freedombone-app-mediagoblin 27KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # Mediagoblin application
  12. #
  13. # License
  14. # =======
  15. #
  16. # Copyright (C) 2016 Bob Mottram <bob@freedombone.net>
  17. #
  18. # This program is free software: you can redistribute it and/or modify
  19. # it under the terms of the GNU Affero General Public License as published by
  20. # the Free Software Foundation, either version 3 of the License, or
  21. # (at your option) any later version.
  22. #
  23. # This program is distributed in the hope that it will be useful,
  24. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  25. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  26. # GNU Affero General Public License for more details.
  27. #
  28. # You should have received a copy of the GNU Affero General Public License
  29. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  30. VARIANTS='full full-vim media'
  31. IN_DEFAULT_INSTALL=0
  32. SHOW_ON_ABOUT=1
  33. MEDIAGOBLIN_DOMAIN_NAME=
  34. MEDIAGOBLIN_ADMIN_PASSWORD=
  35. MEDIAGOBLIN_CODE=
  36. MEDIAGOBLIN_ONION_PORT=8108
  37. MEDIAGOBLIN_REPO="http://git.savannah.gnu.org/r/mediagoblin.git"
  38. MEDIAGOBLIN_COMMIT='c4d3293dfa4076719e60fe9e052add07426f9a9a'
  39. MEDIAGOBLIN_BASE_DIR=/var/www/mediagoblin.local/htdocs
  40. MEDIAGOBLIN_PORT=6543
  41. mediagoblin_variables=(ONION_ONLY
  42. MY_USERNAME
  43. MEDIAGOBLIN_DOMAIN_NAME
  44. MEDIAGOBLIN_CODE
  45. DEFAULT_DOMAIN_NAME
  46. DDNS_PROVIDER)
  47. function mediagoblin_fix_email {
  48. # This is a crude hack and there may be a better solution
  49. # The cause of verification problems might be that the mediagoblin user
  50. # does not have mail access
  51. read_config_param 'MEDIAGOBLIN_DOMAIN_NAME'
  52. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  53. mgfile=$MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin/tools/mail.py
  54. if [ ! -f $mgfile ]; then
  55. echo $'Unable to fix email sending'
  56. exit 792532
  57. fi
  58. if ! grep 'import os' $mgfile; then
  59. sed -i '/import sys/a import os' $mgfile
  60. fi
  61. sed -i "s|return mhost.sendmail(from_addr, to_addrs, message.as_string())|return os.system(\"echo '\" + message_body + \"' \| mail -s '\" + message['Subject'] + \"' \" + message['To'])|g" $mgfile
  62. }
  63. function install_interactive_mediagoblin {
  64. if [[ $ONION_ONLY != "no" ]]; then
  65. MEDIAGOBLIN_DOMAIN_NAME='mediagoblin.local'
  66. write_config_param "MEDIAGOBLIN_DOMAIN_NAME" "$MEDIAGOBLIN_DOMAIN_NAME"
  67. else
  68. function_check interactive_site_details
  69. interactive_site_details "mediagoblin" "MEDIAGOBLIN_DOMAIN_NAME" "MEDIAGOBLIN_CODE"
  70. fi
  71. APP_INSTALLED=1
  72. }
  73. function configure_interactive_mediagoblin {
  74. read_config_param 'MEDIAGOBLIN_DOMAIN_NAME'
  75. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  76. dialog --title $"Mediagoblin" \
  77. --backtitle $"Freedombone Control Panel" \
  78. --defaultno \
  79. --yesno $"\nAllow registration of new users?" 10 60
  80. sel=$?
