freedombone-app-webmail 10KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # Webmail application
  12. #
  13. # License
  14. # =======
  15. #
  16. # Copyright (C) 2014-2016 Bob Mottram <bob@robotics.uk.to>
  17. #
  18. # This program is free software: you can redistribute it and/or modify
  19. # it under the terms of the GNU Affero General Public License as published by
  20. # the Free Software Foundation, either version 3 of the License, or
  21. # (at your option) any later version.
  22. #
  23. # This program is distributed in the hope that it will be useful,
  24. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  25. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  26. # GNU Affero General Public License for more details.
  27. #
  28. # You should have received a copy of the GNU Affero General Public License
  29. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  30. VARIANTS=''
  31. WEBMAIL_REPO="https://github.com/roundcube/roundcubemail"
  32. WEBMAIL_COMMIT='78cf9c2e5cff2d78cd8beb647d60570f195a2a9c'
  33. WEBMAIL_ONION_HOSTNAME=
  34. WEBMAIL_ONION_PORT=8097
  35. WEBMAIL_ADMIN_PASSWORD=
  36. WEB_PATH=/var/www
  37. WEBMAIL_PATH=$WEB_PATH/webmail
  38. function change_password_webmail {
  39. echo -n ''
  40. }
  41. function get_mariadb_webmail_admin_password {
  42. if [ -f /home/$MY_USERNAME/README ]; then
  43. if grep -q "MariaDB webmail admin password" /home/$MY_USERNAME/README; then
  44. WEBMAIL_ADMIN_PASSWORD=$(cat /home/$MY_USERNAME/README | grep "MariaDB webmail admin password" | awk -F ':' '{print $2}' | sed 's/^ *//')
  45. fi
  46. fi
  47. }
  48. function webmail_create_database {
  49. function_check get_mariadb_webmail_admin_password
  50. get_mariadb_webmail_admin_password
  51. if [ ! $WEBMAIL_ADMIN_PASSWORD ]; then
  52. if [ -f $IMAGE_PASSWORD_FILE ]; then
  53. WEBMAIL_ADMIN_PASSWORD="$(printf `cat $IMAGE_PASSWORD_FILE`)"
  54. else
  55. WEBMAIL_ADMIN_PASSWORD="$(create_password ${MINIMUM_PASSWORD_LENGTH})"
  56. fi
  57. fi
  58. if [ ! $WEBMAIL_ADMIN_PASSWORD ]; then
  59. return
  60. fi
  61. function_check create_database
  62. create_database webmail "$WEBMAIL_ADMIN_PASSWORD"
  63. }
  64. function reconfigure_webmail {
  65. echo -n ''
  66. }
  67. function upgrade_webmail {
  68. if ! grep -Fxq "install_webmail" $COMPLETION_FILE; then
  69. return
  70. fi
  71. function_check set_repo_commit
  72. set_repo_commit $WEBMAIL_PATH "Webmail commit" "$WEBMAIL_COMMIT" $WEBMAIL_REPO
  73. }
  74. function backup_local_webmail {
  75. if ! grep -q "install_webmail" $COMPLETION_FILE; then
  76. return
  77. fi
  78. echo $"Backing up webmail"
  79. function_check backup_database_to_usb
  80. backup_database_to_usb webmail
  81. echo $"Backing up webmail complete"
  82. }
  83. function restore_local_webmail {
  84. if ! grep -q "install_webmail" $COMPLETION_FILE; then
  85. return
  86. fi
  87. echo $"Restoring webmail"
  88. function_check webmail_create_database
  89. webmail_create_database
  90. function_check restore_database
  91. restore_database webmail
  92. echo $"Restore of webmail complete"
  93. }
  94. function backup_remote_webmail {
  95. echo -n ''
  96. }
  97. function restore_remote_webmail {
  98. echo -n ''
  99. }
  100. function remove_webmail {
  101. if ! grep -Fxq "install_webmail" $COMPLETION_FILE; then
  102. return
  103. fi
  104. nginx_dissite webmail
  105. if [ -f /etc/nginx/sites-available/webmail ]; then
  106. rm /etc/nginx/sites-available/webmail
