freedombone-app-rss 31KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # RSS reader application
  12. #
  13. # License
  14. # =======
  15. #
  16. # Copyright (C) 2014-2018 Bob Mottram <bob@freedombone.net>
  17. #
  18. # This program is free software: you can redistribute it and/or modify
  19. # it under the terms of the GNU Affero General Public License as published by
  20. # the Free Software Foundation, either version 3 of the License, or
  21. # (at your option) any later version.
  22. #
  23. # This program is distributed in the hope that it will be useful,
  24. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  25. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  26. # GNU Affero General Public License for more details.
  27. #
  28. # You should have received a copy of the GNU Affero General Public License
  29. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  30. VARIANTS='full full-vim writer'
  31. IN_DEFAULT_INSTALL=0
  32. SHOW_ON_ABOUT=1
  33. SHOW_ICANN_ADDRESS_ON_ABOUT=0
  34. RSS_READER_REPO="https://tt-rss.org/git/tt-rss.git"
  35. RSS_READER_COMMIT='9e84bab449f9ed55e02e60378b0af1521026f3b8'
  36. RSS_READER_ADMIN_PASSWORD=
  37. RSS_READER_ONION_PORT=8092
  38. RSS_MOBILE_READER_ONION_PORT=8095
  39. RSS_READER_DOMAIN_NAME=ttrss
  40. RSS_MOBILE_READER_REPO="https://github.com/mboinet/ttrss-mobile"
  41. RSS_MOBILE_READER_COMMIT='d5242e1c269e9480ab3b66b7a38da3c892dfb326'
  42. RSS_READER_PATH=/etc/share/tt-rss
  43. RSS_READER_GNUSOCIAL_REPO="https://github.com/bashrc/ttrss-gnusocial"
  44. RSS_READER_GNUSOCIAL_COMMIT='20b2535e3f2b0ddc0117b584bdcaa6bf7a2d9fa2'
  45. rss_variables=(RSS_READER_REPO
  46. RSS_MOBILE_READER_REPO
  47. RSS_READER_ADMIN_PASSWORD
  48. RSS_READER_DOMAIN_NAME
  49. USB_MOUNT
  50. MY_USERNAME)
  51. function logging_on_rss {
  52. echo -n ''
  53. }
  54. function logging_off_rss {
  55. echo -n ''
  56. }
  57. function remove_user_rss {
  58. remove_username="$1"
  59. }
  60. function add_user_rss {
  61. new_username="$1"
  62. new_user_password="$2"
  63. echo '0'
  64. }
  65. function install_interactive_rss {
  66. echo -n ''
  67. APP_INSTALLED=1
  68. }
  69. function change_password_rss {
  70. curr_username="$1"
  71. new_user_password="$2"
  72. #${PROJECT_NAME}-pass -u "$curr_username" -a rss -p "$new_user_password"
  73. }
  74. function rss_create_database {
  75. if [ -f $IMAGE_PASSWORD_FILE ]; then
  76. RSS_READER_ADMIN_PASSWORD="$(printf `cat $IMAGE_PASSWORD_FILE`)"
  77. else
  78. if [ ! $RSS_READER_ADMIN_PASSWORD ]; then
  79. RSS_READER_ADMIN_PASSWORD="$(create_password ${MINIMUM_PASSWORD_LENGTH})"
  80. fi
  81. fi
  82. if [ ! $RSS_READER_ADMIN_PASSWORD ]; then
  83. return
  84. fi
  85. function_check create_database
  86. create_database ttrss "$RSS_READER_ADMIN_PASSWORD" $MY_USERNAME
  87. }
  88. function reconfigure_rss {
  89. echo -n ''
  90. }
  91. function upgrade_rss {
  92. CURR_RSS_READER_COMMIT=$(get_completion_param "rss reader commit")
  93. if [[ "$CURR_RSS_READER_COMMIT" == "$RSS_READER_COMMIT" ]]; then
  94. return
  95. fi
  96. RSS_MOBILE_READER_PATH=/etc/share/ttrss-mobile
  97. if [[ $(app_is_installed rss) == "1" ]]; then
  98. function_check set_repo_commit
  99. set_repo_commit $RSS_READER_PATH "rss reader commit" "$RSS_READER_COMMIT" $RSS_READER_REPO
  100. function_check rss_modifications
  101. rss_modifications
  102. fi
  103. if [[ $(app_is_installed rss_mobile_reader) == "1" ]]; then
  104. if [ ! $RSS_READER_PATH ]; then
  105. RSS_READER_PATH=/etc/share/tt-rss
  106. fi
  107. if [ ! -d $RSS_READER_PATH ]; then
  108. echo $'tt-rss is not installed, so the mobile version cannot be installed'
  109. exit 63452
  110. fi
  111. # remove any previous install
  112. if [ -d $RSS_READER_PATH/g2ttree-mobile ]; then
  113. if [[ $(is_completed "install_rss_mobile_reader") == "1" ]]; then
  114. sed -i '/install_rss_mobile_reader/d' $COMPLETION_FILE
  115. sed -i '/rss mobile reader commit/d' $COMPLETION_FILE
