freedombone-app-irc 22KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690
  1. #!/bin/bash
  2. # _____ _ _
  3. # | __|___ ___ ___ _| |___ _____| |_ ___ ___ ___
  4. # | __| _| -_| -_| . | . | | . | . | | -_|
  5. # |__| |_| |___|___|___|___|_|_|_|___|___|_|_|___|
  6. #
  7. # Freedom in the Cloud
  8. #
  9. # IRC server application
  10. #
  11. # License
  12. # =======
  13. #
  14. # Copyright (C) 2014-2018 Bob Mottram <bob@freedombone.net>
  15. #
  16. # This program is free software: you can redistribute it and/or modify
  17. # it under the terms of the GNU Affero General Public License as published by
  18. # the Free Software Foundation, either version 3 of the License, or
  19. # (at your option) any later version.
  20. #
  21. # This program is distributed in the hope that it will be useful,
  22. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  23. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  24. # GNU Affero General Public License for more details.
  25. #
  26. # You should have received a copy of the GNU Affero General Public License
  27. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  28. VARIANTS='full full-vim chat'
  29. IN_DEFAULT_INSTALL=0
  30. SHOW_ON_ABOUT=1
  31. IRC_BOUNCER_PORT=6697
  32. IRC_ONION_PORT=8098
  33. IRC_PORT=6698
  34. # An optional password to log into IRC. This applies to all users
  35. IRC_PASSWORD=
  36. # Number of entries for the bouncer to buffer
  37. IRC_BUFFER_LENGTH=300
  38. irc_variables=(MY_USERNAME
  39. MY_NAME
  40. IRC_PORT
  41. IRC_BOUNCER_PORT
  42. IRC_ONION_HOSTNAME
  43. IRC_OPERATOR_PASSWORD
  44. DEFAULT_DOMAIN_NAME
  45. INSTALLED_WITHIN_DOCKER
  46. IRC_BUFFER_LENGTH
  47. ONION_ONLY)
  48. function logging_on_irc {
  49. echo -n ''
  50. }
  51. function logging_off_irc {
  52. echo -n ''
  53. }
  54. function irc_get_global_password {
  55. grep "Password =" /etc/ngircd/ngircd.conf | head -n 1 | awk -F '=' '{print $2}'
  56. }
  57. function start_irc_bouncer {
  58. update_default_domain
  59. if [ ! -f /home/znc/.znc/znc.pem ]; then
  60. # no certificate exists
  61. su -c 'znc -p' - znc
  62. else
  63. # an existing certificate is being used
  64. su -c 'znc' - znc
  65. fi
  66. }
  67. function stop_irc_bouncer {
  68. pkill znc
  69. }
  70. function create_irssi_config {
  71. new_username="$1"
  72. read_config_param IRC_BOUNCER_PORT
  73. read_config_param IRC_ONION_PORT
  74. IRC_PASSWORD=$(irc_get_global_password)
  75. new_name="$2"
  76. if [ ${#new_name} -eq 0 ]; then
  77. new_name="$new_username"
  78. fi
  79. { echo 'servers = (';
  80. echo ' {';
  81. echo ' address = "chat.freenode.net";';
  82. echo ' chatnet = "Freenode";';
  83. echo ' port = "6667";';
  84. echo ' autoconnect = "no";';
  85. echo ' },';
  86. echo ' {';
  87. echo ' address = "irc.oftc.net";';
  88. echo ' chatnet = "OFTC";';
  89. echo ' port = "6667";';
  90. echo ' autoconnect = "no";';
  91. echo ' },';
  92. echo ' {';
  93. echo " address = \"127.0.0.1\";";
  94. echo ' ssl_verify = "no";'; } > "/home/${new_username}/.irssi/config"
  95. if [[ ${ONION_ONLY} == 'no' ]]; then
  96. echo ' use_ssl = "yes";' >> "/home/${new_username}/.irssi/config"
