_restore_dir/home/$USERNAME/.monkeysphere ]; then
  562. cp -r $temp_restore_dir/home/$USERNAME/.monkeysphere /home/$USERNAME/
  563. else
  564. if [ ! -d /home/$USERNAME/.monkeysphere ]; then
  565. mkdir /home/$USERNAME/.monkeysphere
  566. fi
  567. cp -r $temp_restore_dir/* /home/$USERNAME/.monkeysphere/
  568. fi
  569. if [ ! "$?" = "0" ]; then
  570. rm -rf $temp_restore_dir
  571. exit 664
  572. fi
  573. rm -rf $temp_restore_dir
  574. fi
  575. fi
  576. # The admin user is the identity certifier
  577. MY_EMAIL_ADDRESS="${ADMIN_USERNAME}@${HOSTNAME}"
  578. read_config_param MY_EMAIL_ADDRESS
  579. MY_GPG_PUBLIC_KEY_ID=$(gpg_pubkey_from_email "$ADMIN_USERNAME" "$MY_EMAIL_ADDRESS")
  580. fpr=$(gpg --with-colons --fingerprint $MY_GPG_PUBLIC_KEY_ID | grep fpr | head -n 1 | awk -F ':' '{print $10}')
  581. monkeysphere-authentication add-identity-certifier $fpr
  582. monkeysphere-authentication update-users
  583. done
  584. }
  585. function restore_user_fin {
  586. if [[ $RESTORE_APP != 'all' ]]; then
  587. if [[ $RESTORE_APP != 'userfin' ]]; then
  588. return
  589. fi
  590. fi
  591. for d in $SERVER_DIRECTORY/backup/fin/*/ ; do
  592. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  593. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  594. if [ -d $SERVER_DIRECTORY/backup/fin/$USERNAME ]; then
  595. if [ ! -d /home/$USERNAME ]; then
  596. ${PROJECT_NAME}-adduser $USERNAME
  597. fi
  598. echo $"Restoring fin files for $USERNAME"
  599. temp_restore_dir=/root/tempfin
  600. restore_directory_from_friend $temp_restore_dir fin/$USERNAME
  601. if [ -d $temp_restore_dir/home/$USERNAME/.fin ]; then
  602. cp -r $temp_restore_dir/home/$USERNAME/.fin /home/$USERNAME/
  603. else
  604. if [ ! -d /home/$USERNAME/.fin ]; then
  605. mkdir /home/$USERNAME/.fin
  606. fi
  607. cp -r $temp_restore_dir/* /home/$USERNAME/.fin/
  608. fi
  609. if [ ! "$?" = "0" ]; then
  610. rm -rf $temp_restore_dir
  611. exit 664
  612. fi
  613. rm -rf $temp_restore_dir
  614. fi
  615. fi
  616. done
  617. }
  618. function restore_user_local {
  619. if [[ $RESTORE_APP != 'all' ]]; then
  620. if [[ $RESTORE_APP != 'userlocal' ]]; then
  621. return
  622. fi
  623. fi
  624. for d in $SERVER_DIRECTORY/backup/local/*/ ; do
  625. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  626. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  627. if [ -d $SERVER_DIRECTORY/backup/local/$USERNAME ]; then
  628. if [ ! -d /home/$USERNAME ]; then
  629. ${PROJECT_NAME}-adduser $USERNAME
  630. fi
  631. echo $"Restoring local files for $USERNAME"
  632. temp_restore_dir=/root/templocal
  633. restore_directory_from_friend $temp_restore_dir local/$USERNAME
  634. if [ -d $temp_restore_dir/home/$USERNAME/.local ]; then
  635. cp -r $temp_restore_dir/home/$USERNAME/.local /home/$USERNAME/
  636. else
  637. if [ ! -d /home/$USERNAME/.local ]; then
  638. mkdir /home/$USERNAME/.local
  639. fi
  640. cp -r $temp_restore_dir/* /home/$USERNAME/.local/
  641. fi
  642. if [ ! "$?" = "0" ]; then
  643. rm -rf $temp_restore_dir
  644. exit 664
  645. fi
  646. rm -rf $temp_restore_dir
  647. fi
  648. fi
  649. done
  650. }
  651. function restore_certs {
  652. if [[ $RESTORE_APP != 'all' ]]; then
  653. if [[ $RESTORE_APP != 'certs' ]]; then
  654. return
  655. fi
  656. fi
  657. if [ -d $SERVER_DIRECTORY/backup/ssl ]; then
  658. echo $"Restoring certificates"
  659. restore_directory_from_friend /root/tempssl ssl
  660. if [ -d /root/tempssl/etc/ssl ]; then
  661. cp -r /root/tempssl/etc/ssl/* /etc/ssl
  662. else
  663. cp -r /root/tempssl/* /etc/ssl/
  664. fi
  665. if [ ! "$?" = "0" ]; then
  666. exit 276
  667. fi
  668. rm -rf /root/tempssl
  669. update-ca-certificates
  670. # restore ownership
  671. if [ -f /etc/ssl/private/xmpp.key ]; then
  672. chown prosody:prosody /etc/ssl/private/xmpp.key
  673. chown prosody:prosody /etc/ssl/certs/xmpp.*
  674. fi
  675. if [ -d /etc/dovecot ]; then
  676. chown root:dovecot /etc/ssl/private/dovecot.*
  677. chown root:dovecot /etc/ssl/certs/dovecot.*
  678. fi
  679. if [ -f /etc/ssl/private/exim.key ]; then
  680. cp /etc/ssl/private/exim.key /etc/exim4
  681. cp /etc/ssl/certs/exim.crt /etc/exim4
  682. cp /etc/ssl/certs/exim.dhparam /etc/exim4
  683. chown root:Debian-exim /etc/exim4/exim.key /etc/exim4/exim.crt /etc/exim4/exim.dhparam
