freedombone 565KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072207320742075207620772078207920802081208220832084208520862087208820892090209120922093209420952096209720982099210021012102210321042105210621072108210921102111211221132114211521162117211821192120212121222123212421252126212721282129213021312132213321342135213621372138213921402141214221432144214521462147214821492150215121522153215421552156215721582159216021612162216321642165216621672168216921702171217221732174217521762177217821792180218121822183218421852186218721882189219021912192219321942195219621972198219922002201220222032204220522062207220822092210221122122213221422152216221722182219222022212222222322242225222622272228222922302231223222332234223522362237223822392240224122422243224422452246224722482249225022512252225322542255225622572258225922602261226222632264226522662267226822692270227122722273227422752276227722782279228022812282228322842285228622872288228922902291229222932294229522962297229822992300230123022303230423052306230723082309231023112312231323142315231623172318231923202321232223232324232523262327232823292330233123322333233423352336233723382339234023412342234323442345234623472348234923502351235223532354235523562357235823592360236123622363236423652366236723682369237023712372237323742375237623772378237923802381238223832384238523862387238823892390239123922393239423952396239723982399240024012402240324042405240624072408240924102411241224132414241524162417241824192420242124222423242424252426242724282429243024312432243324342435243624372438243924402441244224432444244524462447244824492450245124522453245424552456245724582459246024612462246324642465246624672468246924702471247224732474247524762477247824792480248124822483248424852486248724882489249024912492249324942495249624972498249925002501250225032504250525062507250825092510251125122513251425152516251725182519252025212522252325242525252625272528252925302531253225332534253525362537253825392540254125422543254425452546254725482549255025512552255325542555255625572558255925602561256225632564256525662567256825692570257125722573257425752576257725782579258025812582258325842585258625872588258925902591259225932594259525962597259825992600260126022603260426052606260726082609261026112612261326142615261626172618261926202621262226232624262526262627262826292630263126322633263426352636263726382639264026412642264326442645264626472648264926502651265226532654265526562657265826592660266126622663266426652666266726682669267026712672267326742675267626772678267926802681268226832684268526862687268826892690269126922693269426952696269726982699270027012702270327042705270627072708270927102711271227132714271527162717271827192720272127222723272427252726272727282729273027312732273327342735273627372738273927402741274227432744274527462747274827492750275127522753275427552756275727582759276027612762276327642765276627672768276927702771277227732774277527762777277827792780278127822783278427852786278727882789279027912792279327942795279627972798279928002801280228032804280528062807280828092810281128122813281428152816281728182819282028212822282328242825282628272828282928302831283228332834283528362837283828392840284128422843284428452846284728482849285028512852285328542855285628572858285928602861286228632864286528662867286828692870287128722873287428752876287728782879288028812882288328842885288628872888288928902891289228932894289528962897289828992900290129022903290429052906290729082909291029112912291329142915291629172918291929202921292229232924292529262927292829292930293129322933293429352936293729382939294029412942294329442945294629472948294929502951295229532954295529562957295829592960296129622963296429652966296729682969297029712972297329742975297629772978297929802981298229832984298529862987298829892990299129922993299429952996299729982999300030013002300330043005300630073008300930103011301230133014301530163017301830193020302130223023302430253026302730283029303030313032303330343035303630373038303930403041304230433044304530463047304830493050305130523053305430553056305730583059306030613062306330643065306630673068306930703071307230733074307530763077307830793080308130823083308430853086308730883089309030913092309330943095309630973098309931003101310231033104310531063107310831093110311131123113311431153116311731183119312031213122312331243125312631273128312931303131313231333134313531363137313831393140314131423143314431453146314731483149315031513152315331543155315631573158315931603161316231633164316531663167316831693170317131723173317431753176317731783179318031813182318331843185318631873188318931903191319231933194319531963197319831993200320132023203320432053206320732083209321032113212321332143215321632173218321932203221322232233224322532263227322832293230323132323233323432353236323732383239324032413242324332443245324632473248324932503251325232533254325532563257325832593260326132623263326432653266326732683269327032713272327332743275327632773278327932803281328232833284328532863287328832893290329132923293329432953296329732983299330033013302330333043305330633073308330933103311331233133314331533163317331833193320332133223323332433253326332733283329333033313332333333343335333633373338333933403341334233433344334533463347334833493350335133523353335433553356335733583359336033613362336333643365336633673368336933703371337233733374337533763377337833793380338133823383338433853386338733883389339033913392339333943395339633973398339934003401340234033404340534063407340834093410341134123413341434153416341734183419342034213422342334243425342634273428342934303431343234333434343534363437343834393440344134423443344434453446344734483449345034513452345334543455345634573458345934603461346234633464346534663467346834693470347134723473347434753476347734783479348034813482348334843485348634873488348934903491349234933494349534963497349834993500350135023503350435053506350735083509351035113512351335143515351635173518351935203521352235233524352535263527352835293530353135323533353435353536353735383539354035413542354335443545354635473548354935503551355235533554355535563557355835593560356135623563356435653566356735683569357035713572357335743575357635773578357935803581358235833584358535863587358835893590359135923593359435953596359735983599360036013602360336043605360636073608360936103611361236133614361536163617361836193620362136223623362436253626362736283629363036313632363336343635363636373638363936403641364236433644364536463647364836493650365136523653365436553656365736583659366036613662366336643665366636673668366936703671367236733674367536763677367836793680368136823683368436853686368736883689369036913692369336943695369636973698369937003701370237033704370537063707370837093710371137123713371437153716371737183719372037213722372337243725372637273728372937303731373237333734373537363737373837393740374137423743374437453746374737483749375037513752375337543755375637573758375937603761376237633764376537663767376837693770377137723773377437753776377737783779378037813782378337843785378637873788378937903791379237933794379537963797379837993800380138023803380438053806380738083809381038113812381338143815381638173818381938203821382238233824382538263827382838293830383138323833383438353836383738383839384038413842384338443845384638473848384938503851385238533854385538563857385838593860386138623863386438653866386738683869387038713872387338743875387638773878387938803881388238833884388538863887388838893890389138923893389438953896389738983899390039013902390339043905390639073908390939103911391239133914391539163917391839193920392139223923392439253926392739283929393039313932393339343935393639373938393939403941394239433944394539463947394839493950395139523953395439553956395739583959396039613962396339643965396639673968396939703971397239733974397539763977397839793980398139823983398439853986398739883989399039913992399339943995399639973998399940004001400240034004400540064007400840094010401140124013401440154016401740184019402040214022402340244025402640274028402940304031403240334034403540364037403840394040404140424043404440454046404740484049405040514052405340544055405640574058405940604061406240634064406540664067406840694070407140724073407440754076407740784079408040814082408340844085408640874088408940904091409240934094409540964097409840994100410141024103410441054106410741084109411041114112411341144115411641174118411941204121412241234124412541264127412841294130413141324133413441354136413741384139414041414142414341444145414641474148414941504151415241534154415541564157415841594160416141624163416441654166416741684169417041714172417341744175417641774178417941804181418241834184418541864187418841894190419141924193419441954196419741984199420042014202420342044205420642074208420942104211421242134214421542164217421842194220422142224223422442254226422742284229423042314232423342344235423642374238423942404241424242434244424542464247424842494250425142524253425442554256425742584259426042614262426342644265426642674268426942704271427242734274427542764277427842794280428142824283428442854286428742884289429042914292429342944295429642974298429943004301430243034304430543064307430843094310431143124313431443154316431743184319432043214322432343244325432643274328432943304331433243334334433543364337433843394340434143424343434443454346434743484349435043514352435343544355435643574358435943604361436243634364436543664367436843694370437143724373437443754376437743784379438043814382438343844385438643874388438943904391439243934394439543964397439843994400440144024403440444054406440744084409441044114412441344144415441644174418441944204421442244234424442544264427442844294430443144324433443444354436443744384439444044414442444344444445444644474448444944504451445244534454445544564457445844594460446144624463446444654466446744684469447044714472447344744475447644774478447944804481448244834484448544864487448844894490449144924493449444954496449744984499450045014502450345044505450645074508450945104511451245134514451545164517451845194520452145224523452445254526452745284529453045314532453345344535453645374538453945404541454245434544454545464547454845494550455145524553455445554556455745584559456045614562456345644565456645674568456945704571457245734574457545764577457845794580458145824583458445854586458745884589459045914592459345944595459645974598459946004601460246034604460546064607460846094610461146124613461446154616461746184619462046214622462346244625462646274628462946304631463246334634463546364637463846394640464146424643464446454646464746484649465046514652465346544655465646574658465946604661466246634664466546664667466846694670467146724673467446754676467746784679468046814682468346844685468646874688468946904691469246934694469546964697469846994700470147024703470447054706470747084709471047114712471347144715471647174718471947204721472247234724472547264727472847294730473147324733473447354736473747384739474047414742474347444745474647474748474947504751475247534754475547564757475847594760476147624763476447654766476747684769477047714772477347744775477647774778477947804781478247834784478547864787478847894790479147924793479447954796479747984799480048014802480348044805480648074808480948104811481248134814481548164817481848194820482148224823482448254826482748284829483048314832483348344835483648374838483948404841484248434844484548464847484848494850485148524853485448554856485748584859486048614862486348644865486648674868486948704871487248734874487548764877487848794880488148824883488448854886488748884889489048914892489348944895489648974898489949004901490249034904490549064907490849094910491149124913491449154916491749184919492049214922492349244925492649274928492949304931493249334934493549364937493849394940494149424943494449454946494749484949495049514952495349544955495649574958495949604961496249634964496549664967496849694970497149724973497449754976497749784979498049814982498349844985498649874988498949904991499249934994499549964997499849995000500150025003500450055006500750085009501050115012501350145015501650175018501950205021502250235024502550265027502850295030503150325033503450355036503750385039504050415042504350445045504650475048504950505051505250535054505550565057505850595060506150625063506450655066506750685069507050715072507350745075507650775078507950805081508250835084508550865087508850895090509150925093509450955096509750985099510051015102510351045105510651075108510951105111511251135114511551165117511851195120512151225123512451255126512751285129513051315132513351345135513651375138513951405141514251435144514551465147514851495150515151525153515451555156515751585159516051615162516351645165516651675168516951705171517251735174517551765177517851795180518151825183518451855186518751885189519051915192519351945195519651975198519952005201520252035204520552065207520852095210521152125213521452155216521752185219522052215222522352245225522652275228522952305231523252335234523552365237523852395240524152425243524452455246524752485249525052515252525352545255525652575258525952605261526252635264526552665267526852695270527152725273527452755276527752785279528052815282528352845285528652875288528952905291529252935294529552965297529852995300530153025303530453055306530753085309531053115312531353145315531653175318531953205321532253235324532553265327532853295330533153325333533453355336533753385339534053415342534353445345534653475348534953505351535253535354535553565357535853595360536153625363536453655366536753685369537053715372537353745375537653775378537953805381538253835384538553865387538853895390539153925393539453955396539753985399540054015402540354045405540654075408540954105411541254135414541554165417541854195420542154225423542454255426542754285429543054315432543354345435543654375438543954405441544254435444544554465447544854495450545154525453545454555456545754585459546054615462546354645465546654675468546954705471547254735474547554765477547854795480548154825483548454855486548754885489549054915492549354945495549654975498549955005501550255035504550555065507550855095510551155125513551455155516551755185519552055215522552355245525552655275528552955305531553255335534553555365537553855395540554155425543554455455546554755485549555055515552555355545555555655575558555955605561556255635564556555665567556855695570557155725573557455755576557755785579558055815582558355845585558655875588558955905591559255935594559555965597559855995600560156025603560456055606560756085609561056115612561356145615561656175618561956205621562256235624562556265627562856295630563156325633563456355636563756385639564056415642564356445645564656475648564956505651565256535654565556565657565856595660566156625663566456655666566756685669567056715672567356745675567656775678567956805681568256835684568556865687568856895690569156925693569456955696569756985699570057015702570357045705570657075708570957105711571257135714571557165717571857195720572157225723572457255726572757285729573057315732573357345735573657375738573957405741574257435744574557465747574857495750575157525753575457555756575757585759576057615762576357645765576657675768576957705771577257735774577557765777577857795780578157825783578457855786578757885789579057915792579357945795579657975798579958005801580258035804580558065807580858095810581158125813581458155816581758185819582058215822582358245825582658275828582958305831583258335834583558365837583858395840584158425843584458455846584758485849585058515852585358545855585658575858585958605861586258635864586558665867586858695870587158725873587458755876587758785879588058815882588358845885588658875888588958905891589258935894589558965897589858995900590159025903590459055906590759085909591059115912591359145915591659175918591959205921592259235924592559265927592859295930593159325933593459355936593759385939594059415942594359445945594659475948594959505951595259535954595559565957595859595960596159625963596459655966596759685969597059715972597359745975597659775978597959805981598259835984598559865987598859895990599159925993599459955996599759985999600060016002600360046005600660076008600960106011601260136014601560166017601860196020602160226023602460256026602760286029603060316032603360346035603660376038603960406041604260436044604560466047604860496050605160526053605460556056605760586059606060616062606360646065606660676068606960706071607260736074607560766077607860796080608160826083608460856086608760886089609060916092609360946095609660976098609961006101610261036104610561066107610861096110611161126113611461156116611761186119612061216122612361246125612661276128612961306131613261336134613561366137613861396140614161426143614461456146614761486149615061516152615361546155615661576158615961606161616261636164616561666167616861696170617161726173617461756176617761786179618061816182618361846185618661876188618961906191619261936194619561966197619861996200620162026203620462056206620762086209621062116212621362146215621662176218621962206221622262236224622562266227622862296230623162326233623462356236623762386239624062416242624362446245624662476248624962506251625262536254625562566257625862596260626162626263626462656266626762686269627062716272627362746275627662776278627962806281628262836284628562866287628862896290629162926293629462956296629762986299630063016302630363046305630663076308630963106311631263136314631563166317631863196320632163226323632463256326632763286329633063316332633363346335633663376338633963406341634263436344634563466347634863496350635163526353635463556356635763586359636063616362636363646365636663676368636963706371637263736374637563766377637863796380638163826383638463856386638763886389639063916392639363946395639663976398639964006401640264036404640564066407640864096410641164126413641464156416641764186419642064216422642364246425642664276428642964306431643264336434643564366437643864396440644164426443644464456446644764486449645064516452645364546455645664576458645964606461646264636464646564666467646864696470647164726473647464756476647764786479648064816482648364846485648664876488648964906491649264936494649564966497649864996500650165026503650465056506650765086509651065116512651365146515651665176518651965206521652265236524652565266527652865296530653165326533653465356536653765386539654065416542654365446545654665476548654965506551655265536554655565566557655865596560656165626563656465656566656765686569657065716572657365746575657665776578657965806581658265836584658565866587658865896590659165926593659465956596659765986599660066016602660366046605660666076608660966106611661266136614661566166617661866196620662166226623662466256626662766286629663066316632663366346635663666376638663966406641664266436644664566466647664866496650665166526653665466556656665766586659666066616662666366646665666666676668666966706671667266736674667566766677667866796680668166826683668466856686668766886689669066916692669366946695669666976698669967006701670267036704670567066707670867096710671167126713671467156716671767186719672067216722672367246725672667276728672967306731673267336734673567366737673867396740674167426743674467456746674767486749675067516752675367546755675667576758675967606761676267636764676567666767676867696770677167726773677467756776677767786779678067816782678367846785678667876788678967906791679267936794679567966797679867996800680168026803680468056806680768086809681068116812681368146815681668176818681968206821682268236824682568266827682868296830683168326833683468356836683768386839684068416842684368446845684668476848684968506851685268536854685568566857685868596860686168626863686468656866686768686869687068716872687368746875687668776878687968806881688268836884688568866887688868896890689168926893689468956896689768986899690069016902690369046905690669076908690969106911691269136914691569166917691869196920692169226923692469256926692769286929693069316932693369346935693669376938693969406941694269436944694569466947694869496950695169526953695469556956695769586959696069616962696369646965696669676968696969706971697269736974697569766977697869796980698169826983698469856986698769886989699069916992699369946995699669976998699970007001700270037004700570067007700870097010701170127013701470157016701770187019702070217022702370247025702670277028702970307031703270337034703570367037703870397040704170427043704470457046704770487049705070517052705370547055705670577058705970607061706270637064706570667067706870697070707170727073707470757076707770787079708070817082708370847085708670877088708970907091709270937094709570967097709870997100710171027103710471057106710771087109711071117112711371147115711671177118711971207121712271237124712571267127712871297130713171327133713471357136713771387139714071417142714371447145714671477148714971507151715271537154715571567157715871597160716171627163716471657166716771687169717071717172717371747175717671777178717971807181718271837184718571867187718871897190719171927193719471957196719771987199720072017202720372047205720672077208720972107211721272137214721572167217721872197220722172227223722472257226722772287229723072317232723372347235723672377238723972407241724272437244724572467247724872497250725172527253725472557256725772587259726072617262726372647265726672677268726972707271727272737274727572767277727872797280728172827283728472857286728772887289729072917292729372947295729672977298729973007301730273037304730573067307730873097310731173127313731473157316731773187319732073217322732373247325732673277328732973307331733273337334733573367337733873397340734173427343734473457346734773487349735073517352735373547355735673577358735973607361736273637364736573667367736873697370737173727373737473757376737773787379738073817382738373847385738673877388738973907391739273937394739573967397739873997400740174027403740474057406740774087409741074117412741374147415741674177418741974207421742274237424742574267427742874297430743174327433743474357436743774387439744074417442744374447445744674477448744974507451745274537454745574567457745874597460746174627463746474657466746774687469747074717472747374747475747674777478747974807481748274837484748574867487748874897490749174927493749474957496749774987499750075017502750375047505750675077508750975107511751275137514751575167517751875197520752175227523752475257526752775287529753075317532753375347535753675377538753975407541754275437544754575467547754875497550755175527553755475557556755775587559756075617562756375647565756675677568756975707571757275737574757575767577757875797580758175827583758475857586758775887589759075917592759375947595759675977598759976007601760276037604760576067607760876097610761176127613761476157616761776187619762076217622762376247625762676277628762976307631763276337634763576367637763876397640764176427643764476457646764776487649765076517652765376547655765676577658765976607661766276637664766576667667766876697670767176727673767476757676767776787679768076817682768376847685768676877688768976907691769276937694769576967697769876997700770177027703770477057706770777087709771077117712771377147715771677177718771977207721772277237724772577267727772877297730773177327733773477357736773777387739774077417742774377447745774677477748774977507751775277537754775577567757775877597760776177627763776477657766776777687769777077717772777377747775777677777778777977807781778277837784778577867787778877897790779177927793779477957796779777987799780078017802780378047805780678077808780978107811781278137814781578167817781878197820782178227823782478257826782778287829783078317832783378347835783678377838783978407841784278437844784578467847784878497850785178527853785478557856785778587859786078617862786378647865786678677868786978707871787278737874787578767877787878797880788178827883788478857886788778887889789078917892789378947895789678977898789979007901790279037904790579067907790879097910791179127913791479157916791779187919792079217922792379247925792679277928792979307931793279337934793579367937793879397940794179427943794479457946794779487949795079517952795379547955795679577958795979607961796279637964796579667967796879697970797179727973797479757976797779787979798079817982798379847985798679877988798979907991799279937994799579967997799879998000800180028003800480058006800780088009801080118012801380148015801680178018801980208021802280238024802580268027802880298030803180328033803480358036803780388039804080418042804380448045804680478048804980508051805280538054805580568057805880598060806180628063806480658066806780688069807080718072807380748075807680778078807980808081808280838084808580868087808880898090809180928093809480958096809780988099810081018102810381048105810681078108810981108111811281138114811581168117811881198120812181228123812481258126812781288129813081318132813381348135813681378138813981408141814281438144814581468147814881498150815181528153815481558156815781588159816081618162816381648165816681678168816981708171817281738174817581768177817881798180818181828183818481858186818781888189819081918192819381948195819681978198819982008201820282038204820582068207820882098210821182128213821482158216821782188219822082218222822382248225822682278228822982308231823282338234823582368237823882398240824182428243824482458246824782488249825082518252825382548255825682578258825982608261826282638264826582668267826882698270827182728273827482758276827782788279828082818282828382848285828682878288828982908291829282938294829582968297829882998300830183028303830483058306830783088309831083118312831383148315831683178318831983208321832283238324832583268327832883298330833183328333833483358336833783388339834083418342834383448345834683478348834983508351835283538354835583568357835883598360836183628363836483658366836783688369837083718372837383748375837683778378837983808381838283838384838583868387838883898390839183928393839483958396839783988399840084018402840384048405840684078408840984108411841284138414841584168417841884198420842184228423842484258426842784288429843084318432843384348435843684378438843984408441844284438444844584468447844884498450845184528453845484558456845784588459846084618462846384648465846684678468846984708471847284738474847584768477847884798480848184828483848484858486848784888489849084918492849384948495849684978498849985008501850285038504850585068507850885098510851185128513851485158516851785188519852085218522852385248525852685278528852985308531853285338534853585368537853885398540854185428543854485458546854785488549855085518552855385548555855685578558855985608561856285638564856585668567856885698570857185728573857485758576857785788579858085818582858385848585858685878588858985908591859285938594859585968597859885998600860186028603860486058606860786088609861086118612861386148615861686178618861986208621862286238624862586268627862886298630863186328633863486358636863786388639864086418642864386448645864686478648864986508651865286538654865586568657865886598660866186628663866486658666866786688669867086718672867386748675867686778678867986808681868286838684868586868687868886898690869186928693869486958696869786988699870087018702870387048705870687078708870987108711871287138714871587168717871887198720872187228723872487258726872787288729873087318732873387348735873687378738873987408741874287438744874587468747874887498750875187528753875487558756875787588759876087618762876387648765876687678768876987708771877287738774877587768777877887798780878187828783878487858786878787888789879087918792879387948795879687978798879988008801880288038804880588068807880888098810881188128813881488158816881788188819882088218822882388248825882688278828882988308831883288338834883588368837883888398840884188428843884488458846884788488849885088518852885388548855885688578858885988608861886288638864886588668867886888698870887188728873887488758876887788788879888088818882888388848885888688878888888988908891889288938894889588968897889888998900890189028903890489058906890789088909891089118912891389148915891689178918891989208921892289238924892589268927892889298930893189328933893489358936893789388939894089418942894389448945894689478948894989508951895289538954895589568957895889598960896189628963896489658966896789688969897089718972897389748975897689778978897989808981898289838984898589868987898889898990899189928993899489958996899789988999900090019002900390049005900690079008900990109011901290139014901590169017901890199020902190229023902490259026902790289029903090319032903390349035903690379038903990409041904290439044904590469047904890499050905190529053905490559056905790589059906090619062906390649065906690679068906990709071907290739074907590769077907890799080908190829083908490859086908790889089909090919092909390949095909690979098909991009101910291039104910591069107910891099110911191129113911491159116911791189119912091219122912391249125912691279128912991309131913291339134913591369137913891399140914191429143914491459146914791489149915091519152915391549155915691579158915991609161916291639164916591669167916891699170917191729173917491759176917791789179918091819182918391849185918691879188918991909191919291939194919591969197919891999200920192029203920492059206920792089209921092119212921392149215921692179218921992209221922292239224922592269227922892299230923192329233923492359236923792389239924092419242924392449245924692479248924992509251925292539254925592569257925892599260926192629263926492659266926792689269927092719272927392749275927692779278927992809281928292839284928592869287928892899290929192929293929492959296929792989299930093019302930393049305930693079308930993109311931293139314931593169317931893199320932193229323932493259326932793289329933093319332933393349335933693379338933993409341934293439344934593469347934893499350935193529353935493559356935793589359936093619362936393649365936693679368936993709371937293739374937593769377937893799380938193829383938493859386938793889389939093919392939393949395939693979398939994009401940294039404940594069407940894099410941194129413941494159416941794189419942094219422942394249425942694279428942994309431943294339434943594369437943894399440944194429443944494459446944794489449945094519452945394549455945694579458945994609461946294639464946594669467946894699470947194729473947494759476947794789479948094819482948394849485948694879488948994909491949294939494949594969497949894999500950195029503950495059506950795089509951095119512951395149515951695179518951995209521952295239524952595269527952895299530953195329533953495359536953795389539954095419542954395449545954695479548954995509551955295539554955595569557955895599560956195629563956495659566956795689569957095719572957395749575957695779578957995809581958295839584958595869587958895899590959195929593959495959596959795989599960096019602960396049605960696079608960996109611961296139614961596169617961896199620962196229623962496259626962796289629963096319632963396349635963696379638963996409641964296439644964596469647964896499650965196529653965496559656965796589659966096619662966396649665966696679668966996709671967296739674967596769677967896799680968196829683968496859686968796889689969096919692969396949695969696979698969997009701970297039704970597069707970897099710971197129713971497159716971797189719972097219722972397249725972697279728972997309731973297339734973597369737973897399740974197429743974497459746974797489749975097519752975397549755975697579758975997609761976297639764976597669767976897699770977197729773977497759776977797789779978097819782978397849785978697879788978997909791979297939794979597969797979897999800980198029803980498059806980798089809981098119812981398149815981698179818981998209821982298239824982598269827982898299830983198329833983498359836983798389839984098419842984398449845984698479848984998509851985298539854985598569857985898599860986198629863986498659866986798689869987098719872987398749875987698779878987998809881988298839884988598869887988898899890989198929893989498959896989798989899990099019902990399049905990699079908990999109911991299139914991599169917991899199920992199229923992499259926992799289929993099319932993399349935993699379938993999409941994299439944994599469947994899499950995199529953995499559956995799589959996099619962996399649965996699679968996999709971997299739974997599769977997899799980998199829983998499859986998799889989999099919992999399949995999699979998999910000100011000210003100041000510006100071000810009100101001110012100131001410015100161001710018100191002010021100221002310024100251002610027100281002910030100311003210033100341003510036100371003810039100401004110042100431004410045100461004710048100491005010051100521005310054100551005610057100581005910060100611006210063100641006510066100671006810069100701007110072100731007410075100761007710078100791008010081100821008310084100851008610087100881008910090100911009210093100941009510096100971009810099101001010110102101031010410105101061010710108101091011010111101121011310114101151011610117101181011910120101211012210123101241012510126101271012810129101301013110132101331013410135101361013710138101391014010141101421014310144101451014610147101481014910150101511015210153101541015510156101571015810159101601016110162101631016410165101661016710168101691017010171101721017310174101751017610177101781017910180101811018210183101841018510186101871018810189101901019110192101931019410195101961019710198101991020010201102021020310204102051020610207102081020910210102111021210213102141021510216102171021810219102201022110222102231022410225102261022710228102291023010231102321023310234102351023610237102381023910240102411024210243102441024510246102471024810249102501025110252102531025410255102561025710258102591026010261102621026310264102651026610267102681026910270102711027210273102741027510276102771027810279102801028110282102831028410285102861028710288102891029010291102921029310294102951029610297102981029910300103011030210303103041030510306103071030810309103101031110312103131031410315103161031710318103191032010321103221032310324103251032610327103281032910330103311033210333103341033510336103371033810339103401034110342103431034410345103461034710348103491035010351
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # This install script is intended for use with Debian Jessie
  12. #
  13. # License
  14. # =======
  15. #
  16. # Copyright (C) 2014-2015 Bob Mottram <bob@robotics.uk.to>
  17. #
  18. # This program is free software: you can redistribute it and/or modify
  19. # it under the terms of the GNU General Public License as published by
  20. # the Free Software Foundation, either version 3 of the License, or
  21. # (at your option) any later version.
  22. #
  23. # This program is distributed in the hope that it will be useful,
  24. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  25. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  26. # GNU General Public License for more details.
  27. #
  28. # You should have received a copy of the GNU General Public License
  29. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  30. NO_OF_ARGS=$#
  31. # Web site
  32. FREEDOMBONE_WEBSITE="http://freedombone.uk.to"
  33. # Contact details
  34. FREEDOMBONE_BITMESSAGE="BM-2cWuhmBvVdfrHhLoZTdspCkKeiTorUesSL"
  35. # Are we installing on a Beaglebone Black (BBB) or some other system?
  36. INSTALLING_ON_BBB="no"
  37. # Version number of this script
  38. VERSION="1.01"
  39. # Different system variants which may be specified within
  40. # the SYSTEM_TYPE option
  41. VARIANT_FULL="full"
  42. VARIANT_WRITER="writer"
  43. VARIANT_CLOUD="cloud"
  44. VARIANT_CHAT="chat"
  45. VARIANT_MAILBOX="mailbox"
  46. VARIANT_NONMAILBOX="nonmailbox"
  47. VARIANT_SOCIAL="social"
  48. VARIANT_MEDIA="media"
  49. VARIANT_DEVELOPER="developer"
  50. VARIANT_MESH="mesh"
  51. DEFAULT_DOMAIN_NAME=
  52. DEFAULT_DOMAIN_CODE=
  53. MY_USERNAME=
  54. SYSTEM_TYPE=$VARIANT_FULL
  55. # whether the system is being installed from a pre-created configuration file
  56. INSTALLING_FROM_CONFIGURATION_FILE="no"
  57. # An optional configuration file which overrides some of these variables
  58. CONFIGURATION_FILE="freedombone.cfg"
  59. SSH_PORT=2222
  60. IRC_PORT=6697
  61. # parameters used when adding a new domain
  62. DDNS_PROVIDER="default@freedns.afraid.org"
  63. DDNS_USERNAME=
  64. DDNS_PASSWORD=
  65. CURRENT_DDNS_DOMAIN=
  66. # Minimum number of characters in a password
  67. MINIMUM_PASSWORD_LENGTH=10
  68. # number of CPU cores
  69. CPU_CORES=1
  70. # If the system is on an IPv6 network
  71. IPV6_NETWORK='2001:470:26:307'
  72. # The static IP address of the system within the local network
  73. LOCAL_NETWORK_STATIC_IP_ADDRESS="192.168.1.60"
  74. # IP address of the router (gateway)
  75. ROUTER_IP_ADDRESS="192.168.1.254"
  76. # DNS
  77. NAMESERVER1='213.73.91.35'
  78. NAMESERVER2='85.214.20.141'
  79. # whether to route outgoing traffic through Tor
  80. ROUTE_THROUGH_TOR="no"
  81. # Why use Google as a time source?
  82. # The thinking here is that it's likely to be reliable and fast.
  83. # The ping doesn't reveal any information other than that the server
  84. # is running, and if anyone maliciously alters the time on Google's
  85. # servers then that would certainly be newsworthy and they'd be
  86. # likely to do something about it quickly.
  87. # If you have better time sources then change them here.
  88. TLS_TIME_SOURCE1="google.com"
  89. TLS_TIME_SOURCE2="www.ptb.de"
  90. # The type of hardware random number generator being used
  91. # This can be empty, "beaglebone" or "onerng"
  92. HWRNG_TYPE=
  93. # Download location for OneRNG driver
  94. ONERNG_PACKAGE="onerng_3.4-1_all.deb"
  95. ONERNG_PACKAGE_DOWNLOAD="https://github.com/OneRNG/onerng.github.io/blob/master/sw/$ONERNG_PACKAGE?raw=true"
  96. # Hash for OneRNG driver
  97. ONERNG_PACKAGE_HASH='78f1c2f52ae573e3b398a695ece7ab9f41868252657ea269f0d5cf0bd4f2eb59'
  98. # device name for OneRNG
  99. ONERNG_DEVICE='ttyACM0'
  100. # Whether this system is being installed within a docker container
  101. INSTALLED_WITHIN_DOCKER="no"
  102. # If you want to run a public mailing list specify its name here.
  103. # There should be no spaces in the name
  104. PUBLIC_MAILING_LIST=
  105. # Optional different domain name for the public mailing list
  106. PUBLIC_MAILING_LIST_DOMAIN_NAME=
  107. # Directory where the public mailing list data is stored
  108. PUBLIC_MAILING_LIST_DIRECTORY="/var/spool/mlmmj"
  109. # If you want to run an encrypted mailing list specify its name here.
  110. # There should be no spaces in the name
  111. PRIVATE_MAILING_LIST=
  112. # Domain name for mediagoblin installation
  113. MEDIAGOBLIN_DOMAIN_NAME=
  114. MEDIAGOBLIN_CODE=
  115. MEDIAGOBLIN_REPO="https://gitorious.org/mediagoblin/mediagoblin.git"
  116. MEDIAGOBLIN_ADMIN_PASSWORD=
  117. # Domain name for microblog installation
  118. MICROBLOG_DOMAIN_NAME=
  119. MICROBLOG_CODE=
  120. MICROBLOG_REPO="git://gitorious.org/social/mainline.git"
  121. MICROBLOG_ADMIN_PASSWORD=
  122. # Domain name for redmatrix installation
  123. REDMATRIX_DOMAIN_NAME=
  124. REDMATRIX_CODE=
  125. REDMATRIX_REPO="https://github.com/redmatrix/redmatrix.git"
  126. REDMATRIX_ADDONS_REPO="https://github.com/redmatrix/redmatrix-addons.git"
  127. REDMATRIX_ADMIN_PASSWORD=
  128. # Domain name for git hosting installation
  129. GIT_DOMAIN_NAME=
  130. GIT_CODE=
  131. GIT_DOMAIN_REPO="https://github.com/gogits/gogs.git"
  132. GIT_ADMIN_PASSWORD=
  133. # Domain name for Owncloud installation
  134. OWNCLOUD_DOMAIN_NAME=
  135. OWNCLOUD_CODE=
  136. OWNCLOUD_ADMIN_PASSWORD=
  137. # Domain name for your wiki
  138. WIKI_DOMAIN_NAME=
  139. WIKI_ADMIN_PASSWORD=
  140. WIKI_TITLE="Freedombone Wiki"
  141. WIKI_CODE=
  142. # Domain name for your blog
  143. FULLBLOG_DOMAIN_NAME=
  144. FULLBLOG_CODE=
  145. MY_BLOG_TITLE="My Blog"
  146. MY_BLOG_SUBTITLE="Another Freedombone Blog"
  147. GPG_KEYSERVER="hkp://keys.gnupg.net"
  148. # whether to encrypt all incoming email with your public key
  149. GPG_ENCRYPT_STORED_EMAIL="yes"
  150. # gets set to yes if gpg keys are imported from usb
  151. GPG_KEYS_IMPORTED="no"
  152. # optionally you can provide your exported GPG key pair here
  153. # Note that the private key file will be deleted after use
  154. # If these are unspecified then a new GPG key will be created
  155. MY_GPG_PUBLIC_KEY=
  156. MY_GPG_PRIVATE_KEY=
  157. # optionally specify your public key ID
  158. MY_GPG_PUBLIC_KEY_ID=
  159. # If you have existing mail within a Maildir
  160. # you can specify the directory here and the files
  161. # will be imported
  162. IMPORT_MAILDIR=
  163. # The Debian package repository to use.
  164. DEBIAN_REPO="ftp.us.debian.org"
  165. DEBIAN_VERSION="jessie"
  166. # Directory where source code is downloaded and compiled
  167. INSTALL_DIR=$HOME/build
  168. # device name for an attached usb drive
  169. USB_DRIVE=/dev/sda1
  170. # Location where the USB drive is mounted to
  171. USB_MOUNT=/mnt/usb
  172. # name of a script used to upgrade the system
  173. UPGRADE_SCRIPT_NAME="freedombone-upgrade"
  174. # name of a script which keeps running processes going even if they crash
  175. WATCHDOG_SCRIPT_NAME="keepon"
  176. # Name of a script used to create a backup of the system on usb drive
  177. BACKUP_SCRIPT_NAME="backup"
  178. # Name of a script used to restore the system from usb drive
  179. RESTORE_SCRIPT_NAME="restore"
  180. # name of a script used to backup to friends servers
  181. BACKUP_TO_FRIENDS_SCRIPT_NAME="backup2friends"
  182. # name of a script used to restore backed up data from a friend
  183. RESTORE_FROM_FRIEND_SCRIPT_NAME="restorefromfriend"
  184. # Location of the certificate used to encrypt backups
  185. BACKUP_CERTIFICATE=/etc/ssl/private/backup.key
  186. # memory limit for php in MB
  187. MAX_PHP_MEMORY=64
  188. # default MariaDB password
  189. MARIADB_PASSWORD=
  190. # Directory where XMPP settings are stored
  191. XMPP_DIRECTORY="/var/lib/prosody"
  192. # file containing a list of remote locations to backup to
  193. # Format: [username@friendsdomain//home/username] [ssh_password]
  194. # With the only space character being between the server and the password
  195. FRIENDS_SERVERS_LIST=/home/$MY_USERNAME/backup.list
  196. # list of encryption protocols
  197. SSL_PROTOCOLS="TLSv1 TLSv1.1 TLSv1.2"
  198. # list of ciphers to use. See bettercrypto.org recommendations
  199. SSL_CIPHERS="EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA"
  200. # ssh (from https://stribika.github.io/2015/01/04/secure-secure-shell.html)
  201. SSH_CIPHERS="chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr"
  202. SSH_MACS="hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-ripemd160-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,hmac-ripemd160,umac-128@openssh.com"
  203. SSH_KEX="curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256"
  204. SSH_HOST_KEY_ALGORITHMS="ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-rsa-cert-v00@openssh.com,ssh-ed25519,ssh-rsa"
  205. # xmpp ciphers and curve
  206. XMPP_CIPHERS='"EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA"'
  207. XMPP_ECC_CURVE='"secp384r1"'
  208. # the default email address
  209. MY_EMAIL_ADDRESS=$MY_USERNAME@$DEFAULT_DOMAIN_NAME
  210. # optionally specify your name to appear on the blog
  211. MY_NAME=$DEFAULT_DOMAIN_NAME
  212. export DEBIAN_FRONTEND=noninteractive
  213. # logging level for Nginx
  214. WEBSERVER_LOG_LEVEL='crit'
  215. # used to limit CPU usage
  216. CPULIMIT='/usr/bin/cpulimit -l 20 -e'
  217. # command to create a git repository
  218. CREATE_GIT_PROJECT_COMMAND='create-project'
  219. # File which keeps track of what has already been installed
  220. COMPLETION_FILE=$HOME/freedombone-completed.txt
  221. if [ ! -f $COMPLETION_FILE ]; then
  222. touch $COMPLETION_FILE
  223. fi
  224. # Your github username
  225. GITHUB_USERNAME=
  226. # Directory where github projects will be backed up
  227. GITHUB_BACKUP_DIRECTORY=/var/backups/github
  228. # Used to indicate whether the backup contains MariaDB databases or not
  229. BACKUP_INCLUDES_DATABASES="no"
  230. # contains the mysql root password which
  231. # is used for backups and repair
  232. DATABASE_PASSWORD_FILE=/root/dbpass
  233. # log file where details of remote backups are stored
  234. REMOTE_BACKUPS_LOG=/var/log/remotebackups.log
  235. # message if something fails to install
  236. CHECK_MESSAGE="Check your internet connection, /etc/network/interfaces and /etc/resolv.conf, then delete $COMPLETION_FILE, run 'rm -fR /var/lib/apt/lists/* && apt-get update --fix-missing' and run this script again. If hash sum mismatches persist then try setting $DEBIAN_REPO to a different mirror and also change /etc/apt/sources.list."
  237. # web site used to obtain the external IP address of the system
  238. GET_IP_ADDRESS_URL="checkip.two-dns.de"
  239. # Password used for VoIP server
  240. VOIP_SERVER_PASSWORD=
  241. # Port on which VoIP server listens
  242. VOIP_PORT=64738
  243. # Location of VoIP database and configuration
  244. VOIP_DATABASE="mumble-server.sqlite"
  245. VOIP_CONFIG_FILE="mumble-server.ini"
  246. # other possible services to obtain the external IP address
  247. EXTERNAL_IP_SERVICES=( \
  248. 'https://check.torproject.org/' \
  249. 'https://www.whatsmydns.net/whats-my-ip-address.html' \
  250. 'https://www.privateinternetaccess.com/pages/whats-my-ip/' \
  251. 'http://checkip.two-dns.de' \
  252. 'http://ip.dnsexit.com' \
  253. 'http://ifconfig.me/ip' \
  254. 'http://ipecho.net/plain' \
  255. 'http://checkip.dyndns.org/plain' \
  256. 'http://ipogre.com/linux.php' \
  257. 'http://whatismyipaddress.com/' \
  258. 'http://ip.my-proxy.com/' \
  259. 'http://websiteipaddress.com/WhatIsMyIp' \
  260. 'http://getmyipaddress.org/' \
  261. 'http://www.my-ip-address.net/' \
  262. 'http://myexternalip.com/raw' \
  263. 'http://www.canyouseeme.org/' \
  264. 'http://www.trackip.net/' \
  265. 'http://icanhazip.com/' \
  266. 'http://www.iplocation.net/' \
  267. 'http://www.howtofindmyipaddress.com/' \
  268. 'http://www.ipchicken.com/' \
  269. 'http://whatsmyip.net/' \
  270. 'http://www.ip-adress.com/' \
  271. 'http://checkmyip.com/' \
  272. 'http://www.tracemyip.org/' \
  273. 'http://checkmyip.net/' \
  274. 'http://www.lawrencegoetz.com/programs/ipinfo/' \
  275. 'http://www.findmyip.co/' \
  276. 'http://ip-lookup.net/' \
  277. 'http://www.dslreports.com/whois' \
  278. 'http://www.mon-ip.com/en/my-ip/' \
  279. 'http://www.myip.ru' \
  280. 'http://ipgoat.com/' \
  281. 'http://www.myipnumber.com/my-ip-address.asp' \
  282. 'http://www.whatsmyipaddress.net/' \
  283. 'http://formyip.com/' \
  284. 'http://www.displaymyip.com/' \
  285. 'http://www.bobborst.com/tools/whatsmyip/' \
  286. 'http://www.geoiptool.com/' \
  287. 'http://checkip.dyndns.com/' \
  288. 'http://myexternalip.com/' \
  289. 'http://www.ip-adress.eu/' \
  290. 'http://www.infosniper.net/' \
  291. 'http://wtfismyip.com/' \
  292. 'http://ipinfo.io/' \
  293. 'http://httpbin.org/ip')
  294. WIFI_CHANNEL=2
  295. WIFI_INTERFACE=wlan0
  296. # cjdns settings
  297. ENABLE_CJDNS="no"
  298. CJDNS_PRIVATE_KEY=
  299. CJDNS_PUBLIC_KEY=
  300. CJDNS_IPV6=
  301. CJDNS_PASSWORD=
  302. CJDNS_PORT=
  303. # B.A.T.M.A.N settings
  304. ENABLE_BATMAN="no"
  305. BATMAN_CELLID='02:BA:00:00:03:01'
  306. ESSID='mesh'
  307. # Babel mesh
  308. ENABLE_BABEL="no"
  309. BABEL_PORT=6696
  310. # social key management
  311. ENABLE_SOCIAL_KEY_MANAGEMENT="no"
  312. TOX_PORT=33445
  313. TOX_REPO='git://github.com/irungentoo/toxcore.git'
  314. # These are some default nodes, but you can replace them with trusted nodes
  315. # as you prefer. See https://wiki.tox.im/Nodes
  316. TOX_NODE=
  317. #TOX_NODES=(
  318. # '192.254.75.102,2607:5600:284::2,33445,951C88B7E75C867418ACDB5D273821372BB5BD652740BCDF623A4FA293E75D2F,Tox RELENG,US'
  319. # '144.76.60.215,2a01:4f8:191:64d6::1,33445,04119E835DF3E78BACF0F84235B300546AF8B936F035185E2A8E9E0A67C8924F,sonOfRa,DE'
  320. #)
  321. ZERONET_REPO='https://github.com/HelloZeroNet/ZeroNet.git'
  322. # Default diffie-hellman key length in bits
  323. DH_KEYLENGTH=1024
  324. function show_help {
  325. echo ''
  326. echo 'freedombone -c [configuration file]'
  327. echo ''
  328. echo ' -h --help Show help'
  329. echo ' menuconfig Easy interactive installation'
  330. echo ' -c --config Installing from a configuration file'
  331. echo ' --bbb Installing on Beaglebone Black'
  332. echo ' -u --user User to install the system as'
  333. echo ' -d --domain Default domain name'
  334. echo ' -s --system System type'
  335. echo ' --ip Static LAN IP address of the system'
  336. echo ' --iprouter LAN IP address of the internet router'
  337. echo ' --ddns Dynamic DNS provider domain'
  338. echo ' --ddnsuser Dynamic DNS provider username'
  339. echo ' --ddnspass Dynamic DNS provider password'
  340. echo ''
  341. echo ' --microblogdomain Microblog domain name'
  342. echo ' --wikidomain Wiki domain name'
  343. echo ' --blogdomain Blog domain name'
  344. echo ' --ownclouddomain Owncloud domain name'
  345. echo ' --redmatrixdomain Redmatrix domain name'
  346. echo ' --gitdomain Git hosting domain name'
  347. echo ' -t --time Domain used as a TLS time source'
  348. echo ' --ssh ssh port number'
  349. echo ' --list Public mailing list name'
  350. echo ' --cores Number of CPU cores'
  351. echo ' --name Your name'
  352. echo ' --email Your email address'
  353. echo ' --usb Path for the USB drive (eg. /dev/sdb1)'
  354. echo ' --cjdns Enable CJDNS'
  355. echo ' --vpass VoIP server password'
  356. echo ' --vport VoIP server port'
  357. echo ' --ns1 First DNS nameserver'
  358. echo ' --ns2 Second DNS nameserver'
  359. echo ' --repo Debian repository'
  360. echo ''
  361. echo 'system types'
  362. echo '------------'
  363. echo 'This can either be blank if you wish to install the full system,'
  364. echo "or for more specialised variants you can specify '$VARIANT_MAILBOX', '$VARIANT_CLOUD',"
  365. echo "'$VARIANT_CHAT', '$VARIANT_SOCIAL', '$VARIANT_MEDIA', '$VARIANT_WRITER', '$VARIANT_DEVELOPER'"
  366. echo "or '$VARIANT_MESH'."
  367. echo ''
  368. echo "If you wish to install everything except email then use the '$VARIANT_NONMAILBOX' variaint."
  369. echo ''
  370. exit 0
  371. }
  372. function interactive_configuration_remote_backups {
  373. if [[ $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  374. return
  375. fi
  376. if [ ! -f /usr/local/bin/freedombone-remote ]; then
  377. if [ ! -f /usr/bin/freedombone-remote ]; then
  378. echo 'The command freedombone-remote was not found'
  379. exit 87354
  380. fi
  381. fi
  382. freedombone-remote -u $MY_USERNAME -l $FRIENDS_SERVERS_LIST -m $MINIMUM_PASSWORD_LENGTH -r yes
  383. if [ ! "$?" = "0" ]; then
  384. echo 'Command failed:'
  385. echo ''
  386. echo " freedombone-remote -u $MY_USERNAME -l $FRIENDS_SERVERS_LIST -m $MINIMUM_PASSWORD_LENGTH -r yes"
  387. echo ''
  388. exit 65892
  389. fi
  390. }
  391. # test a domain name to see if it's valid
  392. function validate_domain_name {
  393. # count the number of dots in the domain name
  394. dots=${TEST_DOMAIN_NAME//[^.]}
  395. no_of_dots=${#dots}
  396. if (( $no_of_dots > 3 )); then
  397. TEST_DOMAIN_NAME="The domain $TEST_DOMAIN_NAME has too many subdomains. It should be of the type w.x.y.z, x.y.z or y.z"
  398. fi
  399. if (( $no_of_dots == 0 )); then
  400. TEST_DOMAIN_NAME="The domain $TEST_DOMAIN_NAME has no top level domain. It should be of the type w.x.y.z, x.y.z or y.z"
  401. fi
  402. }
  403. function interactive_configuration {
  404. if [ ! -f /usr/local/bin/freedombone-config ]; then
  405. if [ ! -f /usr/bin/freedombone-config ]; then
  406. echo 'The command freedombone-config was not found'
  407. exit 63935
  408. fi
  409. fi
  410. freedombone-config \
  411. -f $CONFIGURATION_FILE \
  412. -w $FREEDOMBONE_WEBSITE \
  413. -b $FREEDOMBONE_BITMESSAGE \
  414. -m $MINIMUM_PASSWORD_LENGTH
  415. if [ ! "$?" = "0" ]; then
  416. echo 'Command failed:'
  417. echo ''
  418. echo " freedombone-config -u $MY_USERNAME -f $CONFIGURATION_FILE -w $FREEDOMBONE_WEBSITE -b $FREEDOMBONE_BITMESSAGE -m $MINIMUM_PASSWORD_LENGTH"
  419. echo ''
  420. exit 73594
  421. fi
  422. if [[ $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  423. FRIENDS_SERVERS_LIST=/home/$MY_USERNAME/backup.list
  424. dialog --title "Encrypted backup to other servers" \
  425. --backtitle "Freedombone Configuration" \
  426. --defaultno \
  427. --yesno "\nDo you wish to configure some remote backup locations?" 7 60
  428. sel=$?
  429. case $sel in
  430. 0) interactive_configuration_remote_backups;;
  431. esac
  432. fi
  433. }
  434. if [[ $1 == "menuconfig" ]]; then
  435. interactive_configuration
  436. else
  437. while [[ $# > 1 ]]
  438. do
  439. key="$1"
  440. case $key in
  441. -h|--help)
  442. show_help
  443. ;;
  444. # load a configuration file
  445. -c|--config)
  446. shift
  447. CONFIGURATION_FILE="$1"
  448. INSTALLING_FROM_CONFIGURATION_FILE="yes"
  449. break
  450. ;;
  451. # username within /home
  452. -u|--user)
  453. shift
  454. MY_USERNAME="$1"
  455. ;;
  456. # microblog domain name
  457. --microblogdomain)
  458. shift
  459. MICROBLOG_DOMAIN_NAME="$1"
  460. ;;
  461. # wiki domain name
  462. --wikidomain)
  463. shift
  464. WIKI_DOMAIN_NAME="$1"
  465. ;;
  466. # blog domain name
  467. --blogdomain)
  468. shift
  469. FULLBLOG_DOMAIN_NAME="$1"
  470. ;;
  471. # owncloud domain name
  472. --ownclouddomain)
  473. shift
  474. OWNCLOUD_DOMAIN_NAME="$1"
  475. ;;
  476. # redmatrix domain name
  477. --redmatrixdomain)
  478. shift
  479. REDMATRIX_DOMAIN_NAME="$1"
  480. ;;
  481. # git hosting domain name
  482. --gitdomain)
  483. shift
  484. GIT_DOMAIN_NAME="$1"
  485. ;;
  486. # default domain name
  487. -d|--domain)
  488. shift
  489. DEFAULT_DOMAIN_NAME="$1"
  490. ;;
  491. # The type of system
  492. -s|--system)
  493. shift
  494. SYSTEM_TYPE="$1"
  495. ;;
  496. # The dynamic DNS provider
  497. --ddns)
  498. shift
  499. DDNS_PROVIDER="$1"
  500. ;;
  501. # Username for the synamic DNS provider
  502. --ddnsuser)
  503. shift
  504. DDNS_USERNAME="$1"
  505. ;;
  506. # Password for the synamic DNS provider
  507. --ddnspass)
  508. shift
  509. DDNS_PASSWORD="$1"
  510. ;;
  511. # Whether this installation is on a Beaglebone Black
  512. --bbb)
  513. INSTALLING_ON_BBB="yes"
  514. ;;
  515. # Domain name to use as a TLS time source
  516. -t|--time)
  517. shift
  518. TLS_TIME_SOURCE1="$1"
  519. ;;
  520. # Static IP address for the system
  521. --ip)
  522. shift
  523. LOCAL_NETWORK_STATIC_IP_ADDRESS=$1
  524. ;;
  525. # IP address for the internet router
  526. --iprouter)
  527. shift
  528. ROUTER_IP_ADDRESS=$1
  529. ;;
  530. # ssh port
  531. --ssh)
  532. shift
  533. SSH_PORT=$1
  534. ;;
  535. # public mailing list name
  536. --list)
  537. shift
  538. PUBLIC_MAILING_LIST="$1"
  539. ;;
  540. # Number of CPU cores
  541. --cores)
  542. shift
  543. CPU_CORES=$1
  544. ;;
  545. # my name
  546. --name)
  547. shift
  548. MY_NAME="$1"
  549. ;;
  550. # my email address
  551. --email)
  552. shift
  553. MY_EMAIL_ADDRESS="$1"
  554. ;;
  555. # USB drive
  556. --usb)
  557. shift
  558. USB_DRIVE=$1
  559. ;;
  560. # Enable CJDNS
  561. --cjdns)
  562. shift
  563. ENABLE_CJDNS="yes"
  564. ;;
  565. # Enable B.A.T.M.A.N
  566. --batman)
  567. shift
  568. ENABLE_BATMAN="yes"
  569. ;;
  570. # Enable Babel
  571. --babel)
  572. shift
  573. ENABLE_BABEL="yes"
  574. ;;
  575. # VoIP server password
  576. --vpass)
  577. shift
  578. VOIP_SERVER_PASSWORD=$1
  579. ;;
  580. # VoIP server port
  581. --vport)
  582. shift
  583. VOIP_PORT=$1
  584. ;;
  585. # DNS Nameserver 1
  586. --ns1)
  587. shift
  588. NAMESERVER1=$1
  589. ;;
  590. # DNS Nameserver 2
  591. --ns2)
  592. shift
  593. NAMESERVER2=$1
  594. ;;
  595. # Debian repository
  596. --repo)
  597. shift
  598. DEBIAN_REPO=$1
  599. ;;
  600. *)
  601. # unknown option
  602. ;;
  603. esac
  604. shift
  605. done
  606. fi
  607. function parse_args {
  608. if [[ $NO_OF_ARGS == 0 ]]; then
  609. echo 'no_of_args = 0'
  610. show_help
  611. exit 0
  612. fi
  613. if [ ! -d /home/$MY_USERNAME ]; then
  614. echo "There is no user '$MY_USERNAME' on the system. Use 'adduser $MY_USERNAME' to create the user."
  615. exit 1
  616. fi
  617. if [ ! "$DEFAULT_DOMAIN_NAME" ]; then
  618. if [[ $SYSTEM_TYPE != "$VARIANT_MESH" ]]; then
  619. echo 'No default domain specified'
  620. show_help
  621. exit 2
  622. fi
  623. fi
  624. if [ ! $MY_USERNAME ]; then
  625. echo 'No username specified'
  626. show_help
  627. exit 3
  628. fi
  629. if [[ $SYSTEM_TYPE != "$VARIANT_MESH" ]]; then
  630. if [ ! $DDNS_USERNAME ]; then
  631. echo 'Please provide the username for your dynamic DNS provider with the --ddnsuser option'
  632. exit 7823
  633. fi
  634. if [ ! $DDNS_PASSWORD ]; then
  635. echo 'Please provide the password for your dynamic DNS provider with the --ddnspass option'
  636. exit 6382
  637. fi
  638. fi
  639. if [ ! $SYSTEM_TYPE ]; then
  640. SYSTEM_TYPE=$VARIANT_FULL
  641. fi
  642. if [[ $SYSTEM_TYPE != $VARIANT_WRITER && $SYSTEM_TYPE != $VARIANT_CLOUD && $SYSTEM_TYPE != $VARIANT_CHAT && $SYSTEM_TYPE != $VARIANT_MAILBOX && $SYSTEM_TYPE != $VARIANT_NONMAILBOX && $SYSTEM_TYPE != $VARIANT_SOCIAL && $SYSTEM_TYPE != $VARIANT_MEDIA && $SYSTEM_TYPE != $VARIANT_DEVELOPER && $SYSTEM_TYPE != $VARIANT_MESH && $SYSTEM_TYPE != $VARIANT_FULL ]]; then
  643. echo "'$SYSTEM_TYPE' is an unrecognised Freedombone variant."
  644. exit 30
  645. fi
  646. }
  647. function read_configuration {
  648. # if not installing on a Beaglebone then use sdb as the USB drive by default
  649. if [ ! $INSTALLING_ON_BBB ]; then
  650. if [[ $USB_DRIVE == /dev/sda1 ]]; then
  651. USB_DRIVE=/dev/sdb1
  652. fi
  653. fi
  654. if [[ $INSTALLING_FROM_CONFIGURATION_FILE == "yes" ]]; then
  655. if [ ! -f $CONFIGURATION_FILE ]; then
  656. echo "The configuration file $CONFIGURATION_FILE was not found"
  657. exit 8935
  658. fi
  659. fi
  660. if [ -f $CONFIGURATION_FILE ]; then
  661. if grep -q "DH_KEYLENGTH" $CONFIGURATION_FILE; then
  662. DH_KEYLENGTH=$(grep "DH_KEYLENGTH" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  663. fi
  664. if grep -q "WIFI_INTERFACE" $CONFIGURATION_FILE; then
  665. WIFI_INTERFACE=$(grep "WIFI_INTERFACE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  666. fi
  667. if grep -q "IRC_PORT" $CONFIGURATION_FILE; then
  668. IRC_PORT=$(grep "IRC_PORT" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  669. fi
  670. if grep -q "WIFI_CHANNEL" $CONFIGURATION_FILE; then
  671. WIFI_CHANNEL=$(grep "WIFI_CHANNEL" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  672. fi
  673. if grep -q "BATMAN_CELLID" $CONFIGURATION_FILE; then
  674. BATMAN_CELLID=$(grep "BATMAN_CELLID" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  675. fi
  676. if grep -q "ESSID" $CONFIGURATION_FILE; then
  677. ESSID=$(grep "ESSID" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  678. fi
  679. if grep -q "TOX_PORT" $CONFIGURATION_FILE; then
  680. TOX_PORT=$(grep "TOX_PORT" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  681. fi
  682. if grep -q "TOX_NODES" $CONFIGURATION_FILE; then
  683. TOX_NODES=$(grep "TOX_NODES" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  684. fi
  685. if grep -q "TOX_REPO" $CONFIGURATION_FILE; then
  686. TOX_REPO=$(grep "TOX_REPO" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  687. fi
  688. if grep -q "ENABLE_SOCIAL_KEY_MANAGEMENT" $CONFIGURATION_FILE; then
  689. ENABLE_SOCIAL_KEY_MANAGEMENT=$(grep "ENABLE_SOCIAL_KEY_MANAGEMENT" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  690. fi
  691. if grep -q "IPV6_NETWORK" $CONFIGURATION_FILE; then
  692. IPV6_NETWORK=$(grep "IPV6_NETWORK" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  693. fi
  694. if grep -q "HWRNG_TYPE" $CONFIGURATION_FILE; then
  695. HWRNG_TYPE=$(grep "HWRNG_TYPE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  696. fi
  697. if grep -q "MEDIAGOBLIN_DOMAIN_NAME" $CONFIGURATION_FILE; then
  698. MEDIAGOBLIN_DOMAIN_NAME=$(grep "MEDIAGOBLIN_DOMAIN_NAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  699. fi
  700. if grep -q "MEDIAGOBLIN_CODE" $CONFIGURATION_FILE; then
  701. MEDIAGOBLIN_CODE=$(grep "MEDIAGOBLIN_CODE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  702. fi
  703. if grep -q "GIT_ADMIN_PASSWORD" $CONFIGURATION_FILE; then
  704. GIT_ADMIN_PASSWORD=$(grep "GIT_ADMIN_PASSWORD" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  705. fi
  706. if grep -q "GIT_DOMAIN_NAME" $CONFIGURATION_FILE; then
  707. GIT_DOMAIN_NAME=$(grep "GIT_DOMAIN_NAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  708. fi
  709. if grep -q "GIT_CODE" $CONFIGURATION_FILE; then
  710. GIT_CODE=$(grep "GIT_CODE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  711. fi
  712. if grep -q "SYSTEM_TYPE" $CONFIGURATION_FILE; then
  713. SYSTEM_TYPE=$(grep "SYSTEM_TYPE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  714. fi
  715. if grep -q "SSL_PROTOCOLS" $CONFIGURATION_FILE; then
  716. SSL_PROTOCOLS=$(grep "SSL_PROTOCOLS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  717. fi
  718. if grep -q "SSL_CIPHERS" $CONFIGURATION_FILE; then
  719. SSL_CIPHERS=$(grep "SSL_CIPHERS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  720. fi
  721. if grep -q "SSH_CIPHERS" $CONFIGURATION_FILE; then
  722. SSH_CIPHERS=$(grep "SSH_CIPHERS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  723. fi
  724. if grep -q "SSH_MACS" $CONFIGURATION_FILE; then
  725. SSH_MACS=$(grep "SSH_MACS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  726. fi
  727. if grep -q "SSH_KEX" $CONFIGURATION_FILE; then
  728. SSH_KEX=$(grep "SSH_KEX" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  729. fi
  730. if grep -q "SSH_HOST_KEY_ALGORITHMS" $CONFIGURATION_FILE; then
  731. SSH_HOST_KEY_ALGORITHMS=$(grep "SSH_HOST_KEY_ALGORITHMS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  732. fi
  733. if grep -q "SSH_PASSWORDS" $CONFIGURATION_FILE; then
  734. SSH_PASSWORDS=$(grep "SSH_PASSWORDS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  735. fi
  736. if grep -q "XMPP_CIPHERS" $CONFIGURATION_FILE; then
  737. XMPP_CIPHERS=$(grep "XMPP_CIPHERS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  738. fi
  739. if grep -q "XMPP_ECC_CURVE" $CONFIGURATION_FILE; then
  740. XMPP_ECC_CURVE=$(grep "XMPP_ECC_CURVE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  741. fi
  742. if grep -q "MY_USERNAME" $CONFIGURATION_FILE; then
  743. MY_USERNAME=$(grep "MY_USERNAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  744. fi
  745. if grep -q "DOMAIN_NAME" $CONFIGURATION_FILE; then
  746. # for backwards compatability
  747. DEFAULT_DOMAIN_NAME=$(grep "DOMAIN_NAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  748. fi
  749. if grep -q "DEFAULT_DOMAIN_NAME" $CONFIGURATION_FILE; then
  750. DEFAULT_DOMAIN_NAME=$(grep "DEFAULT_DOMAIN_NAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  751. fi
  752. if grep -q "DEFAULT_DOMAIN_CODE" $CONFIGURATION_FILE; then
  753. DEFAULT_DOMAIN_CODE=$(grep "DEFAULT_DOMAIN_CODE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  754. fi
  755. if grep -q "NAMESERVER1" $CONFIGURATION_FILE; then
  756. NAMESERVER1=$(grep "NAMESERVER1" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  757. fi
  758. if grep -q "NAMESERVER2" $CONFIGURATION_FILE; then
  759. NAMESERVER2=$(grep "NAMESERVER2" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  760. fi
  761. if grep -q "DEBIAN_REPO" $CONFIGURATION_FILE; then
  762. DEBIAN_REPO=$(grep "DEBIAN_REPO" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  763. CHECK_MESSAGE="Check your internet connection, /etc/network/interfaces and /etc/resolv.conf, then delete $COMPLETION_FILE, run 'rm -fR /var/lib/apt/lists/* && apt-get update --fix-missing' and run this script again. If hash sum mismatches persist then try setting $DEBIAN_REPO to a different mirror and also change /etc/apt/sources.list."
