freedombone-restore-remote 23KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # Restore from a given remote server
  12. # License
  13. # =======
  14. #
  15. # Copyright (C) 2015-2016 Bob Mottram <bob@freedombone.net>
  16. #
  17. # This program is free software: you can redistribute it and/or modify
  18. # it under the terms of the GNU Affero General Public License as published by
  19. # the Free Software Foundation, either version 3 of the License, or
  20. # (at your option) any later version.
  21. #
  22. # This program is distributed in the hope that it will be useful,
  23. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  24. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  25. # GNU Affero General Public License for more details.
  26. #
  27. # You should have received a copy of the GNU Affero General Public License
  28. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  29. PROJECT_NAME='freedombone'
  30. COMPLETION_FILE=$HOME/${PROJECT_NAME}-completed.txt
  31. CONFIGURATION_FILE=$HOME/${PROJECT_NAME}.cfg
  32. BACKUP_EXTRA_DIRECTORIES=/root/backup-extra-dirs.csv
  33. export TEXTDOMAIN=${PROJECT_NAME}-restore-remote
  34. export TEXTDOMAINDIR="/usr/share/locale"
  35. UTILS_FILES=/usr/share/${PROJECT_NAME}/utils/${PROJECT_NAME}-utils-*
  36. for f in $UTILS_FILES
  37. do
  38. source $f
  39. done
  40. SERVER_NAME=$1
  41. # whether to restore everything or just a specific application
  42. RESTORE_APP='all'
  43. if [ ${2} ]; then
  44. RESTORE_APP=${2}
  45. fi
  46. ADMIN_USERNAME=$(get_completion_param "Admin user")
  47. ADMIN_EMAIL_ADDRESS=${ADMIN_USERNAME}@${HOSTNAME}
  48. # Temporary location for data to be backed up to other servers
  49. SERVER_DIRECTORY=/root/remoterestore
  50. BACKUP_LIST=/home/${ADMIN_USERNAME}/backup.list
  51. if [ ! $SERVER_NAME ]; then
  52. echo $'restorefromfriend [server]'
  53. exit 1
  54. fi
  55. if [ ! -f $BACKUP_LIST ]; then
  56. echo $"No friends list found at $BACKUP_LIST"
  57. exit 2
  58. fi
  59. if ! grep -q "$SERVER_NAME" $BACKUP_LIST; then
  60. echo $"Server not found within the friends list"
  61. exit 3
  62. fi
  63. REMOTE_SERVER=$(grep -i "$SERVER_NAME" $BACKUP_LIST | awk -F ' ' '{print $1}')
  64. REMOTE_SSH_PORT=$(grep -i "$SERVER_NAME" $BACKUP_LIST | awk -F ' ' '{print $2}')
  65. REMOTE_DIRECTORY=$(grep -i "$SERVER_NAME" $BACKUP_LIST | awk -F ' ' '{print $3}')
  66. REMOTE_PASSWORD=$(grep -i "$SERVER_NAME" $BACKUP_LIST | awk -F ' ' '{print $4}')
  67. REMOTE_SERVER=$REMOTE_SERVER:$REMOTE_DIRECTORY
  68. NOW=$(date +"%Y-%m-%d %H:%M:%S")
  69. echo "$NOW Starting restore from $REMOTE_SERVER" >> /var/log/remotebackups.log
  70. rsync -ratlzv --rsh="/usr/bin/sshpass -p $REMOTE_PASSWORD ssh -p $REMOTE_SSH_PORT -o StrictHostKeyChecking=no" $REMOTE_SERVER/backup $SERVER_DIRECTORY
  71. if [ ! "$?" = "0" ]; then
  72. echo "$NOW Restore from $REMOTE_SERVER failed" >> /var/log/remotebackups.log
  73. # Send a warning email
  74. echo "Restore from $REMOTE_SERVER failed" | mail -s "${PROJECT_NAME} restore from friend" $ADMIN_EMAIL_ADDRESS
  75. exit 790
  76. else
  77. echo "$NOW Restored encrypted data from $REMOTE_SERVER" >> /var/log/remotebackups.log
  78. fi