  116. rm -rf $RSS_READER_PATH/g2ttree-mobile
  117. fi
  118. fi
  119. # update to the next commit
  120. function_check set_repo_commit
  121. set_repo_commit $RSS_MOBILE_READER_PATH "rss mobile reader commit" "$RSS_MOBILE_READER_COMMIT" $RSS_MOBILE_READER_REPO
  122. fi
  123. chown -R www-data:www-data $RSS_MOBILE_READER_PATH
  124. chown -R www-data:www-data $RSS_READER_PATH
  125. chmod a+x $RSS_MOBILE_READER_PATH
  126. }
  127. function backup_local_rss {
  128. if [ -d /etc/share/tt-rss ]; then
  129. echo $"Backing up ttrss"
  130. function_check get_mariadb_password
  131. get_mariadb_password
  132. function_check backup_database_to_usb
  133. backup_database_to_usb ttrss
  134. backup_directory_to_usb /etc/share/tt-rss ttrss
  135. echo $"ttrss backup complete"
  136. fi
  137. }
  138. function restore_local_rss {
  139. temp_restore_dir=/root/tempttrss
  140. function_check get_mariadb_password
  141. get_mariadb_password
  142. function_check restore_database
  143. restore_database ttrss
  144. if [ -d /etc/share/tt-rss ]; then
  145. if [ -d $temp_restore_dir/etc/share/tt-rss ]; then
  146. if [ -d $temp_restore_dir/etc/share/tt-rss ]; then
  147. rm -rf /etc/share/tt-rss
  148. mv $temp_restore_dir/etc/share/tt-rss /etc/share/
  149. else
  150. if [ ! -d /etc/share/tt-rss ]; then
  151. mkdir -p /etc/share/tt-rss
  152. fi
  153. cp -r $temp_restore_dir/* /etc/share/tt-rss/
  154. fi
  155. if [ ! "$?" = "0" ]; then
  156. function_check set_user_permissions
  157. set_user_permissions
  158. function_check backup_unmount_drive
  159. backup_unmount_drive
  160. exit 528823
  161. fi
  162. if [ -d /etc/letsencrypt/live/${RSS_READER_DOMAIN_NAME} ]; then
  163. ln -s /etc/letsencrypt/live/${RSS_READER_DOMAIN_NAME}/privkey.pem /etc/ssl/private/${2}.key
  164. ln -s /etc/letsencrypt/live/${RSS_READER_DOMAIN_NAME}/fullchain.pem /etc/ssl/certs/${2}.pem
  165. else
  166. # Ensure that the bundled SSL cert is being used
  167. if [ -f /etc/ssl/certs/${RSS_READER_DOMAIN_NAME}.bundle.crt ]; then
  168. sed -i "s|${RSS_READER_DOMAIN_NAME}.crt|${RSS_READER_DOMAIN_NAME}.bundle.crt|g" /etc/nginx/sites-available/${2}
  169. fi
  170. fi
  171. fi
  172. fi
  173. function_check rss_modifications
  174. rss_modifications
  175. if [ -d $USB_MOUNT/backup/ttrss ]; then
  176. chown -R www-data:www-data /etc/share/tt-rss
  177. if [ -d $temp_restore_dir ]; then
  178. rm -rf $temp_restore_dir
  179. fi
  180. fi
  181. MARIADB_PASSWORD=$(${PROJECT_NAME}-pass -u root -a mariadb)
  182. sed -i "s|define('DB_PASS'.*|define('DB_PASS', '${MARIADB_PASSWORD}');|g" $RSS_READER_PATH/config.php
  183. MARIADB_PASSWORD=
  184. }
  185. function backup_remote_rss {
  186. if [ -d /etc/share/tt-rss ]; then
  187. function_check suspend_site
  188. suspend_site ttrss
  189. function_check get_mariadb_password
  190. get_mariadb_password
  191. function_check backup_database_to_friend
  192. backup_database_to_friend ttrss
  193. echo $"Backing up RSS reader installation"
  194. function_check backup_directory_to_friend
  195. backup_directory_to_friend /etc/share/tt-rss ttrss
  196. function_check restart_site
  197. restart_site
  198. else
  199. echo $"/etc/share/tt-rss directory not found}"
  200. exit 783532
  201. fi
  202. }
  203. function restore_remote_rss {
  204. temp_restore_dir=/root/tempttrss
  205. if grep -q "rss reader domain" $COMPLETION_FILE; then
  206. echo $"Restoring ttrss"
  207. function_check get_mariadb_password
  208. get_mariadb_password
  209. function_check restore_database_from_friend
  210. restore_database_from_friend ttrss
  211. if [ -d /etc/share/tt-rss ]; then
  212. if [ -d $temp_restore_dir/etc/share/tt-rss ]; then
  213. rm -rf /etc/share/tt-rss
  214. mv $temp_restore_dir/etc/share/tt-rss /etc/share/
  215. else
  216. if [ ! -d /etc/share/tt-rss ]; then
  217. mkdir -p /etc/share/tt-rss
  218. fi
  219. cp -r $temp_restore_dir/* /etc/share/tt-rss/
