freedombone-restore-remote 24KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # Restore from a given remote server
  12. # License
  13. # =======
  14. #
  15. # Copyright (C) 2015-2017 Bob Mottram <bob@freedombone.net>
  16. #
  17. # This program is free software: you can redistribute it and/or modify
  18. # it under the terms of the GNU Affero General Public License as published by
  19. # the Free Software Foundation, either version 3 of the License, or
  20. # (at your option) any later version.
  21. #
  22. # This program is distributed in the hope that it will be useful,
  23. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  24. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  25. # GNU Affero General Public License for more details.
  26. #
  27. # You should have received a copy of the GNU Affero General Public License
  28. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  29. PROJECT_NAME='freedombone'
  30. COMPLETION_FILE=$HOME/${PROJECT_NAME}-completed.txt
  31. CONFIGURATION_FILE=$HOME/${PROJECT_NAME}.cfg
  32. BACKUP_EXTRA_DIRECTORIES=/root/backup-extra-dirs.csv
  33. export TEXTDOMAIN=${PROJECT_NAME}-restore-remote
  34. export TEXTDOMAINDIR="/usr/share/locale"
  35. UTILS_FILES=/usr/share/${PROJECT_NAME}/utils/${PROJECT_NAME}-utils-*
  36. for f in $UTILS_FILES
  37. do
  38. source $f
  39. done
  40. SERVER_NAME=$1
  41. # whether to restore everything or just a specific application
  42. RESTORE_APP='all'
  43. if [ ${2} ]; then
  44. RESTORE_APP=${2}
  45. fi
  46. ADMIN_USERNAME=$(get_completion_param "Admin user")
  47. ADMIN_EMAIL_ADDRESS=${ADMIN_USERNAME}@${HOSTNAME}
  48. # Temporary location for data to be backed up to other servers
  49. SERVER_DIRECTORY=/root/remoterestore
  50. BACKUP_LIST=/home/${ADMIN_USERNAME}/backup.list
  51. if [ ! $SERVER_NAME ]; then
  52. echo $'restorefromfriend [server]'
  53. exit 1
  54. fi
  55. if [ ! -f $BACKUP_LIST ]; then
  56. echo $"No friends list found at $BACKUP_LIST"
  57. exit 2
  58. fi
  59. if ! grep -q "$SERVER_NAME" $BACKUP_LIST; then
  60. echo $"Server not found within the friends list"
  61. exit 3
  62. fi
  63. REMOTE_SERVER=$(grep -i "$SERVER_NAME" $BACKUP_LIST | awk -F ' ' '{print $1}')
  64. REMOTE_SSH_PORT=$(grep -i "$SERVER_NAME" $BACKUP_LIST | awk -F ' ' '{print $2}')
  65. REMOTE_DIRECTORY=$(grep -i "$SERVER_NAME" $BACKUP_LIST | awk -F ' ' '{print $3}')
  66. REMOTE_PASSWORD=$(grep -i "$SERVER_NAME" $BACKUP_LIST | awk -F ' ' '{print $4}')
  67. REMOTE_SERVER=$REMOTE_SERVER:$REMOTE_DIRECTORY
  68. NOW=$(date +"%Y-%m-%d %H:%M:%S")
  69. echo "$NOW Starting restore from $REMOTE_SERVER" >> /var/log/remotebackups.log
  70. rsync -ratlzv --rsh="/usr/bin/sshpass -p $REMOTE_PASSWORD ssh -p $REMOTE_SSH_PORT -o StrictHostKeyChecking=no" $REMOTE_SERVER/backup $SERVER_DIRECTORY
  71. if [ ! "$?" = "0" ]; then
  72. echo "$NOW Restore from $REMOTE_SERVER failed" >> /var/log/remotebackups.log
  73. # Send a warning email
  74. echo "Restore from $REMOTE_SERVER failed" | mail -s "${PROJECT_NAME} restore from friend" $ADMIN_EMAIL_ADDRESS
  75. exit 790
  76. else
  77. echo "$NOW Restored encrypted data from $REMOTE_SERVER" >> /var/log/remotebackups.log
  78. fi
  79. # MariaDB password
  80. DATABASE_PASSWORD=$(${PROJECT_NAME}-pass -u root -a mariadb)
  81. function copy_gpg_keys {
