freedombone-app-xmpp 24KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # XMPP functions
  12. #
  13. # License
  14. # =======
  15. #
  16. # Copyright (C) 2014-2016 Bob Mottram <bob@freedombone.net>
  17. #
  18. # This program is free software: you can redistribute it and/or modify
  19. # it under the terms of the GNU Affero General Public License as published by
  20. # the Free Software Foundation, either version 3 of the License, or
  21. # (at your option) any later version.
  22. #
  23. # This program is distributed in the hope that it will be useful,
  24. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  25. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  26. # GNU Affero General Public License for more details.
  27. #
  28. # You should have received a copy of the GNU Affero General Public License
  29. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  30. VARIANTS='full full-vim chat'
  31. IN_DEFAULT_INSTALL=0
  32. SHOW_ON_ABOUT=1
  33. # Directory where XMPP settings are stored
  34. XMPP_DIRECTORY="/var/lib/prosody"
  35. XMPP_PASSWORD=
  36. XMPP_CIPHERS='"EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA"'
  37. XMPP_ECC_CURVE='"secp384r1"'
  38. xmpp_variables=(ONION_ONLY
  39. INSTALLED_WITHIN_DOCKER
  40. XMPP_CIPHERS
  41. XMPP_ECC_CURVE
  42. XMPP_ECC_CURVE
  43. MY_USERNAME
  44. DEFAULT_DOMAIN_NAME
  45. XMPP_DOMAIN_CODE)
  46. function remove_user_xmpp {
  47. remove_username="$1"
  48. ${PROJECT_NAME}-pass -u $remove_username --rmapp xmpp
  49. ${PROJECT_NAME}-rmxmpp -e "${remove_username}@$HOSTNAME"
  50. }
  51. function add_user_xmpp {
  52. new_username="$1"
  53. new_user_password="$2"
  54. ${PROJECT_NAME}-pass -u $new_username -a xmpp -p "$new_user_password"
  55. ${PROJECT_NAME}-addxmpp -e "$new_username@$HOSTNAME" -p "$new_user_password"
  56. if [ ! "$?" = "0" ]; then
  57. echo '1'
  58. return
  59. fi
  60. XMPP_CLIENT_DIR=/home/$new_username/.local/share/profanity
  61. XMPP_CLIENT_ACCOUNTS=$XMPP_CLIENT_DIR/accounts
  62. if [ ! -d $XMPP_CLIENT_DIR ]; then
  63. mkdir -p $XMPP_CLIENT_DIR
  64. fi
  65. if [ ! -d /home/$new_username/.config/profanity ]; then
  66. mkdir -p /home/$new_username/.config/profanity
  67. fi
  68. echo "[${new_username}@${HOSTNAME}]" > $XMPP_CLIENT_ACCOUNTS
  69. echo 'enabled=true' >> $XMPP_CLIENT_ACCOUNTS
  70. echo "jid=${new_username}@${HOSTNAME}" >> $XMPP_CLIENT_ACCOUNTS
  71. echo 'resource=profanity' >> $XMPP_CLIENT_ACCOUNTS
  72. echo "muc.service=conference.${HOSTNAME}" >> $XMPP_CLIENT_ACCOUNTS
  73. echo "muc.nick=${new_username}" >> $XMPP_CLIENT_ACCOUNTS
  74. echo 'presence.last=online' >> $XMPP_CLIENT_ACCOUNTS
  75. echo 'presence.login=online' >> $XMPP_CLIENT_ACCOUNTS
  76. echo 'priority.online=0' >> $XMPP_CLIENT_ACCOUNTS
  77. echo 'priority.chat=0' >> $XMPP_CLIENT_ACCOUNTS
