freedombone-app-irc 22KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695
  1. #!/bin/bash
  2. # _____ _ _
  3. # | __|___ ___ ___ _| |___ _____| |_ ___ ___ ___
  4. # | __| _| -_| -_| . | . | | . | . | | -_|
  5. # |__| |_| |___|___|___|___|_|_|_|___|___|_|_|___|
  6. #
  7. # Freedom in the Cloud
  8. #
  9. # IRC server application
  10. #
  11. # License
  12. # =======
  13. #
  14. # Copyright (C) 2014-2018 Bob Mottram <bob@freedombone.net>
  15. #
  16. # This program is free software: you can redistribute it and/or modify
  17. # it under the terms of the GNU Affero General Public License as published by
  18. # the Free Software Foundation, either version 3 of the License, or
  19. # (at your option) any later version.
  20. #
  21. # This program is distributed in the hope that it will be useful,
  22. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  23. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  24. # GNU Affero General Public License for more details.
  25. #
  26. # You should have received a copy of the GNU Affero General Public License
  27. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  28. VARIANTS='full full-vim chat'
  29. IN_DEFAULT_INSTALL=0
  30. SHOW_ON_ABOUT=1
  31. IRC_BOUNCER_PORT=6697
  32. IRC_ONION_PORT=8098
  33. IRC_PORT=6698
  34. # An optional password to log into IRC. This applies to all users
  35. IRC_PASSWORD=
  36. # Number of entries for the bouncer to buffer
  37. IRC_BUFFER_LENGTH=300
  38. IRC_SHORT_DESCRIPTION=$'IRC'
  39. IRC_DESCRIPTION=$'IRC'
  40. IRC_ICON_URL=
  41. IRC_MOBILE_APP_URL='https://f-droid.org/packages/org.yaaic'
  42. irc_variables=(MY_USERNAME
  43. MY_NAME
  44. IRC_PORT
  45. IRC_BOUNCER_PORT
  46. IRC_ONION_HOSTNAME
  47. IRC_OPERATOR_PASSWORD
  48. DEFAULT_DOMAIN_NAME
  49. INSTALLED_WITHIN_DOCKER
  50. IRC_BUFFER_LENGTH
  51. ONION_ONLY)
  52. function logging_on_irc {
  53. echo -n ''
  54. }
  55. function logging_off_irc {
  56. echo -n ''
  57. }
  58. function irc_get_global_password {
  59. grep "Password =" /etc/ngircd/ngircd.conf | head -n 1 | awk -F '=' '{print $2}'
  60. }
  61. function start_irc_bouncer {
  62. update_default_domain
  63. if [ ! -f /home/znc/.znc/znc.pem ]; then
  64. # no certificate exists
  65. su -c 'znc -p' - znc
  66. else
  67. # an existing certificate is being used
  68. su -c 'znc' - znc
  69. fi
  70. }
  71. function stop_irc_bouncer {
  72. pkill znc
  73. }
  74. function create_irssi_config {
  75. new_username="$1"
  76. read_config_param IRC_BOUNCER_PORT
  77. read_config_param IRC_ONION_PORT
  78. IRC_PASSWORD=$(irc_get_global_password)
  79. new_name="$2"
  80. if [ ${#new_name} -eq 0 ]; then
  81. new_name="$new_username"
  82. fi
  83. { echo 'servers = (';
  84. echo ' {';
  85. echo ' address = "chat.freenode.net";';
  86. echo ' chatnet = "Freenode";';
  87. echo ' port = "6667";';
  88. echo ' autoconnect = "no";';
  89. echo ' },';
  90. echo ' {';
