freedombone-app-matrix 28KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # matrix server
  12. #
  13. # https://raw.githubusercontent.com/silvio/docker-matrix
  14. # https://matrix.org/blog/2016/02/10/advanced-synapse-setup-with-lets-encrypt
  15. #
  16. # Test by visiting https://$MATRIX_DOMAIN_NAME/_matrix/key/v2/server/auto
  17. #
  18. # If working then telnet $MATRIX_DOMAIN_NAME 8448 should return a response
  19. #
  20. # License
  21. # =======
  22. #
  23. # Copyright (C) 2016-2018 Bob Mottram <bob@freedombone.net>
  24. #
  25. # This program is free software: you can redistribute it and/or modify
  26. # it under the terms of the GNU Affero General Public License as published by
  27. # the Free Software Foundation, either version 3 of the License, or
  28. # (at your option) any later version.
  29. #
  30. # This program is distributed in the hope that it will be useful,
  31. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  32. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  33. # GNU Affero General Public License for more details.
  34. #
  35. # You should have received a copy of the GNU Affero General Public License
  36. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  37. # Login username is @username:domain
  38. VARIANTS='full full-vim chat'
  39. IN_DEFAULT_INSTALL=0
  40. SHOW_ON_ABOUT=1
  41. MATRIX_DOMAIN_NAME=
  42. MATRIX_CODE=
  43. MATRIX_DATA_DIR='/var/lib/matrix'
  44. MATRIX_HTTP_PORT=8448
  45. MATRIX_PORT=8009
  46. MATRIX_FEDERATION_ONION_PORT=8111
  47. MATRIX_ONION_PORT=8109
  48. MATRIX_REPO="https://github.com/matrix-org/synapse"
  49. MATRIX_COMMIT='552f123bea1014680ab798b7e34cd1b23424a189'
  50. REPORT_STATS="no"
  51. MATRIX_SECRET=
  52. MATRIX_EXPIRE_MONTHS=1
  53. matrix_variables=(ONION_ONLY
  54. MY_USERNAME
  55. MATRIX_SECRET
  56. DEFAULT_DOMAIN_NAME
  57. MATRIX_DOMAIN_NAME
  58. MATRIX_EXPIRE_MONTHS
  59. MATRIX_CODE)
  60. function matrix_expire_old_posts {
  61. read_config_param MY_USERNAME
  62. read_config_param MATRIX_DOMAIN_NAME
  63. read_config_param MATRIX_EXPIRE_MONTHS
  64. read_config_param MATRIX_PORT
  65. matrix_remove_posts=/usr/bin/matrix-remove
  66. { echo '#!/bin/bash';
  67. echo "cd $MATRIX_DATA_DIR";
  68. echo "ROOM=\$1";
  69. echo "ADMIN=\"@${MY_USERNAME}:$MATRIX_DOMAIN_NAME\"";
  70. echo "TIME='$MATRIX_EXPIRE_MONTHS months ago'";
  71. echo "UNIX_TIMESTAMP=\$(date +%s%3N --date='TZ=\"UTC+0\" '\"\$TIME\")";
  72. echo 'BUSY="pragma busy_timeout=20000"';
  73. echo "BUFFER=\$(sqlite3 homeserver.db \"\$BUSY;select event_id from events where type='m.room.message' and received_ts<'\$UNIX_TIMESTAMP' and room_id='\$ROOM' order by received_ts desc limit 1;\")";
  74. echo "EVENT_ID=\$(echo \$BUFFER|awk '{print \$2}')";
  75. echo "BUFFER=\$(sqlite3 homeserver.db \"\$BUSY;select token from access_tokens where user_id like '\$ADMIN' order by id desc limit 1;\")";
  76. echo "TOKEN=\$(echo \$BUFFER|awk '{print \$2}')";
  77. echo 'set -x';
  78. echo "curl -v -X POST 'https://$MATRIX_DOMAIN_NAME/_matrix/client/r0/admin/purge_history/'\$ROOM'/'\$EVENT_ID'?access_token='\$TOKEN"; } > $matrix_remove_posts
  79. chmod +x $matrix_remove_posts
  80. }
  81. function logging_on_matrix {
  82. if [ -f /var/lib/matrix/homeserver.yaml ]; then
  83. if ! grep -q "log_file: /etc/matrix/homeserver.log" /var/lib/matrix/homeserver.yaml; then
  84. sed -i 's|log_file:.*|log_file: /etc/matrix/homeserver.log|g' /var/lib/matrix/homeserver.yaml
  85. fi
  86. if ! grep -q "#log_config:" /var/lib/matrix/homeserver.yaml; then
