freedombone-app-xmpp 22KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # XMPP functions
  12. #
  13. # License
  14. # =======
  15. #
  16. # Copyright (C) 2014-2016 Bob Mottram <bob@robotics.uk.to>
  17. #
  18. # This program is free software: you can redistribute it and/or modify
  19. # it under the terms of the GNU Affero General Public License as published by
  20. # the Free Software Foundation, either version 3 of the License, or
  21. # (at your option) any later version.
  22. #
  23. # This program is distributed in the hope that it will be useful,
  24. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  25. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  26. # GNU Affero General Public License for more details.
  27. #
  28. # You should have received a copy of the GNU Affero General Public License
  29. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  30. VARIANTS='full full-vim chat'
  31. # Directory where XMPP settings are stored
  32. XMPP_DIRECTORY="/var/lib/prosody"
  33. XMPP_PASSWORD=
  34. XMPP_CIPHERS='"EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA"'
  35. XMPP_ECC_CURVE='"secp384r1"'
  36. xmpp_variables=(ONION_ONLY
  37. INSTALLED_WITHIN_DOCKER
  38. XMPP_CIPHERS
  39. XMPP_ECC_CURVE
  40. XMPP_ECC_CURVE
  41. MY_USERNAME
  42. DEFAULT_DOMAIN_NAME)
  43. function remove_user_xmpp {
  44. remove_username="$1"
  45. ${PROJECT_NAME}-rmxmpp -e "${remove_username}@$HOSTNAME"
  46. }
  47. function add_user_xmpp {
  48. new_username="$1"
  49. new_user_password="$2"
  50. ${PROJECT_NAME}-addxmpp -e "$new_username@$HOSTNAME" -p "$new_user_password"
  51. if [ ! "$?" = "0" ]; then
  52. echo '1'
  53. return
  54. fi
  55. XMPP_CLIENT_DIR=/home/$new_username/.local/share/profanity
  56. XMPP_CLIENT_ACCOUNTS=$XMPP_CLIENT_DIR/accounts
  57. if [ ! -d $XMPP_CLIENT_DIR ]; then
  58. mkdir -p $XMPP_CLIENT_DIR
  59. fi
  60. if [ ! -d /home/$new_username/.config/profanity ]; then
  61. mkdir -p /home/$new_username/.config/profanity
  62. fi
  63. echo "[${new_username}@${HOSTNAME}]" > $XMPP_CLIENT_ACCOUNTS
  64. echo 'enabled=true' >> $XMPP_CLIENT_ACCOUNTS
  65. echo "jid=${new_username}@${HOSTNAME}" >> $XMPP_CLIENT_ACCOUNTS
  66. echo 'resource=profanity' >> $XMPP_CLIENT_ACCOUNTS
  67. echo "muc.service=conference.${HOSTNAME}" >> $XMPP_CLIENT_ACCOUNTS
  68. echo "muc.nick=${new_username}" >> $XMPP_CLIENT_ACCOUNTS
  69. echo 'presence.last=online' >> $XMPP_CLIENT_ACCOUNTS
  70. echo 'presence.login=online' >> $XMPP_CLIENT_ACCOUNTS
  71. echo 'priority.online=0' >> $XMPP_CLIENT_ACCOUNTS
  72. echo 'priority.chat=0' >> $XMPP_CLIENT_ACCOUNTS
  73. echo 'priority.away=0' >> $XMPP_CLIENT_ACCOUNTS
  74. echo 'priority.xa=0' >> $XMPP_CLIENT_ACCOUNTS
  75. echo 'priority.dnd=0' >> $XMPP_CLIENT_ACCOUNTS
  76. echo '[connection]' > /home/$new_username/.config/profanity/profrc
  77. echo "account=${new_username}@${HOSTNAME}" >> /home/$new_username/.config/profanity/profrc
  78. chown -R $new_username:$new_username /home/$new_username/.local
  79. chown -R $new_username:$new_username /home/$new_username/.config
  80. echo '0'
  81. }
  82. function run_client_xmpp {
  83. torify profanity
  84. }
  85. function install_interactive_xmpp {
  86. echo -n ''
  87. APP_INSTALLED=1
  88. }
  89. function change_password_xmpp {
  90. echo -n ''
  91. }
  92. function reconfigure_xmpp {
  93. echo -n ''
  94. }
  95. function update_prosody_modules {
  96. if [ ! -d $INSTALL_DIR/prosody-modules ]; then
