softy 37.6 KB
Newer Older
Igor Pečovnik's avatar
Igor Pečovnik committed
1
#!/bin/bash
Igor Pecovnik's avatar
Igor Pecovnik committed
2
#
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
3
# Copyright (c) 2017 Igor Pecovnik, igor.pecovnik@gma**.com
Igor Pecovnik's avatar
Igor Pecovnik committed
4
#
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
5
6
7
# This file is licensed under the terms of the GNU General Public
# License version 2. This program is licensed "as is" without any
# warranty of any kind, whether express or implied.
8

9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
function check_status
{
#------------------------------------------------------------------------------------------------------------------------------------------
# Chech if service is already installed
#------------------------------------------------------------------------------------------------------------------------------------------
LIST=()
LIST_CONST=5
# Samba
SAMBA_STATUS="$([[ -f /etc/samba/smb.conf ]] && echo "on" || echo "off" )"
LIST+=( "Samba" "Windows compatible file sharing" "$SAMBA_STATUS" )
# cups
CUPS_STATUS="$([[ -f /etc/cups/cupsd.conf ]] && echo "on" || echo "off" )"
LIST+=( "CUPS" "Common UNIX Printing System (CUPS)" "$CUPS_STATUS" )
# tvheadend
TVHEADEND_STATUS="$([[ -n $(service tvheadend status | grep -w active | grep -w running) ]] && echo "on" || echo "off" )"
LIST+=( "TV headend" "TV streaming / proxy" "$TVHEADEND_STATUS" )
# synthing
SYNCTHING_STATUS="$([[ -f /usr/bin/syncthing ]] && echo "on" || echo "off" )"
LIST+=( "Syncthing" "Personal cloud @syncthing.net" "$SYNCTHING_STATUS" )
# vpn server
VPN_SERVER_STATUS="$([[ -d /usr/local/vpnserver ]] && echo "on" || echo "off" )"
LIST+=( "VPN server" "VPN server" "$VPN_SERVER_STATUS" )
# OMV
OMV_STATUS="$([[ -f /etc/default/openmediavault ]] && echo "on" || echo "off" )"
[[ "$family" == "Debian" ]] && LIST+=( "OMV" "OpenMediaVault NAS solution" "$OMV_STATUS" ) && LIST_CONST=4
# MINIdlna
MINIDLNA_STATUS="$([[ -f /etc/minidlna.conf ]] && echo "on" || echo "off" )"
LIST+=( "Minidlna" "Lightweight DLNA/UPnP-AV server" "$MINIDLNA_STATUS" )
# Pi hole
PI_HOLE_STATUS="$([[ -d /etc/pihole ]] && echo "on" || echo "off" )"
LIST+=( "Pi hole" "Ad blocker" "$PI_HOLE_STATUS" )
# Transmission
TRANSMISSION_STATUS="$([[ -f /etc/transmission-daemon/settings.json ]] && echo "on" || echo "off" )"
LIST+=( "Transmission" "Torrent downloading" "$TRANSMISSION_STATUS" )
# ISPconfig
ISPCONFIG_STATUS="$([[ -d /usr/local/ispconfig ]] && echo "on" || echo "off" )"
LIST+=( "ISPConfig" "Advanced LAMP + SMTP, IMAP, POP3" "$ISPCONFIG_STATUS" )
}

48
49
function choose_webserver
{
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
50
51
52
53
#------------------------------------------------------------------------------------------------------------------------------------------
# Target web server selection
#------------------------------------------------------------------------------------------------------------------------------------------
dialog --title "Choose a webserver" --backtitle "$backtitle" --yes-label "Apache" --no-label "Nginx" \
54
--yesno "\nChoose a web server which you are familiar with. They both work almost the same." 8 70
55
56
response=$?
case $response in
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
57
58
59
	0) server="apache";;
	1) server="nginx";;
	255) exit;;
60
61
62
63
64
65
66
esac
echo $server > /tmp/server
}


function server_conf
{
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
67
68
69
#------------------------------------------------------------------------------------------------------------------------------------------
# Add some reqired date for installation
#------------------------------------------------------------------------------------------------------------------------------------------
70
exec 3>&1
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
71
dialog --title "Server configuration" --separate-widget $'\n' --ok-label "Install" --backtitle "$backtitle" \
72
73
74
75
76
77
78
79
80
81
82
83
84
85
--form "\nPlease fill out this form:\n " \
12 70 0 \
"Your FQDN for $serverip:"	1 1 "$hostnamefqdn"         1 31 32 0 \
"Mysql root password:" 	  	2 1 "$mysql_pass"       			2 31 32 0 \
2>&1 1>&3 | {

read -r hostnamefqdn
read -r mysql_pass
echo $mysql_pass > /tmp/mysql_pass
echo $hostnamefqdn > /tmp/hostnamefqdn
# end
}
exec 3>&-
# read variables back
Igor Pecovnik's avatar
Igor Pecovnik committed
86
87
MYSQL_PASS=`cat /tmp/mysql_pass`
HOSTNAMEFQDN=`cat /tmp/hostnamefqdn`
88
89
90
91
92
}


install_packet ()
{
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
93
#------------------------------------------------------------------------------------------------------------------------------------------
94
# Install missing packets
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
95
#------------------------------------------------------------------------------------------------------------------------------------------
96
97
i=0
j=1
Igor Pecovnik's avatar
Igor Pecovnik committed
98
IFS=" "
99
100
101
102
declare -a PACKETS=($1)
skupaj=${#PACKETS[@]}
while [[ $i -lt $skupaj ]]; do
procent=$(echo "scale=2;($j/$skupaj)*100"|bc)
Igor Pecovnik's avatar
Igor Pecovnik committed
103
104
		x=${PACKETS[$i]}
		if [ $(dpkg-query -W -f='${Status}' $x 2>/dev/null | grep -c "ok installed") -eq 0 ]; then
105
			printf '%.0f\n' $procent | dialog \
Igor Pecovnik's avatar
Fix    
Igor Pecovnik committed
106
			--backtitle "$backtitle" \
107
108
			--title "Installing" \
			--gauge "\n$2\n\n$x" 10 70
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
109
110
		if [ "$(DEBIAN_FRONTEND=noninteractive apt-get -qq -y install $x >/tmp/install.log 2>&1 || echo 'Installation failed' \
		| grep 'Installation failed')" != "" ]; then
111
112
113
114
115
116
117
118
119
			echo -e "[\e[0;31m error \x1B[0m] Installation failed"
			tail /tmp/install.log
			exit
		fi
		fi
		i=$[$i+1]
		j=$[$j+1]
done
echo ""
Igor Pecovnik's avatar
Igor Pecovnik committed
120
121
122
}


Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
123
124
125
126
127
128
check_port ()
{
#------------------------------------------------------------------------------------------------------------------------------------------
# Check if something is running on port $1 and display info
#------------------------------------------------------------------------------------------------------------------------------------------
[[ -z $(netstat -lnt | awk '$6 == "LISTEN" && $4 ~ ".$1"') ]] && dialog --backtitle "$backtitle" --title "Checking service" \
129
--msgbox "\nIt looks good.\n\nThere is $2 service on port $1" 9 52
Igor Pecovnik's avatar
Igor Pecovnik committed
130
}
131
132


Igor Pečovnik's avatar
Igor Pečovnik committed
133
install_basic (){
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
134
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pečovnik's avatar
Igor Pečovnik committed
135
# Set hostname, FQDN, add to sources list
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
136
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pecovnik's avatar
Igor Pecovnik committed
137
IFS=" "
138
139
set ${HOSTNAMEFQDN//./ }
HOSTNAMESHORT="$1"
Igor Pečovnik's avatar
Igor Pečovnik committed
140
141
cp /etc/hosts /etc/hosts.backup
cp /etc/hostname /etc/hostname.backup
Igor Pecovnik's avatar
Igor Pecovnik committed
142
143
# create new
echo "127.0.0.1   localhost.localdomain   localhost" > /etc/hosts
Igor Pecovnik's avatar
Igor Pecovnik committed
144
echo "${serverIP} ${HOSTNAMEFQDN} ${HOSTNAMESHORT} #ispconfig " >> /etc/hosts
Igor Pečovnik's avatar
Igor Pečovnik committed
145
146
echo "$HOSTNAMESHORT" > /etc/hostname
/etc/init.d/hostname.sh start >/dev/null 2>&1
Igor Pecovnik's avatar
Igor Pecovnik committed
147
if [[ $family == "Ubuntu" ]]; then
148
149
	# set hostname in Ubuntu
	hostnamectl set-hostname $HOSTNAMESHORT
Igor Pecovnik's avatar
Igor Pecovnik committed
150
	# disable AppArmor
151
152
153
154
155
	if [[ -n $(service apparmor status | grep -w active | grep -w running) ]]; then
		service apparmor stop
		update-rc.d -f apparmor remove
		apt-get -y -qq remove apparmor apparmor-utils
	fi
156
157
158
159
else
	grep -q "contrib" /etc/apt/sources.list || sed -i 's|main|main contrib|' /etc/apt/sources.list
	grep -q "non-free" /etc/apt/sources.list || sed -i 's|contrib|contrib non-free|' /etc/apt/sources.list
	debconf-apt-progress -- apt-get update
Igor Pecovnik's avatar
Igor Pecovnik committed
160
fi
Igor Pečovnik's avatar
Igor Pečovnik committed
161
162
163
}


Igor Pečovnik's avatar
Igor Pečovnik committed
164
create_ispconfig_configuration (){
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
165
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pečovnik's avatar
Igor Pečovnik committed
166
# ISPConfig autoconfiguration
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
167
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pečovnik's avatar
Igor Pečovnik committed
168
cat > /tmp/isp.conf.php <<EOF
Igor Pečovnik's avatar
Igor Pečovnik committed
169
170
171
172
173
174
175
<?php
\$autoinstall['language'] = 'en'; // de, en (default)
\$autoinstall['install_mode'] = 'standard'; // standard (default), expert

\$autoinstall['hostname'] = '$HOSTNAMEFQDN'; // default
\$autoinstall['mysql_hostname'] = 'localhost'; // default: localhost
\$autoinstall['mysql_root_user'] = 'root'; // default: root
176
\$autoinstall['mysql_root_password'] = '$MYSQL_PASS';
Igor Pečovnik's avatar
Igor Pečovnik committed
177
178
\$autoinstall['mysql_database'] = 'dbispconfig'; // default: dbispcongig
\$autoinstall['mysql_charset'] = 'utf8'; // default: utf8
Igor Pecovnik's avatar
Igor Pecovnik committed
179
180
181
\$autoinstall['mysql_port'] = '3306'; // default: 3306
\$autoinstall['configure_jailkit'] = 'n'; // y (default), n
\$autoinstall['configure_dns'] = 'n'; // y (default), n
Igor Pečovnik's avatar
Igor Pečovnik committed
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
\$autoinstall['http_server'] = '$server'; // apache (default), nginx
\$autoinstall['ispconfig_port'] = '8080'; // default: 8080
\$autoinstall['ispconfig_use_ssl'] = 'y'; // y (default), n

/* SSL Settings */
\$autoinstall['ssl_cert_country'] = 'AU';
\$autoinstall['ssl_cert_state'] = 'Some-State';
\$autoinstall['ssl_cert_locality'] = 'Chicago';
\$autoinstall['ssl_cert_organisation'] = 'Internet Widgits Pty Ltd';
\$autoinstall['ssl_cert_organisation_unit'] = 'IT department';
\$autoinstall['ssl_cert_common_name'] = \$autoinstall['hostname'];
?>
EOF
}

197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
install_cups (){
#--------------------------------------------------------------------------------------------------------------------------------
# Install printer system
#--------------------------------------------------------------------------------------------------------------------------------
debconf-apt-progress -- apt-get -y install cups lpr cups-filters
# cups-filters if jessie
sed -e 's/Listen localhost:631/Listen 631/g' -i /etc/cups/cupsd.conf
sed -e 's/<Location \/>/<Location \/>\nallow $SUBNET/g' -i /etc/cups/cupsd.conf
sed -e 's/<Location \/admin>/<Location \/admin>\nallow $SUBNET/g' -i /etc/cups/cupsd.conf
sed -e 's/<Location \/admin\/conf>/<Location \/admin\/conf>\nallow $SUBNET/g' -i /etc/cups/cupsd.conf
service cups restart
service samba restart | service smbd restart >/dev/null 2>&1
}

install_samba (){
#---------------------------------------------------------------------------------------------------------------------------------
# install Samba file sharing
#---------------------------------------------------------------------------------------------------------------------------------
# Read samba user / pass / group
local SECTION="Samba"
SMBUSER=$(whiptail --inputbox "What is your samba username?" 8 78 $SMBUSER --title "$SECTION" 3>&1 1>&2 2>&3)
exitstatus=$?; if [ $exitstatus = 1 ]; then exit 1; fi
SMBPASS=$(whiptail --inputbox "What is your samba password?" 8 78 $SMBPASS --title "$SECTION" 3>&1 1>&2 2>&3)
exitstatus=$?; if [ $exitstatus = 1 ]; then exit 1; fi
SMBGROUP=$(whiptail --inputbox "What is your samba group?" 8 78 $SMBGROUP --title "$SECTION" 3>&1 1>&2 2>&3)
exitstatus=$?; if [ $exitstatus = 1 ]; then exit 1; fi
#
debconf-apt-progress -- apt-get -y install samba samba-common-bin
useradd $SMBUSER
echo -ne "$SMBPASS\n$SMBPASS\n" | passwd $SMBUSER >/dev/null 2>&1
echo -ne "$SMBPASS\n$SMBPASS\n" | smbpasswd -a -s $SMBUSER >/dev/null 2>&1
service samba stop | service smbd stop >/dev/null 2>&1
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
cp /etc/samba/smb.conf /etc/samba/smb.conf.stock
cat > /etc/samba/smb.conf.tmp << EOF
[global]
	workgroup = SMBGROUP
	server string = %h server
	hosts allow = SUBNET
	log file = /var/log/samba/log.%m
	max log size = 1000
	syslog = 0
	panic action = /usr/share/samba/panic-action %d
	load printers = yes
	printing = cups
	printcap name = cups