  82. echo $"Copying GPG keys from admin user to root"
  83. cp -r /home/$ADMIN_USERNAME/.gnupg /root
  84. gpg_set_permissions root
  85. }
  86. function restore_blocklist {
  87. if [[ $RESTORE_APP != 'all' ]]; then
  88. if [[ $RESTORE_APP != 'blocklist' ]]; then
  89. return
  90. fi
  91. fi
  92. if [ -d $USB_MOUNT/backup/blocklist ]; then
  93. echo $"Restoring blocklist"
  94. temp_restore_dir=/root/tempblocklist
  95. restore_directory_from_friend $temp_restore_dir blocklist
  96. restore_directory_from_usb $temp_restore_dir blocklist
  97. if [ -f $temp_restore_dir/root/tempbackupblocklist/${PROJECT_NAME}-firewall-domains.cfg ]; then
  98. cp -f $temp_restore_dir/root/tempbackupblocklist/${PROJECT_NAME}-firewall-domains.cfg /root/${PROJECT_NAME}-firewall-domains.cfg
  99. fi
  100. rm -rf $temp_restore_dir
  101. firewall_refresh_blocklist
  102. fi
  103. }
  104. function restore_configfiles {
  105. if [[ $RESTORE_APP != 'all' ]]; then
  106. if [[ $RESTORE_APP != 'configfiles' ]]; then
  107. return
  108. fi
  109. fi
  110. if [ -d $SERVER_DIRECTORY/backup/configfiles ]; then
  111. echo $"Restoring configuration files"
  112. temp_restore_dir=/root/tempconfigfiles
  113. restore_directory_from_friend $temp_restore_dir configfiles
  114. if [ -f $temp_restore_dir/root/.nostore ]; then
  115. if [ ! -f /root/.nostore ]; then
  116. touch /root/.nostore
  117. fi
  118. else
  119. if [ -f /root/.nostore ]; then
  120. rm /root/.nostore
  121. fi
  122. fi
  123. #if [ -f $temp_restore_dir$NODEJS_INSTALLED_APPS_FILE ]; then
  124. # cp -f $temp_restore_dir$NODEJS_INSTALLED_APPS_FILE $NODEJS_INSTALLED_APPS_FILE
  125. #fi
  126. #if [ -f $temp_restore_dir/root/${PROJECT_NAME}.cfg ]; then
  127. # cp -f $temp_restore_dir/root/${PROJECT_NAME}.cfg $CONFIGURATION_FILE
  128. # if [ ! "$?" = "0" ]; then
  129. # unmount_drive
  130. # rm -rf $temp_restore_dir
  131. # exit 5372
  132. # fi
  133. #fi
  134. #if [ -f $CONFIGURATION_FILE ]; then
  135. # # install according to the config file
  136. # freedombone -c $CONFIGURATION_FILE
  137. #fi
  138. #if [ -f $temp_restore_dir/root/${PROJECT_NAME}-completed.txt ]; then
  139. # cp -f $temp_restore_dir/root/${PROJECT_NAME}-completed.txt $COMPLETION_FILE
  140. # if [ ! "$?" = "0" ]; then
  141. # unmount_drive
  142. # rm -rf $temp_restore_dir
  143. # exit 7252
  144. # fi
  145. #fi
  146. if [ -f ${temp_restore_dir}${BACKUP_EXTRA_DIRECTORIES} ]; then
  147. cp -f ${temp_restore_dir}${BACKUP_EXTRA_DIRECTORIES} ${BACKUP_EXTRA_DIRECTORIES}
  148. if [ ! "$?" = "0" ]; then
  149. unmount_drive
  150. rm -rf $temp_restore_dir
  151. exit 62121
  152. fi
  153. fi
  154. # restore nginx password hashes
  155. if [ -f $temp_restore_dir/root/htpasswd ]; then
  156. cp -f $temp_restore_dir/root/htpasswd /etc/nginx/.htpasswd
  157. fi
  158. rm -rf $temp_restore_dir
  159. fi
  160. }
  161. function restore_mariadb {
  162. if [[ $RESTORE_APP != 'all' ]]; then
  163. if [[ $RESTORE_APP != 'mariadb' ]]; then
  164. return
  165. fi
  166. fi
  167. if [[ $(is_completed install_mariadb) == "0" ]]; then
  168. function_check install_mariadb
  169. install_mariadb
  170. fi
  171. if [ -d $SERVER_DIRECTORY/backup/mariadb ]; then
  172. echo $"Restoring MariaDB settings"
  173. temp_restore_dir=/root/tempmariadb
  174. restore_directory_from_friend $temp_restore_dir mariadb