  97. return
  98. fi
  99. if [ ! -d /usr/lib/prosody ]; then
  100. return
  101. fi
  102. cd $INSTALL_DIR/prosody-modules
  103. hg pull
  104. hg update
  105. # support onion addresses
  106. if [ -f $INSTALL_DIR/prosody-modules/mod_onions/mod_onions.lua ]; then
  107. cp $INSTALL_DIR/prosody-modules/mod_onions/mod_onions.lua /usr/lib/prosody/modules/mod_onions.lua
  108. fi
  109. # XEP-0313 message archive management
  110. # https://modules.prosody.im/mod_mam.html
  111. # Allows you to download your previous messages onto a new client
  112. # This only applies if you are not using forward secret crypto
  113. # such as OTR or OMEMO (eg. OpenPGP)
  114. if [ -d $INSTALL_DIR/prosody-modules/mod_mam ]; then
  115. cp $INSTALL_DIR/prosody-modules/mod_mam/*.lua /usr/lib/prosody/modules
  116. fi
  117. # XEP-0352 Client State Indication
  118. # Notifies the server if the app is in the background or not
  119. if [ -d $INSTALL_DIR/prosody-modules/mod_csi ]; then
  120. cp $INSTALL_DIR/prosody-modules/mod_csi/*.lua /usr/lib/prosody/modules
  121. fi
  122. # XEP-0280 Message Carbons
  123. # Ensures all messages get delivered to all clients (if you have a mobile and desktop client)
  124. if [ -d $INSTALL_DIR/prosody-modules/mod_carbons ]; then
  125. cp $INSTALL_DIR/prosody-modules/mod_carbons/*.lua /usr/lib/prosody/modules
  126. fi
  127. # XEP-0198 Stream management
  128. # Helps mobile apps recover when a device switches networks.
  129. if [ -d $INSTALL_DIR/prosody-modules/mod_smacks ]; then
  130. cp $INSTALL_DIR/prosody-modules/mod_smacks/*.lua /usr/lib/prosody/modules
  131. fi
  132. if [ -d $INSTALL_DIR/prosody-modules/mod_smacks_offline ]; then
  133. cp $INSTALL_DIR/prosody-modules/mod_smacks_offline/*.lua /usr/lib/prosody/modules
  134. fi
  135. # XEP-0191: blocking
  136. if [ -d $INSTALL_DIR/prosody-modules/mod_blocking ]; then
  137. cp $INSTALL_DIR/prosody-modules/mod_blocking/*.lua /usr/lib/prosody/modules
  138. fi
  139. # XEP-0016 Privacy lists
  140. if [ -d $INSTALL_DIR/prosody-modules/mod_privacy_lists ]; then
  141. cp $INSTALL_DIR/prosody-modules/mod_privacy_lists/*.lua /usr/lib/prosody/modules
  142. fi
  143. # If offline then send messages to email
  144. if [ -d $INSTALL_DIR/prosody-modules/mod_offline_email ]; then
  145. cp $INSTALL_DIR/prosody-modules/mod_offline_email/*.lua /usr/lib/prosody/modules
  146. fi
  147. }
  148. function upgrade_xmpp {
  149. function_check update_prosody_modules
  150. update_prosody_modules
  151. }
  152. function backup_local_xmpp {
  153. source_directory=/var/lib/prosody xmpp
  154. if [ -d $source_directory ]; then
  155. dest_directory=xmpp
  156. echo $"Backing up $source_directory to $dest_directory"
  157. function_check backup_directory_to_usb
  158. backup_directory_to_usb $source_directory $dest_directory
  159. echo $"Backup to $dest_directory complete"
  160. fi
  161. }
  162. function restore_local_xmpp {
  163. if [ -d /var/lib/prosody ]; then
  164. echo $"Restoring xmpp settings"
  165. temp_restore_dir=/root/tempxmpp
  166. function_check restore_directory_from_usb
  167. restore_directory_from_usb $temp_restore_dir xmpp
  168. cp -r $temp_restore_dir/var/lib/prosody/* /var/lib/prosody
  169. if [ ! "$?" = "0" ]; then
  170. function_check set_user_permissions
  171. set_user_permissions
  172. function_check backup_unmount_drive
  173. backup_unmount_drive
  174. exit 725
  175. fi
  176. rm -rf $temp_restore_dir
