mailpile app
This commit is contained in:
Bob Mottram
parent
5470499e5d
commit
9ad3422761
|
|
@ -424,6 +424,9 @@ function remove_etherpad {
|
|||
remove_backup_database_local etherpad
|
||||
deluser --remove-all-files etherpad
|
||||
remove_nodejs etherpad
|
||||
|
||||
function_check remove_ddns_domain
|
||||
remove_ddns_domain $ETHERPAD_DOMAIN_NAME
|
||||
}
|
||||
|
||||
function install_etherpad {
|
||||
|
|
@ -612,6 +615,9 @@ function install_etherpad {
|
|||
fi
|
||||
fi
|
||||
|
||||
function_check add_ddns_domain
|
||||
add_ddns_domain $ETHERPAD_DOMAIN_NAME
|
||||
|
||||
set_completion_param "etherpad domain" "$ETHERPAD_DOMAIN_NAME"
|
||||
|
||||
systemctl enable etherpad
|
||||
|
|
|
|||
|
|
@ -0,0 +1,307 @@
|
|||
#!/bin/bash
|
||||
#
|
||||
# .---. . .
|
||||
# | | |
|
||||
# |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
|
||||
# | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
|
||||
# ' ' --' --' -' - -' ' ' -' -' -' ' - --'
|
||||
#
|
||||
# Freedom in the Cloud
|
||||
#
|
||||
# mailpile app
|
||||
#
|
||||
# License
|
||||
# =======
|
||||
#
|
||||
# Copyright (C) 2016 Bob Mottram <bob@freedombone.net>
|
||||
#
|
||||
# This program is free software: you can redistribute it and/or modify
|
||||
# it under the terms of the GNU Affero General Public License as published by
|
||||
# the Free Software Foundation, either version 3 of the License, or
|
||||
# (at your option) any later version.
|
||||
#
|
||||
# This program is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU Affero General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU Affero General Public License
|
||||
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||
|
||||
VARIANTS="full full-vim writer"
|
||||
|
||||
IN_DEFAULT_INSTALL=0
|
||||
SHOW_ON_ABOUT=1
|
||||
|
||||
MAILPILE_DOMAIN_NAME=
|
||||
MAILPILE_CODE=
|
||||
MAILPILE_ONION_PORT=8103
|
||||
MAILPILE_REPO="https://github.com/mailpile/Mailpile"
|
||||
MAILPILE_COMMIT='352ca27a29f7d9525298264c04bc5c7d55887276'
|
||||
MAILPILE_PORT=33411
|
||||
|
||||
mailpile_variables=(MAILPILE_REPO
|
||||
MAILPILE_COMMIT
|
||||
MAILPILE_DOMAIN_NAME
|
||||
MAILPILE_CODE
|
||||
ONION_ONLY
|
||||
DDNS_PROVIDER
|
||||
MY_USERNAME)
|
||||
|
||||
function remove_user_mailpile {
|
||||
remove_username="$1"
|
||||
}
|
||||
|
||||
function add_user_mailpile {
|
||||
echo '0'
|
||||
}
|
||||
|
||||
function install_interactive_mailpile {
|
||||
if [ ! $ONION_ONLY ]; then
|
||||
ONION_ONLY='no'
|
||||
fi
|
||||
|
||||
if [[ $ONION_ONLY != "no" ]]; then
|
||||
MAILPILE_DOMAIN_NAME='mailpile.local'
|
||||
write_config_param "MAILPILE_DOMAIN_NAME" "$MAILPILE_DOMAIN_NAME"
|
||||
else
|
||||
function_check interactive_site_details
|
||||
interactive_site_details "mailpile" "MAILPILE_DOMAIN_NAME" "MAILPILE_CODE"
|
||||
fi
|
||||
APP_INSTALLED=1
|
||||
}
|
||||
|
||||
function change_password_mailpile {
|
||||
echo -n ''
|
||||
}
|
||||
|
||||
function reconfigure_mailpile {
|
||||
echo -n ''
|
||||
}
|
||||
|
||||
function upgrade_mailpile {
|
||||
read_config_param "MAILPILE_DOMAIN_NAME"
|
||||
|
||||