  175. store_original_mariadb_password
  176. echo $'Obtaining MariaDB password'
  177. db_pass=$(cat /root/.mariadboriginal)
  178. if [ ${#db_pass} -gt 0 ]; then
  179. echo $"Restore the MariaDB user table"
  180. mysqlsuccess=$(mysql -u root --password="$db_pass" mysql -o < ${temp_restore_dir}${temp_restore_dir}/mysql.sql)
  181. if [ ! "$?" = "0" ]; then
  182. echo $"Try again using the password obtained from backup"
  183. db_pass=$(${PROJECT_NAME}-pass -u root -a mariadb)
  184. mysqlsuccess=$(mysql -u root --password="$db_pass" mysql -o < ${temp_restore_dir}${temp_restore_dir}/mysql.sql)
  185. fi
  186. if [ ! "$?" = "0" ]; then
  187. echo "$mysqlsuccess"
  188. exit 962
  189. fi
  190. echo $"Restarting database"
  191. systemctl restart mariadb
  192. echo $"Ensure MariaDB handles authentication"
  193. MARIADB_PASSWORD=$(${PROJECT_NAME}-pass -u root -a mariadb)
  194. mariadb_fix_authentication
  195. fi
  196. rm -rf ${temp_restore_dir}
  197. fi
  198. }
  199. function restore_letsencrypt {
  200. if [[ $RESTORE_APP != 'all' ]]; then
  201. if [[ $RESTORE_APP != 'letsencrypt' ]]; then
  202. return
  203. fi
  204. fi
  205. if [ -d $SERVER_DIRECTORY/backup/letsencrypt ]; then
  206. echo $"Restoring Lets Encrypt settings"
  207. restore_directory_from_friend / letsencrypt
  208. fi
  209. }
  210. function restore_passwordstore {
  211. if [[ $RESTORE_APP != 'all' ]]; then
  212. if [[ $RESTORE_APP != 'passwords' ]]; then
  213. return
  214. fi
  215. fi
  216. if [ -d $SERVER_DIRECTORY/backup/passwordstore ]; then
  217. store_original_mariadb_password
  218. echo $"Restoring password store"
  219. restore_directory_from_friend / passwordstore
  220. fi
  221. }
  222. function restore_tor {
  223. if [[ $RESTORE_APP != 'all' ]]; then
  224. if [[ $RESTORE_APP != 'tor' ]]; then
  225. return
  226. fi
  227. fi
  228. if [ -d $SERVER_DIRECTORY/backup/tor ]; then
  229. echo $"Restoring Tor settings"
  230. restore_directory_from_friend / tor
  231. fi
  232. }
  233. function restore_mutt_settings {
  234. if [[ $RESTORE_APP != 'all' ]]; then
  235. if [[ $RESTORE_APP != 'mutt' ]]; then
  236. return
  237. fi
  238. fi
  239. for d in $SERVER_DIRECTORY/backup/mutt/*/ ; do
  240. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  241. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  242. if [ -d $SERVER_DIRECTORY/backup/mutt/$USERNAME ]; then
  243. if [ ! -d /home/$USERNAME ]; then
  244. ${PROJECT_NAME}-adduser $USERNAME
  245. fi
  246. echo $"Restoring Mutt settings for $USERNAME"
  247. temp_restore_dir=/root/tempmutt
  248. restore_directory_from_friend ${temp_restore_dir} mutt/$USERNAME
  249. if [ -f ${temp_restore_dir}/home/$USERNAME/tempbackup/.muttrc ]; then
  250. cp -f ${temp_restore_dir}/home/$USERNAME/tempbackup/.muttrc /home/$USERNAME/.muttrc
  251. sed -i '/set sidebar_delim/d' /home/$USERNAME/.muttrc
  252. sed -i '/set sidebar_sort/d' /home/$USERNAME/.muttrc
  253. fi
  254. if [ -f ${temp_restore_dir}/home/$USERNAME/tempbackup/Muttrc ]; then
  255. cp -f ${temp_restore_dir}/home/$USERNAME/tempbackup/Muttrc /etc/Muttrc
  256. sed -i '/set sidebar_delim/d' /etc/Muttrc
  257. sed -i '/set sidebar_sort/d' /etc/Muttrc
  258. fi
  259. if [ ! "$?" = "0" ]; then
  260. rm -rf ${temp_restore_dir}
  261. exit 276
  262. fi
