freedombone-app-sip 21KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # SIP functions
  12. #
  13. # License
  14. # =======
  15. #
  16. # Copyright (C) 2014-2016 Bob Mottram <bob@robotics.uk.to>
  17. #
  18. # This program is free software: you can redistribute it and/or modify
  19. # it under the terms of the GNU Affero General Public License as published by
  20. # the Free Software Foundation, either version 3 of the License, or
  21. # (at your option) any later version.
  22. #
  23. # This program is distributed in the hope that it will be useful,
  24. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  25. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  26. # GNU Affero General Public License for more details.
  27. #
  28. # You should have received a copy of the GNU Affero General Public License
  29. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  30. VARIANTS='full chat'
  31. SIP_SERVER_PASSWORD=
  32. SIP_PORT=5060
  33. SIP_TLS_PORT=5061
  34. TURN_PORT=3478
  35. TURN_TLS_PORT=5349
  36. TURN_NONCE=
  37. sip_variables=(ONION_ONLY
  38. MY_USERNAME
  39. SIP_PORT
  40. SIP_TLS_PORT
  41. SIP_SERVER_PASSWORD
  42. TURN_PORT
  43. TURN_TLS_PORT
  44. TURN_NONCE)
  45. function remove_user_sip {
  46. remove_username="$1"
  47. ${PROJECT_NAME}-rmsipuser ${remove_username}
  48. # remove user from SIP TURN/STUN
  49. if [ -f /etc/turnserver/turnusers.txt ]; then
  50. sed -i "/${remove_username}:/d" /etc/turnserver/turnusers.txt
  51. fi
  52. }
  53. function add_user_sip {
  54. new_username="$1"
  55. new_user_password="$2"
  56. SIP_EXTENSION=$(${PROJECT_NAME}-sipfreeext)
  57. ${PROJECT_NAME}-addsipuser -u $new_username -e $SIP_EXTENSION -p "$new_user_password"
  58. if [ ! "$?" = "0" ]; then
  59. echo '1'
  60. return
  61. fi
  62. # add user to the sipwitch group
  63. if [ -f /etc/sipwitch.conf ]; then
  64. usermod -aG sipwitch $new_username
  65. fi
  66. # add user for SIP STUN/TURN
  67. if [ -d /etc/turnserver ]; then
  68. if grep -q "DEFAULT_DOMAIN_NAME" $CONFIGURATION_FILE; then
  69. DEFAULT_DOMAIN_NAME=$(grep "DEFAULT_DOMAIN_NAME" $CONFIGURATION_FILE | head -n 1 | awk -F '=' '{print $2}')
  70. echo "${new_username}:${new_user_password}:${DEFAULT_DOMAIN_NAME}:authorized" >> /etc/turnserver/turnusers.txt
  71. fi
  72. fi
  73. echo '0'
  74. }
  75. function install_interactive_sip {
  76. echo -n ''
  77. APP_INSTALLED=1
  78. }
  79. function change_password_sip {
  80. echo -n ''
  81. }
  82. function reconfigure_sip {
  83. echo -n ''
  84. }
  85. function upgrade_sip {
  86. # remove the original sipwitch daemon if it exists
  87. if [ -f /etc/init.d/sipwitch ]; then
  88. rm -f /etc/init.d/sipwitch
  89. fi
  90. }
  91. function backup_local_sip {
  92. if [ -f /etc/sipwitch.conf ]; then
  93. echo $"Backing up SIP settings"
  94. temp_backup_dir=/root/tempsipbackup
  95. if [ ! -d $temp_backup_dir ]; then
  96. mkdir -p $temp_backup_dir
  97. fi
  98. cp -f /etc/sipwitch.conf $temp_backup_dir
  99. backup_directory_to_usb $temp_backup_dir sip
  100. echo $"SIP settings backup complete"
