freedombone-app-matrix 26KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # matrix server
  12. #
  13. # https://raw.githubusercontent.com/silvio/docker-matrix
  14. # https://matrix.org/blog/2016/02/10/advanced-synapse-setup-with-lets-encrypt
  15. #
  16. # Test by visiting https://$MATRIX_DOMAIN_NAME/_matrix/key/v2/server/auto
  17. #
  18. # If working then telnet $MATRIX_DOMAIN_NAME 8448 should return a response
  19. #
  20. # License
  21. # =======
  22. #
  23. # Copyright (C) 2016-2017 Bob Mottram <bob@freedombone.net>
  24. #
  25. # This program is free software: you can redistribute it and/or modify
  26. # it under the terms of the GNU Affero General Public License as published by
  27. # the Free Software Foundation, either version 3 of the License, or
  28. # (at your option) any later version.
  29. #
  30. # This program is distributed in the hope that it will be useful,
  31. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  32. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  33. # GNU Affero General Public License for more details.
  34. #
  35. # You should have received a copy of the GNU Affero General Public License
  36. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  37. # Login username is @username:domain
  38. VARIANTS='full full-vim chat'
  39. IN_DEFAULT_INSTALL=0
  40. SHOW_ON_ABOUT=1
  41. MATRIX_DOMAIN_NAME=
  42. MATRIX_CODE=
  43. MATRIX_DATA_DIR='/var/lib/matrix'
  44. MATRIX_HTTP_PORT=8448
  45. MATRIX_PORT=8009
  46. MATRIX_FEDERATION_ONION_PORT=8111
  47. MATRIX_ONION_PORT=8109
  48. MATRIX_REPO="https://github.com/matrix-org/synapse"
  49. MATRIX_COMMIT='c45dc6c62aa2a2e83a10d8116a709dfd8c144e3c'
  50. REPORT_STATS="no"
  51. MATRIX_SECRET=
  52. matrix_variables=(ONION_ONLY
  53. MY_USERNAME
  54. MATRIX_SECRET
  55. DEFAULT_DOMAIN_NAME
  56. MATRIX_DOMAIN_NAME
  57. MATRIX_CODE)
  58. function logging_on_matrix {
  59. if [ -f /var/lib/matrix/homeserver.yaml ]; then
  60. if ! grep -q "log_file: /etc/matrix/homeserver.log" /var/lib/matrix/homeserver.yaml; then
  61. sed -i 's|log_file:.*|log_file: /etc/matrix/homeserver.log|g' /var/lib/matrix/homeserver.yaml
  62. fi
  63. if ! grep -q "#log_config:" /var/lib/matrix/homeserver.yaml; then
  64. sed -i 's|log_config:|#log_config:|g' /var/lib/matrix/homeserver.yaml
  65. fi
  66. fi
  67. }
  68. function logging_off_matrix {
  69. if [ -f /var/lib/matrix/homeserver.yaml ]; then
  70. if ! grep -q "log_file: /dev/null" /var/lib/matrix/homeserver.yaml; then
  71. sed -i 's|log_file:.*|log_file: /dev/null|g' /var/lib/matrix/homeserver.yaml
  72. fi
  73. if ! grep -q "#log_config:" /var/lib/matrix/homeserver.yaml; then
  74. sed -i 's|log_config:|#log_config:|g' /var/lib/matrix/homeserver.yaml
  75. fi
  76. if [ -f /etc/matrix/homeserver.log ]; then
  77. $REMOVE_FILES_COMMAND /etc/matrix/homeserver.log
  78. fi
  79. if [ -f /etc/matrix/homeserver.log.1 ]; then
  80. $REMOVE_FILES_COMMAND /etc/matrix/homeserver.log.1
  81. fi
  82. if [ -f /etc/matrix/homeserver.log.2 ]; then
  83. $REMOVE_FILES_COMMAND /etc/matrix/homeserver.log.2
  84. fi
  85. if [ -f /etc/matrix/homeserver.log.3 ]; then
  86. $REMOVE_FILES_COMMAND /etc/matrix/homeserver.log.3
  87. fi
  88. fi
  89. }
  90. function matrix_nginx {
