freedombone-restore-remote 23KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # Restore from a given remote server
  12. # License
  13. # =======
  14. #
  15. # Copyright (C) 2015-2016 Bob Mottram <bob@robotics.uk.to>
  16. #
  17. # This program is free software: you can redistribute it and/or modify
  18. # it under the terms of the GNU Affero General Public License as published by
  19. # the Free Software Foundation, either version 3 of the License, or
  20. # (at your option) any later version.
  21. #
  22. # This program is distributed in the hope that it will be useful,
  23. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  24. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  25. # GNU Affero General Public License for more details.
  26. #
  27. # You should have received a copy of the GNU Affero General Public License
  28. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  29. PROJECT_NAME='freedombone'
  30. COMPLETION_FILE=$HOME/${PROJECT_NAME}-completed.txt
  31. CONFIGURATION_FILE=$HOME/${PROJECT_NAME}.cfg
  32. BACKUP_EXTRA_DIRECTORIES=/root/backup-extra-dirs.csv
  33. export TEXTDOMAIN=${PROJECT_NAME}-restore-remote
  34. export TEXTDOMAINDIR="/usr/share/locale"
  35. UTILS_FILES=/usr/share/${PROJECT_NAME}/utils/${PROJECT_NAME}-utils-*
  36. for f in $UTILS_FILES
  37. do
  38. source $f
  39. done
  40. SERVER_NAME=$1
  41. # whether to restore everything or just a specific application
  42. RESTORE_APP='all'
  43. if [ ${2} ]; then
  44. RESTORE_APP=${2}
  45. fi
  46. ADMIN_USERNAME=$(get_completion_param "Admin user")
  47. ADMIN_EMAIL_ADDRESS=${ADMIN_USERNAME}@${HOSTNAME}
  48. # Temporary location for data to be backed up to other servers
  49. SERVER_DIRECTORY=/root/remoterestore
  50. BACKUP_LIST=/home/${ADMIN_USERNAME}/backup.list
  51. if [ ! $SERVER_NAME ]; then
  52. echo $'restorefromfriend [server]'
  53. exit 1
  54. fi
  55. if [ ! -f $BACKUP_LIST ]; then
  56. echo $"No friends list found at $BACKUP_LIST"
  57. exit 2
  58. fi
  59. if ! grep -q "$SERVER_NAME" $BACKUP_LIST; then
  60. echo $"Server not found within the friends list"
  61. exit 3
  62. fi
  63. REMOTE_SERVER=$(grep -i "$SERVER_NAME" $BACKUP_LIST | awk -F ' ' '{print $1}')
  64. REMOTE_SSH_PORT=$(grep -i "$SERVER_NAME" $BACKUP_LIST | awk -F ' ' '{print $2}')
  65. REMOTE_DIRECTORY=$(grep -i "$SERVER_NAME" $BACKUP_LIST | awk -F ' ' '{print $3}')
  66. REMOTE_PASSWORD=$(grep -i "$SERVER_NAME" $BACKUP_LIST | awk -F ' ' '{print $4}')
  67. REMOTE_SERVER=$REMOTE_SERVER:$REMOTE_DIRECTORY
  68. NOW=$(date +"%Y-%m-%d %H:%M:%S")
  69. echo "$NOW Starting restore from $REMOTE_SERVER" >> /var/log/remotebackups.log
  70. rsync -ratlzv --rsh="/usr/bin/sshpass -p $REMOTE_PASSWORD ssh -p $REMOTE_SSH_PORT -o StrictHostKeyChecking=no" $REMOTE_SERVER/backup $SERVER_DIRECTORY
  71. if [ ! "$?" = "0" ]; then
  72. echo "$NOW Restore from $REMOTE_SERVER failed" >> /var/log/remotebackups.log
  73. # Send a warning email
  74. echo "Restore from $REMOTE_SERVER failed" | mail -s "${PROJECT_NAME} restore from friend" $ADMIN_EMAIL_ADDRESS
  75. exit 790
  76. else
  77. echo "$NOW Restored encrypted data from $REMOTE_SERVER" >> /var/log/remotebackups.log