  97. echo " port = \"${IRC_BOUNCER_PORT}\";" >> "/home/${new_username}/.irssi/config"
  98. else
  99. echo ' use_ssl = "no";' >> "/home/${new_username}/.irssi/config"
  100. IRC_ONION_HOSTNAME=$(grep "irc onion domain" "${COMPLETION_FILE}" | head -n 1 | awk -F ':' '{print $2}')
  101. echo " port = \"${IRC_ONION_PORT}\";" >> "/home/${new_username}/.irssi/config"
  102. fi
  103. echo ' chatnet = "Freedombone";' >> "/home/${new_username}/.irssi/config"
  104. echo ' autoconnect = "yes";' >> "/home/${new_username}/.irssi/config"
  105. if [ "${IRC_PASSWORD}" ]; then
  106. echo " password = \"${IRC_PASSWORD}\";" >> "/home/${new_username}/.irssi/config"
  107. fi
  108. { echo ' }';
  109. echo ');';
  110. echo '';
  111. echo 'chatnets = {';
  112. echo ' Freedombone = {';
  113. echo ' type = "IRC";';
  114. echo ' max_kicks = "1";';
  115. echo ' max_msgs = "4";';
  116. echo ' max_whois = "1";';
  117. echo ' };';
  118. echo ' Freenode = {';
  119. echo ' type = "IRC";';
  120. echo ' max_kicks = "1";';
  121. echo ' max_msgs = "4";';
  122. echo ' max_whois = "1";';
  123. echo ' };';
  124. echo ' OFTC = {';
  125. echo ' type = "IRC";';
  126. echo ' max_kicks = "1";';
  127. echo ' max_msgs = "1";';
  128. echo ' max_whois = "1";';
  129. echo ' };';
  130. echo '};';
  131. echo '';
  132. echo 'channels = (';
  133. echo ' { name = "#freedombone"; chatnet = "Freedombone"; autojoin = "Yes"; },';
  134. echo ');';
  135. echo '';
  136. echo 'settings = {';
  137. echo " core = { real_name = \"$new_name\"; user_name = \"$new_username\"; nick = \"$new_username\"; };";
  138. echo ' "fe-text" = { actlist_sort = "refnum"; };';
  139. echo '};';
  140. echo 'ignores = ( { level = "CTCPS"; } );'; } >> "/home/${new_username}/.irssi/config"
  141. chown -R "${new_username}":"${new_username}" "/home/${new_username}/.irssi"
  142. }
  143. function remove_user_irc_bouncer {
  144. remove_username="$1"
  145. if [ -f /home/znc/.znc/configs/znc.conf ]; then
  146. stop_irc_bouncer
  147. sed -i "/<User ${remove_username}>/,/</User>/d" /home/znc/.znc/configs/znc.conf
  148. start_irc_bouncer
  149. fi
  150. }
  151. function remove_user_irc {
  152. remove_username="$1"
  153. "${PROJECT_NAME}-pass" -u "$remove_username" --rmapp irc
  154. remove_user_irc_bouncer "${remove_username}"
  155. if [ -d "/home/${remove_username}/.irssi" ]; then
  156. rm -rf "/home/${remove_username}/.irssi"
  157. fi
  158. if [ -d "/home/${remove_username}/irclogs" ]; then
  159. rm -rf "/home/${remove_username}/irclogs"
  160. fi
  161. }
  162. function irc_set_global_password_base {
  163. NEW_IRC_PASSWORD="$1"
  164. EXISTING_IRC_PASSWORD=$(irc_get_global_password)
  165. sed -i "0,/RE/s/Password =.*/Password =$NEW_IRC_PASSWORD/" /etc/ngircd/ngircd.conf
  166. # replace the password for all users
  167. for d in /home/*/ ; do
  168. IRC_USERNAME=$(echo "$d" | awk -F '/' '{print $3}')
  169. if [[ $(is_valid_user "$IRC_USERNAME") == "1" ]]; then
  170. if [ -f "/home/${IRC_USERNAME}/.irssi/config" ]; then
  171. sed -i "s|$EXISTING_IRC_PASSWORD|$NEW_IRC_PASSWORD|g" "/home/${IRC_USERNAME}/.irssi/config"
  172. chown -R "${IRC_USERNAME}":"${IRC_USERNAME}" "/home/${IRC_USERNAME}/.irssi"
  173. fi