  220. fi
  221. if [ ! "$?" = "0" ]; then
  222. exit 6391
  223. fi
  224. if [ -d /etc/letsencrypt/live/${RSS_READER_DOMAIN_NAME} ]; then
  225. ln -s /etc/letsencrypt/live/${RSS_READER_DOMAIN_NAME}/privkey.pem /etc/ssl/private/${RSS_READER_DOMAIN_NAME}.key
  226. ln -s /etc/letsencrypt/live/${RSS_READER_DOMAIN_NAME}/fullchain.pem /etc/ssl/certs/${RSS_READER_DOMAIN_NAME}.pem
  227. else
  228. # Ensure that the bundled SSL cert is being used
  229. if [ -f /etc/ssl/certs/${RSS_READER_DOMAIN_NAME}.bundle.crt ]; then
  230. sed -i "s|${RSS_READER_DOMAIN_NAME}.crt|${RSS_READER_DOMAIN_NAME}.bundle.crt|g" /etc/nginx/sites-available/${RSS_READER_DOMAIN_NAME}
  231. fi
  232. fi
  233. fi
  234. function_check rss_modifications
  235. rss_modifications
  236. if [ -d $SERVER_DIRECTORY/backup/ttrss ]; then
  237. chown -R www-data:www-data /etc/share/tt-rss
  238. fi
  239. if [ -d /root/tempttrss ]; then
  240. rm -rf /root/tempttrss
  241. fi
  242. MARIADB_PASSWORD=$(${PROJECT_NAME}-pass -u root -a mariadb)
  243. sed -i "s|define('DB_PASS'.*|define('DB_PASS', '${MARIADB_PASSWORD}');|g" $RSS_READER_PATH/config.php
  244. MARIADB_PASSWORD=
  245. echo $"Restore of ttrss complete"
  246. fi
  247. }
  248. function remove_rss {
  249. if [ ${#RSS_READER_DOMAIN_NAME} -eq 0 ]; then
  250. return
  251. fi
  252. nginx_dissite $RSS_READER_DOMAIN_NAME
  253. function_check remove_onion_service
  254. remove_onion_service mobilerss ${RSS_MOBILE_READER_ONION_PORT}
  255. remove_onion_service rss ${RSS_READER_ONION_PORT}
  256. if [ -f /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME ]; then
  257. rm /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  258. fi
  259. if [ -d $RSS_READER_PATH ]; then
  260. rm -rf $RSS_READER_PATH
  261. fi
  262. function_check drop_database
  263. drop_database ttrss
  264. remove_completion_param install_rss
  265. sed -i '/RSS /d' $COMPLETION_FILE
  266. sed -i '/rss /d' $COMPLETION_FILE
  267. sed -i '/rss_/d' $COMPLETION_FILE
  268. remove_backup_database_local ttrss
  269. }
  270. function rss_modifications {
  271. # modify the rss reader to use a socks5 proxy rather than a http proxy
  272. if [ ! -d $RSS_READER_PATH ]; then
  273. return
  274. fi
  275. rss_modified=
  276. # ensure that socks5 proxy is used
  277. if ! grep -q "CURLPROXY_SOCKS5" $RSS_READER_PATH/plugins/af_unburn/init.php; then
  278. sed -i '/curl_setopt($ch, CURLOPT_PROXY, _CURL_HTTP_PROXY);/a \\t\t\t\t\tcurl_setopt($ch, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS5);' $RSS_READER_PATH/plugins/af_unburn/init.php
  279. rss_modified=1
  280. fi
  281. if ! grep -q "CURLPROXY_SOCKS5" $RSS_READER_PATH/include/functions.php; then
  282. sed -i '/curl_setopt($ch, CURLOPT_PROXY, _CURL_HTTP_PROXY);/a \\t\t\t\tcurl_setopt($ch, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS5);' $RSS_READER_PATH/include/functions.php
  283. rss_modified=1
  284. fi
  285. if [ $rss_modified ]; then
  286. cd $RSS_READER_PATH
  287. git commit -a -m"Modify for Tor proxying"
  288. fi
  289. chown -R www-data:www-data $RSS_READER_PATH
  290. chmod a+x $RSS_READER_PATH
  291. }
  292. function install_rss_main {
  293. function_check remove_onion_service
  294. remove_onion_service rss ${RSS_READER_ONION_PORT} ${RSS_MOBILE_READER_ONION_PORT}
  295. apt-get -yq install php-gettext php-curl php-gd php-mysql git
  296. apt-get -yq install curl php-mcrypt libfcgi0ldbl
  297. remove_onion_service mobilerss ${RSS_MOBILE_READER_ONION_PORT}
  298. remove_onion_service rss ${RSS_READER_ONION_PORT}
  299. if [ ! -d /etc/share ]; then
  300. mkdir /etc/share
  301. fi
  302. cd /etc/share
  303. if [ -d /repos/rss ]; then
  304. mkdir tt-rss
  305. cp -r -p /repos/rss/. tt-rss
  306. cd tt-rss
  307. git pull
  308. else
  309. function_check git_clone
  310. git_clone $RSS_READER_REPO tt-rss
  311. fi
  312. if [ ! -d $RSS_READER_PATH ]; then
  313. echo $'Could not clone RSS reader repo'
  314. exit 52925
  315. fi