function_check set_repo_commit
|
||||
set_repo_commit /var/www/$MAILPILE_DOMAIN_NAME/htdocs "mailpile commit" "$MAILPILE_COMMIT" $MAILPILE_REPO
|
||||
}
|
||||
|
||||
function backup_local_mailpile {
|
||||
echo -n ''
|
||||
}
|
||||
|
||||
function restore_local_mailpile {
|
||||
echo -n ''
|
||||
}
|
||||
|
||||
function backup_remote_mailpile {
|
||||
echo -n ''
|
||||
}
|
||||
|
||||
function restore_remote_mailpile {
|
||||
echo -n ''
|
||||
}
|
||||
|
||||
function remove_mailpile {
|
||||
if [ ${#MAILPILE_DOMAIN_NAME} -eq 0 ]; then
|
||||
return
|
||||
fi
|
||||
|
||||
systemctl stop mailpile
|
||||
systemctl disable mailpile
|
||||
rm /etc/systemd/system/mailpile.service
|
||||
|
||||
read_config_param "MAILPILE_DOMAIN_NAME"
|
||||
if [[ "$MAILPILE_DOMAIN_NAME" != "$DEFAULT_DOMAIN_NAME" ]]; then
|
||||
nginx_dissite $MAILPILE_DOMAIN_NAME
|
||||
remove_certs ${MAILPILE_DOMAIN_NAME}
|
||||
if [ -f /etc/nginx/sites-available/$MAILPILE_DOMAIN_NAME ]; then
|
||||
rm -f /etc/nginx/sites-available/$MAILPILE_DOMAIN_NAME
|
||||
fi
|
||||
if [ -d /var/www/$MAILPILE_DOMAIN_NAME ]; then
|
||||
rm -rf /var/www/$MAILPILE_DOMAIN_NAME
|
||||
fi
|
||||
function_check remove_ddns_domain
|
||||
remove_ddns_domain $MAILPILE_DOMAIN_NAME
|
||||
fi
|
||||
|
||||
remove_config_param MAILPILE_DOMAIN_NAME
|
||||
remove_config_param MAILPILE_CODE
|
||||
function_check remove_onion_service
|
||||
remove_onion_service mailpile ${MAILPILE_ONION_PORT}
|
||||
remove_completion_param "install_mailpile"
|
||||
|
||||
enable_email_encryption_at_rest
|
||||
|
||||
sed -i '/Mailpile/d' $COMPLETION_FILE
|
||||
sed -i '/mailpile/d' $COMPLETION_FILE
|
||||
sed -i '/mailpile/d' /home/$MY_USERNAME/README
|
||||
sed -i '/Mailpile/d' /home/$MY_USERNAME/README
|
||||
}
|
||||
|
||||
function install_mailpile {
|
||||
if [ ! $ONION_ONLY ]; then
|
||||
ONION_ONLY='no'
|
||||
fi
|
||||
|
||||
if [ ! $MAILPILE_DOMAIN_NAME ]; then
|
||||
echo $'The mailpile domain name was not specified'
|
||||
exit 63824
|
||||
fi
|
||||
|
||||
apt-get -yq install python-pip python-lxml python-dev libjpeg-dev
|
||||
|
||||
if [ ! -d /var/www/$MAILPILE_DOMAIN_NAME ]; then
|
||||
mkdir /var/www/$MAILPILE_DOMAIN_NAME
|
||||
fi
|
||||
|
||||
cd /var/www/$MAILPILE_DOMAIN_NAME
|
||||
git_clone $MAILPILE_REPO htdocs
|
||||
cd htdocs
|
||||
git checkout $MAILPILE_COMMIT -b $MAILPILE_COMMIT
|
||||
set_completion_param "mailpile commit" "$MAILPILE_COMMIT"
|
||||
|
||||
if [ ! -f requirements-dev.txt ]; then
|
||||
echo $'No python requirements file found'
|
||||
exit 62382
|
||||
fi
|
||||
pip install -r requirements.txt
|
||||
|
||||
adduser --system --home=/var/www/$MAILPILE_DOMAIN_NAME/htdocs/ --group mailpile
|
||||
chown -R mailpile: /var/www/$MAILPILE_DOMAIN_NAME/htdocs/
|
||||
|
||||
# create folders and tags
|
||||
su -c "cd /var/www/$MAILPILE_DOMAIN_NAME/htdocs && ./mp --setup" - mailpile
|
||||
|
||||
if [[ $ONION_ONLY == 'no' ]]; then
|
||||
if [[ "$MAILPILE_DOMAIN_NAME" == "$DEFAULT_DOMAIN_NAME" ]]; then
|
||||
su -c "cd /var/www/$MAILPILE_DOMAIN_NAME/htdocs && ./mp set sys.http_path /mail" - mailpile
|
||||