[printers]
	comment = All Printers
	path = /var/spool/samba
	browseable = no
	public = yes
	guest ok = yes
	writable = no
	printable = yes
	printer admin = SMBUSER

[print$]
	comment = Printer Drivers
	path = /etc/samba/drivers
	browseable = yes
	guest ok = no
	read only = yes
	write list = SMBUSER

[ext]
	comment = Storage
	path = /ext
	writable = yes
	public = no
	valid users = SMBUSER
	force create mode = 0777
EOF
sed -i "s/SMBGROUP/$SMBGROUP/" /etc/samba/smb.conf.tmp
sed -i "s/SMBUSER/$SMBUSER/" /etc/samba/smb.conf.tmp
sed -i "s/SUBNET/$SUBNET/" /etc/samba/smb.conf.tmp
dialog --backtitle "$backtitle" --title "Review samba configuration" --no-collapse --editbox /etc/samba/smb.conf.tmp 30 0 2> /etc/samba/smb.conf.tmp.out
if [[ $? = 0 ]]; then
	mv /etc/samba/smb.conf.tmp.out /etc/samba/smb.conf
	install -m 755 -g $SMBUSER -o $SMBUSER -d /ext
	service service smbd stop >/dev/null 2>&1
	sleep 3
	service service smbd start >/dev/null 2>&1
Igor Pecovnik's avatar
Igor Pecovnik committed
279
fi
280
}
Igor Pečovnik's avatar
Igor Pečovnik committed
281

Igor Pecovnik's avatar
Igor Pecovnik committed
282
install_omv (){
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
283
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pecovnik's avatar
Igor Pecovnik committed
284
# Install high-performance HTTP accelerator
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
285
#------------------------------------------------------------------------------------------------------------------------------------------
286
if [[ $family == "Ubuntu" ]]; then
287
	dialog --backtitle "$backtitle" --title "Dependencies not met" --msgbox "\nOpenmediavault can be installed only on Debian." 7 52
288
289
290
	sleep 5
	exit
fi
Igor Pecovnik's avatar
Igor Pecovnik committed
291
292
wget -qO - packages.openmediavault.org/public/archive.key | apt-key add -
apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 7AA630A1EDEE7D73
Igor Pečovnik's avatar
Igor Pečovnik committed
293

Igor Pecovnik's avatar
Igor Pecovnik committed
294
295
cat > /etc/apt/sources.list.d/openmediavault.list << EOF
deb http://packages.openmediavault.org/public erasmus main
Igor Pečovnik's avatar
Igor Pečovnik committed
296

Igor Pecovnik's avatar
Igor Pecovnik committed
297
298
## Uncomment the following line to add software from the proposed repository.
# deb http://packages.openmediavault.org/public erasmus-proposed main
Igor Pečovnik's avatar
Igor Pečovnik committed
299
300


Igor Pecovnik's avatar
Igor Pecovnik committed
301
302
## This software is not part of OpenMediaVault, but is offered by third-party
## developers as a service to OpenMediaVault users.
303

Igor Pecovnik's avatar
Igor Pecovnik committed
304
# deb http://packages.openmediavault.org/public erasmus partner
305

Igor Pecovnik's avatar
Igor Pecovnik committed
306
307
EOF
debconf-apt-progress -- apt-get update
Igor Pecovnik's avatar
Igor Pecovnik committed
308
debconf-apt-progress -- apt-get -y install openmediavault postfix
Igor Pecovnik's avatar
Igor Pecovnik committed
309
URL='http://omv-extras.org/openmediavault-omvextrasorg_latest_all3.deb'; FILE=`mktemp`; wget "$URL" -qO $FILE && dpkg -i $FILE; rm $FILE
Igor Pecovnik's avatar
Igor Pecovnik committed
310
/usr/sbin/omv-update
311
apt-get -y install openmediavault-flashmemory
Igor Pecovnik's avatar
Igor Pecovnik committed
312
313
sed -i '/<flashmemory>/,/<\/flashmemory>/ s/<enable>0/<enable>1/' /etc/openmediavault/config.xml
/usr/sbin/omv-mkconf flashmemory
Igor Pecovnik's avatar
Igor Pecovnik committed
314
omv-initsystem
Igor Pecovnik's avatar
Igor Pecovnik committed
315
check_port 80
316
317
318
}


Igor Pečovnik's avatar
Igor Pečovnik committed
319
install_tvheadend (){
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
320
#------------------------------------------------------------------------------------------------------------------------------------------
321
# TVheadend https://tvheadend.org/ unofficial port https://tvheadend.org/boards/5/topics/21528
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
322
#------------------------------------------------------------------------------------------------------------------------------------------
323
324
if !(grep -qs djbenson "/etc/apt/sources.list.d/tvheadend.list");then
	echo "deb https://dl.bintray.com/djbenson/deb wheezy stable" >> /etc/apt/sources.list.d/tvheadend.list
Igor Pecovnik's avatar
Igor Pecovnik committed
325
	apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 379CE192D401AB61 >/dev/null 2>&1
Igor Pečovnik's avatar
Igor Pečovnik committed
326
fi
Igor Pecovnik's avatar
Igor Pecovnik committed
327

Igor Pecovnik's avatar
Igor Pecovnik committed
328
debconf-apt-progress -- apt-get update
Igor Pecovnik's avatar
Igor Pecovnik committed
329
debconf-apt-progress -- apt-get -y install libssl-doc libssl1.0.0 zlib1g-dev tvheadend xmltv-util
Igor Pečovnik's avatar
Igor Pečovnik committed
330
331
332
333
}


install_transmission (){
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
334
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pečovnik's avatar
Igor Pečovnik committed
335
# transmission
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
336
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pecovnik's avatar
Igor Pecovnik committed
337
install_packet "debconf-utils unzip build-essential html2text apt-transport-https" "Downloading dependendies"
Igor Pečovnik's avatar
Igor Pečovnik committed
338
install_packet "transmission-cli transmission-common transmission-daemon" "Install torrent server"
339
340
341
342
343
344
345
# systemd workaround
# https://forum.armbian.com/index.php?/topic/4017-programs-does-not-start-automatically-at-boot/
sed -e 's/exit 0//g' -i /etc/rc.local
	cat >> /etc/rc.local <<"EOF"
service transmission-daemon restart
exit 0
EOF
346
347
348
349
350
351
352
353
354
355
dialog --title "Seed Armbian torrents" --backtitle "$BACKTITLE" --yes-label "Yes" --no-label "Cancel" --yesno "\nDo you want to help \
community and seed armbian torrent files? It will ensure faster download for everyone. We need around 50Gb of your space." 10 44
if [[ $? = 0 ]]; then
cat >> /etc/cron.daily/seed-armbian-torrent <<"EOF"
#!/bin/bash
#
# armbian torrents auto update
#

