freedombone-app-movim 19KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586
  1. #!/bin/bash
  2. # _____ _ _
  3. # | __|___ ___ ___ _| |___ _____| |_ ___ ___ ___
  4. # | __| _| -_| -_| . | . | | . | . | | -_|
  5. # |__| |_| |___|___|___|___|_|_|_|___|___|_|_|___|
  6. #
  7. # Freedom in the Cloud
  8. #
  9. # movim application
  10. #
  11. # License
  12. # =======
  13. #
  14. # Copyright (C) 2017-2018 Bob Mottram <bob@freedombone.net>
  15. #
  16. # This program is free software: you can redistribute it and/or modify
  17. # it under the terms of the GNU Affero General Public License as published by
  18. # the Free Software Foundation, either version 3 of the License, or
  19. # (at your option) any later version.
  20. #
  21. # This program is distributed in the hope that it will be useful,
  22. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  23. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  24. # GNU Affero General Public License for more details.
  25. #
  26. # You should have received a copy of the GNU Affero General Public License
  27. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  28. VARIANTS=''
  29. IN_DEFAULT_INSTALL=0
  30. SHOW_ON_ABOUT=0
  31. MOVIM_DOMAIN_NAME=
  32. MOVIM_CODE=
  33. MOVIM_ONION_PORT=8117
  34. MOVIM_REPO="https://github.com/movim/movim"
  35. MOVIM_COMMIT='6142c2033b7695448516a67690324a3bde048260'
  36. MOVIM_ADMIN_PASSWORD=
  37. MOVIM_DAEMON_PORT=8880
  38. movim_variables=(ONION_ONLY
  39. MOVIM_DOMAIN_NAME
  40. MOVIM_CODE
  41. DDNS_PROVIDER
  42. MY_USERNAME)
  43. function logging_on_movim {
  44. echo -n ''
  45. }
  46. function logging_off_movim {
  47. echo -n ''
  48. }
  49. function remove_user_movim {
  50. remove_username="$1"
  51. "${PROJECT_NAME}-pass" -u "$remove_username" --rmapp movim
  52. }
  53. function add_user_movim {
  54. new_username="$1"
  55. new_user_password="$2"
  56. "${PROJECT_NAME}-pass" -u "$new_username" -a movim -p "$new_user_password"
  57. echo '0'
  58. }
  59. function install_interactive_movim {
  60. if [ ! "$ONION_ONLY" ]; then
  61. ONION_ONLY='no'
  62. fi
  63. if [[ $ONION_ONLY != "no" ]]; then
  64. MOVIM_DOMAIN_NAME='movim.local'
  65. else
  66. MOVIM_DETAILS_COMPLETE=
  67. while [ ! $MOVIM_DETAILS_COMPLETE ]
  68. do
  69. data=$(mktemp 2>/dev/null)
  70. if [[ $DDNS_PROVIDER == "default@freedns.afraid.org" ]]; then
  71. dialog --backtitle $"Freedombone Configuration" \
  72. --title $"Movim Configuration" \
  73. --form $"\\nPlease enter your Movim details.\\n\\nIMPORTANT: This should be a domain name which is supported by Let's Encrypt:" 12 65 2 \
  74. $"Domain:" 1 1 "$(grep 'MOVIM_DOMAIN_NAME' temp.cfg | awk -F '=' '{print $2}')" 1 25 33 40 \
  75. $"Code:" 2 1 "$(grep 'MOVIM_CODE' temp.cfg | awk -F '=' '{print $2}')" 2 25 33 255 \
  76. 2> "$data"
  77. else
  78. dialog --backtitle $"Freedombone Configuration" \
  79. --title $"Movim Configuration" \
  80. --form $"\\nPlease enter your Movim details.\\n\\nIMPORTANT: This should be a domain name which is supported by Let's Encrypt:" 12 65 2 \
  81. $"Domain:" 1 1 "$(grep 'MOVIM_DOMAIN_NAME' temp.cfg | awk -F '=' '{print $2}')" 1 25 33 40 \
  82. 2> "$data"
  83. fi
  84. sel=$?
