123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676 |
- #!/bin/bash
- #
- # .---. . .
- # | | |
- # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
- # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
- # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
- #
- # Freedom in the Cloud
- #
- # matrix server
- #
- # https://raw.githubusercontent.com/silvio/docker-matrix
- # https://matrix.org/blog/2016/02/10/advanced-synapse-setup-with-lets-encrypt
- #
- # Test by visiting https://$MATRIX_DOMAIN_NAME/_matrix/key/v2/server/auto
- #
- # If working then telnet $MATRIX_DOMAIN_NAME 8448 should return a response
- #
- # License
- # =======
- #
- # Copyright (C) 2016-2017 Bob Mottram <bob@freedombone.net>
- #
- # This program is free software: you can redistribute it and/or modify
- # it under the terms of the GNU Affero General Public License as published by
- # the Free Software Foundation, either version 3 of the License, or
- # (at your option) any later version.
- #
- # This program is distributed in the hope that it will be useful,
- # but WITHOUT ANY WARRANTY; without even the implied warranty of
- # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- # GNU Affero General Public License for more details.
- #
- # You should have received a copy of the GNU Affero General Public License
- # along with this program. If not, see <http://www.gnu.org/licenses/>.
-
- # Login username is @username:domain
-
- VARIANTS='full full-vim chat'
-
- IN_DEFAULT_INSTALL=0
- SHOW_ON_ABOUT=1
-
- MATRIX_DOMAIN_NAME=
- MATRIX_CODE=
-
- MATRIX_DATA_DIR='/var/lib/matrix'
- MATRIX_HTTP_PORT=8448
- MATRIX_PORT=8008
- MATRIX_FEDERATION_ONION_PORT=8111
- MATRIX_ONION_PORT=8109
- MATRIX_REPO="https://github.com/matrix-org/synapse"
- MATRIX_COMMIT='c45dc6c62aa2a2e83a10d8116a709dfd8c144e3c'
- REPORT_STATS="no"
- MATRIX_SECRET=
-
- matrix_variables=(ONION_ONLY
- MY_USERNAME
- MATRIX_SECRET
- DEFAULT_DOMAIN_NAME
- MATRIX_DOMAIN_NAME
- MATRIX_CODE)
-
- function matrix_nginx {
- matrix_nginx_site=/etc/nginx/sites-available/$MATRIX_DOMAIN_NAME
- if [[ $ONION_ONLY == "no" ]]; then
- echo 'server {' > $matrix_nginx_site
- echo " listen 0.0.0.0:443;" >> $matrix_nginx_site
- echo " server_name ${MATRIX_DOMAIN_NAME};" >> $matrix_nginx_site
- echo '' >> $matrix_nginx_site
- echo ' # Security' >> $matrix_nginx_site
- function_check nginx_ssl
- nginx_ssl ${MATRIX_DOMAIN_NAME}
-
- function_check nginx_disable_sniffing
- nginx_disable_sniffing ${MATRIX_DOMAIN_NAME}
-
- echo ' add_header Strict-Transport-Security max-age=15768000;' >> $matrix_nginx_site
- echo '' >> $matrix_nginx_site
- echo ' # Logs' >> $matrix_nginx_site
- echo ' access_log /dev/null;' >> $matrix_nginx_site
- echo ' error_log /dev/null;' >> $matrix_nginx_site
- echo '' >> $matrix_nginx_site
- echo ' root /var/lib/matrix/media_store;' >> $matrix_nginx_site
- echo '' >> $matrix_nginx_site
- echo ' # Index' >> $matrix_nginx_site
- echo ' index index.html;' >> $matrix_nginx_site
- echo '' >> $matrix_nginx_site
- echo ' location /_matrix {' >> $matrix_nginx_site
- function_check nginx_limits
- nginx_limits ${MATRIX_DOMAIN_NAME} '15m'
