freedombone-app-webmail 8.5KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # Webmail application
  12. #
  13. # License
  14. # =======
  15. #
  16. # Copyright (C) 2014-2016 Bob Mottram <bob@robotics.uk.to>
  17. #
  18. # This program is free software: you can redistribute it and/or modify
  19. # it under the terms of the GNU Affero General Public License as published by
  20. # the Free Software Foundation, either version 3 of the License, or
  21. # (at your option) any later version.
  22. #
  23. # This program is distributed in the hope that it will be useful,
  24. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  25. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  26. # GNU Affero General Public License for more details.
  27. #
  28. # You should have received a copy of the GNU Affero General Public License
  29. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  30. VARIANTS=''
  31. WEBMAIL_REPO="https://github.com/roundcube/roundcubemail"
  32. WEBMAIL_COMMIT='78cf9c2e5cff2d78cd8beb647d60570f195a2a9c'
  33. WEBMAIL_ONION_HOSTNAME=
  34. WEBMAIL_ONION_PORT=8097
  35. WEBMAIL_ADMIN_PASSWORD=
  36. WEB_PATH=/var/www
  37. WEBMAIL_PATH=$WEB_PATH/webmail
  38. function upgrade_webmail {
  39. if ! grep -Fxq "install_webmail" $COMPLETION_FILE; then
  40. return
  41. fi
  42. function_check set_repo_commit
  43. set_repo_commit $WEBMAIL_PATH "Webmail commit" "$WEBMAIL_COMMIT" $WEBMAIL_REPO
  44. }
  45. function backup_local_webmail {
  46. echo $"Backing up webmail"
  47. function_check backup_database_to_usb
  48. backup_database_to_usb webmail
  49. echo $"Backing up webmail complete"
  50. }
  51. function backup_remote_webmail {
  52. echo -n ''
  53. }
  54. function remove_webmail {
  55. if ! grep -Fxq "install_webmail" $COMPLETION_FILE; then
  56. return
  57. fi
  58. nginx_dissite webmail
  59. if [ -f /etc/nginx/sites-available/webmail ]; then
  60. rm /etc/nginx/sites-available/webmail
  61. fi
  62. function_check remove_onion_service
  63. remove_onion_service webmail ${WEBMAIL_ONION_PORT}
  64. function_check drop_database
  65. drop_database webmail
  66. if [ -d $WEB_PATH/webmail ]; then
  67. rm -rf $WEB_PATH/webmail
  68. fi
  69. sed -i '/Webmail /d' $COMPLETION_FILE
  70. sed -i '/install_webmail/d' $COMPLETION_FILE
  71. }
  72. function install_webmail {
  73. if grep -Fxq "install_webmail" $COMPLETION_FILE; then
  74. return
  75. fi
  76. if [ -d /etc/apache2 ]; then
  77. rm -rf /etc/apache2
  78. echo $'Removed Apache installation after Dokuwiki install'
  79. fi
  80. function_check install_mariadb
  81. install_mariadb
  82. function_check get_mariadb_password
  83. get_mariadb_password
  84. function_check repair_databases_script
  85. repair_databases_script
  86. apt-get -y install php5-common php5-cli php5-curl php5-gd php5-mysql php5-mcrypt git
  87. apt-get -y install php5-dev imagemagick php5-imagick php5-sqlite php-auth-sasl php-net-smtp php-mime-type
  88. apt-get -y install php-mail-mime php-mail-mimedecode php-net-ldap3 php5-pspell
  89. pear install Net_IDNA2