  79. # MariaDB password
  80. DATABASE_PASSWORD=$(${PROJECT_NAME}-pass -u root -a mariadb)
  81. function copy_gpg_keys {
  82. echo $"Copying GPG keys from admin user to root"
  83. cp -r /home/$ADMIN_USERNAME/.gnupg /root
  84. }
  85. function restore_configfiles {
  86. if [[ $RESTORE_APP != 'all' ]]; then
  87. if [[ $RESTORE_APP != 'configfiles' ]]; then
  88. return
  89. fi
  90. fi
  91. if [ -d $SERVER_DIRECTORY/backup/config ]; then
  92. echo $"Restoring configuration files"
  93. temp_restore_dir=/root/tempconfig
  94. restore_directory_from_friend $temp_restore_dir configfiles
  95. if [ -f $temp_restore_dir/root/.nostore ]; then
  96. if [ ! -f /root/.nostore ]; then
  97. touch /root/.nostore
  98. fi
  99. else
  100. if [ -f /root/.nostore ]; then
  101. rm /root/.nostore
  102. fi
  103. fi
  104. if [ -f $temp_restore_dir$NODEJS_INSTALLED_APPS_FILE ]; then
  105. cp -f $temp_restore_dir$NODEJS_INSTALLED_APPS_FILE $NODEJS_INSTALLED_APPS_FILE
  106. fi
  107. if [ -f $temp_restore_dir/root/${PROJECT_NAME}.cfg ]; then
  108. cp -f $temp_restore_dir/root/${PROJECT_NAME}.cfg $CONFIGURATION_FILE
  109. if [ ! "$?" = "0" ]; then
  110. unmount_drive
  111. rm -rf $temp_restore_dir
  112. exit 5372
  113. fi
  114. fi
  115. if [ -f $CONFIGURATION_FILE ]; then
  116. # install according to the config file
  117. freedombone -c $CONFIGURATION_FILE
  118. fi
  119. if [ -f $temp_restore_dir/root/${PROJECT_NAME}-completed.txt ]; then
  120. cp -f $temp_restore_dir/root/${PROJECT_NAME}-completed.txt $COMPLETION_FILE
  121. if [ ! "$?" = "0" ]; then
  122. unmount_drive
  123. rm -rf $temp_restore_dir
  124. exit 7252
  125. fi
  126. fi
  127. if [ -f ${temp_restore_dir}${BACKUP_EXTRA_DIRECTORIES} ]; then
  128. cp -f ${temp_restore_dir}${BACKUP_EXTRA_DIRECTORIES} ${BACKUP_EXTRA_DIRECTORIES}
  129. if [ ! "$?" = "0" ]; then
  130. unmount_drive
  131. rm -rf $temp_restore_dir
  132. exit 62121
  133. fi
  134. fi
  135. # restore nginx password hashes
  136. if [ -f $temp_restore_dir/root/htpasswd ]; then
  137. cp -f $temp_restore_dir/root/htpasswd /etc/nginx/.htpasswd
  138. fi
  139. rm -rf $temp_restore_dir
  140. fi
  141. }
  142. function restore_mariadb {
  143. if [[ $RESTORE_APP != 'all' ]]; then
  144. if [[ $RESTORE_APP != 'mariadb' ]]; then
  145. return
  146. fi
  147. fi
  148. if [[ $(is_completed install_mariadb) == "0" ]]; then
  149. function_check install_mariadb
  150. install_mariadb
  151. fi
  152. if [ -d $SERVER_DIRECTORY/backup/mariadb ]; then
  153. echo $"Restoring MariaDB settings"
  154. temp_restore_dir=/root/tempmariadb
  155. restore_directory_from_friend $temp_restore_dir mariadb
  156. echo $'Obtaining MariaDB password'
  157. db_pass=$(${PROJECT_NAME}-pass -u root -a mariadb)
  158. if [ ${#db_pass} -gt 0 ]; then
  159. echo $"Restore the MariaDB user table"
  160. mysqlsuccess=$(mysql -u root --password="$DATABASE_PASSWORD" mysql -o < ${temp_restore_dir}${temp_restore_dir}/mysql.sql)
  161. if [ ! "$?" = "0" ]; then
  162. echo $"Try again using the password obtained from backup"
  163. mysqlsuccess=$(mysql -u root --password="$db_pass" mysql -o < ${temp_restore_dir}${temp_restore_dir}/mysql.sql)
  164. fi