  91. echo ' address = "irc.oftc.net";';
  92. echo ' chatnet = "OFTC";';
  93. echo ' port = "6667";';
  94. echo ' autoconnect = "no";';
  95. echo ' },';
  96. echo ' {';
  97. echo " address = \"127.0.0.1\";";
  98. echo ' ssl_verify = "no";'; } > "/home/${new_username}/.irssi/config"
  99. if [[ ${ONION_ONLY} == 'no' ]]; then
  100. echo ' use_ssl = "yes";' >> "/home/${new_username}/.irssi/config"
  101. echo " port = \"${IRC_BOUNCER_PORT}\";" >> "/home/${new_username}/.irssi/config"
  102. else
  103. echo ' use_ssl = "no";' >> "/home/${new_username}/.irssi/config"
  104. IRC_ONION_HOSTNAME=$(grep "irc onion domain" "${COMPLETION_FILE}" | head -n 1 | awk -F ':' '{print $2}')
  105. echo " port = \"${IRC_ONION_PORT}\";" >> "/home/${new_username}/.irssi/config"
  106. fi
  107. echo ' chatnet = "Freedombone";' >> "/home/${new_username}/.irssi/config"
  108. echo ' autoconnect = "yes";' >> "/home/${new_username}/.irssi/config"
  109. if [ "${IRC_PASSWORD}" ]; then
  110. echo " password = \"${IRC_PASSWORD}\";" >> "/home/${new_username}/.irssi/config"
  111. fi
  112. { echo ' }';
  113. echo ');';
  114. echo '';
  115. echo 'chatnets = {';
  116. echo ' Freedombone = {';
  117. echo ' type = "IRC";';
  118. echo ' max_kicks = "1";';
  119. echo ' max_msgs = "4";';
  120. echo ' max_whois = "1";';
  121. echo ' };';
  122. echo ' Freenode = {';
  123. echo ' type = "IRC";';
  124. echo ' max_kicks = "1";';
  125. echo ' max_msgs = "4";';
  126. echo ' max_whois = "1";';
  127. echo ' };';
  128. echo ' OFTC = {';
  129. echo ' type = "IRC";';
  130. echo ' max_kicks = "1";';
  131. echo ' max_msgs = "1";';
  132. echo ' max_whois = "1";';
  133. echo ' };';
  134. echo '};';
  135. echo '';
  136. echo 'channels = (';
  137. echo ' { name = "#freedombone"; chatnet = "Freedombone"; autojoin = "Yes"; },';
  138. echo ');';
  139. echo '';
  140. echo 'settings = {';
  141. echo " core = { real_name = \"$new_name\"; user_name = \"$new_username\"; nick = \"$new_username\"; };";
  142. echo ' "fe-text" = { actlist_sort = "refnum"; };';
  143. echo '};';
  144. echo 'ignores = ( { level = "CTCPS"; } );'; } >> "/home/${new_username}/.irssi/config"
  145. chown -R "${new_username}":"${new_username}" "/home/${new_username}/.irssi"
  146. }
  147. function remove_user_irc_bouncer {
  148. remove_username="$1"
  149. if [ -f /home/znc/.znc/configs/znc.conf ]; then
  150. stop_irc_bouncer
  151. sed -i "/<User ${remove_username}>/,/</User>/d" /home/znc/.znc/configs/znc.conf
  152. start_irc_bouncer
  153. fi
  154. }
  155. function remove_user_irc {
  156. remove_username="$1"
  157. "${PROJECT_NAME}-pass" -u "$remove_username" --rmapp irc
  158. remove_user_irc_bouncer "${remove_username}"
  159. if [ -d "/home/${remove_username}/.irssi" ]; then
  160. rm -rf "/home/${remove_username}/.irssi"
  161. fi
  162. if [ -d "/home/${remove_username}/irclogs" ]; then
  163. rm -rf "/home/${remove_username}/irclogs"
  164. fi