- echo ' proxy_pass http://localhost:8008;' >> $matrix_nginx_site
- echo ' }' >> $matrix_nginx_site
- echo '}' >> $matrix_nginx_site
- echo '' >> $matrix_nginx_site
- echo 'server {' >> $matrix_nginx_site
- echo " listen 0.0.0.0:8448;" >> $matrix_nginx_site
- echo " server_name ${MATRIX_DOMAIN_NAME};" >> $matrix_nginx_site
- echo '' >> $matrix_nginx_site
- echo ' # Security' >> $matrix_nginx_site
- function_check nginx_ssl
- nginx_ssl ${MATRIX_DOMAIN_NAME}
-
- function_check nginx_disable_sniffing
- nginx_disable_sniffing ${MATRIX_DOMAIN_NAME}
-
- echo ' add_header Strict-Transport-Security max-age=15768000;' >> $matrix_nginx_site
- echo '' >> $matrix_nginx_site
- echo ' # Logs' >> $matrix_nginx_site
- echo ' access_log /dev/null;' >> $matrix_nginx_site
- echo ' error_log /dev/null;' >> $matrix_nginx_site
- echo '' >> $matrix_nginx_site
- echo ' root /var/lib/matrix/media_store;' >> $matrix_nginx_site
- echo '' >> $matrix_nginx_site
- echo ' # Index' >> $matrix_nginx_site
- echo ' index index.html;' >> $matrix_nginx_site
- echo '' >> $matrix_nginx_site
- echo ' # Location' >> $matrix_nginx_site
- echo ' location /_matrix {' >> $matrix_nginx_site
- function_check nginx_limits
- nginx_limits ${MATRIX_DOMAIN_NAME} '15m'
- echo ' proxy_pass http://localhost:8008;' >> $matrix_nginx_site
- echo ' }' >> $matrix_nginx_site
- echo '}' >> $matrix_nginx_site
- echo '' >> $matrix_nginx_site
- else
- echo -n '' > $matrix_nginx_site
- fi
- echo 'server {' >> $matrix_nginx_site
- echo " listen 127.0.0.1:$MATRIX_FEDERATION_ONION_PORT default_server;" >> $matrix_nginx_site
- echo " server_name $MATRIX_DOMAIN_NAME;" >> $matrix_nginx_site
- echo '' >> $matrix_nginx_site
- function_check nginx_disable_sniffing
- nginx_disable_sniffing $MATRIX_DOMAIN_NAME
- echo '' >> $matrix_nginx_site
- echo ' # Logs' >> $matrix_nginx_site
- echo ' access_log /dev/null;' >> $matrix_nginx_site
- echo ' error_log /dev/null;' >> $matrix_nginx_site
- echo '' >> $matrix_nginx_site
- echo ' root /var/lib/matrix/media_store;' >> $matrix_nginx_site
- echo '' >> $matrix_nginx_site
- echo ' # Location' >> $matrix_nginx_site
- echo ' location /_matrix {' >> $matrix_nginx_site
- function_check nginx_limits
- nginx_limits ${MATRIX_DOMAIN_NAME} '15m'
- echo ' proxy_pass http://localhost:8008;' >> $matrix_nginx_site
- echo ' }' >> $matrix_nginx_site
- echo '}' >> $matrix_nginx_site
- echo '' >> $matrix_nginx_site
- echo 'server {' >> $matrix_nginx_site
- echo " listen 127.0.0.1:$MATRIX_ONION_PORT default_server;" >> $matrix_nginx_site
- echo " server_name $MATRIX_DOMAIN_NAME;" >> $matrix_nginx_site
- echo '' >> $matrix_nginx_site
- function_check nginx_disable_sniffing
- nginx_disable_sniffing $MATRIX_DOMAIN_NAME
- echo '' >> $matrix_nginx_site
- echo ' # Logs' >> $matrix_nginx_site
- echo ' access_log /dev/null;' >> $matrix_nginx_site
- echo ' error_log /dev/null;' >> $matrix_nginx_site
- echo '' >> $matrix_nginx_site
- echo ' root /var/lib/matrix/media_store;' >> $matrix_nginx_site
- echo '' >> $matrix_nginx_site
- echo ' # Location' >> $matrix_nginx_site
- echo ' location /_matrix {' >> $matrix_nginx_site
