freedombone-app-hubzilla 29KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # Hubzilla application
  12. #
  13. # License
  14. # =======
  15. #
  16. # Copyright (C) 2014-2017 Bob Mottram <bob@freedombone.net>
  17. #
  18. # This program is free software: you can redistribute it and/or modify
  19. # it under the terms of the GNU Affero General Public License as published by
  20. # the Free Software Foundation, either version 3 of the License, or
  21. # (at your option) any later version.
  22. #
  23. # This program is distributed in the hope that it will be useful,
  24. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  25. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  26. # GNU Affero General Public License for more details.
  27. #
  28. # You should have received a copy of the GNU Affero General Public License
  29. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  30. VARIANTS='full full-vim social'
  31. IN_DEFAULT_INSTALL=0
  32. SHOW_ON_ABOUT=1
  33. HUBZILLA_DOMAIN_NAME=
  34. HUBZILLA_CODE=
  35. HUBZILLA_ONION_PORT=8085
  36. HUBZILLA_REPO="https://github.com/redmatrix/hubzilla.git"
  37. HUBZILLA_THEMES_REPO="https://github.com/DeadSuperHero/redmatrix-themes"
  38. HUBZILLA_ADDONS_REPO="https://github.com/redmatrix/hubzilla-addons.git"
  39. HUBZILLA_ADMIN_PASSWORD=
  40. HUBZILLA_COMMIT='bc2b948f1f6e62b1c277a4042200bb6678956f3f'
  41. HUBZILLA_ADDONS_COMMIT='f08ef6b93e9580bf241ad60c09f4e5162d04475f'
  42. hubzilla_variables=(ONION_ONLY
  43. HUBZILLA_DOMAIN_NAME
  44. HUBZILLA_CODE
  45. DDNS_PROVIDER
  46. MY_USERNAME
  47. HUBZILLA_REPO
  48. HUBZILLA_ADDONS_REPO)
  49. function remove_user_hubzilla {
  50. remove_username="$1"
  51. ${PROJECT_NAME}-pass -u $remove_username --rmapp hubzilla
  52. }
  53. function add_user_hubzilla {
  54. if [[ $(app_is_installed hubzilla) == "0" ]]; then
  55. echo '0'
  56. return
  57. fi
  58. new_username="$1"
  59. new_user_password="$2"
  60. ${PROJECT_NAME}-pass -u $new_username -a hubzilla -p "$new_user_password"
  61. echo '0'
  62. }
  63. function hubzilla_renew_cert {
  64. dialog --title $"Renew SSL certificate" \
  65. --backtitle $"Freedombone Control Panel" \
  66. --yesno $"\nThis will renew a letsencrypt certificate. Select 'yes' to continue" 16 60
  67. sel=$?
  68. case $sel in
  69. 1) return;;
  70. 255) return;;
  71. esac
  72. HUBZILLA_DOMAIN_NAME=$(get_completion_param "hubzilla domain")
  73. if [ ! -d /var/www/$HUBZILLA_DOMAIN_NAME/htdocs ]; then
  74. dialog --title $"Renew SSL certificate" \
  75. --msgbox $"Hubzilla install directory not found" 6 40
  76. return
  77. fi
  78. ${PROJECT_NAME}-renew-cert -h $HUBZILLA_DOMAIN_NAME -p 'letsencrypt'
  79. if [ ! "$?" = "0" ]; then
  80. any_key
  81. else
  82. dialog --title $"Renew SSL certificate" \
  83. --msgbox $"Hubzilla certificate has been renewed" 6 40
  84. fi
  85. }
  86. function hubzilla_channel_directory_server {
  87. if ! grep -q "hubzilla domain" $COMPLETION_FILE; then
  88. dialog --title $"Hubzilla channel directory server" \
  89. --msgbox $"Hubzilla is not installed on this system" 6 40
  90. return
  91. fi
  92. HUBZILLA_DOMAIN_NAME=$(get_completion_param "hubzilla domain")
  93. if [ ! -d /var/www/$HUBZILLA_DOMAIN_NAME/htdocs ]; then
  94. dialog --title $"Hubzilla channel directory server" \
  95. --msgbox $"Hubzilla install directory not found" 6 40
  96. return
  97. fi
  98. data=$(tempfile 2>/dev/null)
  99. trap "rm -f $data" 0 1 2 5 15
  100. dialog --title $"Hubzilla channel directory server" \
  101. --backtitle $"Freedombone Control Panel" \
  102. --inputbox $"When you click on 'channel directory' this is where Hubzilla will obtain its list from" 8 60 2>$data
  103. sel=$?
