1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260226122622263226422652266226722682269227022712272227322742275227622772278227922802281228222832284228522862287228822892290229122922293229422952296229722982299230023012302230323042305230623072308230923102311231223132314231523162317231823192320232123222323232423252326232723282329233023312332233323342335233623372338233923402341234223432344234523462347234823492350235123522353235423552356235723582359236023612362236323642365236623672368236923702371237223732374237523762377237823792380238123822383238423852386238723882389239023912392239323942395239623972398239924002401240224032404240524062407240824092410241124122413241424152416241724182419242024212422242324242425242624272428242924302431243224332434243524362437243824392440244124422443244424452446244724482449245024512452245324542455245624572458245924602461246224632464246524662467246824692470247124722473247424752476247724782479248024812482248324842485248624872488248924902491249224932494249524962497249824992500250125022503250425052506250725082509251025112512251325142515251625172518251925202521252225232524252525262527252825292530253125322533253425352536253725382539254025412542254325442545254625472548254925502551255225532554255525562557255825592560256125622563256425652566256725682569257025712572257325742575257625772578257925802581258225832584258525862587258825892590259125922593259425952596259725982599260026012602260326042605260626072608260926102611261226132614261526162617261826192620262126222623262426252626262726282629263026312632263326342635263626372638263926402641264226432644264526462647264826492650265126522653265426552656265726582659266026612662266326642665266626672668266926702671267226732674267526762677267826792680268126822683268426852686268726882689269026912692269326942695269626972698269927002701270227032704270527062707270827092710271127122713271427152716271727182719272027212722272327242725272627272728272927302731273227332734273527362737273827392740274127422743274427452746274727482749275027512752275327542755275627572758275927602761276227632764276527662767276827692770277127722773277427752776277727782779278027812782278327842785278627872788278927902791279227932794279527962797279827992800280128022803280428052806280728082809281028112812281328142815281628172818281928202821282228232824282528262827282828292830283128322833283428352836283728382839284028412842284328442845284628472848284928502851285228532854285528562857285828592860286128622863286428652866286728682869287028712872287328742875287628772878287928802881288228832884288528862887288828892890289128922893289428952896289728982899290029012902290329042905290629072908290929102911291229132914291529162917291829192920292129222923292429252926292729282929293029312932293329342935293629372938293929402941294229432944294529462947294829492950295129522953295429552956295729582959296029612962296329642965296629672968296929702971297229732974297529762977297829792980298129822983298429852986298729882989299029912992299329942995299629972998299930003001300230033004300530063007300830093010301130123013301430153016301730183019302030213022302330243025302630273028302930303031303230333034303530363037303830393040304130423043304430453046304730483049305030513052305330543055305630573058305930603061306230633064306530663067306830693070307130723073307430753076307730783079308030813082308330843085308630873088308930903091309230933094309530963097309830993100310131023103310431053106310731083109311031113112311331143115311631173118311931203121312231233124312531263127312831293130313131323133313431353136313731383139314031413142314331443145314631473148314931503151315231533154315531563157315831593160316131623163316431653166316731683169317031713172317331743175317631773178317931803181318231833184318531863187318831893190319131923193319431953196319731983199320032013202320332043205320632073208320932103211321232133214321532163217321832193220322132223223322432253226322732283229323032313232323332343235323632373238323932403241324232433244324532463247324832493250325132523253325432553256325732583259326032613262326332643265326632673268326932703271327232733274327532763277327832793280328132823283328432853286328732883289329032913292329332943295329632973298329933003301330233033304330533063307330833093310331133123313331433153316331733183319332033213322332333243325332633273328332933303331333233333334333533363337333833393340334133423343334433453346334733483349335033513352335333543355335633573358335933603361336233633364336533663367336833693370337133723373337433753376337733783379338033813382338333843385338633873388338933903391339233933394339533963397339833993400340134023403340434053406340734083409341034113412341334143415341634173418341934203421342234233424342534263427342834293430343134323433343434353436343734383439344034413442344334443445344634473448344934503451345234533454345534563457345834593460346134623463346434653466346734683469347034713472347334743475347634773478347934803481348234833484348534863487348834893490349134923493349434953496349734983499350035013502350335043505350635073508350935103511351235133514351535163517351835193520352135223523352435253526352735283529353035313532353335343535353635373538353935403541354235433544354535463547354835493550355135523553355435553556355735583559356035613562356335643565356635673568356935703571357235733574357535763577357835793580358135823583358435853586358735883589359035913592359335943595359635973598359936003601360236033604360536063607360836093610361136123613361436153616361736183619362036213622362336243625362636273628362936303631363236333634363536363637363836393640364136423643364436453646364736483649365036513652365336543655365636573658365936603661366236633664366536663667366836693670367136723673367436753676367736783679368036813682368336843685368636873688368936903691369236933694369536963697369836993700370137023703370437053706370737083709371037113712371337143715371637173718371937203721372237233724372537263727372837293730373137323733373437353736373737383739374037413742374337443745374637473748374937503751375237533754375537563757375837593760376137623763376437653766376737683769377037713772377337743775377637773778377937803781378237833784378537863787378837893790379137923793379437953796379737983799380038013802380338043805380638073808380938103811381238133814381538163817381838193820382138223823382438253826382738283829383038313832383338343835383638373838383938403841384238433844384538463847384838493850385138523853385438553856385738583859386038613862386338643865386638673868386938703871387238733874387538763877387838793880388138823883388438853886388738883889389038913892389338943895389638973898389939003901390239033904390539063907390839093910391139123913391439153916391739183919392039213922392339243925392639273928392939303931393239333934393539363937393839393940394139423943394439453946394739483949395039513952395339543955395639573958395939603961396239633964396539663967396839693970397139723973397439753976397739783979398039813982398339843985398639873988398939903991399239933994399539963997399839994000400140024003400440054006400740084009401040114012401340144015401640174018401940204021402240234024402540264027402840294030403140324033403440354036403740384039404040414042404340444045404640474048404940504051405240534054405540564057405840594060406140624063406440654066406740684069407040714072407340744075407640774078407940804081408240834084408540864087408840894090409140924093409440954096409740984099410041014102410341044105410641074108410941104111411241134114411541164117411841194120412141224123412441254126412741284129413041314132413341344135413641374138413941404141414241434144414541464147414841494150415141524153415441554156415741584159416041614162416341644165416641674168416941704171417241734174417541764177417841794180418141824183418441854186418741884189419041914192419341944195419641974198419942004201420242034204420542064207420842094210421142124213421442154216421742184219422042214222422342244225422642274228422942304231423242334234423542364237423842394240424142424243424442454246424742484249425042514252425342544255425642574258425942604261426242634264426542664267426842694270427142724273427442754276427742784279428042814282428342844285428642874288428942904291429242934294429542964297429842994300430143024303430443054306430743084309431043114312431343144315431643174318431943204321432243234324432543264327432843294330433143324333433443354336433743384339434043414342434343444345434643474348434943504351435243534354435543564357435843594360436143624363436443654366436743684369437043714372437343744375437643774378437943804381438243834384438543864387438843894390439143924393439443954396439743984399440044014402440344044405440644074408440944104411441244134414441544164417441844194420442144224423442444254426442744284429443044314432443344344435443644374438443944404441444244434444444544464447444844494450445144524453445444554456445744584459446044614462446344644465446644674468446944704471447244734474447544764477447844794480448144824483448444854486448744884489449044914492449344944495449644974498449945004501450245034504450545064507450845094510451145124513451445154516451745184519452045214522452345244525452645274528452945304531453245334534453545364537453845394540454145424543454445454546454745484549455045514552455345544555455645574558455945604561456245634564456545664567456845694570457145724573457445754576457745784579458045814582458345844585458645874588458945904591459245934594459545964597459845994600460146024603460446054606460746084609461046114612461346144615461646174618461946204621462246234624462546264627462846294630463146324633463446354636463746384639464046414642464346444645464646474648464946504651465246534654465546564657465846594660466146624663466446654666466746684669467046714672467346744675467646774678467946804681468246834684468546864687468846894690469146924693469446954696469746984699470047014702470347044705470647074708470947104711471247134714471547164717471847194720472147224723472447254726472747284729473047314732473347344735473647374738473947404741474247434744474547464747474847494750475147524753475447554756475747584759476047614762476347644765476647674768476947704771477247734774477547764777477847794780478147824783478447854786478747884789479047914792479347944795479647974798479948004801480248034804480548064807480848094810481148124813481448154816481748184819482048214822482348244825482648274828482948304831483248334834483548364837483848394840484148424843484448454846484748484849485048514852485348544855485648574858485948604861486248634864486548664867486848694870487148724873487448754876487748784879488048814882488348844885488648874888488948904891489248934894489548964897489848994900490149024903490449054906490749084909491049114912491349144915491649174918491949204921492249234924492549264927492849294930493149324933493449354936493749384939494049414942494349444945494649474948494949504951495249534954495549564957495849594960496149624963496449654966496749684969497049714972497349744975497649774978497949804981498249834984498549864987498849894990499149924993499449954996499749984999500050015002500350045005500650075008500950105011501250135014501550165017501850195020502150225023502450255026502750285029503050315032503350345035503650375038503950405041504250435044504550465047504850495050505150525053505450555056505750585059506050615062506350645065506650675068506950705071507250735074507550765077507850795080508150825083508450855086508750885089509050915092509350945095509650975098509951005101510251035104510551065107510851095110511151125113511451155116511751185119512051215122512351245125512651275128512951305131513251335134513551365137513851395140514151425143514451455146514751485149515051515152515351545155515651575158515951605161516251635164516551665167516851695170517151725173517451755176517751785179518051815182518351845185518651875188518951905191519251935194519551965197519851995200520152025203520452055206520752085209521052115212521352145215521652175218521952205221522252235224522552265227522852295230523152325233523452355236523752385239524052415242524352445245524652475248524952505251525252535254525552565257525852595260526152625263526452655266526752685269527052715272527352745275527652775278527952805281528252835284528552865287528852895290529152925293529452955296529752985299530053015302530353045305530653075308530953105311531253135314531553165317531853195320532153225323532453255326532753285329533053315332533353345335533653375338533953405341534253435344534553465347534853495350535153525353535453555356535753585359536053615362536353645365536653675368536953705371537253735374537553765377537853795380538153825383538453855386538753885389539053915392539353945395539653975398539954005401540254035404540554065407540854095410541154125413541454155416541754185419542054215422542354245425542654275428542954305431543254335434543554365437543854395440544154425443544454455446544754485449545054515452545354545455545654575458545954605461546254635464546554665467546854695470547154725473547454755476547754785479548054815482548354845485548654875488548954905491549254935494549554965497549854995500550155025503550455055506550755085509551055115512551355145515551655175518551955205521552255235524552555265527552855295530553155325533553455355536553755385539554055415542554355445545554655475548554955505551555255535554555555565557555855595560556155625563556455655566556755685569557055715572557355745575557655775578557955805581558255835584558555865587558855895590559155925593559455955596559755985599560056015602560356045605560656075608560956105611561256135614561556165617561856195620562156225623562456255626562756285629563056315632563356345635563656375638563956405641564256435644564556465647564856495650565156525653565456555656565756585659566056615662566356645665566656675668566956705671567256735674567556765677567856795680568156825683568456855686568756885689569056915692569356945695569656975698569957005701570257035704570557065707570857095710571157125713571457155716571757185719572057215722572357245725572657275728572957305731573257335734573557365737573857395740574157425743574457455746574757485749575057515752575357545755575657575758575957605761576257635764576557665767576857695770577157725773577457755776577757785779578057815782578357845785578657875788578957905791579257935794579557965797579857995800580158025803580458055806580758085809581058115812581358145815581658175818581958205821582258235824582558265827582858295830583158325833583458355836583758385839584058415842584358445845584658475848584958505851585258535854585558565857585858595860586158625863586458655866586758685869587058715872587358745875587658775878587958805881588258835884588558865887588858895890589158925893589458955896589758985899590059015902590359045905590659075908590959105911591259135914591559165917591859195920592159225923592459255926592759285929593059315932593359345935593659375938593959405941594259435944594559465947594859495950595159525953595459555956595759585959596059615962596359645965596659675968596959705971597259735974597559765977597859795980598159825983598459855986598759885989599059915992599359945995599659975998599960006001600260036004600560066007600860096010601160126013601460156016601760186019602060216022602360246025602660276028602960306031603260336034603560366037603860396040604160426043604460456046604760486049605060516052605360546055605660576058605960606061606260636064606560666067606860696070607160726073607460756076607760786079608060816082608360846085608660876088608960906091609260936094609560966097609860996100610161026103610461056106610761086109611061116112611361146115611661176118611961206121612261236124612561266127612861296130613161326133613461356136613761386139614061416142614361446145614661476148614961506151615261536154615561566157615861596160616161626163616461656166616761686169617061716172617361746175617661776178617961806181618261836184618561866187618861896190619161926193619461956196619761986199620062016202620362046205620662076208620962106211621262136214621562166217621862196220622162226223622462256226622762286229623062316232623362346235623662376238623962406241624262436244624562466247624862496250625162526253625462556256625762586259626062616262626362646265626662676268626962706271627262736274627562766277627862796280628162826283628462856286628762886289629062916292629362946295629662976298629963006301630263036304630563066307630863096310631163126313631463156316631763186319632063216322632363246325632663276328632963306331633263336334633563366337633863396340634163426343634463456346634763486349635063516352635363546355635663576358635963606361636263636364636563666367636863696370637163726373637463756376637763786379638063816382638363846385638663876388638963906391639263936394639563966397639863996400640164026403640464056406640764086409641064116412641364146415641664176418641964206421642264236424642564266427642864296430643164326433643464356436643764386439644064416442644364446445644664476448644964506451645264536454645564566457645864596460646164626463646464656466646764686469647064716472647364746475647664776478647964806481648264836484648564866487648864896490649164926493649464956496649764986499650065016502650365046505650665076508650965106511651265136514651565166517651865196520652165226523652465256526652765286529653065316532653365346535653665376538653965406541654265436544654565466547654865496550655165526553655465556556655765586559656065616562656365646565656665676568656965706571657265736574657565766577657865796580658165826583658465856586658765886589659065916592659365946595659665976598659966006601660266036604660566066607660866096610661166126613661466156616661766186619662066216622662366246625662666276628662966306631663266336634663566366637663866396640664166426643664466456646664766486649665066516652665366546655665666576658665966606661666266636664666566666667666866696670667166726673667466756676667766786679668066816682668366846685668666876688668966906691669266936694669566966697669866996700670167026703670467056706670767086709671067116712671367146715671667176718671967206721672267236724672567266727672867296730673167326733673467356736673767386739674067416742674367446745674667476748674967506751675267536754675567566757675867596760676167626763676467656766676767686769677067716772677367746775677667776778677967806781678267836784678567866787678867896790679167926793679467956796679767986799680068016802680368046805680668076808680968106811681268136814681568166817681868196820682168226823682468256826682768286829683068316832683368346835683668376838683968406841684268436844684568466847684868496850685168526853685468556856685768586859686068616862686368646865686668676868686968706871687268736874687568766877687868796880688168826883688468856886688768886889689068916892689368946895689668976898689969006901690269036904690569066907690869096910691169126913691469156916691769186919692069216922692369246925692669276928692969306931693269336934693569366937693869396940694169426943694469456946694769486949695069516952695369546955695669576958695969606961696269636964696569666967696869696970697169726973697469756976697769786979698069816982698369846985698669876988698969906991699269936994699569966997699869997000700170027003700470057006700770087009701070117012701370147015701670177018701970207021702270237024702570267027702870297030703170327033703470357036703770387039704070417042704370447045704670477048704970507051705270537054705570567057705870597060706170627063706470657066706770687069707070717072707370747075707670777078707970807081708270837084708570867087708870897090709170927093709470957096709770987099710071017102710371047105710671077108710971107111711271137114711571167117711871197120712171227123712471257126712771287129713071317132713371347135713671377138713971407141714271437144714571467147714871497150715171527153715471557156715771587159716071617162716371647165716671677168716971707171717271737174717571767177717871797180718171827183718471857186718771887189719071917192719371947195719671977198719972007201720272037204720572067207720872097210721172127213721472157216721772187219722072217222722372247225722672277228722972307231723272337234723572367237723872397240724172427243724472457246724772487249725072517252725372547255725672577258725972607261726272637264726572667267726872697270727172727273727472757276727772787279728072817282728372847285728672877288728972907291729272937294729572967297729872997300730173027303730473057306730773087309731073117312731373147315731673177318731973207321732273237324732573267327732873297330733173327333733473357336733773387339734073417342734373447345734673477348734973507351735273537354735573567357735873597360736173627363736473657366736773687369737073717372737373747375737673777378737973807381738273837384738573867387738873897390739173927393739473957396739773987399740074017402740374047405740674077408740974107411741274137414741574167417741874197420742174227423742474257426742774287429743074317432743374347435743674377438743974407441744274437444744574467447744874497450745174527453745474557456745774587459746074617462746374647465746674677468746974707471747274737474747574767477747874797480748174827483748474857486748774887489749074917492749374947495749674977498749975007501750275037504750575067507750875097510751175127513751475157516751775187519752075217522752375247525752675277528752975307531753275337534753575367537753875397540754175427543754475457546754775487549755075517552755375547555755675577558755975607561756275637564756575667567756875697570757175727573757475757576757775787579758075817582758375847585758675877588758975907591759275937594759575967597759875997600760176027603760476057606760776087609761076117612761376147615761676177618761976207621762276237624762576267627762876297630763176327633763476357636763776387639764076417642764376447645764676477648764976507651765276537654765576567657765876597660766176627663766476657666766776687669767076717672767376747675767676777678767976807681768276837684768576867687768876897690769176927693769476957696769776987699770077017702770377047705770677077708770977107711771277137714771577167717771877197720772177227723772477257726772777287729773077317732773377347735773677377738773977407741774277437744774577467747774877497750775177527753775477557756775777587759776077617762776377647765776677677768776977707771777277737774777577767777777877797780778177827783778477857786778777887789779077917792779377947795779677977798779978007801780278037804780578067807780878097810781178127813781478157816781778187819782078217822782378247825782678277828782978307831783278337834783578367837783878397840784178427843784478457846784778487849785078517852785378547855785678577858785978607861786278637864786578667867786878697870787178727873787478757876787778787879788078817882788378847885788678877888788978907891789278937894789578967897789878997900790179027903790479057906790779087909791079117912791379147915791679177918791979207921792279237924792579267927792879297930793179327933793479357936793779387939794079417942794379447945794679477948794979507951795279537954795579567957795879597960796179627963796479657966796779687969797079717972797379747975797679777978797979807981798279837984798579867987798879897990799179927993799479957996799779987999800080018002800380048005800680078008800980108011801280138014801580168017801880198020802180228023802480258026802780288029803080318032803380348035803680378038803980408041804280438044804580468047804880498050805180528053805480558056805780588059806080618062806380648065806680678068806980708071807280738074807580768077807880798080808180828083808480858086808780888089809080918092809380948095809680978098809981008101810281038104810581068107810881098110811181128113811481158116811781188119812081218122812381248125812681278128812981308131813281338134813581368137813881398140814181428143814481458146814781488149815081518152815381548155815681578158815981608161816281638164816581668167816881698170817181728173817481758176817781788179818081818182818381848185818681878188818981908191819281938194819581968197819881998200820182028203820482058206820782088209821082118212821382148215821682178218821982208221822282238224822582268227822882298230823182328233823482358236823782388239824082418242824382448245824682478248824982508251825282538254825582568257825882598260826182628263826482658266826782688269827082718272827382748275827682778278827982808281828282838284828582868287828882898290829182928293829482958296829782988299830083018302830383048305830683078308830983108311831283138314831583168317831883198320832183228323832483258326832783288329833083318332833383348335833683378338833983408341834283438344834583468347834883498350835183528353835483558356835783588359836083618362836383648365836683678368836983708371837283738374837583768377837883798380838183828383838483858386838783888389839083918392839383948395839683978398839984008401840284038404840584068407840884098410841184128413841484158416841784188419842084218422842384248425842684278428842984308431843284338434843584368437843884398440844184428443844484458446844784488449845084518452845384548455845684578458845984608461846284638464846584668467846884698470847184728473847484758476847784788479848084818482848384848485848684878488848984908491849284938494849584968497849884998500850185028503850485058506850785088509851085118512851385148515851685178518851985208521852285238524852585268527852885298530853185328533853485358536853785388539854085418542854385448545854685478548854985508551855285538554855585568557855885598560856185628563856485658566856785688569857085718572857385748575857685778578857985808581858285838584858585868587858885898590859185928593859485958596859785988599860086018602860386048605860686078608860986108611861286138614861586168617861886198620862186228623862486258626862786288629863086318632863386348635863686378638863986408641864286438644864586468647864886498650865186528653865486558656865786588659866086618662866386648665866686678668866986708671867286738674867586768677867886798680868186828683868486858686868786888689869086918692869386948695869686978698869987008701870287038704870587068707870887098710871187128713871487158716871787188719872087218722872387248725872687278728872987308731873287338734873587368737873887398740874187428743874487458746874787488749875087518752875387548755875687578758875987608761876287638764876587668767876887698770877187728773877487758776877787788779878087818782878387848785878687878788878987908791879287938794879587968797879887998800880188028803880488058806880788088809881088118812881388148815881688178818881988208821882288238824882588268827882888298830883188328833883488358836883788388839884088418842884388448845884688478848884988508851885288538854885588568857885888598860886188628863886488658866886788688869887088718872887388748875887688778878887988808881888288838884888588868887888888898890889188928893889488958896889788988899890089018902890389048905890689078908890989108911891289138914891589168917891889198920892189228923892489258926892789288929893089318932
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # This install script is intended for use with Debian Jessie
  12. #
  13. # License
  14. # =======
  15. #
  16. # Copyright (C) 2014-2015 Bob Mottram <bob@robotics.uk.to>
  17. #
  18. # This program is free software: you can redistribute it and/or modify
  19. # it under the terms of the GNU General Public License as published by
  20. # the Free Software Foundation, either version 3 of the License, or
  21. # (at your option) any later version.
  22. #
  23. # This program is distributed in the hope that it will be useful,
  24. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  25. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  26. # GNU General Public License for more details.
  27. #
  28. # You should have received a copy of the GNU General Public License
  29. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  30. NO_OF_ARGS=$#
  31. # Web site
  32. FREEDOMBONE_WEBSITE="http://freedombone.uk.to"
  33. # Contact details
  34. FREEDOMBONE_BITMESSAGE="BM-2cWuhmBvVdfrHhLoZTdspCkKeiTorUesSL"
  35. # Are we installing on a Beaglebone Black (BBB) or some other system?
  36. INSTALLING_ON_BBB="no"
  37. # Version number of this script
  38. VERSION="1.00"
  39. # Different system variants which may be specified within
  40. # the SYSTEM_TYPE option
  41. VARIANT_FULL="full"
  42. VARIANT_WRITER="writer"
  43. VARIANT_CLOUD="cloud"
  44. VARIANT_CHAT="chat"
  45. VARIANT_MAILBOX="mailbox"
  46. VARIANT_NONMAILBOX="nonmailbox"
  47. VARIANT_SOCIAL="social"
  48. VARIANT_MEDIA="media"
  49. VARIANT_DEVELOPER="developer"
  50. DEFAULT_DOMAIN_NAME=
  51. DEFAULT_DOMAIN_CODE=
  52. MY_USERNAME=
  53. SYSTEM_TYPE=$VARIANT_FULL
  54. # whether the system is being installed from a pre-created configuration file
  55. INSTALLING_FROM_CONFIGURATION_FILE="no"
  56. # An optional configuration file which overrides some of these variables
  57. CONFIGURATION_FILE="freedombone.cfg"
  58. SSH_PORT=2222
  59. # parameters used when adding a new domain
  60. DDNS_PROVIDER="default@freedns.afraid.org"
  61. DDNS_USERNAME=
  62. DDNS_PASSWORD=
  63. CURRENT_DDNS_DOMAIN=
  64. # Minimum number of characters in a password
  65. MINIMUM_PASSWORD_LENGTH=10
  66. # number of CPU cores
  67. CPU_CORES=1
  68. # The static IP address of the system within the local network
  69. LOCAL_NETWORK_STATIC_IP_ADDRESS="192.168.1.60"
  70. # IP address of the router (gateway)
  71. ROUTER_IP_ADDRESS="192.168.1.254"
  72. # DNS
  73. NAMESERVER1='213.73.91.35'
  74. NAMESERVER2='85.214.20.141'
  75. # whether to route outgoing traffic through Tor
  76. ROUTE_THROUGH_TOR="no"
  77. # Why use Google as a time source?
  78. # The thinking here is that it's likely to be reliable and fast.
  79. # The ping doesn't reveal any information other than that the server
  80. # is running, and if anyone maliciously alters the time on Google's
  81. # servers then that would certainly be newsworthy and they'd be
  82. # likely to do something about it quickly.
  83. # If you have better time sources then change them here.
  84. TLS_TIME_SOURCE1="google.com"
  85. TLS_TIME_SOURCE2="www.ptb.de"
  86. # kernel specifically tweaked for the Beaglebone Black
  87. # See http://rcn-ee.net/deb/jessie-armhf/
  88. KERNEL_VERSION="v3.15.10-bone8"
  89. # Whether or not to use the beaglebone's hardware random number generator
  90. USE_HWRNG="yes"
  91. # Whether this system is being installed within a docker container
  92. INSTALLED_WITHIN_DOCKER="no"
  93. # If you want to run a public mailing list specify its name here.
  94. # There should be no spaces in the name
  95. PUBLIC_MAILING_LIST=
  96. # Optional different domain name for the public mailing list
  97. PUBLIC_MAILING_LIST_DOMAIN_NAME=
  98. # Directory where the public mailing list data is stored
  99. PUBLIC_MAILING_LIST_DIRECTORY="/var/spool/mlmmj"
  100. # If you want to run an encrypted mailing list specify its name here.
  101. # There should be no spaces in the name
  102. PRIVATE_MAILING_LIST=
  103. # Domain name for mediagoblin installation
  104. MEDIAGOBLIN_DOMAIN_NAME=
  105. MEDIAGOBLIN_CODE=
  106. MEDIAGOBLIN_REPO="https://gitorious.org/mediagoblin/mediagoblin.git"
  107. MEDIAGOBLIN_ADMIN_PASSWORD=
  108. # Domain name for microblog installation
  109. MICROBLOG_DOMAIN_NAME=
  110. MICROBLOG_CODE=
  111. MICROBLOG_REPO="git://gitorious.org/social/mainline.git"
  112. MICROBLOG_ADMIN_PASSWORD=
  113. # Domain name for redmatrix installation
  114. REDMATRIX_DOMAIN_NAME=
  115. REDMATRIX_CODE=
  116. REDMATRIX_REPO="https://github.com/redmatrix/redmatrix.git"
  117. REDMATRIX_ADDONS_REPO="https://github.com/redmatrix/redmatrix-addons.git"
  118. REDMATRIX_ADMIN_PASSWORD=
  119. # Domain name for git hosting installation
  120. GIT_DOMAIN_NAME=
  121. GIT_CODE=
  122. GIT_DOMAIN_REPO="https://github.com/gogits/gogs.git"
  123. GIT_ADMIN_PASSWORD=
  124. # Domain name for Owncloud installation
  125. OWNCLOUD_DOMAIN_NAME=
  126. OWNCLOUD_CODE=
  127. OWNCLOUD_ADMIN_PASSWORD=
  128. # Domain name for your wiki
  129. WIKI_DOMAIN_NAME=
  130. WIKI_ADMIN_PASSWORD=
  131. WIKI_TITLE="Freedombone Wiki"
  132. WIKI_CODE=
  133. # Domain name for your blog
  134. FULLBLOG_DOMAIN_NAME=
  135. FULLBLOG_CODE=
  136. MY_BLOG_TITLE="My Blog"
  137. MY_BLOG_SUBTITLE="Another Freedombone Blog"
  138. GPG_KEYSERVER="hkp://keys.gnupg.net"
  139. # whether to encrypt all incoming email with your public key
  140. GPG_ENCRYPT_STORED_EMAIL="yes"
  141. # gets set to yes if gpg keys are imported from usb
  142. GPG_KEYS_IMPORTED="no"
  143. # optionally you can provide your exported GPG key pair here
  144. # Note that the private key file will be deleted after use
  145. # If these are unspecified then a new GPG key will be created
  146. MY_GPG_PUBLIC_KEY=
  147. MY_GPG_PRIVATE_KEY=
  148. # optionally specify your public key ID
  149. MY_GPG_PUBLIC_KEY_ID=
  150. # If you have existing mail within a Maildir
  151. # you can specify the directory here and the files
  152. # will be imported
  153. IMPORT_MAILDIR=
  154. # The Debian package repository to use.
  155. DEBIAN_REPO="ftp.us.debian.org"
  156. DEBIAN_VERSION="jessie"
  157. # Directory where source code is downloaded and compiled
  158. INSTALL_DIR=$HOME/build
  159. # device name for an attached usb drive
  160. USB_DRIVE=/dev/sda1
  161. # Location where the USB drive is mounted to
  162. USB_MOUNT=/mnt/usb
  163. # name of a script used to upgrade the system
  164. UPGRADE_SCRIPT_NAME="freedombone-upgrade"
  165. # name of a script which keeps running processes going even if they crash
  166. WATCHDOG_SCRIPT_NAME="keepon"
  167. # Name of a script used to create a backup of the system on usb drive
  168. BACKUP_SCRIPT_NAME="backup"
  169. # Name of a script used to restore the system from usb drive
  170. RESTORE_SCRIPT_NAME="restore"
  171. # name of a script used to backup to friends servers
  172. BACKUP_TO_FRIENDS_SCRIPT_NAME="backup2friends"
  173. # name of a script used to restore backed up data from a friend
  174. RESTORE_FROM_FRIEND_SCRIPT_NAME="restorefromfriend"
  175. # Location of the certificate used to encrypt backups
  176. BACKUP_CERTIFICATE=/etc/ssl/private/backup.key
  177. # memory limit for php in MB
  178. MAX_PHP_MEMORY=64
  179. # default MariaDB password
  180. MARIADB_PASSWORD=
  181. # Directory where XMPP settings are stored
  182. XMPP_DIRECTORY="/var/lib/prosody"
  183. # file containing a list of remote locations to backup to
  184. # Format: [username@friendsdomain//home/username] [ssh_password]
  185. # With the only space character being between the server and the password
  186. FRIENDS_SERVERS_LIST=/home/$MY_USERNAME/backup.list
  187. # list of encryption protocols
  188. SSL_PROTOCOLS="TLSv1 TLSv1.1 TLSv1.2"
  189. # list of ciphers to use. See bettercrypto.org recommendations
  190. SSL_CIPHERS="EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA"
  191. # ssh (from https://stribika.github.io/2015/01/04/secure-secure-shell.html)
  192. SSH_CIPHERS="chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr"
  193. SSH_MACS="hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-ripemd160-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,hmac-ripemd160,umac-128@openssh.com"
  194. SSH_KEX="curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256"
  195. SSH_HOST_KEY_ALGORITHMS="ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-rsa-cert-v00@openssh.com,ssh-ed25519,ssh-rsa"
  196. # xmpp ciphers and curve
  197. XMPP_CIPHERS='"EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA"'
  198. XMPP_ECC_CURVE='"secp384r1"'
  199. # the default email address
  200. MY_EMAIL_ADDRESS=$MY_USERNAME@$DEFAULT_DOMAIN_NAME
  201. # optionally specify your name to appear on the blog
  202. MY_NAME=$DEFAULT_DOMAIN_NAME
  203. export DEBIAN_FRONTEND=noninteractive
  204. # logging level for Nginx
  205. WEBSERVER_LOG_LEVEL='crit'
  206. # used to limit CPU usage
  207. CPULIMIT='/usr/bin/cpulimit -l 20 -e'
  208. # command to create a git repository
  209. CREATE_GIT_PROJECT_COMMAND='create-project'
  210. # File which keeps track of what has already been installed
  211. COMPLETION_FILE=$HOME/freedombone-completed.txt
  212. if [ ! -f $COMPLETION_FILE ]; then
  213. touch $COMPLETION_FILE
  214. fi
  215. # Your github username
  216. GITHUB_USERNAME=
  217. # Directory where github projects will be backed up
  218. GITHUB_BACKUP_DIRECTORY=/var/backups/github
  219. # Used to indicate whether the backup contains MariaDB databases or not
  220. BACKUP_INCLUDES_DATABASES="no"
  221. # contains the mysql root password which
  222. # is used for backups and repair
  223. DATABASE_PASSWORD_FILE=/root/dbpass
  224. # log file where details of remote backups are stored
  225. REMOTE_BACKUPS_LOG=/var/log/remotebackups.log
  226. # message if something fails to install
  227. CHECK_MESSAGE="Check your internet connection, /etc/network/interfaces and /etc/resolv.conf, then delete $COMPLETION_FILE, run 'rm -fR /var/lib/apt/lists/* && apt-get update --fix-missing' and run this script again. If hash sum mismatches persist then try setting $DEBIAN_REPO to a different mirror and also change /etc/apt/sources.list."
  228. # web site used to obtain the external IP address of the system
  229. GET_IP_ADDRESS_URL="checkip.two-dns.de"
  230. # Password used for VoIP server
  231. VOIP_SERVER_PASSWORD=
  232. # Port on which VoIP server listens
  233. VOIP_PORT=64738
  234. # Location of VoIP database and configuration
  235. VOIP_DATABASE="mumble-server.sqlite"
  236. VOIP_CONFIG_FILE="mumble-server.ini"
  237. # other possible services to obtain the external IP address
  238. EXTERNAL_IP_SERVICES=( \
  239. 'https://check.torproject.org/' \
  240. 'https://www.whatsmydns.net/whats-my-ip-address.html' \
  241. 'https://www.privateinternetaccess.com/pages/whats-my-ip/' \
  242. 'http://checkip.two-dns.de' \
  243. 'http://ip.dnsexit.com' \
  244. 'http://ifconfig.me/ip' \
  245. 'http://ipecho.net/plain' \
  246. 'http://checkip.dyndns.org/plain' \
  247. 'http://ipogre.com/linux.php' \
  248. 'http://whatismyipaddress.com/' \
  249. 'http://ip.my-proxy.com/' \
  250. 'http://websiteipaddress.com/WhatIsMyIp' \
  251. 'http://getmyipaddress.org/' \
  252. 'http://www.my-ip-address.net/' \
  253. 'http://myexternalip.com/raw' \
  254. 'http://www.canyouseeme.org/' \
  255. 'http://www.trackip.net/' \
  256. 'http://icanhazip.com/' \
  257. 'http://www.iplocation.net/' \
  258. 'http://www.howtofindmyipaddress.com/' \
  259. 'http://www.ipchicken.com/' \
  260. 'http://whatsmyip.net/' \
  261. 'http://www.ip-adress.com/' \
  262. 'http://checkmyip.com/' \
  263. 'http://www.tracemyip.org/' \
  264. 'http://checkmyip.net/' \
  265. 'http://www.lawrencegoetz.com/programs/ipinfo/' \
  266. 'http://www.findmyip.co/' \
  267. 'http://ip-lookup.net/' \
  268. 'http://www.dslreports.com/whois' \
  269. 'http://www.mon-ip.com/en/my-ip/' \
  270. 'http://www.myip.ru' \
  271. 'http://ipgoat.com/' \
  272. 'http://www.myipnumber.com/my-ip-address.asp' \
  273. 'http://www.whatsmyipaddress.net/' \
  274. 'http://formyip.com/' \
  275. 'http://www.displaymyip.com/' \
  276. 'http://www.bobborst.com/tools/whatsmyip/' \
  277. 'http://www.geoiptool.com/' \
  278. 'http://checkip.dyndns.com/' \
  279. 'http://myexternalip.com/' \
  280. 'http://www.ip-adress.eu/' \
  281. 'http://www.infosniper.net/' \
  282. 'http://wtfismyip.com/' \
  283. 'http://ipinfo.io/' \
  284. 'http://httpbin.org/ip')
  285. # cjdns settings
  286. ENABLE_CJDNS="no"
  287. CJDNS_PRIVATE_KEY=
  288. CJDNS_PUBLIC_KEY=
  289. CJDNS_IPV6=
  290. CJDNS_PASSWORD=
  291. CJDNS_PORT=
  292. function show_help {
  293. echo ''
  294. echo 'freedombone -c [configuration file]'
  295. echo ''
  296. echo ' -h --help Show help'
  297. echo ' menuconfig Easy interactive installation'
  298. echo ' -c --config Installing from a configuration file'
  299. echo ' --bbb Installing on Beaglebone Black'
  300. echo ' -u --user User to install the system as'
  301. echo ' -d --domain Default domain name'
  302. echo ' -s --system System type'
  303. echo ' --ip Static LAN IP address of the system'
  304. echo ' --iprouter LAN IP address of the internet router'
  305. echo ' --ddns Dynamic DNS provider domain'
  306. echo ' --ddnsuser Dynamic DNS provider username'
  307. echo ' --ddnspass Dynamic DNS provider password'
  308. echo ''
  309. echo ' --microblogdomain Microblog domain name'
  310. echo ' --wikidomain Wiki domain name'
  311. echo ' --blogdomain Blog domain name'
  312. echo ' --ownclouddomain Owncloud domain name'
  313. echo ' --redmatrixdomain Redmatrix domain name'
  314. echo ' --gitdomain Git hosting domain name'
  315. echo ' -t --time Domain used as a TLS time source'
  316. echo ' --ssh ssh port number'
  317. echo ' --list Public mailing list name'
  318. echo ' --cores Number of CPU cores'
  319. echo ' --name Your name'
  320. echo ' --email Your email address'
  321. echo ' --usb Path for the USB drive (eg. /dev/sdb1)'
  322. echo ' --cjdns Enable CJDNS'
  323. echo ' --vpass VoIP server password'
  324. echo ' --vport VoIP server port'
  325. echo ' --ns1 First DNS nameserver'
  326. echo ' --ns2 Second DNS nameserver'
  327. echo ' --repo Debian repository'
  328. echo ''
  329. echo 'system types'
  330. echo '------------'
  331. echo 'This can either be blank if you wish to install the full system,'
  332. echo "or for more specialised variants you can specify '$VARIANT_MAILBOX', '$VARIANT_CLOUD',"
  333. echo "'$VARIANT_CHAT', '$VARIANT_SOCIAL', '$VARIANT_MEDIA', '$VARIANT_WRITER' or '$VARIANT_DEVELOPER'."
  334. echo "If you wish to install everything except email then use the '$VARIANT_NONMAILBOX' variaint."
  335. echo ''
  336. exit 0
  337. }
  338. function interactive_configuration_remote_backups {
  339. if [ ! -f /usr/local/bin/freedombone-remote ]; then
  340. if [ ! -f /usr/bin/freedombone-remote ]; then
  341. echo 'The command freedombone-remote was not found'
  342. exit 87354
  343. fi
  344. fi
  345. freedombone-remote -u $MY_USERNAME -l $FRIENDS_SERVERS_LIST -m $MINIMUM_PASSWORD_LENGTH
  346. if [ ! "$?" = "0" ]; then
  347. echo 'Command failed:'
  348. echo ''
  349. echo " freedombone-remote -u $MY_USERNAME -l $FRIENDS_SERVERS_LIST -m $MINIMUM_PASSWORD_LENGTH"
  350. echo ''
  351. exit 65892
  352. fi
  353. }
  354. # test a domain name to see if it's valid
  355. function validate_domain_name {
  356. # count the number of dots in the domain name
  357. dots=${TEST_DOMAIN_NAME//[^.]}
  358. no_of_dots=${#dots}
  359. if (( $no_of_dots > 3 )); then
  360. TEST_DOMAIN_NAME="The domain $TEST_DOMAIN_NAME has too many subdomains. It should be of the type w.x.y.z, x.y.z or y.z"
  361. fi
  362. if (( $no_of_dots == 0 )); then
  363. TEST_DOMAIN_NAME="The domain $TEST_DOMAIN_NAME has no top level domain. It should be of the type w.x.y.z, x.y.z or y.z"
  364. fi
  365. }
  366. function interactive_configuration {
  367. if [ ! -f /usr/local/bin/freedombone-config ]; then
  368. if [ ! -f /usr/bin/freedombone-config ]; then
  369. echo 'The command freedombone-config was not found'
  370. exit 63935
  371. fi
  372. fi
  373. freedombone-config \
  374. -f $CONFIGURATION_FILE \
  375. -w $FREEDOMBONE_WEBSITE \
  376. -b $FREEDOMBONE_BITMESSAGE \
  377. -m $MINIMUM_PASSWORD_LENGTH
  378. if [ ! "$?" = "0" ]; then
  379. echo 'Command failed:'
  380. echo ''
  381. echo " freedombone-config -u $MY_USERNAME -f $CONFIGURATION_FILE -w $FREEDOMBONE_WEBSITE -b $FREEDOMBONE_BITMESSAGE -m $MINIMUM_PASSWORD_LENGTH"
  382. echo ''
  383. exit 73594
  384. fi
  385. FRIENDS_SERVERS_LIST=/home/$MY_USERNAME/backup.list
  386. dialog --title "Encrypted backup to other servers" \
  387. --backtitle "Freedombone Configuration" \
  388. --defaultno \
  389. --yesno "\nDo you wish to configure some remote backup locations?" 7 60
  390. sel=$?
  391. case $sel in
  392. 0) interactive_configuration_remote_backups;;
  393. esac
  394. }
  395. if [[ $1 == "menuconfig" ]]; then
  396. interactive_configuration
  397. else
  398. while [[ $# > 1 ]]
  399. do
  400. key="$1"
  401. case $key in
  402. -h|--help)
  403. show_help
  404. ;;
  405. # load a configuration file
  406. -c|--config)
  407. shift
  408. CONFIGURATION_FILE="$1"
  409. INSTALLING_FROM_CONFIGURATION_FILE="yes"
  410. break
  411. ;;
  412. # username within /home
  413. -u|--user)
  414. shift
  415. MY_USERNAME="$1"
  416. ;;
  417. # microblog domain name
  418. --microblogdomain)
  419. shift
  420. MICROBLOG_DOMAIN_NAME="$1"
  421. ;;
  422. # wiki domain name
  423. --wikidomain)
  424. shift
  425. WIKI_DOMAIN_NAME="$1"
  426. ;;
  427. # blog domain name
  428. --blogdomain)
  429. shift
  430. FULLBLOG_DOMAIN_NAME="$1"
  431. ;;
  432. # owncloud domain name
  433. --ownclouddomain)
  434. shift
  435. OWNCLOUD_DOMAIN_NAME="$1"
  436. ;;
  437. # redmatrix domain name
  438. --redmatrixdomain)
  439. shift
  440. REDMATRIX_DOMAIN_NAME="$1"
  441. ;;
  442. # git hosting domain name
  443. --gitdomain)
  444. shift
  445. GIT_DOMAIN_NAME="$1"
  446. ;;
  447. # default domain name
  448. -d|--domain)
  449. shift
  450. DEFAULT_DOMAIN_NAME="$1"
  451. ;;
  452. # The type of system
  453. -s|--system)
  454. shift
  455. SYSTEM_TYPE="$1"
  456. ;;
  457. # The dynamic DNS provider
  458. --ddns)
  459. shift
  460. DDNS_PROVIDER="$1"
  461. ;;
  462. # Username for the synamic DNS provider
  463. --ddnsuser)
  464. shift
  465. DDNS_USERNAME="$1"
  466. ;;
  467. # Password for the synamic DNS provider
  468. --ddnspass)
  469. shift
  470. DDNS_PASSWORD="$1"
  471. ;;
  472. # Whether this installation is on a Beaglebone Black
  473. --bbb)
  474. INSTALLING_ON_BBB="yes"
  475. ;;
  476. # Domain name to use as a TLS time source
  477. -t|--time)
  478. shift
  479. TLS_TIME_SOURCE1="$1"
  480. ;;
  481. # Static IP address for the system
  482. --ip)
  483. shift
  484. LOCAL_NETWORK_STATIC_IP_ADDRESS=$1
  485. ;;
  486. # IP address for the internet router
  487. --iprouter)
  488. shift
  489. ROUTER_IP_ADDRESS=$1
  490. ;;
  491. # ssh port
  492. --ssh)
  493. shift
  494. SSH_PORT=$1
  495. ;;
  496. # public mailing list name
  497. --list)
  498. shift
  499. PUBLIC_MAILING_LIST="$1"
  500. ;;
  501. # Number of CPU cores
  502. --cores)
  503. shift
  504. CPU_CORES=$1
  505. ;;
  506. # my name
  507. --name)
  508. shift
  509. MY_NAME="$1"
  510. ;;
  511. # my email address
  512. --email)
  513. shift
  514. MY_EMAIL_ADDRESS="$1"
  515. ;;
  516. # USB drive
  517. --usb)
  518. shift
  519. USB_DRIVE=$1
  520. ;;
  521. # Enable CJDNS
  522. --cjdns)
  523. shift
  524. ENABLE_CJDNS="yes"
  525. ;;
  526. # VoIP server password
  527. --vpass)
  528. shift
  529. VOIP_SERVER_PASSWORD=$1
  530. ;;
  531. # VoIP server port
  532. --vport)
  533. shift
  534. VOIP_PORT=$1
  535. ;;
  536. # DNS Nameserver 1
  537. --ns1)
  538. shift
  539. NAMESERVER1=$1
  540. ;;
  541. # DNS Nameserver 2
  542. --ns2)
  543. shift
  544. NAMESERVER2=$1
  545. ;;
  546. # Debian repository
  547. --repo)
  548. shift
  549. DEBIAN_REPO=$1
  550. ;;
  551. *)
  552. # unknown option
  553. ;;
  554. esac
  555. shift
  556. done
  557. fi
  558. function parse_args {
  559. if [[ $NO_OF_ARGS == 0 ]]; then
  560. echo 'no_of_args = 0'
  561. show_help
  562. exit 0
  563. fi
  564. if [ ! -d /home/$MY_USERNAME ]; then
  565. echo "There is no user '$MY_USERNAME' on the system. Use 'adduser $MY_USERNAME' to create the user."
  566. exit 1
  567. fi
  568. if [ ! "$DEFAULT_DOMAIN_NAME" ]; then
  569. echo 'No default domain specified'
  570. show_help
  571. exit 2
  572. fi
  573. if [ ! $MY_USERNAME ]; then
  574. echo 'No username specified'
  575. show_help
  576. exit 3
  577. fi
  578. if [ ! $DDNS_USERNAME ]; then
  579. echo 'Please provide the username for your dynamic DNS provider with the --ddnsuser option'
  580. exit 7823
  581. fi
  582. if [ ! $DDNS_PASSWORD ]; then
  583. echo 'Please provide the password for your dynamic DNS provider with the --ddnspass option'
  584. exit 6382
  585. fi
  586. if [ ! $SYSTEM_TYPE ]; then
  587. SYSTEM_TYPE=$VARIANT_FULL
  588. fi
  589. if [[ $SYSTEM_TYPE != $VARIANT_WRITER && $SYSTEM_TYPE != $VARIANT_CLOUD && $SYSTEM_TYPE != $VARIANT_CHAT && $SYSTEM_TYPE != $VARIANT_MAILBOX && $SYSTEM_TYPE != $VARIANT_NONMAILBOX && $SYSTEM_TYPE != $VARIANT_SOCIAL && $SYSTEM_TYPE != $VARIANT_MEDIA && $SYSTEM_TYPE != $VARIANT_DEVELOPER && $SYSTEM_TYPE != $VARIANT_FULL ]]; then
  590. echo "'$SYSTEM_TYPE' is an unrecognised Freedombone variant."
  591. exit 30
  592. fi
  593. }
  594. function read_configuration {
  595. # if not installing on a Beaglebone then use sdb as the USB drive by default
  596. if [ ! $INSTALLING_ON_BBB ]; then
  597. if [[ $USB_DRIVE == /dev/sda1 ]]; then
  598. USB_DRIVE=/dev/sdb1
  599. fi
  600. fi
  601. if [[ $INSTALLING_FROM_CONFIGURATION_FILE == "yes" ]]; then
  602. if [ ! -f $CONFIGURATION_FILE ]; then
  603. echo "The configuration file $CONFIGURATION_FILE was not found"
  604. exit 8935
  605. fi
  606. fi
  607. if [ -f $CONFIGURATION_FILE ]; then
  608. if grep -q "MEDIAGOBLIN_DOMAIN_NAME" $CONFIGURATION_FILE; then
  609. MEDIAGOBLIN_DOMAIN_NAME=$(grep "MEDIAGOBLIN_DOMAIN_NAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  610. fi
  611. if grep -q "MEDIAGOBLIN_CODE" $CONFIGURATION_FILE; then
  612. MEDIAGOBLIN_CODE=$(grep "MEDIAGOBLIN_CODE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  613. fi
  614. if grep -q "GIT_ADMIN_PASSWORD" $CONFIGURATION_FILE; then
  615. GIT_ADMIN_PASSWORD=$(grep "GIT_ADMIN_PASSWORD" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  616. fi
  617. if grep -q "GIT_DOMAIN_NAME" $CONFIGURATION_FILE; then
  618. GIT_DOMAIN_NAME=$(grep "GIT_DOMAIN_NAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  619. fi
  620. if grep -q "GIT_CODE" $CONFIGURATION_FILE; then
  621. GIT_CODE=$(grep "GIT_CODE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  622. fi
  623. if grep -q "SYSTEM_TYPE" $CONFIGURATION_FILE; then
  624. SYSTEM_TYPE=$(grep "SYSTEM_TYPE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  625. fi
  626. if grep -q "SSL_PROTOCOLS" $CONFIGURATION_FILE; then
  627. SSL_PROTOCOLS=$(grep "SSL_PROTOCOLS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  628. fi
  629. if grep -q "SSL_CIPHERS" $CONFIGURATION_FILE; then
  630. SSL_CIPHERS=$(grep "SSL_CIPHERS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  631. fi
  632. if grep -q "SSH_CIPHERS" $CONFIGURATION_FILE; then
  633. SSH_CIPHERS=$(grep "SSH_CIPHERS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  634. fi
  635. if grep -q "SSH_MACS" $CONFIGURATION_FILE; then
  636. SSH_MACS=$(grep "SSH_MACS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  637. fi
  638. if grep -q "SSH_KEX" $CONFIGURATION_FILE; then
  639. SSH_KEX=$(grep "SSH_KEX" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  640. fi
  641. if grep -q "SSH_HOST_KEY_ALGORITHMS" $CONFIGURATION_FILE; then
  642. SSH_HOST_KEY_ALGORITHMS=$(grep "SSH_HOST_KEY_ALGORITHMS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  643. fi
  644. if grep -q "SSH_PASSWORDS" $CONFIGURATION_FILE; then
  645. SSH_PASSWORDS=$(grep "SSH_PASSWORDS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  646. fi
  647. if grep -q "XMPP_CIPHERS" $CONFIGURATION_FILE; then
  648. XMPP_CIPHERS=$(grep "XMPP_CIPHERS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  649. fi
  650. if grep -q "XMPP_ECC_CURVE" $CONFIGURATION_FILE; then
  651. XMPP_ECC_CURVE=$(grep "XMPP_ECC_CURVE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  652. fi
  653. if grep -q "MY_USERNAME" $CONFIGURATION_FILE; then
  654. MY_USERNAME=$(grep "MY_USERNAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  655. fi
  656. if grep -q "DOMAIN_NAME" $CONFIGURATION_FILE; then
  657. # for backwards compatability
  658. DEFAULT_DOMAIN_NAME=$(grep "DOMAIN_NAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  659. fi
  660. if grep -q "DEFAULT_DOMAIN_NAME" $CONFIGURATION_FILE; then
  661. DEFAULT_DOMAIN_NAME=$(grep "DEFAULT_DOMAIN_NAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  662. fi
  663. if grep -q "DEFAULT_DOMAIN_CODE" $CONFIGURATION_FILE; then
  664. DEFAULT_DOMAIN_CODE=$(grep "DEFAULT_DOMAIN_CODE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  665. fi
  666. if grep -q "NAMESERVER1" $CONFIGURATION_FILE; then
  667. NAMESERVER1=$(grep "NAMESERVER1" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  668. fi
  669. if grep -q "NAMESERVER2" $CONFIGURATION_FILE; then
  670. NAMESERVER2=$(grep "NAMESERVER2" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  671. fi
  672. if grep -q "DEBIAN_REPO" $CONFIGURATION_FILE; then
  673. DEBIAN_REPO=$(grep "DEBIAN_REPO" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  674. CHECK_MESSAGE="Check your internet connection, /etc/network/interfaces and /etc/resolv.conf, then delete $COMPLETION_FILE, run 'rm -fR /var/lib/apt/lists/* && apt-get update --fix-missing' and run this script again. If hash sum mismatches persist then try setting $DEBIAN_REPO to a different mirror and also change /etc/apt/sources.list."
