freedombone-app-mediagoblin 23KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # Mediagoblin application
  12. #
  13. # License
  14. # =======
  15. #
  16. # Copyright (C) 2016-2018 Bob Mottram <bob@freedombone.net>
  17. #
  18. # This program is free software: you can redistribute it and/or modify
  19. # it under the terms of the GNU Affero General Public License as published by
  20. # the Free Software Foundation, either version 3 of the License, or
  21. # (at your option) any later version.
  22. #
  23. # This program is distributed in the hope that it will be useful,
  24. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  25. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  26. # GNU Affero General Public License for more details.
  27. #
  28. # You should have received a copy of the GNU Affero General Public License
  29. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  30. VARIANTS='full full-vim media'
  31. IN_DEFAULT_INSTALL=0
  32. SHOW_ON_ABOUT=1
  33. MEDIAGOBLIN_DOMAIN_NAME=
  34. MEDIAGOBLIN_ADMIN_PASSWORD=
  35. MEDIAGOBLIN_CODE=
  36. MEDIAGOBLIN_ONION_PORT=8108
  37. MEDIAGOBLIN_REPO="http://git.savannah.gnu.org/r/mediagoblin.git"
  38. MEDIAGOBLIN_COMMIT='c4d3293dfa4076719e60fe9e052add07426f9a9a'
  39. MEDIAGOBLIN_BASE_DIR=/var/www/mediagoblin.local/htdocs
  40. MEDIAGOBLIN_PORT=6543
  41. mediagoblin_variables=(ONION_ONLY
  42. MY_USERNAME
  43. MEDIAGOBLIN_DOMAIN_NAME
  44. MEDIAGOBLIN_CODE
  45. DEFAULT_DOMAIN_NAME
  46. DDNS_PROVIDER)
  47. function logging_on_mediagoblin {
  48. echo -n ''
  49. }
  50. function logging_off_mediagoblin {
  51. echo -n ''
  52. }
  53. function mediagoblin_fix_email {
  54. # This is a crude hack and there may be a better solution
  55. # The cause of verification problems might be that the mediagoblin user
  56. # does not have mail access
  57. read_config_param 'MEDIAGOBLIN_DOMAIN_NAME'
  58. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  59. mgfile=$MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin/tools/mail.py
  60. if [ ! -f $mgfile ]; then
  61. echo $'Unable to fix email sending'
  62. exit 792532
  63. fi
  64. if ! grep -q 'import os' $mgfile; then
  65. sed -i '/import sys/a import os' $mgfile
  66. fi
  67. sed -i "s|return mhost.sendmail(from_addr, to_addrs, message.as_string())|return os.system(\"echo '\" + message_body + \"' \\| mail -s '\" + message['Subject'] + \"' \" + message['To'])|g" $mgfile
  68. }
  69. function install_interactive_mediagoblin {
  70. if [[ $ONION_ONLY != "no" ]]; then
  71. MEDIAGOBLIN_DOMAIN_NAME='mediagoblin.local'
  72. write_config_param "MEDIAGOBLIN_DOMAIN_NAME" "$MEDIAGOBLIN_DOMAIN_NAME"
  73. else
  74. function_check interactive_site_details
  75. interactive_site_details "mediagoblin" "MEDIAGOBLIN_DOMAIN_NAME" "MEDIAGOBLIN_CODE"
  76. fi
  77. APP_INSTALLED=1
  78. }
  79. function configure_interactive_mediagoblin {
  80. read_config_param 'MEDIAGOBLIN_DOMAIN_NAME'
  81. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  82. dialog --title $"Mediagoblin" \
  83. --backtitle $"Freedombone Control Panel" \
  84. --defaultno \
  85. --yesno $"\\nAllow registration of new users?" 10 60
  86. sel=$?