  104. case $sel in
  105. 0)
  106. hubzilla_domain_server=$(<$data)
  107. if [[ $hubzilla_domain_server != *"."* ]]; then
  108. return
  109. fi
  110. if [[ $hubzilla_domain_server != "https"* ]]; then
  111. dialog --title $"Hubzilla channel directory server" \
  112. --msgbox $"Invalid domain - include the https://" 6 40
  113. return
  114. fi
  115. ./var/www/$HUBZILLA_DOMAIN_NAME/htdocs/util/config system directory_server $hubzilla_domain_server
  116. dialog --title $"Hubzilla channel directory server" \
  117. --msgbox $"Domain channel directory server changed to $hubzilla_domain_server" 6 40
  118. ;;
  119. esac
  120. }
  121. function configure_interactive_hubzilla {
  122. while true
  123. do
  124. data=$(tempfile 2>/dev/null)
  125. trap "rm -f $data" 0 1 2 5 15
  126. dialog --backtitle $"Freedombone Control Panel" \
  127. --title $"Hubzilla" \
  128. --radiolist $"Choose an operation:" 13 70 4 \
  129. 1 $"Set channel directory server" off \
  130. 2 $"Renew SSL certificate" off \
  131. 3 $"Back to main menu" on 2> $data
  132. sel=$?
  133. case $sel in
  134. 1) break;;
  135. 255) break;;
  136. esac
  137. case $(cat $data) in
  138. 1) hubzilla_channel_directory_server;;
  139. 2) hubzilla_renew_cert;;
  140. 3) break;;
  141. esac
  142. done
  143. }
  144. function install_interactive_hubzilla {
  145. if [[ $ONION_ONLY != "no" ]]; then
  146. return
  147. fi
  148. function_check interactive_site_details
  149. interactive_site_details hubzilla
  150. APP_INSTALLED=1
  151. }
  152. function change_password_hubzilla {
  153. HUBZILLA_USERNAME="$1"
  154. HUBZILLA_PASSWORD="$2"
  155. if [ ${#HUBZILLA_PASSWORD} -lt 8 ]; then
  156. echo $'Hubzilla password is too short'
  157. return
  158. fi
  159. # TODO: This doesn't actually change the password
  160. #${PROJECT_NAME}-pass -u $HUBZILLA_USERNAME -a hubzilla -p "$HUBZILLA_PASSWORD"
  161. }
  162. function hubzilla_create_database {
  163. if [ -f $IMAGE_PASSWORD_FILE ]; then
  164. HUBZILLA_ADMIN_PASSWORD="$(printf `cat $IMAGE_PASSWORD_FILE`)"
  165. fi
  166. if [ ! $HUBZILLA_ADMIN_PASSWORD ]; then
  167. HUBZILLA_ADMIN_PASSWORD="$(create_password ${MINIMUM_PASSWORD_LENGTH})"
  168. fi
  169. ${PROJECT_NAME}-pass -u $MY_USERNAME -a hubzilla -p "$HUBZILLA_ADMIN_PASSWORD"
  170. if [ ! $HUBZILLA_ADMIN_PASSWORD ]; then
  171. return
  172. fi
  173. function_check create_database
  174. create_database hubzilla "$HUBZILLA_ADMIN_PASSWORD"
  175. }
  176. function reconfigure_hubzilla {
  177. echo -n ''
  178. }
  179. function upgrade_hubzilla {
  180. CURR_HUBZILLA_COMMIT=$(get_completion_param "hubzilla commit")
  181. if [[ "$CURR_HUBZILLA_COMMIT" == "$HUBZILLA_COMMIT" ]]; then
  182. return
  183. fi
  184. HUBZILLA_PATH=/var/www/$HUBZILLA_DOMAIN_NAME/htdocs
  185. function_check set_repo_commit
  186. set_repo_commit $HUBZILLA_PATH "hubzilla commit" "$HUBZILLA_COMMIT" $HUBZILLA_REPO
  187. set_repo_commit $HUBZILLA_PATH/addon "hubzilla addons commit" "$HUBZILLA_ADDONS_COMMIT" $HUBZILLA_ADDONS_REPO
  188. if [ -d $HUBZILLA_PATH/redmatrix-themes1 ]; then
  189. cd $HUBZILLA_PATH/redmatrix-themes1
  190. git merge --abort
  191. git stash
  192. git pull
  193. cp -r $HUBZILLA_PATH/redmatrix-themes1/* $HUBZILLA_PATH/view/theme/
  194. chown -R www-data:www-data $HUBZILLA_PATH
  195. fi
  196. }
  197. function backup_local_hubzilla {
  198. hubzilla_path=/var/www/${HUBZILLA_DOMAIN_NAME}/htdocs
  199. if [ -d $hubzilla_path ]; then
  200. function_check backup_database_to_usb
  201. backup_database_to_usb hubzilla
  202. backup_directory_to_usb $hubzilla_path hubzilla
  203. fi
  204. }
  205. function restore_local_hubzilla {
  206. temp_restore_dir=/root/temphubzilla
  207. hubzilla_dir=/var/www/${HUBZILLA_DOMAIN_NAME}/htdocs
  208. function_check hubzilla_create_database
  209. hubzilla_create_database
  210. restore_database hubzilla ${HUBZILLA_DOMAIN_NAME}
  211. if [ -d $USB_MOUNT/backup/hubzilla ]; then
  212. if [ ! -d $hubzilla_dir/store/[data]/smarty3 ]; then
  213. mkdir -p $hubzilla_dir/store/[data]/smarty3
  214. fi
  215. chmod 1777 $hubzilla_dir/store/[data]/smarty3