  174. fi
  175. done
  176. read_config_param DEFAULT_DOMAIN_NAME
  177. read_config_param IRC_PORT
  178. read_config_param MY_USERNAME
  179. stop_irc_bouncer
  180. sleep 2
  181. # change the hashes. There are multiple users, but since we're using a global
  182. # password this doesn't matter
  183. ZNC_SALT="$(dd if=/dev/urandom bs=16c count=1 | md5sum | awk -F ' ' '{print $1}' | cut -c1-20)"
  184. new_user_hash=$(echo -n "${NEW_IRC_PASSWORD}${ZNC_SALT}" | sha256sum | awk -F ' ' '{print $1}')
  185. sed -i "s|Hash = .*|Hash = ${new_user_hash}|g" /home/znc/.znc/configs/znc.conf
  186. sed -i "s|Salt = .*|Salt = ${ZNC_SALT}|g" /home/znc/.znc/configs/znc.conf
  187. # change the server password
  188. sed -i "s|Server = 127.0.0.1.*|Server = 127.0.0.1 ${IRC_PORT} ${NEW_IRC_PASSWORD}|g" /home/znc/.znc/configs/znc.conf
  189. # Update the password
  190. "${PROJECT_NAME}-pass" -u "$MY_USERNAME" -a irc -p "$NEW_IRC_PASSWORD"
  191. # matrix bridge to irc
  192. if [ -f "$INSTALL_DIR/matrix_irc_bridge/config.yaml" ]; then
  193. sed -i "s|password: .*|password: \"$NEW_IRC_PASSWORD\"|g" "$INSTALL_DIR/matrix_irc_bridge/config.yaml"
  194. systemctl restart matrix_irc_bridge
  195. fi
  196. write_config_param "IRC_PASSWORD" "$NEW_IRC_PASSWORD"
  197. # restart the daemon for the new password to take effect
  198. systemctl restart ngircd
  199. start_irc_bouncer
  200. }
  201. function change_password_irc {
  202. new_global_password="$2"
  203. set_password_for_all_users irc "$new_global_password"
  204. irc_set_global_password_base "$new_global_password"
  205. }
  206. function add_user_irc_bouncer {
  207. new_username="$1"
  208. new_user_password=$(irc_get_global_password)
  209. IRC_PASSWORD="$new_user_password"
  210. is_admin='true'
  211. if [ ! "$3" ]; then
  212. is_admin='false'
  213. fi
  214. if [[ $(is_valid_user "$new_username") == "0" ]]; then
  215. return
  216. fi
  217. read_config_param IRC_PORT
  218. read_config_param DEFAULT_DOMAIN_NAME
  219. "${PROJECT_NAME}-pass" -u "$new_username" -a irc -p "$new_user_password"
  220. stop_irc_bouncer
  221. ZNC_SALT="$(dd if=/dev/urandom bs=16c count=1 | md5sum | awk -F ' ' '{print $1}' | cut -c1-20)"
  222. new_user_hash=$(echo -n "${new_user_password}${ZNC_SALT}" | sha256sum | awk -F ' ' '{print $1}')
  223. if grep -q "<User ${new_username}>" /home/znc/.znc/configs/znc.conf; then
  224. # user already exists
  225. sed -i "s|Hash = .*|Hash = ${new_user_hash}|g" /home/znc/.znc/configs/znc.conf
  226. sed -i "s|Salt = .*|Salt = ${ZNC_SALT}|g" /home/znc/.znc/configs/znc.conf
  227. return
  228. fi
  229. { echo "<User ${new_username}>";
  230. echo " Admin = ${is_admin}";
  231. echo " AltNick = ${new_username}_";
  232. echo ' AppendTimestamp = false';
  233. echo ' AutoClearChanBuffer = true';
  234. echo ' AutoClearQueryBuffer = true';
  235. echo " Buffer = ${IRC_BUFFER_LENGTH}";
  236. echo ' DenyLoadMod = false';
  237. echo ' DenySetBindHost = false';
  238. echo " Ident = ${new_username}";
  239. echo ' JoinTries = 10';
  240. echo ' LoadModule = chansaver';
  241. echo ' LoadModule = controlpanel';
  242. echo ' MaxJoins = 10';
  243. echo ' MaxNetworks = 10';
  244. echo ' MaxQueryBuffers = 50';