  78. echo 'priority.away=0' >> $XMPP_CLIENT_ACCOUNTS
  79. echo 'priority.xa=0' >> $XMPP_CLIENT_ACCOUNTS
  80. echo 'priority.dnd=0' >> $XMPP_CLIENT_ACCOUNTS
  81. echo '[connection]' > /home/$new_username/.config/profanity/profrc
  82. echo "account=${new_username}@${HOSTNAME}" >> /home/$new_username/.config/profanity/profrc
  83. chown -R $new_username:$new_username /home/$new_username/.local
  84. chown -R $new_username:$new_username /home/$new_username/.config
  85. echo '0'
  86. }
  87. function run_client_xmpp {
  88. torify profanity
  89. }
  90. function install_interactive_xmpp {
  91. echo -n ''
  92. APP_INSTALLED=1
  93. }
  94. function change_password_xmpp {
  95. curr_username="$1"
  96. new_user_password="$2"
  97. read_config_param DEFAULT_DOMAIN_NAME
  98. ${PROJECT_NAME}-pass -u $curr_username -a xmpp -p "$new_user_password"
  99. # TODO: this is currently interactive. Really there needs to be a
  100. # non-interactive password change option for prosodyctl
  101. clear
  102. echo ''
  103. echo $'Currently Prosody requires password changes to be done interactively'
  104. prosodyctl passwd ${curr_username}@${DEFAULT_DOMAIN_NAME}
  105. }
  106. function reconfigure_xmpp {
  107. echo -n ''
  108. }
  109. function update_prosody_modules {
  110. if [ ! -d $INSTALL_DIR/prosody-modules ]; then
  111. return
  112. fi
  113. if [ ! -d /usr/lib/prosody ]; then
  114. return
  115. fi
  116. cd $INSTALL_DIR/prosody-modules
  117. hg pull
  118. hg update
  119. # support onion addresses
  120. if [ -f $INSTALL_DIR/prosody-modules/mod_onions/mod_onions.lua ]; then
  121. cp $INSTALL_DIR/prosody-modules/mod_onions/mod_onions.lua /usr/lib/prosody/modules/mod_onions.lua
  122. fi
  123. # XEP-0313 message archive management
  124. # https://modules.prosody.im/mod_mam.html
  125. # Allows you to download your previous messages onto a new client
  126. # This only applies if you are not using forward secret crypto
  127. # such as OTR or OMEMO (eg. OpenPGP)
  128. if [ -d $INSTALL_DIR/prosody-modules/mod_mam ]; then
  129. cp $INSTALL_DIR/prosody-modules/mod_mam/*.lua /usr/lib/prosody/modules
  130. fi
  131. # XEP-0352 Client State Indication
  132. # Notifies the server if the app is in the background or not
  133. if [ -d $INSTALL_DIR/prosody-modules/mod_csi ]; then
  134. cp $INSTALL_DIR/prosody-modules/mod_csi/*.lua /usr/lib/prosody/modules
  135. fi
  136. # XEP-0280 Message Carbons
  137. # Ensures all messages get delivered to all clients (if you have a mobile and desktop client)
  138. if [ -d $INSTALL_DIR/prosody-modules/mod_carbons ]; then
  139. cp $INSTALL_DIR/prosody-modules/mod_carbons/*.lua /usr/lib/prosody/modules
  140. fi
  141. # XEP-0198 Stream management
  142. # Helps mobile apps recover when a device switches networks.