# download latest torrent pack
Igor Pecovnik's avatar
Igor Pecovnik committed
356
357
TEMP=$(mktemp -d)
wget -qO- -O $TEMP/tmp.zip https://dl.armbian.com/torrent/all-torrents.zip
358
359

# test zip for corruption
Igor Pecovnik's avatar
Igor Pecovnik committed
360
unzip -t $TEMP/tmp.zip >/dev/null 2>&1
Igor Pecovnik's avatar
Bugfix    
Igor Pecovnik committed
361
[[ $? -ne 0 ]] && echo "Error in zip" && exit
362
# extract zip
Igor Pecovnik's avatar
Igor Pecovnik committed
363
unzip -o $TEMP/tmp.zip -d $TEMP/torrent-tmp >/dev/null 2>&1
364
365

# create list of current active torrents
Igor Pecovnik's avatar
Igor Pecovnik committed
366
transmission-remote -n 'transmission:transmission' -l | sed '1d; $d' > $TEMP/torrent-tmp/active.torrents
367
368

# loop and add/update torrent files
Igor Pecovnik's avatar
Igor Pecovnik committed
369
for f in $TEMP/torrent-tmp/*.torrent; do
370
371
        transmission-remote -n 'transmission:transmission' -a $f > /dev/null 2>&1
        # remove added from the list
Igor Pecovnik's avatar
Igor Pecovnik committed
372
373
        pattern="${f//.torrent}"; pattern="${pattern##*/}";
        sed -i "/$pattern/d" $TEMP/torrent-tmp/active.torrents
374
375
376
377
378
done

# remove old armbian torrents
while read i; do
        [[ $i == *Armbian_* ]] && transmission-remote -n 'transmission:transmission' -t $(echo "$i" | awk '{print $1}';) --remove-and-delete
Igor Pecovnik's avatar
Igor Pecovnik committed
379
done < $TEMP/torrent-tmp/active.torrents
380
381

# remove temporally files and direcotories
Igor Pecovnik's avatar
Igor Pecovnik committed
382
rm -rf $TEMP
383
384
EOF
chmod +x /etc/cron.daily/seed-armbian-torrent
Igor Pecovnik's avatar
Igor Pecovnik committed
385
/etc/cron.daily/seed-armbian-torrent
386
fi
Igor Pečovnik's avatar
Igor Pečovnik committed
387
388
389
}


390
install_syncthing (){
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
391
#------------------------------------------------------------------------------------------------------------------------------------------
392
# Install Personal cloud https://syncthing.net/
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
393
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pecovnik's avatar
Igor Pecovnik committed
394
curl -s https://syncthing.net/release-key.txt | apt-key add -
Igor Pecovnik's avatar
Igor Pecovnik committed
395
396
397
398
399
400
	if !(grep -qs syncthing "/etc/apt/sources.list.d/syncthing.list");then
	echo "deb http://apt.syncthing.net/ syncthing release" | tee /etc/apt/sources.list.d/syncthing.list
	debconf-apt-progress -- apt-get update
	install_packet "syncthing" "Install Personal cloud https://syncthing.net/"
	sed -e 's/exit 0//g' -i /etc/rc.local
	cat >> /etc/rc.local <<"EOF"
401
syncthing
Igor Pečovnik's avatar
Igor Pečovnik committed
402
403
exit 0
EOF
Igor Pecovnik's avatar
Igor Pecovnik committed
404
405
406
	syncthing >/dev/null 2>&1 &
	sleep 5
	fi
Igor Pečovnik's avatar
Igor Pečovnik committed
407
408
409
410
}


install_vpn_server (){
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
411
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pečovnik's avatar
Igor Pečovnik committed
412
# Script downloads latest stable
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
413
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pečovnik's avatar
Igor Pečovnik committed
414
415
cd /tmp
PREFIX="http://www.softether-download.com/files/softether/"
Igor Pecovnik's avatar
Igor Pecovnik committed
416
install_packet "debconf-utils unzip build-essential html2text apt-transport-https" "Downloading basic packages"
Igor Pečovnik's avatar
Igor Pečovnik committed
417
418
419
URL=$(wget -q $PREFIX -O - | html2text | grep rtm | awk ' { print $(NF) }' | tail -1)
SUFIX="${URL/-tree/}"
if [ "$(dpkg --print-architecture | grep armhf)" != "" ]; then
Igor Pecovnik's avatar
URL fix    
Igor Pecovnik committed
420
DLURL=$PREFIX$URL"/Linux/SoftEther_VPN_Server/32bit_-_ARM_EABI/softether-vpnserver-$SUFIX-linux-arm_eabi-32bit.tar.gz"
Igor Pečovnik's avatar
Igor Pečovnik committed
421
else
Igor Pecovnik's avatar
Igor Pecovnik committed
422
install_packet "gcc-multilib" "Install libraries"
Igor Pecovnik's avatar
URL fix    
Igor Pecovnik committed
423
DLURL=$PREFIX$URL"/Linux/SoftEther_VPN_Server/32bit_-_Intel_x86/softether-vpnserver-$SUFIX-linux-x86-32bit.tar.gz"
Igor Pečovnik's avatar
Igor Pečovnik committed
424
fi
Igor Pecovnik's avatar
Igor Pecovnik committed
425
wget -q $DLURL -O - | tar -xz
Igor Pečovnik's avatar
Igor Pečovnik committed
426
cd vpnserver
Igor Pecovnik's avatar
Igor Pecovnik committed
427
make i_read_and_agree_the_license_agreement | dialog --backtitle "$BACKTITLE" --title "Compiling SoftEther VPN" --progressbox $TTY_Y $TTY_X
Igor Pečovnik's avatar
Igor Pečovnik committed
428
429
430
431
432
433
cd ..
cp -R vpnserver /usr/local
cd /usr/local/vpnserver/
chmod 600 *
chmod 700 vpncmd
chmod 700 vpnserver
Igor Pecovnik's avatar
Igor Pecovnik committed
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
if [[ -d /run/systemd/system/ ]]; then
cat <<EOT >/lib/systemd/system/ethervpn.service
[Unit]
Description=VPN service

[Service]
Type=oneshot
ExecStart=/usr/local/vpnserver/vpnserver start
ExecStop=/usr/local/vpnserver/vpnserver stop
RemainAfterExit=yes

[Install]
WantedBy=multi-user.target
EOT
systemctl enable ethervpn.service
service ethervpn start

Igor Pecovnik's avatar
Igor Pecovnik committed
451
else
Igor Pecovnik's avatar
Igor Pecovnik committed
452