  91. matrix_nginx_site=/etc/nginx/sites-available/$MATRIX_DOMAIN_NAME
  92. if [[ $ONION_ONLY == "no" ]]; then
  93. echo 'server {' > $matrix_nginx_site
  94. echo " listen 0.0.0.0:443;" >> $matrix_nginx_site
  95. echo " server_name ${MATRIX_DOMAIN_NAME};" >> $matrix_nginx_site
  96. echo '' >> $matrix_nginx_site
  97. echo ' # Security' >> $matrix_nginx_site
  98. function_check nginx_ssl
  99. nginx_ssl ${MATRIX_DOMAIN_NAME}
  100. function_check nginx_disable_sniffing
  101. nginx_disable_sniffing ${MATRIX_DOMAIN_NAME}
  102. echo ' add_header Strict-Transport-Security max-age=15768000;' >> $matrix_nginx_site
  103. echo '' >> $matrix_nginx_site
  104. echo ' # Logs' >> $matrix_nginx_site
  105. echo ' access_log /dev/null;' >> $matrix_nginx_site
  106. echo ' error_log /dev/null;' >> $matrix_nginx_site
  107. echo '' >> $matrix_nginx_site
  108. echo ' root /var/lib/matrix/media_store;' >> $matrix_nginx_site
  109. echo '' >> $matrix_nginx_site
  110. echo ' # Index' >> $matrix_nginx_site
  111. echo ' index index.html;' >> $matrix_nginx_site
  112. echo '' >> $matrix_nginx_site
  113. echo ' location /_matrix {' >> $matrix_nginx_site
  114. function_check nginx_limits
  115. nginx_limits ${MATRIX_DOMAIN_NAME} '15m'
  116. echo " proxy_pass http://localhost:${MATRIX_PORT};" >> $matrix_nginx_site
  117. echo ' }' >> $matrix_nginx_site
  118. echo '}' >> $matrix_nginx_site
  119. echo '' >> $matrix_nginx_site
  120. echo 'server {' >> $matrix_nginx_site
  121. echo " listen 0.0.0.0:${MATRIX_HTTP_PORT};" >> $matrix_nginx_site
  122. echo " server_name ${MATRIX_DOMAIN_NAME};" >> $matrix_nginx_site
  123. echo '' >> $matrix_nginx_site
  124. echo ' # Security' >> $matrix_nginx_site
  125. function_check nginx_ssl
  126. nginx_ssl ${MATRIX_DOMAIN_NAME}
  127. function_check nginx_disable_sniffing
  128. nginx_disable_sniffing ${MATRIX_DOMAIN_NAME}
  129. echo ' add_header Strict-Transport-Security max-age=15768000;' >> $matrix_nginx_site
  130. echo '' >> $matrix_nginx_site
  131. echo ' # Logs' >> $matrix_nginx_site
  132. echo ' access_log /dev/null;' >> $matrix_nginx_site
  133. echo ' error_log /dev/null;' >> $matrix_nginx_site
  134. echo '' >> $matrix_nginx_site
  135. echo ' root /var/lib/matrix/media_store;' >> $matrix_nginx_site
  136. echo '' >> $matrix_nginx_site
  137. echo ' # Index' >> $matrix_nginx_site
  138. echo ' index index.html;' >> $matrix_nginx_site
  139. echo '' >> $matrix_nginx_site
  140. echo ' # Location' >> $matrix_nginx_site
  141. echo ' location /_matrix {' >> $matrix_nginx_site
  142. function_check nginx_limits
  143. nginx_limits ${MATRIX_DOMAIN_NAME} '15m'
  144. echo " proxy_pass http://localhost:${MATRIX_PORT};" >> $matrix_nginx_site
  145. echo ' }' >> $matrix_nginx_site
  146. echo '}' >> $matrix_nginx_site
  147. echo '' >> $matrix_nginx_site
  148. else
  149. echo -n '' > $matrix_nginx_site
  150. fi
  151. echo 'server {' >> $matrix_nginx_site
  152. echo " listen 127.0.0.1:$MATRIX_FEDERATION_ONION_PORT default_server;" >> $matrix_nginx_site
  153. echo " server_name $MATRIX_DOMAIN_NAME;" >> $matrix_nginx_site
  154. echo '' >> $matrix_nginx_site
  155. function_check nginx_disable_sniffing
  156. nginx_disable_sniffing $MATRIX_DOMAIN_NAME