  143. if [ -d $INSTALL_DIR/prosody-modules/mod_smacks ]; then
  144. cp $INSTALL_DIR/prosody-modules/mod_smacks/*.lua /usr/lib/prosody/modules
  145. fi
  146. if [ -d $INSTALL_DIR/prosody-modules/mod_smacks_offline ]; then
  147. cp $INSTALL_DIR/prosody-modules/mod_smacks_offline/*.lua /usr/lib/prosody/modules
  148. fi
  149. # XEP-0191: blocking
  150. if [ -d $INSTALL_DIR/prosody-modules/mod_blocking ]; then
  151. cp $INSTALL_DIR/prosody-modules/mod_blocking/*.lua /usr/lib/prosody/modules
  152. fi
  153. # XEP-0016 Privacy lists
  154. if [ -d $INSTALL_DIR/prosody-modules/mod_privacy_lists ]; then
  155. cp $INSTALL_DIR/prosody-modules/mod_privacy_lists/*.lua /usr/lib/prosody/modules
  156. fi
  157. # If offline then send messages to email
  158. if [ -d $INSTALL_DIR/prosody-modules/mod_offline_email ]; then
  159. cp $INSTALL_DIR/prosody-modules/mod_offline_email/*.lua /usr/lib/prosody/modules
  160. fi
  161. }
  162. function upgrade_xmpp {
  163. function_check update_prosody_modules
  164. update_prosody_modules
  165. }
  166. function backup_local_xmpp {
  167. source_directory=/var/lib/prosody
  168. if [ -d $source_directory ]; then
  169. dest_directory=xmpp
  170. function_check backup_directory_to_usb
  171. backup_directory_to_usb $source_directory $dest_directory
  172. fi
  173. }
  174. function restore_local_xmpp {
  175. if [ -d /var/lib/prosody ]; then
  176. echo $"Restoring xmpp settings"
  177. temp_restore_dir=/root/tempxmpp
  178. function_check restore_directory_from_usb
  179. restore_directory_from_usb $temp_restore_dir xmpp
  180. cp -r $temp_restore_dir/var/lib/prosody/* /var/lib/prosody
  181. if [ ! "$?" = "0" ]; then
  182. function_check set_user_permissions
  183. set_user_permissions
  184. function_check backup_unmount_drive
  185. backup_unmount_drive
  186. exit 725
  187. fi
  188. rm -rf $temp_restore_dir
  189. service prosody restart
  190. chown -R prosody:prosody /var/lib/prosody/*
  191. echo $"Restore of xmpp settings complete"
  192. fi
  193. }
  194. function backup_remote_xmpp {
  195. if [ -d /var/lib/prosody ]; then
  196. echo $"Backing up the xmpp settings"
  197. backup_directory_to_friend /var/lib/prosody xmpp
  198. echo $"Backup of xmpp settings complete"
  199. fi
  200. }
  201. function restore_remote_xmpp {
  202. if [ -d /var/lib/prosody ]; then
  203. echo $"Restoring xmpp settings"
  204. temp_restore_dir=/root/tempxmpp
  205. function_check restore_directory_from_friend
  206. restore_directory_from_friend $temp_restore_dir xmpp
  207. cp -r $temp_restore_dir/var/lib/prosody/* /var/lib/prosody
  208. if [ ! "$?" = "0" ]; then
  209. exit 725
  210. fi
  211. rm -rf $temp_restore_dir
  212. service prosody restart
  213. chown -R prosody:prosody /var/lib/prosody/*
  214. echo $"Restore of xmpp settings complete"
  215. fi
  216. }
  217. function configure_firewall_for_xmpp {
  218. if [ ! -d /etc/prosody ]; then
  219. return
  220. fi
  221. if [[ $(is_completed $FUNCNAME) == "1" ]]; then
  222. return
  223. fi
  224. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  225. # docker does its own firewalling
  226. return
  227. fi
  228. if [[ $ONION_ONLY != "no" ]]; then
  229. return
  230. fi
  231. firewall_add XMPP 5222 tcp
  232. firewall_add XMPP 5223 tcp
  233. firewall_add XMPP 5269 tcp
  234. firewall_add XMPP 5280 tcp
  235. firewall_add XMPP 5281 tcp
  236. mark_completed $FUNCNAME
  237. }
  238. function remove_xmpp_client {
  239. apt-get -yq remove --purge profanity
  240. remove_completion_param install_xmpp_client
  241. remove_certs xmpp
  242. }