- function_check nginx_limits
- nginx_limits ${MATRIX_DOMAIN_NAME} '15m'
- echo ' proxy_pass http://localhost:8008;' >> $matrix_nginx_site
- echo ' }' >> $matrix_nginx_site
- echo '}' >> $matrix_nginx_site
-
- if [ ! -d /var/www/$MATRIX_DOMAIN_NAME ]; then
- mkdir -p /var/www/$MATRIX_DOMAIN_NAME/htdocs
- fi
-
- function_check add_ddns_domain
- add_ddns_domain $MATRIX_DOMAIN_NAME
- }
-
- function matrix_generate_homeserver_file {
- local filepath="${1}"
-
- cd /etc/matrix
- python -m synapse.app.homeserver \
- --config-path "${filepath}" \
- --generate-config \
- --report-stats ${REPORT_STATS} \
- --server-name ${MATRIX_DOMAIN_NAME}
- }
-
- function matrix_configure_homeserver_yaml {
- local turnkey="${1}"
- local filepath="${2}"
-
- local ymltemp="$(mktemp)"
-
- awk -v TURNURIES="turn_uris: [\"turn:${MATRIX_DOMAIN_NAME}:${TURN_HTTP_PORT}?transport=udp\", \"turn:${DEFAULT_DOMAIN_NAME}:${TURN_HTTP_PORT}?transport=tcp\"]" \
- -v TURNSHAREDSECRET="turn_shared_secret: \"${turnkey}\"" \
- -v PIDFILE="pid_file: ${MATRIX_DATA_DIR}/homeserver.pid" \
- -v DATABASE="database: \"${MATRIX_DATA_DIR}/homeserver.db\"" \
- -v LOGFILE="log_file: \"/dev/null\"" \
- -v MEDIASTORE="media_store_path: \"${MATRIX_DATA_DIR}/media_store\"" \
- '{
- sub(/turn_shared_secret: "YOUR_SHARED_SECRET"/, TURNSHAREDSECRET);
- sub(/turn_uris: \[\]/, TURNURIES);
- sub(/pid_file: \/homeserver.pid/, PIDFILE);
- sub(/database: "\/homeserver.db"/, DATABASE);
- sub(/log_file: "\/homeserver.log"/, LOGFILE);
- sub(/media_store_path: "\/media_store"/, MEDIASTORE);
- print;
- }' "${filepath}" > "${ymltemp}"
-
- mv ${ymltemp} "${filepath}"
-
- if [[ $ONION_ONLY == "no" ]]; then
- sed -i "s|tls_certificate_path:.*|tls_certificate_path: \"/etc/ssl/certs/${MATRIX_DOMAIN_NAME}.pem\"|g" "${filepath}"
- if ! grep -q '#tls_private_key_path' "${filepath}"; then
- sed -i 's|tls_private_key_path|#tls_private_key_path|g' "${filepath}"
- fi
- sed -i "s|tls_dh_params_path:.*|tls_dh_params_path: \"/etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam\"|g" "${filepath}"
- fi
- sed -i 's|8448|8449|g' "${filepath}"
- sed -i 's|tls:.*|tls: False|g' "${filepath}"
- sed -i 's|no_tls: .*|no_tls: True|g' "${filepath}"
- sed -i ':a;N;$!ba;s/ tls: [^\n]*/ tls: False/2' "${filepath}"
- sed -i 's|enable_registration_captcha.*|enable_registration_captcha: False|g' "${filepath}"
- sed -i "s|database: \".*|database: \"${MATRIX_DATA_DIR}/homeserver.db\"|g" "${filepath}"
- sed -i "s|media_store_path:.*|media_store_path: \"${MATRIX_DATA_DIR}/media_store\"|g" "${filepath}"
- sed -i "s|pid_file:.*|pid_file: \"${MATRIX_DATA_DIR}/homeserver.pid\"|g" "${filepath}"
- sed -i "s|log_file:.*|log_file: \"/dev/null\"|g" "${filepath}"
- sed -i 's|bind_address:.*|bind_address: 127.0.0.1|g' "${filepath}"
- sed -i "s|bind_addresses:.*|bind_addresses: ['127.0.0.1']|g" "${filepath}"
- sed -i 's|x_forwarded:.*|x_forwarded: false|g' "${filepath}"
- sed -i "s|server_name:.*|server_name: \"${MATRIX_DOMAIN_NAME}\"|g" "${filepath}"
- sed -i "/trusted_third_party_id_servers:/a - ${MATRIX_DOMAIN_NAME}" "${filepath}"