  87. case $sel in
  88. 0)
  89. sed -i 's|allow_registration.*|allow_registration = true|g' $MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin.ini
  90. sed -i 's|allow_registration.*|allow_registration = true|g' $MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin_local.ini
  91. ;;
  92. 1)
  93. sed -i 's|allow_registration.*|allow_registration = false|g' $MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin.ini
  94. sed -i 's|allow_registration.*|allow_registration = false|g' $MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin_local.ini
  95. ;;
  96. 255) return;;
  97. esac
  98. systemctl restart mediagoblin
  99. }
  100. function change_password_mediagoblin {
  101. curr_username="$1"
  102. new_user_password="$2"
  103. }
  104. function add_user_mediagoblin {
  105. new_username="$1"
  106. new_user_password="$2"
  107. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  108. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin/ && bin/gmg adduser --username $new_username --password $new_username $new_user_password" - mediagoblin
  109. echo "0"
  110. }
  111. function remove_user_mediagoblin {
  112. remove_username="$1"
  113. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  114. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin/ && bin/gmg deleteuser --username $new_username" - mediagoblin
  115. echo "0"
  116. }
  117. function reconfigure_mediagoblin {
  118. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  119. rm -f /var/lib/mediagoblin/*.db
  120. rm -rf /var/lib/mediagoblin/media/*
  121. rm -f $MEDIAGOBLIN_BASE_DIR/user_dev
  122. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && ln -s /var/lib/mediagoblin user_dev" - mediagoblin
  123. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin/ && ./bin/gmg dbupdate" - mediagoblin
  124. }
  125. function upgrade_mediagoblin {
  126. CURR_MEDIAGOBLIN_COMMIT=$(grep "mediagoblin commit" "$COMPLETION_FILE" | awk -F ':' '{print $2}')
  127. if [[ "$CURR_MEDIAGOBLIN_COMMIT" != "$MEDIAGOBLIN_COMMIT" ]]; then
  128. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  129. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin/ && git stash && git pull" - mediagoblin
  130. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin/ && git checkout $MEDIAGOBLIN_COMMIT -b $MEDIAGOBLIN_COMMIT" - mediagoblin
  131. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && git submodule sync" - mediagoblin
  132. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && git submodule update --force --init --recursive" - mediagoblin
  133. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && ./bootstrap.sh" - mediagoblin
  134. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && ./configure" - mediagoblin
  135. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && make" - mediagoblin
  136. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin/ && ./bin/python setup.py develop --upgrade && ./bin/gmg dbupdate" - mediagoblin
  137. mediagoblin_fix_email
  138. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin/ && ./bin/gmg dbupdate" - mediagoblin
  139. set_completion_param "mediagoblin commit" "$MEDIAGOBLIN_COMMIT"
  140. fi
  141. echo "0"
  142. }
  143. function backup_local_mediagoblin {
  144. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  145. source_directory=/var/lib/mediagoblin
  146. if [ -d $source_directory ]; then
  147. dest_directory=mediagoblin