  243. function remove_xmpp {
  244. remove_xmpp_client
  245. firewall_remove 5222 tcp
  246. firewall_remove 5223 tcp
  247. firewall_remove 5269 tcp
  248. firewall_remove 5280 tcp
  249. firewall_remove 5281 tcp
  250. function_check remove_onion_service
  251. remove_onion_service xmpp 5222 5223 5269
  252. apt-get -yq remove --purge prosody prosody-modules
  253. if [ -d $INSTALL_DIR/prosody-modules ]; then
  254. rm -rf $INSTALL_DIR/prosody-modules
  255. fi
  256. if [ -d /etc/prosody ]; then
  257. rm -rf /etc/prosody
  258. fi
  259. if [ -d /var/lib/prosody ]; then
  260. rm -rf /var/lib/prosody
  261. fi
  262. remove_completion_param install_xmpp
  263. sed -i '/xmpp/d' $COMPLETION_FILE
  264. }
  265. function xmpp_email_headers {
  266. for d in /home/*/ ; do
  267. USERNAME=$(echo "$d" | awk -F '/' '{print $3}')
  268. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  269. if [ -f /home/$USERNAME/.muttrc ]; then
  270. if ! grep -q "Jabber-ID" /home/$USERNAME/.muttrc; then
  271. echo "my_hdr Jabber-ID: ${USERNAME}@${HOSTNAME}" >> /home/$USERNAME/.muttrc
  272. fi
  273. fi
  274. fi
  275. done
  276. }
  277. function install_xmpp_main {
  278. update_prosody_modules
  279. if [[ $(app_is_installed xmpp_main) == "1" ]]; then
  280. return
  281. fi
  282. if [[ $ONION_ONLY == 'no' ]]; then
  283. # obtain a cert for the default domain
  284. if [[ "$(cert_exists ${DEFAULT_DOMAIN_NAME} pem)" == "0" ]]; then
  285. echo $'Obtaining certificate for the main domain'
  286. create_site_certificate ${DEFAULT_DOMAIN_NAME} 'yes'
  287. fi
  288. fi
  289. apt-get -yq install lua-sec lua-bitop
  290. apt-get -yq install prosody prosody-modules mercurial
  291. if [ ! -d /etc/prosody ]; then
  292. echo $"ERROR: prosody does not appear to have installed. $CHECK_MESSAGE"
  293. exit 52367
  294. fi
  295. # obtain the prosody modules
  296. cd $INSTALL_DIR
  297. hg clone https://hg.prosody.im/prosody-modules/ prosody-modules
  298. if [ ! -d $INSTALL_DIR/prosody-modules/mod_onions ]; then
  299. echo $'mod_onions prosody module could not be found'
  300. exit 73254
  301. fi
  302. # install the onions module
  303. update_prosody_modules
  304. if [ ! -f /usr/lib/prosody/modules/mod_onions.lua ]; then
  305. echo $'mod_onions.lua could not be copied to the prosody modules directory'
  306. exit 63952
  307. fi
  308. # create a certificate
  309. if [[ "$(cert_exists ${DEFAULT_DOMAIN_NAME} pem)" == "0" ]]; then
  310. if [[ "$(cert_exists xmpp)" == "0" ]]; then
  311. ${PROJECT_NAME}-addcert -h xmpp --dhkey ${DH_KEYLENGTH}
  312. check_certificates xmpp
  313. fi
  314. fi
  315. groupadd default
  316. usermod -g default prosody
  317. chown root:default /etc/ssl/private/xmpp.*
  318. chown root:default /etc/ssl/certs/xmpp.*
  319. chown root:default /etc/ssl/private/${DEFAULT_DOMAIN_NAME}.*
  320. chown root:default /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.*
  321. cp -a /etc/prosody/conf.avail/example.com.cfg.lua /etc/prosody/conf.avail/xmpp.cfg.lua
  322. if [[ "$(cert_exists ${DEFAULT_DOMAIN_NAME} pem)" == "1" ]]; then
  323. sed -i "s|/etc/prosody/certs/example.com.key|/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.key|g" /etc/prosody/conf.avail/xmpp.cfg.lua
  324. sed -i "s|/etc/prosody/certs/example.com.crt|/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.pem|g" /etc/prosody/conf.avail/xmpp.cfg.lua
  325. else
  326. sed -i 's|/etc/prosody/certs/example.com.key|/etc/prosody/certs/xmpp.key|g' /etc/prosody/conf.avail/xmpp.cfg.lua
  327. sed -i 's|/etc/prosody/certs/example.com.crt|/etc/prosody/certs/xmpp.crt|g' /etc/prosody/conf.avail/xmpp.cfg.lua