  85. case $sel in
  86. 1) exit 1;;
  87. 255) exit 1;;
  88. esac
  89. MOVIM_DOMAIN_NAME=$(sed -n 1p < "$data")
  90. if [ "$MOVIM_DOMAIN_NAME" ]; then
  91. TEST_DOMAIN_NAME=$MOVIM_DOMAIN_NAME
  92. validate_domain_name
  93. if [[ "$TEST_DOMAIN_NAME" != "$MOVIM_DOMAIN_NAME" ]]; then
  94. MOVIM_DOMAIN_NAME=
  95. dialog --title $"Domain name validation" --msgbox "$TEST_DOMAIN_NAME" 15 50
  96. else
  97. if [[ $DDNS_PROVIDER == "default@freedns.afraid.org" ]]; then
  98. MOVIM_CODE=$(sed -n 2p < "$data")
  99. validate_freedns_code "$MOVIM_CODE"
  100. if [ ! "$VALID_CODE" ]; then
  101. MOVIM_DOMAIN_NAME=
  102. fi
  103. fi
  104. fi
  105. fi
  106. if [ $MOVIM_DOMAIN_NAME ]; then
  107. MOVIM_DETAILS_COMPLETE="yes"
  108. fi
  109. rm -f "$data"
  110. done
  111. # save the results in the config file
  112. write_config_param "MOVIM_CODE" "$MOVIM_CODE"
  113. fi
  114. write_config_param "MOVIM_DOMAIN_NAME" "$MOVIM_DOMAIN_NAME"
  115. APP_INSTALLED=1
  116. }
  117. function change_password_movim {
  118. curr_username="$1"
  119. new_user_password="$2"
  120. read_config_param 'MOVIM_DOMAIN_NAME'
  121. "${PROJECT_NAME}-pass" -u "$curr_username" -a movim -p "$new_user_password"
  122. }
  123. function movim_create_database {
  124. if [ -f "$IMAGE_PASSWORD_FILE" ]; then
  125. MOVIM_ADMIN_PASSWORD="$(printf "%s" "$(cat "$IMAGE_PASSWORD_FILE")")"
  126. else
  127. if [ ! "$MOVIM_ADMIN_PASSWORD" ]; then
  128. MOVIM_ADMIN_PASSWORD="$(create_password "${MINIMUM_PASSWORD_LENGTH}")"
  129. fi
  130. fi
  131. if [ ! "$MOVIM_ADMIN_PASSWORD" ]; then
  132. return
  133. fi
  134. function_check create_database
  135. create_database movim "$MOVIM_ADMIN_PASSWORD" "$MY_USERNAME"
  136. }
  137. function reconfigure_movim {
  138. echo -n ''
  139. }
  140. function upgrade_movim {
  141. CURR_MOVIM_COMMIT=$(get_completion_param "movim commit")
  142. if [[ "$CURR_MOVIM_COMMIT" == "$MOVIM_COMMIT" ]]; then
  143. return
  144. fi
  145. if grep -q "movim domain" "$COMPLETION_FILE"; then
  146. MOVIM_DOMAIN_NAME=$(get_completion_param "movim domain")
  147. fi
  148. # update to the next commit
  149. function_check set_repo_commit
  150. set_repo_commit "/var/www/$MOVIM_DOMAIN_NAME/htdocs" "movim commit" "$MOVIM_COMMIT" "$MOVIM_REPO"
  151. cd "/var/www/${MOVIM_DOMAIN_NAME}/htdocs" || exit 6734824522
  152. php composer.phar install
  153. php mud.php db --set
  154. chown -R www-data:www-data "/var/www/${MOVIM_DOMAIN_NAME}/htdocs"
  155. }
  156. function backup_local_movim {
  157. MOVIM_DOMAIN_NAME='movim'
  158. if grep -q "movim domain" "$COMPLETION_FILE"; then
  159. MOVIM_DOMAIN_NAME=$(get_completion_param "movim domain")
  160. fi
  161. source_directory="/var/www/${MOVIM_DOMAIN_NAME}/htdocs"
  162. if [ -d "$source_directory" ]; then
  163. dest_directory=movim
  164. function_check suspend_site
  165. suspend_site "${MOVIM_DOMAIN_NAME}"
  166. function_check backup_directory_to_usb
  167. backup_directory_to_usb "$source_directory" "$dest_directory"
  168. function_check backup_database_to_usb
  169. backup_database_to_usb movim
  170. function_check restart_site
  171. restart_site
  172. fi
  173. }
  174. function restore_local_movim {
  175. if ! grep -q "movim domain" "$COMPLETION_FILE"; then
  176. return
  177. fi