  165. if [ ! "$?" = "0" ]; then
  166. echo "$mysqlsuccess"
  167. exit 962
  168. fi
  169. echo $"Restarting database"
  170. systemctl restart mariadb
  171. echo $"Change the MariaDB password to the backup version"
  172. DATABASE_PASSWORD="$db_pass"
  173. ${PROJECT_NAME}-pass -u root -a mariadb -p "$DATABASE_PASSWORD"
  174. fi
  175. rm -rf ${temp_restore_dir}
  176. fi
  177. }
  178. function restore_letsencrypt {
  179. if [[ $RESTORE_APP != 'all' ]]; then
  180. if [[ $RESTORE_APP != 'letsencrypt' ]]; then
  181. return
  182. fi
  183. fi
  184. if [ -d $SERVER_DIRECTORY/backup/letsencrypt ]; then
  185. echo $"Restoring Lets Encrypt settings"
  186. restore_directory_from_friend / letsencrypt
  187. fi
  188. }
  189. function restore_passwordstore {
  190. if [[ $RESTORE_APP != 'all' ]]; then
  191. if [[ $RESTORE_APP != 'passwords' ]]; then
  192. return
  193. fi
  194. fi
  195. if [ -d $SERVER_DIRECTORY/backup/passwordstore ]; then
  196. echo $"Restoring password store"
  197. restore_directory_from_friend / passwordstore
  198. fi
  199. }
  200. function restore_tor {
  201. if [[ $RESTORE_APP != 'all' ]]; then
  202. if [[ $RESTORE_APP != 'tor' ]]; then
  203. return
  204. fi
  205. fi
  206. if [ -d $SERVER_DIRECTORY/backup/tor ]; then
  207. echo $"Restoring Tor settings"
  208. restore_directory_from_friend / tor
  209. fi
  210. }
  211. function restore_mutt_settings {
  212. if [[ $RESTORE_APP != 'all' ]]; then
  213. if [[ $RESTORE_APP != 'mutt' ]]; then
  214. return
  215. fi
  216. fi
  217. for d in $SERVER_DIRECTORY/backup/mutt/*/ ; do
  218. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  219. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  220. if [ -d $SERVER_DIRECTORY/backup/mutt/$USERNAME ]; then
  221. if [ ! -d /home/$USERNAME ]; then
  222. ${PROJECT_NAME}-adduser $USERNAME
  223. fi
  224. echo $"Restoring Mutt settings for $USERNAME"
  225. temp_restore_dir=/root/tempmutt
  226. restore_directory_from_friend ${temp_restore_dir} mutt/$USERNAME
  227. if [ -f ${temp_restore_dir}/home/$USERNAME/tempbackup/.muttrc ]; then
  228. cp -f ${temp_restore_dir}/home/$USERNAME/tempbackup/.muttrc /home/$USERNAME/.muttrc
  229. sed -i '/set sidebar_delim/d' /home/$USERNAME/.muttrc
  230. sed -i '/set sidebar_sort/d' /home/$USERNAME/.muttrc
  231. fi
  232. if [ -f ${temp_restore_dir}/home/$USERNAME/tempbackup/Muttrc ]; then
  233. cp -f ${temp_restore_dir}/home/$USERNAME/tempbackup/Muttrc /etc/Muttrc
  234. sed -i '/set sidebar_delim/d' /etc/Muttrc
  235. sed -i '/set sidebar_sort/d' /etc/Muttrc
  236. fi
  237. if [ ! "$?" = "0" ]; then
  238. rm -rf ${temp_restore_dir}
  239. exit 276
  240. fi
  241. rm -rf ${temp_restore_dir}
  242. fi
  243. fi
  244. done
  245. }
  246. function restore_gpg {
  247. if [[ $RESTORE_APP != 'all' ]]; then
  248. if [[ $RESTORE_APP != 'gpg' ]]; then
  249. return
  250. fi
  251. fi
  252. for d in $SERVER_DIRECTORY/backup/gnupg/*/ ; do
  253. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  254. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  255. if [ -d $SERVER_DIRECTORY/backup/gnupg/$USERNAME ]; then
  256. if [ ! -d /home/$USERNAME ]; then