Igor Pečovnik's avatar
Igor Pečovnik committed
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
cat <<EOT > /etc/init.d/vpnserver
#!/bin/sh
### BEGIN INIT INFO
# Provides:          vpnserver
# Required-Start:    \$remote_fs \$syslog
# Required-Stop:     \$remote_fs \$syslog
# Default-Start:     2 3 4 5
# Default-Stop:      0 1 6
# Short-Description: Start daemon at boot time
# Description:       Enable Softether by daemon.
### END INIT INFO
DAEMON=/usr/local/vpnserver/vpnserver
LOCK=/var/lock/vpnserver
test -x $DAEMON || exit 0
case "\$1" in
start)
\$DAEMON start
touch \$LOCK
;;
stop)
\$DAEMON stop
rm \$LOCK
;;
restart)
\$DAEMON stop
sleep 3
\$DAEMON start
;;
*)
echo "Usage: \$0 {start|stop|restart}"
exit 1
esac
exit 0
EOT
chmod 755 /etc/init.d/vpnserver
mkdir /var/lock/subsys
Igor Pecovnik's avatar
Igor Pecovnik committed
489
update-rc.d vpnserver defaults >> $logfile
Igor Pečovnik's avatar
Igor Pečovnik committed
490
/etc/init.d/vpnserver start
Igor Pecovnik's avatar
Igor Pecovnik committed
491
fi
Igor Pečovnik's avatar
Igor Pečovnik committed
492
493
494
495
}


install_DashNTP (){
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
496
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pečovnik's avatar
Igor Pečovnik committed
497
# Install DASH and ntp service
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
498
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pečovnik's avatar
Igor Pečovnik committed
499
500
echo "dash dash/sh boolean false" | debconf-set-selections
dpkg-reconfigure -f noninteractive dash > /dev/null 2>&1
501
install_packet "ntp ntpdate" "Install DASH and ntp service"
Igor Pecovnik's avatar
Igor Pecovnik committed
502
}
Igor Pečovnik's avatar
Igor Pečovnik committed
503
504


Igor Pecovnik's avatar
Igor Pecovnik committed
505
install_MySQL (){
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
506
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pecovnik's avatar
Igor Pecovnik committed
507
# Maria SQL
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
508
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pecovnik's avatar
Igor Pecovnik committed
509
510
511
install_packet "mariadb-client mariadb-server" "Install Mysql client / server"
#Allow MySQL to listen on all interfaces
cp /etc/mysql/my.cnf /etc/mysql/my.cnf.backup
Igor Pecovnik's avatar
Igor Pecovnik committed
512
sed -i 's|bind-address           = 127.0.0.1|#bind-address           = 127.0.0.1|' /etc/mysql/my.cnf
Igor Pecovnik's avatar
Igor Pecovnik committed
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
SECURE_MYSQL=$(expect -c "
set timeout 3
spawn mysql_secure_installation
expect \"Enter current password for root (enter for none):\"
send \"\r\"
expect \"root password?\"
send \"y\r\"
expect \"New password:\"
send \"$MYSQL_PASS\r\"
expect \"Re-enter new password:\"
send \"$MYSQL_PASS\r\"
expect \"Remove anonymous users?\"
send \"y\r\"
expect \"Disallow root login remotely?\"
send \"y\r\"
expect \"Remove test database and access to it?\"
send \"y\r\"
expect \"Reload privilege tables now?\"
send \"y\r\"
expect eof
")
#
# Execution mysql_secure_installation
#
Igor Pecovnik's avatar
Igor Pecovnik committed
537
echo "${SECURE_MYSQL}" >> /dev/null
Igor Pecovnik's avatar
Igor Pecovnik committed
538
539
540
541
service mysql restart >> /dev/null
}


Igor Pečovnik's avatar
Igor Pečovnik committed
542
install_MySQLDovecot (){
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
543
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pečovnik's avatar
Igor Pečovnik committed
544
# Install Postfix, Dovecot, Saslauthd, phpMyAdmin, rkhunter, binutils
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
545
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pečovnik's avatar
Igor Pečovnik committed
546
547
echo "postfix postfix/main_mailer_type select Internet Site" | debconf-set-selections
echo "postfix postfix/mailname string $HOSTNAMEFQDN" | debconf-set-selections
548
549
install_packet "postfix postfix-mysql postfix-doc openssl getmail4 rkhunter binutils dovecot-imapd dovecot-pop3d dovecot-mysql \
dovecot-sieve sudo libsasl2-modules" "postfix, dovecot, saslauthd, phpMyAdmin, rkhunter, binutils"
Igor Pečovnik's avatar
Igor Pečovnik committed
550
551
552
553
554
555
556
557
558
559
560
561
562
#Uncommenting some Postfix configuration files
cp /etc/postfix/master.cf /etc/postfix/master.cf.backup
sed -i 's|#submission inet n       -       -       -       -       smtpd|submission inet n       -       -       -       -       smtpd|' /etc/postfix/master.cf
sed -i 's|#  -o syslog_name=postfix/submission|  -o syslog_name=postfix/submission|' /etc/postfix/master.cf
sed -i 's|#  -o smtpd_tls_security_level=encrypt|  -o smtpd_tls_security_level=encrypt|' /etc/postfix/master.cf
sed -i 's|#  -o smtpd_sasl_auth_enable=yes|  -o smtpd_sasl_auth_enable=yes|' /etc/postfix/master.cf
sed -i 's|#  -o smtpd_client_restrictions=permit_sasl_authenticated,reject|  -o smtpd_client_restrictions=permit_sasl_authenticated,reject|' /etc/postfix/master.cf
sed -i 's|#  -o smtpd_sasl_auth_enable=yes|  -o smtpd_sasl_auth_enable=yes|' /etc/postfix/master.cf
sed -i 's|#  -o smtpd_sasl_auth_enable=yes|  -o smtpd_sasl_auth_enable=yes|' /etc/postfix/master.cf
sed -i 's|#  -o smtpd_sasl_auth_enable=yes|  -o smtpd_sasl_auth_enable=yes|' /etc/postfix/master.cf
sed -i 's|#smtps     inet  n       -       -       -       -       smtpd|smtps     inet  n       -       -       -       -       smtpd|' /etc/postfix/master.cf
sed -i 's|#  -o syslog_name=postfix/smtps|  -o syslog_name=postfix/smtps|' /etc/postfix/master.cf
sed -i 's|#  -o smtpd_tls_wrappermode=yes|  -o smtpd_tls_wrappermode=yes|' /etc/postfix/master.cf
Igor Pečovnik's avatar
Igor Pečovnik committed
563
564
service postfix restart >> /dev/null
}
Igor Pečovnik's avatar
Igor Pečovnik committed
565
566
567


install_Virus (){
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
568
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pečovnik's avatar
Igor Pečovnik committed
569
# Install Amavisd-new, SpamAssassin, And Clamav
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
570
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pecovnik's avatar
Igor Pecovnik committed
571
install_packet "amavisd-new spamassassin clamav clamav-daemon zoo unzip bzip2 arj p7zip unrar-free ripole rpm nomarch lzop \
572
cabextract apt-listchanges libnet-ldap-perl libauthen-sasl-perl clamav-docs daemon libio-string-perl libio-socket-ssl-perl \
573
574
libnet-ident-perl zip libnet-dns-perl postgrey" "amavisd, spamassassin, clamav"
sed -i "s/^AllowSupplementaryGroups.*/AllowSupplementaryGroups true/" /etc/clamav/clamd.conf
Igor Pecovnik's avatar
fix    
Igor Pecovnik committed
575
576
service spamassassin stop
systemctl disable spamassassin
Igor Pečovnik's avatar
Igor Pečovnik committed
577
578
}

