1869 lines
62 KiB
Bash
Executable File
1869 lines
62 KiB
Bash
Executable File
#!/bin/bash
|
|
#
|
|
# .---. . .
|
|
# | | |
|
|
# |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
|
|
# | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
|
|
# ' ' --' --' -' - -' ' ' -' -' -' ' - --'
|
|
#
|
|
# Freedom in the Cloud
|
|
#
|
|
# Administrator control panel for the Freedombone system
|
|
#
|
|
# License
|
|
# =======
|
|
#
|
|
# Copyright (C) 2015-2016 Bob Mottram <bob@freedombone.net>
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU Affero General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU Affero General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU Affero General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
PROJECT_NAME='freedombone'
|
|
|
|
export TEXTDOMAIN=${PROJECT_NAME}-controlpanel
|
|
export TEXTDOMAINDIR="/usr/share/locale"
|
|
|
|
UTILS_FILES=/usr/share/${PROJECT_NAME}/utils/${PROJECT_NAME}-utils-*
|
|
for f in $UTILS_FILES
|
|
do
|
|
source $f
|
|
done
|
|
|
|
APP_FILES=/usr/share/${PROJECT_NAME}/apps/${PROJECT_NAME}-app-*
|
|
for f in $APP_FILES
|
|
do
|
|
source $f
|
|
done
|
|
|
|
COMPLETION_FILE=$HOME/${PROJECT_NAME}-completed.txt
|
|
SELECTED_USERNAME=
|
|
SIP_CONFIGURATION_FILE=/etc/sipwitch.conf
|
|
ADMIN_USER=
|
|
UPGRADE_SCRIPT_NAME="${PROJECT_NAME}-upgrade"
|
|
UPDATE_DATE_SCRIPT=/usr/bin/updatedate
|
|
|
|
# Minimum number of characters in a password
|
|
MINIMUM_PASSWORD_LENGTH=$(cat /usr/share/${PROJECT_NAME}/utils/${PROJECT_NAME}-utils-passwords | grep 'MINIMUM_PASSWORD_LENGTH=' | head -n 1 | awk -F '=' '{print $2}')
|
|
|
|
# Mumble
|
|
MUMBLE_PORT=64738
|
|
MUMBLE_ONION_PORT=8095
|
|
|
|
SSH_PORT=2222
|
|
|
|
# outgoing SMTP proxy
|
|
SMTP_PROXY_ENABLE=$'no'
|
|
SMTP_PROXY_PROTOCOL='smtps'
|
|
SMTP_PROXY_SERVER='mail.myispdomain'
|
|
SMTP_PROXY_PORT=465
|
|
SMTP_PROXY_USERNAME=''
|
|
SMTP_PROXY_PASSWORD=''
|
|
|
|
WIFI_INTERFACE=wlan0
|
|
WIFI_SSID=
|
|
WIFI_TYPE='wpa2-psk'
|
|
WIFI_PASSPHRASE=
|
|
WIFI_HOTSPOT='no'
|
|
WIFI_NETWORKS_FILE=~/${PROJECT_NAME}-wifi.cfg
|
|
|
|
USB_DRIVE=sdb
|
|
# get default USB from config file
|
|
CONFIGURATION_FILE=$HOME/${PROJECT_NAME}.cfg
|
|
|
|
read_config_param WIFI_HOTSPOT
|
|
read_config_param WIFI_INTERFACE
|
|
read_config_param WIFI_TYPE
|
|
read_config_param WIFI_SSID
|
|
read_config_param WIFI_PASSPHRASE
|
|
read_config_param SSH_PORT
|
|
read_config_param SMTP_PROXY_ENABLE
|
|
read_config_param SMTP_PROXY_PROTOCOL
|
|
read_config_param SMTP_PROXY_SERVER
|
|
read_config_param SMTP_PROXY_PORT
|
|
read_config_param SMTP_PROXY_USERNAME
|
|
read_config_param SMTP_PROXY_PASSWORD
|
|
read_config_param USB_DRIVE
|
|
if [[ $USB_DRIVE == *"dev"* ]]; then
|
|
USB_DRIVE=$(echo ${USB_DRIVE} | awk -F '/' '{print $3}' | sed 's|1||g' | sed 's|2||g')
|
|
fi
|
|
|
|
# Mirrors settings
|
|
FRIENDS_MIRRORS_SERVER=
|
|
FRIENDS_MIRRORS_SSH_PORT=2222
|
|
FRIENDS_MIRRORS_PASSWORD=
|
|
MY_MIRRORS_PASSWORD=
|
|
|
|
function any_key {
|
|
echo ' '
|
|
read -n1 -r -p $"Press any key to continue..." key
|
|
}
|
|
|
|
function check_for_updates {
|
|
if [ ! -f /etc/cron.weekly/$UPGRADE_SCRIPT_NAME ]; then
|
|
dialog --title $"Check for updates" \
|
|
--msgbox $"Upgrade script was not found" 6 40
|
|
return
|
|
fi
|
|
|
|
clear
|
|
. /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
|
|
any_key
|
|
}
|
|
|
|
function set_main_repo {
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Main Repository (Mirrors)" \
|
|
--form $"If you do not wish to use the default repositories they can be obtained from mirrors on another ${PROJECT_NAME} server." 14 60 3 \
|
|
$"URL:" 1 1 "$FRIENDS_MIRRORS_SERVER" 1 14 40 15 \
|
|
$"SSH Port:" 2 1 "$FRIENDS_MIRRORS_SSH_PORT" 2 14 40 10000 \
|
|
$"Password:" 3 1 "$FRIENDS_MIRRORS_PASSWORD" 3 14 40 10000 \
|
|
2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
new_mirrors_url=$(cat $data | sed -n 1p)
|
|
new_mirrors_ssh_port=$(cat $data | sed -n 2p)
|
|
new_mirrors_password=$(cat $data | sed -n 3p)
|
|
|
|
if [ ${#new_mirrors_url} -lt 2 ]; then
|
|
return
|
|
fi
|
|
if [ ${#new_mirrors_ssh_port} -lt 1 ]; then
|
|
return
|
|
fi
|
|
if [ ${#new_mirrors_password} -lt 10 ]; then
|
|
dialog --title $"Main Repository" \
|
|
--msgbox $'Mirrors password was too short. Should be at least 10 characters.' 6 40
|
|
return
|
|
fi
|
|
|
|
if [[ $new_mirrors_url == *"."* ]]; then
|
|
FRIENDS_MIRRORS_SERVER=$new_mirrors_url
|
|
FRIENDS_MIRRORS_SSH_PORT=$new_mirrors_ssh_port
|
|
FRIENDS_MIRRORS_PASSWORD=$new_mirrors_password
|
|
|
|
write_config_param "FRIENDS_MIRRORS_SERVER" "$FRIENDS_MIRRORS_SERVER"
|
|
write_config_param "FRIENDS_MIRRORS_SSH_PORT" "$FRIENDS_MIRRORS_SSH_PORT"
|
|
write_config_param "FRIENDS_MIRRORS_PASSWORD" "$FRIENDS_MIRRORS_PASSWORD"
|
|
|
|
# re-read the repos
|
|
read_repo_servers
|
|
|
|
dialog --title $"Main Repository" \
|
|
--msgbox $"Main repository set to $FRIENDS_MIRRORS_SERVER" 6 60
|
|
fi
|
|
}
|
|
|
|
function add_user {
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Add new user" \
|
|
--form "\n" 8 60 3 \
|
|
$"Username:" 1 1 "" 1 28 16 15 \
|
|
$"ssh public key (optional):" 2 1 "" 2 28 40 10000 \
|
|
2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
new_user_username=$(cat $data | sed -n 1p)
|
|
new_user_ssh_public_key=$(cat $data | sed -n 2p)
|
|
if [ ${#new_user_username} -lt 2 ]; then
|
|
dialog --title $"New username" \
|
|
--msgbox $"No username was given" 6 40
|
|
return
|
|
fi
|
|
if [[ "$new_user_username" == *" "* ]]; then
|
|
dialog --title $"Invalid username" \
|
|
--msgbox $"The username should not contain any spaces" 6 40
|
|
return
|
|
fi
|
|
if [ ${#new_user_ssh_public_key} -lt 20 ]; then
|
|
clear
|
|
${PROJECT_NAME}-adduser "$new_user_username"
|
|
any_key
|
|
else
|
|
