freedombone-app-dokuwiki 23KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # Dokuwiki application
  12. #
  13. # License
  14. # =======
  15. #
  16. # Copyright (C) 2014-2018 Bob Mottram <bob@freedombone.net>
  17. #
  18. # This program is free software: you can redistribute it and/or modify
  19. # it under the terms of the GNU Affero General Public License as published by
  20. # the Free Software Foundation, either version 3 of the License, or
  21. # (at your option) any later version.
  22. #
  23. # This program is distributed in the hope that it will be useful,
  24. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  25. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  26. # GNU Affero General Public License for more details.
  27. #
  28. # You should have received a copy of the GNU Affero General Public License
  29. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  30. VARIANTS='full full-vim writer'
  31. IN_DEFAULT_INSTALL=0
  32. SHOW_ON_ABOUT=1
  33. DOKUWIKI_DOMAIN_NAME=
  34. DOKUWIKI_CODE=
  35. DOKUWIKI_ONION_PORT=8089
  36. DOKUWIKI_ADMIN_PASSWORD=
  37. DOKUWIKI_TITLE="${PROJECT_NAME} Dokuwiki"
  38. DOKUWIKI_REPO="https://github.com/splitbrain/dokuwiki"
  39. DOKUWIKI_COMMIT='be15c01c0b982cf1a75b5af031bf077143c63f39'
  40. dokuwiki_variables=(ONION_ONLY
  41. MY_USERNAME
  42. DOKUWIKI_TITLE
  43. DOKUWIKI_DOMAIN_NAME
  44. DOKUWIKI_CODE
  45. DDNS_PROVIDER)
  46. function logging_on_dokuwiki {
  47. echo -n ''
  48. }
  49. function logging_off_dokuwiki {
  50. echo -n ''
  51. }
  52. function install_interactive_dokuwiki {
  53. if [[ $ONION_ONLY != "no" ]]; then
  54. DOKUWIKI_TITLE=$'My Dokuwiki'
  55. DOKUWIKI_DOMAIN_NAME='dokuwiki.local'
  56. write_config_param "DOKUWIKI_TITLE" "$DOKUWIKI_TITLE"
  57. write_config_param "DOKUWIKI_DOMAIN_NAME" "$DOKUWIKI_DOMAIN_NAME"
  58. else
  59. function_check interactive_site_details_with_title
  60. interactive_site_details_with_title "dokuwiki" "DOKUWIKI_TITLE" "DOKUWIKI_DOMAIN_NAME" "DOKUWIKI_CODE"
  61. fi
  62. APP_INSTALLED=1
  63. }
  64. function change_password_dokuwiki {
  65. curr_username="$1"
  66. new_user_password="$2"
  67. DOKUWIKI_DOMAIN_NAME=$(get_completion_param "dokuwiki domain")
  68. if grep -q "$curr_username:" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/users.auth.php"; then
  69. HASHED_DOKUWIKI_PASSWORD=$(echo -n "$new_user_password" | md5sum | awk -F ' ' '{print $1}')
  70. existing_user=$(grep "$curr_username:" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/users.auth.php" | hean -n 1)
  71. if [[ "$existing_user" == *":admin,"* ]]; then
  72. sed -i "s|$curr_username:.*|$curr_username:$HASHED_DOKUWIKI_PASSWORD:$curr_username:$curr_username@$HOSTNAME:admin,user,upload|g" /var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/users.auth.php
  73. else
  74. sed -i "s|$curr_username:.*|$curr_username:$HASHED_DOKUWIKI_PASSWORD:$curr_username:$curr_username@$HOSTNAME:user,upload|g" /var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/users.auth.php
  75. fi
  76. cp "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/users.auth.php" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/conf/users.auth.php"
  77. chmod 640 "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/conf/users.auth.php"
  78. chmod 640 "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/users.auth.php"
  79. "${PROJECT_NAME}-pass" -u "$curr_username" -a dokuwiki -p "$new_user_password"
  80. fi
  81. }
  82. function add_user_dokuwiki {
  83. new_username="$1"
  84. new_user_password="$2"
  85. DOKUWIKI_DOMAIN_NAME=$(get_completion_param "dokuwiki domain")
  86. HASHED_DOKUWIKI_PASSWORD=$(echo -n "$new_user_password" | md5sum | awk -F ' ' '{print $1}')
  87. echo "$new_username:$HASHED_DOKUWIKI_PASSWORD:$new_username:$new_username@$HOSTNAME:user,upload" >> "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/users.auth.php"
  88. cp "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/users.auth.php" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/conf/users.auth.php"