  675. fi
  676. if grep -q "VOIP_PORT" $CONFIGURATION_FILE; then
  677. VOIP_PORT=$(grep "VOIP_PORT" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  678. fi
  679. if grep -q "VOIP_SERVER_PASSWORD" $CONFIGURATION_FILE; then
  680. VOIP_SERVER_PASSWORD=$(grep "VOIP_SERVER_PASSWORD" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  681. fi
  682. if grep -q "GET_IP_ADDRESS_URL" $CONFIGURATION_FILE; then
  683. GET_IP_ADDRESS_URL=$(grep "GET_IP_ADDRESS_URL" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  684. fi
  685. if grep -q "DDNS_PROVIDER" $CONFIGURATION_FILE; then
  686. DDNS_PROVIDER=$(grep "DDNS_PROVIDER" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  687. fi
  688. if grep -q "DDNS_USERNAME" $CONFIGURATION_FILE; then
  689. DDNS_USERNAME=$(grep "DDNS_USERNAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  690. fi
  691. if grep -q "DDNS_PASSWORD" $CONFIGURATION_FILE; then
  692. DDNS_PASSWORD=$(grep "DDNS_PASSWORD" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  693. fi
  694. if grep -q "LOCAL_NETWORK_STATIC_IP_ADDRESS" $CONFIGURATION_FILE; then
  695. LOCAL_NETWORK_STATIC_IP_ADDRESS=$(grep "LOCAL_NETWORK_STATIC_IP_ADDRESS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  696. fi
  697. if grep -q "ENABLE_CJDNS" $CONFIGURATION_FILE; then
  698. ENABLE_CJDNS=$(grep "ENABLE_CJDNS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  699. fi
  700. if grep -q "CJDNS_IPV6" $CONFIGURATION_FILE; then
  701. CJDNS_IPV6=$(grep "CJDNS_IPV6" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  702. fi
  703. if grep -q "CJDNS_PUBLIC_KEY" $CONFIGURATION_FILE; then
  704. CJDNS_PUBLIC_KEY=$(grep "CJDNS_PUBLIC_KEY" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  705. fi
  706. if grep -q "CJDNS_PRIVATE_KEY" $CONFIGURATION_FILE; then
  707. CJDNS_PRIVATE_KEY=$(grep "CJDNS_PRIVATE_KEY" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  708. fi
  709. if grep -q "BACKUP_CERTIFICATE" $CONFIGURATION_FILE; then
  710. BACKUP_CERTIFICATE=$(grep "BACKUP_CERTIFICATE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  711. fi
  712. if grep -q "ROUTER_IP_ADDRESS" $CONFIGURATION_FILE; then
  713. ROUTER_IP_ADDRESS=$(grep "ROUTER_IP_ADDRESS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  714. fi
  715. if grep -q "GITHUB_USERNAME" $CONFIGURATION_FILE; then
  716. GITHUB_USERNAME=$(grep "GITHUB_USERNAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  717. fi
  718. if grep -q "GITHUB_BACKUP_DIRECTORY" $CONFIGURATION_FILE; then
  719. GITHUB_BACKUP_DIRECTORY=$(grep "GITHUB_BACKUP_DIRECTORY" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  720. fi
  721. if grep -q "CPU_CORES" $CONFIGURATION_FILE; then
  722. CPU_CORES=$(grep "CPU_CORES" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  723. fi
  724. if grep -q "WEBSERVER_LOG_LEVEL" $CONFIGURATION_FILE; then
  725. WEBSERVER_LOG_LEVEL=$(grep "WEBSERVER_LOG_LEVEL" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  726. fi
  727. if grep -q "ROUTE_THROUGH_TOR" $CONFIGURATION_FILE; then
  728. ROUTE_THROUGH_TOR=$(grep "ROUTE_THROUGH_TOR" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  729. fi
  730. if grep -q "WIKI_TITLE" $CONFIGURATION_FILE; then
  731. WIKI_TITLE=$(grep "WIKI_TITLE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  732. fi
  733. if grep -q "MY_NAME" $CONFIGURATION_FILE; then
  734. MY_NAME=$(grep "MY_NAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  735. fi
  736. if grep -q "MY_EMAIL_ADDRESS" $CONFIGURATION_FILE; then
  737. MY_EMAIL_ADDRESS=$(grep "MY_EMAIL_ADDRESS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  738. fi
  739. if grep -q "INSTALLING_ON_BBB" $CONFIGURATION_FILE; then
  740. INSTALLING_ON_BBB=$(grep "INSTALLING_ON_BBB" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  741. fi
  742. if grep -q "SSH_PORT" $CONFIGURATION_FILE; then
  743. SSH_PORT=$(grep "SSH_PORT" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  744. fi
  745. if grep -q "INSTALLED_WITHIN_DOCKER" $CONFIGURATION_FILE; then
  746. INSTALLED_WITHIN_DOCKER=$(grep "INSTALLED_WITHIN_DOCKER" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  747. fi
  748. if grep -q "PUBLIC_MAILING_LIST" $CONFIGURATION_FILE; then
  749. PUBLIC_MAILING_LIST=$(grep "PUBLIC_MAILING_LIST" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  750. fi
  751. if grep -q "MICROBLOG_DOMAIN_NAME" $CONFIGURATION_FILE; then
  752. MICROBLOG_DOMAIN_NAME=$(grep "MICROBLOG_DOMAIN_NAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  753. fi
  754. if grep -q "MICROBLOG_CODE" $CONFIGURATION_FILE; then
  755. MICROBLOG_CODE=$(grep "MICROBLOG_CODE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  756. fi
  757. if grep -q "REDMATRIX_DOMAIN_NAME" $CONFIGURATION_FILE; then
  758. REDMATRIX_DOMAIN_NAME=$(grep "REDMATRIX_DOMAIN_NAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  759. fi
  760. if grep -q "REDMATRIX_CODE" $CONFIGURATION_FILE; then
  761. REDMATRIX_CODE=$(grep "REDMATRIX_CODE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  762. fi
  763. if grep -q "OWNCLOUD_DOMAIN_NAME" $CONFIGURATION_FILE; then
  764. OWNCLOUD_DOMAIN_NAME=$(grep "OWNCLOUD_DOMAIN_NAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  765. fi
  766. if grep -q "OWNCLOUD_CODE" $CONFIGURATION_FILE; then
  767. OWNCLOUD_CODE=$(grep "OWNCLOUD_CODE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  768. fi
  769. if grep -q "WIKI_DOMAIN_NAME" $CONFIGURATION_FILE; then
  770. WIKI_DOMAIN_NAME=$(grep "WIKI_DOMAIN_NAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  771. fi
  772. if grep -q "WIKI_CODE" $CONFIGURATION_FILE; then
  773. WIKI_CODE=$(grep "WIKI_CODE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  774. fi
  775. if grep -q "FULLBLOG_DOMAIN_NAME" $CONFIGURATION_FILE; then
  776. FULLBLOG_DOMAIN_NAME=$(grep "FULLBLOG_DOMAIN_NAME" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  777. fi
  778. if grep -q "FULLBLOG_CODE" $CONFIGURATION_FILE; then
  779. FULLBLOG_CODE=$(grep "FULLBLOG_CODE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  780. fi
  781. if grep -q "MY_BLOG_TITLE" $CONFIGURATION_FILE; then
  782. MY_BLOG_TITLE=$(grep "MY_BLOG_TITLE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  783. fi
  784. if grep -q "MY_BLOG_SUBTITLE" $CONFIGURATION_FILE; then
  785. MY_BLOG_SUBTITLE=$(grep "MY_BLOG_SUBTITLE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  786. fi
  787. if grep -q "GPG_ENCRYPT_STORED_EMAIL" $CONFIGURATION_FILE; then
  788. GPG_ENCRYPT_STORED_EMAIL=$(grep "GPG_ENCRYPT_STORED_EMAIL" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  789. fi
  790. if grep -q "MY_GPG_PUBLIC_KEY" $CONFIGURATION_FILE; then
  791. MY_GPG_PUBLIC_KEY=$(grep "MY_GPG_PUBLIC_KEY" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  792. fi
  793. if grep -q "MY_GPG_PRIVATE_KEY" $CONFIGURATION_FILE; then
  794. MY_GPG_PRIVATE_KEY=$(grep "MY_GPG_PRIVATE_KEY" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  795. fi
  796. if grep -q "MY_GPG_PUBLIC_KEY_ID" $CONFIGURATION_FILE; then
  797. MY_GPG_PUBLIC_KEY_ID=$(grep "MY_GPG_PUBLIC_KEY_ID" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  798. fi
  799. if grep -q "USB_DRIVE" $CONFIGURATION_FILE; then
  800. USB_DRIVE=$(grep "USB_DRIVE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  801. fi
  802. if grep -q "MAX_PHP_MEMORY" $CONFIGURATION_FILE; then
  803. MAX_PHP_MEMORY=$(grep "MAX_PHP_MEMORY" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  804. fi
  805. if grep -q "TLS_TIME_SOURCE1" $CONFIGURATION_FILE; then
  806. TLS_TIME_SOURCE1=$(grep "TLS_TIME_SOURCE1" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  807. fi
  808. if grep -q "TLS_TIME_SOURCE2" $CONFIGURATION_FILE; then
  809. TLS_TIME_SOURCE2=$(grep "TLS_TIME_SOURCE2" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
  810. fi
  811. fi
  812. }
  813. # check an individual domain name
  814. function test_domain_name {
  815. if [ $1 ]; then
  816. TEST_DOMAIN_NAME=$1
  817. validate_domain_name
  818. if [[ $TEST_DOMAIN_NAME != $1 ]]; then
  819. echo $TEST_DOMAIN_NAME
  820. exit 8528
  821. fi
  822. fi
  823. }
  824. # check that domain names are sensible
  825. function check_domains {
  826. if [ $WIKI_DOMAIN_NAME ]; then
  827. test_domain_name "$WIKI_DOMAIN_NAME"
  828. if [[ "$WIKI_DOMAIN_NAME" == "$OWNCLOUD_DOMAIN_NAME" ]]; then
  829. echo 'Wiki domain name is the same as Owncloud domain name. They must be different'
  830. exit 73863
  831. fi
  832. if [[ "$WIKI_DOMAIN_NAME" == "$FULLBLOG_DOMAIN_NAME" ]]; then
  833. echo 'Wiki domain name is the same as blog domain name. They must be different'
  834. exit 97326
  835. fi
  836. if [[ "$WIKI_DOMAIN_NAME" == "$MICROBLOG_DOMAIN_NAME" ]]; then
  837. echo 'Wiki domain name is the same as microblog domain name. They must be different'
  838. exit 36827
  839. fi
  840. if [[ "$WIKI_DOMAIN_NAME" == "$REDMATRIX_DOMAIN_NAME" ]]; then
  841. echo 'Wiki domain name is the same as redmatrix domain name. They must be different'
  842. exit 93637
  843. fi
  844. fi
  845. if [ $OWNCLOUD_DOMAIN_NAME ]; then
  846. test_domain_name "$OWNCLOUD_DOMAIN_NAME"
  847. if [[ "$OWNCLOUD_DOMAIN_NAME" == "$WIKI_DOMAIN_NAME" ]]; then
  848. echo 'Owncloud domain name is the same as wiki domain name. They must be different'
  849. exit 37994
  850. fi
  851. if [[ "$OWNCLOUD_DOMAIN_NAME" == "$FULLBLOG_DOMAIN_NAME" ]]; then
  852. echo 'Owncloud domain name is the same as blog domain name. They must be different'
  853. exit 37936
  854. fi
  855. if [[ "$OWNCLOUD_DOMAIN_NAME" == "$MICROBLOG_DOMAIN_NAME" ]]; then
  856. echo 'Owncloud domain name is the same as microblog domain name. They must be different'
  857. exit 36896
  858. fi
  859. if [[ "$OWNCLOUD_DOMAIN_NAME" == "$REDMATRIX_DOMAIN_NAME" ]]; then
  860. echo 'Owncloud domain name is the same as redmatrix domain name. They must be different'
  861. exit 79362
  862. fi
  863. fi
  864. if [ $FULLBLOG_DOMAIN_NAME ]; then
  865. test_domain_name "$FULLBLOG_DOMAIN_NAME"
  866. if [[ "$FULLBLOG_DOMAIN_NAME" == "$WIKI_DOMAIN_NAME" ]]; then
  867. echo 'Blog domain name is the same as wiki domain name. They must be different'
  868. exit 62348
  869. fi
  870. if [[ "$FULLBLOG_DOMAIN_NAME" == "$OWNCLOUD_DOMAIN_NAME" ]]; then
  871. echo 'Blog domain name is the same as Owncloud domain name. They must be different'
  872. exit 84682
  873. fi
  874. if [[ "$FULLBLOG_DOMAIN_NAME" == "$MICROBLOG_DOMAIN_NAME" ]]; then
  875. echo 'Blog domain name is the same as microblog domain name. They must be different'
  876. exit 38236
  877. fi
  878. if [[ "$FULLBLOG_DOMAIN_NAME" == "$REDMATRIX_DOMAIN_NAME" ]]; then
  879. echo 'Blog domain name is the same as redmatrix domain name. They must be different'
  880. exit 36813
  881. fi
  882. fi
  883. if [ $MICROBLOG_DOMAIN_NAME ]; then
  884. test_domain_name "$MICROBLOG_DOMAIN_NAME"
  885. if [[ "$MICROBLOG_DOMAIN_NAME" == "$WIKI_DOMAIN_NAME" ]]; then
  886. echo 'Microblog domain name is the same as wiki domain name. They must be different'
  887. exit 73924
  888. fi
  889. if [[ "$MICROBLOG_DOMAIN_NAME" == "$OWNCLOUD_DOMAIN_NAME" ]]; then
  890. echo 'Microblog domain name is the same as Owncloud domain name. They must be different'
  891. exit 73683
  892. fi
  893. if [[ "$MICROBLOG_DOMAIN_NAME" == "$FULLBLOG_DOMAIN_NAME" ]]; then
  894. echo 'Microblog domain name is the same as blog domain name. They must be different'
  895. exit 26832
  896. fi
  897. if [[ "$MICROBLOG_DOMAIN_NAME" == "$REDMATRIX_DOMAIN_NAME" ]]; then
  898. echo 'Microblog domain name is the same as redmatrix domain name. They must be different'
  899. exit 36373
  900. fi
  901. fi
  902. if [ $REDMATRIX_DOMAIN_NAME ]; then
  903. test_domain_name "$REDMATRIX_DOMAIN_NAME"
  904. if [[ "$REDMATRIX_DOMAIN_NAME" == "$WIKI_DOMAIN_NAME" ]]; then
  905. echo 'RedMatrix domain name is the same as wiki domain name. They must be different'
  906. exit 83682
  907. fi
  908. if [[ "$REDMATRIX_DOMAIN_NAME" == "$OWNCLOUD_DOMAIN_NAME" ]]; then
  909. echo 'RedMatrix domain name is the same as Owncloud domain name. They must be different'
  910. exit 65192
  911. fi
  912. if [[ "$REDMATRIX_DOMAIN_NAME" == "$FULLBLOG_DOMAIN_NAME" ]]; then
  913. echo 'RedMatrix domain name is the same as blog domain name. They must be different'
  914. exit 74817
  915. fi
  916. if [[ "$REDMATRIX_DOMAIN_NAME" == "$MICROBLOG_DOMAIN_NAME" ]]; then
  917. echo 'RedMatrix domain name is the same as microblog domain name. They must be different'
  918. exit 83683
  919. fi
  920. fi
  921. }
  922. # Checks whether certificates were generated for the given hostname
  923. function check_certificates {
  924. if [ ! $1 ]; then
  925. return
  926. fi
  927. if [ ! -f /etc/ssl/private/$1.key ]; then
  928. echo "Private certificate for $CHECK_HOSTNAME was not created"
  929. exit 63959
  930. fi
  931. if [ ! -f /etc/ssl/certs/$1.crt ]; then
  932. echo "Public certificate for $CHECK_HOSTNAME was not created"
  933. exit 7679
  934. fi
  935. if [ ! -f /etc/ssl/certs/$1.dhparam ]; then
  936. echo "Diffie–Hellman parameters for $CHECK_HOSTNAME were not created"
  937. exit 5989
  938. fi
  939. }
  940. function install_not_on_BBB {
  941. if grep -Fxq "install_not_on_BBB" $COMPLETION_FILE; then
  942. return
  943. fi
  944. if [[ INSTALLING_ON_BBB == "yes" ]]; then
  945. return
  946. fi
  947. echo '# This file describes the network interfaces available on your system' > /etc/network/interfaces
  948. echo '# and how to activate them. For more information, see interfaces(5).' >> /etc/network/interfaces
  949. echo '' >> /etc/network/interfaces
  950. echo '# The loopback network interface' >> /etc/network/interfaces
  951. echo 'auto lo' >> /etc/network/interfaces
  952. echo 'iface lo inet loopback' >> /etc/network/interfaces
  953. echo '' >> /etc/network/interfaces
  954. echo '# The primary network interface' >> /etc/network/interfaces
  955. echo 'auto eth0' >> /etc/network/interfaces
  956. echo 'iface eth0 inet static' >> /etc/network/interfaces
  957. echo " address $LOCAL_NETWORK_STATIC_IP_ADDRESS" >> /etc/network/interfaces
  958. echo ' netmask 255.255.255.0' >> /etc/network/interfaces
  959. echo " gateway $ROUTER_IP_ADDRESS" >> /etc/network/interfaces
  960. echo " dns-nameservers $NAMESERVER1 $NAMESERVER2" >> /etc/network/interfaces
  961. echo '# Example to keep MAC address between reboots' >> /etc/network/interfaces
  962. echo '#hwaddress ether DE:AD:BE:EF:CA:FE' >> /etc/network/interfaces
  963. echo '' >> /etc/network/interfaces
  964. echo '# The secondary network interface' >> /etc/network/interfaces
  965. echo '#auto eth1' >> /etc/network/interfaces
  966. echo '#iface eth1 inet dhcp' >> /etc/network/interfaces
  967. echo '' >> /etc/network/interfaces
  968. echo '# WiFi Example' >> /etc/network/interfaces
  969. echo '#auto wlan0' >> /etc/network/interfaces
  970. echo '#iface wlan0 inet dhcp' >> /etc/network/interfaces
  971. echo '# wpa-ssid "essid"' >> /etc/network/interfaces
  972. echo '# wpa-psk "password"' >> /etc/network/interfaces
  973. echo '' >> /etc/network/interfaces
  974. echo '# Ethernet/RNDIS gadget (g_ether)' >> /etc/network/interfaces
  975. echo '# ... or on host side, usbnet and random hwaddr' >> /etc/network/interfaces
  976. echo '# Note on some boards, usb0 is automaticly setup with an init script' >> /etc/network/interfaces
  977. echo '#iface usb0 inet static' >> /etc/network/interfaces
  978. echo '# address 192.168.7.2' >> /etc/network/interfaces
  979. echo '# netmask 255.255.255.0' >> /etc/network/interfaces
  980. echo '# network 192.168.7.0' >> /etc/network/interfaces
  981. echo '# gateway 192.168.7.1' >> /etc/network/interfaces
  982. echo 'install_not_on_BBB' >> $COMPLETION_FILE
  983. }
  984. function randomize_cron {
  985. # The predictable default timing of Debian cron jobs might
  986. # be exploitable knowledge. Avoid too much predictability
  987. # by randomizing the times when cron jobs run
  988. if grep -Fxq "randomize_cron" $COMPLETION_FILE; then
  989. return
  990. fi
  991. # randomize the day on which the weekly cron job runs
  992. randdow=$(($RANDOM%6+1))
  993. sed -i "s|\* \* 7|* * $randdow|g" /etc/crontab
  994. # randomize the time when the weekly cron job runs
  995. randmin=$(($RANDOM%60))
  996. randhr=$(($RANDOM%3+1))
  997. sed -i "s|47 6|$randmin $randhr|g" /etc/crontab
  998. # randomize the time when the daily cron job runs
  999. randmin=$(($RANDOM%60))
  1000. randhr=$(($RANDOM%3+4))
  1001. sed -i "s|25 6\t\* \* \*|$randmin $randhr\t* * *|g" /etc/crontab
  1002. # randomize the time when the hourly cron job runs
  1003. randmin=$(($RANDOM%60))
  1004. sed -i "s|17 \*\t|$randmin *\t|g" /etc/crontab
  1005. # randomize monthly cron job time and day
  1006. randmin=$(($RANDOM%60))
  1007. randhr=$(($RANDOM%22+1))
  1008. randdom=$(($RANDOM%27+1))
  1009. sed -i "s|52 6\t|$randmin $randhr\t|g" /etc/crontab
  1010. sed -i "s|\t1 \* \*|\t$randdom * *|g" /etc/crontab
  1011. service cron restart
  1012. echo 'randomize_cron' >> $COMPLETION_FILE
  1013. }
  1014. function get_cjdns_public_key {
  1015. if [ -f /home/$MY_USERNAME/README ]; then
  1016. if grep -q "cjdns public key" /home/$MY_USERNAME/README; then
  1017. if [ ! $CJDNS_PUBLIC_KEY ]; then
  1018. CJDNS_PUBLIC_KEY=$(cat /home/$MY_USERNAME/README | grep "cjdns public key" | awk -F ':' '{print $2}' | sed 's/^ *//')
  1019. fi
  1020. fi
  1021. fi
  1022. }
  1023. function get_cjdns_private_key {
  1024. if [ -f /home/$MY_USERNAME/README ]; then
  1025. if grep -q "cjdns private key" /home/$MY_USERNAME/README; then
  1026. if [ ! $CJDNS_PRIVATE_KEY ]; then
  1027. CJDNS_PRIVATE_KEY=$(cat /home/$MY_USERNAME/README | grep "cjdns private key" | awk -F ':' '{print $2}' | sed 's/^ *//')
  1028. fi
  1029. fi
  1030. fi
  1031. }
  1032. function get_cjdns_ipv6_address {
  1033. if [ -f /home/$MY_USERNAME/README ]; then
  1034. if grep -q "cjdns IPv6 address" /home/$MY_USERNAME/README; then
  1035. if [ ! $CJDNS_IPV6 ]; then
  1036. CJDNS_IPV6=$(cat /home/$MY_USERNAME/README | grep "cjdns IPv6 address" | awk -F ':' '{print $2}' | sed 's/^ *//')
  1037. fi
  1038. fi
  1039. fi
  1040. }
  1041. function get_cjdns_port {
  1042. if [ -f /home/$MY_USERNAME/README ]; then
  1043. if grep -q "cjdns port" /home/$MY_USERNAME/README; then
  1044. if [ ! $CJDNS_PORT ]; then
  1045. CJDNS_PORT=$(cat /home/$MY_USERNAME/README | grep "cjdns port" | awk -F ':' '{print $2}' | sed 's/^ *//')
  1046. fi
  1047. fi
  1048. fi
  1049. }
  1050. function get_cjdns_password {
  1051. if [ -f /home/$MY_USERNAME/README ]; then
  1052. if grep -q "cjdns password" /home/$MY_USERNAME/README; then
  1053. if [ ! $CJDNS_PASSWORD ]; then
  1054. CJDNS_PASSWORD=$(cat /home/$MY_USERNAME/README | grep "cjdns password" | awk -F ':' '{print $2}' | sed 's/^ *//')
  1055. fi
  1056. fi
  1057. fi
  1058. }
  1059. function install_cjdns {
  1060. if grep -Fxq "install_cjdns" $COMPLETION_FILE; then
  1061. return
  1062. fi
  1063. if [[ $ENABLE_CJDNS != "yes" ]]; then
  1064. return
  1065. fi
  1066. apt-get -y install nodejs git build-essential nmap
  1067. # if a README exists then obtain the cjdns parameters
  1068. get_cjdns_ipv6_address
  1069. get_cjdns_public_key
  1070. get_cjdns_private_key
  1071. get_cjdns_port
  1072. get_cjdns_password
  1073. # special compile settings for running ./do on the Beaglebone Black
  1074. if [[ $INSTALLING_ON_BBB == "yes" ]]; then
  1075. CFLAGS="-O2 -march=armv7-a -mtune=cortex-a8 -mfpu=neon -ftree-vectorize -ffast-math -mfloat-abi=hard -marm -Wno-error=maybe-uninitialized"
  1076. export LDFLAGS="$CFLAGS"
  1077. fi
  1078. if [ ! -d /etc/cjdns ]; then
  1079. git clone https://github.com/cjdelisle/cjdns.git /etc/cjdns
  1080. cd /etc/cjdns
  1081. ./do
  1082. if [ ! "$?" = "0" ]; then
  1083. exit 7439
  1084. fi
  1085. # create a configuration
  1086. if [ ! -f /etc/cjdns/cjdroute.conf ]; then
  1087. ./cjdroute --genconf > /etc/cjdns/cjdroute.conf
  1088. if [ ! "$?" = "0" ]; then
  1089. exit 5922
  1090. fi
  1091. fi
  1092. # create a user to run as
  1093. useradd cjdns
  1094. else
  1095. cd /etc/cjdns
  1096. git pull
  1097. ./do
  1098. if [ ! "$?" = "0" ]; then
  1099. exit 9926
  1100. fi
  1101. fi
  1102. # set permissions
  1103. chown -R cjdns:cjdns /etc/cjdns
  1104. chmod 600 /etc/cjdns/cjdroute.conf
  1105. /sbin/ip tuntap add mode tun user cjdns dev cjdroute0
  1106. # insert values into the configuration file
  1107. if [ $CJDNS_PRIVATE_KEY ]; then
  1108. sed -i "s/\"privateKey\":.*/\"privateKey\": \"$CJDNS_PRIVATE_KEY\",/g" /etc/cjdns/cjdroute.conf
  1109. else
  1110. CJDNS_PRIVATE_KEY=$(cat /etc/cjdns/cjdroute.conf | grep '"privateKey"' | awk -F '"' '{print $4}' | sed -n 1p)
  1111. fi
  1112. if [ $CJDNS_PUBLIC_KEY ]; then
  1113. sed -i "s/\"publicKey\":.*/\"publicKey\": \"$CJDNS_PUBLIC_KEY\",/g" /etc/cjdns/cjdroute.conf
  1114. else
  1115. CJDNS_PUBLIC_KEY=$(cat /etc/cjdns/cjdroute.conf | grep '"publicKey"' | awk -F '"' '{print $4}' | sed -n 1p)
  1116. fi
  1117. if [ $CJDNS_IPV6 ]; then
  1118. sed -i "s/\"ipv6\":.*/\"ipv6\": \"$CJDNS_IPV6\",/g" /etc/cjdns/cjdroute.conf
  1119. else
  1120. CJDNS_IPV6=$(cat /etc/cjdns/cjdroute.conf | grep '"ipv6"' | awk -F '"' '{print $4}' | sed -n 1p)
  1121. fi
  1122. if [ $CJDNS_PASSWORD ]; then
  1123. sed -i "0,/{\"password\":.*/s//{\"password\": \"$CJDNS_PASSWORD\"}/g" /etc/cjdns/cjdroute.conf
  1124. else
  1125. CJDNS_PASSWORD=$(cat /etc/cjdns/cjdroute.conf | grep '"password"' | awk -F '"' '{print $4}' | sed -n 1p)
  1126. fi
  1127. if [ $CJDNS_PORT ]; then
  1128. sed -i "s/\"bind\": \"0.0.0.0:.*/\"bind\": \"0.0.0.0:$CJDNS_PORT\",/g" /etc/cjdns/cjdroute.conf
  1129. else
  1130. CJDNS_PORT=$(cat /etc/cjdns/cjdroute.conf | grep '"bind": "0.0.0.0:' | awk -F '"' '{print $4}' | awk -F ':' '{print $2}' | sed -n 1p)
  1131. fi
  1132. # endure that ipv6 is enabled and can route
  1133. sed -i 's/net.ipv6.conf.all.disable_ipv6.*/net.ipv6.conf.all.disable_ipv6 = 0/g' /etc/sysctl.conf
  1134. #sed -i "s/net.ipv6.conf.all.accept_redirects.*/net.ipv6.conf.all.accept_redirects = 1/g" /etc/sysctl.conf
  1135. #sed -i "s/net.ipv6.conf.all.accept_source_route.*/net.ipv6.conf.all.accept_source_route = 1/g" /etc/sysctl.conf
  1136. sed -i "s/net.ipv6.conf.all.forwarding.*/net.ipv6.conf.all.forwarding=1/g" /etc/sysctl.conf
  1137. echo 1 > /proc/sys/net/ipv6/conf/all/forwarding
  1138. echo '#!/bin/sh -e' > /etc/init.d/cjdns
  1139. echo '### BEGIN INIT INFO' >> /etc/init.d/cjdns
  1140. echo '# hyperboria.sh - An init script (/etc/init.d/) for cjdns' >> /etc/init.d/cjdns
  1141. echo '# Provides: cjdroute' >> /etc/init.d/cjdns
  1142. echo '# Required-Start: $remote_fs $network' >> /etc/init.d/cjdns
  1143. echo '# Required-Stop: $remote_fs $network' >> /etc/init.d/cjdns
  1144. echo '# Default-Start: 2 3 4 5' >> /etc/init.d/cjdns
  1145. echo '# Default-Stop: 0 1 6' >> /etc/init.d/cjdns
  1146. echo '# Short-Description: Cjdns router' >> /etc/init.d/cjdns
  1147. echo '# Description: A routing engine designed for security, scalability, speed and ease of use.' >> /etc/init.d/cjdns
  1148. echo '# cjdns git repo: https://github.com/cjdelisle/cjdns/' >> /etc/init.d/cjdns
  1149. echo '### END INIT INFO' >> /etc/init.d/cjdns
  1150. echo '' >> /etc/init.d/cjdns
  1151. echo 'PROG="cjdroute"' >> /etc/init.d/cjdns
  1152. echo 'GIT_PATH="/etc/cjdns"' >> /etc/init.d/cjdns
  1153. echo 'PROG_PATH="/etc/cjdns"' >> /etc/init.d/cjdns
  1154. echo 'CJDNS_CONFIG="cjdroute.conf"' >> /etc/init.d/cjdns
  1155. echo 'CJDNS_USER="cjdns"' >> /etc/init.d/cjdns
  1156. echo "CJDNS_IP='$CJDNS_IPV6'" >> /etc/init.d/cjdns
  1157. echo '' >> /etc/init.d/cjdns
  1158. echo 'start() {' >> /etc/init.d/cjdns
  1159. echo ' # Start it up with the user cjdns' >> /etc/init.d/cjdns
  1160. echo ' if [ $(pgrep cjdroute | wc -l) != 0 ];' >> /etc/init.d/cjdns
  1161. echo ' then' >> /etc/init.d/cjdns
  1162. echo ' echo "cjdroute is already running. Doing nothing..."' >> /etc/init.d/cjdns
  1163. echo ' else' >> /etc/init.d/cjdns
  1164. echo ' echo " * Starting cjdroute"' >> /etc/init.d/cjdns
  1165. echo ' su -c "$PROG_PATH/$PROG < $PROG_PATH/$CJDNS_CONFIG" - $CJDNS_USER' >> /etc/init.d/cjdns
  1166. echo ' /sbin/ip addr add $CJDNS_IP/8 dev tun0' >> /etc/init.d/cjdns
  1167. echo ' /sbin/ip link set mtu 1312 dev tun0' >> /etc/init.d/cjdns
  1168. echo ' /sbin/ip link set tun0 up' >> /etc/init.d/cjdns
  1169. echo ' /sbin/ip tuntap add mode tun user cjdns dev tun0' >> /etc/init.d/cjdns
  1170. echo ' fi' >> /etc/init.d/cjdns
  1171. echo '}' >> /etc/init.d/cjdns
  1172. echo '' >> /etc/init.d/cjdns
  1173. echo 'stop() {' >> /etc/init.d/cjdns
  1174. echo '' >> /etc/init.d/cjdns
  1175. echo ' if [ $(pgrep cjdroute | wc -l) != 2 ];' >> /etc/init.d/cjdns
  1176. echo ' then' >> /etc/init.d/cjdns
  1177. echo ' echo "cjdns isnt running."' >> /etc/init.d/cjdns
  1178. echo ' else' >> /etc/init.d/cjdns
  1179. echo ' echo "Killing cjdroute"' >> /etc/init.d/cjdns
  1180. echo ' killall cjdroute' >> /etc/init.d/cjdns
  1181. echo ' fi' >> /etc/init.d/cjdns
  1182. echo '}' >> /etc/init.d/cjdns
  1183. echo '' >> /etc/init.d/cjdns
  1184. echo 'status() {' >> /etc/init.d/cjdns
  1185. echo ' if [ $(pgrep cjdroute | wc -l) != 0 ];' >> /etc/init.d/cjdns
  1186. echo ' then' >> /etc/init.d/cjdns
  1187. echo ' echo "Cjdns is running"' >> /etc/init.d/cjdns
  1188. echo ' else' >> /etc/init.d/cjdns
  1189. echo ' echo "Cjdns is not running"' >> /etc/init.d/cjdns
  1190. echo ' fi' >> /etc/init.d/cjdns
  1191. echo '}' >> /etc/init.d/cjdns
  1192. echo '' >> /etc/init.d/cjdns
  1193. echo ' update() {' >> /etc/init.d/cjdns
  1194. echo ' cd $GIT_PATH' >> /etc/init.d/cjdns
  1195. echo ' echo "Updating..."' >> /etc/init.d/cjdns
  1196. echo ' git pull' >> /etc/init.d/cjdns
  1197. echo ' ./do' >> /etc/init.d/cjdns
  1198. echo '}' >> /etc/init.d/cjdns
  1199. echo '' >> /etc/init.d/cjdns
  1200. echo '## Check to see if we are running as root first.' >> /etc/init.d/cjdns
  1201. echo 'if [ "$(id -u)" != "0" ]; then' >> /etc/init.d/cjdns
  1202. echo ' echo "This script must be run as root" 1>&2' >> /etc/init.d/cjdns
  1203. echo ' exit 1' >> /etc/init.d/cjdns
  1204. echo 'fi' >> /etc/init.d/cjdns
  1205. echo '' >> /etc/init.d/cjdns
  1206. echo 'case $1 in' >> /etc/init.d/cjdns
  1207. echo ' start)' >> /etc/init.d/cjdns
  1208. echo ' start' >> /etc/init.d/cjdns
  1209. echo ' exit 0' >> /etc/init.d/cjdns
  1210. echo ' ;;' >> /etc/init.d/cjdns
  1211. echo ' stop)' >> /etc/init.d/cjdns
  1212. echo ' stop' >> /etc/init.d/cjdns
  1213. echo ' exit 0' >> /etc/init.d/cjdns
  1214. echo ' ;;' >> /etc/init.d/cjdns
  1215. echo ' reload|restart|force-reload)' >> /etc/init.d/cjdns
  1216. echo ' stop' >> /etc/init.d/cjdns
  1217. echo ' sleep 1' >> /etc/init.d/cjdns
  1218. echo ' start' >> /etc/init.d/cjdns
  1219. echo ' exit 0' >> /etc/init.d/cjdns
  1220. echo ' ;;' >> /etc/init.d/cjdns
  1221. echo ' status)' >> /etc/init.d/cjdns
  1222. echo ' status' >> /etc/init.d/cjdns
  1223. echo ' exit 0' >> /etc/init.d/cjdns
  1224. echo ' ;;' >> /etc/init.d/cjdns
  1225. echo ' update|upgrade)' >> /etc/init.d/cjdns
  1226. echo ' update' >> /etc/init.d/cjdns
  1227. echo ' stop' >> /etc/init.d/cjdns
  1228. echo ' sleep 2' >> /etc/init.d/cjdns
  1229. echo ' start' >> /etc/init.d/cjdns
  1230. echo ' exit 0' >> /etc/init.d/cjdns
  1231. echo ' ;;' >> /etc/init.d/cjdns
  1232. echo ' **)' >> /etc/init.d/cjdns
  1233. echo ' echo "Usage: $0 (start|stop|restart|status|update)" 1>&2' >> /etc/init.d/cjdns
  1234. echo ' exit 1' >> /etc/init.d/cjdns
  1235. echo ' ;;' >> /etc/init.d/cjdns
  1236. echo 'esac' >> /etc/init.d/cjdns
  1237. chmod +x /etc/init.d/cjdns
  1238. update-rc.d cjdns defaults
  1239. service cjdns start
  1240. if [ ! "$?" = "0" ]; then
  1241. systemctl status cjdns.service
  1242. exit 8260
  1243. fi
  1244. apt-get -y install radvd
  1245. echo 'interface eth0' > /etc/radvd.conf
  1246. echo '{' >> /etc/radvd.conf
  1247. echo ' AdvSendAdvert on;' >> /etc/radvd.conf
  1248. echo ' prefix fdfc::1/64' >> /etc/radvd.conf
  1249. echo ' {' >> /etc/radvd.conf
  1250. echo ' AdvRouterAddr on;' >> /etc/radvd.conf
  1251. echo ' };' >> /etc/radvd.conf
  1252. echo '};' >> /etc/radvd.conf
  1253. service radvd restart
  1254. if [ ! "$?" = "0" ]; then
  1255. systemctl status radvd.service
  1256. exit 4395
  1257. fi
  1258. if ! grep -q "# Mesh network" /etc/network/interfaces; then
  1259. echo '' >> /etc/network/interfaces
  1260. echo '# Mesh network' >> /etc/network/interfaces
  1261. echo 'iface eth0 inet6 static' >> /etc/network/interfaces
  1262. echo ' pre-up modprobe ipv6' >> /etc/network/interfaces
  1263. echo ' address fdfc:0000:0000:0000:0000:0000:0000:0001' >> /etc/network/interfaces
  1264. echo ' netmask 64' >> /etc/network/interfaces
  1265. service networking restart
  1266. if [ ! "$?" = "0" ]; then
  1267. systemctl status networking.service
  1268. exit 6949
  1269. fi
  1270. fi
  1271. ip6tables -A INPUT -i eth0 -p udp --dport $CJDNS_PORT -j ACCEPT
  1272. ip6tables -A INPUT -i eth0 -p tcp --dport $CJDNS_PORT -j ACCEPT
  1273. save_firewall_settings
  1274. if ! grep -q "Mesh Networking" /home/$MY_USERNAME/README; then
  1275. CURRENT_IP_ADDRESS=$(ip addr show | grep "inet " | sed -n 2p | awk -F ' ' '{print $2}' | awk -F '/' '{print $1}')
  1276. echo '' >> /home/$MY_USERNAME/README
  1277. echo '' >> /home/$MY_USERNAME/README
  1278. echo 'Mesh Networking' >> /home/$MY_USERNAME/README
  1279. echo '===============' >> /home/$MY_USERNAME/README
  1280. echo "cjdns IPv6 address: $CJDNS_IPV6" >> /home/$MY_USERNAME/README
  1281. echo "cjdns public key: $CJDNS_PUBLIC_KEY" >> /home/$MY_USERNAME/README
  1282. echo "cjdns private key: $CJDNS_PRIVATE_KEY" >> /home/$MY_USERNAME/README
  1283. echo "cjdns password: $CJDNS_PASSWORD" >> /home/$MY_USERNAME/README
  1284. echo "cjdns port: $CJDNS_PORT" >> /home/$MY_USERNAME/README
  1285. echo '' >> /home/$MY_USERNAME/README
  1286. echo "Forward port $CJDNS_PORT from your internet router to the Freedombone" >> /home/$MY_USERNAME/README
  1287. echo '' >> /home/$MY_USERNAME/README
  1288. echo 'Below is an example of your connection credentials' >> /home/$MY_USERNAME/README
  1289. echo 'that you can give to other people so they can connect' >> /home/$MY_USERNAME/README
  1290. echo 'to you using your default password' >> /home/$MY_USERNAME/README
  1291. echo 'Adding a unique password for each user is advisable' >> /home/$MY_USERNAME/README
  1292. echo 'so that leaks can be isolated.' >> /home/$MY_USERNAME/README
  1293. echo '' >> /home/$MY_USERNAME/README
  1294. echo "\"$CURRENT_IP_ADDRESS:$CJDNS_PORT\":{\"password\":\"$CJDNS_PASSWORD\",\"publicKey\":\"$CJDNS_PUBLIC_KEY\"}" >> /home/$MY_USERNAME/README
  1295. echo '' >> /home/$MY_USERNAME/README
  1296. echo 'More is not better. 3-5 cjdns peers is good. 30 peers is bad.' >> /home/$MY_USERNAME/README
  1297. echo '' >> /home/$MY_USERNAME/README
  1298. echo 'NEVER USE A PUBLIC PEER. These degrade the network and make it centralized.' >> /home/$MY_USERNAME/README
  1299. echo 'Each node can handle many peers, but no node can handle the entire internet.' >> /home/$MY_USERNAME/README
  1300. echo 'As this network grows any public peer will simply become saturated and' >> /home/$MY_USERNAME/README
  1301. echo 'useless causing issues for the entire network.' >> /home/$MY_USERNAME/README
  1302. echo 'Please report anyone offering you a public peer as they are promoting shared' >> /home/$MY_USERNAME/README
  1303. echo 'passwords which could lead to people pretending to be you. A peering pass' >> /home/$MY_USERNAME/README
  1304. echo 'should not contain someone elses nickname or info but should contain yours' >> /home/$MY_USERNAME/README
  1305. echo 'to ensure it is not shared. It also helps when editing the conf to know who' >> /home/$MY_USERNAME/README
  1306. echo 'each password is for.' >> /home/$MY_USERNAME/README
  1307. echo '' >> /home/$MY_USERNAME/README
  1308. echo 'Possible cjdns destinations of interest:' >> /home/$MY_USERNAME/README
  1309. echo ' http://transitiontech.ca/faq' >> /home/$MY_USERNAME/README
  1310. echo ' http://cjdns.ca/hypeirc.txt' >> /home/$MY_USERNAME/README
  1311. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  1312. fi
  1313. echo 'install_cjdns' >> $COMPLETION_FILE
  1314. }
  1315. function install_cjdns_tools {
  1316. if grep -Fxq "install_cjdns_tools" $COMPLETION_FILE; then
  1317. return
  1318. fi
  1319. if [[ $ENABLE_CJDNS != "yes" ]]; then
  1320. return
  1321. fi
  1322. if [ ! -d /etc/cjdns ]; then
  1323. install_cjdns
  1324. fi
  1325. apt-get -y install golang mercurial
  1326. if [ ! -f ~/.bashrc ]; then
  1327. touch ~/.bashrc
  1328. fi
  1329. if ! grep -q "export GOPATH=" ~/.bashrc; then
  1330. echo 'export GOPATH=$HOME/projects/go' >> ~/.bashrc
  1331. fi
  1332. if ! grep -q "export PATH=$PATH:$HOME/projects/go/bin" ~/.bashrc; then
  1333. echo 'export PATH=$PATH:$HOME/projects/go/bin' >> ~/.bashrc
  1334. fi
  1335. . ~/.bashrc
  1336. export GOPATH=$HOME/projects/go
  1337. export PATH=$PATH:$HOME/projects/go/bin
  1338. go get github.com/inhies/cjdcmd
  1339. if [ ! -f $HOME/projects/go/bin/cjdcmd ]; then
  1340. echo 'cjdcmd was not compiled. Check your golang installation'
  1341. exit 7439
  1342. fi
  1343. cp $HOME/projects/go/bin/cjdcmd /usr/bin
  1344. # initialise from the cjdns config
  1345. /usr/bin/cjdcmd cjdnsadmin -file /etc/cjdns/cjdroute.conf
  1346. echo 'install_cjdns_tools' >> $COMPLETION_FILE
  1347. }
  1348. function remove_instructions_from_motd {
  1349. sed -i '/## /d' /etc/motd
  1350. }
  1351. function check_hwrng {
  1352. # If hardware random number generation was enabled then make sure that the device exists.
  1353. # if /dev/hwrng is not found then any subsequent cryptographic key generation would
  1354. # suffer from low entropy and might be insecure
  1355. if [ ! -f /etc/default/rng-tools ]; then
  1356. return
  1357. fi
  1358. if [ ! -e /dev/hwrng ]; then
  1359. ls /dev/hw*
  1360. echo 'The hardware random number generator is enabled but could not be detected on'
  1361. echo '/dev/hwrng. There may be a problem with the installation or the Beaglebone hardware.'
  1362. exit 75
  1363. fi
  1364. }
  1365. function get_mariadb_password {
  1366. if [ -f /home/$MY_USERNAME/README ]; then
  1367. if grep -q "MariaDB password" /home/$MY_USERNAME/README; then
  1368. if [ -f $DATABASE_PASSWORD_FILE ]; then
  1369. MARIADB_PASSWORD=$(cat $DATABASE_PASSWORD_FILE)
  1370. else
  1371. MARIADB_PASSWORD=$(cat /home/$MY_USERNAME/README | grep "MariaDB password" | awk -F ':' '{print $2}' | sed 's/^ *//')
  1372. echo "$MARIADB_PASSWORD" > $DATABASE_PASSWORD_FILE
  1373. chmod 600 $DATABASE_PASSWORD_FILE
  1374. fi
  1375. fi
  1376. fi
  1377. }
  1378. function get_mariadb_gnusocial_admin_password {
  1379. if [ -f /home/$MY_USERNAME/README ]; then
  1380. if grep -q "MariaDB gnusocial admin password" /home/$MY_USERNAME/README; then
  1381. MICROBLOG_ADMIN_PASSWORD=$(cat /home/$MY_USERNAME/README | grep "MariaDB gnusocial admin password" | awk -F ':' '{print $2}' | sed 's/^ *//')
  1382. fi
  1383. fi
  1384. }
  1385. function get_mariadb_git_admin_password {
  1386. if [ -f /home/$MY_USERNAME/README ]; then
  1387. if grep -q "Gogs admin user password" /home/$MY_USERNAME/README; then
  1388. GIT_ADMIN_PASSWORD=$(cat /home/$MY_USERNAME/README | grep "Gogs admin user password" | awk -F ':' '{print $2}' | sed 's/^ *//')
  1389. fi
  1390. fi
  1391. }
  1392. function get_mariadb_redmatrix_admin_password {
  1393. if [ -f /home/$MY_USERNAME/README ]; then
  1394. if grep -q "MariaDB Red Matrix admin password" /home/$MY_USERNAME/README; then
  1395. REDMATRIX_ADMIN_PASSWORD=$(cat /home/$MY_USERNAME/README | grep "MariaDB Red Matrix admin password" | awk -F ':' '{print $2}' | sed 's/^ *//')
  1396. fi
  1397. fi
  1398. }
  1399. function get_mariadb_owncloud_admin_password {
  1400. if [ -f /home/$MY_USERNAME/README ]; then
  1401. if grep -q "Owncloud database password" /home/$MY_USERNAME/README; then
  1402. OWNCLOUD_ADMIN_PASSWORD=$(cat /home/$MY_USERNAME/README | grep "Owncloud database password" | awk -F ':' '{print $2}' | sed 's/^ *//')
  1403. fi
  1404. fi
  1405. }
  1406. # For rsyncrypto usage see http://archive09.linux.com/feature/125322
  1407. function create_backup_script {
  1408. if grep -Fxq "create_backup_script" $COMPLETION_FILE; then
  1409. return
  1410. fi
  1411. apt-get -y install rsyncrypto
  1412. get_mariadb_password
  1413. get_mariadb_gnusocial_admin_password
  1414. get_mariadb_redmatrix_admin_password
  1415. get_mariadb_owncloud_admin_password
  1416. get_mariadb_git_admin_password
  1417. echo '#!/bin/bash' > /usr/bin/$BACKUP_SCRIPT_NAME
  1418. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1419. echo "USB_DRIVE=$USB_DRIVE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1420. echo 'if [ $1 ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1421. echo ' USB_DRIVE=/dev/${1}1' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1422. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1423. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1424. echo 'if [ ! -b $USB_DRIVE ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1425. echo ' echo "Please attach a USB drive"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1426. echo ' exit 1' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1427. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1428. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1429. echo "umount -f $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1430. echo "mkdir $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1431. echo -n 'mount $USB_DRIVE ' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1432. echo "$USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1433. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1434. echo " echo 'There was a problem mounting the USB drive to $USB_MOUNT'" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1435. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1436. echo ' exit 6392' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1437. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1438. echo "if [ ! -d $USB_MOUNT/backup ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1439. echo " mkdir $USB_MOUNT/backup" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1440. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1441. echo "if [ ! -d $USB_MOUNT/backup ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1442. echo " echo 'There was a problem making the directory $USB_MOUNT/backup.'" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1443. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1444. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1445. echo ' exit 27' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1446. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1447. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1448. echo "if [ ! -f $BACKUP_CERTIFICATE ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1449. echo ' echo "Creating backup key"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1450. echo ' freedombone-addcert -h backup' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1451. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1452. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1453. echo "if [ ! -f $BACKUP_CERTIFICATE.gpg ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1454. echo ' echo "GPG encrypt the backup key"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1455. echo " gpg -c $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1456. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1457. echo "cp $BACKUP_CERTIFICATE.gpg $USB_MOUNT/backup/key.gpg" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1458. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1459. echo '# MariaDB password' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1460. echo -n 'DATABASE_PASSWORD=$(cat ' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1461. echo "$DATABASE_PASSWORD_FILE)" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1462. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1463. if grep -Fxq "install_gnu_social" $COMPLETION_FILE; then
  1464. BACKUP_INCLUDES_DATABASES="yes"
  1465. echo "if [ ! -d $USB_MOUNT/backup/gnusocial ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1466. echo " mkdir -p $USB_MOUNT/backup/gnusocial" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1467. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1468. echo "if [ ! -d $USB_MOUNT/backup/gnusocialdata ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1469. echo " mkdir -p $USB_MOUNT/backup/gnusocialdata" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1470. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1471. echo "if [ ! -d /root/tempgnusocialdata ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1472. echo " mkdir -p /root/tempgnusocialdata" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1473. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1474. echo 'echo "Obtaining GNU Social database backup"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1475. echo 'mysqldump --password=$DATABASE_PASSWORD gnusocial > /root/tempgnusocialdata/gnusocial.sql' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1476. echo "if [ ! -s /root/tempgnusocialdata/gnusocial.sql ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1477. echo ' echo "GNU social database could not be saved"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1478. echo ' if [ ! $DATABASE_PASSWORD ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1479. echo " echo 'No MariaDB password was given'" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1480. echo " fi" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1481. echo ' shred -zu /root/tempgnusocialdata/*' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1482. echo ' rm -rf /root/tempgnusocialdata' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1483. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1484. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1485. echo ' exit 296' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1486. echo "fi" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1487. echo "rsyncrypto -v -r /root/tempgnusocialdata $USB_MOUNT/backup/gnusocialdata $USB_MOUNT/backup/gnusocialdata.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1488. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1489. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1490. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1491. echo ' shred -zu /root/tempgnusocialdata/*' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1492. echo ' rm -rf /root/tempgnusocialdata' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1493. echo ' exit 853' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1494. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1495. echo 'shred -zu /root/tempgnusocialdata/*' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1496. echo 'rm -rf /root/tempgnusocialdata' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1497. echo 'echo "Backing up GNU social installation"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1498. echo "rsyncrypto -v -r /var/www/$MICROBLOG_DOMAIN_NAME/htdocs $USB_MOUNT/backup/gnusocial $USB_MOUNT/backup/gnusocial.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1499. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1500. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1501. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1502. echo ' exit 846' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1503. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1504. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1505. fi
  1506. if grep -Fxq "install_redmatrix" $COMPLETION_FILE; then
  1507. BACKUP_INCLUDES_DATABASES="yes"
  1508. echo "if [ ! -d $USB_MOUNT/backup/redmatrix ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1509. echo " mkdir -p $USB_MOUNT/backup/redmatrix" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1510. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1511. echo "if [ ! -d $USB_MOUNT/backup/redmatrixdata ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1512. echo " mkdir -p $USB_MOUNT/backup/redmatrixdata" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1513. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1514. echo "if [ ! -d /root/tempredmatrixdata ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1515. echo " mkdir -p /root/tempredmatrixdata" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1516. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1517. echo 'echo "Obtaining Red Matrix database backup"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1518. echo 'mysqldump --password=$DATABASE_PASSWORD redmatrix > /root/tempredmatrixdata/redmatrix.sql' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1519. echo "if [ ! -s /root/tempredmatrixdata/redmatrix.sql ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1520. echo ' echo "Red Matrix database could not be saved"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1521. echo ' if [ ! $DATABASE_PASSWORD ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1522. echo " echo 'No MariaDB password was given'" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1523. echo " fi" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1524. echo ' shred -zu /root/tempredmatrixdata/*' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1525. echo ' rm -rf /root/tempredmatrixdata' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1526. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1527. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1528. echo ' exit 378' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1529. echo "fi" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1530. echo "rsyncrypto -v -r /root/tempredmatrixdata $USB_MOUNT/backup/redmatrixdata $USB_MOUNT/backup/redmatrixdata.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1531. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1532. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1533. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1534. echo ' exit 285' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1535. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1536. echo 'shred -zu /root/tempredmatrixdata/*' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1537. echo 'rm -rf /root/tempredmatrixdata' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1538. echo 'echo "Backing up Red Matrix installation"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1539. echo "rsyncrypto -v -r /var/www/$REDMATRIX_DOMAIN_NAME/htdocs $USB_MOUNT/backup/redmatrix $USB_MOUNT/backup/redmatrix.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1540. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1541. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1542. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1543. echo ' exit 593' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1544. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1545. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1546. fi
  1547. if grep -Fxq "install_owncloud" $COMPLETION_FILE; then
  1548. BACKUP_INCLUDES_DATABASES="yes"
  1549. echo "if [ ! -d $USB_MOUNT/backup/owncloud ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1550. echo " mkdir -p $USB_MOUNT/backup/owncloud" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1551. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1552. echo "if [ ! -d $USB_MOUNT/backup/owncloud2 ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1553. echo " mkdir -p $USB_MOUNT/backup/owncloud2" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1554. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1555. echo "if [ ! -d $USB_MOUNT/backup/ownclouddata ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1556. echo " mkdir -p $USB_MOUNT/backup/ownclouddata" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1557. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1558. echo "if [ ! -d /root/tempownclouddata ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1559. echo " mkdir -p /root/tempownclouddata" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1560. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1561. echo 'mysqldump --password=$DATABASE_PASSWORD owncloud > /root/tempownclouddata/owncloud.sql' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1562. echo "if [ ! -s /root/tempownclouddata/owncloud.sql ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1563. echo ' echo "Owncloud database could not be saved"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1564. echo ' if [ ! $DATABASE_PASSWORD ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1565. echo " echo 'No MariaDB password was given'" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1566. echo " fi" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1567. echo ' shred -zu /root/tempownclouddata/*' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1568. echo ' rm -rf /root/tempownclouddata' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1569. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1570. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1571. echo ' exit 377' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1572. echo "fi" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1573. echo "rsyncrypto -v -r /root/tempownclouddata $USB_MOUNT/backup/ownclouddata $USB_MOUNT/backup/ownclouddata.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1574. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1575. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1576. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1577. echo ' exit 188' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1578. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1579. echo 'shred -zu /root/tempownclouddata/*' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1580. echo 'rm -rf /root/tempownclouddata' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1581. echo 'echo "Obtaining Owncloud data backup"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1582. echo "rsyncrypto -v -r /var/lib/owncloud $USB_MOUNT/backup/owncloud $USB_MOUNT/backup/owncloud.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1583. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1584. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1585. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1586. echo ' exit 632' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1587. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1588. echo "rsyncrypto -v -r /etc/owncloud $USB_MOUNT/backup/owncloud2 $USB_MOUNT/backup/owncloud2.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1589. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1590. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1591. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1592. echo ' exit 632' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1593. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1594. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1595. fi
  1596. if grep -Fxq "install_gogs" $COMPLETION_FILE; then
  1597. BACKUP_INCLUDES_DATABASES="yes"
  1598. echo "if [ ! -d $USB_MOUNT/backup/gogs ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1599. echo " mkdir -p $USB_MOUNT/backup/gogs" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1600. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1601. echo "if [ ! -d $USB_MOUNT/backup/gogsrepos ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1602. echo " mkdir -p $USB_MOUNT/backup/gogsrepos" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1603. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1604. echo "if [ ! -d $USB_MOUNT/backup/gogsdata ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1605. echo " mkdir -p $USB_MOUNT/backup/gogsdata" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1606. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1607. echo "if [ ! -d /root/tempgogsdata ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1608. echo " mkdir -p /root/tempgogsdata" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1609. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1610. echo 'mysqldump --password=$DATABASE_PASSWORD gogs > /root/tempgogsdata/gogs.sql' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1611. echo "if [ ! -s /root/tempgogsdata/gogs.sql ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1612. echo ' echo "Gogs database could not be saved"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1613. echo ' if [ ! $DATABASE_PASSWORD ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1614. echo " echo 'No MariaDB password was given'" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1615. echo " fi" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1616. echo ' shred -zu /root/tempgogsdata/*' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1617. echo ' rm -rf /root/tempgogsdata' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1618. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1619. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1620. echo ' exit 377' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1621. echo "fi" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1622. echo "rsyncrypto -v -r /root/tempgogsdata $USB_MOUNT/backup/gogsdata $USB_MOUNT/backup/gogsdata.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1623. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1624. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1625. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1626. echo ' exit 188' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1627. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1628. echo 'shred -zu /root/tempgogsdata/*' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1629. echo 'rm -rf /root/tempgogsdata' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1630. echo 'echo "Obtaining Gogs settings backup"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1631. echo "rsyncrypto -v -r /home/git/go/src/github.com/gogits/gogs/custom $USB_MOUNT/backup/gogs $USB_MOUNT/backup/gogs.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1632. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1633. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1634. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1635. echo ' exit 632' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1636. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1637. echo 'echo "Obtaining Gogs repos backup"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1638. echo "rsyncrypto -v -r /home/git/gogs-repositories $USB_MOUNT/backup/gogsrepos $USB_MOUNT/backup/gogsrepos.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1639. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1640. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1641. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1642. echo ' exit 6784' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1643. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1644. echo 'echo "Obtaining Gogs authorized_keys backup"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1645. echo "rsyncrypto -v -r /home/git/.ssh $USB_MOUNT/backup/gogsssh $USB_MOUNT/backup/gogsssh.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1646. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1647. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1648. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1649. echo ' exit 58932' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1650. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1651. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1652. fi
  1653. if grep -Fxq "install_wiki" $COMPLETION_FILE; then
  1654. echo "if [ ! -d $USB_MOUNT/backup/wiki ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1655. echo " mkdir -p $USB_MOUNT/backup/wiki" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1656. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1657. echo "if [ ! -d $USB_MOUNT/backup/wiki2 ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1658. echo " mkdir -p $USB_MOUNT/backup/wiki2" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1659. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1660. echo 'echo "Obtaining wiki data backup"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1661. echo "rsyncrypto -v -r /var/lib/dokuwiki $USB_MOUNT/backup/wiki $USB_MOUNT/backup/wiki.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1662. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1663. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1664. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1665. echo ' exit 964' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1666. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1667. echo "rsyncrypto -v -r /etc/dokuwiki $USB_MOUNT/backup/wiki2 $USB_MOUNT/backup/wiki2.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1668. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1669. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1670. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1671. echo ' exit 964' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1672. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1673. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1674. fi
  1675. if grep -Fxq "install_blog" $COMPLETION_FILE; then
  1676. echo "if [ ! -d $USB_MOUNT/backup/blog ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1677. echo " mkdir -p $USB_MOUNT/backup/blog" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1678. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1679. echo 'echo "Obtaining blog backup"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1680. echo "rsyncrypto -v -r /var/www/$FULLBLOG_DOMAIN_NAME/htdocs $USB_MOUNT/backup/blog $USB_MOUNT/backup/blog.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1681. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1682. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1683. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1684. echo ' exit 854' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1685. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1686. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1687. fi
  1688. if grep -Fxq "install_cjdns" $COMPLETION_FILE; then
  1689. echo "if [ ! -d $USB_MOUNT/backup/cjdns ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1690. echo " mkdir -p $USB_MOUNT/backup/cjdns" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1691. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1692. echo 'echo "Obtaining cjdns backup"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1693. echo "rsyncrypto -v -r /etc/cjdns $USB_MOUNT/backup/blog $USB_MOUNT/backup/cjdns.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1694. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1695. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1696. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1697. echo ' exit 7438' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1698. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1699. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1700. fi
  1701. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1702. echo '# Backup certificates' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1703. echo "if [ -d /etc/ssl ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1704. echo ' echo "Backing up certificates"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1705. echo " if [ ! -d $USB_MOUNT/backup/ssl ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1706. echo " mkdir -p $USB_MOUNT/backup/ssl" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1707. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1708. echo " rsyncrypto -v -r /etc/ssl $USB_MOUNT/backup/ssl $USB_MOUNT/backup/ssl.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1709. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1710. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1711. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1712. echo ' exit 343' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1713. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1714. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1715. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1716. echo '# Backup projects' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1717. echo "if [ -d /home/$MY_USERNAME/projects ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1718. echo ' echo "Backing up projects"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1719. echo " if [ ! -d $USB_MOUNT/backup/projects ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1720. echo " mkdir -p $USB_MOUNT/backup/projects" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1721. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1722. echo " rsyncrypto -v -r /home/$MY_USERNAME/projects $USB_MOUNT/backup/projects $USB_MOUNT/backup/projects.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1723. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1724. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1725. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1726. echo ' exit 873' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1727. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1728. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1729. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1730. echo '# Backup personal settings' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1731. echo "if [ -d /home/$MY_USERNAME/personal ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1732. echo ' echo "Backing up personal settings"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1733. echo " if [ ! -d $USB_MOUNT/backup/personal ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1734. echo " mkdir -p $USB_MOUNT/backup/personal" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1735. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1736. echo " rsyncrypto -v -r /home/$MY_USERNAME/personal $USB_MOUNT/backup/personal $USB_MOUNT/backup/personal.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1737. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1738. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1739. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1740. echo ' exit 649' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1741. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1742. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1743. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1744. echo '# Backup the public mailing list' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1745. echo "if [ -d $PUBLIC_MAILING_LIST_DIRECTORY ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1746. echo ' echo "Backing up the public mailing list"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1747. echo " if [ ! -d $USB_MOUNT/backup/mailinglist ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1748. echo " mkdir -p $USB_MOUNT/backup/mailinglist" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1749. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1750. echo " rsyncrypto -v -r $PUBLIC_MAILING_LIST_DIRECTORY $USB_MOUNT/backup/mailinglist $USB_MOUNT/backup/mailinglist.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1751. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1752. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1753. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1754. echo ' exit 938' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1755. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1756. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1757. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1758. echo '# Backup xmpp settings' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1759. echo "if [ -d $XMPP_DIRECTORY ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1760. echo ' echo "Backing up the XMPP settings"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1761. echo " if [ ! -d $USB_MOUNT/backup/xmpp ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1762. echo " mkdir -p $USB_MOUNT/backup/xmpp" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1763. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1764. echo " rsyncrypto -v -r $XMPP_DIRECTORY $USB_MOUNT/backup/xmpp $USB_MOUNT/backup/xmpp.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1765. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1766. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1767. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1768. echo ' exit 593' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1769. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1770. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1771. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1772. echo '# Backup gpg keys' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1773. echo "if [ -d /home/$MY_USERNAME/.gnupg ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1774. echo ' echo "Backing up gpg keys"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1775. echo " if [ ! -d $USB_MOUNT/backup/gnupg ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1776. echo " mkdir -p $USB_MOUNT/backup/gnupg" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1777. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1778. echo " rsyncrypto -v -r /home/$MY_USERNAME/.gnupg $USB_MOUNT/backup/gnupg $USB_MOUNT/backup/gnupg.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1779. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1780. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1781. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1782. echo ' exit 491' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1783. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1784. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1785. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1786. echo '# Backup ssh keys' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1787. echo "if [ -d /home/$MY_USERNAME/.ssh ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1788. echo ' echo "Backing up ssh keys"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1789. echo " if [ ! -d $USB_MOUNT/backup/ssh ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1790. echo " mkdir -p $USB_MOUNT/backup/ssh" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1791. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1792. echo " rsyncrypto -v -r /home/$MY_USERNAME/.ssh $USB_MOUNT/backup/ssh $USB_MOUNT/backup/ssh.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1793. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1794. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1795. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1796. echo ' exit 731' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1797. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1798. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1799. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1800. echo '# Backup web sites' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1801. echo "if [ -d /etc/nginx ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1802. echo ' echo "Backing up web settings"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1803. echo " if [ ! -d $USB_MOUNT/backup/web ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1804. echo " mkdir -p $USB_MOUNT/backup/web" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1805. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1806. echo " rsyncrypto -v -r /etc/nginx/sites-available $USB_MOUNT/backup/web $USB_MOUNT/backup/web.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1807. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1808. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1809. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1810. echo ' exit 848' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1811. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1812. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1813. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1814. echo '# Backup README file' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1815. echo "if [ -f /home/$MY_USERNAME/README ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1816. echo ' echo "Backing up README"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1817. echo " if [ ! -d $USB_MOUNT/backup/readme ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1818. echo " mkdir -p $USB_MOUNT/backup/readme" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1819. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1820. echo " if [ ! -d /home/$MY_USERNAME/tempbackup ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1821. echo " mkdir -p /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1822. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1823. echo " cp -f /home/$MY_USERNAME/README /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1824. echo " rsyncrypto -v -r /home/$MY_USERNAME/tempbackup $USB_MOUNT/backup/readme $USB_MOUNT/backup/readme.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1825. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1826. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1827. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1828. echo " rm -rf /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1829. echo ' exit 848' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1830. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1831. echo " rm -rf /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1832. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1833. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1834. echo '# Backup Mutt settings' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1835. echo "if [ -f /home/$MY_USERNAME/.muttrc ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1836. echo ' echo "Backing up Mutt settings"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1837. echo " if [ ! -d /home/$MY_USERNAME/tempbackup ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1838. echo " mkdir -p /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1839. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1840. echo " cp /home/$MY_USERNAME/.muttrc /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1841. echo ' if [ -f /etc/Muttrc ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1842. echo " cp /etc/Muttrc /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1843. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1844. echo " if [ ! -d $USB_MOUNT/backup/mutt ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1845. echo " mkdir -p $USB_MOUNT/backup/mutt" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1846. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1847. echo " rsyncrypto -v -r /home/$MY_USERNAME/tempbackup $USB_MOUNT/backup/mutt $USB_MOUNT/backup/mutt.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1848. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1849. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1850. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1851. echo " rm -rf /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1852. echo ' exit 492' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1853. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1854. echo " rm -rf /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1855. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1856. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1857. echo '# Backup procmail settings' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1858. echo "if [ -f /home/$MY_USERNAME/.procmailrc ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1859. echo ' echo "Backing up procmail settings"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1860. echo " if [ ! -d /home/$MY_USERNAME/tempbackup ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1861. echo " mkdir -p /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1862. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1863. echo " cp /home/$MY_USERNAME/.procmailrc /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1864. echo " if [ ! -d $USB_MOUNT/backup/procmail ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1865. echo " mkdir -p $USB_MOUNT/backup/procmail" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1866. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1867. echo " rsyncrypto -v -r /home/$MY_USERNAME/tempbackup $USB_MOUNT/backup/procmail $USB_MOUNT/backup/procmail.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1868. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1869. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1870. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1871. echo " rm -rf /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1872. echo ' exit 492' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1873. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1874. echo " rm -rf /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1875. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1876. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1877. echo '# Backup email' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1878. echo "if [ -d /home/$MY_USERNAME/Maildir ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1879. echo ' echo "Creating an email archive"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1880. echo ' if [ ! -d /root/backupemail ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1881. echo " mkdir -p /root/backupemail" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1882. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1883. echo " tar -czvf /root/backupemail/maildir.tar.gz /home/$MY_USERNAME/Maildir" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1884. echo ' echo "Backing up emails"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1885. echo " if [ ! -d $USB_MOUNT/backup/mail ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1886. echo " mkdir -p $USB_MOUNT/backup/mail" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1887. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1888. echo " rsyncrypto -v -r /root/backupemail $USB_MOUNT/backup/mail $USB_MOUNT/backup/mail.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1889. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1890. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1891. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1892. echo ' rm -rf /root/backupemail' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1893. echo ' exit 396' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1894. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1895. echo ' rm -rf /root/backupemail' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1896. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1897. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1898. echo '# Backup DLNA cache' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1899. echo "if [ -d /var/cache/minidlna ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1900. echo ' echo "Backing up DLNA cache"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1901. echo " if [ ! -d $USB_MOUNT/backup/dlna ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1902. echo " mkdir -p $USB_MOUNT/backup/dlna" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1903. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1904. echo " rsyncrypto -v -r /var/cache/minidlna $USB_MOUNT/backup/dlna $USB_MOUNT/backup/dlna.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1905. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1906. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1907. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1908. echo ' exit 498' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1909. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1910. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1911. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1912. echo '# Backup VoIP settings' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1913. echo "if [ -f /etc/$VOIP_CONFIG_FILE ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1914. echo ' echo "Backing up VoIP settings"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1915. echo " if [ ! -d /home/$MY_USERNAME/tempbackup ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1916. echo " mkdir -p /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1917. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1918. echo " cp -f /etc/$VOIP_CONFIG_FILE /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1919. echo " cp -f /var/lib/mumble-server/$VOIP_DATABASE /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1920. echo " if [ ! -d $USB_MOUNT/backup/voip ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1921. echo " mkdir -p $USB_MOUNT/backup/voip" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1922. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1923. echo " rsyncrypto -v -r /home/$MY_USERNAME/tempbackup $USB_MOUNT/backup/voip $USB_MOUNT/backup/voip.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1924. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1925. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1926. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1927. echo " rm -rf /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1928. echo ' exit 2492' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1929. echo ' fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1930. echo " rm -rf /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1931. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1932. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1933. if [[ $BACKUP_INCLUDES_DATABASES == "yes" ]]; then
  1934. echo '# Mysql settings' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1935. echo "if [ ! -d $USB_MOUNT/backup/mariadb ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1936. echo " mkdir -p $USB_MOUNT/backup/mariadb" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1937. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1938. echo 'if [ ! -d /root/tempmariadb ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1939. echo ' mkdir /root/tempmariadb' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1940. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1941. echo 'mysqldump --password=$DATABASE_PASSWORD mysql user > /root/tempmariadb/mysql.sql' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1942. echo "if [ ! -s /root/tempmariadb/mysql.sql ]; then" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1943. echo ' echo "Unable to backup mysql settings"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1944. echo ' rm -rf /root/tempmariadb' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1945. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1946. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1947. echo ' exit 653' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1948. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1949. echo 'echo "$DATABASE_PASSWORD" > /root/tempmariadb/db' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1950. echo 'chmod 400 /root/tempmariadb/db' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1951. echo "rsyncrypto -v -r /root/tempmariadb $USB_MOUNT/backup/mariadb $USB_MOUNT/backup/mariadb.keys $BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1952. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1953. echo " umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1954. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1955. echo ' exit 794' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1956. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1957. echo 'shred -zu /root/tempmariadb/*' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1958. echo 'rm -rf /root/tempmariadb' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1959. echo '' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1960. fi
  1961. echo 'sync' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1962. echo 'ls -lh $USB_MOUNT/backup' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1963. echo "umount $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1964. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1965. echo ' echo "Unable to unmount the drive. This means that the backup did not work"' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1966. echo " rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1967. echo ' exit 46994' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1968. echo 'fi' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1969. echo "rm -rf $USB_MOUNT" >> /usr/bin/$BACKUP_SCRIPT_NAME
  1970. echo 'echo "Backup to USB drive is complete. You can now unplug it."' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1971. echo 'exit 0' >> /usr/bin/$BACKUP_SCRIPT_NAME
  1972. chmod 400 /usr/bin/$BACKUP_SCRIPT_NAME
  1973. chmod +x /usr/bin/$BACKUP_SCRIPT_NAME
  1974. echo 'create_backup_script' >> $COMPLETION_FILE
  1975. }
  1976. function create_restore_script {
  1977. if grep -Fxq "create_restore_script" $COMPLETION_FILE; then
  1978. return
  1979. fi
  1980. apt-get -y install rsyncrypto
  1981. get_mariadb_password
  1982. get_mariadb_gnusocial_admin_password
  1983. get_mariadb_redmatrix_admin_password
  1984. get_mariadb_owncloud_admin_password
  1985. get_mariadb_git_admin_password
  1986. echo '#!/bin/bash' > /usr/bin/$RESTORE_SCRIPT_NAME
  1987. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  1988. echo "USB_DRIVE=$USB_DRIVE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  1989. echo 'if [ $1 ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  1990. echo ' USB_DRIVE=/dev/${1}1' >> /usr/bin/$RESTORE_SCRIPT_NAME