  764. fi
  765. if grep -q "VOIP_PORT" $CONFIGURATION_FILE; then
  766. VOIP_PORT=$(grep "VOIP_PORT" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  767. fi
  768. if grep -q "VOIP_SERVER_PASSWORD" $CONFIGURATION_FILE; then
  769. VOIP_SERVER_PASSWORD=$(grep "VOIP_SERVER_PASSWORD" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  770. fi
  771. if grep -q "GET_IP_ADDRESS_URL" $CONFIGURATION_FILE; then
  772. GET_IP_ADDRESS_URL=$(grep "GET_IP_ADDRESS_URL" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  773. fi
  774. if grep -q "DDNS_PROVIDER" $CONFIGURATION_FILE; then
  775. DDNS_PROVIDER=$(grep "DDNS_PROVIDER" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  776. fi
  777. if grep -q "DDNS_USERNAME" $CONFIGURATION_FILE; then
  778. DDNS_USERNAME=$(grep "DDNS_USERNAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  779. fi
  780. if grep -q "DDNS_PASSWORD" $CONFIGURATION_FILE; then
  781. DDNS_PASSWORD=$(grep "DDNS_PASSWORD" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  782. fi
  783. if grep -q "LOCAL_NETWORK_STATIC_IP_ADDRESS" $CONFIGURATION_FILE; then
  784. LOCAL_NETWORK_STATIC_IP_ADDRESS=$(grep "LOCAL_NETWORK_STATIC_IP_ADDRESS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  785. fi
  786. if grep -q "ENABLE_BABEL" $CONFIGURATION_FILE; then
  787. ENABLE_BABEL=$(grep "ENABLE_BABEL" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  788. fi
  789. if grep -q "ENABLE_BATMAN" $CONFIGURATION_FILE; then
  790. ENABLE_BATMAN=$(grep "ENABLE_BATMAN" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  791. fi
  792. if grep -q "ENABLE_CJDNS" $CONFIGURATION_FILE; then
  793. ENABLE_CJDNS=$(grep "ENABLE_CJDNS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  794. fi
  795. if grep -q "CJDNS_IPV6" $CONFIGURATION_FILE; then
  796. CJDNS_IPV6=$(grep "CJDNS_IPV6" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  797. fi
  798. if grep -q "CJDNS_PUBLIC_KEY" $CONFIGURATION_FILE; then
  799. CJDNS_PUBLIC_KEY=$(grep "CJDNS_PUBLIC_KEY" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  800. fi
  801. if grep -q "CJDNS_PRIVATE_KEY" $CONFIGURATION_FILE; then
  802. CJDNS_PRIVATE_KEY=$(grep "CJDNS_PRIVATE_KEY" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  803. fi
  804. if grep -q "BACKUP_CERTIFICATE" $CONFIGURATION_FILE; then
  805. BACKUP_CERTIFICATE=$(grep "BACKUP_CERTIFICATE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  806. fi
  807. if grep -q "ROUTER_IP_ADDRESS" $CONFIGURATION_FILE; then
  808. ROUTER_IP_ADDRESS=$(grep "ROUTER_IP_ADDRESS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  809. fi
  810. if grep -q "GITHUB_USERNAME" $CONFIGURATION_FILE; then
  811. GITHUB_USERNAME=$(grep "GITHUB_USERNAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  812. fi
  813. if grep -q "GITHUB_BACKUP_DIRECTORY" $CONFIGURATION_FILE; then
  814. GITHUB_BACKUP_DIRECTORY=$(grep "GITHUB_BACKUP_DIRECTORY" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  815. fi
  816. if grep -q "CPU_CORES" $CONFIGURATION_FILE; then
  817. CPU_CORES=$(grep "CPU_CORES" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  818. fi
  819. if grep -q "WEBSERVER_LOG_LEVEL" $CONFIGURATION_FILE; then
  820. WEBSERVER_LOG_LEVEL=$(grep "WEBSERVER_LOG_LEVEL" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  821. fi
  822. if grep -q "ROUTE_THROUGH_TOR" $CONFIGURATION_FILE; then
  823. ROUTE_THROUGH_TOR=$(grep "ROUTE_THROUGH_TOR" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  824. fi
  825. if grep -q "WIKI_TITLE" $CONFIGURATION_FILE; then
  826. WIKI_TITLE=$(grep "WIKI_TITLE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  827. fi
  828. if grep -q "MY_NAME" $CONFIGURATION_FILE; then
  829. MY_NAME=$(grep "MY_NAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  830. fi
  831. if grep -q "MY_EMAIL_ADDRESS" $CONFIGURATION_FILE; then
  832. MY_EMAIL_ADDRESS=$(grep "MY_EMAIL_ADDRESS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  833. fi
  834. if grep -q "INSTALLING_ON_BBB" $CONFIGURATION_FILE; then
  835. INSTALLING_ON_BBB=$(grep "INSTALLING_ON_BBB" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  836. fi
  837. if grep -q "SSH_PORT" $CONFIGURATION_FILE; then
  838. SSH_PORT=$(grep "SSH_PORT" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  839. fi
  840. if grep -q "INSTALLED_WITHIN_DOCKER" $CONFIGURATION_FILE; then
  841. INSTALLED_WITHIN_DOCKER=$(grep "INSTALLED_WITHIN_DOCKER" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  842. fi
  843. if grep -q "PUBLIC_MAILING_LIST" $CONFIGURATION_FILE; then
  844. PUBLIC_MAILING_LIST=$(grep "PUBLIC_MAILING_LIST" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  845. fi
  846. if grep -q "MICROBLOG_DOMAIN_NAME" $CONFIGURATION_FILE; then
  847. MICROBLOG_DOMAIN_NAME=$(grep "MICROBLOG_DOMAIN_NAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  848. fi
  849. if grep -q "MICROBLOG_CODE" $CONFIGURATION_FILE; then
  850. MICROBLOG_CODE=$(grep "MICROBLOG_CODE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  851. fi
  852. if grep -q "REDMATRIX_DOMAIN_NAME" $CONFIGURATION_FILE; then
  853. REDMATRIX_DOMAIN_NAME=$(grep "REDMATRIX_DOMAIN_NAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  854. fi
  855. if grep -q "REDMATRIX_CODE" $CONFIGURATION_FILE; then
  856. REDMATRIX_CODE=$(grep "REDMATRIX_CODE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  857. fi
  858. if grep -q "OWNCLOUD_DOMAIN_NAME" $CONFIGURATION_FILE; then
  859. OWNCLOUD_DOMAIN_NAME=$(grep "OWNCLOUD_DOMAIN_NAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  860. fi
  861. if grep -q "OWNCLOUD_CODE" $CONFIGURATION_FILE; then
  862. OWNCLOUD_CODE=$(grep "OWNCLOUD_CODE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  863. fi
  864. if grep -q "WIKI_DOMAIN_NAME" $CONFIGURATION_FILE; then
  865. WIKI_DOMAIN_NAME=$(grep "WIKI_DOMAIN_NAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  866. fi
  867. if grep -q "WIKI_CODE" $CONFIGURATION_FILE; then
  868. WIKI_CODE=$(grep "WIKI_CODE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  869. fi
  870. if grep -q "FULLBLOG_DOMAIN_NAME" $CONFIGURATION_FILE; then
  871. FULLBLOG_DOMAIN_NAME=$(grep "FULLBLOG_DOMAIN_NAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  872. fi
  873. if grep -q "FULLBLOG_CODE" $CONFIGURATION_FILE; then
  874. FULLBLOG_CODE=$(grep "FULLBLOG_CODE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  875. fi
  876. if grep -q "MY_BLOG_TITLE" $CONFIGURATION_FILE; then
  877. MY_BLOG_TITLE=$(grep "MY_BLOG_TITLE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  878. fi
  879. if grep -q "MY_BLOG_SUBTITLE" $CONFIGURATION_FILE; then
  880. MY_BLOG_SUBTITLE=$(grep "MY_BLOG_SUBTITLE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  881. fi
  882. if grep -q "GPG_ENCRYPT_STORED_EMAIL" $CONFIGURATION_FILE; then
  883. GPG_ENCRYPT_STORED_EMAIL=$(grep "GPG_ENCRYPT_STORED_EMAIL" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  884. fi
  885. if grep -q "MY_GPG_PUBLIC_KEY" $CONFIGURATION_FILE; then
  886. MY_GPG_PUBLIC_KEY=$(grep "MY_GPG_PUBLIC_KEY" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  887. fi
  888. if grep -q "MY_GPG_PRIVATE_KEY" $CONFIGURATION_FILE; then
  889. MY_GPG_PRIVATE_KEY=$(grep "MY_GPG_PRIVATE_KEY" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  890. fi
  891. if grep -q "MY_GPG_PUBLIC_KEY_ID" $CONFIGURATION_FILE; then
  892. MY_GPG_PUBLIC_KEY_ID=$(grep "MY_GPG_PUBLIC_KEY_ID" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  893. fi
  894. if grep -q "USB_DRIVE" $CONFIGURATION_FILE; then
  895. USB_DRIVE=$(grep "USB_DRIVE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  896. fi
  897. if grep -q "MAX_PHP_MEMORY" $CONFIGURATION_FILE; then
  898. MAX_PHP_MEMORY=$(grep "MAX_PHP_MEMORY" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  899. fi
  900. if grep -q "TLS_TIME_SOURCE1" $CONFIGURATION_FILE; then
  901. TLS_TIME_SOURCE1=$(grep "TLS_TIME_SOURCE1" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  902. fi
  903. if grep -q "TLS_TIME_SOURCE2" $CONFIGURATION_FILE; then
  904. TLS_TIME_SOURCE2=$(grep "TLS_TIME_SOURCE2" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  905. fi
  906. fi
  907. }
  908. # check an individual domain name
  909. function test_domain_name {
  910. if [ $1 ]; then
  911. TEST_DOMAIN_NAME=$1
  912. validate_domain_name
  913. if [[ $TEST_DOMAIN_NAME != $1 ]]; then
  914. echo $TEST_DOMAIN_NAME
  915. exit 8528
  916. fi
  917. fi
  918. }
  919. # check that domain names are sensible
  920. function check_domains {
  921. if [ $WIKI_DOMAIN_NAME ]; then
  922. test_domain_name "$WIKI_DOMAIN_NAME"
  923. if [[ "$WIKI_DOMAIN_NAME" == "$OWNCLOUD_DOMAIN_NAME" ]]; then
  924. echo 'Wiki domain name is the same as Owncloud domain name. They must be different'
  925. exit 73863
  926. fi
  927. if [[ "$WIKI_DOMAIN_NAME" == "$FULLBLOG_DOMAIN_NAME" ]]; then
  928. echo 'Wiki domain name is the same as blog domain name. They must be different'
  929. exit 97326
  930. fi
  931. if [[ "$WIKI_DOMAIN_NAME" == "$MICROBLOG_DOMAIN_NAME" ]]; then
  932. echo 'Wiki domain name is the same as microblog domain name. They must be different'
  933. exit 36827
  934. fi
  935. if [[ "$WIKI_DOMAIN_NAME" == "$REDMATRIX_DOMAIN_NAME" ]]; then
  936. echo 'Wiki domain name is the same as redmatrix domain name. They must be different'
  937. exit 93637
  938. fi
  939. fi
  940. if [ $OWNCLOUD_DOMAIN_NAME ]; then
  941. test_domain_name "$OWNCLOUD_DOMAIN_NAME"
  942. if [[ "$OWNCLOUD_DOMAIN_NAME" == "$WIKI_DOMAIN_NAME" ]]; then
  943. echo 'Owncloud domain name is the same as wiki domain name. They must be different'
  944. exit 37994
  945. fi
  946. if [[ "$OWNCLOUD_DOMAIN_NAME" == "$FULLBLOG_DOMAIN_NAME" ]]; then
  947. echo 'Owncloud domain name is the same as blog domain name. They must be different'
  948. exit 37936
  949. fi
  950. if [[ "$OWNCLOUD_DOMAIN_NAME" == "$MICROBLOG_DOMAIN_NAME" ]]; then
  951. echo 'Owncloud domain name is the same as microblog domain name. They must be different'
  952. exit 36896
  953. fi
  954. if [[ "$OWNCLOUD_DOMAIN_NAME" == "$REDMATRIX_DOMAIN_NAME" ]]; then
  955. echo 'Owncloud domain name is the same as redmatrix domain name. They must be different'
  956. exit 79362
  957. fi
  958. fi
  959. if [ $FULLBLOG_DOMAIN_NAME ]; then
  960. test_domain_name "$FULLBLOG_DOMAIN_NAME"
  961. if [[ "$FULLBLOG_DOMAIN_NAME" == "$WIKI_DOMAIN_NAME" ]]; then
  962. echo 'Blog domain name is the same as wiki domain name. They must be different'
  963. exit 62348
  964. fi
  965. if [[ "$FULLBLOG_DOMAIN_NAME" == "$OWNCLOUD_DOMAIN_NAME" ]]; then
  966. echo 'Blog domain name is the same as Owncloud domain name. They must be different'
  967. exit 84682
  968. fi
  969. if [[ "$FULLBLOG_DOMAIN_NAME" == "$MICROBLOG_DOMAIN_NAME" ]]; then
  970. echo 'Blog domain name is the same as microblog domain name. They must be different'
  971. exit 38236
  972. fi
  973. if [[ "$FULLBLOG_DOMAIN_NAME" == "$REDMATRIX_DOMAIN_NAME" ]]; then
  974. echo 'Blog domain name is the same as redmatrix domain name. They must be different'
  975. exit 36813
  976. fi
  977. fi
  978. if [ $MICROBLOG_DOMAIN_NAME ]; then
  979. test_domain_name "$MICROBLOG_DOMAIN_NAME"
  980. if [[ "$MICROBLOG_DOMAIN_NAME" == "$WIKI_DOMAIN_NAME" ]]; then
  981. echo 'Microblog domain name is the same as wiki domain name. They must be different'
  982. exit 73924
  983. fi
  984. if [[ "$MICROBLOG_DOMAIN_NAME" == "$OWNCLOUD_DOMAIN_NAME" ]]; then
  985. echo 'Microblog domain name is the same as Owncloud domain name. They must be different'
  986. exit 73683
  987. fi
  988. if [[ "$MICROBLOG_DOMAIN_NAME" == "$FULLBLOG_DOMAIN_NAME" ]]; then
  989. echo 'Microblog domain name is the same as blog domain name. They must be different'
  990. exit 26832
  991. fi
  992. if [[ "$MICROBLOG_DOMAIN_NAME" == "$REDMATRIX_DOMAIN_NAME" ]]; then
  993. echo 'Microblog domain name is the same as redmatrix domain name. They must be different'
  994. exit 36373
  995. fi
  996. fi
  997. if [ $REDMATRIX_DOMAIN_NAME ]; then
  998. test_domain_name "$REDMATRIX_DOMAIN_NAME"
  999. if [[ "$REDMATRIX_DOMAIN_NAME" == "$WIKI_DOMAIN_NAME" ]]; then
  1000. echo 'RedMatrix domain name is the same as wiki domain name. They must be different'
  1001. exit 83682
  1002. fi
  1003. if [[ "$REDMATRIX_DOMAIN_NAME" == "$OWNCLOUD_DOMAIN_NAME" ]]; then
  1004. echo 'RedMatrix domain name is the same as Owncloud domain name. They must be different'
  1005. exit 65192
  1006. fi
  1007. if [[ "$REDMATRIX_DOMAIN_NAME" == "$FULLBLOG_DOMAIN_NAME" ]]; then
  1008. echo 'RedMatrix domain name is the same as blog domain name. They must be different'
  1009. exit 74817
  1010. fi
  1011. if [[ "$REDMATRIX_DOMAIN_NAME" == "$MICROBLOG_DOMAIN_NAME" ]]; then
  1012. echo 'RedMatrix domain name is the same as microblog domain name. They must be different'
  1013. exit 83683
  1014. fi
  1015. fi
  1016. }
  1017. # Checks whether certificates were generated for the given hostname
  1018. function check_certificates {
  1019. if [ ! $1 ]; then
  1020. return
  1021. fi
  1022. if [ ! -f /etc/ssl/private/$1.key ]; then
  1023. echo "Private certificate for $CHECK_HOSTNAME was not created"
  1024. exit 63959
  1025. fi
  1026. if [ ! -f /etc/ssl/certs/$1.crt ]; then
  1027. echo "Public certificate for $CHECK_HOSTNAME was not created"
  1028. exit 7679
  1029. fi
  1030. if [ ! -f /etc/ssl/certs/$1.dhparam ]; then
  1031. echo "Diffie–Hellman parameters for $CHECK_HOSTNAME were not created"
  1032. exit 5989
  1033. fi
  1034. }
  1035. function install_not_on_BBB {
  1036. if grep -Fxq "install_not_on_BBB" $COMPLETION_FILE; then
  1037. return
  1038. fi
  1039. if [[ INSTALLING_ON_BBB == "yes" ]]; then
  1040. return
  1041. fi
  1042. echo '# This file describes the network interfaces available on your system' > /etc/network/interfaces
  1043. echo '# and how to activate them. For more information, see interfaces(5).' >> /etc/network/interfaces
  1044. echo '' >> /etc/network/interfaces
  1045. echo '# The loopback network interface' >> /etc/network/interfaces
  1046. echo 'auto lo' >> /etc/network/interfaces
  1047. echo 'iface lo inet loopback' >> /etc/network/interfaces
  1048. echo '' >> /etc/network/interfaces
  1049. echo '# The primary network interface' >> /etc/network/interfaces
  1050. echo 'auto eth0' >> /etc/network/interfaces
  1051. echo 'iface eth0 inet static' >> /etc/network/interfaces
  1052. echo " address $LOCAL_NETWORK_STATIC_IP_ADDRESS" >> /etc/network/interfaces
  1053. echo ' netmask 255.255.255.0' >> /etc/network/interfaces
  1054. echo " gateway $ROUTER_IP_ADDRESS" >> /etc/network/interfaces
  1055. echo " dns-nameservers $NAMESERVER1 $NAMESERVER2" >> /etc/network/interfaces
  1056. echo '# Example to keep MAC address between reboots' >> /etc/network/interfaces
  1057. echo '#hwaddress ether DE:AD:BE:EF:CA:FE' >> /etc/network/interfaces
  1058. echo '' >> /etc/network/interfaces
  1059. echo '# The secondary network interface' >> /etc/network/interfaces
  1060. echo '#auto eth1' >> /etc/network/interfaces
  1061. echo '#iface eth1 inet dhcp' >> /etc/network/interfaces
  1062. echo '' >> /etc/network/interfaces
  1063. echo '# WiFi Example' >> /etc/network/interfaces
  1064. echo "#auto $WIFI_INTERFACE" >> /etc/network/interfaces
  1065. echo "#iface $WIFI_INTERFACE inet dhcp" >> /etc/network/interfaces
  1066. echo '# wpa-ssid "essid"' >> /etc/network/interfaces
  1067. echo '# wpa-psk "password"' >> /etc/network/interfaces
  1068. echo '' >> /etc/network/interfaces
  1069. echo '# Ethernet/RNDIS gadget (g_ether)' >> /etc/network/interfaces
  1070. echo '# ... or on host side, usbnet and random hwaddr' >> /etc/network/interfaces
  1071. echo '# Note on some boards, usb0 is automaticly setup with an init script' >> /etc/network/interfaces
  1072. echo '#iface usb0 inet static' >> /etc/network/interfaces
  1073. echo '# address 192.168.7.2' >> /etc/network/interfaces
  1074. echo '# netmask 255.255.255.0' >> /etc/network/interfaces
  1075. echo '# network 192.168.7.0' >> /etc/network/interfaces
  1076. echo '# gateway 192.168.7.1' >> /etc/network/interfaces
  1077. echo 'install_not_on_BBB' >> $COMPLETION_FILE
  1078. }
  1079. function randomize_cron {
  1080. # The predictable default timing of Debian cron jobs might
  1081. # be exploitable knowledge. Avoid too much predictability
  1082. # by randomizing the times when cron jobs run
  1083. if grep -Fxq "randomize_cron" $COMPLETION_FILE; then
  1084. return
  1085. fi
  1086. # randomize the day on which the weekly cron job runs
  1087. randdow=$(($RANDOM%6+1))
  1088. sed -i "s|\* \* 7|* * $randdow|g" /etc/crontab
  1089. # randomize the time when the weekly cron job runs
  1090. randmin=$(($RANDOM%60))
  1091. randhr=$(($RANDOM%3+1))
  1092. sed -i "s|47 6|$randmin $randhr|g" /etc/crontab
  1093. # randomize the time when the daily cron job runs
  1094. randmin=$(($RANDOM%60))
  1095. randhr=$(($RANDOM%3+4))
  1096. sed -i "s|25 6\t\* \* \*|$randmin $randhr\t* * *|g" /etc/crontab
  1097. # randomize the time when the hourly cron job runs
  1098. randmin=$(($RANDOM%60))
  1099. sed -i "s|17 \*\t|$randmin *\t|g" /etc/crontab
  1100. # randomize monthly cron job time and day
  1101. randmin=$(($RANDOM%60))
  1102. randhr=$(($RANDOM%22+1))
  1103. randdom=$(($RANDOM%27+1))
  1104. sed -i "s|52 6\t|$randmin $randhr\t|g" /etc/crontab
  1105. sed -i "s|\t1 \* \*|\t$randdom * *|g" /etc/crontab
  1106. service cron restart
  1107. echo 'randomize_cron' >> $COMPLETION_FILE
  1108. }
  1109. function get_cjdns_public_key {
  1110. if [ -f /home/$MY_USERNAME/README ]; then
  1111. if grep -q "cjdns public key" /home/$MY_USERNAME/README; then
  1112. if [ ! $CJDNS_PUBLIC_KEY ]; then
  1113. CJDNS_PUBLIC_KEY=$(cat /home/$MY_USERNAME/README | grep "cjdns public key" | awk -F ':' '{print $2}' | sed 's/^ *//')
  1114. fi
  1115. fi
  1116. fi
  1117. }
  1118. function get_cjdns_private_key {
  1119. if [ -f /home/$MY_USERNAME/README ]; then
  1120. if grep -q "cjdns private key" /home/$MY_USERNAME/README; then
  1121. if [ ! $CJDNS_PRIVATE_KEY ]; then
  1122. CJDNS_PRIVATE_KEY=$(cat /home/$MY_USERNAME/README | grep "cjdns private key" | awk -F ':' '{print $2}' | sed 's/^ *//')
  1123. fi
  1124. fi
  1125. fi
  1126. }
  1127. function get_cjdns_ipv6_address {
  1128. if [ -f /home/$MY_USERNAME/README ]; then
  1129. if grep -q "cjdns IPv6 address" /home/$MY_USERNAME/README; then
  1130. if [ ! $CJDNS_IPV6 ]; then
  1131. CJDNS_IPV6=$(cat /home/$MY_USERNAME/README | grep "cjdns IPv6 address" | awk -F ':' '{print $2}' | sed 's/^ *//')
  1132. fi
  1133. fi
  1134. fi
  1135. }
  1136. function get_cjdns_port {
  1137. if [ -f /home/$MY_USERNAME/README ]; then
  1138. if grep -q "cjdns port" /home/$MY_USERNAME/README; then
  1139. if [ ! $CJDNS_PORT ]; then
  1140. CJDNS_PORT=$(cat /home/$MY_USERNAME/README | grep "cjdns port" | awk -F ':' '{print $2}' | sed 's/^ *//')
  1141. fi
  1142. fi
  1143. fi
  1144. }
  1145. function get_cjdns_password {
  1146. if [ -f /home/$MY_USERNAME/README ]; then
  1147. if grep -q "cjdns password" /home/$MY_USERNAME/README; then
  1148. if [ ! $CJDNS_PASSWORD ]; then
  1149. CJDNS_PASSWORD=$(cat /home/$MY_USERNAME/README | grep "cjdns password" | awk -F ':' '{print $2}' | sed 's/^ *//')
  1150. fi
  1151. fi
  1152. fi
  1153. }
  1154. function enable_ipv6 {
  1155. # endure that ipv6 is enabled and can route
  1156. sed -i 's/net.ipv6.conf.all.disable_ipv6.*/net.ipv6.conf.all.disable_ipv6 = 0/g' /etc/sysctl.conf
  1157. #sed -i "s/net.ipv6.conf.all.accept_redirects.*/net.ipv6.conf.all.accept_redirects = 1/g" /etc/sysctl.conf
  1158. #sed -i "s/net.ipv6.conf.all.accept_source_route.*/net.ipv6.conf.all.accept_source_route = 1/g" /etc/sysctl.conf
  1159. sed -i "s/net.ipv6.conf.all.forwarding.*/net.ipv6.conf.all.forwarding=1/g" /etc/sysctl.conf
  1160. echo 1 > /proc/sys/net/ipv6/conf/all/forwarding
  1161. }
  1162. function mesh_cjdns {
  1163. if grep -Fxq "mesh_cjdns" $COMPLETION_FILE; then
  1164. return
  1165. fi
  1166. if [[ $ENABLE_CJDNS != "yes" ]]; then
  1167. return
  1168. fi
  1169. apt-get -y install nodejs git build-essential nmap
  1170. # if a README exists then obtain the cjdns parameters
  1171. get_cjdns_ipv6_address
  1172. get_cjdns_public_key
  1173. get_cjdns_private_key
  1174. get_cjdns_port
  1175. get_cjdns_password
  1176. # special compile settings for running ./do on the Beaglebone Black
  1177. if [[ $INSTALLING_ON_BBB == "yes" ]]; then
  1178. CFLAGS="-O2 -march=armv7-a -mtune=cortex-a8 -mfpu=neon -ftree-vectorize -ffast-math -mfloat-abi=hard -marm -Wno-error=maybe-uninitialized"
  1179. export LDFLAGS="$CFLAGS"
  1180. fi
  1181. if [ ! -d /etc/cjdns ]; then
  1182. git clone https://github.com/cjdelisle/cjdns.git /etc/cjdns
  1183. cd /etc/cjdns
  1184. ./do
  1185. if [ ! "$?" = "0" ]; then
  1186. exit 7439
  1187. fi
  1188. # create a configuration
  1189. if [ ! -f /etc/cjdns/cjdroute.conf ]; then
  1190. ./cjdroute --genconf > /etc/cjdns/cjdroute.conf
  1191. if [ ! "$?" = "0" ]; then
  1192. exit 5922
  1193. fi
  1194. fi
  1195. # create a user to run as
  1196. useradd cjdns
  1197. else
  1198. cd /etc/cjdns
  1199. git pull
  1200. ./do
  1201. if [ ! "$?" = "0" ]; then
  1202. exit 9926
  1203. fi
  1204. fi
  1205. # set permissions
  1206. chown -R cjdns:cjdns /etc/cjdns
  1207. chmod 600 /etc/cjdns/cjdroute.conf
  1208. /sbin/ip tuntap add mode tun user cjdns dev cjdroute0
  1209. # insert values into the configuration file
  1210. if [ $CJDNS_PRIVATE_KEY ]; then
  1211. sed -i "s/\"privateKey\":.*/\"privateKey\": \"$CJDNS_PRIVATE_KEY\",/g" /etc/cjdns/cjdroute.conf
  1212. else
  1213. CJDNS_PRIVATE_KEY=$(cat /etc/cjdns/cjdroute.conf | grep '"privateKey"' | awk -F '"' '{print $4}' | sed -n 1p)
  1214. fi
  1215. if [ $CJDNS_PUBLIC_KEY ]; then
  1216. sed -i "s/\"publicKey\":.*/\"publicKey\": \"$CJDNS_PUBLIC_KEY\",/g" /etc/cjdns/cjdroute.conf
  1217. else
  1218. CJDNS_PUBLIC_KEY=$(cat /etc/cjdns/cjdroute.conf | grep '"publicKey"' | awk -F '"' '{print $4}' | sed -n 1p)
  1219. fi
  1220. if [ $CJDNS_IPV6 ]; then
  1221. sed -i "s/\"ipv6\":.*/\"ipv6\": \"$CJDNS_IPV6\",/g" /etc/cjdns/cjdroute.conf
  1222. else
  1223. CJDNS_IPV6=$(cat /etc/cjdns/cjdroute.conf | grep '"ipv6"' | awk -F '"' '{print $4}' | sed -n 1p)
  1224. fi
  1225. if [ $CJDNS_PASSWORD ]; then
  1226. sed -i "0,/{\"password\":.*/s//{\"password\": \"$CJDNS_PASSWORD\"}/g" /etc/cjdns/cjdroute.conf
  1227. else
  1228. CJDNS_PASSWORD=$(cat /etc/cjdns/cjdroute.conf | grep '"password"' | awk -F '"' '{print $4}' | sed -n 1p)
  1229. fi
  1230. if [ $CJDNS_PORT ]; then
  1231. sed -i "s/\"bind\": \"0.0.0.0:.*/\"bind\": \"0.0.0.0:$CJDNS_PORT\",/g" /etc/cjdns/cjdroute.conf
  1232. else
  1233. CJDNS_PORT=$(cat /etc/cjdns/cjdroute.conf | grep '"bind": "0.0.0.0:' | awk -F '"' '{print $4}' | awk -F ':' '{print $2}' | sed -n 1p)
  1234. fi
  1235. enable_ipv6
  1236. echo '#!/bin/sh -e' > /etc/init.d/cjdns
  1237. echo '### BEGIN INIT INFO' >> /etc/init.d/cjdns
  1238. echo '# hyperboria.sh - An init script (/etc/init.d/) for cjdns' >> /etc/init.d/cjdns
  1239. echo '# Provides: cjdroute' >> /etc/init.d/cjdns
  1240. echo '# Required-Start: $remote_fs $network' >> /etc/init.d/cjdns
  1241. echo '# Required-Stop: $remote_fs $network' >> /etc/init.d/cjdns
  1242. echo '# Default-Start: 2 3 4 5' >> /etc/init.d/cjdns
  1243. echo '# Default-Stop: 0 1 6' >> /etc/init.d/cjdns
  1244. echo '# Short-Description: Cjdns router' >> /etc/init.d/cjdns
  1245. echo '# Description: A routing engine designed for security, scalability, speed and ease of use.' >> /etc/init.d/cjdns
  1246. echo '# cjdns git repo: https://github.com/cjdelisle/cjdns/' >> /etc/init.d/cjdns
  1247. echo '### END INIT INFO' >> /etc/init.d/cjdns
  1248. echo '' >> /etc/init.d/cjdns
  1249. echo 'PROG="cjdroute"' >> /etc/init.d/cjdns
  1250. echo 'GIT_PATH="/etc/cjdns"' >> /etc/init.d/cjdns
  1251. echo 'PROG_PATH="/etc/cjdns"' >> /etc/init.d/cjdns
  1252. echo 'CJDNS_CONFIG="cjdroute.conf"' >> /etc/init.d/cjdns
  1253. echo 'CJDNS_USER="cjdns"' >> /etc/init.d/cjdns
  1254. echo "CJDNS_IP='$CJDNS_IPV6'" >> /etc/init.d/cjdns
  1255. echo '' >> /etc/init.d/cjdns
  1256. echo 'start() {' >> /etc/init.d/cjdns
  1257. echo ' # Start it up with the user cjdns' >> /etc/init.d/cjdns
  1258. echo ' if [ $(pgrep cjdroute | wc -l) != 0 ];' >> /etc/init.d/cjdns
  1259. echo ' then' >> /etc/init.d/cjdns
  1260. echo ' echo "cjdroute is already running. Doing nothing..."' >> /etc/init.d/cjdns
  1261. echo ' else' >> /etc/init.d/cjdns
  1262. echo ' echo " * Starting cjdroute"' >> /etc/init.d/cjdns
  1263. echo ' su -c "$PROG_PATH/$PROG < $PROG_PATH/$CJDNS_CONFIG" - $CJDNS_USER' >> /etc/init.d/cjdns
  1264. echo ' /sbin/ip addr add $CJDNS_IP/8 dev tun0' >> /etc/init.d/cjdns
  1265. echo ' /sbin/ip link set mtu 1312 dev tun0' >> /etc/init.d/cjdns
  1266. echo ' /sbin/ip link set tun0 up' >> /etc/init.d/cjdns
  1267. echo ' /sbin/ip tuntap add mode tun user cjdns dev tun0' >> /etc/init.d/cjdns
  1268. echo ' fi' >> /etc/init.d/cjdns
  1269. echo '}' >> /etc/init.d/cjdns
  1270. echo '' >> /etc/init.d/cjdns
  1271. echo 'stop() {' >> /etc/init.d/cjdns
  1272. echo '' >> /etc/init.d/cjdns
  1273. echo ' if [ $(pgrep cjdroute | wc -l) != 2 ];' >> /etc/init.d/cjdns
  1274. echo ' then' >> /etc/init.d/cjdns
  1275. echo ' echo "cjdns isnt running."' >> /etc/init.d/cjdns
  1276. echo ' else' >> /etc/init.d/cjdns
  1277. echo ' echo "Killing cjdroute"' >> /etc/init.d/cjdns
  1278. echo ' killall cjdroute' >> /etc/init.d/cjdns
  1279. echo ' fi' >> /etc/init.d/cjdns
  1280. echo '}' >> /etc/init.d/cjdns
  1281. echo '' >> /etc/init.d/cjdns
  1282. echo 'status() {' >> /etc/init.d/cjdns
  1283. echo ' if [ $(pgrep cjdroute | wc -l) != 0 ];' >> /etc/init.d/cjdns
  1284. echo ' then' >> /etc/init.d/cjdns
  1285. echo ' echo "Cjdns is running"' >> /etc/init.d/cjdns
  1286. echo ' else' >> /etc/init.d/cjdns
  1287. echo ' echo "Cjdns is not running"' >> /etc/init.d/cjdns
  1288. echo ' fi' >> /etc/init.d/cjdns
  1289. echo '}' >> /etc/init.d/cjdns
  1290. echo '' >> /etc/init.d/cjdns
  1291. echo ' update() {' >> /etc/init.d/cjdns
  1292. echo ' cd $GIT_PATH' >> /etc/init.d/cjdns
  1293. echo ' echo "Updating..."' >> /etc/init.d/cjdns
  1294. echo ' git pull' >> /etc/init.d/cjdns
  1295. echo ' ./do' >> /etc/init.d/cjdns
  1296. echo '}' >> /etc/init.d/cjdns
  1297. echo '' >> /etc/init.d/cjdns
  1298. echo '## Check to see if we are running as root first.' >> /etc/init.d/cjdns
  1299. echo 'if [ "$(id -u)" != "0" ]; then' >> /etc/init.d/cjdns
  1300. echo ' echo "This script must be run as root" 1>&2' >> /etc/init.d/cjdns
  1301. echo ' exit 1' >> /etc/init.d/cjdns
  1302. echo 'fi' >> /etc/init.d/cjdns
  1303. echo '' >> /etc/init.d/cjdns
  1304. echo 'case $1 in' >> /etc/init.d/cjdns
  1305. echo ' start)' >> /etc/init.d/cjdns
  1306. echo ' start' >> /etc/init.d/cjdns
  1307. echo ' exit 0' >> /etc/init.d/cjdns
  1308. echo ' ;;' >> /etc/init.d/cjdns
  1309. echo ' stop)' >> /etc/init.d/cjdns
  1310. echo ' stop' >> /etc/init.d/cjdns
  1311. echo ' exit 0' >> /etc/init.d/cjdns
  1312. echo ' ;;' >> /etc/init.d/cjdns
  1313. echo ' reload|restart|force-reload)' >> /etc/init.d/cjdns
  1314. echo ' stop' >> /etc/init.d/cjdns
  1315. echo ' sleep 1' >> /etc/init.d/cjdns
  1316. echo ' start' >> /etc/init.d/cjdns
  1317. echo ' exit 0' >> /etc/init.d/cjdns
  1318. echo ' ;;' >> /etc/init.d/cjdns
  1319. echo ' status)' >> /etc/init.d/cjdns
  1320. echo ' status' >> /etc/init.d/cjdns
  1321. echo ' exit 0' >> /etc/init.d/cjdns
  1322. echo ' ;;' >> /etc/init.d/cjdns
  1323. echo ' update|upgrade)' >> /etc/init.d/cjdns
  1324. echo ' update' >> /etc/init.d/cjdns
  1325. echo ' stop' >> /etc/init.d/cjdns
  1326. echo ' sleep 2' >> /etc/init.d/cjdns
  1327. echo ' start' >> /etc/init.d/cjdns
  1328. echo ' exit 0' >> /etc/init.d/cjdns
  1329. echo ' ;;' >> /etc/init.d/cjdns
  1330. echo ' **)' >> /etc/init.d/cjdns
  1331. echo ' echo "Usage: $0 (start|stop|restart|status|update)" 1>&2' >> /etc/init.d/cjdns
  1332. echo ' exit 1' >> /etc/init.d/cjdns
  1333. echo ' ;;' >> /etc/init.d/cjdns
  1334. echo 'esac' >> /etc/init.d/cjdns
  1335. chmod +x /etc/init.d/cjdns
  1336. update-rc.d cjdns defaults
  1337. service cjdns start
  1338. if [ ! "$?" = "0" ]; then
  1339. systemctl status cjdns.service
  1340. exit 8260
  1341. fi
  1342. apt-get -y install radvd
  1343. echo 'interface eth0' > /etc/radvd.conf
  1344. echo '{' >> /etc/radvd.conf
  1345. echo ' AdvSendAdvert on;' >> /etc/radvd.conf
  1346. echo ' prefix fdfc::1/64' >> /etc/radvd.conf
  1347. echo ' {' >> /etc/radvd.conf
  1348. echo ' AdvRouterAddr on;' >> /etc/radvd.conf
  1349. echo ' };' >> /etc/radvd.conf
  1350. echo '};' >> /etc/radvd.conf
  1351. service radvd restart
  1352. if [ ! "$?" = "0" ]; then
  1353. systemctl status radvd.service
  1354. exit 4395
  1355. fi
  1356. if ! grep -q "# Mesh Networking (cjdns)" /etc/network/interfaces; then
  1357. echo '' >> /etc/network/interfaces
  1358. echo '# Mesh Networking (cjdns)' >> /etc/network/interfaces
  1359. echo 'iface eth0 inet6 static' >> /etc/network/interfaces
  1360. echo ' pre-up modprobe ipv6' >> /etc/network/interfaces
  1361. echo ' address fdfc:0000:0000:0000:0000:0000:0000:0001' >> /etc/network/interfaces
  1362. echo ' netmask 64' >> /etc/network/interfaces
  1363. service network-manager restart
  1364. if [ ! "$?" = "0" ]; then
  1365. systemctl status networking.service
  1366. exit 6949
  1367. fi
  1368. fi
  1369. ip6tables -A INPUT -p udp --dport $CJDNS_PORT -j ACCEPT
  1370. ip6tables -A INPUT -p tcp --dport $CJDNS_PORT -j ACCEPT
  1371. save_firewall_settings
  1372. if ! grep -q "Mesh Networking (cjdns)" /home/$MY_USERNAME/README; then
  1373. CURRENT_IP_ADDRESS=$(ip addr show | grep "inet " | sed -n 2p | awk -F ' ' '{print $2}' | awk -F '/' '{print $1}')
  1374. echo '' >> /home/$MY_USERNAME/README
  1375. echo '' >> /home/$MY_USERNAME/README
  1376. echo 'Mesh Networking (cjdns)' >> /home/$MY_USERNAME/README
  1377. echo '=======================' >> /home/$MY_USERNAME/README
  1378. echo "cjdns IPv6 address: $CJDNS_IPV6" >> /home/$MY_USERNAME/README
  1379. echo "cjdns public key: $CJDNS_PUBLIC_KEY" >> /home/$MY_USERNAME/README
  1380. echo "cjdns private key: $CJDNS_PRIVATE_KEY" >> /home/$MY_USERNAME/README
  1381. echo "cjdns password: $CJDNS_PASSWORD" >> /home/$MY_USERNAME/README
  1382. echo "cjdns port: $CJDNS_PORT" >> /home/$MY_USERNAME/README
  1383. echo '' >> /home/$MY_USERNAME/README
  1384. echo "Forward port $CJDNS_PORT from your internet router to the Freedombone" >> /home/$MY_USERNAME/README
  1385. echo '' >> /home/$MY_USERNAME/README
  1386. echo 'Below is an example of your connection credentials' >> /home/$MY_USERNAME/README
  1387. echo 'that you can give to other people so they can connect' >> /home/$MY_USERNAME/README
  1388. echo 'to you using your default password' >> /home/$MY_USERNAME/README
  1389. echo 'Adding a unique password for each user is advisable' >> /home/$MY_USERNAME/README
  1390. echo 'so that leaks can be isolated.' >> /home/$MY_USERNAME/README
  1391. echo '' >> /home/$MY_USERNAME/README
  1392. echo "\"$CURRENT_IP_ADDRESS:$CJDNS_PORT\":{\"password\":\"$CJDNS_PASSWORD\",\"publicKey\":\"$CJDNS_PUBLIC_KEY\"}" >> /home/$MY_USERNAME/README
  1393. echo '' >> /home/$MY_USERNAME/README
  1394. echo 'More is not better. 3-5 cjdns peers is good. 30 peers is bad.' >> /home/$MY_USERNAME/README
  1395. echo '' >> /home/$MY_USERNAME/README
  1396. echo 'NEVER USE A PUBLIC PEER. These degrade the network and make it centralized.' >> /home/$MY_USERNAME/README
  1397. echo 'Each node can handle many peers, but no node can handle the entire internet.' >> /home/$MY_USERNAME/README
  1398. echo 'As this network grows any public peer will simply become saturated and' >> /home/$MY_USERNAME/README
  1399. echo 'useless causing issues for the entire network.' >> /home/$MY_USERNAME/README
  1400. echo 'Please report anyone offering you a public peer as they are promoting shared' >> /home/$MY_USERNAME/README
  1401. echo 'passwords which could lead to people pretending to be you. A peering pass' >> /home/$MY_USERNAME/README
  1402. echo 'should not contain someone elses nickname or info but should contain yours' >> /home/$MY_USERNAME/README
  1403. echo 'to ensure it is not shared. It also helps when editing the conf to know who' >> /home/$MY_USERNAME/README
  1404. echo 'each password is for.' >> /home/$MY_USERNAME/README
  1405. echo '' >> /home/$MY_USERNAME/README
  1406. echo 'Possible cjdns destinations of interest:' >> /home/$MY_USERNAME/README
  1407. echo ' http://transitiontech.ca/faq' >> /home/$MY_USERNAME/README
  1408. echo ' http://cjdns.ca/hypeirc.txt' >> /home/$MY_USERNAME/README
  1409. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  1410. chmod 600 /home/$MY_USERNAME/README
  1411. fi
  1412. echo 'mesh_cjdns' >> $COMPLETION_FILE
  1413. }
  1414. function mesh_cjdns_tools {
  1415. if grep -Fxq "mesh_cjdns_tools" $COMPLETION_FILE; then
  1416. return
  1417. fi
  1418. if [[ $ENABLE_CJDNS != "yes" ]]; then
  1419. return
  1420. fi
  1421. if [ ! -d /etc/cjdns ]; then
  1422. mesh_cjdns
  1423. fi
  1424. apt-get -y install golang mercurial
  1425. if [ ! -f ~/.bashrc ]; then
  1426. touch ~/.bashrc
  1427. fi
  1428. if ! grep -q "export GOPATH=" ~/.bashrc; then
  1429. echo 'export GOPATH=$HOME/projects/go' >> ~/.bashrc
  1430. fi
  1431. if ! grep -q "export PATH=$PATH:$HOME/projects/go/bin" ~/.bashrc; then
  1432. echo 'export PATH=$PATH:$HOME/projects/go/bin' >> ~/.bashrc
  1433. fi
  1434. . ~/.bashrc
  1435. export GOPATH=$HOME/projects/go
  1436. export PATH=$PATH:$HOME/projects/go/bin
  1437. go get github.com/inhies/cjdcmd
  1438. if [ ! -f $HOME/projects/go/bin/cjdcmd ]; then
  1439. echo 'cjdcmd was not compiled. Check your golang installation'
  1440. exit 7439
  1441. fi
  1442. cp $HOME/projects/go/bin/cjdcmd /usr/bin
  1443. # initialise from the cjdns config
  1444. /usr/bin/cjdcmd cjdnsadmin -file /etc/cjdns/cjdroute.conf
  1445. echo 'mesh_cjdns_tools' >> $COMPLETION_FILE
  1446. }
  1447. function install_zeronet {
  1448. if grep -Fxq "install_zeronet" $COMPLETION_FILE; then
  1449. return
  1450. fi
  1451. if [[ $SYSTEM_TYPE != "$VARIANT_MESH" ]]; then
  1452. return
  1453. fi
  1454. apt-get -y install python python-msgpack python-gevent python-pip
  1455. pip install msgpack-python --upgrade
  1456. adduser --home /opt/zeronet/ --shell /bin/false --no-create-home --ingroup daemon --disabled-password --disabled-login zeronet
  1457. git clone $ZERONET_REPO /opt/zeronet
  1458. sudo chown -R zeronet:zeronet /opt/zeronet
  1459. echo '[Unit]' > /etc/systemd/system/zeronet.service
  1460. echo 'Description=Zeronet Server' >> /etc/systemd/system/zeronet.service
  1461. echo 'After=syslog.target' >> /etc/systemd/system/zeronet.service
  1462. echo 'After=network.target' >> /etc/systemd/system/zeronet.service
  1463. echo '[Service]' >> /etc/systemd/system/zeronet.service
  1464. echo 'Type=simple' >> /etc/systemd/system/zeronet.service
  1465. echo 'User=zeronet' >> /etc/systemd/system/zeronet.service
  1466. echo 'Group=zeronet' >> /etc/systemd/system/zeronet.service
  1467. echo 'WorkingDirectory=/opt/zeronet' >> /etc/systemd/system/zeronet.service
  1468. echo 'ExecStart=/usr/bin/python zeronet.py' >> /etc/systemd/system/zeronet.service
  1469. echo '' >> /etc/systemd/system/zeronet.service
  1470. echo 'TimeoutSec=300' >> /etc/systemd/system/zeronet.service
  1471. echo '' >> /etc/systemd/system/zeronet.service
  1472. echo '[Install]' >> /etc/systemd/system/zeronet.service
  1473. echo 'WantedBy=multi-user.target' >> /etc/systemd/system/zeronet.service
  1474. systemctl enable zeronet.service
  1475. systemctl start zeronet.service
  1476. echo 'mesh_zeronet' >> $COMPLETION_FILE
  1477. }
  1478. function install_vpn_tunnel {
  1479. if ! grep -q "repo.universe-factory.net" /etc/apt/sources.list; then
  1480. echo 'deb http://repo.universe-factory.net/debian/ sid main' >> /etc/apt/sources.list
  1481. gpg --keyserver pgpkeys.mit.edu --recv-key 16EF3F64CB201D9C
  1482. if [ ! "$?" = "0" ]; then
  1483. exit 76272
  1484. fi
  1485. gpg -a --export 16EF3F64CB201D9C | sudo apt-key add -
  1486. apt-get update
  1487. apt-get -y install fastd
  1488. if [ ! "$?" = "0" ]; then
  1489. exit 52026
  1490. fi
  1491. fi
  1492. }
  1493. # ath9k_htc driver
  1494. function install_atheros_wifi {
  1495. if grep -Fxq "install_atheros_wifi" $COMPLETION_FILE; then
  1496. return
  1497. fi
  1498. if [ $INSTALLING_ON_BBB != "yes" ]; then
  1499. return
  1500. fi
  1501. if [[ $ENABLE_BABEL != "yes" && $ENABLE_BATMAN != "yes" && $ENABLE_CJDNS != "yes" ]]; then
  1502. return
  1503. fi
  1504. if [ -d $INSTALL_DIR/open-ath9k-htc-firmware ]; then
  1505. return
  1506. fi
  1507. # have drivers already been installed ?
  1508. if [ -f /lib/firmware/htc_9271.fw ]; then
  1509. return
  1510. fi
  1511. apt-get -y install build-essential cmake git m4 texinfo
  1512. if [ ! -d $INSTALL_DIR ]; then
  1513. mkdir -p $INSTALL_DIR
  1514. fi
  1515. cd $INSTALL_DIR
  1516. if [ ! -d $INSTALL_DIR/open-ath9k-htc-firmware ]; then
  1517. git clone https://github.com/qca/open-ath9k-htc-firmware.git
  1518. if [ ! "$?" = "0" ]; then
  1519. rm -rf $INSTALL_DIR/open-ath9k-htc-firmware
  1520. exit 74283
  1521. fi
  1522. fi
  1523. cd $INSTALL_DIR/open-ath9k-htc-firmware
  1524. git checkout 1.4.0
  1525. make toolchain
  1526. if [ ! "$?" = "0" ]; then
  1527. rm -rf $INSTALL_DIR/open-ath9k-htc-firmware
  1528. exit 24820
  1529. fi
  1530. make firmware
  1531. if [ ! "$?" = "0" ]; then
  1532. rm -rf $INSTALL_DIR/open-ath9k-htc-firmware
  1533. exit 63412
  1534. fi
  1535. cp target_firmware/*.fw /lib/firmware/
  1536. if [ ! "$?" = "0" ]; then
  1537. exit 74681
  1538. fi
  1539. echo 'install_atheros_wifi' >> $COMPLETION_FILE
  1540. }
  1541. function configure_avahi {
  1542. if grep -Fxq "configure_avahi" $COMPLETION_FILE; then
  1543. return
  1544. fi
  1545. # only enable avahi if we're doing mesh networking
  1546. if [[ $ENABLE_BABEL != "yes" && $ENABLE_BATMAN != "yes" && $ENABLE_CJDNS != "yes" ]]; then
  1547. # Ensure that avahi is not installed. We only need it for mesh networking
  1548. # Where there is no conventional DNS resolution
  1549. apt-get -y remove avahi-*
  1550. return
  1551. fi
  1552. apt-get -y install avahi-utils avahi-autoipd avahi-dnsconfd
  1553. if [ $DEFAULT_DOMAIN_NAME ]; then
  1554. sed -i "s|#host-name=.*|host-name=$DEFAULT_DOMAIN_NAME|g" /etc/avahi/avahi-daemon.conf
  1555. else
  1556. decarray=( 1 2 3 4 5 6 7 8 9 0 )
  1557. PEER_ID=${decarray[$RANDOM%10]}${decarray[$RANDOM%10]}${decarray[$RANDOM%10]}${decarray[$RANDOM%10]}
  1558. sed -i "s|#host-name=.*|host-name=mesh-$PEER_ID|g" /etc/avahi/avahi-daemon.conf
  1559. fi
  1560. if [ ! -d /etc/avahi/services ]; then
  1561. mkdir -p /etc/avahi/services
  1562. fi
  1563. # remove an avahi service which isn't used
  1564. if [ -f /etc/avahi/services/udisks.service ]; then
  1565. rm /etc/avahi/services/udisks.service
  1566. fi
  1567. # Add an ssh service
  1568. echo '<?xml version="1.0" standalone="no"?><!--*-nxml-*-->' > /etc/avahi/services/ssh.service
  1569. echo '<!DOCTYPE service-group SYSTEM "avahi-service.dtd">' >> /etc/avahi/services/ssh.service
  1570. echo '<service-group>' >> /etc/avahi/services/ssh.service
  1571. echo '<name replace-wildcards="yes">%h SSH</name>' >> /etc/avahi/services/ssh.service
  1572. echo '<service>' >> /etc/avahi/services/ssh.service
  1573. echo '<type>_ssh._tcp</type>' >> /etc/avahi/services/ssh.service
  1574. echo "<port>$SSH_PORT</port>" >> /etc/avahi/services/ssh.service
  1575. echo '</service>' >> /etc/avahi/services/ssh.service
  1576. echo '</service-group>' >> /etc/avahi/services/ssh.service
  1577. # Add an irc service
  1578. echo '<?xml version="1.0" standalone="no"?><!--*-nxml-*-->' > /etc/avahi/services/irc.service
  1579. echo '<!DOCTYPE service-group SYSTEM "avahi-service.dtd">' >> /etc/avahi/services/irc.service
  1580. echo '<service-group>' >> /etc/avahi/services/irc.service
  1581. echo '<name replace-wildcards="yes">%h IRC</name>' >> /etc/avahi/services/irc.service
  1582. echo '<service>' >> /etc/avahi/services/irc.service
  1583. echo '<type>_irc._tcp</type>' >> /etc/avahi/services/irc.service
  1584. echo "<port>$IRC_PORT</port>" >> /etc/avahi/services/irc.service
  1585. echo '</service>' >> /etc/avahi/services/irc.service
  1586. echo '</service-group>' >> /etc/avahi/services/irc.service
  1587. systemctl restart avahi-daemon
  1588. # this is a blatant hack, but I couldn't find a better way of mitigating the problem
  1589. # of avahi-daemon stopping after a few minutes
  1590. if ! grep -q "avahi-daemon" /etc/crontab; then
  1591. echo '* *\t* * *\troot\tsystemctl restart avahi-daemon > /dev/null' >> /etc/crontab
  1592. fi
  1593. echo 'configure_avahi' >> $COMPLETION_FILE
  1594. }
  1595. function mesh_babel {
  1596. if grep -Fxq "mesh_babel" $COMPLETION_FILE; then
  1597. return
  1598. fi
  1599. if [[ $ENABLE_BABEL != "yes" ]]; then
  1600. return
  1601. fi
  1602. apt-get -y install babeld
  1603. babel_script=/var/lib/babel
  1604. echo '#!/bin/bash' > $babel_script
  1605. echo '' >> $babel_script
  1606. echo 'if [[ $1 == "ls" || $1 == "list" ]]; then' >> $babel_script
  1607. echo ' avahi-browse -at' >> $babel_script
  1608. echo ' exit 0' >> $babel_script
  1609. echo 'fi' >> $babel_script
  1610. echo '' >> $babel_script
  1611. echo 'if [[ $1 == "start" ]]; then' >> $babel_script
  1612. echo ' sed -i "s|#host-name=.*|host-name=$(hostname)|g" /etc/avahi/avahi-daemon.conf' >> $babel_script
  1613. echo ' sed -i "s|host-name=.*|host-name=$(hostname)|g" /etc/avahi/avahi-daemon.conf' >> $babel_script
  1614. echo ' sed -i "s|use-ipv4=.*|use-ipv4=yes|g" /etc/avahi/avahi-daemon.conf' >> $babel_script
  1615. echo ' sed -i "s|use-ipv6=.*|use-ipv6=no|g" /etc/avahi/avahi-daemon.conf' >> $babel_script
  1616. echo ' sed -i "s|hosts:.*|hosts: files mdns4_minimal dns mdns4 mdns|g" /etc/nsswitch.conf' >> $babel_script
  1617. echo ' systemctl restart avahi-daemon' >> $babel_script
  1618. echo 'fi' >> $babel_script
  1619. echo '' >> $babel_script
  1620. echo "IFACE=$WIFI_INTERFACE" >> $babel_script
  1621. echo 'if [[ $IFACE == "wlan0" ]]; then' >> $babel_script
  1622. echo ' if grep -q "wlan1" /proc/net/dev; then' >> $babel_script
  1623. echo ' IFACE=wlan1' >> $babel_script
  1624. echo ' fi' >> $babel_script
  1625. echo 'fi' >> $babel_script
  1626. echo 'if [[ $IFACE == "wlan0" ]]; then' >> $babel_script
  1627. echo ' if grep -q "wlan2" /proc/net/dev; then' >> $babel_script
  1628. echo ' IFACE=wlan2' >> $babel_script
  1629. echo ' fi' >> $babel_script
  1630. echo 'fi' >> $babel_script
  1631. echo 'if [[ $IFACE == "wlan0" ]]; then' >> $babel_script
  1632. echo ' if grep -q "wlan3" /proc/net/dev; then' >> $babel_script
  1633. echo ' IFACE=wlan3' >> $babel_script
  1634. echo ' fi' >> $babel_script
  1635. echo 'fi' >> $babel_script
  1636. echo '' >> $babel_script
  1637. echo 'if [[ ! grep -q "$IFACE" /proc/net/dev || $1 == "stop" ]]; then' >> $babel_script
  1638. echo ' if ! grep -q "$IFACE" /proc/net/dev; then' >> $babel_script
  1639. echo ' echo "Interface $IFACE was not found"' >> $babel_script
  1640. echo ' else' >> $babel_script
  1641. echo ' echo "Stopping"' >> $babel_script
  1642. echo ' fi' >> $babel_script
  1643. echo ' ifconfig $IFACE down' >> $babel_script
  1644. echo ' pkill babeld' >> $babel_script
  1645. echo ' systemctl restart network-manager' >> $babel_script
  1646. echo ' exit 1' >> $babel_script
  1647. echo 'fi' >> $babel_script
  1648. echo '' >> $babel_script
  1649. echo 'systemctl stop network-manager' >> $babel_script
  1650. echo 'ifconfig $IFACE down' >> $babel_script
  1651. echo -n 'iwconfig $IFACE mode ad-hoc channel ' >> $babel_script
  1652. echo "$WIFI_CHANNEL essid \"$ESSID\"" >> $babel_script
  1653. echo 'ifconfig $IFACE up' >> $babel_script
  1654. echo -n 'ifconfig $IFACE:avahi ' >> $babel_script
  1655. echo -n "$LOCAL_NETWORK_STATIC_IP_ADDRESS netmask " >> $babel_script
  1656. echo '255.255.255.0 broadcast 192.168.13.255' >> $babel_script
  1657. echo -n 'babeld -D $IFACE:avahi -p ' >> $babel_script
  1658. echo -n "$BABEL_PORT -d 5 " >> $babel_script
  1659. echo '$IFACE' >> $babel_script
  1660. echo 'exit 0' >> $babel_script
  1661. chmod +x $babel_script
  1662. echo '[Unit]' > /etc/systemd/system/babel.service
  1663. echo 'Description=Babel Mesh' >> /etc/systemd/system/babel.service
  1664. echo '' >> /etc/systemd/system/babel.service
  1665. echo '[Service]' >> /etc/systemd/system/babel.service
  1666. echo 'Type=oneshot' >> /etc/systemd/system/babel.service
  1667. echo "ExecStart=$babel_script start" >> /etc/systemd/system/babel.service
  1668. echo "ExecStop=$babel_script stop" >> /etc/systemd/system/babel.service
  1669. echo 'RemainAfterExit=yes' >> /etc/systemd/system/babel.service
  1670. echo '' >> /etc/systemd/system/babel.service
  1671. echo '# Allow time for the server to start/stop' >> /etc/systemd/system/babel.service
  1672. echo 'TimeoutSec=300' >> /etc/systemd/system/babel.service
  1673. echo '' >> /etc/systemd/system/babel.service
  1674. echo '[Install]' >> /etc/systemd/system/babel.service
  1675. echo 'WantedBy=multi-user.target' >> /etc/systemd/system/babel.service
  1676. systemctl enable babel
  1677. echo 'mesh_babel' >> $COMPLETION_FILE
  1678. }
  1679. function mesh_batman_bridge {
  1680. # https://sudoroom.org/wiki/Mesh/Relay_setup
  1681. # also see http://www.netlore.co.uk/airmesh/
  1682. # https://www.youtube.com/watch?v=CLKHWfQlFqQ
  1683. # http://pastebin.com/4U9vdFFm
  1684. # http://pastebin.com/eeTmL5XL
  1685. if grep -Fxq "mesh_batman_bridge" $COMPLETION_FILE; then
  1686. return
  1687. fi
  1688. if [[ $ENABLE_BATMAN != "yes" ]]; then
  1689. return
  1690. fi
  1691. apt-get -y install iproute bridge-utils libnetfilter-conntrack3 batctl
  1692. apt-get -y install python-dev libevent-dev ebtables python-pip git
  1693. apt-get -y install wireless-tools rfkill
  1694. #install_vpn_tunnel
  1695. modprobe batman-adv
  1696. [ $? -ne 0 ] && echo "B.A.T.M.A.N module not available" && exit 76482
  1697. if ! grep -q "batman_adv" /etc/modules; then
  1698. echo 'batman_adv' >> /etc/modules
  1699. fi
  1700. batman_script=/var/lib/batman
  1701. echo '#!/bin/bash' > $batman_script
  1702. echo '' >> $batman_script
  1703. echo 'if [[ $1 == "start" ]]; then' >> $batman_script
  1704. echo ' # install avahi' >> $batman_script
  1705. echo ' sed -i "s|#host-name=.*|host-name=$(hostname)|g" /etc/avahi/avahi-daemon.conf' >> $batman_script
  1706. echo ' sed -i "s|host-name=.*|host-name=$(hostname)|g" /etc/avahi/avahi-daemon.conf' >> $batman_script
  1707. echo ' sed -i "s|use-ipv4=.*|use-ipv4=yes|g" /etc/avahi/avahi-daemon.conf' >> $batman_script
  1708. echo ' sed -i "s|use-ipv6=.*|use-ipv6=no|g" /etc/avahi/avahi-daemon.conf' >> $batman_script
  1709. echo ' sed -i "s|hosts:.*|hosts: files mdns4_minimal dns mdns4 mdns|g" /etc/nsswitch.conf' >> $batman_script
  1710. echo ' if ! grep -q "avahi-daemon" /etc/crontab; then' >> $batman_script
  1711. echo " echo '* *\t* * *\troot\tsystemctl restart avahi-daemon > /dev/null' >> /etc/crontab" >> $batman_script
  1712. echo ' fi' >> $batman_script
  1713. echo 'fi' >> $batman_script
  1714. echo '' >> $batman_script
  1715. echo '# Mesh definition' >> $batman_script
  1716. echo "ESSID=$ESSID" >> $batman_script
  1717. echo "CELLID=$BATMAN_CELLID" >> $batman_script
  1718. echo "CHANNEL=$WIFI_CHANNEL" >> $batman_script
  1719. echo '' >> $batman_script
  1720. echo '# Ethernet bridge definition (bridged to bat0)' >> $batman_script
  1721. echo 'BRIDGE=br-mesh' >> $batman_script
  1722. echo "IFACE=$WIFI_INTERFACE" >> $batman_script
  1723. echo 'EIFACE=eth0' >> $batman_script
  1724. echo '' >> $batman_script
  1725. echo 'if [[ $IFACE == "wlan0" ]]; then' >> $batman_script
  1726. echo ' if grep -q "wlan1" /proc/net/dev; then' >> $batman_script
  1727. echo ' IFACE=wlan1' >> $batman_script
  1728. echo ' fi' >> $batman_script
  1729. echo 'fi' >> $batman_script
  1730. echo 'if [[ $IFACE == "wlan0" ]]; then' >> $batman_script
  1731. echo ' if grep -q "wlan2" /proc/net/dev; then' >> $batman_script
  1732. echo ' IFACE=wlan2' >> $batman_script
  1733. echo ' fi' >> $batman_script
  1734. echo 'fi' >> $batman_script
  1735. echo 'if [[ $IFACE == "wlan0" ]]; then' >> $batman_script
  1736. echo ' if grep -q "wlan3" /proc/net/dev; then' >> $batman_script
  1737. echo ' IFACE=wlan3' >> $batman_script
  1738. echo ' fi' >> $batman_script
  1739. echo 'fi' >> $batman_script
  1740. echo '' >> $batman_script
  1741. echo 'if [ -e /etc/default/batctl ]; then' >> $batman_script
  1742. echo ' . /etc/default/batctl' >> $batman_script
  1743. echo 'fi' >> $batman_script
  1744. echo '' >> $batman_script
  1745. echo 'start() {' >> $batman_script
  1746. echo ' if [ -z "$IFACE" ] ; then' >> $batman_script
  1747. echo ' echo "error: unable to find wifi interface, not enabling batman-adv mesh"' >> $batman_script
  1748. echo ' return' >> $batman_script
  1749. echo ' fi' >> $batman_script
  1750. echo ' echo "info: enabling batman-adv mesh network $ESSID on $IFACE"' >> $batman_script
  1751. echo ' systemctl stop network-manager' >> $batman_script
  1752. echo ' sleep 5' >> $batman_script
  1753. echo '' >> $batman_script
  1754. echo " # remove an avahi service which isn't used" >> $batman_script
  1755. echo ' if [ -f /etc/avahi/services/udisks.service ]; then' >> $batman_script
  1756. echo ' sudo rm /etc/avahi/services/udisks.service' >> $batman_script
  1757. echo ' fi' >> $batman_script
  1758. echo '' >> $batman_script
  1759. echo ' # Might have to re-enable wifi' >> $batman_script
  1760. echo ' rfkill unblock $(rfkill list|awk -F: "/phy/ {print $1}") || true' >> $batman_script
  1761. echo '' >> $batman_script
  1762. echo ' ifconfig $IFACE down' >> $batman_script
  1763. echo ' ifconfig $IFACE mtu 1532' >> $batman_script
  1764. echo ' iwconfig $IFACE enc off' >> $batman_script
  1765. echo ' iwconfig $IFACE mode ad-hoc essid $ESSID channel $CHANNEL' >> $batman_script
  1766. echo ' sleep 1' >> $batman_script
  1767. echo ' iwconfig $IFACE ap $CELLID' >> $batman_script
  1768. echo '' >> $batman_script
  1769. echo ' modprobe batman-adv' >> $batman_script
  1770. echo ' batctl if add $IFACE' >> $batman_script
  1771. echo ' ifconfig $IFACE up' >> $batman_script
  1772. echo ' avahi-autoipd --force-bind --daemonize --wait $BRIDGE' >> $batman_script
  1773. echo ' avahi-autoipd --force-bind --daemonize --wait $IFACE' >> $batman_script
  1774. echo ' ifconfig bat0 up promisc' >> $batman_script
  1775. echo '' >> $batman_script
  1776. echo ' #Use persistent HWAddr' >> $batman_script
  1777. echo ' ether_new=$(ifconfig eth0 | grep HWaddr | sed -e "s/.*HWaddr //")' >> $batman_script
  1778. echo ' if [ ! -f /var/lib/mesh-node/bat0 ]; then' >> $batman_script
  1779. echo ' mkdir /var/lib/mesh-node' >> $batman_script
  1780. echo ' echo "${ether_new}" > /var/lib/mesh-node/bat0' >> $batman_script
  1781. echo ' else' >> $batman_script
  1782. echo ' ether=$(cat /var/lib/mesh-node/bat0)' >> $batman_script
  1783. echo ' ifconfig bat0 hw ether ${ether}' >> $batman_script
  1784. echo ' fi' >> $batman_script
  1785. echo '' >> $batman_script
  1786. echo ' if [ "$EIFACE" ] ; then' >> $batman_script
  1787. echo ' brctl addbr $BRIDGE' >> $batman_script
  1788. echo ' brctl addif $BRIDGE bat0' >> $batman_script
  1789. echo ' brctl addif $BRIDGE $EIFACE' >> $batman_script
  1790. echo ' ifconfig bat0 0.0.0.0' >> $batman_script
  1791. echo ' ifconfig $EIFACE 0.0.0.0' >> $batman_script
  1792. echo ' ifconfig $EIFACE up promisc' >> $batman_script
  1793. echo ' ifconfig $BRIDGE up' >> $batman_script
  1794. echo ' fi' >> $batman_script
  1795. echo '' >> $batman_script
  1796. echo ' iptables -A INPUT -p tcp -m state -m tcp --dport 548 --state NEW -j ACCEPT' >> $batman_script
  1797. echo ' iptables -A INPUT -p udp -m state -m udp --dport 548 --state NEW -j ACCEPT' >> $batman_script
  1798. echo ' iptables -A INPUT -p tcp -m state -m tcp --dport 5353 --state NEW -j ACCEPT' >> $batman_script
  1799. echo ' iptables -A INPUT -p udp -m state -m udp --dport 5353 --state NEW -j ACCEPT' >> $batman_script
  1800. echo ' iptables -A INPUT -p tcp -m state -m tcp --dport 5354 --state NEW -j ACCEPT' >> $batman_script
  1801. echo ' iptables -A INPUT -p udp -m state -m udp --dport 5354 --state NEW -j ACCEPT' >> $batman_script
  1802. echo '' >> $batman_script
  1803. echo ' systemctl restart avahi-daemon' >> $batman_script
  1804. echo '}' >> $batman_script
  1805. echo '' >> $batman_script
  1806. echo 'stop() {' >> $batman_script
  1807. echo ' if [ -z "$IFACE" ]; then' >> $batman_script
  1808. echo ' echo "error: unable to find wifi interface, not enabling batman-adv mesh"' >> $batman_script
  1809. echo ' return' >> $batman_script
  1810. echo ' fi' >> $batman_script
  1811. echo ' if [ "$EIFACE" ]; then' >> $batman_script
  1812. echo ' brctl delif $BRIDGE bat0' >> $batman_script
  1813. echo ' brctl delif $BRIDGE $EIFACE' >> $batman_script
  1814. echo ' ifconfig $BRIDGE down || true' >> $batman_script
  1815. echo ' brctl delbr $BRIDGE' >> $batman_script
  1816. echo ' ifconfig $EIFACE down -promisc' >> $batman_script
  1817. echo ' fi' >> $batman_script
  1818. echo '' >> $batman_script
  1819. echo ' avahi-autoipd -k $BRIDGE' >> $batman_script
  1820. echo ' avahi-autoipd -k $IFACE' >> $batman_script
  1821. echo ' ifconfig bat0 down -promisc' >> $batman_script
  1822. echo '' >> $batman_script
  1823. echo ' batctl if del $IFACE' >> $batman_script
  1824. echo ' rmmod batman-adv' >> $batman_script
  1825. echo ' ifconfig $IFACE mtu 1500' >> $batman_script
  1826. echo ' ifconfig $IFACE down' >> $batman_script
  1827. echo ' iwconfig $IFACE mode managed' >> $batman_script
  1828. echo '' >> $batman_script
  1829. echo ' iptables -D INPUT -p tcp -m state -m tcp --dport 548 --state NEW -j ACCEPT' >> $batman_script
  1830. echo ' iptables -D INPUT -p udp -m state -m udp --dport 548 --state NEW -j ACCEPT' >> $batman_script
  1831. echo ' iptables -D INPUT -p tcp -m state -m tcp --dport 5353 --state NEW -j ACCEPT' >> $batman_script
  1832. echo ' iptables -D INPUT -p udp -m state -m udp --dport 5353 --state NEW -j ACCEPT' >> $batman_script
  1833. echo ' iptables -D INPUT -p tcp -m state -m tcp --dport 5354 --state NEW -j ACCEPT' >> $batman_script
  1834. echo ' iptables -D INPUT -p udp -m state -m udp --dport 5354 --state NEW -j ACCEPT' >> $batman_script
  1835. echo '' >> $batman_script
  1836. echo ' systemctl restart network-manager' >> $batman_script
  1837. echo '}' >> $batman_script
  1838. echo '' >> $batman_script
  1839. echo 'if ! grep -q "$IFACE" /proc/net/dev; then' >> $batman_script
  1840. echo ' echo "Interface $IFACE was not found"' >> $batman_script
  1841. echo ' stop' >> $batman_script
  1842. echo ' exit 1' >> $batman_script
  1843. echo 'fi' >> $batman_script
  1844. echo '' >> $batman_script
  1845. echo 'case "$1" in' >> $batman_script
  1846. echo ' start|stop)' >> $batman_script
  1847. echo ' $1' >> $batman_script
  1848. echo ' ;;' >> $batman_script
  1849. echo ' restart)' >> $batman_script
  1850. echo ' stop' >> $batman_script
  1851. echo ' sleep 10' >> $batman_script
  1852. echo ' start' >> $batman_script
  1853. echo ' ;;' >> $batman_script
  1854. echo ' status)' >> $batman_script
  1855. echo ' batctl o' >> $batman_script
  1856. echo ' ;;' >> $batman_script
  1857. echo ' ping)' >> $batman_script
  1858. echo ' batctl ping $2' >> $batman_script
  1859. echo ' ;;' >> $batman_script
  1860. echo ' ls|list)' >> $batman_script
  1861. echo ' avahi-browse -at' >> $batman_script
  1862. echo ' ;;' >> $batman_script
  1863. echo ' *)' >> $batman_script
  1864. echo ' echo "error: invalid parameter $1"' >> $batman_script
  1865. echo ' echo "usage: $0 {start|stop|restart|status|ping|ls|list}"' >> $batman_script
  1866. echo ' exit 2' >> $batman_script
  1867. echo ' ;;' >> $batman_script
  1868. echo 'esac' >> $batman_script
  1869. echo 'exit 0' >> $batman_script
  1870. chmod +x $batman_script
  1871. echo '[Unit]' > /etc/systemd/system/batman.service
  1872. echo 'Description=B.A.T.M.A.N. Advanced' >> /etc/systemd/system/batman.service
  1873. echo '' >> /etc/systemd/system/batman.service
  1874. echo '[Service]' >> /etc/systemd/system/batman.service
  1875. echo 'Type=oneshot' >> /etc/systemd/system/batman.service
  1876. echo "ExecStart=$batman_script start" >> /etc/systemd/system/batman.service
  1877. echo "ExecStop=$batman_script stop" >> /etc/systemd/system/batman.service
  1878. echo 'RemainAfterExit=yes' >> /etc/systemd/system/batman.service
  1879. echo '' >> /etc/systemd/system/batman.service
  1880. echo '# Allow time for the server to start/stop' >> /etc/systemd/system/batman.service
  1881. echo 'TimeoutSec=300' >> /etc/systemd/system/batman.service
  1882. echo '' >> /etc/systemd/system/batman.service
  1883. echo '[Install]' >> /etc/systemd/system/batman.service
  1884. echo 'WantedBy=multi-user.target' >> /etc/systemd/system/batman.service
  1885. systemctl enable batman
  1886. if ! grep -q "Mesh Networking (B.A.T.M.A.N)" /home/$MY_USERNAME/README; then
  1887. echo '' >> /home/$MY_USERNAME/README
  1888. echo '' >> /home/$MY_USERNAME/README
  1889. echo 'Mesh Networking (B.A.T.M.A.N)' >> /home/$MY_USERNAME/README
  1890. echo '=============================' >> /home/$MY_USERNAME/README
  1891. echo "Mesh ESSID: $ESSID" >> /home/$MY_USERNAME/README
  1892. echo "Mesh cell ID: $BATMAN_CELLID" >> /home/$MY_USERNAME/README
  1893. echo "Mesh wifi channel: $WIFI_CHANNEL" >> /home/$MY_USERNAME/README
  1894. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  1895. chmod 600 /home/$MY_USERNAME/README
  1896. fi
  1897. echo 'mesh_batman_bridge' >> $COMPLETION_FILE
  1898. }
  1899. function remove_instructions_from_motd {
  1900. sed -i '/## /d' /etc/motd
  1901. }
  1902. function check_hwrng {
  1903. if [[ $HWRNG_TYPE == "beaglebone" ]]; then
  1904. # If hardware random number generation was enabled then make sure that the device exists.
  1905. # if /dev/hwrng is not found then any subsequent cryptographic key generation would
  1906. # suffer from low entropy and might be insecure
  1907. if [ ! -e /dev/hwrng ]; then
  1908. ls /dev/hw*
  1909. echo 'The hardware random number generator is enabled but could not be detected on'
  1910. echo '/dev/hwrng. There may be a problem with the installation or the Beaglebone hardware.'