  78. fi
  79. # MariaDB password
  80. DATABASE_PASSWORD=$(cat /root/dbpass)
  81. function restore_directory_from_friend {
  82. if [ ! -d ${1} ]; then
  83. mkdir ${1}
  84. fi
  85. obnam restore -r $SERVER_DIRECTORY/backup/${2} --to ${1}
  86. }
  87. function copy_gpg_keys {
  88. echo $"Copying GPG keys from admin user to root"
  89. cp -r /home/$ADMIN_USERNAME/.gnupg /root
  90. }
  91. function restore_configuration {
  92. if [[ $RESTORE_APP != 'all' ]]; then
  93. if [[ $RESTORE_APP != 'configuration' ]]; then
  94. return
  95. fi
  96. fi
  97. if [ -d $SERVER_DIRECTORY/backup/config ]; then
  98. echo $"Restoring configuration files"
  99. temp_restore_dir=/root/tempconfig
  100. restore_directory_from_friend $temp_restore_dir config
  101. cp -f $temp_restore_dir/root/${PROJECT_NAME}.cfg $CONFIGURATION_FILE
  102. if [ ! "$?" = "0" ]; then
  103. unmount_drive
  104. rm -rf $temp_restore_dir
  105. exit 5372
  106. fi
  107. if [ -f $CONFIGURATION_FILE ]; then
  108. # install according to the config file
  109. freedombone -c $CONFIGURATION_FILE
  110. fi
  111. cp -f $temp_restore_dir/root/${PROJECT_NAME}-completed.txt $COMPLETION_FILE
  112. if [ ! "$?" = "0" ]; then
  113. unmount_drive
  114. rm -rf $temp_restore_dir
  115. exit 7252
  116. fi
  117. if [ -f ${temp_restore_dir}${BACKUP_EXTRA_DIRECTORIES} ]; then
  118. cp -f ${temp_restore_dir}${BACKUP_EXTRA_DIRECTORIES} ${BACKUP_EXTRA_DIRECTORIES}
  119. if [ ! "$?" = "0" ]; then
  120. unmount_drive
  121. rm -rf $temp_restore_dir
  122. exit 62121
  123. fi
  124. fi
  125. # restore nginx password hashes
  126. if [ -f $temp_restore_dir/root/htpasswd ]; then
  127. cp -f $temp_restore_dir/root/htpasswd /etc/nginx/.htpasswd
  128. fi
  129. rm -rf $temp_restore_dir
  130. fi
  131. }
  132. function restore_mariadb {
  133. if [[ $RESTORE_APP != 'all' ]]; then
  134. if [[ $RESTORE_APP != 'mariadb' ]]; then
  135. return
  136. fi
  137. fi
  138. if [ -d $SERVER_DIRECTORY/backup/mariadb ]; then
  139. echo $"Restoring MariaDB settings"
  140. temp_restore_dir=/root/tempmariadb
  141. restore_directory_from_friend $temp_restore_dir mariadb
  142. echo $"Get the MariaDB password from the backup"
  143. if [ ! -f ${temp_restore_dir}${temp_restore_dir}/db ]; then
  144. echo $"MariaDB password file not found"
  145. exit 495
  146. fi
  147. BACKUP_MARIADB_PASSWORD=$(cat ${temp_restore_dir}${temp_restore_dir}/db)
  148. if [[ "$BACKUP_MARIADB_PASSWORD" != "$DATABASE_PASSWORD" ]]; then
  149. echo $"Restore the MariaDB user table"
  150. mysqlsuccess=$(mysql -u root --password="$DATABASE_PASSWORD" mysql -o < ${temp_restore_dir}${temp_restore_dir}/mysql.sql)
  151. if [ ! "$?" = "0" ]; then
  152. echo $"Try again using the password obtained from backup"
  153. mysqlsuccess=$(mysql -u root --password="$BACKUP_MARIADB_PASSWORD" mysql -o < ${temp_restore_dir}${temp_restore_dir}/mysql.sql)
  154. fi
  155. if [ ! "$?" = "0" ]; then
  156. echo "$mysqlsuccess"
  157. exit 962
  158. fi
  159. echo $"Restarting database"
  160. service mysql restart
  161. echo $"Change the MariaDB password to the backup version"