if [[ "$new_user_ssh_public_key" == "ssh-"* ]]; then
|
|
clear
|
|
${PROJECT_NAME}-adduser "$new_user_username" "$new_user_ssh_public_key"
|
|
any_key
|
|
else
|
|
dialog --title $"ssh public key" \
|
|
--msgbox $"This does not look like an ssh public key" 6 40
|
|
fi
|
|
fi
|
|
}
|
|
|
|
function pad_string {
|
|
echo -n -e "$1" | sed -e :a -e 's/^.\{1,25\}$/& /;ta'
|
|
}
|
|
|
|
function show_domains {
|
|
read_config_param "DEFAULT_DOMAIN_NAME"
|
|
|
|
echo 'Domains'
|
|
echo '======='
|
|
echo ''
|
|
echo -n -e "$(pad_string 'Name')"
|
|
echo -n -e "$(pad_string 'ICANN')"
|
|
echo -n -e "$(pad_string 'Tor')"
|
|
echo ''
|
|
echo '--------------------------------------------------------------------------'
|
|
if grep -q "ssh onion domain" $COMPLETION_FILE; then
|
|
echo -n -e "$(pad_string 'ssh')"
|
|
echo -n -e "$(pad_string ${DEFAULT_DOMAIN_NAME})"
|
|
echo "$(cat ${COMPLETION_FILE} | grep 'ssh onion domain' | awk -F ':' '{print $2}')"
|
|
fi
|
|
if grep -q "email onion domain" $COMPLETION_FILE; then
|
|
echo -n -e "$(pad_string 'Email')"
|
|
echo -n -e "$(pad_string ${DEFAULT_DOMAIN_NAME})"
|
|
echo "$(cat ${COMPLETION_FILE} | grep 'email onion domain' | awk -F ':' '{print $2}')"
|
|
fi
|
|
|
|
for app_name in "${APPS_INSTALLED_NAMES[@]}"
|
|
do
|
|
if ! grep -q "SHOW_ON_ABOUT=1" /usr/share/${PROJECT_NAME}/apps/${PROJECT_NAME}-app-${app_name}; then
|
|
continue
|
|
fi
|
|
|
|
icann_address=${DEFAULT_DOMAIN_NAME}
|
|
onion_address="-"
|
|
|
|
# handle the foibles of capitalisation
|
|
if ! grep -q "${app_name} domain" $COMPLETION_FILE; then
|
|
app_name_upper=$(echo ${app_name} | awk '{print toupper($0)}')
|
|
if grep -q "${app_name_upper} domain" $COMPLETION_FILE; then
|
|
app_name=${app_name_upper}
|
|
else
|
|
app_name_first_upper="$(tr '[:lower:]' '[:upper:]' <<< ${app_name:0:1})${app_name:1}"
|
|
if grep -q "${app_name_first_upper} domain" $COMPLETION_FILE; then
|
|
app_name=${app_name_first_upper}
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
if [ ${#app_name} -gt 0 ]; then
|
|
if grep -q "${app_name} domain" $COMPLETION_FILE; then
|
|
icann_address=$(cat ${COMPLETION_FILE} | grep "${app_name} domain" | head -n 1 | awk -F ':' '{print $2}')
|
|
fi
|
|
|
|
if grep -q "${app_name} onion domain" $COMPLETION_FILE; then
|
|
onion_address=$(cat ${COMPLETION_FILE} | grep "${app_name} onion domain" | head -n 1 | awk -F ':' '{print $2}')
|
|
fi
|
|
|
|
echo -n -e "$(pad_string "${app_name}")"
|
|
echo -n -e "$(pad_string "${icann_address}")"
|
|
echo "${onion_address}"
|
|
|
|
if grep -q "${app_name}_mobile onion domain" $COMPLETION_FILE; then
|
|
if grep -q "${app_name}_mobile onion domain" $COMPLETION_FILE; then
|
|
onion_address=$(cat ${COMPLETION_FILE} | grep "${app_name}_mobile onion domain" | head -n 1 | awk -F ':' '{print $2}')
|
|
fi
|
|
|
|
echo -n -e "$(pad_string "${app_name} (mobile)")"
|
|
echo -n -e "$(pad_string "${icann_address}")"
|
|
echo "${onion_address}"
|
|
fi
|
|
fi
|
|
done
|
|
|
|
if grep -q "rss reader domain" $COMPLETION_FILE; then
|
|
if [ -d /var/lib/tor/hidden_service_ttrss ]; then
|
|
echo -n -e "$(pad_string 'RSS reader')"
|
|
RSSDOM='-'
|
|
echo -n -e "$(pad_string ${RSSDOM})"
|
|
echo -n "$(cat /var/lib/tor/hidden_service_ttrss/hostname)"
|
|
echo ''
|
|
fi
|
|
if [ -d /var/lib/tor/hidden_service_ttrss_mobile ]; then
|
|
echo -n -e "$(pad_string 'RSS mobile')"
|
|
RSSMOBILEDOM='-'
|
|
echo -n -e "$(pad_string ${RSSMOBILEDOM})"
|
|
echo -n "$(cat /var/lib/tor/hidden_service_ttrss_mobile/hostname)"
|
|
echo ''
|
|
fi
|
|
fi
|
|
echo ''
|
|
}
|
|
|
|
function show_users {
|
|
echo 'Users'
|
|
echo '====='
|
|
echo ''
|
|
echo -n -e "$(pad_string 'Name')"
|
|
echo -n -e "$(pad_string 'SIP ext')"
|
|
echo -n -e "$(pad_string 'Data')"
|
|
echo ''
|
|
echo '--------------------------------------------------------------------------'
|
|
for d in /home/*/ ; do
|
|
USRNAME=$(echo "$d" | awk -F '/' '{print $3}')
|
|
if [[ $(is_valid_user "$USRNAME") == "1" ]]; then
|
|
echo -n -e "$(pad_string ${USRNAME})"
|
|
# get the SIP extension
|
|
SIPEXT=
|
|
if [ -f $SIP_CONFIGURATION_FILE ]; then
|
|
while read ext; do
|
|
if [[ $ext == *"user id"* ]]; then
|
|
CURR_UID=$(echo "$ext" | awk -F '"' '{print $2}' | awk -F '"' '{print $1}')
|
|
fi
|
|
if [[ $ext == *"extension"* ]]; then
|
|
if [[ $CURR_UID == $USRNAME ]]; then
|
|
SIPEXT=$(echo "$ext" | awk -F '>' '{print $2}' | awk -F '<' '{print $1}')
|
|
fi
|
|
fi
|
|
done < $SIP_CONFIGURATION_FILE
|
|
fi
|
|
if [ $SIPEXT ]; then
|
|
echo -n -e "$(pad_string SIP:${SIPEXT})"
|
|
else
|
|
echo -n -e "$(pad_string '')"
|
|
fi
|
|
|
|
# size of the home directory
|
|
echo "$(du -s -h /home/${USRNAME} | awk -F ' ' '{print $1}')"
|
|
fi
|
|
done
|
|
echo ''
|
|
}
|
|
|
|
function show_mirrors_password {
|
|
if [ ! /home/mirrors ]; then
|
|
return
|
|
fi
|
|
read_config_param "MY_MIRRORS_PASSWORD"
|
|
echo 'Local Mirrors'
|
|
echo '============='
|
|
echo ''
|
|
echo -n "URL: "
|
|
echo "$(cat ${COMPLETION_FILE} | grep 'ssh onion domain' | awk -F ':' '{print $2}')"
|
|
echo "SSH Port: $SSH_PORT"
|
|
echo "Password: $MY_MIRRORS_PASSWORD"
|
|
echo ''
|
|
}
|
|
|
|
function show_tahoe_introducer {
|
|
if [ ! -f /home/tahoelafs/.tahoe-introducer/private/introducer.furl ]; then
|
|
return
|
|
fi
|
|
echo 'Tahoe-LAFS'
|
|
echo '=========='
|
|
echo ''
|
|
cat /home/tahoelafs/.tahoe-introducer/private/introducer.furl
|
|
echo ''
|
|
}
|
|
|
|
function show_ip_addresses {
|
|
echo 'IP/DNS addresses'
|
|
echo '================'
|
|
echo ''
|
|
echo -n "IPv4: $(get_ipv4_address)"
|
|
ipv6_address="$(get_ipv6_address)"
|
|
if [ ${#ipv6_address} -gt 0 ]; then
|
|
echo " IPv6: ${ipv6_address}"
|
|
fi
|
|
echo ''
|
|
echo ''
|
|
}
|
|
|
|
function show_about {
|
|
clear
|
|
echo ''
|
|
echo $' Detecting installed apps...'