  178. MOVIM_DOMAIN_NAME=$(get_completion_param "movim domain")
  179. if [ "$MOVIM_DOMAIN_NAME" ]; then
  180. echo $"Restoring movim"
  181. temp_restore_dir=/root/tempmovim
  182. movim_dir=/var/www/${MOVIM_DOMAIN_NAME}/htdocs
  183. # stop the daemons
  184. cd "$movim_dir" || exit 7856724252
  185. su -c "sh scripts/stopdaemons.sh" -s /bin/sh www-data
  186. function_check movim_create_database
  187. movim_create_database
  188. restore_database movim "${MOVIM_DOMAIN_NAME}"
  189. if [ -d $temp_restore_dir ]; then
  190. rm -rf $temp_restore_dir
  191. fi
  192. MARIADB_PASSWORD=$("${PROJECT_NAME}-pass" -u root -a mariadb)
  193. cd "/var/www/$MOVIM_DOMAIN_NAME/htdocs/config" || exit 2468724682
  194. sed -i "s|'password'.*|'password' => '$MARIADB_PASSWORD',|g" db.inc.php
  195. MARIADB_PASSWORD=
  196. echo $"Restore of movim complete"
  197. fi
  198. }
  199. function backup_remote_movim {
  200. if grep -q "movim domain" "$COMPLETION_FILE"; then
  201. MOVIM_DOMAIN_NAME=$(get_completion_param "movim domain")
  202. temp_backup_dir=/var/www/${MOVIM_DOMAIN_NAME}/htdocs
  203. if [ -d "$temp_backup_dir" ]; then
  204. function_check suspend_site
  205. suspend_site "${MOVIM_DOMAIN_NAME}"
  206. function_check backup_database_to_friend
  207. backup_database_to_friend movim
  208. function_check backup_directory_to_friend
  209. backup_directory_to_friend "$temp_backup_dir" movim
  210. function_check restart_site
  211. restart_site
  212. else
  213. echo $"movim domain specified but not found in ${temp_backup_dir}"
  214. fi
  215. fi
  216. }
  217. function restore_remote_movim {
  218. if grep -q "movim domain" "$COMPLETION_FILE"; then
  219. echo $"Restoring movim"
  220. MOVIM_DOMAIN_NAME=$(get_completion_param "movim domain")
  221. # stop the daemons
  222. cd "/var/www/${MOVIM_DOMAIN_NAME}/htdocs" || exit 524792846827
  223. su -c "sh scripts/stopdaemons.sh" -s /bin/sh www-data
  224. function_check movim_create_database
  225. movim_create_database
  226. function_check restore_database_from_friend
  227. restore_database_from_friend movim "${MOVIM_DOMAIN_NAME}"
  228. if [ -d /root/tempmovim ]; then
  229. rm -rf /root/tempmovim
  230. fi
  231. MARIADB_PASSWORD=$("${PROJECT_NAME}-pass" -u root -a mariadb)
  232. cd "/var/www/$MOVIM_DOMAIN_NAME/htdocs/config" || exit 4242462487
  233. sed -i "s|'password'.*|'password' => '$MARIADB_PASSWORD',|g" db.inc.php
  234. MARIADB_PASSWORD=
  235. echo $"Restore of movim complete"
  236. fi
  237. }
  238. function remove_movim {
  239. if [[ $(app_is_installed movim) == "0" ]]; then
  240. return
  241. fi
  242. read_config_param "MOVIM_DOMAIN_NAME"
  243. if [ ${#MOVIM_DOMAIN_NAME} -eq 0 ]; then
  244. return
  245. fi
  246. systemctl stop movim
  247. systemctl disable movim
  248. rm /etc/systemd/system/movim.service
  249. systemctl daemon-reload
  250. read_config_param "MY_USERNAME"
  251. echo "Removing $MOVIM_DOMAIN_NAME"
  252. nginx_dissite "$MOVIM_DOMAIN_NAME"
  253. remove_certs "$MOVIM_DOMAIN_NAME"
  254. if [ -d "/var/www/$MOVIM_DOMAIN_NAME" ]; then
  255. rm -rf "/var/www/$MOVIM_DOMAIN_NAME"
  256. fi
  257. if [ -f "/etc/nginx/sites-available/$MOVIM_DOMAIN_NAME" ]; then
  258. rm "/etc/nginx/sites-available/$MOVIM_DOMAIN_NAME"
  259. fi
  260. function_check drop_database
  261. drop_database movim
