#!/bin/bash # # .---. . . # | | | # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-' # ' ' --' --' -' - -' ' ' -' -' -' ' - --' # # Freedom in the Cloud # # Administrator control panel for the Freedombone system # # License # ======= # # Copyright (C) 2015 Bob Mottram # # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see . PROJECT_NAME='freedombone' export TEXTDOMAIN=${PROJECT_NAME}-controlpanel export TEXTDOMAINDIR="/usr/share/locale" COMPLETION_FILE=$HOME/${PROJECT_NAME}-completed.txt SELECTED_USERNAME= SIP_CONFIG_FILE=/etc/sipwitch.conf ADMIN_USER= UPGRADE_SCRIPT_NAME="${PROJECT_NAME}-upgrade" UPDATE_DATE_SCRIPT=/usr/bin/updatedate USB_DRIVE=sdb # get default USB from config file CONFIG_FILE=$HOME/${PROJECT_NAME}.cfg if [ -f $CONFIG_FILE ]; then if grep -q "USB_DRIVE=" $CONFIG_FILE; then USB_DRIVE=$(cat $CONFIG_FILE | grep "USB_DRIVE=" | awk -F '=' '{print $2}') if [[ $USB_DRIVE == *"dev"* ]]; then USB_DRIVE=$(echo ${USB_DRIVE} | awk -F '/' '{print $3}' | sed 's|1||g' | sed 's|2||g') fi fi fi function any_key { echo ' ' read -n1 -r -p $"Press any key to continue..." key } function check_for_updates { if [ ! -f /etc/cron.weekly/$UPGRADE_SCRIPT_NAME ]; then dialog --title $"Check for updates" \ --msgbox $"Upgrade script was not found" 6 40 return fi clear . /etc/cron.weekly/$UPGRADE_SCRIPT_NAME any_key } function add_user { data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --backtitle $"Freedombone Control Panel" \ --title $"Add new user" \ --form "\n" 8 40 3 \ $"Username:" 1 1 "" 1 11 16 15 \ $"ssh public key (optional):" 2 1 "" 3 1 40 10000 \ 2> $data sel=$? case $sel in 1) return;; 255) return;; esac new_user_username=$(cat $data | sed -n 1p) new_user_ssh_public_key=$(cat $data | sed -n 2p) if [ ${#new_user_username} -lt 2 ]; then dialog --title $"New username" \ --msgbox $"No username was given" 6 40 return fi if [[ "$new_user_username" == *" "* ]]; then dialog --title $"Invalid username" \ --msgbox $"The username should not contain any spaces" 6 40 return fi if [ ${#new_user_ssh_public_key} -lt 20 ]; then clear ${PROJECT_NAME}-adduser "$new_user_username" any_key else if [[ "$new_user_ssh_public_key" == "ssh-"* ]]; then clear ${PROJECT_NAME}-adduser "$new_user_username" "$new_user_ssh_public_key" any_key else dialog --title $"ssh public key" \ --msgbox $"This does not look like an ssh public key" 6 40 fi fi } function show_sip_extensions { if [ ! -f $SIP_CONFIG_FILE ]; then return; fi clear echo $"SIP phone extensions:" echo " " while read ext; do if [[ $ext == *"user id"* ]]; then echo -n " " echo -n $(echo "$ext" | awk -F '"' '{print $2}' | awk -F '"' '{print $1}') echo -n " " fi if [[ $ext == *"extension"* ]]; then echo $(echo "$ext" | awk -F '>' '{print $2}' | awk -F '<' '{print $1}') fi done < $SIP_CONFIG_FILE any_key } function select_user { SELECTED_USERNAME= data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --title "Select a user" \ --backtitle $"Freedombone Control Panel" \ --dselect "/home/" 14 40 2> $data sel=$? case $sel in 0) SELECTED_USERNAME=$(cat $data | awk -F '/' '{print $3}');; 1) return;; 255) return;; esac if [ ${#SELECTED_USERNAME} -lt 2 ]; then SELECTED_USERNAME= fi if [ ! -d /home/$SELECTED_USERNAME/Maildir ]; then dialog --title $"User directory check" \ --msgbox $"This does not look like a user directory" 6 40 SELECTED_USERNAME= fi } function delete_user { select_user if [ ! $SELECTED_USERNAME ]; then return fi if grep -Fxq "Admin user:$SELECTED_USERNAME" $COMPLETION_FILE; then dialog --title $"Administrator user" \ --msgbox $"You can't delete the administrator user" 6 40 return fi clear ${PROJECT_NAME}-rmuser $SELECTED_USERNAME any_key } function configure_remote_backups { if ! grep -Fxq "Admin user:$SELECTED_USERNAME" $COMPLETION_FILE; then dialog --title $"Administrator user" \ --msgbox $"No Administrator user found. Check $COMPLETION_FILE" 6 40 return fi if [ ${#ADMIN} -lt 2 ]; then dialog --title $"Administrator user" \ --msgbox $"Username not found" 6 40 return fi if [ ! -d /home/$ADMIN_USER ]; then dialog --title $"Administrator user" \ --msgbox $"Home directory not found" 6 40 return fi ${PROJECT_NAME}-remote -u $ADMIN_USER } function change_password { select_user if [ ! $SELECTED_USERNAME ]; then return fi clear echo -n $"Change password for" echo " $SELECTED_USERNAME" echo "" su -c "passwd" - $SELECTED_USERNAME any_key } function irc_set_global_password { dialog --title $"IRC Password" \ --clear \ --backtitle $"Freedombone Control Panel" \ --passwordbox $"Password for all IRC users, or press Enter for no password" 10 50 2> $data sel=$? case $sel in 0) NEW_IRC_PASSWORD=$(<$data) sed -i "0,/RE/s/Password =.