  165. }
  166. function irc_set_global_password_base {
  167. NEW_IRC_PASSWORD="$1"
  168. EXISTING_IRC_PASSWORD=$(irc_get_global_password)
  169. sed -i "0,/RE/s/Password =.*/Password =$NEW_IRC_PASSWORD/" /etc/ngircd/ngircd.conf
  170. # replace the password for all users
  171. for d in /home/*/ ; do
  172. IRC_USERNAME=$(echo "$d" | awk -F '/' '{print $3}')
  173. if [[ $(is_valid_user "$IRC_USERNAME") == "1" ]]; then
  174. if [ -f "/home/${IRC_USERNAME}/.irssi/config" ]; then
  175. sed -i "s|$EXISTING_IRC_PASSWORD|$NEW_IRC_PASSWORD|g" "/home/${IRC_USERNAME}/.irssi/config"
  176. chown -R "${IRC_USERNAME}":"${IRC_USERNAME}" "/home/${IRC_USERNAME}/.irssi"
  177. fi
  178. fi
  179. done
  180. read_config_param DEFAULT_DOMAIN_NAME
  181. read_config_param IRC_PORT
  182. read_config_param MY_USERNAME
  183. stop_irc_bouncer
  184. sleep 2
  185. # change the hashes. There are multiple users, but since we're using a global
  186. # password this doesn't matter
  187. ZNC_SALT="$(dd if=/dev/urandom bs=16c count=1 | md5sum | awk -F ' ' '{print $1}' | cut -c1-20)"
  188. new_user_hash=$(echo -n "${NEW_IRC_PASSWORD}${ZNC_SALT}" | sha256sum | awk -F ' ' '{print $1}')
  189. sed -i "s|Hash = .*|Hash = ${new_user_hash}|g" /home/znc/.znc/configs/znc.conf
  190. sed -i "s|Salt = .*|Salt = ${ZNC_SALT}|g" /home/znc/.znc/configs/znc.conf
  191. # change the server password
  192. sed -i "s|Server = 127.0.0.1.*|Server = 127.0.0.1 ${IRC_PORT} ${NEW_IRC_PASSWORD}|g" /home/znc/.znc/configs/znc.conf
  193. # Update the password
  194. "${PROJECT_NAME}-pass" -u "$MY_USERNAME" -a irc -p "$NEW_IRC_PASSWORD"
  195. # matrix bridge to irc
  196. if [ -f "$INSTALL_DIR/matrix_irc_bridge/config.yaml" ]; then
  197. sed -i "s|password: .*|password: \"$NEW_IRC_PASSWORD\"|g" "$INSTALL_DIR/matrix_irc_bridge/config.yaml"
  198. systemctl restart matrix_irc_bridge
  199. fi
  200. write_config_param "IRC_PASSWORD" "$NEW_IRC_PASSWORD"
  201. # restart the daemon for the new password to take effect
  202. systemctl restart ngircd
  203. start_irc_bouncer
  204. }
  205. function change_password_irc {
  206. new_global_password="$2"
  207. set_password_for_all_users irc "$new_global_password"
  208. irc_set_global_password_base "$new_global_password"
  209. }
  210. function add_user_irc_bouncer {
  211. new_username="$1"
  212. new_user_password=$(irc_get_global_password)
  213. IRC_PASSWORD="$new_user_password"
  214. is_admin='true'
  215. if [ ! "$3" ]; then
  216. is_admin='false'
  217. fi
  218. if [[ $(is_valid_user "$new_username") == "0" ]]; then
  219. return
  220. fi
  221. read_config_param IRC_PORT
  222. read_config_param DEFAULT_DOMAIN_NAME
  223. "${PROJECT_NAME}-pass" -u "$new_username" -a irc -p "$new_user_password"
  224. stop_irc_bouncer
  225. ZNC_SALT="$(dd if=/dev/urandom bs=16c count=1 | md5sum | awk -F ' ' '{print $1}' | cut -c1-20)"
  226. new_user_hash=$(echo -n "${new_user_password}${ZNC_SALT}" | sha256sum | awk -F ' ' '{print $1}')