  1991. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  1992. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  1993. echo 'if [ ! -b $USB_DRIVE ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  1994. echo ' echo "Please attach a USB drive"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  1995. echo ' exit 1' >> /usr/bin/$RESTORE_SCRIPT_NAME
  1996. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  1997. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  1998. echo "if [ ! -d $USB_MOUNT ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  1999. echo " mkdir $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2000. echo -n ' mount $USB_DRIVE ' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2001. echo "$USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2002. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2003. echo "if [ ! -d $USB_MOUNT/backup ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2004. echo ' echo "No backup directory found on the USB drive."' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2005. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2006. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2007. echo ' exit 2' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2008. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2009. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2010. echo 'echo "Checking that user exists"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2011. echo "if [ ! -d /home/$MY_USERNAME ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2012. echo " echo 'Username $MY_USERNAME not found. Reinstall Freedombone with this username.'" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2013. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2014. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2015. echo ' exit 295' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2016. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2017. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2018. echo 'echo "Copying GPG keys to root"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2019. echo "cp -r /home/$MY_USERNAME/.gnupg /root" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2020. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2021. echo "if [ -f $USB_MOUNT/backup/key.gpg ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2022. echo " if [ -f $BACKUP_CERTIFICATE.new ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2023. echo " rm $BACKUP_CERTIFICATE.new" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2024. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2025. echo " cp $USB_MOUNT/backup/key.gpg /root/tempbackupkey.gpg" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2026. echo " gpg /root/tempbackupkey.gpg" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2027. echo " if [ -f /root/tempbackupkey ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2028. echo ' echo "Backup key decrypted"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2029. echo " cp /root/tempbackupkey $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2030. echo " shred -zu /root/tempbackupkey" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2031. echo " chmod 400 $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2032. echo ' echo "Backup certificate installed"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2033. echo ' else' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2034. echo ' echo "Unable to decrypt the backup key"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2035. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2036. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2037. echo ' exit 735' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2038. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2039. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2040. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2041. echo "if [ ! -f $BACKUP_CERTIFICATE ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2042. echo " echo 'No backup key was found. Copy your backup key to $BACKUP_CERTIFICATE'" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2043. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2044. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2045. echo ' exit 563' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2046. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2047. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2048. echo '# MariaDB password' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2049. echo -n 'DATABASE_PASSWORD=$(cat ' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2050. echo "$DATABASE_PASSWORD_FILE)" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2051. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2052. echo '# Make a backup of the original README file' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2053. echo '# incase old passwords need to be used' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2054. echo "if [ -f /home/$MY_USERNAME/README ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2055. echo " if [ ! -f /home/$MY_USERNAME/README_original ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2056. echo " cp /home/$MY_USERNAME/README /home/$MY_USERNAME/README_original" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2057. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2058. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2059. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2060. if [[ $BACKUP_INCLUDES_DATABASES == "yes" ]]; then
  2061. echo "if [ -d $USB_MOUNT/backup/mariadb ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2062. echo ' echo "Restoring mysql settings"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2063. echo ' if [ ! -d /root/tempmariadb ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2064. echo ' mkdir /root/tempmariadb' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2065. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2066. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/mariadb /root/tempmariadb $USB_MOUNT/backup/mariadb.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2067. echo ' echo "Get the MariaDB password from the backup"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2068. echo ' if [ ! -f /root/tempmariadb/usb/backup/mariadb/tempmariadb/db ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2069. echo ' echo "MariaDB password file not found"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2070. echo ' exit 495' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2071. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2072. echo ' BACKUP_MARIADB_PASSWORD=$(cat /root/tempmariadb/usb/backup/mariadb/tempmariadb/db)' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2073. echo ' if [[ $BACKUP_MARIADB_PASSWORD != $DATABASE_PASSWORD ]]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2074. echo ' echo "Restore the MariaDB user table"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2075. echo ' mysqlsuccess=$(mysql -u root --password=$DATABASE_PASSWORD mysql -o < /root/tempmariadb/usb/backup/mariadb/tempmariadb/mysql.sql)' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2076. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2077. echo ' echo "Try again using the password obtained from backup"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2078. echo ' mysqlsuccess=$(mysql -u root --password=$BACKUP_MARIADB_PASSWORD mysql -o < /root/tempmariadb/usb/backup/mariadb/tempmariadb/mysql.sql)' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2079. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2080. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2081. echo ' echo "$mysqlsuccess"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2082. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2083. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2084. echo ' exit 962' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2085. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2086. echo ' echo "Restarting database"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2087. echo ' service mysql restart' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2088. echo ' echo "Change the MariaDB password to the backup version"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2089. echo ' DATABASE_PASSWORD=$BACKUP_MARIADB_PASSWORD' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2090. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2091. echo ' shred -zu /root/tempmariadb/usb/backup/mariadb/tempmariadb/db' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2092. echo ' rm -rf /root/tempmariadb' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2093. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2094. echo ' # Change database password file' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2095. echo -n ' echo "$DATABASE_PASSWORD" > ' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2096. echo "$DATABASE_PASSWORD_FILE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2097. echo " chmod 600 $DATABASE_PASSWORD_FILE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2098. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2099. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2100. fi
  2101. echo "if [ -d $USB_MOUNT/backup/mutt ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2102. echo ' echo "Restoring Mutt settings"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2103. echo ' mkdir /root/tempmutt' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2104. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/mutt /root/tempmutt $USB_MOUNT/backup/mutt.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2105. echo " if [ -f /root/tempmutt/usb/backup/mutt/$MY_USERNAME/tempbackup/.muttrc ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2106. echo " cp -f /root/tempmutt/usb/backup/mutt/$MY_USERNAME/tempbackup/.muttrc /home/$MY_USERNAME/.muttrc" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2107. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2108. echo " if [ -f /root/tempmutt/usb/backup/mutt/$MY_USERNAME/tempbackup/Muttrc ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2109. echo " cp -f /root/tempmutt/usb/backup/mutt/$MY_USERNAME/tempbackup/Muttrc /etc/Muttrc" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2110. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2111. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2112. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2113. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2114. echo ' rm -rf /root/tempmutt' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2115. echo ' exit 276' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2116. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2117. echo ' rm -rf /root/tempmutt' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2118. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2119. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2120. echo "if [ -d $USB_MOUNT/backup/gnupg ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2121. echo ' echo "Restoring gnupg settings"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2122. echo ' mkdir /root/tempgnupg' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2123. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/gnupg /root/tempgnupg $USB_MOUNT/backup/gnupg.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2124. echo " cp -r /root/tempgnupg/usb/backup/gnupg/$MY_USERNAME/.gnupg /home/$MY_USERNAME/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2125. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2126. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2127. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2128. echo ' rm -rf /root/tempgnupg' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2129. echo ' exit 276' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2130. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2131. echo ' rm -rf /root/tempgnupg' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2132. echo " cp -r /home/$MY_USERNAME/.gnupg /root" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2133. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2134. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2135. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2136. echo ' exit 283' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2137. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2138. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2139. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2140. echo "if [ -d $USB_MOUNT/backup/procmail ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2141. echo ' echo "Restoring procmail settings"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2142. echo ' mkdir /root/tempprocmail' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2143. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/procmail /root/tempprocmail $USB_MOUNT/backup/procmail.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2144. echo " cp -f /root/tempprocmail/usb/backup/procmail/$MY_USERNAME/tempbackup/.procmailrc /home/$MY_USERNAME/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2145. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2146. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2147. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2148. echo ' rm -rf /root/tempprocmail' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2149. echo ' exit 276' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2150. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2151. echo ' rm -rf /root/tempprocmail' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2152. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2153. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2154. echo "if [ -d $USB_MOUNT/backup/readme ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2155. echo ' echo "Restoring README"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2156. echo ' mkdir /root/tempreadme' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2157. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/readme /root/tempreadme $USB_MOUNT/backup/readme.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2158. echo " cp -f /root/tempreadme/usb/backup/readme/$MY_USERNAME/tempbackup/README /home/$MY_USERNAME/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2159. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2160. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2161. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2162. echo ' rm -rf /root/tempreadme' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2163. echo ' exit 276' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2164. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2165. echo ' rm -rf /root/tempreadme' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2166. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2167. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2168. echo "if [ -d $USB_MOUNT/backup/ssh ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2169. echo ' echo "Restoring ssh keys"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2170. echo ' mkdir /root/tempssh' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2171. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/ssh /root/tempssh $USB_MOUNT/backup/ssh.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2172. echo " cp -r /root/tempssh/usb/backup/ssh/$MY_USERNAME/.ssh /home/$MY_USERNAME/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2173. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2174. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2175. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2176. echo ' rm -rf /root/tempssh' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2177. echo ' exit 664' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2178. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2179. echo ' rm -rf /root/tempssh' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2180. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2181. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2182. echo "if [ -d $USB_MOUNT/backup/ssl ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2183. echo ' echo "Restoring certificates"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2184. echo ' mkdir /root/tempssl' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2185. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/ssl /root/tempssl $USB_MOUNT/backup/ssl.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2186. echo ' cp -r /root/tempssl/usb/backup/ssl/ssl/* /etc/ssl' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2187. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2188. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2189. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2190. echo ' exit 276' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2191. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2192. echo ' rm -rf /root/tempssl' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2193. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2194. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2195. echo "if [ -d $USB_MOUNT/backup/projects ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2196. echo ' echo "Restoring projects"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2197. echo ' mkdir /root/tempprojects' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2198. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/projects /root/tempprojects $USB_MOUNT/backup/projects.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2199. echo " if [ -d /home/$MY_USERNAME/projects ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2200. echo " rm -rf /home/$MY_USERNAME/projects" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2201. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2202. echo " mv /root/tempprojects/usb/backup/projects/$MY_USERNAME/projects /home/$MY_USERNAME" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2203. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2204. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2205. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2206. echo ' exit 166' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2207. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2208. echo ' rm -rf /root/tempprojects' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2209. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2210. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2211. echo "if [ -d $USB_MOUNT/backup/personal ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2212. echo ' echo "Restoring personal settings"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2213. echo ' mkdir /root/temppersonal' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2214. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/personal /root/temppersonal $USB_MOUNT/backup/personal.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2215. echo " if [ -d /home/$MY_USERNAME/personal ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2216. echo " rm -rf /home/$MY_USERNAME/personal" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2217. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2218. echo " mv /root/temppersonal/usb/backup/personal/$MY_USERNAME/personal /home/$MY_USERNAME" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2219. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2220. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2221. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2222. echo ' exit 184' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2223. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2224. echo ' rm -rf /root/temppersonal' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2225. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2226. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2227. echo "if [ -d $PUBLIC_MAILING_LIST_DIRECTORY ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2228. echo ' echo "Restoring public mailing list"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2229. echo ' mkdir /root/tempmailinglist' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2230. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/mailinglist /root/tempmailinglist $USB_MOUNT/backup/mailinglist.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2231. echo " cp -r /root/tempmailinglist/usb/backup/mailinglist/spool/mlmmj/* $PUBLIC_MAILING_LIST_DIRECTORY" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2232. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2233. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2234. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2235. echo ' exit 526' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2236. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2237. echo ' rm -rf /root/tempmailinglist' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2238. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2239. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2240. echo "if [ -d $XMPP_DIRECTORY ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2241. echo ' echo "Restoring XMPP settings"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2242. echo ' mkdir /root/tempxmpp' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2243. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/xmpp /root/tempxmpp $USB_MOUNT/backup/xmpp.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2244. echo " cp -r /root/tempxmpp/usb/backup/xmpp/lib/prosody/* $XMPP_DIRECTORY" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2245. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2246. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2247. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2248. echo ' exit 725' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2249. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2250. echo ' rm -rf /root/tempxmpp' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2251. echo ' service prosody restart' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2252. echo ' chown -R prosody:prosody /var/lib/prosody/*' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2253. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2254. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2255. BACKUP_INCLUDES_WEBSITES="no"
  2256. if grep -Fxq "install_gnu_social" $COMPLETION_FILE; then
  2257. BACKUP_INCLUDES_WEBSITES="yes"
  2258. echo "if [ -d $USB_MOUNT/backup/gnusocial ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2259. echo ' echo "Restoring microblog database"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2260. echo ' if [ ! -d /root/tempgnusocialdata ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2261. echo ' mkdir /root/tempgnusocialdata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2262. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2263. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/gnusocialdata /root/tempgnusocialdata $USB_MOUNT/backup/gnusocialdata.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2264. echo ' if [ ! -f /root/tempgnusocialdata/usb/backup/gnusocialdata/tempgnusocialdata/gnusocial.sql ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2265. echo ' echo "Unable to restore microblog database"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2266. echo ' rm -rf /root/tempgnusocialdata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2267. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2268. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2269. echo ' exit 503' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2270. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2271. echo ' mysqlsuccess=$(mysql -u root --password=$DATABASE_PASSWORD gnusocial -o < /root/tempgnusocialdata/usb/backup/gnusocialdata/tempgnusocialdata/gnusocial.sql)' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2272. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2273. echo ' echo "$mysqlsuccess"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2274. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2275. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2276. echo ' exit 964' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2277. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2278. echo ' shred -zu /root/tempgnusocialdata/usb/backup/gnusocialdata/tempgnusocialdata/*' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2279. echo ' rm -rf /root/tempgnusocialdata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2280. echo ' echo "Restoring microblog installation"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2281. echo ' if [ ! -d /root/tempgnusocial ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2282. echo ' mkdir /root/tempgnusocial' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2283. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2284. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/gnusocial /root/tempgnusocial $USB_MOUNT/backup/gnusocial.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2285. echo " rm -rf /var/www/$MICROBLOG_DOMAIN_NAME/htdocs" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2286. echo " mv /root/tempgnusocial/usb/backup/gnusocial/www/$MICROBLOG_DOMAIN_NAME/htdocs /var/www/$MICROBLOG_DOMAIN_NAME/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2287. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2288. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2289. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2290. echo ' exit 683' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2291. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2292. echo ' rm -rf /root/tempgnusocial' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2293. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2294. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2295. fi
  2296. if grep -Fxq "install_redmatrix" $COMPLETION_FILE; then
  2297. BACKUP_INCLUDES_WEBSITES="yes"
  2298. echo "if [ -d $USB_MOUNT/backup/redmatrix ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2299. echo ' echo "Restoring Red Matrix database"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2300. echo ' if [ ! -d /root/tempredmatrixdata ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2301. echo ' mkdir /root/tempredmatrixdata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2302. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2303. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/redmatrixdata /root/tempredmatrixdata $USB_MOUNT/backup/redmatrixdata.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2304. echo ' if [ ! -f /root/tempredmatrixdata/usb/backup/redmatrixdata/tempredmatrixdata/redmatrix.sql ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2305. echo ' echo "Unable to restore Red Matrix database"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2306. echo ' rm -rf /root/tempredmatrixdata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2307. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2308. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2309. echo ' exit 504' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2310. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2311. echo ' mysqlsuccess=$(mysql -u root --password=$DATABASE_PASSWORD redmatrix -o < /root/tempredmatrixdata/usb/backup/redmatrixdata/tempredmatrixdata/redmatrix.sql)' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2312. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2313. echo ' echo "$mysqlsuccess"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2314. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2315. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2316. echo ' exit 965' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2317. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2318. echo ' shred -zu /root/tempredmatrixdata/usb/backup/redmatrixdata/tempredmatrixdata/*' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2319. echo ' rm -rf /root/tempredmatrixdata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2320. echo ' echo "Restoring Red Matrix installation"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2321. echo ' if [ ! -d /root/tempredmatrix ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2322. echo ' mkdir /root/tempredmatrix' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2323. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2324. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/redmatrix /root/tempredmatrix $USB_MOUNT/backup/redmatrix.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2325. echo " rm -rf /var/www/$REDMATRIX_DOMAIN_NAME/htdocs" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2326. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2327. echo " cp -r /root/tempredmatrix/usb/backup/redmatrix/www/$REDMATRIX_DOMAIN_NAME/htdocs/* /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2328. echo ' else' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2329. echo " mv /root/tempredmatrix/usb/backup/redmatrix/www/$REDMATRIX_DOMAIN_NAME/htdocs /var/www/$REDMATRIX_DOMAIN_NAME/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2330. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2331. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2332. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2333. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2334. echo ' exit 759' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2335. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2336. echo ' rm -rf /root/tempredmatrix' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2337. echo " chmod 777 /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/store/[data]/smarty3" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2338. echo " chown -R www-data:www-data /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/*" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2339. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2340. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2341. fi
  2342. if grep -Fxq "install_owncloud" $COMPLETION_FILE; then
  2343. BACKUP_INCLUDES_WEBSITES="yes"
  2344. echo "if [ -d $USB_MOUNT/backup/owncloud ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2345. echo ' echo "Restoring owncloud database"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2346. echo ' if [ ! -d /root/tempownclouddata ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2347. echo ' mkdir /root/tempownclouddata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2348. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2349. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/ownclouddata /root/tempownclouddata $USB_MOUNT/backup/ownclouddata.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2350. echo ' if [ ! -f /root/tempownclouddata/usb/backup/ownclouddata/tempownclouddata/owncloud.sql ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2351. echo ' echo "Unable to restore Owncloud database"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2352. echo ' rm -rf /root/tempownclouddata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2353. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2354. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2355. echo ' exit 505' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2356. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2357. echo ' mysqlsuccess=$(mysql -u root --password=$DATABASE_PASSWORD owncloud -o < /root/tempownclouddata/usb/backup/ownclouddata/tempownclouddata/owncloud.sql)' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2358. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2359. echo ' echo "$mysqlsuccess"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2360. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2361. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2362. echo ' exit 965' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2363. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2364. echo ' echo "Restoring Owncloud installation"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2365. echo ' if [ ! -d /root/tempowncloud ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2366. echo ' mkdir /root/tempowncloud' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2367. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2368. echo ' if [ ! -d /root/tempowncloud2 ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2369. echo ' mkdir /root/tempowncloud2' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2370. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2371. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/owncloud /root/tempowncloud $USB_MOUNT/backup/owncloud.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2372. echo " cp -r /root/tempowncloud/usb/backup/owncloud/lib/owncloud/* /var/lib/owncloud/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2373. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2374. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2375. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2376. echo ' exit 981' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2377. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2378. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/owncloud2 /root/tempowncloud2 $USB_MOUNT/backup/owncloud2.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2379. echo " cp -r /root/tempowncloud2/usb/backup/owncloud2/owncloud/* /etc/owncloud/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2380. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2381. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2382. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2383. echo ' exit 982' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2384. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2385. echo ' rm -rf /root/tempowncloud' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2386. echo ' rm -rf /root/tempowncloud2' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2387. echo ' rm -rf /root/tempownclouddata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2388. echo ' chown -R www-data:www-data /var/lib/owncloud/data' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2389. echo ' chown -R www-data:www-data /var/lib/owncloud/backup' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2390. echo ' chown -R www-data:www-data /var/lib/owncloud/assets' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2391. echo " occ files:scan $MY_USERNAME" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2392. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2393. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2394. fi
  2395. if grep -Fxq "install_gogs" $COMPLETION_FILE; then
  2396. BACKUP_INCLUDES_WEBSITES="yes"
  2397. echo "if [ -d $USB_MOUNT/backup/gogs ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2398. echo ' echo "Restoring gogs database"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2399. echo ' if [ ! -d /root/tempgogsdata ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2400. echo ' mkdir /root/tempgogsdata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2401. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2402. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/gogsdata /root/tempgogsdata $USB_MOUNT/backup/gogsdata.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2403. echo ' if [ ! -f /root/tempgogsdata/usb/backup/gogsdata/tempgogsdata/gogs.sql ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2404. echo ' echo "Unable to restore Gogs database"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2405. echo ' rm -rf /root/tempgogsdata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2406. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2407. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2408. echo ' exit 505' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2409. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2410. echo ' mysqlsuccess=$(mysql -u root --password=$DATABASE_PASSWORD gogs -o < /root/tempgogsdata/usb/backup/gogsdata/tempgogsdata/gogs.sql)' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2411. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2412. echo ' echo "$mysqlsuccess"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2413. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2414. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2415. echo ' exit 965' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2416. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2417. echo ' echo "Restoring Gogs settings"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2418. echo ' if [ ! -d /root/tempgogs ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2419. echo ' mkdir /root/tempgogs' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2420. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2421. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/gogs /root/tempgogs $USB_MOUNT/backup/gogs.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2422. echo ' if [ ! -d /home/git/go/src/github.com/gogits/gogs/custom ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2423. echo ' mkdir -p /home/git/go/src/github.com/gogits/gogs/custom' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2424. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2425. echo " cp -r /root/tempgogs/usb/backup/gogs/git/go/src/github.com/gogits/gogs/custom/* /home/git/go/src/github.com/gogits/gogs/custom" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2426. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2427. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2428. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2429. echo ' exit 981' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2430. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2431. echo ' echo "Restoring Gogs repos"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2432. echo ' if [ ! -d /root/tempgogsrepos ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2433. echo ' mkdir /root/tempgogsrepos' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2434. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2435. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/gogsrepos /root/tempgogsrepos $USB_MOUNT/backup/gogsrepos.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2436. echo " cp -r /root/tempgogsrepos/usb/backup/gogsrepos/git/gog-repositories/* /home/git/gogs-repositories/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2437. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2438. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2439. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2440. echo ' exit 67574' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2441. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2442. echo ' echo "Restoring Gogs authorized_keys"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2443. echo ' if [ ! -d /root/tempgogsssh ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2444. echo ' mkdir /root/tempgogsssh' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2445. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2446. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/gogsssh /root/tempgogsssh $USB_MOUNT/backup/gogsssh.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2447. echo ' if [ ! -d /home/git/.ssh ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2448. echo ' mkdir /home/git/.ssh' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2449. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2450. echo " cp -r /root/tempgogsssh/usb/backup/gogsssh/git/.ssh/* /home/git/.ssh/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2451. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2452. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2453. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2454. echo ' exit 8463' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2455. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2456. echo ' rm -rf /root/tempgogs' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2457. echo ' rm -rf /root/tempgogsdata' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2458. echo ' rm -rf /root/tempgogsrepos' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2459. echo ' rm -rf /root/tempgogsssh' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2460. echo ' chown -R git:git /home/git' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2461. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2462. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2463. fi
  2464. echo "if [ -d $USB_MOUNT/backup/wiki ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2465. echo ' echo "Restoring Wiki installation"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2466. echo ' mkdir /root/tempwiki' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2467. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/wiki /root/tempwiki $USB_MOUNT/backup/wiki.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2468. echo " cp -r /root/tempwiki/usb/backup/wiki/lib/dokuwiki/* /var/lib/dokuwiki/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2469. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2470. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2471. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2472. echo ' exit 868' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2473. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2474. echo ' mkdir /root/tempwiki2' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2475. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/wiki2 /root/tempwiki2 $USB_MOUNT/backup/wiki2.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2476. echo " cp -r /root/tempwiki2/usb/backup/wiki2/dokuwiki/* /etc/dokuwiki/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2477. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2478. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2479. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2480. echo ' exit 869' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2481. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2482. echo ' rm -rf /root/tempwiki' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2483. echo ' rm -rf /root/tempwiki2' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2484. echo ' chown -R www-data:www-data /var/lib/dokuwiki/*' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2485. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2486. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2487. echo "if [ -d $USB_MOUNT/backup/blog ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2488. echo ' echo "Restoring blog installation"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2489. echo ' mkdir /root/tempblog' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2490. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/blog /root/tempblog $USB_MOUNT/backup/blog.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2491. echo " rm -rf /var/www/$FULLBLOG_DOMAIN_NAME/htdocs" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2492. echo " cp -r /root/tempblog/usb/backup/blog/www/$FULLBLOG_DOMAIN_NAME/htdocs /var/www/$FULLBLOG_DOMAIN_NAME/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2493. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2494. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2495. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2496. echo ' exit 593' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2497. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2498. echo ' rm -rf /root/tempblog' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2499. echo " if [ ! -d /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/content ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2500. echo ' echo "No content directory found after restoring blog"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2501. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2502. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2503. echo ' exit 287' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2504. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2505. echo " chown -R www-data:www-data /var/www/$FULLBLOG_DOMAIN_NAME/htdocs" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2506. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2507. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2508. echo "if [ -d $USB_MOUNT/backup/cjdns ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2509. echo ' echo "Restoring cjdns installation"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2510. echo ' mkdir /root/tempcjdns' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2511. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/cjdns /root/tempcjdns $USB_MOUNT/backup/cjdns.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2512. echo " rm -rf /etc/cjdns" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2513. echo " cp -r /root/tempcjdns/usb/backup/cjdns/cjdns /etc/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2514. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2515. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2516. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2517. echo ' exit 8472' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2518. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2519. echo ' rm -rf /root/tempcjdns' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2520. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2521. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2522. echo "if [ -d $USB_MOUNT/backup/mail ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2523. echo ' echo "Restoring emails"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2524. echo ' mkdir /root/tempmail' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2525. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/mail /root/tempmail $USB_MOUNT/backup/mail.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2526. echo " if [ ! -d /home/$MY_USERNAME/Maildir ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2527. echo " mkdir /home/$MY_USERNAME/Maildir" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2528. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2529. echo ' tar -xzvf /root/tempmail/usb/backup/mail/backupemail/maildir.tar.gz' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2530. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2531. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2532. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2533. echo ' exit 927' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2534. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2535. echo ' rm -rf /root/tempmail' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2536. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2537. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2538. echo "if [ -d /var/cache/minidlna ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2539. echo " if [ -d $USB_MOUNT/backup/dlna ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2540. echo ' echo "Restoring DLNA cache"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2541. echo ' mkdir /root/tempdlna' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2542. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/dlna /root/tempdlna $USB_MOUNT/backup/dlna.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2543. echo " cp -r /root/tempdlna/usb/backup/dlna/cache/minidlna/* /var/cache/minidlna/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2544. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2545. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2546. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2547. echo ' exit 982' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2548. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2549. echo ' rm -rf /root/tempdlna' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2550. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2551. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2552. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2553. echo "if [ -d $USB_MOUNT/backup/voip ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2554. echo ' echo "Restoring VoIP settings"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2555. echo ' mkdir /root/tempvoip' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2556. echo " rsyncrypto -v -d -r $USB_MOUNT/backup/voip /root/tempvoip $USB_MOUNT/backup/voip.keys $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2557. echo " cp -f /root/tempvoip/usb/backup/voip/$MY_USERNAME/tempbackup/$VOIP_CONFIG_FILE /etc/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2558. echo " cp -f /root/tempvoip/usb/backup/voip/$MY_USERNAME/tempbackup/$VOIP_DATABASE /var/lib/mumble-server/" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2559. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2560. echo " umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2561. echo " rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2562. echo ' rm -rf /root/tempvoip' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2563. echo ' exit 276' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2564. echo ' fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2565. echo ' rm -rf /root/tempvoip' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2566. echo 'fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2567. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2568. echo 'sync' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2569. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2570. echo "# Unmount the USB drive" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2571. echo "umount $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2572. echo "rm -rf $USB_MOUNT" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2573. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2574. if [[ $BACKUP_INCLUDES_WEBSITES == "yes" ]]; then
  2575. echo "# Restart the web server" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2576. echo "service nginx restart" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2577. echo "service php5-fpm restart" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2578. fi
  2579. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2580. echo 'echo "Setting permissions"' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2581. echo "chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME" >> /usr/bin/$RESTORE_SCRIPT_NAME
  2582. echo '' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2583. echo 'echo "Restore from USB drive is complete. You can now remove it."' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2584. echo 'exit 0' >> /usr/bin/$RESTORE_SCRIPT_NAME
  2585. chmod 400 /usr/bin/$RESTORE_SCRIPT_NAME
  2586. chmod +x /usr/bin/$RESTORE_SCRIPT_NAME
  2587. echo 'create_restore_script' >> $COMPLETION_FILE
  2588. }
  2589. function create_freedns_updater {
  2590. # currently inadyn doesn't work as expected with freeDNS, so this is a workaround
  2591. if grep -Fxq "create_freedns_updater" $COMPLETION_FILE; then
  2592. return
  2593. fi
  2594. if [[ $DDNS_PROVIDER != "default@freedns.afraid.org" ]]; then
  2595. return
  2596. fi
  2597. FREEDNS_WGET='wget -q --read-timeout=0.0 --waitretry=5 --tries=4 https://freedns.afraid.org/dynamic/update.php?'
  2598. echo '#!/bin/bash' > /usr/bin/dynamicdns
  2599. echo 'cd /tmp' >> /usr/bin/dynamicdns
  2600. if [ $DEFAULT_DOMAIN_CODE ]; then
  2601. echo "# $DEFAULT_DOMAIN_NAME" >> /usr/bin/dynamicdns
  2602. echo "$FREEDNS_WGET$DEFAULT_DOMAIN_CODE=" >> /usr/bin/dynamicdns
  2603. fi
  2604. if [ $WIKI_CODE ]; then
  2605. if [[ $WIKI_CODE != "$DEFAULT_DOMAIN_CODE" ]]; then
  2606. echo "# $WIKI_DOMAIN_NAME" >> /usr/bin/dynamicdns
  2607. echo "$FREEDNS_WGET$WIKI_CODE=" >> /usr/bin/dynamicdns
  2608. fi
  2609. fi
  2610. if [ $FULLBLOG_CODE ]; then
  2611. if [[ $FULLBLOG_CODE != "$DEFAULT_DOMAIN_CODE" ]]; then
  2612. echo "# $FULLBLOG_DOMAIN_NAME" >> /usr/bin/dynamicdns
  2613. echo "$FREEDNS_WGET$FULLBLOG_CODE=" >> /usr/bin/dynamicdns
  2614. fi
  2615. fi
  2616. if [ $REDMATRIX_CODE ]; then
  2617. if [[ $REDMATRIX_CODE != "$DEFAULT_DOMAIN_CODE" ]]; then
  2618. echo "# $REDMATRIX_DOMAIN_NAME" >> /usr/bin/dynamicdns
  2619. echo "$FREEDNS_WGET$REDMATRIX_CODE=" >> /usr/bin/dynamicdns
  2620. fi
  2621. fi
  2622. if [ $OWNCLOUD_CODE ]; then
  2623. if [[ $OWNCLOUD_CODE != "$DEFAULT_DOMAIN_CODE" ]]; then
  2624. echo "# $OWNCLOUD_DOMAIN_NAME" >> /usr/bin/dynamicdns
  2625. echo "$FREEDNS_WGET$OWNCLOUD_CODE=" >> /usr/bin/dynamicdns
  2626. fi
  2627. fi
  2628. if [ $MICROBLOG_CODE ]; then
  2629. if [[ $MICROBLOG_CODE != "$DEFAULT_DOMAIN_CODE" ]]; then
  2630. echo "# $MICROBLOG_DOMAIN_NAME" >> /usr/bin/dynamicdns
  2631. echo "$FREEDNS_WGET$MICROBLOG_CODE=" >> /usr/bin/dynamicdns
  2632. fi
  2633. fi
  2634. if [ $GIT_CODE ]; then
  2635. if [[ $GIT_CODE != "$DEFAULT_DOMAIN_CODE" ]]; then
  2636. echo "# $GIT_DOMAIN_NAME" >> /usr/bin/dynamicdns
  2637. echo "$FREEDNS_WGET$GIT_CODE=" >> /usr/bin/dynamicdns
  2638. fi
  2639. fi
  2640. if [ $MEDIAGOBLIN_CODE ]; then
  2641. if [[ $MEDIAGOBLIN_CODE != "$DEFAULT_DOMAIN_CODE" ]]; then
  2642. echo "# $MEDIAGOBLIN_DOMAIN_NAME" >> /usr/bin/dynamicdns
  2643. echo "$FREEDNS_WGET$MEDIAGOBLIN_CODE=" >> /usr/bin/dynamicdns
  2644. fi
  2645. fi
  2646. echo 'exit 0' >> /usr/bin/dynamicdns
  2647. chmod 600 /usr/bin/dynamicdns
  2648. chmod +x /usr/bin/dynamicdns
  2649. if ! grep -q "/usr/bin/dynamicdns" /etc/crontab; then
  2650. echo '*/3 * * * * root /usr/bin/dynamicdns' >> /etc/crontab
  2651. service cron restart
  2652. fi
  2653. echo 'create_freedns_updater' >> $COMPLETION_FILE
  2654. }
  2655. function backup_to_friends_servers {
  2656. if grep -Fxq "backup_to_friends_servers" $COMPLETION_FILE; then
  2657. return
  2658. fi
  2659. if [ ! $FRIENDS_SERVERS_LIST ]; then
  2660. return
  2661. fi
  2662. apt-get -y install rsyncrypto sshpass
  2663. get_mariadb_password
  2664. get_mariadb_gnusocial_admin_password
  2665. get_mariadb_redmatrix_admin_password
  2666. get_mariadb_owncloud_admin_password
  2667. get_mariadb_git_admin_password
  2668. if ! grep -q "backups on friends servers" /home/$MY_USERNAME/README; then
  2669. echo '' >> /home/$MY_USERNAME/README
  2670. echo '' >> /home/$MY_USERNAME/README
  2671. echo 'Backups' >> /home/$MY_USERNAME/README
  2672. echo '=======' >> /home/$MY_USERNAME/README
  2673. echo 'Key file: /root/backupkey' >> /home/$MY_USERNAME/README
  2674. echo "To add friends servers create a file called $FRIENDS_SERVERS_LIST" >> /home/$MY_USERNAME/README
  2675. echo 'and add entries like this:' >> /home/$MY_USERNAME/README
  2676. echo '' >> /home/$MY_USERNAME/README
  2677. echo "username1@domain1:$SSH_PORT//home/username1 ssh_password1" >> /home/$MY_USERNAME/README
  2678. echo "username2@domain2:$SSH_PORT//home/username2 ssh_password2" >> /home/$MY_USERNAME/README
  2679. echo '...' >> /home/$MY_USERNAME/README
  2680. echo '' >> /home/$MY_USERNAME/README
  2681. echo 'The system will try to backup to these remote locations once per day.' >> /home/$MY_USERNAME/README
  2682. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  2683. fi
  2684. echo '#!/bin/bash' > /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2685. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2686. echo '# Temporary location for data to be backed up to other servers' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2687. echo 'SERVER_DIRECTORY=/root/remotebackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2688. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2689. echo "if [ ! -f $BACKUP_CERTIFICATE ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2690. echo ' echo "Creating backup key"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2691. echo ' freedombone-addcert -h backup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2692. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2693. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2694. echo "if [ ! -f $FRIENDS_SERVERS_LIST ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2695. echo ' exit 1' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2696. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2697. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2698. echo '# MariaDB password' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2699. echo -n 'DATABASE_PASSWORD=$(cat ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2700. echo "$DATABASE_PASSWORD_FILE)" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2701. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2702. echo '# local directory where the backup will be made' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2703. echo 'if [ ! -d $SERVER_DIRECTORY ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2704. echo ' mkdir $SERVER_DIRECTORY' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2705. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2706. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2707. echo 'if [ ! -d $SERVER_DIRECTORY/backup ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2708. echo ' mkdir -p $SERVER_DIRECTORY/backup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2709. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2710. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2711. if grep -Fxq "install_gnu_social" $COMPLETION_FILE; then
  2712. BACKUP_INCLUDES_DATABASES="yes"
  2713. echo 'if [ ! -d $SERVER_DIRECTORY/backup/gnusocial ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2714. echo ' mkdir -p $SERVER_DIRECTORY/backup/gnusocial' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2715. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2716. echo 'if [ ! -d $SERVER_DIRECTORY/backup/gnusocialdata ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2717. echo ' mkdir -p $SERVER_DIRECTORY/backup/gnusocialdata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2718. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2719. echo "if [ ! -d /root/tempgnusocialdata ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2720. echo " mkdir -p /root/tempgnusocialdata" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2721. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2722. echo 'echo "Obtaining GNU Social database backup"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2723. echo 'mysqldump --password=$DATABASE_PASSWORD gnusocial > /root/tempgnusocialdata/gnusocial.sql' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2724. echo "if [ ! -s /root/tempgnusocialdata/gnusocial.sql ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2725. echo ' echo "GNU social database could not be saved"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2726. echo ' if [ ! $DATABASE_PASSWORD ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2727. echo " echo 'No MariaDB password was given'" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2728. echo " fi" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2729. echo ' shred -zu /root/tempgnusocialdata/*' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2730. echo ' rm -rf /root/tempgnusocialdata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2731. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2732. echo -n ' echo "Unable to export gnusocial database" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2733. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2734. echo ' exit 296' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2735. echo "fi" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2736. echo -n 'rsyncrypto -v -r /root/tempgnusocialdata $SERVER_DIRECTORY/backup/gnusocialdata $SERVER_DIRECTORY/backup/gnusocialdata.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2737. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2738. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2739. echo ' shred -zu /root/tempgnusocialdata/*' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2740. echo ' rm -rf /root/tempgnusocialdata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2741. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2742. echo -n ' echo "Unable to encrypt gnusocial database" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2743. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2744. echo ' exit 853' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2745. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2746. echo 'shred -zu /root/tempgnusocialdata/*' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2747. echo 'rm -rf /root/tempgnusocialdata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2748. echo 'echo "Backing up GNU social installation"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2749. echo -n "rsyncrypto -v -r /var/www/$MICROBLOG_DOMAIN_NAME/htdocs " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2750. echo -n '$SERVER_DIRECTORY/backup/gnusocial $SERVER_DIRECTORY/backup/gnusocial.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2751. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2752. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2753. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2754. echo -n ' echo "Unable to encrypt gnusocial installation" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2755. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2756. echo ' exit 846' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2757. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2758. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2759. fi
  2760. if grep -Fxq "install_redmatrix" $COMPLETION_FILE; then
  2761. BACKUP_INCLUDES_DATABASES="yes"
  2762. echo 'if [ ! -d $SERVER_DIRECTORY/backup/redmatrix ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2763. echo ' mkdir -p $SERVER_DIRECTORY/backup/redmatrix' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2764. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2765. echo 'if [ ! -d $SERVER_DIRECTORY/backup/redmatrixdata ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2766. echo ' mkdir -p $SERVER_DIRECTORY/backup/redmatrixdata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2767. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2768. echo "if [ ! -d /root/tempredmatrixdata ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2769. echo " mkdir -p /root/tempredmatrixdata" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2770. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2771. echo 'echo "Obtaining Red Matrix database backup"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2772. echo 'mysqldump --password=$DATABASE_PASSWORD redmatrix > /root/tempredmatrixdata/redmatrix.sql' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2773. echo "if [ ! -s /root/tempredmatrixdata/redmatrix.sql ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2774. echo ' echo "Red Matrix database could not be saved"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2775. echo ' if [ ! $DATABASE_PASSWORD ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2776. echo " echo 'No MariaDB password was given'" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2777. echo " fi" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2778. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2779. echo -n ' echo "Unable to export redmatrix database" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2780. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2781. echo ' exit 378' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2782. echo "fi" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2783. echo -n 'rsyncrypto -v -r /root/tempredmatrixdata $SERVER_DIRECTORY/backup/redmatrixdata $SERVER_DIRECTORY/backup/redmatrixdata.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2784. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2785. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2786. echo ' shred -zu /root/tempredmatrixdata/*' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2787. echo ' rm -rf /root/tempredmatrixdata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2788. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2789. echo -n ' echo "Unable to encrypt redmatrix database" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2790. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2791. echo ' exit 285' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2792. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2793. echo 'shred -zu /root/tempredmatrixdata/*' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2794. echo 'rm -rf /root/tempredmatrixdata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2795. echo 'echo "Backing up Red Matrix installation"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2796. echo -n "rsyncrypto -v -r /var/www/$REDMATRIX_DOMAIN_NAME/htdocs " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2797. echo -n '$SERVER_DIRECTORY/backup/redmatrix $SERVER_DIRECTORY/backup/redmatrix.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2798. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2799. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2800. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2801. echo -n ' echo "Unable to encrypt redmatrix installation" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2802. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2803. echo ' exit 593' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2804. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2805. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2806. fi
  2807. if grep -Fxq "install_owncloud" $COMPLETION_FILE; then
  2808. BACKUP_INCLUDES_DATABASES="yes"
  2809. echo 'if [ ! -d $SERVER_DIRECTORY/backup/owncloud ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2810. echo ' mkdir -p $SERVER_DIRECTORY/backup/owncloud' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2811. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2812. echo 'if [ ! -d $SERVER_DIRECTORY/backup/owncloud2 ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2813. echo ' mkdir -p $SERVER_DIRECTORY/backup/owncloud2' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2814. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2815. echo 'if [ ! -d $SERVER_DIRECTORY/backup/ownclouddata ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2816. echo ' mkdir -p $SERVER_DIRECTORY/backup/ownclouddata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2817. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2818. echo "if [ ! -d /root/tempownclouddata ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2819. echo " mkdir -p /root/tempownclouddata" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2820. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2821. echo 'mysqldump --password=$DATABASE_PASSWORD owncloud > /root/tempownclouddata/owncloud.sql' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2822. echo "if [ ! -s /root/tempownclouddata/owncloud.sql ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2823. echo ' echo "Owncloud database could not be saved"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2824. echo ' if [ ! $DATABASE_PASSWORD ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2825. echo " echo 'No MariaDB password was given'" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2826. echo " fi" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2827. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2828. echo -n ' echo "Unable to export owncloud database" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2829. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2830. echo ' exit 377' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2831. echo "fi" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2832. echo -n 'rsyncrypto -v -r /root/tempownclouddata $SERVER_DIRECTORY/backup/ownclouddata $SERVER_DIRECTORY/backup/ownclouddata.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2833. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2834. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2835. echo ' shred -zu /root/tempownclouddata/*' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2836. echo ' rm -rf /root/tempownclouddata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2837. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2838. echo -n ' echo "Unable to encrypt owncloud database" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2839. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2840. echo ' exit 188' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2841. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2842. echo 'shred -zu /root/tempownclouddata/*' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2843. echo 'rm -rf /root/tempownclouddata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2844. echo 'echo "Obtaining Owncloud data backup"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2845. echo -n 'rsyncrypto -v -r /var/lib/owncloud $SERVER_DIRECTORY/backup/owncloud $SERVER_DIRECTORY/backup/owncloud.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2846. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2847. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2848. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2849. echo -n ' echo "Unable to encrypt owncloud installation (/var/lib/owncloud)" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2850. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2851. echo ' exit 632' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2852. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2853. echo -n 'rsyncrypto -v -r /etc/owncloud $SERVER_DIRECTORY/backup/owncloud2 $SERVER_DIRECTORY/backup/owncloud2.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2854. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2855. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2856. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2857. echo -n ' echo "Unable to encrypt owncloud installation (/etc/owncloud)" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2858. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2859. echo ' exit 632' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2860. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2861. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2862. fi
  2863. if grep -Fxq "install_gogs" $COMPLETION_FILE; then
  2864. BACKUP_INCLUDES_DATABASES="yes"
  2865. echo 'if [ ! -d $SERVER_DIRECTORY/backup/gogs ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2866. echo ' mkdir -p $SERVER_DIRECTORY/backup/gogs' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2867. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2868. echo 'if [ ! -d $SERVER_DIRECTORY/backup/gogsdata ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2869. echo ' mkdir -p $SERVER_DIRECTORY/backup/gogsdata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2870. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2871. echo 'if [ ! -d $SERVER_DIRECTORY/backup/gogsrepos ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2872. echo ' mkdir -p $SERVER_DIRECTORY/backup/gogsrepos' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2873. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2874. echo 'if [ ! -d $SERVER_DIRECTORY/backup/gogsssh ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2875. echo ' mkdir -p $SERVER_DIRECTORY/backup/gogsssh' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2876. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2877. echo "if [ ! -d /root/tempgogsdata ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2878. echo " mkdir -p /root/tempgogsdata" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2879. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2880. echo 'mysqldump --password=$DATABASE_PASSWORD gogs > /root/tempgogsdata/gogs.sql' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2881. echo "if [ ! -s /root/tempgogsdata/gogs.sql ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2882. echo ' echo "Gogs database could not be saved"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2883. echo ' if [ ! $DATABASE_PASSWORD ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2884. echo " echo 'No MariaDB password was given'" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2885. echo " fi" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2886. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2887. echo -n ' echo "Unable to export gogs database" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2888. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2889. echo ' exit 6785' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2890. echo "fi" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2891. echo -n 'rsyncrypto -v -r /root/tempgogsdata $SERVER_DIRECTORY/backup/gogsdata $SERVER_DIRECTORY/backup/gogsdata.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2892. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2893. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2894. echo ' shred -zu /root/tempgogsdata/*' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2895. echo ' rm -rf /root/tempgogsdata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2896. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2897. echo -n ' echo "Unable to encrypt gogs database" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2898. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2899. echo ' exit 3776' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2900. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2901. echo 'shred -zu /root/tempgogsdata/*' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2902. echo 'rm -rf /root/tempgogsdata' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2903. echo 'echo "Obtaining Gogs settings backup"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2904. echo -n 'rsyncrypto -v -r /home/git/go/src/github.com/gogits/gogs/custom $SERVER_DIRECTORY/backup/gogs $SERVER_DIRECTORY/backup/gogs.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2905. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2906. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2907. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2908. echo -n ' echo "Unable to encrypt gogs installation (/home/git/go/src/github.com/gogits/gogs/custom)" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2909. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2910. echo ' exit 76547' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2911. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2912. echo 'echo "Obtaining Gogs repos backup"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2913. echo -n 'rsyncrypto -v -r /home/git/gogs-repositories $SERVER_DIRECTORY/backup/gogsrepos $SERVER_DIRECTORY/backup/gogsrepos.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2914. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2915. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2916. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2917. echo -n ' echo "Unable to encrypt gogs repos (/home/git/gogs-repositories)" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2918. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2919. echo ' exit 454637' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2920. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2921. echo 'echo "Obtaining Gogs authorized_keys backup"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2922. echo -n 'rsyncrypto -v -r /home/git/.ssh $SERVER_DIRECTORY/backup/gogsssh $SERVER_DIRECTORY/backup/gogsssh.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2923. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2924. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2925. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2926. echo -n ' echo "Unable to encrypt gogs authorized_keys (/home/git/.ssh)" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2927. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2928. echo ' exit 76864' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2929. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2930. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2931. fi
  2932. if grep -Fxq "install_wiki" $COMPLETION_FILE; then
  2933. echo 'if [ ! -d $SERVER_DIRECTORY/backup/wiki ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2934. echo ' mkdir -p $SERVER_DIRECTORY/backup/wiki' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2935. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2936. echo 'if [ ! -d $SERVER_DIRECTORY/backup/wiki2 ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2937. echo ' mkdir -p $SERVER_DIRECTORY/backup/wiki2' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2938. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2939. echo 'echo "Obtaining wiki data backup"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2940. echo -n 'rsyncrypto -v -r /var/lib/dokuwiki $SERVER_DIRECTORY/backup/wiki $SERVER_DIRECTORY/backup/wiki.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2941. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2942. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2943. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2944. echo -n ' echo "Unable to encrypt wiki installation (/var/lib/dokuwiki)" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2945. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2946. echo ' exit 964' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2947. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2948. echo -n 'rsyncrypto -v -r /etc/dokuwiki $SERVER_DIRECTORY/backup/wiki2 $SERVER_DIRECTORY/backup/wiki2.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2949. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2950. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2951. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2952. echo -n ' echo "Unable to encrypt wiki installation (/etc/dokuwiki)" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2953. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2954. echo ' exit 964' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2955. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2956. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2957. fi
  2958. if grep -Fxq "install_blog" $COMPLETION_FILE; then
  2959. echo 'if [ ! -d $SERVER_DIRECTORY/backup/blog ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2960. echo ' mkdir -p $SERVER_DIRECTORY/backup/blog' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2961. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2962. echo 'echo "Obtaining blog backup"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2963. echo -n "rsyncrypto -v -r /var/www/$FULLBLOG_DOMAIN_NAME/htdocs " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2964. echo -n '$SERVER_DIRECTORY/backup/blog $SERVER_DIRECTORY/backup/blog.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2965. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2966. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2967. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2968. echo -n ' echo "Unable to encrypt blog installation" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2969. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2970. echo ' exit 854' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2971. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2972. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2973. fi
  2974. if grep -Fxq "install_cjdns" $COMPLETION_FILE; then
  2975. echo 'if [ ! -d $SERVER_DIRECTORY/backup/cjdns ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2976. echo ' mkdir -p $SERVER_DIRECTORY/backup/cjdns' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2977. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2978. echo 'echo "Obtaining cjdns backup"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2979. echo -n "rsyncrypto -v -r /etc/cjdns " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2980. echo -n '$SERVER_DIRECTORY/backup/cjdns $SERVER_DIRECTORY/backup/cjdns.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2981. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2982. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2983. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2984. echo -n ' echo "Unable to encrypt cjdns installation" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2985. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2986. echo ' exit 854' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2987. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2988. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2989. fi