*/Password = $NEW_IRC_PASSWORD/" /etc/ngircd/ngircd.conf dialog --title $"IRC Password" \ --msgbox $"The IRC password was changed" 6 40 ;; esac } function change_ssh_public_key { select_user if [ ! $SELECTED_USERNAME ]; then return fi if grep -Fxq "Admin user:$SELECTED_USERNAME" $COMPLETION_FILE; then dialog --title $"Change ssh public key" \ --backtitle $"Freedombone Control Panel" \ --defaultno \ --yesno $"\nThis is the administrator user.\n\nAre you sure you want to change the ssh public key for the administrator?" 10 60 sel=$? case $sel in 1) return;; 255) return;; esac fi data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --title $"Change ssh public key for $SELECTED_USERNAME" \ --backtitle $"Freedombone Control Panel" \ --inputbox $"Paste the ssh public key below" 8 60 2>$data sel=$? case $sel in 0) SSH_PUBLIC_KEY=$(<$data) if [ "$SSH_PUBLIC_KEY" ]; then if [ ${#SSH_PUBLIC_KEY} -gt 5 ]; then if [ -f "$SSH_PUBLIC_KEY" ]; then if [ ! -d /home/$SELECTED_USERNAME/.ssh ]; then mkdir /home/$SELECTED_USERNAME/.ssh fi cp $SSH_PUBLIC_KEY \ /home/$SELECTED_USERNAME/.ssh/authorized_keys chown -R $SELECTED_USERNAME:$SELECTED_USERNAME \ /home/$SELECTED_USERNAME/.ssh dialog --title $"Change ssh public key" \ --msgbox $"ssh public key was installed" 6 40 else if [[ "$SSH_PUBLIC_KEY" == "ssh-"* ]]; then if [ ! -d /home/$SELECTED_USERNAME/.ssh ]; then mkdir /home/$SELECTED_USERNAME/.ssh fi echo "$SSH_PUBLIC_KEY" > \ /home/$SELECTED_USERNAME/.ssh/authorized_keys chown -R $SELECTED_USERNAME:$SELECTED_USERNAME \ /home/$SELECTED_USERNAME/.ssh dialog --title $"Change ssh public key" \ --msgbox $"ssh public key was installed" 6 40 fi fi fi fi ;; esac } function add_to_mailing_list { select_user if [ ! $SELECTED_USERNAME ]; then return fi data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --backtitle $"Freedombone Control Panel" \ --title $"Subscribe $SELECTED_USERNAME to a mailing list" \ --form "\n" 8 68 4 \ $"List folder name:" 1 1 "" 1 35 26 25 \ $"Name between [] on subject line:" 2 1 "" 2 35 26 25 \ $"List email address:" 3 1 "" 3 35 26 25 \ 2> $data sel=$? case $sel in 1) return;; 255) return;; esac LIST_NAME=$(cat $data | sed -n 1p) LIST_SUBJECT=$(cat $data | sed -n 2p) LIST_EMAIL=$(cat $data | sed -n 3p) if [ ${#LIST_NAME} -lt 2 ]; then dialog --title $"Add mailing list" \ --msgbox $"No mailing list name was given" 6 40 return fi if [ ${#LIST_SUBJECT} -lt 2 ]; then dialog --title $"Add mailing list" \ --msgbox $"No mailing list subject was given" 6 40 return fi if [ ${#LIST_EMAIL} -lt 2 ]; then dialog --title $"Add mailing list" \ --msgbox $"No mailing list email address was given" 6 40 return fi if [[ "$LIST_EMAIL" != *"@"* || "$LIST_EMAIL" != *"."* ]]; then dialog --title $"Add mailing list" \ --msgbox $"Unrecognised email address" 6 40 return fi ${PROJECT_NAME}-addlist -u $SELECTED_USERNAME -l "$LIST_NAME" \ -s "$LIST_SUBJECT" -e "$LIST_EMAIL" dialog --title $"Add mailing list" \ --msgbox $"$LIST_NAME list was added" 6 40 } function email_rule { select_user if [ ! $SELECTED_USERNAME ]; then return fi data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --backtitle $"Freedombone Control Panel" \ --title $"Email rule for user $SELECTED_USERNAME" \ --form "\n" 8 65 3 \ $"When email arrives from address:" 1 1 "" 1 35 24 28 \ $"Move to folder:" 2 1 "" 2 35 24 28 \ 2> $data sel=$? case $sel in 1) return;; 255) return;; esac RULE_EMAIL=$(cat $data | sed -n 1p) RULE_FOLDER=$(cat $data | sed -n 2p) if [ ${#RULE_EMAIL} -lt 2 ]; then dialog --title $"Add email rule" \ --msgbox $"No email address was given" 6 40 return fi if [ ${#RULE_FOLDER} -lt 2 ]; then dialog --title $"Add email rule" \ --msgbox $"No folder name was given" 6 40 return fi if [[ "$RULE_EMAIL" != *"@"* || "$RULE_EMAIL" != *"."