  216. chown -R www-data:www-data $hubzilla_dir/*
  217. if [ -d $temp_restore_dir ]; then
  218. rm -rf $temp_restore_dir
  219. fi
  220. MARIADB_PASSWORD=$(${PROJECT_NAME}-pass -u root -a mariadb)
  221. HUBZILLA_PATH=/var/www/$HUBZILLA_DOMAIN_NAME/htdocs
  222. sed -i "s|\$db_pass =.*|\$db_pass = '${MARIADB_PASSWORD}';|g" $HUBZILLA_PATH/.htconfig.php
  223. MARIADB_PASSWORD=
  224. fi
  225. }
  226. function backup_remote_hubzilla {
  227. temp_backup_dir=/var/www/${HUBZILLA_DOMAIN_NAME}/htdocs
  228. if [ -d $temp_backup_dir ]; then
  229. suspend_site ${HUBZILLA_DOMAIN_NAME}
  230. backup_database_to_friend hubzilla
  231. echo "Backing up Hubzilla installation"
  232. backup_directory_to_friend $temp_backup_dir hubzilla
  233. restart_site
  234. echo "Backup of Hubzilla complete"
  235. else
  236. echo $"Hubzilla domain specified but not found in /var/www/${HUBZILLA_DOMAIN_NAME}"
  237. exit 2578
  238. fi
  239. }
  240. function restore_remote_hubzilla {
  241. function_check restore_database_from_friend
  242. function_check hubzilla_create_database
  243. hubzilla_create_database
  244. restore_database_from_friend hubzilla ${HUBZILLA_DOMAIN_NAME}
  245. if [ -d $SERVER_DIRECTORY/backup/hubzilla ]; then
  246. if [ ! -d /var/www/${HUBZILLA_DOMAIN_NAME}/htdocs/store/[data]/smarty3 ]; then
  247. mkdir -p /var/www/${HUBZILLA_DOMAIN_NAME}/htdocs/store/[data]/smarty3
  248. fi
  249. chmod 1777 /var/www/${HUBZILLA_DOMAIN_NAME}/htdocs/store/[data]/smarty3
  250. chown -R www-data:www-data /var/www/${HUBZILLA_DOMAIN_NAME}/htdocs/*
  251. fi
  252. if [ -d /root/temphubzilla ]; then
  253. rm -rf /root/temphubzilla
  254. fi
  255. MARIADB_PASSWORD=$(${PROJECT_NAME}-pass -u root -a mariadb)
  256. HUBZILLA_PATH=/var/www/$HUBZILLA_DOMAIN_NAME/htdocs
  257. sed -i "s|\$db_pass =.*|\$db_pass = '${MARIADB_PASSWORD}';|g" $HUBZILLA_PATH/.htconfig.php
  258. MARIADB_PASSWORD=
  259. }
  260. function remove_hubzilla {
  261. if [ ${#HUBZILLA_DOMAIN_NAME} -eq 0 ]; then
  262. return
  263. fi
  264. nginx_dissite $HUBZILLA_DOMAIN_NAME
  265. remove_certs ${HUBZILLA_DOMAIN_NAME}
  266. if [ -d /var/www/$HUBZILLA_DOMAIN_NAME ]; then
  267. rm -rf /var/www/$HUBZILLA_DOMAIN_NAME
  268. fi
  269. if [ -f /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME ]; then
  270. rm /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  271. fi
  272. function_check drop_database
  273. drop_database hubzilla
  274. function_check remove_onion_service
  275. remove_onion_service hubzilla ${HUBZILLA_ONION_PORT}
  276. sed -i '/hubzilla/d' $COMPLETION_FILE
  277. sed -i '/poller.php/d' /etc/crontab
  278. function_check remove_ddns_domain
  279. remove_ddns_domain $HUBZILLA_DOMAIN_NAME
  280. }
  281. function install_hubzilla {
  282. if [ ! $HUBZILLA_DOMAIN_NAME ]; then
  283. return
  284. fi
  285. if [[ $ONION_ONLY != "no" ]]; then
  286. echo $"Hubzilla won't work on an onion address"
  287. exit 529925
  288. fi
  289. HUBZILLA_PATH=/var/www/$HUBZILLA_DOMAIN_NAME/htdocs
  290. function_check install_mariadb
  291. install_mariadb
  292. function_check get_mariadb_password
  293. get_mariadb_password
  294. function_check repair_databases_script
  295. repair_databases_script
  296. apt-get -yq install php-common php-cli php-curl php-gd php-mysql php-mcrypt git
  297. apt-get -yq install php-dev imagemagick php-imagick libfcgi0ldbl
  298. apt-get -yq install php-memcached memcached
  299. if [ ! -d /var/www/$HUBZILLA_DOMAIN_NAME ]; then
  300. mkdir /var/www/$HUBZILLA_DOMAIN_NAME
  301. fi
  302. if [ ! -d $HUBZILLA_PATH ]; then
  303. mkdir $HUBZILLA_PATH
  304. fi
  305. if [ ! -f $HUBZILLA_PATH/index.php ]; then
  306. cd $INSTALL_DIR
  307. if [ -d /repos/hubzilla ]; then
  308. mkdir hubzilla
  309. cp -r -p /repos/hubzilla/. hubzilla
  310. cd hubzilla
  311. git pull
  312. else
  313. function_check git_clone
  314. git_clone $HUBZILLA_REPO hubzilla
  315. fi
  316. git checkout $HUBZILLA_COMMIT -b $HUBZILLA_COMMIT
  317. set_completion_param "hubzilla commit" "$HUBZILLA_COMMIT"
  318. rm -rf $HUBZILLA_PATH
  319. mv hubzilla $HUBZILLA_PATH
  320. if [ -d /repos/hubzilla-addons ]; then
  321. mkdir $HUBZILLA_PATH/addon