  87. sed -i 's|log_config:|#log_config:|g' /var/lib/matrix/homeserver.yaml
  88. fi
  89. fi
  90. }
  91. function logging_off_matrix {
  92. if [ -f /var/lib/matrix/homeserver.yaml ]; then
  93. if ! grep -q "log_file: /dev/null" /var/lib/matrix/homeserver.yaml; then
  94. sed -i 's|log_file:.*|log_file: /dev/null|g' /var/lib/matrix/homeserver.yaml
  95. fi
  96. if ! grep -q "#log_config:" /var/lib/matrix/homeserver.yaml; then
  97. sed -i 's|log_config:|#log_config:|g' /var/lib/matrix/homeserver.yaml
  98. fi
  99. if [ -f /etc/matrix/homeserver.log ]; then
  100. $REMOVE_FILES_COMMAND /etc/matrix/homeserver.log
  101. fi
  102. if [ -f /etc/matrix/homeserver.log.1 ]; then
  103. $REMOVE_FILES_COMMAND /etc/matrix/homeserver.log.1
  104. fi
  105. if [ -f /etc/matrix/homeserver.log.2 ]; then
  106. $REMOVE_FILES_COMMAND /etc/matrix/homeserver.log.2
  107. fi
  108. if [ -f /etc/matrix/homeserver.log.3 ]; then
  109. $REMOVE_FILES_COMMAND /etc/matrix/homeserver.log.3
  110. fi
  111. fi
  112. }
  113. function matrix_nginx {
  114. matrix_nginx_site=/etc/nginx/sites-available/$MATRIX_DOMAIN_NAME
  115. if [[ $ONION_ONLY == "no" ]]; then
  116. { echo 'server {';
  117. echo " listen 0.0.0.0:443;";
  118. echo " server_name ${MATRIX_DOMAIN_NAME};";
  119. echo '';
  120. echo ' # Security'; } > $matrix_nginx_site
  121. function_check nginx_ssl
  122. nginx_ssl ${MATRIX_DOMAIN_NAME}
  123. function_check nginx_disable_sniffing
  124. nginx_disable_sniffing ${MATRIX_DOMAIN_NAME}
  125. { echo ' add_header Strict-Transport-Security max-age=15768000;';
  126. echo '';
  127. echo ' # Logs';
  128. echo ' access_log /dev/null;';
  129. echo ' error_log /dev/null;';
  130. echo '';
  131. echo ' root /var/lib/matrix/media_store;';
  132. echo '';
  133. echo ' # Index';
  134. echo ' index index.html;';
  135. echo '';
  136. echo ' location /_matrix {'; } >> $matrix_nginx_site
  137. function_check nginx_limits
  138. nginx_limits ${MATRIX_DOMAIN_NAME} '15m'
  139. { echo " proxy_pass http://localhost:${MATRIX_PORT};";
  140. echo ' }';
  141. echo '}';
  142. echo '';
  143. echo 'server {';
  144. echo " listen 0.0.0.0:${MATRIX_HTTP_PORT};";
  145. echo " server_name ${MATRIX_DOMAIN_NAME};";
  146. echo '';
  147. echo ' # Security'; } >> $matrix_nginx_site
  148. function_check nginx_ssl
  149. nginx_ssl ${MATRIX_DOMAIN_NAME}
  150. function_check nginx_disable_sniffing
  151. nginx_disable_sniffing ${MATRIX_DOMAIN_NAME}
  152. { echo ' add_header Strict-Transport-Security max-age=15768000;';
  153. echo '';
  154. echo ' # Logs';
  155. echo ' access_log /dev/null;';
  156. echo ' error_log /dev/null;';
  157. echo '';
  158. echo ' root /var/lib/matrix/media_store;';
  159. echo '';
  160. echo ' # Index';
  161. echo ' index index.html;';
  162. echo '';
  163. echo ' # Location';
  164. echo ' location /_matrix {'; } >> $matrix_nginx_site
  165. function_check nginx_limits
  166. nginx_limits ${MATRIX_DOMAIN_NAME} '15m'
  167. { echo " proxy_pass http://localhost:${MATRIX_PORT};";
  168. echo ' }';
  169. echo '}';
  170. echo ''; } >> $matrix_nginx_site
  171. else
  172. echo -n '' > $matrix_nginx_site
  173. fi
  174. { echo 'server {';
  175. echo " listen 127.0.0.1:$MATRIX_FEDERATION_ONION_PORT default_server;";
  176. echo " server_name $MATRIX_DOMAIN_NAME;";
  177. echo ''; } >> $matrix_nginx_site
  178. function_check nginx_disable_sniffing
  179. nginx_disable_sniffing $MATRIX_DOMAIN_NAME
  180. { echo '';
  181. echo ' # Logs';