  157. echo '' >> $matrix_nginx_site
  158. echo ' # Logs' >> $matrix_nginx_site
  159. echo ' access_log /dev/null;' >> $matrix_nginx_site
  160. echo ' error_log /dev/null;' >> $matrix_nginx_site
  161. echo '' >> $matrix_nginx_site
  162. echo ' root /var/lib/matrix/media_store;' >> $matrix_nginx_site
  163. echo '' >> $matrix_nginx_site
  164. echo ' # Location' >> $matrix_nginx_site
  165. echo ' location /_matrix {' >> $matrix_nginx_site
  166. function_check nginx_limits
  167. nginx_limits ${MATRIX_DOMAIN_NAME} '15m'
  168. echo " proxy_pass http://localhost:${MATRIX_PORT};" >> $matrix_nginx_site
  169. echo ' }' >> $matrix_nginx_site
  170. echo '}' >> $matrix_nginx_site
  171. echo '' >> $matrix_nginx_site
  172. echo 'server {' >> $matrix_nginx_site
  173. echo " listen 127.0.0.1:$MATRIX_ONION_PORT default_server;" >> $matrix_nginx_site
  174. echo " server_name $MATRIX_DOMAIN_NAME;" >> $matrix_nginx_site
  175. echo '' >> $matrix_nginx_site
  176. function_check nginx_disable_sniffing
  177. nginx_disable_sniffing $MATRIX_DOMAIN_NAME
  178. echo '' >> $matrix_nginx_site
  179. echo ' # Logs' >> $matrix_nginx_site
  180. echo ' access_log /dev/null;' >> $matrix_nginx_site
  181. echo ' error_log /dev/null;' >> $matrix_nginx_site
  182. echo '' >> $matrix_nginx_site
  183. echo ' root /var/lib/matrix/media_store;' >> $matrix_nginx_site
  184. echo '' >> $matrix_nginx_site
  185. echo ' # Location' >> $matrix_nginx_site
  186. echo ' location /_matrix {' >> $matrix_nginx_site
  187. function_check nginx_limits
  188. nginx_limits ${MATRIX_DOMAIN_NAME} '15m'
  189. echo " proxy_pass http://localhost:${MATRIX_PORT};" >> $matrix_nginx_site
  190. echo ' }' >> $matrix_nginx_site
  191. echo '}' >> $matrix_nginx_site
  192. if [ ! -d /var/www/$MATRIX_DOMAIN_NAME ]; then
  193. mkdir -p /var/www/$MATRIX_DOMAIN_NAME/htdocs
  194. fi
  195. function_check add_ddns_domain
  196. add_ddns_domain $MATRIX_DOMAIN_NAME
  197. }
  198. function matrix_generate_homeserver_file {
  199. local filepath="${1}"
  200. cd /etc/matrix
  201. python -m synapse.app.homeserver \
  202. --config-path "${filepath}" \
  203. --generate-config \
  204. --report-stats ${REPORT_STATS} \
  205. --server-name ${MATRIX_DOMAIN_NAME}
  206. }
  207. function matrix_configure_homeserver_yaml {
  208. local turnkey="${1}"
  209. local filepath="${2}"
  210. local ymltemp="$(mktemp)"
  211. awk -v TURNURIES="turn_uris: [\"turn:${MATRIX_DOMAIN_NAME}:${TURN_HTTP_PORT}?transport=udp\", \"turn:${DEFAULT_DOMAIN_NAME}:${TURN_HTTP_PORT}?transport=tcp\"]" \
  212. -v TURNSHAREDSECRET="turn_shared_secret: \"${turnkey}\"" \
  213. -v PIDFILE="pid_file: ${MATRIX_DATA_DIR}/homeserver.pid" \
  214. -v DATABASE="database: \"${MATRIX_DATA_DIR}/homeserver.db\"" \
  215. -v LOGFILE="log_file: \"/dev/null\"" \
  216. -v MEDIASTORE="media_store_path: \"${MATRIX_DATA_DIR}/media_store\"" \
  217. '{
  218. sub(/turn_shared_secret: "YOUR_SHARED_SECRET"/, TURNSHAREDSECRET);
  219. sub(/turn_uris: \[\]/, TURNURIES);
  220. sub(/pid_file: \/homeserver.pid/, PIDFILE);
  221. sub(/database: "\/homeserver.db"/, DATABASE);
  222. sub(/log_file: "\/homeserver.log"/, LOGFILE);
  223. sub(/media_store_path: "\/media_store"/, MEDIASTORE);
  224. print;