* ]]; then dialog --title $"Add email rule" \ --msgbox $"Unrecognised email address" 6 40 return fi ${PROJECT_NAME}-addemail -u $SELECTED_USERNAME -e "$RULE_EMAIL" \ -g "$RULE_FOLDER" dialog --title $"Add email rule" \ --msgbox $"Email rule for $RULE_EMAIL was added" 6 40 } function block_unblock_email { select_user if [ ! $SELECTED_USERNAME ]; then return fi blockstr=$"Block/Unblock email going to" data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --backtitle $"Freedombone Control Panel" \ --title "$blockstr $SELECTED_USERNAME" \ --form "\n" 8 65 3 \ $"When email arrives from address:" 1 1 "" 1 35 24 28 \ $"Block it:" 2 1 "yes" 2 35 4 4 \ 2> $data sel=$? case $sel in 1) return;; 255) return;; esac BLOCK_EMAIL=$(cat $data | sed -n 1p) BLOCK=$(cat $data | sed -n 2p) if [ ${#BLOCK_EMAIL} -lt 2 ]; then dialog --title $"Block/Unblock an email" \ --msgbox $"No email address was given" 6 40 return fi if [[ "$BLOCK_EMAIL" != *"@"* || "$BLOCK_EMAIL" != *"."* ]]; then dialog --title $"Block/Unblock an email" \ --msgbox $"Unrecognised email address" 6 40 return fi if [[ $BLOCK == "y"* || $BLOCK == "Y"* ]]; then ${PROJECT_NAME}-ignore -u $SELECTED_USERNAME -e "$BLOCK_EMAIL" dialog --title $"Block an email" \ --msgbox "Email from $BLOCK_EMAIL to $SELECTED_USERNAME blocked" 6 40 else ${PROJECT_NAME}-unignore -u $SELECTED_USERNAME -e "$BLOCK_EMAIL" dialog --title $"Unblock an email" \ --msgbox "Email from $BLOCK_EMAIL to $SELECTED_USERNAME unblocked" 6 40 fi } function block_unblock_subject { select_user if [ ! $SELECTED_USERNAME ]; then return fi blockstr=$"Block/Unblock email going to" data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --backtitle $"Freedombone Control Panel" \ --title "$blockstr $SELECTED_USERNAME" \ --form "\n" 8 70 3 \ $"When email arrives with subject text:" 1 1 "" 1 40 24 28 \ $"Block it:" 2 1 "yes" 2 40 4 4 \ 2> $data sel=$? case $sel in 1) return;; 255) return;; esac BLOCK_SUBJECT=$(cat $data | sed -n 1p) BLOCK=$(cat $data | sed -n 2p) if [ ${#BLOCK_SUBJECT} -lt 2 ]; then dialog --title $"Block/Unblock an email" \ --msgbox $"No subject was given" 6 40 return fi if [[ $BLOCK == "y"* || $BLOCK == "Y"* ]]; then ${PROJECT_NAME}-ignore -u $SELECTED_USERNAME -t "$BLOCK_SUBJECT" dialog --title $"Block an email" \ --msgbox "Email with subject $BLOCK_SUBJECT to $SELECTED_USERNAME blocked" 6 40 else ${PROJECT_NAME}-unignore -u $SELECTED_USERNAME -t "$BLOCK_SUBJECT" dialog --title $"Unblock an email" \ --msgbox "Email with subject $BLOCK_SUBJECT to $SELECTED_USERNAME unblocked" 6 40 fi } function create_keydrive_master { select_user if [ ! $SELECTED_USERNAME ]; then return fi dialog --title $"USB Master Keydrive" \ --msgbox $"Plug in a LUKS encrypted USB drive" 6 40 clear ${PROJECT_NAME}-keydrive -u $SELECTED_USERNAME --master 'yes' any_key } function create_keydrive_fragment { select_user if [ ! $SELECTED_USERNAME ]; then return fi dialog --title $"USB Fragment Keydrive" \ --msgbox $"Plug in a LUKS encrypted USB drive" 6 40 clear ${PROJECT_NAME}-keydrive -u $SELECTED_USERNAME any_key } function backup_data { dialog --title $"Backup data to USB" \ --msgbox $"Plug in a LUKS encrypted USB drive" 6 40 clear echo ' ' echo $'Enter the passphrase for your LUKS encrypted backup drive:' ${PROJECT_NAME}-backup-local any_key } function restore_from_usb { while true do data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --backtitle $"Freedombone Control Panel" \ --title $"Restore from USB backup" \ --radiolist $"Choose an application to restore:" 30 70 27 \ 1 $"Everything" on \ 2 $"Return to the backup and restore menu" off \ 3 $"Configuration files" off \ 4 $"MariaDB settings" off \ 5 $"Let's Encrypt account" off \ 6 $"Mutt email client settings" off \ 7 $"GPG keys" off \ 8 $"Email processing rules" off \ 9 $"Spam filtering rules" off \ 10 $"Administrator's README file" off \ 11 $"IPFS" off \ 12 $"SSH keys" off \ 13 $"User configuration files" off \ 14 $"SSL/TLS certificates" off \ 15 $"Personal settings" off \ 16 $"Mailing List" off \ 17 $"XMPP chat" off \ 18 $"GNU Social" off \ 19 $"Hubzilla" off \ 20 $"Owncloud" off \ 21 $"Gogs" off \ 22 $"Wiki" off \ 23 $"Blog" off \ 24 $"CJDNS" off \ 25 $"Email" off \ 26 $"DLNA" off \ 27 $"VoIP" off \ 28 $"Tox" off 2> $data sel=$? case $sel in 1) break;; 255) break;; esac case $(cat $data) in 1) ${PROJECT_NAME}-restore-local $USB_DRIVE;; 