  263. rm -rf ${temp_restore_dir}
  264. fi
  265. fi
  266. done
  267. }
  268. function restore_gpg {
  269. if [[ $RESTORE_APP != 'gpg' ]]; then
  270. return
  271. fi
  272. for d in $SERVER_DIRECTORY/backup/gnupg/*/ ; do
  273. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  274. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  275. if [ -d $SERVER_DIRECTORY/backup/gnupg/$USERNAME ]; then
  276. if [ ! -d /home/$USERNAME ]; then
  277. ${PROJECT_NAME}-adduser $USERNAME
  278. fi
  279. echo $"Restoring gnupg settings for $USERNAME"
  280. temp_restore_dir=/root/tempgnupg
  281. restore_directory_from_friend ${temp_restore_dir} gnupg/$USERNAME
  282. cp -r ${temp_restore_dir}/home/$USERNAME/.gnupg /home/$USERNAME/
  283. if [ ! "$?" = "0" ]; then
  284. rm -rf ${temp_restore_dir}
  285. exit 276
  286. fi
  287. rm -rf ${temp_restore_dir}
  288. if [[ "$USERNAME" == "$ADMIN_USERNAME" ]]; then
  289. cp -r /home/$USERNAME/.gnupg /root
  290. if [ ! "$?" = "0" ]; then
  291. exit 283
  292. fi
  293. gpg_set_permissions root
  294. fi
  295. fi
  296. fi
  297. done
  298. }
  299. function restore_procmail {
  300. if [[ $RESTORE_APP != 'all' ]]; then
  301. if [[ $RESTORE_APP != 'procmail' ]]; then
  302. return
  303. fi
  304. fi
  305. for d in $SERVER_DIRECTORY/backup/procmail/*/ ; do
  306. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  307. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  308. if [ -d $SERVER_DIRECTORY/backup/procmail/$USERNAME ]; then
  309. if [ ! -d /home/$USERNAME ]; then
  310. ${PROJECT_NAME}-adduser $USERNAME
  311. fi
  312. echo $"Restoring procmail settings for $USERNAME"
  313. temp_restore_dir=/root/tempprocmail
  314. restore_directory_from_friend ${temp_restore_dir} procmail/$USERNAME
  315. cp -f ${temp_restore_dir}/home/$USERNAME/tempbackup/.procmailrc /home/$USERNAME/
  316. if [ ! "$?" = "0" ]; then
  317. rm -rf ${temp_restore_dir}
  318. exit 276
  319. fi
  320. rm -rf ${temp_restore_dir}
  321. fi
  322. fi
  323. done
  324. }
  325. function restore_spamassassin {
  326. if [[ $RESTORE_APP != 'all' ]]; then
  327. if [[ $RESTORE_APP != 'spamassassin' ]]; then
  328. return
  329. fi
  330. fi
  331. for d in $SERVER_DIRECTORY/backup/spamassassin/*/ ; do
  332. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  333. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  334. if [ -d $SERVER_DIRECTORY/backup/spamassassin/$USERNAME ]; then
  335. if [ ! -d /home/$USERNAME ]; then
  336. ${PROJECT_NAME}-adduser $USERNAME
  337. fi
  338. echo $"Restoring spamassassin settings for $USERNAME"
  339. temp_restore_dir=/root/tempspamassassin
  340. restore_directory_from_friend $temp_restore_dir spamassassin/$USERNAME
  341. cp -rf $temp_restore_dir/home/$USERNAME/.spamassassin /home/$USERNAME/
  342. if [ ! "$?" = "0" ]; then
  343. rm -rf $temp_restore_dir
  344. exit 276
  345. fi
  346. rm -rf $temp_restore_dir
  347. fi
  348. fi
  349. done
  350. }
  351. function restore_admin_readme {
  352. if [[ $RESTORE_APP != 'all' ]]; then
  353. if [[ $RESTORE_APP != 'readme' ]]; then
  354. return
  355. fi
  356. fi
  357. if [ -d $SERVER_DIRECTORY/backup/readme ]; then
  358. echo $"Restoring README"
  359. temp_restore_dir=/root/tempreadme
  360. restore_directory_from_friend $temp_restore_dir readme