  182. echo ' access_log /dev/null;';
  183. echo ' error_log /dev/null;';
  184. echo '';
  185. echo ' root /var/lib/matrix/media_store;';
  186. echo '';
  187. echo ' # Location';
  188. echo ' location /_matrix {'; } >> $matrix_nginx_site
  189. function_check nginx_limits
  190. nginx_limits ${MATRIX_DOMAIN_NAME} '15m'
  191. { echo " proxy_pass http://localhost:${MATRIX_PORT};";
  192. echo ' }';
  193. echo '}';
  194. echo '';
  195. echo 'server {';
  196. echo " listen 127.0.0.1:$MATRIX_ONION_PORT default_server;";
  197. echo " server_name $MATRIX_DOMAIN_NAME;";
  198. echo ''; } >> $matrix_nginx_site
  199. function_check nginx_disable_sniffing
  200. nginx_disable_sniffing $MATRIX_DOMAIN_NAME
  201. { echo '';
  202. echo ' # Logs';
  203. echo ' access_log /dev/null;';
  204. echo ' error_log /dev/null;';
  205. echo '';
  206. echo ' root /var/lib/matrix/media_store;';
  207. echo '';
  208. echo ' # Location';
  209. echo ' location /_matrix {'; } >> $matrix_nginx_site
  210. function_check nginx_limits
  211. nginx_limits ${MATRIX_DOMAIN_NAME} '15m'
  212. { echo " proxy_pass http://localhost:${MATRIX_PORT};";
  213. echo ' }';
  214. echo '}'; } >> $matrix_nginx_site
  215. if [ ! -d /var/www/$MATRIX_DOMAIN_NAME ]; then
  216. mkdir -p /var/www/$MATRIX_DOMAIN_NAME/htdocs
  217. fi
  218. function_check add_ddns_domain
  219. add_ddns_domain $MATRIX_DOMAIN_NAME
  220. }
  221. function matrix_generate_homeserver_file {
  222. local filepath="${1}"
  223. cd /etc/matrix || exit 468246824
  224. python -m synapse.app.homeserver \
  225. --config-path "${filepath}" \
  226. --generate-config \
  227. --report-stats ${REPORT_STATS} \
  228. --server-name ${MATRIX_DOMAIN_NAME}
  229. }
  230. function matrix_configure_homeserver_yaml {
  231. turnkey="${1}"
  232. filepath="${2}"
  233. ymltemp="$(mktemp)"
  234. awk -v TURNURIES="turn_uris: [\"turn:${MATRIX_DOMAIN_NAME}:${TURN_HTTP_PORT}?transport=udp\", \"turn:${DEFAULT_DOMAIN_NAME}:${TURN_HTTP_PORT}?transport=tcp\"]" \
  235. -v TURNSHAREDSECRET="turn_shared_secret: \"${turnkey}\"" \
  236. -v PIDFILE="pid_file: ${MATRIX_DATA_DIR}/homeserver.pid" \
  237. -v DATABASE="database: \"${MATRIX_DATA_DIR}/homeserver.db\"" \
  238. -v LOGFILE="log_file: \"/dev/null\"" \
  239. -v MEDIASTORE="media_store_path: \"${MATRIX_DATA_DIR}/media_store\"" \
  240. '{
  241. sub(/turn_shared_secret: "YOUR_SHARED_SECRET"/, TURNSHAREDSECRET);
  242. sub(/turn_uris: \[\]/, TURNURIES);
  243. sub(/pid_file: \/homeserver.pid/, PIDFILE);
  244. sub(/database: "\/homeserver.db"/, DATABASE);
  245. sub(/log_file: "\/homeserver.log"/, LOGFILE);
  246. sub(/media_store_path: "\/media_store"/, MEDIASTORE);
  247. print;
  248. }' "${filepath}" > "${ymltemp}"
  249. mv "${ymltemp}" "${filepath}"
  250. if [[ $ONION_ONLY == "no" ]]; then
  251. sed -i "s|tls_certificate_path:.*|tls_certificate_path: \"/etc/ssl/certs/${MATRIX_DOMAIN_NAME}.pem\"|g" "${filepath}"
  252. if ! grep -q '#tls_private_key_path' "${filepath}"; then
  253. sed -i 's|tls_private_key_path|#tls_private_key_path|g' "${filepath}"
  254. fi
  255. sed -i "s|tls_dh_params_path:.*|tls_dh_params_path: \"/etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam\"|g" "${filepath}"
  256. fi
  257. sed -i "s|${MATRIX_HTTP_PORT}|8449|g" "${filepath}"
  258. sed -i "s|8008|${MATRIX_PORT}|g" "${filepath}"
  259. sed -i 's|tls:.*|tls: False|g' "${filepath}"
  260. sed -i 's|no_tls: .*|no_tls: True|g' "${filepath}"
  261. sed -i ':a;N;$!ba;s/ tls: [^\n]*/ tls: False/2' "${filepath}"