  2990. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2991. echo '# Backup certificates' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2992. echo "if [ -d /etc/ssl ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2993. echo ' echo "Backing up certificates"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2994. echo ' if [ ! -d $SERVER_DIRECTORY/backup/ssl ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2995. echo ' mkdir -p $SERVER_DIRECTORY/backup/ssl' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2996. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2997. echo -n ' rsyncrypto -v -r /etc/ssl $SERVER_DIRECTORY/backup/ssl $SERVER_DIRECTORY/backup/ssl.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2998. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  2999. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3000. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3001. echo -n ' echo "Unable to encrypt ssl certificates" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3002. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3003. echo ' exit 343' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3004. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3005. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3006. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3007. echo '# Backup projects' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3008. echo "if [ -d /home/$MY_USERNAME/projects ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3009. echo ' echo "Backing up projects"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3010. echo ' if [ ! -d $SERVER_DIRECTORY/backup/projects ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3011. echo ' mkdir -p $SERVER_DIRECTORY/backup/projects' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3012. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3013. echo -n " rsyncrypto -v -r /home/$MY_USERNAME/projects " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3014. echo -n '$SERVER_DIRECTORY/backup/projects $SERVER_DIRECTORY/backup/projects.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3015. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3016. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3017. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3018. echo -n ' echo "Unable to encrypt git projects" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3019. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3020. echo ' exit 873' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3021. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3022. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3023. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3024. echo '# Backup personal settings' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3025. echo "if [ -d /home/$MY_USERNAME/personal ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3026. echo ' echo "Backing up personal settings"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3027. echo ' if [ ! -d $SERVER_DIRECTORY/backup/personal ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3028. echo ' mkdir -p $SERVER_DIRECTORY/backup/personal' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3029. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3030. echo -n " rsyncrypto -v -r /home/$MY_USERNAME/personal " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3031. echo -n '$SERVER_DIRECTORY/backup/personal $SERVER_DIRECTORY/backup/personal.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3032. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3033. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3034. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3035. echo -n ' echo "Unable to encrypt personal settings" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3036. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3037. echo ' exit 649' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3038. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3039. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3040. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3041. echo '# Backup the public mailing list' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3042. echo "if [ -d $PUBLIC_MAILING_LIST_DIRECTORY ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3043. echo ' echo "Backing up the public mailing list"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3044. echo ' if [ ! -d $SERVER_DIRECTORY/backup/mailinglist ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3045. echo ' mkdir -p $SERVER_DIRECTORY/backup/mailinglist' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3046. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3047. echo -n " rsyncrypto -v -r $PUBLIC_MAILING_LIST_DIRECTORY " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3048. echo -n '$SERVER_DIRECTORY/backup/mailinglist $SERVER_DIRECTORY/backup/mailinglist.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3049. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3050. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3051. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3052. echo -n ' echo "Unable to encrypt public mailing list" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3053. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3054. echo ' exit 938' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3055. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3056. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3057. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3058. echo '# Backup xmpp settings' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3059. echo "if [ -d $XMPP_DIRECTORY ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3060. echo ' echo "Backing up the XMPP settings"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3061. echo ' if [ ! -d $SERVER_DIRECTORY/backup/xmpp ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3062. echo ' mkdir -p $SERVER_DIRECTORY/backup/xmpp' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3063. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3064. echo -n " rsyncrypto -v -r $XMPP_DIRECTORY " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3065. echo -n '$SERVER_DIRECTORY/backup/xmpp $SERVER_DIRECTORY/backup/xmpp.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3066. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3067. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3068. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3069. echo -n ' echo "Unable to encrypt XMPP settings" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3070. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3071. echo ' exit 593' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3072. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3073. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3074. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3075. echo '# Backup gpg keys' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3076. echo "if [ -d /home/$MY_USERNAME/.gnupg ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3077. echo ' echo "Backing up gpg keys"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3078. echo ' if [ ! -d $SERVER_DIRECTORY/backup/gnupg ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3079. echo ' mkdir -p $SERVER_DIRECTORY/backup/gnupg' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3080. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3081. echo -n " rsyncrypto -v -r /home/$MY_USERNAME/.gnupg " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3082. echo -n '$SERVER_DIRECTORY/backup/gnupg $SERVER_DIRECTORY/backup/gnupg.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3083. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3084. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3085. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3086. echo -n ' echo "Unable to encrypt gpg keys" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3087. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3088. echo ' exit 491' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3089. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3090. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3091. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3092. echo '# Backup ssh keys' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3093. echo "if [ -d /home/$MY_USERNAME/.ssh ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3094. echo ' echo "Backing up ssh keys"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3095. echo ' if [ ! -d $SERVER_DIRECTORY/backup/ssh ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3096. echo ' mkdir -p $SERVER_DIRECTORY/backup/ssh' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3097. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3098. echo -n " rsyncrypto -v -r /home/$MY_USERNAME/.ssh " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3099. echo -n '$SERVER_DIRECTORY/backup/ssh $SERVER_DIRECTORY/backup/ssh.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3100. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3101. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3102. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3103. echo -n ' echo "Unable to encrypt ssh keys" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3104. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3105. echo ' exit 731' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3106. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3107. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3108. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3109. echo '# Backup web sites' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3110. echo "if [ -d /etc/nginx ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3111. echo ' echo "Backing up web settings"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3112. echo ' if [ ! -d $SERVER_DIRECTORY/backup/web ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3113. echo ' mkdir -p $SERVER_DIRECTORY/backup/web' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3114. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3115. echo -n ' rsyncrypto -v -r /etc/nginx/sites-available $SERVER_DIRECTORY/backup/web $SERVER_DIRECTORY/backup/web.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3116. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3117. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3118. echo ' exit 848' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3119. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3120. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3121. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3122. echo '# Backup README file' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3123. echo "if [ -f /home/$MY_USERNAME/README ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3124. echo ' echo "Backing up README"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3125. echo ' if [ ! -d $SERVER_DIRECTORY/backup/readme ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3126. echo ' mkdir -p $SERVER_DIRECTORY/backup/readme' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3127. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3128. echo " if [ ! -d /home/$MY_USERNAME/tempbackup ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3129. echo " mkdir -p /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3130. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3131. echo " cp -f /home/$MY_USERNAME/README /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3132. echo -n " rsyncrypto -v -r /home/$MY_USERNAME/tempbackup " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3133. echo -n '$SERVER_DIRECTORY/backup/readme $SERVER_DIRECTORY/backup/readme.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3134. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3135. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3136. echo " rm -rf /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3137. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3138. echo -n ' echo "Unable to encrypt README file" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3139. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3140. echo ' exit 848' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3141. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3142. echo " rm -rf /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3143. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3144. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3145. echo '# Backup Mutt settings' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3146. echo "if [ -f /home/$MY_USERNAME/.muttrc ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3147. echo ' echo "Backing up Mutt settings"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3148. echo " if [ ! -d /home/$MY_USERNAME/tempbackup ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3149. echo " mkdir -p /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3150. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3151. echo " cp /home/$MY_USERNAME/.muttrc /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3152. echo ' if [ -f /etc/Muttrc ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3153. echo " cp /etc/Muttrc /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3154. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3155. echo ' if [ ! -d $SERVER_DIRECTORY/backup/mutt ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3156. echo ' mkdir -p $SERVER_DIRECTORY/backup/mutt' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3157. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3158. echo -n " rsyncrypto -v -r /home/$MY_USERNAME/tempbackup " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3159. echo -n '$SERVER_DIRECTORY/backup/mutt $SERVER_DIRECTORY/backup/mutt.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3160. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3161. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3162. echo ' rm -rf /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3163. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3164. echo -n ' echo "Unable to encrypt Mutt settings" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3165. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3166. echo ' exit 492' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3167. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3168. echo ' rm -rf /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3169. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3170. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3171. echo '# Backup procmail settings' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3172. echo "if [ -f /home/$MY_USERNAME/.procmailrc ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3173. echo ' echo "Backing up procmail settings"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3174. echo " if [ ! -d /home/$MY_USERNAME/tempbackup ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3175. echo " mkdir -p /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3176. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3177. echo " cp /home/$MY_USERNAME/.procmailrc /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3178. echo ' if [ ! -d $SERVER_DIRECTORY/backup/procmail ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3179. echo ' mkdir -p $SERVER_DIRECTORY/backup/procmail' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3180. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3181. echo -n " rsyncrypto -v -r /home/$MY_USERNAME/tempbackup " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3182. echo -n '$SERVER_DIRECTORY/backup/procmail $SERVER_DIRECTORY/backup/procmail.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3183. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3184. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3185. echo ' rm -rf /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3186. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3187. echo -n ' echo "Unable to encrypt procmail settings" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3188. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3189. echo ' exit 492' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3190. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3191. echo ' rm -rf /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3192. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3193. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3194. echo '# Backup email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3195. echo "if [ -d /home/$MY_USERNAME/Maildir ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3196. echo ' echo "Creating an email archive"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3197. echo ' if [ ! -d /root/backupemail ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3198. echo " mkdir -p /root/backupemail" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3199. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3200. echo " tar -czvf /root/backupemail/maildir.tar.gz /home/$MY_USERNAME/Maildir" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3201. echo ' echo "Backing up emails"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3202. echo ' if [ ! -d $SERVER_DIRECTORY/backup/mail ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3203. echo ' mkdir -p $SERVER_DIRECTORY/backup/mail' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3204. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3205. echo -n ' rsyncrypto -v -r /root/backupemail ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3206. echo -n '$SERVER_DIRECTORY/backup/mail $SERVER_DIRECTORY/backup/mail.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3207. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3208. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3209. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3210. echo -n ' echo "Unable to encrypt emails" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3211. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3212. echo ' exit 396' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3213. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3214. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3215. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3216. echo '# Backup DLNA cache' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3217. echo "if [ -d /var/cache/minidlna ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3218. echo ' echo "Backing up DLNA cache"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3219. echo ' if [ ! -d $SERVER_DIRECTORY/backup/dlna ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3220. echo ' mkdir -p $SERVER_DIRECTORY/backup/dlna' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3221. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3222. echo -n ' rsyncrypto -v -r /var/cache/minidlna $SERVER_DIRECTORY/backup/dlna $SERVER_DIRECTORY/backup/dlna.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3223. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3224. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3225. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3226. echo -n ' echo "Unable to encrypt DLNA settings" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3227. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3228. echo ' exit 498' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3229. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3230. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3231. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3232. echo '# Backup VoIP settings' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3233. echo "if [ -f /etc/$VOIP_CONFIG_FILE ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3234. echo ' echo "Backing up VoIP settings"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3235. echo " if [ ! -d /home/$MY_USERNAME/tempbackup ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3236. echo " mkdir -p /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3237. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3238. echo " cp -f /etc/$VOIP_CONFIG_FILE /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3239. echo " cp -f /var/lib/mumble-server/$VOIP_DATABASE /home/$MY_USERNAME/tempbackup" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3240. echo ' if [ ! -d $SERVER_DIRECTORY/backup/voip ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3241. echo ' mkdir -p $SERVER_DIRECTORY/backup/voip' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3242. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3243. echo -n " rsyncrypto -v -r /home/$MY_USERNAME/tempbackup " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3244. echo -n '$SERVER_DIRECTORY/backup/voip $SERVER_DIRECTORY/backup/voip.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3245. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3246. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3247. echo ' rm -rf /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3248. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3249. echo -n ' echo "Unable to encrypt VoIP settings" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3250. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3251. echo ' exit 4923' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3252. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3253. echo ' rm -rf /home/$MY_USERNAME/tempbackup' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3254. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3255. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3256. if [[ $BACKUP_INCLUDES_DATABASES == "yes" ]]; then
  3257. echo '# Mysql settings' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3258. echo 'if [ ! -d $SERVER_DIRECTORY/backup/mariadb ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3259. echo ' mkdir -p $SERVER_DIRECTORY/backup/mariadb' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3260. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3261. echo 'if [ ! -d /root/tempmariadb ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3262. echo ' mkdir /root/tempmariadb' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3263. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3264. echo 'mysqldump --password=$DATABASE_PASSWORD mysql user > /root/tempmariadb/mysql.sql' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3265. echo "if [ ! -s /root/tempmariadb/mysql.sql ]; then" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3266. echo ' echo "Unable to backup mysql settings"' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3267. echo ' rm -rf /root/tempmariadb' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3268. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3269. echo -n ' echo "Unable to export database settings" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3270. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3271. echo ' exit 653' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3272. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3273. echo 'echo "$DATABASE_PASSWORD" > /root/tempmariadb/db' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3274. echo 'chmod 400 /root/tempmariadb/db' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3275. echo -n 'rsyncrypto -v -r /root/tempmariadb $SERVER_DIRECTORY/backup/mariadb $SERVER_DIRECTORY/backup/mariadb.keys ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3276. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3277. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3278. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3279. echo -n ' echo "Unable to encrypt database settings" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3280. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3281. echo ' exit 794' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3282. echo 'fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3283. echo 'rm -rf /root/tempmariadb' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3284. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3285. fi
  3286. # Now that we have the server directory updated with the encrypted backup
  3287. # we just need to rsync it to each friend
  3288. echo '# For each remote server' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3289. echo 'while read remote_server' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3290. echo 'do' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3291. echo ' # Get the server and its password' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3292. echo ' # Format is:' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3293. echo ' # username@domain:/home/username <port number> <ssh password>' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3294. echo -n ' REMOTE_SERVER=$(echo "${remote_server}" | ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3295. echo -n "awk -F ' ' '{print " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3296. echo -n '$1' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3297. echo "}')" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3298. echo ' if [ $REMOTE_SERVER ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3299. echo -n ' REMOTE_SSH_PORT=$(echo "${remote_server}" | ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3300. echo -n "awk -F ' ' '{print " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3301. echo -n '$2' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3302. echo "}')" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3303. echo -n ' REMOTE_PASSWORD=$(echo "${remote_server}" | ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3304. echo -n "awk -F ' ' '{print " >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3305. echo -n '$3' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3306. echo "}')" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3307. echo ' NOW=$(date +"%Y-%m-%d %H:%M:%S")' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3308. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3309. echo -n ' echo "$NOW Starting backup to $REMOTE_SERVER" >> ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3310. echo "$REMOTE_BACKUPS_LOG" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3311. echo -n ' rsync -ratlzv --rsh="/usr/bin/sshpass -p $REMOTE_PASSWORD ssh -p $REMOTE_SSH_PORT -o StrictHostKeyChecking=no" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3312. echo '$SERVER_DIRECTORY/backup $REMOTE_SERVER' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3313. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3314. echo -n ' echo "$NOW Backup to $REMOTE_SERVER failed" >> ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3315. echo "$REMOTE_BACKUPS_LOG" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3316. echo ' # Send a warning email' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3317. echo -n ' echo "Backup to $REMOTE_SERVER failed" | mail -s "Freedombone backup to friends" ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3318. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3319. echo ' else' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3320. echo -n ' echo "$NOW Backed up to $REMOTE_SERVER" >> ' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3321. echo "$REMOTE_BACKUPS_LOG" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3322. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3323. echo ' fi' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3324. # End of the loop
  3325. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3326. echo "done < $FRIENDS_SERVERS_LIST" >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3327. echo '' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3328. echo 'exit 0' >> /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3329. chown root:root /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3330. chmod 400 /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3331. chmod +x /usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME
  3332. # update crontab
  3333. echo '#!/bin/bash' > /etc/cron.daily/backuptofriends
  3334. echo "/usr/bin/$BACKUP_TO_FRIENDS_SCRIPT_NAME" >> /etc/cron.daily/backuptofriends
  3335. chmod +x /etc/cron.daily/backuptofriends
  3336. echo 'backup_to_friends_servers' >> $COMPLETION_FILE
  3337. }
  3338. function restore_from_friend {
  3339. if grep -Fxq "restore_from_friend" $COMPLETION_FILE; then
  3340. return
  3341. fi
  3342. apt-get -y install rsyncrypto sshpass
  3343. get_mariadb_password
  3344. get_mariadb_gnusocial_admin_password
  3345. get_mariadb_redmatrix_admin_password
  3346. get_mariadb_owncloud_admin_password
  3347. get_mariadb_git_admin_password
  3348. if ! grep -q "restore from a friend's server" /home/$MY_USERNAME/README; then
  3349. echo '' >> /home/$MY_USERNAME/README
  3350. echo '' >> /home/$MY_USERNAME/README
  3351. echo 'Restoring from backups to friends servers' >> /home/$MY_USERNAME/README
  3352. echo '=========================================' >> /home/$MY_USERNAME/README
  3353. echo "To restore from a friend's server use the command:" >> /home/$MY_USERNAME/README
  3354. echo '' >> /home/$MY_USERNAME/README
  3355. echo " $RESTORE_FROM_FRIEND_SCRIPT_NAME [server]" >> /home/$MY_USERNAME/README
  3356. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  3357. fi
  3358. echo '#!/bin/bash' > /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3359. echo 'SERVER_NAME=$1' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3360. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3361. echo '# Temporary location for data to be backed up to other servers' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3362. echo 'SERVER_DIRECTORY=/root/remoterestore' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3363. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3364. echo 'if [ ! $SERVER_NAME ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3365. echo " echo '$RESTORE_FROM_FRIEND_SCRIPT_NAME [server]'" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3366. echo ' exit 1' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3367. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3368. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3369. echo "if [ ! -f $FRIENDS_SERVERS_LIST ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3370. echo " echo 'No friends list found at $FRIENDS_SERVERS_LIST'" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3371. echo ' exit 2' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3372. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3373. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3374. echo -n 'if ! grep -q "$SERVER_NAME" ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3375. echo "$FRIENDS_SERVERS_LIST; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3376. echo ' echo "Server not found within the friends list"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3377. echo ' exit 3' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3378. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3379. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3380. echo -n 'REMOTE_SERVER=$(grep -i "$SERVER_NAME" ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3381. echo -n "$FRIENDS_SERVERS_LIST | awk -F ' ' '{print " >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3382. echo -n '$1' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3383. echo "}')" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3384. echo -n 'REMOTE_SSH_PORT=$(grep -i "$SERVER_NAME" ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3385. echo -n "$FRIENDS_SERVERS_LIST | awk -F ' ' '{print " >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3386. echo -n '$2' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3387. echo "}')" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3388. echo -n 'REMOTE_PASSWORD=$(grep -i "$SERVER_NAME" ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3389. echo -n "$FRIENDS_SERVERS_LIST | awk -F ' ' '{print " >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3390. echo -n '$3' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3391. echo "}')" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3392. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3393. echo '# Check that a backup key exists' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3394. echo "if [ ! -f $BACKUP_CERTIFICATE ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3395. echo " echo 'No backup key was found in $BACKUP_CERTIFICATE'" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3396. echo ' exit 84' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3397. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3398. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3399. # Rsync from the remote server back to this server
  3400. echo 'NOW=$(date +"%Y-%m-%d %H:%M:%S")' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3401. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3402. echo -n 'echo "$NOW Starting restore from $REMOTE_SERVER" >> ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3403. echo "$REMOTE_BACKUPS_LOG" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3404. echo -n 'rsync -ratlzv --rsh="/usr/bin/sshpass -p $REMOTE_PASSWORD ssh -p $REMOTE_SSH_PORT -o StrictHostKeyChecking=no" ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3405. echo '$REMOTE_SERVER/backup $SERVER_DIRECTORY' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3406. echo 'if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3407. echo -n ' echo "$NOW Restore from $REMOTE_SERVER failed" >> ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3408. echo "$REMOTE_BACKUPS_LOG" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3409. echo ' # Send a warning email' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3410. echo -n ' echo "Restore from $REMOTE_SERVER failed" | mail -s "Freedombone restore from friend" ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3411. echo "$MY_EMAIL_ADDRESS" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3412. echo ' exit 790' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3413. echo 'else' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3414. echo -n ' echo "$NOW Restored encrypted data from $REMOTE_SERVER" >> ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3415. echo "$REMOTE_BACKUPS_LOG" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3416. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3417. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3418. echo '# MariaDB password' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3419. echo -n 'DATABASE_PASSWORD=$(cat ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3420. echo "$DATABASE_PASSWORD_FILE)" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3421. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3422. echo 'if [ -d $SERVER_DIRECTORY/backup/mariadb ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3423. echo ' echo "Restoring mysql settings"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3424. echo ' if [ ! -d /root/tempmariadb ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3425. echo ' mkdir /root/tempmariadb' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3426. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3427. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/mariadb /root/tempmariadb $SERVER_DIRECTORY/backup/mariadb.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3428. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3429. echo ' echo "Get the MariaDB password from the backup"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3430. echo ' if [ ! -f /root/tempmariadb/remoterestore/backup/mariadb/tempmariadb/db ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3431. echo ' echo "MariaDB password file not found"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3432. echo ' exit 495' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3433. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3434. echo ' BACKUP_MARIADB_PASSWORD=$(cat /root/tempmariadb/remoterestore/backup/mariadb/tempmariadb/db)' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3435. echo ' if [[ $BACKUP_MARIADB_PASSWORD != $DATABASE_PASSWORD ]]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3436. echo ' echo "Restore the MariaDB user table"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3437. echo ' mysqlsuccess=$(mysql -u root --password=$DATABASE_PASSWORD mysql -o < /root/tempmariadb/remoterestore/backup/mariadb/tempmariadb/mysql.sql)' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3438. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3439. echo ' echo "Try again using the password obtained from backup"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3440. echo ' mysqlsuccess=$(mysql -u root --password=$BACKUP_MARIADB_PASSWORD mysql -o < /root/tempmariadb/remoterestore/backup/mariadb/tempmariadb/mysql.sql)' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3441. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3442. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3443. echo ' echo "$mysqlsuccess"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3444. echo ' exit 962' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3445. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3446. echo ' echo "Restarting database"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3447. echo ' service mysql restart' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3448. echo ' echo "Change the MariaDB password to the backup version"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3449. echo ' DATABASE_PASSWORD=$BACKUP_MARIADB_PASSWORD' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3450. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3451. echo ' shred -zu /root/tempmariadb/remoterestore/backup/mariadb/tempmariadb/db' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3452. echo ' rm -rf /root/tempmariadb' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3453. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3454. echo ' # Change database password file' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3455. echo -n ' echo "$DATABASE_PASSWORD" > ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3456. echo "$DATABASE_PASSWORD_FILE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3457. echo " chmod 600 $DATABASE_PASSWORD_FILE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3458. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3459. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3460. echo 'if [ -d $SERVER_DIRECTORY/backup/mutt ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3461. echo ' echo "Restoring Mutt settings"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3462. echo ' mkdir /root/tempmutt' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3463. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/mutt /root/tempmutt $SERVER_DIRECTORY/backup/mutt.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3464. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3465. echo " if [ -f /root/tempmutt/remoterestore/backup/mutt/$MY_USERNAME/tempbackup/.muttrc ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3466. echo " cp -f /root/tempmutt/remoterestore/backup/mutt/$MY_USERNAME/tempbackup/.muttrc /home/$MY_USERNAME/.muttrc" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3467. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3468. echo " if [ -f /root/tempmutt/remoterestore/backup/mutt/$MY_USERNAME/tempbackup/Muttrc ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3469. echo " cp -f /root/tempmutt/remoterestore/backup/mutt/$MY_USERNAME/tempbackup/Muttrc /etc/Muttrc" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3470. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3471. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3472. echo ' rm -rf /root/tempmutt' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3473. echo ' exit 276' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3474. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3475. echo ' rm -rf /root/tempmutt' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3476. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3477. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3478. echo 'if [ -d $SERVER_DIRECTORY/backup/gnupg ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3479. echo ' echo "Restoring gnupg settings"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3480. echo ' mkdir /root/tempgnupg' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3481. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/gnupg /root/tempgnupg $SERVER_DIRECTORY/backup/gnupg.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3482. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3483. echo " cp -r /root/tempgnupg/remoterestore/backup/gnupg/$MY_USERNAME/.gnupg /home/$MY_USERNAME/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3484. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3485. echo ' rm -rf /root/tempgnupg' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3486. echo ' exit 276' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3487. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3488. echo ' rm -rf /root/tempgnupg' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3489. echo " cp -r /home/$MY_USERNAME/.gnupg /root" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3490. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3491. echo ' exit 283' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3492. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3493. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3494. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3495. echo 'if [ -d $SERVER_DIRECTORY/backup/procmail ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3496. echo ' echo "Restoring procmail settings"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3497. echo ' mkdir /root/tempprocmail' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3498. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/procmail /root/tempprocmail $SERVER_DIRECTORY/backup/procmail.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3499. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3500. echo " cp -f /root/tempprocmail/remoterestore/backup/procmail/$MY_USERNAME/tempbackup/.procmailrc /home/$MY_USERNAME/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3501. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3502. echo ' rm -rf /root/tempprocmail' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3503. echo ' exit 276' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3504. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3505. echo ' rm -rf /root/tempprocmail' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3506. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3507. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3508. echo 'if [ -d $SERVER_DIRECTORY/backup/readme ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3509. echo ' echo "Restoring README"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3510. echo ' mkdir /root/tempreadme' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3511. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/readme /root/tempreadme $SERVER_DIRECTORY/backup/readme.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3512. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3513. echo " cp -f /root/tempreadme/remoterestore/backup/readme/$MY_USERNAME/tempbackup/README /home/$MY_USERNAME/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3514. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3515. echo ' rm -rf /root/tempreadme' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3516. echo ' exit 276' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3517. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3518. echo ' rm -rf /root/tempreadme' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3519. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3520. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3521. echo 'if [ -d $SERVER_DIRECTORY/backup/ssh ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3522. echo ' echo "Restoring ssh keys"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3523. echo ' mkdir /root/tempssh' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3524. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/ssh /root/tempssh $SERVER_DIRECTORY/backup/ssh.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3525. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3526. echo " cp -r /root/tempssh/remoterestore/backup/ssh/$MY_USERNAME/.ssh /home/$MY_USERNAME/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3527. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3528. echo ' rm -rf /root/tempssh' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3529. echo ' exit 664' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3530. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3531. echo ' rm -rf /root/tempssh' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3532. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3533. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3534. echo 'if [ -d $SERVER_DIRECTORY/backup/ssl ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3535. echo ' echo "Restoring certificates"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3536. echo ' mkdir /root/tempssl' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3537. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/ssl /root/tempssl $SERVER_DIRECTORY/backup/ssl.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3538. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3539. echo ' cp -r /root/tempssl/remoterestore/backup/ssl/ssl/* /etc/ssl' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3540. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3541. echo ' exit 276' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3542. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3543. echo ' rm -rf /root/tempssl' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3544. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3545. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3546. echo 'if [ -d $SERVER_DIRECTORY/backup/projects ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3547. echo ' echo "Restoring projects"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3548. echo ' mkdir /root/tempprojects' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3549. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/projects /root/tempprojects $SERVER_DIRECTORY/backup/projects.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3550. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3551. echo " if [ -d /home/$MY_USERNAME/projects ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3552. echo " rm -rf /home/$MY_USERNAME/projects" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3553. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3554. echo " mv /root/tempprojects/remoterestore/backup/projects/$MY_USERNAME/projects /home/$MY_USERNAME" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3555. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3556. echo ' exit 166' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3557. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3558. echo ' rm -rf /root/tempprojects' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3559. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3560. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3561. echo 'if [ -d $SERVER_DIRECTORY/backup/personal ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3562. echo ' echo "Restoring personal settings"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3563. echo ' mkdir /root/temppersonal' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3564. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/personal /root/temppersonal $SERVER_DIRECTORY/backup/personal.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3565. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3566. echo " if [ -d /home/$MY_USERNAME/personal ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3567. echo " rm -rf /home/$MY_USERNAME/personal" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3568. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3569. echo " mv /root/temppersonal/remoterestore/backup/personal/$MY_USERNAME/personal /home/$MY_USERNAME" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3570. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3571. echo ' exit 184' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3572. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3573. echo ' rm -rf /root/temppersonal' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3574. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3575. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3576. echo "if [ -d $PUBLIC_MAILING_LIST_DIRECTORY ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3577. echo ' echo "Restoring public mailing list"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3578. echo ' mkdir /root/tempmailinglist' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3579. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/mailinglist /root/tempmailinglist $SERVER_DIRECTORY/backup/mailinglist.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3580. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3581. echo " cp -r /root/tempmailinglist/remoterestore/backup/mailinglist/spool/mlmmj/* $PUBLIC_MAILING_LIST_DIRECTORY" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3582. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3583. echo ' exit 526' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3584. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3585. echo ' rm -rf /root/tempmailinglist' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3586. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3587. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3588. echo "if [ -d $XMPP_DIRECTORY ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3589. echo ' echo "Restoring XMPP settings"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3590. echo ' mkdir /root/tempxmpp' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3591. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/xmpp /root/tempxmpp $SERVER_DIRECTORY/backup/xmpp.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3592. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3593. echo " cp -r /root/tempxmpp/remoterestore/backup/xmpp/lib/prosody/* $XMPP_DIRECTORY" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3594. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3595. echo ' exit 725' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3596. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3597. echo ' rm -rf /root/tempxmpp' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3598. echo ' service prosody restart' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3599. echo ' chown -R prosody:prosody /var/lib/prosody/*' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3600. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3601. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3602. BACKUP_INCLUDES_WEBSITES="no"
  3603. if grep -Fxq "install_gnu_social" $COMPLETION_FILE; then
  3604. BACKUP_INCLUDES_WEBSITES="yes"
  3605. echo 'if [ -d $SERVER_DIRECTORY/backup/gnusocial ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3606. echo ' echo "Restoring microblog database"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3607. echo ' if [ ! -d /root/tempgnusocialdata ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3608. echo ' mkdir /root/tempgnusocialdata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3609. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3610. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/gnusocialdata /root/tempgnusocialdata $SERVER_DIRECTORY/backup/gnusocialdata.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3611. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3612. echo ' if [ ! -f /root/tempgnusocialdata/remoterestore/backup/gnusocialdata/tempgnusocialdata/gnusocial.sql ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3613. echo ' echo "Unable to restore microblog database"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3614. echo ' rm -rf /root/tempgnusocialdata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3615. echo ' exit 503' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3616. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3617. echo ' mysqlsuccess=$(mysql -u root --password=$DATABASE_PASSWORD gnusocial -o < /root/tempgnusocialdata/remoterestore/backup/gnusocialdata/tempgnusocialdata/gnusocial.sql)' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3618. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3619. echo ' echo "$mysqlsuccess"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3620. echo ' exit 964' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3621. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3622. echo ' shred -zu /root/tempgnusocialdata/remoterestore/backup/gnusocialdata/tempgnusocialdata/*' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3623. echo ' rm -rf /root/tempgnusocialdata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3624. echo ' echo "Restoring microblog installation"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3625. echo ' if [ ! -d /root/tempgnusocial ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3626. echo ' mkdir /root/tempgnusocial' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3627. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3628. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/gnusocial /root/tempgnusocial $SERVER_DIRECTORY/backup/gnusocial.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3629. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3630. echo " rm -rf /var/www/$MICROBLOG_DOMAIN_NAME/htdocs" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3631. echo " mv /root/tempgnusocial/remoterestore/backup/gnusocial/www/$MICROBLOG_DOMAIN_NAME/htdocs /var/www/$MICROBLOG_DOMAIN_NAME/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3632. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3633. echo ' exit 683' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3634. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3635. echo ' rm -rf /root/tempgnusocial' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3636. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3637. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3638. fi
  3639. if grep -Fxq "install_redmatrix" $COMPLETION_FILE; then
  3640. BACKUP_INCLUDES_WEBSITES="yes"
  3641. echo 'if [ -d $SERVER_DIRECTORY/backup/redmatrix ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3642. echo ' echo "Restoring Red Matrix database"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3643. echo ' if [ ! -d /root/tempredmatrixdata ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3644. echo ' mkdir /root/tempredmatrixdata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3645. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3646. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/redmatrixdata /root/tempredmatrixdata $SERVER_DIRECTORY/backup/redmatrixdata.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3647. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3648. echo ' if [ ! -f /root/tempredmatrixdata/remoterestore/backup/redmatrixdata/tempredmatrixdata/redmatrix.sql ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3649. echo ' echo "Unable to restore Red Matrix database"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3650. echo ' rm -rf /root/tempredmatrixdata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3651. echo ' exit 504' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3652. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3653. echo ' mysqlsuccess=$(mysql -u root --password=$DATABASE_PASSWORD redmatrix -o < /root/tempredmatrixdata/remoterestore/backup/redmatrixdata/tempredmatrixdata/redmatrix.sql)' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3654. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3655. echo ' echo "$mysqlsuccess"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3656. echo ' exit 965' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3657. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3658. echo ' shred -zu /root/tempredmatrixdata/remoterestore/backup/redmatrixdata/tempredmatrixdata/*' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3659. echo ' rm -rf /root/tempredmatrixdata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3660. echo ' echo "Restoring Red Matrix installation"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3661. echo ' if [ ! -d /root/tempredmatrix ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3662. echo ' mkdir /root/tempredmatrix' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3663. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3664. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/redmatrix /root/tempredmatrix $SERVER_DIRECTORY/backup/redmatrix.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3665. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3666. echo " rm -rf /var/www/$REDMATRIX_DOMAIN_NAME/htdocs" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3667. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3668. echo " cp -r /root/tempredmatrix/remoterestore/backup/redmatrix/www/$REDMATRIX_DOMAIN_NAME/htdocs/* /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3669. echo ' else' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3670. echo " mv /root/tempredmatrix/remoterestore/backup/redmatrix/www/$REDMATRIX_DOMAIN_NAME/htdocs /var/www/$REDMATRIX_DOMAIN_NAME/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3671. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3672. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3673. echo ' exit 759' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3674. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3675. echo ' rm -rf /root/tempredmatrix' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3676. echo " chmod 777 /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/store/[data]/smarty3" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3677. echo " chown -R www-data:www-data /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/*" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3678. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3679. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3680. fi
  3681. if grep -Fxq "install_owncloud" $COMPLETION_FILE; then
  3682. BACKUP_INCLUDES_WEBSITES="yes"
  3683. echo 'if [ -d $SERVER_DIRECTORY/backup/owncloud ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3684. echo ' echo "Restoring owncloud database"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3685. echo ' if [ ! -d /root/tempownclouddata ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3686. echo ' mkdir /root/tempownclouddata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3687. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3688. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/ownclouddata /root/tempownclouddata $SERVER_DIRECTORY/backup/ownclouddata.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3689. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3690. echo ' if [ ! -f /root/tempownclouddata/remoterestore/backup/ownclouddata/tempownclouddata/owncloud.sql ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3691. echo ' echo "Unable to restore Owncloud database"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3692. echo ' rm -rf /root/tempownclouddata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3693. echo ' exit 505' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3694. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3695. echo ' mysqlsuccess=$(mysql -u root --password=$DATABASE_PASSWORD owncloud -o < /root/tempownclouddata/remoterestore/backup/ownclouddata/tempownclouddata/owncloud.sql)' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3696. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3697. echo ' echo "$mysqlsuccess"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3698. echo ' exit 965' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3699. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3700. echo ' echo "Restoring Owncloud installation"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3701. echo ' if [ ! -d /root/tempowncloud ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3702. echo ' mkdir /root/tempowncloud' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3703. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3704. echo ' if [ ! -d /root/tempowncloud2 ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3705. echo ' mkdir /root/tempowncloud2' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3706. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3707. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/owncloud /root/tempowncloud $SERVER_DIRECTORY/backup/owncloud.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3708. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3709. echo " cp -r /root/tempowncloud/remoterestore/backup/owncloud/lib/owncloud/* /var/lib/owncloud/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3710. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3711. echo ' exit 981' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3712. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3713. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/owncloud2 /root/tempowncloud2 $SERVER_DIRECTORY/backup/owncloud2.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3714. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3715. echo " cp -r /root/tempowncloud2/remoterestore/backup/owncloud2/owncloud/* /etc/owncloud/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3716. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3717. echo ' exit 982' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3718. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3719. echo ' rm -rf /root/tempowncloud' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3720. echo ' rm -rf /root/tempowncloud2' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3721. echo ' rm -rf /root/tempownclouddata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3722. echo ' chown -R www-data:www-data /var/lib/owncloud/data' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3723. echo ' chown -R www-data:www-data /var/lib/owncloud/backup' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3724. echo ' chown -R www-data:www-data /var/lib/owncloud/assets' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3725. echo " occ files:scan $MY_USERNAME" >> /usr/bin/$RESTORE_SCRIPT_NAME
  3726. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3727. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3728. fi
  3729. if grep -Fxq "install_gogs" $COMPLETION_FILE; then
  3730. BACKUP_INCLUDES_WEBSITES="yes"
  3731. echo 'if [ -d $SERVER_DIRECTORY/backup/gogs ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3732. echo ' echo "Restoring gogs database"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3733. echo ' if [ ! -d /root/tempgogsdata ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3734. echo ' mkdir /root/tempgogsdata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3735. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3736. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/gogsdata /root/tempgogsdata $SERVER_DIRECTORY/backup/gogsdata.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3737. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3738. echo ' if [ ! -f /root/tempgogsdata/remoterestore/backup/gogsdata/tempgogsdata/gogs.sql ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3739. echo ' echo "Unable to restore Gogs database"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3740. echo ' rm -rf /root/tempgogsdata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3741. echo ' exit 8548' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3742. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3743. echo ' mysqlsuccess=$(mysql -u root --password=$DATABASE_PASSWORD gogs -o < /root/tempgogsdata/remoterestore/backup/gogsdata/tempgogsdata/gogs.sql)' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3744. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3745. echo ' echo "$mysqlsuccess"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3746. echo ' exit 3695' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3747. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3748. echo ' echo "Restoring Gogs settings"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3749. echo ' if [ ! -d /root/tempgogs ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3750. echo ' mkdir /root/tempgogs' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3751. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3752. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/gogs /root/tempgogs $SERVER_DIRECTORY/backup/gogs.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3753. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3754. echo ' if [ ! -d /home/git/go/src/github.com/gogits/gogs/custom ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3755. echo ' mkdir -p /home/git/go/src/github.com/gogits/gogs/custom' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3756. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3757. echo " cp -r /root/tempgogs/remoterestore/backup/gogs/git/go/src/github.com/gogits/gogs/custom/* /home/git/go/src/github.com/gogits/gogs/custom/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3758. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3759. echo ' exit 5885' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3760. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3761. echo ' echo "Restoring Gogs repos"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3762. echo ' if [ ! -d /root/tempgogsrepos ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3763. echo ' mkdir /root/tempgogsrepos' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3764. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3765. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/gogsrepos /root/tempgogsrepos $SERVER_DIRECTORY/backup/gogsrepos.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3766. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3767. echo " cp -r /root/tempgogsrepos/remoterestore/backup/gogsrepos/git/gogs-repositories/* /home/git/gogs-repositories/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3768. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3769. echo ' exit 7649' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3770. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3771. echo ' echo "Restoring Gogs authorized_keys"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3772. echo ' if [ ! -d /root/tempgogsssh ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3773. echo ' mkdir /root/tempgogsssh' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3774. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3775. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/gogsssh /root/tempgogsssh $SERVER_DIRECTORY/backup/gogsssh.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3776. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3777. echo ' if [ ! -d /home/git/.ssh ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3778. echo ' mkdir /home/git/.ssh' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3779. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3780. echo " cp -r /root/tempgogsssh/remoterestore/backup/gogsssh/git/.ssh/* /home/git/.ssh/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3781. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3782. echo ' exit 74239' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3783. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3784. echo ' rm -rf /root/tempgogs' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3785. echo ' rm -rf /root/tempgogsdata' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3786. echo ' rm -rf /root/tempgogsrepos' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3787. echo ' rm -rf /root/tempgogsssh' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3788. echo ' chown -R git:git /home/git' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3789. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3790. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3791. fi
  3792. echo 'if [ -d $SERVER_DIRECTORY/backup/wiki ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3793. echo ' echo "Restoring Wiki installation"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3794. echo ' mkdir /root/tempwiki' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3795. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/wiki /root/tempwiki $SERVER_DIRECTORY/backup/wiki.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3796. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3797. echo " cp -r /root/tempwiki/remoterestore/backup/wiki/lib/dokuwiki/* /var/lib/dokuwiki/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3798. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3799. echo ' exit 868' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3800. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3801. echo ' mkdir /root/tempwiki2' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3802. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/wiki2 /root/tempwiki2 $SERVER_DIRECTORY/backup/wiki2.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3803. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3804. echo " cp -r /root/tempwiki2/remoterestore/backup/wiki2/dokuwiki/* /etc/dokuwiki/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3805. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3806. echo ' exit 869' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3807. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3808. echo ' rm -rf /root/tempwiki' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3809. echo ' rm -rf /root/tempwiki2' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3810. echo ' chown -R www-data:www-data /var/lib/dokuwiki/*' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3811. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3812. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3813. echo 'if [ -d $SERVER_DIRECTORY/backup/blog ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3814. echo ' echo "Restoring blog installation"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3815. echo ' mkdir /root/tempblog' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3816. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/blog /root/tempblog $SERVER_DIRECTORY/backup/blog.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3817. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3818. echo " rm -rf /var/www/$FULLBLOG_DOMAIN_NAME/htdocs" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3819. echo " cp -r /root/tempblog/remoterestore/backup/blog/www/$FULLBLOG_DOMAIN_NAME/htdocs /var/www/$FULLBLOG_DOMAIN_NAME/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3820. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3821. echo ' exit 593' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3822. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3823. echo ' rm -rf /root/tempblog' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3824. echo " if [ ! -d /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/content ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3825. echo ' echo "No content directory found after restoring blog"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3826. echo ' exit 287' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3827. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3828. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3829. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3830. echo 'if [ -d $SERVER_DIRECTORY/backup/cjdns ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3831. echo ' echo "Restoring cjdns installation"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3832. echo ' mkdir /root/tempcjdns' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3833. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/cjdns /root/tempcjdns $SERVER_DIRECTORY/backup/cjdns.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3834. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3835. echo " rm -rf /etc/cjdns" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3836. echo " cp -r /root/tempcjdns/remoterestore/backup/cjdns/cjdns /etc/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3837. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3838. echo ' exit 7438' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3839. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3840. echo ' rm -rf /root/tempcjdns' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3841. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3842. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3843. echo 'if [ -d $SERVER_DIRECTORY/backup/voip ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3844. echo ' echo "Restoring VoIP settings"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3845. echo ' mkdir /root/tempvoip' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3846. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/voip /root/tempvoip $SERVER_DIRECTORY/backup/voip.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3847. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3848. echo " cp -f /root/tempvoip/remoterestore/backup/voip/$MY_USERNAME/tempbackup/$VOIP_CONFIG_FILE /etc/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3849. echo " cp -f /root/tempvoip/remoterestore/backup/voip/$MY_USERNAME/tempbackup/$VOIP_DATABASE /var/lib/mumble-server/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3850. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3851. echo ' rm -rf /root/tempvoip' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3852. echo ' exit 276' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3853. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3854. echo ' rm -rf /root/tempvoip' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3855. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3856. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3857. echo 'if [ -d $SERVER_DIRECTORY/backup/mail ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3858. echo ' echo "Restoring emails"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3859. echo ' mkdir /root/tempmail' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3860. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/mail /root/tempmail $SERVER_DIRECTORY/backup/mail.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3861. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3862. echo " if [ ! -d /home/$MY_USERNAME/Maildir ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3863. echo " mkdir /home/$MY_USERNAME/Maildir" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3864. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3865. echo ' tar -xzvf /root/tempmail/usb/backup/mail/backupemail/maildir.tar.gz' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3866. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3867. echo ' exit 927' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3868. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3869. echo ' rm -rf /root/tempmail' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3870. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3871. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3872. echo "if [ -d /var/cache/minidlna ]; then" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3873. echo ' if [ -d $SERVER_DIRECTORY/backup/dlna ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3874. echo ' echo "Restoring DLNA cache"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3875. echo ' mkdir /root/tempdlna' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3876. echo -n ' rsyncrypto -v -d -r $SERVER_DIRECTORY/backup/dlna /root/tempdlna $SERVER_DIRECTORY/backup/dlna.keys ' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3877. echo "$BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3878. echo " cp -r /root/tempdlna/remoterestore/backup/dlna/cache/minidlna/* /var/cache/minidlna/" >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3879. echo ' if [ ! "$?" = "0" ]; then' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3880. echo ' exit 982' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3881. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3882. echo ' rm -rf /root/tempdlna' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3883. echo ' fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3884. echo 'fi' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3885. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3886. echo 'echo "*** Remote restore was successful ***"' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3887. echo '' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3888. echo 'exit 0' >> /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3889. chmod 400 /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3890. chmod +x /usr/bin/$RESTORE_FROM_FRIEND_SCRIPT_NAME
  3891. echo 'restore_from_friend' >> $COMPLETION_FILE
  3892. }
  3893. function remove_default_user {
  3894. # make sure you don't use the default user account
  3895. if [[ $MY_USERNAME == "debian" ]]; then
  3896. echo 'Do not use the default debian user account. Create a different user with: adduser [username]'
  3897. exit 68
  3898. fi
  3899. # remove the default debian user to prevent it from becoming an attack vector
  3900. if [ -d /home/debian ]; then
  3901. userdel -r debian
  3902. echo 'Default debian user account removed'
  3903. fi
  3904. }
  3905. function enforce_good_passwords {
  3906. # because humans are generally bad at choosing passwords
  3907. if grep -Fxq "enforce_good_passwords" $COMPLETION_FILE; then
  3908. return
  3909. fi
  3910. apt-get -y install libpam-cracklib
  3911. sed -i 's/password.*requisite.*pam_cracklib.so.*/password required pam_cracklib.so retry=2 dcredit=-4 ucredit=-1 ocredit=-1 lcredit=0 minlen=10 reject_username/g' /etc/pam.d/common-password
  3912. echo 'enforce_good_passwords' >> $COMPLETION_FILE
  3913. }
  3914. function change_login_message {
  3915. if grep -Fxq "change_login_message" $COMPLETION_FILE; then
  3916. return
  3917. fi
  3918. echo '' > /etc/motd
  3919. echo ".---. . . " >> /etc/motd
  3920. echo "| | | " >> /etc/motd
  3921. echo "|--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-. " >> /etc/motd
  3922. echo "| | (.-' (.-' ( | ( )| | | | )( )| | (.-' " >> /etc/motd
  3923. echo "' ' --' --' -' - -' ' ' -' -' -' ' - --'" >> /etc/motd
  3924. if [[ $SYSTEM_TYPE == "$VARIANT_MAILBOX" ]]; then
  3925. echo ' M A I L B O X E D I T I O N' >> /etc/motd
  3926. fi
  3927. if [[ $SYSTEM_TYPE == "$VARIANT_SOCIAL" ]]; then
  3928. echo ' S O C I A L E D I T I O N' >> /etc/motd
  3929. fi
  3930. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" ]]; then
  3931. echo ' C H A T E D I T I O N' >> /etc/motd
  3932. fi
  3933. if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" ]]; then
  3934. echo ' C L O U D E D I T I O N' >> /etc/motd
  3935. fi
  3936. if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" ]]; then
  3937. echo ' W R I T E R E D I T I O N ' >> /etc/motd
  3938. fi
  3939. if [[ $SYSTEM_TYPE == "$VARIANT_MEDIA" ]]; then
  3940. echo ' M E D I A E D I T I O N' >> /etc/motd
  3941. fi
  3942. if [[ $SYSTEM_TYPE == "$VARIANT_DEVELOPER" ]]; then
  3943. echo ' D E V E L O P E R E D I T I O N' >> /etc/motd
  3944. fi
  3945. echo '' >> /etc/motd
  3946. echo ' Freedom in the Cloud' >> /etc/motd
  3947. echo '' >> /etc/motd
  3948. echo 'change_login_message' >> $COMPLETION_FILE
  3949. }
  3950. function search_for_attached_usb_drive {
  3951. # If a USB drive is attached then search for email,
  3952. # gpg, ssh keys and emacs configuration
  3953. if grep -Fxq "search_for_attached_usb_drive" $COMPLETION_FILE; then
  3954. return
  3955. fi
  3956. if [ -b $USB_DRIVE ]; then
  3957. if [ ! -d $USB_MOUNT ]; then
  3958. echo 'Mounting USB drive'
  3959. mkdir $USB_MOUNT
  3960. mount $USB_DRIVE $USB_MOUNT
  3961. fi
  3962. if ! [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" ]]; then
  3963. if [ -d $USB_MOUNT/Maildir ]; then
  3964. echo 'Maildir found on USB drive'
  3965. IMPORT_MAILDIR=$USB_MOUNT/Maildir
  3966. fi
  3967. if [ -d $USB_MOUNT/.gnupg ]; then
  3968. echo 'Importing GPG keyring'
  3969. cp -r $USB_MOUNT/.gnupg /home/$MY_USERNAME
  3970. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.gnupg
  3971. GPG_KEYS_IMPORTED="yes"
  3972. if [ -f /home/$MY_USERNAME/.gnupg/secring.gpg ]; then
  3973. shred -zu $USB_MOUNT/.gnupg/secring.gpg
  3974. shred -zu $USB_MOUNT/.gnupg/random_seed
  3975. shred -zu $USB_MOUNT/.gnupg/trustdb.gpg
  3976. rm -rf $USB_MOUNT/.gnupg
  3977. else
  3978. echo 'GPG files did not copy'
  3979. exit 7
  3980. fi
  3981. fi
  3982. if [ -f $USB_MOUNT/.procmailrc ]; then
  3983. echo 'Importing procmail settings'
  3984. cp $USB_MOUNT/.procmailrc /home/$MY_USERNAME
  3985. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.procmailrc
  3986. fi
  3987. if [ -f $USB_MOUNT/private_key.gpg ]; then
  3988. echo 'GPG private key found on USB drive'
  3989. MY_GPG_PRIVATE_KEY=$USB_MOUNT/private_key.gpg
  3990. fi
  3991. if [ -f $USB_MOUNT/public_key.gpg ]; then
  3992. echo 'GPG public key found on USB drive'
  3993. MY_GPG_PUBLIC_KEY=$USB_MOUNT/public_key.gpg
  3994. fi
  3995. fi
  3996. if [ -d $USB_MOUNT/prosody ]; then
  3997. if [ ! -d $XMPP_DIRECTORY ]; then
  3998. mkdir $XMPP_DIRECTORY
  3999. fi
  4000. cp -r $USB_MOUNT/prosody/* $XMPP_DIRECTORY
  4001. chown -R prosody:prosody $XMPP_DIRECTORY
  4002. fi
  4003. if [ -d $USB_MOUNT/.ssh ]; then
  4004. echo 'Importing ssh keys'
  4005. cp -r $USB_MOUNT/.ssh /home/$MY_USERNAME
  4006. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.ssh
  4007. # for security delete the ssh keys from the usb drive
  4008. if [ -f /home/$MY_USERNAME/.ssh/id_rsa ]; then
  4009. shred -zu $USB_MOUNT/.ssh/id_rsa
  4010. shred -zu $USB_MOUNT/.ssh/id_rsa.pub
  4011. shred -zu $USB_MOUNT/.ssh/known_hosts
  4012. rm -rf $USB_MOUNT/.ssh
  4013. else
  4014. echo 'ssh files did not copy'
  4015. exit 8
  4016. fi
  4017. fi
  4018. if [ -f $USB_MOUNT/.emacs ]; then
  4019. echo 'Importing .emacs file'
  4020. cp -f $USB_MOUNT/.emacs /home/$MY_USERNAME/.emacs
  4021. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.emacs
  4022. fi
  4023. if [ -d $USB_MOUNT/.emacs.d ]; then