  328. fi
  329. if ! grep -q "xmpp.dhparam" /etc/prosody/conf.avail/xmpp.cfg.lua; then
  330. if [[ "$(cert_exists ${DEFAULT_DOMAIN_NAME})" == "1" ]]; then
  331. sed -i "/certificate =/a\ dhparam = \"/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.dhparam\";" /etc/prosody/conf.avail/xmpp.cfg.lua
  332. else
  333. sed -i '/certificate =/a\ dhparam = "/etc/prosody/certs/xmpp.dhparam";' /etc/prosody/conf.avail/xmpp.cfg.lua
  334. fi
  335. fi
  336. if ! grep -q 'options = {"no_sslv2", "no_sslv3" }' /etc/prosody/conf.avail/xmpp.cfg.lua; then
  337. sed -i '/certificate =/a\ options = {"no_sslv2", "no_sslv3" };' /etc/prosody/conf.avail/xmpp.cfg.lua
  338. fi
  339. if ! grep -q 'ciphers =' /etc/prosody/conf.avail/xmpp.cfg.lua; then
  340. sed -i "/certificate =/a\ ciphers = $XMPP_CIPHERS;" /etc/prosody/conf.avail/xmpp.cfg.lua
  341. fi
  342. if ! grep -q 'depth = "1";' /etc/prosody/conf.avail/xmpp.cfg.lua; then
  343. sed -i '/certificate =/a\ depth = "1";' /etc/prosody/conf.avail/xmpp.cfg.lua
  344. fi
  345. if ! grep -q 'curve =' /etc/prosody/conf.avail/xmpp.cfg.lua; then
  346. sed -i "/certificate =/a\ curve = $XMPP_ECC_CURVE;" /etc/prosody/conf.avail/xmpp.cfg.lua
  347. fi
  348. sed -i "s/example.com/$DEFAULT_DOMAIN_NAME/g" /etc/prosody/conf.avail/xmpp.cfg.lua
  349. sed -i 's/enabled = false -- Remove this line to enable this host//g' /etc/prosody/conf.avail/xmpp.cfg.lua
  350. if ! grep -q "modules_enabled" /etc/prosody/conf.avail/xmpp.cfg.lua; then
  351. echo '' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  352. echo 'modules_enabled = {' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  353. echo ' "bosh"; -- Enable mod_bosh' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  354. echo ' "tls"; -- Enable mod_tls' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  355. echo ' "saslauth"; -- Enable mod_saslauth' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  356. echo ' "onions"; -- Enable chat via onion service' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  357. echo ' "mam"; -- Message archive management' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  358. echo ' "csi"; -- Client state indication' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  359. echo ' "carbons"; -- Message carbons' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  360. echo ' "smacks"; -- Stream management' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  361. echo ' "smacks_offline"; -- Stream management' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  362. echo ' "pep"; -- Personal Eventing Protocol (to support OMEMO)' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  363. echo ' "privacy"; -- Privacy lists' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  364. echo ' "privacy_lists"; -- Privacy lists' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  365. echo ' "blocking"; -- Blocking command' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  366. echo ' "roster"; -- Roster versioning' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  367. echo ' "offline_email"; -- If offline send to email' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  368. echo '}' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  369. echo '' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  370. echo 'c2s_require_encryption = true' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  371. echo 's2s_require_encryption = true' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  372. echo 'allow_unencrypted_plain_auth = false' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  373. fi