  322. cp -r -p /repos/hubzilla-addons/. $HUBZILLA_PATH/addon
  323. cd $HUBZILLA_PATH/addon
  324. git pull
  325. else
  326. git_clone $HUBZILLA_ADDONS_REPO $HUBZILLA_PATH/addon
  327. fi
  328. cd $HUBZILLA_PATH/addon
  329. git checkout $HUBZILLA_ADDONS_COMMIT -b $HUBZILLA_ADDONS_COMMIT
  330. set_completion_param "hubzilla addons commit" "$HUBZILLA_ADDONS_COMMIT"
  331. # some extra themes
  332. #git_clone $HUBZILLA_THEMES_REPO $HUBZILLA_PATH/redmatrix-themes1
  333. #cp -r $HUBZILLA_PATH/redmatrix-themes1/* $HUBZILLA_PATH/view/theme/
  334. chown -R www-data:www-data $HUBZILLA_PATH
  335. fi
  336. HUBZILLA_ONION_HOSTNAME=
  337. if [[ $ONION_ONLY != "no" ]]; then
  338. HUBZILLA_ONION_HOSTNAME=$(add_onion_service hubzilla 80 ${HUBZILLA_ONION_PORT})
  339. fi
  340. hubzilla_create_database
  341. if ! grep -q "$HUBZILLA_PATH" /etc/crontab; then
  342. echo "12,22,32,42,52 * * * * root cd $HUBZILLA_PATH; /usr/bin/timeout 500 /usr/bin/php include/poller.php" >> /etc/crontab
  343. fi
  344. function_check add_ddns_domain
  345. add_ddns_domain $HUBZILLA_DOMAIN_NAME
  346. if [[ $ONION_ONLY == "no" ]]; then
  347. function_check nginx_http_redirect
  348. nginx_http_redirect $HUBZILLA_DOMAIN_NAME
  349. echo 'server {' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  350. echo ' listen 443 ssl;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  351. echo ' listen [::]:443 ssl;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  352. echo " root $HUBZILLA_PATH;" >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  353. echo " server_name $HUBZILLA_DOMAIN_NAME;" >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  354. echo " error_log /dev/null;" >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  355. echo ' index index.php;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  356. echo ' charset utf-8;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  357. echo ' access_log /dev/null;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  358. function_check nginx_ssl
  359. nginx_ssl $HUBZILLA_DOMAIN_NAME
  360. function_check nginx_disable_sniffing
  361. nginx_disable_sniffing $HUBZILLA_DOMAIN_NAME
  362. echo ' add_header Strict-Transport-Security max-age=15768000;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  363. echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  364. echo ' # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  365. echo ' location / {' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  366. function_check nginx_limits
  367. nginx_limits $HUBZILLA_DOMAIN_NAME
  368. echo ' rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  369. echo ' }' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  370. echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  371. nginx_keybase ${HUBZILLA_DOMAIN_NAME}
  372. echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  373. echo ' # statically serve these file types when possible' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  374. echo ' # otherwise fall back to front controller' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  375. echo ' # allow browser to cache them' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  376. echo ' # added .htm for advanced source code editor library' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  377. echo ' location ~* \.(jpg|jpeg|gif|png|ico|css|js|htm|html|ttf|woff|svg)$ {' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  378. echo ' expires 30d;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  379. echo ' try_files $uri /index.php?q=$uri&$args;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  380. echo ' }' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  381. echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  382. echo ' # block these file types' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  383. echo ' location ~* \.(tpl|md|tgz|log|out)$ {' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  384. echo ' deny all;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  385. echo ' }' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  386. echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  387. echo ' # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  388. echo ' # or a unix socket' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  389. echo ' location ~* \.php$ {' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  390. function_check nginx_limits
