freedombone-app-webmail 10.0KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # Webmail application
  12. #
  13. # License
  14. # =======
  15. #
  16. # Copyright (C) 2014-2016 Bob Mottram <bob@freedombone.net>
  17. #
  18. # This program is free software: you can redistribute it and/or modify
  19. # it under the terms of the GNU Affero General Public License as published by
  20. # the Free Software Foundation, either version 3 of the License, or
  21. # (at your option) any later version.
  22. #
  23. # This program is distributed in the hope that it will be useful,
  24. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  25. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  26. # GNU Affero General Public License for more details.
  27. #
  28. # You should have received a copy of the GNU Affero General Public License
  29. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  30. VARIANTS=''
  31. IN_DEFAULT_INSTALL=0
  32. WEBMAIL_REPO="https://github.com/roundcube/roundcubemail"
  33. WEBMAIL_COMMIT='78cf9c2e5cff2d78cd8beb647d60570f195a2a9c'
  34. WEBMAIL_ONION_HOSTNAME=
  35. WEBMAIL_ONION_PORT=8097
  36. WEBMAIL_ADMIN_PASSWORD=
  37. WEB_PATH=/var/www
  38. WEBMAIL_PATH=$WEB_PATH/webmail
  39. webmail_variables=(WEBMAIL_REPO
  40. WEBMAIL_COMMIT
  41. MY_USERNAME
  42. ONION_ONLY
  43. DEFAULT_DOMAIN_NAME)
  44. function install_interactive_webmail {
  45. echo -n ''
  46. APP_INSTALLED=1
  47. }
  48. function change_password_webmail {
  49. echo -n ''
  50. }
  51. function get_mariadb_webmail_admin_password {
  52. if [ -f /home/$MY_USERNAME/README ]; then
  53. if grep -q "MariaDB webmail admin password" /home/$MY_USERNAME/README; then
  54. WEBMAIL_ADMIN_PASSWORD=$(cat /home/$MY_USERNAME/README | grep "MariaDB webmail admin password" | awk -F ':' '{print $2}' | sed 's/^ *//')
  55. fi
  56. fi
  57. }
  58. function webmail_create_database {
  59. function_check get_mariadb_webmail_admin_password
  60. get_mariadb_webmail_admin_password
  61. if [ ! $WEBMAIL_ADMIN_PASSWORD ]; then
  62. if [ -f $IMAGE_PASSWORD_FILE ]; then
  63. WEBMAIL_ADMIN_PASSWORD="$(printf `cat $IMAGE_PASSWORD_FILE`)"
  64. else
  65. WEBMAIL_ADMIN_PASSWORD="$(create_password ${MINIMUM_PASSWORD_LENGTH})"
  66. fi
  67. fi
  68. if [ ! $WEBMAIL_ADMIN_PASSWORD ]; then
  69. return
  70. fi
  71. function_check create_database
  72. create_database webmail "$WEBMAIL_ADMIN_PASSWORD"
  73. }
  74. function reconfigure_webmail {
  75. echo -n ''
  76. }
  77. function upgrade_webmail {
  78. function_check set_repo_commit
  79. set_repo_commit $WEBMAIL_PATH "webmail commit" "$WEBMAIL_COMMIT" $WEBMAIL_REPO
  80. }
  81. function backup_local_webmail {
  82. if ! grep -q "install_webmail" $COMPLETION_FILE; then
  83. return
  84. fi
  85. echo $"Backing up webmail"
  86. function_check backup_database_to_usb
  87. backup_database_to_usb webmail
  88. echo $"Backing up webmail complete"
  89. }
  90. function restore_local_webmail {
  91. if ! grep -q "install_webmail" $COMPLETION_FILE; then
  92. return
  93. fi
  94. echo $"Restoring webmail"
  95. function_check webmail_create_database
  96. webmail_create_database
  97. function_check restore_database
  98. restore_database webmail
  99. echo $"Restore of webmail complete"
  100. }
  101. function backup_remote_webmail {
  102. echo -n ''
  103. }
  104. function restore_remote_webmail {
  105. echo -n ''
  106. }