  262. sed -i 's|enable_registration_captcha.*|enable_registration_captcha: False|g' "${filepath}"
  263. sed -i "s|database: \".*|database: \"${MATRIX_DATA_DIR}/homeserver.db\"|g" "${filepath}"
  264. sed -i "s|media_store_path:.*|media_store_path: \"${MATRIX_DATA_DIR}/media_store\"|g" "${filepath}"
  265. sed -i "s|pid_file:.*|pid_file: \"${MATRIX_DATA_DIR}/homeserver.pid\"|g" "${filepath}"
  266. sed -i "s|log_file:.*|log_file: \"/dev/null\"|g" "${filepath}"
  267. sed -i "s|log_config:|#log_config:|g" "${filepath}"
  268. sed -i 's|bind_address:.*|bind_address: 127.0.0.1|g' "${filepath}"
  269. sed -i "s|bind_addresses:.*|bind_addresses: ['127.0.0.1']|g" "${filepath}"
  270. sed -i 's|x_forwarded:.*|x_forwarded: false|g' "${filepath}"
  271. sed -i "s|server_name:.*|server_name: \"${MATRIX_DOMAIN_NAME}\"|g" "${filepath}"
  272. sed -i "/trusted_third_party_id_servers:/a - ${MATRIX_DOMAIN_NAME}" "${filepath}"
  273. sed -i "s|- ${MATRIX_DOMAIN_NAME}| - ${MATRIX_DOMAIN_NAME}|g" "${filepath}"
  274. sed -i "s|enable_registration:.*|enable_registration: False|g" "${filepath}"
  275. }
  276. function matrix_diff {
  277. DIFFPARAMS="${DIFFPARAMS:-Naur}"
  278. MATRIX_DOMAIN_NAME="${MATRIX_DOMAIN_NAME:-demo_server_name}"
  279. REPORT_STATS="${REPORT_STATS:-no_or_yes}"
  280. export MATRIX_DOMAIN_NAME REPORT_STATS
  281. matrix_generate_synapse_file "$INSTALL_DIR/homeserver.synapse.yaml"
  282. # shellcheck disable=SC2086
  283. diff -${DIFFPARAMS} "$INSTALL_DIR/homeserver.synapse.yaml" "${MATRIX_DATA_DIR}/homeserver.yaml"
  284. rm "$INSTALL_DIR/homeserver.synapse.yaml"
  285. }
  286. function matrix_generate {
  287. breakup="0"
  288. [[ -z "${MATRIX_DOMAIN_NAME}" ]] && echo "STOP! environment variable MATRIX_DOMAIN_NAME must be set" && breakup="1"
  289. [[ -z "${REPORT_STATS}" ]] && echo "STOP! environment variable REPORT_STATS must be set to 'no' or 'yes'" && breakup="1"
  290. [[ "${breakup}" == "1" ]] && exit 1
  291. [[ "${REPORT_STATS}" != "yes" ]] && [[ "${REPORT_STATS}" != "no" ]] && \
  292. echo "STOP! REPORT_STATS needs to be 'no' or 'yes'" && breakup="1"
  293. homeserver_config=${MATRIX_DATA_DIR}/homeserver.yaml
  294. if [ -f $homeserver_config ]; then
  295. rm $homeserver_config
  296. fi
  297. matrix_generate_homeserver_file $homeserver_config
  298. matrix_configure_homeserver_yaml "${turnkey}" $homeserver_config
  299. }
  300. function create_matrix_user_removal_script {
  301. read_config_param MY_USERNAME
  302. read_config_param MATRIX_DOMAIN_NAME
  303. matrix_remove_user=/usr/bin/matrix-remove-user
  304. { echo '#!/bin/bash';
  305. echo "cd $MATRIX_DATA_DIR";
  306. echo "remove_username=\$1";
  307. echo "ADMIN=\"@${MY_USERNAME}:$MATRIX_DOMAIN_NAME\"";
  308. echo 'BUSY="pragma busy_timeout=20000"';
  309. echo "BUFFER=\$(sqlite3 homeserver.db \"\$BUSY;select token from access_tokens where user_id like '\$ADMIN' order by id desc limit 1;\")";
  310. echo "TOKEN=\$(echo \$BUFFER|awk '{print \$2}')";
  311. echo 'set -x';
  312. echo "curl -X POST 'https://$MATRIX_DOMAIN_NAME/_matrix/client/r0/admin/deactivate/%40\$remove_username%3A$MATRIX_DOMAIN_NAME?access_token=\$TOKEN' --data '{}'"; } > $matrix_remove_user
  313. chmod +x $matrix_remove_user
  314. }
  315. function remove_user_matrix {
  316. remove_username="$1"
  317. create_matrix_user_removal_script
  318. "${PROJECT_NAME}-pass" -u "$remove_username" --rmapp matrix
  319. $matrix_remove_user "$remove_username"
  320. }
  321. function add_user_matrix {
  322. new_username="$1"
  323. new_user_password="$2"
