freedombone/src/freedombone-app-syncthing

#!/bin/bash
#
# .---.                  .              .
# |                      |              |
# |--- .--. .-.  .-.  .-.|  .-. .--.--. |.-.  .-. .--.  .-.
# |    |   (.-' (.-' (   | (   )|  |  | |   )(   )|  | (.-'
# '    '     --'  --'  -' -  -' '  '   -' -'   -' '   -  --'
#
#                    Freedom in the Cloud
#
# Syncthing application
#
# License
# =======
#
# Copyright (C) 2014-2016 Bob Mottram <bob@robotics.uk.to>
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.

VARIANTS='full cloud'

SYNCTHING_ID=
SYNCTHING_CONFIG_PATH=/root/.config/syncthing
SYNCTHING_CONFIG_FILE=$SYNCTHING_CONFIG_PATH/config.xml
SYNCTHING_RELAY_SERVER='https://relays.syncthing.net/endpoint'
SYNCTHING_RELEASES='https://api.github.com/repos/syncthing/syncthing/releases?per_page=30'
SYNCTHING_PORT=22000
SYNCTHING_SHARED_DATA=/var/lib/syncthing/SyncShared
SYNCTHING_USER_IDS_FILE='.syncthingids'

function syncthing_create_ids_file {
    if [ ! -f ~/.syncthing-server-id ]; then
        return
    fi

    SYNCTHING_ID=$(cat ~/.syncthing-server-id)
    if [ ! -f $SYNCTHING_CONFIG_FILE ]; then
        echo $'# Your syncthing configuration file' > $SYNCTHING_CONFIG_FILE
        echo '#' >> $SYNCTHING_CONFIG_FILE
        echo $"# The ${PROJECT_NAME} syncthing ID is: $SYNCTHING_ID" >> $SYNCTHING_CONFIG_FILE
        echo '#' >> $SYNCTHING_CONFIG_FILE
        echo '# Paste the IDs of your devices below' >> $SYNCTHING_CONFIG_FILE
        echo '#' >> $SYNCTHING_CONFIG_FILE
    fi
}

function syncthing_manual_edit {
    if [ ! -f ~/.syncthing-server-id ]; then
        return
    fi
    syncthing_create_ids_file
    editor $SYNCTHING_CONFIG_FILE

    # force an update of the configuration
    touch ~/.syncthing-update
}

function syncthing_show_id {
    if [ ! -f ~/.syncthing-server-id ]; then
        return
    fi

    SYNCTHING_ID=$(cat ~/.syncthing-server-id)
    dialog --title $"Device ID for ${PROJECT_NAME}" \
           --backtitle $"Freedombone User Control Panel" \
           --msgbox $"In a desktop terminal press shift and select the ID below,\nthen right click and copy.\n\nWithin Connectbot select Menu/Copy and then highlight the ID below\n\n$SYNCTHING_ID" 12 78
}

function syncthing_add_id {
    if [ ! -f ~/.syncthing-server-id ]; then
        return
    fi

    syncthing_create_ids_file

    data=$(tempfile 2>/dev/null)
    trap "rm -f $data" 0 1 2 5 15
    dialog --backtitle $"Freedombone User Control Panel" \
           --title $"Add a Syncthing device ID" \
           --form $"Paste the device ID for your laptop/desktop/netbook/phone/tablet below" 9 80 2 \
           $"Device ID:" 1 1 "" 1 26 80 80 \
           $"Description (optional):" 2 1 "" 2 26 80 80 \
           2> $data
    sel=$?
    case $sel in
        1) return;;
        255) return;;
    esac
    SYNCTHING_DEVICE_ID=$(cat $data | sed -n 1p)
    SYNCTHING_DESCRIPTION=$(cat $data | sed -n 2p)

    if [ ${#SYNCTHING_DEVICE_ID} -lt 10 ]; then
        return
    fi

    if [[ $SYNCTHING_DEVICE_ID == *"#"* || $SYNCTHING_DEVICE_ID == *"*"* || $SYNCTHING_DEVICE_ID == *'/'*  || $SYNCTHING_DEVICE_ID != *"-"* ]]; then
        dialog --title $"Add a Syncthing device ID" \
               --backtitle $"Freedombone User Control Panel" \
               --msgbox $"That doesn't look like a device ID" 6 50
        return
    fi