  107. function remove_webmail {
  108. nginx_dissite webmail
  109. if [ -f /etc/nginx/sites-available/webmail ]; then
  110. rm /etc/nginx/sites-available/webmail
  111. fi
  112. function_check remove_onion_service
  113. remove_onion_service webmail ${WEBMAIL_ONION_PORT}
  114. function_check drop_database
  115. drop_database webmail
  116. if [ -d $WEB_PATH/webmail ]; then
  117. rm -rf $WEB_PATH/webmail
  118. fi
  119. sed -i '/Webmail/d' $COMPLETION_FILE
  120. sed -i '/webmail/d' $COMPLETION_FILE
  121. sed -i '/Webmail/d' /home/$MY_USERNAME/README
  122. sed -i '/webmail/d' /home/$MY_USERNAME/README
  123. remove_completion_param install_webmail
  124. }
  125. function install_webmail {
  126. if [ -d /etc/apache2 ]; then
  127. rm -rf /etc/apache2
  128. echo $'Removed Apache installation after Dokuwiki install'
  129. fi
  130. function_check install_mariadb
  131. install_mariadb
  132. function_check get_mariadb_password
  133. get_mariadb_password
  134. function_check repair_databases_script
  135. repair_databases_script
  136. apt-get -yq install php5-common php5-cli php5-curl php5-gd php5-mysql php5-mcrypt git
  137. apt-get -yq install php5-dev imagemagick php5-imagick php5-sqlite php-auth-sasl php-net-smtp php-mime-type
  138. apt-get -yq install php-mail-mime php-mail-mimedecode php-net-ldap3 php5-pspell
  139. pear install Net_IDNA2
  140. if [ ! -f $WEBMAIL_PATH/index.php ]; then
  141. cd $WEB_PATH
  142. git_clone $WEBMAIL_REPO webmail
  143. cd $WEBMAIL_PATH
  144. git checkout $WEBMAIL_COMMIT -b $WEBMAIL_COMMIT
  145. set_completion_param "webmail commit" "$WEBMAIL_COMMIT"
  146. fi
  147. if [ ! -f $WEBMAIL_PATH/index.php ]; then
  148. echo $'Did not clone webmail repo'
  149. exit 52825
  150. fi
  151. WEBMAIL_ONION_HOSTNAME=$(add_onion_service webmail 80 ${WEBMAIL_ONION_PORT})
  152. webmail_create_database
  153. mysql -u root --password="$MARIADB_PASSWORD" -D webmail < $WEBMAIL_PATH/SQL/mysql.initial.sql
  154. if [ ! -d /var/www/$DEFAULT_DOMAIN_NAME/htdocs ]; then
  155. mkdir -p /var/www/$DEFAULT_DOMAIN_NAME/htdocs
  156. fi
  157. ln -s $WEBMAIL_PATH /var/www/$DEFAULT_DOMAIN_NAME/htdocs/webmail
  158. if [ ! -f /var/www/webmail/config/config.inc.php ]; then
  159. # generate the configuration
  160. echo '<?php' > /var/www/webmail/config/config.inc.php
  161. echo "\$config['db_dsnw'] = 'mysql://root:${MARIADB_PASSWORD}@localhost/webmail';" >> /var/www/webmail/config/config.inc.php
  162. echo "\$config['default_host'] = 'localhost';" >> /var/www/webmail/config/config.inc.php
  163. echo "\$config['support_url'] = '';" >> /var/www/webmail/config/config.inc.php
  164. WEBMAIL_DES_KEY="$(create_password 25)"
  165. echo "\$config['des_key'] = '${WEBMAIL_DES_KEY}';" >> /var/www/webmail/config/config.inc.php
  166. echo "\$config['product_name'] = '${PROJECT_NAME}';" >> /var/www/webmail/config/config.inc.php
  167. echo "\$config['plugins'] = array('enigma');" >> /var/www/webmail/config/config.inc.php
  168. echo "\$config['mime_param_folding'] = 0;" >> /var/www/webmail/config/config.inc.php
  169. echo "\$config['enable_installer'] = false;" >> /var/www/webmail/config/config.inc.php
  170. fi
  171. chown -R www-data:www-data $WEBMAIL_PATH
  172. echo 'server {' > /etc/nginx/sites-available/webmail
  173. echo " listen 127.0.0.1:$WEBMAIL_ONION_PORT default_server;" >> /etc/nginx/sites-available/webmail
  174. echo " server_name $WEBMAIL_ONION_HOSTNAME;" >> /etc/nginx/sites-available/webmail