  177. service prosody restart
  178. chown -R prosody:prosody /var/lib/prosody/*
  179. echo $"Restore of xmpp settings complete"
  180. fi
  181. }
  182. function backup_remote_xmpp {
  183. if [ -d /var/lib/prosody ]; then
  184. echo $"Backing up the xmpp settings"
  185. backup_directory_to_friend /var/lib/prosody xmpp
  186. echo $"Backup of xmpp settings complete"
  187. fi
  188. }
  189. function restore_remote_xmpp {
  190. if [ -d /var/lib/prosody ]; then
  191. echo $"Restoring xmpp settings"
  192. temp_restore_dir=/root/tempxmpp
  193. function_check restore_directory_from_friend
  194. restore_directory_from_friend $temp_restore_dir xmpp
  195. cp -r $temp_restore_dir/var/lib/prosody/* /var/lib/prosody
  196. if [ ! "$?" = "0" ]; then
  197. exit 725
  198. fi
  199. rm -rf $temp_restore_dir
  200. service prosody restart
  201. chown -R prosody:prosody /var/lib/prosody/*
  202. echo $"Restore of xmpp settings complete"
  203. fi
  204. }
  205. function configure_firewall_for_xmpp {
  206. if [ ! -d /etc/prosody ]; then
  207. return
  208. fi
  209. if [[ $(is_completed $FUNCNAME) == "1" ]]; then
  210. return
  211. fi
  212. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  213. # docker does its own firewalling
  214. return
  215. fi
  216. if [[ $ONION_ONLY != "no" ]]; then
  217. return
  218. fi
  219. iptables -A INPUT -p tcp --dport 5222:5223 -j ACCEPT
  220. iptables -A INPUT -p tcp --dport 5269 -j ACCEPT
  221. iptables -A INPUT -p tcp --dport 5280:5281 -j ACCEPT
  222. function_check save_firewall_settings
  223. save_firewall_settings
  224. OPEN_PORTS+=('XMPP 5222-5223')
  225. OPEN_PORTS+=('XMPP 5269')
  226. OPEN_PORTS+=('XMPP 5280-5281')
  227. mark_completed $FUNCNAME
  228. }
  229. function remove_xmpp_client {
  230. apt-get -y remove --purge profanity
  231. sed '/install_xmpp_client/d' $COMPLETION_FILE
  232. }
  233. function remove_xmpp {
  234. remove_xmpp_client
  235. iptables -D INPUT -p tcp --dport 5222:5223 -j ACCEPT
  236. iptables -D INPUT -p tcp --dport 5269 -j ACCEPT
  237. iptables -D INPUT -p tcp --dport 5280:5281 -j ACCEPT
  238. function_check save_firewall_settings
  239. save_firewall_settings
  240. function_check remove_onion_service
  241. remove_onion_service xmpp 5222 5223 5269
  242. apt-get -y remove --purge prosody prosody-modules
  243. if [ -d $INSTALL_DIR/prosody-modules ]; then
  244. rm -rf $INSTALL_DIR/prosody-modules
  245. fi
  246. if [ -d /etc/prosody ]; then
  247. rm -rf /etc/prosody
  248. fi
  249. sed '/install_xmpp/d' $COMPLETION_FILE
  250. sed '/xmpp /d' $COMPLETION_FILE
  251. }
  252. function xmpp_email_headers {
  253. for d in /home/*/ ; do
  254. USERNAME=$(echo "$d" | awk -F '/' '{print $3}')
  255. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  256. if [ -f /home/$USERNAME/.muttrc ]; then
  257. if ! grep -q "Jabber-ID" /home/$USERNAME/.muttrc; then
  258. echo "my_hdr Jabber-ID: ${USERNAME}@${HOSTNAME}" >> /home/$USERNAME/.muttrc
  259. fi
  260. fi
  261. fi
  262. done
  263. }
  264. function install_xmpp_main {
  265. update_prosody_modules
  266. if [[ $(app_is_installed xmpp_main) == "1" ]]; then
  267. return
  268. fi
  269. apt-get -y install lua-sec lua-bitop
  270. apt-get -y install prosody prosody-modules mercurial
  271. if [ ! -d /etc/prosody ]; then
  272. echo $"ERROR: prosody does not appear to have installed. $CHECK_MESSAGE"
  273. exit 52
  274. fi
  275. # obtain the prosody modules