  162. DATABASE_PASSWORD=$BACKUP_MARIADB_PASSWORD
  163. fi
  164. shred -zu ${temp_restore_dir}${temp_restore_dir}/db
  165. rm -rf ${temp_restore_dir}
  166. # Change database password file
  167. echo "$DATABASE_PASSWORD" > /root/dbpass
  168. chmod 600 /root/dbpass
  169. fi
  170. }
  171. function restore_letsencrypt {
  172. if [[ $RESTORE_APP != 'all' ]]; then
  173. if [[ $RESTORE_APP != 'letsencrypt' ]]; then
  174. return
  175. fi
  176. fi
  177. if [ -d $SERVER_DIRECTORY/backup/letsencrypt ]; then
  178. echo $"Restoring Lets Encrypt settings"
  179. restore_directory_from_friend / letsencrypt
  180. fi
  181. }
  182. function restore_tor {
  183. if [[ $RESTORE_APP != 'all' ]]; then
  184. if [[ $RESTORE_APP != 'tor' ]]; then
  185. return
  186. fi
  187. fi
  188. if [ -d $SERVER_DIRECTORY/backup/tor ]; then
  189. echo $"Restoring Tor settings"
  190. restore_directory_from_friend / tor
  191. fi
  192. }
  193. function restore_mutt_settings {
  194. if [[ $RESTORE_APP != 'all' ]]; then
  195. if [[ $RESTORE_APP != 'mutt' ]]; then
  196. return
  197. fi
  198. fi
  199. for d in $SERVER_DIRECTORY/backup/mutt/*/ ; do
  200. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  201. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  202. if [ -d $SERVER_DIRECTORY/backup/mutt/$USERNAME ]; then
  203. if [ ! -d /home/$USERNAME ]; then
  204. ${PROJECT_NAME}-adduser $USERNAME
  205. fi
  206. echo $"Restoring Mutt settings for $USERNAME"
  207. temp_restore_dir=/root/tempmutt
  208. restore_directory_from_friend ${temp_restore_dir} mutt/$USERNAME
  209. if [ -f ${temp_restore_dir}/home/$USERNAME/tempbackup/.muttrc ]; then
  210. cp -f ${temp_restore_dir}/home/$USERNAME/tempbackup/.muttrc /home/$USERNAME/.muttrc
  211. fi
  212. if [ -f ${temp_restore_dir}/home/$USERNAME/tempbackup/Muttrc ]; then
  213. cp -f ${temp_restore_dir}/home/$USERNAME/tempbackup/Muttrc /etc/Muttrc
  214. fi
  215. if [ ! "$?" = "0" ]; then
  216. rm -rf ${temp_restore_dir}
  217. exit 276
  218. fi
  219. rm -rf ${temp_restore_dir}
  220. fi
  221. fi
  222. done
  223. }
  224. function restore_gpg {
  225. if [[ $RESTORE_APP != 'all' ]]; then
  226. if [[ $RESTORE_APP != 'gpg' ]]; then
  227. return
  228. fi
  229. fi
  230. for d in $SERVER_DIRECTORY/backup/gnupg/*/ ; do
  231. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  232. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  233. if [ -d $SERVER_DIRECTORY/backup/gnupg/$USERNAME ]; then
  234. if [ ! -d /home/$USERNAME ]; then
  235. ${PROJECT_NAME}-adduser $USERNAME
  236. fi
  237. echo $"Restoring gnupg settings for $USERNAME"
  238. temp_restore_dir=/root/tempgnupg
  239. restore_directory_from_friend ${temp_restore_dir} gnupg/$USERNAME
  240. cp -r ${temp_restore_dir}/home/$USERNAME/.gnupg /home/$USERNAME/
  241. if [ ! "$?" = "0" ]; then
  242. rm -rf ${temp_restore_dir}
  243. exit 276
  244. fi
  245. rm -rf ${temp_restore_dir}
  246. if [[ "$USERNAME" == "$ADMIN_USERNAME" ]]; then
  247. cp -r /home/$USERNAME/.gnupg /root
  248. if [ ! "$?" = "0" ]; then
  249. exit 283
  250. fi
  251. fi
  252. fi
  253. fi
  254. done
  255. }