  324. read_config_param MY_USERNAME
  325. read_config_param MATRIX_DOMAIN_NAME
  326. "${PROJECT_NAME}-pass" -u "$new_username" -a matrix -p "$new_user_password"
  327. if [[ "$new_username" != "$MY_USERNAME" ]]; then
  328. echo 'no' | register_new_matrix_user -c ${MATRIX_DATA_DIR}/homeserver.yaml -u "${new_username}" -p "${new_user_password}" http://localhost:${MATRIX_PORT}
  329. else
  330. echo 'yes' | register_new_matrix_user -c ${MATRIX_DATA_DIR}/homeserver.yaml -u "${new_username}" -p "${new_user_password}" -a http://localhost:${MATRIX_PORT}
  331. fi
  332. echo "0"
  333. }
  334. function install_interactive_matrix {
  335. if [ ! "$ONION_ONLY" ]; then
  336. ONION_ONLY='no'
  337. fi
  338. if [[ $ONION_ONLY != "no" ]]; then
  339. MATRIX_DOMAIN_NAME='matrix.local'
  340. write_config_param "MATRIX_DOMAIN_NAME" "$MATRIX_DOMAIN_NAME"
  341. else
  342. function_check interactive_site_details
  343. interactive_site_details "matrix" "MATRIX_DOMAIN_NAME" "MATRIX_CODE"
  344. if [ ! $MATRIX_DOMAIN_NAME ]; then
  345. return
  346. fi
  347. read_config_param "MATRIX_DOMAIN_NAME"
  348. read_config_param "MATRIX_CODE"
  349. fi
  350. APP_INSTALLED=1
  351. }
  352. function change_password_matrix {
  353. #curr_username="$1"
  354. new_user_password="$2"
  355. #${PROJECT_NAME}-pass -u "$curr_username" -a matrix -p "$new_user_password"
  356. }
  357. function reconfigure_matrix {
  358. echo -n ''
  359. }
  360. function upgrade_matrix {
  361. if [ ! -d /etc/matrix ]; then
  362. return
  363. fi
  364. CURR_MATRIX_COMMIT=$(get_completion_param "matrix commit")
  365. if [[ "$CURR_MATRIX_COMMIT" == "$MATRIX_COMMIT" ]]; then
  366. return
  367. fi
  368. systemctl stop turn
  369. systemctl stop matrix
  370. function_check set_repo_commit
  371. set_repo_commit /etc/matrix "matrix commit" "$MATRIX_COMMIT" $MATRIX_REPO
  372. cd /etc/matrix || exit 62476724
  373. pip install --upgrade --process-dependency-links .
  374. sed -i 's/ssl.PROTOCOL_SSLv23/ssl.PROTOCOL_TLSv1/g' /usr/local/bin/register_new_matrix_user
  375. chown -R matrix:matrix /etc/matrix
  376. chown -R matrix:matrix $MATRIX_DATA_DIR
  377. pip install --upgrade --force "pynacl==0.3.0"
  378. pip install --upgrade --force "phonenumbers>=8.2.0"
  379. if [ -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam ]; then
  380. chmod 755 /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam
  381. fi
  382. systemctl start turn
  383. systemctl start matrix
  384. }
  385. function backup_local_matrix {
  386. source_directory=/etc/matrix
  387. if [ -d $source_directory ]; then
  388. systemctl stop turn
  389. systemctl stop matrix
  390. function_check backup_directory_to_usb
  391. backup_directory_to_usb $source_directory matrix
  392. source_directory=$MATRIX_DATA_DIR
  393. if [ -d $source_directory ]; then
  394. backup_directory_to_usb $source_directory matrixdata
  395. fi
  396. systemctl start turn
  397. systemctl start matrix
  398. fi
  399. }
  400. function restore_local_matrix {
  401. if [ -d /etc/matrix ]; then
  402. systemctl stop turn
  403. systemctl stop matrix
  404. temp_restore_dir=/root/tempmatrix
  405. function_check restore_directory_from_usb
  406. restore_directory_from_usb $temp_restore_dir matrix
  407. if [ -d $temp_restore_dir/etc/matrix ]; then
  408. cp -r $temp_restore_dir/etc/matrix/* /etc/matrix
  409. else
  410. cp -r $temp_restore_dir/* /etc/matrix/
  411. fi
  412. # shellcheck disable=SC2181
  413. if [ ! "$?" = "0" ]; then
  414. function_check backup_unmount_drive