  81. case $sel in
  82. 0)
  83. sed -i 's|allow_registration.*|allow_registration = true|g' $MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin.ini
  84. sed -i 's|allow_registration.*|allow_registration = true|g' $MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin_local.ini
  85. ;;
  86. 1)
  87. sed -i 's|allow_registration.*|allow_registration = false|g' $MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin.ini
  88. sed -i 's|allow_registration.*|allow_registration = false|g' $MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin_local.ini
  89. ;;
  90. 255) return;;
  91. esac
  92. systemctl restart mediagoblin
  93. }
  94. function change_password_mediagoblin {
  95. curr_username="$1"
  96. new_user_password="$2"
  97. }
  98. function add_user_mediagoblin {
  99. new_username="$1"
  100. new_user_password="$2"
  101. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  102. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin/ && bin/gmg adduser --username $new_username --password $new_username $new_user_password" - mediagoblin
  103. echo "0"
  104. }
  105. function remove_user_mediagoblin {
  106. remove_username="$1"
  107. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  108. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin/ && bin/gmg deleteuser --username $new_username" - mediagoblin
  109. echo "0"
  110. }
  111. function reconfigure_mediagoblin {
  112. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  113. rm -f /var/lib/mediagoblin/*.db
  114. rm -rf /var/lib/mediagoblin/media/*
  115. rm -f $MEDIAGOBLIN_BASE_DIR/user_dev
  116. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && ln -s /var/lib/mediagoblin user_dev" - mediagoblin
  117. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin/ && ./bin/gmg dbupdate" - mediagoblin
  118. }
  119. function upgrade_mediagoblin {
  120. CURR_MEDIAGOBLIN_COMMIT=$(cat $COMPLETION_FILE | grep "mediagoblin commit" | awk -F ':' '{print $2}')
  121. if [[ "$CURR_MEDIAGOBLIN_COMMIT" != "$MEDIAGOBLIN_COMMIT" ]]; then
  122. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  123. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin/ && git stash && git pull" - mediagoblin
  124. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin/ && git checkout $MEDIAGOBLIN_COMMIT -b $MEDIAGOBLIN_COMMIT" - mediagoblin
  125. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && git submodule sync" - mediagoblin
  126. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && git submodule update --force --init --recursive" - mediagoblin
  127. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && ./bootstrap.sh" - mediagoblin
  128. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && ./configure" - mediagoblin
  129. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && make" - mediagoblin
  130. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin/ && ./bin/python setup.py develop --upgrade && ./bin/gmg dbupdate" - mediagoblin
  131. mediagoblin_fix_email
  132. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin/ && ./bin/gmg dbupdate" - mediagoblin
  133. set_completion_param "mediagoblin commit" "$MEDIAGOBLIN_COMMIT"
  134. fi
  135. echo "0"
  136. }
  137. function backup_local_mediagoblin {
  138. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  139. source_directory=/var/lib/mediagoblin
  140. if [ -d $source_directory ]; then
  141. dest_directory=mediagoblin
  142. function_check backup_directory_to_usb
  143. backup_directory_to_usb $MEDIAGOBLIN_BASE_DIR $dest_directory
  144. backup_directory_to_usb /var/lib/mediagoblin mediagoblindata
  145. fi
  146. }
  147. function restore_local_mediagoblin {
  148. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  149. if [ -d /var/lib/mediagoblin ]; then
  150. echo $"Restoring Mediagoblin installation"
  151. function_check get_completion_param
  152. MEDIAGOBLIN_DOMAIN_NAME=$(get_completion_param "mediagoblin domain")
  153. temp_restore_dir=/root/tempmediagoblin
  154. function_check restore_directory_from_usb
  155. restore_directory_from_usb ${temp_restore_dir} mediagoblin
  156. cp -r ${temp_restore_dir}$MEDIAGOBLIN_BASE_DIR/* $MEDIAGOBLIN_BASE_DIR/
  157. if [ ! "$?" = "0" ]; then
  158. function_check restore_directory_from_usb
  159. set_user_permissions
  160. function_check backup_unmount_drive
  161. backup_unmount_drive
  162. exit 45327
  163. fi
  164. restore_directory_from_usb ${temp_restore_dir}2 mediagoblindata
  165. cp -r ${temp_restore_dir}2/var/lib/mediagoblin/* /var/lib/mediagoblin/
  166. if [ ! "$?" = "0" ]; then
  167. function_check set_user_permissions
  168. set_user_permissions
  169. function_check backup_unmount_drive
  170. backup_unmount_drive
  171. exit 24529
  172. fi
  173. rm -rf ${temp_restore_dir}
  174. rm -rf ${temp_restore_dir}2
  175. chown -hR mediagoblin:www-data $MEDIAGOBLIN_BASE_DIR
  176. chown -hR mediagoblin:www-data /var/lib/mediagoblin