  101. fi
  102. }
  103. function restore_local_sip {
  104. if [ -d $USB_MOUNT/backup/sip ]; then
  105. echo $"Restoring SIP settings"
  106. temp_restore_dir=/root/tempsip
  107. function_check restore_directory_from_usb
  108. restore_directory_from_usb $temp_restore_dir sip
  109. cp -f $temp_restore_dir/home/$ADMIN_USERNAME/tempbackup/sipwitch.conf /etc/sipwitch.conf
  110. if [ ! "$?" = "0" ]; then
  111. rm -rf $temp_restore_dir
  112. function_check set_user_permissions
  113. set_user_permissions
  114. backup_unmount_drive
  115. exit 3679
  116. fi
  117. rm -rf $temp_restore_dir
  118. service sipwitch restart
  119. echo $"Restore of SIP settings complete"
  120. fi
  121. }
  122. function backup_remote_sip {
  123. if [ -f /etc/sipwitch.conf ]; then
  124. echo $"Backing up SIP settings"
  125. temp_backup_dir=/root/tempsipbackup
  126. if [ ! -d $temp_backup_dir ]; then
  127. mkdir -p $temp_backup_dir
  128. fi
  129. cp -f /etc/sipwitch.conf $temp_backup_dir
  130. backup_directory_to_friend $temp_backup_dir sip
  131. echo $"Backup SIP settings complete"
  132. fi
  133. }
  134. function restore_remote_sip {
  135. echo -n ''
  136. }
  137. function remove_sip {
  138. if [[ $(app_is_installed sip) == "0" ]]; then
  139. return
  140. fi
  141. iptables -D INPUT -p udp --dport $TURN_PORT -j ACCEPT
  142. iptables -D INPUT -p tcp --dport $TURN_PORT -j ACCEPT
  143. iptables -D INPUT -p tcp --dport $TURN_TLS_PORT -j ACCEPT
  144. iptables -D INPUT -p udp --dport $SIP_PORT -j ACCEPT
  145. iptables -D INPUT -p tcp --dport $SIP_PORT -j ACCEPT
  146. iptables -D INPUT -p udp --dport $SIP_TLS_PORT -j ACCEPT
  147. iptables -D INPUT -p tcp --dport $SIP_TLS_PORT -j ACCEPT
  148. function_check save_firewall_settings
  149. save_firewall_settings
  150. function_check remove_onion_service
  151. remove_onion_service sip ${SIP_PORT}
  152. apt-get -y remove --purge sipwitch
  153. apt-get -y remove --purge turnserver
  154. if [ -f /etc/sipwitch.conf ]; then
  155. rm /etc/sipwitch.conf
  156. fi
  157. if [ -d /etc/turnserver ]; then
  158. rm -rf /etc/turnserver
  159. fi
  160. sed -i '/install_sip/d' $COMPLETION_FILE
  161. sed -i '/configure_firewall_for_turn/d' $COMPLETION_FILE
  162. sed -i '/configure_firewall_for_sip4/d' $COMPLETION_FILE
  163. }
  164. function configure_firewall_for_turn {
  165. if grep -Fxq "configure_firewall_for_turn" $COMPLETION_FILE; then
  166. return
  167. fi
  168. if [[ $ONION_ONLY != "no" ]]; then
  169. return
  170. fi
  171. iptables -A INPUT -p udp --dport $TURN_PORT -j ACCEPT
  172. iptables -A INPUT -p tcp --dport $TURN_PORT -j ACCEPT
  173. iptables -A INPUT -p tcp --dport $TURN_TLS_PORT -j ACCEPT
  174. function_check save_firewall_settings
  175. save_firewall_settings
  176. OPEN_PORTS+=("TURN $TURN_PORT")
  177. OPEN_PORTS+=("TURN TLS $TURN_TLS_PORT")
  178. echo 'configure_firewall_for_turn' >> $COMPLETION_FILE
  179. }
  180. function configure_firewall_for_sip4 {
  181. if grep -Fxq "configure_firewall_for_sip4" $COMPLETION_FILE; then
  182. return
  183. fi