  227. if grep -q "<User ${new_username}>" /home/znc/.znc/configs/znc.conf; then
  228. # user already exists
  229. sed -i "s|Hash = .*|Hash = ${new_user_hash}|g" /home/znc/.znc/configs/znc.conf
  230. sed -i "s|Salt = .*|Salt = ${ZNC_SALT}|g" /home/znc/.znc/configs/znc.conf
  231. return
  232. fi
  233. { echo "<User ${new_username}>";
  234. echo " Admin = ${is_admin}";
  235. echo " AltNick = ${new_username}_";
  236. echo ' AppendTimestamp = false';
  237. echo ' AutoClearChanBuffer = true';
  238. echo ' AutoClearQueryBuffer = true';
  239. echo " Buffer = ${IRC_BUFFER_LENGTH}";
  240. echo ' DenyLoadMod = false';
  241. echo ' DenySetBindHost = false';
  242. echo " Ident = ${new_username}";
  243. echo ' JoinTries = 10';
  244. echo ' LoadModule = chansaver';
  245. echo ' LoadModule = controlpanel';
  246. echo ' MaxJoins = 10';
  247. echo ' MaxNetworks = 10';
  248. echo ' MaxQueryBuffers = 50';
  249. echo ' MultiClients = true';
  250. echo " Nick = ${new_username}";
  251. echo ' PrependTimestamp = true';
  252. echo ' QuitMsg = Bye';
  253. echo " RealName = ${new_username}";
  254. echo ' StatusPrefix = *';
  255. echo ' TimestampFormat = [%H:%M:%S]';
  256. echo '';
  257. echo " <Network ${PROJECT_NAME}>";
  258. echo ' LoadModule = chansaver';
  259. echo ' LoadModule = simple_away';
  260. echo '';
  261. echo " Server = 127.0.0.1 ${IRC_PORT} ${IRC_PASSWORD}";
  262. echo '';
  263. echo " <Chan #${PROJECT_NAME}>";
  264. echo ' </Chan>';
  265. echo ' </Network>';
  266. echo '';
  267. echo ' <Network oftc>';
  268. echo ' LoadModule = chansaver';
  269. echo ' LoadModule = simple_away';
  270. echo ' FloodBurst = 4';
  271. echo ' FloodRate = 1.00';
  272. echo ' IRCConnectEnabled = true';
  273. echo ' Server = irc.oftc.net 6697';
  274. echo ' </Network>';
  275. echo '';
  276. echo ' <Network freenode>';
  277. echo ' LoadModule = chansaver';
  278. echo ' LoadModule = simple_away';
  279. echo ' FloodBurst = 4';
  280. echo ' FloodRate = 1.00';
  281. echo ' IRCConnectEnabled = true';
  282. echo ' Server = irc.freenode.net 6697';
  283. echo ' </Network>';
  284. echo '';
  285. echo ' <Pass password>';
  286. echo " Hash = ${new_user_hash}";
  287. echo ' Method = sha256';
  288. echo " Salt = ${ZNC_SALT}";
  289. echo ' </Pass>';
  290. echo '</User>'; } >> /home/znc/.znc/configs/znc.conf
  291. mkdir -p "/home/znc/.znc/users/${new_username}/moddata"
  292. mkdir -p "/home/znc/.znc/users/${new_username}/networks"
  293. mkdir "/home/znc/.znc/users/${new_username}/moddata/chanserver"
  294. mkdir "/home/znc/.znc/users/${new_username}/moddata/controlpanel"
  295. mkdir "/home/znc/.znc/users/${new_username}/moddata/perform"
  296. mkdir "/home/znc/.znc/users/${new_username}/moddata/webadmin"
  297. mkdir -p "/home/znc/.znc/users/${new_username}/networks/${PROJECT_NAME}/moddata/chansaver"
  298. mkdir -p "/home/znc/.znc/users/${new_username}/networks/${PROJECT_NAME}/moddata/simple_away"