  391. nginx_limits $HUBZILLA_DOMAIN_NAME
  392. echo ' # Zero-day exploit defense.' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  393. echo ' # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  394. echo " # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  395. echo " # server, which is entirely possible with php-fpm/php-fcgi." >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  396. echo " # Comment the 'try_files' line out if you set up php-fpm/php-fcgi on" >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  397. echo " # another machine. And then cross your fingers that you won't get hacked." >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  398. echo ' try_files $uri $uri/ /index.php;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  399. echo ' # NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  400. echo ' fastcgi_split_path_info ^(.+\.php)(/.+)$;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  401. echo ' # With php-cgi alone:' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  402. echo ' # fastcgi_pass 127.0.0.1:9000;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  403. echo ' # With php-fpm:' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  404. echo ' fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  405. echo ' include fastcgi_params;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  406. echo ' fastcgi_index index.php;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  407. echo ' fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  408. echo ' fastcgi_read_timeout 300;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  409. echo ' }' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  410. echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  411. echo ' # deny access to all dot files' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  412. echo ' location ~ /\. {' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  413. echo ' deny all;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  414. echo ' }' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  415. echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  416. echo ' location ~ /\.ht {' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  417. echo ' deny all;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  418. echo ' }' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  419. echo '}' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  420. echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  421. else
  422. echo 'server {' > /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  423. echo " listen 127.0.0.1:${HUBZILLA_ONION_PORT} default_server;" >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  424. echo " root $HUBZILLA_PATH;" >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  425. echo " server_name $HUBZILLA_ONION_HOSTNAME;" >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  426. echo " error_log /dev/null;" >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  427. echo ' index index.php;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  428. echo ' charset utf-8;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  429. echo ' access_log /dev/null;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  430. echo ' add_header Strict-Transport-Security max-age=15768000;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  431. echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  432. echo ' # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  433. echo ' location / {' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  434. nginx_limits $HUBZILLA_DOMAIN_NAME
  435. nginx_disable_sniffing $HUBZILLA_DOMAIN_NAME
  436. echo ' rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  437. echo ' }' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  438. echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  439. nginx_keybase ${HUBZILLA_DOMAIN_NAME}