  1911. exit 75
  1912. fi
  1913. fi
  1914. # If a OneRNG device was installed then verify its firmware
  1915. #check_onerng_verification
  1916. }
  1917. function get_mariadb_password {
  1918. if [ -f /home/$MY_USERNAME/README ]; then
  1919. if grep -q "MariaDB password" /home/$MY_USERNAME/README; then
  1920. if [ -f $DATABASE_PASSWORD_FILE ]; then
  1921. MARIADB_PASSWORD=$(cat $DATABASE_PASSWORD_FILE)
  1922. else
  1923. MARIADB_PASSWORD=$(cat /home/$MY_USERNAME/README | grep "MariaDB password" | awk -F ':' '{print $2}' | sed 's/^ *//')
  1924. echo "$MARIADB_PASSWORD" > $DATABASE_PASSWORD_FILE
  1925. chmod 600 $DATABASE_PASSWORD_FILE
  1926. fi
  1927. fi
  1928. fi
  1929. }
  1930. function get_mariadb_gnusocial_admin_password {
  1931. if [ -f /home/$MY_USERNAME/README ]; then
  1932. if grep -q "MariaDB gnusocial admin password" /home/$MY_USERNAME/README; then
  1933. MICROBLOG_ADMIN_PASSWORD=$(cat /home/$MY_USERNAME/README | grep "MariaDB gnusocial admin password" | awk -F ':' '{print $2}' | sed 's/^ *//')
  1934. fi
  1935. fi
  1936. }
  1937. function get_mariadb_git_admin_password {
  1938. if [ -f /home/$MY_USERNAME/README ]; then
  1939. if grep -q "Gogs admin user password" /home/$MY_USERNAME/README; then
  1940. GIT_ADMIN_PASSWORD=$(cat /home/$MY_USERNAME/README | grep "Gogs admin user password" | awk -F ':' '{print $2}' | sed 's/^ *//')
  1941. fi
  1942. fi
  1943. }
  1944. function get_mariadb_redmatrix_admin_password {
  1945. if [ -f /home/$MY_USERNAME/README ]; then
  1946. if grep -q "MariaDB Red Matrix admin password" /home/$MY_USERNAME/README; then
  1947. REDMATRIX_ADMIN_PASSWORD=$(cat /home/$MY_USERNAME/README | grep "MariaDB Red Matrix admin password" | awk -F ':' '{print $2}' | sed 's/^ *//')
  1948. fi
  1949. fi
  1950. }
  1951. function get_mariadb_owncloud_admin_password {
  1952. if [ -f /home/$MY_USERNAME/README ]; then
  1953. if grep -q "Owncloud database password" /home/$MY_USERNAME/README; then
  1954. OWNCLOUD_ADMIN_PASSWORD=$(cat /home/$MY_USERNAME/README | grep "Owncloud database password" | awk -F ':' '{print $2}' | sed 's/^ *//')
  1955. fi
  1956. fi
  1957. }
  1958. # For rsyncrypto usage see http://archive09.linux.com/feature/125322
  1959. function create_backup_script {
  1960. if grep -Fxq "create_backup_script" $COMPLETION_FILE; then
  1961. return
  1962. fi
  1963. apt-get -y install rsyncrypto cryptsetup libgfshare-bin
  1964. get_mariadb_password
  1965. get_mariadb_gnusocial_admin_password
  1966. get_mariadb_redmatrix_admin_password
  1967. get_mariadb_owncloud_admin_password
  1968. get_mariadb_git_admin_password
  1969. echo '#!/bin/bash' > /usr/bin/$BACKUP_SCRIPT_NAME
  1970. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1971. echo "USB_DRIVE=$USB_DRIVE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1972. echo 'if [ $1 ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1973. echo ' USB_DRIVE=/dev/${1}1' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1974. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1975. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1976. echo "ADMIN_USERNAME=$MY_USERNAME" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1977. echo "MY_USERNAME=$MY_USERNAME" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1978. echo 'if [ $2 ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1979. echo ' MY_USERNAME=$2' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1980. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1981. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1982. echo 'if [ ! -b $USB_DRIVE ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1983. echo ' echo "Please attach a USB drive"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1984. echo ' exit 1' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1985. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1986. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1987. echo "umount -f $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1988. echo "if [ ! -d $USB_MOUNT ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1989. echo " mkdir $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1990. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1991. echo 'if [ -f /dev/mapper/encrypted_usb ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1992. echo ' rm -rf /dev/mapper/encrypted_usb' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1993. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1994. echo 'cryptsetup luksClose encrypted_usb' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1995. echo 'cryptsetup luksOpen $USB_DRIVE encrypted_usb' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1996. echo 'if [ "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1997. echo ' USB_DRIVE=/dev/mapper/encrypted_usb' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1998. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1999. echo -n 'mount $USB_DRIVE ' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2000. echo "$USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2001. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2002. echo " echo 'There was a problem mounting the USB drive to $USB_MOUNT'" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2003. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2004. echo ' exit 6392' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2005. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2006. echo "if [ ! -d $USB_MOUNT/backup ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2007. echo " mkdir $USB_MOUNT/backup" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2008. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2009. echo "if [ ! -d $USB_MOUNT/backup ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2010. echo " echo 'There was a problem making the directory $USB_MOUNT/backup.'" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2011. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2012. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2013. echo ' exit 27' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2014. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2015. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2016. echo "if [ ! -f $BACKUP_CERTIFICATE ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2017. echo ' echo "Creating backup key"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2018. echo " freedombone-addcert -h backup --dhkey $DH_KEYLENGTH" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2019. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2020. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2021. echo "if [ ! -f $BACKUP_CERTIFICATE.gpg ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2022. echo ' echo "GPG encrypt the backup key"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2023. echo " gpg -c $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2024. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2025. echo "cp $BACKUP_CERTIFICATE.gpg $USB_MOUNT/backup/key.gpg" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2026. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2027. echo '# MariaDB password' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2028. echo -n 'DATABASE_PASSWORD=$(cat ' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2029. echo "$DATABASE_PASSWORD_FILE)" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2030. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2031. if grep -Fxq "install_gnu_social" $COMPLETION_FILE; then
  2032. BACKUP_INCLUDES_DATABASES="yes"
  2033. echo "if [ ! -d $USB_MOUNT/backup/gnusocial ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2034. echo " mkdir -p $USB_MOUNT/backup/gnusocial" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2035. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2036. echo "if [ ! -d $USB_MOUNT/backup/gnusocialdata ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2037. echo " mkdir -p $USB_MOUNT/backup/gnusocialdata" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2038. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2039. echo "if [ ! -d /root/tempgnusocialdata ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2040. echo " mkdir -p /root/tempgnusocialdata" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2041. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2042. echo 'echo "Obtaining GNU Social database backup"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2043. echo 'mysqldump --password=$DATABASE_PASSWORD gnusocial > /root/tempgnusocialdata/gnusocial.sql' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2044. echo "if [ ! -s /root/tempgnusocialdata/gnusocial.sql ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2045. echo ' echo "GNU social database could not be saved"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2046. echo ' if [ ! $DATABASE_PASSWORD ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2047. echo " echo 'No MariaDB password was given'" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2048. echo " fi" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2049. echo ' shred -zu /root/tempgnusocialdata/*' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2050. echo ' rm -rf /root/tempgnusocialdata' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2051. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2052. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2053. echo ' exit 296' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2054. echo "fi" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2055. echo "rsyncrypto -v -r /root/tempgnusocialdata $USB_MOUNT/backup/gnusocialdata $USB_MOUNT/backup/gnusocialdata.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2056. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2057. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2058. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2059. echo ' shred -zu /root/tempgnusocialdata/*' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2060. echo ' rm -rf /root/tempgnusocialdata' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2061. echo ' exit 853' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2062. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2063. echo 'shred -zu /root/tempgnusocialdata/*' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2064. echo 'rm -rf /root/tempgnusocialdata' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2065. echo 'echo "Backing up GNU social installation"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2066. echo "rsyncrypto -v -r /var/www/$MICROBLOG_DOMAIN_NAME/htdocs $USB_MOUNT/backup/gnusocial $USB_MOUNT/backup/gnusocial.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2067. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2068. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2069. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2070. echo ' exit 846' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2071. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2072. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2073. fi
  2074. if grep -Fxq "install_redmatrix" $COMPLETION_FILE; then
  2075. BACKUP_INCLUDES_DATABASES="yes"
  2076. echo "if [ ! -d $USB_MOUNT/backup/redmatrix ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2077. echo " mkdir -p $USB_MOUNT/backup/redmatrix" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2078. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2079. echo "if [ ! -d $USB_MOUNT/backup/redmatrixdata ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2080. echo " mkdir -p $USB_MOUNT/backup/redmatrixdata" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2081. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2082. echo "if [ ! -d /root/tempredmatrixdata ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2083. echo " mkdir -p /root/tempredmatrixdata" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2084. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2085. echo 'echo "Obtaining Red Matrix database backup"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2086. echo 'mysqldump --password=$DATABASE_PASSWORD redmatrix > /root/tempredmatrixdata/redmatrix.sql' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2087. echo "if [ ! -s /root/tempredmatrixdata/redmatrix.sql ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2088. echo ' echo "Red Matrix database could not be saved"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2089. echo ' if [ ! $DATABASE_PASSWORD ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2090. echo " echo 'No MariaDB password was given'" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2091. echo " fi" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2092. echo ' shred -zu /root/tempredmatrixdata/*' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2093. echo ' rm -rf /root/tempredmatrixdata' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2094. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2095. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2096. echo ' exit 378' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2097. echo "fi" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2098. echo "rsyncrypto -v -r /root/tempredmatrixdata $USB_MOUNT/backup/redmatrixdata $USB_MOUNT/backup/redmatrixdata.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2099. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2100. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2101. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2102. echo ' exit 285' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2103. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2104. echo 'shred -zu /root/tempredmatrixdata/*' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2105. echo 'rm -rf /root/tempredmatrixdata' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2106. echo 'echo "Backing up Red Matrix installation"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2107. echo "rsyncrypto -v -r /var/www/$REDMATRIX_DOMAIN_NAME/htdocs $USB_MOUNT/backup/redmatrix $USB_MOUNT/backup/redmatrix.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2108. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2109. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2110. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2111. echo ' exit 593' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2112. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2113. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2114. fi
  2115. if grep -Fxq "install_owncloud" $COMPLETION_FILE; then
  2116. BACKUP_INCLUDES_DATABASES="yes"
  2117. echo "if [ ! -d $USB_MOUNT/backup/owncloud ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2118. echo " mkdir -p $USB_MOUNT/backup/owncloud" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2119. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2120. echo "if [ ! -d $USB_MOUNT/backup/owncloud2 ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2121. echo " mkdir -p $USB_MOUNT/backup/owncloud2" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2122. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2123. echo "if [ ! -d $USB_MOUNT/backup/ownclouddata ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2124. echo " mkdir -p $USB_MOUNT/backup/ownclouddata" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2125. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2126. echo "if [ ! -d /root/tempownclouddata ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2127. echo " mkdir -p /root/tempownclouddata" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2128. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2129. echo 'mysqldump --password=$DATABASE_PASSWORD owncloud > /root/tempownclouddata/owncloud.sql' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2130. echo "if [ ! -s /root/tempownclouddata/owncloud.sql ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2131. echo ' echo "Owncloud database could not be saved"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2132. echo ' if [ ! $DATABASE_PASSWORD ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2133. echo " echo 'No MariaDB password was given'" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2134. echo " fi" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2135. echo ' shred -zu /root/tempownclouddata/*' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2136. echo ' rm -rf /root/tempownclouddata' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2137. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2138. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2139. echo ' exit 377' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2140. echo "fi" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2141. echo "rsyncrypto -v -r /root/tempownclouddata $USB_MOUNT/backup/ownclouddata $USB_MOUNT/backup/ownclouddata.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2142. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2143. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2144. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2145. echo ' exit 188' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2146. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2147. echo 'shred -zu /root/tempownclouddata/*' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2148. echo 'rm -rf /root/tempownclouddata' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2149. echo 'echo "Obtaining Owncloud data backup"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2150. echo "rsyncrypto -v -r /var/lib/owncloud $USB_MOUNT/backup/owncloud $USB_MOUNT/backup/owncloud.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2151. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2152. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2153. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2154. echo ' exit 632' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2155. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2156. echo "rsyncrypto -v -r /etc/owncloud $USB_MOUNT/backup/owncloud2 $USB_MOUNT/backup/owncloud2.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2157. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2158. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2159. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2160. echo ' exit 632' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2161. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2162. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2163. fi
  2164. if grep -Fxq "install_gogs" $COMPLETION_FILE; then
  2165. BACKUP_INCLUDES_DATABASES="yes"
  2166. echo "if [ ! -d $USB_MOUNT/backup/gogs ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2167. echo " mkdir -p $USB_MOUNT/backup/gogs" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2168. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2169. echo "if [ ! -d $USB_MOUNT/backup/gogsrepos ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2170. echo " mkdir -p $USB_MOUNT/backup/gogsrepos" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2171. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2172. echo "if [ ! -d $USB_MOUNT/backup/gogsdata ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2173. echo " mkdir -p $USB_MOUNT/backup/gogsdata" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2174. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2175. echo "if [ ! -d /root/tempgogsdata ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2176. echo " mkdir -p /root/tempgogsdata" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2177. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2178. echo 'mysqldump --password=$DATABASE_PASSWORD gogs > /root/tempgogsdata/gogs.sql' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2179. echo "if [ ! -s /root/tempgogsdata/gogs.sql ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2180. echo ' echo "Gogs database could not be saved"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2181. echo ' if [ ! $DATABASE_PASSWORD ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2182. echo " echo 'No MariaDB password was given'" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2183. echo " fi" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2184. echo ' shred -zu /root/tempgogsdata/*' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2185. echo ' rm -rf /root/tempgogsdata' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2186. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2187. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2188. echo ' exit 377' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2189. echo "fi" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2190. echo "rsyncrypto -v -r /root/tempgogsdata $USB_MOUNT/backup/gogsdata $USB_MOUNT/backup/gogsdata.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2191. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2192. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2193. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2194. echo ' exit 188' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2195. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2196. echo 'shred -zu /root/tempgogsdata/*' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2197. echo 'rm -rf /root/tempgogsdata' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2198. echo 'echo "Obtaining Gogs settings backup"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2199. echo "rsyncrypto -v -r /home/git/go/src/github.com/gogits/gogs/custom $USB_MOUNT/backup/gogs $USB_MOUNT/backup/gogs.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2200. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2201. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2202. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2203. echo ' exit 632' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2204. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2205. echo 'echo "Obtaining Gogs repos backup"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2206. echo "rsyncrypto -v -r /home/git/gogs-repositories $USB_MOUNT/backup/gogsrepos $USB_MOUNT/backup/gogsrepos.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2207. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2208. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2209. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2210. echo ' exit 6784' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2211. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2212. echo 'echo "Obtaining Gogs authorized_keys backup"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2213. echo "rsyncrypto -v -r /home/git/.ssh $USB_MOUNT/backup/gogsssh $USB_MOUNT/backup/gogsssh.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2214. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2215. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2216. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2217. echo ' exit 58932' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2218. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2219. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2220. fi
  2221. if grep -Fxq "install_wiki" $COMPLETION_FILE; then
  2222. echo "if [ ! -d $USB_MOUNT/backup/wiki ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2223. echo " mkdir -p $USB_MOUNT/backup/wiki" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2224. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2225. echo "if [ ! -d $USB_MOUNT/backup/wiki2 ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2226. echo " mkdir -p $USB_MOUNT/backup/wiki2" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2227. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2228. echo 'echo "Obtaining wiki data backup"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2229. echo "rsyncrypto -v -r /var/lib/dokuwiki $USB_MOUNT/backup/wiki $USB_MOUNT/backup/wiki.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2230. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2231. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2232. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2233. echo ' exit 964' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2234. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2235. echo "rsyncrypto -v -r /etc/dokuwiki $USB_MOUNT/backup/wiki2 $USB_MOUNT/backup/wiki2.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2236. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2237. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2238. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2239. echo ' exit 964' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2240. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2241. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2242. fi
  2243. if grep -Fxq "install_blog" $COMPLETION_FILE; then
  2244. echo "if [ ! -d $USB_MOUNT/backup/blog ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2245. echo " mkdir -p $USB_MOUNT/backup/blog" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2246. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2247. echo 'echo "Obtaining blog backup"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2248. echo "rsyncrypto -v -r /var/www/$FULLBLOG_DOMAIN_NAME/htdocs $USB_MOUNT/backup/blog $USB_MOUNT/backup/blog.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2249. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2250. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2251. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2252. echo ' exit 854' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2253. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2254. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2255. fi
  2256. if grep -Fxq "mesh_cjdns" $COMPLETION_FILE; then
  2257. echo "if [ ! -d $USB_MOUNT/backup/cjdns ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2258. echo " mkdir -p $USB_MOUNT/backup/cjdns" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2259. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2260. echo 'echo "Obtaining cjdns backup"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2261. echo "rsyncrypto -v -r /etc/cjdns $USB_MOUNT/backup/blog $USB_MOUNT/backup/cjdns.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2262. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2263. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2264. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2265. echo ' exit 7438' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2266. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2267. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2268. fi
  2269. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2270. echo '# Backup certificates' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2271. echo "if [ -d /etc/ssl ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2272. echo ' echo "Backing up certificates"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2273. echo " if [ ! -d $USB_MOUNT/backup/ssl ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2274. echo " mkdir -p $USB_MOUNT/backup/ssl" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2275. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2276. echo " rsyncrypto -v -r /etc/ssl $USB_MOUNT/backup/ssl $USB_MOUNT/backup/ssl.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2277. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2278. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2279. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2280. echo ' exit 343' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2281. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2282. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2283. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2284. echo '# Backup projects' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2285. echo 'if [ -d /home/$MY_USERNAME/projects ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2286. echo ' echo "Backing up projects"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2287. echo " if [ ! -d $USB_MOUNT/backup/projects ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2288. echo " mkdir -p $USB_MOUNT/backup/projects" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2289. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2290. echo -n ' rsyncrypto -v -r /home/$MY_USERNAME/projects ' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2291. echo "$USB_MOUNT/backup/projects $USB_MOUNT/backup/projects.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2292. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2293. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2294. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2295. echo ' exit 873' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2296. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2297. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2298. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2299. echo '# Backup personal settings' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2300. echo 'if [ -d /home/$MY_USERNAME/personal ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2301. echo ' echo "Backing up personal settings"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2302. echo " if [ ! -d $USB_MOUNT/backup/personal ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2303. echo " mkdir -p $USB_MOUNT/backup/personal" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2304. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2305. echo -n ' rsyncrypto -v -r /home/$MY_USERNAME/personal ' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2306. echo "$USB_MOUNT/backup/personal $USB_MOUNT/backup/personal.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2307. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2308. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2309. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2310. echo ' exit 649' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2311. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2312. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2313. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2314. echo '# Backup the public mailing list' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2315. echo "if [ -d $PUBLIC_MAILING_LIST_DIRECTORY ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2316. echo ' echo "Backing up the public mailing list"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2317. echo " if [ ! -d $USB_MOUNT/backup/mailinglist ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2318. echo " mkdir -p $USB_MOUNT/backup/mailinglist" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2319. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2320. echo " rsyncrypto -v -r $PUBLIC_MAILING_LIST_DIRECTORY $USB_MOUNT/backup/mailinglist $USB_MOUNT/backup/mailinglist.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2321. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2322. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2323. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2324. echo ' exit 938' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2325. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2326. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2327. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2328. echo '# Backup xmpp settings' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2329. echo "if [ -d $XMPP_DIRECTORY ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2330. echo ' echo "Backing up the XMPP settings"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2331. echo " if [ ! -d $USB_MOUNT/backup/xmpp ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2332. echo " mkdir -p $USB_MOUNT/backup/xmpp" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2333. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2334. echo " rsyncrypto -v -r $XMPP_DIRECTORY $USB_MOUNT/backup/xmpp $USB_MOUNT/backup/xmpp.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2335. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2336. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2337. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2338. echo ' exit 593' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2339. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2340. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2341. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2342. echo '# Backup gpg keys' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2343. echo 'if [ -d /home/$MY_USERNAME/.gnupg ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2344. echo ' echo "Backing up gpg keys"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2345. echo " if [ ! -d $USB_MOUNT/backup/gnupg ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2346. echo " mkdir -p $USB_MOUNT/backup/gnupg" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2347. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2348. echo -n ' rsyncrypto -v -r /home/$MY_USERNAME/.gnupg ' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2349. echo "$USB_MOUNT/backup/gnupg $USB_MOUNT/backup/gnupg.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2350. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2351. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2352. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2353. echo ' exit 491' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2354. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2355. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2356. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2357. echo '# Backup ssh keys' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2358. echo 'if [ -d /home/$MY_USERNAME/.ssh ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2359. echo ' echo "Backing up ssh keys"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2360. echo " if [ ! -d $USB_MOUNT/backup/ssh ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2361. echo " mkdir -p $USB_MOUNT/backup/ssh" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2362. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2363. echo -n ' rsyncrypto -v -r /home/$MY_USERNAME/.ssh ' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2364. echo "$USB_MOUNT/backup/ssh $USB_MOUNT/backup/ssh.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2365. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2366. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2367. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2368. echo ' exit 731' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2369. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2370. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2371. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2372. echo '# Backup web sites' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2373. echo "if [ -d /etc/nginx ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2374. echo ' echo "Backing up web settings"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2375. echo " if [ ! -d $USB_MOUNT/backup/web ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2376. echo " mkdir -p $USB_MOUNT/backup/web" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2377. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2378. echo " rsyncrypto -v -r /etc/nginx/sites-available $USB_MOUNT/backup/web $USB_MOUNT/backup/web.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2379. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2380. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2381. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2382. echo ' exit 848' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2383. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2384. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2385. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2386. echo '# Backup README file' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2387. echo 'if [ -f /home/$MY_USERNAME/README ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2388. echo ' echo "Backing up README"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2389. echo " if [ ! -d $USB_MOUNT/backup/readme ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2390. echo " mkdir -p $USB_MOUNT/backup/readme" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2391. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2392. echo ' if [ ! -d /home/$MY_USERNAME/tempbackup ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2393. echo ' mkdir -p /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2394. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2395. echo ' cp -f /home/$MY_USERNAME/README /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2396. echo -n ' rsyncrypto -v -r /home/$MY_USERNAME/tempbackup ' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2397. echo "$USB_MOUNT/backup/readme $USB_MOUNT/backup/readme.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2398. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2399. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2400. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2401. echo ' rm -rf /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2402. echo ' exit 848' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2403. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2404. echo ' rm -rf /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2405. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2406. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2407. echo '# Backup Mutt settings' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2408. echo 'if [ -f /home/$MY_USERNAME/.muttrc ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2409. echo ' echo "Backing up Mutt settings"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2410. echo ' if [ ! -d /home/$MY_USERNAME/tempbackup ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2411. echo ' mkdir -p /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2412. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2413. echo ' cp /home/$MY_USERNAME/.muttrc /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2414. echo ' if [ -f /etc/Muttrc ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2415. echo ' cp /etc/Muttrc /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2416. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2417. echo " if [ ! -d $USB_MOUNT/backup/mutt ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2418. echo " mkdir -p $USB_MOUNT/backup/mutt" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2419. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2420. echo -n ' rsyncrypto -v -r /home/$MY_USERNAME/tempbackup ' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2421. echo "$USB_MOUNT/backup/mutt $USB_MOUNT/backup/mutt.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2422. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2423. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2424. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2425. echo ' rm -rf /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2426. echo ' exit 492' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2427. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2428. echo ' rm -rf /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2429. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2430. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2431. echo '# Backup procmail settings' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2432. echo 'if [ -f /home/$MY_USERNAME/.procmailrc ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2433. echo ' echo "Backing up procmail settings"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2434. echo ' if [ ! -d /home/$MY_USERNAME/tempbackup ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2435. echo ' mkdir -p /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2436. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2437. echo ' cp /home/$MY_USERNAME/.procmailrc /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2438. echo " if [ ! -d $USB_MOUNT/backup/procmail ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2439. echo " mkdir -p $USB_MOUNT/backup/procmail" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2440. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2441. echo -n ' rsyncrypto -v -r /home/$MY_USERNAME/tempbackup ' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2442. echo "$USB_MOUNT/backup/procmail $USB_MOUNT/backup/procmail.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2443. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2444. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2445. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2446. echo ' rm -rf /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2447. echo ' exit 492' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2448. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2449. echo ' rm -rf /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2450. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2451. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2452. echo '# Backup spamassassin settings' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2453. echo 'if [ -d /home/$MY_USERNAME/.spamassassin ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2454. echo ' echo "Backing up spamassassin settings"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2455. echo " if [ ! -d $USB_MOUNT/backup/spamassassin ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2456. echo " mkdir -p $USB_MOUNT/backup/spamassassin" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2457. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2458. echo -n ' rsyncrypto -v -r /home/$MY_USERNAME/.spamassassin ' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2459. echo "$USB_MOUNT/backup/spamassassin $USB_MOUNT/backup/spamassassin.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2460. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2461. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2462. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2463. echo ' exit 492' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2464. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2465. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2466. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2467. echo '# Backup email' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2468. echo 'if [ -d /home/$MY_USERNAME/Maildir ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2469. echo ' echo "Creating an email archive"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2470. echo ' if [ ! -d /root/backupemail ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2471. echo " mkdir -p /root/backupemail" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2472. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2473. echo ' tar -czvf /root/backupemail/maildir.tar.gz /home/$MY_USERNAME/Maildir' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2474. echo ' echo "Backing up emails"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2475. echo " if [ ! -d $USB_MOUNT/backup/mail ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2476. echo " mkdir -p $USB_MOUNT/backup/mail" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2477. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2478. echo " rsyncrypto -v -r /root/backupemail $USB_MOUNT/backup/mail $USB_MOUNT/backup/mail.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2479. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2480. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2481. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2482. echo ' rm -rf /root/backupemail' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2483. echo ' exit 396' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2484. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2485. echo ' rm -rf /root/backupemail' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2486. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2487. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2488. echo '# Backup DLNA cache' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2489. echo "if [ -d /var/cache/minidlna ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2490. echo ' echo "Backing up DLNA cache"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2491. echo " if [ ! -d $USB_MOUNT/backup/dlna ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2492. echo " mkdir -p $USB_MOUNT/backup/dlna" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2493. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2494. echo " rsyncrypto -v -r /var/cache/minidlna $USB_MOUNT/backup/dlna $USB_MOUNT/backup/dlna.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2495. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2496. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2497. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2498. echo ' exit 498' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2499. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2500. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2501. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2502. echo '# Backup VoIP settings' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2503. echo "if [ -f /etc/$VOIP_CONFIG_FILE ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2504. echo ' echo "Backing up VoIP settings"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2505. echo ' if [ ! -d /home/$MY_USERNAME/tempbackup ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2506. echo ' mkdir -p /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2507. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2508. echo -n " cp -f /etc/$VOIP_CONFIG_FILE " >> /usr/bin/$BACKUP_SCRIPT_NAME
  2509. echo '/home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2510. echo -n " cp -f /var/lib/mumble-server/$VOIP_DATABASE " >> /usr/bin/$BACKUP_SCRIPT_NAME
  2511. echo '/home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2512. echo " if [ ! -d $USB_MOUNT/backup/voip ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2513. echo " mkdir -p $USB_MOUNT/backup/voip" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2514. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2515. echo -n ' rsyncrypto -v -r /home/$MY_USERNAME/tempbackup ' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2516. echo "$USB_MOUNT/backup/voip $USB_MOUNT/backup/voip.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2517. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2518. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2519. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2520. echo ' rm -rf /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2521. echo ' exit 2492' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2522. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2523. echo ' rm -rf /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2524. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2525. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2526. if [[ $BACKUP_INCLUDES_DATABASES == "yes" ]]; then
  2527. echo '# Mysql settings' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2528. echo "if [ ! -d $USB_MOUNT/backup/mariadb ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2529. echo " mkdir -p $USB_MOUNT/backup/mariadb" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2530. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2531. echo 'if [ ! -d /root/tempmariadb ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2532. echo ' mkdir /root/tempmariadb' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2533. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2534. echo 'mysqldump --password=$DATABASE_PASSWORD mysql user > /root/tempmariadb/mysql.sql' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2535. echo "if [ ! -s /root/tempmariadb/mysql.sql ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2536. echo ' echo "Unable to backup mysql settings"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2537. echo ' rm -rf /root/tempmariadb' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2538. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2539. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2540. echo ' exit 653' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2541. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2542. echo 'echo "$DATABASE_PASSWORD" > /root/tempmariadb/db' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2543. echo 'chmod 400 /root/tempmariadb/db' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2544. echo "rsyncrypto -v -r /root/tempmariadb $USB_MOUNT/backup/mariadb $USB_MOUNT/backup/mariadb.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2545. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2546. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2547. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2548. echo ' exit 794' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2549. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2550. echo 'shred -zu /root/tempmariadb/*' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2551. echo 'rm -rf /root/tempmariadb' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2552. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2553. fi
  2554. echo '# Backup Tox node settings' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2555. echo "if [ -d /var/lib/tox-bootstrapd ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2556. echo ' echo "Backing up Tox node settings"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2557. echo " if [ ! -d $USB_MOUNT/backup/tox ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2558. echo " mkdir -p $USB_MOUNT/backup/tox" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2559. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2560. echo " cp /etc/tox-bootstrapd.conf /var/lib/tox-bootstrapd" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2561. echo " rsyncrypto -v -r /var/lib/tox-bootstrapd $USB_MOUNT/backup/tox $USB_MOUNT/backup/tox.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2562. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2563. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2564. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2565. echo ' exit 75379' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2566. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2567. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2568. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2569. echo 'sync' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2570. echo 'ls -lh $USB_MOUNT/backup' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2571. echo "umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2572. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2573. echo ' echo "Unable to unmount the drive. This means that the backup did not work"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2574. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2575. echo ' exit 46994' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2576. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2577. echo "rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  2578. echo 'if [[ $USB_DRIVE == /dev/mapper/encrypted_usb ]]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2579. echo ' echo "Unmount encrypted USB"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2580. echo ' cryptsetup luksClose encrypted_usb' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2581. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2582. echo 'if [ -f /dev/mapper/encrypted_usb ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2583. echo ' rm -rf /dev/mapper/encrypted_usb' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2584. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2585. echo 'echo "Backup to USB drive is complete. You can now unplug it."' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2586. echo 'exit 0' >> /usr/bin/$BACKUP_SCRIPT_NAME
  2587. chmod 400 /usr/bin/$BACKUP_SCRIPT_NAME
  2588. chmod +x /usr/bin/$BACKUP_SCRIPT_NAME
  2589. echo 'create_backup_script' >> $COMPLETION_FILE
  2590. }
  2591. function create_restore_script {
  2592. if grep -Fxq "create_restore_script" $COMPLETION_FILE; then
  2593. return
  2594. fi
  2595. apt-get -y install rsyncrypto cryptsetup
  2596. get_mariadb_password
  2597. get_mariadb_gnusocial_admin_password
  2598. get_mariadb_redmatrix_admin_password
  2599. get_mariadb_owncloud_admin_password
  2600. get_mariadb_git_admin_password
  2601. echo '#!/bin/bash' > /usr/bin/$RESTORE_SCRIPT_NAME
  2602. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2603. echo "USB_DRIVE=$USB_DRIVE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2604. echo 'if [ $1 ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2605. echo ' USB_DRIVE=/dev/${1}1' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2606. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2607. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2608. echo "ADMIN_USERNAME=$MY_USERNAME" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2609. echo "MY_USERNAME=$MY_USERNAME" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2610. echo 'if [ $2 ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2611. echo ' MY_USERNAME=$2' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2612. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2613. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2614. echo 'if [ ! -b $USB_DRIVE ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2615. echo ' echo "Please attach a USB drive"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2616. echo ' exit 1' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2617. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2618. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2619. echo "if [ ! -d $USB_MOUNT ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2620. echo " mkdir $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2621. echo ' if [ -f /dev/mapper/encrypted_usb ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2622. echo ' rm -rf /dev/mapper/encrypted_usb' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2623. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2624. echo ' cryptsetup luksClose encrypted_usb' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2625. echo ' cryptsetup luksOpen $USB_DRIVE encrypted_usb' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2626. echo ' if [ "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2627. echo ' USB_DRIVE=/dev/mapper/encrypted_usb' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2628. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2629. echo -n ' mount $USB_DRIVE ' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2630. echo "$USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2631. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2632. echo "if [ ! -d $USB_MOUNT/backup ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2633. echo ' echo "No backup directory found on the USB drive."' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2634. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2635. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2636. echo ' exit 2' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2637. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2638. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2639. echo 'echo "Checking that user exists"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2640. echo 'if [ ! -d /home/$MY_USERNAME ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2641. echo ' echo "Username $MY_USERNAME not found. Reinstall Freedombone with this username."' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2642. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2643. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2644. echo ' exit 295' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2645. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2646. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2647. echo 'echo "Copying GPG keys to root"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2648. echo 'cp -r /home/$MY_USERNAME/.gnupg /root' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2649. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2650. echo "if [ -f $USB_MOUNT/backup/key.gpg ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2651. echo " if [ -f $BACKUP_CERTIFICATE.new ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2652. echo " rm $BACKUP_CERTIFICATE.new" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2653. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2654. echo " cp $USB_MOUNT/backup/key.gpg /root/tempbackupkey.gpg" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2655. echo " gpg /root/tempbackupkey.gpg" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2656. echo " if [ -f /root/tempbackupkey ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2657. echo ' echo "Backup key decrypted"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2658. echo " cp /root/tempbackupkey $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2659. echo " shred -zu /root/tempbackupkey" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2660. echo " chmod 400 $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2661. echo ' echo "Backup certificate installed"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2662. echo ' else' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2663. echo ' echo "Unable to decrypt the backup key"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2664. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2665. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2666. echo ' exit 735' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2667. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2668. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2669. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2670. echo "if [ ! -f $BACKUP_CERTIFICATE ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2671. echo " echo 'No backup key was found. Copy your backup key to $BACKUP_CERTIFICATE'" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2672. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2673. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2674. echo ' exit 563' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2675. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2676. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2677. echo '# MariaDB password' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2678. echo -n 'DATABASE_PASSWORD=$(cat ' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2679. echo "$DATABASE_PASSWORD_FILE)" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2680. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2681. echo '# Make a backup of the original README file' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2682. echo '# incase old passwords need to be used' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2683. echo 'if [ -f /home/$MY_USERNAME/README ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2684. echo ' if [ ! -f /home/$MY_USERNAME/README_original ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2685. echo ' cp /home/$MY_USERNAME/README /home/$MY_USERNAME/README_original' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2686. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2687. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2688. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2689. if [[ $BACKUP_INCLUDES_DATABASES == "yes" ]]; then
  2690. echo "if [ -d $USB_MOUNT/backup/mariadb ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2691. echo ' echo "Restoring mysql settings"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2692. echo ' if [ ! -d /root/tempmariadb ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2693. echo ' mkdir /root/tempmariadb' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2694. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2695. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/mariadb /root/tempmariadb $USB_MOUNT/backup/mariadb.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2696. echo ' echo "Get the MariaDB password from the backup"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2697. echo ' if [ ! -f /root/tempmariadb/usb/backup/mariadb/tempmariadb/db ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2698. echo ' echo "MariaDB password file not found"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2699. echo ' exit 495' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2700. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2701. echo ' BACKUP_MARIADB_PASSWORD=$(cat /root/tempmariadb/usb/backup/mariadb/tempmariadb/db)' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2702. echo ' if [[ $BACKUP_MARIADB_PASSWORD != $DATABASE_PASSWORD ]]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2703. echo ' echo "Restore the MariaDB user table"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2704. echo ' mysqlsuccess=$(mysql -u root --password=$DATABASE_PASSWORD mysql -o < /root/tempmariadb/usb/backup/mariadb/tempmariadb/mysql.sql)' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2705. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2706. echo ' echo "Try again using the password obtained from backup"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2707. echo ' mysqlsuccess=$(mysql -u root --password=$BACKUP_MARIADB_PASSWORD mysql -o < /root/tempmariadb/usb/backup/mariadb/tempmariadb/mysql.sql)' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2708. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2709. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2710. echo ' echo "$mysqlsuccess"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2711. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2712. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2713. echo ' exit 962' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2714. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2715. echo ' echo "Restarting database"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2716. echo ' service mysql restart' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2717. echo ' echo "Change the MariaDB password to the backup version"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2718. echo ' DATABASE_PASSWORD=$BACKUP_MARIADB_PASSWORD' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2719. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2720. echo ' shred -zu /root/tempmariadb/usb/backup/mariadb/tempmariadb/db' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2721. echo ' rm -rf /root/tempmariadb' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2722. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2723. echo ' # Change database password file' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2724. echo -n ' echo "$DATABASE_PASSWORD" > ' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2725. echo "$DATABASE_PASSWORD_FILE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2726. echo " chmod 600 $DATABASE_PASSWORD_FILE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2727. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2728. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2729. fi
  2730. echo "if [ -d $USB_MOUNT/backup/mutt ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2731. echo ' echo "Restoring Mutt settings"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2732. echo ' mkdir /root/tempmutt' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2733. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/mutt /root/tempmutt $USB_MOUNT/backup/mutt.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2734. echo ' if [ -f /root/tempmutt/usb/backup/mutt/$MY_USERNAME/tempbackup/.muttrc ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2735. echo ' cp -f /root/tempmutt/usb/backup/mutt/$MY_USERNAME/tempbackup/.muttrc /home/$MY_USERNAME/.muttrc' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2736. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2737. echo ' if [ -f /root/tempmutt/usb/backup/mutt/$MY_USERNAME/tempbackup/Muttrc ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2738. echo ' cp -f /root/tempmutt/usb/backup/mutt/$MY_USERNAME/tempbackup/Muttrc /etc/Muttrc' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2739. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2740. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2741. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2742. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2743. echo ' rm -rf /root/tempmutt' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2744. echo ' exit 276' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2745. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2746. echo ' rm -rf /root/tempmutt' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2747. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2748. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2749. echo "if [ -d $USB_MOUNT/backup/gnupg ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2750. echo ' echo "Restoring gnupg settings"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2751. echo ' mkdir /root/tempgnupg' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2752. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/gnupg /root/tempgnupg $USB_MOUNT/backup/gnupg.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2753. echo ' cp -r /root/tempgnupg/usb/backup/gnupg/$MY_USERNAME/.gnupg /home/$MY_USERNAME/' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2754. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2755. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2756. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2757. echo ' rm -rf /root/tempgnupg' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2758. echo ' exit 276' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2759. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2760. echo ' rm -rf /root/tempgnupg' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2761. echo ' cp -r /home/$MY_USERNAME/.gnupg /root' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2762. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2763. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2764. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2765. echo ' exit 283' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2766. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2767. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2768. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2769. echo "if [ -d $USB_MOUNT/backup/procmail ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2770. echo ' echo "Restoring procmail settings"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2771. echo ' mkdir /root/tempprocmail' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2772. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/procmail /root/tempprocmail $USB_MOUNT/backup/procmail.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2773. echo ' cp -f /root/tempprocmail/usb/backup/procmail/$MY_USERNAME/tempbackup/.procmailrc /home/$MY_USERNAME/' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2774. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2775. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2776. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2777. echo ' rm -rf /root/tempprocmail' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2778. echo ' exit 276' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2779. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2780. echo ' rm -rf /root/tempprocmail' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2781. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2782. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2783. echo "if [ -d $USB_MOUNT/backup/spamassassin ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2784. echo ' echo "Restoring spamassassin settings"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2785. echo ' mkdir /root/tempspamassassin' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2786. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/spamassassin /root/tempspamassassin $USB_MOUNT/backup/spamassassin.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2787. echo ' cp -rf /root/tempspamassassin/usb/backup/spamassassin/$MY_USERNAME/.spamassassin /home/$MY_USERNAME/' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2788. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2789. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2790. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2791. echo ' rm -rf /root/tempspamassassin' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2792. echo ' exit 276' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2793. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2794. echo ' rm -rf /root/tempspamassassin' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2795. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2796. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2797. echo "if [ -d $USB_MOUNT/backup/readme ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2798. echo ' echo "Restoring README"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2799. echo ' mkdir /root/tempreadme' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2800. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/readme /root/tempreadme $USB_MOUNT/backup/readme.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2801. echo ' cp -f /root/tempreadme/usb/backup/readme/$MY_USERNAME/tempbackup/README /home/$MY_USERNAME/' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2802. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2803. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2804. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2805. echo ' rm -rf /root/tempreadme' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2806. echo ' exit 276' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2807. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2808. echo ' rm -rf /root/tempreadme' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2809. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2810. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2811. echo "if [ -d $USB_MOUNT/backup/ssh ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2812. echo ' echo "Restoring ssh keys"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2813. echo ' mkdir /root/tempssh' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2814. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/ssh /root/tempssh $USB_MOUNT/backup/ssh.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2815. echo ' cp -r /root/tempssh/usb/backup/ssh/$MY_USERNAME/.ssh /home/$MY_USERNAME/' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2816. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2817. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2818. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2819. echo ' rm -rf /root/tempssh' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2820. echo ' exit 664' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2821. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2822. echo ' rm -rf /root/tempssh' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2823. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2824. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2825. echo "if [ -d $USB_MOUNT/backup/ssl ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2826. echo ' echo "Restoring certificates"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2827. echo ' mkdir /root/tempssl' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2828. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/ssl /root/tempssl $USB_MOUNT/backup/ssl.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2829. echo ' cp -r /root/tempssl/usb/backup/ssl/ssl/* /etc/ssl' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2830. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2831. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2832. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2833. echo ' exit 276' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2834. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2835. echo ' rm -rf /root/tempssl' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2836. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2837. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2838. echo "if [ -d $USB_MOUNT/backup/projects ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2839. echo ' echo "Restoring projects"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2840. echo ' mkdir /root/tempprojects' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2841. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/projects /root/tempprojects $USB_MOUNT/backup/projects.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2842. echo ' if [ -d /home/$MY_USERNAME/projects ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2843. echo ' rm -rf /home/$MY_USERNAME/projects' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2844. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2845. echo ' mv /root/tempprojects/usb/backup/projects/$MY_USERNAME/projects /home/$MY_USERNAME' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2846. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2847. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2848. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2849. echo ' exit 166' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2850. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2851. echo ' rm -rf /root/tempprojects' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2852. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2853. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2854. echo "if [ -d $USB_MOUNT/backup/personal ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2855. echo ' echo "Restoring personal settings"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2856. echo ' mkdir /root/temppersonal' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2857. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/personal /root/temppersonal $USB_MOUNT/backup/personal.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2858. echo ' if [ -d /home/$MY_USERNAME/personal ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2859. echo ' rm -rf /home/$MY_USERNAME/personal' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2860. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2861. echo ' mv /root/temppersonal/usb/backup/personal/$MY_USERNAME/personal /home/$MY_USERNAME' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2862. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2863. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2864. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2865. echo ' exit 184' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2866. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2867. echo ' rm -rf /root/temppersonal' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2868. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2869. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2870. echo "if [ -d $PUBLIC_MAILING_LIST_DIRECTORY ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2871. echo ' echo "Restoring public mailing list"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2872. echo ' mkdir /root/tempmailinglist' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2873. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/mailinglist /root/tempmailinglist $USB_MOUNT/backup/mailinglist.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2874. echo " cp -r /root/tempmailinglist/usb/backup/mailinglist/spool/mlmmj/* $PUBLIC_MAILING_LIST_DIRECTORY" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2875. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2876. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2877. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2878. echo ' exit 526' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2879. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2880. echo ' rm -rf /root/tempmailinglist' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2881. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2882. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2883. echo "if [ -d $XMPP_DIRECTORY ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2884. echo ' echo "Restoring XMPP settings"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2885. echo ' mkdir /root/tempxmpp' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2886. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/xmpp /root/tempxmpp $USB_MOUNT/backup/xmpp.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2887. echo " cp -r /root/tempxmpp/usb/backup/xmpp/lib/prosody/* $XMPP_DIRECTORY" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2888. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2889. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2890. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2891. echo ' exit 725' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2892. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2893. echo ' rm -rf /root/tempxmpp' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2894. echo ' service prosody restart' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2895. echo ' chown -R prosody:prosody /var/lib/prosody/*' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2896. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2897. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2898. BACKUP_INCLUDES_WEBSITES="no"
  2899. if grep -Fxq "install_gnu_social" $COMPLETION_FILE; then
  2900. BACKUP_INCLUDES_WEBSITES="yes"
  2901. echo "if [ -d $USB_MOUNT/backup/gnusocial ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2902. echo ' echo "Restoring microblog database"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2903. echo ' if [ ! -d /root/tempgnusocialdata ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2904. echo ' mkdir /root/tempgnusocialdata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2905. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2906. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/gnusocialdata /root/tempgnusocialdata $USB_MOUNT/backup/gnusocialdata.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2907. echo ' if [ ! -f /root/tempgnusocialdata/usb/backup/gnusocialdata/tempgnusocialdata/gnusocial.sql ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2908. echo ' echo "Unable to restore microblog database"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2909. echo ' rm -rf /root/tempgnusocialdata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2910. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2911. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2912. echo ' exit 503' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2913. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2914. echo ' mysqlsuccess=$(mysql -u root --password=$DATABASE_PASSWORD gnusocial -o < /root/tempgnusocialdata/usb/backup/gnusocialdata/tempgnusocialdata/gnusocial.sql)' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2915. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2916. echo ' echo "$mysqlsuccess"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2917. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2918. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2919. echo ' exit 964' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2920. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2921. echo ' shred -zu /root/tempgnusocialdata/usb/backup/gnusocialdata/tempgnusocialdata/*' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2922. echo ' rm -rf /root/tempgnusocialdata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2923. echo ' echo "Restoring microblog installation"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2924. echo ' if [ ! -d /root/tempgnusocial ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2925. echo ' mkdir /root/tempgnusocial' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2926. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2927. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/gnusocial /root/tempgnusocial $USB_MOUNT/backup/gnusocial.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2928. echo " rm -rf /var/www/$MICROBLOG_DOMAIN_NAME/htdocs" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2929. echo " mv /root/tempgnusocial/usb/backup/gnusocial/www/$MICROBLOG_DOMAIN_NAME/htdocs /var/www/$MICROBLOG_DOMAIN_NAME/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2930. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2931. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2932. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2933. echo ' exit 683' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2934. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2935. echo ' rm -rf /root/tempgnusocial' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2936. echo ' # Ensure that the bundled SSL cert is being used' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2937. echo " if [ -f /etc/ssl/certs/$MICROBLOG_DOMAIN_NAME.bundle.crt ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2938. echo " sed -i 's|$MICROBLOG_DOMAIN_NAME.crt|$MICROBLOG_DOMAIN_NAME.bundle.crt|g' /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2939. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2940. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2941. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2942. fi
  2943. if grep -Fxq "install_redmatrix" $COMPLETION_FILE; then
  2944. BACKUP_INCLUDES_WEBSITES="yes"
  2945. echo "if [ -d $USB_MOUNT/backup/redmatrix ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2946. echo ' echo "Restoring Red Matrix database"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2947. echo ' if [ ! -d /root/tempredmatrixdata ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2948. echo ' mkdir /root/tempredmatrixdata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2949. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2950. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/redmatrixdata /root/tempredmatrixdata $USB_MOUNT/backup/redmatrixdata.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2951. echo ' if [ ! -f /root/tempredmatrixdata/usb/backup/redmatrixdata/tempredmatrixdata/redmatrix.sql ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2952. echo ' echo "Unable to restore Red Matrix database"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2953. echo ' rm -rf /root/tempredmatrixdata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2954. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2955. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2956. echo ' exit 504' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2957. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2958. echo ' mysqlsuccess=$(mysql -u root --password=$DATABASE_PASSWORD redmatrix -o < /root/tempredmatrixdata/usb/backup/redmatrixdata/tempredmatrixdata/redmatrix.sql)' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2959. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2960. echo ' echo "$mysqlsuccess"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2961. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2962. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2963. echo ' exit 965' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2964. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2965. echo ' shred -zu /root/tempredmatrixdata/usb/backup/redmatrixdata/tempredmatrixdata/*' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2966. echo ' rm -rf /root/tempredmatrixdata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2967. echo ' echo "Restoring Red Matrix installation"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2968. echo ' if [ ! -d /root/tempredmatrix ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2969. echo ' mkdir /root/tempredmatrix' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2970. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2971. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/redmatrix /root/tempredmatrix $USB_MOUNT/backup/redmatrix.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2972. echo " rm -rf /var/www/$REDMATRIX_DOMAIN_NAME/htdocs" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2973. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2974. echo " cp -r /root/tempredmatrix/usb/backup/redmatrix/www/$REDMATRIX_DOMAIN_NAME/htdocs/* /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2975. echo ' else' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2976. echo " mv /root/tempredmatrix/usb/backup/redmatrix/www/$REDMATRIX_DOMAIN_NAME/htdocs /var/www/$REDMATRIX_DOMAIN_NAME/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2977. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2978. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2979. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2980. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2981. echo ' exit 759' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2982. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2983. echo ' rm -rf /root/tempredmatrix' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2984. echo ' # Ensure that the bundled SSL cert is being used' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2985. echo " if [ -f /etc/ssl/certs/$REDMATRIX_DOMAIN_NAME.bundle.crt ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2986. echo " sed -i 's|$REDMATRIX_DOMAIN_NAME.crt|$REDMATRIX_DOMAIN_NAME.bundle.crt|g' /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2987. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2988. echo " chmod 777 /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/store/[data]/smarty3" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2989. echo " chown -R www-data:www-data /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/*" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2990. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2991. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2992. fi
  2993. if grep -Fxq "install_owncloud" $COMPLETION_FILE; then
  2994. BACKUP_INCLUDES_WEBSITES="yes"
  2995. echo "if [ -d $USB_MOUNT/backup/owncloud ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2996. echo ' echo "Restoring owncloud database"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2997. echo ' if [ ! -d /root/tempownclouddata ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2998. echo ' mkdir /root/tempownclouddata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2999. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3000. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/ownclouddata /root/tempownclouddata $USB_MOUNT/backup/ownclouddata.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3001. echo ' if [ ! -f /root/tempownclouddata/usb/backup/ownclouddata/tempownclouddata/owncloud.sql ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3002. echo ' echo "Unable to restore Owncloud database"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3003. echo ' rm -rf /root/tempownclouddata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3004. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3005. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3006. echo ' exit 505' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3007. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3008. echo ' mysqlsuccess=$(mysql -u root --password=$DATABASE_PASSWORD owncloud -o < /root/tempownclouddata/usb/backup/ownclouddata/tempownclouddata/owncloud.sql)' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3009. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3010. echo ' echo "$mysqlsuccess"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3011. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3012. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3013. echo ' exit 965' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3014. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3015. echo ' echo "Restoring Owncloud installation"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3016. echo ' if [ ! -d /root/tempowncloud ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3017. echo ' mkdir /root/tempowncloud' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3018. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3019. echo ' if [ ! -d /root/tempowncloud2 ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3020. echo ' mkdir /root/tempowncloud2' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3021. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3022. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/owncloud /root/tempowncloud $USB_MOUNT/backup/owncloud.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3023. echo " cp -r /root/tempowncloud/usb/backup/owncloud/lib/owncloud/* /var/lib/owncloud/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3024. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3025. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3026. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3027. echo ' exit 981' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3028. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3029. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/owncloud2 /root/tempowncloud2 $USB_MOUNT/backup/owncloud2.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3030. echo " cp -r /root/tempowncloud2/usb/backup/owncloud2/owncloud/* /etc/owncloud/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3031. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3032. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3033. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3034. echo ' exit 982' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3035. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3036. echo ' rm -rf /root/tempowncloud' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3037. echo ' rm -rf /root/tempowncloud2' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3038. echo ' rm -rf /root/tempownclouddata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3039. echo ' chown -R www-data:www-data /var/lib/owncloud/data' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3040. echo ' chown -R www-data:www-data /var/lib/owncloud/backup' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3041. echo ' chown -R www-data:www-data /var/lib/owncloud/assets' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3042. echo ' occ files:scan $MY_USERNAME' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3043. echo ' # Ensure that the bundled SSL cert is being used' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3044. echo " if [ -f /etc/ssl/certs/$OWNCLOUD_DOMAIN_NAME.bundle.crt ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3045. echo " sed -i 's|$OWNCLOUD_DOMAIN_NAME.crt|$OWNCLOUD_DOMAIN_NAME.bundle.crt|g' /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3046. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3047. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3048. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3049. fi
  3050. if grep -Fxq "install_gogs" $COMPLETION_FILE; then
  3051. BACKUP_INCLUDES_WEBSITES="yes"
  3052. echo "if [ -d $USB_MOUNT/backup/gogs ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3053. echo ' echo "Restoring gogs database"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3054. echo ' if [ ! -d /root/tempgogsdata ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3055. echo ' mkdir /root/tempgogsdata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3056. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3057. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/gogsdata /root/tempgogsdata $USB_MOUNT/backup/gogsdata.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3058. echo ' if [ ! -f /root/tempgogsdata/usb/backup/gogsdata/tempgogsdata/gogs.sql ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3059. echo ' echo "Unable to restore Gogs database"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3060. echo ' rm -rf /root/tempgogsdata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3061. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3062. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3063. echo ' exit 505' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3064. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3065. echo ' mysqlsuccess=$(mysql -u root --password=$DATABASE_PASSWORD gogs -o < /root/tempgogsdata/usb/backup/gogsdata/tempgogsdata/gogs.sql)' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3066. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3067. echo ' echo "$mysqlsuccess"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3068. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3069. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3070. echo ' exit 965' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3071. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3072. echo ' echo "Restoring Gogs settings"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3073. echo ' if [ ! -d /root/tempgogs ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3074. echo ' mkdir /root/tempgogs' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3075. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3076. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/gogs /root/tempgogs $USB_MOUNT/backup/gogs.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3077. echo ' if [ ! -d /home/git/go/src/github.com/gogits/gogs/custom ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3078. echo ' mkdir -p /home/git/go/src/github.com/gogits/gogs/custom' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3079. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3080. echo " cp -r /root/tempgogs/usb/backup/gogs/git/go/src/github.com/gogits/gogs/custom/* /home/git/go/src/github.com/gogits/gogs/custom" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3081. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3082. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3083. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3084. echo ' exit 981' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3085. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3086. echo ' echo "Restoring Gogs repos"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3087. echo ' if [ ! -d /root/tempgogsrepos ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3088. echo ' mkdir /root/tempgogsrepos' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3089. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3090. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/gogsrepos /root/tempgogsrepos $USB_MOUNT/backup/gogsrepos.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3091. echo " cp -r /root/tempgogsrepos/usb/backup/gogsrepos/git/gogs-repositories/* /home/git/gogs-repositories/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3092. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3093. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3094. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3095. echo ' exit 67574' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3096. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3097. echo ' echo "Restoring Gogs authorized_keys"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3098. echo ' if [ ! -d /root/tempgogsssh ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3099. echo ' mkdir /root/tempgogsssh' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3100. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3101. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/gogsssh /root/tempgogsssh $USB_MOUNT/backup/gogsssh.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3102. echo ' if [ ! -d /home/git/.ssh ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3103. echo ' mkdir /home/git/.ssh' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3104. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3105. echo " cp -r /root/tempgogsssh/usb/backup/gogsssh/git/.ssh/* /home/git/.ssh/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3106. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3107. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3108. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3109. echo ' exit 8463' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3110. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3111. echo ' rm -rf /root/tempgogs' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3112. echo ' rm -rf /root/tempgogsdata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3113. echo ' rm -rf /root/tempgogsrepos' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3114. echo ' rm -rf /root/tempgogsssh' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3115. echo ' chown -R git:git /home/git' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3116. echo ' # Ensure that the bundled SSL cert is being used' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3117. echo " if [ -f /etc/ssl/certs/$GIT_DOMAIN_NAME.bundle.crt ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3118. echo " sed -i 's|$GIT_DOMAIN_NAME.crt|$GIT_DOMAIN_NAME.bundle.crt|g' /etc/nginx/sites-available/$GIT_DOMAIN_NAME" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3119. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3120. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3121. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3122. fi
  3123. echo "if [ -d $USB_MOUNT/backup/wiki ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3124. echo ' echo "Restoring Wiki installation"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3125. echo ' mkdir /root/tempwiki' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3126. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/wiki /root/tempwiki $USB_MOUNT/backup/wiki.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3127. echo " cp -r /root/tempwiki/usb/backup/wiki/lib/dokuwiki/* /var/lib/dokuwiki/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3128. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3129. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3130. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3131. echo ' exit 868' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3132. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3133. echo ' mkdir /root/tempwiki2' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3134. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/wiki2 /root/tempwiki2 $USB_MOUNT/backup/wiki2.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3135. echo " cp -r /root/tempwiki2/usb/backup/wiki2/dokuwiki/* /etc/dokuwiki/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3136. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3137. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3138. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3139. echo ' exit 869' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3140. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3141. echo ' rm -rf /root/tempwiki' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3142. echo ' rm -rf /root/tempwiki2' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3143. echo ' chown -R www-data:www-data /var/lib/dokuwiki/*' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3144. echo ' # Ensure that the bundled SSL cert is being used' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3145. echo " if [ -f /etc/ssl/certs/$WIKI_DOMAIN_NAME.bundle.crt ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3146. echo " sed -i 's|$WIKI_DOMAIN_NAME.crt|$WIKI_DOMAIN_NAME.bundle.crt|g' /etc/nginx/sites-available/$WIKI_DOMAIN_NAME" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3147. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3148. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3149. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3150. echo "if [ -d $USB_MOUNT/backup/blog ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3151. echo ' echo "Restoring blog installation"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3152. echo ' mkdir /root/tempblog' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3153. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/blog /root/tempblog $USB_MOUNT/backup/blog.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3154. echo " rm -rf /var/www/$FULLBLOG_DOMAIN_NAME/htdocs" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3155. echo " cp -r /root/tempblog/usb/backup/blog/www/$FULLBLOG_DOMAIN_NAME/htdocs /var/www/$FULLBLOG_DOMAIN_NAME/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3156. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3157. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3158. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3159. echo ' exit 593' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3160. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3161. echo ' rm -rf /root/tempblog' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3162. echo " if [ ! -d /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/content ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3163. echo ' echo "No content directory found after restoring blog"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3164. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3165. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3166. echo ' exit 287' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3167. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3168. echo " chown -R www-data:www-data /var/www/$FULLBLOG_DOMAIN_NAME/htdocs" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3169. echo ' # Ensure that the bundled SSL cert is being used' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3170. echo " if [ -f /etc/ssl/certs/$FULLBLOG_DOMAIN_NAME.bundle.crt ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3171. echo " sed -i 's|$FULLBLOG_DOMAIN_NAME.crt|$FULLBLOG_DOMAIN_NAME.bundle.crt|g' /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3172. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3173. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3174. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3175. echo "if [ -d $USB_MOUNT/backup/cjdns ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3176. echo ' echo "Restoring cjdns installation"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3177. echo ' mkdir /root/tempcjdns' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3178. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/cjdns /root/tempcjdns $USB_MOUNT/backup/cjdns.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3179. echo " rm -rf /etc/cjdns" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3180. echo " cp -r /root/tempcjdns/usb/backup/cjdns/cjdns /etc/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3181. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3182. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3183. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3184. echo ' exit 8472' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3185. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3186. echo ' rm -rf /root/tempcjdns' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3187. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3188. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3189. echo "if [ -d $USB_MOUNT/backup/mail ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3190. echo ' echo "Restoring emails"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3191. echo ' mkdir /root/tempmail' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3192. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/mail /root/tempmail $USB_MOUNT/backup/mail.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3193. echo ' if [ ! -d /home/$MY_USERNAME/Maildir ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3194. echo ' mkdir /home/$MY_USERNAME/Maildir' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3195. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3196. echo ' tar -xzvf /root/tempmail/usb/backup/mail/backupemail/maildir.tar.gz -C /' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3197. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3198. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3199. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3200. echo ' exit 927' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3201. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3202. echo ' rm -rf /root/tempmail' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3203. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3204. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3205. echo "if [ -d /var/cache/minidlna ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3206. echo " if [ -d $USB_MOUNT/backup/dlna ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3207. echo ' echo "Restoring DLNA cache"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3208. echo ' mkdir /root/tempdlna' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3209. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/dlna /root/tempdlna $USB_MOUNT/backup/dlna.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3210. echo " cp -r /root/tempdlna/usb/backup/dlna/cache/minidlna/* /var/cache/minidlna/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3211. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3212. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3213. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3214. echo ' exit 982' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3215. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3216. echo ' rm -rf /root/tempdlna' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3217. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3218. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3219. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3220. echo "if [ -d $USB_MOUNT/backup/voip ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3221. echo ' echo "Restoring VoIP settings"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3222. echo ' mkdir /root/tempvoip' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3223. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/voip /root/tempvoip $USB_MOUNT/backup/voip.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3224. echo -n ' cp -f /root/tempvoip/usb/backup/voip/$MY_USERNAME/tempbackup/' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3225. echo "$VOIP_CONFIG_FILE /etc/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3226. echo -n ' cp -f /root/tempvoip/usb/backup/voip/$MY_USERNAME/tempbackup/' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3227. echo "$VOIP_DATABASE /var/lib/mumble-server/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3228. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3229. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3230. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3231. echo ' rm -rf /root/tempvoip' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3232. echo ' exit 276' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3233. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3234. echo ' rm -rf /root/tempvoip' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3235. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3236. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3237. echo "if [ -d $USB_MOUNT/backup/tox ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3238. echo ' echo "Restoring Tox node settings"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3239. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/tox /var/lib/tox-bootstrapd $USB_MOUNT/backup/tox.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3240. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3241. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3242. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3243. echo ' exit 6393' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3244. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3245. echo ' cp /var/lib/tox-bootstrapd/tox-bootstrapd.conf /etc/tox-bootstrapd.conf' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3246. echo ' systemctl restart tox-bootstrapd.service' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3247. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3248. echo ' systemctl status tox-bootstrapd.service' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3249. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3250. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3251. echo ' exit 59369' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3252. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3253. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3254. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3255. echo 'sync' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3256. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3257. echo "# Unmount the USB drive" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3258. echo "umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3259. echo "rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3260. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3261. if [[ $BACKUP_INCLUDES_WEBSITES == "yes" ]]; then
  3262. echo "# Restart the web server" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3263. echo "service nginx restart" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3264. echo "service php5-fpm restart" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3265. fi
  3266. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3267. echo 'echo "Setting permissions"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3268. echo 'chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3269. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3270. echo 'if [[ $USB_DRIVE == /dev/mapper/encrypted_usb ]]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3271. echo ' echo "Unmount encrypted USB"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3272. echo ' cryptsetup luksClose encrypted_usb' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3273. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3274. echo 'if [ -f /dev/mapper/encrypted_usb ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3275. echo ' rm -rf /dev/mapper/encrypted_usb' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3276. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3277. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3278. echo 'echo "Restore from USB drive is complete. You can now remove it."' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3279. echo 'exit 0' >> /usr/bin/$RESTORE_SCRIPT_NAME
  3280. chmod 400 /usr/bin/$RESTORE_SCRIPT_NAME
  3281. chmod +x /usr/bin/$RESTORE_SCRIPT_NAME
  3282. echo 'create_restore_script' >> $COMPLETION_FILE
  3283. }
  3284. function create_freedns_updater {
  3285. # currently inadyn doesn't work as expected with freeDNS, so this is a workaround