  374. ln -sf /etc/prosody/conf.avail/xmpp.cfg.lua /etc/prosody/conf.d/xmpp.cfg.lua
  375. if [ -f /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem ]; then
  376. sed -i "s|/etc/prosody/certs/localhost.key|/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.key|g" /etc/prosody/prosody.cfg.lua
  377. sed -i "s|/etc/prosody/certs/localhost.crt|/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.pem|g" /etc/prosody/prosody.cfg.lua
  378. else
  379. sed -i 's|/etc/prosody/certs/localhost.key|/etc/prosody/certs/xmpp.key|g' /etc/prosody/prosody.cfg.lua
  380. sed -i 's|/etc/prosody/certs/localhost.crt|/etc/prosody/certs/xmpp.crt|g' /etc/prosody/prosody.cfg.lua
  381. fi
  382. if ! grep -q "xmpp.dhparam" /etc/prosody/prosody.cfg.lua; then
  383. if [ -f /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.dhparam ]; then
  384. sed -i "/certificate =/a\ dhparam = \"/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.dhparam\";" /etc/prosody/prosody.cfg.lua
  385. else
  386. sed -i '/certificate =/a\ dhparam = "/etc/prosody/certs/xmpp.dhparam";' /etc/prosody/prosody.cfg.lua
  387. fi
  388. fi
  389. if ! grep -q 'options = {"no_sslv2", "no_sslv3" }' /etc/prosody/prosody.cfg.lua; then
  390. sed -i '/certificate =/a\ options = {"no_sslv2", "no_sslv3" };' /etc/prosody/prosody.cfg.lua
  391. fi
  392. if ! grep -q 'ciphers =' /etc/prosody/prosody.cfg.lua; then
  393. sed -i "/certificate =/a\ ciphers = $XMPP_CIPHERS;" /etc/prosody/prosody.cfg.lua
  394. fi
  395. if ! grep -q 'depth = "1";' /etc/prosody/prosody.cfg.lua; then
  396. sed -i '/certificate =/a\ depth = "1";' /etc/prosody/prosody.cfg.lua
  397. fi
  398. if ! grep -q 'curve =' /etc/prosody/prosody.cfg.lua; then
  399. sed -i "/certificate =/a\ curve = $XMPP_ECC_CURVE;" /etc/prosody/prosody.cfg.lua
  400. fi
  401. sed -i 's/c2s_require_encryption = false/c2s_require_encryption = true/g' /etc/prosody/prosody.cfg.lua
  402. if ! grep -q "s2s_require_encryption" /etc/prosody/prosody.cfg.lua; then
  403. sed -i '/c2s_require_encryption/a\s2s_require_encryption = true' /etc/prosody/prosody.cfg.lua
  404. fi
  405. if ! grep -q "allow_unencrypted_plain_auth" /etc/prosody/prosody.cfg.lua; then
  406. echo 'allow_unencrypted_plain_auth = false' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  407. fi
  408. sed -i 's/--"bosh";/"bosh";/g' /etc/prosody/prosody.cfg.lua
  409. sed -i 's/authentication = "internal_plain"/authentication = "internal_hashed"/g' /etc/prosody/prosody.cfg.lua
  410. sed -i 's/enabled = false -- Remove this line to enable this host//g' /etc/prosody/prosody.cfg.lua
  411. if [ -f /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem ]; then
  412. # use an existing cert if possible
  413. sed -i "s|key = \"/etc/prosody/certs/example.com.key\"|key = \"/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.key\"|g" /etc/prosody/prosody.cfg.lua
  414. sed -i "s|certificate = \"/etc/prosody/certs/example.com.crt\"|certificate = \"/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.pem\"|g" /etc/prosody/prosody.cfg.lua
  415. else
  416. sed -i 's|key = "/etc/prosody/certs/example.com.key"|key = "/etc/prosody/certs/xmpp.key"|g' /etc/prosody/prosody.cfg.lua
  417. sed -i 's|certificate = "/etc/prosody/certs/example.com.crt"|certificate = "/etc/prosody/certs/xmpp.crt"|g' /etc/prosody/prosody.cfg.lua
  418. fi
  419. sed -i "s/example.com/$DEFAULT_DOMAIN_NAME/g" /etc/prosody/prosody.cfg.lua
  420. update_default_domain
  421. if [ ! -d /var/lib/tor ]; then
  422. echo $'No Tor installation found. xmpp onion site cannot be configured.'