- sed -i "s|- ${MATRIX_DOMAIN_NAME}| - ${MATRIX_DOMAIN_NAME}|g" "${filepath}"
- sed -i "s|enable_registration:.*|enable_registration: False|g" "${filepath}"
- }
-
- function matrix_diff {
- DIFFPARAMS="${DIFFPARAMS:-Naur}"
- MATRIX_DOMAIN_NAME="${MATRIX_DOMAIN_NAME:-demo_server_name}"
- REPORT_STATS="${REPORT_STATS:-no_or_yes}"
- export MATRIX_DOMAIN_NAME REPORT_STATS
-
- matrix_generate_synapse_file $INSTALL_DIR/homeserver.synapse.yaml
- diff -${DIFFPARAMS} $INSTALL_DIR/homeserver.synapse.yaml ${MATRIX_DATA_DIR}/homeserver.yaml
- rm $INSTALL_DIR/homeserver.synapse.yaml
- }
-
- function matrix_generate {
- breakup="0"
- [[ -z "${MATRIX_DOMAIN_NAME}" ]] && echo "STOP! environment variable MATRIX_DOMAIN_NAME must be set" && breakup="1"
- [[ -z "${REPORT_STATS}" ]] && echo "STOP! environment variable REPORT_STATS must be set to 'no' or 'yes'" && breakup="1"
- [[ "${breakup}" == "1" ]] && exit 1
-
- [[ "${REPORT_STATS}" != "yes" ]] && [[ "${REPORT_STATS}" != "no" ]] && \
- echo "STOP! REPORT_STATS needs to be 'no' or 'yes'" && breakup="1"
-
- homeserver_config=${MATRIX_DATA_DIR}/homeserver.yaml
- if [ -f $homeserver_config ]; then
- rm $homeserver_config
- fi
- matrix_generate_homeserver_file $homeserver_config
- matrix_configure_homeserver_yaml "${turnkey}" $homeserver_config
- }
-
- function remove_user_matrix {
- remove_username="$1"
-
- ${PROJECT_NAME}-pass -u $remove_username --rmapp matrix
-
- # TODO: There is no user removal script within synapse
- }
-
- function add_user_matrix {
- new_username="$1"
- new_user_password="$2"
- is_admin_user='-a'
-
- if [[ "$new_username" != "$MY_USERNAME" ]]; then
- is_admin_user=''
- fi
-
- ${PROJECT_NAME}-pass -u $new_username -a matrix -p "$new_user_password"
-
- if [[ $ONION_ONLY == 'no' ]]; then
- retval=$(register_new_matrix_user -c ${MATRIX_DATA_DIR}/homeserver.yaml -u "${new_username}" -p "${new_user_password}" $is_admin_user https://${MATRIX_DOMAIN_NAME})
- else
- retval=$(register_new_matrix_user -c ${MATRIX_DATA_DIR}/homeserver.yaml -u "${new_username}" -p "${new_user_password}" $is_admin_user http://${MATRIX_DOMAIN_NAME})
- fi
- echo "0"
- }
-
- function install_interactive_matrix {
- if [ ! $ONION_ONLY ]; then
- ONION_ONLY='no'
- fi
-
- if [[ $ONION_ONLY != "no" ]]; then
- MATRIX_DOMAIN_NAME='matrix.local'
- write_config_param "MATRIX_DOMAIN_NAME" "$MATRIX_DOMAIN_NAME"
- else
- function_check interactive_site_details
- interactive_site_details "matrix" "MATRIX_DOMAIN_NAME" "MATRIX_CODE"
- if [ ! $MATRIX_DOMAIN_NAME ]; then
- return
- fi
- read_config_param "MATRIX_DOMAIN_NAME"
- read_config_param "MATRIX_CODE"
- fi
- APP_INSTALLED=1
- }
-
- function change_password_matrix {
- curr_username="$1"
- new_user_password="$2"
-
- #${PROJECT_NAME}-pass -u "$curr_username" -a matrix -p "$new_user_password"
- }
-
- function reconfigure_matrix {
- echo -n ''
- }
-
- function upgrade_matrix {
- if [ ! -d /etc/matrix ]; then
- return
- fi
- systemctl stop turn
- systemctl stop matrix
-
- function_check set_repo_commit
- set_repo_commit /etc/matrix "matrix commit" "$MATRIX_COMMIT" $MATRIX_REPO
- cd /etc/matrix
- pip install --upgrade --process-dependency-links .