fi
|
||||
fi
|
||||
|
||||
echo '[Unit]' > /etc/systemd/system/mailpile.service
|
||||
echo 'Description=Mailpile Email Client' >> /etc/systemd/system/mailpile.service
|
||||
echo 'After=syslog.target network.target nginx.target' >> /etc/systemd/system/mailpile.service
|
||||
echo '' >> /etc/systemd/system/mailpile.service
|
||||
echo '[Service]' >> /etc/systemd/system/mailpile.service
|
||||
echo 'User=mailpile' >> /etc/systemd/system/etherpad.service
|
||||
echo 'Group=mailpile' >> /etc/systemd/system/etherpad.service
|
||||
echo "WorkingDirectory=/var/www/$MAILPILE_DOMAIN_NAME/htdocs" >> /etc/systemd/system/mailpile.service
|
||||
echo "ExecStart=./mp --www=0.0.0.0:${MAILPILE_PORT} --wait" >> /etc/systemd/system/mailpile.service
|
||||
echo 'Restart=always' >> /etc/systemd/system/mailpile.service
|
||||
echo 'RestartSec=10' >> /etc/systemd/system/mailpile.service
|
||||
echo '' >> /etc/systemd/system/mailpile.service
|
||||
echo '[Install]' >> /etc/systemd/system/mailpile.service
|
||||
echo 'WantedBy=multi-user.target' >> /etc/systemd/system/mailpile.service
|
||||
chmod +x /etc/systemd/system/mailpile.service
|
||||
|
||||
mailpile_nginx_site=/etc/nginx/sites-available/$MAILPILE_DOMAIN_NAME
|
||||
if [ ! -f $mailpile_nginx_site ]; then
|
||||
if [[ $ONION_ONLY == "no" ]]; then
|
||||
function_check nginx_http_redirect
|
||||
nginx_http_redirect $MAILPILE_DOMAIN_NAME
|
||||
echo 'server {' >> $mailpile_nginx_site
|
||||
echo ' listen 443 ssl;' >> $mailpile_nginx_site
|
||||
echo " server_name $MAILPILE_DOMAIN_NAME;" >> $mailpile_nginx_site
|
||||
echo '' >> $mailpile_nginx_site
|
||||
echo ' # Security' >> $mailpile_nginx_site
|
||||
function_check nginx_ssl
|
||||
nginx_ssl $MAILPILE_DOMAIN_NAME
|
||||
|
||||
function_check nginx_disable_sniffing
|
||||
nginx_disable_sniffing $MAILPILE_DOMAIN_NAME
|
||||
|
||||
echo ' add_header Strict-Transport-Security max-age=15768000;' >> $mailpile_nginx_site
|
||||
echo '' >> $mailpile_nginx_site
|
||||
echo ' # Logs' >> $mailpile_nginx_site
|
||||
echo ' access_log off;' >> $mailpile_nginx_site
|
||||
echo ' error_log off;' >> $mailpile_nginx_site
|
||||
echo '' >> $mailpile_nginx_site
|
||||
echo ' # Root' >> $mailpile_nginx_site
|
||||
echo " root /var/www/$MAILPILE_DOMAIN_NAME/htdocs;" >> $mailpile_nginx_site
|
||||
echo '' >> $mailpile_nginx_site
|
||||
echo ' location / {' >> $mailpile_nginx_site
|
||||
function_check nginx_limits
|
||||
nginx_limits $MAILPILE_DOMAIN_NAME '15m'
|
||||
echo " proxy_pass http://localhost:${MAILPILE_PORT}/;" >> $mailpile_nginx_site
|
||||
echo ' proxy_set_header Host $host;' >> $mailpile_nginx_site
|
||||
echo ' proxy_buffering off;' >> $mailpile_nginx_site
|
||||
echo ' }' >> $mailpile_nginx_site
|
||||
echo '}' >> $mailpile_nginx_site
|
||||
else
|
||||
echo -n '' > $mailpile_nginx_site
|
||||
fi
|
||||
echo 'server {' >> $mailpile_nginx_site
|
||||
echo " listen 127.0.0.1:$MAILPILE_ONION_PORT default_server;" >> $mailpile_nginx_site
|
||||
echo " server_name $MAILPILE_DOMAIN_NAME;" >> $mailpile_nginx_site
|
||||
echo '' >> $mailpile_nginx_site
|
||||