  316. cd $RSS_READER_PATH
  317. git checkout $RSS_READER_COMMIT -b $RSS_READER_COMMIT
  318. set_completion_param "rss reader commit" "$RSS_READER_COMMIT"
  319. function_check install_mariadb
  320. install_mariadb
  321. function_check get_mariadb_password
  322. get_mariadb_password
  323. function_check repair_databases_script
  324. repair_databases_script
  325. rss_create_database
  326. RSS_READER_ONION_HOSTNAME=$(add_onion_service rss 80 ${RSS_READER_ONION_PORT})
  327. sleep 2
  328. RSS_MOBILE_READER_ONION_HOSTNAME=$(add_onion_service mobilerss 80 ${RSS_MOBILE_READER_ONION_PORT})
  329. echo 'server {' > /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  330. echo " listen 127.0.0.1:$RSS_MOBILE_READER_ONION_PORT;" >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  331. echo " server_name $RSS_MOBILE_READER_ONION_HOSTNAME;" >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  332. echo '' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  333. echo ' access_log /dev/null;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  334. echo ' error_log /dev/null;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  335. echo '' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  336. echo ' root /etc/share/ttrss-mobile;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  337. echo ' index index.html index.php;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  338. echo '' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  339. echo ' location ~ \.php {' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  340. echo ' include snippets/fastcgi-php.conf;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  341. echo ' fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  342. echo ' fastcgi_read_timeout 30;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  343. echo ' }' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  344. echo '' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  345. echo ' location / {' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  346. echo ' try_files $uri $uri/ @ttrss;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  347. echo ' }' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  348. echo ' location /tt-rss {' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  349. echo ' try_files $uri $uri/ @ttrss_base;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  350. echo ' }' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  351. echo '' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  352. echo ' location @ttrss {' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  353. echo ' rewrite ^(.*)$ /index.html?p=$1 last;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  354. echo ' }' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  355. echo ' location @ttrss_base {' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  356. echo ' rewrite ^(.*)$ /index.php?p=$1 last;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  357. echo ' }' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  358. echo '' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  359. echo ' location ~ /\.(git) {' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  360. echo ' deny all;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  361. echo ' }' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  362. echo '' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  363. echo ' add_header X-XSS-Protection "1; mode=block";' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  364. echo ' add_header X-Robots-Tag none;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  365. echo ' add_header X-Download-Options noopen;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  366. echo ' add_header X-Permitted-Cross-Domain-Policies none;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  367. echo ' add_header X-Frame-Options SAMEORIGIN;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  368. echo ' add_header X-Content-Type-Options