  276. cd $INSTALL_DIR
  277. hg clone https://hg.prosody.im/prosody-modules/ prosody-modules
  278. if [ ! -d $INSTALL_DIR/prosody-modules/mod_onions ]; then
  279. echo $'mod_onions prosody module could not be found'
  280. exit 73254
  281. fi
  282. # install the onions module
  283. update_prosody_modules
  284. if [ ! -f /usr/lib/prosody/modules/mod_onions.lua ]; then
  285. echo $'mod_onions.lua could not be copied to the prosody modules directory'
  286. exit 63952
  287. fi
  288. # create a certificate
  289. if [ ! -f /etc/ssl/certs/xmpp.dhparam ]; then
  290. ${PROJECT_NAME}-addcert -h xmpp --dhkey $DH_KEYLENGTH
  291. check_certificates xmpp
  292. fi
  293. chown prosody:prosody /etc/ssl/private/xmpp.key
  294. chown prosody:prosody /etc/ssl/certs/xmpp.*
  295. cp -a /etc/prosody/conf.avail/example.com.cfg.lua /etc/prosody/conf.avail/xmpp.cfg.lua
  296. sed -i 's|/etc/prosody/certs/example.com.key|/etc/ssl/private/xmpp.key|g' /etc/prosody/conf.avail/xmpp.cfg.lua
  297. sed -i 's|/etc/prosody/certs/example.com.crt|/etc/ssl/certs/xmpp.crt|g' /etc/prosody/conf.avail/xmpp.cfg.lua
  298. if ! grep -q "xmpp.dhparam" /etc/prosody/conf.avail/xmpp.cfg.lua; then
  299. sed -i '/certificate =/a\ dhparam = "/etc/ssl/certs/xmpp.dhparam";' /etc/prosody/conf.avail/xmpp.cfg.lua
  300. fi
  301. if ! grep -q 'options = {"no_sslv2", "no_sslv3" }' /etc/prosody/conf.avail/xmpp.cfg.lua; then
  302. sed -i '/certificate =/a\ options = {"no_sslv2", "no_sslv3" };' /etc/prosody/conf.avail/xmpp.cfg.lua
  303. fi
  304. if ! grep -q 'ciphers =' /etc/prosody/conf.avail/xmpp.cfg.lua; then
  305. sed -i "/certificate =/a\ ciphers = $XMPP_CIPHERS;" /etc/prosody/conf.avail/xmpp.cfg.lua
  306. fi
  307. if ! grep -q 'depth = "1";' /etc/prosody/conf.avail/xmpp.cfg.lua; then
  308. sed -i '/certificate =/a\ depth = "1";' /etc/prosody/conf.avail/xmpp.cfg.lua
  309. fi
  310. if ! grep -q 'curve =' /etc/prosody/conf.avail/xmpp.cfg.lua; then
  311. sed -i "/certificate =/a\ curve = $XMPP_ECC_CURVE;" /etc/prosody/conf.avail/xmpp.cfg.lua
  312. fi
  313. sed -i "s/example.com/$DEFAULT_DOMAIN_NAME/g" /etc/prosody/conf.avail/xmpp.cfg.lua
  314. sed -i 's/enabled = false -- Remove this line to enable this host//g' /etc/prosody/conf.avail/xmpp.cfg.lua
  315. if ! grep -q "modules_enabled" /etc/prosody/conf.avail/xmpp.cfg.lua; then
  316. echo '' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  317. echo 'modules_enabled = {' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  318. echo ' "bosh"; -- Enable mod_bosh' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  319. echo ' "tls"; -- Enable mod_tls' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  320. echo ' "saslauth"; -- Enable mod_saslauth' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  321. echo ' "onions"; -- Enable chat via onion service' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  322. echo ' "mam"; -- Message archive management' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  323. echo ' "csi"; -- Client state indication' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  324. echo ' "carbons"; -- Message carbons' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  325. echo ' "smacks"; -- Stream management' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  326. echo ' "smacks_offline"; -- Stream management' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  327. echo ' "pep"; -- Personal Eventing Protocol (to support