  440. echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  441. echo ' # statically serve these file types when possible' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  442. echo ' # otherwise fall back to front controller' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  443. echo ' # allow browser to cache them' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  444. echo ' # added .htm for advanced source code editor library' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  445. echo ' location ~* \.(jpg|jpeg|gif|png|ico|css|js|htm|html|ttf|woff|svg)$ {' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  446. echo ' expires 30d;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  447. echo ' try_files $uri /index.php?q=$uri&$args;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  448. echo ' }' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  449. echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  450. echo ' # block these file types' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  451. echo ' location ~* \.(tpl|md|tgz|log|out)$ {' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  452. echo ' deny all;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  453. echo ' }' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  454. echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  455. echo ' # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  456. echo ' # or a unix socket' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  457. echo ' location ~* \.php$ {' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  458. nginx_limits $HUBZILLA_DOMAIN_NAME
  459. nginx_disable_sniffing $HUBZILLA_DOMAIN_NAME
  460. echo ' # Zero-day exploit defense.' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  461. echo ' # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  462. echo " # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  463. echo " # server, which is entirely possible with php-fpm/php-fcgi." >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  464. echo " # Comment the 'try_files' line out if you set up php-fpm/php-fcgi on" >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  465. echo " # another machine. And then cross your fingers that you won't get hacked." >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  466. echo ' try_files $uri $uri/ /index.php;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  467. echo ' # NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  468. echo ' fastcgi_split_path_info ^(.+\.php)(/.+)$;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  469. echo ' # With php-cgi alone:' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  470. echo ' # fastcgi_pass 127.0.0.1:9000;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  471. echo ' # With php-fpm:' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  472. echo ' fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  473. echo ' include fastcgi_params;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  474. echo ' fastcgi_index index.php;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  475. echo ' fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  476. echo ' fastcgi_read_timeout 300;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  477. echo ' }' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  478. echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  479. echo ' # deny access to all dot files' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  480. echo ' location ~ /\. {' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  481. echo ' deny all;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  482. echo ' }' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  483. echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  484. echo ' location ~ /\.ht {' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  485. echo ' deny all;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  486. echo ' }' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  487. echo '}' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