  262. function_check remove_onion_service
  263. remove_onion_service movim ${MOVIM_ONION_PORT}
  264. if grep -q "movim" /etc/crontab; then
  265. sed -i "/movim/d" /etc/crontab
  266. fi
  267. remove_app movim
  268. remove_completion_param install_movim
  269. sed -i '/movim/d' "$COMPLETION_FILE"
  270. remove_backup_database_local movim
  271. function_check remove_ddns_domain
  272. remove_ddns_domain "$MOVIM_DOMAIN_NAME"
  273. }
  274. function install_movim {
  275. if [ ! "$MOVIM_DOMAIN_NAME" ]; then
  276. echo $'No domain name was given for movim'
  277. exit 72572
  278. fi
  279. if [[ $(app_is_installed xmpp) == "0" ]]; then
  280. return
  281. fi
  282. movim_hourly_script movim "$MOVIM_DOMAIN_NAME"
  283. function_check install_mariadb
  284. install_mariadb
  285. function_check get_mariadb_password
  286. get_mariadb_password
  287. function_check repair_databases_script
  288. repair_databases_script
  289. apt-get -yq install php-gettext php-curl php-gd php-mysql git curl
  290. apt-get -yq install php-memcached php-intl exiftool php-imagick libfcgi0ldbl
  291. if [ ! -d "/var/www/$MOVIM_DOMAIN_NAME" ]; then
  292. mkdir "/var/www/$MOVIM_DOMAIN_NAME"
  293. fi
  294. if [ ! -d "/var/www/$MOVIM_DOMAIN_NAME/htdocs" ]; then
  295. if [ -d /repos/movim ]; then
  296. mkdir "/var/www/$MOVIM_DOMAIN_NAME/htdocs"
  297. cp -r -p /repos/movim/. "/var/www/$MOVIM_DOMAIN_NAME/htdocs"
  298. cd "/var/www/$MOVIM_DOMAIN_NAME/htdocs" || exit 3768568325
  299. git pull
  300. else
  301. function_check git_clone
  302. git_clone "$MOVIM_REPO" "/var/www/$MOVIM_DOMAIN_NAME/htdocs"
  303. fi
  304. if [ ! -d "/var/www/$MOVIM_DOMAIN_NAME/htdocs" ]; then
  305. echo $'Unable to clone movim repo'
  306. exit 76285
  307. fi
  308. fi
  309. cd "/var/www/$MOVIM_DOMAIN_NAME/htdocs" || exit 7345247242
  310. git checkout $MOVIM_COMMIT -b $MOVIM_COMMIT
  311. set_completion_param "movim commit" "$MOVIM_COMMIT"
  312. # default login
  313. if [ ! -f "/var/www/$MOVIM_DOMAIN_NAME/htdocs/app/models/config/Config.php" ]; then
  314. echo $'Unable to find Config.php'
  315. exit 72352
  316. fi
  317. sed -i "s|'admin'|'${MY_USERNAME}'|g" "/var/www/$MOVIM_DOMAIN_NAME/htdocs/app/models/config/Config.php"
  318. sed -i "s|'password'|'${MOVIM_ADMIN_PASSWORD}'|g" "/var/www/$MOVIM_DOMAIN_NAME/htdocs/app/models/config/Config.php"
  319. # Fix typo
  320. sed -i 's|weksocket|websocket|g' app/widgets/AdminTest/admintest.js
  321. cd "/var/www/$MOVIM_DOMAIN_NAME/htdocs" || exit 784368245224
  322. install_composer
  323. cd "/var/www/$MOVIM_DOMAIN_NAME/htdocs/config" || exit 6428764224
  324. cp db.example.inc.php db.inc.php
  325. sed -i "s|'username'.*|'username' => 'root',|g" db.inc.php
  326. sed -i "s|'password'.*|'password' => '$MARIADB_PASSWORD',|g" db.inc.php
  327. sed -i "s|'database'.*|'database' => 'movim'|g" db.inc.php
  328. php mud.php db --set
  329. chmod u+rwx "/var/www/$MOVIM_DOMAIN_NAME/htdocs"
  330. chown -R www-data:www-data "/var/www/$MOVIM_DOMAIN_NAME/htdocs"
  331. function_check movim_create_database
  332. movim_create_database
  333. function_check add_ddns_domain
  334. add_ddns_domain "$MOVIM_DOMAIN_NAME"
  335. MOVIM_ONION_HOSTNAME=$(add_onion_service movim 80 ${MOVIM_ONION_PORT})
  336. { echo '[Unit]';
  337. echo 'Description=Movim daemon';