    if grep -q "$SYNCTHING_DEVICE_ID" $SYNCTHING_CONFIG_FILE; then
        dialog --title $"Add a Syncthing device ID" \
               --backtitle $"Freedombone User Control Panel" \
               --msgbox $"That ID has already been added" 6 50
        return
    fi

    if [ ${#SYNCTHING_DESCRIPTION} -gt 0 ]; then
        echo "# $SYNCTHING_DESCRIPTION" >> $SYNCTHING_CONFIG_FILE
    fi
    echo "$SYNCTHING_DEVICE_ID" >> $SYNCTHING_CONFIG_FILE

    # force an update of the configuration
    touch ~/.syncthing-update

    dialog --title $"Add a Syncthing device ID" \
           --backtitle $"Freedombone User Control Panel" \
           --msgbox $"The ID was added" 6 50
}

function syncthing_remove_id {
    if [ ! -f ~/.syncthing-server-id ]; then
        return
    fi

    syncthing_create_ids_file

    data=$(tempfile 2>/dev/null)
    trap "rm -f $data" 0 1 2 5 15
    dialog --backtitle $"Freedombone User Control Panel" \
           --title $"Remove a Syncthing device ID" \
           --form $"Paste the device ID which is to be removed below" 8 80 1 \
           $"Device ID:" 1 1 "" 1 14 80 80 \
           2> $data
    sel=$?
    case $sel in
        1) return;;
        255) return;;
    esac
    SYNCTHING_DEVICE_ID=$(cat $data | sed -n 1p)

    if [ ${#SYNCTHING_DEVICE_ID} -lt 10 ]; then
        return
    fi

    if [[ $SYNCTHING_DEVICE_ID == *"#"* || $SYNCTHING_DEVICE_ID == *"*"* || $SYNCTHING_DEVICE_ID == *'/'*  || $SYNCTHING_DEVICE_ID != *"-"* ]]; then
        dialog --title $"Remove a Syncthing device ID" \
               --backtitle $"Freedombone User Control Panel" \
               --msgbox $"That doesn't look like a device ID" 6 50
        return
    fi

    if ! grep -q "$SYNCTHING_DEVICE_ID" $SYNCTHING_CONFIG_FILE; then
        dialog --title $"Remove a Syncthing device ID" \
               --backtitle $"Freedombone User Control Panel" \
               --msgbox $"That ID wasn't registered anyway" 6 50
        return
    fi

    sed -i "/$SYNCTHING_DEVICE_ID/d" $SYNCTHING_CONFIG_FILE

    # force an update of the configuration
    touch ~/.syncthing-update

    dialog --title $"Remove a Syncthing device ID" \
           --backtitle $"Freedombone User Control Panel" \
           --msgbox $"The ID was removed" 6 50
}

function run_client_syncthing {
    SYNCTHING_CONFIG_FILE=~/.syncthingids
    SYNCTHING_ID=$(cat ~/.syncthing-server-id)

    while true
    do
        data=$(tempfile 2>/dev/null)
        trap "rm -f $data" 0 1 2 5 15
        dialog --backtitle $"Freedombone User Control Panel" \
               --title $"File Synchronization" \
               --radiolist $"Choose an operation:" 12 70 6 \
               1 $"Show device ID for ${PROJECT_NAME}" off \
               2 $"Add an ID for another machine or device" off \
               3 $"Remove an ID for another machine or device" off \
               4 $"Manually edit device IDs" off \
               5 $"Back to main menu" on 2> $data
        sel=$?
        case $sel in
            1) break;;
            255) break;;
        esac
        case $(cat $data) in
            1) syncthing_show_id;;
            2) syncthing_add_id;;
            3) syncthing_remove_id;;
            4) syncthing_manual_edit;;
            5) break;;
        esac
    done
}

function install_interactive_syncthing {
    echo -n ''
}

function change_password_syncthing {
    echo -n ''
}

function reconfigure_syncthing {
    echo -n ''
}

function upgrade_syncthing {
    echo -n ''
}

function backup_local_syncthing {
    if [ -d /var/lib/syncthing/SyncShared ]; then
        echo $"Backing up syncthing"