579
install_hhvm (){
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
580
#------------------------------------------------------------------------------------------------------------------------------------------
581
# Install HipHop Virtual Machine
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
582
#------------------------------------------------------------------------------------------------------------------------------------------
583
584
585
586
587
588
589
apt-get -y -qq install software-properties-common
apt-key adv --recv-keys --keyserver hkp://keyserver.ubuntu.com:80 0x5a16e7281be7a449
add-apt-repository "deb http://dl.hhvm.com/ubuntu $distribution main"
apt-get update
apt-get -y -qq install hhvm
}

Igor Pečovnik's avatar
Igor Pečovnik committed
590

591
install_apache (){
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
592
#------------------------------------------------------------------------------------------------------------------------------------------
593
# Install Apache2, PHP5, phpMyAdmin, FCGI, suExec, Pear and mcrypt
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
594
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pečovnik's avatar
Igor Pečovnik committed
595
596
597
598
599
600
601
602
clear_console
echo "========================================================================="
echo "You will be prompted for some information during the install of phpmyadmin."
echo "Select NO when asked to configure using dbconfig-common"
echo "Please enter them where needed."
echo "========================================================================="
echo "Press ENTER to continue.."
read DUMMY
603
#echo 'phpmyadmin phpmyadmin/reconfigure-webserver multiselect apache2' | debconf-set-selections
Igor Pečovnik's avatar
Igor Pečovnik committed
604
605
606
607

#BELOW ARE STILL NOT WORKING
#echo 'phpmyadmin      phpmyadmin/dbconfig-reinstall   boolean false' | debconf-set-selections
#echo 'phpmyadmin      phpmyadmin/dbconfig-install     boolean false' | debconf-set-selections
608
609
610

if [[ $family == "Ubuntu" ]]; then

Igor Pecovnik's avatar
Typo    
Igor Pecovnik committed
611
install_packet "apache2 apache2-doc apache2-utils libapache2-mod-php php7.0 php7.0-common php7.0-gd php7.0-mysql \
612
php7.0-imap php7.0-cli php7.0-cgi libapache2-mod-fcgid apache2-suexec-pristine php-pear php-auth php7.0-mcrypt mcrypt \
613
imagemagick libruby libapache2-mod-python php7.0-curl php7.0-intl php7.0-pspell php7.0-recode php7.0-sqlite3 php7.0-tidy php7.0-xmlrpc \
614
php7.0-xsl memcached php-memcache php-imagick php-gettext php7.0-zip php7.0-mbstring" "apache2, PHP5, FCGI, suExec, pear and mcrypt"
615
# PHP Opcode cache
Igor Pecovnik's avatar
Igor Pecovnik committed
616
install_packet "php7.0-opcache php-apcu" "PHP Opcode cache"
617
618
619
# PHP-FPM
install_packet "libapache2-mod-fastcgi php7.0-fpm" "PHP-FPM"
a2enmod actions fastcgi alias
620
service apache2 restart
621
622
623
624
625
# Install Let's Encrypt
install_packet "letsencrypt" "Install Let's Encrypt"

else

Igor Pecovnik's avatar
Igor Pecovnik committed
626
install_packet "apache2 apache2.2-common apache2-doc apache2-mpm-prefork apache2-utils libexpat1 ssl-cert libapache2-mod-php5 php5 \
627
php5-common php5-gd php5-mysql php5-imap php5-cli php5-cgi libapache2-mod-fcgid apache2-suexec php-pear php-auth php5-mcrypt \
Igor Pecovnik's avatar
Igor Pecovnik committed
628
mcrypt php5-imagick imagemagick libruby libapache2-mod-python php5-curl php5-intl php5-memcache php5-memcached php5-pspell php5-recode \
629
630
php5-sqlite php5-tidy php5-xmlrpc php5-xsl memcached libapache2-mod-passenger" "apache2, PHP5, CGI, suExec, pear and mcrypt"

631
632
633
634
635
#Install XCache
install_packet "php5-xcache libapache2-mod-fastcgi php5-fpm" "Install XCache PHP Fpm"
a2enmod actions fastcgi alias >> /dev/null

fi
Igor Pecovnik's avatar
Igor Pecovnik committed
636

637
638
639
#phpmyadmin
debconf-apt-progress -- apt-get install -y phpmyadmin

640
# fix HTTPOXY vulnerability
Igor Pecovnik's avatar
Igor Pecovnik committed
641
642
643
cat <<EOT > /etc/apache2/conf-available/httpoxy.conf
<IfModule mod_headers.c>
    RequestHeader unset Proxy early
Igor Pečovnik's avatar
Igor Pečovnik committed
644
645
</IfModule>

Igor Pecovnik's avatar
Igor Pecovnik committed
646
647
648
EOT
a2enconf httpoxy >> /dev/null

649
# enable modules
Igor Pecovnik's avatar
Igor Pecovnik committed
650
651
a2enmod suexec rewrite ssl actions include >> /dev/null
a2enmod dav_fs dav auth_digest cgi headers >> /dev/null
Igor Pečovnik's avatar
Igor Pečovnik committed
652
653

#Restart Apache
Igor Pečovnik's avatar
Igor Pečovnik committed
654
service apache2 restart >> /dev/null
Igor Pečovnik's avatar
Igor Pečovnik committed
655
656
657
}


658
install_nginx (){
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
659
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pečovnik's avatar
Igor Pečovnik committed
660
# Install NginX, PHP5, phpMyAdmin, FCGI, suExec, Pear, And mcrypt
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
661
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pečovnik's avatar
Igor Pečovnik committed
662

663
664
#echo 'phpmyadmin      phpmyadmin/reconfigure-webserver        multiselect' | debconf-set-selections
#echo 'phpmyadmin      phpmyadmin/dbconfig-install     boolean false' | debconf-set-selections
Igor Pečovnik's avatar
Igor Pečovnik committed
665
666

debconf-apt-progress -- apt-get install -y nginx
Igor Pečovnik's avatar
Igor Pečovnik committed
667
668
669
670
671
672
if [ $(dpkg-query -W -f='${Status}' apache2 2>/dev/null | grep -c "ok installed") -eq 1 ];
then
/etc/init.d/apache2 stop >> /dev/null
update-rc.d -f apache2 remove >> /dev/null
fi
service nginx start >> /dev/null
Igor Pečovnik's avatar
Igor Pečovnik committed
673