|
|
detect_apps
|
|
get_apps_installed_names
|
|
|
|
clear
|
|
show_ip_addresses
|
|
show_domains
|
|
show_mirrors_password
|
|
show_tahoe_introducer
|
|
show_users
|
|
any_key
|
|
}
|
|
|
|
function select_user {
|
|
SELECTED_USERNAME=
|
|
|
|
users_array=($(ls /home))
|
|
|
|
delete=(mirrors git)
|
|
for del in ${delete[@]}
|
|
do
|
|
users_array=(${users_array[@]/$del})
|
|
done
|
|
|
|
i=0
|
|
W=()
|
|
name=()
|
|
for u in ${users_array[@]}
|
|
do
|
|
if [[ $(is_valid_user "$u") == "1" ]]; then
|
|
i=$((i+1))
|
|
W+=($i "$u")
|
|
name+=("$u")
|
|
fi
|
|
done
|
|
|
|
if [ $i -eq 1 ]; then
|
|
SELECTED_USERNAME="${name[0]}"
|
|
else
|
|
user_index=$(dialog --backtitle $"Freedombone Control Panel" --title $"Select User" --menu $"Select one of the following:" 24 40 17 "${W[@]}" 3>&2 2>&1 1>&3)
|
|
|
|
if [ $? -eq 0 ]; then
|
|
SELECTED_USERNAME="${name[$((user_index-1))]}"
|
|
fi
|
|
fi
|
|
}
|
|
|
|
function delete_user {
|
|
select_user
|
|
if [ ! $SELECTED_USERNAME ]; then
|
|
return
|
|
fi
|
|
if grep -Fxq "Admin user:$SELECTED_USERNAME" $COMPLETION_FILE; then
|
|
dialog --title $"Administrator user" \
|
|
--msgbox $"You can't delete the administrator user" 6 40
|
|
return
|
|
fi
|
|
clear
|
|
${PROJECT_NAME}-rmuser $SELECTED_USERNAME
|
|
any_key
|
|
}
|
|
|
|
function configure_remote_backups {
|
|
if ! grep -Fxq "Admin user:$ADMIN_USER" $COMPLETION_FILE; then
|
|
dialog --title $"Administrator user" \
|
|
--msgbox $"No Administrator user found. Check $COMPLETION_FILE" 6 40
|
|
return
|
|
fi
|
|
if [ ${#ADMIN_USER} -lt 2 ]; then
|
|
dialog --title $"Administrator user" \
|
|
--msgbox $"Username not found" 6 40
|
|
return
|
|
fi
|
|
if [ ! -d /home/$ADMIN_USER ]; then
|
|
dialog --title $"Administrator user" \
|
|
--msgbox $"Home directory not found" 6 40
|
|
return
|
|
fi
|
|
${PROJECT_NAME}-remote -u $ADMIN_USER
|
|
if [ ! "$?" = "0" ]; then
|
|
any_key
|
|
fi
|
|
}
|
|
|
|
function change_password {
|
|
select_user
|
|
if [ ! $SELECTED_USERNAME ]; then
|
|
return
|
|
fi
|
|
|
|
dialog --title $"Change password" \
|
|
--passwordbox $"New password for user $SELECTED_USERNAME" 8 40 2> $data
|
|
newpassword=$(<$data)
|
|
if [ ${#newpassword} -lt ${MINIMUM_PASSWORD_LENGTH} ]; then
|
|
dialog --title $"Change password" \
|
|
--msgbox $"The password should be ${MINIMUM_PASSWORD_LENGTH} or more characters" 6 40
|
|
return
|
|
fi
|
|
|
|
echo "$SELECTED_USERNAME:$newpassword"|chpasswd
|
|
|
|
dialog --title $"Change password" \
|
|
--msgbox $"Password for $SELECTED_USERNAME was changed" 6 40
|
|
}
|
|
|
|
function change_ssh_public_key {
|
|
select_user
|
|
if [ ! $SELECTED_USERNAME ]; then
|
|
return
|
|
fi
|
|
|
|
if grep -Fxq "Admin user:$SELECTED_USERNAME" $COMPLETION_FILE; then
|
|
dialog --title $"Change ssh public key" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--defaultno \
|
|
--yesno $"\nThis is the administrator user.\n\nAre you sure you want to change the ssh public key for the administrator?" 10 60
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
fi
|
|
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --title $"Change ssh public key for $SELECTED_USERNAME" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--inputbox $"Paste the ssh public key below" 8 60 2>$data
|
|
sel=$?