        function_check backup_directory_to_usb
        backup_directory_to_usb /var/lib/syncthing/SyncShared syncthingshared
        backup_directory_to_usb /root/.config/syncthing syncthingconfig

        echo $"Backup to syncthing complete"
    fi
}

function restore_local_syncthing {
    if [ -f /etc/systemd/system/syncthing.service ]; then
        systemctl stop syncthing
        systemctl stop cron
    fi

    temp_restore_dir=/root/tempsyncthing
    if [ -d $USB_MOUNT/backup/syncthingconfig ]; then
        echo $"Restoring syncthing configuration"
        function_check restore_directory_from_usb
        restore_directory_from_usb ${temp_restore_dir}config syncthingconfig
        cp -r ${temp_restore_dir}config/* /
        if [ ! "$?" = "0" ]; then
            set_user_permissions
            backup_unmount_drive
            systemctl start syncthing
            systemctl start cron
            exit 6833
        fi
        rm -rf ${temp_restore_dir}config
    fi

    if [ -d $USB_MOUNT/backup/syncthingshared ]; then
        echo $"Restoring syncthing shared files"
        restore_directory_from_usb ${temp_restore_dir}shared syncthingshared
        cp -r ${temp_restore_dir}shared/* /
        if [ ! "$?" = "0" ]; then
            set_user_permissions
            backup_unmount_drive
            systemctl start syncthing
            systemctl start cron
            exit 37904
        fi
        rm -rf ${temp_restore_dir}shared
    fi

    if [ -d $USB_MOUNT/backup/syncthing ]; then
        for d in $USB_MOUNT/backup/syncthing/*/ ; do
            USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
            if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
                if [ ! -d /home/$USERNAME ]; then
                    ${PROJECT_NAME}-adduser $USERNAME
                fi
                echo $"Restoring syncthing files for $USERNAME"
                restore_directory_from_usb ${temp_restore_dir} syncthing/$USERNAME
                cp -r ${temp_restore_dir}/home/$USERNAME/Sync /home/$USERNAME/
                if [ ! "$?" = "0" ]; then
                    rm -rf ${temp_restore_dir}
                    set_user_permissions
                    backup_unmount_drive
                    systemctl start syncthing
                    systemctl start cron
                    exit 68438
                fi
                rm -rf ${temp_restore_dir}

                # restore device IDs from config settings
                if [ -f /home/$USERNAME/.config/syncthing/.syncthing-server-id ]; then
                    cp /home/$USERNAME/.config/syncthing/.syncthing-server-id /home/$USERNAME/.syncthing-server-id
                    chown $USERNAME:$USERNAME /home/$USERNAME/.syncthing-server-id
                fi
                if [ -f /home/$USERNAME/.config/syncthing/.syncthingids ]; then
                    cp /home/$USERNAME/.config/syncthing/.syncthingids /home/$USERNAME/.syncthingids
                    chown $USERNAME:$USERNAME /home/$USERNAME/.syncthingids
                fi
            fi
        done
    fi

    if [ -f /etc/systemd/system/syncthing.service ]; then
        systemctl start syncthing
        systemctl start cron
    fi
}

function backup_remote_syncthing {
    if [ -d /root/.config/syncthing ]; then
        echo $"Backing up syncthing configuration"
        function_check backup_directory_to_friend
        backup_directory_to_friend /root/.config/syncthing syncthingconfig
        echo $"Backup of syncthing configuration complete"
    fi
    if [ -d /var/lib/syncthing/SyncShared ]; then
        echo $"Backing up syncthing shared files"
        function_check backup_directory_to_friend
        backup_directory_to_friend /var/lib/syncthing/SyncShared syncthingshared
        echo $"Backup of syncthing shared files complete"
    fi
}

function restore_remote_syncthing {
    if [ -f /etc/systemd/system/syncthing.service ]; then
        systemctl stop syncthing
        systemctl stop cron
    fi