  184. if [[ $ONION_ONLY != "no" ]]; then
  185. return
  186. fi
  187. iptables -A INPUT -p udp --dport $SIP_PORT -j ACCEPT
  188. iptables -A INPUT -p tcp --dport $SIP_PORT -j ACCEPT
  189. iptables -A INPUT -p udp --dport $SIP_TLS_PORT -j ACCEPT
  190. iptables -A INPUT -p tcp --dport $SIP_TLS_PORT -j ACCEPT
  191. function_check save_firewall_settings
  192. save_firewall_settings
  193. OPEN_PORTS+=("SIP $SIP_PORT")
  194. OPEN_PORTS+=("SIP TLS $SIP_TLS_PORT")
  195. echo 'configure_firewall_for_sip4' >> $COMPLETION_FILE
  196. }
  197. function get_sip_server_password {
  198. if [ -f /home/$MY_USERNAME/README ]; then
  199. if grep -q "sip server password" /home/$MY_USERNAME/README; then
  200. if [ ! $SIP_SERVER_PASSWORD ]; then
  201. SIP_SERVER_PASSWORD=$(cat /home/$MY_USERNAME/README | grep "sip server password" | awk -F ':' '{print $2}' | sed 's/^ *//')
  202. fi
  203. fi
  204. fi
  205. }
  206. function update_sipwitch_daemon {
  207. if [ ! -f /etc/init.d/sipwitch ]; then
  208. return
  209. fi
  210. service sipwitch stop
  211. # remove the original sipwitch daemon if it exists
  212. if [ -f /etc/init.d/sipwitch ]; then
  213. rm -f /etc/init.d/sipwitch
  214. fi
  215. # daemon
  216. echo '[Unit]' > /etc/systemd/system/sipwitch.service
  217. echo 'Description=GNU SIP Witch, a SIP telephony service daemon.' >> /etc/systemd/system/sipwitch.service
  218. echo 'After=network.target' >> /etc/systemd/system/sipwitch.service
  219. echo '' >> /etc/systemd/system/sipwitch.service
  220. echo '[Service]' >> /etc/systemd/system/sipwitch.service
  221. echo 'Type=simple' >> /etc/systemd/system/sipwitch.service
  222. echo 'Group=sipwitch' >> /etc/systemd/system/sipwitch.service
  223. echo 'PIDFile=/var/run/sipwitch/pidfile' >> /etc/systemd/system/sipwitch.service
  224. echo 'EnvironmentFile=-/etc/conf.d/sipwitch' >> /etc/systemd/system/sipwitch.service
  225. echo 'EnvironmentFile=-/etc/sipwitch.conf' >> /etc/systemd/system/sipwitch.service
  226. echo 'EnvironmentFile=-/etc/default/sipwitch' >> /etc/systemd/system/sipwitch.service
  227. echo 'ExecStartPre=-/bin/rm -f /var/run/sipwitch/control' >> /etc/systemd/system/sipwitch.service
  228. echo "ExecStart=/usr/sbin/sipw -f \$OPTIONS -P$SIP_PORT" >> /etc/systemd/system/sipwitch.service
  229. echo 'Restart=always' >> /etc/systemd/system/sipwitch.service
  230. echo 'NotifyAccess=main' >> /etc/systemd/system/sipwitch.service
  231. echo '' >> /etc/systemd/system/sipwitch.service
  232. echo '[Install]' >> /etc/systemd/system/sipwitch.service
  233. echo 'WantedBy=multi-user.target' >> /etc/systemd/system/sipwitch.service
  234. systemctl enable sipwitch
  235. systemctl daemon-reload
  236. systemctl start sipwitch
  237. }
  238. function install_sip_main {
  239. if [[ $(app_is_installed sip_main) == "1" ]]; then
  240. return
  241. fi
  242. apt-get -y install sipwitch
  243. function_check get_sip_server_password
  244. get_sip_server_password
  245. if [ ! $SIP_SERVER_PASSWORD ]; then
  246. if [ -f $IMAGE_PASSWORD_FILE ]; then