  256. function restore_procmail {
  257. if [[ $RESTORE_APP != 'all' ]]; then
  258. if [[ $RESTORE_APP != 'procmail' ]]; then
  259. return
  260. fi
  261. fi
  262. for d in $SERVER_DIRECTORY/backup/procmail/*/ ; do
  263. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  264. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  265. if [ -d $SERVER_DIRECTORY/backup/procmail/$USERNAME ]; then
  266. if [ ! -d /home/$USERNAME ]; then
  267. ${PROJECT_NAME}-adduser $USERNAME
  268. fi
  269. echo $"Restoring procmail settings for $USERNAME"
  270. temp_restore_dir=/root/tempprocmail
  271. restore_directory_from_friend ${temp_restore_dir} procmail/$USERNAME
  272. cp -f ${temp_restore_dir}/home/$USERNAME/tempbackup/.procmailrc /home/$USERNAME/
  273. if [ ! "$?" = "0" ]; then
  274. rm -rf ${temp_restore_dir}
  275. exit 276
  276. fi
  277. rm -rf ${temp_restore_dir}
  278. fi
  279. fi
  280. done
  281. }
  282. function restore_spamassassin {
  283. if [[ $RESTORE_APP != 'all' ]]; then
  284. if [[ $RESTORE_APP != 'spamassassin' ]]; then
  285. return
  286. fi
  287. fi
  288. for d in $SERVER_DIRECTORY/backup/spamassassin/*/ ; do
  289. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  290. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  291. if [ -d $SERVER_DIRECTORY/backup/spamassassin/$USERNAME ]; then
  292. if [ ! -d /home/$USERNAME ]; then
  293. ${PROJECT_NAME}-adduser $USERNAME
  294. fi
  295. echo $"Restoring spamassassin settings for $USERNAME"
  296. temp_restore_dir=/root/tempspamassassin
  297. restore_directory_from_friend $temp_restore_dir spamassassin/$USERNAME
  298. cp -rf $temp_restore_dir/home/$USERNAME/.spamassassin /home/$USERNAME/
  299. if [ ! "$?" = "0" ]; then
  300. rm -rf $temp_restore_dir
  301. exit 276
  302. fi
  303. rm -rf $temp_restore_dir
  304. fi
  305. fi
  306. done
  307. }
  308. function restore_admin_readme {
  309. if [[ $RESTORE_APP != 'all' ]]; then
  310. if [[ $RESTORE_APP != 'readme' ]]; then
  311. return
  312. fi
  313. fi
  314. if [ -d $SERVER_DIRECTORY/backup/readme ]; then
  315. echo $"Restoring README"
  316. temp_restore_dir=/root/tempreadme
  317. restore_directory_from_friend $temp_restore_dir readme
  318. cp -f $temp_restore_dir/home/$ADMIN_USERNAME/tempbackup/README /home/$ADMIN_USERNAME/
  319. if [ ! "$?" = "0" ]; then
  320. rm -rf $temp_restore_dir
  321. exit 276
  322. fi
  323. rm -rf $temp_restore_dir
  324. fi
  325. }
  326. function restore_ssh_keys {
  327. if [[ $RESTORE_APP != 'all' ]]; then
  328. if [[ $RESTORE_APP != 'ssh' ]]; then
  329. return
  330. fi
  331. fi
  332. for d in $SERVER_DIRECTORY/backup/ssh/*/ ; do
  333. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  334. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  335. if [ -d $SERVER_DIRECTORY/backup/ssh/$USERNAME ]; then
  336. if [ ! -d /home/$USERNAME ]; then
  337. ${PROJECT_NAME}-adduser $USERNAME
  338. fi
  339. echo $"Restoring ssh keys for $USERNAME"
  340. temp_restore_dir=/root/tempssh
  341. restore_directory_from_friend $temp_restore_dir ssh/$USERNAME
  342. cp -r $temp_restore_dir/home/$USERNAME/.ssh /home/$USERNAME/