  338. echo 'After=network.target nginx.target';
  339. echo '';
  340. echo '[Service]';
  341. echo 'Type=simple';
  342. echo 'User=www-data';
  343. echo "WorkingDirectory=/var/www/$MOVIM_DOMAIN_NAME/htdocs"; } > /etc/systemd/system/movim.service
  344. if [[ $ONION_ONLY == 'no' ]]; then
  345. echo "ExecStart=/usr/bin/php /var/www/$MOVIM_DOMAIN_NAME/htdocs/daemon.php start --url=https://$MOVIM_DOMAIN_NAME --port=$MOVIM_DAEMON_PORT" >> /etc/systemd/system/movim.service
  346. else
  347. echo "ExecStart=/usr/bin/php /var/www/$MOVIM_DOMAIN_NAME/htdocs/daemon.php start --url=http://$MOVIM_ONION_HOSTNAME --port=$MOVIM_DAEMON_PORT" >> /etc/systemd/system/movim.service
  348. fi
  349. { echo 'StandardOutput=syslog';
  350. echo 'SyslogIdentifier=movim';
  351. echo 'PIDFile=/run/movim.pid';
  352. echo 'Restart=on-failure';
  353. echo 'RestartSec=10';
  354. echo '';
  355. echo '[Install]';
  356. echo 'WantedBy=multi-user.target'; } >> /etc/systemd/system/movim.service
  357. systemctl enable movim
  358. systemctl daemon-reload
  359. movim_nginx_site=/etc/nginx/sites-available/$MOVIM_DOMAIN_NAME
  360. if [[ $ONION_ONLY == "no" ]]; then
  361. function_check nginx_http_redirect
  362. nginx_http_redirect "$MOVIM_DOMAIN_NAME" "index index.php"
  363. { echo 'server {';
  364. echo ' listen 443 ssl;';
  365. echo ' #listen [::]:443 ssl;';
  366. echo " server_name $MOVIM_DOMAIN_NAME;";
  367. echo ''; } >> "$movim_nginx_site"
  368. function_check nginx_compress
  369. nginx_compress "$MOVIM_DOMAIN_NAME"
  370. echo '' >> "$movim_nginx_site"
  371. echo ' # Security' >> "$movim_nginx_site"
  372. function_check nginx_ssl
  373. nginx_ssl "$MOVIM_DOMAIN_NAME"
  374. function_check nginx_security_options
  375. nginx_security_options "$MOVIM_DOMAIN_NAME"
  376. { echo ' add_header Strict-Transport-Security max-age=15768000;';
  377. echo '';
  378. echo ' # Logs';
  379. echo ' access_log /dev/null;';
  380. echo ' error_log /dev/null;';
  381. echo '';
  382. echo ' # Root';
  383. echo " root /var/www/$MOVIM_DOMAIN_NAME/htdocs;";
  384. echo '';
  385. echo ' # Index';
  386. echo ' index index.php;';
  387. echo '';
  388. echo ' # PHP';
  389. echo ' location ~ \.php {';
  390. echo ' include snippets/fastcgi-php.conf;';
  391. echo ' fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;';
  392. echo ' fastcgi_read_timeout 30;';
  393. echo ' }';
  394. echo '';
  395. echo ' # Location';
  396. echo ' location / {'; } >> "$movim_nginx_site"
  397. function_check nginx_limits
  398. nginx_limits "$MOVIM_DOMAIN_NAME" '15m'
  399. { echo " try_files \$uri \$uri/ @movim;";
  400. echo ' }';
  401. echo '';
  402. echo ' location /ws/ {';
  403. echo " proxy_pass http://localhost:${MOVIM_DAEMON_PORT}/;";
  404. echo ' proxy_http_version 1.1;';
  405. echo " proxy_set_header Upgrade \$http_upgrade;";
  406. echo ' proxy_set_header Connection "Upgrade";';
  407. echo " proxy_set_header Host \$host;";
  408. echo " proxy_set_header X-Real-IP \$remote_addr;";
  409. echo " proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;";
  410. echo ' proxy_set_header X-Forwarded-Proto https;';
  411. echo ' proxy_redirect off;';
  412. echo ' }';
  413. echo '';
  414. echo ' # Fancy URLs';
  415. echo ' location @movim {';