  423. exit 877367
  424. fi
  425. if ! grep -q "hidden_service_xmpp" /etc/tor/torrc; then
  426. echo 'HiddenServiceDir /var/lib/tor/hidden_service_xmpp/' >> /etc/tor/torrc
  427. echo "HiddenServicePort 5222 127.0.0.1:5222" >> /etc/tor/torrc
  428. echo "HiddenServicePort 5269 127.0.0.1:5269" >> /etc/tor/torrc
  429. echo $'Added onion site for xmpp chat'
  430. fi
  431. onion_update
  432. wait_for_onion_service 'xmpp'
  433. if [ ! -f /var/lib/tor/hidden_service_xmpp/hostname ]; then
  434. echo $'xmpp onion site hostname not found'
  435. exit 65349
  436. fi
  437. XMPP_ONION_HOSTNAME=$(cat /var/lib/tor/hidden_service_xmpp/hostname)
  438. if ! grep -q "${XMPP_ONION_HOSTNAME}" /etc/prosody/conf.avail/xmpp.cfg.lua; then
  439. echo '' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  440. echo "VirtualHost \"${XMPP_ONION_HOSTNAME}\"" >> /etc/prosody/conf.avail/xmpp.cfg.lua
  441. echo ' modules_enabled = { "onions" };' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  442. fi
  443. set_completion_param "xmpp onion domain" "${XMPP_ONION_HOSTNAME}"
  444. if [ -f $IMAGE_PASSWORD_FILE ]; then
  445. XMPP_PASSWORD="$(printf `cat $IMAGE_PASSWORD_FILE`)"
  446. else
  447. if [ ${#XMPP_PASSWORD} -lt 8 ]; then
  448. XMPP_PASSWORD="$(create_password ${MINIMUM_PASSWORD_LENGTH})"
  449. fi
  450. fi
  451. prosodyctl register $MY_USERNAME $DEFAULT_DOMAIN_NAME "$XMPP_PASSWORD"
  452. ${PROJECT_NAME}-pass -u $MY_USERNAME -a xmpp -p "$XMPP_PASSWORD"
  453. function_check configure_firewall_for_xmpp
  454. configure_firewall_for_xmpp
  455. xmpp_email_headers
  456. install_completed xmpp_main
  457. }
  458. function install_xmpp_client {
  459. if [[ $(app_is_installed xmpp_client) == "1" ]]; then
  460. return
  461. fi
  462. apt-get -yq install profanity
  463. XMPP_CLIENT_DIR=/home/$MY_USERNAME/.local/share/profanity
  464. XMPP_CLIENT_ACCOUNTS=$XMPP_CLIENT_DIR/accounts
  465. if [ ! -d $XMPP_CLIENT_DIR ]; then
  466. mkdir -p $XMPP_CLIENT_DIR
  467. fi
  468. if [[ $ONION_ONLY == 'no' ]]; then
  469. echo "[${MY_USERNAME}@${DEFAULT_DOMAIN_NAME}]" > $XMPP_CLIENT_ACCOUNTS
  470. echo 'enabled=true' >> $XMPP_CLIENT_ACCOUNTS
  471. echo "jid=${MY_USERNAME}@${DEFAULT_DOMAIN_NAME}" >> $XMPP_CLIENT_ACCOUNTS
  472. echo 'resource=profanity' >> $XMPP_CLIENT_ACCOUNTS
  473. echo "muc.service=conference.${DEFAULT_DOMAIN_NAME}" >> $XMPP_CLIENT_ACCOUNTS