  245. echo ' MultiClients = true';
  246. echo " Nick = ${new_username}";
  247. echo ' PrependTimestamp = true';
  248. echo ' QuitMsg = Bye';
  249. echo " RealName = ${new_username}";
  250. echo ' StatusPrefix = *';
  251. echo ' TimestampFormat = [%H:%M:%S]';
  252. echo '';
  253. echo " <Network ${PROJECT_NAME}>";
  254. echo ' LoadModule = chansaver';
  255. echo ' LoadModule = simple_away';
  256. echo '';
  257. echo " Server = 127.0.0.1 ${IRC_PORT} ${IRC_PASSWORD}";
  258. echo '';
  259. echo " <Chan #${PROJECT_NAME}>";
  260. echo ' </Chan>';
  261. echo ' </Network>';
  262. echo '';
  263. echo ' <Network oftc>';
  264. echo ' LoadModule = chansaver';
  265. echo ' LoadModule = simple_away';
  266. echo ' FloodBurst = 4';
  267. echo ' FloodRate = 1.00';
  268. echo ' IRCConnectEnabled = true';
  269. echo ' Server = irc.oftc.net 6697';
  270. echo ' </Network>';
  271. echo '';
  272. echo ' <Network freenode>';
  273. echo ' LoadModule = chansaver';
  274. echo ' LoadModule = simple_away';
  275. echo ' FloodBurst = 4';
  276. echo ' FloodRate = 1.00';
  277. echo ' IRCConnectEnabled = true';
  278. echo ' Server = irc.freenode.net 6697';
  279. echo ' </Network>';
  280. echo '';
  281. echo ' <Pass password>';
  282. echo " Hash = ${new_user_hash}";
  283. echo ' Method = sha256';
  284. echo " Salt = ${ZNC_SALT}";
  285. echo ' </Pass>';
  286. echo '</User>'; } >> /home/znc/.znc/configs/znc.conf
  287. mkdir -p "/home/znc/.znc/users/${new_username}/moddata"
  288. mkdir -p "/home/znc/.znc/users/${new_username}/networks"
  289. mkdir "/home/znc/.znc/users/${new_username}/moddata/chanserver"
  290. mkdir "/home/znc/.znc/users/${new_username}/moddata/controlpanel"
  291. mkdir "/home/znc/.znc/users/${new_username}/moddata/perform"
  292. mkdir "/home/znc/.znc/users/${new_username}/moddata/webadmin"
  293. mkdir -p "/home/znc/.znc/users/${new_username}/networks/${PROJECT_NAME}/moddata/chansaver"
  294. mkdir -p "/home/znc/.znc/users/${new_username}/networks/${PROJECT_NAME}/moddata/simple_away"
  295. mkdir -p /home/znc/.znc/moddata/webadmin
  296. chown -R znc:znc /home/znc/.znc
  297. start_irc_bouncer
  298. }
  299. function add_user_irc {
  300. new_username="$1"
  301. new_user_password="$2"
  302. IRC_PASSWORD=$(irc_get_global_password)
  303. if [ ${#IRC_PASSWORD} -lt 2 ]; then
  304. IRC_PASSWORD=
  305. fi
  306. if [ ! -d "/home/${new_username}/.irssi" ]; then
  307. mkdir "/home/${new_username}/.irssi"
  308. fi
  309. create_irssi_config "${new_username}"
  310. add_user_irc_bouncer "${new_username}" "${IRC_PASSWORD}"
  311. echo '0'
  312. }
  313. function run_client_irc {
  314. irssi
  315. }
  316. function irc_show_password {
  317. IRC_PASSWORD=$(irc_get_global_password)
  318. dialog --title $"IRC Password" \
  319. --msgbox "$IRC_PASSWORD" 6 40
  320. }
  321. function irc_set_global_password {
  322. EXISTING_IRC_PASSWORD=$(irc_get_global_password)
  323. data=$(mktemp 2>/dev/null)
  324. dialog --title $"IRC Password" \
  325. --clear \
  326. --backtitle $"Freedombone Control Panel" \
  327. --passwordbox $"Password for all IRC users, or press Enter for no password" 10 60 "$EXISTING_IRC_PASSWORD" 2> "$data"
  328. sel=$?