  89. chmod 640 "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/users.auth.php"
  90. chmod 640 "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/conf/users.auth.php"
  91. "${PROJECT_NAME}-pass" -u "$new_username" -a dokuwiki -p "$new_user_password"
  92. }
  93. function remove_user_dokuwiki {
  94. remove_username="$1"
  95. read_config_param "DOKUWIKI_DOMAIN_NAME"
  96. if grep -q "$remove_username:" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/users.auth.php"; then
  97. sed -i "/$remove_username:/d" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/users.auth.php"
  98. sed -i "/$remove_username:/d" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/conf/users.auth.php"
  99. "${PROJECT_NAME}-pass" -u "$remove_username" --rmapp dokuwiki
  100. fi
  101. }
  102. function reconfigure_dokuwiki {
  103. echo -n ''
  104. }
  105. function upgrade_dokuwiki {
  106. function_check set_repo_commit
  107. set_repo_commit "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs" "dokuwiki commit" "$DOKUWIKI_COMMIT" $DOKUWIKI_REPO
  108. }
  109. function backup_local_dokuwiki {
  110. DOKUWIKI_DOMAIN_NAME=$(get_completion_param "dokuwiki domain")
  111. function_check backup_directory_to_usb
  112. # backup the data
  113. source_directory="/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/data"
  114. if [ -d "$source_directory" ]; then
  115. dest_directory=dokuwikidat
  116. backup_directory_to_usb "$source_directory" "$dest_directory"
  117. fi
  118. # backup the users
  119. source_directory="/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl"
  120. if [ -d "$source_directory" ]; then
  121. dest_directory=dokuwikiacl
  122. cp "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/conf/users*.php" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/"
  123. backup_directory_to_usb "$source_directory" "$dest_directory"
  124. fi
  125. }
  126. function restore_local_dokuwiki {
  127. echo $"Restoring Dokuwiki installation"
  128. function_check get_completion_param
  129. DOKUWIKI_DOMAIN_NAME=$(get_completion_param "dokuwiki domain")
  130. # restore the data
  131. temp_restore_dir=/root/tempdokuwikidat
  132. function_check restore_directory_from_usb
  133. restore_directory_from_usb ${temp_restore_dir} dokuwikidat
  134. if [ -d "${temp_restore_dir}/var/www/${DOKUWIKI_DOMAIN_NAME}/htdocs/data" ]; then
  135. cp -r "${temp_restore_dir}/var/www/${DOKUWIKI_DOMAIN_NAME}/htdocs/data/*" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/data"
  136. else
  137. cp -r "${temp_restore_dir}/*" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/data"
  138. fi
  139. # shellcheck disable=SC2181
  140. if [ ! "$?" = "0" ]; then
  141. function_check restore_directory_from_usb
  142. set_user_permissions
  143. function_check backup_unmount_drive
  144. backup_unmount_drive
  145. rm -rf ${temp_restore_dir}
  146. exit 683352
  147. fi
  148. rm -rf ${temp_restore_dir}
  149. # restore the users
  150. temp_restore_dir=/root/tempdokuwikiacl
  151. function_check restore_directory_from_usb
  152. restore_directory_from_usb ${temp_restore_dir} dokuwikiacl
  153. if [ -d "${temp_restore_dir}/var/www/${DOKUWIKI_DOMAIN_NAME}/htdocs/lib/plugins/acl" ]; then
  154. cp "${temp_restore_dir}/var/www/${DOKUWIKI_DOMAIN_NAME}/htdocs/lib/plugins/acl/users.auth.php" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/"
  155. cp "${temp_restore_dir}/var/www/${DOKUWIKI_DOMAIN_NAME}/htdocs/lib/plugins/acl/users.auth.php" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/conf/"
  156. else
  157. cp "${temp_restore_dir}/users.auth.php" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/"
  158. cp "${temp_restore_dir}/users.auth.php" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/conf/"
  159. fi
  160. # shellcheck disable=SC2181
  161. if [ ! "$?" = "0" ]; then
  162. function_check restore_directory_from_usb
  163. set_user_permissions