  474. echo "muc.nick=${MY_USERNAME}" >> $XMPP_CLIENT_ACCOUNTS
  475. echo 'presence.last=online' >> $XMPP_CLIENT_ACCOUNTS
  476. echo 'presence.login=online' >> $XMPP_CLIENT_ACCOUNTS
  477. echo 'priority.online=0' >> $XMPP_CLIENT_ACCOUNTS
  478. echo 'priority.chat=0' >> $XMPP_CLIENT_ACCOUNTS
  479. echo 'priority.away=0' >> $XMPP_CLIENT_ACCOUNTS
  480. echo 'priority.xa=0' >> $XMPP_CLIENT_ACCOUNTS
  481. echo 'priority.dnd=0' >> $XMPP_CLIENT_ACCOUNTS
  482. if [ ${#XMPP_PASSWORD} -gt 2 ]; then
  483. echo "password=$XMPP_PASSWORD" >> $XMPP_CLIENT_ACCOUNTS
  484. fi
  485. fi
  486. if [ -f /var/lib/tor/hidden_service_xmpp/hostname ]; then
  487. XMPP_ONION_HOSTNAME=$(cat /var/lib/tor/hidden_service_xmpp/hostname)
  488. echo "[${MY_USERNAME}@${XMPP_ONION_HOSTNAME}]" >> $XMPP_CLIENT_ACCOUNTS
  489. if [[ $ONION_ONLY == 'no' ]]; then
  490. echo 'enabled=false' >> $XMPP_CLIENT_ACCOUNTS
  491. else
  492. echo 'enabled=true' >> $XMPP_CLIENT_ACCOUNTS
  493. fi
  494. echo "jid=${MY_USERNAME}@${XMPP_ONION_HOSTNAME}" >> $XMPP_CLIENT_ACCOUNTS
  495. echo 'resource=profanity' >> $XMPP_CLIENT_ACCOUNTS
  496. echo "muc.service=conference.${XMPP_ONION_HOSTNAME}" >> $XMPP_CLIENT_ACCOUNTS
  497. echo "muc.nick=${MY_USERNAME}" >> $XMPP_CLIENT_ACCOUNTS
  498. echo 'presence.last=online' >> $XMPP_CLIENT_ACCOUNTS
  499. echo 'presence.login=online' >> $XMPP_CLIENT_ACCOUNTS
  500. echo 'priority.online=0' >> $XMPP_CLIENT_ACCOUNTS
  501. echo 'priority.chat=0' >> $XMPP_CLIENT_ACCOUNTS
  502. echo 'priority.away=0' >> $XMPP_CLIENT_ACCOUNTS
  503. echo 'priority.xa=0' >> $XMPP_CLIENT_ACCOUNTS
  504. echo 'priority.dnd=0' >> $XMPP_CLIENT_ACCOUNTS
  505. if [ ${#XMPP_PASSWORD} -gt 2 ]; then
  506. echo "password=$XMPP_PASSWORD" >> $XMPP_CLIENT_ACCOUNTS
  507. fi
  508. fi
  509. if [ ! -d /home/$MY_USERNAME/.config/profanity ]; then
  510. mkdir -p /home/$MY_USERNAME/.config/profanity
  511. fi
  512. echo '[connection]' > /home/$MY_USERNAME/.config/profanity/profrc
  513. echo "account=${MY_USERNAME}@${DEFAULT_DOMAIN_NAME}" >> /home/$MY_USERNAME/.config/profanity/profrc
  514. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.local
  515. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.config
  516. install_completed xmpp_client
  517. }
  518. function install_xmpp {
  519. install_xmpp_main
  520. install_xmpp_client
  521. APP_INSTALLED=1
  522. }
  523. # NOTE: deliberately no exit 0