  329. case $sel in
  330. 0)
  331. NEW_IRC_PASSWORD=$(<"$data")
  332. irc_set_global_password_base "$NEW_IRC_PASSWORD"
  333. dialog --title $"IRC Password" \
  334. --msgbox $"The IRC password was changed" 6 40
  335. ;;
  336. esac
  337. rm -f "$data"
  338. }
  339. function configure_interactive_irc {
  340. if [ ! -d /etc/ngircd ]; then
  341. dialog --title $"IRC Menu" \
  342. --msgbox $"No IRC server is installed" 6 70
  343. return
  344. fi
  345. W=(1 $"Set a password for all IRC users"
  346. 2 $"Show current IRC login password")
  347. while true
  348. do
  349. # shellcheck disable=SC2068
  350. selection=$(dialog --backtitle $"Freedombone Administrator Control Panel" --title $"IRC" --menu $"Choose an operation, or ESC to exit:" 10 60 2 "${W[@]}" 3>&2 2>&1 1>&3)
  351. if [ ! "$selection" ]; then
  352. break
  353. fi
  354. case $selection in
  355. 1) irc_set_global_password;;
  356. 2) irc_show_password;;
  357. esac
  358. done
  359. }
  360. function install_interactive_irc {
  361. echo -n ''
  362. APP_INSTALLED=1
  363. }
  364. function reconfigure_irc {
  365. echo -n ''
  366. }
  367. function upgrade_irc {
  368. echo -n ''
  369. }
  370. function backup_local_irc {
  371. echo -n ''
  372. }
  373. function restore_local_irc {
  374. echo -n ''
  375. }
  376. function backup_remote_irc {
  377. echo -n ''
  378. }
  379. function restore_remote_irc {
  380. echo -n ''
  381. }
  382. function remove_irc {
  383. remove_watchdog_daemon ngircd
  384. systemctl stop ngircd
  385. apt-get -yq remove --purge ngircd
  386. apt-get -yq remove --purge irssi
  387. if [ -d /etc/ngircd ]; then
  388. rm -rf /etc/ngircd
  389. fi
  390. iptables -D INPUT -p tcp --dport 1024:65535 --sport ${IRC_BOUNCER_PORT} -j ACCEPT
  391. function_check save_firewall_settings
  392. save_firewall_settings
  393. firewall_remove ${IRC_BOUNCER_PORT} tcp
  394. function_check remove_onion_service
  395. remove_onion_service irc ${IRC_ONION_PORT}
  396. remove_completion_param install_irc
  397. remove_completion_param configure_firewall_for_irc
  398. sed -i '/IRC /d' "${COMPLETION_FILE}"
  399. sed -i '/znc 2> /d' /etc/crontab
  400. stop_irc_bouncer
  401. if [ -d /home/znc ]; then
  402. userdel -r znc
  403. fi
  404. if [ -d /var/run/ircd ]; then
  405. rm -rf /var/run/ircd
  406. fi
  407. }
  408. function configure_firewall_for_irc {
  409. if [ ! -d /etc/ngircd ]; then
  410. return
  411. fi
  412. if [[ $(is_completed "${FUNCNAME[0]}") == "1" ]]; then
  413. return
  414. fi
  415. if [[ ${INSTALLED_WITHIN_DOCKER} == "yes" ]]; then
  416. # docker does its own firewalling
  417. return