  299. mkdir -p /home/znc/.znc/moddata/webadmin
  300. chown -R znc:znc /home/znc/.znc
  301. start_irc_bouncer
  302. }
  303. function add_user_irc {
  304. new_username="$1"
  305. new_user_password="$2"
  306. IRC_PASSWORD=$(irc_get_global_password)
  307. if [ ${#IRC_PASSWORD} -lt 2 ]; then
  308. IRC_PASSWORD=
  309. fi
  310. if [ ! -d "/home/${new_username}/.irssi" ]; then
  311. mkdir "/home/${new_username}/.irssi"
  312. fi
  313. create_irssi_config "${new_username}"
  314. add_user_irc_bouncer "${new_username}" "${IRC_PASSWORD}"
  315. echo '0'
  316. }
  317. function run_client_irc {
  318. irssi
  319. }
  320. function irc_show_password {
  321. IRC_PASSWORD=$(irc_get_global_password)
  322. dialog --title $"IRC Password" \
  323. --msgbox "$IRC_PASSWORD" 6 40
  324. }
  325. function irc_set_global_password {
  326. EXISTING_IRC_PASSWORD=$(irc_get_global_password)
  327. data=$(mktemp 2>/dev/null)
  328. dialog --title $"IRC Password" \
  329. --clear \
  330. --backtitle $"Freedombone Control Panel" \
  331. --passwordbox $"Password for all IRC users, or press Enter for no password" 10 60 "$EXISTING_IRC_PASSWORD" 2> "$data"
  332. sel=$?
  333. case $sel in
  334. 0)
  335. NEW_IRC_PASSWORD=$(<"$data")
  336. irc_set_global_password_base "$NEW_IRC_PASSWORD"
  337. dialog --title $"IRC Password" \
  338. --msgbox $"The IRC password was changed" 6 40
  339. ;;
  340. esac
  341. rm -f "$data"
  342. }
  343. function configure_interactive_irc {
  344. if [ ! -d /etc/ngircd ]; then
  345. dialog --title $"IRC Menu" \
  346. --msgbox $"No IRC server is installed" 6 70
  347. return
  348. fi
  349. W=(1 $"Set a password for all IRC users"
  350. 2 $"Show current IRC login password")
  351. while true
  352. do
  353. # shellcheck disable=SC2068
  354. selection=$(dialog --backtitle $"Freedombone Administrator Control Panel" --title $"IRC" --menu $"Choose an operation, or ESC to exit:" 10 60 2 "${W[@]}" 3>&2 2>&1 1>&3)
  355. if [ ! "$selection" ]; then
  356. break
  357. fi
  358. case $selection in
  359. 1) irc_set_global_password;;
  360. 2) irc_show_password;;
  361. esac
  362. done
  363. }
  364. function install_interactive_irc {
  365. echo -n ''
  366. APP_INSTALLED=1
  367. }
  368. function reconfigure_irc {
  369. echo -n ''
  370. }
  371. function upgrade_irc {
  372. echo -n ''
  373. }
  374. function backup_local_irc {
  375. echo -n ''
  376. }
  377. function restore_local_irc {
  378. echo -n ''
  379. }
  380. function backup_remote_irc {
  381. echo -n ''
  382. }
  383. function restore_remote_irc {
  384. echo -n ''
  385. }
  386. function remove_irc {
  387. remove_watchdog_daemon ngircd
  388. systemctl stop ngircd
  389. apt-get -yq remove --purge ngircd
  390. apt-get -yq remove --purge irssi
  391. if [ -d /etc/ngircd ]; then
  392. rm -rf /etc/ngircd
  393. fi
  394. iptables -D INPUT -p tcp --dport 1024:65535 --sport ${IRC_BOUNCER_PORT} -j ACCEPT