  257. ${PROJECT_NAME}-adduser $USERNAME
  258. fi
  259. echo $"Restoring gnupg settings for $USERNAME"
  260. temp_restore_dir=/root/tempgnupg
  261. restore_directory_from_friend ${temp_restore_dir} gnupg/$USERNAME
  262. cp -r ${temp_restore_dir}/home/$USERNAME/.gnupg /home/$USERNAME/
  263. if [ ! "$?" = "0" ]; then
  264. rm -rf ${temp_restore_dir}
  265. exit 276
  266. fi
  267. rm -rf ${temp_restore_dir}
  268. if [[ "$USERNAME" == "$ADMIN_USERNAME" ]]; then
  269. cp -r /home/$USERNAME/.gnupg /root
  270. if [ ! "$?" = "0" ]; then
  271. exit 283
  272. fi
  273. fi
  274. fi
  275. fi
  276. done
  277. }
  278. function restore_procmail {
  279. if [[ $RESTORE_APP != 'all' ]]; then
  280. if [[ $RESTORE_APP != 'procmail' ]]; then
  281. return
  282. fi
  283. fi
  284. for d in $SERVER_DIRECTORY/backup/procmail/*/ ; do
  285. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  286. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  287. if [ -d $SERVER_DIRECTORY/backup/procmail/$USERNAME ]; then
  288. if [ ! -d /home/$USERNAME ]; then
  289. ${PROJECT_NAME}-adduser $USERNAME
  290. fi
  291. echo $"Restoring procmail settings for $USERNAME"
  292. temp_restore_dir=/root/tempprocmail
  293. restore_directory_from_friend ${temp_restore_dir} procmail/$USERNAME
  294. cp -f ${temp_restore_dir}/home/$USERNAME/tempbackup/.procmailrc /home/$USERNAME/
  295. if [ ! "$?" = "0" ]; then
  296. rm -rf ${temp_restore_dir}
  297. exit 276
  298. fi
  299. rm -rf ${temp_restore_dir}
  300. fi
  301. fi
  302. done
  303. }
  304. function restore_spamassassin {
  305. if [[ $RESTORE_APP != 'all' ]]; then
  306. if [[ $RESTORE_APP != 'spamassassin' ]]; then
  307. return
  308. fi
  309. fi
  310. for d in $SERVER_DIRECTORY/backup/spamassassin/*/ ; do
  311. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  312. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  313. if [ -d $SERVER_DIRECTORY/backup/spamassassin/$USERNAME ]; then
  314. if [ ! -d /home/$USERNAME ]; then
  315. ${PROJECT_NAME}-adduser $USERNAME
  316. fi
  317. echo $"Restoring spamassassin settings for $USERNAME"
  318. temp_restore_dir=/root/tempspamassassin
  319. restore_directory_from_friend $temp_restore_dir spamassassin/$USERNAME
  320. cp -rf $temp_restore_dir/home/$USERNAME/.spamassassin /home/$USERNAME/
  321. if [ ! "$?" = "0" ]; then
  322. rm -rf $temp_restore_dir
  323. exit 276
  324. fi
  325. rm -rf $temp_restore_dir
  326. fi
  327. fi
  328. done
  329. }
  330. function restore_admin_readme {
  331. if [[ $RESTORE_APP != 'all' ]]; then
  332. if [[ $RESTORE_APP != 'readme' ]]; then
  333. return
  334. fi
  335. fi
  336. if [ -d $SERVER_DIRECTORY/backup/readme ]; then
  337. echo $"Restoring README"
  338. temp_restore_dir=/root/tempreadme
  339. restore_directory_from_friend $temp_restore_dir readme
  340. cp -f $temp_restore_dir/home/$ADMIN_USERNAME/tempbackup/README /home/$ADMIN_USERNAME/
  341. if [ ! "$?" = "0" ]; then
  342. rm -rf $temp_restore_dir
  343. exit 276
  344. fi
  345. rm -rf $temp_restore_dir
  346. fi
  347. }
  348. function restore_ssh_keys {
  349. if [[ $RESTORE_APP != 'all' ]]; then
  350. if [[ $RESTORE_APP != 'ssh' ]]; then
  351. return
  352. fi