  418. fi
  419. if [[ ${ONION_ONLY} != "no" ]]; then
  420. return
  421. fi
  422. iptables -I INPUT -p tcp --dport 1024:65535 --sport ${IRC_BOUNCER_PORT} -j ACCEPT
  423. function_check save_firewall_settings
  424. save_firewall_settings
  425. firewall_add IRC ${IRC_BOUNCER_PORT} tcp
  426. echo 'configure_firewall_for_irc' >> "${COMPLETION_FILE}"
  427. }
  428. function install_irc_server {
  429. if [[ $(app_is_installed irc_server) == "1" ]]; then
  430. return
  431. fi
  432. apt-get -yq install ngircd
  433. if [ ! -d /etc/ngircd ]; then
  434. echo $"ERROR: ngircd does not appear to have installed. $CHECK_MESSAGE"
  435. exit 53
  436. fi
  437. # obtain a cert for the default domain
  438. if [[ "$(cert_exists "${DEFAULT_DOMAIN_NAME}" pem)" == "0" ]]; then
  439. echo $'Obtaining certificate for the main domain'
  440. create_site_certificate "${DEFAULT_DOMAIN_NAME}" 'yes'
  441. fi
  442. if [[ "$(cert_exists "${DEFAULT_DOMAIN_NAME}")" == "0" ]]; then
  443. "${PROJECT_NAME}-addcert" -h ngircd --dhkey "${DH_KEYLENGTH}"
  444. function_check check_certificates
  445. CHECK_HOSTNAME=ngircd
  446. check_certificates ngircd
  447. fi
  448. DEFAULTDOMAIN=${DEFAULT_DOMAIN_NAME}
  449. IRC_PASSWORD="$(create_password "${MINIMUM_PASSWORD_LENGTH}")"
  450. set_password_for_all_users irc "$IRC_PASSWORD"
  451. { echo '**************************************************';
  452. echo $'* F R E E D O M B O N E I R C *';
  453. echo '* *';
  454. echo $'* Freedom in the Cloud *';
  455. echo '**************************************************'; } > /etc/ngircd/motd
  456. sed -i 's|MotdFile = /etc/ngircd/ngircd.motd|MotdFile = /etc/ngircd/motd|g' /etc/ngircd/ngircd.conf
  457. sed -i "s/irc@irc.example.com/$MY_EMAIL_ADDRESS/g" /etc/ngircd/ngircd.conf
  458. sed -i "s/irc.example.net/$DEFAULTDOMAIN/g" /etc/ngircd/ngircd.conf
  459. sed -i "s|Yet another IRC Server running on Debian GNU/Linux|IRC Server of $DEFAULTDOMAIN|g" /etc/ngircd/ngircd.conf
  460. sed -i 's/;Password = wealllikedebian/Password =/g' /etc/ngircd/ngircd.conf
  461. sed -i "s/;Ports =.*/Ports = ${IRC_PORT}/g" /etc/ngircd/ngircd.conf
  462. if [[ $ONION_ONLY == 'no' ]]; then
  463. if [ -f "/etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem" ]; then
  464. sed -i "s|;CertFile = /etc/ssl/certs/server.crt|CertFile = /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem|g" /etc/ngircd/ngircd.conf
  465. else
  466. sed -i "s|;CertFile = /etc/ssl/certs/server.crt|CertFile = /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.crt|g" /etc/ngircd/ngircd.conf
  467. fi