OMEMO)' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  328. echo ' "privacy"; -- Privacy lists' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  329. echo ' "privacy_lists"; -- Privacy lists' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  330. echo ' "blocking"; -- Blocking command' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  331. echo ' "roster"; -- Roster versioning' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  332. echo ' "offline_email"; -- If offline send to email' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  333. echo '}' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  334. echo '' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  335. echo 'c2s_require_encryption = true' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  336. echo 's2s_require_encryption = true' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  337. echo 'allow_unencrypted_plain_auth = false' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  338. fi
  339. ln -sf /etc/prosody/conf.avail/xmpp.cfg.lua /etc/prosody/conf.d/xmpp.cfg.lua
  340. sed -i 's|/etc/prosody/certs/localhost.key|/etc/ssl/private/xmpp.key|g' /etc/prosody/prosody.cfg.lua
  341. sed -i 's|/etc/prosody/certs/localhost.crt|/etc/ssl/certs/xmpp.crt|g' /etc/prosody/prosody.cfg.lua
  342. if ! grep -q "xmpp.dhparam" /etc/prosody/prosody.cfg.lua; then
  343. sed -i '/certificate =/a\ dhparam = "/etc/ssl/certs/xmpp.dhparam";' /etc/prosody/prosody.cfg.lua
  344. fi
  345. if ! grep -q 'options = {"no_sslv2", "no_sslv3" }' /etc/prosody/prosody.cfg.lua; then
  346. sed -i '/certificate =/a\ options = {"no_sslv2", "no_sslv3" };' /etc/prosody/prosody.cfg.lua
  347. fi
  348. if ! grep -q 'ciphers =' /etc/prosody/prosody.cfg.lua; then
  349. sed -i "/certificate =/a\ ciphers = $XMPP_CIPHERS;" /etc/prosody/prosody.cfg.lua
  350. fi
  351. if ! grep -q 'depth = "1";' /etc/prosody/prosody.cfg.lua; then
  352. sed -i '/certificate =/a\ depth = "1";' /etc/prosody/prosody.cfg.lua
  353. fi
  354. if ! grep -q 'curve =' /etc/prosody/prosody.cfg.lua; then
  355. sed -i "/certificate =/a\ curve = $XMPP_ECC_CURVE;" /etc/prosody/prosody.cfg.lua
  356. fi
  357. sed -i 's/c2s_require_encryption = false/c2s_require_encryption = true/g' /etc/prosody/prosody.cfg.lua
  358. if ! grep -q "s2s_require_encryption" /etc/prosody/prosody.cfg.lua; then
  359. sed -i '/c2s_require_encryption/a\s2s_require_encryption = true' /etc/prosody/prosody.cfg.lua
  360. fi
  361. if ! grep -q "allow_unencrypted_plain_auth" /etc/prosody/prosody.cfg.lua; then
  362. echo 'allow_unencrypted_plain_auth = false' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  363. fi
  364. sed -i 's/--"bosh";/"bosh";/g' /etc/prosody/prosody.cfg.lua
  365. sed -i 's/authentication = "internal_plain"/authentication = "internal_hashed"/g' /etc/prosody/prosody.cfg.lua
  366. sed -i 's/enabled = false -- Remove this line to enable this host//g' /etc/prosody/prosody.cfg.lua
  367. sed -i 's|key = "/etc/prosody/certs/example.com.key"|key = "/etc/ssl/private/xmpp.key"|g' /etc/prosody/prosody.cfg.lua
  368. sed -i 's|certificate = "/etc/prosody/certs/example.com.crt"|certificate = "/etc/ssl/certs/xmpp.crt"|g' /etc/prosody/prosody.cfg.lua
  369. sed -i "s/example.com/$DEFAULT_DOMAIN_NAME/g" /etc/prosody/prosody.cfg.lua
  370. systemctl restart prosody
  371. touch /home/$MY_USERNAME/README
  372. if [ ! -d /var/lib/tor ]; then
  373. echo $'No Tor installation found. xmpp onion site cannot be configured.'