  343. if [ ! "$?" = "0" ]; then
  344. rm -rf $temp_restore_dir
  345. exit 664
  346. fi
  347. rm -rf $temp_restore_dir
  348. fi
  349. fi
  350. done
  351. }
  352. function restore_user_config {
  353. if [[ $RESTORE_APP != 'all' ]]; then
  354. if [[ $RESTORE_APP != 'userconfig' ]]; then
  355. return
  356. fi
  357. fi
  358. for d in $SERVER_DIRECTORY/backup/config/*/ ; do
  359. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  360. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  361. if [ -d $SERVER_DIRECTORY/backup/config/$USERNAME ]; then
  362. if [ ! -d /home/$USERNAME ]; then
  363. ${PROJECT_NAME}-adduser $USERNAME
  364. fi
  365. echo $"Restoring config files for $USERNAME"
  366. temp_restore_dir=/root/tempconfig
  367. restore_directory_from_friend $temp_restore_dir config/$USERNAME
  368. cp -r $temp_restore_dir/home/$USERNAME/.config /home/$USERNAME/
  369. if [ ! "$?" = "0" ]; then
  370. rm -rf $temp_restore_dir
  371. exit 664
  372. fi
  373. rm -rf $temp_restore_dir
  374. fi
  375. fi
  376. done
  377. }
  378. function gpg_pubkey_from_email {
  379. key_owner_username=$1
  380. key_email_address=$2
  381. key_id=
  382. if [[ $key_owner_username != "root" ]]; then
  383. key_id=$(su -c "gpg --list-keys $key_email_address | grep 'pub '" - $key_owner_username | awk -F ' ' '{print $2}' | awk -F '/' '{print $2}')
  384. else
  385. key_id=$(gpg --list-keys $key_email_address | grep 'pub ' | awk -F ' ' '{print $2}' | awk -F '/' '{print $2}')
  386. fi
  387. echo $key_id
  388. }
  389. function restore_user_monkeysphere {
  390. if [[ $RESTORE_APP != 'all' ]]; then
  391. if [[ $RESTORE_APP != 'usermonkeysphere' ]]; then
  392. return
  393. fi
  394. fi
  395. for d in $SERVER_DIRECTORY/backup/monkeysphere/*/ ; do
  396. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  397. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  398. if [ -d $SERVER_DIRECTORY/backup/monkeysphere/$USERNAME ]; then
  399. if [ ! -d /home/$USERNAME ]; then
  400. ${PROJECT_NAME}-adduser $USERNAME
  401. fi
  402. echo $"Restoring monkeysphere ids for $USERNAME"
  403. temp_restore_dir=/root/tempmonkeysphere
  404. restore_directory_from_friend $temp_restore_dir monkeysphere/$USERNAME
  405. cp -r $temp_restore_dir/home/$USERNAME/.monkeysphere /home/$USERNAME/
  406. if [ ! "$?" = "0" ]; then
  407. rm -rf $temp_restore_dir
  408. exit 664
  409. fi
  410. rm -rf $temp_restore_dir
  411. fi
  412. fi
  413. # The admin user is the identity certifier
  414. MY_EMAIL_ADDRESS="${ADMIN_USERNAME}@${HOSTNAME}"
  415. read_config_param MY_EMAIL_ADDRESS
  416. MY_GPG_PUBLIC_KEY_ID=$(gpg_pubkey_from_email "$ADMIN_USERNAME" "$MY_EMAIL_ADDRESS")
  417. fpr=$(gpg --with-colons --fingerprint $MY_GPG_PUBLIC_KEY_ID | grep fpr | head -n 1 | awk -F ':' '{print $10}')
  418. monkeysphere-authentication add-identity-certifier $fpr
  419. monkeysphere-authentication update-users
  420. done
  421. }
  422. function restore_user_fin {
  423. if [[ $RESTORE_APP != 'all' ]]; then
  424. if [[ $RESTORE_APP != 'userfin' ]]; then
  425. return
  426. fi
  427. fi
  428. for d in $SERVER_DIRECTORY/backup/fin/*/ ; do