  225. }' "${filepath}" > "${ymltemp}"
  226. mv ${ymltemp} "${filepath}"
  227. if [[ $ONION_ONLY == "no" ]]; then
  228. sed -i "s|tls_certificate_path:.*|tls_certificate_path: \"/etc/ssl/certs/${MATRIX_DOMAIN_NAME}.pem\"|g" "${filepath}"
  229. if ! grep -q '#tls_private_key_path' "${filepath}"; then
  230. sed -i 's|tls_private_key_path|#tls_private_key_path|g' "${filepath}"
  231. fi
  232. sed -i "s|tls_dh_params_path:.*|tls_dh_params_path: \"/etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam\"|g" "${filepath}"
  233. fi
  234. sed -i "s|${MATRIX_HTTP_PORT}|8449|g" "${filepath}"
  235. sed -i "s|8008|${MATRIX_PORT}|g" "${filepath}"
  236. sed -i 's|tls:.*|tls: False|g' "${filepath}"
  237. sed -i 's|no_tls: .*|no_tls: True|g' "${filepath}"
  238. sed -i ':a;N;$!ba;s/ tls: [^\n]*/ tls: False/2' "${filepath}"
  239. sed -i 's|enable_registration_captcha.*|enable_registration_captcha: False|g' "${filepath}"
  240. sed -i "s|database: \".*|database: \"${MATRIX_DATA_DIR}/homeserver.db\"|g" "${filepath}"
  241. sed -i "s|media_store_path:.*|media_store_path: \"${MATRIX_DATA_DIR}/media_store\"|g" "${filepath}"
  242. sed -i "s|pid_file:.*|pid_file: \"${MATRIX_DATA_DIR}/homeserver.pid\"|g" "${filepath}"
  243. sed -i "s|log_file:.*|log_file: \"/dev/null\"|g" "${filepath}"
  244. sed -i "s|log_config:|#log_config:|g" "${filepath}"
  245. sed -i 's|bind_address:.*|bind_address: 127.0.0.1|g' "${filepath}"
  246. sed -i "s|bind_addresses:.*|bind_addresses: ['127.0.0.1']|g" "${filepath}"
  247. sed -i 's|x_forwarded:.*|x_forwarded: false|g' "${filepath}"
  248. sed -i "s|server_name:.*|server_name: \"${MATRIX_DOMAIN_NAME}\"|g" "${filepath}"
  249. sed -i "/trusted_third_party_id_servers:/a - ${MATRIX_DOMAIN_NAME}" "${filepath}"
  250. sed -i "s|- ${MATRIX_DOMAIN_NAME}| - ${MATRIX_DOMAIN_NAME}|g" "${filepath}"
  251. sed -i "s|enable_registration:.*|enable_registration: False|g" "${filepath}"
  252. }
  253. function matrix_diff {
  254. DIFFPARAMS="${DIFFPARAMS:-Naur}"
  255. MATRIX_DOMAIN_NAME="${MATRIX_DOMAIN_NAME:-demo_server_name}"
  256. REPORT_STATS="${REPORT_STATS:-no_or_yes}"
  257. export MATRIX_DOMAIN_NAME REPORT_STATS
  258. matrix_generate_synapse_file $INSTALL_DIR/homeserver.synapse.yaml
  259. diff -${DIFFPARAMS} $INSTALL_DIR/homeserver.synapse.yaml ${MATRIX_DATA_DIR}/homeserver.yaml
  260. rm $INSTALL_DIR/homeserver.synapse.yaml
  261. }
  262. function matrix_generate {
  263. breakup="0"
  264. [[ -z "${MATRIX_DOMAIN_NAME}" ]] && echo "STOP! environment variable MATRIX_DOMAIN_NAME must be set" && breakup="1"
  265. [[ -z "${REPORT_STATS}" ]] && echo "STOP! environment variable REPORT_STATS must be set to 'no' or 'yes'" && breakup="1"
  266. [[ "${breakup}" == "1" ]] && exit 1
  267. [[ "${REPORT_STATS}" != "yes" ]] && [[ "${REPORT_STATS}" != "no" ]] && \
  268. echo "STOP! REPORT_STATS needs to be 'no' or 'yes'" && breakup="1"
  269. homeserver_config=${MATRIX_DATA_DIR}/homeserver.yaml
  270. if [ -f $homeserver_config ]; then
  271. rm $homeserver_config
  272. fi
  273. matrix_generate_homeserver_file $homeserver_config
  274. matrix_configure_homeserver_yaml "${turnkey}" $homeserver_config
  275. }
  276. function remove_user_matrix {
  277. remove_username="$1"
  278. ${PROJECT_NAME}-pass -u $remove_username --rmapp matrix