    if [ -d $SERVER_DIRECTORY/backup/syncthingconfig ]; then
        echo $"Restoring syncthing configuration"
        temp_restore_dir=/root/tempsyncthingconfig
        function_check restore_directory_from_friend
        restore_directory_from_friend $temp_restore_dir syncthingconfig
        cp -r $temp_restore_dir/* /
        if [ ! "$?" = "0" ]; then
            systemctl start syncthing
            systemctl start cron
            exit 6833
        fi
        rm -rf $temp_restore_dir
    fi

    if [ -d $SERVER_DIRECTORY/backup/syncthingshared ]; then
        echo $"Restoring syncthing shared files"
        temp_restore_dir=/root/tempsyncthingshared
        function_check restore_directory_from_friend
        restore_directory_from_friend $temp_restore_dir syncthingshared
        cp -r $temp_restore_dir/* /
        if [ ! "$?" = "0" ]; then
            systemctl start syncthing
            systemctl start cron
            exit 37904
        fi
        rm -rf $temp_restore_dir
    fi

    if [ -d $SERVER_DIRECTORY/backup/syncthing ]; then
        for d in $SERVER_DIRECTORY/backup/syncthing/*/ ; do
            USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
            if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
                if [ ! -d /home/$USERNAME ]; then
                    ${PROJECT_NAME}-adduser $USERNAME
                fi
                echo $"Restoring syncthing files for $USERNAME"
                temp_restore_dir=/root/tempsyncthing
                function_check restore_directory_from_friend
                restore_directory_from_friend $temp_restore_dir syncthing/$USERNAME
                cp -r $temp_restore_dir/home/$USERNAME/Sync /home/$USERNAME/
                if [ ! "$?" = "0" ]; then
                    rm -rf $temp_restore_dir
                    systemctl start syncthing
                    systemctl start cron
                    exit 68438
                fi
                rm -rf $temp_restore_dir

                # restore device IDs from config settings
                if [ -f /home/$USERNAME/.config/syncthing/.syncthing-server-id ]; then
                    cp /home/$USERNAME/.config/syncthing/.syncthing-server-id /home/$USERNAME/.syncthing-server-id
                    chown $USERNAME:$USERNAME /home/$USERNAME/.syncthing-server-id
                fi
                if [ -f /home/$USERNAME/.config/syncthing/.syncthingids ]; then
                    cp /home/$USERNAME/.config/syncthing/.syncthingids /home/$USERNAME/.syncthingids
                    chown $USERNAME:$USERNAME /home/$USERNAME/.syncthingids
                fi
                echo $"Restore of syncthing files for $USERNAME complete"
            fi
        done
    fi

    if [ -f /etc/systemd/system/syncthing.service ]; then
        systemctl start syncthing
        systemctl start cron
    fi
}

function remove_syncthing {
    if ! grep -Fxq "install_syncthing" $COMPLETION_FILE; then
        return
    fi
    iptables -D INPUT -p udp --dport $SYNCTHING_PORT -j ACCEPT
    iptables -D INPUT -p tcp --dport $SYNCTHING_PORT -j ACCEPT
    function_check save_firewall_settings
    save_firewall_settings

    systemctl stop syncthing
    systemctl disable syncthing
    apt-get -y remove --purge syncthing
    rm /etc/systemd/system/syncthing.service
    sed -i "/${PROJECT_NAME}-syncthing/d" /etc/crontab
    sed -i '/install_syncthing/d' $COMPLETION_FILE
    sed -i '/configure_firewall_for_syncthing/d' $COMPLETION_FILE
    systemctl restart cron
}

function configure_firewall_for_syncthing {
    if grep -Fxq "configure_firewall_for_syncthing" $COMPLETION_FILE; then
        return
    fi
    iptables -A INPUT -p udp --dport $SYNCTHING_PORT -j ACCEPT
    iptables -A INPUT -p tcp --dport $SYNCTHING_PORT -j ACCEPT
    function_check save_firewall_settings
    save_firewall_settings

    OPEN_PORTS+=("Syncthing $SYNCTHING_PORT")
    echo 'configure_firewall_for_syncthing' >> $COMPLETION_FILE
}

function mesh_install_syncthing {
    chroot "$rootdir" wget -q https://syncthing.net/release-key.txt -O- | apt-key add -

    echo "deb http://apt.syncthing.net/ syncthing release" | tee $rootdir/etc/apt/sources.list.d/syncthing.list
    chroot "$rootdir" apt-get update
    chroot "$rootdir" apt-get -y --force-yes install syncthing