2) return;; 3) ${PROJECT_NAME}-restore-local $USB_DRIVE configuration;; 4) ${PROJECT_NAME}-restore-local $USB_DRIVE mariadb;; 5) ${PROJECT_NAME}-restore-local $USB_DRIVE letsencrypt;; 6) ${PROJECT_NAME}-restore-local $USB_DRIVE mutt;; 7) ${PROJECT_NAME}-restore-local $USB_DRIVE gpg;; 8) ${PROJECT_NAME}-restore-local $USB_DRIVE procmail;; 9) ${PROJECT_NAME}-restore-local $USB_DRIVE spamassassin;; 10) ${PROJECT_NAME}-restore-local $USB_DRIVE readme;; 11) ${PROJECT_NAME}-restore-local $USB_DRIVE ipfs;; 12) ${PROJECT_NAME}-restore-local $USB_DRIVE ssh;; 13) ${PROJECT_NAME}-restore-local $USB_DRIVE userconfig;; 14) ${PROJECT_NAME}-restore-local $USB_DRIVE certs;; 15) ${PROJECT_NAME}-restore-local $USB_DRIVE personal;; 16) ${PROJECT_NAME}-restore-local $USB_DRIVE mailinglist;; 17) ${PROJECT_NAME}-restore-local $USB_DRIVE xmpp;; 18) ${PROJECT_NAME}-restore-local $USB_DRIVE gnusocial;; 19) ${PROJECT_NAME}-restore-local $USB_DRIVE hubzilla;; 20) ${PROJECT_NAME}-restore-local $USB_DRIVE owncloud;; 21) ${PROJECT_NAME}-restore-local $USB_DRIVE gogs;; 22) ${PROJECT_NAME}-restore-local $USB_DRIVE wiki;; 23) ${PROJECT_NAME}-restore-local $USB_DRIVE blog;; 24) ${PROJECT_NAME}-restore-local $USB_DRIVE cjdns;; 25) ${PROJECT_NAME}-restore-local $USB_DRIVE email;; 26) ${PROJECT_NAME}-restore-local $USB_DRIVE dlna;; 27) ${PROJECT_NAME}-restore-local $USB_DRIVE voip;; 28) ${PROJECT_NAME}-restore-local $USB_DRIVE tox;; esac done any_key } function restore_from_remote { remote_domain_name=$1 while true do data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --backtitle $"Freedombone Control Panel" \ --title $"Restore from ${remote_domain_name}" \ --radiolist $"Choose an application to restore:" 30 70 27 \ 1 $"Everything" on \ 2 $"Return to the backup and restore menu" off \ 3 $"Configuration files" off \ 4 $"MariaDB settings" off \ 5 $"Let's Encrypt account" off \ 6 $"Mutt email client settings" off \ 7 $"GPG keys" off \ 8 $"Email processing rules" off \ 9 $"Spam filtering rules" off \ 10 $"Administrator's README file" off \ 11 $"IPFS" off \ 12 $"SSH keys" off \ 13 $"User configuration files" off \ 14 $"SSL/TLS certificates" off \ 15 $"Personal settings" off \ 16 $"Mailing List" off \ 17 $"XMPP chat" off \ 18 $"GNU Social" off \ 19 $"Hubzilla" off \ 20 $"Owncloud" off \ 21 $"Gogs" off \ 22 $"Wiki" off \ 23 $"Blog" off \ 24 $"CJDNS" off \ 25 $"Email" off \ 26 $"DLNA" off \ 27 $"VoIP" off \ 28 $"Tox" off 2> $data sel=$? case $sel in 1) break;; 255) break;; esac case $(cat $data) in 1) ${PROJECT_NAME}-restore-remote $remote_domain_name;; 2) return;; 3) ${PROJECT_NAME}-restore-remote $remote_domain_name configuration;; 4) ${PROJECT_NAME}-restore-remote $remote_domain_name mariadb;; 5) ${PROJECT_NAME}-restore-remote $remote_domain_name letsencrypt;; 6) ${PROJECT_NAME}-restore-remote $remote_domain_name mutt;; 7) ${PROJECT_NAME}-restore-remote $remote_domain_name gpg;; 8) ${PROJECT_NAME}-restore-remote $remote_domain_name procmail;; 9) ${PROJECT_NAME}-restore-remote $remote_domain_name spamassassin;; 10) ${PROJECT_NAME}-restore-remote $remote_domain_name readme;; 11) ${PROJECT_NAME}-restore-remote $remote_domain_name ipfs;; 12) ${PROJECT_NAME}-restore-remote $remote_domain_name ssh;; 13) ${PROJECT_NAME}-restore-remote $remote_domain_name userconfig;; 14) ${PROJECT_NAME}-restore-remote $remote_domain_name certs;; 15) ${PROJECT_NAME}-restore-remote $remote_domain_name personal;; 16) ${PROJECT_NAME}-restore-remote $remote_domain_name mailinglist;; 17) ${PROJECT_NAME}-restore-remote $remote_domain_name xmpp;; 18) ${PROJECT_NAME}-restore-remote $remote_domain_name gnusocial;; 19) ${PROJECT_NAME}-restore-remote $remote_domain_name hubzilla;; 20) ${PROJECT_NAME}-restore-remote $remote_domain_name owncloud;; 21) ${PROJECT_NAME}-restore-remote $remote_domain_name gogs;; 22) ${PROJECT_NAME}-restore-remote $remote_domain_name wiki;; 23) ${PROJECT_NAME}-restore-remote $remote_domain_name blog;; 24) ${PROJECT_NAME}-restore-remote $remote_domain_name cjdns;; 25) ${PROJECT_NAME}-restore-remote $remote_domain_name email;; 26) ${PROJECT_NAME}-restore-remote $remote_domain_name dlna;; 27) ${PROJECT_NAME}-restore-remote $remote_domain_name voip;; 28) ${PROJECT_NAME}-restore-remote $remote_domain_name tox;; esac done any_key } function restore_data { dialog --title $"Restore data from USB" \ --msgbox $"Plug in your backup USB drive" 6 40 clear echo ' ' echo $'Enter the passphrase for your LUKS encrypted backup drive:' restore_from_usb } function restore_data_remote { if [ ! $ADMIN_USER ]; then dialog --title $"Restore data from remote server" \ --msgbox $"Unknown admin user" 6 40 return fi data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --title $"Restore from remote server" \ --backtitle $"Freedombone Control Panel" \ --inputbox $"Enter the domain name of the server from which you wish to restore" 8 60 2>$data sel=$? case $sel in 0) friend_server_domain_name=$(<$data) if [ ${#friend_server_domain_name} -lt 2 ]; then return fi if [[ $friend_server_domain_name != *"."* ]]; then dialog --title $"Remote server domain name" \ --msgbox $"Invalid domain name" 6 40 return fi restore_from_remote $friend_server_domain_name ;; esac } function logging_on_off { logging="no" dialog --title $"Logging" \ --backtitle $"Freedombone Control Panel" \ --yesno $"\nDo you want to turn logging on?" 7 60 sel=$? case $sel in 0) logging="yes";; 255) return;; esac clear echo '' echo $'This may take a few seconds. Please wait...' if [[ $logging == "no" ]]; then ${PROJECT_NAME}-logging off else ${PROJECT_NAME}-logging on fi } function restore_gpg_key { select_user if [ ! $SELECTED_USERNAME ]; then return fi restorestr=$"Restore GPG key for user" dialog --title "$restorestr $SELECTED_USERNAME" \ --msgbox $"Plug in your USB keydrive" 6 40 clear ${PROJECT_NAME}-recoverkey -u $SELECTED_USERNAME any_key } function security_settings { ${PROJECT_NAME}-sec any_key } function reset_tripwire { clear echo $'Resetting the Tripwire...' echo ' ' echo ' ' | reset-tripwire any_key } function hubzilla_renew_cert { dialog --title $"Renew SSL certificate" \ --backtitle $"Freedombone Control Panel" \ --yesno $"\nThis will renew a letsencrypt certificate. Select 'yes' to continue" 16 60 sel=$? case $sel in 1) return;; 255) return;; esac HUBZILLA_DOMAIN_NAME=$(cat $COMPLETION_FILE | grep "Hubzilla domain" | awk -F ':' '{print $2}') if [ ! -d /var/www/$HUBZILLA_DOMAIN_NAME/htdocs ]; then dialog --title $"Renew SSL certificate" \ --msgbox $"Hubzilla install directory not found" 6 40 return fi ${PROJECT_NAME}-renew-cert -h $HUBZILLA_DOMAIN_NAME -p 'letsencrypt' if [ ! "$?" = "0" ]; then any_key else dialog --title $"Renew SSL certificate" \ --msgbox $"Hubzilla certificate has been renewed" 6 40 fi } function hubzilla_channel_directory_server { if ! grep -q "Hubzilla domain" $COMPLETION_FILE; then dialog --title $"Hubzilla channel directory server" \ --msgbox $"Hubzilla is not installed on this system" 6 40 return fi HUBZILLA_DOMAIN_NAME=$(cat $COMPLETION_FILE | grep "Hubzilla domain" | awk -F ':' '{print $2}') if [ ! -d /var/www/$HUBZILLA_DOMAIN_NAME/htdocs ]; then dialog --title $"Hubzilla channel directory server" \ --msgbox $"Hubzilla install directory not found" 6 40 return fi data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --title $"Hubzilla channel directory server" \ --backtitle $"Freedombone Control Panel" \ --inputbox $"When you click on 'channel directory' this is where Hubzilla will obtain its list from" 8 60 2>$data sel=$? case $sel in 0) hubzilla_domain_server=$(<$data) if [[ $hubzilla_domain_server != *"."* ]]; then return fi if [[ $hubzilla_domain_server != "https"* ]]; then dialog --title $"Hubzilla channel directory server" \ --msgbox $"Invalid domain - include the https://" 6 40 return fi ./var/www/$HUBZILLA_DOMAIN_NAME/htdocs/util/config system directory_server $hubzilla_domain_server dialog --title $"Hubzilla channel directory server" \ --msgbox $"Domain channel directory server changed to $hubzilla_domain_server" 6 40 ;; esac } function format_drive { drive= data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --backtitle $"Freedombone Control Panel" \ --title $"Format a USB drive (LUKS encrypted)" \ --radiolist $"Choose a drive:" 12 70 5 \ 1 $"sda (Beaglebone Black)" off \ 2 $"sdb" off \ 3 $"sdc" off \ 4 $"sdd" off \ 5 $"Back to Backup and Restore menu" on 2> $data sel=$? case $sel in 1) return;; 255) return;; esac case $(cat $data) in 1) drive='sda';; 2) drive='sdb';; 3) drive='sdc';; 4) drive='sdd';; 5) return;; esac dialog --title $"Format USB drive" \ --backtitle $"Freedombone Control Panel" \ --defaultno \ --yesno $"\nPlease confirm that you wish to format drive\n\n ${drive}\n\nAll current data on the drive will be lost, and you will be prompted to give a password used to encrypt the drive.