  175. echo " root ${WEBMAIL_PATH};" >> /etc/nginx/sites-available/webmail
  176. echo ' index index.php index.html index.htm;' >> /etc/nginx/sites-available/webmail
  177. echo ' access_log off;' >> /etc/nginx/sites-available/webmail
  178. echo ' error_log off;' >> /etc/nginx/sites-available/webmail
  179. echo ' location / {' >> /etc/nginx/sites-available/webmail
  180. echo ' try_files $uri $uri/ /index.php?q=$uri&$args;' >> /etc/nginx/sites-available/webmail
  181. echo ' }' >> /etc/nginx/sites-available/webmail
  182. echo ' error_page 404 /404.html;' >> /etc/nginx/sites-available/webmail
  183. echo ' error_page 500 502 503 504 /50x.html;' >> /etc/nginx/sites-available/webmail
  184. echo ' location = /50x.html {' >> /etc/nginx/sites-available/webmail
  185. echo " root ${WEBMAIL_PATH};" >> /etc/nginx/sites-available/webmail
  186. echo ' }' >> /etc/nginx/sites-available/webmail
  187. echo ' location ~ ^/(README.md|INSTALL|LICENSE|CHANGELOG|UPGRADING)$ {' >> /etc/nginx/sites-available/webmail
  188. echo ' deny all;' >> /etc/nginx/sites-available/webmail
  189. echo ' }' >> /etc/nginx/sites-available/webmail
  190. echo ' location ~ ^/(config|temp|logs)/ {' >> /etc/nginx/sites-available/webmail
  191. echo ' deny all;' >> /etc/nginx/sites-available/webmail
  192. echo ' }' >> /etc/nginx/sites-available/webmail
  193. echo ' location ~ /\. {' >> /etc/nginx/sites-available/webmail
  194. echo ' deny all;' >> /etc/nginx/sites-available/webmail
  195. echo ' access_log off;' >> /etc/nginx/sites-available/webmail
  196. echo ' log_not_found off;' >> /etc/nginx/sites-available/webmail
  197. echo ' }' >> /etc/nginx/sites-available/webmail
  198. echo ' location ~ \.php$ {' >> /etc/nginx/sites-available/webmail
  199. echo ' try_files $uri =404;' >> /etc/nginx/sites-available/webmail
  200. echo ' fastcgi_pass unix:/var/run/php5-fpm.sock;' >> /etc/nginx/sites-available/webmail
  201. echo ' fastcgi_index index.php;' >> /etc/nginx/sites-available/webmail
  202. echo ' fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;' >> /etc/nginx/sites-available/webmail
  203. echo ' include fastcgi_params;' >> /etc/nginx/sites-available/webmail
  204. echo ' }' >> /etc/nginx/sites-available/webmail
  205. echo ' add_header X-Frame-Options DENY;' >> /etc/nginx/sites-available/webmail
  206. echo ' add_header X-Content-Type-Options nosniff;' >> /etc/nginx/sites-available/webmail
  207. echo ' client_max_body_size 15m;' >> /etc/nginx/sites-available/webmail
  208. echo '}' >> /etc/nginx/sites-available/webmail
  209. nginx_ensite webmail
  210. systemctl restart php5-fpm
  211. systemctl restart nginx
  212. if ! grep -q "Webmail" /home/$MY_USERNAME/README; then
  213. echo '' >> /home/$MY_USERNAME/README
  214. echo '' >> /home/$MY_USERNAME/README
  215. echo '# Webmail' >> /home/$MY_USERNAME/README
  216. if [[ $ONION_ONLY == 'no' ]]; then
  217. echo $"To access webmail open https://$DEFAULT_DOMAIN_NAME/webmail/index.php" >> /home/$MY_USERNAME/README
  218. else
  219. echo $"To access webmail open http://$WEBMAIL_ONION_HOSTNAME" >> /home/$MY_USERNAME/README
  220. fi
  221. echo $"MariaDB webmail admin password: $WEBMAIL_ADMIN_PASSWORD" >> /home/$MY_USERNAME/README
  222. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  223. chmod 600 /home/$MY_USERNAME/README
  224. fi
  225. APP_INSTALLED=1
  226. }
  227. # NOTE: deliberately no exit 0