  353. fi
  354. for d in $SERVER_DIRECTORY/backup/ssh/*/ ; do
  355. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  356. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  357. if [ -d $SERVER_DIRECTORY/backup/ssh/$USERNAME ]; then
  358. if [ ! -d /home/$USERNAME ]; then
  359. ${PROJECT_NAME}-adduser $USERNAME
  360. fi
  361. echo $"Restoring ssh keys for $USERNAME"
  362. temp_restore_dir=/root/tempssh
  363. restore_directory_from_friend $temp_restore_dir ssh/$USERNAME
  364. cp -r $temp_restore_dir/home/$USERNAME/.ssh /home/$USERNAME/
  365. if [ ! "$?" = "0" ]; then
  366. rm -rf $temp_restore_dir
  367. exit 664
  368. fi
  369. rm -rf $temp_restore_dir
  370. fi
  371. fi
  372. done
  373. }
  374. function restore_user_config {
  375. if [[ $RESTORE_APP != 'all' ]]; then
  376. if [[ $RESTORE_APP != 'userconfig' ]]; then
  377. return
  378. fi
  379. fi
  380. for d in $SERVER_DIRECTORY/backup/config/*/ ; do
  381. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  382. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  383. if [ -d $SERVER_DIRECTORY/backup/config/$USERNAME ]; then
  384. if [ ! -d /home/$USERNAME ]; then
  385. ${PROJECT_NAME}-adduser $USERNAME
  386. fi
  387. echo $"Restoring config files for $USERNAME"
  388. temp_restore_dir=/root/tempconfig
  389. restore_directory_from_friend $temp_restore_dir config/$USERNAME
  390. cp -r $temp_restore_dir/home/$USERNAME/.config /home/$USERNAME/
  391. if [ ! "$?" = "0" ]; then
  392. rm -rf $temp_restore_dir
  393. exit 664
  394. fi
  395. rm -rf $temp_restore_dir
  396. fi
  397. fi
  398. done
  399. }
  400. function restore_user_monkeysphere {
  401. if [[ $RESTORE_APP != 'all' ]]; then
  402. if [[ $RESTORE_APP != 'usermonkeysphere' ]]; then
  403. return
  404. fi
  405. fi
  406. for d in $SERVER_DIRECTORY/backup/monkeysphere/*/ ; do
  407. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  408. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  409. if [ -d $SERVER_DIRECTORY/backup/monkeysphere/$USERNAME ]; then
  410. if [ ! -d /home/$USERNAME ]; then
  411. ${PROJECT_NAME}-adduser $USERNAME
  412. fi
  413. echo $"Restoring monkeysphere ids for $USERNAME"
  414. temp_restore_dir=/root/tempmonkeysphere
  415. restore_directory_from_friend $temp_restore_dir monkeysphere/$USERNAME
  416. cp -r $temp_restore_dir/home/$USERNAME/.monkeysphere /home/$USERNAME/
  417. if [ ! "$?" = "0" ]; then
  418. rm -rf $temp_restore_dir
  419. exit 664
  420. fi
  421. rm -rf $temp_restore_dir
  422. fi
  423. fi
  424. # The admin user is the identity certifier
  425. MY_EMAIL_ADDRESS="${ADMIN_USERNAME}@${HOSTNAME}"
  426. read_config_param MY_EMAIL_ADDRESS
  427. MY_GPG_PUBLIC_KEY_ID=$(gpg_pubkey_from_email "$ADMIN_USERNAME" "$MY_EMAIL_ADDRESS")
  428. fpr=$(gpg --with-colons --fingerprint $MY_GPG_PUBLIC_KEY_ID | grep fpr | head -n 1 | awk -F ':' '{print $10}')
  429. monkeysphere-authentication add-identity-certifier $fpr
  430. monkeysphere-authentication update-users
  431. done
  432. }
  433. function restore_user_fin {
  434. if [[ $RESTORE_APP != 'all' ]]; then
  435. if [[ $RESTORE_APP != 'userfin' ]]; then
  436. return
  437. fi
  438. fi