  279. # TODO: There is no user removal script within synapse
  280. }
  281. function add_user_matrix {
  282. new_username="$1"
  283. new_user_password="$2"
  284. read_config_param MY_USERNAME
  285. read_config_param MATRIX_DOMAIN_NAME
  286. ${PROJECT_NAME}-pass -u $new_username -a matrix -p "$new_user_password"
  287. if [[ "$new_username" != "$MY_USERNAME" ]]; then
  288. echo 'no' | register_new_matrix_user -c ${MATRIX_DATA_DIR}/homeserver.yaml -u "${new_username}" -p "${new_user_password}" http://localhost:${MATRIX_PORT}
  289. else
  290. echo 'yes' | register_new_matrix_user -c ${MATRIX_DATA_DIR}/homeserver.yaml -u "${new_username}" -p "${new_user_password}" -a http://localhost:${MATRIX_PORT}
  291. fi
  292. echo "0"
  293. }
  294. function install_interactive_matrix {
  295. if [ ! $ONION_ONLY ]; then
  296. ONION_ONLY='no'
  297. fi
  298. if [[ $ONION_ONLY != "no" ]]; then
  299. MATRIX_DOMAIN_NAME='matrix.local'
  300. write_config_param "MATRIX_DOMAIN_NAME" "$MATRIX_DOMAIN_NAME"
  301. else
  302. function_check interactive_site_details
  303. interactive_site_details "matrix" "MATRIX_DOMAIN_NAME" "MATRIX_CODE"
  304. if [ ! $MATRIX_DOMAIN_NAME ]; then
  305. return
  306. fi
  307. read_config_param "MATRIX_DOMAIN_NAME"
  308. read_config_param "MATRIX_CODE"
  309. fi
  310. APP_INSTALLED=1
  311. }
  312. function change_password_matrix {
  313. curr_username="$1"
  314. new_user_password="$2"
  315. #${PROJECT_NAME}-pass -u "$curr_username" -a matrix -p "$new_user_password"
  316. }
  317. function reconfigure_matrix {
  318. echo -n ''
  319. }
  320. function upgrade_matrix {
  321. if [ ! -d /etc/matrix ]; then
  322. return
  323. fi
  324. CURR_MATRIX_COMMIT=$(get_completion_param "matrix commit")
  325. if [[ "$CURR_MATRIX_COMMIT" == "$MATRIX_COMMIT" ]]; then
  326. return
  327. fi
  328. systemctl stop turn
  329. systemctl stop matrix
  330. function_check set_repo_commit
  331. set_repo_commit /etc/matrix "matrix commit" "$MATRIX_COMMIT" $MATRIX_REPO
  332. cd /etc/matrix
  333. pip install --upgrade --process-dependency-links .
  334. sed -i 's/ssl.PROTOCOL_SSLv23/ssl.PROTOCOL_TLSv1/g' /usr/local/bin/register_new_matrix_user
  335. chown -R matrix:matrix /etc/matrix
  336. chown -R matrix:matrix $MATRIX_DATA_DIR
  337. pip install --upgrade --force "pynacl==0.3.0"
  338. if [ -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam ]; then
  339. chmod 755 /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam
  340. fi
  341. systemctl start turn
  342. systemctl start matrix
  343. }
  344. function backup_local_matrix {
  345. source_directory=/etc/matrix
  346. if [ -d $source_directory ]; then
  347. systemctl stop turn
  348. systemctl stop matrix
  349. function_check backup_directory_to_usb
  350. backup_directory_to_usb $source_directory matrix
  351. source_directory=$MATRIX_DATA_DIR
  352. if [ -d $source_directory ]; then
  353. backup_directory_to_usb $source_directory matrixdata
  354. fi
  355. systemctl start turn
  356. systemctl start matrix
  357. fi
  358. }
  359. function restore_local_matrix {
  360. if [ -d /etc/matrix ]; then
  361. systemctl stop turn
  362. systemctl stop matrix
  363. temp_restore_dir=/root/tempmatrix