\n\nDANGER: If you screw up here and format the wrong drive it's your own fault!" 16 60 sel=$? case $sel in 1) return;; 255) return;; esac clear ${PROJECT_NAME}-format $drive any_key } function remove_backups { drive= data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --backtitle $"Freedombone Control Panel" \ --title $"Remove backups from a USB drive" \ --radiolist $"Choose a drive:" 12 70 5 \ 1 $"sda (Beaglebone Black)" off \ 2 $"sdb" off \ 3 $"sdc" off \ 4 $"sdd" off \ 5 $"Back to Backup and Restore menu" on 2> $data sel=$? case $sel in 1) return;; 255) return;; esac case $(cat $data) in 1) drive='sda';; 2) drive='sdb';; 3) drive='sdc';; 4) drive='sdd';; 5) return;; esac dialog --title $"Remove backups from a USB drive" \ --backtitle $"Freedombone Control Panel" \ --defaultno \ --yesno $"\nPlease confirm that you wish to remove backups from this drive\n\n ${drive}\n\nYou will not be able to recover them afterwards." 12 60 sel=$? case $sel in 1) return;; 255) return;; esac clear ${PROJECT_NAME}-backup-local $drive remove any_key } function shut_down_system { dialog --title $"Power off the system" \ --backtitle $"Freedombone Control Panel" \ --defaultno \ --yesno $"\nPlease confirm that you wish to power off the system.\n\nWARNING: to power on again you will need to have physical access to the hardware." 10 60 sel=$? case $sel in 1) return;; 255) return;; esac shutdown now } function restart_system { dialog --title $"Restart the system" \ --backtitle $"Freedombone Control Panel" \ --defaultno \ --yesno $"\nPlease confirm that you wish to restart the system.\n\nWARNING: If you are using full disk encryption then you will need physical access to the hardware to type in the password" 10 60 sel=$? case $sel in 1) return;; 255) return;; esac reboot } function change_system_name { data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --title $"Change the name of this system" \ --backtitle $"Freedombone Control Panel" \ --inputbox $'Enter a new name for this system on your local network\n\nIt will appear as newname.local' 10 60 2>$data sel=$? case $sel in 0) NEW_SYSTEM_NAME=$(<$data) if [ "$NEW_SYSTEM_NAME" ]; then if [ ${#NEW_SYSTEM_NAME} -gt 1 ]; then sed -i "s|host-name=.*|host-name=$NEW_SYSTEM_NAME|g" /etc/avahi/avahi-daemon.conf systemctl restart avahi-daemon if grep -q "host-name=$NEW_SYSTEM_NAME" /etc/avahi/avahi-daemon.conf; then dialog --title $"New local network name" \ --msgbox $"The name of this system on your local network was changed successfully" 6 70 fi fi fi ;; esac } function set_tls_time_source { TLS_DATE_SOURCE=$(cat /usr/bin/updatedate | grep "TIMESOURCE='" | awk -F '=' '{print $2}' | awk -F "'" '{print $2}') data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --title $"Set the TLS date/time source" \ --backtitle $"Freedombone Control Panel" \ --inputbox $"Enter a domain name to use as a TLS time source.\n\nFactors to consider when choosing a source are whether you wish that site to know that your system is 'alive' and also what might happen if an adversary were to try to mess with the date/time from that domain (i.e. how much blowback would there be)." 14 60 "$TLS_DATE_SOURCE" 2>$data sel=$? case $sel in 0) NEW_TLS_DATE_SOURCE=$(<$data) if [[ $NEW_TLS_DATE_SOURCE == *"."* && $NEW_TLS_DATE_SOURCE != *'/'* ]]; then if [[ $NEW_TLS_DATE_SOURCE != "http"* ]]; then sed -i "s|TIMESOURCE='.*|TIMESOURCE='${NEW_TLS_DATE_SOURCE}'|g" $UPDATE_DATE_SCRIPT else dialog --title $"Invalid domain name" \ --msgbox $"Don't include the 'https'" 6 70 fi else dialog --title $"Invalid domain name" \ --msgbox $"That doesn't look like a domain name" 6 70 fi ;; esac } function set_static_IP { STATIC_IP='192.168.1.60' STATIC_GATEWAY='192.168.1.1' NEW_STATIC_IP= NEW_STATIC_GATEWAY= if grep -q 'iface eth0 inet static' /etc/network/interfaces; then STATIC_IP=$(cat /etc/network/interfaces | grep "address " | awk -F ' ' '{print $2}' | head -n 1) STATIC_GATEWAY=$(cat /etc/network/interfaces | grep "gateway " | awk -F ' ' '{print $2}' | head -n 1) fi # get the IP for the box data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --title $"Set a static local IP address" \ --backtitle $"Freedombone Control Panel" \ --inputbox $"In order to forward incoming internet traffic to this system most internet routers need to know a static local IP address to send the data to.