  3286. if grep -Fxq "create_freedns_updater" $COMPLETION_FILE; then
  3287. return
  3288. fi
  3289. if [[ $DDNS_PROVIDER != "default@freedns.afraid.org" ]]; then
  3290. return
  3291. fi
  3292. if [[ $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  3293. return
  3294. fi
  3295. FREEDNS_WGET='wget -q --read-timeout=0.0 --waitretry=5 --tries=4 https://freedns.afraid.org/dynamic/update.php?'
  3296. echo '#!/bin/bash' > /usr/bin/dynamicdns
  3297. echo 'cd /tmp' >> /usr/bin/dynamicdns
  3298. if [ $DEFAULT_DOMAIN_CODE ]; then
  3299. echo "# $DEFAULT_DOMAIN_NAME" >> /usr/bin/dynamicdns
  3300. echo "$FREEDNS_WGET$DEFAULT_DOMAIN_CODE=" >> /usr/bin/dynamicdns
  3301. fi
  3302. if [ $WIKI_CODE ]; then
  3303. if [[ $WIKI_CODE != "$DEFAULT_DOMAIN_CODE" ]]; then
  3304. echo "# $WIKI_DOMAIN_NAME" >> /usr/bin/dynamicdns
  3305. echo "$FREEDNS_WGET$WIKI_CODE=" >> /usr/bin/dynamicdns
  3306. fi
  3307. fi
  3308. if [ $FULLBLOG_CODE ]; then
  3309. if [[ $FULLBLOG_CODE != "$DEFAULT_DOMAIN_CODE" ]]; then
  3310. echo "# $FULLBLOG_DOMAIN_NAME" >> /usr/bin/dynamicdns
  3311. echo "$FREEDNS_WGET$FULLBLOG_CODE=" >> /usr/bin/dynamicdns
  3312. fi
  3313. fi
  3314. if [ $REDMATRIX_CODE ]; then
  3315. if [[ $REDMATRIX_CODE != "$DEFAULT_DOMAIN_CODE" ]]; then
  3316. echo "# $REDMATRIX_DOMAIN_NAME" >> /usr/bin/dynamicdns
  3317. echo "$FREEDNS_WGET$REDMATRIX_CODE=" >> /usr/bin/dynamicdns
  3318. fi
  3319. fi
  3320. if [ $OWNCLOUD_CODE ]; then
  3321. if [[ $OWNCLOUD_CODE != "$DEFAULT_DOMAIN_CODE" ]]; then
  3322. echo "# $OWNCLOUD_DOMAIN_NAME" >> /usr/bin/dynamicdns
  3323. echo "$FREEDNS_WGET$OWNCLOUD_CODE=" >> /usr/bin/dynamicdns
  3324. fi
  3325. fi
  3326. if [ $MICROBLOG_CODE ]; then
  3327. if [[ $MICROBLOG_CODE != "$DEFAULT_DOMAIN_CODE" ]]; then
  3328. echo "# $MICROBLOG_DOMAIN_NAME" >> /usr/bin/dynamicdns
  3329. echo "$FREEDNS_WGET$MICROBLOG_CODE=" >> /usr/bin/dynamicdns
  3330. fi
  3331. fi
  3332. if [ $GIT_CODE ]; then
  3333. if [[ $GIT_CODE != "$DEFAULT_DOMAIN_CODE" ]]; then
  3334. echo "# $GIT_DOMAIN_NAME" >> /usr/bin/dynamicdns
  3335. echo "$FREEDNS_WGET$GIT_CODE=" >> /usr/bin/dynamicdns
  3336. fi
  3337. fi
  3338. if [ $MEDIAGOBLIN_CODE ]; then
  3339. if [[ $MEDIAGOBLIN_CODE != "$DEFAULT_DOMAIN_CODE" ]]; then
  3340. echo "# $MEDIAGOBLIN_DOMAIN_NAME" >> /usr/bin/dynamicdns
  3341. echo "$FREEDNS_WGET$MEDIAGOBLIN_CODE=" >> /usr/bin/dynamicdns
  3342. fi
  3343. fi
  3344. echo 'exit 0' >> /usr/bin/dynamicdns
  3345. chmod 600 /usr/bin/dynamicdns
  3346. chmod +x /usr/bin/dynamicdns
  3347. if ! grep -q "/usr/bin/dynamicdns" /etc/crontab; then
  3348. echo '*/3 * * * * root /usr/bin/dynamicdns' >> /etc/crontab
  3349. service cron restart
  3350. fi
  3351. echo 'create_freedns_updater' >> $COMPLETION_FILE
  3352. }
  3353. function backup_to_friends_servers {
  3354. if grep -Fxq "backup_to_friends_servers" $COMPLETION_FILE; then
  3355. return
  3356. fi
  3357. if [ ! $FRIENDS_SERVERS_LIST ]; then
  3358. return
  3359. fi
  3360. apt-get -y install rsyncrypto sshpass
  3361. get_mariadb_password
  3362. get_mariadb_gnusocial_admin_password
  3363. get_mariadb_redmatrix_admin_password
  3364. get_mariadb_owncloud_admin_password
  3365. get_mariadb_git_admin_password
  3366. if ! grep -q "backups on friends servers" /home/$MY_USERNAME/README; then
  3367. echo '' >> /home/$MY_USERNAME/README
  3368. echo '' >> /home/$MY_USERNAME/README
  3369. echo 'Backups' >> /home/$MY_USERNAME/README
  3370. echo '=======' >> /home/$MY_USERNAME/README
  3371. echo 'Key file: /root/backupkey' >> /home/$MY_USERNAME/README
  3372. echo "To add friends servers create a file called $FRIENDS_SERVERS_LIST" >> /home/$MY_USERNAME/README
  3373. echo 'and add entries like this:' >> /home/$MY_USERNAME/README
  3374. echo '' >> /home/$MY_USERNAME/README
  3375. echo "username1@domain1:$SSH_PORT//home/username1 ssh_password1" >> /home/$MY_USERNAME/README
  3376. echo "username2@domain2:$SSH_PORT//home/username2 ssh_password2" >> /home/$MY_USERNAME/README
  3377. echo '...' >> /home/$MY_USERNAME/README
  3378. echo '' >> /home/$MY_USERNAME/README
  3379. echo 'The system will try to backup to these remote locations once per day.' >> /home/$MY_USERNAME/README
  3380. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  3381. chmod 600 /home/$MY_USERNAME/README
  3382. fi
  3383. echo '#!/bin/bash' > /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3384. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3385. echo '# Temporary location for data to be backed up to other servers' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3386. echo 'SERVER_DIRECTORY=/root/remotebackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3387. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3388. echo "MY_USERNAME=$MY_USERNAME" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3389. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3390. echo "if [ ! -f $BACKUP_CERTIFICATE ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3391. echo ' echo "Creating backup key"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3392. echo " freedombone-addcert -h backup --dhkey $DH_KEYLENGTH" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3393. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3394. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3395. echo "if [ ! -f $FRIENDS_SERVERS_LIST ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3396. echo ' exit 1' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3397. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3398. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3399. echo '# MariaDB password' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3400. echo -n 'DATABASE_PASSWORD=$(cat ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3401. echo "$DATABASE_PASSWORD_FILE)" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3402. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3403. echo '# local directory where the backup will be made' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3404. echo 'if [ ! -d $SERVER_DIRECTORY ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3405. echo ' mkdir $SERVER_DIRECTORY' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3406. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3407. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3408. echo 'if [ ! -d $SERVER_DIRECTORY/backup ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3409. echo ' mkdir -p $SERVER_DIRECTORY/backup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3410. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3411. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3412. if grep -Fxq "install_gnu_social" $COMPLETION_FILE; then
  3413. BACKUP_INCLUDES_DATABASES="yes"
  3414. echo 'if [ ! -d $SERVER_DIRECTORY/backup/gnusocial ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3415. echo ' mkdir -p $SERVER_DIRECTORY/backup/gnusocial' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3416. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3417. echo 'if [ ! -d $SERVER_DIRECTORY/backup/gnusocialdata ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3418. echo ' mkdir -p $SERVER_DIRECTORY/backup/gnusocialdata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3419. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3420. echo "if [ ! -d /root/tempgnusocialdata ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3421. echo " mkdir -p /root/tempgnusocialdata" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3422. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3423. echo 'echo "Obtaining GNU Social database backup"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3424. echo 'mysqldump --password=$DATABASE_PASSWORD gnusocial > /root/tempgnusocialdata/gnusocial.sql' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3425. echo "if [ ! -s /root/tempgnusocialdata/gnusocial.sql ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3426. echo ' echo "GNU social database could not be saved"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3427. echo ' if [ ! $DATABASE_PASSWORD ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3428. echo " echo 'No MariaDB password was given'" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3429. echo " fi" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3430. echo ' shred -zu /root/tempgnusocialdata/*' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3431. echo ' rm -rf /root/tempgnusocialdata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3432. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3433. echo -n ' echo "Unable to export gnusocial database" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3434. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3435. echo ' exit 296' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3436. echo "fi" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3437. echo -n 'rsyncrypto -v -r /root/tempgnusocialdata $SERVER_DIRECTORY/backup/gnusocialdata $SERVER_DIRECTORY/backup/gnusocialdata.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3438. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3439. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3440. echo ' shred -zu /root/tempgnusocialdata/*' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3441. echo ' rm -rf /root/tempgnusocialdata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3442. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3443. echo -n ' echo "Unable to encrypt gnusocial database" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3444. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3445. echo ' exit 853' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3446. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3447. echo 'shred -zu /root/tempgnusocialdata/*' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3448. echo 'rm -rf /root/tempgnusocialdata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3449. echo 'echo "Backing up GNU social installation"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3450. echo -n "rsyncrypto -v -r /var/www/$MICROBLOG_DOMAIN_NAME/htdocs " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3451. echo -n '$SERVER_DIRECTORY/backup/gnusocial $SERVER_DIRECTORY/backup/gnusocial.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3452. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3453. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3454. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3455. echo -n ' echo "Unable to encrypt gnusocial installation" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3456. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3457. echo ' exit 846' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3458. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3459. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3460. fi
  3461. if grep -Fxq "install_redmatrix" $COMPLETION_FILE; then
  3462. BACKUP_INCLUDES_DATABASES="yes"
  3463. echo 'if [ ! -d $SERVER_DIRECTORY/backup/redmatrix ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3464. echo ' mkdir -p $SERVER_DIRECTORY/backup/redmatrix' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3465. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3466. echo 'if [ ! -d $SERVER_DIRECTORY/backup/redmatrixdata ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3467. echo ' mkdir -p $SERVER_DIRECTORY/backup/redmatrixdata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3468. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3469. echo "if [ ! -d /root/tempredmatrixdata ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3470. echo " mkdir -p /root/tempredmatrixdata" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3471. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3472. echo 'echo "Obtaining Red Matrix database backup"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3473. echo 'mysqldump --password=$DATABASE_PASSWORD redmatrix > /root/tempredmatrixdata/redmatrix.sql' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3474. echo "if [ ! -s /root/tempredmatrixdata/redmatrix.sql ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3475. echo ' echo "Red Matrix database could not be saved"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3476. echo ' if [ ! $DATABASE_PASSWORD ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3477. echo " echo 'No MariaDB password was given'" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3478. echo " fi" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3479. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3480. echo -n ' echo "Unable to export redmatrix database" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3481. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3482. echo ' exit 378' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3483. echo "fi" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3484. echo -n 'rsyncrypto -v -r /root/tempredmatrixdata $SERVER_DIRECTORY/backup/redmatrixdata $SERVER_DIRECTORY/backup/redmatrixdata.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3485. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3486. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3487. echo ' shred -zu /root/tempredmatrixdata/*' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3488. echo ' rm -rf /root/tempredmatrixdata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3489. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3490. echo -n ' echo "Unable to encrypt redmatrix database" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3491. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3492. echo ' exit 285' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3493. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3494. echo 'shred -zu /root/tempredmatrixdata/*' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3495. echo 'rm -rf /root/tempredmatrixdata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3496. echo 'echo "Backing up Red Matrix installation"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3497. echo -n "rsyncrypto -v -r /var/www/$REDMATRIX_DOMAIN_NAME/htdocs " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3498. echo -n '$SERVER_DIRECTORY/backup/redmatrix $SERVER_DIRECTORY/backup/redmatrix.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3499. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3500. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3501. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3502. echo -n ' echo "Unable to encrypt redmatrix installation" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3503. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3504. echo ' exit 593' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3505. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3506. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3507. fi
  3508. if grep -Fxq "install_owncloud" $COMPLETION_FILE; then
  3509. BACKUP_INCLUDES_DATABASES="yes"
  3510. echo 'if [ ! -d $SERVER_DIRECTORY/backup/owncloud ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3511. echo ' mkdir -p $SERVER_DIRECTORY/backup/owncloud' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3512. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3513. echo 'if [ ! -d $SERVER_DIRECTORY/backup/owncloud2 ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3514. echo ' mkdir -p $SERVER_DIRECTORY/backup/owncloud2' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3515. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3516. echo 'if [ ! -d $SERVER_DIRECTORY/backup/ownclouddata ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3517. echo ' mkdir -p $SERVER_DIRECTORY/backup/ownclouddata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3518. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3519. echo "if [ ! -d /root/tempownclouddata ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3520. echo " mkdir -p /root/tempownclouddata" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3521. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3522. echo 'mysqldump --password=$DATABASE_PASSWORD owncloud > /root/tempownclouddata/owncloud.sql' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3523. echo "if [ ! -s /root/tempownclouddata/owncloud.sql ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3524. echo ' echo "Owncloud database could not be saved"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3525. echo ' if [ ! $DATABASE_PASSWORD ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3526. echo " echo 'No MariaDB password was given'" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3527. echo " fi" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3528. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3529. echo -n ' echo "Unable to export owncloud database" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3530. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3531. echo ' exit 377' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3532. echo "fi" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3533. echo -n 'rsyncrypto -v -r /root/tempownclouddata $SERVER_DIRECTORY/backup/ownclouddata $SERVER_DIRECTORY/backup/ownclouddata.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3534. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3535. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3536. echo ' shred -zu /root/tempownclouddata/*' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3537. echo ' rm -rf /root/tempownclouddata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3538. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3539. echo -n ' echo "Unable to encrypt owncloud database" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3540. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3541. echo ' exit 188' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3542. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3543. echo 'shred -zu /root/tempownclouddata/*' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3544. echo 'rm -rf /root/tempownclouddata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3545. echo 'echo "Obtaining Owncloud data backup"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3546. echo -n 'rsyncrypto -v -r /var/lib/owncloud $SERVER_DIRECTORY/backup/owncloud $SERVER_DIRECTORY/backup/owncloud.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3547. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3548. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3549. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3550. echo -n ' echo "Unable to encrypt owncloud installation (/var/lib/owncloud)" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3551. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3552. echo ' exit 632' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3553. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3554. echo -n 'rsyncrypto -v -r /etc/owncloud $SERVER_DIRECTORY/backup/owncloud2 $SERVER_DIRECTORY/backup/owncloud2.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3555. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3556. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3557. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3558. echo -n ' echo "Unable to encrypt owncloud installation (/etc/owncloud)" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3559. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3560. echo ' exit 632' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3561. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3562. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3563. fi
  3564. if grep -Fxq "install_gogs" $COMPLETION_FILE; then
  3565. BACKUP_INCLUDES_DATABASES="yes"
  3566. echo 'if [ ! -d $SERVER_DIRECTORY/backup/gogs ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3567. echo ' mkdir -p $SERVER_DIRECTORY/backup/gogs' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3568. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3569. echo 'if [ ! -d $SERVER_DIRECTORY/backup/gogsdata ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3570. echo ' mkdir -p $SERVER_DIRECTORY/backup/gogsdata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3571. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3572. echo 'if [ ! -d $SERVER_DIRECTORY/backup/gogsrepos ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3573. echo ' mkdir -p $SERVER_DIRECTORY/backup/gogsrepos' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3574. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3575. echo 'if [ ! -d $SERVER_DIRECTORY/backup/gogsssh ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3576. echo ' mkdir -p $SERVER_DIRECTORY/backup/gogsssh' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3577. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3578. echo "if [ ! -d /root/tempgogsdata ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3579. echo " mkdir -p /root/tempgogsdata" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3580. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3581. echo 'mysqldump --password=$DATABASE_PASSWORD gogs > /root/tempgogsdata/gogs.sql' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3582. echo "if [ ! -s /root/tempgogsdata/gogs.sql ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3583. echo ' echo "Gogs database could not be saved"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3584. echo ' if [ ! $DATABASE_PASSWORD ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3585. echo " echo 'No MariaDB password was given'" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3586. echo " fi" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3587. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3588. echo -n ' echo "Unable to export gogs database" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3589. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3590. echo ' exit 6785' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3591. echo "fi" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3592. echo -n 'rsyncrypto -v -r /root/tempgogsdata $SERVER_DIRECTORY/backup/gogsdata $SERVER_DIRECTORY/backup/gogsdata.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3593. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3594. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3595. echo ' shred -zu /root/tempgogsdata/*' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3596. echo ' rm -rf /root/tempgogsdata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3597. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3598. echo -n ' echo "Unable to encrypt gogs database" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3599. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3600. echo ' exit 3776' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3601. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3602. echo 'shred -zu /root/tempgogsdata/*' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3603. echo 'rm -rf /root/tempgogsdata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3604. echo 'echo "Obtaining Gogs settings backup"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3605. echo -n 'rsyncrypto -v -r /home/git/go/src/github.com/gogits/gogs/custom $SERVER_DIRECTORY/backup/gogs $SERVER_DIRECTORY/backup/gogs.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3606. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3607. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3608. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3609. echo -n ' echo "Unable to encrypt gogs installation (/home/git/go/src/github.com/gogits/gogs/custom)" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3610. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3611. echo ' exit 76547' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3612. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3613. echo 'echo "Obtaining Gogs repos backup"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3614. echo -n 'rsyncrypto -v -r /home/git/gogs-repositories $SERVER_DIRECTORY/backup/gogsrepos $SERVER_DIRECTORY/backup/gogsrepos.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3615. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3616. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3617. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3618. echo -n ' echo "Unable to encrypt gogs repos (/home/git/gogs-repositories)" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3619. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3620. echo ' exit 454637' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3621. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3622. echo 'echo "Obtaining Gogs authorized_keys backup"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3623. echo -n 'rsyncrypto -v -r /home/git/.ssh $SERVER_DIRECTORY/backup/gogsssh $SERVER_DIRECTORY/backup/gogsssh.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3624. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3625. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3626. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3627. echo -n ' echo "Unable to encrypt gogs authorized_keys (/home/git/.ssh)" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3628. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3629. echo ' exit 76864' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3630. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3631. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3632. fi
  3633. if grep -Fxq "install_wiki" $COMPLETION_FILE; then
  3634. echo 'if [ ! -d $SERVER_DIRECTORY/backup/wiki ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3635. echo ' mkdir -p $SERVER_DIRECTORY/backup/wiki' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3636. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3637. echo 'if [ ! -d $SERVER_DIRECTORY/backup/wiki2 ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3638. echo ' mkdir -p $SERVER_DIRECTORY/backup/wiki2' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3639. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3640. echo 'echo "Obtaining wiki data backup"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3641. echo -n 'rsyncrypto -v -r /var/lib/dokuwiki $SERVER_DIRECTORY/backup/wiki $SERVER_DIRECTORY/backup/wiki.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3642. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3643. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3644. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3645. echo -n ' echo "Unable to encrypt wiki installation (/var/lib/dokuwiki)" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3646. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3647. echo ' exit 964' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3648. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3649. echo -n 'rsyncrypto -v -r /etc/dokuwiki $SERVER_DIRECTORY/backup/wiki2 $SERVER_DIRECTORY/backup/wiki2.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3650. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3651. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3652. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3653. echo -n ' echo "Unable to encrypt wiki installation (/etc/dokuwiki)" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3654. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3655. echo ' exit 964' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3656. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3657. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3658. fi
  3659. if grep -Fxq "install_blog" $COMPLETION_FILE; then
  3660. echo 'if [ ! -d $SERVER_DIRECTORY/backup/blog ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3661. echo ' mkdir -p $SERVER_DIRECTORY/backup/blog' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3662. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3663. echo 'echo "Obtaining blog backup"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3664. echo -n "rsyncrypto -v -r /var/www/$FULLBLOG_DOMAIN_NAME/htdocs " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3665. echo -n '$SERVER_DIRECTORY/backup/blog $SERVER_DIRECTORY/backup/blog.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3666. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3667. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3668. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3669. echo -n ' echo "Unable to encrypt blog installation" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3670. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3671. echo ' exit 854' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3672. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3673. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3674. fi
  3675. if grep -Fxq "mesh_cjdns" $COMPLETION_FILE; then
  3676. echo 'if [ ! -d $SERVER_DIRECTORY/backup/cjdns ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3677. echo ' mkdir -p $SERVER_DIRECTORY/backup/cjdns' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3678. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3679. echo 'echo "Obtaining cjdns backup"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3680. echo -n "rsyncrypto -v -r /etc/cjdns " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3681. echo -n '$SERVER_DIRECTORY/backup/cjdns $SERVER_DIRECTORY/backup/cjdns.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3682. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3683. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3684. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3685. echo -n ' echo "Unable to encrypt cjdns installation" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3686. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3687. echo ' exit 854' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3688. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3689. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3690. fi
  3691. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3692. echo '# Backup certificates' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3693. echo "if [ -d /etc/ssl ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3694. echo ' echo "Backing up certificates"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3695. echo ' if [ ! -d $SERVER_DIRECTORY/backup/ssl ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3696. echo ' mkdir -p $SERVER_DIRECTORY/backup/ssl' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3697. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3698. echo -n ' rsyncrypto -v -r /etc/ssl $SERVER_DIRECTORY/backup/ssl $SERVER_DIRECTORY/backup/ssl.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3699. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3700. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3701. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3702. echo -n ' echo "Unable to encrypt ssl certificates" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3703. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3704. echo ' exit 343' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3705. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3706. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3707. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3708. echo '# Backup projects' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3709. echo 'if [ -d /home/$MY_USERNAME/projects ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3710. echo ' echo "Backing up projects"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3711. echo ' if [ ! -d $SERVER_DIRECTORY/backup/projects ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3712. echo ' mkdir -p $SERVER_DIRECTORY/backup/projects' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3713. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3714. echo -n ' rsyncrypto -v -r /home/$MY_USERNAME/projects ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3715. echo -n '$SERVER_DIRECTORY/backup/projects $SERVER_DIRECTORY/backup/projects.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3716. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3717. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3718. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3719. echo -n ' echo "Unable to encrypt git projects" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3720. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3721. echo ' exit 873' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3722. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3723. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3724. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3725. echo '# Backup personal settings' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3726. echo 'if [ -d /home/$MY_USERNAME/personal ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3727. echo ' echo "Backing up personal settings"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3728. echo ' if [ ! -d $SERVER_DIRECTORY/backup/personal ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3729. echo ' mkdir -p $SERVER_DIRECTORY/backup/personal' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3730. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3731. echo -n ' rsyncrypto -v -r /home/$MY_USERNAME/personal ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3732. echo -n '$SERVER_DIRECTORY/backup/personal $SERVER_DIRECTORY/backup/personal.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3733. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3734. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3735. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3736. echo -n ' echo "Unable to encrypt personal settings" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3737. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3738. echo ' exit 649' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3739. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3740. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3741. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3742. echo '# Backup the public mailing list' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3743. echo "if [ -d $PUBLIC_MAILING_LIST_DIRECTORY ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3744. echo ' echo "Backing up the public mailing list"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3745. echo ' if [ ! -d $SERVER_DIRECTORY/backup/mailinglist ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3746. echo ' mkdir -p $SERVER_DIRECTORY/backup/mailinglist' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3747. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3748. echo -n " rsyncrypto -v -r $PUBLIC_MAILING_LIST_DIRECTORY " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3749. echo -n '$SERVER_DIRECTORY/backup/mailinglist $SERVER_DIRECTORY/backup/mailinglist.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3750. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3751. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3752. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3753. echo -n ' echo "Unable to encrypt public mailing list" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3754. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3755. echo ' exit 938' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3756. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3757. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3758. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3759. echo '# Backup xmpp settings' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3760. echo "if [ -d $XMPP_DIRECTORY ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3761. echo ' echo "Backing up the XMPP settings"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3762. echo ' if [ ! -d $SERVER_DIRECTORY/backup/xmpp ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3763. echo ' mkdir -p $SERVER_DIRECTORY/backup/xmpp' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3764. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3765. echo -n " rsyncrypto -v -r $XMPP_DIRECTORY " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3766. echo -n '$SERVER_DIRECTORY/backup/xmpp $SERVER_DIRECTORY/backup/xmpp.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3767. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3768. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3769. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3770. echo -n ' echo "Unable to encrypt XMPP settings" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3771. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3772. echo ' exit 593' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3773. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3774. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3775. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3776. echo '# Backup gpg keys' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3777. echo 'if [ -d /home/$MY_USERNAME/.gnupg ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3778. echo ' echo "Backing up gpg keys"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3779. echo ' if [ ! -d $SERVER_DIRECTORY/backup/gnupg ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3780. echo ' mkdir -p $SERVER_DIRECTORY/backup/gnupg' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3781. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3782. echo -n ' rsyncrypto -v -r /home/$MY_USERNAME/.gnupg ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3783. echo -n '$SERVER_DIRECTORY/backup/gnupg $SERVER_DIRECTORY/backup/gnupg.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3784. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3785. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3786. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3787. echo -n ' echo "Unable to encrypt gpg keys" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3788. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3789. echo ' exit 491' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3790. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3791. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3792. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3793. echo '# Backup ssh keys' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3794. echo 'if [ -d /home/$MY_USERNAME/.ssh ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3795. echo ' echo "Backing up ssh keys"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3796. echo ' if [ ! -d $SERVER_DIRECTORY/backup/ssh ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3797. echo ' mkdir -p $SERVER_DIRECTORY/backup/ssh' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3798. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3799. echo -n ' rsyncrypto -v -r /home/$MY_USERNAME/.ssh ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3800. echo -n '$SERVER_DIRECTORY/backup/ssh $SERVER_DIRECTORY/backup/ssh.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3801. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3802. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3803. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3804. echo -n ' echo "Unable to encrypt ssh keys" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3805. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3806. echo ' exit 731' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3807. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3808. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3809. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3810. echo '# Backup web sites' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3811. echo "if [ -d /etc/nginx ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3812. echo ' echo "Backing up web settings"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3813. echo ' if [ ! -d $SERVER_DIRECTORY/backup/web ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3814. echo ' mkdir -p $SERVER_DIRECTORY/backup/web' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3815. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3816. echo -n ' rsyncrypto -v -r /etc/nginx/sites-available $SERVER_DIRECTORY/backup/web $SERVER_DIRECTORY/backup/web.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3817. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3818. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3819. echo ' exit 848' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3820. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3821. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3822. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3823. echo '# Backup README file' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3824. echo 'if [ -f /home/$MY_USERNAME/README ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3825. echo ' echo "Backing up README"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3826. echo ' if [ ! -d $SERVER_DIRECTORY/backup/readme ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3827. echo ' mkdir -p $SERVER_DIRECTORY/backup/readme' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3828. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3829. echo ' if [ ! -d /home/$MY_USERNAME/tempbackup ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3830. echo ' mkdir -p /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3831. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3832. echo ' cp -f /home/$MY_USERNAME/README /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3833. echo -n ' rsyncrypto -v -r /home/$MY_USERNAME/tempbackup ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3834. echo -n '$SERVER_DIRECTORY/backup/readme $SERVER_DIRECTORY/backup/readme.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3835. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3836. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3837. echo ' rm -rf /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3838. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3839. echo -n ' echo "Unable to encrypt README file" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3840. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3841. echo ' exit 848' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3842. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3843. echo ' rm -rf /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3844. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3845. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3846. echo '# Backup Mutt settings' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3847. echo 'if [ -f /home/$MY_USERNAME/.muttrc ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3848. echo ' echo "Backing up Mutt settings"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3849. echo ' if [ ! -d /home/$MY_USERNAME/tempbackup ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3850. echo ' mkdir -p /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3851. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3852. echo ' cp /home/$MY_USERNAME/.muttrc /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3853. echo ' if [ -f /etc/Muttrc ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3854. echo ' cp /etc/Muttrc /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3855. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3856. echo ' if [ ! -d $SERVER_DIRECTORY/backup/mutt ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3857. echo ' mkdir -p $SERVER_DIRECTORY/backup/mutt' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3858. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3859. echo -n ' rsyncrypto -v -r /home/$MY_USERNAME/tempbackup ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3860. echo -n '$SERVER_DIRECTORY/backup/mutt $SERVER_DIRECTORY/backup/mutt.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3861. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3862. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3863. echo ' rm -rf /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3864. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3865. echo -n ' echo "Unable to encrypt Mutt settings" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3866. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3867. echo ' exit 492' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3868. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3869. echo ' rm -rf /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3870. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3871. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3872. echo '# Backup procmail settings' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3873. echo 'if [ -f /home/$MY_USERNAME/.procmailrc ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3874. echo ' echo "Backing up procmail settings"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3875. echo ' if [ ! -d /home/$MY_USERNAME/tempbackup ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3876. echo ' mkdir -p /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3877. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3878. echo ' cp /home/$MY_USERNAME/.procmailrc /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3879. echo ' if [ ! -d $SERVER_DIRECTORY/backup/procmail ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3880. echo ' mkdir -p $SERVER_DIRECTORY/backup/procmail' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3881. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3882. echo -n ' rsyncrypto -v -r /home/$MY_USERNAME/tempbackup ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3883. echo -n '$SERVER_DIRECTORY/backup/procmail $SERVER_DIRECTORY/backup/procmail.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3884. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3885. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3886. echo ' rm -rf /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3887. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3888. echo -n ' echo "Unable to encrypt procmail settings" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3889. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3890. echo ' exit 492' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3891. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3892. echo ' rm -rf /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3893. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3894. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3895. echo '# Backup spamassassin settings' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3896. echo 'if [ -d /home/$MY_USERNAME/.spamassassin ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3897. echo ' echo "Backing up spamassassin settings"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3898. echo ' if [ ! -d $SERVER_DIRECTORY/backup/spamassassin ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3899. echo ' mkdir -p $SERVER_DIRECTORY/backup/spamassassin' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3900. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3901. echo -n ' rsyncrypto -v -r /home/$MY_USERNAME/.spamassassin ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3902. echo -n '$SERVER_DIRECTORY/backup/spamassassin $SERVER_DIRECTORY/backup/spamassassin.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3903. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3904. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3905. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3906. echo -n ' echo "Unable to encrypt spamassassin settings" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3907. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3908. echo ' exit 492' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3909. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3910. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3911. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3912. echo '# Backup email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3913. echo 'if [ -d /home/$MY_USERNAME/Maildir ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3914. echo ' echo "Creating an email archive"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3915. echo ' if [ ! -d /root/backupemail ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3916. echo " mkdir -p /root/backupemail" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3917. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3918. echo ' tar -czvf /root/backupemail/maildir.tar.gz /home/$MY_USERNAME/Maildir' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3919. echo ' echo "Backing up emails"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3920. echo ' if [ ! -d $SERVER_DIRECTORY/backup/mail ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3921. echo ' mkdir -p $SERVER_DIRECTORY/backup/mail' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3922. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3923. echo -n ' rsyncrypto -v -r /root/backupemail ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3924. echo -n '$SERVER_DIRECTORY/backup/mail $SERVER_DIRECTORY/backup/mail.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3925. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3926. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3927. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3928. echo -n ' echo "Unable to encrypt emails" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3929. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3930. echo ' exit 396' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3931. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3932. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3933. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3934. echo '# Backup DLNA cache' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3935. echo "if [ -d /var/cache/minidlna ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3936. echo ' echo "Backing up DLNA cache"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3937. echo ' if [ ! -d $SERVER_DIRECTORY/backup/dlna ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3938. echo ' mkdir -p $SERVER_DIRECTORY/backup/dlna' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3939. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3940. echo -n ' rsyncrypto -v -r /var/cache/minidlna $SERVER_DIRECTORY/backup/dlna $SERVER_DIRECTORY/backup/dlna.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3941. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3942. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3943. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3944. echo -n ' echo "Unable to encrypt DLNA settings" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3945. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3946. echo ' exit 498' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3947. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3948. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3949. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3950. echo '# Backup VoIP settings' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3951. echo "if [ -f /etc/$VOIP_CONFIG_FILE ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3952. echo ' echo "Backing up VoIP settings"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3953. echo ' if [ ! -d /home/$MY_USERNAME/tempbackup ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3954. echo ' mkdir -p /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3955. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3956. echo -n " cp -f /etc/$VOIP_CONFIG_FILE " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3957. echo '/home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3958. echo -n " cp -f /var/lib/mumble-server/$VOIP_DATABASE " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3959. echo '/home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3960. echo ' if [ ! -d $SERVER_DIRECTORY/backup/voip ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3961. echo ' mkdir -p $SERVER_DIRECTORY/backup/voip' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3962. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3963. echo -n ' rsyncrypto -v -r /home/$MY_USERNAME/tempbackup ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3964. echo -n '$SERVER_DIRECTORY/backup/voip $SERVER_DIRECTORY/backup/voip.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3965. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3966. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3967. echo ' rm -rf /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3968. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3969. echo -n ' echo "Unable to encrypt VoIP settings" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3970. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3971. echo ' exit 4923' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3972. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3973. echo ' rm -rf /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3974. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3975. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3976. echo '# Backup Tox node settings' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3977. echo "if [ -d /var/lib/tox-bootstrapd ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3978. echo ' echo "Backing up Tox node settings"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3979. echo ' if [ ! -d $SERVER_DIRECTORY/backup/tox ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3980. echo ' mkdir -p $SERVER_DIRECTORY/backup/tox' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3981. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3982. echo ' cp /etc/tox-bootstrapd.conf /var/lib/tox-bootstrapd' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3983. echo -n " rsyncrypto -v -r /var/lib/tox-bootstrapd " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3984. echo -n '$SERVER_DIRECTORY/backup/tox $SERVER_DIRECTORY/backup/tox.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3985. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3986. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3987. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3988. echo -n ' echo "Unable to encrypt Tox node settings" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3989. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3990. echo ' exit 76454' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3991. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3992. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3993. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3994. if [[ $BACKUP_INCLUDES_DATABASES == "yes" ]]; then
  3995. echo '# Mysql settings' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3996. echo 'if [ ! -d $SERVER_DIRECTORY/backup/mariadb ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3997. echo ' mkdir -p $SERVER_DIRECTORY/backup/mariadb' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3998. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3999. echo 'if [ ! -d /root/tempmariadb ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4000. echo ' mkdir /root/tempmariadb' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4001. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4002. echo 'mysqldump --password=$DATABASE_PASSWORD mysql user > /root/tempmariadb/mysql.sql' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4003. echo "if [ ! -s /root/tempmariadb/mysql.sql ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4004. echo ' echo "Unable to backup mysql settings"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4005. echo ' rm -rf /root/tempmariadb' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4006. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4007. echo -n ' echo "Unable to export database settings" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4008. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4009. echo ' exit 653' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4010. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4011. echo 'echo "$DATABASE_PASSWORD" > /root/tempmariadb/db' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4012. echo 'chmod 400 /root/tempmariadb/db' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4013. echo -n 'rsyncrypto -v -r /root/tempmariadb $SERVER_DIRECTORY/backup/mariadb $SERVER_DIRECTORY/backup/mariadb.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4014. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4015. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4016. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4017. echo -n ' echo "Unable to encrypt database settings" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4018. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4019. echo ' exit 794' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4020. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4021. echo 'rm -rf /root/tempmariadb' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4022. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4023. fi
  4024. # Now that we have the server directory updated with the encrypted backup
  4025. # we just need to rsync it to each friend
  4026. echo '# For each remote server' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4027. echo 'while read remote_server' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4028. echo 'do' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4029. echo ' # Get the server and its password' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4030. echo ' # Format is:' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4031. echo ' # username@domain:/home/username <port number> <ssh password>' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4032. echo -n ' REMOTE_SERVER=$(echo "${remote_server}" | ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4033. echo -n "awk -F ' ' '{print " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4034. echo -n '$1' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4035. echo "}')" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4036. echo ' if [ $REMOTE_SERVER ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4037. echo -n ' REMOTE_DOMAIN=$(echo "${remote_server}" | ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4038. echo -n "awk -F ':' '{print " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4039. echo -n '$1' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4040. echo -n "}' | awk -F '@' '{print " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4041. echo -n '$2' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4042. echo "}')" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4043. echo -n ' REMOTE_SSH_PORT=$(echo "${remote_server}" | ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4044. echo -n "awk -F ' ' '{print " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4045. echo -n '$2' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4046. echo "}')" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4047. echo -n ' REMOTE_PASSWORD=$(echo "${remote_server}" | ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4048. echo -n "awk -F ' ' '{print " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4049. echo -n '$3' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4050. echo "}')" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4051. echo ' NOW=$(date +"%Y-%m-%d %H:%M:%S")' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4052. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4053. echo -n ' echo "$NOW Starting backup to $REMOTE_SERVER" >> ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4054. echo "$REMOTE_BACKUPS_LOG" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4055. if [[ $ENABLE_SOCIAL_KEY_MANAGEMENT == "yes" ]]; then
  4056. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4057. echo ' # Social key management' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4058. echo ' if [ -d /home/$MY_USERNAME/.gnupg_fragments ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4059. echo ' if [ $REMOTE_DOMAIN ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4060. echo ' cd /home/$MY_USERNAME/.gnupg_fragments' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4061. echo ' no_of_shares=$(ls -afq keyshare.asc.* | wc -l)' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4062. echo ' if (( no_of_shares > 0 )); then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4063. echo ' # Pick a share index based on the domain name' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4064. echo ' # This ensures that the same share is always given to the same domain' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4065. echo ' sharenumstr=$(md5sum <<< "$REMOTE_DOMAIN")' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4066. echo ' share_index=$(echo $((0x${sharenumstr%% *} % ${no_of_shares})) | tr -d -)' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4067. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4068. echo ' # get the share filename' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4069. echo ' share_files=(/home/$MY_USERNAME/.gnupg_fragments/keyshare.asc.*)' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4070. echo ' share_filename=${share_files[share_index]}' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4071. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4072. echo ' # create a temp directory containing the share' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4073. echo ' mkdir -p /home/$MY_USERNAME/tempkey/.gnupg_fragments' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4074. echo ' cp $share_filename /home/$MY_USERNAME/tempkey/.gnupg_fragments/' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4075. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4076. echo ' # copy the fragments directory to the remote server' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4077. echo -n ' /usr/bin/sshpass -p $REMOTE_PASSWORD ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4078. echo -n 'scp -r -P $REMOTE_SSH_PORT ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4079. echo -n '/home/$MY_USERNAME/tempkey/.gnupg_fragments ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4080. echo '$REMOTE_SERVER' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4081. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4082. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4083. echo -n ' echo "Key share to $REMOTE_SERVER failed" | mail -s "Freedombone social key management" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4084. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4085. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4086. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4087. echo ' # remove the temp file/directory' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4088. echo ' shred -zu /home/$MY_USERNAME/tempkey/.gnupg_fragments/*' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4089. echo ' rm -rf /home/$MY_USERNAME/tempkey' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4090. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4091. echo ' # Send a confirmation email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4092. echo -n ' echo "Key shared to $REMOTE_SERVER" | mail -s "Freedombone social key management" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4093. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4094. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4095. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4096. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4097. fi
  4098. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4099. echo -n ' rsync -ratlzv --rsh="/usr/bin/sshpass -p $REMOTE_PASSWORD ssh -p $REMOTE_SSH_PORT -o StrictHostKeyChecking=no" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4100. echo '$SERVER_DIRECTORY/backup $REMOTE_SERVER' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4101. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4102. echo -n ' echo "$NOW Backup to $REMOTE_SERVER failed" >> ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4103. echo "$REMOTE_BACKUPS_LOG" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4104. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4105. echo -n ' echo "Backup to $REMOTE_SERVER failed" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4106. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4107. echo ' else' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4108. echo -n ' echo "$NOW Backed up to $REMOTE_SERVER" >> ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4109. echo "$REMOTE_BACKUPS_LOG" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4110. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4111. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4112. # End of the loop
  4113. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4114. echo "done < $FRIENDS_SERVERS_LIST" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4115. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4116. echo 'exit 0' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4117. chown root:root /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4118. chmod 400 /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4119. chmod +x /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  4120. # update crontab
  4121. echo '#!/bin/bash' > /etc/cron.daily/backuptofriends
  4122. echo "/usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME" >> /etc/cron.daily/backuptofriends
  4123. chmod +x /etc/cron.daily/backuptofriends
  4124. echo 'backup_to_friends_servers' >> $COMPLETION_FILE
  4125. }
  4126. function restore_from_friend {
  4127. if grep -Fxq "restore_from_friend" $COMPLETION_FILE; then
  4128. return
  4129. fi
  4130. apt-get -y install rsyncrypto sshpass
  4131. get_mariadb_password
  4132. get_mariadb_gnusocial_admin_password
  4133. get_mariadb_redmatrix_admin_password
  4134. get_mariadb_owncloud_admin_password
  4135. get_mariadb_git_admin_password
  4136. if ! grep -q "restore from a friend's server" /home/$MY_USERNAME/README; then
  4137. echo '' >> /home/$MY_USERNAME/README
  4138. echo '' >> /home/$MY_USERNAME/README
  4139. echo 'Restoring from backups to friends servers' >> /home/$MY_USERNAME/README
  4140. echo '=========================================' >> /home/$MY_USERNAME/README
  4141. echo "To restore from a friend's server use the command:" >> /home/$MY_USERNAME/README
  4142. echo '' >> /home/$MY_USERNAME/README
  4143. echo " $RESTORE_FROM_FRIEND_SCRIPT_NAME [server]" >> /home/$MY_USERNAME/README
  4144. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  4145. chmod 600 /home/$MY_USERNAME/README
  4146. fi
  4147. echo '#!/bin/bash' > /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4148. echo 'SERVER_NAME=$1' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4149. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4150. echo "MY_USERNAME=$MY_USERNAME" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4151. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4152. echo '# Temporary location for data to be backed up to other servers' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4153. echo 'SERVER_DIRECTORY=/root/remoterestore' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4154. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4155. echo 'if [ ! $SERVER_NAME ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4156. echo " echo '$RESTORE_FROM_FRIEND_SCRIPT_NAME [server]'" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4157. echo ' exit 1' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4158. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4159. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4160. echo "if [ ! -f $FRIENDS_SERVERS_LIST ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4161. echo " echo 'No friends list found at $FRIENDS_SERVERS_LIST'" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4162. echo ' exit 2' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4163. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4164. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4165. echo -n 'if ! grep -q "$SERVER_NAME" ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4166. echo "$FRIENDS_SERVERS_LIST; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4167. echo ' echo "Server not found within the friends list"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4168. echo ' exit 3' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4169. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4170. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4171. echo -n 'REMOTE_SERVER=$(grep -i "$SERVER_NAME" ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4172. echo -n "$FRIENDS_SERVERS_LIST | awk -F ' ' '{print " >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4173. echo -n '$1' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4174. echo "}')" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4175. echo -n 'REMOTE_SSH_PORT=$(grep -i "$SERVER_NAME" ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4176. echo -n "$FRIENDS_SERVERS_LIST | awk -F ' ' '{print " >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4177. echo -n '$2' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4178. echo "}')" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4179. echo -n 'REMOTE_PASSWORD=$(grep -i "$SERVER_NAME" ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4180. echo -n "$FRIENDS_SERVERS_LIST | awk -F ' ' '{print " >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4181. echo -n '$3' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4182. echo "}')" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4183. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4184. echo '# Check that a backup key exists' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4185. echo "if [ ! -f $BACKUP_CERTIFICATE ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4186. echo " echo 'No backup key was found in $BACKUP_CERTIFICATE'" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4187. echo ' exit 84' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4188. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4189. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4190. # Rsync from the remote server back to this server
  4191. echo 'NOW=$(date +"%Y-%m-%d %H:%M:%S")' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4192. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4193. echo -n 'echo "$NOW Starting restore from $REMOTE_SERVER" >> ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4194. echo "$REMOTE_BACKUPS_LOG" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4195. echo -n 'rsync -ratlzv --rsh="/usr/bin/sshpass -p $REMOTE_PASSWORD ssh -p $REMOTE_SSH_PORT -o StrictHostKeyChecking=no" ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4196. echo '$REMOTE_SERVER/backup $SERVER_DIRECTORY' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4197. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4198. echo -n ' echo "$NOW Restore from $REMOTE_SERVER failed" >> ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4199. echo "$REMOTE_BACKUPS_LOG" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4200. echo ' # Send a warning email' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4201. echo -n ' echo "Restore from $REMOTE_SERVER failed" | mail -s "Freedombone restore from friend" ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4202. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4203. echo ' exit 790' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4204. echo 'else' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4205. echo -n ' echo "$NOW Restored encrypted data from $REMOTE_SERVER" >> ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4206. echo "$REMOTE_BACKUPS_LOG" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4207. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4208. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4209. echo '# MariaDB password' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4210. echo -n 'DATABASE_PASSWORD=$(cat ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4211. echo "$DATABASE_PASSWORD_FILE)" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4212. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4213. echo 'if [ -d $SERVER_DIRECTORY/backup/mariadb ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4214. echo ' echo "Restoring mysql settings"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4215. echo ' if [ ! -d /root/tempmariadb ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4216. echo ' mkdir /root/tempmariadb' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4217. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4218. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/mariadb /root/tempmariadb $SERVER_DIRECTORY/backup/mariadb.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4219. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4220. echo ' echo "Get the MariaDB password from the backup"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4221. echo ' if [ ! -f /root/tempmariadb/remoterestore/backup/mariadb/tempmariadb/db ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4222. echo ' echo "MariaDB password file not found"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4223. echo ' exit 495' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4224. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4225. echo ' BACKUP_MARIADB_PASSWORD=$(cat /root/tempmariadb/remoterestore/backup/mariadb/tempmariadb/db)' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4226. echo ' if [[ $BACKUP_MARIADB_PASSWORD != $DATABASE_PASSWORD ]]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4227. echo ' echo "Restore the MariaDB user table"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4228. echo ' mysqlsuccess=$(mysql -u root --password=$DATABASE_PASSWORD mysql -o < /root/tempmariadb/remoterestore/backup/mariadb/tempmariadb/mysql.sql)' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4229. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4230. echo ' echo "Try again using the password obtained from backup"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4231. echo ' mysqlsuccess=$(mysql -u root --password=$BACKUP_MARIADB_PASSWORD mysql -o < /root/tempmariadb/remoterestore/backup/mariadb/tempmariadb/mysql.sql)' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4232. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4233. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4234. echo ' echo "$mysqlsuccess"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4235. echo ' exit 962' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4236. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4237. echo ' echo "Restarting database"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4238. echo ' service mysql restart' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4239. echo ' echo "Change the MariaDB password to the backup version"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4240. echo ' DATABASE_PASSWORD=$BACKUP_MARIADB_PASSWORD' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4241. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4242. echo ' shred -zu /root/tempmariadb/remoterestore/backup/mariadb/tempmariadb/db' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4243. echo ' rm -rf /root/tempmariadb' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4244. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4245. echo ' # Change database password file' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4246. echo -n ' echo "$DATABASE_PASSWORD" > ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4247. echo "$DATABASE_PASSWORD_FILE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4248. echo " chmod 600 $DATABASE_PASSWORD_FILE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4249. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4250. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4251. echo 'if [ -d $SERVER_DIRECTORY/backup/mutt ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4252. echo ' echo "Restoring Mutt settings"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4253. echo ' mkdir /root/tempmutt' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4254. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/mutt /root/tempmutt $SERVER_DIRECTORY/backup/mutt.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4255. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4256. echo ' if [ -f /root/tempmutt/remoterestore/backup/mutt/$MY_USERNAME/tempbackup/.muttrc ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4257. echo ' cp -f /root/tempmutt/remoterestore/backup/mutt/$MY_USERNAME/tempbackup/.muttrc /home/$MY_USERNAME/.muttrc' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4258. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4259. echo ' if [ -f /root/tempmutt/remoterestore/backup/mutt/$MY_USERNAME/tempbackup/Muttrc ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4260. echo ' cp -f /root/tempmutt/remoterestore/backup/mutt/$MY_USERNAME/tempbackup/Muttrc /etc/Muttrc' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4261. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4262. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4263. echo ' rm -rf /root/tempmutt' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4264. echo ' exit 276' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4265. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4266. echo ' rm -rf /root/tempmutt' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4267. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4268. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4269. echo 'if [ -d $SERVER_DIRECTORY/backup/gnupg ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4270. echo ' echo "Restoring gnupg settings"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4271. echo ' mkdir /root/tempgnupg' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4272. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/gnupg /root/tempgnupg $SERVER_DIRECTORY/backup/gnupg.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4273. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4274. echo ' cp -r /root/tempgnupg/remoterestore/backup/gnupg/$MY_USERNAME/.gnupg /home/$MY_USERNAME/' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4275. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4276. echo ' rm -rf /root/tempgnupg' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4277. echo ' exit 276' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4278. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4279. echo ' rm -rf /root/tempgnupg' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4280. echo ' cp -r /home/$MY_USERNAME/.gnupg /root' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4281. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4282. echo ' exit 283' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4283. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4284. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4285. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4286. echo 'if [ -d $SERVER_DIRECTORY/backup/procmail ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4287. echo ' echo "Restoring procmail settings"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4288. echo ' mkdir /root/tempprocmail' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4289. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/procmail /root/tempprocmail $SERVER_DIRECTORY/backup/procmail.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4290. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4291. echo ' cp -f /root/tempprocmail/remoterestore/backup/procmail/$MY_USERNAME/tempbackup/.procmailrc /home/$MY_USERNAME/' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4292. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4293. echo ' rm -rf /root/tempprocmail' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4294. echo ' exit 276' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4295. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4296. echo ' rm -rf /root/tempprocmail' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4297. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4298. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4299. echo 'if [ -d $SERVER_DIRECTORY/backup/spamassassin ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4300. echo ' echo "Restoring spamassassin settings"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4301. echo ' mkdir /root/tempspamassassin' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4302. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/spamassassin /root/tempspamassassin $SERVER_DIRECTORY/backup/spamassassin.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4303. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4304. echo ' cp -rf /root/tempspamassassin/remoterestore/backup/spamassassin/$MY_USERNAME/.spamassassin /home/$MY_USERNAME/' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4305. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4306. echo ' rm -rf /root/tempspamassassin' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4307. echo ' exit 276' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4308. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4309. echo ' rm -rf /root/tempspamassassin' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4310. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4311. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4312. echo 'if [ -d $SERVER_DIRECTORY/backup/readme ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4313. echo ' echo "Restoring README"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4314. echo ' mkdir /root/tempreadme' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4315. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/readme /root/tempreadme $SERVER_DIRECTORY/backup/readme.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4316. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4317. echo ' cp -f /root/tempreadme/remoterestore/backup/readme/$MY_USERNAME/tempbackup/README /home/$MY_USERNAME/' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4318. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4319. echo ' rm -rf /root/tempreadme' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4320. echo ' exit 276' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4321. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4322. echo ' rm -rf /root/tempreadme' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4323. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4324. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4325. echo 'if [ -d $SERVER_DIRECTORY/backup/ssh ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4326. echo ' echo "Restoring ssh keys"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4327. echo ' mkdir /root/tempssh' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4328. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/ssh /root/tempssh $SERVER_DIRECTORY/backup/ssh.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4329. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4330. echo ' cp -r /root/tempssh/remoterestore/backup/ssh/$MY_USERNAME/.ssh /home/$MY_USERNAME/' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4331. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4332. echo ' rm -rf /root/tempssh' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4333. echo ' exit 664' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4334. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4335. echo ' rm -rf /root/tempssh' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4336. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4337. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4338. echo 'if [ -d $SERVER_DIRECTORY/backup/ssl ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4339. echo ' echo "Restoring certificates"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4340. echo ' mkdir /root/tempssl' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4341. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/ssl /root/tempssl $SERVER_DIRECTORY/backup/ssl.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4342. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4343. echo ' cp -r /root/tempssl/remoterestore/backup/ssl/ssl/* /etc/ssl' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4344. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4345. echo ' exit 276' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4346. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4347. echo ' rm -rf /root/tempssl' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4348. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4349. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4350. echo 'if [ -d $SERVER_DIRECTORY/backup/projects ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4351. echo ' echo "Restoring projects"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4352. echo ' mkdir /root/tempprojects' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4353. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/projects /root/tempprojects $SERVER_DIRECTORY/backup/projects.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4354. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4355. echo ' if [ -d /home/$MY_USERNAME/projects ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4356. echo ' rm -rf /home/$MY_USERNAME/projects' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4357. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4358. echo ' mv /root/tempprojects/remoterestore/backup/projects/$MY_USERNAME/projects /home/$MY_USERNAME' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4359. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4360. echo ' exit 166' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4361. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4362. echo ' rm -rf /root/tempprojects' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4363. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4364. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4365. echo 'if [ -d $SERVER_DIRECTORY/backup/personal ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4366. echo ' echo "Restoring personal settings"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4367. echo ' mkdir /root/temppersonal' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4368. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/personal /root/temppersonal $SERVER_DIRECTORY/backup/personal.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4369. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4370. echo ' if [ -d /home/$MY_USERNAME/personal ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4371. echo ' rm -rf /home/$MY_USERNAME/personal' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4372. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4373. echo ' mv /root/temppersonal/remoterestore/backup/personal/$MY_USERNAME/personal /home/$MY_USERNAME' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4374. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4375. echo ' exit 184' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4376. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4377. echo ' rm -rf /root/temppersonal' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4378. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4379. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4380. echo "if [ -d $PUBLIC_MAILING_LIST_DIRECTORY ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4381. echo ' echo "Restoring public mailing list"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4382. echo ' mkdir /root/tempmailinglist' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4383. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/mailinglist /root/tempmailinglist $SERVER_DIRECTORY/backup/mailinglist.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4384. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4385. echo " cp -r /root/tempmailinglist/remoterestore/backup/mailinglist/spool/mlmmj/* $PUBLIC_MAILING_LIST_DIRECTORY" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4386. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4387. echo ' exit 526' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4388. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4389. echo ' rm -rf /root/tempmailinglist' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4390. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4391. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4392. echo "if [ -d $XMPP_DIRECTORY ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4393. echo ' echo "Restoring XMPP settings"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4394. echo ' mkdir /root/tempxmpp' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4395. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/xmpp /root/tempxmpp $SERVER_DIRECTORY/backup/xmpp.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4396. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4397. echo " cp -r /root/tempxmpp/remoterestore/backup/xmpp/lib/prosody/* $XMPP_DIRECTORY" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4398. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4399. echo ' exit 725' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4400. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4401. echo ' rm -rf /root/tempxmpp' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4402. echo ' service prosody restart' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4403. echo ' chown -R prosody:prosody /var/lib/prosody/*' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4404. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4405. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4406. BACKUP_INCLUDES_WEBSITES="no"
  4407. if grep -Fxq "install_gnu_social" $COMPLETION_FILE; then
  4408. BACKUP_INCLUDES_WEBSITES="yes"
  4409. echo 'if [ -d $SERVER_DIRECTORY/backup/gnusocial ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4410. echo ' echo "Restoring microblog database"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4411. echo ' if [ ! -d /root/tempgnusocialdata ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4412. echo ' mkdir /root/tempgnusocialdata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4413. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4414. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/gnusocialdata /root/tempgnusocialdata $SERVER_DIRECTORY/backup/gnusocialdata.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4415. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4416. echo ' if [ ! -f /root/tempgnusocialdata/remoterestore/backup/gnusocialdata/tempgnusocialdata/gnusocial.sql ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4417. echo ' echo "Unable to restore microblog database"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4418. echo ' rm -rf /root/tempgnusocialdata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4419. echo ' exit 503' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4420. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4421. echo ' mysqlsuccess=$(mysql -u root --password=$DATABASE_PASSWORD gnusocial -o < /root/tempgnusocialdata/remoterestore/backup/gnusocialdata/tempgnusocialdata/gnusocial.sql)' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4422. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4423. echo ' echo "$mysqlsuccess"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4424. echo ' exit 964' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4425. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4426. echo ' shred -zu /root/tempgnusocialdata/remoterestore/backup/gnusocialdata/tempgnusocialdata/*' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4427. echo ' rm -rf /root/tempgnusocialdata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4428. echo ' echo "Restoring microblog installation"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4429. echo ' if [ ! -d /root/tempgnusocial ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4430. echo ' mkdir /root/tempgnusocial' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4431. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4432. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/gnusocial /root/tempgnusocial $SERVER_DIRECTORY/backup/gnusocial.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4433. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4434. echo " rm -rf /var/www/$MICROBLOG_DOMAIN_NAME/htdocs" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4435. echo " mv /root/tempgnusocial/remoterestore/backup/gnusocial/www/$MICROBLOG_DOMAIN_NAME/htdocs /var/www/$MICROBLOG_DOMAIN_NAME/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4436. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4437. echo ' exit 683' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4438. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4439. echo ' rm -rf /root/tempgnusocial' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4440. echo ' # Ensure that the bundled SSL cert is being used' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4441. echo " if [ -f /etc/ssl/certs/$MICROBLOG_DOMAIN_NAME.bundle.crt ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4442. echo " sed -i 's|$MICROBLOG_DOMAIN_NAME.crt|$MICROBLOG_DOMAIN_NAME.bundle.crt|g' /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4443. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4444. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4445. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4446. fi
  4447. if grep -Fxq "install_redmatrix" $COMPLETION_FILE; then
  4448. BACKUP_INCLUDES_WEBSITES="yes"
  4449. echo 'if [ -d $SERVER_DIRECTORY/backup/redmatrix ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4450. echo ' echo "Restoring Red Matrix database"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4451. echo ' if [ ! -d /root/tempredmatrixdata ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4452. echo ' mkdir /root/tempredmatrixdata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4453. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4454. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/redmatrixdata /root/tempredmatrixdata $SERVER_DIRECTORY/backup/redmatrixdata.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4455. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4456. echo ' if [ ! -f /root/tempredmatrixdata/remoterestore/backup/redmatrixdata/tempredmatrixdata/redmatrix.sql ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4457. echo ' echo "Unable to restore Red Matrix database"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4458. echo ' rm -rf /root/tempredmatrixdata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4459. echo ' exit 504' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4460. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4461. echo ' mysqlsuccess=$(mysql -u root --password=$DATABASE_PASSWORD redmatrix -o < /root/tempredmatrixdata/remoterestore/backup/redmatrixdata/tempredmatrixdata/redmatrix.sql)' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4462. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4463. echo ' echo "$mysqlsuccess"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4464. echo ' exit 965' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4465. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4466. echo ' shred -zu /root/tempredmatrixdata/remoterestore/backup/redmatrixdata/tempredmatrixdata/*' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4467. echo ' rm -rf /root/tempredmatrixdata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4468. echo ' echo "Restoring Red Matrix installation"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4469. echo ' if [ ! -d /root/tempredmatrix ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4470. echo ' mkdir /root/tempredmatrix' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4471. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4472. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/redmatrix /root/tempredmatrix $SERVER_DIRECTORY/backup/redmatrix.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4473. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4474. echo " rm -rf /var/www/$REDMATRIX_DOMAIN_NAME/htdocs" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4475. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4476. echo " cp -r /root/tempredmatrix/remoterestore/backup/redmatrix/www/$REDMATRIX_DOMAIN_NAME/htdocs/* /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4477. echo ' else' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4478. echo " mv /root/tempredmatrix/remoterestore/backup/redmatrix/www/$REDMATRIX_DOMAIN_NAME/htdocs /var/www/$REDMATRIX_DOMAIN_NAME/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4479. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4480. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4481. echo ' exit 759' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4482. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4483. echo ' rm -rf /root/tempredmatrix' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4484. echo ' # Ensure that the bundled SSL cert is being used' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4485. echo " if [ -f /etc/ssl/certs/$REDMATRIX_DOMAIN_NAME.bundle.crt ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4486. echo " sed -i 's|$REDMATRIX_DOMAIN_NAME.crt|$REDMATRIX_DOMAIN_NAME.bundle.crt|g' /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4487. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4488. echo " chmod 777 /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/store/[data]/smarty3" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4489. echo " chown -R www-data:www-data /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/*" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4490. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4491. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4492. fi
  4493. if grep -Fxq "install_owncloud" $COMPLETION_FILE; then
  4494. BACKUP_INCLUDES_WEBSITES="yes"
  4495. echo 'if [ -d $SERVER_DIRECTORY/backup/owncloud ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4496. echo ' echo "Restoring owncloud database"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4497. echo ' if [ ! -d /root/tempownclouddata ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4498. echo ' mkdir /root/tempownclouddata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4499. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4500. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/ownclouddata /root/tempownclouddata $SERVER_DIRECTORY/backup/ownclouddata.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4501. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4502. echo ' if [ ! -f /root/tempownclouddata/remoterestore/backup/ownclouddata/tempownclouddata/owncloud.sql ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4503. echo ' echo "Unable to restore Owncloud database"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4504. echo ' rm -rf /root/tempownclouddata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4505. echo ' exit 505' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4506. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4507. echo ' mysqlsuccess=$(mysql -u root --password=$DATABASE_PASSWORD owncloud -o < /root/tempownclouddata/remoterestore/backup/ownclouddata/tempownclouddata/owncloud.sql)' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4508. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4509. echo ' echo "$mysqlsuccess"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4510. echo ' exit 965' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4511. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4512. echo ' echo "Restoring Owncloud installation"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4513. echo ' if [ ! -d /root/tempowncloud ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4514. echo ' mkdir /root/tempowncloud' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4515. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4516. echo ' if [ ! -d /root/tempowncloud2 ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4517. echo ' mkdir /root/tempowncloud2' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4518. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4519. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/owncloud /root/tempowncloud $SERVER_DIRECTORY/backup/owncloud.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4520. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4521. echo " cp -r /root/tempowncloud/remoterestore/backup/owncloud/lib/owncloud/* /var/lib/owncloud/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4522. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4523. echo ' exit 981' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4524. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4525. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/owncloud2 /root/tempowncloud2 $SERVER_DIRECTORY/backup/owncloud2.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4526. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4527. echo " cp -r /root/tempowncloud2/remoterestore/backup/owncloud2/owncloud/* /etc/owncloud/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4528. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4529. echo ' exit 982' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4530. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4531. echo ' rm -rf /root/tempowncloud' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4532. echo ' rm -rf /root/tempowncloud2' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4533. echo ' rm -rf /root/tempownclouddata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4534. echo ' chown -R www-data:www-data /var/lib/owncloud/data' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4535. echo ' chown -R www-data:www-data /var/lib/owncloud/backup' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4536. echo ' chown -R www-data:www-data /var/lib/owncloud/assets' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4537. echo ' occ files:scan $MY_USERNAME' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4538. echo ' # Ensure that the bundled SSL cert is being used' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4539. echo " if [ -f /etc/ssl/certs/$OWNCLOUD_DOMAIN_NAME.bundle.crt ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4540. echo " sed -i 's|$OWNCLOUD_DOMAIN_NAME.crt|$OWNCLOUD_DOMAIN_NAME.bundle.crt|g' /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4541. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4542. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4543. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4544. fi
  4545. if grep -Fxq "install_gogs" $COMPLETION_FILE; then
  4546. BACKUP_INCLUDES_WEBSITES="yes"
  4547. echo 'if [ -d $SERVER_DIRECTORY/backup/gogs ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4548. echo ' echo "Restoring gogs database"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4549. echo ' if [ ! -d /root/tempgogsdata ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4550. echo ' mkdir /root/tempgogsdata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4551. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4552. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/gogsdata /root/tempgogsdata $SERVER_DIRECTORY/backup/gogsdata.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4553. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4554. echo ' if [ ! -f /root/tempgogsdata/remoterestore/backup/gogsdata/tempgogsdata/gogs.sql ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4555. echo ' echo "Unable to restore Gogs database"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4556. echo ' rm -rf /root/tempgogsdata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4557. echo ' exit 8548' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4558. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4559. echo ' mysqlsuccess=$(mysql -u root --password=$DATABASE_PASSWORD gogs -o < /root/tempgogsdata/remoterestore/backup/gogsdata/tempgogsdata/gogs.sql)' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4560. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4561. echo ' echo "$mysqlsuccess"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4562. echo ' exit 3695' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4563. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4564. echo ' echo "Restoring Gogs settings"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4565. echo ' if [ ! -d /root/tempgogs ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4566. echo ' mkdir /root/tempgogs' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4567. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4568. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/gogs /root/tempgogs $SERVER_DIRECTORY/backup/gogs.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4569. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4570. echo ' if [ ! -d /home/git/go/src/github.com/gogits/gogs/custom ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4571. echo ' mkdir -p /home/git/go/src/github.com/gogits/gogs/custom' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4572. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4573. echo " cp -r /root/tempgogs/remoterestore/backup/gogs/git/go/src/github.com/gogits/gogs/custom/* /home/git/go/src/github.com/gogits/gogs/custom/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4574. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4575. echo ' exit 5885' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4576. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4577. echo ' echo "Restoring Gogs repos"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4578. echo ' if [ ! -d /root/tempgogsrepos ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4579. echo ' mkdir /root/tempgogsrepos' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4580. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4581. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/gogsrepos /root/tempgogsrepos $SERVER_DIRECTORY/backup/gogsrepos.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4582. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4583. echo " cp -r /root/tempgogsrepos/remoterestore/backup/gogsrepos/git/gogs-repositories/* /home/git/gogs-repositories/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4584. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4585. echo ' exit 7649' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4586. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4587. echo ' echo "Restoring Gogs authorized_keys"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4588. echo ' if [ ! -d /root/tempgogsssh ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4589. echo ' mkdir /root/tempgogsssh' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4590. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4591. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/gogsssh /root/tempgogsssh $SERVER_DIRECTORY/backup/gogsssh.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4592. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4593. echo ' if [ ! -d /home/git/.ssh ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4594. echo ' mkdir /home/git/.ssh' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4595. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4596. echo " cp -r /root/tempgogsssh/remoterestore/backup/gogsssh/git/.ssh/* /home/git/.ssh/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4597. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4598. echo ' exit 74239' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4599. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4600. echo ' rm -rf /root/tempgogs' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4601. echo ' rm -rf /root/tempgogsdata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4602. echo ' rm -rf /root/tempgogsrepos' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4603. echo ' rm -rf /root/tempgogsssh' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4604. echo ' chown -R git:git /home/git' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4605. echo ' # Ensure that the bundled SSL cert is being used' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4606. echo " if [ -f /etc/ssl/certs/$GIT_DOMAIN_NAME.bundle.crt ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4607. echo " sed -i 's|$GIT_DOMAIN_NAME.crt|$GIT_DOMAIN_NAME.bundle.crt|g' /etc/nginx/sites-available/$GIT_DOMAIN_NAME" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4608. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4609. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4610. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4611. fi
  4612. echo 'if [ -d $SERVER_DIRECTORY/backup/wiki ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4613. echo ' echo "Restoring Wiki installation"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4614. echo ' mkdir /root/tempwiki' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4615. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/wiki /root/tempwiki $SERVER_DIRECTORY/backup/wiki.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4616. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4617. echo " cp -r /root/tempwiki/remoterestore/backup/wiki/lib/dokuwiki/* /var/lib/dokuwiki/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4618. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4619. echo ' exit 868' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4620. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4621. echo ' mkdir /root/tempwiki2' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4622. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/wiki2 /root/tempwiki2 $SERVER_DIRECTORY/backup/wiki2.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4623. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4624. echo " cp -r /root/tempwiki2/remoterestore/backup/wiki2/dokuwiki/* /etc/dokuwiki/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4625. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4626. echo ' exit 869' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4627. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4628. echo ' rm -rf /root/tempwiki' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4629. echo ' rm -rf /root/tempwiki2' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4630. echo ' chown -R www-data:www-data /var/lib/dokuwiki/*' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4631. echo ' # Ensure that the bundled SSL cert is being used' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4632. echo " if [ -f /etc/ssl/certs/$WIKI_DOMAIN_NAME.bundle.crt ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4633. echo " sed -i 's|$WIKI_DOMAIN_NAME.crt|$WIKI_DOMAIN_NAME.bundle.crt|g' /etc/nginx/sites-available/$WIKI_DOMAIN_NAME" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4634. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4635. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4636. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4637. echo 'if [ -d $SERVER_DIRECTORY/backup/blog ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4638. echo ' echo "Restoring blog installation"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4639. echo ' mkdir /root/tempblog' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4640. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/blog /root/tempblog $SERVER_DIRECTORY/backup/blog.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4641. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4642. echo " rm -rf /var/www/$FULLBLOG_DOMAIN_NAME/htdocs" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4643. echo " cp -r /root/tempblog/remoterestore/backup/blog/www/$FULLBLOG_DOMAIN_NAME/htdocs /var/www/$FULLBLOG_DOMAIN_NAME/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4644. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4645. echo ' exit 593' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4646. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4647. echo ' rm -rf /root/tempblog' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4648. echo " if [ ! -d /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/content ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4649. echo ' echo "No content directory found after restoring blog"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4650. echo ' exit 287' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4651. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4652. echo ' # Ensure that the bundled SSL cert is being used' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4653. echo " if [ -f /etc/ssl/certs/$FULLBLOG_DOMAIN_NAME.bundle.crt ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4654. echo " sed -i 's|$FULLBLOG_DOMAIN_NAME.crt|$FULLBLOG_DOMAIN_NAME.bundle.crt|g' /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4655. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4656. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4657. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4658. echo 'if [ -d $SERVER_DIRECTORY/backup/cjdns ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4659. echo ' echo "Restoring cjdns installation"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4660. echo ' mkdir /root/tempcjdns' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4661. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/cjdns /root/tempcjdns $SERVER_DIRECTORY/backup/cjdns.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4662. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4663. echo " rm -rf /etc/cjdns" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4664. echo " cp -r /root/tempcjdns/remoterestore/backup/cjdns/cjdns /etc/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4665. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4666. echo ' exit 7438' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4667. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4668. echo ' rm -rf /root/tempcjdns' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4669. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4670. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4671. echo 'if [ -d $SERVER_DIRECTORY/backup/voip ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4672. echo ' echo "Restoring VoIP settings"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4673. echo ' mkdir /root/tempvoip' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4674. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/voip /root/tempvoip $SERVER_DIRECTORY/backup/voip.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4675. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4676. echo -n ' cp -f /root/tempvoip/remoterestore/backup/voip/$MY_USERNAME/tempbackup/' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4677. echo "$VOIP_CONFIG_FILE /etc/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4678. echo -n ' cp -f /root/tempvoip/remoterestore/backup/voip/$MY_USERNAME/tempbackup/' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4679. echo "$VOIP_DATABASE /var/lib/mumble-server/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4680. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4681. echo ' rm -rf /root/tempvoip' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4682. echo ' exit 276' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4683. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4684. echo ' rm -rf /root/tempvoip' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4685. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4686. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4687. echo 'if [ -d $SERVER_DIRECTORY/backup/tox ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4688. echo ' echo "Restoring Tox node settings"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4689. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/tox /var/lib/tox-bootstrapd $SERVER_DIRECTORY/backup/tox.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4690. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4691. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4692. echo ' exit 93653' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4693. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4694. echo ' cp /var/lib/tox-bootstrapd/tox-bootstrapd.conf /etc/tox-bootstrapd.conf' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4695. echo ' systemctl restart tox-bootstrapd.service' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4696. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4697. echo ' systemctl status tox-bootstrapd.service' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4698. echo ' exit 59369' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4699. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4700. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4701. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4702. echo 'if [ -d $SERVER_DIRECTORY/backup/mail ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4703. echo ' echo "Restoring emails"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4704. echo ' mkdir /root/tempmail' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4705. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/mail /root/tempmail $SERVER_DIRECTORY/backup/mail.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4706. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4707. echo ' if [ ! -d /home/$MY_USERNAME/Maildir ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4708. echo ' mkdir /home/$MY_USERNAME/Maildir' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4709. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4710. echo ' tar -xzvf /root/tempmail/usb/backup/mail/backupemail/maildir.tar.gz -C /' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4711. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4712. echo ' exit 927' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4713. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4714. echo ' rm -rf /root/tempmail' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4715. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4716. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4717. echo "if [ -d /var/cache/minidlna ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4718. echo ' if [ -d $SERVER_DIRECTORY/backup/dlna ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4719. echo ' echo "Restoring DLNA cache"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4720. echo ' mkdir /root/tempdlna' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4721. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/dlna /root/tempdlna $SERVER_DIRECTORY/backup/dlna.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4722. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4723. echo " cp -r /root/tempdlna/remoterestore/backup/dlna/cache/minidlna/* /var/cache/minidlna/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4724. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4725. echo ' exit 982' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4726. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4727. echo ' rm -rf /root/tempdlna' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4728. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4729. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4730. if [[ $ENABLE_SOCIAL_KEY_MANAGEMENT == "yes" ]]; then
  4731. echo '' >> /usr/bin/$RESTORE_FROM_FRIENDS_SCRIPT_NAME
  4732. echo '# Retrieve key fragments' >> /usr/bin/$RESTORE_FROM_FRIENDS_SCRIPT_NAME
  4733. echo -n '/usr/bin/sshpass -p $REMOTE_PASSWORD ' >> /usr/bin/$RESTORE_FROM_FRIENDS_SCRIPT_NAME
  4734. echo -n "scp -r -P $REMOTE_SSH_PORT $REMOTE_SERVER/.gnupg_fragments " >> /usr/bin/$RESTORE_FROM_FRIENDS_SCRIPT_NAME
  4735. echo '/home/$MY_USERNAME/' >> /usr/bin/$RESTORE_FROM_FRIENDS_SCRIPT_NAME
  4736. fi
  4737. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4738. echo 'echo "*** Remote restore was successful ***"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4739. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4740. echo 'exit 0' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4741. chmod 400 /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4742. chmod +x /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  4743. echo 'restore_from_friend' >> $COMPLETION_FILE
  4744. }
  4745. function remove_default_user {
  4746. # make sure you don't use the default user account
  4747. if [[ $MY_USERNAME == "debian" ]]; then
  4748. echo 'Do not use the default debian user account. Create a different user with: adduser [username]'
  4749. exit 68
  4750. fi
  4751. # remove the default debian user to prevent it from becoming an attack vector
  4752. if [ -d /home/debian ]; then
  4753. userdel -r debian
  4754. echo 'Default debian user account removed'
  4755. fi
  4756. }
  4757. function enforce_good_passwords {
  4758. # because humans are generally bad at choosing passwords
  4759. if grep -Fxq "enforce_good_passwords" $COMPLETION_FILE; then
  4760. return
  4761. fi
  4762. apt-get -y install libpam-cracklib
  4763. sed -i 's/password.*requisite.*pam_cracklib.so.*/password required pam_cracklib.so retry=2 dcredit=-4 ucredit=-1 ocredit=-1 lcredit=0 minlen=10 reject_username/g' /etc/pam.d/common-password
  4764. echo 'enforce_good_passwords' >> $COMPLETION_FILE
  4765. }
  4766. function change_login_message {
  4767. if grep -Fxq "change_login_message" $COMPLETION_FILE; then
  4768. return
  4769. fi
  4770. echo '' > /etc/motd
  4771. echo ".---. . . " >> /etc/motd
  4772. echo "| | | " >> /etc/motd
  4773. echo "|--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-. " >> /etc/motd
  4774. echo "| | (.-' (.-' ( | ( )| | | | )( )| | (.-' " >> /etc/motd
  4775. echo "' ' --' --' -' - -' ' ' -' -' -' ' - --'" >> /etc/motd
  4776. if [[ $SYSTEM_TYPE == "$VARIANT_MAILBOX" ]]; then
  4777. echo ' M A I L B O X E D I T I O N' >> /etc/motd
  4778. fi
  4779. if [[ $SYSTEM_TYPE == "$VARIANT_SOCIAL" ]]; then
  4780. echo ' S O C I A L E D I T I O N' >> /etc/motd
  4781. fi
  4782. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" ]]; then
  4783. echo ' C H A T E D I T I O N' >> /etc/motd
  4784. fi
  4785. if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" ]]; then
  4786. echo ' C L O U D E D I T I O N' >> /etc/motd
  4787. fi
  4788. if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" ]]; then
  4789. echo ' W R I T E R E D I T I O N ' >> /etc/motd
  4790. fi
  4791. if [[ $SYSTEM_TYPE == "$VARIANT_MEDIA" ]]; then
  4792. echo ' M E D I A E D I T I O N' >> /etc/motd
  4793. fi
  4794. if [[ $SYSTEM_TYPE == "$VARIANT_DEVELOPER" ]]; then
  4795. echo ' D E V E L O P E R E D I T I O N' >> /etc/motd
  4796. fi
  4797. if [[ $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  4798. echo ' M E S H E D I T I O N' >> /etc/motd
  4799. fi
  4800. echo '' >> /etc/motd
  4801. echo ' Freedom in the Cloud' >> /etc/motd
  4802. echo '' >> /etc/motd
  4803. echo 'change_login_message' >> $COMPLETION_FILE
  4804. }
  4805. function search_for_attached_usb_drive {
  4806. # If a USB drive is attached then search for email,
  4807. # gpg, ssh keys and emacs configuration
  4808. if grep -Fxq "search_for_attached_usb_drive" $COMPLETION_FILE; then
  4809. return
  4810. fi
  4811. if [ -b $USB_DRIVE ]; then
  4812. if [ ! -d $USB_MOUNT ]; then
  4813. echo 'Mounting USB drive'
  4814. mkdir $USB_MOUNT
  4815. mount $USB_DRIVE $USB_MOUNT
  4816. fi
  4817. if ! [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" || $SYSTEM_TYPE == "$VARIANT_MESH" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" ]]; then
  4818. if [ -d $USB_MOUNT/Maildir ]; then
  4819. echo 'Maildir found on USB drive'
  4820. IMPORT_MAILDIR=$USB_MOUNT/Maildir
  4821. fi
  4822. if [ -d $USB_MOUNT/.gnupg ]; then
  4823. echo 'Importing GPG keyring'
  4824. cp -r $USB_MOUNT/.gnupg /home/$MY_USERNAME
  4825. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.gnupg
  4826. GPG_KEYS_IMPORTED="yes"
  4827. if [ ! -f /home/$MY_USERNAME/.gnupg/secring.gpg ]; then
  4828. echo 'GPG files did not copy'
  4829. exit 73529
  4830. fi
  4831. fi
  4832. if [ -f $USB_MOUNT/.procmailrc ]; then
  4833. echo 'Importing procmail settings'
  4834. cp $USB_MOUNT/.procmailrc /home/$MY_USERNAME
  4835. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.procmailrc
  4836. fi
  4837. if [ -f $USB_MOUNT/private_key.gpg ]; then
  4838. echo 'GPG private key found on USB drive'
  4839. MY_GPG_PRIVATE_KEY=$USB_MOUNT/private_key.gpg
  4840. fi
  4841. if [ -f $USB_MOUNT/public_key.gpg ]; then
  4842. echo 'GPG public key found on USB drive'
  4843. MY_GPG_PUBLIC_KEY=$USB_MOUNT/public_key.gpg
  4844. fi
  4845. fi
  4846. if [ -d $USB_MOUNT/prosody ]; then
  4847. if [ ! -d $XMPP_DIRECTORY ]; then
  4848. mkdir $XMPP_DIRECTORY
  4849. fi
  4850. cp -r $USB_MOUNT/prosody/* $XMPP_DIRECTORY
  4851. chown -R prosody:prosody $XMPP_DIRECTORY
  4852. fi
  4853. if [ -d $USB_MOUNT/.ssh ]; then
  4854. echo 'Importing ssh keys'
  4855. cp -r $USB_MOUNT/.ssh /home/$MY_USERNAME
  4856. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.ssh
  4857. # for security delete the ssh keys from the usb drive
  4858. if [ ! -f /home/$MY_USERNAME/.ssh/id_rsa ]; then
  4859. echo 'ssh files did not copy'
  4860. exit 8
  4861. fi
  4862. fi
  4863. if [ -f $USB_MOUNT/.emacs ]; then
  4864. echo 'Importing .emacs file'
  4865. cp -f $USB_MOUNT/.emacs /home/$MY_USERNAME/.emacs
  4866. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.emacs
  4867. fi
  4868. if [ -d $USB_MOUNT/.emacs.d ]; then
  4869. echo 'Importing .emacs.d directory'
  4870. cp -r $USB_MOUNT/.emacs.d /home/$MY_USERNAME
  4871. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.emacs.d
  4872. fi
  4873. if [ -d $USB_MOUNT/ssl ]; then
  4874. echo 'Importing SSL certificates'
  4875. cp -r $USB_MOUNT/ssl/* /etc/ssl
  4876. chmod 640 /etc/ssl/certs/*
  4877. chmod 400 /etc/ssl/private/*
  4878. # change ownership of some certificates
  4879. if [ -d /etc/prosody ]; then
  4880. chown prosody:prosody /etc/ssl/private/xmpp.*
  4881. chown prosody:prosody /etc/ssl/certs/xmpp.*
  4882. fi
  4883. if [ -d /etc/dovecot ]; then
  4884. chown root:dovecot /etc/ssl/certs/dovecot.*
  4885. chown root:dovecot /etc/ssl/private/dovecot.*
  4886. fi
  4887. if [ -f /etc/ssl/private/exim.key ]; then
  4888. chown root:Debian-exim /etc/ssl/private/exim.key /etc/ssl/certs/exim.crt /etc/ssl/certs/exim.dhparam
  4889. fi
  4890. fi
  4891. if [ -d $USB_MOUNT/personal ]; then
  4892. echo 'Importing personal directory'
  4893. cp -r $USB_MOUNT/personal /home/$MY_USERNAME
  4894. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/personal
  4895. fi
  4896. else
  4897. if [ -d $USB_MOUNT ]; then
  4898. umount $USB_MOUNT
  4899. rm -rf $USB_MOUNT
  4900. fi
  4901. echo 'No USB drive attached'
  4902. fi
  4903. echo 'search_for_attached_usb_drive' >> $COMPLETION_FILE
  4904. }
  4905. function remove_proprietary_repos {
  4906. if grep -Fxq "remove_proprietary_repos" $COMPLETION_FILE; then
  4907. return
  4908. fi
  4909. sed -i 's/ non-free//g' /etc/apt/sources.list
  4910. echo 'remove_proprietary_repos' >> $COMPLETION_FILE
  4911. }
  4912. function change_debian_repos {
  4913. if grep -Fxq "change_debian_repos" $COMPLETION_FILE; then
  4914. return
  4915. fi
  4916. rm -rf /var/lib/apt/lists/*
  4917. apt-get clean
  4918. sed -i "s/ftp.us.debian.org/$DEBIAN_REPO/g" /etc/apt/sources.list
  4919. # ensure that there is a security repo
  4920. if ! grep -q "security" /etc/apt/sources.list; then
  4921. echo "deb http://security.debian.org/ $DEBIAN_VERSION/updates main contrib" >> /etc/apt/sources.list
  4922. echo "#deb-src http://security.debian.org/ $DEBIAN_VERSION/updates main contrib" >> /etc/apt/sources.list
  4923. fi
  4924. apt-get update
  4925. apt-get -y install apt-transport-https
  4926. echo 'change_debian_repos' >> $COMPLETION_FILE
  4927. }
  4928. function initial_setup {
  4929. if grep -Fxq "initial_setup" $COMPLETION_FILE; then
  4930. return
  4931. fi
  4932. apt-get -y remove --purge apache*
  4933. apt-get -y dist-upgrade
  4934. apt-get -y install ca-certificates emacs24 cpulimit
  4935. echo 'initial_setup' >> $COMPLETION_FILE
  4936. }
  4937. function install_editor {
  4938. if grep -Fxq "install_editor" $COMPLETION_FILE; then
  4939. return
  4940. fi
  4941. update-alternatives --set editor /usr/bin/emacs24
  4942. # A minimal emacs configuration
  4943. #echo -n "(add-to-list 'load-path " > /home/$MY_USERNAME/.emacs
  4944. #echo '"~/.emacs.d/")' >> /home/$MY_USERNAME/.emacs
  4945. #echo '' >> /home/$MY_USERNAME/.emacs
  4946. echo ';; ===== Remove trailing whitepace ======================================' >> /home/$MY_USERNAME/.emacs
  4947. echo '' >> /home/$MY_USERNAME/.emacs
  4948. echo ";;(add-hook 'before-save-hook 'delete-trailing-whitespace)" >> /home/$MY_USERNAME/.emacs
  4949. echo '' >> /home/$MY_USERNAME/.emacs
  4950. echo ';; Goto a line number with CTRL-l' >> /home/$MY_USERNAME/.emacs
  4951. echo -n '(global-set-key "\C-l" ' >> /home/$MY_USERNAME/.emacs
  4952. echo "'goto-line)" >> /home/$MY_USERNAME/.emacs
  4953. echo '' >> /home/$MY_USERNAME/.emacs
  4954. echo ';; ===== Show line numbers ==============================================' >> /home/$MY_USERNAME/.emacs
  4955. echo '' >> /home/$MY_USERNAME/.emacs
  4956. echo "(add-hook 'find-file-hook (lambda () (linum-mode 1)))" >> /home/$MY_USERNAME/.emacs
  4957. echo '' >> /home/$MY_USERNAME/.emacs
  4958. echo ';; ===== Enable line wrapping in org-mode ===============================' >> /home/$MY_USERNAME/.emacs
  4959. echo '' >> /home/$MY_USERNAME/.emacs
  4960. echo " (add-hook 'org-mode-hook" >> /home/$MY_USERNAME/.emacs
  4961. echo " '(lambda ()" >> /home/$MY_USERNAME/.emacs
  4962. echo " (visual-line-mode 1)))" >> /home/$MY_USERNAME/.emacs
  4963. echo '' >> /home/$MY_USERNAME/.emacs
  4964. echo ';; ===== Enable shift select in org mode ================================' >> /home/$MY_USERNAME/.emacs
  4965. echo '' >> /home/$MY_USERNAME/.emacs
  4966. echo '(setq org-support-shift-select t)' >> /home/$MY_USERNAME/.emacs
  4967. echo '' >> /home/$MY_USERNAME/.emacs
  4968. echo ';; ===== Set standard indent to 4 rather that 4 =========================' >> /home/$MY_USERNAME/.emacs
  4969. echo '' >> /home/$MY_USERNAME/.emacs
  4970. echo '(setq standard-indent 4)' >> /home/$MY_USERNAME/.emacs
  4971. echo '(setq-default tab-width 4)' >> /home/$MY_USERNAME/.emacs
  4972. echo '(setq c-basic-offset 4)' >> /home/$MY_USERNAME/.emacs
  4973. echo '' >> /home/$MY_USERNAME/.emacs
  4974. echo ';; ===== Support Wheel Mouse Scrolling ==================================' >> /home/$MY_USERNAME/.emacs
  4975. echo '' >> /home/$MY_USERNAME/.emacs
  4976. echo '(mouse-wheel-mode t)' >> /home/$MY_USERNAME/.emacs
  4977. echo '' >> /home/$MY_USERNAME/.emacs
  4978. echo ';; ===== Place Backup Files in Specific Directory =======================' >> /home/$MY_USERNAME/.emacs
  4979. echo '' >> /home/$MY_USERNAME/.emacs
  4980. echo '(setq make-backup-files t)' >> /home/$MY_USERNAME/.emacs
  4981. echo '(setq version-control t)' >> /home/$MY_USERNAME/.emacs
  4982. echo '(setq backup-directory-alist (quote ((".*" . "~/.emacs_backups/"))))' >> /home/$MY_USERNAME/.emacs
  4983. echo '' >> /home/$MY_USERNAME/.emacs
  4984. echo ';; ===== Make Text mode the default mode for new buffers ================' >> /home/$MY_USERNAME/.emacs
  4985. echo '' >> /home/$MY_USERNAME/.emacs
  4986. echo "(setq default-major-mode 'text-mode)" >> /home/$MY_USERNAME/.emacs
  4987. echo '' >> /home/$MY_USERNAME/.emacs
  4988. echo ';; ===== Line length ====================================================' >> /home/$MY_USERNAME/.emacs
  4989. echo '' >> /home/$MY_USERNAME/.emacs
  4990. echo '(setq-default fill-column 72)' >> /home/$MY_USERNAME/.emacs
  4991. echo '' >> /home/$MY_USERNAME/.emacs
  4992. echo ';; ===== Enable Line and Column Numbering ===============================' >> /home/$MY_USERNAME/.emacs
  4993. echo '' >> /home/$MY_USERNAME/.emacs
  4994. echo '(line-number-mode 1)' >> /home/$MY_USERNAME/.emacs
  4995. echo '(column-number-mode 1)' >> /home/$MY_USERNAME/.emacs
  4996. echo '' >> /home/$MY_USERNAME/.emacs
  4997. echo ';; ===== Turn on Auto Fill mode automatically in all modes ==============' >> /home/$MY_USERNAME/.emacs
  4998. echo '' >> /home/$MY_USERNAME/.emacs
  4999. echo ';; Auto-fill-mode the the automatic wrapping of lines and insertion of' >> /home/$MY_USERNAME/.emacs
  5000. echo ';; newlines when the cursor goes over the column limit.' >> /home/$MY_USERNAME/.emacs
  5001. echo '' >> /home/$MY_USERNAME/.emacs
  5002. echo ';; This should actually turn on auto-fill-mode by default in all major' >> /home/$MY_USERNAME/.emacs
  5003. echo ';; modes. The other way to do this is to turn on the fill for specific modes' >> /home/$MY_USERNAME/.emacs
  5004. echo ';; via hooks.' >> /home/$MY_USERNAME/.emacs
  5005. echo '' >> /home/$MY_USERNAME/.emacs
  5006. echo '(setq auto-fill-mode 1)' >> /home/$MY_USERNAME/.emacs
  5007. echo '' >> /home/$MY_USERNAME/.emacs
  5008. echo ';; ===== Enable GPG encryption =========================================' >> /home/$MY_USERNAME/.emacs
  5009. echo '' >> /home/$MY_USERNAME/.emacs
  5010. echo "(require 'epa)" >> /home/$MY_USERNAME/.emacs
  5011. echo '(epa-file-enable)' >> /home/$MY_USERNAME/.emacs
  5012. cp /home/$MY_USERNAME/.emacs /root/.emacs
  5013. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.emacs
  5014. echo 'install_editor' >> $COMPLETION_FILE
  5015. }
  5016. function enable_backports {
  5017. if grep -Fxq "enable_backports" $COMPLETION_FILE; then
  5018. return
  5019. fi
  5020. if ! grep -Fxq "deb http://$DEBIAN_REPO/debian $DEBIAN_VERSION-backports main" /etc/apt/sources.list; then
  5021. echo "deb http://$DEBIAN_REPO/debian $DEBIAN_VERSION-backports main" >> /etc/apt/sources.list
  5022. fi
  5023. echo 'enable_backports' >> $COMPLETION_FILE
  5024. }
  5025. function enable_zram {
  5026. if grep -Fxq "enable_zram" $COMPLETION_FILE; then
  5027. return
  5028. fi
  5029. if [[ $INSTALLED_WITHIN_DOCKER == "yes" || $INSTALLING_ON_BBB != "yes" ]]; then
  5030. return
  5031. fi
  5032. if ! grep -q "options zram num_devices=1" /etc/modprobe.d/zram.conf; then
  5033. echo 'options zram num_devices=1' >> /etc/modprobe.d/zram.conf
  5034. fi
  5035. echo '#!/bin/bash' > /etc/init.d/zram
  5036. echo '### BEGIN INIT INFO' >> /etc/init.d/zram
  5037. echo '# Provides: zram' >> /etc/init.d/zram
  5038. echo '# Required-Start:' >> /etc/init.d/zram
  5039. echo '# Required-Stop:' >> /etc/init.d/zram
  5040. echo '# Default-Start: 2 3 4 5' >> /etc/init.d/zram
  5041. echo '# Default-Stop: 0 1 6' >> /etc/init.d/zram
  5042. echo '# Short-Description: Increased Performance In Linux With zRam (Virtual Swap Compressed in RAM)' >> /etc/init.d/zram
  5043. echo '# Description: Adapted from systemd scripts at https://github.com/mystilleef/FedoraZram' >> /etc/init.d/zram
  5044. echo '### END INIT INFO' >> /etc/init.d/zram
  5045. echo 'start() {' >> /etc/init.d/zram
  5046. echo ' # get the number of CPUs' >> /etc/init.d/zram
  5047. echo ' num_cpus=$(grep -c processor /proc/cpuinfo)' >> /etc/init.d/zram
  5048. echo ' # if something goes wrong, assume we have 1' >> /etc/init.d/zram
  5049. echo ' [ "$num_cpus" != 0 ] || num_cpus=1' >> /etc/init.d/zram
  5050. echo ' # set decremented number of CPUs' >> /etc/init.d/zram
  5051. echo ' decr_num_cpus=$((num_cpus - 1))' >> /etc/init.d/zram
  5052. echo ' # get the amount of memory in the machine' >> /etc/init.d/zram
  5053. echo ' mem_total_kb=$(grep MemTotal /proc/meminfo | grep -E --only-matching "[[:digit:]]+")' >> /etc/init.d/zram
  5054. echo ' mem_total=$((mem_total_kb * 1024))' >> /etc/init.d/zram
  5055. echo ' # load dependency modules' >> /etc/init.d/zram
  5056. echo ' modprobe zram num_devices=$num_cpus' >> /etc/init.d/zram
  5057. echo ' # initialize the devices' >> /etc/init.d/zram
  5058. echo ' for i in $(seq 0 $decr_num_cpus); do' >> /etc/init.d/zram
  5059. echo ' echo $((mem_total / num_cpus)) > /sys/block/zram$i/disksize' >> /etc/init.d/zram
  5060. echo ' done' >> /etc/init.d/zram
  5061. echo ' # Creating swap filesystems' >> /etc/init.d/zram
  5062. echo ' for i in $(seq 0 $decr_num_cpus); do' >> /etc/init.d/zram
  5063. echo ' mkswap /dev/zram$i' >> /etc/init.d/zram
  5064. echo ' done' >> /etc/init.d/zram
  5065. echo ' # Switch the swaps on' >> /etc/init.d/zram
  5066. echo ' for i in $(seq 0 $decr_num_cpus); do' >> /etc/init.d/zram
  5067. echo ' swapon -p 100 /dev/zram$i' >> /etc/init.d/zram
  5068. echo ' done' >> /etc/init.d/zram
  5069. echo '}' >> /etc/init.d/zram
  5070. echo 'stop() {' >> /etc/init.d/zram
  5071. echo ' # get the number of CPUs' >> /etc/init.d/zram
  5072. echo ' num_cpus=$(grep -c processor /proc/cpuinfo)' >> /etc/init.d/zram
  5073. echo ' # set decremented number of CPUs' >> /etc/init.d/zram
  5074. echo ' decr_num_cpus=$((num_cpus - 1))' >> /etc/init.d/zram
  5075. echo ' # Switching off swap' >> /etc/init.d/zram
  5076. echo ' for i in $(seq 0 $decr_num_cpus); do' >> /etc/init.d/zram
  5077. echo ' if [ "$(grep /dev/zram$i /proc/swaps)" != "" ]; then' >> /etc/init.d/zram
  5078. echo ' swapoff /dev/zram$i' >> /etc/init.d/zram
  5079. echo ' sleep 1' >> /etc/init.d/zram
  5080. echo ' fi' >> /etc/init.d/zram
  5081. echo ' done' >> /etc/init.d/zram
  5082. echo ' sleep 1' >> /etc/init.d/zram
  5083. echo ' rmmod zram' >> /etc/init.d/zram
  5084. echo '}' >> /etc/init.d/zram
  5085. echo 'case "$1" in' >> /etc/init.d/zram
  5086. echo ' start)' >> /etc/init.d/zram
  5087. echo ' start' >> /etc/init.d/zram
  5088. echo ' ;;' >> /etc/init.d/zram
  5089. echo ' stop)' >> /etc/init.d/zram
  5090. echo ' stop' >> /etc/init.d/zram
  5091. echo ' ;;' >> /etc/init.d/zram
  5092. echo ' restart)' >> /etc/init.d/zram
  5093. echo ' stop' >> /etc/init.d/zram
  5094. echo ' sleep 3' >> /etc/init.d/zram
  5095. echo ' start' >> /etc/init.d/zram
  5096. echo ' ;;' >> /etc/init.d/zram
  5097. echo ' *)' >> /etc/init.d/zram
  5098. echo ' echo "Usage: $0 {start|stop|restart}"' >> /etc/init.d/zram
  5099. echo ' RETVAL=1' >> /etc/init.d/zram
  5100. echo 'esac' >> /etc/init.d/zram
  5101. echo 'exit $RETVAL' >> /etc/init.d/zram
  5102. chmod +x /etc/init.d/zram
  5103. update-rc.d zram defaults
  5104. echo 'enable_zram' >> $COMPLETION_FILE
  5105. }
  5106. function check_onerng_verification {
  5107. if grep -Fxq "check_onerng_verification" $COMPLETION_FILE; then
  5108. return
  5109. fi
  5110. if [[ $HWRNG_TYPE != "onerng" ]]; then
  5111. return
  5112. fi
  5113. echo 'Checking OneRNG firmware verification'
  5114. last_onerng_validation=$(cat /var/log/syslog.1 | grep "OneRNG: firmware verification" | awk '/./{line=$0} END{print line}')
  5115. if [[ $last_onerng_validation != *"passed OK"* ]]; then
  5116. last_onerng_validation=$(cat /var/log/syslog | grep "OneRNG: firmware verification" | awk '/./{line=$0} END{print line}')
  5117. if [[ $last_onerng_validation != *"passed OK"* ]]; then
  5118. echo $last_onerng_validation
  5119. echo 'OneRNG firmware verification failed'
  5120. exit 735026
  5121. fi
  5122. fi
  5123. echo 'OneRNG firmware verification passed'
  5124. # if haveged was previously installed then remove it
  5125. apt-get -y remove haveged
  5126. echo 'check_onerng_verification' >> $COMPLETION_FILE
  5127. }
  5128. function install_onerng {
  5129. apt-get -y install rng-tools at python-gnupg
  5130. # Move to the installation directory
  5131. if [ ! -d $INSTALL_DIR ]; then
  5132. mkdir $INSTALL_DIR
  5133. fi
  5134. cd $INSTALL_DIR
  5135. # Download the package
  5136. if [ ! -f $ONERNG_PACKAGE ]; then
  5137. wget $ONERNG_PACKAGE_DOWNLOAD
  5138. mv "$ONERNG_PACKAGE?raw=true" $ONERNG_PACKAGE
  5139. fi
  5140. if [ ! -f $ONERNG_PACKAGE ]; then
  5141. echo "OneRNG package could not be downloaded"
  5142. exit 59249
  5143. fi
  5144. # Check the hash
  5145. hash=$(sha256sum $ONERNG_PACKAGE | awk -F ' ' '{print $1}')
  5146. if [[ $hash != $ONERNG_PACKAGE_HASH ]]; then
  5147. echo "OneRNG package: $ONERNG_PACKAGE"
  5148. echo "Hash does not match. This could indicate that the package has been tampered with."