  395. function_check save_firewall_settings
  396. save_firewall_settings
  397. firewall_remove ${IRC_BOUNCER_PORT} tcp
  398. function_check remove_onion_service
  399. remove_onion_service irc ${IRC_ONION_PORT}
  400. remove_completion_param install_irc
  401. remove_completion_param configure_firewall_for_irc
  402. sed -i '/IRC /d' "${COMPLETION_FILE}"
  403. sed -i '/znc 2> /d' /etc/crontab
  404. stop_irc_bouncer
  405. if [ -d /home/znc ]; then
  406. userdel -r znc
  407. fi
  408. if [ -d /var/run/ircd ]; then
  409. rm -rf /var/run/ircd
  410. fi
  411. }
  412. function configure_firewall_for_irc {
  413. if [ ! -d /etc/ngircd ]; then
  414. return
  415. fi
  416. if [[ $(is_completed "${FUNCNAME[0]}") == "1" ]]; then
  417. return
  418. fi
  419. if [[ ${INSTALLED_WITHIN_DOCKER} == "yes" ]]; then
  420. # docker does its own firewalling
  421. return
  422. fi
  423. if [[ ${ONION_ONLY} != "no" ]]; then
  424. return
  425. fi
  426. iptables -I INPUT -p tcp --dport 1024:65535 --sport ${IRC_BOUNCER_PORT} -j ACCEPT
  427. function_check save_firewall_settings
  428. save_firewall_settings
  429. firewall_add IRC ${IRC_BOUNCER_PORT} tcp
  430. echo 'configure_firewall_for_irc' >> "${COMPLETION_FILE}"
  431. }
  432. function install_irc_server {
  433. if [[ $(app_is_installed irc_server) == "1" ]]; then
  434. return
  435. fi
  436. apt-get -yq install ngircd
  437. if [ ! -d /etc/ngircd ]; then
  438. echo $"ERROR: ngircd does not appear to have installed. $CHECK_MESSAGE"
  439. exit 53
  440. fi
  441. # obtain a cert for the default domain
  442. if [[ "$(cert_exists "${DEFAULT_DOMAIN_NAME}" pem)" == "0" ]]; then
  443. echo $'Obtaining certificate for the main domain'
  444. create_site_certificate "${DEFAULT_DOMAIN_NAME}" 'yes'
  445. fi
  446. if [[ "$(cert_exists "${DEFAULT_DOMAIN_NAME}")" == "0" ]]; then
  447. "${PROJECT_NAME}-addcert" -h ngircd --dhkey "${DH_KEYLENGTH}"
  448. function_check check_certificates
  449. CHECK_HOSTNAME=ngircd
  450. check_certificates ngircd
  451. fi
  452. DEFAULTDOMAIN=${DEFAULT_DOMAIN_NAME}
  453. IRC_PASSWORD="$(create_password "${MINIMUM_PASSWORD_LENGTH}")"
  454. set_password_for_all_users irc "$IRC_PASSWORD"
  455. { echo '**************************************************';
  456. echo $'* F R E E D O M B O N E I R C *';
  457. echo '* *';
  458. echo $'* Freedom in the Cloud *';
  459. echo '**************************************************'; } > /etc/ngircd/motd
  460. sed -i 's|MotdFile = /etc/ngircd/ngircd.motd|MotdFile = /etc/ngircd/motd|g' /etc/ngircd/ngircd.conf
  461. sed -i "s/irc@irc.example.com/$MY_EMAIL_ADDRESS/g" /etc/ngircd/ngircd.conf
  462. sed -i "s/irc.example.net/$DEFAULTDOMAIN/g" /etc/ngircd/ngircd.conf
  463. sed -i "s|Yet another IRC Server running on Debian GNU/Linux|IRC Server of $DEFAULTDOMAIN|g" /etc/ngircd/ngircd.conf
  464. sed -i 's/;Password = wealllikedebian/Password =/g' /etc/ngircd/ngircd.conf