  177. chmod -R g+wx /var/lib/mediagoblin
  178. fi
  179. }
  180. function backup_remote_mediagoblin {
  181. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  182. if [ -d /etc/mediagoblin ]; then
  183. echo $"Backing up mediagoblin"
  184. backup_directory_to_friend $MEDIAGOBLIN_BASE_DIR mediagoblin
  185. backup_directory_to_friend /var/lib/mediagoblin mediagoblindata
  186. fi
  187. }
  188. function restore_remote_mediagoblin {
  189. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  190. if [ -d $SERVER_DIRECTORY/backup/mediagoblin ]; then
  191. function_check get_completion_param
  192. MEDIAGOBLIN_DOMAIN_NAME=$(get_completion_param "mediagoblin domain")
  193. function_check restore_directory_from_friend
  194. restore_directory_from_friend /root/tempmediagoblin mediagoblin
  195. cp -r /root/tempmediagoblin/var/lib/mediagoblin/* /var/lib/mediagoblin/
  196. if [ ! "$?" = "0" ]; then
  197. exit 264824
  198. fi
  199. restore_directory_from_friend /root/tempmediagoblin2 mediagoblindata
  200. cp -r /root/tempmediagoblin/var/lib/mediagoblin/* /var/lib/mediagoblin/
  201. if [ ! "$?" = "0" ]; then
  202. exit 268492
  203. fi
  204. rm -rf /root/tempmediagoblin
  205. rm -rf /root/tempmediagoblin2
  206. chown -hR mediagoblin:www-data $MEDIAGOBLIN_BASE_DIR
  207. chown -hR mediagoblin:www-data /var/lib/mediagoblin
  208. chmod -R g+wx /var/lib/mediagoblin
  209. fi
  210. }
  211. function remove_mediagoblin {
  212. if [ ${#MEDIAGOBLIN_DOMAIN_NAME} -eq 0 ]; then
  213. return
  214. fi
  215. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  216. systemctl stop mediagoblin
  217. systemctl disable mediagoblin
  218. rm /etc/systemd/system/mediagoblin.service
  219. function_check remove_onion_service
  220. remove_onion_service mediagoblin ${MEDIAGOBLIN_ONION_PORT}
  221. nginx_dissite $MEDIAGOBLIN_DOMAIN_NAME
  222. remove_certs $MEDIAGOBLIN_DOMAIN_NAME
  223. if [ -d /var/lib/mediagoblin ]; then
  224. rm -rf /var/lib/mediagoblin
  225. fi
  226. if [ -d $MEDIAGOBLIN_BASE_DIR ]; then
  227. rm -rf $MEDIAGOBLIN_BASE_DIR
  228. fi
  229. remove_completion_param "install_mediagoblin"
  230. remove_completion_param "mediagoblin domain"
  231. sed -i '/mediagoblin/d' $COMPLETION_FILE
  232. remove_nodejs mediagoblin
  233. deluser mediagoblin
  234. delgroup mediagoblin
  235. function_check remove_ddns_domain
  236. remove_ddns_domain $MEDIAGOBLIN_DOMAIN_NAME
  237. }
  238. function install_mediagoblin {
  239. if [ ! $MEDIAGOBLIN_DOMAIN_NAME ]; then
  240. return
  241. fi
  242. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  243. function_check install_nodejs
  244. install_nodejs mediagoblin
  245. apt-get install -yq python python-dev python-lxml python-imaging python-virtualenv
  246. apt-get install -yq automake perl sqlite python-paste python-pastedeploy python-pastescript
  247. apt-get install -yq python3 python3-dev libpython3-dev python3-lxml python3-pil
  248. groupadd mediagoblin
  249. useradd -c "GNU MediaGoblin system account" -d /var/lib/mediagoblin -m -r -g www-data mediagoblin
  250. usermod --append -G mediagoblin mediagoblin
  251. mkdir -p /var/lib/mediagoblin
  252. mkdir -p $MEDIAGOBLIN_BASE_DIR
  253. chown -hR mediagoblin:www-data $MEDIAGOBLIN_BASE_DIR
  254. chown -hR mediagoblin:www-data /var/lib/mediagoblin
  255. chmod -R g+wx /var/lib/mediagoblin
  256. su -c "cd $MEDIAGOBLIN_BASE_DIR && git clone $MEDIAGOBLIN_REPO $MEDIAGOBLIN_BASE_DIR/mediagoblin" - mediagoblin
  257. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && git checkout $MEDIAGOBLIN_COMMIT -b $MEDIAGOBLIN_COMMIT" - mediagoblin
  258. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && git submodule sync" - mediagoblin
  259. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && git submodule update --force --init --recursive" - mediagoblin
  260. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && ./bootstrap.sh" - mediagoblin
  261. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && ./configure" - mediagoblin
  262. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && make" - mediagoblin
  263. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && bin/easy_install flup==1.0.3.dev-20110405" - mediagoblin
  264. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && ln -s /var/lib/mediagoblin user_dev" - mediagoblin
  265. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && bash -c 'cp -av mediagoblin.ini mediagoblin_local.ini && cp -av paste.ini paste_local.ini'" - mediagoblin
  266. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && perl -pi -e 's|.*sql_engine = .*|sql_engine = sqlite:////var/lib/mediagoblin/mediagoblin.db|' mediagoblin_local.ini" - mediagoblin
  267. # Video plugin
  268. apt-get install -yq python-gi python3-gi \
  269. gstreamer1.0-tools \
  270. gir1.2-gstreamer-1.0 \
  271. gir1.2-gst-plugins-base-1.0 \
  272. gstreamer1.0-plugins-good \