  374. exit 877367
  375. fi
  376. if ! grep -q "hidden_service_xmpp" /etc/tor/torrc; then
  377. echo 'HiddenServiceDir /var/lib/tor/hidden_service_xmpp/' >> /etc/tor/torrc
  378. echo "HiddenServicePort 5222 127.0.0.1:5222" >> /etc/tor/torrc
  379. echo "HiddenServicePort 5269 127.0.0.1:5269" >> /etc/tor/torrc
  380. echo $'Added onion site for xmpp chat'
  381. fi
  382. systemctl restart tor
  383. wait_for_onion_service 'xmpp'
  384. if [ ! -f /var/lib/tor/hidden_service_xmpp/hostname ]; then
  385. echo $'xmpp onion site hostname not found'
  386. exit 65349
  387. fi
  388. XMPP_ONION_HOSTNAME=$(cat /var/lib/tor/hidden_service_xmpp/hostname)
  389. if ! grep -q "${XMPP_ONION_HOSTNAME}" /etc/prosody/conf.avail/xmpp.cfg.lua; then
  390. echo '' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  391. echo "VirtualHost \"${XMPP_ONION_HOSTNAME}\"" >> /etc/prosody/conf.avail/xmpp.cfg.lua
  392. echo ' modules_enabled = { "onions" };' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  393. fi
  394. set_completion_param "xmpp onion domain" "${XMPP_ONION_HOSTNAME}"
  395. if ! grep -q "Your xmpp password is" /home/$MY_USERNAME/README; then
  396. if [ ${#XMPP_PASSWORD} -lt 8 ]; then
  397. if [ -f $IMAGE_PASSWORD_FILE ]; then
  398. XMPP_PASSWORD="$(printf `cat $IMAGE_PASSWORD_FILE`)"
  399. else
  400. XMPP_PASSWORD="$(create_password ${MINIMUM_PASSWORD_LENGTH})"
  401. fi
  402. fi
  403. prosodyctl register $MY_USERNAME $DEFAULT_DOMAIN_NAME $XMPP_PASSWORD
  404. echo '' >> /home/$MY_USERNAME/README
  405. echo '' >> /home/$MY_USERNAME/README
  406. echo $'XMPP' >> /home/$MY_USERNAME/README
  407. echo '====' >> /home/$MY_USERNAME/README
  408. echo $"XMPP onion domain: ${XMPP_ONION_HOSTNAME}" >> /home/$MY_USERNAME/README
  409. echo $"Your XMPP password is: $XMPP_PASSWORD" >> /home/$MY_USERNAME/README
  410. echo $'You can change it with: ' >> /home/$MY_USERNAME/README
  411. echo '' >> /home/$MY_USERNAME/README
  412. echo " prosodyctl passwd $MY_EMAIL_ADDRESS" >> /home/$MY_USERNAME/README
  413. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  414. chmod 600 /home/$MY_USERNAME/README
  415. fi
  416. function_check configure_firewall_for_xmpp
  417. configure_firewall_for_xmpp
  418. xmpp_email_headers
  419. install_completed xmpp_main
  420. }
  421. function install_xmpp_client {
  422. if [[ $(app_is_installed xmpp_client) == "1" ]]; then
  423. return
  424. fi
  425. apt-get -y install profanity
  426. XMPP_CLIENT_DIR=/home/$MY_USERNAME/.local/share/profanity
  427. XMPP_CLIENT_ACCOUNTS=$XMPP_CLIENT_DIR/accounts
  428. if [ ! -d $XMPP_CLIENT_DIR ]; then
  429. mkdir -p $XMPP_CLIENT_DIR
  430. fi
  431. if [[ $ONION_ONLY == 'no' ]]; then