  465. sed -i "s/;Ports =.*/Ports = ${IRC_PORT}/g" /etc/ngircd/ngircd.conf
  466. if [[ $ONION_ONLY == 'no' ]]; then
  467. if [ -f "/etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem" ]; then
  468. sed -i "s|;CertFile = /etc/ssl/certs/server.crt|CertFile = /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem|g" /etc/ngircd/ngircd.conf
  469. else
  470. sed -i "s|;CertFile = /etc/ssl/certs/server.crt|CertFile = /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.crt|g" /etc/ngircd/ngircd.conf
  471. fi
  472. sed -i "s|;DHFile = /etc/ngircd/dhparams.pem|DHFile = /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.dhparam|g" /etc/ngircd/ngircd.conf
  473. sed -i "s|;KeyFile = /etc/ssl/private/server.key|KeyFile = /etc/ssl/private/${DEFAULT_DOMAIN_NAME}.key|g" /etc/ngircd/ngircd.conf
  474. sed -i "s/;Ports =.*/Ports = ${IRC_PORT}/2" /etc/ngircd/ngircd.conf
  475. else
  476. sed -i 's|;SSLConnect.*|SSLConnect = no|g'
  477. # comment out the second Ports entry
  478. if ! grep -q ";Ports =" /etc/ngircd/ngircd.conf; then
  479. sed -i '0,/Ports =/! s/Ports =/;Ports =/' /etc/ngircd/ngircd.conf
  480. fi
  481. fi
  482. sed -i "s/;Name = #ngircd/Name = #${PROJECT_NAME}/g" /etc/ngircd/ngircd.conf
  483. sed -i "s/;Topic = Our ngircd testing channel/Topic = ${PROJECT_NAME} chat channel/g" /etc/ngircd/ngircd.conf
  484. sed -i 's/;MaxUsers = 23/MaxUsers = 23/g' /etc/ngircd/ngircd.conf
  485. sed -i "s|;KeyFile = /etc/ngircd/#chan.key|KeyFile = /etc/ngircd/${PROJECT_NAME}.key|g" /etc/ngircd/ngircd.conf
  486. sed -i "s/;CloakHost = cloaked.host/CloakHost = ${PROJECT_NAME}/g" /etc/ngircd/ngircd.conf
  487. IRC_SALT="$(create_password 30)"
  488. if [ -f "${IMAGE_PASSWORD_FILE}" ]; then
  489. IRC_OPERATOR_PASSWORD="$(printf "%s" "$(cat "$IMAGE_PASSWORD_FILE")")"
  490. else
  491. IRC_OPERATOR_PASSWORD="$(create_password "${MINIMUM_PASSWORD_LENGTH}")"
  492. fi
  493. sed -i "s|;CloakHostSalt = abcdefghijklmnopqrstuvwxyz|CloakHostSalt = $IRC_SALT|g" /etc/ngircd/ngircd.conf
  494. sed -i 's/;ConnectIPv4 = yes/ConnectIPv4 = yes/g' /etc/ngircd/ngircd.conf
  495. sed -i 's/;MorePrivacy = no/MorePrivacy = yes/g' /etc/ngircd/ngircd.conf
  496. sed -i 's/;RequireAuthPing = no/RequireAuthPing = no/g' /etc/ngircd/ngircd.conf
  497. sed -i "s/;Name = TheOper/Name = $MY_USERNAME/g" /etc/ngircd/ngircd.conf
  498. sed -i "s/;Password = ThePwd/Password = $IRC_OPERATOR_PASSWORD/g" /etc/ngircd/ngircd.conf
  499. sed -i 's|;Listen =.*|Listen = 0.0.0.0,0.0.0.0:9050,127.0.0.1,127.0.0.1:9050|g' /etc/ngircd/ngircd.conf
  500. if [ "${IRC_PASSWORD}" ]; then
  501. sed -i "0,/RE/s/Password =.*/Password =$IRC_PASSWORD/" /etc/ngircd/ngircd.conf
  502. fi
  503. # upgrade a cypher
  504. sed -i 's|SECURE128|SECURE256|g' /etc/ngircd/ngircd.conf
  505. mkdir /var/run/ircd
  506. chown -R irc:irc /var/run/ircd
  507. mkdir /var/run/ngircd
  508. touch /var/run/ngircd/ngircd.pid
  509. chown -R irc:irc /var/run/ngircd