|
|
case $sel in
|
|
0)
|
|
SSH_PUBLIC_KEY=$(<$data)
|
|
if [ "$SSH_PUBLIC_KEY" ]; then
|
|
if [ ${#SSH_PUBLIC_KEY} -gt 5 ]; then
|
|
if [ -f "$SSH_PUBLIC_KEY" ]; then
|
|
if [ ! -d /home/$SELECTED_USERNAME/.ssh ]; then
|
|
mkdir /home/$SELECTED_USERNAME/.ssh
|
|
fi
|
|
cp $SSH_PUBLIC_KEY \
|
|
/home/$SELECTED_USERNAME/.ssh/authorized_keys
|
|
chown -R $SELECTED_USERNAME:$SELECTED_USERNAME \
|
|
/home/$SELECTED_USERNAME/.ssh
|
|
dialog --title $"Change ssh public key" \
|
|
--msgbox $"ssh public key was installed" 6 40
|
|
else
|
|
if [[ "$SSH_PUBLIC_KEY" == "ssh-"* ]]; then
|
|
if [ ! -d /home/$SELECTED_USERNAME/.ssh ]; then
|
|
mkdir /home/$SELECTED_USERNAME/.ssh
|
|
fi
|
|
echo "$SSH_PUBLIC_KEY" > \
|
|
/home/$SELECTED_USERNAME/.ssh/authorized_keys
|
|
chown -R $SELECTED_USERNAME:$SELECTED_USERNAME \
|
|
/home/$SELECTED_USERNAME/.ssh
|
|
dialog --title $"Change ssh public key" \
|
|
--msgbox $"ssh public key was installed" 6 40
|
|
fi
|
|
fi
|
|
fi
|
|
fi
|
|
;;
|
|
esac
|
|
}
|
|
|
|
function remove_user_from_mailing_list {
|
|
select_user
|
|
if [ ! $SELECTED_USERNAME ]; then
|
|
return
|
|
fi
|
|
USER_MAILING_LISTS=$(cat "/home/$SELECTED_USERNAME/.procmailrc" | grep '\[' | grep '\]' | awk -F '\[' '{print $2}' | awk -F '\\' '{print $1}')
|
|
|
|
i=0
|
|
W=()
|
|
list_name=()
|
|
while read -r listname; do
|
|
i=$((i+1))
|
|
W+=($i "$listname")
|
|
list_name+=("$listname")
|
|
echo $listname
|
|
done <<< "$USER_MAILING_LISTS"
|
|
|
|
i=$((i+1))
|
|
W+=($i $"Exit back to user mainenance")
|
|
|
|
list_selected=$(dialog --default-item "$i" --backtitle $"Freedombone Control Panel" --title $"Remove a mailing list for $SELECTED_USERNAME" --menu $"Select one of the following:" 24 50 17 "${W[@]}" 3>&2 2>&1 1>&3)
|
|
|
|
if [ $? -eq 0 ]; then # Exit with OK
|
|
if [ ${list_selected} -ne ${i} ]; then
|
|
remove_list_name="${list_name[$((list_selected-1))]}"
|
|
|
|
# find the line number where the list is defined
|
|
line_number=0
|
|
i=0
|
|
while read -r line
|
|
do
|
|
if [[ "$line" == *"\[${remove_list_name}\\]"* ]]; then
|
|
line_number=${i}
|
|
fi
|
|
i=$((i+1))
|
|
done < "/home/$SELECTED_USERNAME/.procmailrc"
|
|
|
|
if [ ${line_number} -eq 0 ]; then
|
|
# no match was found
|
|
return
|
|
fi
|
|
|
|
# recreate the file
|
|
if [ -f /home/${SELECTED_USERNAME}/.procmailrc_new ]; then
|
|
rm /home/${SELECTED_USERNAME}/.procmailrc_new
|
|
fi
|
|
i=0
|
|
clip=0
|
|
while read -r line
|
|
do
|
|
i=$((i+1))
|
|
if [ ${i} -gt $((line_number-1)) ]; then
|
|
if [ ${clip} -eq 0 ]; then
|
|
clip=1
|
|
fi
|
|
if [ ${clip} -eq 1 ]; then
|
|
if [ ${i} -lt $((line_number+2)) ]; then
|
|
continue
|
|
else
|
|
if [ ${#line} -lt 1 ]; then
|
|
clip=2
|
|
continue
|
|
fi
|
|
if [[ "$line" == ":"* || "$line" == "#"* ]]; then
|
|
clip=2
|
|
else
|
|
continue
|
|
fi
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
echo "$line" >> /home/${SELECTED_USERNAME}/.procmailrc_new
|
|
|
|
if [[ "$line" == *"\[${remove_list_name}\\]"* ]]; then
|
|
line_number=${i}
|
|
fi
|
|
done < "/home/$SELECTED_USERNAME/.procmailrc"
|
|
cp /home/${SELECTED_USERNAME}/.procmailrc_new /home/${SELECTED_USERNAME}/.procmailrc
|
|
rm /home/${SELECTED_USERNAME}/.procmailrc_new
|
|
chown ${SELECTED_USERNAME}:${SELECTED_USERNAME} /home/${SELECTED_USERNAME}/.procmailrc
|
|
dialog --title $"Remove user from mailing list" \
|
|
--msgbox $"${SELECTED_USERNAME} has been removed from ${remove_list_name}" 6 50
|
|
fi
|
|
fi
|
|
}
|
|
|
|
function add_to_mailing_list {
|
|
select_user
|
|
if [ ! $SELECTED_USERNAME ]; then
|
|
return
|
|
fi
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Subscribe $SELECTED_USERNAME to a mailing list" \
|
|
--form $"You can either enter a subject or an email address\n" 11 68 4 \
|
|
$"List folder name:" 1 1 "" 1 35 26 25 \
|
|
$"Name between [] on subject line:" 2 1 "" 2 35 26 25 \
|
|
$"List email address:" 3 1 "" 3 35 26 25 \
|
|
$"Public:" 4 1 $"yes" 4 35 4 25 \
|
|
2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
LIST_NAME=$(cat $data | sed -n 1p)
|
|
LIST_SUBJECT=$(cat $data | sed -n 2p)
|
|
LIST_EMAIL=$(cat $data | sed -n 3p)
|
|
LIST_PUBLIC=$(cat $data | sed -n 4p)
|
|
|
|
if [ ${#LIST_PUBLIC} -lt 1 ]; then
|
|
LIST_PUBLIC='no'
|
|
fi
|
|
if [[ $LIST_PUBLIC == $'y' || $LIST_PUBLIC == $'Y' || $LIST_PUBLIC == $'true' || $LIST_PUBLIC == $'True' || $LIST_PUBLIC == $'yes' || $LIST_PUBLIC == $'Yes' || $LIST_PUBLIC == $'YES' ]]; then
|
|
LIST_PUBLIC='yes'
|
|
else
|
|
LIST_PUBLIC='no'
|
|
fi
|
|
if [ ${#LIST_NAME} -lt 2 ]; then
|
|
dialog --title $"Add mailing list" \
|
|
--msgbox $"No mailing list name was given" 6 40
|
|
return
|
|
fi
|
|
if [ ${#LIST_SUBJECT} -lt 2 ]; then
|
|
if [ ${#LIST_EMAIL} -lt 2 ]; then
|
|
dialog --title $"Add mailing list" \
|
|
--msgbox $"No mailing list subject or address was given" 6 40
|
|
return
|
|
fi
|
|
fi
|
|
if [ ${#LIST_SUBJECT} -gt 1 ]; then
|
|
${PROJECT_NAME}-addlist -u $SELECTED_USERNAME -l "$LIST_NAME" \
|
|
-s "$LIST_SUBJECT" --public $LIST_PUBLIC
|
|
else
|
|
if [[ "$LIST_EMAIL" != *"@"* || "$LIST_EMAIL" != *"."* ]]; then
|
|
dialog --title $"Add mailing list" \
|
|
--msgbox $"Unrecognised email address" 6 40
|
|
return
|
|
else
|
|
${PROJECT_NAME}-addlist -u $SELECTED_USERNAME -l "$LIST_NAME" \
|
|
-e "$LIST_EMAIL" --public $LIST_PUBLIC
|
|
fi
|
|
fi
|
|
|
|
dialog --title $"Add mailing list" \
|
|
--msgbox $"$LIST_NAME list was added" 6 40
|
|
}
|
|
|
|
function email_rule {
|
|
select_user
|
|
if [ ! $SELECTED_USERNAME ]; then
|
|
return
|
|
fi
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Email rule for user $SELECTED_USERNAME" \
|
|
--form "\n" 9 65 4 \
|
|
$"When email arrives from address:" 1 1 "" 1 35 24 28 \
|
|
$"Move to folder:" 2 1 "" 2 35 24 28 \
|
|
$"Public:" 3 1 $"no" 3 35 4 25 \
|
|
2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
RULE_EMAIL=$(cat $data | sed -n 1p)
|
|
RULE_FOLDER=$(cat $data | sed -n 2p)
|
|
RULE_PUBLIC=$(cat $data | sed -n 3p)
|
|
|
|
if [ ${#RULE_PUBLIC} -lt 1 ]; then
|
|
RULE_PUBLIC='no'
|
|
fi
|
|