  415. backup_unmount_drive
  416. exit 3783
  417. fi
  418. rm -rf $temp_restore_dir
  419. chown -R matrix:matrix /etc/matrix
  420. temp_restore_dir=/root/tempmatrixdata
  421. restore_directory_from_usb $temp_restore_dir matrixdata
  422. if [ -d $temp_restore_dir$MATRIX_DATA_DIR ]; then
  423. cp -r $temp_restore_dir$MATRIX_DATA_DIR/* $MATRIX_DATA_DIR
  424. else
  425. cp -r $temp_restore_dir/* $MATRIX_DATA_DIR/
  426. fi
  427. # shellcheck disable=SC2181
  428. if [ ! "$?" = "0" ]; then
  429. function_check backup_unmount_drive
  430. backup_unmount_drive
  431. exit 78352
  432. fi
  433. rm -rf $temp_restore_dir
  434. chown -R matrix:matrix $MATRIX_DATA_DIR
  435. if [[ "$ONION_ONLY" == "no" ]]; then
  436. if [ -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam ]; then
  437. chmod 755 /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam
  438. fi
  439. fi
  440. systemctl start turn
  441. systemctl start matrix
  442. fi
  443. }
  444. function backup_remote_matrix {
  445. source_directory=/etc/matrix
  446. if [ -d $source_directory ]; then
  447. systemctl stop turn
  448. systemctl stop matrix
  449. function_check backup_directory_to_friend
  450. backup_directory_to_friend $source_directory matrix
  451. source_directory=$MATRIX_DATA_DIR
  452. if [ -d $source_directory ]; then
  453. backup_directory_to_friend $source_directory matrixdata
  454. fi
  455. systemctl start turn
  456. systemctl start matrix
  457. fi
  458. }
  459. function restore_remote_matrix {
  460. if [ -d /etc/matrix ]; then
  461. systemctl stop turn
  462. systemctl stop matrix
  463. temp_restore_dir=/root/tempmatrix
  464. function_check restore_directory_from_friend
  465. restore_directory_from_friend $temp_restore_dir matrix
  466. if [ -d $temp_restore_dir/etc/matrix ]; then
  467. cp -r $temp_restore_dir/etc/matrix/* /etc/matrix
  468. else
  469. cp -r $temp_restore_dir/* /etc/matrix/
  470. fi
  471. # shellcheck disable=SC2181
  472. if [ ! "$?" = "0" ]; then
  473. exit 38935
  474. fi
  475. rm -rf $temp_restore_dir
  476. chown -R matrix:matrix /etc/matrix
  477. temp_restore_dir=/root/tempmatrixdata
  478. restore_directory_from_friend $temp_restore_dir matrixdata
  479. if [ -d $temp_restore_dir$MATRIX_DATA_DIR ]; then
  480. cp -r $temp_restore_dir$MATRIX_DATA_DIR/* $MATRIX_DATA_DIR
  481. else
  482. cp -r $temp_restore_dir/* $MATRIX_DATA_DIR/
  483. fi
  484. # shellcheck disable=SC2181
  485. if [ ! "$?" = "0" ]; then
  486. exit 60923
  487. fi
  488. rm -rf $temp_restore_dir
  489. chown -R matrix:matrix $MATRIX_DATA_DIR
  490. systemctl start turn
  491. systemctl start matrix
  492. fi
  493. }
  494. function remove_matrix {
  495. firewall_remove ${MATRIX_HTTP_PORT}
  496. nginx_dissite $MATRIX_DOMAIN_NAME
  497. remove_certs $MATRIX_DOMAIN_NAME
  498. if [ -f /etc/nginx/sites-available/$MATRIX_DOMAIN_NAME ]; then
  499. rm /etc/nginx/sites-available/$MATRIX_DOMAIN_NAME
  500. fi
  501. if [ ! -d /var/www/$MATRIX_DOMAIN_NAME ]; then
  502. rm -rf /var/www/$MATRIX_DOMAIN_NAME
  503. fi
  504. function_check remove_ddns_domain
  505. remove_ddns_domain $MATRIX_DOMAIN_NAME
  506. systemctl stop matrix
  507. function_check remove_turn
  508. remove_turn
  509. systemctl disable matrix
  510. if [ -f /etc/systemd/system/matrix.service ]; then
  511. rm /etc/systemd/system/matrix.service
  512. fi
  513. systemctl daemon-reload
  514. apt-get -y remove --purge coturn
  515. cd /etc/matrix || exit 26472462
  516. pip uninstall .