674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
if [[ $family == "Ubuntu" ]]; then

debconf-apt-progress -- apt-get install -y php7.0-fpm
debconf-apt-progress -- apt-get install -y php7.0-opcache php7.0-fpm php7.0 php7.0-common php7.0-gd php7.0-mysql php7.0-imap php7.0-cli \
php7.0-cgi php-pear php-auth php7.0-mcrypt mcrypt imagemagick libruby php7.0-curl php7.0-intl php7.0-pspell php7.0-recode php7.0-sqlite3 \
php7.0-tidy php7.0-xmlrpc php7.0-xsl memcached php-memcache php-imagick php-gettext php7.0-zip php7.0-mbstring
phpenmod mcrypt
phpenmod mbstring
debconf-apt-progress -- apt-get install -y php-apcu
sed -i "s/^cgi.fix_pathinfo=.*/cgi.fix_pathinfo=0/" /etc/php/7.0/fpm/php.ini
tz=$(cat /etc/timezone | sed 's/\//\\\//g')
sed -i "s/^date.timezone=.*/date.timezone=""$ls""/" /etc/php/7.0/fpm/php.ini

else

Igor Pečovnik's avatar
Igor Pečovnik committed
689
debconf-apt-progress -- apt-get install -y php5-fpm
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
690
691
debconf-apt-progress -- apt-get install -y php5-mysql php5-curl php5-gd php5-intl php-pear php5-imagick php5-imap php5-mcrypt \
php5-memcache php5-memcached php5-ps php5-pspell php5-recode php5-snmp php5-sqlite php5-tidy php5-xmlrpc php5-xsl memcached
Igor Pečovnik's avatar
Igor Pečovnik committed
692
debconf-apt-progress -- apt-get install -y php-apc
693
694
695

fi

Igor Pečovnik's avatar
Igor Pečovnik committed
696
697
#PHP Configuration Stuff Goes Here
debconf-apt-progress -- apt-get install -y fcgiwrap
Igor Pečovnik's avatar
Igor Pečovnik committed
698
reset
Igor Pečovnik's avatar
Igor Pečovnik committed
699
700
701
702
703
704
705
706
707
echo "========================================================================="
echo "You will be prompted for some information during the install of phpmyadmin."
echo "Please enter them where needed."
echo "========================================================================="
echo "Press ENTER to continue.."
read DUMMY

DEBIAN_FRONTEND=noninteractive apt-get install -y dbconfig-common
debconf-apt-progress -- apt-get install -y phpmyadmin
Igor Pecovnik's avatar
fix    
Igor Pecovnik committed
708
709
710
711
712
if [[ $family == "Ubuntu" ]]; then
	service php7.0-fpm reload >> /dev/null
	else
	service php5-fpm reload >> /dev/null
fi
Igor Pečovnik's avatar
Igor Pečovnik committed
713
714
715
716
}


install_PureFTPD (){
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
717
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pečovnik's avatar
Igor Pečovnik committed
718
# Install PureFTPd
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
719
#------------------------------------------------------------------------------------------------------------------------------------------
720
install_packet "pure-ftpd-common pure-ftpd-mysql" "p3ureFTPd"
Igor Pečovnik's avatar
Igor Pečovnik committed
721
722
723
724
725
726
727

sed -i 's/VIRTUALCHROOT=false/VIRTUALCHROOT=true/' /etc/default/pure-ftpd-common
echo 1 > /etc/pure-ftpd/conf/TLS
mkdir -p /etc/ssl/private/

openssl req -x509 -nodes -days 7300 -newkey rsa:2048 -subj "/C=/ST=/L=/O=/CN=$(hostname -f)" -keyout /etc/ssl/private/pure-ftpd.pem -out /etc/ssl/private/pure-ftpd.pem
chmod 600 /etc/ssl/private/pure-ftpd.pem
728
/etc/init.d/pure-ftpd-mysql restart  >> /dev/null
Igor Pečovnik's avatar
Igor Pečovnik committed
729
730
731
732
733
}



install_Bind (){
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
734
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pečovnik's avatar
Igor Pečovnik committed
735
# Install BIND DNS Server
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
736
#------------------------------------------------------------------------------------------------------------------------------------------
737
install_packet "bind9 dnsutils" "Install BIND DNS Server"
Igor Pečovnik's avatar
Igor Pečovnik committed
738
739
740
741
}


install_Stats (){
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
742
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pečovnik's avatar
Igor Pečovnik committed
743
# Install Vlogger, Webalizer, And AWstats
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
744
#------------------------------------------------------------------------------------------------------------------------------------------
745
install_packet "vlogger webalizer awstats geoip-database libclass-dbi-mysql-perl" "vlogger, webalizer, awstats"
Igor Pečovnik's avatar
Igor Pečovnik committed
746
747
748
749
750
751
sed -i "s/*/10 * * * * www-data/#*/10 * * * * www-data/" /etc/cron.d/awstats
sed -i "s/10 03 * * * www-data/#10 03 * * * www-data/" /etc/cron.d/awstats
}


install_Fail2BanDovecot() {
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
752
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pečovnik's avatar
Igor Pečovnik committed
753
# Install fail2ban
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
754
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pecovnik's avatar
Igor Pecovnik committed
755
install_packet "fail2ban ufw" "Install fail2ban and UFW Firewall"
Igor Pečovnik's avatar
Igor Pečovnik committed
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774

cat > /etc/fail2ban/jail.local <<"EOF"
[pureftpd]
enabled  = true
port     = ftp
filter   = pureftpd
logpath  = /var/log/syslog
maxretry = 3

[dovecot-pop3imap]
enabled = true
filter = dovecot-pop3imap
action = iptables-multiport[name=dovecot-pop3imap, port="pop3,pop3s,imap,imaps", protocol=tcp]
logpath = /var/log/mail.log
maxretry = 5