  510. # shellcheck disable=SC2034
  511. IRC_ONION_HOSTNAME=$(add_onion_service irc "${IRC_BOUNCER_PORT}" "${IRC_ONION_PORT}")
  512. if [ ! -d /var/run/ircd ]; then
  513. mkdir /var/run/ircd
  514. chown -R irc:irc /var/run/ircd
  515. fi
  516. chmod 600 /etc/ngircd/ngircd.conf
  517. systemctl restart ngircd
  518. add_watchdog_daemon ngircd
  519. function_check configure_firewall_for_irc
  520. configure_firewall_for_irc
  521. install_completed irc_server
  522. }
  523. function install_irc_client {
  524. if [[ $(app_is_installed irc_client) == "1" ]]; then
  525. return
  526. fi
  527. apt-get -yq install irssi
  528. if [ ! -d "/home/${MY_USERNAME}/.irssi" ]; then
  529. mkdir "/home/${MY_USERNAME}/.irssi"
  530. fi
  531. create_irssi_config "${MY_USERNAME}" "$MY_NAME"
  532. install_completed irc_client
  533. }
  534. function install_irc_bouncer {
  535. if [[ $(app_is_installed irc_bouncer) == "1" ]]; then
  536. return
  537. fi
  538. apt-get -yq install znc
  539. adduser --disabled-login --gecos 'znc' znc
  540. if [ ! -d /home/znc ]; then
  541. echo $"/home/znc directory not created"
  542. exit 7354262
  543. fi
  544. mkdir -p /home/znc/.znc/configs
  545. mkdir -p /home/znc/.znc/users
  546. { echo 'AnonIPLimit = 10';
  547. echo 'ConnectDelay = 5';
  548. echo 'HideVersion = false';
  549. echo 'MaxBufferSize = 500';
  550. echo 'ProtectWebSessions = true';
  551. echo 'SSLCertFile = /home/znc/.znc/znc.pem';
  552. echo 'ServerThrottle = 30';
  553. echo 'Version = 1.6.2';
  554. echo '';
  555. echo '<Listener listener0>';
  556. echo ' AllowIRC = true';
  557. echo ' AllowWeb = false';
  558. echo ' IPv4 = true';
  559. echo ' IPv6 = true';
  560. echo ' Port = 6697'; } > /home/znc/.znc/configs/znc.conf
  561. if [[ "${ONION_ONLY}" == 'no' ]]; then
  562. echo ' SSL = true' >> /home/znc/.znc/configs/znc.conf
  563. else
  564. echo ' SSL = false' >> /home/znc/.znc/configs/znc.conf
  565. fi
  566. { echo ' URIPrefix = /';
  567. echo '</Listener>';
  568. echo ''; } >> /home/znc/.znc/configs/znc.conf
  569. if [ $IRC_PORT -ne $IRC_ONION_PORT ]; then
  570. { echo '<Listener listener1>';
  571. echo ' AllowIRC = true';
  572. echo ' AllowWeb = false';
  573. echo ' IPv4 = true';
  574. echo ' IPv6 = true';
  575. echo " Port = ${IRC_ONION_PORT}";
  576. echo ' SSL = false';
  577. echo ' URIPrefix = /';
  578. echo '</Listener>';
  579. echo ''; } >> /home/znc/.znc/configs/znc.conf
  580. fi
  581. chown -R znc:znc /home/znc/.znc
  582. add_user_irc_bouncer "${MY_USERNAME}" "${IRC_PASSWORD}" true
  583. # certificate for use with SSL
  584. start_irc_bouncer
  585. function_check cron_add_mins
  586. cron_add_mins 10 "/usr/bin/znc 2> /dev/null" znc
  587. install_completed irc_bouncer
  588. }
  589. function install_irc {
  590. install_irc_server
  591. install_irc_client
  592. install_irc_bouncer
  593. APP_INSTALLED=1
  594. }
  595. # NOTE: deliberately no exit 0