-
- sed -i 's/ssl.PROTOCOL_SSLv23/ssl.PROTOCOL_TLSv1/g' /usr/local/bin/register_new_matrix_user
-
- chown -R matrix:matrix /etc/matrix
- chown -R matrix:matrix $MATRIX_DATA_DIR
-
- pip install --upgrade --force "pynacl==0.3.0"
-
- if [ -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam ]; then
- chmod 755 /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam
- fi
- systemctl start turn
- systemctl start matrix
- }
-
- function backup_local_matrix {
- source_directory=/etc/matrix
- if [ -d $source_directory ]; then
- systemctl stop turn
- systemctl stop matrix
-
- function_check backup_directory_to_usb
- backup_directory_to_usb $source_directory matrix
- source_directory=$MATRIX_DATA_DIR
- if [ -d $source_directory ]; then
- backup_directory_to_usb $source_directory matrixdata
- fi
-
- systemctl start turn
- systemctl start matrix
- fi
- }
-
- function restore_local_matrix {
- if [ -d /etc/matrix ]; then
- systemctl stop turn
- systemctl stop matrix
-
- temp_restore_dir=/root/tempmatrix
- function_check restore_directory_from_usb
- restore_directory_from_usb $temp_restore_dir matrix
- cp -r $temp_restore_dir/etc/matrix/* /etc/matrix
- if [ ! "$?" = "0" ]; then
- function_check backup_unmount_drive
- backup_unmount_drive
- exit 3783
- fi
- rm -rf $temp_restore_dir
- chown -R matrix:matrix /etc/matrix
-
- temp_restore_dir=/root/tempmatrixdata
- restore_directory_from_usb $temp_restore_dir matrixdata
- cp -r $temp_restore_dir$MATRIX_DATA_DIR/* $MATRIX_DATA_DIR
- if [ ! "$?" = "0" ]; then
- function_check backup_unmount_drive
- backup_unmount_drive
- exit 78352
- fi
- rm -rf $temp_restore_dir
- chown -R matrix:matrix $MATRIX_DATA_DIR
-
- if [[ $ONION_ONLY == "no" ]]; then
- if [ -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam ]; then
- chmod 755 /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam
- fi
- fi
-
- systemctl start turn
- systemctl start matrix
- fi
- }
-
- function backup_remote_matrix {
- source_directory=/etc/matrix
- if [ -d $source_directory ]; then
- systemctl stop turn
- systemctl stop matrix
-
- function_check backup_directory_to_friend
- backup_directory_to_friend $source_directory matrix
- source_directory=$MATRIX_DATA_DIR
- if [ -d $source_directory ]; then
- backup_directory_to_friend $source_directory matrixdata
- fi
-
- systemctl start turn
- systemctl start matrix
- fi
- }
-
- function restore_remote_matrix {
- if [ -d /etc/matrix ]; then
- systemctl stop turn
- systemctl stop matrix
-
- temp_restore_dir=/root/tempmatrix
- function_check restore_directory_from_friend
- restore_directory_from_friend $temp_restore_dir matrix
- cp -r $temp_restore_dir/etc/matrix/* /etc/matrix
- if [ ! "$?" = "0" ]; then
- exit 38935
- fi
- rm -rf $temp_restore_dir
- chown -R matrix:matrix /etc/matrix
-
- temp_restore_dir=/root/tempmatrixdata
- restore_directory_from_friend $temp_restore_dir matrixdata
- cp -r $temp_restore_dir$MATRIX_DATA_DIR/* $MATRIX_DATA_DIR
- if [ ! "$?" = "0" ]; then
- exit 60923
- fi
- rm -rf $temp_restore_dir
- chown -R matrix:matrix $MATRIX_DATA_DIR
-
- systemctl start turn
- systemctl start matrix
- fi
- }
-
- function remove_matrix {
- firewall_remove ${MATRIX_HTTP_PORT}
-
- nginx_dissite $MATRIX_DOMAIN_NAME
- remove_certs $MATRIX_DOMAIN_NAME
- if [ -f /etc/nginx/sites-available/$MATRIX_DOMAIN_NAME ]; then
- rm /etc/nginx/sites-available/$MATRIX_DOMAIN_NAME
- fi
- if [ ! -d /var/www/$MATRIX_DOMAIN_NAME ]; then
- rm -rf /var/www/$MATRIX_DOMAIN_NAME
- fi
- function_check remove_ddns_domain
- remove_ddns_domain $MATRIX_DOMAIN_NAME
-
- systemctl stop matrix
-
- function_check remove_turn
- remove_turn
-
- systemctl disable matrix
- if [ -f /etc/systemd/system/matrix.service ]; then
- rm /etc/systemd/system/matrix.service
- fi
- apt-get -y remove --purge coturn
- cd /etc/matrix
- pip uninstall .