  273. gstreamer1.0-plugins-bad \
  274. gstreamer1.0-plugins-ugly \
  275. gstreamer1.0-libav \
  276. python-gst-1.0 python3-gst-1.0
  277. cd $MEDIAGOBLIN_BASE_DIR/mediagoblin
  278. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && echo '[[mediagoblin.media_types.video]]' | tee -a mediagoblin_local.ini" - mediagoblin
  279. # Audio plugin
  280. apt-get install -yq python-gst-1.0 gstreamer1.0-plugins-base gstreamer1.0-plugins-bad gstreamer1.0-plugins-good gstreamer1.0-plugins-ugly gstreamer1.0-libav libsndfile1-dev libasound2-dev libgstreamer-plugins-base1.0-dev python-numpy python-scipy
  281. apt-get -yq install libasound2-dev python3-numpy python3-scipy libsndfile-dev
  282. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && echo '[[mediagoblin.media_types.audio]]' | tee -a mediagoblin_local.ini" - mediagoblin
  283. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && bin/pip install scikits.audiolab" - mediagoblin
  284. if [ -f $IMAGE_PASSWORD_FILE ]; then
  285. MEDIAGOBLIN_ADMIN_PASSWORD="$(printf `cat $IMAGE_PASSWORD_FILE`)"
  286. else
  287. if [ ! $MEDIAGOBLIN_ADMIN_PASSWORD ]; then
  288. MEDIAGOBLIN_ADMIN_PASSWORD="$(create_password ${MINIMUM_PASSWORD_LENGTH})"
  289. fi
  290. fi
  291. ${PROJECT_NAME}-pass -u $MY_USERNAME -a mediagoblin -p "$MEDIAGOBLIN_ADMIN_PASSWORD"
  292. MEDIAGOBLIN_ONION_HOSTNAME=$(add_onion_service mediagoblin 80 ${MEDIAGOBLIN_ONION_PORT})
  293. set_completion_param "mediagoblin domain" "${MEDIAGOBLIN_DOMAIN_NAME}"
  294. set_completion_param "mediagoblin onion domain" "$MEDIAGOBLIN_ONION_HOSTNAME"
  295. set_completion_param "mediagoblin commit" "$MEDIAGOBLIN_COMMIT"
  296. if [[ $ONION_ONLY == "no" ]]; then
  297. function_check nginx_http_redirect
  298. nginx_http_redirect $MEDIAGOBLIN_DOMAIN_NAME
  299. echo 'server {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  300. echo ' listen 443 ssl;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  301. echo ' listen [::]:443 ssl;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  302. echo ' include /etc/nginx/mime.types;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  303. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  304. echo ' autoindex off;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  305. echo ' default_type application/octet-stream;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  306. echo ' sendfile on;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  307. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  308. function_check nginx_ssl
  309. nginx_ssl $MEDIAGOBLIN_DOMAIN_NAME
  310. function_check nginx_disable_sniffing
  311. nginx_disable_sniffing $MEDIAGOBLIN_DOMAIN_NAME
  312. function_check nginx_limits
  313. nginx_limits $MEDIAGOBLIN_DOMAIN_NAME 800m
  314. nginx_keybase $MEDIAGOBLIN_DOMAIN_NAME
  315. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  316. echo ' client_header_timeout 10m;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  317. echo ' client_body_timeout 10m;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  318. echo ' send_timeout 10m;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  319. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  320. echo ' fastcgi_read_timeout 600;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  321. echo ' fastcgi_send_timeout 600;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  322. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  323. echo ' gzip on;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  324. echo ' gzip_min_length 1024;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  325. echo ' gzip_buffers 4 32k;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  326. echo ' gzip_types text/plain application/x-javascript text/javascript text/xml text/css;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  327. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  328. echo " server_name $MEDIAGOBLIN_DOMAIN_NAME;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  329. echo ' access_log /dev/null;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  330. echo ' error_log /dev/null;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  331. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  332. echo ' location /mgoblin_static/ {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  333. echo " alias $MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin/static/;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  334. echo ' }' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  335. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  336. echo ' location /mgoblin_media/ {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  337. echo " alias $MEDIAGOBLIN_BASE_DIR/mediagoblin/user_dev/media/public/;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  338. echo ' }' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  339. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  340. echo ' location /theme_static/ {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  341. echo " alias $MEDIAGOBLIN_BASE_DIR/mediagoblin/user_dev/theme_static/;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  342. echo ' }' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  343. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  344. echo ' location /plugin_static/ {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  345. echo " alias $MEDIAGOBLIN_BASE_DIR/mediagoblin/user_dev/plugin_static/;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  346. echo ' }' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  347. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  348. echo ' location / {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  349. echo " fastcgi_pass 127.0.0.1:$MEDIAGOBLIN_PORT;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  350. echo ' include /etc/nginx/fastcgi_params;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  351. echo ' fastcgi_param PATH_INFO $fastcgi_script_name;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  352. echo ' fastcgi_param SCRIPT_NAME "";' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  353. echo ' }' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  354. echo '}' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  355. else
  356. echo -n '' > /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  357. fi
  358. echo 'server {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  359. echo " listen 127.0.0.1:${MEDIAGOBLIN_ONION_PORT} default_server;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  360. echo ' include /etc/nginx/mime.types;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  361. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  362. echo ' autoindex off;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  363. echo ' default_type application/octet-stream;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  364. echo ' sendfile on;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  365. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  366. function_check nginx_disable_sniffing
  367. nginx_disable_sniffing $MEDIAGOBLIN_DOMAIN_NAME
  368. function_check nginx_limits
  369. nginx_limits $MEDIAGOBLIN_DOMAIN_NAME 800m
  370. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  371. echo ' client_header_timeout 10m;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  372. echo ' client_body_timeout 10m;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  373. echo ' send_timeout 10m;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  374. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  375. echo ' fastcgi_read_timeout 600;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  376. echo ' fastcgi_send_timeout 600;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  377. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  378. echo ' gzip on;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  379. echo ' gzip_min_length 1024;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  380. echo ' gzip_buffers 4 32k;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  381. echo ' gzip_types text/plain application/x-javascript text/javascript text/xml text/css;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  382. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  383. echo " server_name $MEDIAGOBLIN_ONION_HOSTNAME;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  384. echo ' access_log /dev/null;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  385. echo ' error_log /dev/null;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  386. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  387. echo ' location /mgoblin_static/ {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  388. echo " alias $MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin/static/;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  389. echo ' }' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  390. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  391. echo ' location /mgoblin_media/ {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  392. echo " alias $MEDIAGOBLIN_BASE_DIR/mediagoblin/user_dev/media/public/;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  393. echo ' }' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  394. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  395. echo ' location /theme_static/ {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  396. echo " alias $MEDIAGOBLIN_BASE_DIR/mediagoblin/user_dev/theme_static/;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  397. echo ' }' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  398. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  399. echo ' location /plugin_static/ {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  400. echo " alias $MEDIAGOBLIN_BASE_DIR/mediagoblin/user_dev/plugin_static/;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  401. echo ' }' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  402. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  403. echo ' location / {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  404. echo " fastcgi_pass 127.0.0.1:$MEDIAGOBLIN_PORT;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  405. echo ' include /etc/nginx/fastcgi_params;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  406. echo ' fastcgi_param PATH_INFO $fastcgi_script_name;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  407. echo ' fastcgi_param SCRIPT_NAME "";' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  408. echo ' }' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  409. echo '}' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  410. echo '[Unit]' > /etc/systemd/system/mediagoblin.service
  411. echo 'Description=Media service' >> /etc/systemd/system/mediagoblin.service
  412. echo 'Requires=network.target' >> /etc/systemd/system/mediagoblin.service
  413. echo 'After=network.target' >> /etc/systemd/system/mediagoblin.service
  414. echo '' >> /etc/systemd/system/mediagoblin.service
  415. echo '[Service]' >> /etc/systemd/system/mediagoblin.service
  416. echo 'Type=simple' >> /etc/systemd/system/mediagoblin.service
  417. echo 'User=mediagoblin' >> /etc/systemd/system/mediagoblin.service
  418. echo 'Group=mediagoblin' >> /etc/systemd/system/mediagoblin.service
  419. echo "WorkingDirectory=$MEDIAGOBLIN_BASE_DIR/mediagoblin/" >> /etc/systemd/system/mediagoblin.service
  420. echo "ExecStart=$MEDIAGOBLIN_BASE_DIR/mediagoblin/lazyserver.sh --server-name=fcgi fcgi_host=127.0.0.1 fcgi_port=$MEDIAGOBLIN_PORT" >> /etc/systemd/system/mediagoblin.service
  421. echo "Environment=MEDIAGOBLIN_CONFIG=$MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin_local.ini CELERY_ALWAYS_EAGER=true" >> /etc/systemd/system/mediagoblin.service
  422. echo 'Restart=always' >> /etc/systemd/system/mediagoblin.service
  423. echo 'RestartSec=10' >> /etc/systemd/system/mediagoblin.service
  424. echo '' >> /etc/systemd/system/mediagoblin.service
  425. echo '[Install]' >> /etc/systemd/system/mediagoblin.service
  426. echo 'WantedBy=multi-user.target' >> /etc/systemd/system/mediagoblin.service
  427. chmod +x /etc/systemd/system/mediagoblin.service
  428. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin/ && bin/gmg dbupdate" - mediagoblin
  429. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin/ && bin/gmg adduser --username $MY_USERNAME --password $MY_USERNAME $MEDIAGOBLIN_ADMIN_PASSWORD" - mediagoblin
  430. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin/ && bin/gmg makeadmin $MY_USERNAME" - mediagoblin
  431. sed -i 's|email_debug_mode.*|email_debug_mode = false|g' $MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin_local.ini
  432. sed -i "s|email_sender_address.*|email_sender_address = \"noreply@${DEFAULT_DOMAIN_NAME}\"|g" $MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin_local.ini
  433. sed -i 's|allow_reporting.*|allow_reporting = false|g' $MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin_local.ini
  434. if ! grep '[[[skip_transcode]]]' $MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin_local.ini; then
  435. echo '[[[skip_transcode]]]' >> $MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin_local.ini
  436. echo 'mime_types = video/webm, video/ogg, video/mp4, audio/ogg, application/ogg, application/x-annodex' >> $MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin_local.ini
  437. echo 'container_formats = Matroska, Ogg, ISO MP4/M4A' >> $MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin_local.ini
  438. echo 'video_codecs = VP8 video, VP9 video, Theora, H.264, H.264 / AVC, MPEG-4 video' >> $MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin_local.ini
  439. echo 'audio_codecs = Vorbis, MPEG-4 AAC' >> $MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin_local.ini
  440. echo 'dimensions_match = false' >> $MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin_local.ini
  441. fi
  442. systemctl enable mediagoblin
  443. systemctl daemon-reload
  444. systemctl start mediagoblin
  445. mediagoblin_fix_email
  446. if [ -d /var/lib/mediagoblin/media ]; then
  447. chmod -R +x /var/lib/mediagoblin/media
  448. fi
  449. function_check create_site_certificate
  450. create_site_certificate $MEDIAGOBLIN_DOMAIN_NAME 'yes'
  451. function_check configure_php
  452. configure_php
  453. nginx_ensite $MEDIAGOBLIN_DOMAIN_NAME
  454. systemctl restart php5-fpm
  455. systemctl restart nginx
  456. function_check add_ddns_domain
  457. add_ddns_domain $MEDIAGOBLIN_DOMAIN_NAME
  458. chown -hR mediagoblin:www-data /var/lib/mediagoblin
  459. chmod -R g+wx /var/lib/mediagoblin
  460. APP_INSTALLED=1
  461. }
  462. # NOTE: deliberately no exit 0