  148. function_check backup_directory_to_usb
  149. backup_directory_to_usb $MEDIAGOBLIN_BASE_DIR $dest_directory
  150. backup_directory_to_usb /var/lib/mediagoblin mediagoblindata
  151. fi
  152. }
  153. function restore_local_mediagoblin {
  154. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  155. if [ -d /var/lib/mediagoblin ]; then
  156. echo $"Restoring Mediagoblin installation"
  157. function_check get_completion_param
  158. MEDIAGOBLIN_DOMAIN_NAME=$(get_completion_param "mediagoblin domain")
  159. temp_restore_dir=/root/tempmediagoblin
  160. function_check restore_directory_from_usb
  161. restore_directory_from_usb ${temp_restore_dir} mediagoblin
  162. if [ -d ${temp_restore_dir}$MEDIAGOBLIN_BASE_DIR ]; then
  163. cp -r ${temp_restore_dir}$MEDIAGOBLIN_BASE_DIR/* $MEDIAGOBLIN_BASE_DIR/
  164. else
  165. cp -r ${temp_restore_dir}/* $MEDIAGOBLIN_BASE_DIR/
  166. fi
  167. # shellcheck disable=SC2181
  168. if [ ! "$?" = "0" ]; then
  169. function_check restore_directory_from_usb
  170. set_user_permissions
  171. function_check backup_unmount_drive
  172. backup_unmount_drive
  173. exit 45327
  174. fi
  175. restore_directory_from_usb ${temp_restore_dir}2 mediagoblindata
  176. if [ -d ${temp_restore_dir}2/var/lib/mediagoblin ]; then
  177. cp -r ${temp_restore_dir}2/var/lib/mediagoblin/* /var/lib/mediagoblin/
  178. else
  179. cp -r ${temp_restore_dir}2/* /var/lib/mediagoblin/
  180. fi
  181. # shellcheck disable=SC2181
  182. if [ ! "$?" = "0" ]; then
  183. function_check set_user_permissions
  184. set_user_permissions
  185. function_check backup_unmount_drive
  186. backup_unmount_drive
  187. exit 24529
  188. fi
  189. rm -rf ${temp_restore_dir}
  190. rm -rf ${temp_restore_dir}2
  191. chown -hR mediagoblin:www-data $MEDIAGOBLIN_BASE_DIR
  192. chown -hR mediagoblin:www-data /var/lib/mediagoblin
  193. chmod -R g+wx /var/lib/mediagoblin
  194. fi
  195. }
  196. function backup_remote_mediagoblin {
  197. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  198. if [ -d /etc/mediagoblin ]; then
  199. echo $"Backing up mediagoblin"
  200. backup_directory_to_friend "$MEDIAGOBLIN_BASE_DIR" mediagoblin
  201. backup_directory_to_friend /var/lib/mediagoblin mediagoblindata
  202. fi
  203. }
  204. function restore_remote_mediagoblin {
  205. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  206. if [ -d "$SERVER_DIRECTORY/backup/mediagoblin" ]; then
  207. temp_restore_dir=/root/tempmediagoblin
  208. function_check get_completion_param
  209. MEDIAGOBLIN_DOMAIN_NAME=$(get_completion_param "mediagoblin domain")
  210. function_check restore_directory_from_friend
  211. restore_directory_from_friend $temp_restore_dir mediagoblin
  212. if [ -d "${temp_restore_dir}$MEDIAGOBLIN_BASE_DIR" ]; then
  213. cp -r "${temp_restore_dir}$MEDIAGOBLIN_BASE_DIR/"* "$MEDIAGOBLIN_BASE_DIR/"
  214. else
  215. cp -r "${temp_restore_dir}/"* "$MEDIAGOBLIN_BASE_DIR/"
  216. fi
  217. # shellcheck disable=SC2181
  218. if [ ! "$?" = "0" ]; then
  219. exit 264824
  220. fi
  221. restore_directory_from_friend ${temp_restore_dir}2 mediagoblindata
  222. if [ -d ${temp_restore_dir}2/var/lib/mediagoblin ]; then
  223. cp -r ${temp_restore_dir}2/var/lib/mediagoblin/* /var/lib/mediagoblin/
  224. else
  225. cp -r ${temp_restore_dir}2/* /var/lib/mediagoblin/
  226. fi
  227. # shellcheck disable=SC2181
  228. if [ ! "$?" = "0" ]; then