  107. fi
  108. function_check remove_onion_service
  109. remove_onion_service webmail ${WEBMAIL_ONION_PORT}
  110. function_check drop_database
  111. drop_database webmail
  112. if [ -d $WEB_PATH/webmail ]; then
  113. rm -rf $WEB_PATH/webmail
  114. fi
  115. sed -i '/Webmail /d' $COMPLETION_FILE
  116. sed -i '/install_webmail/d' $COMPLETION_FILE
  117. }
  118. function install_webmail {
  119. if grep -Fxq "install_webmail" $COMPLETION_FILE; then
  120. return
  121. fi
  122. if [ -d /etc/apache2 ]; then
  123. rm -rf /etc/apache2
  124. echo $'Removed Apache installation after Dokuwiki install'
  125. fi
  126. function_check install_mariadb
  127. install_mariadb
  128. function_check get_mariadb_password
  129. get_mariadb_password
  130. function_check repair_databases_script
  131. repair_databases_script
  132. apt-get -y install php5-common php5-cli php5-curl php5-gd php5-mysql php5-mcrypt git
  133. apt-get -y install php5-dev imagemagick php5-imagick php5-sqlite php-auth-sasl php-net-smtp php-mime-type
  134. apt-get -y install php-mail-mime php-mail-mimedecode php-net-ldap3 php5-pspell
  135. pear install Net_IDNA2
  136. if [ ! -f $WEBMAIL_PATH/index.php ]; then
  137. cd $WEB_PATH
  138. git_clone $WEBMAIL_REPO webmail
  139. cd $WEBMAIL_PATH
  140. git checkout $WEBMAIL_COMMIT -b $WEBMAIL_COMMIT
  141. if ! grep -q "Webmail commit" $COMPLETION_FILE; then
  142. echo "Webmail commit:$WEBMAIL_COMMIT" >> $COMPLETION_FILE
  143. else
  144. sed -i "s/Webmail commit.*/Webmail commit:$WEBMAIL_COMMIT/g" $COMPLETION_FILE
  145. fi
  146. fi
  147. if [ ! -f $WEBMAIL_PATH/index.php ]; then
  148. echo $'Did not clone webmail repo'
  149. exit 52825
  150. fi
  151. WEBMAIL_ONION_HOSTNAME=$(add_onion_service webmail 80 ${WEBMAIL_ONION_PORT})
  152. echo "Webmail onion domain:${WEBMAIL_ONION_HOSTNAME}" >> $COMPLETION_FILE
  153. webmail_create_database
  154. mysql -u root --password="$MARIADB_PASSWORD" -D webmail < $WEBMAIL_PATH/SQL/mysql.initial.sql
  155. if [ ! -d /var/www/$DEFAULT_DOMAIN_NAME/htdocs ]; then
  156. mkdir -p /var/www/$DEFAULT_DOMAIN_NAME/htdocs
  157. fi
  158. ln -s $WEBMAIL_PATH /var/www/$DEFAULT_DOMAIN_NAME/htdocs/webmail
  159. if [ ! -f /var/www/webmail/config/config.inc.php ]; then
  160. # generate the configuration
  161. echo '<?php' > /var/www/webmail/config/config.inc.php
  162. echo "\$config['db_dsnw'] = 'mysql://root:${MARIADB_PASSWORD}@localhost/webmail';" >> /var/www/webmail/config/config.inc.php
  163. echo "\$config['default_host'] = 'localhost';" >> /var/www/webmail/config/config.inc.php
  164. echo "\$config['support_url'] = '';" >> /var/www/webmail/config/config.inc.php
  165. WEBMAIL_DES_KEY="$(create_password 25)"
  166. echo "\$config['des_key'] = '${WEBMAIL_DES_KEY}';" >> /var/www/webmail/config/config.inc.php
  167. echo "\$config['product_name'] = '${PROJECT_NAME}';" >> /var/www/webmail/config/config.inc.php
  168. echo "\$config['plugins'] = array('enigma');" >> /var/www/webmail/config/config.inc.php
  169. echo "\$config['mime_param_folding'] = 0;" >> /var/www/webmail/config/config.inc.php
  170. echo "\$config['enable_installer'] = false;" >> /var/www/webmail/config/config.inc.php
  171. fi
  172. chown -R www-data:www-data $WEBMAIL_PATH
  173. echo 'server {' > /etc/nginx/sites-available/webmail
  174. echo " listen 127.0.0.1:$WEBMAIL_ONION_PORT default_server;" >> /etc/nginx/sites-available/webmail