  5149. echo "OneRNG expected package hash: $ONERNG_PACKAGE_HASH"
  5150. echo "OneRNG actual hash: $hash"
  5151. exit 25934
  5152. fi
  5153. # install the package
  5154. dpkg -i $ONERNG_PACKAGE
  5155. # Check that the install worked
  5156. if [ ! -f /etc/onerng.conf ]; then
  5157. echo 'OneRNG configuration file not found. The package may not have installed successfully.'
  5158. exit 42904
  5159. fi
  5160. dialog --title "OneRNG Device" \
  5161. --msgbox "Please plug in the OneRNG device" 6 40
  5162. # check rng-tools configuration
  5163. if ! grep -q "/dev/$ONERNG_DEVICE" /etc/default/rng-tools; then
  5164. echo "HRNGDEVICE=/dev/$ONERNG_DEVICE" >> /etc/default/rng-tools
  5165. fi
  5166. systemctl restart rng-tools
  5167. }
  5168. function random_number_generator {
  5169. if grep -Fxq "random_number_generator" $COMPLETION_FILE; then
  5170. return
  5171. fi
  5172. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  5173. # it is assumed that docker uses the random number
  5174. # generator of the host system
  5175. return
  5176. fi
  5177. case $HWRNG_TYPE in
  5178. beaglebone)
  5179. apt-get -y install rng-tools
  5180. sed -i 's|#HRNGDEVICE=/dev/hwrng|HRNGDEVICE=/dev/hwrng|g' /etc/default/rng-tools
  5181. ;;
  5182. onerng)
  5183. install_onerng
  5184. ;;
  5185. *)
  5186. apt-get -y install haveged
  5187. ;;
  5188. esac
  5189. echo 'random_number_generator' >> $COMPLETION_FILE
  5190. }
  5191. function configure_ssh {
  5192. if grep -Fxq "configure_ssh" $COMPLETION_FILE; then
  5193. return
  5194. fi
  5195. sed -i "s/Port .*/Port $SSH_PORT/g" /etc/ssh/sshd_config
  5196. sed -i 's/PermitRootLogin.*/PermitRootLogin no/g' /etc/ssh/sshd_config
  5197. sed -i 's/X11Forwarding.*/X11Forwarding no/g' /etc/ssh/sshd_config
  5198. sed -i 's/ServerKeyBits.*/ServerKeyBits 4096/g' /etc/ssh/sshd_config
  5199. sed -i 's/TCPKeepAlive.*/TCPKeepAlive no/g' /etc/ssh/sshd_config
  5200. sed -i 's|HostKey /etc/ssh/ssh_host_dsa_key|#HostKey /etc/ssh/ssh_host_dsa_key|g' /etc/ssh/sshd_config
  5201. sed -i 's|HostKey /etc/ssh/ssh_host_ecdsa_key|#HostKey /etc/ssh/ssh_host_ecdsa_key|g' /etc/ssh/sshd_config
  5202. if grep -q 'ClientAliveInterval' /etc/ssh/sshd_config; then
  5203. sed -i 's/ClientAliveInterval.*/ClientAliveInterval 60/g' /etc/ssh/sshd_config
  5204. else
  5205. echo 'ClientAliveInterval 60' >> /etc/ssh/sshd_config
  5206. fi
  5207. if grep -q 'ClientAliveCountMax' /etc/ssh/sshd_config; then
  5208. sed -i 's/ClientAliveCountMax.*/ClientAliveCountMax 3/g' /etc/ssh/sshd_config
  5209. else
  5210. echo 'ClientAliveCountMax 3' >> /etc/ssh/sshd_config
  5211. fi
  5212. if grep -q 'Ciphers' /etc/ssh/sshd_config; then
  5213. sed -i "s|Ciphers.*|Ciphers $SSH_CIPHERS|g" /etc/ssh/sshd_config
  5214. else
  5215. echo "Ciphers $SSH_CIPHERS" >> /etc/ssh/sshd_config
  5216. fi
  5217. if grep -q 'MACs' /etc/ssh/sshd_config; then
  5218. sed -i "s|MACs.*|MACs $SSH_MACS|g" /etc/ssh/sshd_config
  5219. else
  5220. echo "MACs $SSH_MACS" >> /etc/ssh/sshd_config
  5221. fi
  5222. if grep -q 'KexAlgorithms' /etc/ssh/sshd_config; then
  5223. sed -i "s|KexAlgorithms.*|KexAlgorithms $SSH_KEX|g" /etc/ssh/sshd_config
  5224. else
  5225. echo "KexAlgorithms $SSH_KEX" >> /etc/ssh/sshd_config
  5226. fi
  5227. apt-get -y install fail2ban
  5228. echo 'configure_ssh' >> $COMPLETION_FILE
  5229. # Don't reboot if installing within docker
  5230. # random numbers will come from the host system
  5231. if [[ $INSTALLED_WITHIN_DOCKER == "yes" || $INSTALLING_ON_BBB != "yes" ]]; then
  5232. return
  5233. fi
  5234. echo ''
  5235. echo ''
  5236. echo ' *** Rebooting to initialise ssh settings and random number generator ***'
  5237. echo ''
  5238. echo " *** Reconnect via ssh on port $SSH_PORT, then run this script again ***"
  5239. echo ''
  5240. echo '## ' >> /etc/motd
  5241. echo '## Type "su" and enter your administrator password, then use the command:' >> /etc/motd
  5242. echo '## ' >> /etc/motd
  5243. echo '## freedombone -c freedombone.cfg' >> /etc/motd
  5244. echo '## ' >> /etc/motd
  5245. echo '## to continue the installation.' >> /etc/motd
  5246. reboot
  5247. }
  5248. # see https://stribika.github.io/2015/01/04/secure-secure-shell.html
  5249. function ssh_remove_small_moduli {
  5250. awk '$5 > 2000' /etc/ssh/moduli > ~/moduli
  5251. mv ~/moduli /etc/ssh/moduli
  5252. }
  5253. function configure_ssh_client {
  5254. if grep -Fxq "configure_ssh_client" $COMPLETION_FILE; then
  5255. return
  5256. fi
  5257. #sed -i 's/# PasswordAuthentication.*/ PasswordAuthentication no/g' /etc/ssh/ssh_config
  5258. #sed -i 's/# ChallengeResponseAuthentication.*/ ChallengeResponseAuthentication no/g' /etc/ssh/ssh_config
  5259. sed -i "s/# HostKeyAlgorithms.*/ HostKeyAlgorithms $SSH_HOST_KEY_ALGORITHMS/g" /etc/ssh/ssh_config
  5260. sed -i "s/# Ciphers.*/ Ciphers $SSH_CIPHERS/g" /etc/ssh/ssh_config
  5261. sed -i "s/# MACs.*/ MACs $SSH_MACS/g" /etc/ssh/ssh_config
  5262. if ! grep -q "HostKeyAlgorithms" /etc/ssh/ssh_config; then
  5263. echo " HostKeyAlgorithms $SSH_HOST_KEY_ALGORITHMS" >> /etc/ssh/ssh_config
  5264. fi
  5265. sed -i "s/Ciphers.*/Ciphers $SSH_CIPHERS/g" /etc/ssh/ssh_config
  5266. if ! grep -q "Ciphers " /etc/ssh/ssh_config; then
  5267. echo " Ciphers $SSH_CIPHERS" >> /etc/ssh/ssh_config
  5268. fi
  5269. sed -i "s/MACs.*/MACs $SSH_MACS/g" /etc/ssh/ssh_config
  5270. if ! grep -q "MACs " /etc/ssh/ssh_config; then
  5271. echo " MACs $SSH_MACS" >> /etc/ssh/ssh_config
  5272. fi
  5273. # Create ssh keys
  5274. if [ ! -f ~/.ssh/id_ed25519 ]; then
  5275. ssh-keygen -t ed25519 -o -a 100
  5276. fi
  5277. if [ ! -f ~/.ssh/id_rsa ]; then
  5278. ssh-keygen -t rsa -b 4096 -o -a 100
  5279. fi
  5280. ssh_remove_small_moduli
  5281. echo 'configure_ssh_client' >> $COMPLETION_FILE
  5282. }
  5283. function regenerate_ssh_keys {
  5284. if grep -Fxq "regenerate_ssh_keys" $COMPLETION_FILE; then
  5285. return
  5286. fi
  5287. rm -f /etc/ssh/ssh_host_*
  5288. dpkg-reconfigure openssh-server
  5289. ssh_remove_small_moduli
  5290. service ssh restart
  5291. echo 'regenerate_ssh_keys' >> $COMPLETION_FILE
  5292. }
  5293. function configure_dns {
  5294. if grep -Fxq "configure_dns" $COMPLETION_FILE; then
  5295. return
  5296. fi
  5297. echo 'domain localdomain' > /etc/resolv.conf
  5298. echo 'search localdomain' >> /etc/resolv.conf
  5299. echo "nameserver $NAMESERVER1" >> /etc/resolv.conf
  5300. echo "nameserver $NAMESERVER2" >> /etc/resolv.conf
  5301. echo 'configure_dns' >> $COMPLETION_FILE
  5302. }
  5303. function set_your_domain_name {
  5304. if grep -Fxq "set_your_domain_name" $COMPLETION_FILE; then
  5305. return
  5306. fi
  5307. echo "$DEFAULT_DOMAIN_NAME" > /etc/hostname
  5308. hostname $DEFAULT_DOMAIN_NAME
  5309. if grep -q "127.0.1.1" /etc/hosts; then
  5310. sed -i "s/127.0.1.1.*/127.0.1.1 $DEFAULT_DOMAIN_NAME/g" /etc/hosts
  5311. else
  5312. echo "127.0.1.1 $DEFAULT_DOMAIN_NAME" >> /etc/hosts
  5313. fi
  5314. echo 'set_your_domain_name' >> $COMPLETION_FILE
  5315. }
  5316. function time_synchronisation {
  5317. if grep -Fxq "time_synchronisation" $COMPLETION_FILE; then
  5318. return
  5319. fi
  5320. #apt-get -y install tlsdate
  5321. # building tlsdate from source is a workaround because of
  5322. # this bug https://github.com/ioerror/tlsdate/issues/130
  5323. apt-get -y install build-essential automake git pkg-config autoconf libtool libssl-dev libevent-dev
  5324. if [ ! -d $INSTALL_DIR ]; then
  5325. mkdir $INSTALL_DIR
  5326. fi
  5327. cd $INSTALL_DIR
  5328. git clone https://github.com/ioerror/tlsdate.git
  5329. cd $INSTALL_DIR/tlsdate
  5330. ./autogen.sh
  5331. ./configure
  5332. make
  5333. make install
  5334. cp /usr/local/bin/tlsdate* /usr/bin
  5335. cp /usr/local/sbin/tlsdate* /usr/bin
  5336. apt-get -y remove ntpdate
  5337. echo '#!/bin/bash' > /usr/bin/updatedate
  5338. echo "TIMESOURCE='TLS_TIME_SOURCE1'" >> /usr/bin/updatedate
  5339. echo "TIMESOURCE2='TLS_TIME_SOURCE2'" >> /usr/bin/updatedate
  5340. echo 'LOGFILE=/var/log/tlsdate.log' >> /usr/bin/updatedate
  5341. echo 'TIMEOUT=5' >> /usr/bin/updatedate
  5342. echo "EMAIL=$MY_EMAIL_ADDRESS" >> /usr/bin/updatedate
  5343. echo '# File which contains the previous date as a number' >> /usr/bin/updatedate
  5344. echo 'BEFORE_DATE_FILE=/var/log/tlsdateprevious.txt' >> /usr/bin/updatedate
  5345. echo '# File which contains the previous date as a string' >> /usr/bin/updatedate
  5346. echo 'BEFORE_FULLDATE_FILE=/var/log/tlsdate.txt' >> /usr/bin/updatedate
  5347. echo 'DATE_BEFORE=$(date)' >> /usr/bin/updatedate
  5348. echo 'BEFORE=$(date "+%s")' >> /usr/bin/updatedate
  5349. echo 'BACKWARDS_BETWEEN=0' >> /usr/bin/updatedate
  5350. echo 're="^[0-9]+$"' >> /usr/bin/updatedate
  5351. echo '# If the date was previously set' >> /usr/bin/updatedate
  5352. echo 'if [ -s "$BEFORE_DATE_FILE" ]; then' >> /usr/bin/updatedate
  5353. echo ' filesize=$(wc -c "$BEFORE_DATE_FILE" | cut -f 1 -d " ")' >> /usr/bin/updatedate
  5354. echo ' if [ $filesize -ge 5 ]; then' >> /usr/bin/updatedate
  5355. echo ' BEFORE_FILE=$(cat $BEFORE_DATE_FILE)' >> /usr/bin/updatedate
  5356. echo ' if [[ $BEFORE_FILE =~ $re ]]; then' >> /usr/bin/updatedate
  5357. echo ' BEFORE_FULLDATE=$(cat $BEFORE_FULLDATE_FILE)' >> /usr/bin/updatedate
  5358. echo ' # is the date going backwards?' >> /usr/bin/updatedate
  5359. echo ' if (( $BEFORE_FILE > $BEFORE )); then' >> /usr/bin/updatedate
  5360. echo ' echo -n "Date went backwards between tlsdate updates. " >> $LOGFILE' >> /usr/bin/updatedate
  5361. echo ' echo -n "$BEFORE_FILE > $BEFORE, " >> $LOGFILE' >> /usr/bin/updatedate
  5362. echo ' echo "$BEFORE_FULLDATE > $DATE_BEFORE" >> $LOGFILE' >> /usr/bin/updatedate
  5363. echo ' # Send a warning email' >> /usr/bin/updatedate
  5364. echo ' echo $(tail $LOGFILE -n 2) | mail -s "tlsdate anomaly" $EMAIL' >> /usr/bin/updatedate
  5365. echo ' # Try another time source' >> /usr/bin/updatedate
  5366. echo ' TIMESOURCE=$TIMESOURCE2' >> /usr/bin/updatedate
  5367. echo ' # try running without any parameters' >> /usr/bin/updatedate
  5368. echo ' tlsdate >> $LOGFILE' >> /usr/bin/updatedate
  5369. echo ' BACKWARDS_BETWEEN=1' >> /usr/bin/updatedate
  5370. echo ' fi' >> /usr/bin/updatedate
  5371. echo ' fi' >> /usr/bin/updatedate
  5372. echo ' fi' >> /usr/bin/updatedate
  5373. echo 'fi' >> /usr/bin/updatedate
  5374. echo '# Set the date' >> /usr/bin/updatedate
  5375. echo '/usr/bin/timeout $TIMEOUT tlsdate -l -t -H $TIMESOURCE -p 443 >> $LOGFILE' >> /usr/bin/updatedate
  5376. echo 'DATE_AFTER=$(date)' >> /usr/bin/updatedate
  5377. echo 'AFTER=$(date "+%s")' >> /usr/bin/updatedate
  5378. echo '# After setting the date did it go backwards?' >> /usr/bin/updatedate
  5379. echo 'if (( $AFTER < $BEFORE )); then' >> /usr/bin/updatedate
  5380. echo ' echo "Incorrect date: $DATE_BEFORE -> $DATE_AFTER" >> $LOGFILE' >> /usr/bin/updatedate
  5381. echo ' # Send a warning email' >> /usr/bin/updatedate
  5382. echo ' echo $(tail $LOGFILE -n 2) | mail -s "tlsdate anomaly" $EMAIL' >> /usr/bin/updatedate
  5383. echo ' # Try resetting the date from another time source' >> /usr/bin/updatedate
  5384. echo ' /usr/bin/timeout $TIMEOUT tlsdate -l -t -H $TIMESOURCE2 -p 443 >> $LOGFILE' >> /usr/bin/updatedate
  5385. echo ' DATE_AFTER=$(date)' >> /usr/bin/updatedate
  5386. echo ' AFTER=$(date "+%s")' >> /usr/bin/updatedate
  5387. echo 'else' >> /usr/bin/updatedate
  5388. echo ' echo -n $TIMESOURCE >> $LOGFILE' >> /usr/bin/updatedate
  5389. echo ' if [ -s "$BEFORE_DATE_FILE" ]; then' >> /usr/bin/updatedate
  5390. echo ' echo -n " " >> $LOGFILE' >> /usr/bin/updatedate
  5391. echo ' echo -n $BEFORE_FILE >> $LOGFILE' >> /usr/bin/updatedate
  5392. echo ' fi' >> /usr/bin/updatedate
  5393. echo ' echo -n " " >> $LOGFILE' >> /usr/bin/updatedate
  5394. echo ' echo -n $BEFORE >> $LOGFILE' >> /usr/bin/updatedate
  5395. echo ' echo -n " " >> $LOGFILE' >> /usr/bin/updatedate
  5396. echo ' echo -n $AFTER >> $LOGFILE' >> /usr/bin/updatedate
  5397. echo ' echo -n " " >> $LOGFILE' >> /usr/bin/updatedate
  5398. echo ' echo $DATE_AFTER >> $LOGFILE' >> /usr/bin/updatedate
  5399. echo 'fi' >> /usr/bin/updatedate
  5400. echo '# Log the last date' >> /usr/bin/updatedate
  5401. echo 'if [[ $BACKWARDS_BETWEEN == 0 ]]; then' >> /usr/bin/updatedate
  5402. echo ' echo "$AFTER" > $BEFORE_DATE_FILE' >> /usr/bin/updatedate
  5403. echo ' echo "$DATE_AFTER" > $BEFORE_FULLDATE_FILE' >> /usr/bin/updatedate
  5404. echo ' exit 0' >> /usr/bin/updatedate
  5405. echo 'else' >> /usr/bin/updatedate
  5406. echo ' exit 1' >> /usr/bin/updatedate
  5407. echo 'fi' >> /usr/bin/updatedate
  5408. chmod +x /usr/bin/updatedate
  5409. echo '*/15 * * * * root /usr/bin/updatedate' >> /etc/crontab
  5410. service cron restart
  5411. echo '#!/bin/bash' > /etc/init.d/tlsdate
  5412. echo '# /etc/init.d/tlsdate' >> /etc/init.d/tlsdate
  5413. echo '### BEGIN INIT INFO' >> /etc/init.d/tlsdate
  5414. echo '# Provides: tlsdate' >> /etc/init.d/tlsdate
  5415. echo '# Required-Start: $remote_fs $syslog' >> /etc/init.d/tlsdate
  5416. echo '# Required-Stop: $remote_fs $syslog' >> /etc/init.d/tlsdate
  5417. echo '# Default-Start: 2 3 4 5' >> /etc/init.d/tlsdate
  5418. echo '# Default-Stop: 0 1 6' >> /etc/init.d/tlsdate
  5419. echo '# Short-Description: Initially calls tlsdate with the timewarp option' >> /etc/init.d/tlsdate
  5420. echo '# Description: Initially calls tlsdate with the timewarp option' >> /etc/init.d/tlsdate
  5421. echo '### END INIT INFO' >> /etc/init.d/tlsdate
  5422. echo '# Author: Bob Mottram <bob@robotics.uk.to>' >> /etc/init.d/tlsdate
  5423. echo 'PATH="/usr/local/sbin:/usr/local/bin:/usr/bin:/sbin:/usr/sbin:/bin"' >> /etc/init.d/tlsdate
  5424. echo 'LOGFILE="/var/log/tlsdate.log"' >> /etc/init.d/tlsdate
  5425. echo 'TLSDATECOMMAND="tlsdate --timewarp -l -H www.ptb.de -p 443 >> $LOGFILE"' >> /etc/init.d/tlsdate
  5426. echo '#Start-Stop here' >> /etc/init.d/tlsdate
  5427. echo 'case "$1" in' >> /etc/init.d/tlsdate
  5428. echo ' start)' >> /etc/init.d/tlsdate
  5429. echo ' echo "tlsdate started"' >> /etc/init.d/tlsdate
  5430. echo ' $TLSDATECOMMAND' >> /etc/init.d/tlsdate
  5431. echo ' ;;' >> /etc/init.d/tlsdate
  5432. echo ' stop)' >> /etc/init.d/tlsdate
  5433. echo ' echo "tlsdate stopped"' >> /etc/init.d/tlsdate
  5434. echo ' ;;' >> /etc/init.d/tlsdate
  5435. echo ' restart)' >> /etc/init.d/tlsdate
  5436. echo ' echo "tlsdate restarted"' >> /etc/init.d/tlsdate
  5437. echo ' $TLSDATECOMMAND' >> /etc/init.d/tlsdate
  5438. echo ' ;;' >> /etc/init.d/tlsdate
  5439. echo ' *)' >> /etc/init.d/tlsdate
  5440. echo ' echo "Usage: $0 {start|stop|restart}"' >> /etc/init.d/tlsdate
  5441. echo ' exit 1' >> /etc/init.d/tlsdate
  5442. echo ' ;;' >> /etc/init.d/tlsdate
  5443. echo 'esac' >> /etc/init.d/tlsdate
  5444. echo 'exit 0' >> /etc/init.d/tlsdate
  5445. chmod +x /etc/init.d/tlsdate
  5446. update-rc.d tlsdate defaults
  5447. echo 'time_synchronisation' >> $COMPLETION_FILE
  5448. }
  5449. function configure_firewall {
  5450. if grep -Fxq "configure_firewall" $COMPLETION_FILE; then
  5451. return
  5452. fi
  5453. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  5454. # docker does its own firewalling
  5455. return
  5456. fi
  5457. iptables -P INPUT ACCEPT
  5458. ip6tables -P INPUT ACCEPT
  5459. iptables -F
  5460. ip6tables -F
  5461. iptables -t nat -F
  5462. ip6tables -t nat -F
  5463. iptables -X
  5464. ip6tables -X
  5465. iptables -P INPUT DROP
  5466. ip6tables -P INPUT DROP
  5467. iptables -A INPUT -i lo -j ACCEPT
  5468. iptables -A INPUT -i eth0 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
  5469. # Make sure incoming tcp connections are SYN packets
  5470. iptables -A INPUT -p tcp ! --syn -m state --state NEW -j DROP
  5471. # Drop packets with incoming fragments
  5472. iptables -A INPUT -f -j DROP
  5473. # Drop bogons
  5474. iptables -A INPUT -p tcp --tcp-flags ALL ALL -j DROP
  5475. iptables -A INPUT -p tcp --tcp-flags ALL FIN,PSH,URG -j DROP
  5476. iptables -A INPUT -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP
  5477. # Incoming malformed NULL packets:
  5478. iptables -A INPUT -p tcp --tcp-flags ALL NONE -j DROP
  5479. echo 'configure_firewall' >> $COMPLETION_FILE
  5480. }
  5481. function save_firewall_settings {
  5482. iptables-save > /etc/firewall.conf
  5483. ip6tables-save > /etc/firewall6.conf
  5484. printf '#!/bin/sh\n' > /etc/network/if-up.d/iptables
  5485. printf 'iptables-restore < /etc/firewall.conf\n' >> /etc/network/if-up.d/iptables
  5486. printf 'ip6tables-restore < /etc/firewall6.conf\n' >> /etc/network/if-up.d/iptables
  5487. chmod +x /etc/network/if-up.d/iptables
  5488. }
  5489. function configure_firewall_ping {
  5490. if grep -Fxq "configure_firewall_ping" $COMPLETION_FILE; then
  5491. return
  5492. fi
  5493. # Only allow ping for mesh installs
  5494. if [[ $SYSTEM_TYPE != "$VARIANT_MESH" ]]; then
  5495. return
  5496. fi
  5497. iptables -A INPUT -p icmp --icmp-type echo-request -j ACCEPT
  5498. iptables -A OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT
  5499. save_firewall_settings
  5500. echo 'configure_firewall_ping' >> $COMPLETION_FILE
  5501. }
  5502. function configure_firewall_for_voip {
  5503. if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" ]]; then
  5504. return
  5505. fi
  5506. if grep -Fxq "configure_firewall_for_voip" $COMPLETION_FILE; then
  5507. return
  5508. fi
  5509. iptables -A INPUT -p udp --dport $VOIP_PORT -j ACCEPT
  5510. iptables -A INPUT -p tcp --dport $VOIP_PORT -j ACCEPT
  5511. save_firewall_settings
  5512. echo 'configure_firewall_for_voip' >> $COMPLETION_FILE
  5513. }
  5514. function configure_firewall_for_avahi {
  5515. if grep -Fxq "configure_firewall_for_avahi" $COMPLETION_FILE; then
  5516. return
  5517. fi
  5518. if [[ $ENABLE_CJDNS != "yes" && $ENABLE_BATMAN != "yes" && $ENABLE_BABEL != "yes" ]]; then
  5519. return
  5520. fi
  5521. iptables -A INPUT -p tcp -m state -m tcp --dport 548 --state NEW -j ACCEPT
  5522. iptables -A INPUT -p udp -m state -m udp --dport 548 --state NEW -j ACCEPT
  5523. iptables -A INPUT -p tcp -m state -m tcp --dport 5353 --state NEW -j ACCEPT
  5524. iptables -A INPUT -p udp -m state -m udp --dport 5353 --state NEW -j ACCEPT
  5525. iptables -A INPUT -p tcp -m state -m tcp --dport 5354 --state NEW -j ACCEPT
  5526. iptables -A INPUT -p udp -m state -m udp --dport 5354 --state NEW -j ACCEPT
  5527. save_firewall_settings
  5528. echo 'configure_firewall_for_avahi' >> $COMPLETION_FILE
  5529. }
  5530. function configure_firewall_for_cjdns {
  5531. if grep -Fxq "configure_firewall_for_cjdns" $COMPLETION_FILE; then
  5532. return
  5533. fi
  5534. if [[ $ENABLE_CJDNS != "yes" ]]; then
  5535. return
  5536. fi
  5537. ip6tables -t nat -A POSTROUTING -o tun0 -j MASQUERADE
  5538. ip6tables -A FORWARD -i tun0 -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
  5539. save_firewall_settings
  5540. echo 'configure_firewall_for_cjdns' >> $COMPLETION_FILE
  5541. }
  5542. function configure_firewall_for_batman {
  5543. if grep -Fxq "configure_firewall_for_batman" $COMPLETION_FILE; then
  5544. return
  5545. fi
  5546. if [[ $ENABLE_BATMAN != "yes" ]]; then
  5547. return
  5548. fi
  5549. # DHCP
  5550. iptables -A INPUT -i eth0 -p udp --dport 547 -j ACCEPT
  5551. save_firewall_settings
  5552. echo 'configure_firewall_for_batman' >> $COMPLETION_FILE
  5553. }
  5554. function configure_firewall_for_babel {
  5555. if grep -Fxq "configure_firewall_for_babel" $COMPLETION_FILE; then
  5556. return
  5557. fi
  5558. if [[ $ENABLE_BABEL != "yes" ]]; then
  5559. return
  5560. fi
  5561. iptables -A INPUT -i $WIFI_INTERFACE -p udp --dport $BABEL_PORT -j ACCEPT
  5562. save_firewall_settings
  5563. echo 'configure_firewall_for_babel' >> $COMPLETION_FILE
  5564. }
  5565. function configure_firewall_for_dlna {
  5566. if grep -Fxq "configure_firewall_for_dlna" $COMPLETION_FILE; then
  5567. return
  5568. fi
  5569. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  5570. # docker does its own firewalling
  5571. return
  5572. fi
  5573. if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" ]]; then
  5574. return
  5575. fi
  5576. iptables -A INPUT -p udp --dport 1900 -j ACCEPT
  5577. iptables -A INPUT -p tcp --dport 8200 -j ACCEPT
  5578. save_firewall_settings
  5579. echo 'configure_firewall_for_dlna' >> $COMPLETION_FILE
  5580. }
  5581. function configure_firewall_for_dns {
  5582. if grep -Fxq "configure_firewall_for_dns" $COMPLETION_FILE; then
  5583. return
  5584. fi
  5585. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  5586. # docker does its own firewalling
  5587. return
  5588. fi
  5589. iptables -A INPUT -p udp -m udp --dport 1024:65535 --sport 53 -j ACCEPT
  5590. save_firewall_settings
  5591. echo 'configure_firewall_for_dns' >> $COMPLETION_FILE
  5592. }
  5593. function configure_firewall_for_xmpp {
  5594. if [ ! -d /etc/prosody ]; then
  5595. return
  5596. fi
  5597. if grep -Fxq "configure_firewall_for_xmpp" $COMPLETION_FILE; then
  5598. return
  5599. fi
  5600. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  5601. # docker does its own firewalling
  5602. return
  5603. fi
  5604. iptables -A INPUT -p tcp --dport 5222:5223 -j ACCEPT
  5605. iptables -A INPUT -p tcp --dport 5269 -j ACCEPT
  5606. iptables -A INPUT -p tcp --dport 5280:5281 -j ACCEPT
  5607. save_firewall_settings
  5608. echo 'configure_firewall_for_xmpp' >> $COMPLETION_FILE
  5609. }
  5610. function configure_firewall_for_irc {
  5611. if [ ! -d /etc/ngircd ]; then
  5612. return
  5613. fi
  5614. if grep -Fxq "configure_firewall_for_irc" $COMPLETION_FILE; then
  5615. return
  5616. fi
  5617. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  5618. # docker does its own firewalling
  5619. return
  5620. fi
  5621. iptables -A INPUT -p tcp --dport $IRC_PORT -j ACCEPT
  5622. iptables -I INPUT -p tcp --dport 1024:65535 --sport $IRC_PORT -j ACCEPT
  5623. iptables -A INPUT -p tcp --dport 9999 -j ACCEPT
  5624. save_firewall_settings
  5625. echo 'configure_firewall_for_irc' >> $COMPLETION_FILE
  5626. }
  5627. function configure_firewall_for_ftp {
  5628. if grep -Fxq "configure_firewall_for_ftp" $COMPLETION_FILE; then
  5629. return
  5630. fi
  5631. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  5632. # docker does its own firewalling
  5633. return
  5634. fi
  5635. iptables -I INPUT -i eth0 -p tcp --dport 1024:65535 --sport 20:21 -j ACCEPT
  5636. save_firewall_settings
  5637. echo 'configure_firewall_for_ftp' >> $COMPLETION_FILE
  5638. }
  5639. function configure_firewall_for_web_access {
  5640. if grep -Fxq "configure_firewall_for_web_access" $COMPLETION_FILE; then
  5641. return
  5642. fi
  5643. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  5644. # docker does its own firewalling
  5645. return
  5646. fi
  5647. iptables -A INPUT -p tcp --dport 32768:61000 --sport 80 -j ACCEPT
  5648. iptables -A INPUT -p tcp --dport 32768:61000 --sport 443 -j ACCEPT
  5649. save_firewall_settings
  5650. echo 'configure_firewall_for_web_access' >> $COMPLETION_FILE
  5651. }
  5652. function configure_firewall_for_web_server {
  5653. if grep -Fxq "configure_firewall_for_web_server" $COMPLETION_FILE; then
  5654. return
  5655. fi
  5656. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  5657. # docker does its own firewalling
  5658. return
  5659. fi
  5660. iptables -A INPUT -p tcp --dport 80 -j ACCEPT
  5661. iptables -A INPUT -p tcp --dport 443 -j ACCEPT
  5662. save_firewall_settings
  5663. echo 'configure_firewall_for_web_server' >> $COMPLETION_FILE
  5664. }
  5665. function configure_firewall_for_tox {
  5666. if grep -Fxq "configure_firewall_for_tox" $COMPLETION_FILE; then
  5667. return
  5668. fi
  5669. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  5670. # docker does its own firewalling
  5671. return
  5672. fi
  5673. iptables -A INPUT -p tcp --dport $TOX_PORT -j ACCEPT
  5674. save_firewall_settings
  5675. echo 'configure_firewall_for_tox' >> $COMPLETION_FILE
  5676. }
  5677. function configure_firewall_for_ssh {
  5678. if grep -Fxq "configure_firewall_for_ssh" $COMPLETION_FILE; then
  5679. return
  5680. fi
  5681. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  5682. # docker does its own firewalling
  5683. return
  5684. fi
  5685. iptables -A INPUT -p tcp --dport 22 -j ACCEPT
  5686. iptables -A INPUT -p tcp --dport $SSH_PORT -j ACCEPT
  5687. save_firewall_settings
  5688. echo 'configure_firewall_for_ssh' >> $COMPLETION_FILE
  5689. }
  5690. function configure_firewall_for_git {
  5691. if grep -Fxq "configure_firewall_for_git" $COMPLETION_FILE; then
  5692. return
  5693. fi
  5694. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  5695. # docker does its own firewalling
  5696. return
  5697. fi
  5698. iptables -A INPUT -p tcp --dport 9418 -j ACCEPT
  5699. save_firewall_settings
  5700. echo 'configure_firewall_for_git' >> $COMPLETION_FILE
  5701. }
  5702. function configure_firewall_for_email {
  5703. if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" || $SYSTEM_TYPE == "$VARIANT_MESH" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" ]]; then
  5704. return
  5705. fi
  5706. if grep -Fxq "configure_firewall_for_email" $COMPLETION_FILE; then
  5707. return
  5708. fi
  5709. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  5710. # docker does its own firewalling
  5711. return
  5712. fi
  5713. iptables -A INPUT -p tcp --dport 25 -j ACCEPT
  5714. iptables -A INPUT -p tcp --dport 587 -j ACCEPT
  5715. iptables -A INPUT -p tcp --dport 465 -j ACCEPT
  5716. iptables -A INPUT -p tcp --dport 993 -j ACCEPT
  5717. save_firewall_settings
  5718. echo 'configure_firewall_for_email' >> $COMPLETION_FILE
  5719. }
  5720. function configure_internet_protocol {
  5721. if grep -Fxq "configure_internet_protocol" $COMPLETION_FILE; then
  5722. return
  5723. fi
  5724. if [[ $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  5725. return
  5726. fi
  5727. sed -i "s/#net.ipv4.tcp_syncookies=1/net.ipv4.tcp_syncookies=1/g" /etc/sysctl.conf
  5728. sed -i "s/#net.ipv4.conf.all.accept_redirects = 0/net.ipv4.conf.all.accept_redirects = 0/g" /etc/sysctl.conf
  5729. sed -i "s/#net.ipv6.conf.all.accept_redirects = 0/net.ipv6.conf.all.accept_redirects = 0/g" /etc/sysctl.conf
  5730. sed -i "s/#net.ipv4.conf.all.send_redirects = 0/net.ipv4.conf.all.send_redirects = 0/g" /etc/sysctl.conf
  5731. sed -i "s/#net.ipv4.conf.all.accept_source_route = 0/net.ipv4.conf.all.accept_source_route = 0/g" /etc/sysctl.conf
  5732. sed -i "s/#net.ipv6.conf.all.accept_source_route = 0/net.ipv6.conf.all.accept_source_route = 0/g" /etc/sysctl.conf
  5733. sed -i "s/#net.ipv4.conf.default.rp_filter=1/net.ipv4.conf.default.rp_filter=1/g" /etc/sysctl.conf
  5734. sed -i "s/#net.ipv4.conf.all.rp_filter=1/net.ipv4.conf.all.rp_filter=1/g" /etc/sysctl.conf
  5735. sed -i "s/#net.ipv4.ip_forward=1/net.ipv4.ip_forward=0/g" /etc/sysctl.conf
  5736. sed -i "s/#net.ipv6.conf.all.forwarding=1/net.ipv6.conf.all.forwarding=0/g" /etc/sysctl.conf
  5737. if ! grep -q "ignore pings" /etc/sysctl.conf; then
  5738. echo '# ignore pings' >> /etc/sysctl.conf
  5739. echo 'net.ipv4.icmp_echo_ignore_all = 1' >> /etc/sysctl.conf
  5740. echo 'net.ipv6.icmp_echo_ignore_all = 1' >> /etc/sysctl.conf
  5741. fi
  5742. if ! grep -q "disable ipv6" /etc/sysctl.conf; then
  5743. echo '# disable ipv6' >> /etc/sysctl.conf
  5744. echo 'net.ipv6.conf.all.disable_ipv6 = 1' >> /etc/sysctl.conf
  5745. fi
  5746. if ! grep -q "net.ipv4.tcp_synack_retries" /etc/sysctl.conf; then
  5747. echo 'net.ipv4.tcp_synack_retries = 2' >> /etc/sysctl.conf
  5748. echo 'net.ipv4.tcp_syn_retries = 1' >> /etc/sysctl.conf
  5749. fi
  5750. if ! grep -q "keepalive" /etc/sysctl.conf; then
  5751. echo '# keepalive' >> /etc/sysctl.conf
  5752. echo 'net.ipv4.tcp_keepalive_probes = 9' >> /etc/sysctl.conf
  5753. echo 'net.ipv4.tcp_keepalive_intvl = 75' >> /etc/sysctl.conf
  5754. echo 'net.ipv4.tcp_keepalive_time = 7200' >> /etc/sysctl.conf
  5755. fi
  5756. echo 'configure_internet_protocol' >> $COMPLETION_FILE
  5757. }
  5758. function configure_email {
  5759. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  5760. return
  5761. fi
  5762. if grep -Fxq "configure_email" $COMPLETION_FILE; then
  5763. return
  5764. fi
  5765. apt-get -y remove postfix
  5766. apt-get -y install exim4 sasl2-bin swaks libnet-ssleay-perl procmail
  5767. if [ ! -d /etc/exim4 ]; then
  5768. echo "ERROR: Exim does not appear to have installed. $CHECK_MESSAGE"
  5769. exit 48
  5770. fi
  5771. # configure for Maildir format
  5772. sed -i 's/MAIL_DIR/#MAIL_DIR/g' /etc/login.defs
  5773. sed -i 's|#MAIL_FILE.*|MAIL_FILE Maildir/|g' /etc/login.defs
  5774. if ! grep -q "export MAIL" /etc/profile; then
  5775. echo 'export MAIL=~/Maildir' >> /etc/profile
  5776. fi
  5777. sed -i 's|pam_mail.so standard|pam_mail.so dir=~/Maildir standard|g' /etc/pam.d/login
  5778. sed -i 's|pam_mail.so standard noenv|pam_mail.so dir=~/Maildir standard|g' /etc/pam.d/sshd
  5779. sed -i 's|pam_mail.so nopen|pam_mail.so dir=~/Maildir nopen|g' /etc/pam.d/su
  5780. echo 'dc_eximconfig_configtype="internet"' > /etc/exim4/update-exim4.conf.conf
  5781. echo "dc_other_hostnames='$DEFAULT_DOMAIN_NAME'" >> /etc/exim4/update-exim4.conf.conf
  5782. echo "dc_local_interfaces=''" >> /etc/exim4/update-exim4.conf.conf
  5783. echo "dc_readhost=''" >> /etc/exim4/update-exim4.conf.conf
  5784. echo "dc_relay_domains=''" >> /etc/exim4/update-exim4.conf.conf
  5785. echo "dc_minimaldns='false'" >> /etc/exim4/update-exim4.conf.conf
  5786. RELAY_NETS=$(echo $LOCAL_NETWORK_STATIC_IP_ADDRESS | awk -F '.' '{print $1 "." $2 "." $3 ".0/24"}')
  5787. echo "dc_relay_nets='$RELAY_NETS'" >> /etc/exim4/update-exim4.conf.conf
  5788. echo "dc_smarthost=''" >> /etc/exim4/update-exim4.conf.conf
  5789. echo "CFILEMODE='644'" >> /etc/exim4/update-exim4.conf.conf
  5790. echo "dc_use_split_config='false'" >> /etc/exim4/update-exim4.conf.conf
  5791. echo "dc_hide_mailname=''" >> /etc/exim4/update-exim4.conf.conf
  5792. echo "dc_mailname_in_oh='true'" >> /etc/exim4/update-exim4.conf.conf
  5793. echo "dc_localdelivery='maildir_home'" >> /etc/exim4/update-exim4.conf.conf
  5794. update-exim4.conf
  5795. sed -i "s/START=no/START=yes/g" /etc/default/saslauthd
  5796. /etc/init.d/saslauthd start
  5797. # make a tls certificate for email
  5798. if [ ! -f /etc/ssl/certs/exim.dhparam ]; then
  5799. freedombone-addcert -h exim --dhkey $DH_KEYLENGTH
  5800. check_certificates exim
  5801. fi
  5802. cp /etc/ssl/private/exim.key /etc/exim4
  5803. cp /etc/ssl/certs/exim.crt /etc/exim4
  5804. cp /etc/ssl/certs/exim.dhparam /etc/exim4
  5805. chown root:Debian-exim /etc/exim4/exim.key /etc/exim4/exim.crt /etc/exim4/exim.dhparam
  5806. chmod 640 /etc/exim4/exim.key /etc/exim4/exim.crt /etc/exim4/exim.dhparam
  5807. sed -i '/login_saslauthd_server/,/.endif/ s/# *//' /etc/exim4/exim4.conf.template
  5808. sed -i "/.ifdef MAIN_HARDCODE_PRIMARY_HOSTNAME/i\MAIN_HARDCODE_PRIMARY_HOSTNAME = $DEFAULT_DOMAIN_NAME\nMAIN_TLS_ENABLE = true" /etc/exim4/exim4.conf.template
  5809. sed -i "s|SMTPLISTENEROPTIONS=''|SMTPLISTENEROPTIONS='-oX 465:25:587 -oP /var/run/exim4/exim.pid'|g" /etc/default/exim4
  5810. if ! grep -q "tls_on_connect_ports=465" /etc/exim4/exim4.conf.template; then
  5811. sed -i '/SSL configuration for exim/i\tls_on_connect_ports=465' /etc/exim4/exim4.conf.template
  5812. fi
  5813. adduser $MY_USERNAME sasl
  5814. addgroup Debian-exim sasl
  5815. /etc/init.d/exim4 restart
  5816. if [ ! -d /etc/skel/Maildir ]; then
  5817. mkdir -m 700 /etc/skel/Maildir
  5818. mkdir -m 700 /etc/skel/Maildir/Sent
  5819. mkdir -m 700 /etc/skel/Maildir/Sent/tmp
  5820. mkdir -m 700 /etc/skel/Maildir/Sent/cur
  5821. mkdir -m 700 /etc/skel/Maildir/Sent/new
  5822. mkdir -m 700 /etc/skel/Maildir/.learn-spam
  5823. mkdir -m 700 /etc/skel/Maildir/.learn-spam/cur
  5824. mkdir -m 700 /etc/skel/Maildir/.learn-spam/new
  5825. mkdir -m 700 /etc/skel/Maildir/.learn-spam/tmp
  5826. mkdir -m 700 /etc/skel/Maildir/.learn-ham
  5827. mkdir -m 700 /etc/skel/Maildir/.learn-ham/cur
  5828. mkdir -m 700 /etc/skel/Maildir/.learn-ham/new
  5829. mkdir -m 700 /etc/skel/Maildir/.learn-ham/tmp
  5830. ln -s /etc/skel/Maildir/.learn-spam /etc/skel/Maildir/spam
  5831. ln -s /etc/skel/Maildir/.learn-ham /etc/skel/Maildir/ham
  5832. fi
  5833. if [ ! -d /home/$MY_USERNAME/Maildir ]; then
  5834. mkdir -m 700 /home/$MY_USERNAME/Maildir
  5835. mkdir -m 700 /home/$MY_USERNAME/Maildir/cur
  5836. mkdir -m 700 /home/$MY_USERNAME/Maildir/tmp
  5837. mkdir -m 700 /home/$MY_USERNAME/Maildir/new
  5838. mkdir -m 700 /home/$MY_USERNAME/Maildir/Sent
  5839. mkdir -m 700 /home/$MY_USERNAME/Maildir/Sent/cur
  5840. mkdir -m 700 /home/$MY_USERNAME/Maildir/Sent/tmp
  5841. mkdir -m 700 /home/$MY_USERNAME/Maildir/Sent/new
  5842. mkdir -m 700 /home/$MY_USERNAME/Maildir/.learn-spam
  5843. mkdir -m 700 /home/$MY_USERNAME/Maildir/.learn-spam/cur
  5844. mkdir -m 700 /home/$MY_USERNAME/Maildir/.learn-spam/new
  5845. mkdir -m 700 /home/$MY_USERNAME/Maildir/.learn-spam/tmp
  5846. mkdir -m 700 /home/$MY_USERNAME/Maildir/.learn-ham
  5847. mkdir -m 700 /home/$MY_USERNAME/Maildir/.learn-ham/cur
  5848. mkdir -m 700 /home/$MY_USERNAME/Maildir/.learn-ham/new
  5849. mkdir -m 700 /home/$MY_USERNAME/Maildir/.learn-ham/tmp
  5850. ln -s /home/$MY_USERNAME/Maildir/.learn-spam /home/$MY_USERNAME/Maildir/spam
  5851. ln -s /home/$MY_USERNAME/Maildir/.learn-ham /home/$MY_USERNAME/Maildir/ham
  5852. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Maildir
  5853. fi
  5854. echo 'configure_email' >> $COMPLETION_FILE
  5855. }
  5856. function create_procmail {
  5857. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  5858. return
  5859. fi
  5860. if grep -Fxq "create_procmail" $COMPLETION_FILE; then
  5861. return
  5862. fi
  5863. if [ ! -f /home/$MY_USERNAME/.procmailrc ]; then
  5864. echo 'MAILDIR=$HOME/Maildir' > /home/$MY_USERNAME/.procmailrc
  5865. echo 'DEFAULT=$MAILDIR/' >> /home/$MY_USERNAME/.procmailrc
  5866. echo 'LOGFILE=$HOME/log/procmail.log' >> /home/$MY_USERNAME/.procmailrc
  5867. echo 'LOGABSTRACT=all' >> /home/$MY_USERNAME/.procmailrc
  5868. fi
  5869. echo 'create_procmail' >> $COMPLETION_FILE
  5870. }
  5871. function spam_filtering {
  5872. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  5873. return
  5874. fi
  5875. if grep -Fxq "spam_filtering" $COMPLETION_FILE; then
  5876. return
  5877. fi
  5878. apt-get -y install exim4-daemon-heavy
  5879. apt-get -y install spamassassin
  5880. sa-update -v
  5881. sed -i 's/ENABLED=0/ENABLED=1/g' /etc/default/spamassassin
  5882. sed -i 's/# spamd_address = 127.0.0.1 783/spamd_address = 127.0.0.1 783/g' /etc/exim4/exim4.conf.template
  5883. # This configuration is based on https://wiki.debian.org/DebianSpamAssassin
  5884. sed -i 's/local_parts = postmaster/local_parts = postmaster:abuse/g' /etc/exim4/conf.d/acl/30_exim4-config_check_rcpt
  5885. sed -i '/domains = +local_domains : +relay_to_domains/a\ set acl_m0 = rfcnames' /etc/exim4/conf.d/acl/30_exim4-config_check_rcpt
  5886. sed -i 's/accept/accept condition = ${if eq{$acl_m0}{rfcnames} {1}{0}}/g' /etc/exim4/conf.d/acl/40_exim4-config_check_data
  5887. echo 'warn message = X-Spam-Score: $spam_score ($spam_bar)' >> /etc/exim4/conf.d/acl/40_exim4-config_check_data
  5888. echo ' spam = nobody:true' >> /etc/exim4/conf.d/acl/40_exim4-config_check_data
  5889. echo 'warn message = X-Spam-Flag: YES' >> /etc/exim4/conf.d/acl/40_exim4-config_check_data
  5890. echo ' spam = nobody' >> /etc/exim4/conf.d/acl/40_exim4-config_check_data
  5891. echo 'warn message = X-Spam-Report: $spam_report' >> /etc/exim4/conf.d/acl/40_exim4-config_check_data
  5892. echo ' spam = nobody' >> /etc/exim4/conf.d/acl/40_exim4-config_check_data
  5893. echo '# reject spam at high scores (> 12)' >> /etc/exim4/conf.d/acl/40_exim4-config_check_data
  5894. echo 'deny message = This message scored $spam_score spam points.' >> /etc/exim4/conf.d/acl/40_exim4-config_check_data
  5895. echo ' spam = nobody:true' >> /etc/exim4/conf.d/acl/40_exim4-config_check_data
  5896. echo ' condition = ${if >{$spam_score_int}{120}{1}{0}}' >> /etc/exim4/conf.d/acl/40_exim4-config_check_data
  5897. # procmail configuration
  5898. echo '# get spamassassin to check emails' >> /home/$MY_USERNAME/.procmailrc
  5899. echo ':0fw: .spamassassin.lock' >> /home/$MY_USERNAME/.procmailrc
  5900. echo ' * < 256000' >> /home/$MY_USERNAME/.procmailrc
  5901. echo '| spamc' >> /home/$MY_USERNAME/.procmailrc
  5902. echo '# strong spam are discarded' >> /home/$MY_USERNAME/.procmailrc
  5903. echo ':0' >> /home/$MY_USERNAME/.procmailrc
  5904. echo ' * ^X-Spam-Level: \*\*\*\*\*\*' >> /home/$MY_USERNAME/.procmailrc
  5905. echo '/dev/null' >> /home/$MY_USERNAME/.procmailrc
  5906. echo '# weak spam are kept just in case - clear this out every now and then' >> /home/$MY_USERNAME/.procmailrc
  5907. echo ':0' >> /home/$MY_USERNAME/.procmailrc
  5908. echo ' * ^X-Spam-Level: \*\*\*\*\*' >> /home/$MY_USERNAME/.procmailrc
  5909. echo 'maybe-spam/' >> /home/$MY_USERNAME/.procmailrc
  5910. echo '# otherwise, marginal spam goes here for revision' >> /home/$MY_USERNAME/.procmailrc
  5911. echo ':0' >> /home/$MY_USERNAME/.procmailrc
  5912. echo ' * ^X-Spam-Level: \*\*' >> /home/$MY_USERNAME/.procmailrc
  5913. echo 'spam/' >> /home/$MY_USERNAME/.procmailrc
  5914. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.procmailrc
  5915. # filtering scripts
  5916. echo '#!/bin/bash' > /usr/bin/filterspam
  5917. echo 'USERNAME=$1' >> /usr/bin/filterspam
  5918. echo 'MAILDIR=/home/$USERNAME/Maildir/.learn-spam' >> /usr/bin/filterspam
  5919. echo 'if [ ! -d "$MAILDIR" ]; then' >> /usr/bin/filterspam
  5920. echo ' exit' >> /usr/bin/filterspam
  5921. echo 'fi' >> /usr/bin/filterspam
  5922. echo 'for f in `ls $MAILDIR/cur`' >> /usr/bin/filterspam
  5923. echo 'do' >> /usr/bin/filterspam
  5924. echo ' spamc -L spam < "$MAILDIR/cur/$f" > /dev/null' >> /usr/bin/filterspam
  5925. echo ' rm "$MAILDIR/cur/$f"' >> /usr/bin/filterspam
  5926. echo 'done' >> /usr/bin/filterspam
  5927. echo 'for f in `ls $MAILDIR/new`' >> /usr/bin/filterspam
  5928. echo 'do' >> /usr/bin/filterspam
  5929. echo ' spamc -L spam < "$MAILDIR/new/$f" > /dev/null' >> /usr/bin/filterspam
  5930. echo ' rm "$MAILDIR/new/$f"' >> /usr/bin/filterspam
  5931. echo 'done' >> /usr/bin/filterspam
  5932. echo '#!/bin/bash' > /usr/bin/filterham
  5933. echo 'USERNAME=$1' >> /usr/bin/filterham
  5934. echo 'MAILDIR=/home/$USERNAME/Maildir/.learn-ham' >> /usr/bin/filterham
  5935. echo 'if [ ! -d "$MAILDIR" ]; then' >> /usr/bin/filterham
  5936. echo ' exit' >> /usr/bin/filterham
  5937. echo 'fi' >> /usr/bin/filterham
  5938. echo 'for f in `ls $MAILDIR/cur`' >> /usr/bin/filterham
  5939. echo 'do' >> /usr/bin/filterham
  5940. echo ' spamc -L ham < "$MAILDIR/cur/$f" > /dev/null' >> /usr/bin/filterham
  5941. echo ' rm "$MAILDIR/cur/$f"' >> /usr/bin/filterham
  5942. echo 'done' >> /usr/bin/filterham
  5943. echo 'for f in `ls $MAILDIR/new`' >> /usr/bin/filterham
  5944. echo 'do' >> /usr/bin/filterham
  5945. echo ' spamc -L ham < "$MAILDIR/new/$f" > /dev/null' >> /usr/bin/filterham
  5946. echo ' rm "$MAILDIR/new/$f"' >> /usr/bin/filterham
  5947. echo 'done' >> /usr/bin/filterham
  5948. if ! grep -q "filterspam" /etc/crontab; then
  5949. echo "*/3 * * * * root /usr/bin/timeout 120 /usr/bin/filterspam $MY_USERNAME" >> /etc/crontab
  5950. fi
  5951. if ! grep -q "filterham" /etc/crontab; then
  5952. echo "*/3 * * * * root /usr/bin/timeout 120 /usr/bin/filterham $MY_USERNAME" >> /etc/crontab
  5953. fi
  5954. chmod 655 /usr/bin/filterspam /usr/bin/filterham
  5955. sed -i 's/# use_bayes 1/use_bayes 1/g' /etc/mail/spamassassin/local.cf
  5956. sed -i 's/# bayes_auto_learn 1/bayes_auto_learn 1/g' /etc/mail/spamassassin/local.cf
  5957. # user preferences
  5958. if [ ! -d /home/$MY_USERNAME/.spamassassin ]; then
  5959. mkdir /home/$MY_USERNAME/.spamassassin
  5960. echo '# How many points before a mail is considered spam.' > /home/$MY_USERNAME/.spamassassin/user_prefs
  5961. echo '# required_score 5' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5962. echo '' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5963. echo '# Whitelist and blacklist addresses are now file-glob-style patterns, so' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5964. echo '# "friend@somewhere.com", "*@isp.com", or "*.domain.net" will all work.' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5965. echo '# whitelist_from someone@somewhere.com' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5966. echo '' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5967. echo '# Add your own customised scores for some tests below. The default scores are' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5968. echo '# read from the installed spamassassin rules files, but you can override them' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5969. echo '# here. To see the list of tests and their default scores, go to' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5970. echo '# http://spamassassin.apache.org/tests.html .' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5971. echo '#' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5972. echo '# score SYMBOLIC_TEST_NAME n.nn' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5973. echo '' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5974. echo '# Speakers of Asian languages, like Chinese, Japanese and Korean, will almost' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5975. echo '# definitely want to uncomment the following lines. They will switch off some' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5976. echo '# rules that detect 8-bit characters, which commonly trigger on mails using CJK' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5977. echo '# character sets, or that assume a western-style charset is in use. ' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5978. echo '# ' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5979. echo '# score HTML_COMMENT_8BITS 0' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5980. echo '# score UPPERCASE_25_50 0' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5981. echo '# score UPPERCASE_50_75 0' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5982. echo '# score UPPERCASE_75_100 0' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5983. echo '# score OBSCURED_EMAIL 0' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5984. echo '' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5985. echo '# Speakers of any language that uses non-English, accented characters may wish' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5986. echo '# to uncomment the following lines. They turn off rules that fire on' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5987. echo '# misformatted messages generated by common mail apps in contravention of the' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5988. echo '# email RFCs.' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5989. echo '' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5990. echo '# score SUBJ_ILLEGAL_CHARS 0' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5991. fi
  5992. # this must be accessible by root
  5993. chown -R $MY_USERNAME:root /home/$MY_USERNAME/.spamassassin
  5994. service spamassassin restart
  5995. service exim4 restart
  5996. service cron restart
  5997. echo 'spam_filtering' >> $COMPLETION_FILE
  5998. }
  5999. function configure_imap {
  6000. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  6001. return
  6002. fi
  6003. if grep -Fxq "configure_imap" $COMPLETION_FILE; then
  6004. return
  6005. fi
  6006. dpkg -P dovecot-imapd
  6007. dpkg -P dovecot-core
  6008. apt-get -y install dovecot-imapd
  6009. if [ ! -d /etc/dovecot ]; then
  6010. echo "ERROR: Dovecot does not appear to have installed. $CHECK_MESSAGE"
  6011. exit 48
  6012. fi
  6013. if [ ! -f /etc/ssl/certs/dovecot.dhparam ]; then
  6014. freedombone-addcert -h dovecot --dhkey $DH_KEYLENGTH
  6015. check_certificates dovecot
  6016. fi
  6017. chown root:dovecot /etc/ssl/certs/dovecot.*
  6018. chown root:dovecot /etc/ssl/private/dovecot.*
  6019. if [ ! -f /etc/dovecot/conf.d/10-ssl.conf ]; then
  6020. echo 'Unable to find /etc/dovecot/conf.d/10-ssl.conf'
  6021. exit 83629
  6022. fi
  6023. sed -i 's|#ssl =.*|ssl = required|g' /etc/dovecot/conf.d/10-ssl.conf
  6024. sed -i 's|ssl = no|ssl = required|g' /etc/dovecot/conf.d/10-ssl.conf
  6025. sed -i 's|ssl = yes|ssl = required|g' /etc/dovecot/conf.d/10-ssl.conf
  6026. sed -i 's|#ssl_cert =.*|ssl_cert = </etc/ssl/certs/dovecot.crt|g' /etc/dovecot/conf.d/10-ssl.conf
  6027. sed -i 's|ssl_cert =.*|ssl_cert = </etc/ssl/certs/dovecot.crt|g' /etc/dovecot/conf.d/10-ssl.conf
  6028. sed -i 's|#ssl_key =.*|ssl_key = </etc/ssl/private/dovecot.key|g' /etc/dovecot/conf.d/10-ssl.conf
  6029. sed -i 's|ssl_key =.*|ssl_key = </etc/ssl/private/dovecot.key|g' /etc/dovecot/conf.d/10-ssl.conf
  6030. sed -i 's|#ssl_dh_parameters_length.*|ssl_dh_parameters_length = 1024|g' /etc/dovecot/conf.d/10-ssl.conf
  6031. sed -i 's/#ssl_prefer_server_ciphers.*/ssl_prefer_server_ciphers = yes/g' /etc/dovecot/conf.d/10-ssl.conf
  6032. sed -i "s|#ssl_protocols =.*|ssl_protocols = '$SSL_PROTOCOLS'|g" /etc/dovecot/conf.d/10-ssl.conf
  6033. sed -i "s|ssl_protocols =.*|ssl_protocols = '$SSL_PROTOCOLS'|g" /etc/dovecot/conf.d/10-ssl.conf
  6034. echo "ssl_cipher_list = '$SSL_CIPHERS'" >> /etc/dovecot/conf.d/10-ssl.conf
  6035. if [ ! -f /etc/dovecot/conf.d/10-master.conf ]; then
  6036. echo 'Unable to find /etc/dovecot/conf.d/10-master.conf'
  6037. exit 49259
  6038. fi
  6039. sed -i 's/#process_limit =.*/process_limit = 100/g' /etc/dovecot/conf.d/10-master.conf
  6040. sed -i 's/#default_client_limit.*/default_client_limit = 100/g' /etc/dovecot/conf.d/10-master.conf
  6041. sed -i 's|#default_process_limit =.*|default_process_limit = 100|g' /etc/dovecot/conf.d/10-master.conf
  6042. if [ ! -f /etc/dovecot/conf.d/10-logging.conf ]; then
  6043. echo 'Unable to find /etc/dovecot/conf.d/10-logging.conf'
  6044. exit 48936
  6045. fi
  6046. sed -i 's/#auth_verbose.*/auth_verbose = yes/g' /etc/dovecot/conf.d/10-logging.conf
  6047. if [ ! -f /etc/dovecot/dovecot.conf ]; then
  6048. echo 'Unable to find /etc/dovecot/dovecot.conf'
  6049. exit 43890
  6050. fi
  6051. sed -i 's/#listen =.*/listen = */g' /etc/dovecot/dovecot.conf
  6052. if [ ! -f /etc/dovecot/conf.d/10-auth.conf ]; then
  6053. echo 'Unable to find /etc/dovecot/conf.d/10-auth.conf'
  6054. exit 843256
  6055. fi
  6056. sed -i 's/#disable_plaintext_auth =.*/disable_plaintext_auth = no/g' /etc/dovecot/conf.d/10-auth.conf
  6057. sed -i 's/auth_mechanisms =.*/auth_mechanisms = plain login/g' /etc/dovecot/conf.d/10-auth.conf
  6058. if [ ! -f /etc/dovecot/conf.d/10-mail.conf ]; then
  6059. echo 'Unable to find /etc/dovecot/conf.d/10-mail.conf'
  6060. exit 42036
  6061. fi
  6062. sed -i 's|mail_location =.*|mail_location = maildir:~/Maildir:LAYOUT=fs|g' /etc/dovecot/conf.d/10-mail.conf
  6063. service dovecot restart
  6064. echo 'configure_imap' >> $COMPLETION_FILE
  6065. }
  6066. function configure_imap_client_certs {
  6067. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  6068. return
  6069. fi
  6070. if grep -Fxq "configure_imap_client_certs" $COMPLETION_FILE; then
  6071. return
  6072. fi
  6073. # http://strange.systems/certificate-based-auth-with-dovecot-sendmail/
  6074. sed -i 's|#default_process_limit =.*|default_process_limit = 100|g' /etc/dovecot/conf.d/10-master.conf
  6075. sed -i 's/disable_plaintext_auth =.*/disable_plaintext_auth = yes/g' /etc/dovecot/conf.d/10-auth.conf
  6076. sed -i 's|#auth_ssl_require_client_cert =.*|auth_ssl_require_client_cert = yes|g' /etc/dovecot/conf.d/10-auth.conf
  6077. sed -i 's|#auth_ssl_username_from_cert =.*|auth_ssl_username_from_cert = yes|g' /etc/dovecot/conf.d/10-auth.conf
  6078. sed -i "s|#ssl_ca =.*|ssl_ca = /etc/ssl/certs/ca-$DEFAULT_DOMAIN_NAME.crt|g" /etc/dovecot/conf.d/10-ssl.conf
  6079. sed -i 's|#ssl_cert_username_field =.*|ssl_cert_username_field = commonName|g' /etc/dovecot/conf.d/10-ssl.conf
  6080. sed -i 's|#ssl_verify_client_cert =.*|ssl_verify_client_cert = yes|g' /etc/dovecot/conf.d/10-ssl.conf
  6081. if ! grep -q "passdb {" /etc/dovecot/conf.d/10-auth.conf; then
  6082. echo '' >> /etc/dovecot/conf.d/10-auth.conf
  6083. echo 'passdb {' >> /etc/dovecot/conf.d/10-auth.conf
  6084. echo ' driver = passwd-file' >> /etc/dovecot/conf.d/10-auth.conf
  6085. echo ' args = /etc/dovecot/passwd-file' >> /etc/dovecot/conf.d/10-auth.conf
  6086. echo ' deny = no' >> /etc/dovecot/conf.d/10-auth.conf
  6087. echo ' master = no' >> /etc/dovecot/conf.d/10-auth.conf
  6088. echo ' pass = no' >> /etc/dovecot/conf.d/10-auth.conf
  6089. echo '}' >> /etc/dovecot/conf.d/10-auth.conf
  6090. fi
  6091. # make a CA cert
  6092. if [ ! -f /etc/ssl/private/ca-$DEFAULT_DOMAIN_NAME.key ]; then
  6093. freedombone-addcert -h $DEFAULT_DOMAIN_NAME --ca "" --dhkey $DH_KEYLENGTH
  6094. fi
  6095. # CA configuration
  6096. echo '[ ca ]' > /etc/ssl/dovecot-ca.cnf
  6097. echo "default_ca = dovecot-ca" >> /etc/ssl/dovecot-ca.cnf
  6098. echo '' >> /etc/ssl/dovecot-ca.cnf
  6099. echo '[ crl_ext ]' >> /etc/ssl/dovecot-ca.cnf
  6100. echo 'authorityKeyIdentifier=keyid:always' >> /etc/ssl/dovecot-ca.cnf
  6101. echo '' >> /etc/ssl/dovecot-ca.cnf
  6102. echo '[ dovecot-ca ]' >> /etc/ssl/dovecot-ca.cnf
  6103. echo 'new_certs_dir = .' >> /etc/ssl/dovecot-ca.cnf
  6104. echo 'unique_subject = no' >> /etc/ssl/dovecot-ca.cnf
  6105. echo "certificate = /etc/ssl/certs/ca-$DEFAULT_DOMAIN_NAME.crt" >> /etc/ssl/dovecot-ca.cnf
  6106. echo 'database = ssldb' >> /etc/ssl/dovecot-ca.cnf
  6107. echo "private_key = /etc/ssl/private/ca-$DEFAULT_DOMAIN_NAME.key" >> /etc/ssl/dovecot-ca.cnf
  6108. echo 'serial = sslserial' >> /etc/ssl/dovecot-ca.cnf
  6109. echo 'default_days = 3650' >> /etc/ssl/dovecot-ca.cnf
  6110. echo 'default_md = sha256' >> /etc/ssl/dovecot-ca.cnf
  6111. echo 'default_bits = 4096' >> /etc/ssl/dovecot-ca.cnf
  6112. echo 'policy = dovecot-ca_policy' >> /etc/ssl/dovecot-ca.cnf
  6113. echo 'x509_extensions = dovecot-ca_extensions' >> /etc/ssl/dovecot-ca.cnf
  6114. echo '' >> /etc/ssl/dovecot-ca.cnf
  6115. echo '[ dovecot-ca_policy ]' >> /etc/ssl/dovecot-ca.cnf
  6116. echo 'commonName = supplied' >> /etc/ssl/dovecot-ca.cnf
  6117. echo 'stateOrProvinceName = supplied' >> /etc/ssl/dovecot-ca.cnf
  6118. echo 'countryName = supplied' >> /etc/ssl/dovecot-ca.cnf
  6119. echo 'emailAddress = optional' >> /etc/ssl/dovecot-ca.cnf
  6120. echo 'organizationName = supplied' >> /etc/ssl/dovecot-ca.cnf
  6121. echo 'organizationalUnitName = optional' >> /etc/ssl/dovecot-ca.cnf
  6122. echo '' >> /etc/ssl/dovecot-ca.cnf
  6123. echo '[ dovecot-ca_extensions ]' >> /etc/ssl/dovecot-ca.cnf
  6124. echo 'basicConstraints = CA:false' >> /etc/ssl/dovecot-ca.cnf
  6125. echo 'subjectKeyIdentifier = hash' >> /etc/ssl/dovecot-ca.cnf
  6126. echo 'authorityKeyIdentifier = keyid:always' >> /etc/ssl/dovecot-ca.cnf
  6127. echo 'keyUsage = digitalSignature,keyEncipherment' >> /etc/ssl/dovecot-ca.cnf
  6128. echo 'extendedKeyUsage = clientAuth' >> /etc/ssl/dovecot-ca.cnf
  6129. if [ -f /etc/ssl/ssldb ]; then
  6130. rm /etc/ssl/ssldb
  6131. fi
  6132. if [ -f /etc/ssl/sslserial ]; then
  6133. rm /etc/ssl/sslserial
  6134. fi
  6135. touch /etc/ssl/ssldb
  6136. echo 0001 > /etc/ssl/sslserial
  6137. #freedombone-clientcert -u $MY_USERNAME
  6138. service dovecot restart
  6139. echo 'configure_imap_client_certs' >> $COMPLETION_FILE
  6140. }
  6141. function configure_gpg {
  6142. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  6143. return
  6144. fi
  6145. if grep -Fxq "configure_gpg" $COMPLETION_FILE; then
  6146. return
  6147. fi
  6148. apt-get -y install gnupg
  6149. # if gpg keys directory was previously imported from usb
  6150. if [[ $GPG_KEYS_IMPORTED == "yes" && -d /home/$MY_USERNAME/.gnupg ]]; then
  6151. sed -i "s|keyserver hkp://keys.gnupg.net|keyserver $GPG_KEYSERVER|g" /home/$MY_USERNAME/.gnupg/gpg.conf
  6152. MY_GPG_PUBLIC_KEY_ID=$(su -c "gpg --list-keys $MY_EMAIL_ADDRESS | grep 'pub '" - $MY_USERNAME | awk -F ' ' '{print $2}' | awk -F '/' '{print $2}')
  6153. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.gnupg
  6154. chmod 700 /home/$MY_USERNAME/.gnupg
  6155. chmod 600 /home/$MY_USERNAME/.gnupg/*
  6156. echo 'configure_gpg' >> $COMPLETION_FILE
  6157. return
  6158. fi
  6159. if [ ! -d /home/$MY_USERNAME/.gnupg ]; then
  6160. mkdir /home/$MY_USERNAME/.gnupg
  6161. echo 'keyserver hkp://keys.gnupg.net' >> /home/$MY_USERNAME/.gnupg/gpg.conf
  6162. echo 'keyserver-options auto-key-retrieve' >> /home/$MY_USERNAME/.gnupg/gpg.conf
  6163. fi
  6164. sed -i "s|keyserver hkp://keys.gnupg.net|keyserver $GPG_KEYSERVER|g" /home/$MY_USERNAME/.gnupg/gpg.conf
  6165. if ! grep -q "# default preferences" /home/$MY_USERNAME/.gnupg/gpg.conf; then
  6166. echo '' >> /home/$MY_USERNAME/.gnupg/gpg.conf
  6167. echo '# default preferences' >> /home/$MY_USERNAME/.gnupg/gpg.conf
  6168. echo 'personal-digest-preferences SHA256' >> /home/$MY_USERNAME/.gnupg/gpg.conf
  6169. echo 'cert-digest-algo SHA256' >> /home/$MY_USERNAME/.gnupg/gpg.conf
  6170. echo 'default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed' >> /home/$MY_USERNAME/.gnupg/gpg.conf
  6171. fi
  6172. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.gnupg
  6173. chmod 700 /home/$MY_USERNAME/.gnupg
  6174. chmod 600 /home/$MY_USERNAME/.gnupg/*
  6175. if [[ $MY_GPG_PUBLIC_KEY && $MY_GPG_PRIVATE_KEY ]]; then
  6176. # use your existing GPG keys which were exported
  6177. if [ ! -f $MY_GPG_PUBLIC_KEY ]; then
  6178. echo "GPG public key file $MY_GPG_PUBLIC_KEY was not found"
  6179. exit 5
  6180. fi
  6181. if [ ! -f $MY_GPG_PRIVATE_KEY ]; then
  6182. echo "GPG private key file $MY_GPG_PRIVATE_KEY was not found"
  6183. exit 6
  6184. fi
  6185. su -c "gpg --import $MY_GPG_PUBLIC_KEY" - $MY_USERNAME
  6186. su -c "gpg --allow-secret-key-import --import $MY_GPG_PRIVATE_KEY" - $MY_USERNAME
  6187. # for security ensure that the private key file doesn't linger around
  6188. shred -zu $MY_GPG_PRIVATE_KEY
  6189. MY_GPG_PUBLIC_KEY_ID=$(su -c "gpg --list-keys $MY_EMAIL_ADDRESS | grep 'pub '" - $MY_USERNAME | awk -F ' ' '{print $2}' | awk -F '/' '{print $2}')
  6190. else
  6191. # Generate a GPG key
  6192. echo 'Key-Type: 1' > /home/$MY_USERNAME/gpg-genkey.conf
  6193. echo 'Key-Length: 4096' >> /home/$MY_USERNAME/gpg-genkey.conf
  6194. echo 'Subkey-Type: 1' >> /home/$MY_USERNAME/gpg-genkey.conf
  6195. echo 'Subkey-Length: 4096' >> /home/$MY_USERNAME/gpg-genkey.conf
  6196. echo "Name-Real: $MY_NAME" >> /home/$MY_USERNAME/gpg-genkey.conf
  6197. echo "Name-Email: $MY_EMAIL_ADDRESS" >> /home/$MY_USERNAME/gpg-genkey.conf
  6198. echo 'Expire-Date: 0' >> /home/$MY_USERNAME/gpg-genkey.conf
  6199. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/gpg-genkey.conf
  6200. su -c "gpg --batch --gen-key /home/$MY_USERNAME/gpg-genkey.conf" - $MY_USERNAME
  6201. shred -zu /home/$MY_USERNAME/gpg-genkey.conf
  6202. MY_GPG_PUBLIC_KEY_ID=$(su -c "gpg --list-keys $MY_EMAIL_ADDRESS | grep 'pub '" - $MY_USERNAME | awk -F ' ' '{print $2}' | awk -F '/' '{print $2}')
  6203. MY_GPG_PUBLIC_KEY=/tmp/public_key.gpg
  6204. su -c "gpg --output $MY_GPG_PUBLIC_KEY --armor --export $MY_GPG_PUBLIC_KEY_ID" - $MY_USERNAME
  6205. if grep -q "configure_email" $COMPLETION_FILE; then
  6206. if ! grep -q "Change your GPG password" /home/$MY_USERNAME/README; then
  6207. echo '' >> /home/$MY_USERNAME/README
  6208. echo '' >> /home/$MY_USERNAME/README
  6209. echo 'Change your GPG password' >> /home/$MY_USERNAME/README
  6210. echo '========================' >> /home/$MY_USERNAME/README
  6211. echo "It's very important to add a password to your GPG key so that" >> /home/$MY_USERNAME/README
  6212. echo "if anyone does get access to your email they still won't be able" >> /home/$MY_USERNAME/README
  6213. echo 'to read them without knowning the GPG password.' >> /home/$MY_USERNAME/README
  6214. echo 'You can change the it with:' >> /home/$MY_USERNAME/README
  6215. echo '' >> /home/$MY_USERNAME/README
  6216. echo " gpg --edit-key $MY_GPG_PUBLIC_KEY" >> /home/$MY_USERNAME/README
  6217. echo ' passwd' >> /home/$MY_USERNAME/README
  6218. echo ' save' >> /home/$MY_USERNAME/README
  6219. echo ' quit' >> /home/$MY_USERNAME/README
  6220. fi
  6221. if ! grep -q "Publish your GPG public key" /home/$MY_USERNAME/README; then
  6222. echo '' >> /home/$MY_USERNAME/README
  6223. echo '' >> /home/$MY_USERNAME/README
  6224. echo 'Publish your GPG public key' >> /home/$MY_USERNAME/README
  6225. echo '===========================' >> /home/$MY_USERNAME/README
  6226. echo 'So that others can send emails to you securely you should' >> /home/$MY_USERNAME/README
  6227. echo 'publish your GPG public key with the command:' >> /home/$MY_USERNAME/README
  6228. echo '' >> /home/$MY_USERNAME/README
  6229. echo " gpg --send-keys $MY_GPG_PUBLIC_KEY" >> /home/$MY_USERNAME/README
  6230. fi
  6231. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  6232. chmod 600 /home/$MY_USERNAME/README
  6233. fi
  6234. fi
  6235. echo 'configure_gpg' >> $COMPLETION_FILE
  6236. }
  6237. function encrypt_incoming_email {
  6238. # encrypts incoming mail using your GPG public key
  6239. # so even if an attacker gains access to the data at rest they still need
  6240. # to know your GPG key password to be able to read anything
  6241. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  6242. return
  6243. fi
  6244. if grep -Fxq "encrypt_incoming_email" $COMPLETION_FILE; then
  6245. return
  6246. fi
  6247. if [[ $GPG_ENCRYPT_STORED_EMAIL != "yes" ]]; then
  6248. return
  6249. fi
  6250. if [ ! -f /usr/bin/gpgit.pl ]; then
  6251. apt-get -y install git libmail-gnupg-perl
  6252. cd $INSTALL_DIR
  6253. git clone https://github.com/mikecardwell/gpgit
  6254. cd gpgit
  6255. cp gpgit.pl /usr/bin
  6256. fi
  6257. # add a procmail rule
  6258. if ! grep -q "/usr/bin/gpgit.pl" /home/$MY_USERNAME/.procmailrc; then
  6259. echo '' >> /home/$MY_USERNAME/.procmailrc
  6260. echo ':0 f' >> /home/$MY_USERNAME/.procmailrc
  6261. echo "| /usr/bin/gpgit.pl --encrypt-mode prefer-inline --inline-flatten $MY_EMAIL_ADDRESS" >> /home/$MY_USERNAME/.procmailrc
  6262. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.procmailrc
  6263. fi
  6264. echo 'encrypt_incoming_email' >> $COMPLETION_FILE
  6265. }
  6266. function encrypt_outgoing_email {
  6267. # encrypts outgoing mail using your GPG public key
  6268. # so even if an attacker gains access to the data at rest they still need
  6269. # to know your GPG key password to be able to read sent mail
  6270. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  6271. return
  6272. fi
  6273. if grep -Fxq "encrypt_outgoing_email" $COMPLETION_FILE; then
  6274. return
  6275. fi
  6276. if [[ $GPG_ENCRYPT_STORED_EMAIL != "yes" ]]; then
  6277. return
  6278. fi
  6279. if [ ! -d /home/$MY_USERNAME/.gnupg ]; then
  6280. return
  6281. fi
  6282. if [ ! -f /home/$MY_USERNAME/.muttrc ]; then
  6283. return
  6284. fi
  6285. # obtain your public key ID
  6286. if [ ! $MY_GPG_PUBLIC_KEY_ID ]; then
  6287. MY_GPG_PUBLIC_KEY_ID=$(su -c "gpg --list-keys $MY_EMAIL_ADDRESS | grep 'pub '" - $MY_USERNAME | awk -F ' ' '{print $2}' | awk -F '/' '{print $2}')
  6288. if [ ! $MY_GPG_PUBLIC_KEY_ID ]; then
  6289. return
  6290. fi
  6291. fi
  6292. if ! grep -q "pgp_encrypt_only_command" /home/$MY_USERNAME/.muttrc; then
  6293. echo '' >> /home/$MY_USERNAME/.muttrc
  6294. echo '# Encrypt items in the Sent folder' >> /home/$MY_USERNAME/.muttrc
  6295. echo "set pgp_encrypt_only_command=\"/usr/lib/mutt/pgpewrap gpg --batch --quiet --no-verbose --output - --encrypt --textmode --armor --always-trust --encrypt-to 0x$MY_GPG_PUBLIC_KEY_ID -- -r %r -- %f\"" >> /home/$MY_USERNAME/.muttrc
  6296. else
  6297. sed -i "s|set pgp_encrypt_only_command.*|set pgp_encrypt_only_command=\"/usr/lib/mutt/pgpewrap gpg --batch --quiet --no-verbose --output - --encrypt --textmode --armor --always-trust --encrypt-to 0x$MY_GPG_PUBLIC_KEY_ID -- -r %r -- %f\"|g" /home/$MY_USERNAME/.muttrc
  6298. fi
  6299. if ! grep -q "pgp_encrypt_sign_command" /home/$MY_USERNAME/.muttrc; then
  6300. echo "set pgp_encrypt_sign_command=\"/usr/lib/mutt/pgpewrap gpg %?p?--passphrase-fd 0? --batch --quiet --no-verbose --textmode --output - --encrypt --sign %?a?-u %a? --armor --always-trust --encrypt-to 0x$MY_GPG_PUBLIC_KEY_ID -- -r %r -- %f\"" >> /home/$MY_USERNAME/.muttrc
  6301. else
  6302. sed -i "s|set pgp_encrypt_sign_command.*|set pgp_encrypt_sign_command=\"/usr/lib/mutt/pgpewrap gpg %?p?--passphrase-fd 0? --batch --quiet --no-verbose --textmode --output - --encrypt --sign %?a?-u %a? --armor --always-trust --encrypt-to 0x$MY_GPG_PUBLIC_KEY_ID -- -r %r -- %f\"|g" /home/$MY_USERNAME/.muttrc
  6303. fi
  6304. echo 'encrypt_outgoing_email' >> $COMPLETION_FILE
  6305. }
  6306. function encrypt_all_email {
  6307. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  6308. return
  6309. fi
  6310. if grep -Fxq "encrypt_all_email" $COMPLETION_FILE; then
  6311. return
  6312. fi
  6313. if [[ $GPG_ENCRYPT_STORED_EMAIL != "yes" ]]; then
  6314. return
  6315. fi
  6316. echo '#!/bin/bash' > /usr/bin/encmaildir
  6317. echo '#' >> /usr/bin/encmaildir
  6318. echo '# GPLv2' >> /usr/bin/encmaildir
  6319. echo '# GPG Encrypt a Maildir using gpgit.pl' >> /usr/bin/encmaildir
  6320. echo '# Oct 03, 2014' >> /usr/bin/encmaildir
  6321. echo '#' >> /usr/bin/encmaildir
  6322. echo '# Change log:' >> /usr/bin/encmaildir
  6323. echo '# Sep 03, 2011' >> /usr/bin/encmaildir
  6324. echo '# - Temporary file is based on file_owner to avoid' >> /usr/bin/encmaildir
  6325. echo '# issues with permission differences.' >> /usr/bin/encmaildir