  229. exit 268492
  230. fi
  231. rm -rf ${temp_restore_dir}
  232. rm -rf ${temp_restore_dir}2
  233. chown -hR mediagoblin:www-data "$MEDIAGOBLIN_BASE_DIR"
  234. chown -hR mediagoblin:www-data /var/lib/mediagoblin
  235. chmod -R g+wx /var/lib/mediagoblin
  236. fi
  237. }
  238. function remove_mediagoblin {
  239. if [ ${#MEDIAGOBLIN_DOMAIN_NAME} -eq 0 ]; then
  240. return
  241. fi
  242. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  243. systemctl stop mediagoblin
  244. systemctl disable mediagoblin
  245. rm /etc/systemd/system/mediagoblin.service
  246. systemctl daemon-reload
  247. function_check remove_onion_service
  248. remove_onion_service mediagoblin ${MEDIAGOBLIN_ONION_PORT}
  249. nginx_dissite "$MEDIAGOBLIN_DOMAIN_NAME"
  250. remove_certs "$MEDIAGOBLIN_DOMAIN_NAME"
  251. if [ -d /var/lib/mediagoblin ]; then
  252. rm -rf /var/lib/mediagoblin
  253. fi
  254. if [ -d "$MEDIAGOBLIN_BASE_DIR" ]; then
  255. rm -rf "$MEDIAGOBLIN_BASE_DIR"
  256. fi
  257. remove_completion_param "install_mediagoblin"
  258. remove_completion_param "mediagoblin domain"
  259. sed -i '/mediagoblin/d' "$COMPLETION_FILE"
  260. remove_nodejs mediagoblin
  261. groupdel -f mediagoblin
  262. userdel -r mediagoblin
  263. function_check remove_ddns_domain
  264. remove_ddns_domain "$MEDIAGOBLIN_DOMAIN_NAME"
  265. }
  266. function install_mediagoblin {
  267. if [ ! "$MEDIAGOBLIN_DOMAIN_NAME" ]; then
  268. return
  269. fi
  270. MEDIAGOBLIN_BASE_DIR=/var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs
  271. function_check install_nodejs
  272. install_nodejs mediagoblin
  273. apt-get install -yq python python-dev python-lxml python-imaging python-virtualenv python-setuptools
  274. apt-get install -yq automake perl sqlite python-paste python-pastedeploy python-pastescript
  275. apt-get install -yq python3 python3-dev libpython3-dev python3-lxml python3-pil
  276. groupadd mediagoblin
  277. apt-get install -yq python-service-identity python-ndg-httpsclient
  278. useradd -c "GNU MediaGoblin system account" -d /var/lib/mediagoblin -m -r -g www-data mediagoblin
  279. usermod --append -G mediagoblin mediagoblin
  280. mkdir -p /var/lib/mediagoblin
  281. mkdir -p "$MEDIAGOBLIN_BASE_DIR"
  282. chown -hR mediagoblin:www-data "$MEDIAGOBLIN_BASE_DIR"
  283. chown -hR mediagoblin:www-data /var/lib/mediagoblin
  284. chmod -R g+wx /var/lib/mediagoblin
  285. if [ -d /repos/mediagoblin ]; then
  286. mkdir -p "$MEDIAGOBLIN_BASE_DIR/mediagoblin"
  287. cp -r -p /repos/mediagoblin/. "$MEDIAGOBLIN_BASE_DIR/mediagoblin"
  288. cd "$MEDIAGOBLIN_BASE_DIR/mediagoblin" || exit 347593563
  289. git pull
  290. chown -R mediagoblin:mediagoblin "$MEDIAGOBLIN_BASE_DIR/mediagoblin"
  291. else
  292. su -c "cd $MEDIAGOBLIN_BASE_DIR && git clone $MEDIAGOBLIN_REPO $MEDIAGOBLIN_BASE_DIR/mediagoblin" - mediagoblin
  293. fi
  294. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && git checkout $MEDIAGOBLIN_COMMIT -b $MEDIAGOBLIN_COMMIT" - mediagoblin
  295. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && git submodule sync" - mediagoblin
  296. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && git submodule update --force --init --recursive" - mediagoblin
  297. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && ./bootstrap.sh" - mediagoblin
  298. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && ./configure" - mediagoblin