  361. cp -f $temp_restore_dir/home/$ADMIN_USERNAME/tempbackup/README /home/$ADMIN_USERNAME/
  362. if [ ! "$?" = "0" ]; then
  363. rm -rf $temp_restore_dir
  364. exit 276
  365. fi
  366. rm -rf $temp_restore_dir
  367. fi
  368. }
  369. function restore_ssh_keys {
  370. if [[ $RESTORE_APP != 'all' ]]; then
  371. if [[ $RESTORE_APP != 'ssh' ]]; then
  372. return
  373. fi
  374. fi
  375. for d in $SERVER_DIRECTORY/backup/ssh/*/ ; do
  376. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  377. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  378. if [ -d $SERVER_DIRECTORY/backup/ssh/$USERNAME ]; then
  379. if [ ! -d /home/$USERNAME ]; then
  380. ${PROJECT_NAME}-adduser $USERNAME
  381. fi
  382. echo $"Restoring ssh keys for $USERNAME"
  383. temp_restore_dir=/root/tempssh
  384. restore_directory_from_friend $temp_restore_dir ssh/$USERNAME
  385. cp -r $temp_restore_dir/home/$USERNAME/.ssh /home/$USERNAME/
  386. if [ ! "$?" = "0" ]; then
  387. rm -rf $temp_restore_dir
  388. exit 664
  389. fi
  390. rm -rf $temp_restore_dir
  391. fi
  392. fi
  393. done
  394. }
  395. function restore_user_config {
  396. if [[ $RESTORE_APP != 'all' ]]; then
  397. if [[ $RESTORE_APP != 'userconfig' ]]; then
  398. return
  399. fi
  400. fi
  401. for d in $SERVER_DIRECTORY/backup/config/*/ ; do
  402. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  403. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  404. if [ -d $SERVER_DIRECTORY/backup/config/$USERNAME ]; then
  405. if [ ! -d /home/$USERNAME ]; then
  406. ${PROJECT_NAME}-adduser $USERNAME
  407. fi
  408. echo $"Restoring config files for $USERNAME"
  409. temp_restore_dir=/root/tempconfig
  410. restore_directory_from_friend $temp_restore_dir config/$USERNAME
  411. cp -r $temp_restore_dir/home/$USERNAME/.config /home/$USERNAME/
  412. if [ ! "$?" = "0" ]; then
  413. rm -rf $temp_restore_dir
  414. exit 664
  415. fi
  416. rm -rf $temp_restore_dir
  417. fi
  418. fi
  419. done
  420. }
  421. function restore_user_monkeysphere {
  422. if [[ $RESTORE_APP != 'all' ]]; then
  423. if [[ $RESTORE_APP != 'usermonkeysphere' ]]; then
  424. return
  425. fi
  426. fi
  427. for d in $SERVER_DIRECTORY/backup/monkeysphere/*/ ; do
  428. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  429. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  430. if [ -d $SERVER_DIRECTORY/backup/monkeysphere/$USERNAME ]; then
  431. if [ ! -d /home/$USERNAME ]; then
  432. ${PROJECT_NAME}-adduser $USERNAME
  433. fi
  434. echo $"Restoring monkeysphere ids for $USERNAME"
  435. temp_restore_dir=/root/tempmonkeysphere
  436. restore_directory_from_friend $temp_restore_dir monkeysphere/$USERNAME
  437. cp -r $temp_restore_dir/home/$USERNAME/.monkeysphere /home/$USERNAME/
  438. if [ ! "$?" = "0" ]; then
  439. rm -rf $temp_restore_dir
  440. exit 664
  441. fi
  442. rm -rf $temp_restore_dir
  443. fi
  444. fi
  445. # The admin user is the identity certifier
  446. MY_EMAIL_ADDRESS="${ADMIN_USERNAME}@${HOSTNAME}"
  447. read_config_param MY_EMAIL_ADDRESS
  448. MY_GPG_PUBLIC_KEY_ID=$(gpg_pubkey_from_email "$ADMIN_USERNAME" "$MY_EMAIL_ADDRESS")
  449. fpr=$(gpg --with-colons --fingerprint $MY_GPG_PUBLIC_KEY_ID | grep fpr | head -n 1 | awk -F ':' '{print $10}')
  450. monkeysphere-authentication add-identity-certifier $fpr
  451. monkeysphere-authentication update-users