  364. function_check restore_directory_from_usb
  365. restore_directory_from_usb $temp_restore_dir matrix
  366. cp -r $temp_restore_dir/etc/matrix/* /etc/matrix
  367. if [ ! "$?" = "0" ]; then
  368. function_check backup_unmount_drive
  369. backup_unmount_drive
  370. exit 3783
  371. fi
  372. rm -rf $temp_restore_dir
  373. chown -R matrix:matrix /etc/matrix
  374. temp_restore_dir=/root/tempmatrixdata
  375. restore_directory_from_usb $temp_restore_dir matrixdata
  376. cp -r $temp_restore_dir$MATRIX_DATA_DIR/* $MATRIX_DATA_DIR
  377. if [ ! "$?" = "0" ]; then
  378. function_check backup_unmount_drive
  379. backup_unmount_drive
  380. exit 78352
  381. fi
  382. rm -rf $temp_restore_dir
  383. chown -R matrix:matrix $MATRIX_DATA_DIR
  384. if [[ $ONION_ONLY == "no" ]]; then
  385. if [ -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam ]; then
  386. chmod 755 /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam
  387. fi
  388. fi
  389. systemctl start turn
  390. systemctl start matrix
  391. fi
  392. }
  393. function backup_remote_matrix {
  394. source_directory=/etc/matrix
  395. if [ -d $source_directory ]; then
  396. systemctl stop turn
  397. systemctl stop matrix
  398. function_check backup_directory_to_friend
  399. backup_directory_to_friend $source_directory matrix
  400. source_directory=$MATRIX_DATA_DIR
  401. if [ -d $source_directory ]; then
  402. backup_directory_to_friend $source_directory matrixdata
  403. fi
  404. systemctl start turn
  405. systemctl start matrix
  406. fi
  407. }
  408. function restore_remote_matrix {
  409. if [ -d /etc/matrix ]; then
  410. systemctl stop turn
  411. systemctl stop matrix
  412. temp_restore_dir=/root/tempmatrix
  413. function_check restore_directory_from_friend
  414. restore_directory_from_friend $temp_restore_dir matrix
  415. cp -r $temp_restore_dir/etc/matrix/* /etc/matrix
  416. if [ ! "$?" = "0" ]; then
  417. exit 38935
  418. fi
  419. rm -rf $temp_restore_dir
  420. chown -R matrix:matrix /etc/matrix
  421. temp_restore_dir=/root/tempmatrixdata
  422. restore_directory_from_friend $temp_restore_dir matrixdata
  423. cp -r $temp_restore_dir$MATRIX_DATA_DIR/* $MATRIX_DATA_DIR
  424. if [ ! "$?" = "0" ]; then
  425. exit 60923
  426. fi
  427. rm -rf $temp_restore_dir
  428. chown -R matrix:matrix $MATRIX_DATA_DIR
  429. systemctl start turn
  430. systemctl start matrix
  431. fi
  432. }
  433. function remove_matrix {
  434. firewall_remove ${MATRIX_HTTP_PORT}
  435. nginx_dissite $MATRIX_DOMAIN_NAME
  436. remove_certs $MATRIX_DOMAIN_NAME
  437. if [ -f /etc/nginx/sites-available/$MATRIX_DOMAIN_NAME ]; then
  438. rm /etc/nginx/sites-available/$MATRIX_DOMAIN_NAME
  439. fi
  440. if [ ! -d /var/www/$MATRIX_DOMAIN_NAME ]; then
  441. rm -rf /var/www/$MATRIX_DOMAIN_NAME
  442. fi
  443. function_check remove_ddns_domain
  444. remove_ddns_domain $MATRIX_DOMAIN_NAME
  445. systemctl stop matrix
  446. function_check remove_turn
  447. remove_turn
  448. systemctl disable matrix
  449. if [ -f /etc/systemd/system/matrix.service ]; then
  450. rm /etc/systemd/system/matrix.service
  451. fi
  452. systemctl daemon-reload
  453. apt-get -y remove --purge coturn
  454. cd /etc/matrix
  455. pip uninstall .