  299. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && make" - mediagoblin
  300. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && bin/easy_install flup==1.0.3.dev-20110405" - mediagoblin
  301. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && ln -s /var/lib/mediagoblin user_dev" - mediagoblin
  302. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && bash -c 'cp -av mediagoblin.ini mediagoblin_local.ini && cp -av paste.ini paste_local.ini'" - mediagoblin
  303. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && perl -pi -e 's|.*sql_engine = .*|sql_engine = sqlite:////var/lib/mediagoblin/mediagoblin.db|' mediagoblin_local.ini" - mediagoblin
  304. # Video plugin
  305. apt-get install -yq python-gi python3-gi \
  306. gstreamer1.0-tools \
  307. gir1.2-gstreamer-1.0 \
  308. gir1.2-gst-plugins-base-1.0 \
  309. gstreamer1.0-plugins-good \
  310. gstreamer1.0-plugins-bad \
  311. gstreamer1.0-plugins-ugly \
  312. gstreamer1.0-libav \
  313. python-gst-1.0 python3-gst-1.0
  314. cd "$MEDIAGOBLIN_BASE_DIR/mediagoblin" || exit 76345672472
  315. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && echo '[[mediagoblin.media_types.video]]' | tee -a mediagoblin_local.ini" - mediagoblin
  316. # Audio plugin
  317. apt-get install -yq python-gst-1.0 gstreamer1.0-plugins-base gstreamer1.0-plugins-bad gstreamer1.0-plugins-good gstreamer1.0-plugins-ugly gstreamer1.0-libav libsndfile1-dev libasound2-dev libgstreamer-plugins-base1.0-dev python-numpy python-scipy
  318. apt-get -yq install libasound2-dev python3-numpy python3-scipy libsndfile-dev
  319. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && echo '[[mediagoblin.media_types.audio]]' | tee -a mediagoblin_local.ini" - mediagoblin
  320. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin && bin/pip install scikits.audiolab" - mediagoblin
  321. if [ -f "$IMAGE_PASSWORD_FILE" ]; then
  322. MEDIAGOBLIN_ADMIN_PASSWORD="$(printf "%s" "$(cat "$IMAGE_PASSWORD_FILE")")"
  323. else
  324. if [ ! "$MEDIAGOBLIN_ADMIN_PASSWORD" ]; then
  325. MEDIAGOBLIN_ADMIN_PASSWORD="$(create_password "${MINIMUM_PASSWORD_LENGTH}")"
  326. fi
  327. fi
  328. "${PROJECT_NAME}-pass" -u "$MY_USERNAME" -a mediagoblin -p "$MEDIAGOBLIN_ADMIN_PASSWORD"
  329. MEDIAGOBLIN_ONION_HOSTNAME=$(add_onion_service mediagoblin 80 ${MEDIAGOBLIN_ONION_PORT})
  330. set_completion_param "mediagoblin domain" "${MEDIAGOBLIN_DOMAIN_NAME}"
  331. set_completion_param "mediagoblin onion domain" "$MEDIAGOBLIN_ONION_HOSTNAME"
  332. set_completion_param "mediagoblin commit" "$MEDIAGOBLIN_COMMIT"
  333. if [[ $ONION_ONLY == "no" ]]; then
  334. function_check nginx_http_redirect
  335. nginx_http_redirect "$MEDIAGOBLIN_DOMAIN_NAME"
  336. { echo 'server {';
  337. echo ' listen 443 ssl;';
  338. echo ' #listen [::]:443 ssl;';
  339. echo ' include /etc/nginx/mime.types;';
  340. echo '';
  341. echo ' autoindex off;';
  342. echo ' default_type application/octet-stream;';
  343. echo ' sendfile on;';
  344. echo ''; } >> "/etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME"
  345. function_check nginx_ssl
  346. nginx_ssl "$MEDIAGOBLIN_DOMAIN_NAME"
  347. function_check nginx_disable_sniffing
  348. nginx_disable_sniffing "$MEDIAGOBLIN_DOMAIN_NAME"
  349. function_check nginx_limits
  350. nginx_limits "$MEDIAGOBLIN_DOMAIN_NAME" 800m
  351. { echo '';
  352. echo ' client_header_timeout 10m;';
  353. echo ' client_body_timeout 10m;';