  452. done
  453. }
  454. function restore_user_fin {
  455. if [[ $RESTORE_APP != 'all' ]]; then
  456. if [[ $RESTORE_APP != 'userfin' ]]; then
  457. return
  458. fi
  459. fi
  460. for d in $SERVER_DIRECTORY/backup/fin/*/ ; do
  461. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  462. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  463. if [ -d $SERVER_DIRECTORY/backup/fin/$USERNAME ]; then
  464. if [ ! -d /home/$USERNAME ]; then
  465. ${PROJECT_NAME}-adduser $USERNAME
  466. fi
  467. echo $"Restoring fin files for $USERNAME"
  468. temp_restore_dir=/root/tempfin
  469. restore_directory_from_friend $temp_restore_dir fin/$USERNAME
  470. cp -r $temp_restore_dir/home/$USERNAME/.fin /home/$USERNAME/
  471. if [ ! "$?" = "0" ]; then
  472. rm -rf $temp_restore_dir
  473. exit 664
  474. fi
  475. rm -rf $temp_restore_dir
  476. fi
  477. fi
  478. done
  479. }
  480. function restore_user_local {
  481. if [[ $RESTORE_APP != 'all' ]]; then
  482. if [[ $RESTORE_APP != 'userlocal' ]]; then
  483. return
  484. fi
  485. fi
  486. for d in $SERVER_DIRECTORY/backup/local/*/ ; do
  487. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  488. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  489. if [ -d $SERVER_DIRECTORY/backup/local/$USERNAME ]; then
  490. if [ ! -d /home/$USERNAME ]; then
  491. ${PROJECT_NAME}-adduser $USERNAME
  492. fi
  493. echo $"Restoring local files for $USERNAME"
  494. temp_restore_dir=/root/templocal
  495. restore_directory_from_friend $temp_restore_dir local/$USERNAME
  496. cp -r $temp_restore_dir/home/$USERNAME/.local /home/$USERNAME/
  497. if [ ! "$?" = "0" ]; then
  498. rm -rf $temp_restore_dir
  499. exit 664
  500. fi
  501. rm -rf $temp_restore_dir
  502. fi
  503. fi
  504. done
  505. }
  506. function restore_certs {
  507. if [[ $RESTORE_APP != 'all' ]]; then
  508. if [[ $RESTORE_APP != 'certs' ]]; then
  509. return
  510. fi
  511. fi
  512. if [ -d $SERVER_DIRECTORY/backup/ssl ]; then
  513. echo $"Restoring certificates"
  514. restore_directory_from_friend /root/tempssl ssl
  515. cp -r /root/tempssl/etc/ssl/* /etc/ssl
  516. if [ ! "$?" = "0" ]; then
  517. exit 276
  518. fi
  519. rm -rf /root/tempssl
  520. update-ca-certificates
  521. # restore ownership
  522. if [ -f /etc/ssl/private/xmpp.key ]; then
  523. chown prosody:prosody /etc/ssl/private/xmpp.key
  524. chown prosody:prosody /etc/ssl/certs/xmpp.*
  525. fi
  526. if [ -d /etc/dovecot ]; then
  527. chown root:dovecot /etc/ssl/private/dovecot.*
  528. chown root:dovecot /etc/ssl/certs/dovecot.*
  529. fi
  530. if [ -f /etc/ssl/private/exim.key ]; then
  531. cp /etc/ssl/private/exim.key /etc/exim4
  532. cp /etc/ssl/certs/exim.crt /etc/exim4
  533. cp /etc/ssl/certs/exim.dhparam /etc/exim4
  534. chown root:Debian-exim /etc/exim4/exim.key /etc/exim4/exim.crt /etc/exim4/exim.dhparam
  535. chmod 640 /etc/exim4/exim.key /etc/exim4/exim.crt /etc/exim4/exim.dhparam
  536. fi
  537. if [ -f /etc/ssl/private/mumble.key ]; then
  538. if [ -d /var/lib/mumble-server ]; then
  539. cp /etc/ssl/certs/mumble.* /var/lib/mumble-server
  540. cp /etc/ssl/private/mumble.key /var/lib/mumble-server
  541. chown -R mumble-server:mumble-server /var/lib/mumble-server
  542. fi
  543. fi
  544. fi
  545. }
  546. function restore_personal_settings {