  468. sed -i "s|;DHFile = /etc/ngircd/dhparams.pem|DHFile = /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.dhparam|g" /etc/ngircd/ngircd.conf
  469. sed -i "s|;KeyFile = /etc/ssl/private/server.key|KeyFile = /etc/ssl/private/${DEFAULT_DOMAIN_NAME}.key|g" /etc/ngircd/ngircd.conf
  470. sed -i "s/;Ports =.*/Ports = ${IRC_PORT}/2" /etc/ngircd/ngircd.conf
  471. else
  472. sed -i 's|;SSLConnect.*|SSLConnect = no|g'
  473. # comment out the second Ports entry
  474. if ! grep -q ";Ports =" /etc/ngircd/ngircd.conf; then
  475. sed -i '0,/Ports =/! s/Ports =/;Ports =/' /etc/ngircd/ngircd.conf
  476. fi
  477. fi
  478. sed -i "s/;Name = #ngircd/Name = #${PROJECT_NAME}/g" /etc/ngircd/ngircd.conf
  479. sed -i "s/;Topic = Our ngircd testing channel/Topic = ${PROJECT_NAME} chat channel/g" /etc/ngircd/ngircd.conf
  480. sed -i 's/;MaxUsers = 23/MaxUsers = 23/g' /etc/ngircd/ngircd.conf
  481. sed -i "s|;KeyFile = /etc/ngircd/#chan.key|KeyFile = /etc/ngircd/${PROJECT_NAME}.key|g" /etc/ngircd/ngircd.conf
  482. sed -i "s/;CloakHost = cloaked.host/CloakHost = ${PROJECT_NAME}/g" /etc/ngircd/ngircd.conf
  483. IRC_SALT="$(create_password 30)"
  484. if [ -f "${IMAGE_PASSWORD_FILE}" ]; then
  485. IRC_OPERATOR_PASSWORD="$(printf "%s" "$(cat "$IMAGE_PASSWORD_FILE")")"
  486. else
  487. IRC_OPERATOR_PASSWORD="$(create_password "${MINIMUM_PASSWORD_LENGTH}")"
  488. fi
  489. sed -i "s|;CloakHostSalt = abcdefghijklmnopqrstuvwxyz|CloakHostSalt = $IRC_SALT|g" /etc/ngircd/ngircd.conf
  490. sed -i 's/;ConnectIPv4 = yes/ConnectIPv4 = yes/g' /etc/ngircd/ngircd.conf
  491. sed -i 's/;MorePrivacy = no/MorePrivacy = yes/g' /etc/ngircd/ngircd.conf
  492. sed -i 's/;RequireAuthPing = no/RequireAuthPing = no/g' /etc/ngircd/ngircd.conf
  493. sed -i "s/;Name = TheOper/Name = $MY_USERNAME/g" /etc/ngircd/ngircd.conf
  494. sed -i "s/;Password = ThePwd/Password = $IRC_OPERATOR_PASSWORD/g" /etc/ngircd/ngircd.conf
  495. sed -i 's|;Listen =.*|Listen = 0.0.0.0,0.0.0.0:9050,127.0.0.1,127.0.0.1:9050|g' /etc/ngircd/ngircd.conf
  496. if [ "${IRC_PASSWORD}" ]; then
  497. sed -i "0,/RE/s/Password =.*/Password =$IRC_PASSWORD/" /etc/ngircd/ngircd.conf
  498. fi
  499. # upgrade a cypher
  500. sed -i 's|SECURE128|SECURE256|g' /etc/ngircd/ngircd.conf
  501. mkdir /var/run/ircd
  502. chown -R irc:irc /var/run/ircd
  503. mkdir /var/run/ngircd
  504. touch /var/run/ngircd/ngircd.pid
  505. chown -R irc:irc /var/run/ngircd
  506. # shellcheck disable=SC2034
  507. IRC_ONION_HOSTNAME=$(add_onion_service irc "${IRC_BOUNCER_PORT}" "${IRC_ONION_PORT}")
  508. if [ ! -d /var/run/ircd ]; then
  509. mkdir /var/run/ircd
  510. chown -R irc:irc /var/run/ircd
  511. fi
  512. chmod 600 /etc/ngircd/ngircd.conf