  247. SIP_SERVER_PASSWORD="$(printf `cat $IMAGE_PASSWORD_FILE`)"
  248. else
  249. SIP_SERVER_PASSWORD="$(create_password ${MINIMUM_PASSWORD_LENGTH})"
  250. fi
  251. fi
  252. echo '<?xml version="1.0"?>' > /etc/sipwitch.conf
  253. echo '<sipwitch>' >> /etc/sipwitch.conf
  254. echo '<provision>' >> /etc/sipwitch.conf
  255. echo "<user id=\"$MY_USERNAME\">" >> /etc/sipwitch.conf
  256. echo '<extension>201</extension>' >> /etc/sipwitch.conf
  257. echo "<secret>$SIP_SERVER_PASSWORD</secret>" >> /etc/sipwitch.conf
  258. echo "<display>$MY_USERNAME 201</display>" >> /etc/sipwitch.conf
  259. echo '</user>' >> /etc/sipwitch.conf
  260. echo '</provision>' >> /etc/sipwitch.conf
  261. echo '<access>' >> /etc/sipwitch.conf
  262. echo '</access>' >> /etc/sipwitch.conf
  263. echo '<stack>' >> /etc/sipwitch.conf
  264. echo " <localnames>$DEFAULT_DOMAIN_NAME</localnames>" >> /etc/sipwitch.conf
  265. echo ' <mapped>200</mapped>' >> /etc/sipwitch.conf
  266. echo ' <threading>2</threading>' >> /etc/sipwitch.conf
  267. echo ' <interface>*</interface>' >> /etc/sipwitch.conf
  268. echo ' <dumping>false</dumping>' >> /etc/sipwitch.conf
  269. echo ' <system>system</system>' >> /etc/sipwitch.conf
  270. echo ' <anon>anonymous</anon>' >> /etc/sipwitch.conf
  271. echo '</stack>' >> /etc/sipwitch.conf
  272. echo '<timers>' >> /etc/sipwitch.conf
  273. echo ' <!-- ring every 4 seconds -->' >> /etc/sipwitch.conf
  274. echo ' <ring>4</ring>' >> /etc/sipwitch.conf
  275. echo ' <!-- call forward no answer after x rings -->' >> /etc/sipwitch.conf
  276. echo ' <cfna>4</cfna>' >> /etc/sipwitch.conf
  277. echo ' <!-- call reset to clear cid in stack, 6 seconds -->' >> /etc/sipwitch.conf
  278. echo ' <reset>6</reset>' >> /etc/sipwitch.conf
  279. echo '</timers>' >> /etc/sipwitch.conf
  280. echo '<!-- we have 2xx numbers plus space for external users -->' >> /etc/sipwitch.conf
  281. echo '<registry>' >> /etc/sipwitch.conf
  282. echo ' <prefix>200</prefix>' >> /etc/sipwitch.conf
  283. echo ' <range>100</range>' >> /etc/sipwitch.conf
  284. echo ' <keysize>77</keysize>' >> /etc/sipwitch.conf
  285. echo ' <mapped>200</mapped>' >> /etc/sipwitch.conf
  286. echo ' <!-- <realm>GNU Telephony</realm> -->' >> /etc/sipwitch.conf
  287. echo '</registry>' >> /etc/sipwitch.conf
  288. echo '<routing>' >> /etc/sipwitch.conf
  289. echo '</routing>' >> /etc/sipwitch.conf
  290. echo '</sipwitch>' >> /etc/sipwitch.conf
  291. sed -i 's|#PLUGINS=|PLUGINS=|g' /etc/default/sipwitch
  292. sed -i 's|PLUGINS=.*|PLUGINS="zeroconf subscriber forward"|g' /etc/default/sipwitch
  293. groupadd sipwitch
  294. usermod -aG sipwitch $MY_USERNAME
  295. SIP_ONION_HOSTNAME=$(add_onion_service sip ${SIP_PORT} ${SIP_PORT})
  296. if ! grep -q $"SIP Server" /home/$MY_USERNAME/README; then
  297. echo '' >> /home/$MY_USERNAME/README
  298. echo '' >> /home/$MY_USERNAME/README
  299. echo $'SIP Server' >> /home/$MY_USERNAME/README
  300. echo '==========' >> /home/$MY_USERNAME/README
  301. echo $"SIP onion_domain: $SIP_ONION_HOSTNAME" >> /home/$MY_USERNAME/README
  302. echo $"SIP server username: $MY_USERNAME" >> /home/$MY_USERNAME/README