  432. echo "[${MY_USERNAME}@${DEFAULT_DOMAIN_NAME}]" > $XMPP_CLIENT_ACCOUNTS
  433. echo 'enabled=true' >> $XMPP_CLIENT_ACCOUNTS
  434. echo "jid=${MY_USERNAME}@${DEFAULT_DOMAIN_NAME}" >> $XMPP_CLIENT_ACCOUNTS
  435. echo 'resource=profanity' >> $XMPP_CLIENT_ACCOUNTS
  436. echo "muc.service=conference.${DEFAULT_DOMAIN_NAME}" >> $XMPP_CLIENT_ACCOUNTS
  437. echo "muc.nick=${MY_USERNAME}" >> $XMPP_CLIENT_ACCOUNTS
  438. echo 'presence.last=online' >> $XMPP_CLIENT_ACCOUNTS
  439. echo 'presence.login=online' >> $XMPP_CLIENT_ACCOUNTS
  440. echo 'priority.online=0' >> $XMPP_CLIENT_ACCOUNTS
  441. echo 'priority.chat=0' >> $XMPP_CLIENT_ACCOUNTS
  442. echo 'priority.away=0' >> $XMPP_CLIENT_ACCOUNTS
  443. echo 'priority.xa=0' >> $XMPP_CLIENT_ACCOUNTS
  444. echo 'priority.dnd=0' >> $XMPP_CLIENT_ACCOUNTS
  445. if [ ${#XMPP_PASSWORD} -gt 2 ]; then
  446. echo "password=$XMPP_PASSWORD" >> $XMPP_CLIENT_ACCOUNTS
  447. fi
  448. fi
  449. if [ -f /var/lib/tor/hidden_service_xmpp/hostname ]; then
  450. XMPP_ONION_HOSTNAME=$(cat /var/lib/tor/hidden_service_xmpp/hostname)
  451. echo "[${MY_USERNAME}@${XMPP_ONION_HOSTNAME}]" >> $XMPP_CLIENT_ACCOUNTS
  452. if [[ $ONION_ONLY == 'no' ]]; then
  453. echo 'enabled=false' >> $XMPP_CLIENT_ACCOUNTS
  454. else
  455. echo 'enabled=true' >> $XMPP_CLIENT_ACCOUNTS
  456. fi
  457. echo "jid=${MY_USERNAME}@${XMPP_ONION_HOSTNAME}" >> $XMPP_CLIENT_ACCOUNTS
  458. echo 'resource=profanity' >> $XMPP_CLIENT_ACCOUNTS
  459. echo "muc.service=conference.${XMPP_ONION_HOSTNAME}" >> $XMPP_CLIENT_ACCOUNTS
  460. echo "muc.nick=${MY_USERNAME}" >> $XMPP_CLIENT_ACCOUNTS
  461. echo 'presence.last=online' >> $XMPP_CLIENT_ACCOUNTS
  462. echo 'presence.login=online' >> $XMPP_CLIENT_ACCOUNTS
  463. echo 'priority.online=0' >> $XMPP_CLIENT_ACCOUNTS
  464. echo 'priority.chat=0' >> $XMPP_CLIENT_ACCOUNTS
  465. echo 'priority.away=0' >> $XMPP_CLIENT_ACCOUNTS
  466. echo 'priority.xa=0' >> $XMPP_CLIENT_ACCOUNTS
  467. echo 'priority.dnd=0' >> $XMPP_CLIENT_ACCOUNTS
  468. if [ ${#XMPP_PASSWORD} -gt 2 ]; then
  469. echo "password=$XMPP_PASSWORD" >> $XMPP_CLIENT_ACCOUNTS
  470. fi
  471. fi
  472. if [ ! -d /home/$MY_USERNAME/.config/profanity ]; then
  473. mkdir -p /home/$MY_USERNAME/.config/profanity
  474. fi
  475. echo '[connection]' > /home/$MY_USERNAME/.config/profanity/profrc
  476. echo "account=${MY_USERNAME}@${DEFAULT_DOMAIN_NAME}" >> /home/$MY_USERNAME/.config/profanity/profrc
  477. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.local
  478. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.config
  479. install_completed xmpp_client
  480. }
  481. function install_xmpp {
  482. install_xmpp_main
  483. install_xmpp_client
  484. APP_INSTALLED=1
  485. }
  486. # NOTE: deliberately no exit 0