  429. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  430. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  431. if [ -d $SERVER_DIRECTORY/backup/fin/$USERNAME ]; then
  432. if [ ! -d /home/$USERNAME ]; then
  433. ${PROJECT_NAME}-adduser $USERNAME
  434. fi
  435. echo $"Restoring fin files for $USERNAME"
  436. temp_restore_dir=/root/tempfin
  437. restore_directory_from_friend $temp_restore_dir fin/$USERNAME
  438. cp -r $temp_restore_dir/home/$USERNAME/.fin /home/$USERNAME/
  439. if [ ! "$?" = "0" ]; then
  440. rm -rf $temp_restore_dir
  441. exit 664
  442. fi
  443. rm -rf $temp_restore_dir
  444. fi
  445. fi
  446. done
  447. }
  448. function restore_user_local {
  449. if [[ $RESTORE_APP != 'all' ]]; then
  450. if [[ $RESTORE_APP != 'userlocal' ]]; then
  451. return
  452. fi
  453. fi
  454. for d in $SERVER_DIRECTORY/backup/local/*/ ; do
  455. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  456. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  457. if [ -d $SERVER_DIRECTORY/backup/local/$USERNAME ]; then
  458. if [ ! -d /home/$USERNAME ]; then
  459. ${PROJECT_NAME}-adduser $USERNAME
  460. fi
  461. echo $"Restoring local files for $USERNAME"
  462. temp_restore_dir=/root/templocal
  463. restore_directory_from_friend $temp_restore_dir local/$USERNAME
  464. cp -r $temp_restore_dir/home/$USERNAME/.local /home/$USERNAME/
  465. if [ ! "$?" = "0" ]; then
  466. rm -rf $temp_restore_dir
  467. exit 664
  468. fi
  469. rm -rf $temp_restore_dir
  470. fi
  471. fi
  472. done
  473. }
  474. function restore_certs {
  475. if [[ $RESTORE_APP != 'all' ]]; then
  476. if [[ $RESTORE_APP != 'certs' ]]; then
  477. return
  478. fi
  479. fi
  480. if [ -d $SERVER_DIRECTORY/backup/ssl ]; then
  481. echo $"Restoring certificates"
  482. restore_directory_from_friend /root/tempssl ssl
  483. cp -r /root/tempssl/etc/ssl/* /etc/ssl
  484. if [ ! "$?" = "0" ]; then
  485. exit 276
  486. fi
  487. rm -rf /root/tempssl
  488. # restore ownership
  489. if [ -f /etc/ssl/private/xmpp.key ]; then
  490. chown prosody:prosody /etc/ssl/private/xmpp.key
  491. chown prosody:prosody /etc/ssl/certs/xmpp.*
  492. fi
  493. if [ -d /etc/dovecot ]; then
  494. chown root:dovecot /etc/ssl/private/dovecot.*
  495. chown root:dovecot /etc/ssl/certs/dovecot.*
  496. fi
  497. if [ -f /etc/ssl/private/exim.key ]; then
  498. cp /etc/ssl/private/exim.key /etc/exim4
  499. cp /etc/ssl/certs/exim.crt /etc/exim4
  500. cp /etc/ssl/certs/exim.dhparam /etc/exim4
  501. chown root:Debian-exim /etc/exim4/exim.key /etc/exim4/exim.crt /etc/exim4/exim.dhparam
  502. chmod 640 /etc/exim4/exim.key /etc/exim4/exim.crt /etc/exim4/exim.dhparam
  503. fi
  504. if [ -f /etc/ssl/private/mumble.key ]; then
  505. if [ -d /var/lib/mumble-server ]; then
  506. cp /etc/ssl/certs/mumble.* /var/lib/mumble-server
  507. cp /etc/ssl/private/mumble.key /var/lib/mumble-server
  508. chown -R mumble-server:mumble-server /var/lib/mumble-server
  509. fi
  510. fi
  511. fi
  512. }
  513. function restore_personal_settings {
  514. if [[ $RESTORE_APP != 'all' ]]; then
  515. if [[ $RESTORE_APP != 'personal' ]]; then
  516. return