  354. echo ' send_timeout 10m;';
  355. echo '';
  356. echo ' fastcgi_read_timeout 600;';
  357. echo ' fastcgi_send_timeout 600;';
  358. echo '';
  359. echo ' gzip on;';
  360. echo ' gzip_min_length 1024;';
  361. echo ' gzip_buffers 4 32k;';
  362. echo ' gzip_types text/plain application/x-javascript text/javascript text/xml text/css;';
  363. echo '';
  364. echo " server_name $MEDIAGOBLIN_DOMAIN_NAME;";
  365. echo ' access_log /dev/null;';
  366. echo ' error_log /dev/null;';
  367. echo '';
  368. echo ' location /mgoblin_static/ {';
  369. echo " alias $MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin/static/;";
  370. echo ' }';
  371. echo '';
  372. echo ' location /mgoblin_media/ {';
  373. echo " alias $MEDIAGOBLIN_BASE_DIR/mediagoblin/user_dev/media/public/;";
  374. echo ' }';
  375. echo '';
  376. echo ' location /theme_static/ {';
  377. echo " alias $MEDIAGOBLIN_BASE_DIR/mediagoblin/user_dev/theme_static/;";
  378. echo ' }';
  379. echo '';
  380. echo ' location /plugin_static/ {';
  381. echo " alias $MEDIAGOBLIN_BASE_DIR/mediagoblin/user_dev/plugin_static/;";
  382. echo ' }';
  383. echo '';
  384. echo ' location / {';
  385. echo " fastcgi_pass 127.0.0.1:$MEDIAGOBLIN_PORT;";
  386. echo ' include /etc/nginx/fastcgi_params;';
  387. echo " fastcgi_param PATH_INFO \$fastcgi_script_name;";
  388. echo ' fastcgi_param SCRIPT_NAME "";';
  389. echo ' fastcgi_read_timeout 30;';
  390. echo ' }';
  391. echo '}'; } >> "/etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME"
  392. else
  393. echo -n '' > "/etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME"
  394. fi
  395. { echo 'server {';
  396. echo " listen 127.0.0.1:${MEDIAGOBLIN_ONION_PORT} default_server;";
  397. echo ' include /etc/nginx/mime.types;';
  398. echo '';
  399. echo ' autoindex off;';
  400. echo ' default_type application/octet-stream;';
  401. echo ' sendfile on;';
  402. echo ''; } >> "/etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME"
  403. function_check nginx_disable_sniffing
  404. nginx_disable_sniffing "$MEDIAGOBLIN_DOMAIN_NAME"
  405. function_check nginx_limits
  406. nginx_limits "$MEDIAGOBLIN_DOMAIN_NAME" 800m
  407. { echo '';
  408. echo ' client_header_timeout 10m;';
  409. echo ' client_body_timeout 10m;';
  410. echo ' send_timeout 10m;';
  411. echo '';
  412. echo ' fastcgi_read_timeout 600;';
  413. echo ' fastcgi_send_timeout 600;';
  414. echo '';
  415. echo ' gzip on;';
  416. echo ' gzip_min_length 1024;';
  417. echo ' gzip_buffers 4 32k;';
  418. echo ' gzip_types text/plain application/x-javascript text/javascript text/xml text/css;';
  419. echo '';
  420. echo " server_name $MEDIAGOBLIN_ONION_HOSTNAME;";
  421. echo ' access_log /dev/null;';
  422. echo ' error_log /dev/null;';
  423. echo '';
  424. echo ' location /mgoblin_static/ {';
  425. echo " alias $MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin/static/;";
  426. echo ' }';
  427. echo '';
  428. echo ' location /mgoblin_media/ {';
  429. echo " alias $MEDIAGOBLIN_BASE_DIR/mediagoblin/user_dev/media/public/;";
  430. echo ' }';
  431. echo '';
  432. echo ' location /theme_static/ {';
  433. echo " alias $MEDIAGOBLIN_BASE_DIR/mediagoblin/user_dev/theme_static/;";
  434. echo ' }';
  435. echo '';
  436. echo ' location /plugin_static/ {';
  437. echo " alias $MEDIAGOBLIN_BASE_DIR/mediagoblin/user_dev/plugin_static/;";
  438. echo ' }';
  439. echo '';