    # This probably does need to run as root so that it can access the Sync directories
    # in each user's home directory
    echo '[Unit]' > $rootdir/etc/systemd/system/syncthing.service
    echo 'Description=Syncthing - Open Source Continuous File Synchronization' >> $rootdir/etc/systemd/system/syncthing.service
    echo 'Documentation=man:syncthing(1)' >> $rootdir/etc/systemd/system/syncthing.service
    echo 'After=network.target' >> $rootdir/etc/systemd/system/syncthing.service
    echo 'Wants=syncthing-inotify@.service' >> $rootdir/etc/systemd/system/syncthing.service
    echo '' >> $rootdir/etc/systemd/system/syncthing.service
    echo '[Service]' >> $rootdir/etc/systemd/system/syncthing.service
    echo 'User=root' >> $rootdir/etc/systemd/system/syncthing.service
    echo 'ExecStart=/usr/bin/syncthing -no-browser -no-restart -logflags=0' >> $rootdir/etc/systemd/system/syncthing.service
    echo 'Restart=on-failure' >> $rootdir/etc/systemd/system/syncthing.service
    echo 'SuccessExitStatus=3 4' >> $rootdir/etc/systemd/system/syncthing.service
    echo 'RestartForceExitStatus=3 4' >> $rootdir/etc/systemd/system/syncthing.service
    echo '' >> $rootdir/etc/systemd/system/syncthing.service
    echo '[Install]' >> $rootdir/etc/systemd/system/syncthing.service
    echo 'WantedBy=multi-user.target' >> $rootdir/etc/systemd/system/syncthing.service
    chroot "$rootdir" systemctl enable syncthing

    echo 'mesh_install_syncthing'
}

function install_syncthing {
    if [ $INSTALLING_MESH ]; then
        mesh_install_syncthing
        return
    fi

    apt-get -y install curl

    curl -s https://syncthing.net/release-key.txt | apt-key add -
    echo "deb http://apt.syncthing.net/ syncthing release" | tee /etc/apt/sources.list.d/syncthing.list
    apt-get update
    apt-get -y install syncthing

    # This probably does need to run as root so that it can access the Sync directories
    # in each user's home directory
    echo '[Unit]' > /etc/systemd/system/syncthing.service
    echo 'Description=Syncthing - Open Source Continuous File Synchronization' >> /etc/systemd/system/syncthing.service
    echo 'Documentation=man:syncthing(1)' >> /etc/systemd/system/syncthing.service
    echo 'After=network.target' >> /etc/systemd/system/syncthing.service
    echo 'Wants=syncthing-inotify@.service' >> /etc/systemd/system/syncthing.service
    echo '' >> /etc/systemd/system/syncthing.service
    echo '[Service]' >> /etc/systemd/system/syncthing.service
    echo 'User=root' >> /etc/systemd/system/syncthing.service
    echo "Environment='all_proxy=socks5://localhost:9050'" >> /etc/systemd/system/syncthing.service
    echo 'ExecStart=/usr/bin/syncthing -no-browser -no-restart -logflags=0' >> /etc/systemd/system/syncthing.service
    echo 'Restart=on-failure' >> /etc/systemd/system/syncthing.service
    echo 'SuccessExitStatus=3 4' >> /etc/systemd/system/syncthing.service
    echo 'RestartForceExitStatus=3 4' >> /etc/systemd/system/syncthing.service
    echo '' >> /etc/systemd/system/syncthing.service
    echo '[Install]' >> /etc/systemd/system/syncthing.service
    echo 'WantedBy=multi-user.target' >> /etc/systemd/system/syncthing.service
    systemctl enable syncthing
    systemctl daemon-reload
    systemctl start syncthing

    function_check cron_add_mins
    cron_add_mins 1 "/usr/local/bin/${PROJECT_NAME}-syncthing > /dev/null"

    function_check configure_firewall_for_syncthing
    configure_firewall_for_syncthing
}

# NOTE: deliberately no exit 0