  4024. echo 'Importing .emacs.d directory'
  4025. cp -r $USB_MOUNT/.emacs.d /home/$MY_USERNAME
  4026. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.emacs.d
  4027. fi
  4028. if [ -d $USB_MOUNT/ssl ]; then
  4029. echo 'Importing SSL certificates'
  4030. cp -r $USB_MOUNT/ssl/* /etc/ssl
  4031. chmod 640 /etc/ssl/certs/*
  4032. chmod 400 /etc/ssl/private/*
  4033. # change ownership of some certificates
  4034. if [ -d /etc/prosody ]; then
  4035. chown prosody:prosody /etc/ssl/private/xmpp.*
  4036. chown prosody:prosody /etc/ssl/certs/xmpp.*
  4037. fi
  4038. if [ -d /etc/dovecot ]; then
  4039. chown root:dovecot /etc/ssl/certs/dovecot.*
  4040. chown root:dovecot /etc/ssl/private/dovecot.*
  4041. fi
  4042. if [ -f /etc/ssl/private/exim.key ]; then
  4043. chown root:Debian-exim /etc/ssl/private/exim.key /etc/ssl/certs/exim.crt /etc/ssl/certs/exim.dhparam
  4044. fi
  4045. fi
  4046. if [ -d $USB_MOUNT/personal ]; then
  4047. echo 'Importing personal directory'
  4048. cp -r $USB_MOUNT/personal /home/$MY_USERNAME
  4049. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/personal
  4050. fi
  4051. else
  4052. if [ -d $USB_MOUNT ]; then
  4053. umount $USB_MOUNT
  4054. rm -rf $USB_MOUNT
  4055. fi
  4056. echo 'No USB drive attached'
  4057. fi
  4058. echo 'search_for_attached_usb_drive' >> $COMPLETION_FILE
  4059. }
  4060. function remove_proprietary_repos {
  4061. if grep -Fxq "remove_proprietary_repos" $COMPLETION_FILE; then
  4062. return
  4063. fi
  4064. sed -i 's/ non-free//g' /etc/apt/sources.list
  4065. echo 'remove_proprietary_repos' >> $COMPLETION_FILE
  4066. }
  4067. function change_debian_repos {
  4068. if grep -Fxq "change_debian_repos" $COMPLETION_FILE; then
  4069. return
  4070. fi
  4071. rm -rf /var/lib/apt/lists/*
  4072. apt-get clean
  4073. sed -i "s/ftp.us.debian.org/$DEBIAN_REPO/g" /etc/apt/sources.list
  4074. # ensure that there is a security repo
  4075. if ! grep -q "security" /etc/apt/sources.list; then
  4076. echo "deb http://security.debian.org/ $DEBIAN_VERSION/updates main contrib" >> /etc/apt/sources.list
  4077. echo "#deb-src http://security.debian.org/ $DEBIAN_VERSION/updates main contrib" >> /etc/apt/sources.list
  4078. fi
  4079. apt-get update
  4080. apt-get -y install apt-transport-https
  4081. echo 'change_debian_repos' >> $COMPLETION_FILE
  4082. }
  4083. function initial_setup {
  4084. if grep -Fxq "initial_setup" $COMPLETION_FILE; then
  4085. return
  4086. fi
  4087. apt-get -y remove --purge apache*
  4088. apt-get -y dist-upgrade
  4089. apt-get -y install ca-certificates emacs24 cpulimit
  4090. echo 'initial_setup' >> $COMPLETION_FILE
  4091. }
  4092. function install_editor {
  4093. if grep -Fxq "install_editor" $COMPLETION_FILE; then
  4094. return
  4095. fi
  4096. update-alternatives --set editor /usr/bin/emacs24
  4097. # A minimal emacs configuration
  4098. #echo -n "(add-to-list 'load-path " > /home/$MY_USERNAME/.emacs
  4099. #echo '"~/.emacs.d/")' >> /home/$MY_USERNAME/.emacs
  4100. #echo '' >> /home/$MY_USERNAME/.emacs
  4101. echo ';; ===== Remove trailing whitepace ======================================' >> /home/$MY_USERNAME/.emacs
  4102. echo '' >> /home/$MY_USERNAME/.emacs
  4103. echo ";;(add-hook 'before-save-hook 'delete-trailing-whitespace)" >> /home/$MY_USERNAME/.emacs
  4104. echo '' >> /home/$MY_USERNAME/.emacs
  4105. echo ';; Goto a line number with CTRL-l' >> /home/$MY_USERNAME/.emacs
  4106. echo -n '(global-set-key "\C-l" ' >> /home/$MY_USERNAME/.emacs
  4107. echo "'goto-line)" >> /home/$MY_USERNAME/.emacs
  4108. echo '' >> /home/$MY_USERNAME/.emacs
  4109. echo ';; ===== Show line numbers ==============================================' >> /home/$MY_USERNAME/.emacs
  4110. echo '' >> /home/$MY_USERNAME/.emacs
  4111. echo "(add-hook 'find-file-hook (lambda () (linum-mode 1)))" >> /home/$MY_USERNAME/.emacs
  4112. echo '' >> /home/$MY_USERNAME/.emacs
  4113. echo ';; ===== Enable line wrapping in org-mode ===============================' >> /home/$MY_USERNAME/.emacs
  4114. echo '' >> /home/$MY_USERNAME/.emacs
  4115. echo " (add-hook 'org-mode-hook" >> /home/$MY_USERNAME/.emacs
  4116. echo " '(lambda ()" >> /home/$MY_USERNAME/.emacs
  4117. echo " (visual-line-mode 1)))" >> /home/$MY_USERNAME/.emacs
  4118. echo '' >> /home/$MY_USERNAME/.emacs
  4119. echo ';; ===== Enable shift select in org mode ================================' >> /home/$MY_USERNAME/.emacs
  4120. echo '' >> /home/$MY_USERNAME/.emacs
  4121. echo '(setq org-support-shift-select t)' >> /home/$MY_USERNAME/.emacs
  4122. echo '' >> /home/$MY_USERNAME/.emacs
  4123. echo ';; ===== Set standard indent to 4 rather that 4 =========================' >> /home/$MY_USERNAME/.emacs
  4124. echo '' >> /home/$MY_USERNAME/.emacs
  4125. echo '(setq standard-indent 4)' >> /home/$MY_USERNAME/.emacs
  4126. echo '(setq-default tab-width 4)' >> /home/$MY_USERNAME/.emacs
  4127. echo '(setq c-basic-offset 4)' >> /home/$MY_USERNAME/.emacs
  4128. echo '' >> /home/$MY_USERNAME/.emacs
  4129. echo ';; ===== Support Wheel Mouse Scrolling ==================================' >> /home/$MY_USERNAME/.emacs
  4130. echo '' >> /home/$MY_USERNAME/.emacs
  4131. echo '(mouse-wheel-mode t)' >> /home/$MY_USERNAME/.emacs
  4132. echo '' >> /home/$MY_USERNAME/.emacs
  4133. echo ';; ===== Place Backup Files in Specific Directory =======================' >> /home/$MY_USERNAME/.emacs
  4134. echo '' >> /home/$MY_USERNAME/.emacs
  4135. echo '(setq make-backup-files t)' >> /home/$MY_USERNAME/.emacs
  4136. echo '(setq version-control t)' >> /home/$MY_USERNAME/.emacs
  4137. echo '(setq backup-directory-alist (quote ((".*" . "~/.emacs_backups/"))))' >> /home/$MY_USERNAME/.emacs
  4138. echo '' >> /home/$MY_USERNAME/.emacs
  4139. echo ';; ===== Make Text mode the default mode for new buffers ================' >> /home/$MY_USERNAME/.emacs
  4140. echo '' >> /home/$MY_USERNAME/.emacs
  4141. echo "(setq default-major-mode 'text-mode)" >> /home/$MY_USERNAME/.emacs
  4142. echo '' >> /home/$MY_USERNAME/.emacs
  4143. echo ';; ===== Line length ====================================================' >> /home/$MY_USERNAME/.emacs
  4144. echo '' >> /home/$MY_USERNAME/.emacs
  4145. echo '(setq-default fill-column 72)' >> /home/$MY_USERNAME/.emacs
  4146. echo '' >> /home/$MY_USERNAME/.emacs
  4147. echo ';; ===== Enable Line and Column Numbering ===============================' >> /home/$MY_USERNAME/.emacs
  4148. echo '' >> /home/$MY_USERNAME/.emacs
  4149. echo '(line-number-mode 1)' >> /home/$MY_USERNAME/.emacs
  4150. echo '(column-number-mode 1)' >> /home/$MY_USERNAME/.emacs
  4151. echo '' >> /home/$MY_USERNAME/.emacs
  4152. echo ';; ===== Turn on Auto Fill mode automatically in all modes ==============' >> /home/$MY_USERNAME/.emacs
  4153. echo '' >> /home/$MY_USERNAME/.emacs
  4154. echo ';; Auto-fill-mode the the automatic wrapping of lines and insertion of' >> /home/$MY_USERNAME/.emacs
  4155. echo ';; newlines when the cursor goes over the column limit.' >> /home/$MY_USERNAME/.emacs
  4156. echo '' >> /home/$MY_USERNAME/.emacs
  4157. echo ';; This should actually turn on auto-fill-mode by default in all major' >> /home/$MY_USERNAME/.emacs
  4158. echo ';; modes. The other way to do this is to turn on the fill for specific modes' >> /home/$MY_USERNAME/.emacs
  4159. echo ';; via hooks.' >> /home/$MY_USERNAME/.emacs
  4160. echo '' >> /home/$MY_USERNAME/.emacs
  4161. echo '(setq auto-fill-mode 1)' >> /home/$MY_USERNAME/.emacs
  4162. echo '' >> /home/$MY_USERNAME/.emacs
  4163. echo ';; ===== Enable GPG encryption =========================================' >> /home/$MY_USERNAME/.emacs
  4164. echo '' >> /home/$MY_USERNAME/.emacs
  4165. echo "(require 'epa)" >> /home/$MY_USERNAME/.emacs
  4166. echo '(epa-file-enable)' >> /home/$MY_USERNAME/.emacs
  4167. cp /home/$MY_USERNAME/.emacs /root/.emacs
  4168. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.emacs
  4169. echo 'install_editor' >> $COMPLETION_FILE
  4170. }
  4171. function enable_backports {
  4172. if grep -Fxq "enable_backports" $COMPLETION_FILE; then
  4173. return
  4174. fi
  4175. if ! grep -Fxq "deb http://$DEBIAN_REPO/debian $DEBIAN_VERSION-backports main" /etc/apt/sources.list; then
  4176. echo "deb http://$DEBIAN_REPO/debian $DEBIAN_VERSION-backports main" >> /etc/apt/sources.list
  4177. fi
  4178. echo 'enable_backports' >> $COMPLETION_FILE
  4179. }
  4180. function update_the_kernel {
  4181. if grep -Fxq "update_the_kernel" $COMPLETION_FILE; then
  4182. return
  4183. fi
  4184. # if this is not a beaglebone or is a docker container
  4185. # then just use the standard kernel
  4186. if [[ $INSTALLED_WITHIN_DOCKER == "yes" || $INSTALLING_ON_BBB != "yes" ]]; then
  4187. return
  4188. fi
  4189. cd /opt/scripts/tools
  4190. ./update_kernel.sh --kernel $KERNEL_VERSION
  4191. echo 'update_the_kernel' >> $COMPLETION_FILE
  4192. }
  4193. function enable_zram {
  4194. if grep -Fxq "enable_zram" $COMPLETION_FILE; then
  4195. return
  4196. fi
  4197. if [[ $INSTALLED_WITHIN_DOCKER == "yes" || $INSTALLING_ON_BBB != "yes" ]]; then
  4198. return
  4199. fi
  4200. if ! grep -q "options zram num_devices=1" /etc/modprobe.d/zram.conf; then
  4201. echo 'options zram num_devices=1' >> /etc/modprobe.d/zram.conf
  4202. fi
  4203. echo '#!/bin/bash' > /etc/init.d/zram
  4204. echo '### BEGIN INIT INFO' >> /etc/init.d/zram
  4205. echo '# Provides: zram' >> /etc/init.d/zram
  4206. echo '# Required-Start:' >> /etc/init.d/zram
  4207. echo '# Required-Stop:' >> /etc/init.d/zram
  4208. echo '# Default-Start: 2 3 4 5' >> /etc/init.d/zram
  4209. echo '# Default-Stop: 0 1 6' >> /etc/init.d/zram
  4210. echo '# Short-Description: Increased Performance In Linux With zRam (Virtual Swap Compressed in RAM)' >> /etc/init.d/zram
  4211. echo '# Description: Adapted from systemd scripts at https://github.com/mystilleef/FedoraZram' >> /etc/init.d/zram
  4212. echo '### END INIT INFO' >> /etc/init.d/zram
  4213. echo 'start() {' >> /etc/init.d/zram
  4214. echo ' # get the number of CPUs' >> /etc/init.d/zram
  4215. echo ' num_cpus=$(grep -c processor /proc/cpuinfo)' >> /etc/init.d/zram
  4216. echo ' # if something goes wrong, assume we have 1' >> /etc/init.d/zram
  4217. echo ' [ "$num_cpus" != 0 ] || num_cpus=1' >> /etc/init.d/zram
  4218. echo ' # set decremented number of CPUs' >> /etc/init.d/zram
  4219. echo ' decr_num_cpus=$((num_cpus - 1))' >> /etc/init.d/zram
  4220. echo ' # get the amount of memory in the machine' >> /etc/init.d/zram
  4221. echo ' mem_total_kb=$(grep MemTotal /proc/meminfo | grep -E --only-matching "[[:digit:]]+")' >> /etc/init.d/zram
  4222. echo ' mem_total=$((mem_total_kb * 1024))' >> /etc/init.d/zram
  4223. echo ' # load dependency modules' >> /etc/init.d/zram
  4224. echo ' modprobe zram num_devices=$num_cpus' >> /etc/init.d/zram
  4225. echo ' # initialize the devices' >> /etc/init.d/zram
  4226. echo ' for i in $(seq 0 $decr_num_cpus); do' >> /etc/init.d/zram
  4227. echo ' echo $((mem_total / num_cpus)) > /sys/block/zram$i/disksize' >> /etc/init.d/zram
  4228. echo ' done' >> /etc/init.d/zram
  4229. echo ' # Creating swap filesystems' >> /etc/init.d/zram
  4230. echo ' for i in $(seq 0 $decr_num_cpus); do' >> /etc/init.d/zram
  4231. echo ' mkswap /dev/zram$i' >> /etc/init.d/zram
  4232. echo ' done' >> /etc/init.d/zram
  4233. echo ' # Switch the swaps on' >> /etc/init.d/zram
  4234. echo ' for i in $(seq 0 $decr_num_cpus); do' >> /etc/init.d/zram
  4235. echo ' swapon -p 100 /dev/zram$i' >> /etc/init.d/zram
  4236. echo ' done' >> /etc/init.d/zram
  4237. echo '}' >> /etc/init.d/zram
  4238. echo 'stop() {' >> /etc/init.d/zram
  4239. echo ' # get the number of CPUs' >> /etc/init.d/zram
  4240. echo ' num_cpus=$(grep -c processor /proc/cpuinfo)' >> /etc/init.d/zram
  4241. echo ' # set decremented number of CPUs' >> /etc/init.d/zram
  4242. echo ' decr_num_cpus=$((num_cpus - 1))' >> /etc/init.d/zram
  4243. echo ' # Switching off swap' >> /etc/init.d/zram
  4244. echo ' for i in $(seq 0 $decr_num_cpus); do' >> /etc/init.d/zram
  4245. echo ' if [ "$(grep /dev/zram$i /proc/swaps)" != "" ]; then' >> /etc/init.d/zram
  4246. echo ' swapoff /dev/zram$i' >> /etc/init.d/zram
  4247. echo ' sleep 1' >> /etc/init.d/zram
  4248. echo ' fi' >> /etc/init.d/zram
  4249. echo ' done' >> /etc/init.d/zram
  4250. echo ' sleep 1' >> /etc/init.d/zram
  4251. echo ' rmmod zram' >> /etc/init.d/zram
  4252. echo '}' >> /etc/init.d/zram
  4253. echo 'case "$1" in' >> /etc/init.d/zram
  4254. echo ' start)' >> /etc/init.d/zram
  4255. echo ' start' >> /etc/init.d/zram
  4256. echo ' ;;' >> /etc/init.d/zram
  4257. echo ' stop)' >> /etc/init.d/zram
  4258. echo ' stop' >> /etc/init.d/zram
  4259. echo ' ;;' >> /etc/init.d/zram
  4260. echo ' restart)' >> /etc/init.d/zram
  4261. echo ' stop' >> /etc/init.d/zram
  4262. echo ' sleep 3' >> /etc/init.d/zram
  4263. echo ' start' >> /etc/init.d/zram
  4264. echo ' ;;' >> /etc/init.d/zram
  4265. echo ' *)' >> /etc/init.d/zram
  4266. echo ' echo "Usage: $0 {start|stop|restart}"' >> /etc/init.d/zram
  4267. echo ' RETVAL=1' >> /etc/init.d/zram
  4268. echo 'esac' >> /etc/init.d/zram
  4269. echo 'exit $RETVAL' >> /etc/init.d/zram
  4270. chmod +x /etc/init.d/zram
  4271. update-rc.d zram defaults
  4272. echo 'enable_zram' >> $COMPLETION_FILE
  4273. }
  4274. function random_number_generator {
  4275. if grep -Fxq "random_number_generator" $COMPLETION_FILE; then
  4276. return
  4277. fi
  4278. if [[ $INSTALLING_ON_BBB != "yes" ]]; then
  4279. # On systems which are not beaglebones assume that
  4280. # no hardware random number generator is available
  4281. # and use the second best option
  4282. apt-get -y install haveged
  4283. return
  4284. fi
  4285. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  4286. # it is assumed that docker uses the random number
  4287. # generator of the host system
  4288. return
  4289. fi
  4290. if [[ $USE_HWRNG == "yes" ]]; then
  4291. apt-get -y install rng-tools
  4292. sed -i 's|#HRNGDEVICE=/dev/hwrng|HRNGDEVICE=/dev/hwrng|g' /etc/default/rng-tools
  4293. else
  4294. apt-get -y install haveged
  4295. fi
  4296. echo 'random_number_generator' >> $COMPLETION_FILE
  4297. }
  4298. function configure_ssh {
  4299. if grep -Fxq "configure_ssh" $COMPLETION_FILE; then
  4300. return
  4301. fi
  4302. sed -i "s/Port .*/Port $SSH_PORT/g" /etc/ssh/sshd_config
  4303. sed -i 's/PermitRootLogin.*/PermitRootLogin no/g' /etc/ssh/sshd_config
  4304. sed -i 's/X11Forwarding.*/X11Forwarding no/g' /etc/ssh/sshd_config
  4305. sed -i 's/ServerKeyBits.*/ServerKeyBits 4096/g' /etc/ssh/sshd_config
  4306. sed -i 's/TCPKeepAlive.*/TCPKeepAlive no/g' /etc/ssh/sshd_config
  4307. sed -i 's|HostKey /etc/ssh/ssh_host_dsa_key|#HostKey /etc/ssh/ssh_host_dsa_key|g' /etc/ssh/sshd_config
  4308. sed -i 's|HostKey /etc/ssh/ssh_host_ecdsa_key|#HostKey /etc/ssh/ssh_host_ecdsa_key|g' /etc/ssh/sshd_config
  4309. if grep -q 'ClientAliveInterval' /etc/ssh/sshd_config; then
  4310. sed -i 's/ClientAliveInterval.*/ClientAliveInterval 60/g' /etc/ssh/sshd_config
  4311. else
  4312. echo 'ClientAliveInterval 60' >> /etc/ssh/sshd_config
  4313. fi
  4314. if grep -q 'ClientAliveCountMax' /etc/ssh/sshd_config; then
  4315. sed -i 's/ClientAliveCountMax.*/ClientAliveCountMax 3/g' /etc/ssh/sshd_config
  4316. else
  4317. echo 'ClientAliveCountMax 3' >> /etc/ssh/sshd_config
  4318. fi
  4319. if grep -q 'Ciphers' /etc/ssh/sshd_config; then
  4320. sed -i "s|Ciphers.*|Ciphers $SSH_CIPHERS|g" /etc/ssh/sshd_config
  4321. else
  4322. echo "Ciphers $SSH_CIPHERS" >> /etc/ssh/sshd_config
  4323. fi
  4324. if grep -q 'MACs' /etc/ssh/sshd_config; then
  4325. sed -i "s|MACs.*|MACs $SSH_MACS|g" /etc/ssh/sshd_config
  4326. else
  4327. echo "MACs $SSH_MACS" >> /etc/ssh/sshd_config
  4328. fi
  4329. if grep -q 'KexAlgorithms' /etc/ssh/sshd_config; then
  4330. sed -i "s|KexAlgorithms.*|KexAlgorithms $SSH_KEX|g" /etc/ssh/sshd_config
  4331. else
  4332. echo "KexAlgorithms $SSH_KEX" >> /etc/ssh/sshd_config
  4333. fi
  4334. apt-get -y install fail2ban
  4335. echo 'configure_ssh' >> $COMPLETION_FILE
  4336. # Don't reboot if installing within docker
  4337. # random numbers will come from the host system
  4338. if [[ $INSTALLED_WITHIN_DOCKER == "yes" || $INSTALLING_ON_BBB != "yes" ]]; then
  4339. return
  4340. fi
  4341. echo ''
  4342. echo ''
  4343. echo ' *** Rebooting to initialise ssh settings and random number generator ***'
  4344. echo ''
  4345. echo " *** Reconnect via ssh on port $SSH_PORT, then run this script again ***"
  4346. echo ''
  4347. echo '## ' >> /etc/motd
  4348. echo '## Type "su" and enter your administrator password, then use the command:' >> /etc/motd
  4349. echo '## ' >> /etc/motd
  4350. echo '## freedombone -c freedombone.cfg' >> /etc/motd
  4351. echo '## ' >> /etc/motd
  4352. echo '## to continue the installation.' >> /etc/motd
  4353. reboot
  4354. }
  4355. # see https://stribika.github.io/2015/01/04/secure-secure-shell.html
  4356. function ssh_remove_small_moduli {
  4357. awk '$5 > 2000' /etc/ssh/moduli > ~/moduli
  4358. mv ~/moduli /etc/ssh/moduli
  4359. }
  4360. function configure_ssh_client {
  4361. if grep -Fxq "configure_ssh_client" $COMPLETION_FILE; then
  4362. return
  4363. fi
  4364. #sed -i 's/# PasswordAuthentication.*/ PasswordAuthentication no/g' /etc/ssh/ssh_config
  4365. #sed -i 's/# ChallengeResponseAuthentication.*/ ChallengeResponseAuthentication no/g' /etc/ssh/ssh_config
  4366. sed -i "s/# HostKeyAlgorithms.*/ HostKeyAlgorithms $SSH_HOST_KEY_ALGORITHMS/g" /etc/ssh/ssh_config
  4367. sed -i "s/# Ciphers.*/ Ciphers $SSH_CIPHERS/g" /etc/ssh/ssh_config
  4368. sed -i "s/# MACs.*/ MACs $SSH_MACS/g" /etc/ssh/ssh_config
  4369. if ! grep -q "HostKeyAlgorithms" /etc/ssh/ssh_config; then
  4370. echo " HostKeyAlgorithms $SSH_HOST_KEY_ALGORITHMS" >> /etc/ssh/ssh_config
  4371. fi
  4372. sed -i "s/Ciphers.*/Ciphers $SSH_CIPHERS/g" /etc/ssh/ssh_config
  4373. if ! grep -q "Ciphers " /etc/ssh/ssh_config; then
  4374. echo " Ciphers $SSH_CIPHERS" >> /etc/ssh/ssh_config
  4375. fi
  4376. sed -i "s/MACs.*/MACs $SSH_MACS/g" /etc/ssh/ssh_config
  4377. if ! grep -q "MACs " /etc/ssh/ssh_config; then
  4378. echo " MACs $SSH_MACS" >> /etc/ssh/ssh_config
  4379. fi
  4380. # Create ssh keys
  4381. if [ ! -f ~/.ssh/id_ed25519 ]; then
  4382. ssh-keygen -t ed25519 -o -a 100
  4383. fi
  4384. if [ ! -f ~/.ssh/id_rsa ]; then
  4385. ssh-keygen -t rsa -b 4096 -o -a 100
  4386. fi
  4387. ssh_remove_small_moduli
  4388. echo 'configure_ssh_client' >> $COMPLETION_FILE
  4389. }
  4390. function regenerate_ssh_keys {
  4391. if grep -Fxq "regenerate_ssh_keys" $COMPLETION_FILE; then
  4392. return
  4393. fi
  4394. rm -f /etc/ssh/ssh_host_*
  4395. dpkg-reconfigure openssh-server
  4396. ssh_remove_small_moduli
  4397. service ssh restart
  4398. echo 'regenerate_ssh_keys' >> $COMPLETION_FILE
  4399. }
  4400. function configure_dns {
  4401. if grep -Fxq "configure_dns" $COMPLETION_FILE; then
  4402. return
  4403. fi
  4404. echo 'domain localdomain' > /etc/resolv.conf
  4405. echo 'search localdomain' >> /etc/resolv.conf
  4406. echo "nameserver $NAMESERVER1" >> /etc/resolv.conf
  4407. echo "nameserver $NAMESERVER2" >> /etc/resolv.conf
  4408. echo 'configure_dns' >> $COMPLETION_FILE
  4409. }
  4410. function set_your_domain_name {
  4411. if grep -Fxq "set_your_domain_name" $COMPLETION_FILE; then
  4412. return
  4413. fi
  4414. echo "$DEFAULT_DOMAIN_NAME" > /etc/hostname
  4415. hostname $DEFAULT_DOMAIN_NAME
  4416. if grep -q "127.0.1.1" /etc/hosts; then
  4417. sed -i "s/127.0.1.1.*/127.0.1.1 $DEFAULT_DOMAIN_NAME/g" /etc/hosts
  4418. else
  4419. echo "127.0.1.1 $DEFAULT_DOMAIN_NAME" >> /etc/hosts
  4420. fi
  4421. echo 'set_your_domain_name' >> $COMPLETION_FILE
  4422. }
  4423. function time_synchronisation {
  4424. if grep -Fxq "time_synchronisation" $COMPLETION_FILE; then
  4425. return
  4426. fi
  4427. #apt-get -y install tlsdate
  4428. # building tlsdate from source is a workaround because of
  4429. # this bug https://github.com/ioerror/tlsdate/issues/130
  4430. apt-get -y install build-essential automake git pkg-config autoconf libtool libssl-dev libevent-dev
  4431. if [ ! -d $INSTALL_DIR ]; then
  4432. mkdir $INSTALL_DIR
  4433. fi
  4434. cd $INSTALL_DIR
  4435. git clone https://github.com/ioerror/tlsdate.git
  4436. cd $INSTALL_DIR/tlsdate
  4437. ./autogen.sh
  4438. ./configure
  4439. make
  4440. make install
  4441. cp /usr/local/bin/tlsdate* /usr/bin
  4442. cp /usr/local/sbin/tlsdate* /usr/bin
  4443. apt-get -y remove ntpdate
  4444. echo '#!/bin/bash' > /usr/bin/updatedate
  4445. echo "TIMESOURCE='TLS_TIME_SOURCE1'" >> /usr/bin/updatedate
  4446. echo "TIMESOURCE2='TLS_TIME_SOURCE2'" >> /usr/bin/updatedate
  4447. echo 'LOGFILE=/var/log/tlsdate.log' >> /usr/bin/updatedate
  4448. echo 'TIMEOUT=5' >> /usr/bin/updatedate
  4449. echo "EMAIL=$MY_EMAIL_ADDRESS" >> /usr/bin/updatedate
  4450. echo '# File which contains the previous date as a number' >> /usr/bin/updatedate
  4451. echo 'BEFORE_DATE_FILE=/var/log/tlsdateprevious.txt' >> /usr/bin/updatedate
  4452. echo '# File which contains the previous date as a string' >> /usr/bin/updatedate
  4453. echo 'BEFORE_FULLDATE_FILE=/var/log/tlsdate.txt' >> /usr/bin/updatedate
  4454. echo 'DATE_BEFORE=$(date)' >> /usr/bin/updatedate
  4455. echo 'BEFORE=$(date "+%s")' >> /usr/bin/updatedate
  4456. echo 'BACKWARDS_BETWEEN=0' >> /usr/bin/updatedate
  4457. echo 're="^[0-9]+$"' >> /usr/bin/updatedate
  4458. echo '# If the date was previously set' >> /usr/bin/updatedate
  4459. echo 'if [ -s "$BEFORE_DATE_FILE" ]; then' >> /usr/bin/updatedate
  4460. echo ' filesize=$(wc -c "$BEFORE_DATE_FILE" | cut -f 1 -d " ")' >> /usr/bin/updatedate
  4461. echo ' if [ $filesize -ge 5 ]; then' >> /usr/bin/updatedate
  4462. echo ' BEFORE_FILE=$(cat $BEFORE_DATE_FILE)' >> /usr/bin/updatedate
  4463. echo ' if [[ $BEFORE_FILE =~ $re ]]; then' >> /usr/bin/updatedate
  4464. echo ' BEFORE_FULLDATE=$(cat $BEFORE_FULLDATE_FILE)' >> /usr/bin/updatedate
  4465. echo ' # is the date going backwards?' >> /usr/bin/updatedate
  4466. echo ' if (( $BEFORE_FILE > $BEFORE )); then' >> /usr/bin/updatedate
  4467. echo ' echo -n "Date went backwards between tlsdate updates. " >> $LOGFILE' >> /usr/bin/updatedate
  4468. echo ' echo -n "$BEFORE_FILE > $BEFORE, " >> $LOGFILE' >> /usr/bin/updatedate
  4469. echo ' echo "$BEFORE_FULLDATE > $DATE_BEFORE" >> $LOGFILE' >> /usr/bin/updatedate
  4470. echo ' # Send a warning email' >> /usr/bin/updatedate
  4471. echo ' echo $(tail $LOGFILE -n 2) | mail -s "tlsdate anomaly" $EMAIL' >> /usr/bin/updatedate
  4472. echo ' # Try another time source' >> /usr/bin/updatedate
  4473. echo ' TIMESOURCE=$TIMESOURCE2' >> /usr/bin/updatedate
  4474. echo ' # try running without any parameters' >> /usr/bin/updatedate
  4475. echo ' tlsdate >> $LOGFILE' >> /usr/bin/updatedate
  4476. echo ' BACKWARDS_BETWEEN=1' >> /usr/bin/updatedate
  4477. echo ' fi' >> /usr/bin/updatedate
  4478. echo ' fi' >> /usr/bin/updatedate
  4479. echo ' fi' >> /usr/bin/updatedate
  4480. echo 'fi' >> /usr/bin/updatedate
  4481. echo '# Set the date' >> /usr/bin/updatedate
  4482. echo '/usr/bin/timeout $TIMEOUT tlsdate -l -t -H $TIMESOURCE -p 443 >> $LOGFILE' >> /usr/bin/updatedate
  4483. echo 'DATE_AFTER=$(date)' >> /usr/bin/updatedate
  4484. echo 'AFTER=$(date "+%s")' >> /usr/bin/updatedate
  4485. echo '# After setting the date did it go backwards?' >> /usr/bin/updatedate
  4486. echo 'if (( $AFTER < $BEFORE )); then' >> /usr/bin/updatedate
  4487. echo ' echo "Incorrect date: $DATE_BEFORE -> $DATE_AFTER" >> $LOGFILE' >> /usr/bin/updatedate
  4488. echo ' # Send a warning email' >> /usr/bin/updatedate
  4489. echo ' echo $(tail $LOGFILE -n 2) | mail -s "tlsdate anomaly" $EMAIL' >> /usr/bin/updatedate
  4490. echo ' # Try resetting the date from another time source' >> /usr/bin/updatedate
  4491. echo ' /usr/bin/timeout $TIMEOUT tlsdate -l -t -H $TIMESOURCE2 -p 443 >> $LOGFILE' >> /usr/bin/updatedate
  4492. echo ' DATE_AFTER=$(date)' >> /usr/bin/updatedate
  4493. echo ' AFTER=$(date "+%s")' >> /usr/bin/updatedate
  4494. echo 'else' >> /usr/bin/updatedate
  4495. echo ' echo -n $TIMESOURCE >> $LOGFILE' >> /usr/bin/updatedate
  4496. echo ' if [ -s "$BEFORE_DATE_FILE" ]; then' >> /usr/bin/updatedate
  4497. echo ' echo -n " " >> $LOGFILE' >> /usr/bin/updatedate
  4498. echo ' echo -n $BEFORE_FILE >> $LOGFILE' >> /usr/bin/updatedate
  4499. echo ' fi' >> /usr/bin/updatedate
  4500. echo ' echo -n " " >> $LOGFILE' >> /usr/bin/updatedate
  4501. echo ' echo -n $BEFORE >> $LOGFILE' >> /usr/bin/updatedate
  4502. echo ' echo -n " " >> $LOGFILE' >> /usr/bin/updatedate
  4503. echo ' echo -n $AFTER >> $LOGFILE' >> /usr/bin/updatedate
  4504. echo ' echo -n " " >> $LOGFILE' >> /usr/bin/updatedate
  4505. echo ' echo $DATE_AFTER >> $LOGFILE' >> /usr/bin/updatedate
  4506. echo 'fi' >> /usr/bin/updatedate
  4507. echo '# Log the last date' >> /usr/bin/updatedate
  4508. echo 'if [[ $BACKWARDS_BETWEEN == 0 ]]; then' >> /usr/bin/updatedate
  4509. echo ' echo "$AFTER" > $BEFORE_DATE_FILE' >> /usr/bin/updatedate
  4510. echo ' echo "$DATE_AFTER" > $BEFORE_FULLDATE_FILE' >> /usr/bin/updatedate
  4511. echo ' exit 0' >> /usr/bin/updatedate
  4512. echo 'else' >> /usr/bin/updatedate
  4513. echo ' exit 1' >> /usr/bin/updatedate
  4514. echo 'fi' >> /usr/bin/updatedate
  4515. chmod +x /usr/bin/updatedate
  4516. echo '*/15 * * * * root /usr/bin/updatedate' >> /etc/crontab
  4517. service cron restart
  4518. echo '#!/bin/bash' > /etc/init.d/tlsdate
  4519. echo '# /etc/init.d/tlsdate' >> /etc/init.d/tlsdate
  4520. echo '### BEGIN INIT INFO' >> /etc/init.d/tlsdate
  4521. echo '# Provides: tlsdate' >> /etc/init.d/tlsdate
  4522. echo '# Required-Start: $remote_fs $syslog' >> /etc/init.d/tlsdate
  4523. echo '# Required-Stop: $remote_fs $syslog' >> /etc/init.d/tlsdate
  4524. echo '# Default-Start: 2 3 4 5' >> /etc/init.d/tlsdate
  4525. echo '# Default-Stop: 0 1 6' >> /etc/init.d/tlsdate
  4526. echo '# Short-Description: Initially calls tlsdate with the timewarp option' >> /etc/init.d/tlsdate
  4527. echo '# Description: Initially calls tlsdate with the timewarp option' >> /etc/init.d/tlsdate
  4528. echo '### END INIT INFO' >> /etc/init.d/tlsdate
  4529. echo '# Author: Bob Mottram <bob@robotics.uk.to>' >> /etc/init.d/tlsdate
  4530. echo 'PATH="/usr/local/sbin:/usr/local/bin:/usr/bin:/sbin:/usr/sbin:/bin"' >> /etc/init.d/tlsdate
  4531. echo 'LOGFILE="/var/log/tlsdate.log"' >> /etc/init.d/tlsdate
  4532. echo 'TLSDATECOMMAND="tlsdate --timewarp -l -H www.ptb.de -p 443 >> $LOGFILE"' >> /etc/init.d/tlsdate
  4533. echo '#Start-Stop here' >> /etc/init.d/tlsdate
  4534. echo 'case "$1" in' >> /etc/init.d/tlsdate
  4535. echo ' start)' >> /etc/init.d/tlsdate
  4536. echo ' echo "tlsdate started"' >> /etc/init.d/tlsdate
  4537. echo ' $TLSDATECOMMAND' >> /etc/init.d/tlsdate
  4538. echo ' ;;' >> /etc/init.d/tlsdate
  4539. echo ' stop)' >> /etc/init.d/tlsdate
  4540. echo ' echo "tlsdate stopped"' >> /etc/init.d/tlsdate
  4541. echo ' ;;' >> /etc/init.d/tlsdate
  4542. echo ' restart)' >> /etc/init.d/tlsdate
  4543. echo ' echo "tlsdate restarted"' >> /etc/init.d/tlsdate
  4544. echo ' $TLSDATECOMMAND' >> /etc/init.d/tlsdate
  4545. echo ' ;;' >> /etc/init.d/tlsdate
  4546. echo ' *)' >> /etc/init.d/tlsdate
  4547. echo ' echo "Usage: $0 {start|stop|restart}"' >> /etc/init.d/tlsdate
  4548. echo ' exit 1' >> /etc/init.d/tlsdate
  4549. echo ' ;;' >> /etc/init.d/tlsdate
  4550. echo 'esac' >> /etc/init.d/tlsdate
  4551. echo 'exit 0' >> /etc/init.d/tlsdate
  4552. chmod +x /etc/init.d/tlsdate
  4553. update-rc.d tlsdate defaults
  4554. echo 'time_synchronisation' >> $COMPLETION_FILE
  4555. }
  4556. function configure_firewall {
  4557. if grep -Fxq "configure_firewall" $COMPLETION_FILE; then
  4558. return
  4559. fi
  4560. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  4561. # docker does its own firewalling
  4562. return
  4563. fi
  4564. iptables -P INPUT ACCEPT
  4565. ip6tables -P INPUT ACCEPT
  4566. iptables -F
  4567. ip6tables -F
  4568. iptables -t nat -F
  4569. ip6tables -t nat -F
  4570. iptables -X
  4571. ip6tables -X
  4572. iptables -P INPUT DROP
  4573. ip6tables -P INPUT DROP
  4574. iptables -A INPUT -i lo -j ACCEPT
  4575. iptables -A INPUT -i eth0 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
  4576. # Make sure incoming tcp connections are SYN packets
  4577. iptables -A INPUT -p tcp ! --syn -m state --state NEW -j DROP
  4578. # Drop packets with incoming fragments
  4579. iptables -A INPUT -f -j DROP
  4580. # Drop bogons
  4581. iptables -A INPUT -p tcp --tcp-flags ALL ALL -j DROP
  4582. iptables -A INPUT -p tcp --tcp-flags ALL FIN,PSH,URG -j DROP
  4583. iptables -A INPUT -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP
  4584. # Incoming malformed NULL packets:
  4585. iptables -A INPUT -p tcp --tcp-flags ALL NONE -j DROP
  4586. echo 'configure_firewall' >> $COMPLETION_FILE
  4587. }
  4588. function save_firewall_settings {
  4589. iptables-save > /etc/firewall.conf
  4590. ip6tables-save > /etc/firewall6.conf
  4591. printf '#!/bin/sh\n' > /etc/network/if-up.d/iptables
  4592. printf 'iptables-restore < /etc/firewall.conf\n' >> /etc/network/if-up.d/iptables
  4593. printf 'ip6tables-restore < /etc/firewall6.conf\n' >> /etc/network/if-up.d/iptables
  4594. chmod +x /etc/network/if-up.d/iptables
  4595. }
  4596. function configure_firewall_for_voip {
  4597. if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" ]]; then
  4598. return
  4599. fi
  4600. if grep -Fxq "configure_firewall_for_voip" $COMPLETION_FILE; then
  4601. return
  4602. fi
  4603. iptables -A INPUT -i eth0 -p udp --dport $VOIP_PORT -j ACCEPT
  4604. iptables -A INPUT -i eth0 -p tcp --dport $VOIP_PORT -j ACCEPT
  4605. save_firewall_settings
  4606. echo 'configure_firewall_for_voip' >> $COMPLETION_FILE
  4607. }
  4608. function configure_firewall_for_cjdns {
  4609. if grep -Fxq "configure_firewall_for_cjdns" $COMPLETION_FILE; then
  4610. return
  4611. fi
  4612. if [[ $ENABLE_CJDNS != "yes" ]]; then
  4613. return
  4614. fi
  4615. ip6tables -t nat -A POSTROUTING -o tun0 -j MASQUERADE
  4616. ip6tables -A FORWARD -i tun0 -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
  4617. save_firewall_settings
  4618. echo 'configure_firewall_for_cjdns' >> $COMPLETION_FILE
  4619. }
  4620. function configure_firewall_for_dlna {
  4621. if grep -Fxq "configure_firewall_for_dlna" $COMPLETION_FILE; then
  4622. return
  4623. fi
  4624. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  4625. # docker does its own firewalling
  4626. return
  4627. fi
  4628. if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" ]]; then
  4629. return
  4630. fi
  4631. iptables -A INPUT -i eth0 -p udp --dport 1900 -j ACCEPT
  4632. iptables -A INPUT -i eth0 -p tcp --dport 8200 -j ACCEPT
  4633. save_firewall_settings
  4634. echo 'configure_firewall_for_dlna' >> $COMPLETION_FILE
  4635. }
  4636. function configure_firewall_for_dns {
  4637. if grep -Fxq "configure_firewall_for_dns" $COMPLETION_FILE; then
  4638. return
  4639. fi
  4640. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  4641. # docker does its own firewalling
  4642. return
  4643. fi
  4644. iptables -A INPUT -i eth0 -p udp -m udp --dport 1024:65535 --sport 53 -j ACCEPT
  4645. save_firewall_settings
  4646. echo 'configure_firewall_for_dns' >> $COMPLETION_FILE
  4647. }
  4648. function configure_firewall_for_xmpp {
  4649. if [ ! -d /etc/prosody ]; then
  4650. return
  4651. fi
  4652. if grep -Fxq "configure_firewall_for_xmpp" $COMPLETION_FILE; then
  4653. return
  4654. fi
  4655. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  4656. # docker does its own firewalling
  4657. return
  4658. fi
  4659. iptables -A INPUT -i eth0 -p tcp --dport 5222:5223 -j ACCEPT
  4660. iptables -A INPUT -i eth0 -p tcp --dport 5269 -j ACCEPT
  4661. iptables -A INPUT -i eth0 -p tcp --dport 5280:5281 -j ACCEPT
  4662. save_firewall_settings
  4663. echo 'configure_firewall_for_xmpp' >> $COMPLETION_FILE
  4664. }
  4665. function configure_firewall_for_irc {
  4666. if [ ! -d /etc/ngircd ]; then
  4667. return
  4668. fi
  4669. if grep -Fxq "configure_firewall_for_irc" $COMPLETION_FILE; then
  4670. return
  4671. fi
  4672. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  4673. # docker does its own firewalling
  4674. return
  4675. fi
  4676. iptables -A INPUT -i eth0 -p tcp --dport 6697 -j ACCEPT
  4677. iptables -I INPUT -i eth0 -p tcp --dport 1024:65535 --sport 6697 -j ACCEPT
  4678. iptables -A INPUT -i eth0 -p tcp --dport 9999 -j ACCEPT
  4679. save_firewall_settings
  4680. echo 'configure_firewall_for_irc' >> $COMPLETION_FILE
  4681. }
  4682. function configure_firewall_for_ftp {
  4683. if grep -Fxq "configure_firewall_for_ftp" $COMPLETION_FILE; then
  4684. return
  4685. fi
  4686. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  4687. # docker does its own firewalling
  4688. return
  4689. fi
  4690. iptables -I INPUT -i eth0 -p tcp --dport 1024:65535 --sport 20:21 -j ACCEPT
  4691. save_firewall_settings
  4692. echo 'configure_firewall_for_ftp' >> $COMPLETION_FILE
  4693. }
  4694. function configure_firewall_for_web_access {
  4695. if grep -Fxq "configure_firewall_for_web_access" $COMPLETION_FILE; then
  4696. return
  4697. fi
  4698. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  4699. # docker does its own firewalling
  4700. return
  4701. fi
  4702. iptables -A INPUT -i eth0 -p tcp --dport 32768:61000 --sport 80 -j ACCEPT
  4703. iptables -A INPUT -i eth0 -p tcp --dport 32768:61000 --sport 443 -j ACCEPT
  4704. save_firewall_settings
  4705. echo 'configure_firewall_for_web_access' >> $COMPLETION_FILE
  4706. }
  4707. function configure_firewall_for_web_server {
  4708. if grep -Fxq "configure_firewall_for_web_server" $COMPLETION_FILE; then
  4709. return
  4710. fi
  4711. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  4712. # docker does its own firewalling
  4713. return
  4714. fi
  4715. iptables -A INPUT -i eth0 -p tcp --dport 80 -j ACCEPT
  4716. iptables -A INPUT -i eth0 -p tcp --dport 443 -j ACCEPT
  4717. save_firewall_settings
  4718. echo 'configure_firewall_for_web_server' >> $COMPLETION_FILE
  4719. }
  4720. function configure_firewall_for_ssh {
  4721. if grep -Fxq "configure_firewall_for_ssh" $COMPLETION_FILE; then
  4722. return
  4723. fi
  4724. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  4725. # docker does its own firewalling
  4726. return
  4727. fi
  4728. iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT
  4729. iptables -A INPUT -i eth0 -p tcp --dport $SSH_PORT -j ACCEPT
  4730. save_firewall_settings
  4731. echo 'configure_firewall_for_ssh' >> $COMPLETION_FILE
  4732. }
  4733. function configure_firewall_for_git {
  4734. if grep -Fxq "configure_firewall_for_git" $COMPLETION_FILE; then
  4735. return
  4736. fi
  4737. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  4738. # docker does its own firewalling
  4739. return
  4740. fi
  4741. iptables -A INPUT -i eth0 -p tcp --dport 9418 -j ACCEPT
  4742. save_firewall_settings
  4743. echo 'configure_firewall_for_git' >> $COMPLETION_FILE
  4744. }
  4745. function configure_firewall_for_email {
  4746. if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" ]]; then
  4747. return
  4748. fi
  4749. if grep -Fxq "configure_firewall_for_email" $COMPLETION_FILE; then
  4750. return
  4751. fi
  4752. if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
  4753. # docker does its own firewalling
  4754. return
  4755. fi
  4756. iptables -A INPUT -i eth0 -p tcp --dport 25 -j ACCEPT
  4757. iptables -A INPUT -i eth0 -p tcp --dport 587 -j ACCEPT
  4758. iptables -A INPUT -i eth0 -p tcp --dport 465 -j ACCEPT
  4759. iptables -A INPUT -i eth0 -p tcp --dport 993 -j ACCEPT
  4760. save_firewall_settings
  4761. echo 'configure_firewall_for_email' >> $COMPLETION_FILE
  4762. }
  4763. function configure_internet_protocol {
  4764. if grep -Fxq "configure_internet_protocol" $COMPLETION_FILE; then
  4765. return
  4766. fi
  4767. sed -i "s/#net.ipv4.tcp_syncookies=1/net.ipv4.tcp_syncookies=1/g" /etc/sysctl.conf
  4768. sed -i "s/#net.ipv4.conf.all.accept_redirects = 0/net.ipv4.conf.all.accept_redirects = 0/g" /etc/sysctl.conf
  4769. sed -i "s/#net.ipv6.conf.all.accept_redirects = 0/net.ipv6.conf.all.accept_redirects = 0/g" /etc/sysctl.conf
  4770. sed -i "s/#net.ipv4.conf.all.send_redirects = 0/net.ipv4.conf.all.send_redirects = 0/g" /etc/sysctl.conf
  4771. sed -i "s/#net.ipv4.conf.all.accept_source_route = 0/net.ipv4.conf.all.accept_source_route = 0/g" /etc/sysctl.conf
  4772. sed -i "s/#net.ipv6.conf.all.accept_source_route = 0/net.ipv6.conf.all.accept_source_route = 0/g" /etc/sysctl.conf
  4773. sed -i "s/#net.ipv4.conf.default.rp_filter=1/net.ipv4.conf.default.rp_filter=1/g" /etc/sysctl.conf
  4774. sed -i "s/#net.ipv4.conf.all.rp_filter=1/net.ipv4.conf.all.rp_filter=1/g" /etc/sysctl.conf
  4775. sed -i "s/#net.ipv4.ip_forward=1/net.ipv4.ip_forward=0/g" /etc/sysctl.conf
  4776. sed -i "s/#net.ipv6.conf.all.forwarding=1/net.ipv6.conf.all.forwarding=0/g" /etc/sysctl.conf
  4777. echo '# ignore pings' >> /etc/sysctl.conf
  4778. echo 'net.ipv4.icmp_echo_ignore_all = 1' >> /etc/sysctl.conf
  4779. echo 'net.ipv6.icmp_echo_ignore_all = 1' >> /etc/sysctl.conf
  4780. echo '# disable ipv6' >> /etc/sysctl.conf
  4781. echo 'net.ipv6.conf.all.disable_ipv6 = 1' >> /etc/sysctl.conf
  4782. echo 'net.ipv4.tcp_synack_retries = 2' >> /etc/sysctl.conf
  4783. echo 'net.ipv4.tcp_syn_retries = 1' >> /etc/sysctl.conf
  4784. echo '# keepalive' >> /etc/sysctl.conf
  4785. echo 'net.ipv4.tcp_keepalive_probes = 9' >> /etc/sysctl.conf
  4786. echo 'net.ipv4.tcp_keepalive_intvl = 75' >> /etc/sysctl.conf
  4787. echo 'net.ipv4.tcp_keepalive_time = 7200' >> /etc/sysctl.conf
  4788. echo 'configure_internet_protocol' >> $COMPLETION_FILE
  4789. }
  4790. function configure_email {
  4791. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" ]]; then
  4792. return
  4793. fi
  4794. if grep -Fxq "configure_email" $COMPLETION_FILE; then
  4795. return
  4796. fi
  4797. apt-get -y remove postfix
  4798. apt-get -y install exim4 sasl2-bin swaks libnet-ssleay-perl procmail
  4799. if [ ! -d /etc/exim4 ]; then
  4800. echo "ERROR: Exim does not appear to have installed. $CHECK_MESSAGE"
  4801. exit 48
  4802. fi
  4803. # configure for Maildir format
  4804. sed -i 's/MAIL_DIR/#MAIL_DIR/g' /etc/login.defs
  4805. sed -i 's|#MAIL_FILE.*|MAIL_FILE Maildir/|g' /etc/login.defs
  4806. if ! grep -q "export MAIL" /etc/profile; then
  4807. echo 'export MAIL=~/Maildir' >> /etc/profile
  4808. fi
  4809. sed -i 's|pam_mail.so standard|pam_mail.so dir=~/Maildir standard|g' /etc/pam.d/login
  4810. sed -i 's|pam_mail.so standard noenv|pam_mail.so dir=~/Maildir standard|g' /etc/pam.d/sshd
  4811. sed -i 's|pam_mail.so nopen|pam_mail.so dir=~/Maildir nopen|g' /etc/pam.d/su
  4812. echo 'dc_eximconfig_configtype="internet"' > /etc/exim4/update-exim4.conf.conf
  4813. echo "dc_other_hostnames='$DEFAULT_DOMAIN_NAME'" >> /etc/exim4/update-exim4.conf.conf
  4814. echo "dc_local_interfaces=''" >> /etc/exim4/update-exim4.conf.conf
  4815. echo "dc_readhost=''" >> /etc/exim4/update-exim4.conf.conf
  4816. echo "dc_relay_domains=''" >> /etc/exim4/update-exim4.conf.conf
  4817. echo "dc_minimaldns='false'" >> /etc/exim4/update-exim4.conf.conf
  4818. RELAY_NETS=$(echo $LOCAL_NETWORK_STATIC_IP_ADDRESS | awk -F '.' '{print $1 "." $2 "." $3 ".0/24"}')
  4819. echo "dc_relay_nets='$RELAY_NETS'" >> /etc/exim4/update-exim4.conf.conf
  4820. echo "dc_smarthost=''" >> /etc/exim4/update-exim4.conf.conf
  4821. echo "CFILEMODE='644'" >> /etc/exim4/update-exim4.conf.conf
  4822. echo "dc_use_split_config='false'" >> /etc/exim4/update-exim4.conf.conf
  4823. echo "dc_hide_mailname=''" >> /etc/exim4/update-exim4.conf.conf
  4824. echo "dc_mailname_in_oh='true'" >> /etc/exim4/update-exim4.conf.conf
  4825. echo "dc_localdelivery='maildir_home'" >> /etc/exim4/update-exim4.conf.conf
  4826. update-exim4.conf
  4827. sed -i "s/START=no/START=yes/g" /etc/default/saslauthd
  4828. /etc/init.d/saslauthd start
  4829. # make a tls certificate for email
  4830. if [ ! -f /etc/ssl/certs/exim.dhparam ]; then
  4831. freedombone-addcert -h exim
  4832. check_certificates exim
  4833. fi
  4834. cp /etc/ssl/private/exim.key /etc/exim4
  4835. cp /etc/ssl/certs/exim.crt /etc/exim4
  4836. cp /etc/ssl/certs/exim.dhparam /etc/exim4
  4837. chown root:Debian-exim /etc/exim4/exim.key /etc/exim4/exim.crt /etc/exim4/exim.dhparam
  4838. chmod 640 /etc/exim4/exim.key /etc/exim4/exim.crt /etc/exim4/exim.dhparam
  4839. sed -i '/login_saslauthd_server/,/.endif/ s/# *//' /etc/exim4/exim4.conf.template
  4840. sed -i "/.ifdef MAIN_HARDCODE_PRIMARY_HOSTNAME/i\MAIN_HARDCODE_PRIMARY_HOSTNAME = $DEFAULT_DOMAIN_NAME\nMAIN_TLS_ENABLE = true" /etc/exim4/exim4.conf.template
  4841. sed -i "s|SMTPLISTENEROPTIONS=''|SMTPLISTENEROPTIONS='-oX 465:25:587 -oP /var/run/exim4/exim.pid'|g" /etc/default/exim4
  4842. if ! grep -q "tls_on_connect_ports=465" /etc/exim4/exim4.conf.template; then
  4843. sed -i '/SSL configuration for exim/i\tls_on_connect_ports=465' /etc/exim4/exim4.conf.template
  4844. fi
  4845. adduser $MY_USERNAME sasl
  4846. addgroup Debian-exim sasl
  4847. /etc/init.d/exim4 restart
  4848. if [ ! -d /etc/skel/Maildir ]; then
  4849. mkdir -m 700 /etc/skel/Maildir
  4850. mkdir -m 700 /etc/skel/Maildir/Sent
  4851. mkdir -m 700 /etc/skel/Maildir/Sent/tmp
  4852. mkdir -m 700 /etc/skel/Maildir/Sent/cur
  4853. mkdir -m 700 /etc/skel/Maildir/Sent/new
  4854. mkdir -m 700 /etc/skel/Maildir/.learn-spam
  4855. mkdir -m 700 /etc/skel/Maildir/.learn-spam/cur
  4856. mkdir -m 700 /etc/skel/Maildir/.learn-spam/new
  4857. mkdir -m 700 /etc/skel/Maildir/.learn-spam/tmp
  4858. mkdir -m 700 /etc/skel/Maildir/.learn-ham
  4859. mkdir -m 700 /etc/skel/Maildir/.learn-ham/cur
  4860. mkdir -m 700 /etc/skel/Maildir/.learn-ham/new
  4861. mkdir -m 700 /etc/skel/Maildir/.learn-ham/tmp
  4862. ln -s /etc/skel/Maildir/.learn-spam /etc/skel/Maildir/spam
  4863. ln -s /etc/skel/Maildir/.learn-ham /etc/skel/Maildir/ham
  4864. fi
  4865. if [ ! -d /home/$MY_USERNAME/Maildir ]; then
  4866. mkdir -m 700 /home/$MY_USERNAME/Maildir
  4867. mkdir -m 700 /home/$MY_USERNAME/Maildir/cur
  4868. mkdir -m 700 /home/$MY_USERNAME/Maildir/tmp
  4869. mkdir -m 700 /home/$MY_USERNAME/Maildir/new
  4870. mkdir -m 700 /home/$MY_USERNAME/Maildir/Sent
  4871. mkdir -m 700 /home/$MY_USERNAME/Maildir/Sent/cur
  4872. mkdir -m 700 /home/$MY_USERNAME/Maildir/Sent/tmp
  4873. mkdir -m 700 /home/$MY_USERNAME/Maildir/Sent/new
  4874. mkdir -m 700 /home/$MY_USERNAME/Maildir/.learn-spam
  4875. mkdir -m 700 /home/$MY_USERNAME/Maildir/.learn-spam/cur
  4876. mkdir -m 700 /home/$MY_USERNAME/Maildir/.learn-spam/new
  4877. mkdir -m 700 /home/$MY_USERNAME/Maildir/.learn-spam/tmp
  4878. mkdir -m 700 /home/$MY_USERNAME/Maildir/.learn-ham
  4879. mkdir -m 700 /home/$MY_USERNAME/Maildir/.learn-ham/cur
  4880. mkdir -m 700 /home/$MY_USERNAME/Maildir/.learn-ham/new
  4881. mkdir -m 700 /home/$MY_USERNAME/Maildir/.learn-ham/tmp
  4882. ln -s /home/$MY_USERNAME/Maildir/.learn-spam /home/$MY_USERNAME/Maildir/spam
  4883. ln -s /home/$MY_USERNAME/Maildir/.learn-ham /home/$MY_USERNAME/Maildir/ham
  4884. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Maildir
  4885. fi
  4886. echo 'configure_email' >> $COMPLETION_FILE
  4887. }
  4888. function create_procmail {
  4889. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" ]]; then
  4890. return
  4891. fi
  4892. if grep -Fxq "create_procmail" $COMPLETION_FILE; then
  4893. return
  4894. fi
  4895. if [ ! -f /home/$MY_USERNAME/.procmailrc ]; then
  4896. echo 'MAILDIR=$HOME/Maildir' > /home/$MY_USERNAME/.procmailrc
  4897. echo 'DEFAULT=$MAILDIR/' >> /home/$MY_USERNAME/.procmailrc
  4898. echo 'LOGFILE=$HOME/log/procmail.log' >> /home/$MY_USERNAME/.procmailrc
  4899. echo 'LOGABSTRACT=all' >> /home/$MY_USERNAME/.procmailrc
  4900. fi
  4901. echo 'create_procmail' >> $COMPLETION_FILE
  4902. }
  4903. function spam_filtering {
  4904. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" ]]; then
  4905. return
  4906. fi
  4907. if grep -Fxq "spam_filtering" $COMPLETION_FILE; then
  4908. return
  4909. fi
  4910. apt-get -y install exim4-daemon-heavy
  4911. apt-get -y install spamassassin
  4912. sa-update -v
  4913. sed -i 's/ENABLED=0/ENABLED=1/g' /etc/default/spamassassin
  4914. sed -i 's/# spamd_address = 127.0.0.1 783/spamd_address = 127.0.0.1 783/g' /etc/exim4/exim4.conf.template
  4915. # This configuration is based on https://wiki.debian.org/DebianSpamAssassin
  4916. sed -i 's/local_parts = postmaster/local_parts = postmaster:abuse/g' /etc/exim4/conf.d/acl/30_exim4-config_check_rcpt
  4917. sed -i '/domains = +local_domains : +relay_to_domains/a\ set acl_m0 = rfcnames' /etc/exim4/conf.d/acl/30_exim4-config_check_rcpt
  4918. sed -i 's/accept/accept condition = ${if eq{$acl_m0}{rfcnames} {1}{0}}/g' /etc/exim4/conf.d/acl/40_exim4-config_check_data
  4919. echo 'warn message = X-Spam-Score: $spam_score ($spam_bar)' >> /etc/exim4/conf.d/acl/40_exim4-config_check_data
  4920. echo ' spam = nobody:true' >> /etc/exim4/conf.d/acl/40_exim4-config_check_data
  4921. echo 'warn message = X-Spam-Flag: YES' >> /etc/exim4/conf.d/acl/40_exim4-config_check_data
  4922. echo ' spam = nobody' >> /etc/exim4/conf.d/acl/40_exim4-config_check_data
  4923. echo 'warn message = X-Spam-Report: $spam_report' >> /etc/exim4/conf.d/acl/40_exim4-config_check_data
  4924. echo ' spam = nobody' >> /etc/exim4/conf.d/acl/40_exim4-config_check_data
  4925. echo '# reject spam at high scores (> 12)' >> /etc/exim4/conf.d/acl/40_exim4-config_check_data
  4926. echo 'deny message = This message scored $spam_score spam points.' >> /etc/exim4/conf.d/acl/40_exim4-config_check_data
  4927. echo ' spam = nobody:true' >> /etc/exim4/conf.d/acl/40_exim4-config_check_data
  4928. echo ' condition = ${if >{$spam_score_int}{120}{1}{0}}' >> /etc/exim4/conf.d/acl/40_exim4-config_check_data
  4929. # procmail configuration
  4930. echo '# get spamassassin to check emails' >> /home/$MY_USERNAME/.procmailrc
  4931. echo ':0fw: .spamassassin.lock' >> /home/$MY_USERNAME/.procmailrc
  4932. echo ' * < 256000' >> /home/$MY_USERNAME/.procmailrc
  4933. echo '| spamc' >> /home/$MY_USERNAME/.procmailrc
  4934. echo '# strong spam are discarded' >> /home/$MY_USERNAME/.procmailrc
  4935. echo ':0' >> /home/$MY_USERNAME/.procmailrc
  4936. echo ' * ^X-Spam-Level: \*\*\*\*\*\*' >> /home/$MY_USERNAME/.procmailrc
  4937. echo '/dev/null' >> /home/$MY_USERNAME/.procmailrc
  4938. echo '# weak spam are kept just in case - clear this out every now and then' >> /home/$MY_USERNAME/.procmailrc
  4939. echo ':0' >> /home/$MY_USERNAME/.procmailrc
  4940. echo ' * ^X-Spam-Level: \*\*\*\*\*' >> /home/$MY_USERNAME/.procmailrc
  4941. echo '.0-spam/' >> /home/$MY_USERNAME/.procmailrc
  4942. echo '# otherwise, marginal spam goes here for revision' >> /home/$MY_USERNAME/.procmailrc
  4943. echo ':0' >> /home/$MY_USERNAME/.procmailrc
  4944. echo ' * ^X-Spam-Level: \*\*' >> /home/$MY_USERNAME/.procmailrc
  4945. echo '.spam/' >> /home/$MY_USERNAME/.procmailrc
  4946. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.procmailrc
  4947. # filtering scripts
  4948. echo '#!/bin/bash' > /usr/bin/filterspam
  4949. echo 'USERNAME=$1' >> /usr/bin/filterspam
  4950. echo 'MAILDIR=/home/$USERNAME/Maildir/.learn-spam' >> /usr/bin/filterspam
  4951. echo 'if [ ! -d "$MAILDIR" ]; then' >> /usr/bin/filterspam
  4952. echo ' exit' >> /usr/bin/filterspam
  4953. echo 'fi' >> /usr/bin/filterspam
  4954. echo 'for f in `ls $MAILDIR/cur`' >> /usr/bin/filterspam
  4955. echo 'do' >> /usr/bin/filterspam
  4956. echo ' spamc -L spam < "$MAILDIR/cur/$f" > /dev/null' >> /usr/bin/filterspam
  4957. echo ' rm "$MAILDIR/cur/$f"' >> /usr/bin/filterspam
  4958. echo 'done' >> /usr/bin/filterspam
  4959. echo 'for f in `ls $MAILDIR/new`' >> /usr/bin/filterspam
  4960. echo 'do' >> /usr/bin/filterspam
  4961. echo ' spamc -L spam < "$MAILDIR/new/$f" > /dev/null' >> /usr/bin/filterspam
  4962. echo ' rm "$MAILDIR/new/$f"' >> /usr/bin/filterspam
  4963. echo 'done' >> /usr/bin/filterspam
  4964. echo '#!/bin/bash' > /usr/bin/filterham
  4965. echo 'USERNAME=$1' >> /usr/bin/filterham
  4966. echo 'MAILDIR=/home/$USERNAME/Maildir/.learn-ham' >> /usr/bin/filterham
  4967. echo 'if [ ! -d "$MAILDIR" ]; then' >> /usr/bin/filterham
  4968. echo ' exit' >> /usr/bin/filterham
  4969. echo 'fi' >> /usr/bin/filterham
  4970. echo 'for f in `ls $MAILDIR/cur`' >> /usr/bin/filterham
  4971. echo 'do' >> /usr/bin/filterham
  4972. echo ' spamc -L ham < "$MAILDIR/cur/$f" > /dev/null' >> /usr/bin/filterham
  4973. echo ' rm "$MAILDIR/cur/$f"' >> /usr/bin/filterham
  4974. echo 'done' >> /usr/bin/filterham
  4975. echo 'for f in `ls $MAILDIR/new`' >> /usr/bin/filterham
  4976. echo 'do' >> /usr/bin/filterham
  4977. echo ' spamc -L ham < "$MAILDIR/new/$f" > /dev/null' >> /usr/bin/filterham
  4978. echo ' rm "$MAILDIR/new/$f"' >> /usr/bin/filterham
  4979. echo 'done' >> /usr/bin/filterham
  4980. if ! grep -q "filterspam" /etc/crontab; then
  4981. echo "*/3 * * * * root /usr/bin/timeout 120 /usr/bin/filterspam $MY_USERNAME" >> /etc/crontab
  4982. fi
  4983. if ! grep -q "filterham" /etc/crontab; then
  4984. echo "*/3 * * * * root /usr/bin/timeout 120 /usr/bin/filterham $MY_USERNAME" >> /etc/crontab
  4985. fi
  4986. chmod 655 /usr/bin/filterspam /usr/bin/filterham
  4987. sed -i 's/# use_bayes 1/use_bayes 1/g' /etc/mail/spamassassin/local.cf
  4988. sed -i 's/# bayes_auto_learn 1/bayes_auto_learn 1/g' /etc/mail/spamassassin/local.cf
  4989. # user preferences
  4990. if [ ! -d /home/$MY_USERNAME/.spamassassin ]; then
  4991. mkdir /home/$MY_USERNAME/.spamassassin
  4992. echo '# How many points before a mail is considered spam.' > /home/$MY_USERNAME/.spamassassin/user_prefs
  4993. echo '# required_score 5' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  4994. echo '' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  4995. echo '# Whitelist and blacklist addresses are now file-glob-style patterns, so' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  4996. echo '# "friend@somewhere.com", "*@isp.com", or "*.domain.net" will all work.' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  4997. echo '# whitelist_from someone@somewhere.com' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  4998. echo '' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  4999. echo '# Add your own customised scores for some tests below. The default scores are' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5000. echo '# read from the installed spamassassin rules files, but you can override them' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5001. echo '# here. To see the list of tests and their default scores, go to' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5002. echo '# http://spamassassin.apache.org/tests.html .' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5003. echo '#' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5004. echo '# score SYMBOLIC_TEST_NAME n.nn' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5005. echo '' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5006. echo '# Speakers of Asian languages, like Chinese, Japanese and Korean, will almost' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5007. echo '# definitely want to uncomment the following lines. They will switch off some' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5008. echo '# rules that detect 8-bit characters, which commonly trigger on mails using CJK' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5009. echo '# character sets, or that assume a western-style charset is in use. ' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5010. echo '# ' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5011. echo '# score HTML_COMMENT_8BITS 0' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5012. echo '# score UPPERCASE_25_50 0' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5013. echo '# score UPPERCASE_50_75 0' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5014. echo '# score UPPERCASE_75_100 0' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5015. echo '# score OBSCURED_EMAIL 0' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5016. echo '' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5017. echo '# Speakers of any language that uses non-English, accented characters may wish' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5018. echo '# to uncomment the following lines. They turn off rules that fire on' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5019. echo '# misformatted messages generated by common mail apps in contravention of the' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5020. echo '# email RFCs.' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5021. echo '' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5022. echo '# score SUBJ_ILLEGAL_CHARS 0' >> /home/$MY_USERNAME/.spamassassin/user_prefs
  5023. fi
  5024. # this must be accessible by root
  5025. chown -R $MY_USERNAME:root /home/$MY_USERNAME/.spamassassin
  5026. service spamassassin restart
  5027. service exim4 restart
  5028. service cron restart
  5029. echo 'spam_filtering' >> $COMPLETION_FILE
  5030. }
  5031. function configure_imap {
  5032. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" ]]; then
  5033. return
  5034. fi
  5035. if grep -Fxq "configure_imap" $COMPLETION_FILE; then
  5036. return
  5037. fi
  5038. apt-get -y install dovecot-common dovecot-imapd
  5039. if [ ! -d /etc/dovecot ]; then
  5040. echo "ERROR: Dovecot does not appear to have installed. $CHECK_MESSAGE"
  5041. exit 48
  5042. fi
  5043. if [ ! -f /etc/ssl/certs/dovecot.dhparam ]; then
  5044. freedombone-addcert -h dovecot
  5045. check_certificates dovecot
  5046. fi
  5047. chown root:dovecot /etc/ssl/certs/dovecot.*
  5048. chown root:dovecot /etc/ssl/private/dovecot.*
  5049. sed -i 's|#ssl =.*|ssl = required|g' /etc/dovecot/conf.d/10-ssl.conf
  5050. sed -i 's|ssl = no|ssl = required|g' /etc/dovecot/conf.d/10-ssl.conf
  5051. sed -i 's|ssl = yes|ssl = required|g' /etc/dovecot/conf.d/10-ssl.conf
  5052. sed -i 's|#ssl_cert =.*|ssl_cert = </etc/ssl/certs/dovecot.crt|g' /etc/dovecot/conf.d/10-ssl.conf
  5053. sed -i 's|ssl_cert =.*|ssl_cert = </etc/ssl/certs/dovecot.crt|g' /etc/dovecot/conf.d/10-ssl.conf
  5054. sed -i 's|#ssl_key =.*|ssl_key = </etc/ssl/private/dovecot.key|g' /etc/dovecot/conf.d/10-ssl.conf
  5055. sed -i 's|ssl_key =.*|ssl_key = </etc/ssl/private/dovecot.key|g' /etc/dovecot/conf.d/10-ssl.conf
  5056. sed -i 's|#ssl_dh_parameters_length.*|ssl_dh_parameters_length = 1024|g' /etc/dovecot/conf.d/10-ssl.conf
  5057. sed -i 's/#ssl_prefer_server_ciphers.*/ssl_prefer_server_ciphers = yes/g' /etc/dovecot/conf.d/10-ssl.conf
  5058. sed -i "s|#ssl_protocols =.*|ssl_protocols = '$SSL_PROTOCOLS'|g" /etc/dovecot/conf.d/10-ssl.conf
  5059. sed -i "s|ssl_protocols =.*|ssl_protocols = '$SSL_PROTOCOLS'|g" /etc/dovecot/conf.d/10-ssl.conf
  5060. echo "ssl_cipher_list = '$SSL_CIPHERS'" >> /etc/dovecot/conf.d/10-ssl.conf
  5061. sed -i 's/#process_limit =.*/process_limit = 5/g' /etc/dovecot/conf.d/10-master.conf
  5062. sed -i 's/#default_client_limit.*/default_client_limit = 5/g' /etc/dovecot/conf.d/10-master.conf
  5063. sed -i 's/#auth_verbose.*/auth_verbose = yes/g' /etc/dovecot/conf.d/10-logging.conf
  5064. sed -i 's/#listen =.*/listen = */g' /etc/dovecot/dovecot.conf
  5065. sed -i 's/#disable_plaintext_auth =.*/disable_plaintext_auth = no/g' /etc/dovecot/conf.d/10-auth.conf
  5066. sed -i 's/auth_mechanisms =.*/auth_mechanisms = plain login/g' /etc/dovecot/conf.d/10-auth.conf
  5067. sed -i 's|mail_location =.*|mail_location = maildir:~/Maildir:LAYOUT=fs|g' /etc/dovecot/conf.d/10-mail.conf
  5068. service dovecot restart
  5069. echo 'configure_imap' >> $COMPLETION_FILE
  5070. }
  5071. function configure_gpg {
  5072. if grep -Fxq "configure_gpg" $COMPLETION_FILE; then
  5073. return
  5074. fi
  5075. apt-get -y install gnupg
  5076. # if gpg keys directory was previously imported from usb
  5077. if [[ $GPG_KEYS_IMPORTED == "yes" && -d /home/$MY_USERNAME/.gnupg ]]; then
  5078. sed -i "s|keyserver hkp://keys.gnupg.net|keyserver $GPG_KEYSERVER|g" /home/$MY_USERNAME/.gnupg/gpg.conf
  5079. MY_GPG_PUBLIC_KEY_ID=$(su -c "gpg --list-keys $MY_EMAIL_ADDRESS | grep 'pub '" - $MY_USERNAME | awk -F ' ' '{print $2}' | awk -F '/' '{print $2}')
  5080. echo 'configure_gpg' >> $COMPLETION_FILE
  5081. return
  5082. fi
  5083. if [ ! -d /home/$MY_USERNAME/.gnupg ]; then
  5084. mkdir /home/$MY_USERNAME/.gnupg
  5085. echo 'keyserver hkp://keys.gnupg.net' >> /home/$MY_USERNAME/.gnupg/gpg.conf
  5086. echo 'keyserver-options auto-key-retrieve' >> /home/$MY_USERNAME/.gnupg/gpg.conf
  5087. fi
  5088. sed -i "s|keyserver hkp://keys.gnupg.net|keyserver $GPG_KEYSERVER|g" /home/$MY_USERNAME/.gnupg/gpg.conf
  5089. if ! grep -q "# default preferences" /home/$MY_USERNAME/.gnupg/gpg.conf; then
  5090. echo '' >> /home/$MY_USERNAME/.gnupg/gpg.conf
  5091. echo '# default preferences' >> /home/$MY_USERNAME/.gnupg/gpg.conf
  5092. echo 'personal-digest-preferences SHA256' >> /home/$MY_USERNAME/.gnupg/gpg.conf
  5093. echo 'cert-digest-algo SHA256' >> /home/$MY_USERNAME/.gnupg/gpg.conf
  5094. echo 'default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed' >> /home/$MY_USERNAME/.gnupg/gpg.conf
  5095. fi
  5096. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.gnupg
  5097. if [[ $MY_GPG_PUBLIC_KEY && $MY_GPG_PRIVATE_KEY ]]; then
  5098. # use your existing GPG keys which were exported
  5099. if [ ! -f $MY_GPG_PUBLIC_KEY ]; then
  5100. echo "GPG public key file $MY_GPG_PUBLIC_KEY was not found"
  5101. exit 5
  5102. fi
  5103. if [ ! -f $MY_GPG_PRIVATE_KEY ]; then
  5104. echo "GPG private key file $MY_GPG_PRIVATE_KEY was not found"
  5105. exit 6
  5106. fi
  5107. su -c "gpg --import $MY_GPG_PUBLIC_KEY" - $MY_USERNAME
  5108. su -c "gpg --allow-secret-key-import --import $MY_GPG_PRIVATE_KEY" - $MY_USERNAME
  5109. # for security ensure that the private key file doesn't linger around
  5110. shred -zu $MY_GPG_PRIVATE_KEY
  5111. MY_GPG_PUBLIC_KEY_ID=$(su -c "gpg --list-keys $MY_EMAIL_ADDRESS | grep 'pub '" - $MY_USERNAME | awk -F ' ' '{print $2}' | awk -F '/' '{print $2}')
  5112. else
  5113. # Generate a GPG key
  5114. echo 'Key-Type: 1' > /home/$MY_USERNAME/gpg-genkey.conf
  5115. echo 'Key-Length: 4096' >> /home/$MY_USERNAME/gpg-genkey.conf
  5116. echo 'Subkey-Type: 1' >> /home/$MY_USERNAME/gpg-genkey.conf
  5117. echo 'Subkey-Length: 4096' >> /home/$MY_USERNAME/gpg-genkey.conf
  5118. echo "Name-Real: $MY_NAME" >> /home/$MY_USERNAME/gpg-genkey.conf
  5119. echo "Name-Email: $MY_EMAIL_ADDRESS" >> /home/$MY_USERNAME/gpg-genkey.conf
  5120. echo 'Expire-Date: 0' >> /home/$MY_USERNAME/gpg-genkey.conf
  5121. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/gpg-genkey.conf
  5122. su -c "gpg --batch --gen-key /home/$MY_USERNAME/gpg-genkey.conf" - $MY_USERNAME
  5123. shred -zu /home/$MY_USERNAME/gpg-genkey.conf
  5124. MY_GPG_PUBLIC_KEY_ID=$(su -c "gpg --list-keys $MY_EMAIL_ADDRESS | grep 'pub '" - $MY_USERNAME | awk -F ' ' '{print $2}' | awk -F '/' '{print $2}')
  5125. MY_GPG_PUBLIC_KEY=/tmp/public_key.gpg
  5126. su -c "gpg --output $MY_GPG_PUBLIC_KEY --armor --export $MY_GPG_PUBLIC_KEY_ID" - $MY_USERNAME
  5127. if grep -q "configure_email" $COMPLETION_FILE; then
  5128. if ! grep -q "Change your GPG password" /home/$MY_USERNAME/README; then
  5129. echo '' >> /home/$MY_USERNAME/README
  5130. echo '' >> /home/$MY_USERNAME/README
  5131. echo 'Change your GPG password' >> /home/$MY_USERNAME/README
  5132. echo '========================' >> /home/$MY_USERNAME/README
  5133. echo "It's very important to add a password to your GPG key so that" >> /home/$MY_USERNAME/README
  5134. echo "if anyone does get access to your email they still won't be able" >> /home/$MY_USERNAME/README
  5135. echo 'to read them without knowning the GPG password.' >> /home/$MY_USERNAME/README
  5136. echo 'You can change the it with:' >> /home/$MY_USERNAME/README
  5137. echo '' >> /home/$MY_USERNAME/README
  5138. echo " gpg --edit-key $MY_GPG_PUBLIC_KEY" >> /home/$MY_USERNAME/README
  5139. echo ' passwd' >> /home/$MY_USERNAME/README
  5140. echo ' save' >> /home/$MY_USERNAME/README
  5141. echo ' quit' >> /home/$MY_USERNAME/README
  5142. fi
  5143. if ! grep -q "Publish your GPG public key" /home/$MY_USERNAME/README; then
  5144. echo '' >> /home/$MY_USERNAME/README
  5145. echo '' >> /home/$MY_USERNAME/README
  5146. echo 'Publish your GPG public key' >> /home/$MY_USERNAME/README
  5147. echo '===========================' >> /home/$MY_USERNAME/README
  5148. echo 'So that others can send emails to you securely you should' >> /home/$MY_USERNAME/README
  5149. echo 'publish your GPG public key with the command:' >> /home/$MY_USERNAME/README
  5150. echo '' >> /home/$MY_USERNAME/README
  5151. echo " gpg --send-keys $MY_GPG_PUBLIC_KEY" >> /home/$MY_USERNAME/README
  5152. fi
  5153. fi
  5154. fi
  5155. echo 'configure_gpg' >> $COMPLETION_FILE
  5156. }
  5157. function encrypt_incoming_email {
  5158. # encrypts incoming mail using your GPG public key
  5159. # so even if an attacker gains access to the data at rest they still need
  5160. # to know your GPG key password to be able to read anything
  5161. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" ]]; then
  5162. return
  5163. fi
  5164. if grep -Fxq "encrypt_incoming_email" $COMPLETION_FILE; then
  5165. return
  5166. fi
  5167. if [[ $GPG_ENCRYPT_STORED_EMAIL != "yes" ]]; then
  5168. return
  5169. fi
  5170. if [ ! -f /usr/bin/gpgit.pl ]; then
  5171. apt-get -y install git libmail-gnupg-perl
  5172. cd $INSTALL_DIR
  5173. git clone https://github.com/mikecardwell/gpgit
  5174. cd gpgit
  5175. cp gpgit.pl /usr/bin
  5176. fi
  5177. # add a procmail rule
  5178. if ! grep -q "/usr/bin/gpgit.pl" /home/$MY_USERNAME/.procmailrc; then
  5179. echo '' >> /home/$MY_USERNAME/.procmailrc
  5180. echo ':0 f' >> /home/$MY_USERNAME/.procmailrc
  5181. echo "| /usr/bin/gpgit.pl $MY_EMAIL_ADDRESS" >> /home/$MY_USERNAME/.procmailrc
  5182. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.procmailrc
  5183. fi
  5184. echo 'encrypt_incoming_email' >> $COMPLETION_FILE
  5185. }
  5186. function encrypt_outgoing_email {
  5187. # encrypts outgoing mail using your GPG public key
  5188. # so even if an attacker gains access to the data at rest they still need
  5189. # to know your GPG key password to be able to read sent mail
  5190. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" ]]; then
  5191. return
  5192. fi
  5193. if grep -Fxq "encrypt_outgoing_email" $COMPLETION_FILE; then
  5194. return
  5195. fi
  5196. if [[ $GPG_ENCRYPT_STORED_EMAIL != "yes" ]]; then
  5197. return
  5198. fi
  5199. if [ ! -d /home/$MY_USERNAME/.gnupg ]; then
  5200. return
  5201. fi
  5202. if [ ! -f /home/$MY_USERNAME/.muttrc ]; then
  5203. return
  5204. fi
  5205. # obtain your public key ID
  5206. if [ ! $MY_GPG_PUBLIC_KEY_ID ]; then
  5207. MY_GPG_PUBLIC_KEY_ID=$(su -c "gpg --list-keys $MY_EMAIL_ADDRESS | grep 'pub '" - $MY_USERNAME | awk -F ' ' '{print $2}' | awk -F '/' '{print $2}')
  5208. if [ ! $MY_GPG_PUBLIC_KEY_ID ]; then
  5209. return
  5210. fi
  5211. fi
  5212. if ! grep -q "pgp_encrypt_only_command" /home/$MY_USERNAME/.muttrc; then
  5213. echo '' >> /home/$MY_USERNAME/.muttrc
  5214. echo '# Encrypt items in the Sent folder' >> /home/$MY_USERNAME/.muttrc
  5215. echo "set pgp_encrypt_only_command=\"/usr/lib/mutt/pgpewrap gpg --batch --quiet --no-verbose --output - --encrypt --textmode --armor --always-trust --encrypt-to 0x$MY_GPG_PUBLIC_KEY_ID -- -r %r -- %f\"" >> /home/$MY_USERNAME/.muttrc
  5216. else
  5217. sed -i "s|set pgp_encrypt_only_command.*|set pgp_encrypt_only_command=\"/usr/lib/mutt/pgpewrap gpg --batch --quiet --no-verbose --output - --encrypt --textmode --armor --always-trust --encrypt-to 0x$MY_GPG_PUBLIC_KEY_ID -- -r %r -- %f\"|g" /home/$MY_USERNAME/.muttrc
  5218. fi
  5219. if ! grep -q "pgp_encrypt_sign_command" /home/$MY_USERNAME/.muttrc; then
  5220. echo "set pgp_encrypt_sign_command=\"/usr/lib/mutt/pgpewrap gpg %?p?--passphrase-fd 0? --batch --quiet --no-verbose --textmode --output - --encrypt --sign %?a?-u %a? --armor --always-trust --encrypt-to 0x$MY_GPG_PUBLIC_KEY_ID -- -r %r -- %f\"" >> /home/$MY_USERNAME/.muttrc
  5221. else
  5222. sed -i "s|set pgp_encrypt_sign_command.*|set pgp_encrypt_sign_command=\"/usr/lib/mutt/pgpewrap gpg %?p?--passphrase-fd 0? --batch --quiet --no-verbose --textmode --output - --encrypt --sign %?a?-u %a? --armor --always-trust --encrypt-to 0x$MY_GPG_PUBLIC_KEY_ID -- -r %r -- %f\"|g" /home/$MY_USERNAME/.muttrc
  5223. fi
  5224. echo 'encrypt_outgoing_email' >> $COMPLETION_FILE
  5225. }
  5226. function encrypt_all_email {
  5227. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" ]]; then
  5228. return
  5229. fi
  5230. if grep -Fxq "encrypt_all_email" $COMPLETION_FILE; then
  5231. return
  5232. fi
  5233. if [[ $GPG_ENCRYPT_STORED_EMAIL != "yes" ]]; then
  5234. return
  5235. fi
  5236. echo '#!/bin/bash' > /usr/bin/encmaildir
  5237. echo '#' >> /usr/bin/encmaildir
  5238. echo '# GPLv2' >> /usr/bin/encmaildir
  5239. echo '# GPG Encrypt a Maildir using gpgit.pl' >> /usr/bin/encmaildir
  5240. echo '# Oct 03, 2014' >> /usr/bin/encmaildir
  5241. echo '#' >> /usr/bin/encmaildir
  5242. echo '# Change log:' >> /usr/bin/encmaildir
  5243. echo '# Sep 03, 2011' >> /usr/bin/encmaildir
  5244. echo '# - Temporary file is based on file_owner to avoid' >> /usr/bin/encmaildir
  5245. echo '# issues with permission differences.' >> /usr/bin/encmaildir
  5246. echo '# - Temporary file is removed after run.' >> /usr/bin/encmaildir
  5247. echo '# - Optional arguments passed to "find".' >> /usr/bin/encmaildir
  5248. echo '# - Full paths to binaries.' >> /usr/bin/encmaildir
  5249. echo '# - Removed unneccessary need of "cat", "grep", etc.' >> /usr/bin/encmaildir
  5250. echo '# Sep 04, 2011' >> /usr/bin/encmaildir
  5251. echo '# - Dont remove Dovecot index/uid unless messages' >> /usr/bin/encmaildir
  5252. echo '# have been GPG encrypted.' >> /usr/bin/encmaildir
  5253. echo '# - Adjust file tests to not just use -e' >> /usr/bin/encmaildir
  5254. echo '# - Quote all file operations' >> /usr/bin/encmaildir
  5255. echo '# Sep 05, 2011' >> /usr/bin/encmaildir
  5256. echo '# - Dont arbitrarily copy files, only overwrite the file' >> /usr/bin/encmaildir
  5257. echo '# in ~/Maildir if it differs after calling gpgencmail.pl' >> /usr/bin/encmaildir
  5258. echo '# - Only rebuild the index if we have modified ~/Maildir' >> /usr/bin/encmaildir
  5259. echo '# Oct 03, 2014' >> /usr/bin/encmaildir
  5260. echo '# - Minor modifications for use with Freedombone' >> /usr/bin/encmaildir
  5261. echo '' >> /usr/bin/encmaildir
  5262. echo 'if [[ -z "$1" || -z "$2" || -z "$3" ]]; then' >> /usr/bin/encmaildir
  5263. echo ' echo "Usage is ./encmaildir.sh {optional arguments passed to find for messages such as -mtime 0}"' >> /usr/bin/encmaildir
  5264. echo ' exit 0' >> /usr/bin/encmaildir
  5265. echo 'fi' >> /usr/bin/encmaildir
  5266. echo '' >> /usr/bin/encmaildir
  5267. echo 'MAIL_DIR=$1' >> /usr/bin/encmaildir
  5268. echo 'EMAIL_ADDRESS=$2' >> /usr/bin/encmaildir
  5269. echo 'USERNAME=$3' >> /usr/bin/encmaildir
  5270. echo 'if [ ! -d "$MAIL_DIR" ]; then' >> /usr/bin/encmaildir
  5271. echo " MAIL_DIR='/home/$MY_USERNAME/Maildir'" >> /usr/bin/encmaildir
  5272. echo 'fi' >> /usr/bin/encmaildir
  5273. echo '' >> /usr/bin/encmaildir
  5274. echo 'if [ ! $EMAIL_ADDRESS ]; then' >> /usr/bin/encmaildir
  5275. echo " EMAIL_ADDRESS='$MY_EMAIL_ADDRESS'" >> /usr/bin/encmaildir
  5276. echo 'fi' >> /usr/bin/encmaildir
  5277. echo '' >> /usr/bin/encmaildir
  5278. echo 'if [ ! $USERNAME ]; then' >> /usr/bin/encmaildir
  5279. echo " USERNAME='$MY_USERNAME'" >> /usr/bin/encmaildir
  5280. echo 'fi' >> /usr/bin/encmaildir
  5281. echo '' >> /usr/bin/encmaildir
  5282. echo '# Does this key exist?' >> /usr/bin/encmaildir
  5283. echo 'gpg --list-keys "$EMAIL_ADDRESS" > /dev/null 2>&1' >> /usr/bin/encmaildir
  5284. echo 'if [ $? -gt 0 ]; then' >> /usr/bin/encmaildir
  5285. echo ' echo "A GPG key for $EMAIL_ADDRESS could not be found!"' >> /usr/bin/encmaildir
  5286. echo ' exit 0' >> /usr/bin/encmaildir
  5287. echo 'fi' >> /usr/bin/encmaildir
  5288. echo '' >> /usr/bin/encmaildir
  5289. echo '# Find all files in the Maildir specified.' >> /usr/bin/encmaildir
  5290. echo 'echo "Calling find"' >> /usr/bin/encmaildir
  5291. echo -n 'find "$MAIL_DIR" -type f -regex ' >> /usr/bin/encmaildir
  5292. echo -n "'.*/\(cur\|new\)/.*' " >> /usr/bin/encmaildir
  5293. echo '$4|while read line; do' >> /usr/bin/encmaildir
  5294. echo ' gpgit.pl --encrypt-mode prefer-inline "$EMAIL_ADDRESS" "/tmp/msg_$USERNAME"' >> /usr/bin/encmaildir
  5295. echo '' >> /usr/bin/encmaildir
  5296. echo ' # Check to see if there are differences between the existing' >> /usr/bin/encmaildir
  5297. echo ' # Maildir file and what was created by gpgit.pl' >> /usr/bin/encmaildir
  5298. echo ' diff -qa "$line" "/tmp/msg_$USERNAME" > /dev/null 2>&1;' >> /usr/bin/encmaildir
  5299. echo ' if [ $? -gt 0 ]; then' >> /usr/bin/encmaildir
  5300. echo ' # Preserve timestamps, set ownership.' >> /usr/bin/encmaildir
  5301. echo ' chown $USERNAME:$USERNAME "/tmp/msg_$USERNAME"' >> /usr/bin/encmaildir
  5302. echo ' chmod 600 "/tmp/msg_$USERNAME"' >> /usr/bin/encmaildir
  5303. echo ' touch "/tmp/msg_$USERNAME" --reference="$line"' >> /usr/bin/encmaildir
  5304. echo '' >> /usr/bin/encmaildir
  5305. echo ' # Unlink the original Maildir message' >> /usr/bin/encmaildir
  5306. echo ' unlink "$line"' >> /usr/bin/encmaildir
  5307. echo '' >> /usr/bin/encmaildir
  5308. echo ' # Strip message sizes, retain experimental flags' >> /usr/bin/encmaildir
  5309. echo ' # and status flags, and copy the file over.' >> /usr/bin/encmaildir
  5310. echo ' STRIPSIZES=$(/bin/echo "$line"|/bin/sed -e "s/W=[[:digit:]]*//" -e "s/S=[[:digit:]]*//" -e "s/,,//" -e "s/,:2/:2/")' >> /usr/bin/encmaildir
  5311. echo ' cp -av "/tmp/msg_$USERNAME" "$STRIPSIZES"' >> /usr/bin/encmaildir
  5312. echo '' >> /usr/bin/encmaildir
  5313. echo ' #Indexes must be rebuilt, weve modified Maildir.' >> /usr/bin/encmaildir
  5314. echo ' touch "/tmp/rebuild_index_$USERNAME"' >> /usr/bin/encmaildir
  5315. echo ' else' >> /usr/bin/encmaildir
  5316. echo ' echo "Not copying, no differences between /tmp/msg_$USERNAME and $line"' >> /usr/bin/encmaildir
  5317. echo ' fi' >> /usr/bin/encmaildir
  5318. echo '' >> /usr/bin/encmaildir
  5319. echo ' # Remove the temporary file' >> /usr/bin/encmaildir
  5320. echo ' unlink "/tmp/msg_$USERNAME"' >> /usr/bin/encmaildir
  5321. echo 'done' >> /usr/bin/encmaildir
  5322. echo '' >> /usr/bin/encmaildir
  5323. echo '# Remove Dovecot index and uids for regeneration.' >> /usr/bin/encmaildir
  5324. echo 'if [ -f "/tmp/rebuild_index_$USERNAME" ]; then' >> /usr/bin/encmaildir
  5325. echo ' echo "Removing Dovecot indexes and uids"' >> /usr/bin/encmaildir
  5326. echo -n ' find "$MAIL_DIR" -type f -regex ' >> /usr/bin/encmaildir
  5327. echo "'.*\(dovecot-\|dovecot\.\|\.uidvalidity\).*' -delete" >> /usr/bin/encmaildir
  5328. echo '' >> /usr/bin/encmaildir
  5329. echo ' # Remove the temporary file' >> /usr/bin/encmaildir
  5330. echo ' unlink "/tmp/rebuild_index_$USERNAME"' >> /usr/bin/encmaildir
  5331. echo 'else' >> /usr/bin/encmaildir
  5332. echo ' echo "No messages found needing GPG encryption, not' >> /usr/bin/encmaildir
  5333. echo ' echo "removing Dovecot indexes and UIDs."' >> /usr/bin/encmaildir
  5334. echo 'fi' >> /usr/bin/encmaildir
  5335. echo 'exit 0' >> /usr/bin/encmaildir
  5336. chmod +x /usr/bin/encmaildir
  5337. if [ ! /home/$MY_USERNAME/README ]; then
  5338. touch /home/$MY_USERNAME/README
  5339. fi
  5340. if ! grep -q "If you have imported legacy email" /home/$MY_USERNAME/README; then
  5341. echo '' >> /home/$MY_USERNAME/README
  5342. echo '' >> /home/$MY_USERNAME/README
  5343. echo 'Encrypting legacy email' >> /home/$MY_USERNAME/README
  5344. echo '=======================' >> /home/$MY_USERNAME/README
  5345. echo 'If you have imported legacy email which is not encrypted' >> /home/$MY_USERNAME/README
  5346. echo 'then it can be encrypted with the command:' >> /home/$MY_USERNAME/README
  5347. echo '' >> /home/$MY_USERNAME/README
  5348. echo ' encmaildir' >> /home/$MY_USERNAME/README
  5349. echo '' >> /home/$MY_USERNAME/README
  5350. echo 'But be warned that depending upon how much email you have' >> /home/$MY_USERNAME/README
  5351. echo 'this could take a seriously LONG time on the Beaglebone' >> /home/$MY_USERNAME/README
  5352. echo 'and may be better done on a faster machine.' >> /home/$MY_USERNAME/README
  5353. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  5354. fi
  5355. echo 'encrypt_all_email' >> $COMPLETION_FILE
  5356. }
  5357. function email_client {
  5358. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" ]]; then
  5359. return
  5360. fi
  5361. if grep -Fxq "email_client" $COMPLETION_FILE; then
  5362. return
  5363. fi
  5364. apt-get -y install mutt-patched lynx abook
  5365. if [ ! -f /etc/Muttrc ]; then
  5366. echo "ERROR: Mutt does not appear to have installed. $CHECK_MESSAGE"
  5367. exit 49
  5368. fi
  5369. if [ ! -d /home/$MY_USERNAME/.mutt ]; then
  5370. mkdir /home/$MY_USERNAME/.mutt
  5371. fi
  5372. echo "text/html; lynx -dump -width=78 -nolist %s | sed ‘s/^ //’; copiousoutput; needsterminal; nametemplate=%s.html" > /home/$MY_USERNAME/.mutt/mailcap
  5373. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.mutt
  5374. echo 'set mbox_type=Maildir' >> /etc/Muttrc
  5375. echo 'set folder="~/Maildir"' >> /etc/Muttrc
  5376. echo 'set mask="!^\\.[^.]"' >> /etc/Muttrc
  5377. echo 'set mbox="~/Maildir"' >> /etc/Muttrc
  5378. echo 'set record="+Sent"' >> /etc/Muttrc
  5379. echo 'set postponed="+Drafts"' >> /etc/Muttrc
  5380. echo 'set trash="+Trash"' >> /etc/Muttrc
  5381. echo 'set spoolfile="~/Maildir"' >> /etc/Muttrc
  5382. echo 'auto_view text/x-vcard text/html text/enriched' >> /etc/Muttrc
  5383. echo 'set editor="emacs"' >> /etc/Muttrc
  5384. echo 'set header_cache="+.cache"' >> /etc/Muttrc
  5385. echo '' >> /etc/Muttrc
  5386. echo 'macro index S "<tag-prefix><save-message>=.learn-spam<enter>" "move to learn-spam"' >> /etc/Muttrc
  5387. echo 'macro pager S "<save-message>=.learn-spam<enter>" "move to learn-spam"' >> /etc/Muttrc
  5388. echo 'macro index H "<tag-prefix><copy-message>=.learn-ham<enter>" "copy to learn-ham"' >> /etc/Muttrc
  5389. echo 'macro pager H "<copy-message>=.learn-ham<enter>" "copy to learn-ham"' >> /etc/Muttrc
  5390. echo '' >> /etc/Muttrc
  5391. echo '# set up the sidebar' >> /etc/Muttrc
  5392. echo 'set sidebar_width=22' >> /etc/Muttrc
  5393. echo 'set sidebar_visible=yes' >> /etc/Muttrc
  5394. echo "set sidebar_delim='|'" >> /etc/Muttrc
  5395. echo 'set sidebar_sort=yes' >> /etc/Muttrc
  5396. echo '' >> /etc/Muttrc
  5397. echo 'set rfc2047_parameters' >> /etc/Muttrc
  5398. echo '' >> /etc/Muttrc
  5399. echo '# Show inbox and sent items' >> /etc/Muttrc
  5400. echo 'mailboxes = =Sent' >> /etc/Muttrc
  5401. echo '' >> /etc/Muttrc
  5402. echo '# Alter these colours as needed for maximum bling' >> /etc/Muttrc
  5403. echo 'color sidebar_new yellow default' >> /etc/Muttrc
  5404. echo 'color normal white default' >> /etc/Muttrc
  5405. echo 'color hdrdefault brightcyan default' >> /etc/Muttrc
  5406. echo 'color signature green default' >> /etc/Muttrc
  5407. echo 'color attachment brightyellow default' >> /etc/Muttrc
  5408. echo 'color quoted green default' >> /etc/Muttrc
  5409. echo 'color quoted1 white default' >> /etc/Muttrc
  5410. echo 'color tilde blue default' >> /etc/Muttrc
  5411. echo '' >> /etc/Muttrc
  5412. echo '# ctrl-n, ctrl-p to select next, prev folder' >> /etc/Muttrc
  5413. echo '# ctrl-o to open selected folder' >> /etc/Muttrc
  5414. echo 'bind index \Cp sidebar-prev' >> /etc/Muttrc
  5415. echo 'bind index \Cn sidebar-next' >> /etc/Muttrc
  5416. echo 'bind index \Co sidebar-open' >> /etc/Muttrc
  5417. echo 'bind pager \Cp sidebar-prev' >> /etc/Muttrc
  5418. echo 'bind pager \Cn sidebar-next' >> /etc/Muttrc
  5419. echo 'bind pager \Co sidebar-open' >> /etc/Muttrc
  5420. echo '' >> /etc/Muttrc
  5421. echo '# ctrl-b toggles sidebar visibility' >> /etc/Muttrc
  5422. echo "macro index,pager \Cb '<enter-command>toggle sidebar_visible<enter><redraw-screen>' 'toggle sidebar'" >> /etc/Muttrc
  5423. echo '' >> /etc/Muttrc
  5424. echo '# esc-m Mark new messages as read' >> /etc/Muttrc
  5425. echo 'macro index <esc>m "T~N<enter>;WNT~O<enter>;WO\CT~T<enter>" "mark all messages read"' >> /etc/Muttrc
  5426. echo '' >> /etc/Muttrc
  5427. echo '# Collapsing threads' >> /etc/Muttrc
  5428. echo 'macro index [ "<collapse-thread>" "collapse/uncollapse thread"' >> /etc/Muttrc
  5429. echo 'macro index ] "<collapse-all>" "collapse/uncollapse all threads"' >> /etc/Muttrc
  5430. echo '' >> /etc/Muttrc
  5431. echo '# threads containing new messages' >> /etc/Muttrc
  5432. echo 'uncolor index "~(~N)"' >> /etc/Muttrc
  5433. echo 'color index brightblue default "~(~N)"' >> /etc/Muttrc
  5434. echo '' >> /etc/Muttrc
  5435. echo '# new messages themselves' >> /etc/Muttrc
  5436. echo 'uncolor index "~N"' >> /etc/Muttrc
  5437. echo 'color index brightyellow default "~N"' >> /etc/Muttrc
  5438. echo '' >> /etc/Muttrc
  5439. echo '# GPG/PGP integration' >> /etc/Muttrc
  5440. echo '# this set the number of seconds to keep in memory the passphrase used to encrypt/sign' >> /etc/Muttrc
  5441. echo 'set pgp_timeout=1800' >> /etc/Muttrc
  5442. echo '' >> /etc/Muttrc
  5443. echo '# automatically sign and encrypt with PGP/MIME' >> /etc/Muttrc
  5444. echo 'set pgp_autosign # autosign all outgoing mails' >> /etc/Muttrc
  5445. echo 'set pgp_autoencrypt # Try to encrypt automatically' >> /etc/Muttrc
  5446. echo 'set pgp_replyencrypt # autocrypt replies to crypted' >> /etc/Muttrc
  5447. echo 'set pgp_replysign # autosign replies to signed' >> /etc/Muttrc
  5448. echo 'set pgp_auto_decode=yes # decode attachments' >> /etc/Muttrc
  5449. echo 'set fcc_clear=no # Keep encrypted copy of sent encrypted mail' >> /etc/Muttrc
  5450. echo 'unset smime_is_default' >> /etc/Muttrc
  5451. echo '' >> /etc/Muttrc
  5452. echo 'set alias_file=~/.mutt-alias' >> /etc/Muttrc
  5453. echo 'source ~/.mutt-alias' >> /etc/Muttrc
  5454. echo 'set query_command= "abook --mutt-query \"%s\""' >> /etc/Muttrc
  5455. echo 'macro index,pager A "<pipe-message>abook --add-email-quiet<return>" "add the sender address to abook"' >> /etc/Muttrc
  5456. cp -f /etc/Muttrc /home/$MY_USERNAME/.muttrc
  5457. touch /home/$MY_USERNAME/.mutt-alias
  5458. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.muttrc
  5459. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.mutt-alias
  5460. echo 'email_client' >> $COMPLETION_FILE
  5461. }
  5462. function email_archiving {
  5463. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" ]]; then
  5464. return
  5465. fi
  5466. if grep -Fxq "email_archiving" $COMPLETION_FILE; then
  5467. return
  5468. fi
  5469. if [ ! -d $INSTALL_DIR ]; then
  5470. mkdir $INSTALL_DIR
  5471. fi
  5472. cd $INSTALL_DIR
  5473. git clone https://github.com/bashrc/cleanup-maildir
  5474. cp $INSTALL_DIR/cleanup-maildir/cleanup-maildir /usr/bin
  5475. echo '#!/bin/bash' > /etc/cron.daily/archivemail
  5476. echo "MUTTRC=/home/$MY_USERNAME/.muttrc" >> /etc/cron.daily/archivemail
  5477. echo "python /usr/bin/cleanup-maildir --archive-folder='archive' --maildir-root='/home/$MY_USERNAME/Maildir' archive ''" >> /etc/cron.daily/archivemail
  5478. echo "chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Maildir/archive-*" >> /etc/cron.daily/archivemail
  5479. echo 'if [ -f $MUTTRC ]; then' >> /etc/cron.daily/archivemail
  5480. echo ' MUTT_MAILBOXES=$(grep "mailboxes =" $MUTTRC)' >> /etc/cron.daily/archivemail
  5481. echo ' BACKUP_DIRECTORY=archive-$(date +"%Y")' >> /etc/cron.daily/archivemail
  5482. echo ' if [[ $MUTT_MAILBOXES != *$BACKUP_DIRECTORY* ]]; then' >> /etc/cron.daily/archivemail
  5483. echo ' sed -i "s|$MUTT_MAILBOXES|$MUTT_MAILBOXES =$BACKUP_DIRECTORY|g" $MUTTRC' >> /etc/cron.daily/archivemail
  5484. echo ' chown $MYUSERNAME:$MYUSERNAME $MUTTRC' >> /etc/cron.daily/archivemail
  5485. echo ' fi' >> /etc/cron.daily/archivemail
  5486. echo 'fi' >> /etc/cron.daily/archivemail
  5487. echo 'exit 0' >> /etc/cron.daily/archivemail
  5488. chmod +x /etc/cron.daily/archivemail
  5489. echo 'email_archiving' >> $COMPLETION_FILE
  5490. }
  5491. # Ensure that the from field is correct when sending email from Mutt
  5492. function email_from_address {
  5493. if grep -Fxq "email_from_address" $COMPLETION_FILE; then
  5494. return
  5495. fi
  5496. if [ ! -f /home/$MY_USERNAME/.muttrc ]; then
  5497. return
  5498. fi
  5499. if grep -q "set from=" /home/$MY_USERNAME/.muttrc; then
  5500. sed -i "s|set from=.*|set from='$MY_NAME <$MY_EMAIL_ADDRESS>'|g" /home/$MY_USERNAME/.muttrc
  5501. else
  5502. echo "set from='$MY_NAME <$MY_EMAIL_ADDRESS>'" >> /home/$MY_USERNAME/.muttrc
  5503. fi
  5504. echo 'email_from_address' >> $COMPLETION_FILE
  5505. }
  5506. function create_public_mailing_list {
  5507. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" ]]; then
  5508. return
  5509. fi
  5510. if grep -Fxq "create_public_mailing_list" $COMPLETION_FILE; then
  5511. return
  5512. fi
  5513. if [ ! $PUBLIC_MAILING_LIST ]; then
  5514. return
  5515. fi
  5516. # does the mailing list have a separate domain name?