  684. chmod 640 /etc/exim4/exim.key /etc/exim4/exim.crt /etc/exim4/exim.dhparam
  685. fi
  686. if [ -f /etc/ssl/private/mumble.key ]; then
  687. if [ -d /var/lib/mumble-server ]; then
  688. cp /etc/ssl/certs/mumble.* /var/lib/mumble-server
  689. cp /etc/ssl/private/mumble.key /var/lib/mumble-server
  690. chown -R mumble-server:mumble-server /var/lib/mumble-server
  691. fi
  692. fi
  693. fi
  694. }
  695. function restore_personal_settings {
  696. if [[ $RESTORE_APP != 'all' ]]; then
  697. if [[ $RESTORE_APP != 'personal' ]]; then
  698. return
  699. fi
  700. fi
  701. for d in $SERVER_DIRECTORY/backup/personal/*/ ; do
  702. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  703. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  704. if [ -d $SERVER_DIRECTORY/backup/personal/$USERNAME ]; then
  705. if [ ! -d /home/$USERNAME ]; then
  706. ${PROJECT_NAME}-adduser $USERNAME
  707. fi
  708. echo $"Restoring personal settings for $USERNAME"
  709. temp_restore_dir=/root/temppersonal
  710. restore_directory_from_friend $temp_restore_dir personal/$USERNAME
  711. if [ -d $temp_restore_dir/home/$USERNAME/personal ]; then
  712. if [ -d /home/$USERNAME/personal ]; then
  713. rm -rf /home/$USERNAME/personal
  714. fi
  715. mv $temp_restore_dir/home/$USERNAME/personal /home/$USERNAME
  716. else
  717. if [ ! -d /home/$USERNAME/personal ]; then
  718. mkdir /home/$USERNAME/personal
  719. fi
  720. cp -r $temp_restore_dir/* /home/$USERNAME/personal/
  721. fi
  722. if [ ! "$?" = "0" ]; then
  723. exit 18437643
  724. fi
  725. rm -rf $temp_restore_dir
  726. fi
  727. fi
  728. done
  729. }
  730. function restore_mailing_list {
  731. if [[ $RESTORE_APP != 'all' ]]; then
  732. if [[ $RESTORE_APP != 'mailinglist' ]]; then
  733. return
  734. fi
  735. fi
  736. if [ -d /var/spool/mlmmj ]; then
  737. echo $"Restoring public mailing list"
  738. temp_restore_dir=/root/tempmailinglist
  739. restore_directory_from_friend $temp_restore_dir mailinglist
  740. if [ -d $temp_restore_dir/root/spool/mlmmj ]; then
  741. cp -r $temp_restore_dir/root/spool/mlmmj/* /var/spool/mlmmj
  742. else
  743. cp -r $temp_restore_dir/* /var/spool/mlmmj/
  744. fi
  745. if [ ! "$?" = "0" ]; then
  746. exit 526
  747. fi
  748. rm -rf $temp_restore_dir
  749. fi
  750. }
  751. function restore_email {
  752. if [[ $RESTORE_APP != 'all' ]]; then
  753. if [[ $RESTORE_APP != 'email' ]]; then
  754. return
  755. fi
  756. fi
  757. for d in $SERVER_DIRECTORY/backup/mail/*/ ; do
  758. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  759. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  760. if [ -d $SERVER_DIRECTORY/backup/mail/$USERNAME ]; then
  761. if [ ! -d /home/$USERNAME ]; then
  762. ${PROJECT_NAME}-adduser $USERNAME
  763. fi
  764. echo $"Restoring emails for $USERNAME"
  765. temp_restore_dir=/root/tempmail
  766. restore_directory_from_friend $temp_restore_dir mail/$USERNAME
  767. if [ ! -d /home/$USERNAME/Maildir ]; then
  768. mkdir /home/$USERNAME/Maildir
  769. fi
  770. if [ -d $temp_restore_dir/root/tempbackupemail/$USERNAME ]; then
  771. tar -xzvf $temp_restore_dir/root/tempbackupemail/$USERNAME/maildir.tar.gz -C /
  772. else
  773. tar -xzvf $temp_restore_dir/maildir.tar.gz -C /
  774. fi
  775. if [ ! "$?" = "0" ]; then
  776. exit 927
  777. fi
  778. rm -rf $temp_restore_dir
  779. fi
  780. fi
  781. done
  782. }
  783. # Social key management
  784. # Recover any key fragments and reconstruct the gpg key
  785. ${PROJECT_NAME}-recoverkey -u ${ADMIN_USERNAME} -l $BACKUP_LIST
  786. copy_gpg_keys
  787. restore_blocklist
  788. restore_configfiles
  789. restore_passwordstore
  790. restore_mariadb
  791. restore_postgresql
  792. restore_letsencrypt
  793. restore_mutt_settings
  794. restore_gpg
  795. restore_procmail
  796. restore_spamassassin
  797. restore_admin_readme
  798. restore_ssh_keys
  799. restore_user_config
  800. restore_user_monkeysphere
  801. restore_user_fin
  802. restore_user_local
  803. restore_certs
  804. restore_personal_settings
  805. restore_mailing_list
  806. restore_email
  807. restore_apps remote
  808. set_user_permissions
  809. update_default_domain
  810. # ensure that all TLS certificates are pinned
  811. #${PROJECT_NAME}-pin-cert all
  812. echo $"*** Remote restore was successful ***"
  813. exit 0