if [[ $RULE_PUBLIC == $'y' || $RULE_PUBLIC == $'Y' || $RULE_PUBLIC == $'true' || $RULE_PUBLIC == $'True' || $RULE_PUBLIC == $'yes' || $RULE_PUBLIC == $'Yes' || $RULE_PUBLIC == $'YES' ]]; then
|
|
RULE_PUBLIC='yes'
|
|
else
|
|
RULE_PUBLIC='no'
|
|
fi
|
|
if [ ${#RULE_EMAIL} -lt 2 ]; then
|
|
dialog --title $"Add email rule" \
|
|
--msgbox $"No email address was given" 6 40
|
|
return
|
|
fi
|
|
if [ ${#RULE_FOLDER} -lt 2 ]; then
|
|
dialog --title $"Add email rule" \
|
|
--msgbox $"No folder name was given" 6 40
|
|
return
|
|
fi
|
|
if [[ "$RULE_EMAIL" != *"@"* || "$RULE_EMAIL" != *"."* ]]; then
|
|
dialog --title $"Add email rule" \
|
|
--msgbox $"Unrecognised email address" 6 40
|
|
return
|
|
fi
|
|
|
|
${PROJECT_NAME}-addemail -u $SELECTED_USERNAME -e "$RULE_EMAIL" \
|
|
-g "$RULE_FOLDER" --public $RULE_PUBLIC
|
|
dialog --title $"Add email rule" \
|
|
--msgbox $"Email rule for $RULE_EMAIL was added" 6 40
|
|
}
|
|
|
|
function block_unblock_email {
|
|
select_user
|
|
if [ ! $SELECTED_USERNAME ]; then
|
|
return
|
|
fi
|
|
blockstr=$"Block/Unblock email going to"
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title "$blockstr $SELECTED_USERNAME" \
|
|
--form "\n" 8 65 3 \
|
|
$"When email arrives from address:" 1 1 "" 1 35 24 100 \
|
|
$"Block it:" 2 1 "yes" 2 35 4 4 \
|
|
2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
BLOCK_EMAIL=$(cat $data | sed -n 1p)
|
|
BLOCK=$(cat $data | sed -n 2p)
|
|
if [ ${#BLOCK_EMAIL} -lt 2 ]; then
|
|
dialog --title $"Block/Unblock an email" \
|
|
--msgbox $"No email address was given" 6 40
|
|
return
|
|
fi
|
|
if [[ "$BLOCK_EMAIL" != *"@"* || "$BLOCK_EMAIL" != *"."* ]]; then
|
|
dialog --title $"Block/Unblock an email" \
|
|
--msgbox $"Unrecognised email address" 6 40
|
|
return
|
|
fi
|
|
if [[ $BLOCK == "y"* || $BLOCK == "Y"* ]]; then
|
|
${PROJECT_NAME}-ignore -u $SELECTED_USERNAME -e "$BLOCK_EMAIL"
|
|
dialog --title $"Block an email" \
|
|
--msgbox "Email from $BLOCK_EMAIL to $SELECTED_USERNAME blocked" 6 75
|
|
else
|
|
${PROJECT_NAME}-unignore -u $SELECTED_USERNAME -e "$BLOCK_EMAIL"
|
|
dialog --title $"Unblock an email" \
|
|
--msgbox "Email from $BLOCK_EMAIL to $SELECTED_USERNAME unblocked" 6 75
|
|
fi
|
|
}
|
|
|
|
function block_unblock_subject {
|
|
select_user
|
|
if [ ! $SELECTED_USERNAME ]; then
|
|
return
|
|
fi
|
|
blockstr=$"Block/Unblock email going to"
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title "$blockstr $SELECTED_USERNAME" \
|
|
--form "\n" 8 70 3 \
|
|
$"When email arrives with subject text:" 1 1 "" 1 40 24 28 \
|
|
$"Block it:" 2 1 "yes" 2 40 4 4 \
|
|
2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
BLOCK_SUBJECT=$(cat $data | sed -n 1p)
|
|
BLOCK=$(cat $data | sed -n 2p)
|
|
if [ ${#BLOCK_SUBJECT} -lt 2 ]; then
|
|
dialog --title $"Block/Unblock an email" \
|
|
--msgbox $"No subject was given" 6 40
|
|
return
|
|
fi
|
|
if [[ $BLOCK == "y"* || $BLOCK == "Y"* ]]; then
|
|
${PROJECT_NAME}-ignore -u $SELECTED_USERNAME -t "$BLOCK_SUBJECT"
|
|
dialog --title $"Block an email" \
|
|
--msgbox "Email with subject $BLOCK_SUBJECT to $SELECTED_USERNAME blocked" 6 40
|
|
else
|
|
${PROJECT_NAME}-unignore -u $SELECTED_USERNAME -t "$BLOCK_SUBJECT"
|
|
dialog --title $"Unblock an email" \
|
|
--msgbox "Email with subject $BLOCK_SUBJECT to $SELECTED_USERNAME unblocked" 6 40
|
|
fi
|
|
}
|
|
|
|
function create_keydrive_master {
|
|
select_user
|
|
if [ ! $SELECTED_USERNAME ]; then
|
|
return
|
|
fi
|
|
dialog --title $"USB Master Keydrive" \
|
|
--msgbox $"Plug in a LUKS encrypted USB drive" 6 40
|
|
clear
|
|
${PROJECT_NAME}-keydrive -u $SELECTED_USERNAME --master 'yes'
|
|
any_key
|
|
}
|
|
|
|
function create_keydrive_fragment {
|
|
select_user
|
|
if [ ! $SELECTED_USERNAME ]; then
|
|
return
|
|
fi
|
|
dialog --title $"USB Fragment Keydrive" \
|
|
--msgbox $"Plug in a LUKS encrypted USB drive" 6 40
|
|
clear
|
|
${PROJECT_NAME}-keydrive -u $SELECTED_USERNAME
|
|
any_key
|
|
}
|
|
|
|
function backup_data {
|
|
dialog --title $"Backup data to USB" \
|
|
--msgbox $"Plug in a LUKS encrypted USB drive" 6 40
|
|
clear
|
|
detect_usb_drive
|
|
echo ''
|
|
echo $"Detected USB drive $USB_DRIVE"
|
|
echo ''
|
|
echo $'Enter the passphrase for your LUKS encrypted backup drive:'
|
|
${PROJECT_NAME}-backup-local
|
|
any_key
|
|
}
|
|
|
|
function restore_data_from_storage {
|
|
restore_type="$1"
|
|
|
|
AllStr=$"all"
|
|
ExitStr=$"Exit"
|
|
RestoreStr=$"Restore apps"
|
|
|
|
if [[ $restore_type != "local" ]]; then
|
|
restore_command="${PROJECT_NAME}-restore-remote $remote_domain_name configuration;;"
|
|
else
|
|
remote_domain_name="$1"
|
|
detect_usb_drive
|
|
restore_command="${PROJECT_NAME}-restore-local $USB_DRIVE"
|
|
RestoreStr=$"Restore apps from USB drive $USB_DRIVE"
|
|
fi
|
|
|
|
utils_installed=(configfiles
|
|
mariadb
|
|
letsencrypt
|
|
mutt
|
|
gpg
|
|
procmail
|
|
spamassassin
|
|
readme
|
|
ssh
|
|
userconfig
|
|
userlocal
|
|
userfin
|
|
certs
|
|
personal
|
|
email)
|
|
|
|
detect_apps
|
|
|
|
while true
|
|
do
|
|
|
|
app_list=()
|
|
n=1
|
|
applist="$n $AllStr off"
|
|
n=$[n+1]
|
|
app_list+=("$AllStr")
|
|
|
|
util_index=0
|
|
for a in "${utils_installed[@]}"
|
|
do
|
|
applist="$applist $n $a off"
|
|
app_name=${utils_installed[util_index]}
|
|
n=$[n+1]
|
|
util_index=$[util_index+1]
|
|
app_list+=("$app_name")
|
|
done
|
|
|
|
app_index=0
|
|
for a in "${APPS_INSTALLED_NAMES[@]}"
|
|
do
|
|
applist="$applist $n $a off"
|
|
n=$[n+1]
|
|
app_name=${APPS_INSTALLED_NAMES[app_index]}
|
|
app_index=$[app_index+1]
|
|
app_list+=("$app_name")
|
|
done
|
|
applist="$applist $n $ExitStr on"
|
|
n=$[n+1]
|
|
app_list+=("$ExitStr")
|
|
|
|
choice=$(dialog --stdout --backtitle $"Freedombone" \
|
|
--title "$RestoreStr" \
|
|
--radiolist $'Choose:' \
|
|
30 50 20 $applist)
|
|
|
|
if [ $? -ne 0 ]; then
|
|
break
|
|
fi
|
|
app_index=$[choice-1]
|
|
app_name=${app_list[app_index]}
|
|
|
|
# exit
|
|
if [[ "$app_name" == "$ExitStr" ]]; then
|
|
break
|
|
fi
|
|
|
|
clear
|
|
|
|
# Restore all
|
|
if [[ "$app_name" == "$AllStr" ]]; then
|
|
$restore_command
|
|
retcode="$?"