  517. rm -rf $MATRIX_DATA_DIR
  518. rm -rf /etc/matrix
  519. groupdel -f matrix
  520. userdel -r matrix
  521. remove_onion_service matrix ${MATRIX_ONION_PORT}
  522. remove_onion_service matrix ${MATRIX_FEDERATION_ONION_PORT}
  523. #sed -i "/# Matrix Server/,/# End of Matrix Server/d" /etc/nginx/sites-available/${MATRIX_DOMAIN_NAME}
  524. systemctl restart nginx
  525. remove_completion_param install_matrix
  526. sed -i '/matrix/d' "$COMPLETION_FILE"
  527. rm /etc/avahi/services/matrix.service
  528. systemctl restart avahi-daemon
  529. }
  530. function install_home_server {
  531. if [ ! -d /etc/matrix ]; then
  532. if [ -d /repos/matrix ]; then
  533. mkdir /etc/matrix
  534. cp -r -p /repos/matrix/. /etc/matrix
  535. cd /etc/matrix || exit 2324962946
  536. git pull
  537. else
  538. function_check git_clone
  539. git_clone $MATRIX_REPO /etc/matrix
  540. fi
  541. if [ ! -d /etc/matrix ]; then
  542. echo $'Unable to clone matrix repo'
  543. exit 6724683
  544. fi
  545. fi
  546. cd /etc/matrix || exit 7385452724
  547. git checkout $MATRIX_COMMIT -b $MATRIX_COMMIT
  548. set_completion_param "matrix commit" "$MATRIX_COMMIT"
  549. if [ ! -d "$INSTALL_DIR/matrix" ]; then
  550. mkdir -p "$INSTALL_DIR/matrix"
  551. fi
  552. rm -rf /usr/local/lib/python2.7/dist-packages/ldap*
  553. if [ -d "$INSTALL_DIR/matrix" ]; then
  554. rm -rf "$INSTALL_DIR/matrix/*"
  555. fi
  556. if ! pip install --upgrade --process-dependency-links . -b "$INSTALL_DIR/matrix"; then
  557. echo $'Failed to install matrix home server'
  558. exit 782542
  559. fi
  560. if [ ! -d $MATRIX_DATA_DIR ]; then
  561. mkdir $MATRIX_DATA_DIR
  562. fi
  563. groupadd matrix
  564. useradd -c "Matrix system account" -d $MATRIX_DATA_DIR -m -r -g matrix matrix
  565. usermod -a -G www-data matrix
  566. usermod -a -G ssl-cert matrix
  567. function_check install_turn
  568. install_turn
  569. MATRIX_SECRET="${turnkey}"
  570. function_check matrix_generate
  571. matrix_generate
  572. # Disable the web client
  573. sed -i 's|web_client:.*|web_client: False|g' $MATRIX_DATA_DIR/homeserver.yaml
  574. sed -i 's|, webclient||g' $MATRIX_DATA_DIR/homeserver.yaml
  575. sed -i "/- '0.0.0.0'/d" $MATRIX_DATA_DIR/homeserver.yaml
  576. chmod -R 700 $MATRIX_DATA_DIR/homeserver.yaml
  577. chown -R matrix:matrix /etc/matrix
  578. chown -R matrix:matrix $MATRIX_DATA_DIR
  579. sed -i 's/ssl.PROTOCOL_SSLv23/ssl.PROTOCOL_TLSv1/g' /usr/local/bin/register_new_matrix_user
  580. { echo '[Unit]';
  581. echo 'Description=Synapse Matrix homeserver';
  582. echo 'After=network.target nginx.target';
  583. echo '';
  584. echo '[Service]';
  585. echo 'Type=simple';
  586. echo 'User=matrix';
  587. echo "WorkingDirectory=/etc/matrix";
  588. echo "ExecStart=/usr/bin/python -m synapse.app.homeserver --config-path ${MATRIX_DATA_DIR}/homeserver.yaml";
  589. echo 'Restart=on-failure';
  590. echo 'RestartSec=10';
  591. echo '';
  592. echo '[Install]';
  593. echo 'WantedBy=multi-user.target'; } > /etc/systemd/system/matrix.service
  594. systemctl enable matrix
  595. systemctl daemon-reload
  596. systemctl start matrix
  597. # wait for the database to be created
  598. sleep 5
  599. if [ ! -f $MATRIX_DATA_DIR/homeserver.db ]; then
  600. # On low power systems more sleeping may be needed
  601. sleep 10
  602. if [ ! -f $MATRIX_DATA_DIR/homeserver.db ]; then
  603. echo $'No matrix home server database was created'
  604. exit 23782
  605. fi
  606. fi
  607. chmod -R 700 $MATRIX_DATA_DIR/homeserver.db
  608. cd "$MATRIX_DATA_DIR" || exit 365856835
  609. sqlite3 homeserver.db "PRAGMA auto_vacuum = FULL;"
  610. #MATRIX_ONION_HOSTNAME=$(add_onion_service matrix ${MATRIX_PORT} ${MATRIX_ONION_PORT})
  611. add_onion_service matrix ${MATRIX_PORT} ${MATRIX_ONION_PORT}
  612. echo "HiddenServicePort ${MATRIX_HTTP_PORT} 127.0.0.1:${MATRIX_FEDERATION_ONION_PORT}" >> /etc/tor/torrc