nosniff;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  369. echo ' client_max_body_size 15m;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  370. echo '}' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  371. echo '' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  372. echo 'server {' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  373. echo " listen 127.0.0.1:$RSS_READER_ONION_PORT default_server;" >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  374. echo " server_name $RSS_READER_ONION_HOSTNAME;" >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  375. echo '' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  376. echo ' access_log /dev/null;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  377. echo ' error_log /dev/null;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  378. echo '' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  379. echo ' root /etc/share/tt-rss;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  380. echo ' index index.php;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  381. echo '' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  382. echo ' location ~ \.php {' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  383. echo ' include snippets/fastcgi-php.conf;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  384. echo ' fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  385. echo ' fastcgi_read_timeout 30;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  386. echo ' }' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  387. echo '' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  388. echo ' set $mobile_rewrite do_not_perform;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  389. echo '' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  390. echo ' ## chi http_user_agent for mobile / smart phones ##' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  391. echo ' if ($http_user_agent ~* "(android|bb\d+|meego).+mobile|avantgo|bada\/|blackberry|blazer|compal|elaine|fennec|hiptop|iemobile|ip(hone|od)|iris|kindle|lge |maemo|midp|mmp|netfront|opera m(ob|in)i|palm( os)?|phone|p(ixi|re)\/|plucker|pocket|psp|series(4|6)0|symbian|treo|up\.(browser|link)|vodafone|wap|windows (ce|phone)|xda|xiino") {' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  392. echo ' set $mobile_rewrite perform;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  393. echo ' }' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  394. echo '' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  395. echo ' if ($http_user_agent ~* "^(1207|6310|6590|3gso|4thp|50[1-6]i|770s|802s|a wa|abac|ac(er|oo|s\-)|ai(ko|rn)|al(av|ca|co)|amoi|an(ex|ny|yw)|aptu|ar(ch|go)|as(te|us)|attw|au(di|\-m|r |s )|avan|be(ck|ll|nq)|bi(lb|rd)|bl(ac|az)|br(e|v)w|bumb|bw\-(n|u)|c55\/|capi|ccwa|cdm\-|cell|chtm|cldc|cmd\-|co(mp|nd)|craw|da(it|ll|ng)|dbte|dc\-s|devi|dica|dmob|do(c|p)o|ds(12|\-d)|el(49|ai)|em(l2|ul)|er(ic|k0)|esl8|ez([4-7]0|os|wa|ze)|fetc|fly(\-|_)|g1 u|g560|gene|gf\-5|g\-mo|go(\.w|od)|gr(ad|un)|haie|hcit|hd\-(m|p|t)|hei\-|hi(pt|ta)|hp( i|ip)|hs\-c|ht(c(\-| |_|a|g|p|s|t)|tp)|hu(aw|tc)|i\-(20|go|ma)|i230|iac( |\-|\/)|ibro|idea|ig01|ikom|im1k|inno|ipaq|iris|ja(t|v)a|jbro|jemu|jigs|kddi|keji|kgt( |\/)|klon|kpt |kwc\-|kyo(c|k)|le(no|xi)|lg( g|\/(k|l|u)|50|54|\-[a-w])|libw|lynx|m1\-w|m3ga|m50\/|ma(te|ui|xo)|mc(01|21|ca)|m\-cr|me(rc|ri)|mi(o8|oa|ts)|mmef|mo(01|02|bi|de|do|t(\-| |o|v)|zz)|mt(50|p1|v )|mwbp|mywa|n10[0-2]|n20[2-3]|n30(0|2)|n50(0|2|5)|n7(0(0|1)|10)|ne((c|m)\-|on|tf|wf|wg|wt)|nok(6|i)|nzph|o2im|op(ti|wv)|oran|owg1|p800|pan(a|d|t)|pdxg|pg(13|\-([1-8]|c))|phil|pire|pl(ay|uc)|pn\-2|po(ck|rt|se)|prox|psio|pt\-g|qa\-a|qc(07|12|21|32|60|\-[2-7]|i\-)|qtek|r380|r600|raks|rim9|ro(ve|zo)|s55\/|sa(ge|ma|mm|ms|ny|va)|sc(01|h\-|oo|p\-)|sdk\/|se(c(\-|0|1)|47|mc|nd|ri)|sgh\-|shar|sie(\-|m)|sk\-0|sl(45|id)|sm(al|ar|b3|it|t5)|so(ft|ny)|sp(01|h\-|v\-|v )|sy(01|mb)|t2(18|50)|t6(00|10|18)|ta(gt|lk)|tcl\-|tdg\-|tel(i|m)|tim\-|t\-mo|to(pl|sh)|ts(70|m\-|m3|m5)|tx\-9|up(\.b|g1|si)|utst|v400|v750|veri|vi(rg|te)|vk(40|5[0-3]|\-v)|vm40|voda|vulc|vx(52|53|60|61|70|80|81|83|85|98)|w3c(\-| )|webc|whit|wi(g |nc|nw)|wmlb|wonu|x700|yas\-|your|zeto|zte\-)") {' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  396. echo ' set $mobile_rewrite perform;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  397. echo ' }' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  398. echo '' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  399. echo ' if ($mobile_rewrite = perform) {' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  400. echo " rewrite ^/(.*) http://$RSS_MOBILE_READER_ONION_HOSTNAME permanent;" >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  401. echo ' break;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  402. echo ' }' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  403. echo '' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  404. echo ' location ~ \.php {' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  405. echo ' include snippets/fastcgi-php.conf;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  406. echo ' fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  407. echo ' }' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  408. echo '' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  409. echo ' location / {' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  410. echo ' try_files $uri $uri/ @ttrss;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  411. echo ' }' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  412. echo '' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  413. echo ' location @ttrss {' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  414. echo ' rewrite ^(.*)$ /index.php?p=$1 last;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  415. echo ' }' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  416. echo '' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  417. echo ' location ~ /\.(git) {' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  418. echo ' deny all;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  419. echo ' }' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  420. echo '' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  421. echo ' add_header X-XSS-Protection "1; mode=block";' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  422. echo ' add_header X-Robots-Tag none;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  423. echo ' add_header X-Download-Options noopen;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  424. echo ' add_header X-Permitted-Cross-Domain-Policies none;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  425. echo ' add_header X-Frame-Options SAMEORIGIN;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  426. echo ' add_header X-Content-Type-Options nosniff;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  427. echo ' client_max_body_size 15m;' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  428. echo '}' >> /etc/nginx/sites-available/$RSS_READER_DOMAIN_NAME
  429. if [ ! -f $RSS_READER_PATH/config.php ]; then
  430. # generate a config file
  431. RSS_FEED_CRYPT_KEY="$(create_password 24)"
  432. echo '<?php' > $RSS_READER_PATH/config.php
  433. echo " define('_CURL_HTTP_PROXY', '127.0.0.1:9050');" >> $RSS_READER_PATH/config.php
  434. echo " define('DB_TYPE', 'mysql');" >> $RSS_READER_PATH/config.php
  435. echo " define('DB_HOST', 'localhost');" >> $RSS_READER_PATH/config.php
  436. echo " define('DB_USER', 'root');" >> $RSS_READER_PATH/config.php
  437. echo " define('DB_NAME', 'ttrss');" >> $RSS_READER_PATH/config.php
  438. echo " define('DB_PASS', '${MARIADB_PASSWORD}');" >> $RSS_READER_PATH/config.php
  439. echo " define('DB_PORT', '3306');" >> $RSS_READER_PATH/config.php
  440. echo " define('MYSQL_CHARSET', 'UTF8');" >> $RSS_READER_PATH/config.php
  441. echo " define('SELF_URL_PATH', 'http://${RSS_READER_ONION_HOSTNAME}/');" >> $RSS_READER_PATH/config.php