|
|
if [[ "$retcode" != "0" ]]; then
|
|
if [[ "$1" == "local" ]]; then
|
|
dialog --title $"Restore all apps from USB" \
|
|
--msgbox $"Restore failed with code $retcode" 6 60
|
|
else
|
|
dialog --title $"Restore all apps from $1" \
|
|
--msgbox $"Restore failed with code $retcode" 6 60
|
|
fi
|
|
break
|
|
fi
|
|
|
|
if [[ "$1" == "local" ]]; then
|
|
dialog --title $"Restore all apps from USB" \
|
|
--msgbox $"Restore complete" 6 40
|
|
else
|
|
dialog --title $"Restore all apps from $1" \
|
|
--msgbox $"Restore complete" 6 40
|
|
fi
|
|
break
|
|
fi
|
|
|
|
# Restore an app
|
|
$restore_command "${app_name}"
|
|
retcode="$?"
|
|
if [[ "$retcode" != "0" ]]; then
|
|
dialog --title $"Restore apps from USB" \
|
|
--msgbox $"Restore of ${app_name} failed with code $retcode" 6 60
|
|
return
|
|
fi
|
|
|
|
# finished
|
|
if [[ "$1" == "local" ]]; then
|
|
dialog --title $"Restore apps from USB" \
|
|
--msgbox $"Restore complete" 6 40
|
|
else
|
|
dialog --title $"Restore apps from $1" \
|
|
--msgbox $"Restore complete" 6 40
|
|
fi
|
|
|
|
done
|
|
}
|
|
|
|
function restore_data {
|
|
dialog --title $"Restore data from USB" \
|
|
--msgbox $"Plug in your backup USB drive" 6 40
|
|
clear
|
|
echo ' '
|
|
echo $'Enter the passphrase for your LUKS encrypted backup drive:'
|
|
restore_data_from_storage local
|
|
}
|
|
|
|
function restore_data_remote {
|
|
if [ ! $ADMIN_USER ]; then
|
|
dialog --title $"Restore data from remote server" \
|
|
--msgbox $"Unknown admin user" 6 40
|
|
return
|
|
fi
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --title $"Restore from remote server" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--inputbox $"Enter the domain name of the server from which you wish to restore" 8 60 2>$data
|
|
sel=$?
|
|
case $sel in
|
|
0)
|
|
friend_server_domain_name=$(<$data)
|
|
|
|
if [ ${#friend_server_domain_name} -lt 2 ]; then
|
|
return
|
|
fi
|
|
|
|
if [[ $friend_server_domain_name != *"."* ]]; then
|
|
dialog --title $"Remote server domain name" \
|
|
--msgbox $"Invalid domain name" 6 40
|
|
return
|
|
fi
|
|
|
|
restore_data_from_storage $friend_server_domain_name
|
|
;;
|
|
esac
|
|
}
|
|
|
|
function ping_enable_disable {
|
|
ping_str=$"\nDo you want to enable other systems to ping this machine?\n\nPing may be useful for diagnostic purposes, but for added security you may not want to enable it."
|
|
enable_ping="no"
|
|
dialog --title $"Enable Ping / ICMP" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--defaultno \
|
|
--yesno "$ping_str" 10 60
|
|
sel=$?
|
|
case $sel in
|
|
0) enable_ping="yes";;
|
|
255) return;;
|
|
esac
|
|
|
|
if [[ $enable_ping == "yes" ]]; then
|
|
iptables -A INPUT -p icmp --icmp-type echo-request -j ACCEPT
|
|
iptables -A OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT
|
|
echo "0" > /proc/sys/net/ipv4/icmp_echo_ignore_all
|
|
else
|
|
iptables -D INPUT -p icmp --icmp-type echo-request -j ACCEPT
|
|
iptables -D OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT
|
|
echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_all
|
|
fi
|
|
}
|
|
|
|
function logging_on_off {
|
|
logging="no"
|
|
dialog --title $"Logging" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--yesno $"\nDo you want to turn logging on?" 7 60
|
|
sel=$?
|
|
case $sel in
|
|
0) logging="yes";;
|
|
255) return;;
|
|
esac
|
|
|
|
clear
|
|
echo ''
|
|
echo $'This may take a few seconds. Please wait...'
|
|
if [[ $logging == "no" ]]; then
|
|
${PROJECT_NAME}-logging off
|
|
else
|
|
${PROJECT_NAME}-logging on
|
|
fi
|
|
}
|
|
|
|
function restore_gpg_key {
|
|
select_user
|
|
if [ ! $SELECTED_USERNAME ]; then
|
|
return
|
|
fi
|
|
restorestr=$"Restore GPG key for user"
|
|
dialog --title "$restorestr $SELECTED_USERNAME" \
|
|
--msgbox $"Plug in your USB keydrive" 6 40
|
|
clear
|
|
${PROJECT_NAME}-recoverkey -u $SELECTED_USERNAME
|
|
any_key
|
|
}
|
|
|
|
function security_settings {
|
|
${PROJECT_NAME}-sec
|
|
any_key
|
|
}
|
|
|
|
function reset_tripwire {
|
|
if [ ! -f /usr/bin/reset-tripwire ]; then
|
|
return
|
|
fi
|
|
clear
|
|
echo $'Resetting the Tripwire...'