  439. for d in $SERVER_DIRECTORY/backup/fin/*/ ; do
  440. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  441. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  442. if [ -d $SERVER_DIRECTORY/backup/fin/$USERNAME ]; then
  443. if [ ! -d /home/$USERNAME ]; then
  444. ${PROJECT_NAME}-adduser $USERNAME
  445. fi
  446. echo $"Restoring fin files for $USERNAME"
  447. temp_restore_dir=/root/tempfin
  448. restore_directory_from_friend $temp_restore_dir fin/$USERNAME
  449. cp -r $temp_restore_dir/home/$USERNAME/.fin /home/$USERNAME/
  450. if [ ! "$?" = "0" ]; then
  451. rm -rf $temp_restore_dir
  452. exit 664
  453. fi
  454. rm -rf $temp_restore_dir
  455. fi
  456. fi
  457. done
  458. }
  459. function restore_user_local {
  460. if [[ $RESTORE_APP != 'all' ]]; then
  461. if [[ $RESTORE_APP != 'userlocal' ]]; then
  462. return
  463. fi
  464. fi
  465. for d in $SERVER_DIRECTORY/backup/local/*/ ; do
  466. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  467. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  468. if [ -d $SERVER_DIRECTORY/backup/local/$USERNAME ]; then
  469. if [ ! -d /home/$USERNAME ]; then
  470. ${PROJECT_NAME}-adduser $USERNAME
  471. fi
  472. echo $"Restoring local files for $USERNAME"
  473. temp_restore_dir=/root/templocal
  474. restore_directory_from_friend $temp_restore_dir local/$USERNAME
  475. cp -r $temp_restore_dir/home/$USERNAME/.local /home/$USERNAME/
  476. if [ ! "$?" = "0" ]; then
  477. rm -rf $temp_restore_dir
  478. exit 664
  479. fi
  480. rm -rf $temp_restore_dir
  481. fi
  482. fi
  483. done
  484. }
  485. function restore_certs {
  486. if [[ $RESTORE_APP != 'all' ]]; then
  487. if [[ $RESTORE_APP != 'certs' ]]; then
  488. return
  489. fi
  490. fi
  491. if [ -d $SERVER_DIRECTORY/backup/ssl ]; then
  492. echo $"Restoring certificates"
  493. restore_directory_from_friend /root/tempssl ssl
  494. cp -r /root/tempssl/etc/ssl/* /etc/ssl
  495. if [ ! "$?" = "0" ]; then
  496. exit 276
  497. fi
  498. rm -rf /root/tempssl
  499. # restore ownership
  500. if [ -f /etc/ssl/private/xmpp.key ]; then
  501. chown prosody:prosody /etc/ssl/private/xmpp.key
  502. chown prosody:prosody /etc/ssl/certs/xmpp.*
  503. fi
  504. if [ -d /etc/dovecot ]; then
  505. chown root:dovecot /etc/ssl/private/dovecot.*
  506. chown root:dovecot /etc/ssl/certs/dovecot.*
  507. fi
  508. if [ -f /etc/ssl/private/exim.key ]; then
  509. cp /etc/ssl/private/exim.key /etc/exim4
  510. cp /etc/ssl/certs/exim.crt /etc/exim4
  511. cp /etc/ssl/certs/exim.dhparam /etc/exim4
  512. chown root:Debian-exim /etc/exim4/exim.key /etc/exim4/exim.crt /etc/exim4/exim.dhparam
  513. chmod 640 /etc/exim4/exim.key /etc/exim4/exim.crt /etc/exim4/exim.dhparam
  514. fi
  515. if [ -f /etc/ssl/private/mumble.key ]; then
  516. if [ -d /var/lib/mumble-server ]; then
  517. cp /etc/ssl/certs/mumble.* /var/lib/mumble-server
  518. cp /etc/ssl/private/mumble.key /var/lib/mumble-server
  519. chown -R mumble-server:mumble-server /var/lib/mumble-server
  520. fi
  521. fi
  522. fi
  523. }
  524. function restore_personal_settings {
  525. if [[ $RESTORE_APP != 'all' ]]; then
  526. if [[ $RESTORE_APP != 'personal' ]]; then
  527. return
  528. fi