  442. echo " define('FEED_CRYPT_KEY', '${RSS_FEED_CRYPT_KEY}');" >> $RSS_READER_PATH/config.php
  443. echo " define('SINGLE_USER_MODE', false);" >> $RSS_READER_PATH/config.php
  444. echo " define('SIMPLE_UPDATE_MODE', false);" >> $RSS_READER_PATH/config.php
  445. echo " define('PHP_EXECUTABLE', '/usr/bin/php');" >> $RSS_READER_PATH/config.php
  446. echo " define('LOCK_DIRECTORY', 'lock');" >> $RSS_READER_PATH/config.php
  447. echo " define('CACHE_DIR', 'cache');" >> $RSS_READER_PATH/config.php
  448. echo " define('ICONS_DIR', \"feed-icons\");" >> $RSS_READER_PATH/config.php
  449. echo " define('ICONS_URL', \"feed-icons\");" >> $RSS_READER_PATH/config.php
  450. echo " define('AUTH_AUTO_CREATE', true);" >> $RSS_READER_PATH/config.php
  451. echo " define('AUTH_AUTO_LOGIN', true);" >> $RSS_READER_PATH/config.php
  452. echo " define('FORCE_ARTICLE_PURGE', 0);" >> $RSS_READER_PATH/config.php
  453. echo " define('PUBSUBHUBBUB_HUB', '');" >> $RSS_READER_PATH/config.php
  454. echo " define('PUBSUBHUBBUB_ENABLED', false);" >> $RSS_READER_PATH/config.php
  455. echo " define('SPHINX_SERVER', 'localhost:9312');" >> $RSS_READER_PATH/config.php
  456. echo " define('SPHINX_INDEX', 'ttrss, delta');" >> $RSS_READER_PATH/config.php
  457. echo " define('ENABLE_REGISTRATION', false);" >> $RSS_READER_PATH/config.php
  458. echo " define('REG_NOTIFY_ADDRESS', '${MY_EMAIL_ADDRESS}');" >> $RSS_READER_PATH/config.php
  459. echo " define('REG_MAX_USERS', 10);" >> $RSS_READER_PATH/config.php
  460. echo " define('SESSION_COOKIE_LIFETIME', 86400);" >> $RSS_READER_PATH/config.php
  461. echo " define('SMTP_FROM_NAME', 'Tiny Tiny RSS');" >> $RSS_READER_PATH/config.php
  462. echo " define('SMTP_FROM_ADDRESS', 'noreply@${RSS_READER_ONION_HOSTNAME}');" >> $RSS_READER_PATH/config.php
  463. echo " define('DIGEST_SUBJECT', '[tt-rss] New headlines for last 24 hours');" >> $RSS_READER_PATH/config.php
  464. echo " define('SMTP_SERVER', '');" >> $RSS_READER_PATH/config.php
  465. echo " define('SMTP_LOGIN', '');" >> $RSS_READER_PATH/config.php
  466. echo " define('SMTP_PASSWORD', '');" >> $RSS_READER_PATH/config.php
  467. echo " define('SMTP_SECURE', '');" >> $RSS_READER_PATH/config.php
  468. echo " define('CHECK_FOR_UPDATES', false);" >> $RSS_READER_PATH/config.php
  469. echo " define('ENABLE_GZIP_OUTPUT', false);" >> $RSS_READER_PATH/config.php
  470. echo " define('PLUGINS', 'auth_internal, note, gnusocial');" >> $RSS_READER_PATH/config.php
  471. echo " define('LOG_DESTINATION', 'sql');" >> $RSS_READER_PATH/config.php
  472. echo " define('CONFIG_VERSION', 26);" >> $RSS_READER_PATH/config.php
  473. fi
  474. # initialize the database
  475. if [ ! -f $RSS_READER_PATH/schema/ttrss_schema_mysql.sql ]; then
  476. echo $'No database schema found for rss reader'
  477. exit 52926
  478. fi
  479. initialise_database ttrss $RSS_READER_PATH/schema/ttrss_schema_mysql.sql
  480. # change the password from the default
  481. RSS_READER_ADMIN_PASSWORD_HASH=$(echo -n "${RSS_READER_ADMIN_PASSWORD}" | sha1sum | awk -F ' ' '{print $1}')
  482. function_check run_query
  483. run_query ttrss "update ttrss_users set pwd_hash = 'SHA1:${RSS_READER_ADMIN_PASSWORD_HASH}', salt= '' WHERE login = 'admin';"
  484. function_check rss_modifications
  485. rss_modifications
  486. function_check configure_php
  487. configure_php
  488. nginx_ensite $RSS_READER_DOMAIN_NAME
  489. systemctl restart mariadb
  490. systemctl restart php7.0-fpm
  491. systemctl restart nginx
  492. # daemon to update feeds
  493. echo '[Unit]' > /etc/systemd/system/ttrss.service
  494. echo 'Description=ttrss_backend' >> /etc/systemd/system/ttrss.service
  495. echo 'After=network.target mariadb.service' >> /etc/systemd/system/ttrss.service
  496. echo 'After=tor.service' >> /etc/systemd/system/ttrss.service
  497. echo '' >> /etc/systemd/system/ttrss.service
  498. echo '[Service]' >> /etc/systemd/system/ttrss.service