function_check nginx_disable_sniffing
|
||||
nginx_disable_sniffing $MAILPILE_DOMAIN_NAME
|
||||
echo '' >> $mailpile_nginx_site
|
||||
echo ' # Logs' >> $mailpile_nginx_site
|
||||
echo ' access_log off;' >> $mailpile_nginx_site
|
||||
echo ' error_log off;' >> $mailpile_nginx_site
|
||||
echo '' >> $mailpile_nginx_site
|
||||
echo ' # Root' >> $mailpile_nginx_site
|
||||
echo " root /var/www/$MAILPILE_DOMAIN_NAME/htdocs;" >> $mailpile_nginx_site
|
||||
echo '' >> $mailpile_nginx_site
|
||||
echo ' location / {' >> $mailpile_nginx_site
|
||||
function_check nginx_limits
|
||||
nginx_limits $MAILPILE_DOMAIN_NAME '15m'
|
||||
echo " proxy_pass http://localhost:${MAILPILE_PORT}/;" >> $mailpile_nginx_site
|
||||
echo ' proxy_set_header Host $host;' >> $mailpile_nginx_site
|
||||
echo ' proxy_buffering off;' >> $mailpile_nginx_site
|
||||
echo ' }' >> $mailpile_nginx_site
|
||||
echo '}' >> $mailpile_nginx_site
|
||||
fi
|
||||
|
||||
function_check create_site_certificate
|
||||
if [[ "$MAILPILE_DOMAIN_NAME" == "$DEFAULT_DOMAIN_NAME" ]]; then
|
||||
if [ ! -f /etc/ssl/certs/${MAILPILE_DOMAIN_NAME}.pem ]; then
|
||||
create_site_certificate $MAILPILE_DOMAIN_NAME 'yes'
|
||||
fi
|
||||
else
|
||||
create_site_certificate $MAILPILE_DOMAIN_NAME 'yes'
|
||||
fi
|
||||
|
||||
if [ -f /etc/ssl/certs/${MAILPILE_DOMAIN_NAME}.crt ]; then
|
||||
mv /etc/ssl/certs/${MAILPILE_DOMAIN_NAME}.crt /etc/ssl/certs/${MAILPILE_DOMAIN_NAME}.pem
|
||||
fi
|
||||
if [ -f /etc/ssl/certs/${MAILPILE_DOMAIN_NAME}.pem ]; then
|
||||
chown mailpile: /etc/ssl/certs/${MAILPILE_DOMAIN_NAME}.pem
|
||||
fi
|
||||
if [ -f /etc/ssl/private/${MAILPILE_DOMAIN_NAME}.key ]; then
|
||||
chown mailpile: /etc/ssl/private/${MAILPILE_DOMAIN_NAME}.key
|
||||
fi
|
||||
|
||||
function_check nginx_ensite
|
||||
nginx_ensite $MAILPILE_DOMAIN_NAME
|
||||
|
||||
MAILPILE_ONION_HOSTNAME=$(add_onion_service mailpile 80 ${MAILPILE_ONION_PORT})
|
||||
|
||||
if ! grep -q "Mailpile onion domain" /home/$MY_USERNAME/README; then
|
||||
echo $"Mailpile onion domain: ${MAILPILE_ONION_HOSTNAME}" >> /home/$MY_USERNAME/README
|
||||
echo '' >> /home/$MY_USERNAME/README
|
||||
chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
|
||||
chmod 600 /home/$MY_USERNAME/README
|
||||
else
|
||||
if [ -f /home/$MY_USERNAME/README ]; then
|
||||
sed -i "s|Mailpile onion domain.*|Mailpile onion domain: ${MAILPILE_ONION_HOSTNAME}|g" /home/$MY_USERNAME/README
|
||||
fi
|
||||
fi
|
||||
|
||||
function_check add_ddns_domain
|
||||
add_ddns_domain $MAILPILE_DOMAIN_NAME
|
||||
|
||||
disable_email_encryption_at_rest
|
||||
|
||||
systemctl enable mailpile
|
||||
systemctl daemon-reload
|
||||
systemctl start mailpile
|
||||
systemctl restart nginx
|
||||
|
||||
set_completion_param "mailpile domain" "$MAILPILE_DOMAIN_NAME"
|
||||
APP_INSTALLED=1
|
||||
}
|
||||
|
||||
# NOTE: deliberately no exit 0
|
||||
|
|
@ -160,6 +160,27 @@ function add_ddns_domain {
|
|||
systemctl daemon-reload
|
||||
}
|
||||
|
||||
function remove_ddns_domain {
|
||||
if [ ! $1 ]; then
|
||||
echo $'ddns domain not specified'
|
||||
exit 5638
|
||||
fi
|