  175. echo " server_name $WEBMAIL_ONION_HOSTNAME;" >> /etc/nginx/sites-available/webmail
  176. echo " root ${WEBMAIL_PATH};" >> /etc/nginx/sites-available/webmail
  177. echo ' index index.php index.html index.htm;' >> /etc/nginx/sites-available/webmail
  178. echo ' access_log off;' >> /etc/nginx/sites-available/webmail
  179. echo ' error_log off;' >> /etc/nginx/sites-available/webmail
  180. echo ' location / {' >> /etc/nginx/sites-available/webmail
  181. echo ' try_files $uri $uri/ /index.php?q=$uri&$args;' >> /etc/nginx/sites-available/webmail
  182. echo ' }' >> /etc/nginx/sites-available/webmail
  183. echo ' error_page 404 /404.html;' >> /etc/nginx/sites-available/webmail
  184. echo ' error_page 500 502 503 504 /50x.html;' >> /etc/nginx/sites-available/webmail
  185. echo ' location = /50x.html {' >> /etc/nginx/sites-available/webmail
  186. echo " root ${WEBMAIL_PATH};" >> /etc/nginx/sites-available/webmail
  187. echo ' }' >> /etc/nginx/sites-available/webmail
  188. echo ' location ~ ^/(README.md|INSTALL|LICENSE|CHANGELOG|UPGRADING)$ {' >> /etc/nginx/sites-available/webmail
  189. echo ' deny all;' >> /etc/nginx/sites-available/webmail
  190. echo ' }' >> /etc/nginx/sites-available/webmail
  191. echo ' location ~ ^/(config|temp|logs)/ {' >> /etc/nginx/sites-available/webmail
  192. echo ' deny all;' >> /etc/nginx/sites-available/webmail
  193. echo ' }' >> /etc/nginx/sites-available/webmail
  194. echo ' location ~ /\. {' >> /etc/nginx/sites-available/webmail
  195. echo ' deny all;' >> /etc/nginx/sites-available/webmail
  196. echo ' access_log off;' >> /etc/nginx/sites-available/webmail
  197. echo ' log_not_found off;' >> /etc/nginx/sites-available/webmail
  198. echo ' }' >> /etc/nginx/sites-available/webmail
  199. echo ' location ~ \.php$ {' >> /etc/nginx/sites-available/webmail
  200. echo ' try_files $uri =404;' >> /etc/nginx/sites-available/webmail
  201. echo ' fastcgi_pass unix:/var/run/php5-fpm.sock;' >> /etc/nginx/sites-available/webmail
  202. echo ' fastcgi_index index.php;' >> /etc/nginx/sites-available/webmail
  203. echo ' fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;' >> /etc/nginx/sites-available/webmail
  204. echo ' include fastcgi_params;' >> /etc/nginx/sites-available/webmail
  205. echo ' }' >> /etc/nginx/sites-available/webmail
  206. echo ' add_header X-Frame-Options DENY;' >> /etc/nginx/sites-available/webmail
  207. echo ' add_header X-Content-Type-Options nosniff;' >> /etc/nginx/sites-available/webmail
  208. echo ' client_max_body_size 15m;' >> /etc/nginx/sites-available/webmail
  209. echo '}' >> /etc/nginx/sites-available/webmail
  210. nginx_ensite webmail
  211. systemctl restart php5-fpm
  212. systemctl restart nginx
  213. if ! grep -q "Webmail" /home/$MY_USERNAME/README; then
  214. echo '' >> /home/$MY_USERNAME/README
  215. echo '' >> /home/$MY_USERNAME/README
  216. echo 'Webmail' >> /home/$MY_USERNAME/README
  217. echo '=======' >> /home/$MY_USERNAME/README
  218. if [[ $ONION_ONLY == 'no' ]]; then
  219. echo $"Open https://$DEFAULT_DOMAIN_NAME/webmail/index.php" >> /home/$MY_USERNAME/README
  220. else
  221. echo $"Open http://$WEBMAIL_ONION_HOSTNAME" >> /home/$MY_USERNAME/README
  222. fi
  223. echo $"MariaDB webmail admin password: $WEBMAIL_ADMIN_PASSWORD" >> /home/$MY_USERNAME/README
  224. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  225. chmod 600 /home/$MY_USERNAME/README
  226. fi
  227. echo 'install_webmail' >> $COMPLETION_FILE
  228. }
  229. # NOTE: deliberately no exit 0