[sasl]
enabled  = true
port     = smtp
Igor Pecovnik's avatar
Igor Pecovnik committed
775
filter   = postfix-sasl
Igor Pečovnik's avatar
Igor Pečovnik committed
776
777
778
779
780
781
782
logpath  = /var/log/mail.log
maxretry = 3
EOF
}


install_Fail2BanRulesDovecot() {
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
783
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pečovnik's avatar
Igor Pečovnik committed
784
785
786
787
788
789
790
791
792
793
794
cat > /etc/fail2ban/filter.d/pureftpd.conf <<"EOF"
[Definition]
failregex = .*pure-ftpd: \(.*@<HOST>\) \[WARNING\] Authentication failed for user.*
ignoreregex =
EOF

cat > /etc/fail2ban/filter.d/dovecot-pop3imap.conf <<"EOF"
[Definition]
failregex = (?: pop3-login|imap-login): .*(?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed|Aborted login \(\d+ authentication attempts).*rip=(?P<host>\S*),.*
ignoreregex =
EOF
795
796
# Add the missing ignoreregex line
echo "ignoreregex =" >> /etc/fail2ban/filter.d/postfix-sasl.conf
Igor Pečovnik's avatar
Igor Pečovnik committed
797
service fail2ban restart >> /dev/null
Igor Pečovnik's avatar
Igor Pečovnik committed
798
799
800
801
}


install_ISPConfig (){
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
802
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pečovnik's avatar
Igor Pečovnik committed
803
# Install ISPConfig 3
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
804
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pečovnik's avatar
Igor Pečovnik committed
805
cd /tmp
Igor Pečovnik's avatar
Igor Pečovnik committed
806
wget -q http://www.ispconfig.org/downloads/ISPConfig-3-stable.tar.gz -O - | tar -xz
Igor Pečovnik's avatar
Igor Pečovnik committed
807
cd /tmp/ispconfig3_install/install/
Igor Pecovnik's avatar
Igor Pecovnik committed
808
#apt-get -y install php5-cli php5-mysql
Igor Pečovnik's avatar
Igor Pečovnik committed
809
php -q install.php --autoinstall=/tmp/isp.conf.php
Igor Pecovnik's avatar
Igor Pecovnik committed
810
echo "Admin panel: https://$serverIP:8080"
Igor Pecovnik's avatar
fix    
Igor Pecovnik committed
811
echo "PHPmyadmin: http://$serverIP:8081/phpmyadmin"
Igor Pečovnik's avatar
Igor Pečovnik committed
812
}
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
813
814
815



816
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
817
# Main choices
818
#------------------------------------------------------------------------------------------------------------------------------------------
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
819
820
821
822
823
824
825
826
827
828
829

# check for root
#
if [[ $EUID != 0 ]]; then
	dialog --title "Warning" --infobox "\nThis script requires root privileges.\n\nExiting ..." 7 41
	sleep 3
	exit
fi

# Install basic stuff
#
830
831
832
echo "Downloading dependendies"
apt-get -qq -y --no-install-recommends install debconf-utils unzip build-essential html2text apt-transport-https dialog whiptail \
lsb-release bc expect html2text > /dev/null
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
833
834
835

# gather some info
#
Igor Pecovnik's avatar
Igor Pecovnik committed
836
837
TTY_X=$(($(stty size | awk '{print $2}')-6)) # determine terminal width
TTY_Y=$(($(stty size | awk '{print $1}')-6)) # determine terminal height
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
838
839
840
841
842
843
844
845
distribution=$(lsb_release -cs)
family=$(lsb_release -is)
serverIP=$(ip route get 8.8.8.8 | awk '{ print $NF; exit }')
set ${serverIP//./ }
SUBNET="$1.$2.$3."
hostnamefqdn=$(hostname -f)
mysql_pass=""
backtitle="Softy - Armbian post deployment scripts, http://www.armbian.com"
846
SCRIPTDIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
847
848
849
850
851
852
853

# main dialog routine
#
DIALOG_CANCEL=1
DIALOG_ESC=255

while true; do
854
855
856
857
858

	# prepare menu items
	check_status
	LISTLENGHT="$(($LIST_CONST+${#LIST[@]}/2))"

Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
	exec 3>&1
	selection=$(dialog --backtitle "$backtitle" --title "Installing to $family $distribution" --clear --cancel-label \
	"Exit" --checklist "\nChoose what you want to install:\n " $LISTLENGHT 70 15 "${LIST[@]}" 2>&1 1>&3)
	exit_status=$?
	exec 3>&-
	case $exit_status in
	$DIALOG_CANCEL)
		clear
		echo -e "\n\e[0;33mThank you for using Armbian configuration tool! Support: \e[1m\e[39mwww.armbian.com\x1B[0m\n"
		exit
	;;
	$DIALOG_ESC)
		clear
		exit 1
		;;
	esac

876
877
878
	# cycle trought all install options
	i=0
	while [ "$i" -lt "$LISTLENGHT" ]; do
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
879

880
881
882
		if [[ "$selection" == *Samba* && "$SAMBA_STATUS" != "on" ]]; then
			install_samba
			check_port 445 "Samba"
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
883
884
		fi

885
886
887
888
		if [[ "$selection" == *CUPS* && "$CUPS_STATUS" != "on" ]]; then
			install_cups
			check_port 445 "CUPS"
		fi
Igor Pecovnik's avatar
RFC #2    
Igor Pecovnik committed
889

890
891
892
893
894
895
		if [[ "$selection" == *headend* && "$TVHEADEND_STATUS" != "on" ]]; then
			install_tvheadend
		fi

		if [[ "$selection" == *Minidlna* && "$MINIDLNA_STATUS" != "on" ]]; then
			install_packet "minidlna" "Install lightweight DLNA/UPnP-AV server"
896
			check_port 8200 "minidlna"
897
898
899
900
901
902
903
904
		fi

		if [[ "$selection" == *ISPConfig* && "$ISPCONFIG_STATUS" != "on" ]]; then
			server_conf
			if [[ "$MYSQL_PASS" == "" ]]; then
				dialog --msgbox "Mysql password can't be blank. Exiting..." 7 70
				exit
			fi
905
906
907
908
909
			if [[ "$(echo $HOSTNAMEFQDN | grep -P '(?=^.{1,254}$)(^(?>(?!\d+\.)[a-zA-Z0-9_\-]{1,63}\.?)+(?:[a-zA-Z]{2,})$)')" == "" ]]; then
				dialog --msgbox "Invalid FQDN. Exiting..." 7 70
				exit
			fi
			choose_webserver; install_basic; install_DashNTP; install_MySQL; install_MySQLDovecot; install_Virus; install_$server; install_hhvm
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
			create_ispconfig_configuration; install_PureFTPD; install_Fail2BanDovecot; install_Fail2BanRulesDovecot;
			install_ISPConfig
			read -n 1 -s -p "Press any key to continue"
		fi

		if [[ "$selection" == *Syncthing* && "$SYNCTHING_STATUS" != "on" ]]; then
			install_syncthing
			check_port 8384 "Syncthing"
			read -n 1 -s -p "Press any key to continue"
		fi

		if [[ "$selection" == *VPN* && "$VPN_SERVER_STATUS" != "on" ]]; then
			install_vpn_server
			read -n 1 -s -p "Press any key to continue"
		fi

		if [[ "$selection" == *OMV* && "$OMV_STATUS" != "on" ]]; then
			install_omv
			read -n 1 -s -p "Press any key to continue"
		fi

		if [[ "$selection" == *hole* && "$PI_HOLE_STATUS" != "on" ]]; then
			curl -L install.pi-hole.net | bash
			read -n 1 -s -p "Press any key to continue"
		fi

		if [[ "$selection" == *Transmission* && "$TRANSMISSION_STATUS" != "on" ]]; then
			install_transmission
			check_port 9091
		fi

		# reread statuses
		check_status
		i=$[$i+1]
	done
945
done