  6326. echo '# - Temporary file is removed after run.' >> /usr/bin/encmaildir
  6327. echo '# - Optional arguments passed to "find".' >> /usr/bin/encmaildir
  6328. echo '# - Full paths to binaries.' >> /usr/bin/encmaildir
  6329. echo '# - Removed unneccessary need of "cat", "grep", etc.' >> /usr/bin/encmaildir
  6330. echo '# Sep 04, 2011' >> /usr/bin/encmaildir
  6331. echo '# - Dont remove Dovecot index/uid unless messages' >> /usr/bin/encmaildir
  6332. echo '# have been GPG encrypted.' >> /usr/bin/encmaildir
  6333. echo '# - Adjust file tests to not just use -e' >> /usr/bin/encmaildir
  6334. echo '# - Quote all file operations' >> /usr/bin/encmaildir
  6335. echo '# Sep 05, 2011' >> /usr/bin/encmaildir
  6336. echo '# - Dont arbitrarily copy files, only overwrite the file' >> /usr/bin/encmaildir
  6337. echo '# in ~/Maildir if it differs after calling gpgencmail.pl' >> /usr/bin/encmaildir
  6338. echo '# - Only rebuild the index if we have modified ~/Maildir' >> /usr/bin/encmaildir
  6339. echo '# Oct 03, 2014' >> /usr/bin/encmaildir
  6340. echo '# - Minor modifications for use with Freedombone' >> /usr/bin/encmaildir
  6341. echo '' >> /usr/bin/encmaildir
  6342. echo 'if [[ -z "$1" || -z "$2" || -z "$3" ]]; then' >> /usr/bin/encmaildir
  6343. echo ' echo "Usage is ./encmaildir.sh {optional arguments passed to find for messages such as -mtime 0}"' >> /usr/bin/encmaildir
  6344. echo ' exit 0' >> /usr/bin/encmaildir
  6345. echo 'fi' >> /usr/bin/encmaildir
  6346. echo '' >> /usr/bin/encmaildir
  6347. echo 'MAIL_DIR=$1' >> /usr/bin/encmaildir
  6348. echo 'EMAIL_ADDRESS=$2' >> /usr/bin/encmaildir
  6349. echo 'USERNAME=$3' >> /usr/bin/encmaildir
  6350. echo 'if [ ! -d "$MAIL_DIR" ]; then' >> /usr/bin/encmaildir
  6351. echo " MAIL_DIR='/home/$MY_USERNAME/Maildir'" >> /usr/bin/encmaildir
  6352. echo 'fi' >> /usr/bin/encmaildir
  6353. echo '' >> /usr/bin/encmaildir
  6354. echo 'if [ ! $EMAIL_ADDRESS ]; then' >> /usr/bin/encmaildir
  6355. echo " EMAIL_ADDRESS='$MY_EMAIL_ADDRESS'" >> /usr/bin/encmaildir
  6356. echo 'fi' >> /usr/bin/encmaildir
  6357. echo '' >> /usr/bin/encmaildir
  6358. echo 'if [ ! $USERNAME ]; then' >> /usr/bin/encmaildir
  6359. echo " USERNAME='$MY_USERNAME'" >> /usr/bin/encmaildir
  6360. echo 'fi' >> /usr/bin/encmaildir
  6361. echo '' >> /usr/bin/encmaildir
  6362. echo '# Does this key exist?' >> /usr/bin/encmaildir
  6363. echo 'gpg --list-keys "$EMAIL_ADDRESS" > /dev/null 2>&1' >> /usr/bin/encmaildir
  6364. echo 'if [ $? -gt 0 ]; then' >> /usr/bin/encmaildir
  6365. echo ' echo "A GPG key for $EMAIL_ADDRESS could not be found!"' >> /usr/bin/encmaildir
  6366. echo ' exit 0' >> /usr/bin/encmaildir
  6367. echo 'fi' >> /usr/bin/encmaildir
  6368. echo '' >> /usr/bin/encmaildir
  6369. echo '# Find all files in the Maildir specified.' >> /usr/bin/encmaildir
  6370. echo 'echo "Calling find"' >> /usr/bin/encmaildir
  6371. echo -n 'find "$MAIL_DIR" -type f -regex ' >> /usr/bin/encmaildir
  6372. echo -n "'.*/\(cur\|new\)/.*' " >> /usr/bin/encmaildir
  6373. echo '$4|while read line; do' >> /usr/bin/encmaildir
  6374. echo ' gpgit.pl --encrypt-mode prefer-inline "$EMAIL_ADDRESS" "/tmp/msg_$USERNAME"' >> /usr/bin/encmaildir
  6375. echo '' >> /usr/bin/encmaildir
  6376. echo ' # Check to see if there are differences between the existing' >> /usr/bin/encmaildir
  6377. echo ' # Maildir file and what was created by gpgit.pl' >> /usr/bin/encmaildir
  6378. echo ' diff -qa "$line" "/tmp/msg_$USERNAME" > /dev/null 2>&1;' >> /usr/bin/encmaildir
  6379. echo ' if [ $? -gt 0 ]; then' >> /usr/bin/encmaildir
  6380. echo ' # Preserve timestamps, set ownership.' >> /usr/bin/encmaildir
  6381. echo ' chown $USERNAME:$USERNAME "/tmp/msg_$USERNAME"' >> /usr/bin/encmaildir
  6382. echo ' chmod 600 "/tmp/msg_$USERNAME"' >> /usr/bin/encmaildir
  6383. echo ' touch "/tmp/msg_$USERNAME" --reference="$line"' >> /usr/bin/encmaildir
  6384. echo '' >> /usr/bin/encmaildir
  6385. echo ' # Unlink the original Maildir message' >> /usr/bin/encmaildir
  6386. echo ' unlink "$line"' >> /usr/bin/encmaildir
  6387. echo '' >> /usr/bin/encmaildir
  6388. echo ' # Strip message sizes, retain experimental flags' >> /usr/bin/encmaildir
  6389. echo ' # and status flags, and copy the file over.' >> /usr/bin/encmaildir
  6390. echo ' STRIPSIZES=$(/bin/echo "$line"|/bin/sed -e "s/W=[[:digit:]]*//" -e "s/S=[[:digit:]]*//" -e "s/,,//" -e "s/,:2/:2/")' >> /usr/bin/encmaildir
  6391. echo ' cp -av "/tmp/msg_$USERNAME" "$STRIPSIZES"' >> /usr/bin/encmaildir
  6392. echo '' >> /usr/bin/encmaildir
  6393. echo ' #Indexes must be rebuilt, weve modified Maildir.' >> /usr/bin/encmaildir
  6394. echo ' touch "/tmp/rebuild_index_$USERNAME"' >> /usr/bin/encmaildir
  6395. echo ' else' >> /usr/bin/encmaildir
  6396. echo ' echo "Not copying, no differences between /tmp/msg_$USERNAME and $line"' >> /usr/bin/encmaildir
  6397. echo ' fi' >> /usr/bin/encmaildir
  6398. echo '' >> /usr/bin/encmaildir
  6399. echo ' # Remove the temporary file' >> /usr/bin/encmaildir
  6400. echo ' unlink "/tmp/msg_$USERNAME"' >> /usr/bin/encmaildir
  6401. echo 'done' >> /usr/bin/encmaildir
  6402. echo '' >> /usr/bin/encmaildir
  6403. echo '# Remove Dovecot index and uids for regeneration.' >> /usr/bin/encmaildir
  6404. echo 'if [ -f "/tmp/rebuild_index_$USERNAME" ]; then' >> /usr/bin/encmaildir
  6405. echo ' echo "Removing Dovecot indexes and uids"' >> /usr/bin/encmaildir
  6406. echo -n ' find "$MAIL_DIR" -type f -regex ' >> /usr/bin/encmaildir
  6407. echo "'.*\(dovecot-\|dovecot\.\|\.uidvalidity\).*' -delete" >> /usr/bin/encmaildir
  6408. echo '' >> /usr/bin/encmaildir
  6409. echo ' # Remove the temporary file' >> /usr/bin/encmaildir
  6410. echo ' unlink "/tmp/rebuild_index_$USERNAME"' >> /usr/bin/encmaildir
  6411. echo 'else' >> /usr/bin/encmaildir
  6412. echo ' echo "No messages found needing GPG encryption, not' >> /usr/bin/encmaildir
  6413. echo ' echo "removing Dovecot indexes and UIDs."' >> /usr/bin/encmaildir
  6414. echo 'fi' >> /usr/bin/encmaildir
  6415. echo 'exit 0' >> /usr/bin/encmaildir
  6416. chmod +x /usr/bin/encmaildir
  6417. if [ ! /home/$MY_USERNAME/README ]; then
  6418. touch /home/$MY_USERNAME/README
  6419. fi
  6420. if ! grep -q "If you have imported legacy email" /home/$MY_USERNAME/README; then
  6421. echo '' >> /home/$MY_USERNAME/README
  6422. echo '' >> /home/$MY_USERNAME/README
  6423. echo 'Encrypting legacy email' >> /home/$MY_USERNAME/README
  6424. echo '=======================' >> /home/$MY_USERNAME/README
  6425. echo 'If you have imported legacy email which is not encrypted' >> /home/$MY_USERNAME/README
  6426. echo 'then it can be encrypted with the command:' >> /home/$MY_USERNAME/README
  6427. echo '' >> /home/$MY_USERNAME/README
  6428. echo ' encmaildir' >> /home/$MY_USERNAME/README
  6429. echo '' >> /home/$MY_USERNAME/README
  6430. echo 'But be warned that depending upon how much email you have' >> /home/$MY_USERNAME/README
  6431. echo 'this could take a seriously LONG time on the Beaglebone' >> /home/$MY_USERNAME/README
  6432. echo 'and may be better done on a faster machine.' >> /home/$MY_USERNAME/README
  6433. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  6434. chmod 600 /home/$MY_USERNAME/README
  6435. fi
  6436. echo 'encrypt_all_email' >> $COMPLETION_FILE
  6437. }
  6438. function email_client {
  6439. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  6440. return
  6441. fi
  6442. if grep -Fxq "email_client" $COMPLETION_FILE; then
  6443. return
  6444. fi
  6445. apt-get -y install mutt-patched lynx abook
  6446. if [ ! -f /etc/Muttrc ]; then
  6447. echo "ERROR: Mutt does not appear to have installed. $CHECK_MESSAGE"
  6448. exit 49
  6449. fi
  6450. if [ ! -d /home/$MY_USERNAME/.mutt ]; then
  6451. mkdir /home/$MY_USERNAME/.mutt
  6452. fi
  6453. echo "text/html; lynx -dump -width=78 -nolist %s | sed ‘s/^ //’; copiousoutput; needsterminal; nametemplate=%s.html" > /home/$MY_USERNAME/.mutt/mailcap
  6454. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.mutt
  6455. echo 'set mbox_type=Maildir' >> /etc/Muttrc
  6456. echo 'set folder="~/Maildir"' >> /etc/Muttrc
  6457. echo 'set mask="!^\\.[^.]"' >> /etc/Muttrc
  6458. echo 'set mbox="~/Maildir"' >> /etc/Muttrc
  6459. echo 'set record="+Sent"' >> /etc/Muttrc
  6460. echo 'set postponed="+Drafts"' >> /etc/Muttrc
  6461. echo 'set trash="+Trash"' >> /etc/Muttrc
  6462. echo 'set spoolfile="~/Maildir"' >> /etc/Muttrc
  6463. echo 'auto_view text/x-vcard text/html text/enriched' >> /etc/Muttrc
  6464. echo 'set editor="emacs -q --load ~/.emacs-mutt"' >> /etc/Muttrc
  6465. echo 'set header_cache="+.cache"' >> /etc/Muttrc
  6466. echo '' >> /etc/Muttrc
  6467. echo 'macro index S "<tag-prefix><save-message>=.learn-spam<enter>" "move to learn-spam"' >> /etc/Muttrc
  6468. echo 'macro pager S "<save-message>=.learn-spam<enter>" "move to learn-spam"' >> /etc/Muttrc
  6469. echo 'macro index H "<tag-prefix><copy-message>=.learn-ham<enter>" "copy to learn-ham"' >> /etc/Muttrc
  6470. echo 'macro pager H "<copy-message>=.learn-ham<enter>" "copy to learn-ham"' >> /etc/Muttrc
  6471. echo '' >> /etc/Muttrc
  6472. echo '# set up the sidebar' >> /etc/Muttrc
  6473. echo 'set sidebar_width=22' >> /etc/Muttrc
  6474. echo 'set sidebar_visible=yes' >> /etc/Muttrc
  6475. echo "set sidebar_delim='|'" >> /etc/Muttrc
  6476. echo 'set sidebar_sort=yes' >> /etc/Muttrc
  6477. echo '' >> /etc/Muttrc
  6478. echo 'set rfc2047_parameters' >> /etc/Muttrc
  6479. echo '' >> /etc/Muttrc
  6480. echo '# Show inbox and sent items' >> /etc/Muttrc
  6481. echo 'mailboxes = =Sent =maybe-spam =spam' >> /etc/Muttrc
  6482. echo '' >> /etc/Muttrc
  6483. echo '# Alter these colours as needed for maximum bling' >> /etc/Muttrc
  6484. echo 'color sidebar_new yellow default' >> /etc/Muttrc
  6485. echo 'color normal white default' >> /etc/Muttrc
  6486. echo 'color hdrdefault brightcyan default' >> /etc/Muttrc
  6487. echo 'color signature green default' >> /etc/Muttrc
  6488. echo 'color attachment brightyellow default' >> /etc/Muttrc
  6489. echo 'color quoted green default' >> /etc/Muttrc
  6490. echo 'color quoted1 white default' >> /etc/Muttrc
  6491. echo 'color tilde blue default' >> /etc/Muttrc
  6492. echo '' >> /etc/Muttrc
  6493. echo '# ctrl-n, ctrl-p to select next, prev folder' >> /etc/Muttrc
  6494. echo '# ctrl-o to open selected folder' >> /etc/Muttrc
  6495. echo 'bind index \Cp sidebar-prev' >> /etc/Muttrc
  6496. echo 'bind index \Cn sidebar-next' >> /etc/Muttrc
  6497. echo 'bind index \Co sidebar-open' >> /etc/Muttrc
  6498. echo 'bind pager \Cp sidebar-prev' >> /etc/Muttrc
  6499. echo 'bind pager \Cn sidebar-next' >> /etc/Muttrc
  6500. echo 'bind pager \Co sidebar-open' >> /etc/Muttrc
  6501. echo '' >> /etc/Muttrc
  6502. echo '# ctrl-b toggles sidebar visibility' >> /etc/Muttrc
  6503. echo "macro index,pager \Cb '<enter-command>toggle sidebar_visible<enter><redraw-screen>' 'toggle sidebar'" >> /etc/Muttrc
  6504. echo '' >> /etc/Muttrc
  6505. echo '# esc-m Mark new messages as read' >> /etc/Muttrc
  6506. echo 'macro index <esc>m "T~N<enter>;WNT~O<enter>;WO\CT~T<enter>" "mark all messages read"' >> /etc/Muttrc
  6507. echo '' >> /etc/Muttrc
  6508. echo '# Collapsing threads' >> /etc/Muttrc
  6509. echo 'macro index [ "<collapse-thread>" "collapse/uncollapse thread"' >> /etc/Muttrc
  6510. echo 'macro index ] "<collapse-all>" "collapse/uncollapse all threads"' >> /etc/Muttrc
  6511. echo '' >> /etc/Muttrc
  6512. echo '# threads containing new messages' >> /etc/Muttrc
  6513. echo 'uncolor index "~(~N)"' >> /etc/Muttrc
  6514. echo 'color index brightblue default "~(~N)"' >> /etc/Muttrc
  6515. echo '' >> /etc/Muttrc
  6516. echo '# new messages themselves' >> /etc/Muttrc
  6517. echo 'uncolor index "~N"' >> /etc/Muttrc
  6518. echo 'color index brightyellow default "~N"' >> /etc/Muttrc
  6519. echo '' >> /etc/Muttrc
  6520. echo '# GPG/PGP integration' >> /etc/Muttrc
  6521. echo '# this set the number of seconds to keep in memory the passphrase used to encrypt/sign' >> /etc/Muttrc
  6522. echo 'set pgp_timeout=1800' >> /etc/Muttrc
  6523. echo '' >> /etc/Muttrc
  6524. echo '# automatically sign and encrypt with PGP/MIME' >> /etc/Muttrc
  6525. echo 'set pgp_autosign # autosign all outgoing mails' >> /etc/Muttrc
  6526. echo 'set pgp_autoencrypt # Try to encrypt automatically' >> /etc/Muttrc
  6527. echo 'set pgp_replyencrypt # autocrypt replies to crypted' >> /etc/Muttrc
  6528. echo 'set pgp_replysign # autosign replies to signed' >> /etc/Muttrc
  6529. echo 'set pgp_auto_decode=yes # decode attachments' >> /etc/Muttrc
  6530. echo 'set fcc_clear=no # Keep encrypted copy of sent encrypted mail' >> /etc/Muttrc
  6531. echo 'unset smime_is_default' >> /etc/Muttrc
  6532. echo '' >> /etc/Muttrc
  6533. echo 'set alias_file=~/.mutt-alias' >> /etc/Muttrc
  6534. echo 'source ~/.mutt-alias' >> /etc/Muttrc
  6535. echo 'set query_command= "abook --mutt-query \"%s\""' >> /etc/Muttrc
  6536. echo 'macro index,pager A "<pipe-message>abook --add-email-quiet<return>" "add the sender address to abook"' >> /etc/Muttrc
  6537. # create an Emacs configuration specifically for use with Mutt, which
  6538. # has word wrap and spell checking on by default
  6539. echo "(add-hook 'before-save-hook 'delete-trailing-whitespace)" > /home/$MY_USERNAME/.emacs-mutt
  6540. echo '(setq org-support-shift-select t)' >> /home/$MY_USERNAME/.emacs-mutt
  6541. echo '(setq standard-indent 4)' >> /home/$MY_USERNAME/.emacs-mutt
  6542. echo '(setq-default tab-width 4)' >> /home/$MY_USERNAME/.emacs-mutt
  6543. echo '(setq c-basic-offset 4)' >> /home/$MY_USERNAME/.emacs-mutt
  6544. echo '(mouse-wheel-mode t)' >> /home/$MY_USERNAME/.emacs-mutt
  6545. echo '(setq make-backup-files t)' >> /home/$MY_USERNAME/.emacs-mutt
  6546. echo '(setq version-control t)' >> /home/$MY_USERNAME/.emacs-mutt
  6547. echo '(setq backup-directory-alist (quote ((".*" . "~/.emacs_backups/"))))' >> /home/$MY_USERNAME/.emacs-mutt
  6548. echo "(setq default-major-mode 'text-mode)" >> /home/$MY_USERNAME/.emacs-mutt
  6549. echo "(dolist (hook '(text-mode-hook))" >> /home/$MY_USERNAME/.emacs-mutt
  6550. echo ' (add-hook hook (lambda () (flyspell-mode 1))))' >> /home/$MY_USERNAME/.emacs-mutt
  6551. echo '(setq-default fill-column 72)' >> /home/$MY_USERNAME/.emacs-mutt
  6552. echo '(setq auto-fill-mode 0)' >> /home/$MY_USERNAME/.emacs-mutt
  6553. echo "(add-hook 'text-mode-hook 'turn-on-auto-fill)" >> /home/$MY_USERNAME/.emacs-mutt
  6554. echo "(setq-default auto-fill-function 'do-auto-fill)" >> /home/$MY_USERNAME/.emacs-mutt
  6555. cp -f /etc/Muttrc /home/$MY_USERNAME/.muttrc
  6556. touch /home/$MY_USERNAME/.mutt-alias
  6557. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.emacs-mutt
  6558. cp /home/$MY_USERNAME/.emacs-mutt /etc/skel
  6559. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.muttrc
  6560. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.mutt-alias
  6561. echo 'email_client' >> $COMPLETION_FILE
  6562. }
  6563. function email_archiving {
  6564. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  6565. return
  6566. fi
  6567. if grep -Fxq "email_archiving" $COMPLETION_FILE; then
  6568. return
  6569. fi
  6570. if [ ! -d $INSTALL_DIR ]; then
  6571. mkdir $INSTALL_DIR
  6572. fi
  6573. cd $INSTALL_DIR
  6574. git clone https://github.com/bashrc/cleanup-maildir
  6575. cp $INSTALL_DIR/cleanup-maildir/cleanup-maildir /usr/bin
  6576. echo '#!/bin/bash' > /etc/cron.daily/archivemail
  6577. echo "MUTTRC=/home/$MY_USERNAME/.muttrc" >> /etc/cron.daily/archivemail
  6578. echo "python /usr/bin/cleanup-maildir --archive-folder='archive' --maildir-root='/home/$MY_USERNAME/Maildir' archive ''" >> /etc/cron.daily/archivemail
  6579. echo "chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Maildir/archive-*" >> /etc/cron.daily/archivemail
  6580. echo 'if [ -f $MUTTRC ]; then' >> /etc/cron.daily/archivemail
  6581. echo ' MUTT_MAILBOXES=$(grep "mailboxes =" $MUTTRC)' >> /etc/cron.daily/archivemail
  6582. echo ' BACKUP_DIRECTORY=archive-$(date +"%Y")' >> /etc/cron.daily/archivemail
  6583. echo ' if [[ $MUTT_MAILBOXES != *$BACKUP_DIRECTORY* ]]; then' >> /etc/cron.daily/archivemail
  6584. echo ' sed -i "s|$MUTT_MAILBOXES|$MUTT_MAILBOXES =$BACKUP_DIRECTORY|g" $MUTTRC' >> /etc/cron.daily/archivemail
  6585. echo ' chown $MYUSERNAME:$MYUSERNAME $MUTTRC' >> /etc/cron.daily/archivemail
  6586. echo ' fi' >> /etc/cron.daily/archivemail
  6587. echo 'fi' >> /etc/cron.daily/archivemail
  6588. echo 'exit 0' >> /etc/cron.daily/archivemail
  6589. chmod +x /etc/cron.daily/archivemail
  6590. echo 'email_archiving' >> $COMPLETION_FILE
  6591. }
  6592. # Ensure that the from field is correct when sending email from Mutt
  6593. function email_from_address {
  6594. if grep -Fxq "email_from_address" $COMPLETION_FILE; then
  6595. return
  6596. fi
  6597. if [ ! -f /home/$MY_USERNAME/.muttrc ]; then
  6598. return
  6599. fi
  6600. if grep -q "set from=" /home/$MY_USERNAME/.muttrc; then
  6601. sed -i "s|set from=.*|set from='$MY_NAME <$MY_EMAIL_ADDRESS>'|g" /home/$MY_USERNAME/.muttrc
  6602. else
  6603. echo "set from='$MY_NAME <$MY_EMAIL_ADDRESS>'" >> /home/$MY_USERNAME/.muttrc
  6604. fi
  6605. echo 'email_from_address' >> $COMPLETION_FILE
  6606. }
  6607. function create_public_mailing_list {
  6608. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  6609. return
  6610. fi
  6611. if grep -Fxq "create_public_mailing_list" $COMPLETION_FILE; then
  6612. return
  6613. fi
  6614. if [ ! $PUBLIC_MAILING_LIST ]; then
  6615. return
  6616. fi
  6617. # does the mailing list have a separate domain name?
  6618. if [ ! $PUBLIC_MAILING_LIST_DOMAIN_NAME ]; then
  6619. PUBLIC_MAILING_LIST_DOMAIN_NAME=$DEFAULT_DOMAIN_NAME
  6620. fi
  6621. PUBLIC_MAILING_LIST_USER="mlmmj"
  6622. apt-get -y install mlmmj
  6623. adduser --system $PUBLIC_MAILING_LIST_USER
  6624. addgroup $PUBLIC_MAILING_LIST_USER
  6625. adduser $PUBLIC_MAILING_LIST_USER $PUBLIC_MAILING_LIST_USER
  6626. echo ''
  6627. echo "Creating the $PUBLIC_MAILING_LIST mailing list"
  6628. echo ''
  6629. # create the list
  6630. mlmmj-make-ml -a -L "$PUBLIC_MAILING_LIST" -c $PUBLIC_MAILING_LIST_USER
  6631. echo 'SYSTEM_ALIASES_PIPE_TRANSPORT = address_pipe' > /etc/exim4/conf.d/main/000_localmacros
  6632. echo "SYSTEM_ALIASES_USER = $PUBLIC_MAILING_LIST_USER" >> /etc/exim4/conf.d/main/000_localmacros
  6633. echo "SYSTEM_ALIASES_GROUP = $PUBLIC_MAILING_LIST_USER" >> /etc/exim4/conf.d/main/000_localmacros
  6634. # router
  6635. echo 'mlmmj_router:' > /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  6636. echo ' debug_print = "R: mlmmj_router for $local_part@$domain"' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  6637. echo ' driver = accept' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  6638. echo ' domains = +mlmmj_domains' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  6639. echo ' #require_files = MLMMJ_HOME/${lc::$local_part}' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  6640. echo ' # Use this instead, if you dont want to give Exim rx rights to mlmmj spool.' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  6641. echo ' # Exim will then spawn a new process running under the UID of "mlmmj".' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  6642. echo ' require_files = mlmmj:MLMMJ_HOME/${lc::$local_part}' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  6643. echo ' local_part_suffix = +*' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  6644. echo ' local_part_suffix_optional' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  6645. echo ' headers_remove = Delivered-To' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  6646. echo ' headers_add = Delivered-To: $local_part$local_part_suffix@$domain' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  6647. echo ' transport = mlmmj_transport' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  6648. # transport
  6649. echo 'mlmmj_transport:' > /etc/exim4/conf.d/transport/40_exim4-config_mlmmj
  6650. echo ' debug_print = "T: mlmmj_transport for $local_part@$domain"' >> /etc/exim4/conf.d/transport/40_exim4-config_mlmmj
  6651. echo ' driver = pipe' >> /etc/exim4/conf.d/transport/40_exim4-config_mlmmj
  6652. echo ' return_path_add' >> /etc/exim4/conf.d/transport/40_exim4-config_mlmmj
  6653. echo ' user = mlmmj' >> /etc/exim4/conf.d/transport/40_exim4-config_mlmmj
  6654. echo ' group = mlmmj' >> /etc/exim4/conf.d/transport/40_exim4-config_mlmmj
  6655. echo ' home_directory = MLMMJ_HOME' >> /etc/exim4/conf.d/transport/40_exim4-config_mlmmj
  6656. echo ' current_directory = MLMMJ_HOME' >> /etc/exim4/conf.d/transport/40_exim4-config_mlmmj
  6657. echo ' command = /usr/bin/mlmmj-receive -F -L MLMMJ_HOME/${lc:$local_part}' >> /etc/exim4/conf.d/transport/40_exim4-config_mlmmj
  6658. if ! grep -q "MLMMJ_HOME=/var/spool/mlmmj" /etc/exim4/conf.d/main/01_exim4-config_listmacrosdefs; then
  6659. sed -i '/MAIN CONFIGURATION SETTINGS/a\MLMMJ_HOME=/var/spool/mlmmj' /etc/exim4/conf.d/main/01_exim4-config_listmacrosdefs
  6660. fi
  6661. if ! grep -q "domainlist mlmmj_domains =" /etc/exim4/conf.d/main/01_exim4-config_listmacrosdefs; then
  6662. sed -i "/MLMMJ_HOME/a\domainlist mlmmj_domains = $PUBLIC_MAILING_LIST_DOMAIN_NAME" /etc/exim4/conf.d/main/01_exim4-config_listmacrosdefs
  6663. fi
  6664. if ! grep -q "delay_warning_condition =" /etc/exim4/conf.d/main/01_exim4-config_listmacrosdefs; then
  6665. sed -i '/domainlist mlmmj_domains =/a\delay_warning_condition = ${if match_domain{$domain}{+mlmmj_domains}{no}{yes}}' /etc/exim4/conf.d/main/01_exim4-config_listmacrosdefs
  6666. fi
  6667. if ! grep -q ": +mlmmj_domains" /etc/exim4/conf.d/main/01_exim4-config_listmacrosdefs; then
  6668. sed -i 's/domainlist relay_to_domains = MAIN_RELAY_TO_DOMAINS/domainlist relay_to_domains = MAIN_RELAY_TO_DOMAINS : +mlmmj_domains/g' /etc/exim4/conf.d/main/01_exim4-config_listmacrosdefs
  6669. fi
  6670. if ! grep -q "! +mlmmj_domains" /etc/exim4/conf.d/router/200_exim4-config_primary; then
  6671. sed -i 's/domains = ! +local_domains/domains = ! +mlmmj_domains : ! +local_domains/g' /etc/exim4/conf.d/router/200_exim4-config_primary
  6672. fi
  6673. newaliases
  6674. update-exim4.conf.template -r
  6675. update-exim4.conf
  6676. service exim4 restart
  6677. if ! grep -q "$PUBLIC_MAILING_LIST mailing list" /home/$MY_USERNAME/README; then
  6678. echo '' >> /home/$MY_USERNAME/README
  6679. echo '' >> /home/$MY_USERNAME/README
  6680. echo 'Public mailing list' >> /home/$MY_USERNAME/README
  6681. echo '===================' >> /home/$MY_USERNAME/README
  6682. echo "To subscribe to the $PUBLIC_MAILING_LIST mailing list send a" >> /home/$MY_USERNAME/README
  6683. echo "cleartext email to $PUBLIC_MAILING_LIST+subscribe@$DEFAULT_DOMAIN_NAME" >> /home/$MY_USERNAME/README
  6684. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  6685. chmod 600 /home/$MY_USERNAME/README
  6686. fi
  6687. freedombone-addlist -u $MY_USERNAME -l "$PUBLIC_MAILING_LIST" -s "$PUBLIC_MAILING_LIST"
  6688. echo 'create_public_mailing_list' >> $COMPLETION_FILE
  6689. }
  6690. function create_private_mailing_list {
  6691. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  6692. return
  6693. fi
  6694. # This installation doesn't work, results in ruby errors
  6695. # There is currently no schleuder package for Debian jessie
  6696. if grep -Fxq "create_private_mailing_list" $COMPLETION_FILE; then
  6697. return
  6698. fi
  6699. if [ ! $PRIVATE_MAILING_LIST ]; then
  6700. return
  6701. fi
  6702. if [[ $PRIVATE_MAILING_LIST == $MY_USERNAME ]]; then
  6703. echo 'The name of the private mailing list should not be the'
  6704. echo 'same as your username'
  6705. exit 10
  6706. fi
  6707. if [ ! $MY_GPG_PUBLIC_KEY ]; then
  6708. echo 'To create a private mailing list you need to specify a file'
  6709. echo 'containing your exported GPG key within MY_GPG_PUBLIC_KEY at'
  6710. echo 'the top of the script'
  6711. exit 11
  6712. fi
  6713. apt-get -y install ruby ruby-dev ruby-gpgme libgpgme11-dev libmagic-dev
  6714. gem install schleuder
  6715. schleuder-fix-gem-dependencies
  6716. schleuder-init-setup --gem
  6717. # NOTE: this is version number sensitive and so might need changing
  6718. ln -s /var/lib/gems/2.1.0/gems/schleuder-2.2.4 /var/lib/schleuder
  6719. sed -i 's/#smtp_port: 25/smtp_port: 465/g' /etc/schleuder/schleuder.conf
  6720. sed -i 's/#superadminaddr: root@localhost/superadminaddr: root@localhost' /etc/schleuder/schleuder.conf
  6721. schleuder-newlist $PRIVATE_MAILING_LIST@$DEFAULT_DOMAIN_NAME -realname "$PRIVATE_MAILING_LIST" -adminaddress $MY_EMAIL_ADDRESS -initmember $MY_EMAIL_ADDRESS -initmemberkey $MY_GPG_PUBLIC_KEY -nointeractive
  6722. freedombone-addemail -u $MY_USERNAME -e $PRIVATE_MAILING_LIST@$DEFAULT_DOMAIN_NAME -l $PRIVATE_MAILING_LIST
  6723. echo 'schleuder:' > /etc/exim4/conf.d/router/550_exim4-config_schleuder
  6724. echo ' debug_print = "R: schleuder for $local_part@$domain"' >> /etc/exim4/conf.d/router/550_exim4-config_schleuder
  6725. echo ' driver = accept' >> /etc/exim4/conf.d/router/550_exim4-config_schleuder
  6726. echo ' local_part_suffix_optional' >> /etc/exim4/conf.d/router/550_exim4-config_schleuder
  6727. echo ' local_part_suffix = +* : -bounce : -sendkey' >> /etc/exim4/conf.d/router/550_exim4-config_schleuder
  6728. echo ' domains = +local_domains' >> /etc/exim4/conf.d/router/550_exim4-config_schleuder
  6729. echo ' user = schleuder' >> /etc/exim4/conf.d/router/550_exim4-config_schleuder
  6730. echo ' group = schleuder' >> /etc/exim4/conf.d/router/550_exim4-config_schleuder
  6731. echo ' require_files = schleuder:+/var/lib/schleuder/$domain/${local_part}' >> /etc/exim4/conf.d/router/550_exim4-config_schleuder
  6732. echo ' transport = schleuder_transport' >> /etc/exim4/conf.d/router/550_exim4-config_schleuder
  6733. echo 'schleuder_transport:' > /etc/exim4/conf.d/transport/30_exim4-config_schleuder
  6734. echo ' debug_print = "T: schleuder_transport for $local_part@$domain"' >> /etc/exim4/conf.d/transport/30_exim4-config_schleuder
  6735. echo ' driver = pipe' >> /etc/exim4/conf.d/transport/30_exim4-config_schleuder
  6736. echo ' home_directory = "/var/lib/schleuder/$domain/$local_part"' >> /etc/exim4/conf.d/transport/30_exim4-config_schleuder
  6737. echo ' command = "/usr/bin/schleuder $local_part@$domain"' >> /etc/exim4/conf.d/transport/30_exim4-config_schleuder
  6738. chown -R schleuder:schleuder /var/lib/schleuder
  6739. update-exim4.conf.template -r
  6740. update-exim4.conf
  6741. service exim4 restart
  6742. useradd -d /var/schleuderlists -s /bin/false schleuder
  6743. adduser Debian-exim schleuder
  6744. usermod -a -G mail schleuder
  6745. #exim -d -bt $PRIVATE_MAILING_LIST@$DEFAULT_DOMAIN_NAME
  6746. echo 'create_private_mailing_list' >> $COMPLETION_FILE
  6747. }
  6748. function split_gpg_key_into_fragments {
  6749. # split the gpg key into fragments if social key management is enabled
  6750. if [[ $ENABLE_SOCIAL_KEY_MANAGEMENT == "yes" ]]; then
  6751. echo 'Splitting GPG key. You may need to enter your passphrase.'
  6752. freedombone-splitkey -u $MY_USERNAME -e $MY_EMAIL_ADDRESS
  6753. if [ ! -d /home/$MY_USERNAME/.gnupg_fragments ]; then
  6754. echo 'Yhe GPG key could not be split'
  6755. exit 86548
  6756. fi
  6757. fi
  6758. }
  6759. function import_email {
  6760. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  6761. return
  6762. fi
  6763. EMAIL_COMPLETE_MSG=' *** Freedombone mailbox installation is complete ***'
  6764. if grep -Fxq "import_email" $COMPLETION_FILE; then
  6765. if [[ $SYSTEM_TYPE == "$VARIANT_MAILBOX" ]]; then
  6766. create_backup_script
  6767. create_restore_script
  6768. backup_to_friends_servers
  6769. intrusion_detection
  6770. split_gpg_key_into_fragments
  6771. echo ''
  6772. echo "$EMAIL_COMPLETE_MSG"
  6773. if [ -d $USB_MOUNT ]; then
  6774. umount $USB_MOUNT
  6775. rm -rf $USB_MOUNT
  6776. echo ' You can now remove the USB drive'
  6777. fi
  6778. exit 0
  6779. fi
  6780. return
  6781. fi
  6782. if [ $IMPORT_MAILDIR ]; then
  6783. if [ -d $IMPORT_MAILDIR ]; then
  6784. echo 'Transfering email files'
  6785. cp -r $IMPORT_MAILDIR /home/$MY_USERNAME
  6786. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Maildir
  6787. else
  6788. echo "Email import directory $IMPORT_MAILDIR not found"
  6789. exit 9
  6790. fi
  6791. fi
  6792. echo 'import_email' >> $COMPLETION_FILE
  6793. if [[ $SYSTEM_TYPE == "$VARIANT_MAILBOX" ]]; then
  6794. create_backup_script
  6795. create_restore_script
  6796. backup_to_friends_servers
  6797. intrusion_detection
  6798. split_gpg_key_into_fragments
  6799. # unmount any attached usb drive
  6800. echo ''
  6801. echo "$EMAIL_COMPLETE_MSG"
  6802. echo ''
  6803. if [ -d $USB_MOUNT ]; then
  6804. umount $USB_MOUNT
  6805. rm -rf $USB_MOUNT
  6806. echo ' You can now remove the USB drive'
  6807. fi
  6808. exit 0
  6809. fi
  6810. }
  6811. function install_web_server {
  6812. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  6813. return
  6814. fi
  6815. if grep -Fxq "install_web_server" $COMPLETION_FILE; then
  6816. return
  6817. fi
  6818. # remove apache
  6819. apt-get -y remove --purge apache2
  6820. if [ -d /etc/apache2 ]; then
  6821. rm -rf /etc/apache2
  6822. fi
  6823. # install nginx
  6824. apt-get -y install nginx php5-fpm git
  6825. # limit the number of php processes
  6826. sed -i 's/; process.max = 128/process.max = 32/g' /etc/php5/fpm/php-fpm.conf
  6827. sed -i 's/;process_control_timeout = 0/process_control_timeout = 300/g' /etc/php5/fpm/php-fpm.conf
  6828. if ! grep -q "pm.max_children" /etc/php5/fpm/php-fpm.conf; then
  6829. echo 'pm.max_children = 10' >> /etc/php5/fpm/php-fpm.conf
  6830. echo 'pm.start_servers = 2' >> /etc/php5/fpm/php-fpm.conf
  6831. echo 'pm.min_spare_servers = 2' >> /etc/php5/fpm/php-fpm.conf
  6832. echo 'pm.max_spare_servers = 5' >> /etc/php5/fpm/php-fpm.conf
  6833. echo 'pm.max_requests = 50' >> /etc/php5/fpm/php-fpm.conf
  6834. fi
  6835. if [ ! -d /etc/nginx ]; then
  6836. echo "ERROR: nginx does not appear to have installed. $CHECK_MESSAGE"
  6837. exit 51
  6838. fi
  6839. # Nginx settings
  6840. echo 'user www-data;' > /etc/nginx/nginx.conf
  6841. #echo "worker_processes; $CPU_CORES" >> /etc/nginx/nginx.conf
  6842. echo 'pid /run/nginx.pid;' >> /etc/nginx/nginx.conf
  6843. echo '' >> /etc/nginx/nginx.conf
  6844. echo 'events {' >> /etc/nginx/nginx.conf
  6845. echo ' worker_connections 50;' >> /etc/nginx/nginx.conf
  6846. echo ' # multi_accept on;' >> /etc/nginx/nginx.conf
  6847. echo '}' >> /etc/nginx/nginx.conf
  6848. echo '' >> /etc/nginx/nginx.conf
  6849. echo 'http {' >> /etc/nginx/nginx.conf
  6850. echo ' # limit the number of connections per single IP' >> /etc/nginx/nginx.conf
  6851. echo ' limit_conn_zone $binary_remote_addr zone=conn_limit_per_ip:10m;' >> /etc/nginx/nginx.conf
  6852. echo '' >> /etc/nginx/nginx.conf
  6853. echo ' # limit the number of requests for a given session' >> /etc/nginx/nginx.conf
  6854. echo ' # Note that the Owncloud web interface seems to require a rate of around 140r/s' >> /etc/nginx/nginx.conf
  6855. echo ' limit_req_zone $binary_remote_addr zone=req_limit_per_ip:10m rate=140r/s;' >> /etc/nginx/nginx.conf
  6856. echo '' >> /etc/nginx/nginx.conf
  6857. echo ' # if the request body size is more than the buffer size, then the entire (or partial) request body is written into a temporary file' >> /etc/nginx/nginx.conf
  6858. echo ' client_body_buffer_size 128k;' >> /etc/nginx/nginx.conf
  6859. echo '' >> /etc/nginx/nginx.conf
  6860. echo ' # headerbuffer size for the request header from client, its set for testing purpose' >> /etc/nginx/nginx.conf
  6861. echo ' client_header_buffer_size 3m;' >> /etc/nginx/nginx.conf
  6862. echo '' >> /etc/nginx/nginx.conf
  6863. echo ' # maximum number and size of buffers for large headers to read from client request' >> /etc/nginx/nginx.conf
  6864. echo ' large_client_header_buffers 4 256k;' >> /etc/nginx/nginx.conf
  6865. echo '' >> /etc/nginx/nginx.conf
  6866. echo ' # read timeout for the request body from client, its set for testing purpose' >> /etc/nginx/nginx.conf
  6867. echo ' client_body_timeout 3m;' >> /etc/nginx/nginx.conf
  6868. echo '' >> /etc/nginx/nginx.conf
  6869. echo ' # how long to wait for the client to send a request header, its set for testing purpose' >> /etc/nginx/nginx.conf
  6870. echo ' client_header_timeout 3m;' >> /etc/nginx/nginx.conf
  6871. echo '' >> /etc/nginx/nginx.conf
  6872. echo ' ##' >> /etc/nginx/nginx.conf
  6873. echo ' # Basic Settings' >> /etc/nginx/nginx.conf
  6874. echo ' ##' >> /etc/nginx/nginx.conf
  6875. echo '' >> /etc/nginx/nginx.conf
  6876. echo ' sendfile on;' >> /etc/nginx/nginx.conf
  6877. echo ' tcp_nopush on;' >> /etc/nginx/nginx.conf
  6878. echo ' tcp_nodelay on;' >> /etc/nginx/nginx.conf
  6879. echo ' keepalive_timeout 65;' >> /etc/nginx/nginx.conf
  6880. echo ' types_hash_max_size 2048;' >> /etc/nginx/nginx.conf
  6881. echo ' server_tokens off;' >> /etc/nginx/nginx.conf
  6882. echo '' >> /etc/nginx/nginx.conf
  6883. echo ' # server_names_hash_bucket_size 64;' >> /etc/nginx/nginx.conf
  6884. echo ' # server_name_in_redirect off;' >> /etc/nginx/nginx.conf
  6885. echo '' >> /etc/nginx/nginx.conf
  6886. echo ' include /etc/nginx/mime.types;' >> /etc/nginx/nginx.conf
  6887. echo ' default_type application/octet-stream;' >> /etc/nginx/nginx.conf
  6888. echo '' >> /etc/nginx/nginx.conf
  6889. echo ' ##' >> /etc/nginx/nginx.conf
  6890. echo ' # Logging Settings' >> /etc/nginx/nginx.conf
  6891. echo ' ##' >> /etc/nginx/nginx.conf
  6892. echo '' >> /etc/nginx/nginx.conf
  6893. echo ' access_log /var/log/nginx/access.log;' >> /etc/nginx/nginx.conf
  6894. echo ' error_log /var/log/nginx/error.log;' >> /etc/nginx/nginx.conf
  6895. echo '' >> /etc/nginx/nginx.conf
  6896. echo ' ###' >> /etc/nginx/nginx.conf
  6897. echo ' # Gzip Settings' >> /etc/nginx/nginx.conf
  6898. echo ' ##' >> /etc/nginx/nginx.conf
  6899. echo ' gzip on;' >> /etc/nginx/nginx.conf
  6900. echo ' gzip_disable "msie6";' >> /etc/nginx/nginx.conf
  6901. echo '' >> /etc/nginx/nginx.conf
  6902. echo ' # gzip_vary on;' >> /etc/nginx/nginx.conf
  6903. echo ' # gzip_proxied any;' >> /etc/nginx/nginx.conf
  6904. echo ' # gzip_comp_level 6;' >> /etc/nginx/nginx.conf
  6905. echo ' # gzip_buffers 16 8k;' >> /etc/nginx/nginx.conf
  6906. echo ' # gzip_http_version 1.1;' >> /etc/nginx/nginx.conf
  6907. echo ' # gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;' >> /etc/nginx/nginx.conf
  6908. echo '' >> /etc/nginx/nginx.conf
  6909. echo ' ##' >> /etc/nginx/nginx.conf
  6910. echo ' # Virtual Host Configs' >> /etc/nginx/nginx.conf
  6911. echo ' ##' >> /etc/nginx/nginx.conf
  6912. echo '' >> /etc/nginx/nginx.conf
  6913. echo ' include /etc/nginx/conf.d/*.conf;' >> /etc/nginx/nginx.conf
  6914. echo ' include /etc/nginx/sites-enabled/*;' >> /etc/nginx/nginx.conf
  6915. echo '}' >> /etc/nginx/nginx.conf
  6916. # install a script to easily enable and disable nginx virtual hosts
  6917. if [ ! -d $INSTALL_DIR ]; then
  6918. mkdir $INSTALL_DIR
  6919. fi
  6920. cd $INSTALL_DIR
  6921. git clone https://github.com/perusio/nginx_ensite
  6922. cd $INSTALL_DIR/nginx_ensite
  6923. cp nginx_* /usr/sbin
  6924. nginx_dissite default
  6925. echo 'install_web_server' >> $COMPLETION_FILE
  6926. }
  6927. function configure_php {
  6928. sed -i "s/memory_limit = 128M/memory_limit = ${MAX_PHP_MEMORY}M/g" /etc/php5/fpm/php.ini
  6929. sed -i 's/;cgi.fix_pathinfo=1/cgi.fix_pathinfo=0/g' /etc/php5/fpm/php.ini
  6930. sed -i "s/memory_limit = -1/memory_limit = ${MAX_PHP_MEMORY}M/g" /etc/php5/cli/php.ini
  6931. sed -i "s/upload_max_filesize = 2M/upload_max_filesize = 50M/g" /etc/php5/fpm/php.ini
  6932. sed -i "s/post_max_size = 8M/post_max_size = 50M/g" /etc/php5/fpm/php.ini
  6933. }
  6934. function install_mariadb {
  6935. if grep -Fxq "install_mariadb" $COMPLETION_FILE; then
  6936. return
  6937. fi
  6938. apt-get -y install python-software-properties debconf-utils
  6939. apt-get -y install software-properties-common
  6940. apt-get -y update
  6941. get_mariadb_password
  6942. if [ ! $MARIADB_PASSWORD ]; then
  6943. MARIADB_PASSWORD="$(openssl rand -base64 32)"
  6944. echo "$MARIADB_PASSWORD" > $DATABASE_PASSWORD_FILE
  6945. chmod 600 $DATABASE_PASSWORD_FILE
  6946. echo '' >> /home/$MY_USERNAME/README
  6947. echo '' >> /home/$MY_USERNAME/README
  6948. echo 'MariaDB / MySql' >> /home/$MY_USERNAME/README
  6949. echo '===============' >> /home/$MY_USERNAME/README
  6950. echo "Your MariaDB password is: $MARIADB_PASSWORD" >> /home/$MY_USERNAME/README
  6951. echo '' >> /home/$MY_USERNAME/README
  6952. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  6953. chmod 600 /home/$MY_USERNAME/README
  6954. fi
  6955. debconf-set-selections <<< "mariadb-server mariadb-server/root_password password $MARIADB_PASSWORD"
  6956. debconf-set-selections <<< "mariadb-server mariadb-server/root_password_again password $MARIADB_PASSWORD"
  6957. apt-get -y install mariadb-server
  6958. apt-get -y remove --purge apache*
  6959. if [ -d /etc/apache2 ]; then
  6960. rm -rf /etc/apache2
  6961. echo 'Removed Apache installation after MariaDB install'
  6962. fi
  6963. if [ ! -d /etc/mysql ]; then
  6964. echo "ERROR: mariadb-server does not appear to have installed. $CHECK_MESSAGE"
  6965. exit 54
  6966. fi
  6967. mysqladmin -u root password "$MARIADB_PASSWORD"
  6968. echo 'install_mariadb' >> $COMPLETION_FILE
  6969. }
  6970. function backup_databases_script_header {
  6971. if [ ! -f /usr/bin/backupdatabases ]; then
  6972. # daily
  6973. echo '#!/bin/sh' > /usr/bin/backupdatabases
  6974. echo '' >> /usr/bin/backupdatabases
  6975. echo "EMAIL='$MY_EMAIL_ADDRESS'" >> /usr/bin/backupdatabases
  6976. echo '' >> /usr/bin/backupdatabases
  6977. echo -n 'MYSQL_PASSWORD=$(cat ' >> /usr/bin/backupdatabases
  6978. echo "$DATABASE_PASSWORD_FILE)" >> /usr/bin/backupdatabases
  6979. echo 'umask 0077' >> /usr/bin/backupdatabases
  6980. echo '' >> /usr/bin/backupdatabases
  6981. echo '# exit if we are backing up to friends servers' >> /usr/bin/backupdatabases
  6982. echo "if [ -f $FRIENDS_SERVERS_LIST ]; then" >> /usr/bin/backupdatabases
  6983. echo ' exit 1' >> /usr/bin/backupdatabases
  6984. echo 'fi' >> /usr/bin/backupdatabases
  6985. chmod 600 /usr/bin/backupdatabases
  6986. chmod +x /usr/bin/backupdatabases
  6987. echo '#!/bin/sh' > /etc/cron.daily/backupdatabasesdaily
  6988. echo '/usr/bin/backupdatabases' >> /etc/cron.daily/backupdatabasesdaily
  6989. chmod 600 /etc/cron.daily/backupdatabasesdaily
  6990. chmod +x /etc/cron.daily/backupdatabasesdaily
  6991. # weekly
  6992. echo '#!/bin/sh' > /etc/cron.weekly/backupdatabasesweekly
  6993. echo '' >> /etc/cron.weekly/backupdatabasesweekly
  6994. echo 'umask 0077' >> /etc/cron.weekly/backupdatabasesweekly
  6995. chmod 600 /etc/cron.weekly/backupdatabasesweekly
  6996. chmod +x /etc/cron.weekly/backupdatabasesweekly
  6997. # monthly
  6998. echo '#!/bin/sh' > /etc/cron.monthly/backupdatabasesmonthly
  6999. echo '' >> /etc/cron.monthly/backupdatabasesmonthly
  7000. echo 'umask 0077' >> /etc/cron.monthly/backupdatabasesmonthly
  7001. chmod 600 /etc/cron.monthly/backupdatabasesmonthly
  7002. chmod +x /etc/cron.monthly/backupdatabasesmonthly
  7003. fi
  7004. }
  7005. function repair_databases_script {
  7006. if grep -Fxq "repair_databases_script" $COMPLETION_FILE; then
  7007. return
  7008. fi
  7009. if [ ! -f $DATABASE_PASSWORD_FILE ]; then
  7010. return
  7011. fi
  7012. echo '#!/bin/bash' > /usr/bin/repairdatabase
  7013. echo '' >> /usr/bin/repairdatabase
  7014. echo 'DATABASE=$1' >> /usr/bin/repairdatabase
  7015. echo "EMAIL=$MY_EMAIL_ADDRESS" >> /usr/bin/repairdatabase
  7016. echo '' >> /usr/bin/repairdatabase
  7017. echo -n 'MYSQL_ROOT_PASSWORD=$(cat ' >> /usr/bin/repairdatabase
  7018. echo "$DATABASE_PASSWORD_FILE)" >> /usr/bin/repairdatabase
  7019. echo 'TEMPFILE=/root/repairdatabase_$DATABASE' >> /usr/bin/repairdatabase
  7020. echo '' >> /usr/bin/repairdatabase
  7021. echo 'umask 0077' >> /usr/bin/repairdatabase
  7022. echo '' >> /usr/bin/repairdatabase
  7023. echo '# check the database' >> /usr/bin/repairdatabase
  7024. echo 'mysqlcheck -c -u root --password=$MYSQL_ROOT_PASSWORD $DATABASE > $TEMPFILE' >> /usr/bin/repairdatabase
  7025. echo '' >> /usr/bin/repairdatabase
  7026. echo '# Attempt to repair the database if it contains errors' >> /usr/bin/repairdatabase
  7027. echo 'if grep -q "Error" "$TEMPFILE"; then' >> /usr/bin/repairdatabase
  7028. echo ' mysqlcheck -u root --password=$MYSQL_ROOT_PASSWORD --auto-repair $DATABASE' >> /usr/bin/repairdatabase
  7029. echo 'else' >> /usr/bin/repairdatabase
  7030. echo ' # No errors were found, so exit' >> /usr/bin/repairdatabase
  7031. echo ' rm -f $TEMPFILE' >> /usr/bin/repairdatabase
  7032. echo ' exit 0' >> /usr/bin/repairdatabase
  7033. echo 'fi' >> /usr/bin/repairdatabase
  7034. echo 'rm -f $TEMPFILE' >> /usr/bin/repairdatabase
  7035. echo '' >> /usr/bin/repairdatabase
  7036. echo '# Check the database again' >> /usr/bin/repairdatabase
  7037. echo 'mysqlcheck -c -u root --password=$MYSQL_ROOT_PASSWORD $DATABASE > $TEMPFILE' >> /usr/bin/repairdatabase
  7038. echo '' >> /usr/bin/repairdatabase
  7039. echo '# If it still contains errors then restore from backup' >> /usr/bin/repairdatabase
  7040. echo 'if grep -q "Error" "$TEMPFILE"; then' >> /usr/bin/repairdatabase
  7041. echo ' mysql -u root --password=$MYSQL_ROOT_PASSWORD $DATABASE -o < /var/backups/${DATABASE}_daily.sql' >> /usr/bin/repairdatabase
  7042. echo '' >> /usr/bin/repairdatabase
  7043. echo ' # Send a warning email' >> /usr/bin/repairdatabase
  7044. echo ' echo "$DATABASE database corruption could not be repaired. Restored from backup." | mail -s "Freedombone database maintenance" $EMAIL' >> /usr/bin/repairdatabase
  7045. echo ' rm -f $TEMPFILE' >> /usr/bin/repairdatabase
  7046. echo '' >> /usr/bin/repairdatabase
  7047. echo ' exit 1' >> /usr/bin/repairdatabase
  7048. echo 'fi' >> /usr/bin/repairdatabase
  7049. echo 'rm -f $TEMPFILE' >> /usr/bin/repairdatabase
  7050. echo '' >> /usr/bin/repairdatabase
  7051. echo 'exit 0' >> /usr/bin/repairdatabase
  7052. chmod 600 /usr/bin/repairdatabase
  7053. chmod +x /usr/bin/repairdatabase
  7054. echo '#!/bin/bash' > /etc/cron.hourly/repair
  7055. echo '' >> /etc/cron.hourly/repair
  7056. chmod 600 /etc/cron.hourly/repair
  7057. chmod +x /etc/cron.hourly/repair
  7058. echo 'repair_databases_script' >> $COMPLETION_FILE
  7059. }
  7060. function install_owncloud_music_app {
  7061. if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  7062. return
  7063. fi
  7064. if grep -Fxq "install_owncloud_music_app" $COMPLETION_FILE; then
  7065. return
  7066. fi
  7067. if ! grep -Fxq "install_owncloud" $COMPLETION_FILE; then
  7068. echo 'Tried to install the Owncloud music app, but Owncloud installation was not found'
  7069. exit 9823
  7070. fi
  7071. cd /usr/share/owncloud/apps
  7072. git clone https://github.com/owncloud/music music
  7073. if grep -q "Music player in Owncloud" /home/$MY_USERNAME/README; then
  7074. echo '' >> /home/$MY_USERNAME/README
  7075. echo '' >> /home/$MY_USERNAME/README
  7076. echo 'Music player in Owncloud' >> /home/$MY_USERNAME/README
  7077. echo '========================' >> /home/$MY_USERNAME/README
  7078. echo 'To enable the music app within ouwncloud log in to the Owncloud' >> /home/$MY_USERNAME/README
  7079. echo 'administrator account then go to Apps on the left hand dropdown' >> /home/$MY_USERNAME/README
  7080. echo 'menu and enable the music app. You can then log out and log back' >> /home/$MY_USERNAME/README
  7081. echo 'in as your Owncloud user and select music from the left hand' >> /home/$MY_USERNAME/README
  7082. echo 'dropdown menu.' >> /home/$MY_USERNAME/README
  7083. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  7084. chmod 600 /home/$MY_USERNAME/README
  7085. fi
  7086. echo 'install_owncloud_music_app' >> $COMPLETION_FILE
  7087. }
  7088. function add_ddns_domain {
  7089. if [ ! $CURRENT_DDNS_DOMAIN ]; then
  7090. echo 'ddns domain not specified'
  7091. exit 5638
  7092. fi
  7093. if [ ! -f /etc/inadyn.conf ]; then
  7094. echo 'Unable to find inadyn configuration file /etc/inadyn.conf'
  7095. exit 5745
  7096. fi
  7097. if ! grep -q "$DDNS_PROVIDER" /etc/inadyn.conf; then
  7098. echo '' >> /etc/inadyn.conf
  7099. echo "system $DDNS_PROVIDER" >> /etc/inadyn.conf
  7100. echo ' ssl' >> /etc/inadyn.conf
  7101. echo " checkip-url $GET_IP_ADDRESS_URL /" >> /etc/inadyn.conf
  7102. if [ $DDNS_USERNAME ]; then
  7103. echo " username $DDNS_USERNAME" >> /etc/inadyn.conf
  7104. fi
  7105. if [ $DDNS_PASSWORD ]; then
  7106. echo " password $DDNS_PASSWORD" >> /etc/inadyn.conf
  7107. fi
  7108. fi
  7109. if ! grep -q "$CURRENT_DDNS_DOMAIN" /etc/inadyn.conf; then
  7110. echo " alias $CURRENT_DDNS_DOMAIN" >> /etc/inadyn.conf
  7111. fi
  7112. chmod 600 /etc/inadyn.conf
  7113. service inadyn restart
  7114. systemctl daemon-reload
  7115. # clear the arguments
  7116. CURRENT_DDNS_DOMAIN=
  7117. }
  7118. function install_owncloud {
  7119. if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  7120. return
  7121. fi
  7122. OWNCLOUD_COMPLETION_MSG1=" *** Freedombone $SYSTEM_TYPE is now installed ***"
  7123. OWNCLOUD_COMPLETION_MSG2="Open $OWNCLOUD_DOMAIN_NAME in a web browser to complete the setup"
  7124. if grep -Fxq "install_owncloud" $COMPLETION_FILE; then
  7125. if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" ]]; then
  7126. install_owncloud_music_app
  7127. create_backup_script
  7128. create_restore_script
  7129. backup_to_friends_servers
  7130. intrusion_detection
  7131. split_gpg_key_into_fragments
  7132. # unmount any attached usb drive
  7133. if [ -d $USB_MOUNT ]; then
  7134. umount $USB_MOUNT
  7135. rm -rf $USB_MOUNT
  7136. fi
  7137. echo ''
  7138. echo "$OWNCLOUD_COMPLETION_MSG1"
  7139. echo "$OWNCLOUD_COMPLETION_MSG2"
  7140. exit 0
  7141. fi
  7142. return
  7143. fi
  7144. # if this is exclusively a cloud setup
  7145. if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" ]]; then
  7146. if [ ! $DEFAULT_DOMAIN_NAME ]; then
  7147. echo 'No default domain name when installing cloud variant'
  7148. exit 5380
  7149. fi
  7150. fi
  7151. if [ ! $OWNCLOUD_DOMAIN_NAME ]; then
  7152. echo 'No Owncloud domain name was specified'
  7153. exit 3095
  7154. fi
  7155. if [[ $SYSTEM_TYPE != "$VARIANT_CLOUD" ]]; then
  7156. if [[ $SYSTEM_TYPE != "$VARIANT_FULL" ]]; then
  7157. echo "Owncloud install did not recognise the system type $SYSTEM_TYPE"
  7158. exit 6746
  7159. fi
  7160. fi
  7161. apt-get -y install owncloud
  7162. apt-get -y remove --purge apache*
  7163. if [ -d /etc/apache2 ]; then
  7164. rm -rf /etc/apache2
  7165. echo 'Removed Apache installation after Owncloud install'
  7166. fi
  7167. install_mariadb
  7168. get_mariadb_password
  7169. get_mariadb_owncloud_admin_password
  7170. if [ ! $OWNCLOUD_ADMIN_PASSWORD ]; then
  7171. OWNCLOUD_ADMIN_PASSWORD="$(openssl rand -base64 32)"
  7172. fi
  7173. if ! grep -q "Owncloud database user" /home/$MY_USERNAME/README; then
  7174. echo '' >> /home/$MY_USERNAME/README
  7175. echo '' >> /home/$MY_USERNAME/README
  7176. echo 'Owncloud' >> /home/$MY_USERNAME/README
  7177. echo '========' >> /home/$MY_USERNAME/README
  7178. echo 'Owncloud database user: owncloudadmin' >> /home/$MY_USERNAME/README
  7179. echo "Owncloud database password: $OWNCLOUD_ADMIN_PASSWORD" >> /home/$MY_USERNAME/README
  7180. echo 'Owncloud database name: owncloud' >> /home/$MY_USERNAME/README
  7181. echo '' >> /home/$MY_USERNAME/README
  7182. echo 'After creating an administrator account then create a user account via' >> /home/$MY_USERNAME/README
  7183. echo "the Users dropdown menu entry. The username should be '$MY_USERNAME'." >> /home/$MY_USERNAME/README
  7184. echo '' >> /home/$MY_USERNAME/README
  7185. echo 'On mobile devices you can download the Owncloud client via F-Droid.' >> /home/$MY_USERNAME/README
  7186. echo '' >> /home/$MY_USERNAME/README
  7187. echo 'To synchronise calendar entries with Android "install CalDAV Sync Adapter"' >> /home/$MY_USERNAME/README
  7188. echo 'using F-Droid then go to settings/accounts and add a CalDav account with' >> /home/$MY_USERNAME/README
  7189. echo "the URL https://$OWNCLOUD_DOMAIN_NAME/remote.php/caldav/principals/$MY_USERNAME" >> /home/$MY_USERNAME/README
  7190. echo 'and the username and password shown above.' >> /home/$MY_USERNAME/README
  7191. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  7192. chmod 600 /home/$MY_USERNAME/README
  7193. fi
  7194. echo "create database owncloud;
  7195. CREATE USER 'owncloudadmin'@'localhost' IDENTIFIED BY '$OWNCLOUD_ADMIN_PASSWORD';
  7196. GRANT ALL PRIVILEGES ON owncloud.* TO 'owncloudadmin'@'localhost';
  7197. quit" > $INSTALL_DIR/batch.sql
  7198. chmod 600 $INSTALL_DIR/batch.sql
  7199. mysql -u root --password="$MARIADB_PASSWORD" < $INSTALL_DIR/batch.sql
  7200. shred -zu $INSTALL_DIR/batch.sql
  7201. if [ ! -d /var/www/$OWNCLOUD_DOMAIN_NAME ]; then
  7202. mkdir /var/www/$OWNCLOUD_DOMAIN_NAME
  7203. fi
  7204. if [ -d /var/www/$OWNCLOUD_DOMAIN_NAME/htdocs ]; then
  7205. rm -rf /var/www/$OWNCLOUD_DOMAIN_NAME/htdocs
  7206. fi
  7207. ln -s /usr/share/owncloud /var/www/$OWNCLOUD_DOMAIN_NAME/htdocs
  7208. echo 'server {' > /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7209. echo ' listen 80;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7210. echo " server_name $OWNCLOUD_DOMAIN_NAME;" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7211. echo ' access_log off;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7212. echo " error_log /var/log/nginx/$OWNCLOUD_DOMAIN_NAME_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7213. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7214. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7215. echo ' rewrite ^ https://$server_name$request_uri? permanent;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7216. echo '}' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7217. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7218. echo 'server {' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7219. echo ' listen 443 ssl;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7220. echo " root /var/www/$OWNCLOUD_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7221. echo " server_name $OWNCLOUD_DOMAIN_NAME;" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7222. echo ' access_log off;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7223. echo " error_log /var/log/nginx/$OWNCLOUD_DOMAIN_NAME_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7224. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7225. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7226. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7227. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7228. echo ' ssl on;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7229. echo " ssl_certificate /etc/ssl/certs/$OWNCLOUD_DOMAIN_NAME.crt;" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7230. echo " ssl_certificate_key /etc/ssl/private/$OWNCLOUD_DOMAIN_NAME.key;" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7231. echo " ssl_dhparam /etc/ssl/certs/$OWNCLOUD_DOMAIN_NAME.dhparam;" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7232. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7233. echo ' ssl_session_timeout 5m;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7234. echo ' ssl_prefer_server_ciphers on;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7235. echo " ssl_protocols $SSL_PROTOCOLS; # not possible to do exclusive" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7236. echo " ssl_ciphers '$SSL_CIPHERS';" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7237. echo ' add_header X-Frame-Options DENY;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7238. echo ' add_header X-Content-Type-Options nosniff;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7239. echo ' add_header Strict-Transport-Security max-age=15768000;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7240. echo ' # if you want to be able to access the site via HTTP' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7241. echo ' # then replace the above with the following:' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7242. echo ' # add_header Strict-Transport-Security "max-age=0;";' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7243. echo " # make sure webfinger and other well known services aren't blocked" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7244. echo ' # by denying dot files and rewrite request to the front controller' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7245. echo ' location ^~ /.well-known/ {' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7246. echo ' allow all;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7247. echo ' }' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7248. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7249. echo ' client_max_body_size 10G; # set max upload size' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7250. echo ' client_body_buffer_size 128k;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7251. echo ' fastcgi_buffers 64 4K;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7252. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7253. echo ' rewrite ^/caldav(.*)$ /remote.php/caldav$1 redirect;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7254. echo ' rewrite ^/carddav(.*)$ /remote.php/carddav$1 redirect;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7255. echo ' rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7256. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7257. echo ' index index.php;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7258. echo ' error_page 403 /core/templates/403.php;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7259. echo ' error_page 404 /core/templates/404.php;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7260. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7261. echo ' location = /robots.txt {' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7262. echo ' allow all;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7263. echo ' log_not_found off;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7264. echo ' access_log off;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7265. echo ' }' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7266. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7267. echo ' location ~ ^/(data|config|\.ht|db_structure\.xml|README) {' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7268. echo ' deny all;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7269. echo ' }' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7270. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7271. echo ' location / {' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7272. echo ' # The following 2 rules are only needed with webfinger' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7273. echo ' rewrite ^/.well-known/host-meta /public.php?service=host-meta last;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7274. echo ' rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json last;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7275. echo ' rewrite ^/.well-known/carddav /remote.php/carddav/ redirect;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7276. echo ' rewrite ^/.well-known/caldav /remote.php/caldav/ redirect;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7277. echo ' rewrite ^(/core/doc/[^\/]+/)$ $1/index.html;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7278. echo ' try_files $uri $uri/ index.php;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7279. echo ' }' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7280. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7281. echo ' location ~ ^(.+?\.php)(/.*)?$ {' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7282. echo ' try_files $1 =404;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7283. echo ' fastcgi_split_path_info ^(.+\.php)(/.+)$;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7284. echo ' fastcgi_pass unix:/var/run/php5-fpm.sock;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7285. echo ' fastcgi_index index.php;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7286. echo ' include fastcgi_params;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7287. echo ' fastcgi_param SCRIPT_FILENAME $document_root$1;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7288. echo ' fastcgi_param PATH_INFO $2;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7289. echo ' fastcgi_param HTTPS on;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7290. echo ' }' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7291. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7292. echo ' # Optional: set long EXPIRES header on static assets' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7293. echo ' location ~* ^.+\.(jpg|jpeg|gif|bmp|ico|png|css|js|swf)$ {' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7294. echo ' expires 30d;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7295. echo " # Optional: Don't log access to assets" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7296. echo ' access_log off;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7297. echo ' }' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7298. echo '}' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  7299. configure_php
  7300. if [ ! -f /etc/ssl/certs/$OWNCLOUD_DOMAIN_NAME.dhparam ]; then
  7301. freedombone-addcert -h $OWNCLOUD_DOMAIN_NAME --dhkey $DH_KEYLENGTH
  7302. check_certificates $OWNCLOUD_DOMAIN_NAME
  7303. fi
  7304. # Ensure that the database gets backed up locally, if remote
  7305. # backups are not being used
  7306. backup_databases_script_header
  7307. echo '' >> /usr/bin/backupdatabases
  7308. echo '# Backup Owncloud database' >> /usr/bin/backupdatabases
  7309. echo 'TEMPFILE=/root/owncloud.sql' >> /usr/bin/backupdatabases
  7310. echo 'DAILYFILE=/var/backups/owncloud_daily.sql' >> /usr/bin/backupdatabases
  7311. echo 'mysqldump --password="$MYSQL_PASSWORD" owncloud > $TEMPFILE' >> /usr/bin/backupdatabases
  7312. echo 'FILESIZE=$(stat -c%s $TEMPFILE)' >> /usr/bin/backupdatabases
  7313. echo 'if [ "$FILESIZE" -eq "0" ]; then' >> /usr/bin/backupdatabases
  7314. echo ' if [ -f $DAILYFILE ]; then' >> /usr/bin/backupdatabases
  7315. echo ' cp $DAILYFILE $TEMPFILE' >> /usr/bin/backupdatabases
  7316. echo '' >> /usr/bin/backupdatabases
  7317. echo ' # try to restore yesterdays database' >> /usr/bin/backupdatabases
  7318. echo ' mysql -u root --password="$MYSQL_PASSWORD" owncloud -o < $DAILYFILE' >> /usr/bin/backupdatabases
  7319. echo '' >> /usr/bin/backupdatabases
  7320. echo ' # Send a warning email' >> /usr/bin/backupdatabases
  7321. echo ' echo "Unable to create a backup of the Owncloud database. Attempted to restore from yesterdays backup" | mail -s "Owncloud backup" $EMAIL' >> /usr/bin/backupdatabases
  7322. echo ' else' >> /usr/bin/backupdatabases
  7323. echo ' # Send a warning email' >> /usr/bin/backupdatabases
  7324. echo ' echo "Unable to create a backup of the Owncloud database." | mail -s "Owncloud backup" $EMAIL' >> /usr/bin/backupdatabases
  7325. echo ' fi' >> /usr/bin/backupdatabases
  7326. echo 'else' >> /usr/bin/backupdatabases
  7327. echo ' chmod 600 $TEMPFILE' >> /usr/bin/backupdatabases
  7328. echo ' mv $TEMPFILE $DAILYFILE' >> /usr/bin/backupdatabases
  7329. echo '' >> /usr/bin/backupdatabases
  7330. echo ' # Make the backup readable only by root' >> /usr/bin/backupdatabases
  7331. echo ' chmod 600 $DAILYFILE' >> /usr/bin/backupdatabases
  7332. echo 'fi' >> /usr/bin/backupdatabases
  7333. nginx_ensite $OWNCLOUD_DOMAIN_NAME
  7334. service php5-fpm restart
  7335. service nginx restart
  7336. # update the dynamic DNS
  7337. CURRENT_DDNS_DOMAIN=$OWNCLOUD_DOMAIN_NAME
  7338. add_ddns_domain
  7339. echo 'install_owncloud' >> $COMPLETION_FILE
  7340. if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" ]]; then
  7341. install_owncloud_music_app
  7342. create_backup_script
  7343. create_restore_script
  7344. backup_to_friends_servers
  7345. intrusion_detection
  7346. split_gpg_key_into_fragments
  7347. # unmount any attached usb drive
  7348. if [ -d $USB_MOUNT ]; then
  7349. umount $USB_MOUNT
  7350. rm -rf $USB_MOUNT
  7351. fi
  7352. echo ''
  7353. echo "$OWNCLOUD_COMPLETION_MSG1"
  7354. echo "$OWNCLOUD_COMPLETION_MSG2"
  7355. exit 0
  7356. fi
  7357. }
  7358. function install_gogs {
  7359. if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  7360. return
  7361. fi
  7362. if grep -Fxq "install_gogs" $COMPLETION_FILE; then
  7363. return
  7364. fi
  7365. if [ ! $GIT_DOMAIN_NAME ]; then
  7366. return
  7367. fi
  7368. # http://gogs.io/docs/installation/install_from_source.md
  7369. # add a gogs user account
  7370. adduser --disabled-login --gecos 'Gogs' git
  7371. # install Go
  7372. apt-get -y install golang libpam0g-dev
  7373. if ! grep -q "export GOPATH=/home/git/go" ~/.bashrc; then
  7374. echo 'export GOPATH=/home/git/go' >> ~/.bashrc
  7375. echo 'systemctl set-environment GOPATH=/home/git/go' >> ~/.bashrc
  7376. fi
  7377. . ~/.bashrc
  7378. export GOPATH=/home/git/go
  7379. if [ ! -d $GOPATH ]; then
  7380. mkdir -p $GOPATH
  7381. fi
  7382. go get -u github.com/gpmgo/gopm
  7383. if [ ! "$?" = "0" ]; then
  7384. exit 479832
  7385. fi
  7386. # clone the repo
  7387. if [ ! -d $GOPATH/src/github.com/gogits ]; then
  7388. mkdir -p $GOPATH/src/github.com/gogits
  7389. fi
  7390. cd $GOPATH/src/github.com/gogits
  7391. git clone $GIT_DOMAIN_REPO
  7392. cd gogs
  7393. # install
  7394. go get ./...