  547. if [[ $RESTORE_APP != 'all' ]]; then
  548. if [[ $RESTORE_APP != 'personal' ]]; then
  549. return
  550. fi
  551. fi
  552. for d in $SERVER_DIRECTORY/backup/personal/*/ ; do
  553. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  554. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  555. if [ -d $SERVER_DIRECTORY/backup/personal/$USERNAME ]; then
  556. if [ ! -d /home/$USERNAME ]; then
  557. ${PROJECT_NAME}-adduser $USERNAME
  558. fi
  559. echo $"Restoring personal settings for $USERNAME"
  560. temp_restore_dir=/root/temppersonal
  561. restore_directory_from_friend $temp_restore_dir personal/$USERNAME
  562. if [ -d /home/$USERNAME/personal ]; then
  563. rm -rf /home/$USERNAME/personal
  564. fi
  565. mv $temp_restore_dir/home/$USERNAME/personal /home/$USERNAME
  566. if [ ! "$?" = "0" ]; then
  567. exit 184
  568. fi
  569. rm -rf $temp_restore_dir
  570. fi
  571. fi
  572. done
  573. }
  574. function restore_mailing_list {
  575. if [[ $RESTORE_APP != 'all' ]]; then
  576. if [[ $RESTORE_APP != 'mailinglist' ]]; then
  577. return
  578. fi
  579. fi
  580. if [ -d /var/spool/mlmmj ]; then
  581. echo $"Restoring public mailing list"
  582. temp_restore_dir=/root/tempmailinglist
  583. restore_directory_from_friend $temp_restore_dir mailinglist
  584. cp -r $temp_restore_dir/root/spool/mlmmj/* /var/spool/mlmmj
  585. if [ ! "$?" = "0" ]; then
  586. exit 526
  587. fi
  588. rm -rf $temp_restore_dir
  589. fi
  590. }
  591. function restore_email {
  592. if [[ $RESTORE_APP != 'all' ]]; then
  593. if [[ $RESTORE_APP != 'email' ]]; then
  594. return
  595. fi
  596. fi
  597. for d in $SERVER_DIRECTORY/backup/mail/*/ ; do
  598. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  599. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  600. if [ -d $SERVER_DIRECTORY/backup/mail/$USERNAME ]; then
  601. if [ ! -d /home/$USERNAME ]; then
  602. ${PROJECT_NAME}-adduser $USERNAME
  603. fi
  604. echo $"Restoring emails for $USERNAME"
  605. temp_restore_dir=/root/tempmail
  606. restore_directory_from_friend $temp_restore_dir mail/$USERNAME
  607. if [ ! -d /home/$USERNAME/Maildir ]; then
  608. mkdir /home/$USERNAME/Maildir
  609. fi
  610. tar -xzvf $temp_restore_dir/root/tempbackupemail/$USERNAME/maildir.tar.gz -C /
  611. if [ ! "$?" = "0" ]; then
  612. exit 927
  613. fi
  614. rm -rf $temp_restore_dir
  615. fi
  616. fi
  617. done
  618. }
  619. # Social key management
  620. # Recover any key fragments and reconstruct the gpg key
  621. ${PROJECT_NAME}-recoverkey -u ${ADMIN_USERNAME} -l $BACKUP_LIST
  622. copy_gpg_keys
  623. restore_blocklist
  624. restore_configfiles
  625. restore_passwordstore
  626. restore_mariadb
  627. restore_letsencrypt
  628. restore_mutt_settings
  629. restore_gpg
  630. restore_procmail
  631. restore_spamassassin
  632. restore_admin_readme
  633. restore_ssh_keys
  634. restore_user_config
  635. restore_user_monkeysphere
  636. restore_user_fin
  637. restore_user_local
  638. restore_certs
  639. restore_personal_settings
  640. restore_mailing_list
  641. restore_email
  642. restore_apps remote
  643. set_user_permissions
  644. update_default_domain
  645. # ensure that all TLS certificates are pinned
  646. #${PROJECT_NAME}-pin-cert all
  647. echo $"*** Remote restore was successful ***"
  648. exit 0