  416. echo " rewrite ^(.*)\$ /index.php?p=\$1 last;";
  417. echo ' }';
  418. echo '';
  419. echo ' # Restrict access that is unnecessary anyway';
  420. echo ' location ~ /\.(ht|git) {';
  421. echo ' deny all;';
  422. echo ' }';
  423. echo '';
  424. echo '}'; } >> "$movim_nginx_site"
  425. else
  426. echo -n '' > "$movim_nginx_site"
  427. fi
  428. { echo 'server {';
  429. echo " listen 127.0.0.1:$MOVIM_ONION_PORT default_server;";
  430. echo " server_name $MOVIM_DOMAIN_NAME;";
  431. echo ''; } >> "$movim_nginx_site"
  432. function_check nginx_compress
  433. nginx_compress "$MOVIM_DOMAIN_NAME"
  434. echo '' >> "$movim_nginx_site"
  435. function_check nginx_security_options
  436. nginx_security_options "$MOVIM_DOMAIN_NAME"
  437. { echo '';
  438. echo ' # Logs';
  439. echo ' access_log /dev/null;';
  440. echo ' error_log /dev/null;';
  441. echo '';
  442. echo ' # Root';
  443. echo " root /var/www/$MOVIM_DOMAIN_NAME/htdocs;";
  444. echo '';
  445. echo ' # Index';
  446. echo ' index index.php;';
  447. echo '';
  448. echo ' # PHP';
  449. echo ' location ~ \.php {';
  450. echo ' include snippets/fastcgi-php.conf;';
  451. echo ' fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;';
  452. echo ' fastcgi_read_timeout 30;';
  453. echo ' }';
  454. echo '';
  455. echo ' # Location';
  456. echo ' location / {'; } >> "$movim_nginx_site"
  457. function_check nginx_limits
  458. nginx_limits "$MOVIM_DOMAIN_NAME" '15m'
  459. { echo " try_files \$uri \$uri/ @movim;";
  460. echo ' }';
  461. echo '';
  462. echo ' location /ws/ {';
  463. echo " proxy_pass http://localhost:${MOVIM_DAEMON_PORT}/;";
  464. echo ' proxy_http_version 1.1;';
  465. echo " proxy_set_header Upgrade \$http_upgrade;";
  466. echo ' proxy_set_header Connection "Upgrade";';
  467. echo " proxy_set_header Host \$host;";
  468. echo " proxy_set_header X-Real-IP \$remote_addr;";
  469. echo " proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;";
  470. echo ' proxy_set_header X-Forwarded-Proto https;';
  471. echo ' proxy_redirect off;';
  472. echo ' }';
  473. echo '';
  474. echo ' # Fancy URLs';
  475. echo ' location @movim {';
  476. echo " rewrite ^(.*)\$ /index.php?p=\$1 last;";
  477. echo ' }';
  478. echo '';
  479. echo ' # Restrict access that is unnecessary anyway';
  480. echo ' location ~ /\.(ht|git) {';
  481. echo ' deny all;';
  482. echo ' }';
  483. echo '';
  484. echo '}'; } >> "$movim_nginx_site"
  485. function_check configure_php
  486. configure_php
  487. function_check create_site_certificate
  488. create_site_certificate "$MOVIM_DOMAIN_NAME" 'yes'
  489. # Ensure that the database gets backed up locally, if remote
  490. # backups are not being used
  491. function_check backup_databases_script_header
  492. backup_databases_script_header
  493. function_check backup_database_local
  494. backup_database_local movim
  495. function_check nginx_ensite
  496. nginx_ensite "$MOVIM_DOMAIN_NAME"
  497. "${PROJECT_NAME}-pass" -u "$MY_USERNAME" -a movim -p "$MOVIM_ADMIN_PASSWORD"
  498. set_completion_param "movim domain" "$MOVIM_DOMAIN_NAME"
  499. systemctl restart mariadb
  500. systemctl start movim
  501. systemctl restart php7.0-fpm
  502. systemctl restart nginx
  503. APP_INSTALLED=1
  504. }
  505. # NOTE: deliberately there is no "exit 0"