  7395. go build
  7396. if [ ! "$?" = "0" ]; then
  7397. exit 546750
  7398. fi
  7399. install_mariadb
  7400. get_mariadb_password
  7401. get_mariadb_git_admin_password
  7402. if [ ! $GIT_ADMIN_PASSWORD ]; then
  7403. GIT_ADMIN_PASSWORD="$(openssl rand -base64 32)"
  7404. fi
  7405. if ! grep -q "Gogs admin user password" /home/$MY_USERNAME/README; then
  7406. echo '' >> /home/$MY_USERNAME/README
  7407. echo '' >> /home/$MY_USERNAME/README
  7408. echo 'Gogs' >> /home/$MY_USERNAME/README
  7409. echo '====' >> /home/$MY_USERNAME/README
  7410. echo 'Database type: MySql' >> /home/$MY_USERNAME/README
  7411. echo 'Database host: 127.0.0.1:3306' >> /home/$MY_USERNAME/README
  7412. echo 'Database user: root' >> /home/$MY_USERNAME/README
  7413. echo "Database password: $MARIADB_PASSWORD" >> /home/$MY_USERNAME/README
  7414. echo 'Database name: gogs' >> /home/$MY_USERNAME/README
  7415. echo 'Gogs admin user: gogsadmin' >> /home/$MY_USERNAME/README
  7416. echo "Gogs admin user password: $GIT_ADMIN_PASSWORD" >> /home/$MY_USERNAME/README
  7417. echo "Gogs admin user email: $MY_EMAIL_ADDRESS" >> /home/$MY_USERNAME/README
  7418. echo '' >> /home/$MY_USERNAME/README
  7419. echo 'Install Steps For First-time Run:' >> /home/$MY_USERNAME/README
  7420. echo 'Leave email service settings empty' >> /home/$MY_USERNAME/README
  7421. echo 'Check "Enable Register Confirmation"' >> /home/$MY_USERNAME/README
  7422. echo 'Check "Enable Mail Notification"' >> /home/$MY_USERNAME/README
  7423. echo '' >> /home/$MY_USERNAME/README
  7424. echo 'After the initial install edit /home/git/go/src/github.com/gogits/gogs/custom/conf/app.ini' >> /home/$MY_USERNAME/README
  7425. echo 'and within the [server] section set:' >> /home/$MY_USERNAME/README
  7426. echo " DOMAIN = $GIT_DOMAIN_NAME" >> /home/$MY_USERNAME/README
  7427. echo " ROOT_URL = http://$GIT_DOMAIN_NAME/" >> /home/$MY_USERNAME/README
  7428. echo " SSH_PORT = $SSH_PORT" >> /home/$MY_USERNAME/README
  7429. echo 'If you want to disable new account registrations then append the following:' >> /home/$MY_USERNAME/README
  7430. echo ' [service]' >> /home/$MY_USERNAME/README
  7431. echo ' DISABLE_REGISTRATION = true' >> /home/$MY_USERNAME/README
  7432. echo 'Then restart with:' >> /home/$MY_USERNAME/README
  7433. echo ' systemctl restart gogs' >> /home/$MY_USERNAME/README
  7434. echo '' >> /home/$MY_USERNAME/README
  7435. echo "Note that there's a usability/security trade-off made here." >> /home/$MY_USERNAME/README
  7436. echo "In order to allow git clone via http we don't redirect everything" >> /home/$MY_USERNAME/README
  7437. echo 'over https. Instead only critical things such as user login,' >> /home/$MY_USERNAME/README
  7438. echo 'settings and admin are encrypted.' >> /home/$MY_USERNAME/README
  7439. echo 'There are also potential security issues with cloning/pulling/pushing' >> /home/$MY_USERNAME/README
  7440. echo 'code over http, since a determined adversary could inject malware' >> /home/$MY_USERNAME/README
  7441. echo 'into the stream as it passes, so beware.' >> /home/$MY_USERNAME/README
  7442. echo 'If you have a bought domain and a non-self signed cert then you' >> /home/$MY_USERNAME/README
  7443. echo "should change /etc/nginx/sites-available/$GIT_DOMAIN_NAME to redirect everything over https." >> /home/$MY_USERNAME/README
  7444. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  7445. chmod 600 /home/$MY_USERNAME/README
  7446. fi
  7447. echo "create database gogs;
  7448. CREATE USER 'gogsadmin'@'localhost' IDENTIFIED BY '$GOGS_ADMIN_PASSWORD';
  7449. GRANT ALL PRIVILEGES ON gogs.* TO 'gogsadmin'@'localhost';
  7450. quit" > $INSTALL_DIR/batch.sql
  7451. chmod 600 $INSTALL_DIR/batch.sql
  7452. mysql -u root --password="$MARIADB_PASSWORD" < $INSTALL_DIR/batch.sql
  7453. shred -zu $INSTALL_DIR/batch.sql
  7454. chmod 600 /home/git/go/src/github.com/gogits/gogs/custom/conf/app.ini
  7455. chown -R git:git /home/git
  7456. cp $GOPATH/src/github.com/gogits/gogs/scripts/systemd/gogs.service /etc/systemd/system
  7457. sed -i 's|#After=mysqld.service|After=mysqld.service|g' /etc/systemd/system/gogs.service
  7458. sed -i "s|WorkingDirectory=.*|WorkingDirectory=$GOPATH/src/github.com/gogits/gogs|g" /etc/systemd/system/gogs.service
  7459. sed -i "s|ExecStart=.*|ExecStart=$GOPATH/src/github.com/gogits/gogs/gogs web|g" /etc/systemd/system/gogs.service
  7460. sed -i "s|Environment.*|Environment=\"USER=git\" \"HOME=/home/git\" \"GOPATH=/home/git/go\"|g" /etc/systemd/system/gogs.service
  7461. systemctl enable gogs
  7462. systemctl daemon-reload
  7463. systemctl restart gogs
  7464. if [ ! -d /var/www/$GIT_DOMAIN_NAME ]; then
  7465. mkdir /var/www/$GIT_DOMAIN_NAME
  7466. fi
  7467. if [ -d /var/www/$GIT_DOMAIN_NAME/htdocs ]; then
  7468. rm -rf /var/www/$GIT_DOMAIN_NAME/htdocs
  7469. fi
  7470. echo 'server {' > /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7471. echo ' listen 80;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7472. echo " server_name $GIT_DOMAIN_NAME;" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7473. echo ' access_log off;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7474. echo " error_log /var/log/nginx/$GIT_DOMAIN_NAME_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7475. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7476. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7477. echo ' location / {' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7478. echo ' proxy_pass http://localhost:3000;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7479. echo ' }' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7480. echo ' location ^~ /user/ {' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7481. echo ' rewrite ^ https://$server_name$request_uri?;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7482. echo ' }' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7483. echo ' location ^~ /admin/ {' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7484. echo ' rewrite ^ https://$server_name$request_uri?;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7485. echo ' }' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7486. echo '}' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7487. echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7488. echo 'server {' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7489. echo ' listen 443 ssl;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7490. echo " root /var/www/$GIT_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7491. echo " server_name $GIT_DOMAIN_NAME;" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7492. echo ' access_log off;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7493. echo " error_log /var/log/nginx/$GIT_DOMAIN_NAME_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7494. echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7495. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7496. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7497. echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7498. echo ' ssl on;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7499. echo " ssl_certificate /etc/ssl/certs/$GIT_DOMAIN_NAME.crt;" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7500. echo " ssl_certificate_key /etc/ssl/private/$GIT_DOMAIN_NAME.key;" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7501. echo " ssl_dhparam /etc/ssl/certs/$GIT_DOMAIN_NAME.dhparam;" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7502. echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7503. echo ' ssl_session_timeout 5m;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7504. echo ' ssl_prefer_server_ciphers on;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7505. echo " ssl_protocols $SSL_PROTOCOLS; # not possible to do exclusive" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7506. echo " ssl_ciphers '$SSL_CIPHERS';" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7507. echo ' add_header X-Frame-Options DENY;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7508. echo ' add_header X-Content-Type-Options nosniff;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7509. echo ' add_header Strict-Transport-Security max-age=0;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7510. echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7511. echo ' location / {' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7512. echo ' proxy_pass http://localhost:3000;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7513. echo ' }' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7514. echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7515. echo ' client_max_body_size 10G; # set max upload size' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7516. echo ' client_body_buffer_size 128k;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7517. echo ' fastcgi_buffers 64 4K;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7518. echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7519. echo ' error_page 403 /core/templates/403.php;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7520. echo ' error_page 404 /core/templates/404.php;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7521. echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7522. echo ' location = /robots.txt {' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7523. echo ' allow all;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7524. echo ' log_not_found off;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7525. echo ' access_log off;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7526. echo ' }' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7527. echo '}' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  7528. configure_php
  7529. if [ ! -f /etc/ssl/certs/$GIT_DOMAIN_NAME.dhparam ]; then
  7530. freedombone-addcert -h $GIT_DOMAIN_NAME --dhkey $DH_KEYLENGTH
  7531. check_certificates $GIT_DOMAIN_NAME
  7532. fi
  7533. nginx_ensite $GIT_DOMAIN_NAME
  7534. service php5-fpm restart
  7535. service nginx restart
  7536. # update the dynamic DNS
  7537. CURRENT_DDNS_DOMAIN=$GIT_DOMAIN_NAME
  7538. add_ddns_domain
  7539. echo 'install_gogs' >> $COMPLETION_FILE
  7540. }
  7541. function install_tox_node {
  7542. if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" ]]; then
  7543. return
  7544. fi
  7545. if grep -Fxq "install_tox_node" $COMPLETION_FILE; then
  7546. return
  7547. fi
  7548. # toxcore
  7549. apt-get -y install build-essential libtool autotools-dev
  7550. apt-get -y install automake checkinstall check git yasm
  7551. apt-get -y install libsodium13 libsodium-dev libcap2-bin
  7552. apt-get -y install libconfig9 libconfig-dev
  7553. cd $INSTALL_DIR
  7554. git clone $TOX_REPO
  7555. cd $INSTALL_DIR/toxcore
  7556. autoreconf -i
  7557. ./configure --enable-daemon
  7558. if [ ! "$?" = "0" ]; then
  7559. exit 78467
  7560. fi
  7561. make
  7562. if [ ! "$?" = "0" ]; then
  7563. exit 84562
  7564. fi
  7565. make install
  7566. cp /usr/local/lib/libtoxcore* /usr/lib/
  7567. if [ ! -f /usr/local/bin/tox-bootstrapd ]; then
  7568. echo "File not found /usr/local/bin/tox-bootstrapd"
  7569. exit 73862
  7570. fi
  7571. useradd --home-dir /var/lib/tox-bootstrapd --create-home --system --shell /sbin/nologin --comment "Account to run Tox's DHT bootstrap daemon" --user-group tox-bootstrapd
  7572. chmod 700 /var/lib/tox-bootstrapd
  7573. if [ ! -f $INSTALL_DIR/toxcore/other/bootstrap_daemon/tox-bootstrapd.conf ]; then
  7574. echo "File not found $INSTALL_DIR/toxcore/other/bootstrap_daemon/tox-bootstrapd.conf"
  7575. exit 476835
  7576. fi
  7577. # create configuration file
  7578. echo "port = $TOX_PORT" > /etc/tox-bootstrapd.conf
  7579. echo 'keys_file_path = "/var/lib/tox-bootstrapd/keys"' >> /etc/tox-bootstrapd.conf
  7580. echo 'pid_file_path = "/var/run/tox-bootstrapd/tox-bootstrapd.pid"' >> /etc/tox-bootstrapd.conf
  7581. echo 'enable_ipv6 = true' >> /etc/tox-bootstrapd.conf
  7582. echo 'enable_ipv4_fallback = true' >> /etc/tox-bootstrapd.conf
  7583. echo 'enable_lan_discovery = true' >> /etc/tox-bootstrapd.conf
  7584. echo 'enable_tcp_relay = true' >> /etc/tox-bootstrapd.conf
  7585. echo "tcp_relay_ports = [443, 3389, $TOX_PORT]" >> /etc/tox-bootstrapd.conf
  7586. echo 'enable_motd = true' >> /etc/tox-bootstrapd.conf
  7587. echo 'motd = "tox-bootstrapd"' >> /etc/tox-bootstrapd.conf
  7588. if [ $TOX_NODES ]; then
  7589. echo 'bootstrap_nodes = (' >> /etc/tox-bootstrapd.conf
  7590. toxcount=0
  7591. while [ "x${TOX_NODES[toxcount]}" != "x" ]
  7592. do
  7593. toxval_ipv4=$(echo $TOX_NODES[toxcount] | awk -F ',' '{print $1}')
  7594. toxval_ipv6=$(echo $TOX_NODES[toxcount] | awk -F ',' '{print $2}')
  7595. toxval_port=$(echo $TOX_NODES[toxcount] | awk -F ',' '{print $3}')
  7596. toxval_pubkey=$(echo $TOX_NODES[toxcount] | awk -F ',' '{print $4}')
  7597. toxval_maintainer=$(echo $TOX_NODES[toxcount] | awk -F ',' '{print $5}')
  7598. echo "{ // $toxval_maintainer" >> /etc/tox-bootstrapd.conf
  7599. if [[ $toxval_ipv6 != 'NONE' ]]; then
  7600. echo " address = \"$toxval_ipv6\"" >> /etc/tox-bootstrapd.conf
  7601. else
  7602. echo " address = \"$toxval_ipv4\"" >> /etc/tox-bootstrapd.conf
  7603. fi
  7604. echo " port = $toxval_port" >> /etc/tox-bootstrapd.conf
  7605. echo " public_key = \"$toxval_pubkey\"" >> /etc/tox-bootstrapd.conf
  7606. toxcount=$(( $toxcount + 1 ))
  7607. if [ "x${TOX_NODES[toxcount]}" != "x" ]; then
  7608. echo "}," >> /etc/tox-bootstrapd.conf
  7609. else
  7610. echo "}" >> /etc/tox-bootstrapd.conf
  7611. fi
  7612. done
  7613. echo ')' >> /etc/tox-bootstrapd.conf
  7614. fi
  7615. if [ ! -f $INSTALL_DIR/toxcore/other/bootstrap_daemon/tox-bootstrapd.service ]; then
  7616. echo "File not found $INSTALL_DIR/toxcore/other/bootstrap_daemon/tox-bootstrapd.service"
  7617. exit 7359
  7618. fi
  7619. cp $INSTALL_DIR/toxcore/other/bootstrap_daemon/tox-bootstrapd.service /etc/systemd/system/
  7620. enable_ipv6
  7621. systemctl daemon-reload
  7622. systemctl enable tox-bootstrapd.service
  7623. systemctl start tox-bootstrapd.service
  7624. if [ ! "$?" = "0" ]; then
  7625. systemctl status tox-bootstrapd.service
  7626. exit 5846
  7627. fi
  7628. systemctl restart tox-bootstrapd.service
  7629. TOX_PUBLIC_KEY=$(cat /var/log/syslog | grep tox | grep "Public Key" | awk -F ' ' '{print $8}' | tail -1)
  7630. if [ ${#TOX_PUBLIC_KEY} -lt 30 ]; then
  7631. echo 'Could not obtain the tox node public key'
  7632. exit 6529
  7633. fi
  7634. configure_firewall_for_tox
  7635. if ! grep -q "Tox node" /home/$MY_USERNAME/README; then
  7636. echo '' >> /home/$MY_USERNAME/README
  7637. echo '' >> /home/$MY_USERNAME/README
  7638. echo 'Tox' >> /home/$MY_USERNAME/README
  7639. echo '===' >> /home/$MY_USERNAME/README
  7640. echo "Your Tox node public key is: $TOX_PUBLIC_KEY" >> /home/$MY_USERNAME/README
  7641. echo 'In the Toxic client you can connect to it with:' >> /home/$MY_USERNAME/README
  7642. echo " /connect $DEFAULT_DOMAIN_NAME $TOX_PORT $TOX_PUBLIC_KEY" >> /home/$MY_USERNAME/README
  7643. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  7644. chmod 600 /home/$MY_USERNAME/README
  7645. fi
  7646. echo 'install_tox_node' >> $COMPLETION_FILE
  7647. }
  7648. function install_tox_client {
  7649. if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  7650. return
  7651. fi
  7652. if grep -Fxq "install_tox_client" $COMPLETION_FILE; then
  7653. return
  7654. fi
  7655. apt-get -y install libncursesw5-dev libconfig-dev
  7656. cd $INSTALL_DIR
  7657. git clone https://github.com/Tox/toxic
  7658. cd $INSTALL_DIR/toxic
  7659. make
  7660. if [ ! -f $INSTALL_DIR/toxic/build/toxic ]; then
  7661. exit 74872
  7662. fi
  7663. make install
  7664. echo 'install_tox_client' >> $COMPLETION_FILE
  7665. }
  7666. function install_xmpp {
  7667. if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  7668. return
  7669. fi
  7670. if grep -Fxq "install_xmpp" $COMPLETION_FILE; then
  7671. return
  7672. fi
  7673. apt-get -y install lua-sec
  7674. apt-get -y install prosody
  7675. if [ ! -d /etc/prosody ]; then
  7676. echo "ERROR: prosody does not appear to have installed. $CHECK_MESSAGE"
  7677. exit 52
  7678. fi
  7679. if [ ! -f /etc/ssl/certs/xmpp.dhparam ]; then
  7680. freedombone-addcert -h xmpp --dhkey $DH_KEYLENGTH
  7681. check_certificates xmpp
  7682. fi
  7683. chown prosody:prosody /etc/ssl/private/xmpp.key
  7684. chown prosody:prosody /etc/ssl/certs/xmpp.*
  7685. cp -a /etc/prosody/conf.avail/example.com.cfg.lua /etc/prosody/conf.avail/xmpp.cfg.lua
  7686. sed -i 's|/etc/prosody/certs/example.com.key|/etc/ssl/private/xmpp.key|g' /etc/prosody/conf.avail/xmpp.cfg.lua
  7687. sed -i 's|/etc/prosody/certs/example.com.crt|/etc/ssl/certs/xmpp.crt|g' /etc/prosody/conf.avail/xmpp.cfg.lua
  7688. if ! grep -q "xmpp.dhparam" /etc/prosody/conf.avail/xmpp.cfg.lua; then
  7689. sed -i '/certificate =/a\ dhparam = "/etc/ssl/certs/xmpp.dhparam";' /etc/prosody/conf.avail/xmpp.cfg.lua
  7690. fi
  7691. if ! grep -q 'options = {"no_sslv2", "no_sslv3" }' /etc/prosody/conf.avail/xmpp.cfg.lua; then
  7692. sed -i '/certificate =/a\ options = {"no_sslv2", "no_sslv3" };' /etc/prosody/conf.avail/xmpp.cfg.lua
  7693. fi
  7694. if ! grep -q 'ciphers =' /etc/prosody/conf.avail/xmpp.cfg.lua; then
  7695. sed -i "/certificate =/a\ ciphers = $XMPP_CIPHERS;" /etc/prosody/conf.avail/xmpp.cfg.lua
  7696. fi
  7697. if ! grep -q 'depth = "1";' /etc/prosody/conf.avail/xmpp.cfg.lua; then
  7698. sed -i '/certificate =/a\ depth = "1";' /etc/prosody/conf.avail/xmpp.cfg.lua
  7699. fi
  7700. if ! grep -q 'curve =' /etc/prosody/conf.avail/xmpp.cfg.lua; then
  7701. sed -i "/certificate =/a\ curve = $XMPP_ECC_CURVE;" /etc/prosody/conf.avail/xmpp.cfg.lua
  7702. fi
  7703. sed -i "s/example.com/$DEFAULT_DOMAIN_NAME/g" /etc/prosody/conf.avail/xmpp.cfg.lua
  7704. sed -i 's/enabled = false -- Remove this line to enable this host//g' /etc/prosody/conf.avail/xmpp.cfg.lua
  7705. if ! grep -q "modules_enabled" /etc/prosody/conf.avail/xmpp.cfg.lua; then
  7706. echo '' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  7707. echo 'modules_enabled = {' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  7708. echo ' "bosh"; -- Enable mod_bosh' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  7709. echo ' "tls"; -- Enable mod_tls' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  7710. echo ' "saslauth"; -- Enable mod_saslauth' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  7711. echo '}' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  7712. echo '' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  7713. echo 'c2s_require_encryption = true' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  7714. echo 's2s_require_encryption = true' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  7715. echo 'allow_unencrypted_plain_auth = false' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  7716. fi
  7717. ln -sf /etc/prosody/conf.avail/xmpp.cfg.lua /etc/prosody/conf.d/xmpp.cfg.lua
  7718. sed -i 's|/etc/prosody/certs/localhost.key|/etc/ssl/private/xmpp.key|g' /etc/prosody/prosody.cfg.lua
  7719. sed -i 's|/etc/prosody/certs/localhost.crt|/etc/ssl/certs/xmpp.crt|g' /etc/prosody/prosody.cfg.lua
  7720. if ! grep -q "xmpp.dhparam" /etc/prosody/prosody.cfg.lua; then
  7721. sed -i '/certificate =/a\ dhparam = "/etc/ssl/certs/xmpp.dhparam";' /etc/prosody/prosody.cfg.lua
  7722. fi
  7723. if ! grep -q 'options = {"no_sslv2", "no_sslv3" }' /etc/prosody/prosody.cfg.lua; then
  7724. sed -i '/certificate =/a\ options = {"no_sslv2", "no_sslv3" };' /etc/prosody/prosody.cfg.lua
  7725. fi
  7726. if ! grep -q 'ciphers =' /etc/prosody/prosody.cfg.lua; then
  7727. sed -i "/certificate =/a\ ciphers = $XMPP_CIPHERS;" /etc/prosody/prosody.cfg.lua
  7728. fi
  7729. if ! grep -q 'depth = "1";' /etc/prosody/prosody.cfg.lua; then
  7730. sed -i '/certificate =/a\ depth = "1";' /etc/prosody/prosody.cfg.lua
  7731. fi
  7732. if ! grep -q 'curve =' /etc/prosody/prosody.cfg.lua; then
  7733. sed -i "/certificate =/a\ curve = $XMPP_ECC_CURVE;" /etc/prosody/prosody.cfg.lua
  7734. fi
  7735. sed -i 's/c2s_require_encryption = false/c2s_require_encryption = true/g' /etc/prosody/prosody.cfg.lua
  7736. if ! grep -q "s2s_require_encryption" /etc/prosody/prosody.cfg.lua; then
  7737. sed -i '/c2s_require_encryption/a\s2s_require_encryption = true' /etc/prosody/prosody.cfg.lua
  7738. fi
  7739. if ! grep -q "allow_unencrypted_plain_auth" /etc/prosody/prosody.cfg.lua; then
  7740. echo 'allow_unencrypted_plain_auth = false' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  7741. fi
  7742. sed -i 's/--"bosh";/"bosh";/g' /etc/prosody/prosody.cfg.lua
  7743. sed -i 's/authentication = "internal_plain"/authentication = "internal_hashed"/g' /etc/prosody/prosody.cfg.lua
  7744. sed -i 's/enabled = false -- Remove this line to enable this host//g' /etc/prosody/prosody.cfg.lua
  7745. sed -i 's|key = "/etc/prosody/certs/example.com.key"|key = "/etc/ssl/private/xmpp.key"|g' /etc/prosody/prosody.cfg.lua
  7746. sed -i 's|certificate = "/etc/prosody/certs/example.com.crt"|certificate = "/etc/ssl/certs/xmpp.crt"|g' /etc/prosody/prosody.cfg.lua
  7747. sed -i "s/example.com/$DEFAULT_DOMAIN_NAME/g" /etc/prosody/prosody.cfg.lua
  7748. service prosody restart
  7749. touch /home/$MY_USERNAME/README
  7750. if ! grep -q "Your XMPP password is" /home/$MY_USERNAME/README; then
  7751. XMPP_PASSWORD="$(openssl rand -base64 8)"
  7752. prosodyctl register $MY_USERNAME $DEFAULT_DOMAIN_NAME $XMPP_PASSWORD
  7753. echo '' >> /home/$MY_USERNAME/README
  7754. echo '' >> /home/$MY_USERNAME/README
  7755. echo 'XMPP' >> /home/$MY_USERNAME/README
  7756. echo '====' >> /home/$MY_USERNAME/README
  7757. echo "Your XMPP password is: $XMPP_PASSWORD" >> /home/$MY_USERNAME/README
  7758. echo 'You can change it with: ' >> /home/$MY_USERNAME/README
  7759. echo '' >> /home/$MY_USERNAME/README
  7760. echo " prosodyctl passwd $MY_EMAIL_ADDRESS" >> /home/$MY_USERNAME/README
  7761. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  7762. chmod 600 /home/$MY_USERNAME/README
  7763. fi
  7764. echo 'install_xmpp' >> $COMPLETION_FILE
  7765. }
  7766. function install_watchdog_script {
  7767. if grep -Fxq "install_watchdog_script" $COMPLETION_FILE; then
  7768. return
  7769. fi
  7770. echo '#!/bin/bash' > /usr/bin/$WATCHDOG_SCRIPT_NAME
  7771. echo 'LOGFILE=/var/log/keepon.log' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
  7772. echo 'CURRENT_DATE=$(date)' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
  7773. # application specific stuff is added later
  7774. chmod +x /usr/bin/$WATCHDOG_SCRIPT_NAME
  7775. if ! grep -q "/usr/bin/$WATCHDOG_SCRIPT_NAME" /etc/crontab; then
  7776. echo "*/1 * * * * root /usr/bin/$WATCHDOG_SCRIPT_NAME" >> /etc/crontab
  7777. fi
  7778. echo 'install_watchdog_script' >> $COMPLETION_FILE
  7779. }
  7780. function install_irc_server {
  7781. if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" ]]; then
  7782. return
  7783. fi
  7784. if grep -Fxq "install_irc_server" $COMPLETION_FILE; then
  7785. return
  7786. fi
  7787. apt-get -y install ngircd
  7788. if [ ! -d /etc/ngircd ]; then
  7789. echo "ERROR: ngircd does not appear to have installed. $CHECK_MESSAGE"
  7790. exit 53
  7791. fi
  7792. if [ ! -f /etc/ssl/certs/ngircd.dhparam ]; then
  7793. freedombone-addcert -h ngircd --dhkey $DH_KEYLENGTH
  7794. check_certificates ngircd
  7795. fi
  7796. DEFAULTDOMAIN=$DEFAULT_DOMAIN_NAME
  7797. if [[ $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  7798. DEFAULTDOMAIN="${DEFAULT_DOMAIN_NAME}.local"
  7799. fi
  7800. echo '**************************************************' > /etc/ngircd/motd
  7801. echo '* F R E E D O M B O N E I R C *' >> /etc/ngircd/motd
  7802. echo '* *' >> /etc/ngircd/motd
  7803. echo '* Freedom in the Cloud *' >> /etc/ngircd/motd
  7804. echo '**************************************************' >> /etc/ngircd/motd
  7805. sed -i 's|MotdFile = /etc/ngircd/ngircd.motd|MotdFile = /etc/ngircd/motd|g' /etc/ngircd/ngircd.conf
  7806. sed -i "s/irc@irc.example.com/$MY_EMAIL_ADDRESS/g" /etc/ngircd/ngircd.conf
  7807. sed -i "s/irc.example.net/$DEFAULTDOMAIN/g" /etc/ngircd/ngircd.conf
  7808. sed -i "s|Yet another IRC Server running on Debian GNU/Linux|IRC Server of $DEFAULTDOMAIN|g" /etc/ngircd/ngircd.conf
  7809. sed -i 's/;Password = wealllikedebian/Password =/g' /etc/ngircd/ngircd.conf
  7810. sed -i 's|;CertFile = /etc/ssl/certs/server.crt|CertFile = /etc/ssl/certs/ngircd.crt|g' /etc/ngircd/ngircd.conf
  7811. sed -i 's|;DHFile = /etc/ngircd/dhparams.pem|DHFile = /etc/ssl/certs/ngircd.dhparam|g' /etc/ngircd/ngircd.conf
  7812. sed -i 's|;KeyFile = /etc/ssl/private/server.key|KeyFile = /etc/ssl/private/ngircd.key|g' /etc/ngircd/ngircd.conf
  7813. sed -i "s/;Ports =.*/Ports = $IRC_PORT, 9999/g" /etc/ngircd/ngircd.conf
  7814. sed -i 's/;Name = #ngircd/Name = #freedombone/g' /etc/ngircd/ngircd.conf
  7815. sed -i 's/;Topic = Our ngircd testing channel/Topic = Freedombone chat channel/g' /etc/ngircd/ngircd.conf
  7816. sed -i 's/;MaxUsers = 23/MaxUsers = 23/g' /etc/ngircd/ngircd.conf
  7817. sed -i 's|;KeyFile = /etc/ngircd/#chan.key|KeyFile = /etc/ngircd/#freedombone.key|g' /etc/ngircd/ngircd.conf
  7818. sed -i 's/;CloakHost = cloaked.host/CloakHost = freedombone/g' /etc/ngircd/ngircd.conf
  7819. IRC_SALT="$(openssl rand -base64 32)"
  7820. IRC_OPERATOR_PASSWORD="$(openssl rand -base64 8)"
  7821. sed -i "s|;CloakHostSalt = abcdefghijklmnopqrstuvwxyz|CloakHostSalt = $IRC_SALT|g" /etc/ngircd/ngircd.conf
  7822. sed -i 's/;ConnectIPv4 = yes/ConnectIPv4 = yes/g' /etc/ngircd/ngircd.conf
  7823. sed -i 's/;MorePrivacy = no/MorePrivacy = yes/g' /etc/ngircd/ngircd.conf
  7824. sed -i 's/;RequireAuthPing = no/RequireAuthPing = no/g' /etc/ngircd/ngircd.conf
  7825. sed -i "s/;Name = TheOper/Name = $MY_USERNAME/g" /etc/ngircd/ngircd.conf
  7826. sed -i "s/;Password = ThePwd/Password = $IRC_OPERATOR_PASSWORD/g" /etc/ngircd/ngircd.conf
  7827. service ngircd start
  7828. # keep the daemon running
  7829. echo '' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
  7830. echo '# keep irc daemon running' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
  7831. echo 'IRC_RUNNING=$(pgrep ngircd > /dev/null && echo Running)' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
  7832. echo 'if [ ! $IRC_RUNNING ]; then' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
  7833. echo ' service ngircd start' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
  7834. echo ' echo -n $CURRENT_DATE >> $LOGFILE' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
  7835. echo ' echo " IRC daemon restarted" >> $LOGFILE' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
  7836. echo 'fi' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
  7837. if ! grep -q "IRC Server" /home/$MY_USERNAME/README; then
  7838. echo '' >> /home/$MY_USERNAME/README
  7839. echo '' >> /home/$MY_USERNAME/README
  7840. echo 'IRC Server' >> /home/$MY_USERNAME/README
  7841. echo '==========' >> /home/$MY_USERNAME/README
  7842. echo 'To connect to your IRC server in irssi:' >> /home/$MY_USERNAME/README
  7843. echo '' >> /home/$MY_USERNAME/README
  7844. echo " /server add -auto -ssl $DEFAULTDOMAIN $IRC_PORT" >> /home/$MY_USERNAME/README
  7845. echo " /connect $DEFAULT_DOMAIN_NAME" >> /home/$MY_USERNAME/README
  7846. echo ' /join #freedombone' >> /home/$MY_USERNAME/README
  7847. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  7848. chmod 600 /home/$MY_USERNAME/README
  7849. fi
  7850. echo 'install_irc_server' >> $COMPLETION_FILE
  7851. }
  7852. function get_wiki_admin_password {
  7853. if [ -f /home/$MY_USERNAME/README ]; then
  7854. if grep -q "Wiki password" /home/$MY_USERNAME/README; then
  7855. WIKI_ADMIN_PASSWORD=$(cat /home/$MY_USERNAME/README | grep "Wiki password:" | awk -F ':' '{print $2}' | sed 's/^ *//')
  7856. fi
  7857. fi
  7858. }
  7859. function install_wiki {
  7860. if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" || $SYSTEM_TYPE == "$VARIANT_MASH" ]]; then
  7861. return
  7862. fi
  7863. if grep -Fxq "install_wiki" $COMPLETION_FILE; then
  7864. return
  7865. fi
  7866. if [ ! $WIKI_DOMAIN_NAME ]; then
  7867. return
  7868. fi
  7869. apt-get -y install dokuwiki
  7870. apt-get -y remove --purge apache*
  7871. if [ -d /etc/apache2 ]; then
  7872. rm -rf /etc/apache2
  7873. echo 'Removed Apache installation after Dokuwiki install'
  7874. fi
  7875. if [ ! -d /var/www/$WIKI_DOMAIN_NAME ]; then
  7876. mkdir /var/www/$WIKI_DOMAIN_NAME
  7877. fi
  7878. if [ -d /var/www/$WIKI_DOMAIN_NAME/htdocs ]; then
  7879. rm -rf /var/www/$WIKI_DOMAIN_NAME/htdocs
  7880. fi
  7881. if [ ! -f /etc/ssl/certs/$WIKI_DOMAIN_NAME.dhparam ]; then
  7882. freedombone-addcert -h $WIKI_DOMAIN_NAME --dhkey $DH_KEYLENGTH
  7883. check_certificates $WIKI_DOMAIN_NAME
  7884. fi
  7885. ln -s /usr/share/dokuwiki /var/www/$WIKI_DOMAIN_NAME/htdocs
  7886. mkdir /var/lib/dokuwiki/custom
  7887. cp /etc/dokuwiki/local.php.dist /var/lib/dokuwiki/custom/local.php
  7888. ln -s /var/lib/dokuwiki/custom/local.php /etc/dokuwiki/local.php
  7889. chown www-data /var/lib/dokuwiki/custom
  7890. chown www-data /var/lib/dokuwiki/custom/local.php
  7891. chown -R www-data /etc/dokuwiki
  7892. chown -R www-data /usr/share/dokuwiki/lib/
  7893. chmod 600 /var/lib/dokuwiki/custom/local.php
  7894. chmod -R 755 /usr/share/dokuwiki/lib
  7895. sed -i 's|//$conf|$conf|g' /var/lib/dokuwiki/custom/local.php
  7896. sed -i "s|joe|$MY_USERNAME|g" /var/lib/dokuwiki/custom/local.php
  7897. sed -i "s|Debian DokuWiki|$WIKI_TITLE|g" /etc/dokuwiki/local.php
  7898. # set the admin user
  7899. sed -i "s/@admin/$MY_USERNAME/g" /etc/dokuwiki/local.php
  7900. # disallow registration of new users
  7901. if ! grep -q "disableactions" /etc/dokuwiki/local.php; then
  7902. echo "\$conf['disableactions'] = 'register';" >> /etc/dokuwiki/local.php
  7903. fi
  7904. if ! grep -q "disableactions" /var/lib/dokuwiki/custom/local.php; then
  7905. echo "\$conf['disableactions'] = 'register';" >> /var/lib/dokuwiki/custom/local.php
  7906. fi
  7907. if ! grep -q "authtype" /var/lib/dokuwiki/custom/local.php; then
  7908. echo "\$conf['authtype'] = 'authplain';" >> /var/lib/dokuwiki/custom/local.php
  7909. fi
  7910. if ! grep -q "authtype" /etc/dokuwiki/local.php; then
  7911. echo "\$conf['authtype'] = 'authplain';" >> /etc/dokuwiki/local.php
  7912. fi
  7913. get_wiki_admin_password
  7914. if [ ! $WIKI_ADMIN_PASSWORD ]; then
  7915. WIKI_ADMIN_PASSWORD="$(openssl rand -base64 16)"
  7916. fi
  7917. HASHED_WIKI_PASSWORD=$(echo -n "$WIKI_ADMIN_PASSWORD" | md5sum | awk -F ' ' '{print $1}')
  7918. echo -n "$MY_USERNAME:$HASHED_WIKI_PASSWORD:$MY_NAME:$MY_EMAIL:admin,user,upload" > /var/lib/dokuwiki/acl/users.auth.php
  7919. chmod 640 /var/lib/dokuwiki/acl/users.auth.php
  7920. if ! grep -q "video/ogg" /etc/dokuwiki/mime.conf; then
  7921. echo 'ogv video/ogg' >> /etc/dokuwiki/mime.conf
  7922. fi
  7923. if ! grep -q "video/mp4" /etc/dokuwiki/mime.conf; then
  7924. echo 'mp4 video/mp4' >> /etc/dokuwiki/mime.conf
  7925. fi
  7926. if ! grep -q "video/webm" /etc/dokuwiki/mime.conf; then
  7927. echo 'webm video/webm' >> /etc/dokuwiki/mime.conf
  7928. fi
  7929. echo 'server {' > /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7930. echo ' listen 80;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7931. echo " root /var/www/$WIKI_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7932. echo " server_name $WIKI_DOMAIN_NAME;" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7933. echo ' access_log off;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7934. echo " error_log /var/log/nginx/$WIKI_DOMAIN_NAME_error.log;" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7935. echo ' index index.php;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7936. echo ' charset utf-8;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7937. echo ' client_max_body_size 20m;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7938. echo ' client_body_buffer_size 128k;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7939. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7940. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7941. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7942. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7943. echo ' # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7944. echo ' location / {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7945. echo ' rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7946. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7947. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7948. echo " # make sure webfinger and other well known services aren't blocked" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7949. echo ' # by denying dot files and rewrite request to the front controller' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7950. echo ' location ^~ /.well-known/ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7951. echo ' allow all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7952. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7953. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7954. echo ' # statically serve these file types when possible' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7955. echo ' # otherwise fall back to front controller' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7956. echo ' # allow browser to cache them' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7957. echo ' # added .htm for advanced source code editor library' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7958. echo ' location ~* \.(jpg|jpeg|gif|png|ico|css|js|htm|html|ttf|woff|svg)$ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7959. echo ' expires 30d;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7960. echo ' try_files $uri /index.php?q=$uri&$args;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7961. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7962. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7963. echo ' # block these file types' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7964. echo ' location ~* \.(tpl|md|tgz|log|out)$ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7965. echo ' deny all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7966. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7967. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7968. echo ' # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7969. echo ' # or a unix socket' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7970. echo ' location ~* \.php$ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7971. echo ' # Zero-day exploit defense.' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7972. echo ' # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7973. echo " # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7974. echo " # server, which is entirely possible with php-fpm/php-fcgi." >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7975. echo " # Comment the 'try_files' line out if you set up php-fpm/php-fcgi on" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7976. echo " # another machine. And then cross your fingers that you won't get hacked." >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7977. echo ' try_files $uri $uri/ /index.php;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7978. echo ' # NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7979. echo ' fastcgi_split_path_info ^(.+\.php)(/.+)$;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7980. echo ' # With php5-cgi alone:' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7981. echo ' # fastcgi_pass 127.0.0.1:9000;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7982. echo ' # With php5-fpm:' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7983. echo ' fastcgi_pass unix:/var/run/php5-fpm.sock;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7984. echo ' include fastcgi_params;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7985. echo ' fastcgi_index index.php;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7986. echo ' fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7987. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7988. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7989. echo ' # deny access to all dot files' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7990. echo ' location ~ /\. {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7991. echo ' deny all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7992. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7993. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7994. echo ' #deny access to store' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7995. echo ' location ~ /store {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7996. echo ' deny all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7997. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7998. echo ' location ~ /(data|conf|bin|inc)/ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  7999. echo ' deny all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8000. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8001. echo ' location ~ /\.ht {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8002. echo ' deny all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8003. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8004. echo '}' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8005. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8006. echo 'server {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8007. echo ' listen 443 ssl;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8008. echo " root /var/www/$WIKI_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8009. echo " server_name $WIKI_DOMAIN_NAME;" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8010. echo ' access_log off;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8011. echo " error_log /var/log/nginx/$WIKI_DOMAIN_NAME_error_ssl.log;" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8012. echo ' index index.php;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8013. echo ' charset utf-8;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8014. echo ' client_max_body_size 20m;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8015. echo ' client_body_buffer_size 128k;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8016. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8017. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8018. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8019. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8020. echo ' ssl on;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8021. echo " ssl_certificate /etc/ssl/certs/$WIKI_DOMAIN_NAME.crt;" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8022. echo " ssl_certificate_key /etc/ssl/private/$WIKI_DOMAIN_NAME.key;" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8023. echo " ssl_dhparam /etc/ssl/certs/$WIKI_DOMAIN_NAME.dhparam;" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8024. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8025. echo ' ssl_session_timeout 5m;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8026. echo ' ssl_prefer_server_ciphers on;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8027. echo ' ssl_session_cache builtin:1000 shared:SSL:10m;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8028. echo " ssl_protocols $SSL_PROTOCOLS; # not possible to do exclusive" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8029. echo " ssl_ciphers '$SSL_CIPHERS';" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8030. echo ' add_header X-Frame-Options DENY;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8031. echo ' add_header X-Content-Type-Options nosniff;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8032. echo ' add_header Strict-Transport-Security "max-age=0;";' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8033. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8034. echo ' # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8035. echo ' location / {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8036. echo ' rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8037. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8038. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8039. echo " # make sure webfinger and other well known services aren't blocked" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8040. echo ' # by denying dot files and rewrite request to the front controller' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8041. echo ' location ^~ /.well-known/ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8042. echo ' allow all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8043. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8044. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8045. echo ' # statically serve these file types when possible' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8046. echo ' # otherwise fall back to front controller' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8047. echo ' # allow browser to cache them' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8048. echo ' # added .htm for advanced source code editor library' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8049. echo ' location ~* \.(jpg|jpeg|gif|png|ico|css|js|htm|html|ttf|woff|svg)$ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8050. echo ' expires 30d;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8051. echo ' try_files $uri /index.php?q=$uri&$args;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8052. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8053. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8054. echo ' # block these file types' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8055. echo ' location ~* \.(tpl|md|tgz|log|out)$ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8056. echo ' deny all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8057. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8058. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8059. echo ' # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8060. echo ' # or a unix socket' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8061. echo ' location ~* \.php$ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8062. echo ' # Zero-day exploit defense.' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8063. echo ' # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8064. echo " # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8065. echo " # server, which is entirely possible with php-fpm/php-fcgi." >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8066. echo " # Comment the 'try_files' line out if you set up php-fpm/php-fcgi on" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8067. echo " # another machine. And then cross your fingers that you won't get hacked." >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8068. echo ' try_files $uri $uri/ /index.php;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8069. echo ' # NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8070. echo ' fastcgi_split_path_info ^(.+\.php)(/.+)$;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8071. echo ' # With php5-cgi alone:' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8072. echo ' # fastcgi_pass 127.0.0.1:9000;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8073. echo ' # With php5-fpm:' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8074. echo ' fastcgi_pass unix:/var/run/php5-fpm.sock;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8075. echo ' include fastcgi_params;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8076. echo ' fastcgi_index index.php;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8077. echo ' fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8078. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8079. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8080. echo ' # deny access to all dot files' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8081. echo ' location ~ /\. {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8082. echo ' deny all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8083. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8084. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8085. echo ' #deny access to store' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8086. echo ' location ~ /store {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8087. echo ' deny all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8088. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8089. echo ' location ~ /(data|conf|bin|inc)/ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8090. echo ' deny all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8091. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8092. echo ' location ~ /\.ht {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8093. echo ' deny all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8094. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8095. echo '}' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  8096. configure_php
  8097. nginx_ensite $WIKI_DOMAIN_NAME
  8098. service php5-fpm restart
  8099. service nginx restart
  8100. # update the dynamic DNS
  8101. CURRENT_DDNS_DOMAIN=$WIKI_DOMAIN_NAME
  8102. add_ddns_domain
  8103. # add some post-install instructions
  8104. if ! grep -q "Wiki password" /home/$MY_USERNAME/README; then
  8105. echo '' >> /home/$MY_USERNAME/README
  8106. echo '' >> /home/$MY_USERNAME/README
  8107. echo 'Wiki' >> /home/$MY_USERNAME/README
  8108. echo '====' >> /home/$MY_USERNAME/README
  8109. echo "Wiki username: $MY_USERNAME" >> /home/$MY_USERNAME/README
  8110. echo "Wiki password: $WIKI_ADMIN_PASSWORD" >> /home/$MY_USERNAME/README
  8111. echo '' >> /home/$MY_USERNAME/README
  8112. echo 'Once you have set up the wiki then remove the install file:' >> /home/$MY_USERNAME/README
  8113. echo '' >> /home/$MY_USERNAME/README
  8114. echo " rm /var/www/$WIKI_DOMAIN_NAME/htdocs/install.php" >> /home/$MY_USERNAME/README
  8115. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  8116. chmod 600 /home/$MY_USERNAME/README
  8117. fi
  8118. echo 'install_wiki' >> $COMPLETION_FILE
  8119. }
  8120. function get_blog_admin_password {
  8121. if [ -f /home/$MY_USERNAME/README ]; then
  8122. if grep -q "Your blog password is" /home/$MY_USERNAME/README; then
  8123. FULLBLOG_ADMIN_PASSWORD=$(cat /home/$MY_USERNAME/README | grep "Your blog password is" | awk -F ':' '{print $2}' | sed 's/^ *//')
  8124. fi
  8125. fi
  8126. }
  8127. function install_blog {
  8128. if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  8129. return
  8130. fi
  8131. if grep -Fxq "install_blog" $COMPLETION_FILE; then
  8132. return
  8133. fi
  8134. if [ ! $FULLBLOG_DOMAIN_NAME ]; then
  8135. echo 'The blog domain name was not specified'
  8136. exit 5062
  8137. fi
  8138. if [ ! -d /var/www/$FULLBLOG_DOMAIN_NAME ]; then
  8139. mkdir /var/www/$FULLBLOG_DOMAIN_NAME
  8140. fi
  8141. cd /var/www/$FULLBLOG_DOMAIN_NAME
  8142. git clone https://github.com/danpros/htmly htdocs
  8143. # This is a workaround until a better solution
  8144. git checkout 4842796 -b tempbranch
  8145. chown -R www-data:www-data /var/www/$FULLBLOG_DOMAIN_NAME/htdocs
  8146. if [ ! -f /etc/ssl/certs/$FULLBLOG_DOMAIN_NAME.dhparam ]; then
  8147. freedombone-addcert -h $FULLBLOG_DOMAIN_NAME --dhkey $DH_KEYLENGTH
  8148. check_certificates $FULLBLOG_DOMAIN_NAME
  8149. fi
  8150. echo 'server {' > /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8151. echo ' listen 80;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8152. echo " root /var/www/$FULLBLOG_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8153. echo " server_name $FULLBLOG_DOMAIN_NAME;" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8154. echo ' access_log off;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8155. echo " error_log /var/log/nginx/$FULLBLOG_DOMAIN_NAME_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8156. echo ' index index.php;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8157. echo ' charset utf-8;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8158. echo ' client_max_body_size 20m;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8159. echo ' client_body_buffer_size 128k;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8160. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8161. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8162. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8163. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8164. echo ' # Always redirect the login page to https' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8165. echo ' location /login {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8166. echo ' rewrite ^ https://$server_name$request_uri?;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8167. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8168. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8169. echo ' # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8170. echo ' location / {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8171. echo ' rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8172. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8173. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8174. echo " # make sure webfinger and other well known services aren't blocked" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8175. echo ' # by denying dot files and rewrite request to the front controller' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8176. echo ' location ^~ /.well-known/ {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8177. echo ' allow all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8178. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8179. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8180. echo ' # statically serve these file types when possible' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8181. echo ' # otherwise fall back to front controller' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8182. echo ' # allow browser to cache them' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8183. echo ' # added .htm for advanced source code editor library' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8184. echo ' location ~* \.(jpg|jpeg|gif|png|ico|css|js|htm|html|ttf|woff|svg)$ {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8185. echo ' expires 30d;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8186. echo ' try_files $uri /index.php?q=$uri&$args;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8187. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8188. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8189. echo ' # block these file types' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8190. echo ' location ~* \.(tpl|md|tgz|log|out)$ {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8191. echo ' deny all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8192. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8193. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8194. echo ' # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8195. echo ' # or a unix socket' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8196. echo ' location ~* \.php$ {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8197. echo ' # Zero-day exploit defense.' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8198. echo ' # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8199. echo " # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8200. echo " # server, which is entirely possible with php-fpm/php-fcgi." >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8201. echo " # Comment the 'try_files' line out if you set up php-fpm/php-fcgi on" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8202. echo " # another machine. And then cross your fingers that you won't get hacked." >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8203. echo ' try_files $uri $uri/ /index.php;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8204. echo ' # NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8205. echo ' fastcgi_split_path_info ^(.+\.php)(/.+)$;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8206. echo ' # With php5-cgi alone:' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8207. echo ' # fastcgi_pass 127.0.0.1:9000;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8208. echo ' # With php5-fpm:' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8209. echo ' fastcgi_pass unix:/var/run/php5-fpm.sock;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8210. echo ' include fastcgi_params;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8211. echo ' fastcgi_index index.php;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8212. echo ' fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8213. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8214. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8215. echo ' # deny access to all dot files' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8216. echo ' location ~ /\. {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8217. echo ' deny all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8218. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8219. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8220. echo ' #deny access to store' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8221. echo ' location ~ /store {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8222. echo ' deny all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8223. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8224. echo ' location ~ /(data|conf|bin|inc)/ {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8225. echo ' deny all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8226. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8227. echo ' location ~ /\.ht {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8228. echo ' deny all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8229. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8230. echo '}' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8231. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8232. echo 'server {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8233. echo ' listen 443 ssl;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8234. echo " root /var/www/$FULLBLOG_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8235. echo " server_name $FULLBLOG_DOMAIN_NAME;" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8236. echo ' access_log off;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8237. echo " error_log /var/log/nginx/$FULLBLOG_DOMAIN_NAME_error_ssl.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8238. echo ' index index.php;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8239. echo ' charset utf-8;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8240. echo ' client_max_body_size 20m;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8241. echo ' client_body_buffer_size 128k;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8242. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8243. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8244. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8245. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8246. echo ' ssl on;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8247. echo " ssl_certificate /etc/ssl/certs/$FULLBLOG_DOMAIN_NAME.crt;" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8248. echo " ssl_certificate_key /etc/ssl/private/$FULLBLOG_DOMAIN_NAME.key;" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8249. echo " ssl_dhparam /etc/ssl/certs/$FULLBLOG_DOMAIN_NAME.dhparam;" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8250. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8251. echo ' ssl_session_timeout 5m;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8252. echo ' ssl_prefer_server_ciphers on;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8253. echo ' ssl_session_cache builtin:1000 shared:SSL:10m;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8254. echo " ssl_protocols $SSL_PROTOCOLS; # not possible to do exclusive" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8255. echo " ssl_ciphers '$SSL_CIPHERS';" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8256. echo ' add_header X-Frame-Options DENY;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8257. echo ' add_header X-Content-Type-Options nosniff;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8258. echo ' add_header Strict-Transport-Security "max-age=0;";' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8259. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8260. echo ' # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8261. echo ' location / {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8262. echo ' rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8263. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8264. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8265. echo " # make sure webfinger and other well known services aren't blocked" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8266. echo ' # by denying dot files and rewrite request to the front controller' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8267. echo ' location ^~ /.well-known/ {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8268. echo ' allow all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8269. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8270. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8271. echo ' # statically serve these file types when possible' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8272. echo ' # otherwise fall back to front controller' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8273. echo ' # allow browser to cache them' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8274. echo ' # added .htm for advanced source code editor library' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8275. echo ' location ~* \.(jpg|jpeg|gif|png|ico|css|js|htm|html|ttf|woff|svg)$ {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8276. echo ' expires 30d;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8277. echo ' try_files $uri /index.php?q=$uri&$args;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8278. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8279. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8280. echo ' # block these file types' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8281. echo ' location ~* \.(tpl|md|tgz|log|out)$ {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8282. echo ' deny all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8283. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8284. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8285. echo ' # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8286. echo ' # or a unix socket' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8287. echo ' location ~* \.php$ {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8288. echo ' # Zero-day exploit defense.' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8289. echo ' # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8290. echo " # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8291. echo " # server, which is entirely possible with php-fpm/php-fcgi." >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8292. echo " # Comment the 'try_files' line out if you set up php-fpm/php-fcgi on" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8293. echo " # another machine. And then cross your fingers that you won't get hacked." >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8294. echo ' try_files $uri $uri/ /index.php;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8295. echo ' # NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8296. echo ' fastcgi_split_path_info ^(.+\.php)(/.+)$;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8297. echo ' # With php5-cgi alone:' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8298. echo ' # fastcgi_pass 127.0.0.1:9000;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8299. echo ' # With php5-fpm:' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8300. echo ' fastcgi_pass unix:/var/run/php5-fpm.sock;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8301. echo ' include fastcgi_params;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8302. echo ' fastcgi_index index.php;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8303. echo ' fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8304. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8305. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8306. echo ' # deny access to all dot files' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8307. echo ' location ~ /\. {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8308. echo ' deny all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8309. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8310. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8311. echo ' #deny access to store' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8312. echo ' location ~ /store {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8313. echo ' deny all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8314. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8315. echo ' location ~ /(data|conf|bin|inc)/ {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8316. echo ' deny all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8317. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8318. echo ' location ~ /\.ht {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8319. echo ' deny all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8320. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8321. echo '}' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8322. configure_php
  8323. # blog settings
  8324. cp /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/config.ini.example /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/config.ini
  8325. sed -i "s|site.url.*|site.url = 'https://$FULLBLOG_DOMAIN_NAME'|g" /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/config.ini
  8326. sed -i "s|blog.title.*|blog.title = '$MY_BLOG_TITLE'|g" /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/config.ini
  8327. sed -i "s|blog.tagline.*|blog.tagline = '$MY_BLOG_SUBTITLE'|g" /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/config.ini
  8328. sed -i 's|timezone.*|timezone = "Europe/London"|g' /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/config.ini
  8329. sed -i "s|Your name|$MY_NAME|g" /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/config.ini
  8330. # create a user password
  8331. get_blog_admin_password
  8332. if [ ! $FULLBLOG_ADMIN_PASSWORD ]; then
  8333. FULLBLOG_ADMIN_PASSWORD="$(openssl rand -base64 16)"
  8334. echo '' >> /home/$MY_USERNAME/README
  8335. echo '' >> /home/$MY_USERNAME/README
  8336. echo 'HTMLy Blog' >> /home/$MY_USERNAME/README
  8337. echo '==========' >> /home/$MY_USERNAME/README
  8338. echo "Your blog username: $MY_USERNAME" >> /home/$MY_USERNAME/README
  8339. echo "Your blog password is: $FULLBLOG_ADMIN_PASSWORD" >> /home/$MY_USERNAME/README
  8340. echo "Log into your blog at https://$FULLBLOG_DOMAIN_NAME/login" >> /home/$MY_USERNAME/README
  8341. echo 'Edit your blog title and time zone at:' >> /home/$MY_USERNAME/README
  8342. echo " /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/config.ini" >> /home/$MY_USERNAME/README
  8343. echo '' >> /home/$MY_USERNAME/README
  8344. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  8345. chmod 600 /home/$MY_USERNAME/README
  8346. fi
  8347. # create a user
  8348. cp /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/users/username.ini.example /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/users/$MY_USERNAME.ini
  8349. HASHED_BLOG_PASSWORD="$(echo -n $FULLBLOG_ADMIN_PASSWORD | sha256sum | awk -F ' ' '{print $1}')"
  8350. sed -i "s|yourpassword|$HASHED_BLOG_PASSWORD|g" /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/users/$MY_USERNAME.ini
  8351. sed -i 's/encryption = clear/encryption = "sha256"/g' /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/users/$MY_USERNAME.ini
  8352. nginx_ensite $FULLBLOG_DOMAIN_NAME
  8353. service php5-fpm restart
  8354. service nginx restart
  8355. # update the dynamic DNS
  8356. CURRENT_DDNS_DOMAIN=$FULLBLOG_DOMAIN_NAME
  8357. add_ddns_domain
  8358. echo 'install_blog' >> $COMPLETION_FILE
  8359. }
  8360. function install_gnu_social {
  8361. if grep -Fxq "install_gnu_social" $COMPLETION_FILE; then
  8362. return
  8363. fi
  8364. if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  8365. return
  8366. fi
  8367. if [ ! $MICROBLOG_DOMAIN_NAME ]; then
  8368. echo 'No domain name was given for the microblog'
  8369. exit 7359
  8370. fi
  8371. install_mariadb
  8372. get_mariadb_password
  8373. repair_databases_script
  8374. apt-get -y install php-gettext php5-curl php5-gd php5-mysql git curl php-xml-parser
  8375. if [ ! -d /var/www/$MICROBLOG_DOMAIN_NAME ]; then
  8376. mkdir /var/www/$MICROBLOG_DOMAIN_NAME
  8377. fi
  8378. if [ ! -d /var/www/$MICROBLOG_DOMAIN_NAME/htdocs ]; then
  8379. mkdir /var/www/$MICROBLOG_DOMAIN_NAME/htdocs
  8380. fi
  8381. cd $INSTALL_DIR
  8382. git clone $MICROBLOG_REPO gnusocial
  8383. rm -rf /var/www/$MICROBLOG_DOMAIN_NAME/htdocs
  8384. mv gnusocial /var/www/$MICROBLOG_DOMAIN_NAME/htdocs
  8385. chmod a+w /var/www/$MICROBLOG_DOMAIN_NAME/htdocs
  8386. chown www-data:www-data /var/www/$MICROBLOG_DOMAIN_NAME/htdocs
  8387. chmod a+w /var/www/$MICROBLOG_DOMAIN_NAME/htdocs/avatar
  8388. chmod a+w /var/www/$MICROBLOG_DOMAIN_NAME/htdocs/background
  8389. chmod a+w /var/www/$MICROBLOG_DOMAIN_NAME/htdocs/file
  8390. chmod +x /var/www/$MICROBLOG_DOMAIN_NAME/htdocs/scripts/maildaemon.php
  8391. get_mariadb_gnusocial_admin_password
  8392. if [ ! $MICROBLOG_ADMIN_PASSWORD ]; then
  8393. MICROBLOG_ADMIN_PASSWORD="$(openssl rand -base64 32)"
  8394. echo '' >> /home/$MY_USERNAME/README
  8395. echo '' >> /home/$MY_USERNAME/README
  8396. echo 'GNU Social' >> /home/$MY_USERNAME/README
  8397. echo '==========' >> /home/$MY_USERNAME/README
  8398. echo "Your MariaDB gnusocial admin password is: $MICROBLOG_ADMIN_PASSWORD" >> /home/$MY_USERNAME/README
  8399. echo '' >> /home/$MY_USERNAME/README
  8400. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  8401. chmod 600 /home/$MY_USERNAME/README
  8402. fi
  8403. echo "create database gnusocial;
  8404. CREATE USER 'gnusocialadmin'@'localhost' IDENTIFIED BY '$MICROBLOG_ADMIN_PASSWORD';
  8405. GRANT ALL PRIVILEGES ON gnusocial.* TO 'gnusocialadmin'@'localhost';
  8406. quit" > $INSTALL_DIR/batch.sql
  8407. chmod 600 $INSTALL_DIR/batch.sql
  8408. mysql -u root --password="$MARIADB_PASSWORD" < $INSTALL_DIR/batch.sql
  8409. shred -zu $INSTALL_DIR/batch.sql
  8410. if [ ! -f "/etc/aliases" ]; then
  8411. touch /etc/aliases
  8412. fi
  8413. if grep -q "www-data: root" /etc/aliases; then
  8414. echo 'www-data: root' >> /etc/aliases
  8415. fi
  8416. if grep -q "/var/www/$MICROBLOG_DOMAIN_NAME/htdocs/scripts/maildaemon.php" /etc/aliases; then
  8417. echo "*: /var/www/$MICROBLOG_DOMAIN_NAME/htdocs/scripts/maildaemon.php" >> /etc/aliases
  8418. fi
  8419. newaliases
  8420. # update the dynamic DNS
  8421. CURRENT_DDNS_DOMAIN=$MICROBLOG_DOMAIN_NAME
  8422. add_ddns_domain