  90. if [ ! -f $WEBMAIL_PATH/index.php ]; then
  91. cd $WEB_PATH
  92. git_clone $WEBMAIL_REPO webmail
  93. cd $WEBMAIL_PATH
  94. git checkout $WEBMAIL_COMMIT -b $WEBMAIL_COMMIT
  95. if ! grep -q "Webmail commit" $COMPLETION_FILE; then
  96. echo "Webmail commit:$WEBMAIL_COMMIT" >> $COMPLETION_FILE
  97. else
  98. sed -i "s/Webmail commit.*/Webmail commit:$WEBMAIL_COMMIT/g" $COMPLETION_FILE
  99. fi
  100. fi
  101. if [ ! -f $WEBMAIL_PATH/index.php ]; then
  102. echo $'Did not clone webmail repo'
  103. exit 52825
  104. fi
  105. WEBMAIL_ONION_HOSTNAME=$(add_onion_service webmail 80 ${WEBMAIL_ONION_PORT})
  106. echo "Webmail onion domain:${WEBMAIL_ONION_HOSTNAME}" >> $COMPLETION_FILE
  107. function_check get_mariadb_webmail_admin_password
  108. get_mariadb_webmail_admin_password
  109. if [ ! $WEBMAIL_ADMIN_PASSWORD ]; then
  110. if [ -f $IMAGE_PASSWORD_FILE ]; then
  111. WEBMAIL_ADMIN_PASSWORD="$(printf `cat $IMAGE_PASSWORD_FILE`)"
  112. else
  113. WEBMAIL_ADMIN_PASSWORD="$(create_password ${MINIMUM_PASSWORD_LENGTH})"
  114. fi
  115. fi
  116. function_check create_database
  117. create_database webmail "$WEBMAIL_ADMIN_PASSWORD"
  118. mysql -u root --password="$MARIADB_PASSWORD" -D webmail < $WEBMAIL_PATH/SQL/mysql.initial.sql
  119. if [ ! -d /var/www/$DEFAULT_DOMAIN_NAME/htdocs ]; then
  120. mkdir -p /var/www/$DEFAULT_DOMAIN_NAME/htdocs
  121. fi
  122. ln -s $WEBMAIL_PATH /var/www/$DEFAULT_DOMAIN_NAME/htdocs/webmail
  123. if [ ! -f /var/www/webmail/config/config.inc.php ]; then
  124. # generate the configuration
  125. echo '<?php' > /var/www/webmail/config/config.inc.php
  126. echo "\$config['db_dsnw'] = 'mysql://root:${MARIADB_PASSWORD}@localhost/webmail';" >> /var/www/webmail/config/config.inc.php
  127. echo "\$config['default_host'] = 'localhost';" >> /var/www/webmail/config/config.inc.php
  128. echo "\$config['support_url'] = '';" >> /var/www/webmail/config/config.inc.php
  129. WEBMAIL_DES_KEY="$(create_password 25)"
  130. echo "\$config['des_key'] = '${WEBMAIL_DES_KEY}';" >> /var/www/webmail/config/config.inc.php
  131. echo "\$config['product_name'] = '${PROJECT_NAME}';" >> /var/www/webmail/config/config.inc.php
  132. echo "\$config['plugins'] = array('enigma');" >> /var/www/webmail/config/config.inc.php
  133. echo "\$config['mime_param_folding'] = 0;" >> /var/www/webmail/config/config.inc.php
  134. echo "\$config['enable_installer'] = false;" >> /var/www/webmail/config/config.inc.php
  135. fi
  136. chown -R www-data:www-data $WEBMAIL_PATH
  137. echo 'server {' > /etc/nginx/sites-available/webmail
  138. echo " listen 127.0.0.1:$WEBMAIL_ONION_PORT default_server;" >> /etc/nginx/sites-available/webmail
  139. echo " server_name $WEBMAIL_ONION_HOSTNAME;" >> /etc/nginx/sites-available/webmail
  140. echo " root ${WEBMAIL_PATH};" >> /etc/nginx/sites-available/webmail
  141. echo ' index index.php index.html index.htm;' >> /etc/nginx/sites-available/webmail
  142. echo ' access_log off;' >> /etc/nginx/sites-available/webmail
  143. echo ' error_log off;' >> /etc/nginx/sites-available/webmail