  164. function_check backup_unmount_drive
  165. backup_unmount_drive
  166. rm -rf ${temp_restore_dir}
  167. exit 456495
  168. fi
  169. rm -rf ${temp_restore_dir}
  170. chmod 640 "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/users.auth.php"
  171. chmod 640 "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/conf/users.auth.php"
  172. chmod -R 755 "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/data"
  173. chmod -R 755 "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib"
  174. chown -R www-data:www-data "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs"
  175. echo $"Restore of Dokuwiki complete"
  176. }
  177. function backup_remote_dokuwiki {
  178. DOKUWIKI_DOMAIN_NAME=$(get_completion_param "dokuwiki domain")
  179. if [ -d "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs" ]; then
  180. echo $"Backing up dokuwiki"
  181. backup_directory_to_friend "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/data" dokuwikidat
  182. cp "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/conf/users*.php" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/"
  183. backup_directory_to_friend "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl" dokuwikiacl
  184. fi
  185. }
  186. function restore_remote_dokuwiki {
  187. DOKUWIKI_DOMAIN_NAME=$(get_completion_param "dokuwiki domain")
  188. function_check get_completion_param
  189. function_check restore_directory_from_friend
  190. if [ -d "$SERVER_DIRECTORY/backup/dokuwikidat" ]; then
  191. echo $"Restoring Dokuwiki data for $DOKUWIKI_DOMAIN_NAME"
  192. temp_restore_dir=/root/tempdokuwikidat
  193. restore_directory_from_friend $temp_restore_dir dokuwikidat
  194. if [ -d "$temp_restore_dir/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/data" ]; then
  195. cp -r "$temp_restore_dir/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/data/*" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/data/"
  196. else
  197. cp -r $temp_restore_dir/* "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/data/"
  198. fi
  199. # shellcheck disable=SC2181
  200. if [ ! "$?" = "0" ]; then
  201. exit 92634
  202. fi
  203. rm -rf $temp_restore_dir
  204. echo $"Restore of Dokuwiki data complete"
  205. fi
  206. if [ -d "$SERVER_DIRECTORY/backup/dokuwikiacl" ]; then
  207. echo $"Restoring Dokuwiki users for $DOKUWIKI_DOMAIN_NAME"
  208. temp_restore_dir=/root/tempdokuwikiacl
  209. restore_directory_from_friend $temp_restore_dir dokuwikiacl
  210. if [ -d "$temp_restore_dir/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl" ]; then
  211. cp -r "$temp_restore_dir/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/*" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/"
  212. else
  213. cp -r $temp_restore_dir/* "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/"
  214. fi
  215. # shellcheck disable=SC2181
  216. if [ ! "$?" = "0" ]; then
  217. exit 735287
  218. fi
  219. rm -rf $temp_restore_dir
  220. echo $"Restore of Dokuwiki users complete"
  221. fi
  222. chmod 640 "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/users.auth.php"
  223. chmod 640 "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/conf/users.auth.php"
  224. chmod -R 755 "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/data/data"
  225. chmod -R 755 "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/data/lib"
  226. chown -R www-data:www-data "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs"
  227. }
  228. function remove_dokuwiki {
  229. if [ ${#DOKUWIKI_DOMAIN_NAME} -eq 0 ]; then
  230. return
  231. fi
  232. function_check remove_onion_service
  233. remove_onion_service dokuwiki ${DOKUWIKI_ONION_PORT}
  234. nginx_dissite "$DOKUWIKI_DOMAIN_NAME"
  235. remove_certs "$DOKUWIKI_DOMAIN_NAME"
  236. if [ -f "/etc/nginx/sites-available/$DOKUWIKI_DOMAIN_NAME" ]; then
  237. rm "/etc/nginx/sites-available/$DOKUWIKI_DOMAIN_NAME"
  238. fi
  239. if [ ! -d "/var/www/$DOKUWIKI_DOMAIN_NAME" ]; then
  240. rm -rf "/var/www/$DOKUWIKI_DOMAIN_NAME"