  529. fi
  530. for d in $SERVER_DIRECTORY/backup/personal/*/ ; do
  531. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  532. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  533. if [ -d $SERVER_DIRECTORY/backup/personal/$USERNAME ]; then
  534. if [ ! -d /home/$USERNAME ]; then
  535. ${PROJECT_NAME}-adduser $USERNAME
  536. fi
  537. echo $"Restoring personal settings for $USERNAME"
  538. temp_restore_dir=/root/temppersonal
  539. restore_directory_from_friend $temp_restore_dir personal/$USERNAME
  540. if [ -d /home/$USERNAME/personal ]; then
  541. rm -rf /home/$USERNAME/personal
  542. fi
  543. mv $temp_restore_dir/home/$USERNAME/personal /home/$USERNAME
  544. if [ ! "$?" = "0" ]; then
  545. exit 184
  546. fi
  547. rm -rf $temp_restore_dir
  548. fi
  549. fi
  550. done
  551. }
  552. function restore_mailing_list {
  553. if [[ $RESTORE_APP != 'all' ]]; then
  554. if [[ $RESTORE_APP != 'mailinglist' ]]; then
  555. return
  556. fi
  557. fi
  558. if [ -d /var/spool/mlmmj ]; then
  559. echo $"Restoring public mailing list"
  560. temp_restore_dir=/root/tempmailinglist
  561. restore_directory_from_friend $temp_restore_dir mailinglist
  562. cp -r $temp_restore_dir/root/spool/mlmmj/* /var/spool/mlmmj
  563. if [ ! "$?" = "0" ]; then
  564. exit 526
  565. fi
  566. rm -rf $temp_restore_dir
  567. fi
  568. }
  569. function restore_email {
  570. if [[ $RESTORE_APP != 'all' ]]; then
  571. if [[ $RESTORE_APP != 'email' ]]; then
  572. return
  573. fi
  574. fi
  575. for d in $SERVER_DIRECTORY/backup/mail/*/ ; do
  576. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  577. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  578. if [ -d $SERVER_DIRECTORY/backup/mail/$USERNAME ]; then
  579. if [ ! -d /home/$USERNAME ]; then
  580. ${PROJECT_NAME}-adduser $USERNAME
  581. fi
  582. echo $"Restoring emails for $USERNAME"
  583. temp_restore_dir=/root/tempmail
  584. restore_directory_from_friend $temp_restore_dir mail/$USERNAME
  585. if [ ! -d /home/$USERNAME/Maildir ]; then
  586. mkdir /home/$USERNAME/Maildir
  587. fi
  588. tar -xzvf $temp_restore_dir/root/tempbackupemail/$USERNAME/maildir.tar.gz -C /
  589. if [ ! "$?" = "0" ]; then
  590. exit 927
  591. fi
  592. rm -rf $temp_restore_dir
  593. fi
  594. fi
  595. done
  596. }
  597. # Social key management
  598. # Recover any key fragments and reconstruct the gpg key
  599. ${PROJECT_NAME}-recoverkey -u ${ADMIN_USERNAME} -l $BACKUP_LIST
  600. copy_gpg_keys
  601. restore_configfiles
  602. restore_passwordstore
  603. restore_mariadb
  604. restore_letsencrypt
  605. restore_mutt_settings
  606. restore_gpg
  607. restore_procmail
  608. restore_spamassassin
  609. restore_admin_readme
  610. restore_ssh_keys
  611. restore_user_config
  612. restore_user_monkeysphere
  613. restore_user_fin
  614. restore_user_local
  615. restore_certs
  616. restore_personal_settings
  617. restore_mailing_list
  618. restore_email
  619. restore_apps remote
  620. set_user_permissions
  621. update_default_domain
  622. # ensure that all TLS certificates are pinned
  623. #${PROJECT_NAME}-pin-cert all
  624. echo $"*** Remote restore was successful ***"
  625. exit 0