  144. echo ' location / {' >> /etc/nginx/sites-available/webmail
  145. echo ' try_files $uri $uri/ /index.php?q=$uri&$args;' >> /etc/nginx/sites-available/webmail
  146. echo ' }' >> /etc/nginx/sites-available/webmail
  147. echo ' error_page 404 /404.html;' >> /etc/nginx/sites-available/webmail
  148. echo ' error_page 500 502 503 504 /50x.html;' >> /etc/nginx/sites-available/webmail
  149. echo ' location = /50x.html {' >> /etc/nginx/sites-available/webmail
  150. echo " root ${WEBMAIL_PATH};" >> /etc/nginx/sites-available/webmail
  151. echo ' }' >> /etc/nginx/sites-available/webmail
  152. echo ' location ~ ^/(README.md|INSTALL|LICENSE|CHANGELOG|UPGRADING)$ {' >> /etc/nginx/sites-available/webmail
  153. echo ' deny all;' >> /etc/nginx/sites-available/webmail
  154. echo ' }' >> /etc/nginx/sites-available/webmail
  155. echo ' location ~ ^/(config|temp|logs)/ {' >> /etc/nginx/sites-available/webmail
  156. echo ' deny all;' >> /etc/nginx/sites-available/webmail
  157. echo ' }' >> /etc/nginx/sites-available/webmail
  158. echo ' location ~ /\. {' >> /etc/nginx/sites-available/webmail
  159. echo ' deny all;' >> /etc/nginx/sites-available/webmail
  160. echo ' access_log off;' >> /etc/nginx/sites-available/webmail
  161. echo ' log_not_found off;' >> /etc/nginx/sites-available/webmail
  162. echo ' }' >> /etc/nginx/sites-available/webmail
  163. echo ' location ~ \.php$ {' >> /etc/nginx/sites-available/webmail
  164. echo ' try_files $uri =404;' >> /etc/nginx/sites-available/webmail
  165. echo ' fastcgi_pass unix:/var/run/php5-fpm.sock;' >> /etc/nginx/sites-available/webmail
  166. echo ' fastcgi_index index.php;' >> /etc/nginx/sites-available/webmail
  167. echo ' fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;' >> /etc/nginx/sites-available/webmail
  168. echo ' include fastcgi_params;' >> /etc/nginx/sites-available/webmail
  169. echo ' }' >> /etc/nginx/sites-available/webmail
  170. echo ' add_header X-Frame-Options DENY;' >> /etc/nginx/sites-available/webmail
  171. echo ' add_header X-Content-Type-Options nosniff;' >> /etc/nginx/sites-available/webmail
  172. echo ' client_max_body_size 15m;' >> /etc/nginx/sites-available/webmail
  173. echo '}' >> /etc/nginx/sites-available/webmail
  174. nginx_ensite webmail
  175. systemctl restart php5-fpm
  176. systemctl restart nginx
  177. if ! grep -q "Webmail" /home/$MY_USERNAME/README; then
  178. echo '' >> /home/$MY_USERNAME/README
  179. echo '' >> /home/$MY_USERNAME/README
  180. echo 'Webmail' >> /home/$MY_USERNAME/README
  181. echo '=======' >> /home/$MY_USERNAME/README
  182. if [[ $ONION_ONLY == 'no' ]]; then
  183. echo $"Open https://$DEFAULT_DOMAIN_NAME/webmail/index.php" >> /home/$MY_USERNAME/README
  184. else
  185. echo $"Open http://$WEBMAIL_ONION_HOSTNAME" >> /home/$MY_USERNAME/README
  186. fi
  187. echo $"MariaDB webmail admin password: $WEBMAIL_ADMIN_PASSWORD" >> /home/$MY_USERNAME/README
  188. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  189. chmod 600 /home/$MY_USERNAME/README
  190. fi
  191. echo 'install_webmail' >> $COMPLETION_FILE
  192. }
  193. # NOTE: deliberately no exit 0