  241. fi
  242. if [ -d /var/lib/dokuwiki ]; then
  243. rm -rf /var/lib/dokuwiki
  244. fi
  245. if [ -d /etc/dokuwiki ]; then
  246. rm -rf /etc/dokuwiki
  247. fi
  248. if [ -d /usr/share/dokuwiki ]; then
  249. rm -rf /usr/share/dokuwiki
  250. fi
  251. remove_completion_param "install_dokuwiki"
  252. remove_completion_param "dokuwiki domain"
  253. sed -i '/dokuwiki/d' "$COMPLETION_FILE"
  254. function_check remove_ddns_domain
  255. remove_ddns_domain "$DOKUWIKI_DOMAIN_NAME"
  256. }
  257. function install_dokuwiki {
  258. if [ ! "$DOKUWIKI_DOMAIN_NAME" ]; then
  259. return
  260. fi
  261. apt-get -yq install php-common php-cli php-curl php-gd php-mcrypt git
  262. apt-get -yq install php-dev imagemagick php-imagick libfcgi0ldbl
  263. apt-get -yq install php-memcached memcached
  264. if [ ! -d "/var/www/$DOKUWIKI_DOMAIN_NAME" ]; then
  265. mkdir "/var/www/$DOKUWIKI_DOMAIN_NAME"
  266. fi
  267. if [ ! -f "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/install.php" ]; then
  268. cd "/var/www/$DOKUWIKI_DOMAIN_NAME" || exit 23468246824
  269. if [ -d /repos/dokuwiki ]; then
  270. mkdir "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs"
  271. cp -r -p /repos/dokuwiki/. "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs"
  272. cd "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs" || exit 24687462
  273. git pull
  274. else
  275. function_check git_clone
  276. git_clone "$DOKUWIKI_REPO" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs"
  277. fi
  278. cd "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs" || exit 38368832
  279. git checkout "$DOKUWIKI_COMMIT" -b "$DOKUWIKI_COMMIT"
  280. set_completion_param "dokuwiki commit" "$DOKUWIKI_COMMIT"
  281. fi
  282. apt-get -yq remove --purge apache2-bin*
  283. if [ -d /etc/apache2 ]; then
  284. rm -rf /etc/apache2
  285. echo $'Removed Apache installation after Dokuwiki install'
  286. fi
  287. { echo '<?php';
  288. echo "\$conf['title'] = '${DOKUWIKI_TITLE}';";
  289. echo "\$conf['lang'] = 'en';";
  290. echo "\$conf['license'] = 'cc-by-sa';";
  291. echo "\$conf['useacl'] = 1;";
  292. echo "\$conf['superuser'] = '@admin';";
  293. echo "\$conf['disableactions'] = 'register';"; } > "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/conf/local.php"
  294. ln -s "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/conf/local.php" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/local.php"
  295. chmod 600 "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/conf/local.php"
  296. chown -R www-data:www-data "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs"
  297. chmod -R 755 "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib"
  298. chmod -R 755 "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/data"
  299. if [ -f "$IMAGE_PASSWORD_FILE" ]; then
  300. DOKUWIKI_ADMIN_PASSWORD="$(printf "%s" "$(cat "$IMAGE_PASSWORD_FILE")")"
  301. else
  302. if [ ! "$DOKUWIKI_ADMIN_PASSWORD" ]; then
  303. DOKUWIKI_ADMIN_PASSWORD="$(create_password "${MINIMUM_PASSWORD_LENGTH}")"
  304. fi
  305. fi
  306. HASHED_DOKUWIKI_PASSWORD=$(echo -n "$DOKUWIKI_ADMIN_PASSWORD" | md5sum | awk -F ' ' '{print $1}')
  307. echo -n "$MY_USERNAME:$HASHED_DOKUWIKI_PASSWORD:$MY_NAME:$MY_EMAIL:admin,user,upload" > "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/users.auth.php"
  308. cp "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/users.auth.php" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/conf/users.auth.php"
  309. chmod 640 "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/lib/plugins/acl/users.auth.php"
  310. if ! grep -q "video/ogg" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/conf/mime.conf"; then
  311. echo 'ogv video/ogg' >> "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/conf/mime.conf"
  312. fi
  313. if ! grep -q "video/mp4" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/conf/mime.conf"; then
  314. echo 'mp4 video/mp4' >> "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/conf/mime.conf"