\n\n Enter a static local IP address for this system.\n\nIt will typically be 192.168.1.x" 15 60 "$STATIC_IP" 2>$data sel=$? case $sel in 0) NEW_STATIC_IP=$(<$data) if [[ "$NEW_STATIC_IP" != *"."* ]]; then return fi if grep -q 'iface eth0 inet static' /etc/network/interfaces; then if [[ "$NEW_STATIC_IP" != "$STATIC_IP" ]]; then sed -i "s|${STATIC_IP}|${NEW_STATIC_IP}|g" /etc/network/interfaces fi fi ;; esac # get the gateway data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --title $"Set the IP address of your internet router/modem" \ --backtitle $"Freedombone Control Panel" \ --inputbox $"Set the local IP address for your internet router or ADSL modem.\n\nIt will typically be 192.168.1.1, 192.168.1.254, or similar" 12 60 "$STATIC_GATEWAY" 2>$data sel=$? case $sel in 0) NEW_STATIC_GATEWAY=$(<$data) if [[ "$NEW_STATIC_GATEWAY" != *"."* ]]; then return fi if grep -q 'iface eth0 inet static' /etc/network/interfaces; then if [[ "$NEW_STATIC_GATEWAY" != "$STATIC_GATEWAY" ]]; then sed -i "s|${STATIC_GATEWAY}|${NEW_STATIC_GATEWAY}|g" /etc/network/interfaces fi return fi ;; esac if ! grep -q 'iface eth0 inet static' /etc/network/interfaces; then if [ "$NEW_STATIC_GATEWAY" && "$NEW_STATIC_IP" ]; then echo '# This file describes the network interfaces available on your system' > /etc/network/interfaces echo '# and how to activate them. For more information, see interfaces(5).' >> /etc/network/interfaces echo '' >> /etc/network/interfaces echo '# The loopback network interface' >> /etc/network/interfaces echo 'auto lo' >> /etc/network/interfaces echo 'iface lo inet loopback' >> /etc/network/interfaces echo '' >> /etc/network/interfaces echo '# The primary network interface' >> /etc/network/interfaces echo 'auto eth0' >> /etc/network/interfaces echo 'iface eth0 inet static' >> /etc/network/interfaces echo " address ${NEW_STATIC_IP}" >> /etc/network/interfaces echo ' netmask 255.255.255.0' >> /etc/network/interfaces echo " gateway ${NEW_STATIC_GATEWAY}" >> /etc/network/interfaces echo " dns-nameservers 213.73.91.35 85.214.20.141" >> /etc/network/interfaces echo '# Example to keep MAC address between reboots' >> /etc/network/interfaces echo '#hwaddress ether DE:AD:BE:EF:CA:FE' >> /etc/network/interfaces echo '' >> /etc/network/interfaces echo '# The secondary network interface' >> /etc/network/interfaces echo '#auto eth1' >> /etc/network/interfaces echo '#iface eth1 inet dhcp' >> /etc/network/interfaces echo '' >> /etc/network/interfaces echo '# WiFi Example' >> /etc/network/interfaces echo "#auto $WIFI_INTERFACE" >> /etc/network/interfaces echo "#iface $WIFI_INTERFACE inet dhcp" >> /etc/network/interfaces echo '# wpa-ssid "essid"' >> /etc/network/interfaces echo '# wpa-psk "password"' >> /etc/network/interfaces echo '' >> /etc/network/interfaces echo '# Ethernet/RNDIS gadget (g_ether)' >> /etc/network/interfaces echo '# ... or on host side, usbnet and random hwaddr' >> /etc/network/interfaces echo '# Note on some boards, usb0 is automaticly setup with an init script' >> /etc/network/interfaces echo '#iface usb0 inet static' >> /etc/network/interfaces echo '# address 192.168.7.2' >> /etc/network/interfaces echo '# netmask 255.255.255.0' >> /etc/network/interfaces echo '# network 192.168.7.0' >> /etc/network/interfaces echo '# gateway 192.168.7.1' >> /etc/network/interfaces fi fi } function menu_backup_restore { while true do data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --backtitle $"Freedombone Control Panel" \ --title $"Backup and Restore" \ --radiolist $"Choose an operation:" 18 70 11 \ 1 $"Backup data to USB drive" off \ 2 $"Restore GPG key from USB keydrive" off \ 3 $"Restore data from USB drive" off \ 4 $"Configure remote backups" off \ 5 $"Restore from remote backup" off \ 6 $"Backup GPG key to USB (master keydrive)" off \ 7 $"Backup GPG key to USB (fragment keydrive)" off \ 8 $"Format a USB drive (LUKS encrypted)" off \ 9 $"Remove backups from a USB drive" off \ 10 $"Back to main menu" on 2> $data sel=$? case $sel in 1) break;; 255) break;; esac case $(cat $data) in 1) backup_data;; 2) restore_gpg_key;; 3) restore_data;; 4) configure_remote_backups;; 5) restore_data_remote;; 6) create_keydrive_master;; 7) create_keydrive_fragment;; 8) format_drive;; 9) remove_backups;; 10) break;; esac done } function menu_email { while true do data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --backtitle $"Freedombone Control Panel" \ --title $"Email Filtering Rules" \ --radiolist $"Choose an operation:" 12 70 5 \ 1 $"Add a user to a mailing list" off \ 2 $"Add an email rule" off \ 3 $"Block/Unblock an email address" off \ 4 $"Block/Unblock email with subject text" off \ 5 $"Back to main menu" on 2> $data sel=$? case $sel in 1) break;; 255) break;; esac case $(cat $data) in 1) add_to_mailing_list;; 2) email_rule;; 3) block_unblock_email;; 4) block_unblock_subject;; 5) break;; esac done } function menu_users { while true do data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --backtitle $"Freedombone Control Panel" \ --title $"Manage Users" \ --radiolist $"Choose an operation:" 12 70 5 \ 1 $"Add a user" off \ 2 $"Delete a user" off \ 3 $"Change user password" off \ 4 $"Change user ssh public key" off \ 5 $"Back to main menu" on 2> $data sel=$? case $sel in 1) break;; 255) break;; esac case $(cat $data) in 1) add_user;; 2) delete_user;; 3) change_password;; 4) change_ssh_public_key;; 5) break;; esac done } function menu_hubzilla { while true do data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --backtitle $"Freedombone Control Panel" \ --title $"Hubzilla" \ --radiolist $"Choose an operation:" 13 70 4 \ 1 $"Set channel directory server" off \ 2 $"Renew SSL certificate" off \ 3 $"Back to main menu" on 2> $data sel=$? case $sel in 1) break;; 255) break;; esac case $(cat $data) in 1) hubzilla_channel_directory_server;; 2) hubzilla_renew_cert;; 3) break;; esac done } function menu_media { while true do data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --backtitle $"Freedombone Control Panel" \ --title $"Media Menu" \ --radiolist $"Choose an operation:" 13 70 3 \ 1 $"Attach a drive containing playable media" off \ 2 $"Remove a drive containing playable media" off \ 3 $"Exit" on 2> $data sel=$? case $sel in 1) break;; 255) break;; esac case $(cat $data) in 1) remove-music attach-music;; 2) remove-music;; 3) break;; esac done } function menu_irc { while true do data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --backtitle $"Freedombone Control Panel" \ --title $"IRC Menu" \ --radiolist $"Choose an operation:" 13 70 3 \ 1 $"Set a password for all IRC users" off \ 2 $"Exit" on 2> $data sel=$? case $sel in 1) break;; 255) break;; esac case $(cat $data) in 1) irc_set_global_password;; 2) break;; esac done } function menu_top_level { while true do data=$(tempfile 2>/dev/null) trap "rm -f $data" 0 1 2 5 15 dialog --backtitle $"Freedombone Control Panel" \ --title $"Control Panel" \ --radiolist $"Choose an operation:" 24 70 17 \ 1 $"Backup and Restore" off \ 2 $"Show SIP Phone Extensions" off \ 3 $"Reset Tripwire" off \ 4 $"Logging on/off" off \ 5 $"Manage Users" off \ 6 $"Email Filtering Rules" off \ 7 $"Security Settings" off \ 8 $"Hubzilla" off \ 9 $"Media menu" off \ 10 $"IRC menu" off \ 11 $"Change the name of this system" off \ 12 $"Set the TLS date/time source" off \ 13 $"Set a static local IP address" off \ 14 $"Check for updates" off \ 15 $"Power off the system" off \ 16 $"Restart the system" off \ 17 $"Exit" on 2> $data sel=$? case $sel in 1) exit 1;; 255) exit 1;; esac case $(cat $data) in 1) menu_backup_restore;; 2) show_sip_extensions;; 3) reset_tripwire;; 4) logging_on_off;; 5) menu_users;; 6) menu_email;; 7) security_settings;; 8) menu_hubzilla;; 9) menu_media;; 10) menu_irc;; 11) change_system_name;; 12) set_tls_time_source;; 13) set_static_IP;; 14) check_for_updates;; 15) shut_down_system;; 16) restart_system;; 17) break;; esac done } if [ ! -f $COMPLETION_FILE ]; then echo $'This command should only be run on an installed Freedombone system' exit 1 fi ADMIN_USER=$(cat $COMPLETION_FILE | grep "Admin user" | awk -F ':' '{print $2}') menu_top_level clear cat /etc/motd exit 0