|
|
echo ' '
|
|
echo '
|
|
|
|
' | reset-tripwire
|
|
any_key
|
|
}
|
|
|
|
function format_drive {
|
|
detect_usb_drive
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --title $"Format USB drive $USB_DRIVE" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--defaultno \
|
|
--yesno $"\nPlease confirm that you wish to format drive\n\n ${USB_DRIVE}\n\nAll current data on the drive will be lost, and you will be prompted to give a password used to encrypt the drive.\n\nDANGER: If you screw up here and format the wrong drive it's your own fault!" 16 60
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
|
|
clear
|
|
echo ''
|
|
echo $"Formatting drive $USB_DRIVE. ALL CONTENTS WILL BE LOST."
|
|
echo ''
|
|
${PROJECT_NAME}-format $USB_DRIVE
|
|
any_key
|
|
}
|
|
|
|
function remove_backups {
|
|
detect_usb_drive
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --title $"Remove backups from a USB drive $USB_DRIVE" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--defaultno \
|
|
--yesno $"\nPlease confirm that you wish to remove backups from this drive\n\n ${drive}\n\nYou will not be able to recover them afterwards." 12 60
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
|
|
clear
|
|
${PROJECT_NAME}-backup-local $USB_DRIVE remove
|
|
any_key
|
|
}
|
|
|
|
function shut_down_system {
|
|
dialog --title $"Power off the system" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--defaultno \
|
|
--yesno $"\nPlease confirm that you wish to power off the system.\n\nWARNING: to power on again you will need to have physical access to the hardware." 10 60
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
shutdown now
|
|
}
|
|
|
|
function restart_system {
|
|
dialog --title $"Restart the system" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--defaultno \
|
|
--yesno $"\nPlease confirm that you wish to restart the system.\n\nWARNING: If you are using full disk encryption then you will need physical access to the hardware to type in the password" 10 60
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
reboot
|
|
}
|
|
|
|
function change_system_name {
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --title $"Change the name of this system" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--inputbox $'Enter a new name for this system on your local network\n\nIt will appear as newname.local' 10 60 2>$data
|
|
sel=$?
|
|
case $sel in
|
|
0) NEW_SYSTEM_NAME=$(<$data)
|
|
if [ "$NEW_SYSTEM_NAME" ]; then
|
|
if [ ${#NEW_SYSTEM_NAME} -gt 1 ]; then
|
|
sed -i "s|host-name=.*|host-name=$NEW_SYSTEM_NAME|g" /etc/avahi/avahi-daemon.conf
|
|
systemctl restart avahi-daemon
|
|
if grep -q "host-name=$NEW_SYSTEM_NAME" /etc/avahi/avahi-daemon.conf; then
|
|
dialog --title $"New local network name" \
|
|
--msgbox $"The name of this system on your local network was changed successfully" 6 70
|
|
fi
|
|
fi
|
|
fi
|
|
;;
|
|
esac
|
|
}
|
|
|
|
function set_dynamic_IP {
|
|
revert_to_dynamic=
|
|
dialog --title $"Return to using a dynamic IP address" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--yesno $"\nDo you wish to go back to using a dynamic IP address?" 8 60
|
|
sel=$?
|
|
case $sel in
|
|
0) revert_to_dynamic=1
|
|
;;
|
|
1) return;;
|
|
esac
|
|
|
|
if [ $revert_to_dynamic ]; then
|
|
wifi_original_network_settings
|
|
clear
|
|
echo ''
|
|
echo $'Changing to a dynamic IP address.'
|
|
echo ''
|
|
echo $"System is rebooting. You may need to close this terminal and log in from a new one."
|
|
reboot
|
|
fi
|
|
}
|
|
|
|
function set_static_IP {
|
|
IPv4_address=$(get_ipv4_address)
|
|
IPv4_address_base=$(echo "$IPv4_address" | awk -F '.' '{print $1"."$2"."$3}')
|
|
STATIC_IP="${IPv4_address_base}.60"
|
|
STATIC_GATEWAY="${IPv4_address_base}.1"
|
|
|
|
NEW_STATIC_IP=
|
|
NEW_STATIC_GATEWAY=
|
|
if grep -q 'iface eth0 inet static' /etc/network/interfaces; then
|
|
STATIC_IP=$(cat /etc/network/interfaces | grep "address " | head -n 1 | awk -F ' ' '{print $2}')
|
|
STATIC_GATEWAY=$(cat /etc/network/interfaces | grep "gateway " | head -n 1 | awk -F ' ' '{print $2}')
|
|
fi
|
|
|
|
# get the IP for the box
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --title $"Set a static local IP address" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--inputbox $"In order to forward incoming internet traffic to this system most internet routers need to know a static local IP address to send the data to.\n\n
|
|
Enter a static local IP address for this system.\n\nIt will typically be ${IPv4_address_base}.x\n\nIf you leave this field blank then the system will revert to using a dynamic IP address." 18 60 "$STATIC_IP" 2>$data
|
|
sel=$?
|
|
case $sel in
|
|
0) NEW_STATIC_IP=$(<$data)
|
|
if [[ "$NEW_STATIC_IP" != *"."* ]]; then
|
|
set_dynamic_IP
|
|
return
|
|
fi
|
|
;;
|
|
1) return;;
|
|
esac
|
|
|
|
# get the gateway
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --title $"Set the IP address of your internet router/modem" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--inputbox $"Set the local IP address for your internet router or ADSL modem.\n\nIt will typically be ${IPv4_address_base}.1, ${IPv4_address_base}.254, or similar" 12 60 "$STATIC_GATEWAY" 2>$data
|
|
sel=$?
|
|
case $sel in
|
|
0) NEW_STATIC_GATEWAY=$(<$data)
|
|
if [[ "$NEW_STATIC_GATEWAY" != *"."* ]]; then
|
|
return
|
|
fi
|
|
;;
|
|
1) return;;
|
|
esac
|
|
|
|
if [[ "$NEW_STATIC_GATEWAY" == *"."* && "$NEW_STATIC_IP" == *"."* ]]; then
|
|
ip_addresses_have_changed=
|
|
if ! grep -q "address ${NEW_STATIC_IP}" /etc/network/interfaces; then
|
|
ip_addresses_have_changed=1
|
|
fi
|
|
if ! grep -q "gateway ${NEW_STATIC_GATEWAY}" /etc/network/interfaces; then
|
|
ip_addresses_have_changed=1
|
|
fi
|
|
if [ $ip_addresses_have_changed ]; then
|
|
write_config_param "NETWORK_IS_STATIC" "1"
|
|
write_config_param "LOCAL_NETWORK_STATIC_IP_ADDRESS" "$NEW_STATIC_IP"
|
|
write_config_param "ROUTER_IP_ADDRESS" "$NEW_STATIC_GATEWAY"
|
|
|
|
email_change_relay "$NEW_STATIC_IP"
|
|
|
|
static_wifi_address=
|
|
if [[ $(config_param_exists "WIFI_INTERFACE") == "1" ]]; then
|
|
dialog --title $"Static local IP address" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--yesno $"\nSet a static address for the wifi adapter?\n\nIf you select 'no' then wired ethernet will be used." 10 60
|
|
sel=$?