  315. fi
  316. if ! grep -q "video/webm" "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/conf/mime.conf"; then
  317. echo 'webm video/webm' >> "/var/www/$DOKUWIKI_DOMAIN_NAME/htdocs/conf/mime.conf"
  318. fi
  319. DOKUWIKI_ONION_HOSTNAME=$(add_onion_service dokuwiki 80 ${DOKUWIKI_ONION_PORT})
  320. set_completion_param "dokuwiki domain" "${DOKUWIKI_DOMAIN_NAME}"
  321. if [[ $ONION_ONLY == "no" ]]; then
  322. function_check nginx_http_redirect
  323. nginx_http_redirect "$DOKUWIKI_DOMAIN_NAME"
  324. { echo 'server {';
  325. echo ' listen 443 ssl;';
  326. echo ' #listen [::]:443 ssl;';
  327. echo " root /var/www/$DOKUWIKI_DOMAIN_NAME/htdocs;";
  328. echo " server_name $DOKUWIKI_DOMAIN_NAME;";
  329. echo ' access_log /dev/null;';
  330. echo " error_log /dev/null;";
  331. echo ' index index.php;';
  332. echo ' charset utf-8;';
  333. echo ' proxy_read_timeout 86400s;'; } >> "/etc/nginx/sites-available/$DOKUWIKI_DOMAIN_NAME"
  334. function_check nginx_ssl
  335. nginx_ssl "$DOKUWIKI_DOMAIN_NAME"
  336. function_check nginx_disable_sniffing
  337. nginx_disable_sniffing "$DOKUWIKI_DOMAIN_NAME"
  338. { echo ' add_header Strict-Transport-Security "max-age=0;";';
  339. echo '';
  340. echo ' # rewrite to front controller as default rule';
  341. echo ' location / {'; } >> "/etc/nginx/sites-available/$DOKUWIKI_DOMAIN_NAME"
  342. function_check nginx_limits
  343. nginx_limits "$DOKUWIKI_DOMAIN_NAME"
  344. { echo " rewrite ^/(.*) /index.php?q=\$uri&\$args last;";
  345. echo ' }';
  346. echo '';
  347. echo ' # statically serve these file types when possible';
  348. echo ' # otherwise fall back to front controller';
  349. echo ' # allow browser to cache them';
  350. echo ' # added .htm for advanced source code editor library';
  351. echo ' location ~* \.(jpg|jpeg|gif|png|ico|css|js|htm|html|ttf|woff|svg)$ {';
  352. echo ' expires 30d;';
  353. echo " try_files \$uri /index.php?q=\$uri&\$args;";
  354. echo ' }';
  355. echo '';
  356. echo ' # block these file types';
  357. echo ' location ~* \.(tpl|md|tgz|log|out)$ {';
  358. echo ' deny all;';
  359. echo ' }';
  360. echo '';
  361. echo ' # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000';
  362. echo ' # or a unix socket';
  363. echo ' location ~* \.php$ {'; } >> "/etc/nginx/sites-available/$DOKUWIKI_DOMAIN_NAME"
  364. function_check nginx_limits
  365. nginx_limits "$DOKUWIKI_DOMAIN_NAME"
  366. { echo ' # Zero-day exploit defense.';
  367. echo ' # http://forum.nginx.org/read.php?2,88845,page=3';
  368. echo " # Won't work properly (404 error) if the file is not stored on this";
  369. echo " # server, which is entirely possible with php-fpm/php-fcgi.";
  370. echo " # Comment the 'try_files' line out if you set up php-fpm/php-fcgi on";
  371. echo " # another machine. And then cross your fingers that you won't get hacked.";
  372. echo " try_files \$uri \$uri/ /index.php;";
  373. echo ' # NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini';
  374. echo ' fastcgi_split_path_info ^(.+\.php)(/.+)$;';
  375. echo ' # With php-cgi alone:';
  376. echo ' # fastcgi_pass 127.0.0.1:9000;';
  377. echo ' # With php-fpm:';
  378. echo ' fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;';
  379. echo ' fastcgi_read_timeout 30;';
  380. echo ' include fastcgi_params;';
  381. echo ' fastcgi_index index.php;';
  382. echo " fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;";
  383. echo ' }';
  384. echo '';
  385. echo ' # deny access to all dot files';
  386. echo ' location ~ /\. {';
  387. echo ' deny all;';
  388. echo ' }';
  389. echo '';
  390. echo ' #deny access to store';
  391. echo ' location ~ /store {';
  392. echo ' deny all;';
  393. echo ' }';
  394. echo ' location ~ /(data|conf|bin|inc)/ {';
  395. echo ' deny all;';
  396. echo ' }';
  397. echo ' location ~ /\.ht {';
  398. echo ' deny all;';
  399. echo ' }';
  400. echo '}';
  401. echo ''; } >> "/etc/nginx/sites-available/$DOKUWIKI_DOMAIN_NAME"