  456. rm -rf $MATRIX_DATA_DIR
  457. rm -rf /etc/matrix
  458. groupdel -f matrix
  459. userdel -r matrix
  460. remove_onion_service matrix ${MATRIX_ONION_PORT}
  461. remove_onion_service matrix ${MATRIX_FEDERATION_ONION_PORT}
  462. #sed -i "/# Matrix Server/,/# End of Matrix Server/d" /etc/nginx/sites-available/${MATRIX_DOMAIN_NAME}
  463. systemctl restart nginx
  464. remove_completion_param install_matrix
  465. sed -i '/matrix/d' $COMPLETION_FILE
  466. }
  467. function install_home_server {
  468. if [ ! -d /etc/matrix ]; then
  469. if [ -d /repos/matrix ]; then
  470. mkdir /etc/matrix
  471. cp -r -p /repos/matrix/. /etc/matrix
  472. cd /etc/matrix
  473. git pull
  474. else
  475. function_check git_clone
  476. git_clone $MATRIX_REPO /etc/matrix
  477. fi
  478. if [ ! -d /etc/matrix ]; then
  479. echo $'Unable to clone matrix repo'
  480. exit 6724683
  481. fi
  482. fi
  483. cd /etc/matrix
  484. git checkout $MATRIX_COMMIT -b $MATRIX_COMMIT
  485. set_completion_param "matrix commit" "$MATRIX_COMMIT"
  486. if [ ! -d $INSTALL_DIR/matrix ]; then
  487. mkdir -p $INSTALL_DIR/matrix
  488. fi
  489. rm -rf /usr/local/lib/python2.7/dist-packages/ldap*
  490. if [ -d $INSTALL_DIR/matrix ]; then
  491. rm -rf $INSTALL_DIR/matrix/*
  492. fi
  493. pip install --upgrade --process-dependency-links . -b $INSTALL_DIR/matrix
  494. if [ ! "$?" = "0" ]; then
  495. echo $'Failed to install matrix home server'
  496. exit 782542
  497. fi
  498. if [ ! -d $MATRIX_DATA_DIR ]; then
  499. mkdir $MATRIX_DATA_DIR
  500. fi
  501. groupadd matrix
  502. useradd -c "Matrix system account" -d $MATRIX_DATA_DIR -m -r -g matrix matrix
  503. usermod -a -G www-data matrix
  504. usermod -a -G ssl-cert matrix
  505. function_check install_turn
  506. install_turn
  507. MATRIX_SECRET="${turnkey}"
  508. function_check matrix_generate
  509. matrix_generate
  510. if [[ -z ${MATRIX_DATA_DIR}/homeserver.yaml ]]; then
  511. echo $'homeserver.yaml is zero size'
  512. exit 783724
  513. fi
  514. # Disable the web client
  515. sed -i 's|web_client:.*|web_client: False|g' $MATRIX_DATA_DIR/homeserver.yaml
  516. sed -i 's|, webclient||g' $MATRIX_DATA_DIR/homeserver.yaml
  517. sed -i "/- '0.0.0.0'/d" $MATRIX_DATA_DIR/homeserver.yaml
  518. chmod -R 700 $MATRIX_DATA_DIR/homeserver.yaml
  519. chown -R matrix:matrix /etc/matrix
  520. chown -R matrix:matrix $MATRIX_DATA_DIR
  521. sed -i 's/ssl.PROTOCOL_SSLv23/ssl.PROTOCOL_TLSv1/g' /usr/local/bin/register_new_matrix_user
  522. echo '[Unit]' > /etc/systemd/system/matrix.service
  523. echo 'Description=Synapse Matrix homeserver' >> /etc/systemd/system/matrix.service
  524. echo 'After=network.target nginx.target' >> /etc/systemd/system/matrix.service
  525. echo '' >> /etc/systemd/system/matrix.service
  526. echo '[Service]' >> /etc/systemd/system/matrix.service
  527. echo 'Type=simple' >> /etc/systemd/system/matrix.service
  528. echo 'User=matrix' >> /etc/systemd/system/matrix.service
  529. echo "WorkingDirectory=/etc/matrix" >> /etc/systemd/system/matrix.service
  530. echo "ExecStart=/usr/bin/python -m synapse.app.homeserver --config-path ${MATRIX_DATA_DIR}/homeserver.yaml" >> /etc/systemd/system/matrix.service
  531. echo 'Restart=on-failure' >> /etc/systemd/system/matrix.service
  532. echo 'RestartSec=10' >> /etc/systemd/system/matrix.service
  533. echo '' >> /etc/systemd/system/matrix.service
  534. echo '[Install]' >> /etc/systemd/system/matrix.service
  535. echo 'WantedBy=multi-user.target' >> /etc/systemd/system/matrix.service
  536. systemctl enable matrix
  537. systemctl daemon-reload
  538. systemctl start matrix