  517. fi
  518. fi
  519. for d in $SERVER_DIRECTORY/backup/personal/*/ ; do
  520. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  521. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  522. if [ -d $SERVER_DIRECTORY/backup/personal/$USERNAME ]; then
  523. if [ ! -d /home/$USERNAME ]; then
  524. ${PROJECT_NAME}-adduser $USERNAME
  525. fi
  526. echo $"Restoring personal settings for $USERNAME"
  527. temp_restore_dir=/root/temppersonal
  528. restore_directory_from_friend $temp_restore_dir personal/$USERNAME
  529. if [ -d /home/$USERNAME/personal ]; then
  530. rm -rf /home/$USERNAME/personal
  531. fi
  532. mv $temp_restore_dir/home/$USERNAME/personal /home/$USERNAME
  533. if [ ! "$?" = "0" ]; then
  534. exit 184
  535. fi
  536. rm -rf $temp_restore_dir
  537. fi
  538. fi
  539. done
  540. }
  541. function restore_mailing_list {
  542. if [[ $RESTORE_APP != 'all' ]]; then
  543. if [[ $RESTORE_APP != 'mailinglist' ]]; then
  544. return
  545. fi
  546. fi
  547. if [ -d /var/spool/mlmmj ]; then
  548. echo $"Restoring public mailing list"
  549. temp_restore_dir=/root/tempmailinglist
  550. restore_directory_from_friend $temp_restore_dir mailinglist
  551. cp -r $temp_restore_dir/root/spool/mlmmj/* /var/spool/mlmmj
  552. if [ ! "$?" = "0" ]; then
  553. exit 526
  554. fi
  555. rm -rf $temp_restore_dir
  556. fi
  557. }
  558. function restore_email {
  559. if [[ $RESTORE_APP != 'all' ]]; then
  560. if [[ $RESTORE_APP != 'email' ]]; then
  561. return
  562. fi
  563. fi
  564. for d in $SERVER_DIRECTORY/backup/mail/*/ ; do
  565. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  566. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  567. if [ -d $SERVER_DIRECTORY/backup/mail/$USERNAME ]; then
  568. if [ ! -d /home/$USERNAME ]; then
  569. ${PROJECT_NAME}-adduser $USERNAME
  570. fi
  571. echo $"Restoring emails for $USERNAME"
  572. temp_restore_dir=/root/tempmail
  573. restore_directory_from_friend $temp_restore_dir mail/$USERNAME
  574. if [ ! -d /home/$USERNAME/Maildir ]; then
  575. mkdir /home/$USERNAME/Maildir
  576. fi
  577. tar -xzvf $temp_restore_dir/root/tempbackupemail/$USERNAME/maildir.tar.gz -C /
  578. if [ ! "$?" = "0" ]; then
  579. exit 927
  580. fi
  581. rm -rf $temp_restore_dir
  582. fi
  583. fi
  584. done
  585. }
  586. # Social key management
  587. # Recover any key fragments and reconstruct the gpg key
  588. ${PROJECT_NAME}-recoverkey -u ${ADMIN_USERNAME} -l $BACKUP_LIST
  589. copy_gpg_keys
  590. restore_configuration
  591. restore_mariadb
  592. restore_letsencrypt
  593. restore_mutt_settings
  594. restore_gpg
  595. restore_procmail
  596. restore_spamassassin
  597. restore_admin_readme
  598. restore_ssh_keys
  599. restore_user_config
  600. restore_user_monkeysphere
  601. restore_user_fin
  602. restore_user_local
  603. restore_certs
  604. restore_personal_settings
  605. restore_mailing_list
  606. restore_email
  607. restore_apps remote
  608. set_user_permissions
  609. # ensure that all TLS certificates are pinned
  610. #${PROJECT_NAME}-pin-cert all
  611. echo $"*** Remote restore was successful ***"
  612. exit 0