  5517. if [ ! $PUBLIC_MAILING_LIST_DOMAIN_NAME ]; then
  5518. PUBLIC_MAILING_LIST_DOMAIN_NAME=$DEFAULT_DOMAIN_NAME
  5519. fi
  5520. PUBLIC_MAILING_LIST_USER="mlmmj"
  5521. apt-get -y install mlmmj
  5522. adduser --system $PUBLIC_MAILING_LIST_USER
  5523. addgroup $PUBLIC_MAILING_LIST_USER
  5524. adduser $PUBLIC_MAILING_LIST_USER $PUBLIC_MAILING_LIST_USER
  5525. echo ''
  5526. echo "Creating the $PUBLIC_MAILING_LIST mailing list"
  5527. echo ''
  5528. # create the list
  5529. mlmmj-make-ml -a -L "$PUBLIC_MAILING_LIST" -c $PUBLIC_MAILING_LIST_USER
  5530. echo 'SYSTEM_ALIASES_PIPE_TRANSPORT = address_pipe' > /etc/exim4/conf.d/main/000_localmacros
  5531. echo "SYSTEM_ALIASES_USER = $PUBLIC_MAILING_LIST_USER" >> /etc/exim4/conf.d/main/000_localmacros
  5532. echo "SYSTEM_ALIASES_GROUP = $PUBLIC_MAILING_LIST_USER" >> /etc/exim4/conf.d/main/000_localmacros
  5533. # router
  5534. echo 'mlmmj_router:' > /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  5535. echo ' debug_print = "R: mlmmj_router for $local_part@$domain"' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  5536. echo ' driver = accept' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  5537. echo ' domains = +mlmmj_domains' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  5538. echo ' #require_files = MLMMJ_HOME/${lc::$local_part}' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  5539. echo ' # Use this instead, if you dont want to give Exim rx rights to mlmmj spool.' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  5540. echo ' # Exim will then spawn a new process running under the UID of "mlmmj".' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  5541. echo ' require_files = mlmmj:MLMMJ_HOME/${lc::$local_part}' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  5542. echo ' local_part_suffix = +*' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  5543. echo ' local_part_suffix_optional' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  5544. echo ' headers_remove = Delivered-To' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  5545. echo ' headers_add = Delivered-To: $local_part$local_part_suffix@$domain' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  5546. echo ' transport = mlmmj_transport' >> /etc/exim4/conf.d/router/750_exim4-config_mlmmj
  5547. # transport
  5548. echo 'mlmmj_transport:' > /etc/exim4/conf.d/transport/40_exim4-config_mlmmj
  5549. echo ' debug_print = "T: mlmmj_transport for $local_part@$domain"' >> /etc/exim4/conf.d/transport/40_exim4-config_mlmmj
  5550. echo ' driver = pipe' >> /etc/exim4/conf.d/transport/40_exim4-config_mlmmj
  5551. echo ' return_path_add' >> /etc/exim4/conf.d/transport/40_exim4-config_mlmmj
  5552. echo ' user = mlmmj' >> /etc/exim4/conf.d/transport/40_exim4-config_mlmmj
  5553. echo ' group = mlmmj' >> /etc/exim4/conf.d/transport/40_exim4-config_mlmmj
  5554. echo ' home_directory = MLMMJ_HOME' >> /etc/exim4/conf.d/transport/40_exim4-config_mlmmj
  5555. echo ' current_directory = MLMMJ_HOME' >> /etc/exim4/conf.d/transport/40_exim4-config_mlmmj
  5556. echo ' command = /usr/bin/mlmmj-receive -F -L MLMMJ_HOME/${lc:$local_part}' >> /etc/exim4/conf.d/transport/40_exim4-config_mlmmj
  5557. if ! grep -q "MLMMJ_HOME=/var/spool/mlmmj" /etc/exim4/conf.d/main/01_exim4-config_listmacrosdefs; then
  5558. sed -i '/MAIN CONFIGURATION SETTINGS/a\MLMMJ_HOME=/var/spool/mlmmj' /etc/exim4/conf.d/main/01_exim4-config_listmacrosdefs
  5559. fi
  5560. if ! grep -q "domainlist mlmmj_domains =" /etc/exim4/conf.d/main/01_exim4-config_listmacrosdefs; then
  5561. sed -i "/MLMMJ_HOME/a\domainlist mlmmj_domains = $PUBLIC_MAILING_LIST_DOMAIN_NAME" /etc/exim4/conf.d/main/01_exim4-config_listmacrosdefs
  5562. fi
  5563. if ! grep -q "delay_warning_condition =" /etc/exim4/conf.d/main/01_exim4-config_listmacrosdefs; then
  5564. sed -i '/domainlist mlmmj_domains =/a\delay_warning_condition = ${if match_domain{$domain}{+mlmmj_domains}{no}{yes}}' /etc/exim4/conf.d/main/01_exim4-config_listmacrosdefs
  5565. fi
  5566. if ! grep -q ": +mlmmj_domains" /etc/exim4/conf.d/main/01_exim4-config_listmacrosdefs; then
  5567. sed -i 's/domainlist relay_to_domains = MAIN_RELAY_TO_DOMAINS/domainlist relay_to_domains = MAIN_RELAY_TO_DOMAINS : +mlmmj_domains/g' /etc/exim4/conf.d/main/01_exim4-config_listmacrosdefs
  5568. fi
  5569. if ! grep -q "! +mlmmj_domains" /etc/exim4/conf.d/router/200_exim4-config_primary; then
  5570. sed -i 's/domains = ! +local_domains/domains = ! +mlmmj_domains : ! +local_domains/g' /etc/exim4/conf.d/router/200_exim4-config_primary
  5571. fi
  5572. newaliases
  5573. update-exim4.conf.template -r
  5574. update-exim4.conf
  5575. service exim4 restart
  5576. if ! grep -q "$PUBLIC_MAILING_LIST mailing list" /home/$MY_USERNAME/README; then
  5577. echo '' >> /home/$MY_USERNAME/README
  5578. echo '' >> /home/$MY_USERNAME/README
  5579. echo 'Public mailing list' >> /home/$MY_USERNAME/README
  5580. echo '===================' >> /home/$MY_USERNAME/README
  5581. echo "To subscribe to the $PUBLIC_MAILING_LIST mailing list send a" >> /home/$MY_USERNAME/README
  5582. echo "cleartext email to $PUBLIC_MAILING_LIST+subscribe@$DEFAULT_DOMAIN_NAME" >> /home/$MY_USERNAME/README
  5583. fi
  5584. freedombone-addlist -u $MY_USERNAME -l "$PUBLIC_MAILING_LIST" -s "$PUBLIC_MAILING_LIST"
  5585. echo 'create_public_mailing_list' >> $COMPLETION_FILE
  5586. }
  5587. function create_private_mailing_list {
  5588. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" ]]; then
  5589. return
  5590. fi
  5591. # This installation doesn't work, results in ruby errors
  5592. # There is currently no schleuder package for Debian jessie
  5593. if grep -Fxq "create_private_mailing_list" $COMPLETION_FILE; then
  5594. return
  5595. fi
  5596. if [ ! $PRIVATE_MAILING_LIST ]; then
  5597. return
  5598. fi
  5599. if [[ $PRIVATE_MAILING_LIST == $MY_USERNAME ]]; then
  5600. echo 'The name of the private mailing list should not be the'
  5601. echo 'same as your username'
  5602. exit 10
  5603. fi
  5604. if [ ! $MY_GPG_PUBLIC_KEY ]; then
  5605. echo 'To create a private mailing list you need to specify a file'
  5606. echo 'containing your exported GPG key within MY_GPG_PUBLIC_KEY at'
  5607. echo 'the top of the script'
  5608. exit 11
  5609. fi
  5610. apt-get -y install ruby ruby-dev ruby-gpgme libgpgme11-dev libmagic-dev
  5611. gem install schleuder
  5612. schleuder-fix-gem-dependencies
  5613. schleuder-init-setup --gem
  5614. # NOTE: this is version number sensitive and so might need changing
  5615. ln -s /var/lib/gems/2.1.0/gems/schleuder-2.2.4 /var/lib/schleuder
  5616. sed -i 's/#smtp_port: 25/smtp_port: 465/g' /etc/schleuder/schleuder.conf
  5617. sed -i 's/#superadminaddr: root@localhost/superadminaddr: root@localhost' /etc/schleuder/schleuder.conf
  5618. schleuder-newlist $PRIVATE_MAILING_LIST@$DEFAULT_DOMAIN_NAME -realname "$PRIVATE_MAILING_LIST" -adminaddress $MY_EMAIL_ADDRESS -initmember $MY_EMAIL_ADDRESS -initmemberkey $MY_GPG_PUBLIC_KEY -nointeractive
  5619. freedombone-addemail -u $MY_USERNAME -e $PRIVATE_MAILING_LIST@$DEFAULT_DOMAIN_NAME -l $PRIVATE_MAILING_LIST
  5620. echo 'schleuder:' > /etc/exim4/conf.d/router/550_exim4-config_schleuder
  5621. echo ' debug_print = "R: schleuder for $local_part@$domain"' >> /etc/exim4/conf.d/router/550_exim4-config_schleuder
  5622. echo ' driver = accept' >> /etc/exim4/conf.d/router/550_exim4-config_schleuder
  5623. echo ' local_part_suffix_optional' >> /etc/exim4/conf.d/router/550_exim4-config_schleuder
  5624. echo ' local_part_suffix = +* : -bounce : -sendkey' >> /etc/exim4/conf.d/router/550_exim4-config_schleuder
  5625. echo ' domains = +local_domains' >> /etc/exim4/conf.d/router/550_exim4-config_schleuder
  5626. echo ' user = schleuder' >> /etc/exim4/conf.d/router/550_exim4-config_schleuder
  5627. echo ' group = schleuder' >> /etc/exim4/conf.d/router/550_exim4-config_schleuder
  5628. echo ' require_files = schleuder:+/var/lib/schleuder/$domain/${local_part}' >> /etc/exim4/conf.d/router/550_exim4-config_schleuder
  5629. echo ' transport = schleuder_transport' >> /etc/exim4/conf.d/router/550_exim4-config_schleuder
  5630. echo 'schleuder_transport:' > /etc/exim4/conf.d/transport/30_exim4-config_schleuder
  5631. echo ' debug_print = "T: schleuder_transport for $local_part@$domain"' >> /etc/exim4/conf.d/transport/30_exim4-config_schleuder
  5632. echo ' driver = pipe' >> /etc/exim4/conf.d/transport/30_exim4-config_schleuder
  5633. echo ' home_directory = "/var/lib/schleuder/$domain/$local_part"' >> /etc/exim4/conf.d/transport/30_exim4-config_schleuder
  5634. echo ' command = "/usr/bin/schleuder $local_part@$domain"' >> /etc/exim4/conf.d/transport/30_exim4-config_schleuder
  5635. chown -R schleuder:schleuder /var/lib/schleuder
  5636. update-exim4.conf.template -r
  5637. update-exim4.conf
  5638. service exim4 restart
  5639. useradd -d /var/schleuderlists -s /bin/false schleuder
  5640. adduser Debian-exim schleuder
  5641. usermod -a -G mail schleuder
  5642. #exim -d -bt $PRIVATE_MAILING_LIST@$DEFAULT_DOMAIN_NAME
  5643. echo 'create_private_mailing_list' >> $COMPLETION_FILE
  5644. }
  5645. function import_email {
  5646. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_NONMAILBOX" ]]; then
  5647. return
  5648. fi
  5649. EMAIL_COMPLETE_MSG=' *** Freedombone mailbox installation is complete ***'
  5650. if grep -Fxq "import_email" $COMPLETION_FILE; then
  5651. if [[ $SYSTEM_TYPE == "$VARIANT_MAILBOX" ]]; then
  5652. create_backup_script
  5653. create_restore_script
  5654. backup_to_friends_servers
  5655. intrusion_detection
  5656. echo ''
  5657. echo "$EMAIL_COMPLETE_MSG"
  5658. if [ -d $USB_MOUNT ]; then
  5659. umount $USB_MOUNT
  5660. rm -rf $USB_MOUNT
  5661. echo ' You can now remove the USB drive'
  5662. fi
  5663. exit 0
  5664. fi
  5665. return
  5666. fi
  5667. if [ $IMPORT_MAILDIR ]; then
  5668. if [ -d $IMPORT_MAILDIR ]; then
  5669. echo 'Transfering email files'
  5670. cp -r $IMPORT_MAILDIR /home/$MY_USERNAME
  5671. chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Maildir
  5672. else
  5673. echo "Email import directory $IMPORT_MAILDIR not found"
  5674. exit 9
  5675. fi
  5676. fi
  5677. echo 'import_email' >> $COMPLETION_FILE
  5678. if [[ $SYSTEM_TYPE == "$VARIANT_MAILBOX" ]]; then
  5679. create_backup_script
  5680. create_restore_script
  5681. backup_to_friends_servers
  5682. intrusion_detection
  5683. # unmount any attached usb drive
  5684. echo ''
  5685. echo "$EMAIL_COMPLETE_MSG"
  5686. echo ''
  5687. if [ -d $USB_MOUNT ]; then
  5688. umount $USB_MOUNT
  5689. rm -rf $USB_MOUNT
  5690. echo ' You can now remove the USB drive'
  5691. fi
  5692. exit 0
  5693. fi
  5694. }
  5695. function install_web_server {
  5696. if [[ $SYSTEM_TYPE == "$VARIANT_CHAT" ]]; then
  5697. return
  5698. fi
  5699. if grep -Fxq "install_web_server" $COMPLETION_FILE; then
  5700. return
  5701. fi
  5702. # remove apache
  5703. apt-get -y remove --purge apache2
  5704. if [ -d /etc/apache2 ]; then
  5705. rm -rf /etc/apache2
  5706. fi
  5707. # install nginx
  5708. apt-get -y install nginx php5-fpm git
  5709. # limit the number of php processes
  5710. sed -i 's/; process.max = 128/process.max = 32/g' /etc/php5/fpm/php-fpm.conf
  5711. sed -i 's/;process_control_timeout = 0/process_control_timeout = 300/g' /etc/php5/fpm/php-fpm.conf
  5712. if ! grep -q "pm.max_children" /etc/php5/fpm/php-fpm.conf; then
  5713. echo 'pm.max_children = 10' >> /etc/php5/fpm/php-fpm.conf
  5714. echo 'pm.start_servers = 2' >> /etc/php5/fpm/php-fpm.conf
  5715. echo 'pm.min_spare_servers = 2' >> /etc/php5/fpm/php-fpm.conf
  5716. echo 'pm.max_spare_servers = 5' >> /etc/php5/fpm/php-fpm.conf
  5717. echo 'pm.max_requests = 50' >> /etc/php5/fpm/php-fpm.conf
  5718. fi
  5719. if [ ! -d /etc/nginx ]; then
  5720. echo "ERROR: nginx does not appear to have installed. $CHECK_MESSAGE"
  5721. exit 51
  5722. fi
  5723. # Nginx settings
  5724. echo 'user www-data;' > /etc/nginx/nginx.conf
  5725. #echo "worker_processes; $CPU_CORES" >> /etc/nginx/nginx.conf
  5726. echo 'pid /run/nginx.pid;' >> /etc/nginx/nginx.conf
  5727. echo '' >> /etc/nginx/nginx.conf
  5728. echo 'events {' >> /etc/nginx/nginx.conf
  5729. echo ' worker_connections 50;' >> /etc/nginx/nginx.conf
  5730. echo ' # multi_accept on;' >> /etc/nginx/nginx.conf
  5731. echo '}' >> /etc/nginx/nginx.conf
  5732. echo '' >> /etc/nginx/nginx.conf
  5733. echo 'http {' >> /etc/nginx/nginx.conf
  5734. echo ' # limit the number of connections per single IP' >> /etc/nginx/nginx.conf
  5735. echo ' limit_conn_zone $binary_remote_addr zone=conn_limit_per_ip:10m;' >> /etc/nginx/nginx.conf
  5736. echo '' >> /etc/nginx/nginx.conf
  5737. echo ' # limit the number of requests for a given session' >> /etc/nginx/nginx.conf
  5738. echo ' # Note that the Owncloud web interface seems to require a rate of around 140r/s' >> /etc/nginx/nginx.conf
  5739. echo ' limit_req_zone $binary_remote_addr zone=req_limit_per_ip:10m rate=140r/s;' >> /etc/nginx/nginx.conf
  5740. echo '' >> /etc/nginx/nginx.conf
  5741. echo ' # if the request body size is more than the buffer size, then the entire (or partial) request body is written into a temporary file' >> /etc/nginx/nginx.conf
  5742. echo ' client_body_buffer_size 128k;' >> /etc/nginx/nginx.conf
  5743. echo '' >> /etc/nginx/nginx.conf
  5744. echo ' # headerbuffer size for the request header from client, its set for testing purpose' >> /etc/nginx/nginx.conf
  5745. echo ' client_header_buffer_size 3m;' >> /etc/nginx/nginx.conf
  5746. echo '' >> /etc/nginx/nginx.conf
  5747. echo ' # maximum number and size of buffers for large headers to read from client request' >> /etc/nginx/nginx.conf
  5748. echo ' large_client_header_buffers 4 256k;' >> /etc/nginx/nginx.conf
  5749. echo '' >> /etc/nginx/nginx.conf
  5750. echo ' # read timeout for the request body from client, its set for testing purpose' >> /etc/nginx/nginx.conf
  5751. echo ' client_body_timeout 3m;' >> /etc/nginx/nginx.conf
  5752. echo '' >> /etc/nginx/nginx.conf
  5753. echo ' # how long to wait for the client to send a request header, its set for testing purpose' >> /etc/nginx/nginx.conf
  5754. echo ' client_header_timeout 3m;' >> /etc/nginx/nginx.conf
  5755. echo '' >> /etc/nginx/nginx.conf
  5756. echo ' ##' >> /etc/nginx/nginx.conf
  5757. echo ' # Basic Settings' >> /etc/nginx/nginx.conf
  5758. echo ' ##' >> /etc/nginx/nginx.conf
  5759. echo '' >> /etc/nginx/nginx.conf
  5760. echo ' sendfile on;' >> /etc/nginx/nginx.conf
  5761. echo ' tcp_nopush on;' >> /etc/nginx/nginx.conf
  5762. echo ' tcp_nodelay on;' >> /etc/nginx/nginx.conf
  5763. echo ' keepalive_timeout 65;' >> /etc/nginx/nginx.conf
  5764. echo ' types_hash_max_size 2048;' >> /etc/nginx/nginx.conf
  5765. echo ' server_tokens off;' >> /etc/nginx/nginx.conf
  5766. echo '' >> /etc/nginx/nginx.conf
  5767. echo ' # server_names_hash_bucket_size 64;' >> /etc/nginx/nginx.conf
  5768. echo ' # server_name_in_redirect off;' >> /etc/nginx/nginx.conf
  5769. echo '' >> /etc/nginx/nginx.conf
  5770. echo ' include /etc/nginx/mime.types;' >> /etc/nginx/nginx.conf
  5771. echo ' default_type application/octet-stream;' >> /etc/nginx/nginx.conf
  5772. echo '' >> /etc/nginx/nginx.conf
  5773. echo ' ##' >> /etc/nginx/nginx.conf
  5774. echo ' # Logging Settings' >> /etc/nginx/nginx.conf
  5775. echo ' ##' >> /etc/nginx/nginx.conf
  5776. echo '' >> /etc/nginx/nginx.conf
  5777. echo ' access_log /var/log/nginx/access.log;' >> /etc/nginx/nginx.conf
  5778. echo ' error_log /var/log/nginx/error.log;' >> /etc/nginx/nginx.conf
  5779. echo '' >> /etc/nginx/nginx.conf
  5780. echo ' ###' >> /etc/nginx/nginx.conf
  5781. echo ' # Gzip Settings' >> /etc/nginx/nginx.conf
  5782. echo ' ##' >> /etc/nginx/nginx.conf
  5783. echo ' gzip on;' >> /etc/nginx/nginx.conf
  5784. echo ' gzip_disable "msie6";' >> /etc/nginx/nginx.conf
  5785. echo '' >> /etc/nginx/nginx.conf
  5786. echo ' # gzip_vary on;' >> /etc/nginx/nginx.conf
  5787. echo ' # gzip_proxied any;' >> /etc/nginx/nginx.conf
  5788. echo ' # gzip_comp_level 6;' >> /etc/nginx/nginx.conf
  5789. echo ' # gzip_buffers 16 8k;' >> /etc/nginx/nginx.conf
  5790. echo ' # gzip_http_version 1.1;' >> /etc/nginx/nginx.conf
  5791. echo ' # gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;' >> /etc/nginx/nginx.conf
  5792. echo '' >> /etc/nginx/nginx.conf
  5793. echo ' ##' >> /etc/nginx/nginx.conf
  5794. echo ' # Virtual Host Configs' >> /etc/nginx/nginx.conf
  5795. echo ' ##' >> /etc/nginx/nginx.conf
  5796. echo '' >> /etc/nginx/nginx.conf
  5797. echo ' include /etc/nginx/conf.d/*.conf;' >> /etc/nginx/nginx.conf
  5798. echo ' include /etc/nginx/sites-enabled/*;' >> /etc/nginx/nginx.conf
  5799. echo '}' >> /etc/nginx/nginx.conf
  5800. # install a script to easily enable and disable nginx virtual hosts
  5801. if [ ! -d $INSTALL_DIR ]; then
  5802. mkdir $INSTALL_DIR
  5803. fi
  5804. cd $INSTALL_DIR
  5805. git clone https://github.com/perusio/nginx_ensite
  5806. cd $INSTALL_DIR/nginx_ensite
  5807. cp nginx_* /usr/sbin
  5808. nginx_dissite default
  5809. echo 'install_web_server' >> $COMPLETION_FILE
  5810. }
  5811. function configure_php {
  5812. sed -i "s/memory_limit = 128M/memory_limit = ${MAX_PHP_MEMORY}M/g" /etc/php5/fpm/php.ini
  5813. sed -i 's/;cgi.fix_pathinfo=1/cgi.fix_pathinfo=0/g' /etc/php5/fpm/php.ini
  5814. sed -i "s/memory_limit = -1/memory_limit = ${MAX_PHP_MEMORY}M/g" /etc/php5/cli/php.ini
  5815. sed -i "s/upload_max_filesize = 2M/upload_max_filesize = 50M/g" /etc/php5/fpm/php.ini
  5816. sed -i "s/post_max_size = 8M/post_max_size = 50M/g" /etc/php5/fpm/php.ini
  5817. }
  5818. function install_mariadb {
  5819. if grep -Fxq "install_mariadb" $COMPLETION_FILE; then
  5820. return
  5821. fi
  5822. apt-get -y install python-software-properties debconf-utils
  5823. apt-get -y install software-properties-common
  5824. apt-get -y update
  5825. get_mariadb_password
  5826. if [ ! $MARIADB_PASSWORD ]; then
  5827. MARIADB_PASSWORD=$(openssl rand -base64 32)
  5828. echo "$MARIADB_PASSWORD" > $DATABASE_PASSWORD_FILE
  5829. chmod 600 $DATABASE_PASSWORD_FILE
  5830. echo '' >> /home/$MY_USERNAME/README
  5831. echo '' >> /home/$MY_USERNAME/README
  5832. echo 'MariaDB / MySql' >> /home/$MY_USERNAME/README
  5833. echo '===============' >> /home/$MY_USERNAME/README
  5834. echo "Your MariaDB password is: $MARIADB_PASSWORD" >> /home/$MY_USERNAME/README
  5835. echo '' >> /home/$MY_USERNAME/README
  5836. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  5837. fi
  5838. debconf-set-selections <<< "mariadb-server mariadb-server/root_password password $MARIADB_PASSWORD"
  5839. debconf-set-selections <<< "mariadb-server mariadb-server/root_password_again password $MARIADB_PASSWORD"
  5840. apt-get -y install mariadb-server
  5841. apt-get -y remove --purge apache*
  5842. if [ -d /etc/apache2 ]; then
  5843. rm -rf /etc/apache2
  5844. echo 'Removed Apache installation after MariaDB install'
  5845. fi
  5846. if [ ! -d /etc/mysql ]; then
  5847. echo "ERROR: mariadb-server does not appear to have installed. $CHECK_MESSAGE"
  5848. exit 54
  5849. fi
  5850. mysqladmin -u root password "$MARIADB_PASSWORD"
  5851. echo 'install_mariadb' >> $COMPLETION_FILE
  5852. }
  5853. function backup_databases_script_header {
  5854. if [ ! -f /usr/bin/backupdatabases ]; then
  5855. # daily
  5856. echo '#!/bin/sh' > /usr/bin/backupdatabases
  5857. echo '' >> /usr/bin/backupdatabases
  5858. echo "EMAIL='$MY_EMAIL_ADDRESS'" >> /usr/bin/backupdatabases
  5859. echo '' >> /usr/bin/backupdatabases
  5860. echo -n 'MYSQL_PASSWORD=$(cat ' >> /usr/bin/backupdatabases
  5861. echo "$DATABASE_PASSWORD_FILE)" >> /usr/bin/backupdatabases
  5862. echo 'umask 0077' >> /usr/bin/backupdatabases
  5863. echo '' >> /usr/bin/backupdatabases
  5864. echo '# exit if we are backing up to friends servers' >> /usr/bin/backupdatabases
  5865. echo "if [ -f $FRIENDS_SERVERS_LIST ]; then" >> /usr/bin/backupdatabases
  5866. echo ' exit 1' >> /usr/bin/backupdatabases
  5867. echo 'fi' >> /usr/bin/backupdatabases
  5868. chmod 600 /usr/bin/backupdatabases
  5869. chmod +x /usr/bin/backupdatabases
  5870. echo '#!/bin/sh' > /etc/cron.daily/backupdatabasesdaily
  5871. echo '/usr/bin/backupdatabases' >> /etc/cron.daily/backupdatabasesdaily
  5872. chmod 600 /etc/cron.daily/backupdatabasesdaily
  5873. chmod +x /etc/cron.daily/backupdatabasesdaily
  5874. # weekly
  5875. echo '#!/bin/sh' > /etc/cron.weekly/backupdatabasesweekly
  5876. echo '' >> /etc/cron.weekly/backupdatabasesweekly
  5877. echo 'umask 0077' >> /etc/cron.weekly/backupdatabasesweekly
  5878. chmod 600 /etc/cron.weekly/backupdatabasesweekly
  5879. chmod +x /etc/cron.weekly/backupdatabasesweekly
  5880. # monthly
  5881. echo '#!/bin/sh' > /etc/cron.monthly/backupdatabasesmonthly
  5882. echo '' >> /etc/cron.monthly/backupdatabasesmonthly
  5883. echo 'umask 0077' >> /etc/cron.monthly/backupdatabasesmonthly
  5884. chmod 600 /etc/cron.monthly/backupdatabasesmonthly
  5885. chmod +x /etc/cron.monthly/backupdatabasesmonthly
  5886. fi
  5887. }
  5888. function repair_databases_script {
  5889. if grep -Fxq "repair_databases_script" $COMPLETION_FILE; then
  5890. return
  5891. fi
  5892. if [ ! -f $DATABASE_PASSWORD_FILE ]; then
  5893. return
  5894. fi
  5895. echo '#!/bin/bash' > /usr/bin/repairdatabase
  5896. echo '' >> /usr/bin/repairdatabase
  5897. echo 'DATABASE=$1' >> /usr/bin/repairdatabase
  5898. echo "EMAIL=$MY_EMAIL_ADDRESS" >> /usr/bin/repairdatabase
  5899. echo '' >> /usr/bin/repairdatabase
  5900. echo -n 'MYSQL_ROOT_PASSWORD=$(cat ' >> /usr/bin/repairdatabase
  5901. echo "$DATABASE_PASSWORD_FILE)" >> /usr/bin/repairdatabase
  5902. echo 'TEMPFILE=/root/repairdatabase_$DATABASE' >> /usr/bin/repairdatabase
  5903. echo '' >> /usr/bin/repairdatabase
  5904. echo 'umask 0077' >> /usr/bin/repairdatabase
  5905. echo '' >> /usr/bin/repairdatabase
  5906. echo '# check the database' >> /usr/bin/repairdatabase
  5907. echo 'mysqlcheck -c -u root --password=$MYSQL_ROOT_PASSWORD $DATABASE > $TEMPFILE' >> /usr/bin/repairdatabase
  5908. echo '' >> /usr/bin/repairdatabase
  5909. echo '# Attempt to repair the database if it contains errors' >> /usr/bin/repairdatabase
  5910. echo 'if grep -q "Error" "$TEMPFILE"; then' >> /usr/bin/repairdatabase
  5911. echo ' mysqlcheck -u root --password=$MYSQL_ROOT_PASSWORD --auto-repair $DATABASE' >> /usr/bin/repairdatabase
  5912. echo 'else' >> /usr/bin/repairdatabase
  5913. echo ' # No errors were found, so exit' >> /usr/bin/repairdatabase
  5914. echo ' rm -f $TEMPFILE' >> /usr/bin/repairdatabase
  5915. echo ' exit 0' >> /usr/bin/repairdatabase
  5916. echo 'fi' >> /usr/bin/repairdatabase
  5917. echo 'rm -f $TEMPFILE' >> /usr/bin/repairdatabase
  5918. echo '' >> /usr/bin/repairdatabase
  5919. echo '# Check the database again' >> /usr/bin/repairdatabase
  5920. echo 'mysqlcheck -c -u root --password=$MYSQL_ROOT_PASSWORD $DATABASE > $TEMPFILE' >> /usr/bin/repairdatabase
  5921. echo '' >> /usr/bin/repairdatabase
  5922. echo '# If it still contains errors then restore from backup' >> /usr/bin/repairdatabase
  5923. echo 'if grep -q "Error" "$TEMPFILE"; then' >> /usr/bin/repairdatabase
  5924. echo ' mysql -u root --password=$MYSQL_ROOT_PASSWORD $DATABASE -o < /var/backups/${DATABASE}_daily.sql' >> /usr/bin/repairdatabase
  5925. echo '' >> /usr/bin/repairdatabase
  5926. echo ' # Send a warning email' >> /usr/bin/repairdatabase
  5927. echo ' echo "$DATABASE database corruption could not be repaired. Restored from backup." | mail -s "Freedombone database maintenance" $EMAIL' >> /usr/bin/repairdatabase
  5928. echo ' rm -f $TEMPFILE' >> /usr/bin/repairdatabase
  5929. echo '' >> /usr/bin/repairdatabase
  5930. echo ' exit 1' >> /usr/bin/repairdatabase
  5931. echo 'fi' >> /usr/bin/repairdatabase
  5932. echo 'rm -f $TEMPFILE' >> /usr/bin/repairdatabase
  5933. echo '' >> /usr/bin/repairdatabase
  5934. echo 'exit 0' >> /usr/bin/repairdatabase
  5935. chmod 600 /usr/bin/repairdatabase
  5936. chmod +x /usr/bin/repairdatabase
  5937. echo '#!/bin/bash' > /etc/cron.hourly/repair
  5938. echo '' >> /etc/cron.hourly/repair
  5939. chmod 600 /etc/cron.hourly/repair
  5940. chmod +x /etc/cron.hourly/repair
  5941. echo 'repair_databases_script' >> $COMPLETION_FILE
  5942. }
  5943. function install_owncloud_music_app {
  5944. if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" ]]; then
  5945. return
  5946. fi
  5947. if grep -Fxq "install_owncloud_music_app" $COMPLETION_FILE; then
  5948. return
  5949. fi
  5950. if ! grep -Fxq "install_owncloud" $COMPLETION_FILE; then
  5951. echo 'Tried to install the Owncloud music app, but Owncloud installation was not found'
  5952. exit 9823
  5953. fi
  5954. cd /usr/share/owncloud/apps
  5955. git clone https://github.com/owncloud/music music
  5956. if grep -q "Music player in Owncloud" /home/$MY_USERNAME/README; then
  5957. echo '' >> /home/$MY_USERNAME/README
  5958. echo '' >> /home/$MY_USERNAME/README
  5959. echo 'Music player in Owncloud' >> /home/$MY_USERNAME/README
  5960. echo '========================' >> /home/$MY_USERNAME/README
  5961. echo 'To enable the music app within ouwncloud log in to the Owncloud' >> /home/$MY_USERNAME/README
  5962. echo 'administrator account then go to Apps on the left hand dropdown' >> /home/$MY_USERNAME/README
  5963. echo 'menu and enable the music app. You can then log out and log back' >> /home/$MY_USERNAME/README
  5964. echo 'in as your Owncloud user and select music from the left hand' >> /home/$MY_USERNAME/README
  5965. echo 'dropdown menu.' >> /home/$MY_USERNAME/README
  5966. fi
  5967. echo 'install_owncloud_music_app' >> $COMPLETION_FILE
  5968. }
  5969. function add_ddns_domain {
  5970. if [ ! $CURRENT_DDNS_DOMAIN ]; then
  5971. echo 'ddns domain not specified'
  5972. exit 5638
  5973. fi
  5974. if [ ! -f /etc/inadyn.conf ]; then
  5975. echo 'Unable to find inadyn configuration file /etc/inadyn.conf'
  5976. exit 5745
  5977. fi
  5978. if ! grep -q "$DDNS_PROVIDER" /etc/inadyn.conf; then
  5979. echo '' >> /etc/inadyn.conf
  5980. echo "system $DDNS_PROVIDER" >> /etc/inadyn.conf
  5981. echo ' ssl' >> /etc/inadyn.conf
  5982. echo " checkip-url $GET_IP_ADDRESS_URL /" >> /etc/inadyn.conf
  5983. if [ $DDNS_USERNAME ]; then
  5984. echo " username $DDNS_USERNAME" >> /etc/inadyn.conf
  5985. fi
  5986. if [ $DDNS_PASSWORD ]; then
  5987. echo " password $DDNS_PASSWORD" >> /etc/inadyn.conf
  5988. fi
  5989. fi
  5990. if ! grep -q "$CURRENT_DDNS_DOMAIN" /etc/inadyn.conf; then
  5991. echo " alias $CURRENT_DDNS_DOMAIN" >> /etc/inadyn.conf
  5992. fi
  5993. chmod 600 /etc/inadyn.conf
  5994. service inadyn restart
  5995. systemctl daemon-reload
  5996. # clear the arguments
  5997. CURRENT_DDNS_DOMAIN=
  5998. }
  5999. function install_owncloud {
  6000. if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" ]]; then
  6001. return
  6002. fi
  6003. OWNCLOUD_COMPLETION_MSG1=" *** Freedombone $SYSTEM_TYPE is now installed ***"
  6004. OWNCLOUD_COMPLETION_MSG2="Open $OWNCLOUD_DOMAIN_NAME in a web browser to complete the setup"
  6005. if grep -Fxq "install_owncloud" $COMPLETION_FILE; then
  6006. if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" ]]; then
  6007. install_owncloud_music_app
  6008. create_backup_script
  6009. create_restore_script
  6010. backup_to_friends_servers
  6011. intrusion_detection
  6012. # unmount any attached usb drive
  6013. if [ -d $USB_MOUNT ]; then
  6014. umount $USB_MOUNT
  6015. rm -rf $USB_MOUNT
  6016. fi
  6017. echo ''
  6018. echo "$OWNCLOUD_COMPLETION_MSG1"
  6019. echo "$OWNCLOUD_COMPLETION_MSG2"
  6020. exit 0
  6021. fi
  6022. return
  6023. fi
  6024. # if this is exclusively a cloud setup
  6025. if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" ]]; then
  6026. if [ ! $DEFAULT_DOMAIN_NAME ]; then
  6027. echo 'No default domain name when installing cloud variant'
  6028. exit 5380
  6029. fi
  6030. fi
  6031. if [ ! $OWNCLOUD_DOMAIN_NAME ]; then
  6032. echo 'No Owncloud domain name was specified'
  6033. exit 3095
  6034. fi
  6035. if [[ $SYSTEM_TYPE != "$VARIANT_CLOUD" ]]; then
  6036. if [[ $SYSTEM_TYPE != "$VARIANT_FULL" ]]; then
  6037. echo "Owncloud install did not recognise the system type $SYSTEM_TYPE"
  6038. exit 6746
  6039. fi
  6040. fi
  6041. apt-get -y install owncloud
  6042. apt-get -y remove --purge apache*
  6043. if [ -d /etc/apache2 ]; then
  6044. rm -rf /etc/apache2
  6045. echo 'Removed Apache installation after Owncloud install'
  6046. fi
  6047. install_mariadb
  6048. get_mariadb_password
  6049. get_mariadb_owncloud_admin_password
  6050. if [ ! $OWNCLOUD_ADMIN_PASSWORD ]; then
  6051. OWNCLOUD_ADMIN_PASSWORD=$(openssl rand -base64 32)
  6052. fi
  6053. if ! grep -q "Owncloud database user" /home/$MY_USERNAME/README; then
  6054. echo '' >> /home/$MY_USERNAME/README
  6055. echo '' >> /home/$MY_USERNAME/README
  6056. echo 'Owncloud' >> /home/$MY_USERNAME/README
  6057. echo '========' >> /home/$MY_USERNAME/README
  6058. echo 'Owncloud database user: owncloudadmin' >> /home/$MY_USERNAME/README
  6059. echo "Owncloud database password: $OWNCLOUD_ADMIN_PASSWORD" >> /home/$MY_USERNAME/README
  6060. echo 'Owncloud database name: owncloud' >> /home/$MY_USERNAME/README
  6061. echo '' >> /home/$MY_USERNAME/README
  6062. echo 'After creating an administrator account then create a user account via' >> /home/$MY_USERNAME/README
  6063. echo "the Users dropdown menu entry. The username should be '$MY_USERNAME'." >> /home/$MY_USERNAME/README
  6064. echo '' >> /home/$MY_USERNAME/README
  6065. echo 'On mobile devices you can download the Owncloud client via F-Droid.' >> /home/$MY_USERNAME/README
  6066. echo '' >> /home/$MY_USERNAME/README
  6067. echo 'To synchronise calendar entries with Android "install CalDAV Sync Adapter"' >> /home/$MY_USERNAME/README
  6068. echo 'using F-Droid then go to settings/accounts and add a CalDav account with' >> /home/$MY_USERNAME/README
  6069. echo "the URL https://$OWNCLOUD_DOMAIN_NAME/remote.php/caldav/principals/$MY_USERNAME" >> /home/$MY_USERNAME/README
  6070. echo 'and the username and password shown above.' >> /home/$MY_USERNAME/README
  6071. fi
  6072. echo "create database owncloud;
  6073. CREATE USER 'owncloudadmin'@'localhost' IDENTIFIED BY '$OWNCLOUD_ADMIN_PASSWORD';
  6074. GRANT ALL PRIVILEGES ON owncloud.* TO 'owncloudadmin'@'localhost';
  6075. quit" > $INSTALL_DIR/batch.sql
  6076. chmod 600 $INSTALL_DIR/batch.sql
  6077. mysql -u root --password="$MARIADB_PASSWORD" < $INSTALL_DIR/batch.sql
  6078. shred -zu $INSTALL_DIR/batch.sql
  6079. if [ ! -d /var/www/$OWNCLOUD_DOMAIN_NAME ]; then
  6080. mkdir /var/www/$OWNCLOUD_DOMAIN_NAME
  6081. fi
  6082. if [ -d /var/www/$OWNCLOUD_DOMAIN_NAME/htdocs ]; then
  6083. rm -rf /var/www/$OWNCLOUD_DOMAIN_NAME/htdocs
  6084. fi
  6085. ln -s /usr/share/owncloud /var/www/$OWNCLOUD_DOMAIN_NAME/htdocs
  6086. echo 'server {' > /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6087. echo ' listen 80;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6088. echo " server_name $OWNCLOUD_DOMAIN_NAME;" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6089. echo ' access_log off;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6090. echo " error_log /var/log/nginx/$OWNCLOUD_DOMAIN_NAME_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6091. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6092. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6093. echo ' rewrite ^ https://$server_name$request_uri? permanent;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6094. echo '}' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6095. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6096. echo 'server {' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6097. echo ' listen 443 ssl;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6098. echo " root /var/www/$OWNCLOUD_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6099. echo " server_name $OWNCLOUD_DOMAIN_NAME;" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6100. echo ' access_log off;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6101. echo " error_log /var/log/nginx/$OWNCLOUD_DOMAIN_NAME_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6102. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6103. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6104. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6105. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6106. echo ' ssl on;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6107. echo " ssl_certificate /etc/ssl/certs/$OWNCLOUD_DOMAIN_NAME.crt;" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6108. echo " ssl_certificate_key /etc/ssl/private/$OWNCLOUD_DOMAIN_NAME.key;" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6109. echo " ssl_dhparam /etc/ssl/certs/$OWNCLOUD_DOMAIN_NAME.dhparam;" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6110. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6111. echo ' ssl_session_timeout 5m;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6112. echo ' ssl_prefer_server_ciphers on;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6113. echo " ssl_protocols $SSL_PROTOCOLS; # not possible to do exclusive" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6114. echo " ssl_ciphers '$SSL_CIPHERS';" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6115. echo ' add_header X-Frame-Options DENY;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6116. echo ' add_header X-Content-Type-Options nosniff;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6117. echo ' add_header Strict-Transport-Security max-age=15768000;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6118. echo ' # if you want to be able to access the site via HTTP' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6119. echo ' # then replace the above with the following:' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6120. echo ' # add_header Strict-Transport-Security "max-age=0;";' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6121. echo " # make sure webfinger and other well known services aren't blocked" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6122. echo ' # by denying dot files and rewrite request to the front controller' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6123. echo ' location ^~ /.well-known/ {' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6124. echo ' allow all;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6125. echo ' rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6126. echo ' }' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6127. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6128. echo ' client_max_body_size 10G; # set max upload size' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6129. echo ' client_body_buffer_size 128k;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6130. echo ' fastcgi_buffers 64 4K;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6131. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6132. echo ' rewrite ^/caldav(.*)$ /remote.php/caldav$1 redirect;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6133. echo ' rewrite ^/carddav(.*)$ /remote.php/carddav$1 redirect;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6134. echo ' rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6135. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6136. echo ' index index.php;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6137. echo ' error_page 403 /core/templates/403.php;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6138. echo ' error_page 404 /core/templates/404.php;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6139. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6140. echo ' location = /robots.txt {' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6141. echo ' allow all;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6142. echo ' log_not_found off;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6143. echo ' access_log off;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6144. echo ' }' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6145. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6146. echo ' location ~ ^/(data|config|\.ht|db_structure\.xml|README) {' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6147. echo ' deny all;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6148. echo ' }' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6149. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6150. echo ' location / {' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6151. echo ' # The following 2 rules are only needed with webfinger' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6152. echo ' rewrite ^/.well-known/host-meta /public.php?service=host-meta last;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6153. echo ' rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json last;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6154. echo ' rewrite ^/.well-known/carddav /remote.php/carddav/ redirect;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6155. echo ' rewrite ^/.well-known/caldav /remote.php/caldav/ redirect;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6156. echo ' rewrite ^(/core/doc/[^\/]+/)$ $1/index.html;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6157. echo ' try_files $uri $uri/ index.php;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6158. echo ' }' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6159. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6160. echo ' location ~ ^(.+?\.php)(/.*)?$ {' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6161. echo ' try_files $1 =404;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6162. echo ' fastcgi_split_path_info ^(.+\.php)(/.+)$;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6163. echo ' fastcgi_pass unix:/var/run/php5-fpm.sock;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6164. echo ' fastcgi_index index.php;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6165. echo ' include fastcgi_params;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6166. echo ' fastcgi_param SCRIPT_FILENAME $document_root$1;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6167. echo ' fastcgi_param PATH_INFO $2;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6168. echo ' fastcgi_param HTTPS on;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6169. echo ' }' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6170. echo '' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6171. echo ' # Optional: set long EXPIRES header on static assets' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6172. echo ' location ~* ^.+\.(jpg|jpeg|gif|bmp|ico|png|css|js|swf)$ {' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6173. echo ' expires 30d;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6174. echo " # Optional: Don't log access to assets" >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6175. echo ' access_log off;' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6176. echo ' }' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6177. echo '}' >> /etc/nginx/sites-available/$OWNCLOUD_DOMAIN_NAME
  6178. configure_php
  6179. if [ ! -f /etc/ssl/certs/$OWNCLOUD_DOMAIN_NAME.dhparam ]; then
  6180. freedombone-addcert -h $OWNCLOUD_DOMAIN_NAME
  6181. check_certificates $OWNCLOUD_DOMAIN_NAME
  6182. fi
  6183. # Ensure that the database gets backed up locally, if remote
  6184. # backups are not being used
  6185. backup_databases_script_header
  6186. echo '' >> /usr/bin/backupdatabases
  6187. echo '# Backup Owncloud database' >> /usr/bin/backupdatabases
  6188. echo 'TEMPFILE=/root/owncloud.sql' >> /usr/bin/backupdatabases
  6189. echo 'DAILYFILE=/var/backups/owncloud_daily.sql' >> /usr/bin/backupdatabases
  6190. echo 'mysqldump --password="$MYSQL_PASSWORD" owncloud > $TEMPFILE' >> /usr/bin/backupdatabases
  6191. echo 'FILESIZE=$(stat -c%s $TEMPFILE)' >> /usr/bin/backupdatabases
  6192. echo 'if [ "$FILESIZE" -eq "0" ]; then' >> /usr/bin/backupdatabases
  6193. echo ' if [ -f $DAILYFILE ]; then' >> /usr/bin/backupdatabases
  6194. echo ' cp $DAILYFILE $TEMPFILE' >> /usr/bin/backupdatabases
  6195. echo '' >> /usr/bin/backupdatabases
  6196. echo ' # try to restore yesterdays database' >> /usr/bin/backupdatabases
  6197. echo ' mysql -u root --password="$MYSQL_PASSWORD" owncloud -o < $DAILYFILE' >> /usr/bin/backupdatabases
  6198. echo '' >> /usr/bin/backupdatabases
  6199. echo ' # Send a warning email' >> /usr/bin/backupdatabases
  6200. echo ' echo "Unable to create a backup of the Owncloud database. Attempted to restore from yesterdays backup" | mail -s "Owncloud backup" $EMAIL' >> /usr/bin/backupdatabases
  6201. echo ' else' >> /usr/bin/backupdatabases
  6202. echo ' # Send a warning email' >> /usr/bin/backupdatabases
  6203. echo ' echo "Unable to create a backup of the Owncloud database." | mail -s "Owncloud backup" $EMAIL' >> /usr/bin/backupdatabases
  6204. echo ' fi' >> /usr/bin/backupdatabases
  6205. echo 'else' >> /usr/bin/backupdatabases
  6206. echo ' chmod 600 $TEMPFILE' >> /usr/bin/backupdatabases
  6207. echo ' mv $TEMPFILE $DAILYFILE' >> /usr/bin/backupdatabases
  6208. echo '' >> /usr/bin/backupdatabases
  6209. echo ' # Make the backup readable only by root' >> /usr/bin/backupdatabases
  6210. echo ' chmod 600 $DAILYFILE' >> /usr/bin/backupdatabases
  6211. echo 'fi' >> /usr/bin/backupdatabases
  6212. nginx_ensite $OWNCLOUD_DOMAIN_NAME
  6213. service php5-fpm restart
  6214. service nginx restart
  6215. # update the dynamic DNS
  6216. CURRENT_DDNS_DOMAIN=$OWNCLOUD_DOMAIN_NAME
  6217. add_ddns_domain
  6218. echo 'install_owncloud' >> $COMPLETION_FILE
  6219. if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" ]]; then
  6220. install_owncloud_music_app
  6221. create_backup_script
  6222. create_restore_script
  6223. backup_to_friends_servers
  6224. intrusion_detection
  6225. # unmount any attached usb drive
  6226. if [ -d $USB_MOUNT ]; then
  6227. umount $USB_MOUNT
  6228. rm -rf $USB_MOUNT
  6229. fi
  6230. echo ''
  6231. echo "$OWNCLOUD_COMPLETION_MSG1"
  6232. echo "$OWNCLOUD_COMPLETION_MSG2"
  6233. exit 0
  6234. fi
  6235. }
  6236. function install_gogs {
  6237. if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_CHAT" ]]; then
  6238. return
  6239. fi
  6240. if grep -Fxq "install_gogs" $COMPLETION_FILE; then
  6241. return
  6242. fi
  6243. if [ ! $GIT_DOMAIN_NAME ]; then
  6244. return
  6245. fi
  6246. # http://gogs.io/docs/installation/install_from_source.md
  6247. # add a gogs user account
  6248. adduser --disabled-login --gecos 'Gogs' git
  6249. # install Go
  6250. apt-get -y install golang
  6251. echo 'export GOPATH=/home/git/go' >> ~/.bashrc
  6252. . ~/.bashrc
  6253. export GOPATH=/home/git/go
  6254. if [ ! -d $GOPATH ]; then
  6255. mkdir -p $GOPATH
  6256. fi
  6257. go get -u github.com/gpmgo/gopm
  6258. if [ ! "$?" = "0" ]; then
  6259. exit 479832
  6260. fi
  6261. # clone the repo
  6262. if [ ! -d $GOPATH/src/github.com/gogits ]; then
  6263. mkdir -p $GOPATH/src/github.com/gogits
  6264. fi
  6265. cd $GOPATH/src/github.com/gogits
  6266. git clone $GIT_DOMAIN_REPO
  6267. cd gogs
  6268. # install
  6269. go get ./...