||||
CURRENT_DDNS_DOMAIN="$1"
|
||||
if [[ $ONION_ONLY != "no" ]]; then
|
||||
return
|
||||
fi
|
||||
if [ ! -f /etc/inadyn.conf ]; then
|
||||
echo $'Unable to find inadyn configuration file /etc/inadyn.conf'
|
||||
exit 5745
|
||||
fi
|
||||
if grep -q "$CURRENT_DDNS_DOMAIN" /etc/inadyn.conf; then
|
||||
systemctl stop inadyn
|
||||
sed -i "/alias $CURRENT_DDNS_DOMAIN/d" /etc/inadyn.conf
|
||||
systemctl start inadyn
|
||||
systemctl daemon-reload
|
||||
fi
|
||||
}
|
||||
|
||||
function configure_dns {
|
||||
if [[ $(is_completed $FUNCNAME) == "1" ]]; then
|
||||
return
|
||||
|
|
|
|||
|
|
@ -46,7 +46,7 @@ function git_clone {
|
|||
fi
|
||||
fi
|
||||
echo "git clone $repo_url $destination_dir"
|
||||
git clone "$repo_url" "$destination_dir"
|
||||
git clone --recursive "$repo_url" "$destination_dir"
|
||||
}
|
||||
|
||||
function git_pull {
|
||||
|
|
|
|||
|
|
@ -0,0 +1,61 @@
|
|||
#!/bin/bash
|
||||
#
|
||||
# .---. . .
|
||||
# | | |
|
||||
# |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
|
||||
# | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
|
||||
# ' ' --' --' -' - -' ' ' -' -' -' ' - --'
|
||||
#
|
||||
# Freedom in the Cloud
|
||||
#
|
||||
# gpg functions
|
||||
#
|
||||
# License
|
||||
# =======
|
||||
#
|
||||
# Copyright (C) 2016 Bob Mottram <bob@freedombone.net>
|
||||
#
|
||||
# This program is free software: you can redistribute it and/or modify
|
||||
# it under the terms of the GNU Affero General Public License as published by
|
||||
# the Free Software Foundation, either version 3 of the License, or
|
||||
# (at your option) any later version.
|
||||
#
|
||||
# This program is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU Affero General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU Affero General Public License
|
||||
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||
|
||||
function enable_email_encryption_at_rest {
|
||||
for d in /home/*/ ; do
|
||||
USERNAME=$(echo "$d" | awk -F '/' '{print $3}')
|
||||
if [[ $(user_added_to_app "${USERNAME}" "${app_name}") == "0" ]]; then
|
||||
if grep '#/usr/bin/gpgit.pl' /home/$USERNAME/.procmailrc; then
|
||||
sed -i 's|#/usr/bin/gpgit.pl|/usr/bin/gpgit.pl|g' /home/$USERNAME/.procmailrc
|
||||
fi
|
||||
fi
|
||||
done
|
||||
|
||||
if grep '#/usr/bin/gpgit.pl' /etc/skel/.procmailrc; then
|
||||
sed -i 's|#/usr/bin/gpgit.pl|/usr/bin/gpgit.pl|g' /etc/skel/.procmailrc
|
||||
fi
|
||||
}
|
||||
|
||||
function disable_email_encryption_at_rest {
|
||||
for d in /home/*/ ; do
|
||||
USERNAME=$(echo "$d" | awk -F '/' '{print $3}')
|
||||
if [[ $(user_added_to_app "${USERNAME}" "${app_name}") == "0" ]]; then
|
||||
if ! grep '#/usr/bin/gpgit.pl' /home/$USERNAME/.procmailrc; then
|
||||
sed -i 's|/usr/bin/gpgit.pl|#/usr/bin/gpgit.pl|g' /home/$USERNAME/.procmailrc
|
||||
fi
|
||||
fi
|
||||
done
|
||||
|
||||
if ! grep '#/usr/bin/gpgit.pl' /etc/skel/.procmailrc; then
|
||||
sed -i 's|/usr/bin/gpgit.pl|#/usr/bin/gpgit.pl|g' /etc/skel/.procmailrc
|
||||
fi
|
||||
}
|
||||
|
||||
# NOTE: deliberately no exit 0
|
||||
Loading…
Reference in New Issue