  440. echo ' location / {';
  441. echo " fastcgi_pass 127.0.0.1:$MEDIAGOBLIN_PORT;";
  442. echo ' include /etc/nginx/fastcgi_params;';
  443. echo " fastcgi_param PATH_INFO \$fastcgi_script_name;";
  444. echo ' fastcgi_param SCRIPT_NAME "";';
  445. echo ' fastcgi_read_timeout 30;';
  446. echo ' }';
  447. echo '}'; } >> "/etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME"
  448. { echo '[Unit]';
  449. echo 'Description=Media service';
  450. echo 'Requires=network.target';
  451. echo 'After=network.target';
  452. echo '';
  453. echo '[Service]';
  454. echo 'Type=simple';
  455. echo 'User=mediagoblin';
  456. echo 'Group=mediagoblin';
  457. echo "WorkingDirectory=$MEDIAGOBLIN_BASE_DIR/mediagoblin/";
  458. echo "ExecStart=$MEDIAGOBLIN_BASE_DIR/mediagoblin/lazyserver.sh --server-name=fcgi fcgi_host=127.0.0.1 fcgi_port=$MEDIAGOBLIN_PORT";
  459. echo "Environment=MEDIAGOBLIN_CONFIG=$MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin_local.ini CELERY_ALWAYS_EAGER=true";
  460. echo 'Restart=always';
  461. echo 'RestartSec=10';
  462. echo '';
  463. echo '[Install]';
  464. echo 'WantedBy=multi-user.target'; } > /etc/systemd/system/mediagoblin.service
  465. chmod +x /etc/systemd/system/mediagoblin.service
  466. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin/ && bin/gmg dbupdate" - mediagoblin
  467. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin/ && bin/gmg adduser --username $MY_USERNAME --password $MY_USERNAME $MEDIAGOBLIN_ADMIN_PASSWORD" - mediagoblin
  468. su -c "cd $MEDIAGOBLIN_BASE_DIR/mediagoblin/ && bin/gmg makeadmin $MY_USERNAME" - mediagoblin
  469. sed -i 's|email_debug_mode.*|email_debug_mode = false|g' "$MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin_local.ini"
  470. sed -i "s|email_sender_address.*|email_sender_address = \"noreply@${DEFAULT_DOMAIN_NAME}\"|g" "$MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin_local.ini"
  471. sed -i 's|allow_reporting.*|allow_reporting = false|g' "$MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin_local.ini"
  472. if ! grep -q '[[[skip_transcode]]]' "$MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin_local.ini"; then
  473. { echo '[[[skip_transcode]]]';
  474. echo 'mime_types = video/webm, video/ogg, video/mp4, audio/ogg, application/ogg, application/x-annodex';
  475. echo 'container_formats = Matroska, Ogg, ISO MP4/M4A';
  476. echo 'video_codecs = VP8 video, VP9 video, Theora, H.264, H.264 / AVC, MPEG-4 video';
  477. echo 'audio_codecs = Vorbis, MPEG-4 AAC';
  478. echo 'dimensions_match = false'; } >> "$MEDIAGOBLIN_BASE_DIR/mediagoblin/mediagoblin_local.ini"
  479. fi
  480. systemctl enable mediagoblin
  481. systemctl daemon-reload
  482. systemctl start mediagoblin
  483. mediagoblin_fix_email
  484. if [ -d /var/lib/mediagoblin/media ]; then
  485. chmod -R +x /var/lib/mediagoblin/media
  486. fi
  487. function_check create_site_certificate
  488. create_site_certificate "$MEDIAGOBLIN_DOMAIN_NAME" 'yes'
  489. function_check configure_php
  490. configure_php
  491. nginx_ensite "$MEDIAGOBLIN_DOMAIN_NAME"
  492. systemctl restart php7.0-fpm
  493. systemctl restart nginx
  494. function_check add_ddns_domain
  495. add_ddns_domain "$MEDIAGOBLIN_DOMAIN_NAME"
  496. chown -hR mediagoblin:www-data /var/lib/mediagoblin
  497. chmod -R g+wx /var/lib/mediagoblin
  498. APP_INSTALLED=1
  499. }
  500. # NOTE: deliberately no exit 0