  488. fi
  489. function_check configure_php
  490. configure_php
  491. function_check create_site_certificate
  492. create_site_certificate $HUBZILLA_DOMAIN_NAME 'yes'
  493. if [ ! -d $HUBZILLA_PATH/view/tpl/smarty3 ]; then
  494. mkdir $HUBZILLA_PATH/view/tpl/smarty3
  495. fi
  496. if [ ! -d "$HUBZILLA_PATH/store" ]; then
  497. mkdir "$HUBZILLA_PATH/store"
  498. fi
  499. if [ ! -d "$HUBZILLA_PATH/store/[data]" ]; then
  500. mkdir "$HUBZILLA_PATH/store/[data]"
  501. fi
  502. if [ ! -d "$HUBZILLA_PATH/store/[data]/smarty3" ]; then
  503. mkdir "$HUBZILLA_PATH/store/[data]/smarty3"
  504. chmod 1777 "$HUBZILLA_PATH/store/[data]/smarty3"
  505. fi
  506. chmod 1777 $HUBZILLA_PATH/view/tpl
  507. chown -R www-data:www-data "$HUBZILLA_PATH/store"
  508. chmod 1777 $HUBZILLA_PATH/view/tpl/smarty3
  509. # Ensure that the database gets backed up locally, if remote
  510. # backups are not being used
  511. function_check backup_databases_script_header
  512. backup_databases_script_header
  513. function_check backup_database_local
  514. backup_database_local hubzilla
  515. chown -R www-data:www-data $HUBZILLA_PATH
  516. function_check nginx_ensite
  517. nginx_ensite $HUBZILLA_DOMAIN_NAME
  518. # initialize the database
  519. if [ ! -f $HUBZILLA_PATH/install/schema_mysql.sql ]; then
  520. echo $'No database schema found for hubzilla'
  521. exit 252782
  522. fi
  523. function_check initialise_database
  524. initialise_database hubzilla $HUBZILLA_PATH/install/schema_mysql.sql
  525. # create the config file
  526. echo '<?php' > $HUBZILLA_PATH/.htconfig.php
  527. echo "\$db_host = 'localhost';" >> $HUBZILLA_PATH/.htconfig.php
  528. echo "\$db_port = '0';" >> $HUBZILLA_PATH/.htconfig.php
  529. echo "\$db_user = 'root';" >> $HUBZILLA_PATH/.htconfig.php
  530. echo "\$db_pass = '${MARIADB_PASSWORD}';" >> $HUBZILLA_PATH/.htconfig.php
  531. echo "\$db_data = 'hubzilla';" >> $HUBZILLA_PATH/.htconfig.php
  532. echo "\$db_type = '0';" >> $HUBZILLA_PATH/.htconfig.php
  533. echo "\$default_timezone = 'Europe/London';" >> $HUBZILLA_PATH/.htconfig.php
  534. if [[ $ONION_ONLY == 'no' ]]; then
  535. echo "\$a->config['system']['baseurl'] = 'https://${HUBZILLA_DOMAIN_NAME}';" >> $HUBZILLA_PATH/.htconfig.php
  536. else
  537. echo "\$a->config['system']['baseurl'] = 'http://${HUBZILLA_ONION_HOSTNAME}';" >> $HUBZILLA_PATH/.htconfig.php
  538. fi
  539. echo "\$a->config['system']['sitename'] = \"Hubzilla\";" >> $HUBZILLA_PATH/.htconfig.php
  540. HUBZILLA_LOCATION_HASH="$(create_password 30)"
  541. echo "\$a->config['system']['location_hash'] = '${HUBZILLA_LOCATION_HASH}';" >> $HUBZILLA_PATH/.htconfig.php
  542. echo "\$a->config['system']['register_policy'] = REGISTER_OPEN;" >> $HUBZILLA_PATH/.htconfig.php
  543. echo "\$a->config['system']['register_text'] = '';" >> $HUBZILLA_PATH/.htconfig.php
  544. echo "\$a->config['system']['admin_email'] = '${MY_EMAIL_ADDRESS}';" >> $HUBZILLA_PATH/.htconfig.php
  545. echo "\$a->config['system']['verify_email'] = 1;" >> $HUBZILLA_PATH/.htconfig.php
  546. echo "\$a->config['system']['access_policy'] = ACCESS_PRIVATE;" >> $HUBZILLA_PATH/.htconfig.php
  547. echo "\$a->config['system']['sellpage'] = '';" >> $HUBZILLA_PATH/.htconfig.php
  548. echo "\$a->config['system']['max_import_size'] = 200000;" >> $HUBZILLA_PATH/.htconfig.php
  549. echo "\$a->config['system']['php_path'] = '/usr/bin/php';" >> $HUBZILLA_PATH/.htconfig.php
  550. echo "\$a->config['system']['directory_mode'] = DIRECTORY_MODE_NORMAL;" >> $HUBZILLA_PATH/.htconfig.php
  551. echo "\$a->config['system']['theme'] = 'redbasic';" >> $HUBZILLA_PATH/.htconfig.php
  552. chown www-data:www-data $HUBZILLA_PATH/.htconfig.php
  553. chmod 755 $HUBZILLA_PATH/.htconfig.php
  554. systemctl restart mariadb
  555. systemctl restart php7.0-fpm
  556. systemctl restart nginx
  557. systemctl restart cron
  558. ${PROJECT_NAME}-addemail -u $MY_USERNAME -e "noreply@$HUBZILLA_DOMAIN_NAME" -g hubzilla --public no
  559. set_completion_param "hubzilla domain" "${HUBZILLA_DOMAIN_NAME}"
  560. APP_INSTALLED=1
  561. }
  562. # NOTE: deliberately there is no "exit 0"