  303. echo $"SIP server extension: 201" >> /home/$MY_USERNAME/README
  304. echo $"SIP server password: $SIP_SERVER_PASSWORD" >> /home/$MY_USERNAME/README
  305. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  306. chmod 600 /home/$MY_USERNAME/README
  307. fi
  308. function_check configure_firewall_for_sip4
  309. configure_firewall_for_sip4
  310. install_completed sip_main
  311. }
  312. function install_sip_turn {
  313. if [[ $(app_is_installed sip_turn) == "1" ]]; then
  314. return
  315. fi
  316. apt-get -y install turnserver
  317. # create a nonce if needed
  318. if [ ! $TURN_NONCE ]; then
  319. TURN_NONCE="$(create_password 30)"
  320. fi
  321. function_check create_site_certificate
  322. create_site_certificate $DEFAULT_DOMAIN_NAME
  323. echo '##' > /etc/turnserver/turnserver.conf
  324. echo '# TurnServer configuration file.' >> /etc/turnserver/turnserver.conf
  325. echo '#' >> /etc/turnserver/turnserver.conf
  326. echo '' >> /etc/turnserver/turnserver.conf
  327. echo '## Public IPv4 address of any relayed address (if not set, no relay for IPv4).' >> /etc/turnserver/turnserver.conf
  328. echo '## To have multiple address, separate addresses with a comma' >> /etc/turnserver/turnserver.conf
  329. echo '## (i.e. listen_address = { "172.16.0.1", "172.17.0.1" }).' >> /etc/turnserver/turnserver.conf
  330. echo "listen_address = { \"192.168.0.1\" }" >> /etc/turnserver/turnserver.conf
  331. echo '' >> /etc/turnserver/turnserver.conf
  332. echo '## Public IPv6 address of any relayed address (if not set, no relay for IPv6).' >> /etc/turnserver/turnserver.conf
  333. echo '## To have multiple address, separate address with a comma' >> /etc/turnserver/turnserver.conf
  334. echo '## (i.e. listen_addressv6 = { "2001:db8:1::1", "2001:db8:2::1" }).' >> /etc/turnserver/turnserver.conf
  335. echo "#listen_addressv6 = { \"2001:db8::1\" }" >> /etc/turnserver/turnserver.conf
  336. echo '' >> /etc/turnserver/turnserver.conf
  337. echo '## UDP listening port.' >> /etc/turnserver/turnserver.conf
  338. echo "udp_port = $TURN_PORT" >> /etc/turnserver/turnserver.conf
  339. echo '' >> /etc/turnserver/turnserver.conf
  340. echo '## TCP listening port.' >> /etc/turnserver/turnserver.conf
  341. echo "tcp_port = $TURN_PORT" >> /etc/turnserver/turnserver.conf
  342. echo '' >> /etc/turnserver/turnserver.conf
  343. echo '## TLS listening port.' >> /etc/turnserver/turnserver.conf
  344. echo "tls_port = $TURN_TLS_PORT" >> /etc/turnserver/turnserver.conf
  345. echo '' >> /etc/turnserver/turnserver.conf
  346. echo '## TLS support.' >> /etc/turnserver/turnserver.conf
  347. echo 'tls = true' >> /etc/turnserver/turnserver.conf
  348. echo '' >> /etc/turnserver/turnserver.conf
  349. echo '## DTLS support. It is an experimental feature and is not defined in TURN' >> /etc/turnserver/turnserver.conf
  350. echo '## standard.' >> /etc/turnserver/turnserver.conf
  351. echo 'dtls = false' >> /etc/turnserver/turnserver.conf
  352. echo '' >> /etc/turnserver/turnserver.conf