  8423. echo 'server {' > /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8424. echo ' listen 80;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8425. echo " server_name $MICROBLOG_DOMAIN_NAME;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8426. echo " root /var/www/$MICROBLOG_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8427. echo ' access_log off;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8428. echo " error_log /var/log/nginx/$MICROBLOG_DOMAIN_NAME_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8429. echo ' index index.php;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8430. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8431. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8432. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  8433. echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8434. echo ' rewrite ^ https://$server_name$request_uri? permanent;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8435. echo '}' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8436. echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8437. echo 'server {' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8438. echo ' listen 443 ssl;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8439. echo " server_name $MICROBLOG_DOMAIN_NAME;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8440. echo " root /var/www/$MICROBLOG_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8441. echo ' index index.php index.html index.htm;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8442. echo ' access_log off;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8443. echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8444. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8445. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8446. echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8447. echo ' location ~* \.php$ {' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8448. echo ' # Zero-day exploit defense.' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8449. echo ' # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8450. echo ' try_files $uri $uri/ /index.php;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8451. echo ' fastcgi_split_path_info ^(.+\.php)(/.+)$;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8452. echo ' fastcgi_pass unix:/var/run/php5-fpm.sock;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8453. echo ' include fastcgi_params;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8454. echo ' fastcgi_index index.php;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8455. echo ' fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8456. echo ' fastcgi_read_timeout 300;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8457. echo ' }' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8458. echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8459. echo ' ssl on;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8460. echo " ssl_certificate /etc/ssl/certs/$MICROBLOG_DOMAIN_NAME.crt;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8461. echo " ssl_certificate_key /etc/ssl/private/$MICROBLOG_DOMAIN_NAME.key;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8462. echo " ssl_dhparam /etc/ssl/certs/$MICROBLOG_DOMAIN_NAME.dhparam;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8463. echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8464. echo ' ssl_session_timeout 5m;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8465. echo ' ssl_prefer_server_ciphers on;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8466. echo ' ssl_session_cache builtin:1000 shared:SSL:10m;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8467. echo " ssl_protocols $SSL_PROTOCOLS; # not possible to do exclusive" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8468. echo " ssl_ciphers '$SSL_CIPHERS';" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8469. echo ' add_header X-Frame-Options DENY;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8470. echo ' add_header X-Content-Type-Options nosniff;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8471. echo ' add_header Strict-Transport-Security max-age=15768000;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8472. echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8473. echo ' location / {' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8474. echo ' rewrite ^(.*)$ /index.php?p=$1 last;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8475. echo ' break;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8476. echo ' }' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8477. echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8478. echo ' location ~* ^/(.*)\.(ico|css|js|gif|png|jpg|bmp|JPG|jpeg)$ {' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8479. echo " root /var/www/$MICROBLOG_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8480. echo ' rewrite ^/(.*)$ /$1 break;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8481. echo ' access_log off;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8482. echo ' expires max;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8483. echo ' }' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8484. echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8485. echo ' client_max_body_size 15m;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8486. echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8487. echo " error_log /var/log/nginx/$MICROBLOG_DOMAIN_NAME_error_ssl.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8488. echo '}' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  8489. configure_php
  8490. if [ ! -f /etc/ssl/certs/$MICROBLOG_DOMAIN_NAME.dhparam ]; then
  8491. freedombone-addcert -h $MICROBLOG_DOMAIN_NAME --dhkey $DH_KEYLENGTH
  8492. check_certificates $MICROBLOG_DOMAIN_NAME
  8493. fi
  8494. # Ensure that the database gets backed up locally, if remote
  8495. # backups are not being used
  8496. backup_databases_script_header
  8497. echo '' >> /usr/bin/backupdatabases
  8498. echo '# Backup the GNU Social database' >> /usr/bin/backupdatabases
  8499. echo 'TEMPFILE=/root/gnusocial.sql' >> /usr/bin/backupdatabases
  8500. echo 'DAILYFILE=/var/backups/gnusocial_daily.sql' >> /usr/bin/backupdatabases
  8501. echo 'mysqldump --password="$MYSQL_PASSWORD" gnusocial > $TEMPFILE' >> /usr/bin/backupdatabases
  8502. echo 'FILESIZE=$(stat -c%s $TEMPFILE)' >> /usr/bin/backupdatabases
  8503. echo 'if [ "$FILESIZE" -eq "0" ]; then' >> /usr/bin/backupdatabases
  8504. echo ' if [ -f $DAILYFILE ]; then' >> /usr/bin/backupdatabases
  8505. echo ' cp $DAILYFILE $TEMPFILE' >> /usr/bin/backupdatabases
  8506. echo '' >> /usr/bin/backupdatabases
  8507. echo ' # try to restore yesterdays database' >> /usr/bin/backupdatabases
  8508. echo ' mysql -u root --password="$MYSQL_PASSWORD" gnusocial -o < $DAILYFILE' >> /usr/bin/backupdatabases
  8509. echo '' >> /usr/bin/backupdatabases
  8510. echo ' # Send a warning email' >> /usr/bin/backupdatabases
  8511. echo ' echo "Unable to create a backup of the GNU Social database. Attempted to restore from yesterdays backup" | mail -s "GNU Social backup" $EMAIL' >> /usr/bin/backupdatabases
  8512. echo ' else' >> /usr/bin/backupdatabases
  8513. echo ' # Send a warning email' >> /usr/bin/backupdatabases
  8514. echo ' echo "Unable to create a backup of the GNU Social database." | mail -s "GNU Social backup" $EMAIL' >> /usr/bin/backupdatabases
  8515. echo ' fi' >> /usr/bin/backupdatabases
  8516. echo 'else' >> /usr/bin/backupdatabases
  8517. echo ' chmod 600 $TEMPFILE' >> /usr/bin/backupdatabases
  8518. echo ' mv $TEMPFILE $DAILYFILE' >> /usr/bin/backupdatabases
  8519. echo '' >> /usr/bin/backupdatabases
  8520. echo ' # Make the backup readable only by root' >> /usr/bin/backupdatabases
  8521. echo ' chmod 600 $DAILYFILE' >> /usr/bin/backupdatabases
  8522. echo 'fi' >> /usr/bin/backupdatabases
  8523. echo '' >> /etc/cron.weekly/backupdatabasesweekly
  8524. echo '# GNU Social' >> /etc/cron.weekly/backupdatabasesweekly
  8525. echo 'if [ -f /var/backups/gnusocial_weekly.sql ]; then' >> /etc/cron.weekly/backupdatabasesweekly
  8526. echo ' cp -f /var/backups/gnusocial_weekly.sql /var/backups/gnusocial_2weekly.sql' >> /etc/cron.weekly/backupdatabasesweekly
  8527. echo 'fi' >> /etc/cron.weekly/backupdatabasesweekly
  8528. echo 'if [ -f /var/backups/gnusocial_daily.sql ]; then' >> /etc/cron.weekly/backupdatabasesweekly
  8529. echo ' cp -f /var/backups/gnusocial_daily.sql /var/backups/gnusocial_weekly.sql' >> /etc/cron.weekly/backupdatabasesweekly
  8530. echo 'fi' >> /etc/cron.weekly/backupdatabasesweekly
  8531. echo '' >> /etc/cron.monthly/backupdatabasesmonthly
  8532. echo '# GNU Social' >> /etc/cron.monthly/backupdatabasesmonthly
  8533. echo 'if [ -f /var/backups/gnusocial_monthly.sql ]; then' >> /etc/cron.monthly/backupdatabasesmonthly
  8534. echo ' cp -f /var/backups/gnusocial_monthly.sql /var/backups/gnusocial_2monthly.sql' >> /etc/cron.monthly/backupdatabasesmonthly
  8535. echo 'fi' >> /etc/cron.monthly/backupdatabasesmonthly
  8536. echo 'if [ -f /var/backups/gnusocial_weekly.sql ]; then' >> /etc/cron.monthly/backupdatabasesmonthly
  8537. echo ' cp -f /var/backups/gnusocial_weekly.sql /var/backups/gnusocial_monthly.sql' >> /etc/cron.monthly/backupdatabasesmonthly
  8538. echo 'fi' >> /etc/cron.monthly/backupdatabasesmonthly
  8539. echo '/usr/bin/repairdatabase gnusocial' >> /etc/cron.hourly/repair
  8540. nginx_ensite $MICROBLOG_DOMAIN_NAME
  8541. service php5-fpm restart
  8542. service nginx restart
  8543. # some post-install instructions for the user
  8544. if ! grep -q "To set up your microblog" /home/$MY_USERNAME/README; then
  8545. echo '' >> /home/$MY_USERNAME/README
  8546. echo '' >> /home/$MY_USERNAME/README
  8547. echo 'Microblog' >> /home/$MY_USERNAME/README
  8548. echo '=========' >> /home/$MY_USERNAME/README
  8549. echo "To set up your microblog go to" >> /home/$MY_USERNAME/README
  8550. echo "https://$MICROBLOG_DOMAIN_NAME/install.php" >> /home/$MY_USERNAME/README
  8551. echo 'and enter the following settings:' >> /home/$MY_USERNAME/README
  8552. echo ' - Set a name for the site' >> /home/$MY_USERNAME/README
  8553. echo ' - Server SSL: enable' >> /home/$MY_USERNAME/README
  8554. echo ' - Hostname: localhost' >> /home/$MY_USERNAME/README
  8555. echo ' - Type: MySql/MariaDB' >> /home/$MY_USERNAME/README
  8556. echo ' - Name: gnusocial' >> /home/$MY_USERNAME/README
  8557. echo ' - DB username: root' >> /home/$MY_USERNAME/README
  8558. echo " - DB Password; $MARIADB_PASSWORD" >> /home/$MY_USERNAME/README
  8559. echo " - Administrator nickname: $MY_USERNAME" >> /home/$MY_USERNAME/README
  8560. echo " - Administrator password: $MICROBLOG_ADMIN_PASSWORD" >> /home/$MY_USERNAME/README
  8561. echo ' - Subscribe to announcements: ticked' >> /home/$MY_USERNAME/README
  8562. echo ' - Site profile: Community' >> /home/$MY_USERNAME/README
  8563. echo '' >> /home/$MY_USERNAME/README
  8564. echo 'When the install is complete you will see a lot of warnings' >> /home/$MY_USERNAME/README
  8565. echo 'but just ignore those and navigate to ' >> /home/$MY_USERNAME/README
  8566. echo "https://$MICROBLOG_DOMAIN_NAME and you can then " >> /home/$MY_USERNAME/README
  8567. echo 'complete the configuration via the *Admin* section on the header' >> /home/$MY_USERNAME/README
  8568. echo 'bar. Some recommended admin settings are:' >> /home/$MY_USERNAME/README
  8569. echo '' >> /home/$MY_USERNAME/README
  8570. echo 'Under the *Site* settings:' >> /home/$MY_USERNAME/README
  8571. echo ' Text limit: 140' >> /home/$MY_USERNAME/README
  8572. echo ' Dupe Limit: 60000' >> /home/$MY_USERNAME/README
  8573. echo '' >> /home/$MY_USERNAME/README
  8574. echo 'Under the *User* settings:' >> /home/$MY_USERNAME/README
  8575. echo ' Bio limit: 1000' >> /home/$MY_USERNAME/README
  8576. echo '' >> /home/$MY_USERNAME/README
  8577. echo 'Under the *Access* settings:' >> /home/$MY_USERNAME/README
  8578. echo ' /Invite only/ ticked' >> /home/$MY_USERNAME/README
  8579. echo '' >> /home/$MY_USERNAME/README
  8580. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  8581. chmod 600 /home/$MY_USERNAME/README
  8582. fi
  8583. echo 'install_gnu_social' >> $COMPLETION_FILE
  8584. }
  8585. function install_redmatrix {
  8586. if grep -Fxq "install_redmatrix" $COMPLETION_FILE; then
  8587. return
  8588. fi
  8589. if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  8590. return
  8591. fi
  8592. if [ ! $REDMATRIX_DOMAIN_NAME ]; then
  8593. return
  8594. fi
  8595. install_mariadb
  8596. get_mariadb_password
  8597. repair_databases_script
  8598. apt-get -y install php5-common php5-cli php5-curl php5-gd php5-mysql php5-mcrypt git
  8599. if [ ! -d /var/www/$REDMATRIX_DOMAIN_NAME ]; then
  8600. mkdir /var/www/$REDMATRIX_DOMAIN_NAME
  8601. fi
  8602. if [ ! -d /var/www/$REDMATRIX_DOMAIN_NAME/htdocs ]; then
  8603. mkdir /var/www/$REDMATRIX_DOMAIN_NAME/htdocs
  8604. fi
  8605. if [ ! -f /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/index.php ]; then
  8606. cd $INSTALL_DIR
  8607. git clone $REDMATRIX_REPO redmatrix
  8608. rm -rf /var/www/$REDMATRIX_DOMAIN_NAME/htdocs
  8609. mv redmatrix /var/www/$REDMATRIX_DOMAIN_NAME/htdocs
  8610. chown -R www-data:www-data /var/www/$REDMATRIX_DOMAIN_NAME/htdocs
  8611. git clone $REDMATRIX_ADDONS_REPO /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/addon
  8612. # some extra themes
  8613. git clone https://github.com/DeadSuperHero/redmatrix-themes /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/redmatrix-themes1
  8614. cp -r /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/redmatrix-themes1/* view/theme/
  8615. fi
  8616. get_mariadb_redmatrix_admin_password
  8617. if [ ! $REDMATRIX_ADMIN_PASSWORD ]; then
  8618. REDMATRIX_ADMIN_PASSWORD="$(openssl rand -base64 32)"
  8619. echo '' >> /home/$MY_USERNAME/README
  8620. echo '' >> /home/$MY_USERNAME/README
  8621. echo 'Red Matrix' >> /home/$MY_USERNAME/README
  8622. echo '==========' >> /home/$MY_USERNAME/README
  8623. echo "Your MariaDB Red Matrix admin password is: $REDMATRIX_ADMIN_PASSWORD" >> /home/$MY_USERNAME/README
  8624. echo '' >> /home/$MY_USERNAME/README
  8625. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  8626. chmod 600 /home/$MY_USERNAME/README
  8627. fi
  8628. echo "create database redmatrix;
  8629. CREATE USER 'redmatrixadmin'@'localhost' IDENTIFIED BY '$REDMATRIX_ADMIN_PASSWORD';
  8630. GRANT ALL PRIVILEGES ON redmatrix.* TO 'redmatrixadmin'@'localhost';
  8631. quit" > $INSTALL_DIR/batch.sql
  8632. chmod 600 $INSTALL_DIR/batch.sql
  8633. mysql -u root --password="$MARIADB_PASSWORD" < $INSTALL_DIR/batch.sql
  8634. shred -zu $INSTALL_DIR/batch.sql
  8635. if ! grep -q "/var/www/$REDMATRIX_DOMAIN_NAME/htdocs" /etc/crontab; then
  8636. echo "12,22,32,42,52 * * * * root cd /var/www/$REDMATRIX_DOMAIN_NAME/htdocs; /usr/bin/timeout 240 /usr/bin/php include/poller.php" >> /etc/crontab
  8637. fi
  8638. # update the dynamic DNS
  8639. CURRENT_DDNS_DOMAIN=$REDMATRIX_DOMAIN_NAME
  8640. add_ddns_domain
  8641. echo 'server {' > /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8642. echo ' listen 80;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8643. echo " server_name $REDMATRIX_DOMAIN_NAME;" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8644. echo " root /var/www/$REDMATRIX_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8645. echo ' access_log off;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8646. echo " error_log /var/log/nginx/$REDMATRIX_DOMAIN_NAME_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8647. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8648. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8649. echo ' index index.php;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8650. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8651. echo ' rewrite ^ https://$server_name$request_uri? permanent;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8652. echo '}' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8653. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8654. echo 'server {' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8655. echo ' listen 443 ssl;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8656. echo " root /var/www/$REDMATRIX_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8657. echo " server_name $REDMATRIX_DOMAIN_NAME;" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8658. echo " error_log /var/log/nginx/$REDMATRIX_DOMAIN_NAME_error_ssl.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8659. echo ' index index.php;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8660. echo ' charset utf-8;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8661. echo ' client_max_body_size 20m;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8662. echo ' client_body_buffer_size 128k;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8663. echo ' access_log off;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8664. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8665. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8666. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8667. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8668. echo ' ssl on;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8669. echo " ssl_certificate /etc/ssl/certs/$REDMATRIX_DOMAIN_NAME.crt;" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8670. echo " ssl_certificate_key /etc/ssl/private/$REDMATRIX_DOMAIN_NAME.key;" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8671. echo " ssl_dhparam /etc/ssl/certs/$REDMATRIX_DOMAIN_NAME.dhparam;" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8672. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8673. echo ' ssl_session_timeout 5m;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8674. echo ' ssl_prefer_server_ciphers on;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8675. echo ' ssl_session_cache builtin:1000 shared:SSL:10m;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8676. echo " ssl_protocols $SSL_PROTOCOLS; # not possible to do exclusive" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8677. echo " ssl_ciphers '$SSL_CIPHERS';" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8678. echo ' add_header X-Frame-Options DENY;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8679. echo ' add_header X-Content-Type-Options nosniff;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8680. echo ' add_header Strict-Transport-Security max-age=15768000;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8681. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8682. echo ' # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8683. echo ' location / {' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8684. echo ' rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8685. echo ' }' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8686. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8687. echo " # make sure webfinger and other well known services aren't blocked" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8688. echo ' # by denying dot files and rewrite request to the front controller' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8689. echo ' location ^~ /.well-known/ {' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8690. echo ' allow all;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8691. echo ' }' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8692. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8693. echo ' # statically serve these file types when possible' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8694. echo ' # otherwise fall back to front controller' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8695. echo ' # allow browser to cache them' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8696. echo ' # added .htm for advanced source code editor library' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8697. echo ' location ~* \.(jpg|jpeg|gif|png|ico|css|js|htm|html|ttf|woff|svg)$ {' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8698. echo ' expires 30d;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8699. echo ' try_files $uri /index.php?q=$uri&$args;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8700. echo ' }' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8701. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8702. echo ' # block these file types' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8703. echo ' location ~* \.(tpl|md|tgz|log|out)$ {' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8704. echo ' deny all;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8705. echo ' }' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8706. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8707. echo ' # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8708. echo ' # or a unix socket' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8709. echo ' location ~* \.php$ {' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8710. echo ' # Zero-day exploit defense.' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8711. echo ' # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8712. echo " # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8713. echo " # server, which is entirely possible with php-fpm/php-fcgi." >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8714. echo " # Comment the 'try_files' line out if you set up php-fpm/php-fcgi on" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8715. echo " # another machine. And then cross your fingers that you won't get hacked." >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8716. echo ' try_files $uri $uri/ /index.php;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8717. echo ' # NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8718. echo ' fastcgi_split_path_info ^(.+\.php)(/.+)$;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8719. echo ' # With php5-cgi alone:' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8720. echo ' # fastcgi_pass 127.0.0.1:9000;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8721. echo ' # With php5-fpm:' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8722. echo ' fastcgi_pass unix:/var/run/php5-fpm.sock;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8723. echo ' include fastcgi_params;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8724. echo ' fastcgi_index index.php;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8725. echo ' fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8726. echo ' fastcgi_read_timeout 300;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8727. echo ' }' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8728. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8729. echo ' # deny access to all dot files' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8730. echo ' location ~ /\. {' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8731. echo ' deny all;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8732. echo ' }' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8733. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8734. echo ' location ~ /\.ht {' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8735. echo ' deny all;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8736. echo ' }' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8737. echo '}' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  8738. configure_php
  8739. if [ ! -f /etc/ssl/certs/$REDMATRIX_DOMAIN_NAME.dhparam ]; then
  8740. freedombone-addcert -h $REDMATRIX_DOMAIN_NAME --dhkey $DH_KEYLENGTH
  8741. check_certificates $REDMATRIX_DOMAIN_NAME
  8742. fi
  8743. if [ ! -d /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/view/tpl/smarty3 ]; then
  8744. mkdir /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/view/tpl/smarty3
  8745. fi
  8746. if [ ! -d "/var/www/$REDMATRIX_DOMAIN_NAME/htdocs/store" ]; then
  8747. mkdir "/var/www/$REDMATRIX_DOMAIN_NAME/htdocs/store"
  8748. fi
  8749. if [ ! -d "/var/www/$REDMATRIX_DOMAIN_NAME/htdocs/store/[data]" ]; then
  8750. mkdir "/var/www/$REDMATRIX_DOMAIN_NAME/htdocs/store/[data]"
  8751. fi
  8752. if [ ! -d "/var/www/$REDMATRIX_DOMAIN_NAME/htdocs/store/[data]/smarty3" ]; then
  8753. mkdir "/var/www/$REDMATRIX_DOMAIN_NAME/htdocs/store/[data]/smarty3"
  8754. chmod 777 "/var/www/$REDMATRIX_DOMAIN_NAME/htdocs/store/[data]/smarty3"
  8755. fi
  8756. chmod 777 /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/view/tpl
  8757. chown -R www-data:www-data "/var/www/$REDMATRIX_DOMAIN_NAME/htdocs/store"
  8758. chmod 777 /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/view/tpl/smarty3
  8759. # Ensure that the database gets backed up locally, if remote
  8760. # backups are not being used
  8761. backup_databases_script_header
  8762. echo '' >> /usr/bin/backupdatabases
  8763. echo '# Backup the Red Matrix database' >> /usr/bin/backupdatabases
  8764. echo 'TEMPFILE=/root/redmatrix.sql' >> /usr/bin/backupdatabases
  8765. echo 'DAILYFILE=/var/backups/redmatrix_daily.sql' >> /usr/bin/backupdatabases
  8766. echo 'mysqldump --password="$MYSQL_PASSWORD" redmatrix > $TEMPFILE' >> /usr/bin/backupdatabases
  8767. echo 'FILESIZE=$(stat -c%s $TEMPFILE)' >> /usr/bin/backupdatabases
  8768. echo 'if [ "$FILESIZE" -eq "0" ]; then' >> /usr/bin/backupdatabases
  8769. echo ' if [ -f $DAILYFILE ]; then' >> /usr/bin/backupdatabases
  8770. echo ' cp $DAILYFILE $TEMPFILE' >> /usr/bin/backupdatabases
  8771. echo '' >> /usr/bin/backupdatabases
  8772. echo ' # try to restore yesterdays database' >> /usr/bin/backupdatabases
  8773. echo ' mysql -u root --password="$MYSQL_PASSWORD" redmatrix -o < $DAILYFILE' >> /usr/bin/backupdatabases
  8774. echo '' >> /usr/bin/backupdatabases
  8775. echo ' # Send a warning email' >> /usr/bin/backupdatabases
  8776. echo ' echo "Unable to create a backup of the Red Matrix database. Attempted to restore from yesterdays backup" | mail -s "Red Matrix backup" $EMAIL' >> /usr/bin/backupdatabases
  8777. echo ' else' >> /usr/bin/backupdatabases
  8778. echo ' # Send a warning email' >> /usr/bin/backupdatabases
  8779. echo ' echo "Unable to create a backup of the Red Matrix database." | mail -s "Red Matrix backup" $EMAIL' >> /usr/bin/backupdatabases
  8780. echo ' fi' >> /usr/bin/backupdatabases
  8781. echo 'else' >> /usr/bin/backupdatabases
  8782. echo ' chmod 600 $TEMPFILE' >> /usr/bin/backupdatabases
  8783. echo ' mv $TEMPFILE $DAILYFILE' >> /usr/bin/backupdatabases
  8784. echo '' >> /usr/bin/backupdatabases
  8785. echo ' # Make the backup readable only by root' >> /usr/bin/backupdatabases
  8786. echo ' chmod 600 $DAILYFILE' >> /usr/bin/backupdatabases
  8787. echo 'fi' >> /usr/bin/backupdatabases
  8788. echo '' >> /etc/cron.weekly/backupdatabasesweekly
  8789. echo '# Red Matrix' >> /etc/cron.weekly/backupdatabasesweekly
  8790. echo 'if [ -f /var/backups/redmatrix_weekly.sql ]; then' >> /etc/cron.weekly/backupdatabasesweekly
  8791. echo ' cp -f /var/backups/redmatrix_weekly.sql /var/backups/redmatrix_2weekly.sql' >> /etc/cron.weekly/backupdatabasesweekly
  8792. echo 'fi' >> /etc/cron.weekly/backupdatabasesweekly
  8793. echo 'if [ -f /var/backups/redmatrix_daily.sql ]; then' >> /etc/cron.weekly/backupdatabasesweekly
  8794. echo ' cp -f /var/backups/redmatrix_daily.sql /var/backups/redmatrix_weekly.sql' >> /etc/cron.weekly/backupdatabasesweekly
  8795. echo 'fi' >> /etc/cron.weekly/backupdatabasesweekly
  8796. echo '' >> /etc/cron.monthly/backupdatabasesmonthly
  8797. echo '# Red Matrix' >> /etc/cron.monthly/backupdatabasesmonthly
  8798. echo 'if [ -f /var/backups/redmatrix_monthly.sql ]; then' >> /etc/cron.monthly/backupdatabasesmonthly
  8799. echo ' cp -f /var/backups/redmatrix_monthly.sql /var/backups/redmatrix_2monthly.sql' >> /etc/cron.monthly/backupdatabasesmonthly
  8800. echo 'fi' >> /etc/cron.monthly/backupdatabasesmonthly
  8801. echo 'if [ -f /var/backups/redmatrix_weekly.sql ]; then' >> /etc/cron.monthly/backupdatabasesmonthly
  8802. echo ' cp -f /var/backups/redmatrix_weekly.sql /var/backups/redmatrix_monthly.sql' >> /etc/cron.monthly/backupdatabasesmonthly
  8803. echo 'fi' >> /etc/cron.monthly/backupdatabasesmonthly
  8804. echo '/usr/bin/repairdatabase redmatrix' >> /etc/cron.hourly/repair
  8805. nginx_ensite $REDMATRIX_DOMAIN_NAME
  8806. service php5-fpm restart
  8807. service nginx restart
  8808. service cron restart
  8809. # some post-install instructions for the user
  8810. if ! grep -q "To set up your Red Matrix" /home/$MY_USERNAME/README; then
  8811. echo '' >> /home/$MY_USERNAME/README
  8812. echo "To set up your Red Matrix site go to" >> /home/$MY_USERNAME/README
  8813. echo "https://$REDMATRIX_DOMAIN_NAME" >> /home/$MY_USERNAME/README
  8814. echo 'You will need to have a non self-signed SSL certificate in order' >> /home/$MY_USERNAME/README
  8815. echo "to use Red Matrix. Put the public certificate in /etc/ssl/certs/$REDMATRIX_DOMAIN_NAME.crt" >> /home/$MY_USERNAME/README
  8816. echo "and the private certificate in /etc/ssl/private/$REDMATRIX_DOMAIN_NAME.key." >> /home/$MY_USERNAME/README
  8817. echo 'If there is an intermediate certificate needed (such as with StartSSL) then' >> /home/$MY_USERNAME/README
  8818. echo 'this will need to be concatenated onto the end of the crt file, like this:' >> /home/$MY_USERNAME/README
  8819. echo '' >> /home/$MY_USERNAME/README
  8820. echo " cat /etc/ssl/certs/$REDMATRIX_DOMAIN_NAME.crt /etc/ssl/chains/startssl-sub.class1.server.ca.pem > /etc/ssl/certs/$REDMATRIX_DOMAIN_NAME.bundle.crt" >> /home/$MY_USERNAME/README
  8821. echo '' >> /home/$MY_USERNAME/README
  8822. echo "Then change ssl_certificate to /etc/ssl/certs/$REDMATRIX_DOMAIN_NAME.bundle.crt" >> /home/$MY_USERNAME/README
  8823. echo "within /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME" >> /home/$MY_USERNAME/README
  8824. echo '' >> /home/$MY_USERNAME/README
  8825. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  8826. chmod 600 /home/$MY_USERNAME/README
  8827. fi
  8828. echo 'install_redmatrix' >> $COMPLETION_FILE
  8829. }
  8830. function script_for_attaching_usb_drive {
  8831. if grep -Fxq "script_for_attaching_usb_drive" $COMPLETION_FILE; then
  8832. return
  8833. fi
  8834. echo '#!/bin/bash' > /usr/bin/attach-music
  8835. echo 'remove-music' >> /usr/bin/attach-music
  8836. echo "if [ ! -d $USB_MOUNT ]; then" >> /usr/bin/attach-music
  8837. echo " mkdir $USB_MOUNT" >> /usr/bin/attach-music
  8838. echo 'fi' >> /usr/bin/attach-music
  8839. echo "mount /dev/sda1 $USB_MOUNT" >> /usr/bin/attach-music
  8840. echo "chown root:root $USB_MOUNT" >> /usr/bin/attach-music
  8841. echo "chown -R minidlna:minidlna $USB_MOUNT/*" >> /usr/bin/attach-music
  8842. echo 'service minidlna restart' >> /usr/bin/attach-music
  8843. echo 'minidlnad -R' >> /usr/bin/attach-music
  8844. chmod +x /usr/bin/attach-music
  8845. ln -s /usr/bin/attach-music /usr/bin/attach-usb
  8846. ln -s /usr/bin/attach-music /usr/bin/attach-videos
  8847. ln -s /usr/bin/attach-music /usr/bin/attach-pictures
  8848. ln -s /usr/bin/attach-music /usr/bin/attach-media
  8849. echo '#!/bin/bash' > /usr/bin/remove-music
  8850. echo "if [ -d $USB_MOUNT ]; then" >> /usr/bin/remove-music
  8851. echo " umount $USB_MOUNT" >> /usr/bin/remove-music
  8852. echo " rm -rf $USB_MOUNT" >> /usr/bin/remove-music
  8853. echo 'fi' >> /usr/bin/remove-music
  8854. chmod +x /usr/bin/remove-music
  8855. ln -s /usr/bin/remove-music /usr/bin/detach-music
  8856. ln -s /usr/bin/remove-music /usr/bin/detach-usb
  8857. ln -s /usr/bin/remove-music /usr/bin/remove-usb
  8858. ln -s /usr/bin/remove-music /usr/bin/detach-media
  8859. ln -s /usr/bin/remove-music /usr/bin/remove-media
  8860. ln -s /usr/bin/remove-music /usr/bin/detach-videos
  8861. ln -s /usr/bin/remove-music /usr/bin/remove-videos
  8862. ln -s /usr/bin/remove-music /usr/bin/detach-pictures
  8863. ln -s /usr/bin/remove-music /usr/bin/remove-pictures
  8864. echo 'script_for_attaching_usb_drive' >> $COMPLETION_FILE
  8865. }
  8866. function install_dlna_server {
  8867. if grep -Fxq "install_dlna_server" $COMPLETION_FILE; then
  8868. return
  8869. fi
  8870. if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  8871. return
  8872. fi
  8873. apt-get -y install minidlna
  8874. if [ ! -f /etc/minidlna.conf ]; then
  8875. echo "ERROR: minidlna does not appear to have installed. $CHECK_MESSAGE"
  8876. exit 55
  8877. fi
  8878. sed -i "s|media_dir=/var/lib/minidlna|media_dir=A,/home/$MY_USERNAME/Music|g" /etc/minidlna.conf
  8879. if ! grep -q "/home/$MY_USERNAME/Pictures" /etc/minidlna.conf; then
  8880. echo "media_dir=P,/home/$MY_USERNAME/Pictures" >> /etc/minidlna.conf
  8881. fi
  8882. if ! grep -q "/home/$MY_USERNAME/Videos" /etc/minidlna.conf; then
  8883. echo "media_dir=V,/home/$MY_USERNAME/Videos" >> /etc/minidlna.conf
  8884. fi
  8885. if ! grep -q "$USB_MOUNT/Music" /etc/minidlna.conf; then
  8886. echo "media_dir=A,$USB_MOUNT/Music" >> /etc/minidlna.conf
  8887. fi
  8888. if ! grep -q "$USB_MOUNT/Pictures" /etc/minidlna.conf; then
  8889. echo "media_dir=P,$USB_MOUNT/Pictures" >> /etc/minidlna.conf
  8890. fi
  8891. if ! grep -q "$USB_MOUNT/Videos" /etc/minidlna.conf; then
  8892. echo "media_dir=V,$USB_MOUNT/Videos" >> /etc/minidlna.conf
  8893. fi
  8894. sed -i 's/#root_container=./root_container=B/g' /etc/minidlna.conf
  8895. sed -i 's/#network_interface=/network_interface=eth0/g' /etc/minidlna.conf
  8896. sed -i 's/#friendly_name=/friendly_name="Freedombone Media"/g' /etc/minidlna.conf
  8897. sed -i 's|#db_dir=/var/cache/minidlna|db_dir=/var/cache/minidlna|g' /etc/minidlna.conf
  8898. sed -i 's/#inotify=yes/inotify=yes/g' /etc/minidlna.conf
  8899. sed -i 's/#notify_interval=895/notify_interval=300/g' /etc/minidlna.conf
  8900. sed -i "s|#presentation_url=/|presentation_url=http://localhost:8200|g" /etc/minidlna.conf
  8901. service minidlna force-reload
  8902. service minidlna reload
  8903. sed -i 's/fs.inotify.max_user_watches*/fs.inotify.max_user_watches=65536/g' /etc/sysctl.conf
  8904. if ! grep -q "max_user_watches" $COMPLETION_FILE; then
  8905. echo 'fs.inotify.max_user_watches=65536' >> /etc/sysctl.conf
  8906. fi
  8907. /sbin/sysctl -p
  8908. echo 'install_dlna_server' >> $COMPLETION_FILE
  8909. }
  8910. function install_mediagoblin {
  8911. return
  8912. if grep -Fxq "install_mediagoblin" $COMPLETION_FILE; then
  8913. return
  8914. fi
  8915. if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  8916. return
  8917. fi
  8918. if [ ! $MEDIAGOBLIN_DOMAIN_NAME ]; then
  8919. return
  8920. fi
  8921. apt-get -y install git-core python python-dev python-lxml python-imaging python-virtualenv
  8922. apt-get -y install postgresql postgresql-client python-psycopg2
  8923. apt-get -y install python-gst-1.0 libjpeg62-turbo-dev gstreamer1.0-plugins-base python-gobject
  8924. apt-get -y install gstreamer1.0-plugins-good gstreamer1.0-libav libav-tools gstreamer0.10-tools
  8925. apt-get -y install python-numpy python-scipy libsndfile1-dev python-gst0.10-dev
  8926. apt-get -y install gstreamer0.10-plugins-base gstreamer0.10-plugins-good gstreamer1.0-tools
  8927. su -c "createuser -A -D mediagoblin" - postgres
  8928. su -c "createdb -E UNICODE -O mediagoblin mediagoblin" - postgres
  8929. adduser --disabled-login --gecos 'Mediagoblin' mediagoblin
  8930. MEDIAGOBLIN_DOMAIN_ROOT="/home/mediagoblin"
  8931. MEDIAGOBLIN_PATH="$MEDIAGOBLIN_DOMAIN_ROOT/mediagoblin"
  8932. MEDIAGOBLIN_PATH_BIN="$MEDIAGOBLIN_PATH/mediagoblin/bin"
  8933. mkdir -p $MEDIAGOBLIN_DOMAIN_ROOT
  8934. chown -hR mediagoblin: $MEDIAGOBLIN_DOMAIN_ROOT
  8935. su -c "cd $MEDIAGOBLIN_DOMAIN_ROOT; git clone $MEDIAGOBLIN_REPO" - mediagoblin
  8936. cd $MEDIAGOBLIN_DOMAIN_ROOT
  8937. git checkout -q v0.7.1
  8938. su -c "cd $MEDIAGOBLIN_PATH; git submodule init" - mediagoblin
  8939. su -c "cd $MEDIAGOBLIN_PATH; git submodule update" - mediagoblin
  8940. su -c "cd $MEDIAGOBLIN_PATH; (virtualenv --python=python2 --system-site-packages . || cd $MEDIAGOBLIN_PATH; virtualenv --python=python2 .) && ./bin/python setup.py develop" - mediagoblin
  8941. su -c "cd $MEDIAGOBLIN_PATH; ./bin/easy_install flup" - mediagoblin
  8942. if [ -f $MEDIAGOBLIN_PATH/lib/python2.7/no-global-site-packages.txt ]; then
  8943. virtualenv deactivate
  8944. rm -f $MEDIAGOBLIN_PATH/lib/python2.7/no-global-site-packages.txt
  8945. su -c "cd $MEDIAGOBLIN_PATH; source bin/activate" - mediagoblin
  8946. fi
  8947. if [ -f $MEDIAGOBLIN_PATH/mediagoblin.example.ini ]; then
  8948. # this is for versions > 0.7.1
  8949. su -c "cp $MEDIAGOBLIN_PATH/mediagoblin.example.ini $MEDIAGOBLIN_PATH/mediagoblin_local.ini" - mediagoblin
  8950. sed -i 's|# data_basedir.*|data_basedir = "/var/lib/mediagoblin"|g' $MEDIAGOBLIN_PATH/mediagoblin_local.ini
  8951. else
  8952. su -c "cp $MEDIAGOBLIN_PATH/mediagoblin.ini $MEDIAGOBLIN_PATH/mediagoblin_local.ini" - mediagoblin
  8953. fi
  8954. sed -i 's|# sql_engine.*|sql_engine = postgresql:///mediagoblin|g' $MEDIAGOBLIN_PATH/mediagoblin_local.ini
  8955. sed -i "s/email_sender_address.*/email_sender_address = \"$MY_EMAIL_ADDRESS\"/g" $MEDIAGOBLIN_PATH/mediagoblin_local.ini
  8956. sed -i 's|email_debug_mode.*|email_debug_mode = false|g' $MEDIAGOBLIN_PATH/mediagoblin_local.ini
  8957. # add extra media types
  8958. if ! grep -q "media_types.stl" $MEDIAGOBLIN_PATH/mediagoblin_local.ini; then
  8959. echo '[[mediagoblin.media_types.stl]]' >> $MEDIAGOBLIN_PATH/mediagoblin_local.ini
  8960. fi
  8961. if ! grep -q "media_types.audio" $MEDIAGOBLIN_PATH/mediagoblin_local.ini; then
  8962. echo '[[mediagoblin.media_types.audio]]' >> $MEDIAGOBLIN_PATH/mediagoblin_local.ini
  8963. fi
  8964. if ! grep -q "media_types.video" $MEDIAGOBLIN_PATH/mediagoblin_local.ini; then
  8965. echo '[[mediagoblin.media_types.video]]' >> $MEDIAGOBLIN_PATH/mediagoblin_local.ini
  8966. fi
  8967. #su -c 'cd $MEDIAGOBLIN_PATH; ./bin/pip install scikits.audiolab' - mediagoblin
  8968. #su -c "cd $MEDIAGOBLIN_PATH; git submodule update && ./bin/python setup.py develop --upgrade && ./bin/gmg dbupdate" - mediagoblin
  8969. su -c "cd $MEDIAGOBLIN_PATH; ./bin/gmg dbupdate" - mediagoblin
  8970. echo 'server {' > /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8971. echo ' listen 80;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8972. echo " server_name $MEDIAGOBLIN_DOMAIN_NAME;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8973. echo ' access_log off;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8974. echo " error_log /var/log/nginx/$MEDIAGOBLIN_DOMAIN_NAME_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8975. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8976. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8977. echo ' location / {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8978. echo ' proxy_pass http://localhost:6543;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8979. echo ' }' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8980. echo ' location ^~ /auth/ {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8981. echo ' rewrite ^ https://$server_name$request_uri?;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8982. echo ' }' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8983. echo ' location ^~ /u/ {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8984. echo ' rewrite ^ https://$server_name$request_uri?;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8985. echo ' }' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8986. echo ' location ^~ /submit/ {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8987. echo ' rewrite ^ https://$server_name$request_uri?;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8988. echo ' }' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8989. echo '}' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8990. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8991. echo 'server {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8992. echo ' listen 443 ssl;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8993. echo " root /var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8994. echo " server_name $MEDIAGOBLIN_DOMAIN_NAME;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8995. echo ' access_log off;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8996. echo " error_log /var/log/nginx/$MEDIAGOBLIN_DOMAIN_NAME_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8997. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8998. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  8999. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9000. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9001. echo ' ssl on;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9002. echo " ssl_certificate /etc/ssl/certs/$MEDIAGOBLIN_DOMAIN_NAME.crt;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9003. echo " ssl_certificate_key /etc/ssl/private/$MEDIAGOBLIN_DOMAIN_NAME.key;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9004. echo " ssl_dhparam /etc/ssl/certs/$MEDIAGOBLIN_DOMAIN_NAME.dhparam;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9005. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9006. echo ' ssl_session_timeout 5m;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9007. echo ' ssl_prefer_server_ciphers on;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9008. echo " ssl_protocols $SSL_PROTOCOLS; # not possible to do exclusive" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9009. echo " ssl_ciphers '$SSL_CIPHERS';" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9010. echo ' add_header X-Frame-Options DENY;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9011. echo ' add_header X-Content-Type-Options nosniff;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9012. echo ' add_header Strict-Transport-Security max-age=0;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9013. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9014. echo ' location / {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9015. echo ' proxy_pass http://localhost:6543;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9016. echo ' }' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9017. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9018. echo ' client_max_body_size 10G; # set max upload size' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9019. echo ' client_body_buffer_size 128k;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9020. echo ' fastcgi_buffers 64 4K;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9021. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9022. echo ' error_page 403 /core/templates/403.php;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9023. echo ' error_page 404 /core/templates/404.php;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9024. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9025. echo ' location = /robots.txt {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9026. echo ' allow all;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9027. echo ' log_not_found off;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9028. echo ' access_log off;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9029. echo ' }' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9030. echo '}' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  9031. if [ ! -f /etc/ssl/certs/$MEDIAGOBLIN_DOMAIN_NAME.dhparam ]; then
  9032. freedombone-addcert -h $MEDIAGOBLIN_DOMAIN_NAME --dhkey $DH_KEYLENGTH
  9033. check_certificates $MEDIAGOBLIN_DOMAIN_NAME
  9034. fi
  9035. nginx_ensite $MEDIAGOBLIN_DOMAIN_NAME
  9036. service php5-fpm restart
  9037. service nginx restart
  9038. /usr/sbin/nginx -s reload
  9039. # update the dynamic DNS
  9040. CURRENT_DDNS_DOMAIN=$MEDIAGOBLIN_DOMAIN_NAME
  9041. add_ddns_domain
  9042. # init with systemd
  9043. echo '[Unit]' > /etc/systemd/system/mediagoblin.service
  9044. echo 'Description=Mediagoblin (Media Server)' >> /etc/systemd/system/mediagoblin.service
  9045. echo 'After=syslog.target' >> /etc/systemd/system/mediagoblin.service
  9046. echo 'After=network.target' >> /etc/systemd/system/mediagoblin.service
  9047. echo 'After=postgresql.service' >> /etc/systemd/system/mediagoblin.service
  9048. echo '' >> /etc/systemd/system/mediagoblin.service
  9049. echo '[Service]' >> /etc/systemd/system/mediagoblin.service
  9050. echo 'Type=simple' >> /etc/systemd/system/mediagoblin.service
  9051. echo 'User=mediagoblin' >> /etc/systemd/system/mediagoblin.service
  9052. echo 'Group=mediagoblin' >> /etc/systemd/system/mediagoblin.service
  9053. echo 'WorkingDirectory=/home/mediagoblin/mediagoblin' >> /etc/systemd/system/mediagoblin.service
  9054. echo 'ExecStart=/home/mediagoblin/mediagoblin/lazyserver.sh --server-name=broadcast' >> /etc/systemd/system/mediagoblin.service
  9055. echo 'Restart=always' >> /etc/systemd/system/mediagoblin.service
  9056. echo 'Environment="USER=mediagoblin","HOME=/home/mediagoblin"' >> /etc/systemd/system/mediagoblin.service
  9057. echo '' >> /etc/systemd/system/mediagoblin.service
  9058. echo '[Install]' >> /etc/systemd/system/mediagoblin.service
  9059. echo 'WantedBy=multi-user.target' >> /etc/systemd/system/mediagoblin.service
  9060. systemctl enable mediagoblin
  9061. systemctl restart mediagoblin
  9062. echo 'install_mediagoblin' >> $COMPLETION_FILE
  9063. }
  9064. function create_upgrade_script {
  9065. if grep -Fxq "create_upgrade_script" $COMPLETION_FILE; then
  9066. return
  9067. fi
  9068. echo '#!/bin/bash' > /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9069. echo '' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9070. echo 'apt-get -y update' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9071. echo 'apt-get -y upgrade' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9072. if grep -Fxq "install_redmatrix" $COMPLETION_FILE; then
  9073. echo '' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9074. echo '# Red Matrix' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9075. echo "cd /var/www/$REDMATRIX_DOMAIN_NAME/htdocs" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9076. echo 'git stash' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9077. echo 'git stash drop' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9078. echo 'git pull' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9079. echo "cd /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/addon" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9080. echo 'git stash' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9081. echo 'git stash drop' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9082. echo 'git pull' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9083. echo "chown -R www-data:www-data /var/www/$REDMATRIX_DOMAIN_NAME/htdocs" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9084. fi
  9085. if grep -Fxq "install_gnu_social" $COMPLETION_FILE; then
  9086. echo '' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9087. echo '# GNU Social' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9088. echo "cd /var/www/$MICROBLOG_DOMAIN_NAME/htdocs" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9089. echo 'git stash' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9090. echo 'git stash drop' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9091. echo 'git pull' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9092. echo "chown -R www-data:www-data /var/www/$MICROBLOG_DOMAIN_NAME/htdocs" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9093. fi
  9094. if grep -Fxq "install_blog" $COMPLETION_FILE; then
  9095. echo '' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9096. echo '# Blog' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9097. echo "cd /var/www/$FULLBLOG_DOMAIN_NAME/htdocs" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9098. echo 'git stash' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9099. echo 'git stash drop' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9100. echo '#git pull' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9101. echo "#chown -R www-data:www-data /var/www/$FULLBLOG_DOMAIN_NAME/htdocs" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9102. fi
  9103. if grep -Fxq "install_owncloud_music_app" $COMPLETION_FILE; then
  9104. echo '' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9105. echo '# Owncloud music app' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9106. echo "cd /usr/share/owncloud/apps/music" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9107. echo 'git stash' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9108. echo 'git stash drop' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9109. echo 'git pull' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9110. fi
  9111. if grep -Fxq "mesh_cjdns" $COMPLETION_FILE; then
  9112. echo '' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9113. echo '# cjdns' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9114. echo "cd /etc/cjdns" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9115. echo 'git stash' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9116. echo 'git stash drop' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9117. echo 'git pull' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9118. fi
  9119. if grep -Fxq "install_gogs" $COMPLETION_FILE; then
  9120. echo '' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9121. echo '# gogs' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9122. echo 'cd /home/git/go/src/github.com/gogits/gogs' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9123. echo 'git stash' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9124. echo 'git stash drop' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9125. echo 'git pull' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9126. echo 'chown -R git:git /home/git' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9127. echo 'chmod 600 /home/git/go/src/github.com/gogits/gogs/custom/conf/app.ini' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9128. echo 'export GOPATH=/home/git/go' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9129. echo 'go build' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9130. echo 'systemctl restart gogs' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9131. echo 'systemctl daemon-reload' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9132. fi
  9133. echo '# update tox node' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9134. echo "if [ -d $INSTALL_DIR/toxcore ]; then" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9135. echo " cd $INSTALL_DIR/toxcore" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9136. echo ' git stash' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9137. echo ' git pull' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9138. echo ' autoreconf -i' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9139. echo ' ./configure --enable-daemon' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9140. echo ' make' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9141. echo ' make install' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9142. echo ' systemctl restart tox-bootstrapd.service' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9143. echo " cd $INSTALL_DIR/toxic" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9144. echo ' git stash' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9145. echo ' git pull' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9146. echo ' make' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9147. echo ' make install' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9148. echo 'fi' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9149. echo '# update email encryption script' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9150. echo "if [ -d $INSTALL_DIR/gpgit ]; then" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9151. echo " cd $INSTALL_DIR/gpgit" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9152. echo ' git stash' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9153. echo ' git pull' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9154. echo ' cp gpgit.pl /usr/bin' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9155. echo 'fi' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9156. echo 'exit 0' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9157. chmod +x /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  9158. echo 'create_upgrade_script' >> $COMPLETION_FILE
  9159. }
  9160. function intrusion_detection {
  9161. if grep -Fxq "intrusion_detection" $COMPLETION_FILE; then
  9162. return
  9163. fi
  9164. if [[ $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  9165. return
  9166. fi
  9167. apt-get -y install tripwire
  9168. apt-get -y autoremove
  9169. cd /etc/tripwire
  9170. cp site.key $DEFAULT_DOMAIN_NAME-site.key
  9171. echo ''
  9172. echo ''
  9173. echo '*** Installing intrusion detection. Press Enter when asked for the local and site passphrases. ***'
  9174. echo ''
  9175. echo ''
  9176. tripwire --init
  9177. # make a script for easy resetting of the tripwire
  9178. echo '#!/bin/sh' > /usr/bin/reset-tripwire
  9179. echo 'tripwire --update-policy --secure-mode low /etc/tripwire/twpol.txt' >> /usr/bin/reset-tripwire
  9180. chmod +x /usr/bin/reset-tripwire
  9181. sed -i 's/SYSLOGREPORTING.*/SYSLOGREPORTING =false/g' /etc/tripwire/twcfg.txt
  9182. # only send emails if something has changed
  9183. sed -i 's|MAILNOVIOLATIONS.*|MAILNOVIOLATIONS = false|g' /etc/tripwire/twcfg.txt
  9184. sed -i '/# These files change the behavior of the root account/,/}/ s/.*//g' /etc/tripwire/twpol.txt
  9185. sed -i 's|/etc/rc.boot.*||g' /etc/tripwire/twpol.txt
  9186. # Don't show any changes to /proc
  9187. sed -i 's|/proc.*||g' /etc/tripwire/twpol.txt
  9188. # Don't report log changes
  9189. sed -i 's|/var/log.*||g' /etc/tripwire/twpol.txt
  9190. # Ignore /etc/tripwire
  9191. if ! grep -q "!/etc/tripwire" /etc/tripwire/twpol.txt; then
  9192. sed -i '\|/etc\t\t->.*|a\ !/etc/tripwire;' /etc/tripwire/twpol.txt
  9193. fi
  9194. # Avoid logging the changed database
  9195. sed -i 's|$(TWETC)/tw.pol.*||g' /etc/tripwire/twpol.txt
  9196. # recreate the configuration
  9197. echo '
  9198. ' | twadmin --create-cfgfile -S /etc/tripwire/site.key /etc/tripwire/twcfg.txt
  9199. # reset
  9200. echo '
  9201. ' | reset-tripwire
  9202. echo 'intrusion_detection' >> $COMPLETION_FILE
  9203. }
  9204. # see https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy
  9205. # Local Redirection and Anonymizing Middlebox
  9206. function route_outgoing_traffic_through_tor {
  9207. if grep -Fxq "route_outgoing_traffic_through_tor" $COMPLETION_FILE; then
  9208. return
  9209. fi
  9210. if [[ $ROUTE_THROUGH_TOR != "yes" ]]; then
  9211. return
  9212. fi
  9213. apt-get -y install tor tor-arm
  9214. ### set variables
  9215. # Destinations you don't want routed through Tor
  9216. _non_tor="192.168.1.0/24 192.168.0.0/24"
  9217. # The user that Tor runs as
  9218. _tor_uid="debian-tor"
  9219. # Tor's TransPort
  9220. _trans_port="9040"
  9221. # Your internal interface
  9222. _int_if="eth0"
  9223. ### Set iptables *nat
  9224. iptables -t nat -A OUTPUT -o lo -j RETURN
  9225. iptables -t nat -A OUTPUT -m owner --uid-owner $_tor_uid -j RETURN
  9226. iptables -t nat -A OUTPUT -p udp --dport 53 -j REDIRECT --to-ports 53
  9227. # Allow clearnet access for hosts in $_non_tor
  9228. for _clearnet in $_non_tor; do
  9229. iptables -t nat -A OUTPUT -d $_clearnet -j RETURN
  9230. iptables -t nat -A PREROUTING -i $_int_if -d $_clearnet -j RETURN
  9231. done
  9232. # Redirect all other pre-routing and output to Tor
  9233. iptables -t nat -A OUTPUT -p tcp --syn -j REDIRECT --to-ports $_trans_port
  9234. iptables -t nat -A PREROUTING -i $_int_if -p udp --dport 53 -j REDIRECT --to-ports 53
  9235. iptables -t nat -A PREROUTING -i $_int_if -p tcp --syn -j REDIRECT --to-ports $_trans_port
  9236. ### set iptables *filter
  9237. iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
  9238. # Allow clearnet access for hosts in $_non_tor
  9239. for _clearnet in $_non_tor 127.0.0.0/8; do
  9240. iptables -A OUTPUT -d $_clearnet -j ACCEPT
  9241. done
  9242. # Allow only Tor output
  9243. iptables -A OUTPUT -m owner --uid-owner $_tor_uid -j ACCEPT
  9244. iptables -A OUTPUT -j REJECT
  9245. save_firewall_settings
  9246. if ! grep -q "fs.file-max" /etc/sysctl.conf; then
  9247. echo "fs.file-max=100000" >> /etc/sysctl.conf
  9248. /sbin/sysctl -p
  9249. fi
  9250. echo 'domain localdomain' > /etc/resolv.conf
  9251. echo 'search localdomain' >> /etc/resolv.conf
  9252. echo 'nameserver 127.0.0.1' >> /etc/resolv.conf
  9253. if ! grep -q "VirtualAddrNetworkIPv4" /etc/tor/torrc; then
  9254. echo 'VirtualAddrNetworkIPv4 10.192.0.0/10' >> /etc/tor/torrc
  9255. fi
  9256. if ! grep -q "AutomapHostsOnResolve" /etc/tor/torrc; then
  9257. echo 'AutomapHostsOnResolve 1' >> /etc/tor/torrc
  9258. fi
  9259. if ! grep -q "TransPort" /etc/tor/torrc; then
  9260. echo 'TransPort 9040' >> /etc/tor/torrc
  9261. fi
  9262. if ! grep -q "TransListenAddress 127.0.0.1" /etc/tor/torrc; then
  9263. echo 'TransListenAddress 127.0.0.1' >> /etc/tor/torrc
  9264. fi
  9265. if ! grep -q "TransListenAddress $LOCAL_NETWORK_STATIC_IP_ADDRESS" /etc/tor/torrc; then
  9266. echo "TransListenAddress $LOCAL_NETWORK_STATIC_IP_ADDRESS" >> /etc/tor/torrc
  9267. fi
  9268. if ! grep -q "DNSPort" /etc/tor/torrc; then
  9269. echo 'DNSPort 53' >> /etc/tor/torrc
  9270. fi
  9271. if ! grep -q "DNSListenAddress 127.0.0.1" /etc/tor/torrc; then
  9272. echo 'DNSListenAddress 127.0.0.1' >> /etc/tor/torrc
  9273. fi
  9274. if ! grep -q "DNSListenAddress $LOCAL_NETWORK_STATIC_IP_ADDRESS" /etc/tor/torrc; then
  9275. echo "DNSListenAddress $LOCAL_NETWORK_STATIC_IP_ADDRESS" >> /etc/tor/torrc
  9276. fi
  9277. echo 'route_outgoing_traffic_through_tor' >> $COMPLETION_FILE
  9278. }
  9279. # A command to create a git repository for a project
  9280. function create_git_project {
  9281. if grep -Fxq "create_git_project" $COMPLETION_FILE; then
  9282. return
  9283. fi
  9284. apt-get -y install git
  9285. echo '#!/bin/bash' > /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  9286. echo '' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  9287. echo 'GIT_PROJECT_NAME=$1' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  9288. echo 'if [ ! $GIT_PROJECT_NAME ]; then' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  9289. echo ' echo "Please specify a project name, without any spaces"' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  9290. echo ' exit 1' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  9291. echo 'fi' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  9292. echo '' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  9293. echo 'if [ ! -d /home/$USER/projects/$GIT_PROJECT_NAME ]; then' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  9294. echo ' mkdir -p /home/$USER/projects/$GIT_PROJECT_NAME' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  9295. echo 'fi' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  9296. echo '' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  9297. echo 'cd /home/$USER/projects/$GIT_PROJECT_NAME' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  9298. echo 'git init --bare' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  9299. echo '' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  9300. echo -n 'echo "Your project has been created, ' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  9301. echo 'use the following command to clone the repository"' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  9302. echo -n " git clone ssh://$MY_USERNAME@$DEFAULT_DOMAIN_NAME:$SSH_PORT" >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  9303. echo '/home/$USER/projects/$GIT_PROJECT_NAME' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  9304. echo '' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  9305. echo 'exit 0' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  9306. chmod +x /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  9307. echo 'create_git_project' >> $COMPLETION_FILE
  9308. }
  9309. # Create daily backups of any projects on Github
  9310. # Then if Github goes away, turns evil, is censored or has
  9311. # outages then you still have access to your projects
  9312. function backup_github_projects {
  9313. if grep -Fxq "backup_github_projects" $COMPLETION_FILE; then
  9314. return
  9315. fi
  9316. if [ ! $GITHUB_USERNAME ]; then
  9317. return 731
  9318. fi
  9319. if [ ! $GITHUB_BACKUP_DIRECTORY ]; then
  9320. return 732
  9321. fi
  9322. apt-get -y install git
  9323. # create a github backups directory if needed
  9324. if [ ! -d $GITHUB_BACKUP_DIRECTORY ]; then
  9325. mkdir -p $GITHUB_BACKUP_DIRECTORY
  9326. fi
  9327. # get the backup utility
  9328. cd $INSTALL_DIR
  9329. git clone https://github.com/josegonzalez/python-github-backup
  9330. # install it
  9331. cd $INSTALL_DIR/python-github-backup
  9332. python setup.py install
  9333. # add a daily cron entry
  9334. echo '#!/bin/bash' > /etc/cron.daily/github
  9335. echo "github-backup $GITHUB_USERNAME -o $GITHUB_BACKUP_DIRECTORY --repositories" >> /etc/cron.daily/github
  9336. echo 'exit 0' >> /etc/cron.daily/github
  9337. chmod +x /etc/cron.daily/github
  9338. # do an initial backup
  9339. /etc/cron.daily/github
  9340. echo 'backup_github_projects' >> $COMPLETION_FILE
  9341. }
  9342. function install_dynamicdns {
  9343. if [[ $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
  9344. return
  9345. fi
  9346. if grep -Fxq "install_dynamicdns" $COMPLETION_FILE; then
  9347. return
  9348. fi
  9349. # Here we compile from source because the current package
  9350. # doesn't support https, which could result in passwords
  9351. # being leaked
  9352. apt-get -y install build-essential curl libgnutls28-dev automake1.11
  9353. git clone https://github.com/bashrc/inadyn $INSTALL_DIR/inadyn
  9354. if [ ! -d $INSTALL_DIR/inadyn ]; then
  9355. echo 'inadyn repo not cloned'
  9356. exit 6785
  9357. fi
  9358. cd $INSTALL_DIR/inadyn
  9359. ./configure
  9360. if [ ! "$?" = "0" ]; then
  9361. exit 74890
  9362. fi
  9363. USE_OPENSSL=1 make
  9364. if [ ! "$?" = "0" ]; then
  9365. exit 74858
  9366. fi
  9367. make install
  9368. if [ ! "$?" = "0" ]; then
  9369. exit 3785
  9370. fi
  9371. # create an unprivileged user
  9372. #useradd -r -s /bin/false debian-inadyn
  9373. # create a configuration file
  9374. echo 'background' > /etc/inadyn.conf
  9375. echo 'verbose 1' >> /etc/inadyn.conf
  9376. echo 'period 300' >> /etc/inadyn.conf
  9377. echo 'startup-delay 60' >> /etc/inadyn.conf
  9378. echo 'cache-dir /run/inadyn' >> /etc/inadyn.conf
  9379. chmod 600 /etc/inadyn.conf
  9380. echo '[Unit]' > /etc/systemd/system/inadyn.service
  9381. echo 'Description=inadyn (DynDNS updater)' >> /etc/systemd/system/inadyn.service
  9382. echo 'After=network.target' >> /etc/systemd/system/inadyn.service
  9383. echo '' >> /etc/systemd/system/inadyn.service
  9384. echo '[Service]' >> /etc/systemd/system/inadyn.service
  9385. echo 'ExecStart=/usr/local/sbin/inadyn --config /etc/inadyn.conf' >> /etc/systemd/system/inadyn.service
  9386. echo 'Restart=always' >> /etc/systemd/system/inadyn.service
  9387. echo 'Type=forking' >> /etc/systemd/system/inadyn.service
  9388. echo '' >> /etc/systemd/system/inadyn.service
  9389. echo '[Install]' >> /etc/systemd/system/inadyn.service
  9390. echo 'WantedBy=multi-user.target' >> /etc/systemd/system/inadyn.service
  9391. systemctl enable inadyn
  9392. systemctl restart inadyn
  9393. systemctl daemon-reload
  9394. echo 'install_dynamicdns' >> $COMPLETION_FILE
  9395. }
  9396. function get_voip_server_password {
  9397. if [ -f /home/$MY_USERNAME/README ]; then
  9398. if grep -q "VoIP server password" /home/$MY_USERNAME/README; then
  9399. if [ ! $VOIP_SERVER_PASSWORD ]; then
  9400. VOIP_SERVER_PASSWORD=$(cat /home/$MY_USERNAME/README | grep "VoIP server password" | awk -F ':' '{print $2}' | sed 's/^ *//')
  9401. fi
  9402. fi
  9403. fi
  9404. }
  9405. function install_voip {
  9406. if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" ]]; then
  9407. return
  9408. fi
  9409. if grep -Fxq "install_voip" $COMPLETION_FILE; then
  9410. return
  9411. fi
  9412. apt-get -y install mumble-server
  9413. get_voip_server_password
  9414. if [ ! $VOIP_SERVER_PASSWORD ]; then
  9415. VOIP_SERVER_PASSWORD="$(openssl rand -base64 16)"
  9416. fi
  9417. if [ ${#VOIP_SERVER_PASSWORD} -lt $MINIMUM_PASSWORD_LENGTH ]; then
  9418. VOIP_SERVER_PASSWORD="$(openssl rand -base64 16)"
  9419. fi
  9420. # Make an ssl cert for the server
  9421. if [ ! -f /etc/ssl/certs/mumble.dhparam ]; then
  9422. freedombone-addcert -h mumble --dhkey $DH_KEYLENGTH
  9423. check_certificates mumble
  9424. fi
  9425. # Check that the cert was created
  9426. if [ ! -f /etc/ssl/certs/mumble.crt ]; then
  9427. echo 'VoIP server certificate not created'
  9428. exit 57892
  9429. fi
  9430. if [ ! -f /etc/ssl/private/mumble.key ]; then
  9431. echo 'VoIP server key not created'
  9432. exit 57893
  9433. fi
  9434. sed -i "s|welcometext=.*|welcometext=\"<br />Welcome to $DEFAULT_DOMAIN_NAME <b>VoIP</b>.<br />Chat freely!<br />\"|g" /etc/mumble-server.ini
  9435. if [[ $VOIP_SERVER_PASSWORD && $SYSTEM_TYPE != "$VARIANT_MESH" ]]; then
  9436. sed -i "s|serverpassword=.*|serverpassword=$VOIP_SERVER_PASSWORD|g" /etc/mumble-server.ini
  9437. fi
  9438. sed -i 's|#autobanAttempts.*|autobanAttempts = 10|g' /etc/mumble-server.ini
  9439. sed -i 's|#autobanTimeframe.*|autobanTimeframe = 120|g' /etc/mumble-server.ini
  9440. sed -i 's|#autobanTime.*|autobanTime = 300|g' /etc/mumble-server.ini
  9441. sed -i 's|#sendversion=.*|sendversion=False|g' /etc/mumble-server.ini
  9442. sed -i 's|sendversion=.*|sendversion=False|g' /etc/mumble-server.ini
  9443. if ! grep -q "allowping" /etc/mumble-server.ini; then
  9444. echo 'allowping=False' >> /etc/mumble-server.ini
  9445. fi
  9446. sed -i 's|allowping=.*|allowping=False|g' /etc/mumble-server.ini
  9447. sed -i 's|#sslCert=.*|sslCert=/etc/ssl/certs/mumble.crt|g' /etc/mumble-server.ini
  9448. sed -i 's|#sslKey=.*|sslKey=/etc/ssl/privare/mumble.key|g' /etc/mumble-server.ini
  9449. sed -i 's|#certrequired=.*|certrequired=True|g' /etc/mumble-server.ini
  9450. sed -i 's|users=100|users=10|g' /etc/mumble-server.ini
  9451. sed -i 's|#channelnestinglimit=10|channelnestinglimit=10|g' /etc/mumble-server.ini
  9452. sed -i 's|#textmessagelength=.*|textmessagelength=1000|g' /etc/mumble-server.ini
  9453. sed -i 's|textmessagelength=.*|textmessagelength=1000|g' /etc/mumble-server.ini
  9454. sed -i 's|#imagemessagelength=.*|imagemessagelength=131072|g' /etc/mumble-server.ini
  9455. sed -i 's|#allowhtml=.*|allowhtml=False|g' /etc/mumble-server.ini
  9456. sed -i 's|allowhtml=.*|allowhtml=False|g' /etc/mumble-server.ini
  9457. sed -i "s|port=.*|port=$VOIP_PORT|g" /etc/mumble-server.ini
  9458. service mumble-server restart
  9459. if ! grep -q "VoIP Server" /home/$MY_USERNAME/README; then
  9460. echo '' >> /home/$MY_USERNAME/README
  9461. echo '' >> /home/$MY_USERNAME/README
  9462. echo 'VoIP Server' >> /home/$MY_USERNAME/README
  9463. echo '===========' >> /home/$MY_USERNAME/README
  9464. echo 'VoIP server username: mumble-server' >> /home/$MY_USERNAME/README
  9465. if [[ $SYSTEM_TYPE != "VARIANT_MESH" ]]; then
  9466. echo "VoIP server password: $VOIP_SERVER_PASSWORD" >> /home/$MY_USERNAME/README
  9467. fi
  9468. echo '' >> /home/$MY_USERNAME/README
  9469. echo 'To connect to the VoIP server use your username and the server password shown above.' >> /home/$MY_USERNAME/README
  9470. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  9471. chmod 600 /home/$MY_USERNAME/README
  9472. fi
  9473. echo 'install_voip' >> $COMPLETION_FILE
  9474. }
  9475. function install_final {
  9476. if grep -Fxq "install_final" $COMPLETION_FILE; then
  9477. return
  9478. fi
  9479. # unmount any attached usb drive
  9480. if [ -d $USB_MOUNT ]; then
  9481. umount $USB_MOUNT
  9482. rm -rf $USB_MOUNT
  9483. fi
  9484. split_gpg_key_into_fragments
  9485. echo 'install_final' >> $COMPLETION_FILE
  9486. echo ''
  9487. echo ' *** Freedombone installation is complete. Rebooting... ***'
  9488. echo ''
  9489. if [ -f "/home/$MY_USERNAME/README" ]; then
  9490. echo "See /home/$MY_USERNAME/README for post-installation instructions."
  9491. echo ''
  9492. fi
  9493. reboot
  9494. }
  9495. read_configuration
  9496. parse_args
  9497. check_domains
  9498. install_not_on_BBB
  9499. remove_default_user
  9500. configure_firewall
  9501. configure_firewall_ping
  9502. configure_firewall_for_ssh
  9503. configure_firewall_for_dns
  9504. configure_firewall_for_ftp
  9505. configure_firewall_for_web_access
  9506. configure_firewall_for_voip
  9507. configure_firewall_for_avahi
  9508. remove_proprietary_repos
  9509. change_debian_repos
  9510. enable_backports
  9511. configure_dns
  9512. install_dynamicdns
  9513. randomize_cron
  9514. create_freedns_updater
  9515. initial_setup
  9516. enforce_good_passwords
  9517. install_editor
  9518. change_login_message
  9519. enable_zram
  9520. random_number_generator
  9521. set_your_domain_name
  9522. time_synchronisation
  9523. configure_internet_protocol
  9524. create_git_project
  9525. backup_github_projects
  9526. configure_ssh
  9527. remove_instructions_from_motd
  9528. check_hwrng
  9529. search_for_attached_usb_drive
  9530. regenerate_ssh_keys
  9531. create_upgrade_script
  9532. install_zeronet
  9533. configure_avahi
  9534. install_atheros_wifi
  9535. configure_firewall_for_cjdns
  9536. mesh_cjdns
  9537. mesh_cjdns_tools
  9538. configure_firewall_for_batman
  9539. mesh_batman_bridge
  9540. configure_firewall_for_babel
  9541. mesh_babel
  9542. route_outgoing_traffic_through_tor
  9543. install_watchdog_script
  9544. configure_email
  9545. create_procmail
  9546. spam_filtering
  9547. configure_imap
  9548. #configure_imap_client_certs
  9549. configure_gpg
  9550. encrypt_incoming_email
  9551. encrypt_outgoing_email
  9552. email_client
  9553. email_archiving
  9554. email_from_address
  9555. configure_firewall_for_email
  9556. create_public_mailing_list
  9557. #create_private_mailing_list
  9558. encrypt_all_email
  9559. import_email
  9560. script_for_attaching_usb_drive
  9561. install_web_server
  9562. configure_firewall_for_web_server
  9563. install_owncloud
  9564. install_owncloud_music_app
  9565. install_gogs
  9566. install_xmpp
  9567. install_tox_node
  9568. install_tox_client
  9569. configure_firewall_for_xmpp
  9570. install_irc_server
  9571. configure_firewall_for_irc
  9572. install_voip
  9573. install_wiki
  9574. install_blog
  9575. install_gnu_social
  9576. install_redmatrix
  9577. install_dlna_server
  9578. configure_firewall_for_dlna
  9579. install_mediagoblin
  9580. repair_databases_script
  9581. create_backup_script
  9582. create_restore_script
  9583. backup_to_friends_servers
  9584. restore_from_friend
  9585. intrusion_detection
  9586. install_final
  9587. echo 'Freedombone installation is complete'
  9588. exit 0