  613. systemctl restart tor
  614. if [ ! "${MATRIX_PASSWORD}" ]; then
  615. if [ -f "${IMAGE_PASSWORD_FILE}" ]; then
  616. MATRIX_PASSWORD="$(printf "%s" "$(cat "$IMAGE_PASSWORD_FILE")")"
  617. else
  618. MATRIX_PASSWORD="$(create_password "${MINIMUM_PASSWORD_LENGTH}")"
  619. fi
  620. fi
  621. firewall_add matrix ${MATRIX_HTTP_PORT}
  622. rm -rf ${MATRIX_DATA_DIR}/Maildir
  623. rm -rf ${MATRIX_DATA_DIR}/.mutt
  624. rm -f ${MATRIX_DATA_DIR}/.muttrc
  625. rm -f ${MATRIX_DATA_DIR}/.mutt-alias
  626. rm -f ${MATRIX_DATA_DIR}/.procmailrc
  627. rm -f ${MATRIX_DATA_DIR}/.emacs-mutt
  628. }
  629. function install_matrix {
  630. if [[ $ONION_ONLY != 'no' ]]; then
  631. return
  632. fi
  633. check_ram_availability 1500
  634. if [ ! -d "$INSTALL_DIR" ]; then
  635. mkdir -p "$INSTALL_DIR"
  636. fi
  637. if [[ ${ONION_ONLY} == 'no' ]]; then
  638. if [ ! -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.pem ]; then
  639. if [ -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.crt ]; then
  640. rm /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.crt
  641. fi
  642. if [ -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam ]; then
  643. rm /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam
  644. fi
  645. echo $'Obtaining certificate for the matrix domain'
  646. function_check create_site_certificate
  647. create_site_certificate ${MATRIX_DOMAIN_NAME} 'yes'
  648. chmod 755 /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam
  649. if [ -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.crt ]; then
  650. echo $'Incorrect certificate generated'
  651. exit 73572
  652. fi
  653. fi
  654. chgrp -R ssl-cert /etc/letsencrypt
  655. chmod -R g=rX /etc/letsencrypt
  656. fi
  657. export DEBIAN_FRONTEND=noninteractive
  658. apt-get -yq install coreutils \
  659. curl file gcc git libevent-2.0-5 \
  660. libevent-dev libffi-dev libffi6 \
  661. libgnutls28-dev libjpeg62-turbo \
  662. libjpeg62-turbo-dev libldap-2.4-2 \
  663. libldap2-dev libsasl2-dev \
  664. libsqlite3-dev libssl-dev \
  665. libssl1.1 libtool libxml2 \
  666. libxml2-dev libxslt1-dev libxslt1.1 \
  667. make python python-dev \
  668. python-pip python-psycopg2 \
  669. python-virtualenv sqlite unzip \
  670. zlib1g zlib1g-dev
  671. pip install --upgrade pip
  672. pip install --upgrade python-ldap
  673. pip install --upgrade lxml
  674. pip install --upgrade --force "phonenumbers>=8.2.0"
  675. function_check matrix_nginx
  676. matrix_nginx
  677. function_check install_home_server
  678. install_home_server
  679. systemctl restart nginx
  680. systemctl restart turn
  681. systemctl restart matrix
  682. function_check update_default_domain
  683. update_default_domain
  684. # wait for nginx to start otherwise user add fails later
  685. sleep 5
  686. pip install --upgrade --force "pynacl==0.3.0"
  687. if [[ $(add_user_matrix "${MY_USERNAME}" "${MATRIX_PASSWORD}" | tail -n 1) != "0" ]]; then
  688. echo $'Failed to add matrix admin user';
  689. exit 879352
  690. fi
  691. create_matrix_user_removal_script
  692. set_completion_param "matrix domain" "$MATRIX_DOMAIN_NAME"
  693. # Add avahi services
  694. { echo '<?xml version="1.0" standalone="no"?><!--*-nxml-*-->';
  695. echo '<!DOCTYPE service-group SYSTEM "avahi-service.dtd">';
  696. echo '<service-group>';
  697. echo ' <name replace-wildcards="yes">%h MATRIX</name>';
  698. echo ' <service>';
  699. echo ' <type>_matrix._tcp</type>';
  700. echo " <port>$MATRIX_HTTP_PORT</port>";
  701. echo ' </service>';
  702. echo ' <service>';
  703. echo ' <type>_matrix._udp</type>';
  704. echo " <port>$MATRIX_HTTP_PORT</port>";
  705. echo ' </service>';
  706. echo '</service-group>'; } > /etc/avahi/services/matrix.service
  707. systemctl restart avahi-daemon
  708. APP_INSTALLED=1
  709. }