  6270. go build
  6271. if [ ! "$?" = "0" ]; then
  6272. exit 546750
  6273. fi
  6274. install_mariadb
  6275. get_mariadb_password
  6276. get_mariadb_git_admin_password
  6277. if [ ! $GIT_ADMIN_PASSWORD ]; then
  6278. GIT_ADMIN_PASSWORD=$(openssl rand -base64 32)
  6279. fi
  6280. if ! grep -q "Gogs admin user password" /home/$MY_USERNAME/README; then
  6281. echo '' >> /home/$MY_USERNAME/README
  6282. echo '' >> /home/$MY_USERNAME/README
  6283. echo 'Gogs' >> /home/$MY_USERNAME/README
  6284. echo '====' >> /home/$MY_USERNAME/README
  6285. echo 'Database type: MySql' >> /home/$MY_USERNAME/README
  6286. echo 'Database host: 127.0.0.1:3306' >> /home/$MY_USERNAME/README
  6287. echo 'Database user: root' >> /home/$MY_USERNAME/README
  6288. echo "Database password: $MARIADB_PASSWORD" >> /home/$MY_USERNAME/README
  6289. echo 'Database name: gogs' >> /home/$MY_USERNAME/README
  6290. echo 'Gogs admin user: gogsadmin' >> /home/$MY_USERNAME/README
  6291. echo "Gogs admin user password: $GIT_ADMIN_PASSWORD" >> /home/$MY_USERNAME/README
  6292. echo "Gogs admin user email: $MY_EMAIL_ADDRESS" >> /home/$MY_USERNAME/README
  6293. echo '' >> /home/$MY_USERNAME/README
  6294. echo 'Install Steps For First-time Run:' >> /home/$MY_USERNAME/README
  6295. echo 'Leave email service settings empty' >> /home/$MY_USERNAME/README
  6296. echo 'Check "Enable Register Confirmation"' >> /home/$MY_USERNAME/README
  6297. echo 'Check "Enable Mail Notification"' >> /home/$MY_USERNAME/README
  6298. echo '' >> /home/$MY_USERNAME/README
  6299. echo 'After the initial install edit /home/git/go/src/github.com/gogits/gogs/custom/conf/app.ini' >> /home/$MY_USERNAME/README
  6300. echo 'and within the [server] section set:' >> /home/$MY_USERNAME/README
  6301. echo " DOMAIN = $GIT_DOMAIN_NAME" >> /home/$MY_USERNAME/README
  6302. echo " ROOT_URL = http://$GIT_DOMAIN_NAME/" >> /home/$MY_USERNAME/README
  6303. echo " SSH_PORT = $SSH_PORT" >> /home/$MY_USERNAME/README
  6304. echo 'If you want to disable new account registrations then append the following:' >> /home/$MY_USERNAME/README
  6305. echo ' [service]' >> /home/$MY_USERNAME/README
  6306. echo ' DISABLE_REGISTRATION = true' >> /home/$MY_USERNAME/README
  6307. echo 'Then restart with:' >> /home/$MY_USERNAME/README
  6308. echo ' systemctl restart gogs' >> /home/$MY_USERNAME/README
  6309. echo '' >> /home/$MY_USERNAME/README
  6310. echo "Note that there's a usability/security trade-off made here." >> /home/$MY_USERNAME/README
  6311. echo "In order to allow git clone via http we don't redirect everything" >> /home/$MY_USERNAME/README
  6312. echo 'over https. Instead only critical things such as user login,' >> /home/$MY_USERNAME/README
  6313. echo 'settings and admin are encrypted.' >> /home/$MY_USERNAME/README
  6314. echo 'There are also potential security issues with cloning/pulling/pushing' >> /home/$MY_USERNAME/README
  6315. echo 'code over http, since a determined adversary could inject malware' >> /home/$MY_USERNAME/README
  6316. echo 'into the stream as it passes, so beware.' >> /home/$MY_USERNAME/README
  6317. echo 'If you have a bought domain and a non-self signed cert then you' >> /home/$MY_USERNAME/README
  6318. echo "should change /etc/nginx/sites-available/$GIT_DOMAIN_NAME to redirect everything over https." >> /home/$MY_USERNAME/README
  6319. fi
  6320. echo "create database gogs;
  6321. CREATE USER 'gogsadmin'@'localhost' IDENTIFIED BY '$GOGS_ADMIN_PASSWORD';
  6322. GRANT ALL PRIVILEGES ON gogs.* TO 'gogsadmin'@'localhost';
  6323. quit" > $INSTALL_DIR/batch.sql
  6324. chmod 600 $INSTALL_DIR/batch.sql
  6325. mysql -u root --password="$MARIADB_PASSWORD" < $INSTALL_DIR/batch.sql
  6326. shred -zu $INSTALL_DIR/batch.sql
  6327. chmod 600 /home/git/go/src/github.com/gogits/gogs/custom/conf/app.ini
  6328. chown -R git:git /home/git
  6329. cp $GOPATH/src/github.com/gogits/gogs/scripts/systemd/gogs.service /etc/systemd/system
  6330. sed -i 's|#After=mysqld.service|After=mysqld.service|g' /etc/systemd/system/gogs.service
  6331. sed -i "s|WorkingDirectory=.*|WorkingDirectory=$GOPATH/src/github.com/gogits/gogs|g" /etc/systemd/system/gogs.service
  6332. sed -i "s|ExecStart=.*|ExecStart=$GOPATH/src/github.com/gogits/gogs/gogs web|g" /etc/systemd/system/gogs.service
  6333. sed -i "s|Environment.*|Environment=\"USER=git\",\"HOME=/home/git\",\"GOPATH=/home/git/go\"|g" /etc/systemd/system/gogs.service
  6334. systemctl enable gogs
  6335. systemctl daemon-reload
  6336. systemctl restart gogs
  6337. if [ ! -d /var/www/$GIT_DOMAIN_NAME ]; then
  6338. mkdir /var/www/$GIT_DOMAIN_NAME
  6339. fi
  6340. if [ -d /var/www/$GIT_DOMAIN_NAME/htdocs ]; then
  6341. rm -rf /var/www/$GIT_DOMAIN_NAME/htdocs
  6342. fi
  6343. echo 'server {' > /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6344. echo ' listen 80;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6345. echo " server_name $GIT_DOMAIN_NAME;" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6346. echo ' access_log off;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6347. echo " error_log /var/log/nginx/$GIT_DOMAIN_NAME_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6348. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6349. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6350. echo ' location / {' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6351. echo ' proxy_pass http://localhost:3000;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6352. echo ' }' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6353. echo ' location ^~ /user/ {' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6354. echo ' rewrite ^ https://$server_name$request_uri?;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6355. echo ' }' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6356. echo ' location ^~ /admin/ {' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6357. echo ' rewrite ^ https://$server_name$request_uri?;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6358. echo ' }' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6359. echo '}' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6360. echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6361. echo 'server {' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6362. echo ' listen 443 ssl;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6363. echo " root /var/www/$GIT_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6364. echo " server_name $GIT_DOMAIN_NAME;" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6365. echo ' access_log off;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6366. echo " error_log /var/log/nginx/$GIT_DOMAIN_NAME_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6367. echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6368. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6369. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6370. echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6371. echo ' ssl on;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6372. echo " ssl_certificate /etc/ssl/certs/$GIT_DOMAIN_NAME.crt;" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6373. echo " ssl_certificate_key /etc/ssl/private/$GIT_DOMAIN_NAME.key;" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6374. echo " ssl_dhparam /etc/ssl/certs/$GIT_DOMAIN_NAME.dhparam;" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6375. echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6376. echo ' ssl_session_timeout 5m;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6377. echo ' ssl_prefer_server_ciphers on;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6378. echo " ssl_protocols $SSL_PROTOCOLS; # not possible to do exclusive" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6379. echo " ssl_ciphers '$SSL_CIPHERS';" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6380. echo ' add_header X-Frame-Options DENY;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6381. echo ' add_header X-Content-Type-Options nosniff;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6382. echo ' add_header Strict-Transport-Security max-age=0;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6383. echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6384. echo ' location / {' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6385. echo ' proxy_pass http://localhost:3000;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6386. echo ' }' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6387. echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6388. echo ' client_max_body_size 10G; # set max upload size' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6389. echo ' client_body_buffer_size 128k;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6390. echo ' fastcgi_buffers 64 4K;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6391. echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6392. echo ' error_page 403 /core/templates/403.php;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6393. echo ' error_page 404 /core/templates/404.php;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6394. echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6395. echo ' location = /robots.txt {' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6396. echo ' allow all;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6397. echo ' log_not_found off;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6398. echo ' access_log off;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6399. echo ' }' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6400. echo '}' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
  6401. configure_php
  6402. if [ ! -f /etc/ssl/certs/$GIT_DOMAIN_NAME.dhparam ]; then
  6403. freedombone-addcert -h $GIT_DOMAIN_NAME
  6404. check_certificates $GIT_DOMAIN_NAME
  6405. fi
  6406. nginx_ensite $GIT_DOMAIN_NAME
  6407. service php5-fpm restart
  6408. service nginx restart
  6409. # update the dynamic DNS
  6410. CURRENT_DDNS_DOMAIN=$GIT_DOMAIN_NAME
  6411. add_ddns_domain
  6412. echo 'install_gogs' >> $COMPLETION_FILE
  6413. }
  6414. function install_xmpp {
  6415. if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" ]]; then
  6416. return
  6417. fi
  6418. if grep -Fxq "install_xmpp" $COMPLETION_FILE; then
  6419. return
  6420. fi
  6421. apt-get -y install lua-sec
  6422. apt-get -y install prosody
  6423. if [ ! -d /etc/prosody ]; then
  6424. echo "ERROR: prosody does not appear to have installed. $CHECK_MESSAGE"
  6425. exit 52
  6426. fi
  6427. if [ ! -f /etc/ssl/certs/xmpp.dhparam ]; then
  6428. freedombone-addcert -h xmpp
  6429. check_certificates xmpp
  6430. fi
  6431. chown prosody:prosody /etc/ssl/private/xmpp.key
  6432. chown prosody:prosody /etc/ssl/certs/xmpp.*
  6433. cp -a /etc/prosody/conf.avail/example.com.cfg.lua /etc/prosody/conf.avail/xmpp.cfg.lua
  6434. sed -i 's|/etc/prosody/certs/example.com.key|/etc/ssl/private/xmpp.key|g' /etc/prosody/conf.avail/xmpp.cfg.lua
  6435. sed -i 's|/etc/prosody/certs/example.com.crt|/etc/ssl/certs/xmpp.crt|g' /etc/prosody/conf.avail/xmpp.cfg.lua
  6436. if ! grep -q "xmpp.dhparam" /etc/prosody/conf.avail/xmpp.cfg.lua; then
  6437. sed -i '/certificate =/a\ dhparam = "/etc/ssl/certs/xmpp.dhparam";' /etc/prosody/conf.avail/xmpp.cfg.lua
  6438. fi
  6439. if ! grep -q 'options = {"no_sslv2", "no_sslv3" }' /etc/prosody/conf.avail/xmpp.cfg.lua; then
  6440. sed -i '/certificate =/a\ options = {"no_sslv2", "no_sslv3" };' /etc/prosody/conf.avail/xmpp.cfg.lua
  6441. fi
  6442. if ! grep -q 'ciphers =' /etc/prosody/conf.avail/xmpp.cfg.lua; then
  6443. sed -i "/certificate =/a\ ciphers = $XMPP_CIPHERS;" /etc/prosody/conf.avail/xmpp.cfg.lua
  6444. fi
  6445. if ! grep -q 'depth = "1";' /etc/prosody/conf.avail/xmpp.cfg.lua; then
  6446. sed -i '/certificate =/a\ depth = "1";' /etc/prosody/conf.avail/xmpp.cfg.lua
  6447. fi
  6448. if ! grep -q 'curve =' /etc/prosody/conf.avail/xmpp.cfg.lua; then
  6449. sed -i "/certificate =/a\ curve = $XMPP_ECC_CURVE;" /etc/prosody/conf.avail/xmpp.cfg.lua
  6450. fi
  6451. sed -i "s/example.com/$DEFAULT_DOMAIN_NAME/g" /etc/prosody/conf.avail/xmpp.cfg.lua
  6452. sed -i 's/enabled = false -- Remove this line to enable this host//g' /etc/prosody/conf.avail/xmpp.cfg.lua
  6453. if ! grep -q "modules_enabled" /etc/prosody/conf.avail/xmpp.cfg.lua; then
  6454. echo '' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  6455. echo 'modules_enabled = {' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  6456. echo ' "bosh"; -- Enable mod_bosh' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  6457. echo ' "tls"; -- Enable mod_tls' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  6458. echo ' "saslauth"; -- Enable mod_saslauth' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  6459. echo '}' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  6460. echo '' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  6461. echo 'c2s_require_encryption = true' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  6462. echo 's2s_require_encryption = true' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  6463. echo 'allow_unencrypted_plain_auth = false' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  6464. fi
  6465. ln -sf /etc/prosody/conf.avail/xmpp.cfg.lua /etc/prosody/conf.d/xmpp.cfg.lua
  6466. sed -i 's|/etc/prosody/certs/localhost.key|/etc/ssl/private/xmpp.key|g' /etc/prosody/prosody.cfg.lua
  6467. sed -i 's|/etc/prosody/certs/localhost.crt|/etc/ssl/certs/xmpp.crt|g' /etc/prosody/prosody.cfg.lua
  6468. if ! grep -q "xmpp.dhparam" /etc/prosody/prosody.cfg.lua; then
  6469. sed -i '/certificate =/a\ dhparam = "/etc/ssl/certs/xmpp.dhparam";' /etc/prosody/prosody.cfg.lua
  6470. fi
  6471. if ! grep -q 'options = {"no_sslv2", "no_sslv3" }' /etc/prosody/prosody.cfg.lua; then
  6472. sed -i '/certificate =/a\ options = {"no_sslv2", "no_sslv3" };' /etc/prosody/prosody.cfg.lua
  6473. fi
  6474. if ! grep -q 'ciphers =' /etc/prosody/prosody.cfg.lua; then
  6475. sed -i "/certificate =/a\ ciphers = $XMPP_CIPHERS;" /etc/prosody/prosody.cfg.lua
  6476. fi
  6477. if ! grep -q 'depth = "1";' /etc/prosody/prosody.cfg.lua; then
  6478. sed -i '/certificate =/a\ depth = "1";' /etc/prosody/prosody.cfg.lua
  6479. fi
  6480. if ! grep -q 'curve =' /etc/prosody/prosody.cfg.lua; then
  6481. sed -i "/certificate =/a\ curve = $XMPP_ECC_CURVE;" /etc/prosody/prosody.cfg.lua
  6482. fi
  6483. sed -i 's/c2s_require_encryption = false/c2s_require_encryption = true/g' /etc/prosody/prosody.cfg.lua
  6484. if ! grep -q "s2s_require_encryption" /etc/prosody/prosody.cfg.lua; then
  6485. sed -i '/c2s_require_encryption/a\s2s_require_encryption = true' /etc/prosody/prosody.cfg.lua
  6486. fi
  6487. if ! grep -q "allow_unencrypted_plain_auth" /etc/prosody/prosody.cfg.lua; then
  6488. echo 'allow_unencrypted_plain_auth = false' >> /etc/prosody/conf.avail/xmpp.cfg.lua
  6489. fi
  6490. sed -i 's/--"bosh";/"bosh";/g' /etc/prosody/prosody.cfg.lua
  6491. sed -i 's/authentication = "internal_plain"/authentication = "internal_hashed"/g' /etc/prosody/prosody.cfg.lua
  6492. sed -i 's/enabled = false -- Remove this line to enable this host//g' /etc/prosody/prosody.cfg.lua
  6493. sed -i 's|key = "/etc/prosody/certs/example.com.key"|key = "/etc/ssl/private/xmpp.key"|g' /etc/prosody/prosody.cfg.lua
  6494. sed -i 's|certificate = "/etc/prosody/certs/example.com.crt"|certificate = "/etc/ssl/certs/xmpp.crt"|g' /etc/prosody/prosody.cfg.lua
  6495. sed -i "s/example.com/$DEFAULT_DOMAIN_NAME/g" /etc/prosody/prosody.cfg.lua
  6496. service prosody restart
  6497. touch /home/$MY_USERNAME/README
  6498. if ! grep -q "Your XMPP password is" /home/$MY_USERNAME/README; then
  6499. XMPP_PASSWORD=$(openssl rand -base64 8)
  6500. prosodyctl register $MY_USERNAME $DEFAULT_DOMAIN_NAME $XMPP_PASSWORD
  6501. echo '' >> /home/$MY_USERNAME/README
  6502. echo '' >> /home/$MY_USERNAME/README
  6503. echo 'XMPP' >> /home/$MY_USERNAME/README
  6504. echo '====' >> /home/$MY_USERNAME/README
  6505. echo "Your XMPP password is: $XMPP_PASSWORD" >> /home/$MY_USERNAME/README
  6506. echo 'You can change it with: ' >> /home/$MY_USERNAME/README
  6507. echo '' >> /home/$MY_USERNAME/README
  6508. echo " prosodyctl passwd $MY_EMAIL_ADDRESS" >> /home/$MY_USERNAME/README
  6509. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  6510. fi
  6511. echo 'install_xmpp' >> $COMPLETION_FILE
  6512. }
  6513. function install_watchdog_script {
  6514. if grep -Fxq "install_watchdog_script" $COMPLETION_FILE; then
  6515. return
  6516. fi
  6517. echo '#!/bin/bash' > /usr/bin/$WATCHDOG_SCRIPT_NAME
  6518. echo 'LOGFILE=/var/log/keepon.log' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
  6519. echo 'CURRENT_DATE=$(date)' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
  6520. # application specific stuff is added later
  6521. chmod +x /usr/bin/$WATCHDOG_SCRIPT_NAME
  6522. if ! grep -q "/usr/bin/$WATCHDOG_SCRIPT_NAME" /etc/crontab; then
  6523. echo "*/1 * * * * root /usr/bin/$WATCHDOG_SCRIPT_NAME" >> /etc/crontab
  6524. fi
  6525. echo 'install_watchdog_script' >> $COMPLETION_FILE
  6526. }
  6527. function install_irc_server {
  6528. if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" ]]; then
  6529. return
  6530. fi
  6531. if grep -Fxq "install_irc_server" $COMPLETION_FILE; then
  6532. return
  6533. fi
  6534. apt-get -y install ngircd
  6535. if [ ! -d /etc/ngircd ]; then
  6536. echo "ERROR: ngircd does not appear to have installed. $CHECK_MESSAGE"
  6537. exit 53
  6538. fi
  6539. if [ ! -f /etc/ssl/certs/ngircd.dhparam ]; then
  6540. freedombone-addcert -h ngircd
  6541. check_certificates ngircd
  6542. fi
  6543. echo '**************************************************' > /etc/ngircd/motd
  6544. echo '* F R E E D O M B O N E I R C *' >> /etc/ngircd/motd
  6545. echo '* *' >> /etc/ngircd/motd
  6546. echo '* Freedom in the Cloud *' >> /etc/ngircd/motd
  6547. echo '**************************************************' >> /etc/ngircd/motd
  6548. sed -i 's|MotdFile = /etc/ngircd/ngircd.motd|MotdFile = /etc/ngircd/motd|g' /etc/ngircd/ngircd.conf
  6549. sed -i "s/irc@irc.example.com/$MY_EMAIL_ADDRESS/g" /etc/ngircd/ngircd.conf
  6550. sed -i "s/irc.example.net/$DEFAULT_DOMAIN_NAME/g" /etc/ngircd/ngircd.conf
  6551. sed -i "s|Yet another IRC Server running on Debian GNU/Linux|IRC Server of $DEFAULT_DOMAIN_NAME|g" /etc/ngircd/ngircd.conf
  6552. sed -i 's/;Password = wealllikedebian/Password =/g' /etc/ngircd/ngircd.conf
  6553. sed -i 's|;CertFile = /etc/ssl/certs/server.crt|CertFile = /etc/ssl/certs/ngircd.crt|g' /etc/ngircd/ngircd.conf
  6554. sed -i 's|;DHFile = /etc/ngircd/dhparams.pem|DHFile = /etc/ssl/certs/ngircd.dhparam|g' /etc/ngircd/ngircd.conf
  6555. sed -i 's|;KeyFile = /etc/ssl/private/server.key|KeyFile = /etc/ssl/private/ngircd.key|g' /etc/ngircd/ngircd.conf
  6556. sed -i 's/;Ports = 6697, 9999/Ports = 6697, 9999/g' /etc/ngircd/ngircd.conf
  6557. sed -i 's/;Name = #ngircd/Name = #freedombone/g' /etc/ngircd/ngircd.conf
  6558. sed -i 's/;Topic = Our ngircd testing channel/Topic = Freedombone chat channel/g' /etc/ngircd/ngircd.conf
  6559. sed -i 's/;MaxUsers = 23/MaxUsers = 23/g' /etc/ngircd/ngircd.conf
  6560. sed -i 's|;KeyFile = /etc/ngircd/#chan.key|KeyFile = /etc/ngircd/#freedombone.key|g' /etc/ngircd/ngircd.conf
  6561. sed -i 's/;CloakHost = cloaked.host/CloakHost = freedombone/g' /etc/ngircd/ngircd.conf
  6562. IRC_SALT=$(openssl rand -base64 32)
  6563. IRC_OPERATOR_PASSWORD=$(openssl rand -base64 8)
  6564. sed -i "s|;CloakHostSalt = abcdefghijklmnopqrstuvwxyz|CloakHostSalt = $IRC_SALT|g" /etc/ngircd/ngircd.conf
  6565. sed -i 's/;ConnectIPv4 = yes/ConnectIPv4 = yes/g' /etc/ngircd/ngircd.conf
  6566. sed -i 's/;MorePrivacy = no/MorePrivacy = yes/g' /etc/ngircd/ngircd.conf
  6567. sed -i 's/;RequireAuthPing = no/RequireAuthPing = no/g' /etc/ngircd/ngircd.conf
  6568. sed -i "s/;Name = TheOper/Name = $MY_USERNAME/g" /etc/ngircd/ngircd.conf
  6569. sed -i "s/;Password = ThePwd/Password = $IRC_OPERATOR_PASSWORD/g" /etc/ngircd/ngircd.conf
  6570. service ngircd start
  6571. # keep the daemon running
  6572. echo '' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
  6573. echo '# keep irc daemon running' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
  6574. echo 'IRC_RUNNING=$(pgrep ngircd > /dev/null && echo Running)' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
  6575. echo 'if [ ! $IRC_RUNNING ]; then' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
  6576. echo ' service ngircd start' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
  6577. echo ' echo -n $CURRENT_DATE >> $LOGFILE' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
  6578. echo ' echo " IRC daemon restarted" >> $LOGFILE' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
  6579. echo 'fi' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
  6580. if ! grep -q "IRC Server" /home/$MY_USERNAME/README; then
  6581. echo '' >> /home/$MY_USERNAME/README
  6582. echo '' >> /home/$MY_USERNAME/README
  6583. echo 'IRC Server' >> /home/$MY_USERNAME/README
  6584. echo '==========' >> /home/$MY_USERNAME/README
  6585. echo 'To connect to your IRC server in irssi:' >> /home/$MY_USERNAME/README
  6586. echo '' >> /home/$MY_USERNAME/README
  6587. echo " /server add -auto -ssl $DEFAULT_DOMAIN_NAME 6697" >> /home/$MY_USERNAME/README
  6588. echo " /connect $DEFAULT_DOMAIN_NAME" >> /home/$MY_USERNAME/README
  6589. echo ' /join #freedombone' >> /home/$MY_USERNAME/README
  6590. fi
  6591. echo 'install_irc_server' >> $COMPLETION_FILE
  6592. }
  6593. function get_wiki_admin_password {
  6594. if [ -f /home/$MY_USERNAME/README ]; then
  6595. if grep -q "Wiki password" /home/$MY_USERNAME/README; then
  6596. WIKI_ADMIN_PASSWORD=$(cat /home/$MY_USERNAME/README | grep "Wiki password:" | awk -F ':' '{print $2}' | sed 's/^ *//')
  6597. fi
  6598. fi
  6599. }
  6600. function install_wiki {
  6601. if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" ]]; then
  6602. return
  6603. fi
  6604. if grep -Fxq "install_wiki" $COMPLETION_FILE; then
  6605. return
  6606. fi
  6607. if [ ! $WIKI_DOMAIN_NAME ]; then
  6608. return
  6609. fi
  6610. apt-get -y install dokuwiki
  6611. apt-get -y remove --purge apache*
  6612. if [ -d /etc/apache2 ]; then
  6613. rm -rf /etc/apache2
  6614. echo 'Removed Apache installation after Dokuwiki install'
  6615. fi
  6616. if [ ! -d /var/www/$WIKI_DOMAIN_NAME ]; then
  6617. mkdir /var/www/$WIKI_DOMAIN_NAME
  6618. fi
  6619. if [ -d /var/www/$WIKI_DOMAIN_NAME/htdocs ]; then
  6620. rm -rf /var/www/$WIKI_DOMAIN_NAME/htdocs
  6621. fi
  6622. if [ ! -f /etc/ssl/certs/$WIKI_DOMAIN_NAME.dhparam ]; then
  6623. freedombone-addcert -h $WIKI_DOMAIN_NAME
  6624. check_certificates $WIKI_DOMAIN_NAME
  6625. fi
  6626. ln -s /usr/share/dokuwiki /var/www/$WIKI_DOMAIN_NAME/htdocs
  6627. mkdir /var/lib/dokuwiki/custom
  6628. cp /etc/dokuwiki/local.php.dist /var/lib/dokuwiki/custom/local.php
  6629. ln -s /var/lib/dokuwiki/custom/local.php /etc/dokuwiki/local.php
  6630. chown www-data /var/lib/dokuwiki/custom
  6631. chown www-data /var/lib/dokuwiki/custom/local.php
  6632. chown -R www-data /etc/dokuwiki
  6633. chown -R www-data /usr/share/dokuwiki/lib/
  6634. chmod 600 /var/lib/dokuwiki/custom/local.php
  6635. chmod -R 755 /usr/share/dokuwiki/lib
  6636. sed -i 's|//$conf|$conf|g' /var/lib/dokuwiki/custom/local.php
  6637. sed -i "s|joe|$MY_USERNAME|g" /var/lib/dokuwiki/custom/local.php
  6638. sed -i "s|Debian DokuWiki|$WIKI_TITLE|g" /etc/dokuwiki/local.php
  6639. # set the admin user
  6640. sed -i "s/@admin/$MY_USERNAME/g" /etc/dokuwiki/local.php
  6641. # disallow registration of new users
  6642. if ! grep -q "disableactions" /etc/dokuwiki/local.php; then
  6643. echo "\$conf['disableactions'] = 'register';" >> /etc/dokuwiki/local.php
  6644. fi
  6645. if ! grep -q "disableactions" /var/lib/dokuwiki/custom/local.php; then
  6646. echo "\$conf['disableactions'] = 'register';" >> /var/lib/dokuwiki/custom/local.php
  6647. fi
  6648. if ! grep -q "authtype" /var/lib/dokuwiki/custom/local.php; then
  6649. echo "\$conf['authtype'] = 'authplain';" >> /var/lib/dokuwiki/custom/local.php
  6650. fi
  6651. if ! grep -q "authtype" /etc/dokuwiki/local.php; then
  6652. echo "\$conf['authtype'] = 'authplain';" >> /etc/dokuwiki/local.php
  6653. fi
  6654. get_wiki_admin_password
  6655. if [ ! $WIKI_ADMIN_PASSWORD ]; then
  6656. WIKI_ADMIN_PASSWORD=$(openssl rand -base64 16)
  6657. fi
  6658. HASHED_WIKI_PASSWORD=$(echo -n "$WIKI_ADMIN_PASSWORD" | md5sum | awk -F ' ' '{print $1}')
  6659. echo -n "$MY_USERNAME:$HASHED_WIKI_PASSWORD:$MY_NAME:$MY_EMAIL:admin,user,upload" > /var/lib/dokuwiki/acl/users.auth.php
  6660. chmod 640 /var/lib/dokuwiki/acl/users.auth.php
  6661. if ! grep -q "video/ogg" /etc/dokuwiki/mime.conf; then
  6662. echo 'ogv video/ogg' >> /etc/dokuwiki/mime.conf
  6663. fi
  6664. if ! grep -q "video/mp4" /etc/dokuwiki/mime.conf; then
  6665. echo 'mp4 video/mp4' >> /etc/dokuwiki/mime.conf
  6666. fi
  6667. if ! grep -q "video/webm" /etc/dokuwiki/mime.conf; then
  6668. echo 'webm video/webm' >> /etc/dokuwiki/mime.conf
  6669. fi
  6670. echo 'server {' > /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6671. echo ' listen 80;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6672. echo " root /var/www/$WIKI_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6673. echo " server_name $WIKI_DOMAIN_NAME;" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6674. echo ' access_log off;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6675. echo " error_log /var/log/nginx/$WIKI_DOMAIN_NAME_error.log;" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6676. echo ' index index.php;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6677. echo ' charset utf-8;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6678. echo ' client_max_body_size 20m;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6679. echo ' client_body_buffer_size 128k;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6680. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6681. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6682. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6683. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6684. echo ' # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6685. echo ' location / {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6686. echo ' rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6687. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6688. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6689. echo " # make sure webfinger and other well known services aren't blocked" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6690. echo ' # by denying dot files and rewrite request to the front controller' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6691. echo ' location ^~ /.well-known/ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6692. echo ' allow all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6693. echo ' rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6694. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6695. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6696. echo ' # statically serve these file types when possible' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6697. echo ' # otherwise fall back to front controller' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6698. echo ' # allow browser to cache them' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6699. echo ' # added .htm for advanced source code editor library' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6700. echo ' location ~* \.(jpg|jpeg|gif|png|ico|css|js|htm|html|ttf|woff|svg)$ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6701. echo ' expires 30d;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6702. echo ' try_files $uri /index.php?q=$uri&$args;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6703. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6704. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6705. echo ' # block these file types' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6706. echo ' location ~* \.(tpl|md|tgz|log|out)$ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6707. echo ' deny all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6708. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6709. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6710. echo ' # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6711. echo ' # or a unix socket' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6712. echo ' location ~* \.php$ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6713. echo ' # Zero-day exploit defense.' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6714. echo ' # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6715. echo " # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6716. echo " # server, which is entirely possible with php-fpm/php-fcgi." >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6717. echo " # Comment the 'try_files' line out if you set up php-fpm/php-fcgi on" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6718. echo " # another machine. And then cross your fingers that you won't get hacked." >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6719. echo ' try_files $uri $uri/ /index.php;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6720. echo ' # NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6721. echo ' fastcgi_split_path_info ^(.+\.php)(/.+)$;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6722. echo ' # With php5-cgi alone:' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6723. echo ' # fastcgi_pass 127.0.0.1:9000;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6724. echo ' # With php5-fpm:' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6725. echo ' fastcgi_pass unix:/var/run/php5-fpm.sock;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6726. echo ' include fastcgi_params;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6727. echo ' fastcgi_index index.php;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6728. echo ' fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6729. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6730. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6731. echo ' # deny access to all dot files' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6732. echo ' location ~ /\. {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6733. echo ' deny all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6734. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6735. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6736. echo ' #deny access to store' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6737. echo ' location ~ /store {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6738. echo ' deny all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6739. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6740. echo ' location ~ /(data|conf|bin|inc)/ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6741. echo ' deny all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6742. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6743. echo ' location ~ /\.ht {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6744. echo ' deny all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6745. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6746. echo '}' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6747. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6748. echo 'server {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6749. echo ' listen 443 ssl;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6750. echo " root /var/www/$WIKI_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6751. echo " server_name $WIKI_DOMAIN_NAME;" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6752. echo ' access_log off;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6753. echo " error_log /var/log/nginx/$WIKI_DOMAIN_NAME_error_ssl.log;" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6754. echo ' index index.php;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6755. echo ' charset utf-8;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6756. echo ' client_max_body_size 20m;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6757. echo ' client_body_buffer_size 128k;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6758. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6759. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6760. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6761. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6762. echo ' ssl on;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6763. echo " ssl_certificate /etc/ssl/certs/$WIKI_DOMAIN_NAME.crt;" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6764. echo " ssl_certificate_key /etc/ssl/private/$WIKI_DOMAIN_NAME.key;" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6765. echo " ssl_dhparam /etc/ssl/certs/$WIKI_DOMAIN_NAME.dhparam;" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6766. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6767. echo ' ssl_session_timeout 5m;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6768. echo ' ssl_prefer_server_ciphers on;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6769. echo ' ssl_session_cache builtin:1000 shared:SSL:10m;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6770. echo " ssl_protocols $SSL_PROTOCOLS; # not possible to do exclusive" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6771. echo " ssl_ciphers '$SSL_CIPHERS';" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6772. echo ' add_header X-Frame-Options DENY;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6773. echo ' add_header X-Content-Type-Options nosniff;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6774. echo ' add_header Strict-Transport-Security "max-age=0;";' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6775. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6776. echo ' # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6777. echo ' location / {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6778. echo ' rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6779. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6780. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6781. echo " # make sure webfinger and other well known services aren't blocked" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6782. echo ' # by denying dot files and rewrite request to the front controller' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6783. echo ' location ^~ /.well-known/ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6784. echo ' allow all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6785. echo ' rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6786. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6787. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6788. echo ' # statically serve these file types when possible' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6789. echo ' # otherwise fall back to front controller' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6790. echo ' # allow browser to cache them' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6791. echo ' # added .htm for advanced source code editor library' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6792. echo ' location ~* \.(jpg|jpeg|gif|png|ico|css|js|htm|html|ttf|woff|svg)$ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6793. echo ' expires 30d;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6794. echo ' try_files $uri /index.php?q=$uri&$args;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6795. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6796. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6797. echo ' # block these file types' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6798. echo ' location ~* \.(tpl|md|tgz|log|out)$ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6799. echo ' deny all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6800. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6801. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6802. echo ' # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6803. echo ' # or a unix socket' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6804. echo ' location ~* \.php$ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6805. echo ' # Zero-day exploit defense.' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6806. echo ' # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6807. echo " # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6808. echo " # server, which is entirely possible with php-fpm/php-fcgi." >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6809. echo " # Comment the 'try_files' line out if you set up php-fpm/php-fcgi on" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6810. echo " # another machine. And then cross your fingers that you won't get hacked." >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6811. echo ' try_files $uri $uri/ /index.php;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6812. echo ' # NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6813. echo ' fastcgi_split_path_info ^(.+\.php)(/.+)$;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6814. echo ' # With php5-cgi alone:' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6815. echo ' # fastcgi_pass 127.0.0.1:9000;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6816. echo ' # With php5-fpm:' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6817. echo ' fastcgi_pass unix:/var/run/php5-fpm.sock;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6818. echo ' include fastcgi_params;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6819. echo ' fastcgi_index index.php;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6820. echo ' fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6821. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6822. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6823. echo ' # deny access to all dot files' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6824. echo ' location ~ /\. {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6825. echo ' deny all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6826. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6827. echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6828. echo ' #deny access to store' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6829. echo ' location ~ /store {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6830. echo ' deny all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6831. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6832. echo ' location ~ /(data|conf|bin|inc)/ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6833. echo ' deny all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6834. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6835. echo ' location ~ /\.ht {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6836. echo ' deny all;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6837. echo ' }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6838. echo '}' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
  6839. configure_php
  6840. nginx_ensite $WIKI_DOMAIN_NAME
  6841. service php5-fpm restart
  6842. service nginx restart
  6843. # update the dynamic DNS
  6844. CURRENT_DDNS_DOMAIN=$WIKI_DOMAIN_NAME
  6845. add_ddns_domain
  6846. # add some post-install instructions
  6847. if ! grep -q "Wiki password" /home/$MY_USERNAME/README; then
  6848. echo '' >> /home/$MY_USERNAME/README
  6849. echo '' >> /home/$MY_USERNAME/README
  6850. echo 'Wiki' >> /home/$MY_USERNAME/README
  6851. echo '====' >> /home/$MY_USERNAME/README
  6852. echo "Wiki username: $MY_USERNAME" >> /home/$MY_USERNAME/README
  6853. echo "Wiki password: $WIKI_ADMIN_PASSWORD" >> /home/$MY_USERNAME/README
  6854. echo '' >> /home/$MY_USERNAME/README
  6855. echo 'Once you have set up the wiki then remove the install file:' >> /home/$MY_USERNAME/README
  6856. echo '' >> /home/$MY_USERNAME/README
  6857. echo " rm /var/www/$WIKI_DOMAIN_NAME/htdocs/install.php" >> /home/$MY_USERNAME/README
  6858. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  6859. fi
  6860. echo 'install_wiki' >> $COMPLETION_FILE
  6861. }
  6862. function get_blog_admin_password {
  6863. if [ -f /home/$MY_USERNAME/README ]; then
  6864. if grep -q "Your blog password is" /home/$MY_USERNAME/README; then
  6865. FULLBLOG_ADMIN_PASSWORD=$(cat /home/$MY_USERNAME/README | grep "Your blog password is" | awk -F ':' '{print $2}' | sed 's/^ *//')
  6866. fi
  6867. fi
  6868. }
  6869. function install_blog {
  6870. if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" ]]; then
  6871. return
  6872. fi
  6873. if grep -Fxq "install_blog" $COMPLETION_FILE; then
  6874. return
  6875. fi
  6876. if [ ! $FULLBLOG_DOMAIN_NAME ]; then
  6877. echo 'The blog domain name was not specified'
  6878. exit 5062
  6879. fi
  6880. if [ ! -d /var/www/$FULLBLOG_DOMAIN_NAME ]; then
  6881. mkdir /var/www/$FULLBLOG_DOMAIN_NAME
  6882. fi
  6883. cd /var/www/$FULLBLOG_DOMAIN_NAME
  6884. git clone https://github.com/danpros/htmly htdocs
  6885. chown -R www-data:www-data /var/www/$FULLBLOG_DOMAIN_NAME/htdocs
  6886. if [ ! -f /etc/ssl/certs/$FULLBLOG_DOMAIN_NAME.dhparam ]; then
  6887. freedombone-addcert -h $FULLBLOG_DOMAIN_NAME
  6888. check_certificates $FULLBLOG_DOMAIN_NAME
  6889. fi
  6890. echo 'server {' > /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6891. echo ' listen 80;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6892. echo " root /var/www/$FULLBLOG_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6893. echo " server_name $FULLBLOG_DOMAIN_NAME;" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6894. echo ' access_log off;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6895. echo " error_log /var/log/nginx/$FULLBLOG_DOMAIN_NAME_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6896. echo ' index index.php;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6897. echo ' charset utf-8;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6898. echo ' client_max_body_size 20m;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6899. echo ' client_body_buffer_size 128k;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6900. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6901. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6902. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6903. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6904. echo ' # Always redirect the login page to https' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6905. echo ' location /login {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6906. echo ' rewrite ^ https://$server_name$request_uri?;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6907. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6908. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6909. echo ' # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6910. echo ' location / {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6911. echo ' rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6912. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6913. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6914. echo " # make sure webfinger and other well known services aren't blocked" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6915. echo ' # by denying dot files and rewrite request to the front controller' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6916. echo ' location ^~ /.well-known/ {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6917. echo ' allow all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6918. echo ' rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6919. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6920. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6921. echo ' # statically serve these file types when possible' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6922. echo ' # otherwise fall back to front controller' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6923. echo ' # allow browser to cache them' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6924. echo ' # added .htm for advanced source code editor library' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6925. echo ' location ~* \.(jpg|jpeg|gif|png|ico|css|js|htm|html|ttf|woff|svg)$ {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6926. echo ' expires 30d;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6927. echo ' try_files $uri /index.php?q=$uri&$args;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6928. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6929. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6930. echo ' # block these file types' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6931. echo ' location ~* \.(tpl|md|tgz|log|out)$ {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6932. echo ' deny all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6933. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6934. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6935. echo ' # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6936. echo ' # or a unix socket' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6937. echo ' location ~* \.php$ {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6938. echo ' # Zero-day exploit defense.' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6939. echo ' # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6940. echo " # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6941. echo " # server, which is entirely possible with php-fpm/php-fcgi." >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6942. echo " # Comment the 'try_files' line out if you set up php-fpm/php-fcgi on" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6943. echo " # another machine. And then cross your fingers that you won't get hacked." >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6944. echo ' try_files $uri $uri/ /index.php;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6945. echo ' # NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6946. echo ' fastcgi_split_path_info ^(.+\.php)(/.+)$;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6947. echo ' # With php5-cgi alone:' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6948. echo ' # fastcgi_pass 127.0.0.1:9000;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6949. echo ' # With php5-fpm:' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6950. echo ' fastcgi_pass unix:/var/run/php5-fpm.sock;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6951. echo ' include fastcgi_params;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6952. echo ' fastcgi_index index.php;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6953. echo ' fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6954. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6955. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6956. echo ' # deny access to all dot files' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6957. echo ' location ~ /\. {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6958. echo ' deny all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6959. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6960. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6961. echo ' #deny access to store' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6962. echo ' location ~ /store {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6963. echo ' deny all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6964. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6965. echo ' location ~ /(data|conf|bin|inc)/ {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6966. echo ' deny all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6967. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6968. echo ' location ~ /\.ht {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6969. echo ' deny all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6970. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6971. echo '}' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6972. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6973. echo 'server {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6974. echo ' listen 443 ssl;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6975. echo " root /var/www/$FULLBLOG_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6976. echo " server_name $FULLBLOG_DOMAIN_NAME;" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6977. echo ' access_log off;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6978. echo " error_log /var/log/nginx/$FULLBLOG_DOMAIN_NAME_error_ssl.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6979. echo ' index index.php;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6980. echo ' charset utf-8;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6981. echo ' client_max_body_size 20m;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6982. echo ' client_body_buffer_size 128k;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6983. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6984. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6985. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6986. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6987. echo ' ssl on;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6988. echo " ssl_certificate /etc/ssl/certs/$FULLBLOG_DOMAIN_NAME.crt;" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6989. echo " ssl_certificate_key /etc/ssl/private/$FULLBLOG_DOMAIN_NAME.key;" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6990. echo " ssl_dhparam /etc/ssl/certs/$FULLBLOG_DOMAIN_NAME.dhparam;" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6991. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6992. echo ' ssl_session_timeout 5m;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6993. echo ' ssl_prefer_server_ciphers on;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6994. echo ' ssl_session_cache builtin:1000 shared:SSL:10m;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6995. echo " ssl_protocols $SSL_PROTOCOLS; # not possible to do exclusive" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6996. echo " ssl_ciphers '$SSL_CIPHERS';" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6997. echo ' add_header X-Frame-Options DENY;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6998. echo ' add_header X-Content-Type-Options nosniff;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  6999. echo ' add_header Strict-Transport-Security "max-age=0;";' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7000. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7001. echo ' # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7002. echo ' location / {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7003. echo ' rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7004. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7005. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7006. echo " # make sure webfinger and other well known services aren't blocked" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7007. echo ' # by denying dot files and rewrite request to the front controller' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7008. echo ' location ^~ /.well-known/ {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7009. echo ' allow all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7010. echo ' rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7011. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7012. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7013. echo ' # statically serve these file types when possible' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7014. echo ' # otherwise fall back to front controller' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7015. echo ' # allow browser to cache them' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7016. echo ' # added .htm for advanced source code editor library' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7017. echo ' location ~* \.(jpg|jpeg|gif|png|ico|css|js|htm|html|ttf|woff|svg)$ {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7018. echo ' expires 30d;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7019. echo ' try_files $uri /index.php?q=$uri&$args;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7020. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7021. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7022. echo ' # block these file types' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7023. echo ' location ~* \.(tpl|md|tgz|log|out)$ {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7024. echo ' deny all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7025. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7026. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7027. echo ' # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7028. echo ' # or a unix socket' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7029. echo ' location ~* \.php$ {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7030. echo ' # Zero-day exploit defense.' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7031. echo ' # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7032. echo " # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7033. echo " # server, which is entirely possible with php-fpm/php-fcgi." >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7034. echo " # Comment the 'try_files' line out if you set up php-fpm/php-fcgi on" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7035. echo " # another machine. And then cross your fingers that you won't get hacked." >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7036. echo ' try_files $uri $uri/ /index.php;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7037. echo ' # NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7038. echo ' fastcgi_split_path_info ^(.+\.php)(/.+)$;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7039. echo ' # With php5-cgi alone:' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7040. echo ' # fastcgi_pass 127.0.0.1:9000;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7041. echo ' # With php5-fpm:' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7042. echo ' fastcgi_pass unix:/var/run/php5-fpm.sock;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7043. echo ' include fastcgi_params;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7044. echo ' fastcgi_index index.php;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7045. echo ' fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7046. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7047. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7048. echo ' # deny access to all dot files' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7049. echo ' location ~ /\. {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7050. echo ' deny all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7051. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7052. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7053. echo ' #deny access to store' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7054. echo ' location ~ /store {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7055. echo ' deny all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7056. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7057. echo ' location ~ /(data|conf|bin|inc)/ {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7058. echo ' deny all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7059. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7060. echo ' location ~ /\.ht {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7061. echo ' deny all;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7062. echo ' }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7063. echo '}' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7064. configure_php
  7065. # blog settings
  7066. cp /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/config.ini.example /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/config.ini
  7067. sed -i "s|site.url.*|site.url = 'https://$FULLBLOG_DOMAIN_NAME'|g" /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/config.ini
  7068. sed -i "s|blog.title.*|blog.title = '$MY_BLOG_TITLE'|g" /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/config.ini
  7069. sed -i "s|blog.tagline.*|blog.tagline = '$MY_BLOG_SUBTITLE'|g" /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/config.ini
  7070. sed -i 's|timezone.*|timezone = "Europe/London"|g' /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/config.ini
  7071. sed -i "s|Your name|$MY_NAME|g" /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/config.ini
  7072. # create a user password
  7073. get_blog_admin_password
  7074. if [ ! $FULLBLOG_ADMIN_PASSWORD ]; then
  7075. FULLBLOG_ADMIN_PASSWORD=$(openssl rand -base64 16)
  7076. echo '' >> /home/$MY_USERNAME/README
  7077. echo '' >> /home/$MY_USERNAME/README
  7078. echo 'HTMLy Blog' >> /home/$MY_USERNAME/README
  7079. echo '==========' >> /home/$MY_USERNAME/README
  7080. echo "Your blog username: $MY_USERNAME" >> /home/$MY_USERNAME/README
  7081. echo "Your blog password is: $FULLBLOG_ADMIN_PASSWORD" >> /home/$MY_USERNAME/README
  7082. echo "Log into your blog at https://$FULLBLOG_DOMAIN_NAME/login" >> /home/$MY_USERNAME/README
  7083. echo 'Edit your blog title and time zone at:' >> /home/$MY_USERNAME/README
  7084. echo " /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/config.ini" >> /home/$MY_USERNAME/README
  7085. echo '' >> /home/$MY_USERNAME/README
  7086. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  7087. fi
  7088. # create a user
  7089. cp /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/users/username.ini.example /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/users/$MY_USERNAME.ini
  7090. HASHED_BLOG_PASSWORD="$(echo -n $FULLBLOG_ADMIN_PASSWORD | sha256sum | awk -F ' ' '{print $1}')"
  7091. sed -i "s|yourpassword|$HASHED_BLOG_PASSWORD|g" /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/users/$MY_USERNAME.ini
  7092. sed -i 's/encryption = clear/encryption = "sha256"/g' /var/www/$FULLBLOG_DOMAIN_NAME/htdocs/config/users/$MY_USERNAME.ini
  7093. nginx_ensite $FULLBLOG_DOMAIN_NAME
  7094. service php5-fpm restart
  7095. service nginx restart
  7096. # update the dynamic DNS
  7097. CURRENT_DDNS_DOMAIN=$FULLBLOG_DOMAIN_NAME
  7098. add_ddns_domain
  7099. echo 'install_blog' >> $COMPLETION_FILE
  7100. }
  7101. function install_gnu_social {
  7102. if grep -Fxq "install_gnu_social" $COMPLETION_FILE; then
  7103. return
  7104. fi
  7105. if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" ]]; then
  7106. return
  7107. fi
  7108. if [ ! $MICROBLOG_DOMAIN_NAME ]; then
  7109. echo 'No domain name was given for the microblog'
  7110. exit 7359
  7111. fi
  7112. install_mariadb
  7113. get_mariadb_password
  7114. repair_databases_script
  7115. apt-get -y install php-gettext php5-curl php5-gd php5-mysql git curl php-xml-parser
  7116. if [ ! -d /var/www/$MICROBLOG_DOMAIN_NAME ]; then
  7117. mkdir /var/www/$MICROBLOG_DOMAIN_NAME
  7118. fi
  7119. if [ ! -d /var/www/$MICROBLOG_DOMAIN_NAME/htdocs ]; then
  7120. mkdir /var/www/$MICROBLOG_DOMAIN_NAME/htdocs
  7121. fi
  7122. cd $INSTALL_DIR
  7123. git clone $MICROBLOG_REPO gnusocial
  7124. rm -rf /var/www/$MICROBLOG_DOMAIN_NAME/htdocs
  7125. mv gnusocial /var/www/$MICROBLOG_DOMAIN_NAME/htdocs
  7126. chmod a+w /var/www/$MICROBLOG_DOMAIN_NAME/htdocs
  7127. chown www-data:www-data /var/www/$MICROBLOG_DOMAIN_NAME/htdocs
  7128. chmod a+w /var/www/$MICROBLOG_DOMAIN_NAME/htdocs/avatar
  7129. chmod a+w /var/www/$MICROBLOG_DOMAIN_NAME/htdocs/background
  7130. chmod a+w /var/www/$MICROBLOG_DOMAIN_NAME/htdocs/file
  7131. chmod +x /var/www/$MICROBLOG_DOMAIN_NAME/htdocs/scripts/maildaemon.php
  7132. get_mariadb_gnusocial_admin_password
  7133. if [ ! $MICROBLOG_ADMIN_PASSWORD ]; then
  7134. MICROBLOG_ADMIN_PASSWORD=$(openssl rand -base64 32)
  7135. echo '' >> /home/$MY_USERNAME/README
  7136. echo '' >> /home/$MY_USERNAME/README
  7137. echo 'GNU Social' >> /home/$MY_USERNAME/README
  7138. echo '==========' >> /home/$MY_USERNAME/README
  7139. echo "Your MariaDB gnusocial admin password is: $MICROBLOG_ADMIN_PASSWORD" >> /home/$MY_USERNAME/README
  7140. echo '' >> /home/$MY_USERNAME/README
  7141. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  7142. fi
  7143. echo "create database gnusocial;
  7144. CREATE USER 'gnusocialadmin'@'localhost' IDENTIFIED BY '$MICROBLOG_ADMIN_PASSWORD';
  7145. GRANT ALL PRIVILEGES ON gnusocial.* TO 'gnusocialadmin'@'localhost';
  7146. quit" > $INSTALL_DIR/batch.sql
  7147. chmod 600 $INSTALL_DIR/batch.sql
  7148. mysql -u root --password="$MARIADB_PASSWORD" < $INSTALL_DIR/batch.sql
  7149. shred -zu $INSTALL_DIR/batch.sql
  7150. if [ ! -f "/etc/aliases" ]; then
  7151. touch /etc/aliases
  7152. fi
  7153. if grep -q "www-data: root" /etc/aliases; then
  7154. echo 'www-data: root' >> /etc/aliases
  7155. fi
  7156. if grep -q "/var/www/$MICROBLOG_DOMAIN_NAME/htdocs/scripts/maildaemon.php" /etc/aliases; then
  7157. echo "*: /var/www/$MICROBLOG_DOMAIN_NAME/htdocs/scripts/maildaemon.php" >> /etc/aliases
  7158. fi
  7159. newaliases
  7160. # update the dynamic DNS
  7161. CURRENT_DDNS_DOMAIN=$MICROBLOG_DOMAIN_NAME
  7162. add_ddns_domain
  7163. echo 'server {' > /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7164. echo ' listen 80;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7165. echo " server_name $MICROBLOG_DOMAIN_NAME;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7166. echo " root /var/www/$MICROBLOG_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7167. echo ' access_log off;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7168. echo " error_log /var/log/nginx/$MICROBLOG_DOMAIN_NAME_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7169. echo ' index index.php;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7170. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7171. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7172. echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
  7173. echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7174. echo ' rewrite ^ https://$server_name$request_uri? permanent;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7175. echo '}' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7176. echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7177. echo 'server {' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7178. echo ' listen 443 ssl;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7179. echo " server_name $MICROBLOG_DOMAIN_NAME;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7180. echo " root /var/www/$MICROBLOG_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7181. echo ' index index.php index.html index.htm;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7182. echo ' access_log off;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7183. echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7184. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7185. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7186. echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7187. echo ' location ~* \.php$ {' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7188. echo ' # Zero-day exploit defense.' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7189. echo ' # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7190. echo ' try_files $uri $uri/ /index.php;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7191. echo ' fastcgi_split_path_info ^(.+\.php)(/.+)$;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7192. echo ' fastcgi_pass unix:/var/run/php5-fpm.sock;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7193. echo ' include fastcgi_params;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7194. echo ' fastcgi_index index.php;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7195. echo ' fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7196. echo ' fastcgi_read_timeout 300;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7197. echo ' }' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7198. echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7199. echo ' ssl on;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7200. echo " ssl_certificate /etc/ssl/certs/$MICROBLOG_DOMAIN_NAME.crt;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7201. echo " ssl_certificate_key /etc/ssl/private/$MICROBLOG_DOMAIN_NAME.key;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7202. echo " ssl_dhparam /etc/ssl/certs/$MICROBLOG_DOMAIN_NAME.dhparam;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7203. echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7204. echo ' ssl_session_timeout 5m;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7205. echo ' ssl_prefer_server_ciphers on;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7206. echo ' ssl_session_cache builtin:1000 shared:SSL:10m;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7207. echo " ssl_protocols $SSL_PROTOCOLS; # not possible to do exclusive" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7208. echo " ssl_ciphers '$SSL_CIPHERS';" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7209. echo ' add_header X-Frame-Options DENY;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7210. echo ' add_header X-Content-Type-Options nosniff;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7211. echo ' add_header Strict-Transport-Security max-age=15768000;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7212. echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7213. echo ' location / {' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7214. echo ' rewrite ^(.*)$ /index.php?p=$1 last;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7215. echo ' break;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7216. echo ' }' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7217. echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7218. echo ' location ~* ^/(.*)\.(ico|css|js|gif|png|jpg|bmp|JPG|jpeg)$ {' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7219. echo " root /var/www/$MICROBLOG_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7220. echo ' rewrite ^/(.*)$ /$1 break;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7221. echo ' access_log off;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7222. echo ' expires max;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7223. echo ' }' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7224. echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7225. echo ' client_max_body_size 15m;' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7226. echo '' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7227. echo " error_log /var/log/nginx/$MICROBLOG_DOMAIN_NAME_error_ssl.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7228. echo '}' >> /etc/nginx/sites-available/$MICROBLOG_DOMAIN_NAME