  513. systemctl restart ngircd
  514. add_watchdog_daemon ngircd
  515. function_check configure_firewall_for_irc
  516. configure_firewall_for_irc
  517. install_completed irc_server
  518. }
  519. function install_irc_client {
  520. if [[ $(app_is_installed irc_client) == "1" ]]; then
  521. return
  522. fi
  523. apt-get -yq install irssi
  524. if [ ! -d "/home/${MY_USERNAME}/.irssi" ]; then
  525. mkdir "/home/${MY_USERNAME}/.irssi"
  526. fi
  527. create_irssi_config "${MY_USERNAME}" "$MY_NAME"
  528. install_completed irc_client
  529. }
  530. function install_irc_bouncer {
  531. if [[ $(app_is_installed irc_bouncer) == "1" ]]; then
  532. return
  533. fi
  534. apt-get -yq install znc
  535. adduser --disabled-login --gecos 'znc' znc
  536. if [ ! -d /home/znc ]; then
  537. echo $"/home/znc directory not created"
  538. exit 7354262
  539. fi
  540. mkdir -p /home/znc/.znc/configs
  541. mkdir -p /home/znc/.znc/users
  542. { echo 'AnonIPLimit = 10';
  543. echo 'ConnectDelay = 5';
  544. echo 'HideVersion = false';
  545. echo 'MaxBufferSize = 500';
  546. echo 'ProtectWebSessions = true';
  547. echo 'SSLCertFile = /home/znc/.znc/znc.pem';
  548. echo 'ServerThrottle = 30';
  549. echo 'Version = 1.6.2';
  550. echo '';
  551. echo '<Listener listener0>';
  552. echo ' AllowIRC = true';
  553. echo ' AllowWeb = false';
  554. echo ' IPv4 = true';
  555. echo ' IPv6 = true';
  556. echo ' Port = 6697'; } > /home/znc/.znc/configs/znc.conf
  557. if [[ "${ONION_ONLY}" == 'no' ]]; then
  558. echo ' SSL = true' >> /home/znc/.znc/configs/znc.conf
  559. else
  560. echo ' SSL = false' >> /home/znc/.znc/configs/znc.conf
  561. fi
  562. { echo ' URIPrefix = /';
  563. echo '</Listener>';
  564. echo ''; } >> /home/znc/.znc/configs/znc.conf
  565. if [ $IRC_PORT -ne $IRC_ONION_PORT ]; then
  566. { echo '<Listener listener1>';
  567. echo ' AllowIRC = true';
  568. echo ' AllowWeb = false';
  569. echo ' IPv4 = true';
  570. echo ' IPv6 = true';
  571. echo " Port = ${IRC_ONION_PORT}";
  572. echo ' SSL = false';
  573. echo ' URIPrefix = /';
  574. echo '</Listener>';
  575. echo ''; } >> /home/znc/.znc/configs/znc.conf
  576. fi
  577. chown -R znc:znc /home/znc/.znc
  578. add_user_irc_bouncer "${MY_USERNAME}" "${IRC_PASSWORD}" true
  579. # certificate for use with SSL
  580. start_irc_bouncer
  581. function_check cron_add_mins
  582. cron_add_mins 10 "/usr/bin/znc 2> /dev/null" znc
  583. install_completed irc_bouncer
  584. }
  585. function install_irc {
  586. install_irc_server
  587. install_irc_client
  588. install_irc_bouncer
  589. APP_INSTALLED=1
  590. }
  591. # NOTE: deliberately no exit 0