  402. else
  403. echo -n '' > "/etc/nginx/sites-available/$DOKUWIKI_DOMAIN_NAME"
  404. fi
  405. { echo 'server {';
  406. echo " listen 127.0.0.1:${DOKUWIKI_ONION_PORT} default_server;";
  407. echo " root /var/www/$DOKUWIKI_DOMAIN_NAME/htdocs;";
  408. echo " server_name $DOKUWIKI_ONION_HOSTNAME;";
  409. echo ' access_log /dev/null;';
  410. echo " error_log /dev/null;";
  411. echo ' index index.php;';
  412. echo ' charset utf-8;';
  413. echo ' proxy_read_timeout 86400s;'; } >> "/etc/nginx/sites-available/$DOKUWIKI_DOMAIN_NAME"
  414. function_check nginx_disable_sniffing
  415. nginx_disable_sniffing "$DOKUWIKI_DOMAIN_NAME"
  416. { echo ' add_header Strict-Transport-Security "max-age=0;";';
  417. echo '';
  418. echo ' # rewrite to front controller as default rule';
  419. echo ' location / {'; } >> "/etc/nginx/sites-available/$DOKUWIKI_DOMAIN_NAME"
  420. function_check nginx_limits
  421. nginx_limits "$DOKUWIKI_DOMAIN_NAME"
  422. { echo " rewrite ^/(.*) /index.php?q=\$uri&\$args last;";
  423. echo ' }';
  424. echo '';
  425. echo ' # statically serve these file types when possible';
  426. echo ' # otherwise fall back to front controller';
  427. echo ' # allow browser to cache them';
  428. echo ' # added .htm for advanced source code editor library';
  429. echo ' location ~* \.(jpg|jpeg|gif|png|ico|css|js|htm|html|ttf|woff|svg)$ {';
  430. echo ' expires 30d;';
  431. echo " try_files \$uri /index.php?q=\$uri&\$args;";
  432. echo ' }';
  433. echo '';
  434. echo ' # block these file types';
  435. echo ' location ~* \.(tpl|md|tgz|log|out)$ {';
  436. echo ' deny all;';
  437. echo ' }';
  438. echo '';
  439. echo ' # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000';
  440. echo ' # or a unix socket';
  441. echo ' location ~* \.php$ {'; } >> "/etc/nginx/sites-available/$DOKUWIKI_DOMAIN_NAME"
  442. function_check nginx_limits
  443. nginx_limits "$DOKUWIKI_DOMAIN_NAME"
  444. { echo ' # Zero-day exploit defense.';
  445. echo ' # http://forum.nginx.org/read.php?2,88845,page=3';
  446. echo " # Won't work properly (404 error) if the file is not stored on this";
  447. echo " # server, which is entirely possible with php-fpm/php-fcgi.";
  448. echo " # Comment the 'try_files' line out if you set up php-fpm/php-fcgi on";
  449. echo " # another machine. And then cross your fingers that you won't get hacked.";
  450. echo " try_files \$uri \$uri/ /index.php;";
  451. echo ' # NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini';
  452. echo ' fastcgi_split_path_info ^(.+\.php)(/.+)$;';
  453. echo ' # With php-cgi alone:';
  454. echo ' # fastcgi_pass 127.0.0.1:9000;';
  455. echo ' # With php-fpm:';
  456. echo ' fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;';
  457. echo ' fastcgi_read_timeout 30;';
  458. echo ' include fastcgi_params;';
  459. echo ' fastcgi_index index.php;';
  460. echo " fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;";
  461. echo ' }';
  462. echo '';
  463. echo ' # deny access to all dot files';
  464. echo ' location ~ /\. {';
  465. echo ' deny all;';
  466. echo ' }';
  467. echo '';
  468. echo ' #deny access to store';
  469. echo ' location ~ /store {';
  470. echo ' deny all;';
  471. echo ' }';
  472. echo ' location ~ /(data|conf|bin|inc)/ {';
  473. echo ' deny all;';
  474. echo ' }';
  475. echo ' location ~ /\.ht {';
  476. echo ' deny all;';
  477. echo ' }';
  478. echo '}'; } >> "/etc/nginx/sites-available/$DOKUWIKI_DOMAIN_NAME"
  479. function_check create_site_certificate
  480. create_site_certificate "$DOKUWIKI_DOMAIN_NAME" 'yes'
  481. function_check configure_php
  482. configure_php
  483. nginx_ensite "$DOKUWIKI_DOMAIN_NAME"
  484. systemctl restart php7.0-fpm
  485. systemctl restart nginx
  486. function_check add_ddns_domain
  487. add_ddns_domain "$DOKUWIKI_DOMAIN_NAME"
  488. "${PROJECT_NAME}-pass" -u "$MY_USERNAME" -a dokuwiki -p "$DOKUWIKI_ADMIN_PASSWORD"
  489. APP_INSTALLED=1
  490. }
  491. # NOTE: deliberately no exit 0