  353. echo '## Maximum allocation port number.' >> /etc/turnserver/turnserver.conf
  354. echo 'max_port = 65535' >> /etc/turnserver/turnserver.conf
  355. echo '' >> /etc/turnserver/turnserver.conf
  356. echo '## Minimum allocation port number.' >> /etc/turnserver/turnserver.conf
  357. echo '' >> /etc/turnserver/turnserver.conf
  358. echo 'min_port = 49152' >> /etc/turnserver/turnserver.conf
  359. echo '' >> /etc/turnserver/turnserver.conf
  360. echo '## TURN-TCP support.' >> /etc/turnserver/turnserver.conf
  361. echo '' >> /etc/turnserver/turnserver.conf
  362. echo 'turn_tcp = true' >> /etc/turnserver/turnserver.conf
  363. echo '' >> /etc/turnserver/turnserver.conf
  364. echo '## TURN-TCP buffering mode:' >> /etc/turnserver/turnserver.conf
  365. echo '## - true, use userspace buffering;' >> /etc/turnserver/turnserver.conf
  366. echo '## - false, use kernel buffering.' >> /etc/turnserver/turnserver.conf
  367. echo 'tcp_buffer_userspace = true' >> /etc/turnserver/turnserver.conf
  368. echo '' >> /etc/turnserver/turnserver.conf
  369. echo '## TURN-TCP maximum buffer size.' >> /etc/turnserver/turnserver.conf
  370. echo 'tcp_buffer_size = 32768' >> /etc/turnserver/turnserver.conf
  371. echo '' >> /etc/turnserver/turnserver.conf
  372. echo '## Daemon mode.' >> /etc/turnserver/turnserver.conf
  373. echo 'daemon = true' >> /etc/turnserver/turnserver.conf
  374. echo '' >> /etc/turnserver/turnserver.conf
  375. echo '## Unprivileged user.' >> /etc/turnserver/turnserver.conf
  376. echo '## If you want to use this feature create a system user.' >> /etc/turnserver/turnserver.conf
  377. echo '## On Linux: adduser --system --group turnserver' >> /etc/turnserver/turnserver.conf
  378. echo 'unpriv_user = turnserver' >> /etc/turnserver/turnserver.conf
  379. echo '' >> /etc/turnserver/turnserver.conf
  380. echo '## Realm value.' >> /etc/turnserver/turnserver.conf
  381. echo "realm = \"$DEFAULT_DOMAIN_NAME\"" >> /etc/turnserver/turnserver.conf
  382. echo '' >> /etc/turnserver/turnserver.conf
  383. echo '## Nonce key.' >> /etc/turnserver/turnserver.conf
  384. echo "nonce_key = \"$TURN_NONCE\"" >> /etc/turnserver/turnserver.conf
  385. echo '' >> /etc/turnserver/turnserver.conf
  386. echo '## Max relay per username.' >> /etc/turnserver/turnserver.conf
  387. echo 'max_relay_per_username = 5' >> /etc/turnserver/turnserver.conf
  388. echo '' >> /etc/turnserver/turnserver.conf
  389. echo '## Allocation lifetime.' >> /etc/turnserver/turnserver.conf
  390. echo 'allocation_lifetime = 1800' >> /etc/turnserver/turnserver.conf
  391. echo '' >> /etc/turnserver/turnserver.conf
  392. echo '## Allocation bandwidth limitation (in KBytes/s).' >> /etc/turnserver/turnserver.conf
  393. echo '## 0 value means bandwidth quota disabled.' >> /etc/turnserver/turnserver.conf
  394. echo 'bandwidth_per_allocation = 150' >> /etc/turnserver/turnserver.conf
  395. echo '' >> /etc/turnserver/turnserver.conf
  396. echo '## Restricted user bandwidth (in KBytes/s).' >> /etc/turnserver/turnserver.conf
  397. echo '## 0 value means bandwidth limitation disabled.' >> /etc/turnserver/turnserver.conf