  7229. configure_php
  7230. if [ ! -f /etc/ssl/certs/$MICROBLOG_DOMAIN_NAME.dhparam ]; then
  7231. freedombone-addcert -h $MICROBLOG_DOMAIN_NAME
  7232. check_certificates $MICROBLOG_DOMAIN_NAME
  7233. fi
  7234. # Ensure that the database gets backed up locally, if remote
  7235. # backups are not being used
  7236. backup_databases_script_header
  7237. echo '' >> /usr/bin/backupdatabases
  7238. echo '# Backup the GNU Social database' >> /usr/bin/backupdatabases
  7239. echo 'TEMPFILE=/root/gnusocial.sql' >> /usr/bin/backupdatabases
  7240. echo 'DAILYFILE=/var/backups/gnusocial_daily.sql' >> /usr/bin/backupdatabases
  7241. echo 'mysqldump --password="$MYSQL_PASSWORD" gnusocial > $TEMPFILE' >> /usr/bin/backupdatabases
  7242. echo 'FILESIZE=$(stat -c%s $TEMPFILE)' >> /usr/bin/backupdatabases
  7243. echo 'if [ "$FILESIZE" -eq "0" ]; then' >> /usr/bin/backupdatabases
  7244. echo ' if [ -f $DAILYFILE ]; then' >> /usr/bin/backupdatabases
  7245. echo ' cp $DAILYFILE $TEMPFILE' >> /usr/bin/backupdatabases
  7246. echo '' >> /usr/bin/backupdatabases
  7247. echo ' # try to restore yesterdays database' >> /usr/bin/backupdatabases
  7248. echo ' mysql -u root --password="$MYSQL_PASSWORD" gnusocial -o < $DAILYFILE' >> /usr/bin/backupdatabases
  7249. echo '' >> /usr/bin/backupdatabases
  7250. echo ' # Send a warning email' >> /usr/bin/backupdatabases
  7251. echo ' echo "Unable to create a backup of the GNU Social database. Attempted to restore from yesterdays backup" | mail -s "GNU Social backup" $EMAIL' >> /usr/bin/backupdatabases
  7252. echo ' else' >> /usr/bin/backupdatabases
  7253. echo ' # Send a warning email' >> /usr/bin/backupdatabases
  7254. echo ' echo "Unable to create a backup of the GNU Social database." | mail -s "GNU Social backup" $EMAIL' >> /usr/bin/backupdatabases
  7255. echo ' fi' >> /usr/bin/backupdatabases
  7256. echo 'else' >> /usr/bin/backupdatabases
  7257. echo ' chmod 600 $TEMPFILE' >> /usr/bin/backupdatabases
  7258. echo ' mv $TEMPFILE $DAILYFILE' >> /usr/bin/backupdatabases
  7259. echo '' >> /usr/bin/backupdatabases
  7260. echo ' # Make the backup readable only by root' >> /usr/bin/backupdatabases
  7261. echo ' chmod 600 $DAILYFILE' >> /usr/bin/backupdatabases
  7262. echo 'fi' >> /usr/bin/backupdatabases
  7263. echo '' >> /etc/cron.weekly/backupdatabasesweekly
  7264. echo '# GNU Social' >> /etc/cron.weekly/backupdatabasesweekly
  7265. echo 'if [ -f /var/backups/gnusocial_weekly.sql ]; then' >> /etc/cron.weekly/backupdatabasesweekly
  7266. echo ' cp -f /var/backups/gnusocial_weekly.sql /var/backups/gnusocial_2weekly.sql' >> /etc/cron.weekly/backupdatabasesweekly
  7267. echo 'fi' >> /etc/cron.weekly/backupdatabasesweekly
  7268. echo 'if [ -f /var/backups/gnusocial_daily.sql ]; then' >> /etc/cron.weekly/backupdatabasesweekly
  7269. echo ' cp -f /var/backups/gnusocial_daily.sql /var/backups/gnusocial_weekly.sql' >> /etc/cron.weekly/backupdatabasesweekly
  7270. echo 'fi' >> /etc/cron.weekly/backupdatabasesweekly
  7271. echo '' >> /etc/cron.monthly/backupdatabasesmonthly
  7272. echo '# GNU Social' >> /etc/cron.monthly/backupdatabasesmonthly
  7273. echo 'if [ -f /var/backups/gnusocial_monthly.sql ]; then' >> /etc/cron.monthly/backupdatabasesmonthly
  7274. echo ' cp -f /var/backups/gnusocial_monthly.sql /var/backups/gnusocial_2monthly.sql' >> /etc/cron.monthly/backupdatabasesmonthly
  7275. echo 'fi' >> /etc/cron.monthly/backupdatabasesmonthly
  7276. echo 'if [ -f /var/backups/gnusocial_weekly.sql ]; then' >> /etc/cron.monthly/backupdatabasesmonthly
  7277. echo ' cp -f /var/backups/gnusocial_weekly.sql /var/backups/gnusocial_monthly.sql' >> /etc/cron.monthly/backupdatabasesmonthly
  7278. echo 'fi' >> /etc/cron.monthly/backupdatabasesmonthly
  7279. echo '/usr/bin/repairdatabase gnusocial' >> /etc/cron.hourly/repair
  7280. nginx_ensite $MICROBLOG_DOMAIN_NAME
  7281. service php5-fpm restart
  7282. service nginx restart
  7283. # some post-install instructions for the user
  7284. if ! grep -q "To set up your microblog" /home/$MY_USERNAME/README; then
  7285. echo '' >> /home/$MY_USERNAME/README
  7286. echo '' >> /home/$MY_USERNAME/README
  7287. echo 'Microblog' >> /home/$MY_USERNAME/README
  7288. echo '=========' >> /home/$MY_USERNAME/README
  7289. echo "To set up your microblog go to" >> /home/$MY_USERNAME/README
  7290. echo "https://$MICROBLOG_DOMAIN_NAME/install.php" >> /home/$MY_USERNAME/README
  7291. echo 'and enter the following settings:' >> /home/$MY_USERNAME/README
  7292. echo ' - Set a name for the site' >> /home/$MY_USERNAME/README
  7293. echo ' - Server SSL: enable' >> /home/$MY_USERNAME/README
  7294. echo ' - Hostname: localhost' >> /home/$MY_USERNAME/README
  7295. echo ' - Type: MySql/MariaDB' >> /home/$MY_USERNAME/README
  7296. echo ' - Name: gnusocial' >> /home/$MY_USERNAME/README
  7297. echo ' - DB username: root' >> /home/$MY_USERNAME/README
  7298. echo " - DB Password; $MARIADB_PASSWORD" >> /home/$MY_USERNAME/README
  7299. echo " - Administrator nickname: $MY_USERNAME" >> /home/$MY_USERNAME/README
  7300. echo " - Administrator password: $MICROBLOG_ADMIN_PASSWORD" >> /home/$MY_USERNAME/README
  7301. echo ' - Subscribe to announcements: ticked' >> /home/$MY_USERNAME/README
  7302. echo ' - Site profile: Community' >> /home/$MY_USERNAME/README
  7303. echo '' >> /home/$MY_USERNAME/README
  7304. echo 'When the install is complete you will see a lot of warnings' >> /home/$MY_USERNAME/README
  7305. echo 'but just ignore those and navigate to ' >> /home/$MY_USERNAME/README
  7306. echo "https://$MICROBLOG_DOMAIN_NAME and you can then " >> /home/$MY_USERNAME/README
  7307. echo 'complete the configuration via the *Admin* section on the header' >> /home/$MY_USERNAME/README
  7308. echo 'bar. Some recommended admin settings are:' >> /home/$MY_USERNAME/README
  7309. echo '' >> /home/$MY_USERNAME/README
  7310. echo 'Under the *Site* settings:' >> /home/$MY_USERNAME/README
  7311. echo ' Text limit: 140' >> /home/$MY_USERNAME/README
  7312. echo ' Dupe Limit: 60000' >> /home/$MY_USERNAME/README
  7313. echo '' >> /home/$MY_USERNAME/README
  7314. echo 'Under the *User* settings:' >> /home/$MY_USERNAME/README
  7315. echo ' Bio limit: 1000' >> /home/$MY_USERNAME/README
  7316. echo '' >> /home/$MY_USERNAME/README
  7317. echo 'Under the *Access* settings:' >> /home/$MY_USERNAME/README
  7318. echo ' /Invite only/ ticked' >> /home/$MY_USERNAME/README
  7319. echo '' >> /home/$MY_USERNAME/README
  7320. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  7321. fi
  7322. echo 'install_gnu_social' >> $COMPLETION_FILE
  7323. }
  7324. function install_redmatrix {
  7325. if grep -Fxq "install_redmatrix" $COMPLETION_FILE; then
  7326. return
  7327. fi
  7328. if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" ]]; then
  7329. return
  7330. fi
  7331. if [ ! $REDMATRIX_DOMAIN_NAME ]; then
  7332. return
  7333. fi
  7334. install_mariadb
  7335. get_mariadb_password
  7336. repair_databases_script
  7337. apt-get -y install php5-common php5-cli php5-curl php5-gd php5-mysql php5-mcrypt git
  7338. if [ ! -d /var/www/$REDMATRIX_DOMAIN_NAME ]; then
  7339. mkdir /var/www/$REDMATRIX_DOMAIN_NAME
  7340. fi
  7341. if [ ! -d /var/www/$REDMATRIX_DOMAIN_NAME/htdocs ]; then
  7342. mkdir /var/www/$REDMATRIX_DOMAIN_NAME/htdocs
  7343. fi
  7344. if [ ! -f /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/index.php ]; then
  7345. cd $INSTALL_DIR
  7346. git clone $REDMATRIX_REPO redmatrix
  7347. rm -rf /var/www/$REDMATRIX_DOMAIN_NAME/htdocs
  7348. mv redmatrix /var/www/$REDMATRIX_DOMAIN_NAME/htdocs
  7349. chown -R www-data:www-data /var/www/$REDMATRIX_DOMAIN_NAME/htdocs
  7350. git clone $REDMATRIX_ADDONS_REPO /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/addon
  7351. # some extra themes
  7352. git clone https://github.com/DeadSuperHero/redmatrix-themes /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/redmatrix-themes1
  7353. cp -r /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/redmatrix-themes1/* view/theme/
  7354. fi
  7355. get_mariadb_redmatrix_admin_password
  7356. if [ ! $REDMATRIX_ADMIN_PASSWORD ]; then
  7357. REDMATRIX_ADMIN_PASSWORD=$(openssl rand -base64 32)
  7358. echo '' >> /home/$MY_USERNAME/README
  7359. echo '' >> /home/$MY_USERNAME/README
  7360. echo 'Red Matrix' >> /home/$MY_USERNAME/README
  7361. echo '==========' >> /home/$MY_USERNAME/README
  7362. echo "Your MariaDB Red Matrix admin password is: $REDMATRIX_ADMIN_PASSWORD" >> /home/$MY_USERNAME/README
  7363. echo '' >> /home/$MY_USERNAME/README
  7364. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  7365. fi
  7366. echo "create database redmatrix;
  7367. CREATE USER 'redmatrixadmin'@'localhost' IDENTIFIED BY '$REDMATRIX_ADMIN_PASSWORD';
  7368. GRANT ALL PRIVILEGES ON redmatrix.* TO 'redmatrixadmin'@'localhost';
  7369. quit" > $INSTALL_DIR/batch.sql
  7370. chmod 600 $INSTALL_DIR/batch.sql
  7371. mysql -u root --password="$MARIADB_PASSWORD" < $INSTALL_DIR/batch.sql
  7372. shred -zu $INSTALL_DIR/batch.sql
  7373. if ! grep -q "/var/www/$REDMATRIX_DOMAIN_NAME/htdocs" /etc/crontab; then
  7374. echo "12,22,32,42,52 * * * * root cd /var/www/$REDMATRIX_DOMAIN_NAME/htdocs; /usr/bin/timeout 240 /usr/bin/php include/poller.php" >> /etc/crontab
  7375. fi
  7376. # update the dynamic DNS
  7377. CURRENT_DDNS_DOMAIN=$REDMATRIX_DOMAIN_NAME
  7378. add_ddns_domain
  7379. echo 'server {' > /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7380. echo ' listen 80;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7381. echo " server_name $REDMATRIX_DOMAIN_NAME;" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7382. echo " root /var/www/$REDMATRIX_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7383. echo ' access_log off;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7384. echo " error_log /var/log/nginx/$REDMATRIX_DOMAIN_NAME_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7385. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7386. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7387. echo ' index index.php;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7388. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7389. echo ' rewrite ^ https://$server_name$request_uri? permanent;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7390. echo '}' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7391. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7392. echo 'server {' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7393. echo ' listen 443 ssl;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7394. echo " root /var/www/$REDMATRIX_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7395. echo " server_name $REDMATRIX_DOMAIN_NAME;" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7396. echo " error_log /var/log/nginx/$REDMATRIX_DOMAIN_NAME_error_ssl.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7397. echo ' index index.php;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7398. echo ' charset utf-8;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7399. echo ' client_max_body_size 20m;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7400. echo ' client_body_buffer_size 128k;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7401. echo ' access_log off;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7402. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7403. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7404. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7405. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7406. echo ' ssl on;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7407. echo " ssl_certificate /etc/ssl/certs/$REDMATRIX_DOMAIN_NAME.crt;" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7408. echo " ssl_certificate_key /etc/ssl/private/$REDMATRIX_DOMAIN_NAME.key;" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7409. echo " ssl_dhparam /etc/ssl/certs/$REDMATRIX_DOMAIN_NAME.dhparam;" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7410. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7411. echo ' ssl_session_timeout 5m;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7412. echo ' ssl_prefer_server_ciphers on;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7413. echo ' ssl_session_cache builtin:1000 shared:SSL:10m;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7414. echo " ssl_protocols $SSL_PROTOCOLS; # not possible to do exclusive" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7415. echo " ssl_ciphers '$SSL_CIPHERS';" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7416. echo ' add_header X-Frame-Options DENY;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7417. echo ' add_header X-Content-Type-Options nosniff;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7418. echo ' add_header Strict-Transport-Security max-age=15768000;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7419. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7420. echo ' # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7421. echo ' location / {' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7422. echo ' rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7423. echo ' }' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7424. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7425. echo " # make sure webfinger and other well known services aren't blocked" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7426. echo ' # by denying dot files and rewrite request to the front controller' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7427. echo ' location ^~ /.well-known/ {' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7428. echo ' allow all;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7429. echo ' rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7430. echo ' }' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7431. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7432. echo ' # statically serve these file types when possible' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7433. echo ' # otherwise fall back to front controller' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7434. echo ' # allow browser to cache them' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7435. echo ' # added .htm for advanced source code editor library' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7436. echo ' location ~* \.(jpg|jpeg|gif|png|ico|css|js|htm|html|ttf|woff|svg)$ {' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7437. echo ' expires 30d;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7438. echo ' try_files $uri /index.php?q=$uri&$args;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7439. echo ' }' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7440. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7441. echo ' # block these file types' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7442. echo ' location ~* \.(tpl|md|tgz|log|out)$ {' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7443. echo ' deny all;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7444. echo ' }' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7445. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7446. echo ' # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7447. echo ' # or a unix socket' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7448. echo ' location ~* \.php$ {' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7449. echo ' # Zero-day exploit defense.' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7450. echo ' # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7451. echo " # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7452. echo " # server, which is entirely possible with php-fpm/php-fcgi." >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7453. echo " # Comment the 'try_files' line out if you set up php-fpm/php-fcgi on" >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7454. echo " # another machine. And then cross your fingers that you won't get hacked." >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7455. echo ' try_files $uri $uri/ /index.php;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7456. echo ' # NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7457. echo ' fastcgi_split_path_info ^(.+\.php)(/.+)$;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7458. echo ' # With php5-cgi alone:' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7459. echo ' # fastcgi_pass 127.0.0.1:9000;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7460. echo ' # With php5-fpm:' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7461. echo ' fastcgi_pass unix:/var/run/php5-fpm.sock;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7462. echo ' include fastcgi_params;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7463. echo ' fastcgi_index index.php;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7464. echo ' fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7465. echo ' fastcgi_read_timeout 300;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7466. echo ' }' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7467. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7468. echo ' # deny access to all dot files' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7469. echo ' location ~ /\. {' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7470. echo ' deny all;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7471. echo ' }' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7472. echo '' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7473. echo ' location ~ /\.ht {' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7474. echo ' deny all;' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7475. echo ' }' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7476. echo '}' >> /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME
  7477. configure_php
  7478. if [ ! -f /etc/ssl/certs/$REDMATRIX_DOMAIN_NAME.dhparam ]; then
  7479. freedombone-addcert -h $REDMATRIX_DOMAIN_NAME
  7480. check_certificates $REDMATRIX_DOMAIN_NAME
  7481. fi
  7482. if [ ! -d /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/view/tpl/smarty3 ]; then
  7483. mkdir /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/view/tpl/smarty3
  7484. fi
  7485. if [ ! -d "/var/www/$REDMATRIX_DOMAIN_NAME/htdocs/store" ]; then
  7486. mkdir "/var/www/$REDMATRIX_DOMAIN_NAME/htdocs/store"
  7487. fi
  7488. if [ ! -d "/var/www/$REDMATRIX_DOMAIN_NAME/htdocs/store/[data]" ]; then
  7489. mkdir "/var/www/$REDMATRIX_DOMAIN_NAME/htdocs/store/[data]"
  7490. fi
  7491. if [ ! -d "/var/www/$REDMATRIX_DOMAIN_NAME/htdocs/store/[data]/smarty3" ]; then
  7492. mkdir "/var/www/$REDMATRIX_DOMAIN_NAME/htdocs/store/[data]/smarty3"
  7493. chmod 777 "/var/www/$REDMATRIX_DOMAIN_NAME/htdocs/store/[data]/smarty3"
  7494. fi
  7495. chmod 777 /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/view/tpl
  7496. chown -R www-data:www-data "/var/www/$REDMATRIX_DOMAIN_NAME/htdocs/store"
  7497. chmod 777 /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/view/tpl/smarty3
  7498. # Ensure that the database gets backed up locally, if remote
  7499. # backups are not being used
  7500. backup_databases_script_header
  7501. echo '' >> /usr/bin/backupdatabases
  7502. echo '# Backup the Red Matrix database' >> /usr/bin/backupdatabases
  7503. echo 'TEMPFILE=/root/redmatrix.sql' >> /usr/bin/backupdatabases
  7504. echo 'DAILYFILE=/var/backups/redmatrix_daily.sql' >> /usr/bin/backupdatabases
  7505. echo 'mysqldump --password="$MYSQL_PASSWORD" redmatrix > $TEMPFILE' >> /usr/bin/backupdatabases
  7506. echo 'FILESIZE=$(stat -c%s $TEMPFILE)' >> /usr/bin/backupdatabases
  7507. echo 'if [ "$FILESIZE" -eq "0" ]; then' >> /usr/bin/backupdatabases
  7508. echo ' if [ -f $DAILYFILE ]; then' >> /usr/bin/backupdatabases
  7509. echo ' cp $DAILYFILE $TEMPFILE' >> /usr/bin/backupdatabases
  7510. echo '' >> /usr/bin/backupdatabases
  7511. echo ' # try to restore yesterdays database' >> /usr/bin/backupdatabases
  7512. echo ' mysql -u root --password="$MYSQL_PASSWORD" redmatrix -o < $DAILYFILE' >> /usr/bin/backupdatabases
  7513. echo '' >> /usr/bin/backupdatabases
  7514. echo ' # Send a warning email' >> /usr/bin/backupdatabases
  7515. echo ' echo "Unable to create a backup of the Red Matrix database. Attempted to restore from yesterdays backup" | mail -s "Red Matrix backup" $EMAIL' >> /usr/bin/backupdatabases
  7516. echo ' else' >> /usr/bin/backupdatabases
  7517. echo ' # Send a warning email' >> /usr/bin/backupdatabases
  7518. echo ' echo "Unable to create a backup of the Red Matrix database." | mail -s "Red Matrix backup" $EMAIL' >> /usr/bin/backupdatabases
  7519. echo ' fi' >> /usr/bin/backupdatabases
  7520. echo 'else' >> /usr/bin/backupdatabases
  7521. echo ' chmod 600 $TEMPFILE' >> /usr/bin/backupdatabases
  7522. echo ' mv $TEMPFILE $DAILYFILE' >> /usr/bin/backupdatabases
  7523. echo '' >> /usr/bin/backupdatabases
  7524. echo ' # Make the backup readable only by root' >> /usr/bin/backupdatabases
  7525. echo ' chmod 600 $DAILYFILE' >> /usr/bin/backupdatabases
  7526. echo 'fi' >> /usr/bin/backupdatabases
  7527. echo '' >> /etc/cron.weekly/backupdatabasesweekly
  7528. echo '# Red Matrix' >> /etc/cron.weekly/backupdatabasesweekly
  7529. echo 'if [ -f /var/backups/redmatrix_weekly.sql ]; then' >> /etc/cron.weekly/backupdatabasesweekly
  7530. echo ' cp -f /var/backups/redmatrix_weekly.sql /var/backups/redmatrix_2weekly.sql' >> /etc/cron.weekly/backupdatabasesweekly
  7531. echo 'fi' >> /etc/cron.weekly/backupdatabasesweekly
  7532. echo 'if [ -f /var/backups/redmatrix_daily.sql ]; then' >> /etc/cron.weekly/backupdatabasesweekly
  7533. echo ' cp -f /var/backups/redmatrix_daily.sql /var/backups/redmatrix_weekly.sql' >> /etc/cron.weekly/backupdatabasesweekly
  7534. echo 'fi' >> /etc/cron.weekly/backupdatabasesweekly
  7535. echo '' >> /etc/cron.monthly/backupdatabasesmonthly
  7536. echo '# Red Matrix' >> /etc/cron.monthly/backupdatabasesmonthly
  7537. echo 'if [ -f /var/backups/redmatrix_monthly.sql ]; then' >> /etc/cron.monthly/backupdatabasesmonthly
  7538. echo ' cp -f /var/backups/redmatrix_monthly.sql /var/backups/redmatrix_2monthly.sql' >> /etc/cron.monthly/backupdatabasesmonthly
  7539. echo 'fi' >> /etc/cron.monthly/backupdatabasesmonthly
  7540. echo 'if [ -f /var/backups/redmatrix_weekly.sql ]; then' >> /etc/cron.monthly/backupdatabasesmonthly
  7541. echo ' cp -f /var/backups/redmatrix_weekly.sql /var/backups/redmatrix_monthly.sql' >> /etc/cron.monthly/backupdatabasesmonthly
  7542. echo 'fi' >> /etc/cron.monthly/backupdatabasesmonthly
  7543. echo '/usr/bin/repairdatabase redmatrix' >> /etc/cron.hourly/repair
  7544. nginx_ensite $REDMATRIX_DOMAIN_NAME
  7545. service php5-fpm restart
  7546. service nginx restart
  7547. service cron restart
  7548. # some post-install instructions for the user
  7549. if ! grep -q "To set up your Red Matrix" /home/$MY_USERNAME/README; then
  7550. echo '' >> /home/$MY_USERNAME/README
  7551. echo "To set up your Red Matrix site go to" >> /home/$MY_USERNAME/README
  7552. echo "https://$REDMATRIX_DOMAIN_NAME" >> /home/$MY_USERNAME/README
  7553. echo 'You will need to have a non self-signed SSL certificate in order' >> /home/$MY_USERNAME/README
  7554. echo "to use Red Matrix. Put the public certificate in /etc/ssl/certs/$REDMATRIX_DOMAIN_NAME.crt" >> /home/$MY_USERNAME/README
  7555. echo "and the private certificate in /etc/ssl/private/$REDMATRIX_DOMAIN_NAME.key." >> /home/$MY_USERNAME/README
  7556. echo 'If there is an intermediate certificate needed (such as with StartSSL) then' >> /home/$MY_USERNAME/README
  7557. echo 'this will need to be concatenated onto the end of the crt file, like this:' >> /home/$MY_USERNAME/README
  7558. echo '' >> /home/$MY_USERNAME/README
  7559. echo " cat /etc/ssl/certs/$REDMATRIX_DOMAIN_NAME.crt /etc/ssl/chains/startssl-sub.class1.server.ca.pem > /etc/ssl/certs/$REDMATRIX_DOMAIN_NAME.bundle.crt" >> /home/$MY_USERNAME/README
  7560. echo '' >> /home/$MY_USERNAME/README
  7561. echo "Then change ssl_certificate to /etc/ssl/certs/$REDMATRIX_DOMAIN_NAME.bundle.crt" >> /home/$MY_USERNAME/README
  7562. echo "within /etc/nginx/sites-available/$REDMATRIX_DOMAIN_NAME" >> /home/$MY_USERNAME/README
  7563. echo '' >> /home/$MY_USERNAME/README
  7564. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  7565. fi
  7566. echo 'install_redmatrix' >> $COMPLETION_FILE
  7567. }
  7568. function script_for_attaching_usb_drive {
  7569. if grep -Fxq "script_for_attaching_usb_drive" $COMPLETION_FILE; then
  7570. return
  7571. fi
  7572. echo '#!/bin/bash' > /usr/bin/attach-music
  7573. echo 'remove-music' >> /usr/bin/attach-music
  7574. echo "if [ ! -d $USB_MOUNT ]; then" >> /usr/bin/attach-music
  7575. echo " mkdir $USB_MOUNT" >> /usr/bin/attach-music
  7576. echo 'fi' >> /usr/bin/attach-music
  7577. echo "mount /dev/sda1 $USB_MOUNT" >> /usr/bin/attach-music
  7578. echo "chown root:root $USB_MOUNT" >> /usr/bin/attach-music
  7579. echo "chown -R minidlna:minidlna $USB_MOUNT/*" >> /usr/bin/attach-music
  7580. echo 'service minidlna restart' >> /usr/bin/attach-music
  7581. echo 'minidlnad -R' >> /usr/bin/attach-music
  7582. chmod +x /usr/bin/attach-music
  7583. ln -s /usr/bin/attach-music /usr/bin/attach-usb
  7584. ln -s /usr/bin/attach-music /usr/bin/attach-videos
  7585. ln -s /usr/bin/attach-music /usr/bin/attach-pictures
  7586. ln -s /usr/bin/attach-music /usr/bin/attach-media
  7587. echo '#!/bin/bash' > /usr/bin/remove-music
  7588. echo "if [ -d $USB_MOUNT ]; then" >> /usr/bin/remove-music
  7589. echo " umount $USB_MOUNT" >> /usr/bin/remove-music
  7590. echo " rm -rf $USB_MOUNT" >> /usr/bin/remove-music
  7591. echo 'fi' >> /usr/bin/remove-music
  7592. chmod +x /usr/bin/remove-music
  7593. ln -s /usr/bin/remove-music /usr/bin/detach-music
  7594. ln -s /usr/bin/remove-music /usr/bin/detach-usb
  7595. ln -s /usr/bin/remove-music /usr/bin/remove-usb
  7596. ln -s /usr/bin/remove-music /usr/bin/detach-media
  7597. ln -s /usr/bin/remove-music /usr/bin/remove-media
  7598. ln -s /usr/bin/remove-music /usr/bin/detach-videos
  7599. ln -s /usr/bin/remove-music /usr/bin/remove-videos
  7600. ln -s /usr/bin/remove-music /usr/bin/detach-pictures
  7601. ln -s /usr/bin/remove-music /usr/bin/remove-pictures
  7602. echo 'script_for_attaching_usb_drive' >> $COMPLETION_FILE
  7603. }
  7604. function install_dlna_server {
  7605. if grep -Fxq "install_dlna_server" $COMPLETION_FILE; then
  7606. return
  7607. fi
  7608. if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" ]]; then
  7609. return
  7610. fi
  7611. apt-get -y install minidlna
  7612. if [ ! -f /etc/minidlna.conf ]; then
  7613. echo "ERROR: minidlna does not appear to have installed. $CHECK_MESSAGE"
  7614. exit 55
  7615. fi
  7616. sed -i "s|media_dir=/var/lib/minidlna|media_dir=A,/home/$MY_USERNAME/Music|g" /etc/minidlna.conf
  7617. if ! grep -q "/home/$MY_USERNAME/Pictures" /etc/minidlna.conf; then
  7618. echo "media_dir=P,/home/$MY_USERNAME/Pictures" >> /etc/minidlna.conf
  7619. fi
  7620. if ! grep -q "/home/$MY_USERNAME/Videos" /etc/minidlna.conf; then
  7621. echo "media_dir=V,/home/$MY_USERNAME/Videos" >> /etc/minidlna.conf
  7622. fi
  7623. if ! grep -q "$USB_MOUNT/Music" /etc/minidlna.conf; then
  7624. echo "media_dir=A,$USB_MOUNT/Music" >> /etc/minidlna.conf
  7625. fi
  7626. if ! grep -q "$USB_MOUNT/Pictures" /etc/minidlna.conf; then
  7627. echo "media_dir=P,$USB_MOUNT/Pictures" >> /etc/minidlna.conf
  7628. fi
  7629. if ! grep -q "$USB_MOUNT/Videos" /etc/minidlna.conf; then
  7630. echo "media_dir=V,$USB_MOUNT/Videos" >> /etc/minidlna.conf
  7631. fi
  7632. sed -i 's/#root_container=./root_container=B/g' /etc/minidlna.conf
  7633. sed -i 's/#network_interface=/network_interface=eth0/g' /etc/minidlna.conf
  7634. sed -i 's/#friendly_name=/friendly_name="Freedombone Media"/g' /etc/minidlna.conf
  7635. sed -i 's|#db_dir=/var/cache/minidlna|db_dir=/var/cache/minidlna|g' /etc/minidlna.conf
  7636. sed -i 's/#inotify=yes/inotify=yes/g' /etc/minidlna.conf
  7637. sed -i 's/#notify_interval=895/notify_interval=300/g' /etc/minidlna.conf
  7638. sed -i "s|#presentation_url=/|presentation_url=http://localhost:8200|g" /etc/minidlna.conf
  7639. service minidlna force-reload
  7640. service minidlna reload
  7641. sed -i 's/fs.inotify.max_user_watches*/fs.inotify.max_user_watches=65536/g' /etc/sysctl.conf
  7642. if ! grep -q "max_user_watches" $COMPLETION_FILE; then
  7643. echo 'fs.inotify.max_user_watches=65536' >> /etc/sysctl.conf
  7644. fi
  7645. /sbin/sysctl -p
  7646. echo 'install_dlna_server' >> $COMPLETION_FILE
  7647. }
  7648. function install_mediagoblin {
  7649. return
  7650. if grep -Fxq "install_mediagoblin" $COMPLETION_FILE; then
  7651. return
  7652. fi
  7653. if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" ]]; then
  7654. return
  7655. fi
  7656. if [ ! $MEDIAGOBLIN_DOMAIN_NAME ]; then
  7657. return
  7658. fi
  7659. apt-get -y install git-core python python-dev python-lxml python-imaging python-virtualenv
  7660. apt-get -y install postgresql postgresql-client python-psycopg2
  7661. apt-get -y install python-gst-1.0 libjpeg62-turbo-dev gstreamer1.0-plugins-base python-gobject
  7662. apt-get -y install gstreamer1.0-plugins-good gstreamer1.0-libav libav-tools gstreamer0.10-tools
  7663. apt-get -y install python-numpy python-scipy libsndfile1-dev python-gst0.10-dev
  7664. apt-get -y install gstreamer0.10-plugins-base gstreamer0.10-plugins-good gstreamer1.0-tools
  7665. su -c "createuser -A -D mediagoblin" - postgres
  7666. su -c "createdb -E UNICODE -O mediagoblin mediagoblin" - postgres
  7667. adduser --disabled-login --gecos 'Mediagoblin' mediagoblin
  7668. MEDIAGOBLIN_DOMAIN_ROOT="/home/mediagoblin"
  7669. MEDIAGOBLIN_PATH="$MEDIAGOBLIN_DOMAIN_ROOT/mediagoblin"
  7670. MEDIAGOBLIN_PATH_BIN="$MEDIAGOBLIN_PATH/mediagoblin/bin"
  7671. mkdir -p $MEDIAGOBLIN_DOMAIN_ROOT
  7672. chown -hR mediagoblin: $MEDIAGOBLIN_DOMAIN_ROOT
  7673. su -c "cd $MEDIAGOBLIN_DOMAIN_ROOT; git clone $MEDIAGOBLIN_REPO" - mediagoblin
  7674. cd $MEDIAGOBLIN_DOMAIN_ROOT
  7675. git checkout -q v0.7.1
  7676. su -c "cd $MEDIAGOBLIN_PATH; git submodule init" - mediagoblin
  7677. su -c "cd $MEDIAGOBLIN_PATH; git submodule update" - mediagoblin
  7678. su -c "cd $MEDIAGOBLIN_PATH; (virtualenv --python=python2 --system-site-packages . || cd $MEDIAGOBLIN_PATH; virtualenv --python=python2 .) && ./bin/python setup.py develop" - mediagoblin
  7679. su -c "cd $MEDIAGOBLIN_PATH; ./bin/easy_install flup" - mediagoblin
  7680. if [ -f $MEDIAGOBLIN_PATH/lib/python2.7/no-global-site-packages.txt ]; then
  7681. virtualenv deactivate
  7682. rm -f $MEDIAGOBLIN_PATH/lib/python2.7/no-global-site-packages.txt
  7683. su -c "cd $MEDIAGOBLIN_PATH; source bin/activate" - mediagoblin
  7684. fi
  7685. if [ -f $MEDIAGOBLIN_PATH/mediagoblin.example.ini ]; then
  7686. # this is for versions > 0.7.1
  7687. su -c "cp $MEDIAGOBLIN_PATH/mediagoblin.example.ini $MEDIAGOBLIN_PATH/mediagoblin_local.ini" - mediagoblin
  7688. sed -i 's|# data_basedir.*|data_basedir = "/var/lib/mediagoblin"|g' $MEDIAGOBLIN_PATH/mediagoblin_local.ini
  7689. else
  7690. su -c "cp $MEDIAGOBLIN_PATH/mediagoblin.ini $MEDIAGOBLIN_PATH/mediagoblin_local.ini" - mediagoblin
  7691. fi
  7692. sed -i 's|# sql_engine.*|sql_engine = postgresql:///mediagoblin|g' $MEDIAGOBLIN_PATH/mediagoblin_local.ini
  7693. sed -i "s/email_sender_address.*/email_sender_address = \"$MY_EMAIL_ADDRESS\"/g" $MEDIAGOBLIN_PATH/mediagoblin_local.ini
  7694. sed -i 's|email_debug_mode.*|email_debug_mode = false|g' $MEDIAGOBLIN_PATH/mediagoblin_local.ini
  7695. # add extra media types
  7696. if ! grep -q "media_types.stl" $MEDIAGOBLIN_PATH/mediagoblin_local.ini; then
  7697. echo '[[mediagoblin.media_types.stl]]' >> $MEDIAGOBLIN_PATH/mediagoblin_local.ini
  7698. fi
  7699. if ! grep -q "media_types.audio" $MEDIAGOBLIN_PATH/mediagoblin_local.ini; then
  7700. echo '[[mediagoblin.media_types.audio]]' >> $MEDIAGOBLIN_PATH/mediagoblin_local.ini
  7701. fi
  7702. if ! grep -q "media_types.video" $MEDIAGOBLIN_PATH/mediagoblin_local.ini; then
  7703. echo '[[mediagoblin.media_types.video]]' >> $MEDIAGOBLIN_PATH/mediagoblin_local.ini
  7704. fi
  7705. #su -c 'cd $MEDIAGOBLIN_PATH; ./bin/pip install scikits.audiolab' - mediagoblin
  7706. #su -c "cd $MEDIAGOBLIN_PATH; git submodule update && ./bin/python setup.py develop --upgrade && ./bin/gmg dbupdate" - mediagoblin
  7707. su -c "cd $MEDIAGOBLIN_PATH; ./bin/gmg dbupdate" - mediagoblin
  7708. echo 'server {' > /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7709. echo ' listen 80;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7710. echo " server_name $MEDIAGOBLIN_DOMAIN_NAME;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7711. echo ' access_log off;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7712. echo " error_log /var/log/nginx/$MEDIAGOBLIN_DOMAIN_NAME_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7713. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7714. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7715. echo ' location / {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7716. echo ' proxy_pass http://localhost:6543;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7717. echo ' }' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7718. echo ' location ^~ /auth/ {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7719. echo ' rewrite ^ https://$server_name$request_uri?;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7720. echo ' }' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7721. echo ' location ^~ /u/ {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7722. echo ' rewrite ^ https://$server_name$request_uri?;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7723. echo ' }' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7724. echo ' location ^~ /submit/ {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7725. echo ' rewrite ^ https://$server_name$request_uri?;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7726. echo ' }' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7727. echo '}' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7728. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7729. echo 'server {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7730. echo ' listen 443 ssl;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7731. echo " root /var/www/$MEDIAGOBLIN_DOMAIN_NAME/htdocs;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7732. echo " server_name $MEDIAGOBLIN_DOMAIN_NAME;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7733. echo ' access_log off;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7734. echo " error_log /var/log/nginx/$MEDIAGOBLIN_DOMAIN_NAME_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7735. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7736. echo ' limit_conn conn_limit_per_ip 10;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7737. echo ' limit_req zone=req_limit_per_ip burst=10 nodelay;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7738. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7739. echo ' ssl on;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7740. echo " ssl_certificate /etc/ssl/certs/$MEDIAGOBLIN_DOMAIN_NAME.crt;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7741. echo " ssl_certificate_key /etc/ssl/private/$MEDIAGOBLIN_DOMAIN_NAME.key;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7742. echo " ssl_dhparam /etc/ssl/certs/$MEDIAGOBLIN_DOMAIN_NAME.dhparam;" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7743. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7744. echo ' ssl_session_timeout 5m;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7745. echo ' ssl_prefer_server_ciphers on;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7746. echo " ssl_protocols $SSL_PROTOCOLS; # not possible to do exclusive" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7747. echo " ssl_ciphers '$SSL_CIPHERS';" >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7748. echo ' add_header X-Frame-Options DENY;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7749. echo ' add_header X-Content-Type-Options nosniff;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7750. echo ' add_header Strict-Transport-Security max-age=0;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7751. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7752. echo ' location / {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7753. echo ' proxy_pass http://localhost:6543;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7754. echo ' }' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7755. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7756. echo ' client_max_body_size 10G; # set max upload size' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7757. echo ' client_body_buffer_size 128k;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7758. echo ' fastcgi_buffers 64 4K;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7759. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7760. echo ' error_page 403 /core/templates/403.php;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7761. echo ' error_page 404 /core/templates/404.php;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7762. echo '' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7763. echo ' location = /robots.txt {' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7764. echo ' allow all;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7765. echo ' log_not_found off;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7766. echo ' access_log off;' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7767. echo ' }' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7768. echo '}' >> /etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME
  7769. if [ ! -f /etc/ssl/certs/$MEDIAGOBLIN_DOMAIN_NAME.dhparam ]; then
  7770. freedombone-addcert -h $MEDIAGOBLIN_DOMAIN_NAME
  7771. check_certificates $MEDIAGOBLIN_DOMAIN_NAME
  7772. fi
  7773. nginx_ensite $MEDIAGOBLIN_DOMAIN_NAME
  7774. service php5-fpm restart
  7775. service nginx restart
  7776. /usr/sbin/nginx -s reload
  7777. # update the dynamic DNS
  7778. CURRENT_DDNS_DOMAIN=$MEDIAGOBLIN_DOMAIN_NAME
  7779. add_ddns_domain
  7780. # init with systemd
  7781. echo '[Unit]' > /etc/systemd/system/mediagoblin.service
  7782. echo 'Description=Mediagoblin (Media Server)' >> /etc/systemd/system/mediagoblin.service
  7783. echo 'After=syslog.target' >> /etc/systemd/system/mediagoblin.service
  7784. echo 'After=network.target' >> /etc/systemd/system/mediagoblin.service
  7785. echo 'After=postgresql.service' >> /etc/systemd/system/mediagoblin.service
  7786. echo '' >> /etc/systemd/system/mediagoblin.service
  7787. echo '[Service]' >> /etc/systemd/system/mediagoblin.service
  7788. echo 'Type=simple' >> /etc/systemd/system/mediagoblin.service
  7789. echo 'User=mediagoblin' >> /etc/systemd/system/mediagoblin.service
  7790. echo 'Group=mediagoblin' >> /etc/systemd/system/mediagoblin.service
  7791. echo 'WorkingDirectory=/home/mediagoblin/mediagoblin' >> /etc/systemd/system/mediagoblin.service
  7792. echo 'ExecStart=/home/mediagoblin/mediagoblin/lazyserver.sh --server-name=broadcast' >> /etc/systemd/system/mediagoblin.service
  7793. echo 'Restart=always' >> /etc/systemd/system/mediagoblin.service
  7794. echo 'Environment="USER=mediagoblin","HOME=/home/mediagoblin"' >> /etc/systemd/system/mediagoblin.service
  7795. echo '' >> /etc/systemd/system/mediagoblin.service
  7796. echo '[Install]' >> /etc/systemd/system/mediagoblin.service
  7797. echo 'WantedBy=multi-user.target' >> /etc/systemd/system/mediagoblin.service
  7798. systemctl enable mediagoblin
  7799. systemctl restart mediagoblin
  7800. echo 'install_mediagoblin' >> $COMPLETION_FILE
  7801. }
  7802. function create_upgrade_script {
  7803. if grep -Fxq "create_upgrade_script" $COMPLETION_FILE; then
  7804. return
  7805. fi
  7806. echo '#!/bin/bash' > /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7807. echo '' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7808. echo 'apt-get -y update' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7809. echo 'apt-get -y upgrade' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7810. if grep -Fxq "install_redmatrix" $COMPLETION_FILE; then
  7811. echo '' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7812. echo '# Red Matrix' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7813. echo "cd /var/www/$REDMATRIX_DOMAIN_NAME/htdocs" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7814. echo 'git stash' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7815. echo 'git stash drop' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7816. echo 'git pull' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7817. echo "cd /var/www/$REDMATRIX_DOMAIN_NAME/htdocs/addon" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7818. echo 'git stash' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7819. echo 'git stash drop' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7820. echo 'git pull' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7821. echo "chown -R www-data:www-data /var/www/$REDMATRIX_DOMAIN_NAME/htdocs" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7822. fi
  7823. if grep -Fxq "install_gnu_social" $COMPLETION_FILE; then
  7824. echo '' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7825. echo '# GNU Social' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7826. echo "cd /var/www/$MICROBLOG_DOMAIN_NAME/htdocs" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7827. echo 'git stash' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7828. echo 'git stash drop' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7829. echo 'git pull' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7830. echo "chown -R www-data:www-data /var/www/$MICROBLOG_DOMAIN_NAME/htdocs" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7831. fi
  7832. if grep -Fxq "install_blog" $COMPLETION_FILE; then
  7833. echo '' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7834. echo '# Blog' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7835. echo "cd /var/www/$FULLBLOG_DOMAIN_NAME/htdocs" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7836. echo 'git stash' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7837. echo 'git stash drop' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7838. echo 'git pull' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7839. echo "chown -R www-data:www-data /var/www/$FULLBLOG_DOMAIN_NAME/htdocs" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7840. fi
  7841. if grep -Fxq "install_owncloud_music_app" $COMPLETION_FILE; then
  7842. echo '' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7843. echo '# Owncloud music app' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7844. echo "cd /usr/share/owncloud/apps/music" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7845. echo 'git stash' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7846. echo 'git stash drop' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7847. echo 'git pull' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7848. fi
  7849. if grep -Fxq "install_cjdns" $COMPLETION_FILE; then
  7850. echo '' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7851. echo '# cjdns' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7852. echo "cd /etc/cjdns" >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7853. echo 'git stash' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7854. echo 'git stash drop' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7855. echo 'git pull' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7856. fi
  7857. if grep -Fxq "install_gogs" $COMPLETION_FILE; then
  7858. echo '' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7859. echo '# gogs' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7860. echo 'cd /home/git/go/src/github.com/gogits/gogs' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7861. echo 'git stash' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7862. echo 'git stash drop' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7863. echo 'git pull' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7864. echo 'chown -R git:git /home/git' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7865. echo 'chmod 600 /home/git/go/src/github.com/gogits/gogs/custom/conf/app.ini' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7866. echo 'GOPATH=/home/git/go' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7867. echo 'go build' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7868. echo 'systemctl restart gogs' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7869. echo 'systemctl daemon-reload' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7870. fi
  7871. echo 'exit 0' >> /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7872. chmod +x /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
  7873. echo 'create_upgrade_script' >> $COMPLETION_FILE
  7874. }
  7875. function intrusion_detection {
  7876. if grep -Fxq "intrusion_detection" $COMPLETION_FILE; then
  7877. return
  7878. fi
  7879. apt-get -y install tripwire
  7880. apt-get -y autoremove
  7881. cd /etc/tripwire
  7882. cp site.key $DEFAULT_DOMAIN_NAME-site.key
  7883. echo ''
  7884. echo ''
  7885. echo '*** Installing intrusion detection. Press Enter when asked for the local and site passphrases. ***'
  7886. echo ''
  7887. echo ''
  7888. tripwire --init
  7889. # make a script for easy resetting of the tripwire
  7890. echo '#!/bin/sh' > /usr/bin/reset-tripwire
  7891. echo 'tripwire --update-policy --secure-mode low /etc/tripwire/twpol.txt' >> /usr/bin/reset-tripwire
  7892. chmod +x /usr/bin/reset-tripwire
  7893. reset-tripwire
  7894. sed -i 's/SYSLOGREPORTING.*/SYSLOGREPORTING =false/g' /etc/tripwire/twcfg.txt
  7895. sed -i '/# These files change the behavior of the root account/,/}/ s/.*//g' /etc/tripwire/twpol.txt
  7896. sed -i 's|/etc/rc.boot.*||g' /etc/tripwire/twpol.txt
  7897. # Don't show any changes to /proc
  7898. sed -i 's|/proc.*||g' /etc/tripwire/twpol.txt
  7899. # Don't report log changes
  7900. sed -i 's|/var/log.*||g' /etc/tripwire/twpol.txt
  7901. # Ignore /etc/tripwire
  7902. if ! grep -q "!/etc/tripwire" /etc/tripwire/twpol.txt; then
  7903. sed -i '\|/etc\t\t->.*|a\ !/etc/tripwire;' /etc/tripwire/twpol.txt
  7904. fi
  7905. # Avoid logging the changed database
  7906. sed -i 's|$(TWETC)/tw.pol.*||g' /etc/tripwire/twpol.txt
  7907. reset-tripwire
  7908. echo 'intrusion_detection' >> $COMPLETION_FILE
  7909. }
  7910. # see https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy
  7911. # Local Redirection and Anonymizing Middlebox
  7912. function route_outgoing_traffic_through_tor {
  7913. if grep -Fxq "route_outgoing_traffic_through_tor" $COMPLETION_FILE; then
  7914. return
  7915. fi
  7916. if [[ $ROUTE_THROUGH_TOR != "yes" ]]; then
  7917. return
  7918. fi
  7919. apt-get -y install tor tor-arm
  7920. ### set variables
  7921. # Destinations you don't want routed through Tor
  7922. _non_tor="192.168.1.0/24 192.168.0.0/24"
  7923. # The user that Tor runs as
  7924. _tor_uid="debian-tor"
  7925. # Tor's TransPort
  7926. _trans_port="9040"
  7927. # Your internal interface
  7928. _int_if="eth0"
  7929. ### Set iptables *nat
  7930. iptables -t nat -A OUTPUT -o lo -j RETURN
  7931. iptables -t nat -A OUTPUT -m owner --uid-owner $_tor_uid -j RETURN
  7932. iptables -t nat -A OUTPUT -p udp --dport 53 -j REDIRECT --to-ports 53
  7933. # Allow clearnet access for hosts in $_non_tor
  7934. for _clearnet in $_non_tor; do
  7935. iptables -t nat -A OUTPUT -d $_clearnet -j RETURN
  7936. iptables -t nat -A PREROUTING -i $_int_if -d $_clearnet -j RETURN
  7937. done
  7938. # Redirect all other pre-routing and output to Tor
  7939. iptables -t nat -A OUTPUT -p tcp --syn -j REDIRECT --to-ports $_trans_port
  7940. iptables -t nat -A PREROUTING -i $_int_if -p udp --dport 53 -j REDIRECT --to-ports 53
  7941. iptables -t nat -A PREROUTING -i $_int_if -p tcp --syn -j REDIRECT --to-ports $_trans_port
  7942. ### set iptables *filter
  7943. iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
  7944. # Allow clearnet access for hosts in $_non_tor
  7945. for _clearnet in $_non_tor 127.0.0.0/8; do
  7946. iptables -A OUTPUT -d $_clearnet -j ACCEPT
  7947. done
  7948. # Allow only Tor output
  7949. iptables -A OUTPUT -m owner --uid-owner $_tor_uid -j ACCEPT
  7950. iptables -A OUTPUT -j REJECT
  7951. save_firewall_settings
  7952. if ! grep -q "fs.file-max" /etc/sysctl.conf; then
  7953. echo "fs.file-max=100000" >> /etc/sysctl.conf
  7954. /sbin/sysctl -p
  7955. fi
  7956. echo 'domain localdomain' > /etc/resolv.conf
  7957. echo 'search localdomain' >> /etc/resolv.conf
  7958. echo 'nameserver 127.0.0.1' >> /etc/resolv.conf
  7959. if ! grep -q "VirtualAddrNetworkIPv4" /etc/tor/torrc; then
  7960. echo 'VirtualAddrNetworkIPv4 10.192.0.0/10' >> /etc/tor/torrc
  7961. fi
  7962. if ! grep -q "AutomapHostsOnResolve" /etc/tor/torrc; then
  7963. echo 'AutomapHostsOnResolve 1' >> /etc/tor/torrc
  7964. fi
  7965. if ! grep -q "TransPort" /etc/tor/torrc; then
  7966. echo 'TransPort 9040' >> /etc/tor/torrc
  7967. fi
  7968. if ! grep -q "TransListenAddress 127.0.0.1" /etc/tor/torrc; then
  7969. echo 'TransListenAddress 127.0.0.1' >> /etc/tor/torrc
  7970. fi
  7971. if ! grep -q "TransListenAddress $LOCAL_NETWORK_STATIC_IP_ADDRESS" /etc/tor/torrc; then
  7972. echo "TransListenAddress $LOCAL_NETWORK_STATIC_IP_ADDRESS" >> /etc/tor/torrc
  7973. fi
  7974. if ! grep -q "DNSPort" /etc/tor/torrc; then
  7975. echo 'DNSPort 53' >> /etc/tor/torrc
  7976. fi
  7977. if ! grep -q "DNSListenAddress 127.0.0.1" /etc/tor/torrc; then
  7978. echo 'DNSListenAddress 127.0.0.1' >> /etc/tor/torrc
  7979. fi
  7980. if ! grep -q "DNSListenAddress $LOCAL_NETWORK_STATIC_IP_ADDRESS" /etc/tor/torrc; then
  7981. echo "DNSListenAddress $LOCAL_NETWORK_STATIC_IP_ADDRESS" >> /etc/tor/torrc
  7982. fi
  7983. echo 'route_outgoing_traffic_through_tor' >> $COMPLETION_FILE
  7984. }
  7985. # A command to create a git repository for a project
  7986. function create_git_project {
  7987. if grep -Fxq "create_git_project" $COMPLETION_FILE; then
  7988. return
  7989. fi
  7990. apt-get -y install git
  7991. echo '#!/bin/bash' > /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  7992. echo '' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  7993. echo 'GIT_PROJECT_NAME=$1' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  7994. echo 'if [ ! $GIT_PROJECT_NAME ]; then' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  7995. echo ' echo "Please specify a project name, without any spaces"' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  7996. echo ' exit 1' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  7997. echo 'fi' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  7998. echo '' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  7999. echo 'if [ ! -d /home/$USER/projects/$GIT_PROJECT_NAME ]; then' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  8000. echo ' mkdir -p /home/$USER/projects/$GIT_PROJECT_NAME' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  8001. echo 'fi' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  8002. echo '' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  8003. echo 'cd /home/$USER/projects/$GIT_PROJECT_NAME' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  8004. echo 'git init --bare' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  8005. echo '' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  8006. echo -n 'echo "Your project has been created, ' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  8007. echo 'use the following command to clone the repository"' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  8008. echo -n " git clone ssh://$MY_USERNAME@$DEFAULT_DOMAIN_NAME:$SSH_PORT" >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  8009. echo '/home/$USER/projects/$GIT_PROJECT_NAME' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  8010. echo '' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  8011. echo 'exit 0' >> /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  8012. chmod +x /usr/bin/$CREATE_GIT_PROJECT_COMMAND
  8013. echo 'create_git_project' >> $COMPLETION_FILE
  8014. }
  8015. # Create daily backups of any projects on Github
  8016. # Then if Github goes away, turns evil, is censored or has
  8017. # outages then you still have access to your projects
  8018. function backup_github_projects {
  8019. if grep -Fxq "backup_github_projects" $COMPLETION_FILE; then
  8020. return
  8021. fi
  8022. if [ ! $GITHUB_USERNAME ]; then
  8023. return 731
  8024. fi
  8025. if [ ! $GITHUB_BACKUP_DIRECTORY ]; then
  8026. return 732
  8027. fi
  8028. apt-get -y install git
  8029. # create a github backups directory if needed
  8030. if [ ! -d $GITHUB_BACKUP_DIRECTORY ]; then
  8031. mkdir -p $GITHUB_BACKUP_DIRECTORY
  8032. fi
  8033. # get the backup utility
  8034. cd $INSTALL_DIR
  8035. git clone https://github.com/josegonzalez/python-github-backup
  8036. # install it
  8037. cd $INSTALL_DIR/python-github-backup
  8038. python setup.py install
  8039. # add a daily cron entry
  8040. echo '#!/bin/bash' > /etc/cron.daily/github
  8041. echo "github-backup $GITHUB_USERNAME -o $GITHUB_BACKUP_DIRECTORY --repositories" >> /etc/cron.daily/github
  8042. echo 'exit 0' >> /etc/cron.daily/github
  8043. chmod +x /etc/cron.daily/github
  8044. # do an initial backup
  8045. /etc/cron.daily/github
  8046. echo 'backup_github_projects' >> $COMPLETION_FILE
  8047. }
  8048. function install_dynamicdns {
  8049. if grep -Fxq "install_dynamicdns" $COMPLETION_FILE; then
  8050. return
  8051. fi
  8052. # Here we compile from source because the current package
  8053. # doesn't support https, which could result in passwords
  8054. # being leaked
  8055. apt-get -y install build-essential curl libgnutls28-dev automake1.11
  8056. git clone https://github.com/bashrc/inadyn $INSTALL_DIR/inadyn
  8057. if [ ! -d $INSTALL_DIR/inadyn ]; then
  8058. echo 'inadyn repo not cloned'
  8059. exit 6785
  8060. fi
  8061. cd $INSTALL_DIR/inadyn
  8062. ./configure
  8063. if [ ! "$?" = "0" ]; then
  8064. exit 74890
  8065. fi
  8066. USE_OPENSSL=1 make
  8067. if [ ! "$?" = "0" ]; then
  8068. exit 74858
  8069. fi
  8070. make install
  8071. if [ ! "$?" = "0" ]; then
  8072. exit 3785
  8073. fi
  8074. # create an unprivileged user
  8075. #useradd -r -s /bin/false debian-inadyn
  8076. # create a configuration file
  8077. echo 'background' > /etc/inadyn.conf
  8078. echo 'verbose 1' >> /etc/inadyn.conf
  8079. echo 'period 300' >> /etc/inadyn.conf
  8080. echo 'startup-delay 60' >> /etc/inadyn.conf
  8081. echo 'cache-dir /run/inadyn' >> /etc/inadyn.conf
  8082. chmod 600 /etc/inadyn.conf
  8083. echo '[Unit]' > /etc/systemd/system/inadyn.service
  8084. echo 'Description=inadyn (DynDNS updater)' >> /etc/systemd/system/inadyn.service
  8085. echo 'After=network.target' >> /etc/systemd/system/inadyn.service
  8086. echo '' >> /etc/systemd/system/inadyn.service
  8087. echo '[Service]' >> /etc/systemd/system/inadyn.service
  8088. echo 'ExecStart=/usr/local/sbin/inadyn --config /etc/inadyn.conf' >> /etc/systemd/system/inadyn.service
  8089. echo 'Restart=always' >> /etc/systemd/system/inadyn.service
  8090. echo 'Type=forking' >> /etc/systemd/system/inadyn.service
  8091. echo '' >> /etc/systemd/system/inadyn.service
  8092. echo '[Install]' >> /etc/systemd/system/inadyn.service
  8093. echo 'WantedBy=multi-user.target' >> /etc/systemd/system/inadyn.service
  8094. systemctl enable inadyn
  8095. systemctl restart inadyn
  8096. systemctl daemon-reload
  8097. echo 'install_dynamicdns' >> $COMPLETION_FILE
  8098. }
  8099. function get_voip_server_password {
  8100. if [ -f /home/$MY_USERNAME/README ]; then
  8101. if grep -q "VoIP server password" /home/$MY_USERNAME/README; then
  8102. if [ ! $VOIP_SERVER_PASSWORD ]; then
  8103. VOIP_SERVER_PASSWORD=$(cat /home/$MY_USERNAME/README | grep "VoIP server password" | awk -F ':' '{print $2}' | sed 's/^ *//')
  8104. fi
  8105. fi
  8106. fi
  8107. }
  8108. function install_voip {
  8109. if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" ]]; then
  8110. return
  8111. fi
  8112. if grep -Fxq "install_voip" $COMPLETION_FILE; then
  8113. return
  8114. fi
  8115. apt-get -y install mumble-server
  8116. get_voip_server_password
  8117. if [ ! $VOIP_SERVER_PASSWORD ]; then
  8118. VOIP_SERVER_PASSWORD=$(openssl rand -base64 16)
  8119. fi
  8120. if [ ${#VOIP_SERVER_PASSWORD} -lt $MINIMUM_PASSWORD_LENGTH ]; then
  8121. VOIP_SERVER_PASSWORD=$(openssl rand -base64 16)
  8122. fi
  8123. # Make an ssl cert for the server
  8124. if [ ! -f /etc/ssl/certs/mumble.dhparam ]; then
  8125. freedombone-addcert -h mumble
  8126. check_certificates mumble
  8127. fi
  8128. # Check that the cert was created
  8129. if [ ! -f /etc/ssl/certs/mumble.crt ]; then
  8130. echo 'VoIP server certificate not created'
  8131. exit 57892
  8132. fi
  8133. if [ ! -f /etc/ssl/private/mumble.key ]; then
  8134. echo 'VoIP server key not created'
  8135. exit 57893
  8136. fi
  8137. sed -i "s|welcometext=.*|welcometext=\"<br />Welcome to $DEFAULT_DOMAIN_NAME <b>VoIP</b>.<br />Chat freely!<br />\"|g" /etc/mumble-server.ini
  8138. if [ $VOIP_SERVER_PASSWORD ]; then
  8139. sed -i "s|serverpassword=.*|serverpassword=$VOIP_SERVER_PASSWORD|g" /etc/mumble-server.ini
  8140. fi
  8141. sed -i 's|#autobanAttempts.*|autobanAttempts = 10|g' /etc/mumble-server.ini
  8142. sed -i 's|#autobanTimeframe.*|autobanTimeframe = 120|g' /etc/mumble-server.ini
  8143. sed -i 's|#autobanTime.*|autobanTime = 300|g' /etc/mumble-server.ini
  8144. sed -i 's|#sendversion=.*|sendversion=False|g' /etc/mumble-server.ini
  8145. sed -i 's|sendversion=.*|sendversion=False|g' /etc/mumble-server.ini
  8146. if ! grep -q "allowping" /etc/mumble-server.ini; then
  8147. echo 'allowping=False' >> /etc/mumble-server.ini
  8148. fi
  8149. sed -i 's|allowping=.*|allowping=False|g' /etc/mumble-server.ini
  8150. sed -i 's|#sslCert=.*|sslCert=/etc/ssl/certs/mumble.crt|g' /etc/mumble-server.ini
  8151. sed -i 's|#sslKey=.*|sslKey=/etc/ssl/privare/mumble.key|g' /etc/mumble-server.ini
  8152. sed -i 's|#certrequired=.*|certrequired=True|g' /etc/mumble-server.ini
  8153. sed -i 's|users=100|users=10|g' /etc/mumble-server.ini
  8154. sed -i 's|#channelnestinglimit=10|channelnestinglimit=10|g' /etc/mumble-server.ini
  8155. sed -i 's|#textmessagelength=.*|textmessagelength=1000|g' /etc/mumble-server.ini
  8156. sed -i 's|textmessagelength=.*|textmessagelength=1000|g' /etc/mumble-server.ini
  8157. sed -i 's|#imagemessagelength=.*|imagemessagelength=131072|g' /etc/mumble-server.ini
  8158. sed -i 's|#allowhtml=.*|allowhtml=False|g' /etc/mumble-server.ini
  8159. sed -i 's|allowhtml=.*|allowhtml=False|g' /etc/mumble-server.ini
  8160. sed -i "s|port=.*|port=$VOIP_PORT|g" /etc/mumble-server.ini
  8161. service mumble-server restart
  8162. if ! grep -q "VoIP Server" /home/$MY_USERNAME/README; then
  8163. echo '' >> /home/$MY_USERNAME/README
  8164. echo '' >> /home/$MY_USERNAME/README
  8165. echo 'VoIP Server' >> /home/$MY_USERNAME/README
  8166. echo '===========' >> /home/$MY_USERNAME/README
  8167. echo 'VoIP server username: mumble-server' >> /home/$MY_USERNAME/README
  8168. echo "VoIP server password: $VOIP_SERVER_PASSWORD" >> /home/$MY_USERNAME/README
  8169. echo '' >> /home/$MY_USERNAME/README
  8170. echo 'To connect to the VoIP server use your username and the server password shown above.' >> /home/$MY_USERNAME/README
  8171. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
  8172. fi
  8173. echo 'install_voip' >> $COMPLETION_FILE
  8174. }
  8175. function install_final {
  8176. if grep -Fxq "install_final" $COMPLETION_FILE; then
  8177. return
  8178. fi
  8179. # unmount any attached usb drive
  8180. if [ -d $USB_MOUNT ]; then
  8181. umount $USB_MOUNT
  8182. rm -rf $USB_MOUNT
  8183. fi
  8184. echo 'install_final' >> $COMPLETION_FILE
  8185. echo ''
  8186. echo ' *** Freedombone installation is complete. Rebooting... ***'
  8187. echo ''
  8188. if [ -f "/home/$MY_USERNAME/README" ]; then
  8189. echo "See /home/$MY_USERNAME/README for post-installation instructions."
  8190. echo ''
  8191. fi
  8192. reboot
  8193. }
  8194. read_configuration
  8195. parse_args
  8196. check_domains
  8197. install_not_on_BBB
  8198. remove_default_user
  8199. configure_firewall
  8200. configure_firewall_for_ssh
  8201. configure_firewall_for_dns
  8202. configure_firewall_for_ftp
  8203. configure_firewall_for_web_access
  8204. configure_firewall_for_cjdns
  8205. configure_firewall_for_voip
  8206. remove_proprietary_repos
  8207. change_debian_repos
  8208. enable_backports
  8209. configure_dns
  8210. install_dynamicdns
  8211. randomize_cron
  8212. create_freedns_updater
  8213. initial_setup
  8214. enforce_good_passwords
  8215. install_editor
  8216. change_login_message
  8217. update_the_kernel
  8218. enable_zram
  8219. random_number_generator
  8220. set_your_domain_name
  8221. time_synchronisation
  8222. configure_internet_protocol
  8223. create_git_project
  8224. install_cjdns
  8225. install_cjdns_tools
  8226. backup_github_projects
  8227. configure_ssh
  8228. remove_instructions_from_motd
  8229. check_hwrng
  8230. search_for_attached_usb_drive
  8231. regenerate_ssh_keys
  8232. create_upgrade_script
  8233. route_outgoing_traffic_through_tor
  8234. install_watchdog_script
  8235. configure_email
  8236. create_procmail
  8237. spam_filtering
  8238. configure_imap
  8239. configure_gpg
  8240. encrypt_incoming_email
  8241. encrypt_outgoing_email
  8242. email_client
  8243. email_archiving
  8244. email_from_address
  8245. configure_firewall_for_email
  8246. create_public_mailing_list
  8247. #create_private_mailing_list
  8248. encrypt_all_email
  8249. import_email
  8250. script_for_attaching_usb_drive
  8251. install_web_server
  8252. configure_firewall_for_web_server
  8253. install_owncloud
  8254. install_owncloud_music_app
  8255. install_gogs
  8256. install_xmpp
  8257. configure_firewall_for_xmpp
  8258. install_irc_server
  8259. configure_firewall_for_irc
  8260. install_voip
  8261. install_wiki
  8262. install_blog
  8263. install_gnu_social
  8264. install_redmatrix
  8265. install_dlna_server
  8266. configure_firewall_for_dlna
  8267. install_mediagoblin
  8268. repair_databases_script
  8269. create_backup_script
  8270. create_restore_script
  8271. backup_to_friends_servers
  8272. restore_from_friend
  8273. intrusion_detection
  8274. install_final
  8275. echo 'Freedombone installation is complete'
  8276. exit 0