- rm -rf $MATRIX_DATA_DIR
- rm -rf /etc/matrix
- deluser matrix
- delgroup matrix
- remove_onion_service matrix ${MATRIX_ONION_PORT}
- remove_onion_service matrix ${MATRIX_FEDERATION_ONION_PORT}
-
- #sed -i "/# Matrix Server/,/# End of Matrix Server/d" /etc/nginx/sites-available/${MATRIX_DOMAIN_NAME}
- systemctl restart nginx
-
- remove_completion_param install_matrix
- sed -i '/matrix/d' $COMPLETION_FILE
- }
-
- function install_home_server {
- if [ ! -d /etc/matrix ]; then
- function_check git_clone
- git_clone $MATRIX_REPO /etc/matrix
- if [ ! -d /etc/matrix ]; then
- echo $'Unable to clone matrix repo'
- exit 6724683
- fi
- fi
-
- cd /etc/matrix
- git checkout $MATRIX_COMMIT -b $MATRIX_COMMIT
- set_completion_param "matrix commit" "$MATRIX_COMMIT"
- if [ ! -d $INSTALL_DIR/matrix ]; then
- mkdir -p $INSTALL_DIR/matrix
- fi
- rm -rf /usr/local/lib/python2.7/dist-packages/ldap*
- if [ -d $INSTALL_DIR/matrix ]; then
- rm -rf $INSTALL_DIR/matrix/*
- fi
- pip install --upgrade --process-dependency-links . -b $INSTALL_DIR/matrix
- if [ ! "$?" = "0" ]; then
- echo $'Failed to install matrix home server'
- exit 782542
- fi
-
- if [ ! -d $MATRIX_DATA_DIR ]; then
- mkdir $MATRIX_DATA_DIR
- fi
-
- groupadd matrix
- useradd -c "Matrix system account" -d $MATRIX_DATA_DIR -m -r -g matrix matrix
- usermod -a -G www-data matrix
- usermod -a -G ssl-cert matrix
-
- function_check install_turn
- install_turn
- MATRIX_SECRET="${turnkey}"
-
- function_check matrix_generate
- matrix_generate
-
- if [[ -z ${MATRIX_DATA_DIR}/homeserver.yaml ]]; then
- echo $'homeserver.yaml is zero size'
- exit 783724
- fi
-
- # Disable the web client
- sed -i 's|web_client:.*|web_client: False|g' $MATRIX_DATA_DIR/homeserver.yaml
- sed -i 's|, webclient||g' $MATRIX_DATA_DIR/homeserver.yaml
- sed -i "/- '0.0.0.0'/d" $MATRIX_DATA_DIR/homeserver.yaml
-
- chmod -R 700 $MATRIX_DATA_DIR/homeserver.yaml
- chown -R matrix:matrix /etc/matrix
- chown -R matrix:matrix $MATRIX_DATA_DIR
-
- sed -i 's/ssl.PROTOCOL_SSLv23/ssl.PROTOCOL_TLSv1/g' /usr/local/bin/register_new_matrix_user
-
- echo '[Unit]' > /etc/systemd/system/matrix.service
- echo 'Description=Synapse Matrix homeserver' >> /etc/systemd/system/matrix.service
- echo 'After=network.target nginx.target' >> /etc/systemd/system/matrix.service
- echo '' >> /etc/systemd/system/matrix.service
- echo '[Service]' >> /etc/systemd/system/matrix.service
- echo 'Type=simple' >> /etc/systemd/system/matrix.service
- echo 'User=matrix' >> /etc/systemd/system/matrix.service
- echo "WorkingDirectory=/etc/matrix" >> /etc/systemd/system/matrix.service
- echo "ExecStart=/usr/bin/python -m synapse.app.homeserver --config-path ${MATRIX_DATA_DIR}/homeserver.yaml" >> /etc/systemd/system/matrix.service
- echo 'Restart=on-failure' >> /etc/systemd/system/matrix.service
- echo 'RestartSec=10' >> /etc/systemd/system/matrix.service
- echo '' >> /etc/systemd/system/matrix.service
- echo '[Install]' >> /etc/systemd/system/matrix.service
- echo 'WantedBy=multi-user.target' >> /etc/systemd/system/matrix.service
- systemctl enable matrix