  398. echo 'restricted_bandwidth = 10' >> /etc/turnserver/turnserver.conf
  399. echo '' >> /etc/turnserver/turnserver.conf
  400. echo '## Denied addresses.' >> /etc/turnserver/turnserver.conf
  401. echo '' >> /etc/turnserver/turnserver.conf
  402. echo '# disallow relaying to localhost' >> /etc/turnserver/turnserver.conf
  403. echo 'denied_address {' >> /etc/turnserver/turnserver.conf
  404. echo ' address = "127.0.0.1"' >> /etc/turnserver/turnserver.conf
  405. echo ' mask = "8"' >> /etc/turnserver/turnserver.conf
  406. echo ' port = 0' >> /etc/turnserver/turnserver.conf
  407. echo '}' >> /etc/turnserver/turnserver.conf
  408. echo '' >> /etc/turnserver/turnserver.conf
  409. echo '# disallow relaying to ip6-localhost' >> /etc/turnserver/turnserver.conf
  410. echo 'denied_address {' >> /etc/turnserver/turnserver.conf
  411. echo ' address = "::1"' >> /etc/turnserver/turnserver.conf
  412. echo ' mask = "128"' >> /etc/turnserver/turnserver.conf
  413. echo ' port = 0' >> /etc/turnserver/turnserver.conf
  414. echo '}' >> /etc/turnserver/turnserver.conf
  415. echo '' >> /etc/turnserver/turnserver.conf
  416. echo '## Certification Authority file.' >> /etc/turnserver/turnserver.conf
  417. echo "ca_file = \"/etc/ssl/certs/ca-certificates.crt\"" >> /etc/turnserver/turnserver.conf
  418. echo '' >> /etc/turnserver/turnserver.conf
  419. echo '## Server certificate file.' >> /etc/turnserver/turnserver.conf
  420. if [ -f /etc/ssl/certs/$DEFAULT_DOMAIN_NAME.pem ]; then
  421. echo "cert_file = \"/etc/ssl/certs/$DEFAULT_DOMAIN_NAME.pem\"" >> /etc/turnserver/turnserver.conf
  422. else
  423. if [ -f /etc/ssl/certs/$DEFAULT_DOMAIN_NAME.crt ]; then
  424. echo "cert_file = \"/etc/ssl/certs/$DEFAULT_DOMAIN_NAME.crt\"" >> /etc/turnserver/turnserver.conf
  425. fi
  426. fi
  427. echo '' >> /etc/turnserver/turnserver.conf
  428. echo '## Private key file.' >> /etc/turnserver/turnserver.conf
  429. echo "private_key_file = \"/etc/ssl/certs/$DEFAULT_DOMAIN_NAME.key\"" >> /etc/turnserver/turnserver.conf
  430. echo '' >> /etc/turnserver/turnserver.conf
  431. echo '## Account method.' >> /etc/turnserver/turnserver.conf
  432. echo "account_method = \"file\"" >> /etc/turnserver/turnserver.conf
  433. echo '' >> /etc/turnserver/turnserver.conf
  434. echo '## Account file (if account_method = file).' >> /etc/turnserver/turnserver.conf
  435. echo "account_file = \"/etc/turnserver/turnusers.txt\"" >> /etc/turnserver/turnserver.conf
  436. echo '' >> /etc/turnserver/turnserver.conf
  437. echo '## mod_tmpuser.' >> /etc/turnserver/turnserver.conf
  438. echo 'mod_tmpuser = false' >> /etc/turnserver/turnserver.conf
  439. echo "${MY_USERNAME}:password:${DEFAULT_DOMAIN_NAME}:authorized" > /etc/turnserver/turnusers.txt
  440. systemctl restart turnserver
  441. function_check configure_firewall_for_turn
  442. configure_firewall_for_turn
  443. install_completed sip_turn
  444. }
  445. function install_sip {
  446. install_sip_main
  447. update_sipwitch_daemon
  448. APP_INSTALLED=1
  449. }
  450. # NOTE: deliberately no exit 0