  539. # wait for the database to be created
  540. sleep 5
  541. if [ ! -f $MATRIX_DATA_DIR/homeserver.db ]; then
  542. # On low power systems more sleeping may be needed
  543. sleep 10
  544. if [ ! -f $MATRIX_DATA_DIR/homeserver.db ]; then
  545. echo $'No matrix home server database was created'
  546. exit 23782
  547. fi
  548. fi
  549. chmod -R 700 $MATRIX_DATA_DIR/homeserver.db
  550. MATRIX_ONION_HOSTNAME=$(add_onion_service matrix ${MATRIX_PORT} ${MATRIX_ONION_PORT})
  551. echo "HiddenServicePort ${MATRIX_HTTP_PORT} 127.0.0.1:${MATRIX_FEDERATION_ONION_PORT}" >> /etc/tor/torrc
  552. systemctl restart tor
  553. if [ ! ${MATRIX_PASSWORD} ]; then
  554. if [ -f ${IMAGE_PASSWORD_FILE} ]; then
  555. MATRIX_PASSWORD="$(printf `cat $IMAGE_PASSWORD_FILE`)"
  556. else
  557. MATRIX_PASSWORD="$(create_password ${MINIMUM_PASSWORD_LENGTH})"
  558. fi
  559. fi
  560. firewall_add matrix ${MATRIX_HTTP_PORT}
  561. rm -rf ${MATRIX_DATA_DIR}/Maildir
  562. rm -rf ${MATRIX_DATA_DIR}/.mutt
  563. rm -f ${MATRIX_DATA_DIR}/.muttrc
  564. rm -f ${MATRIX_DATA_DIR}/.mutt-alias
  565. rm -f ${MATRIX_DATA_DIR}/.procmailrc
  566. rm -f ${MATRIX_DATA_DIR}/.emacs-mutt
  567. }
  568. function install_matrix {
  569. if [[ $ONION_ONLY != 'no' ]]; then
  570. return
  571. fi
  572. check_ram_availability 1500
  573. if [ ! -d $INSTALL_DIR ]; then
  574. mkdir -p $INSTALL_DIR
  575. fi
  576. if [[ ${ONION_ONLY} == 'no' ]]; then
  577. if [ ! -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.pem ]; then
  578. if [ -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.crt ]; then
  579. rm /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.crt
  580. fi
  581. if [ -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam ]; then
  582. rm /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam
  583. fi
  584. echo $'Obtaining certificate for the matrix domain'
  585. function_check create_site_certificate
  586. create_site_certificate ${MATRIX_DOMAIN_NAME} 'yes'
  587. chmod 755 /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam
  588. if [ -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.crt ]; then
  589. echo $'Incorrect certificate generated'
  590. exit 73572
  591. fi
  592. fi
  593. chgrp -R ssl-cert /etc/letsencrypt
  594. chmod -R g=rX /etc/letsencrypt
  595. fi
  596. export DEBIAN_FRONTEND=noninteractive
  597. apt-get -yq install coreutils \
  598. curl file gcc git libevent-2.0-5 \
  599. libevent-dev libffi-dev libffi6 \
  600. libgnutls28-dev libjpeg62-turbo \
  601. libjpeg62-turbo-dev libldap-2.4-2 \
  602. libldap2-dev libsasl2-dev \
  603. libsqlite3-dev libssl-dev \
  604. libssl1.1 libtool libxml2 \
  605. libxml2-dev libxslt1-dev libxslt1.1 \
  606. make python python-dev \
  607. python-pip python-psycopg2 \
  608. python-virtualenv sqlite unzip \
  609. zlib1g zlib1g-dev
  610. pip install --upgrade pip
  611. pip install --upgrade python-ldap
  612. pip install --upgrade lxml
  613. function_check matrix_nginx
  614. matrix_nginx
  615. function_check install_home_server
  616. install_home_server
  617. systemctl restart nginx
  618. systemctl restart turn
  619. systemctl restart matrix
  620. function_check update_default_domain
  621. update_default_domain
  622. # wait for nginx to start otherwise user add fails later
  623. sleep 5
  624. pip install --upgrade --force "pynacl==0.3.0"
  625. if [[ $(add_user_matrix "${MY_USERNAME}" "${MATRIX_PASSWORD}" | tail -n 1) != "0" ]]; then
  626. echo $'Failed to add matrix admin user';
  627. exit 879352
  628. fi
  629. set_completion_param "matrix domain" "$MATRIX_DOMAIN_NAME"
  630. APP_INSTALLED=1
  631. }