  499. echo 'User=www-data' >> /etc/systemd/system/ttrss.service
  500. echo "ExecStart=/usr/bin/php $RSS_READER_PATH/update.php --daemon" >> /etc/systemd/system/ttrss.service
  501. echo '' >> /etc/systemd/system/ttrss.service
  502. echo '[Install]' >> /etc/systemd/system/ttrss.service
  503. echo 'WantedBy=multi-user.target' >> /etc/systemd/system/ttrss.service
  504. systemctl enable ttrss
  505. systemctl daemon-reload
  506. systemctl start ttrss
  507. ${PROJECT_NAME}-pass -u $MY_USERNAME -a rss -p "$RSS_READER_ADMIN_PASSWORD"
  508. install_completed rss_main
  509. }
  510. function install_rss_gnusocial {
  511. if [ ! $GNUSOCIAL_DOMAIN_NAME ]; then
  512. return
  513. fi
  514. if [ ! $RSS_READER_PATH ]; then
  515. RSS_READER_PATH=/etc/share/tt-rss
  516. fi
  517. RSS_READER_GNUSOCIAL_PATH=${RSS_READER_PATH}/plugins/gnusocial
  518. # update to the next commit
  519. function_check set_repo_commit
  520. set_repo_commit $RSS_READER_GNUSOCIAL_PATH "rss reader gnusocial commit" "$RSS_READER_GNUSOCIAL_COMMIT" $RSS_READER_GNUSOCIAL_REPO
  521. chown -R www-data:www-data $RSS_READER_GNUSOCIAL_PATH
  522. if [[ $(is_completed $FUNCNAME) == "1" ]]; then
  523. return
  524. fi
  525. if [ ! -d $INSTALL_DIR ]; then
  526. mkdir -p $INSTALL_DIR
  527. fi
  528. cd $INSTALL_DIR
  529. function_check git_clone
  530. git_clone $RSS_READER_GNUSOCIAL_REPO ttrss-gnusocial
  531. if [ ! -d $INSTALL_DIR/ttrss-gnusocial ]; then
  532. echo $'Could not clone repo for RSS reader gnusocial plugin'
  533. exit 52838
  534. fi
  535. cp -r $INSTALL_DIR/ttrss-gnusocial $RSS_READER_GNUSOCIAL_PATH
  536. cd $RSS_READER_GNUSOCIAL_PATH
  537. git checkout $RSS_READER_GNUSOCIAL_COMMIT -b $RSS_READER_GNUSOCIAL_COMMIT
  538. set_completion_param "rss reader gnusocial commit" "$RSS_READER_GNUSOCIAL_COMMIT"
  539. chown -R www-data:www-data $RSS_READER_GNUSOCIAL_PATH
  540. install_completed rss_gnusocial
  541. }
  542. function install_rss_mobile_reader {
  543. if [ ! $RSS_READER_PATH ]; then
  544. RSS_READER_PATH=/etc/share/tt-rss
  545. fi
  546. if [ ! -d $RSS_READER_PATH ]; then
  547. echo $'tt-rss is not installed, so the mobile version cannot be installed'
  548. exit 63452
  549. fi
  550. RSS_MOBILE_READER_PATH=/etc/share/ttrss-mobile
  551. # remove any previous install
  552. if [ -d $RSS_READER_PATH/g2ttree-mobile ]; then
  553. if [[ $(is_completed "install_rss_mobile_reader") == "1" ]]; then
  554. sed -i '/install_rss_mobile_reader/d' $COMPLETION_FILE
  555. sed -i '/rss mobile reader commit/d' $COMPLETION_FILE
  556. rm -rf $RSS_READER_PATH/g2ttree-mobile
  557. fi
  558. fi
  559. if [[ $(is_completed $FUNCNAME) == "1" ]]; then
  560. return
  561. fi
  562. cd /etc/share
  563. if [ -d /repos/rss-mobile ]; then
  564. mkdir ttrss-mobile
  565. cp -r -p /repos/rss-mobile/. ttrss-mobile
  566. cd ttrss-mobile
  567. git pull
  568. else
  569. function_check git_clone
  570. git_clone $RSS_MOBILE_READER_REPO ttrss-mobile
  571. fi
  572. if [ ! -d $RSS_MOBILE_READER_PATH ]; then
  573. echo $'Could not clone RSS mobile reader repo'
  574. exit 24816
  575. fi
  576. cd $RSS_MOBILE_READER_PATH
  577. git checkout $RSS_MOBILE_READER_COMMIT -b $RSS_MOBILE_READER_COMMIT
  578. set_completion_param "rss mobile reader commit" "$RSS_MOBILE_READER_COMMIT"
  579. echo 'define({' > $RSS_MOBILE_READER_PATH/scripts/conf.js
  580. echo ' apiPath: "/tt-rss/"' >> $RSS_MOBILE_READER_PATH/scripts/conf.js
  581. echo '});' >> $RSS_MOBILE_READER_PATH/scripts/conf.js
  582. # link to the main site
  583. ln -s $RSS_READER_PATH $RSS_MOBILE_READER_PATH/tt-rss
  584. chown -R www-data:www-data $RSS_MOBILE_READER_PATH
  585. chown -R www-data:www-data $RSS_READER_PATH
  586. chmod a+x $RSS_MOBILE_READER_PATH
  587. install_completed rss_mobile_reader
  588. }
  589. function install_rss {
  590. install_rss_main
  591. #install_rss_gnusocial
  592. install_rss_mobile_reader
  593. APP_INSTALLED=1
  594. }
  595. # NOTE: deliberately no exit 0