- systemctl daemon-reload
- systemctl start matrix
-
- # wait for the database to be created
- sleep 5
-
- if [ ! -f $MATRIX_DATA_DIR/homeserver.db ]; then
- echo $'No matrix home server database was created'
- exit 23782
- fi
- chmod -R 700 $MATRIX_DATA_DIR/homeserver.db
-
- MATRIX_ONION_HOSTNAME=$(add_onion_service matrix ${MATRIX_PORT} ${MATRIX_ONION_PORT})
- echo "HiddenServicePort ${MATRIX_HTTP_PORT} 127.0.0.1:${MATRIX_FEDERATION_ONION_PORT}" >> /etc/tor/torrc
- systemctl reload tor
-
- if [ ! ${MATRIX_PASSWORD} ]; then
- if [ -f ${IMAGE_PASSWORD_FILE} ]; then
- MATRIX_PASSWORD="$(printf `cat $IMAGE_PASSWORD_FILE`)"
- else
- MATRIX_PASSWORD="$(create_password ${MINIMUM_PASSWORD_LENGTH})"
- fi
- fi
-
- firewall_add matrix ${MATRIX_HTTP_PORT}
-
- rm -rf ${MATRIX_DATA_DIR}/Maildir
- rm -rf ${MATRIX_DATA_DIR}/.mutt
- rm -f ${MATRIX_DATA_DIR}/.muttrc
- rm -f ${MATRIX_DATA_DIR}/.mutt-alias
- rm -f ${MATRIX_DATA_DIR}/.procmailrc
- rm -f ${MATRIX_DATA_DIR}/.emacs-mutt
- }
-
- function install_matrix {
- if [ ! -d $INSTALL_DIR ]; then
- mkdir -p $INSTALL_DIR
- fi
-
- if [[ ${ONION_ONLY} == 'no' ]]; then
- if [ ! -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.pem ]; then
- if [ -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.crt ]; then
- rm /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.crt
- fi
- if [ -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam ]; then
- rm /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam
- fi
- echo $'Obtaining certificate for the main domain'
- function_check create_site_certificate
- create_site_certificate ${MATRIX_DOMAIN_NAME} 'yes'
-
- if [[ $ONION_ONLY == "no" ]]; then
- chmod 755 /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam
- fi
-
- if [ -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.crt ]; then
- echo $'Incorrect certificate generated'
- exit 73572
- fi
- fi
- chgrp -R ssl-cert /etc/letsencrypt
- chmod -R g=rX /etc/letsencrypt
- fi
-
- export DEBIAN_FRONTEND=noninteractive
- apt-get -yq install coreutils \
- curl file gcc git libevent-2.0-5 \
- libevent-dev libffi-dev libffi6 \
- libgnutls28-dev libjpeg62-turbo \
- libjpeg62-turbo-dev libldap-2.4-2 \
- libldap2-dev libsasl2-dev \
- libsqlite3-dev libssl-dev \
- libssl1.0.0 libtool libxml2 \
- libxml2-dev libxslt1-dev libxslt1.1 \
- make python python-dev \
- python-pip python-psycopg2 \
- python-virtualenv sqlite unzip \
- zlib1g zlib1g-dev
-
- pip install --upgrade pip
- pip install --upgrade python-ldap
- pip install --upgrade lxml
-
- function_check matrix_nginx
- matrix_nginx
-
- function_check install_home_server
- install_home_server
-
- systemctl restart nginx
- systemctl restart turn
- systemctl restart matrix
-
- function_check update_default_domain
- update_default_domain
-
- # wait for nginx to start otherwise user add fails later
- sleep 5
-
- pip install --upgrade --force "pynacl==0.3.0"
-
- if [[ $(add_user_matrix "${MY_USERNAME}" "${MATRIX_PASSWORD}" | tail -n 1) != "0" ]]; then
- echo $'Failed to add matrix admin user';
- exit 879352
- fi
-
- APP_INSTALLED=1
- }
|