|
|
case $sel in
|
|
0) static_wifi_address=1
|
|
write_config_param "NETWORK_IS_STATIC" "1"
|
|
;;
|
|
esac
|
|
fi
|
|
|
|
if [ ! $static_wifi_address ]; then
|
|
# wired network
|
|
remove_wifi_startup_script
|
|
echo '# This file describes the network interfaces available on your system' > /etc/network/interfaces
|
|
echo '# and how to activate them. For more information, see interfaces(5).' >> /etc/network/interfaces
|
|
echo '' >> /etc/network/interfaces
|
|
echo '# The loopback network interface' >> /etc/network/interfaces
|
|
echo 'auto lo' >> /etc/network/interfaces
|
|
echo 'iface lo inet loopback' >> /etc/network/interfaces
|
|
echo '' >> /etc/network/interfaces
|
|
echo '# The primary network interface' >> /etc/network/interfaces
|
|
echo 'auto eth0' >> /etc/network/interfaces
|
|
echo 'iface eth0 inet static' >> /etc/network/interfaces
|
|
echo " address ${NEW_STATIC_IP}" >> /etc/network/interfaces
|
|
echo ' netmask 255.255.255.0' >> /etc/network/interfaces
|
|
echo " gateway ${NEW_STATIC_GATEWAY}" >> /etc/network/interfaces
|
|
echo " dns-nameservers 213.73.91.35 85.214.20.141" >> /etc/network/interfaces
|
|
echo '# Example to keep MAC address between reboots' >> /etc/network/interfaces
|
|
echo '#hwaddress ether DE:AD:BE:EF:CA:FE' >> /etc/network/interfaces
|
|
echo '' >> /etc/network/interfaces
|
|
echo '# The secondary network interface' >> /etc/network/interfaces
|
|
echo '#auto eth1' >> /etc/network/interfaces
|
|
echo '#iface eth1 inet dhcp' >> /etc/network/interfaces
|
|
echo '' >> /etc/network/interfaces
|
|
echo '# WiFi Example' >> /etc/network/interfaces
|
|
echo "#auto $WIFI_INTERFACE" >> /etc/network/interfaces
|
|
echo "#iface $WIFI_INTERFACE inet dhcp" >> /etc/network/interfaces
|
|
echo '# wpa-ssid "essid"' >> /etc/network/interfaces
|
|
echo '# wpa-psk "password"' >> /etc/network/interfaces
|
|
echo '' >> /etc/network/interfaces
|
|
echo '# Ethernet/RNDIS gadget (g_ether)' >> /etc/network/interfaces
|
|
echo '# ... or on host side, usbnet and random hwaddr' >> /etc/network/interfaces
|
|
echo '# Note on some boards, usb0 is automaticly setup with an init script' >> /etc/network/interfaces
|
|
echo '#iface usb0 inet static' >> /etc/network/interfaces
|
|
echo '# address 192.168.7.2' >> /etc/network/interfaces
|
|
echo '# netmask 255.255.255.0' >> /etc/network/interfaces
|
|
echo '# network 192.168.7.0' >> /etc/network/interfaces
|
|
echo '# gateway 192.168.7.1' >> /etc/network/interfaces
|
|
else
|
|
# wifi network
|
|
wifi_settings
|
|
fi
|
|
|
|
clear
|
|
echo ''
|
|
echo $'Restarting the network daemon.'
|
|
echo ''
|
|
echo $'If you logged in using the previous IP address then you may need to close this terminal and log in again on the new one.'
|
|
|
|
function_check pihole_change_ipv4
|
|
pihole_change_ipv4 ${NEW_STATIC_IP}
|
|
|
|
dialog --title $"Static local IP address" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--yesno $"\nFor the change to take effect your system will now need to reboot. Do this now?" 8 60
|
|
sel=$?
|
|
case $sel in
|
|
0) reboot;;
|
|
esac
|
|
fi
|
|
fi
|
|
}
|
|
|
|
function wifi_settings {
|
|
if [ -f /etc/hostapd/hostapd.conf ]; then
|
|
return
|
|
fi
|
|
|
|
TEMP_WIFI_NETWORKS_FILE=~/.temp-${PROJECT_NAME}-wifi.cfg
|
|
${PROJECT_NAME}-wifi --networksinteractive $TEMP_WIFI_NETWORKS_FILE
|
|
if [ -f $TEMP_WIFI_NETWORKS_FILE ]; then
|
|
cp $TEMP_WIFI_NETWORKS_FILE $WIFI_NETWORKS_FILE
|
|
rm $TEMP_WIFI_NETWORKS_FILE
|
|
${PROJECT_NAME}-wifi --networks $WIFI_NETWORKS_FILE
|
|
create_wifi_startup_script
|
|
if [[ $(wifi_is_running) == "1" ]]; then
|
|
dialog --title $"Wifi Settings" \
|
|
--msgbox $"Wifi settings were changed." 6 60
|
|
else
|
|
dialog --title $"Wifi Settings" \
|
|
--msgbox $"Wifi settings were changed. You will need to restart the system with ethernet cable removed for the changes to take effect." 7 60
|
|
fi
|
|
else
|
|
remove_wifi_startup_script
|
|
fi
|
|
}
|
|
|
|
function wifi_edit_networks {
|
|
if [ -f /etc/hostapd/hostapd.conf ]; then
|
|
return
|
|
fi
|
|
if [ ! -f $WIFI_NETWORKS_FILE ]; then
|
|
echo $'# Add wifi networks as follows:' > $WIFI_NETWORKS_FILE
|
|
echo '#' >> $WIFI_NETWORKS_FILE
|
|
echo $'# MySSID' >> $WIFI_NETWORKS_FILE
|
|
echo $'# wpa2-psk' >> $WIFI_NETWORKS_FILE
|
|
echo $'# myWifiPassphrase' >> $WIFI_NETWORKS_FILE
|
|
echo '#' >> $WIFI_NETWORKS_FILE
|
|
echo $'# AnotherSSID' >> $WIFI_NETWORKS_FILE
|
|
echo $'# none' >> $WIFI_NETWORKS_FILE
|
|
echo '#' >> $WIFI_NETWORKS_FILE
|
|
fi
|
|
editor $WIFI_NETWORKS_FILE
|
|
${PROJECT_NAME}-wifi --networks $WIFI_NETWORKS_FILE
|
|
}
|
|
|
|
function hotspot_settings {
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Hotspot Settings" \
|
|
--form $"" 10 60 4 \
|
|
$"Enabled (yes/no):" 1 1 "$WIFI_HOTSPOT" 1 24 5 5 \
|
|
$"SSID:" 2 1 "$WIFI_SSID" 2 24 256 256 \
|
|
$"Type (wpa2-psk/none):" 3 1 "$WIFI_TYPE" 3 24 10 10 \
|
|
$"Passphrase:" 4 1 "$WIFI_PASSPHRASE" 4 24 256 256 \
|
|
2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
TEMP_WIFI_HOTSPOT=$(cat $data | sed -n 1p)
|
|
TEMP_WIFI_SSID=$(cat $data | sed -n 2p)
|
|
TEMP_WIFI_TYPE=$(cat $data | sed -n 3p)
|
|
TEMP_WIFI_PASSPHRASE=$(cat $data | sed -n 4p)
|
|
|
|
if [ ${#TEMP_WIFI_SSID} -lt 2 ]; then
|
|
return
|
|
fi
|
|
if [ ${#TEMP_WIFI_TYPE} -lt 2 ]; then
|
|
return
|
|
fi
|
|
|
|
WIFI_EXTRA=''
|
|
if [[ $TEMP_WIFI_HOTSPOT == $'yes' || $TEMP_WIFI_HOTSPOT == $'y' || $TEMP_WIFI_HOTSPOT == $'on' ]]; then
|
|
TEMP_WIFI_HOTSPOT='yes'
|
|
else
|
|
TEMP_WIFI_HOTSPOT='no'
|
|
if [ -f $WIFI_NETWORKS_FILE ]; then
|
|
WIFI_EXTRA='--networks $WIFI_NETWORKS_FILE'
|
|
fi
|
|
fi
|
|
|
|
if [[ $TEMP_WIFI_TYPE != $'none' ]]; then
|
|
if [ ! $TEMP_WIFI_PASSPHRASE ]; then
|
|
dialog --title $"Wifi Settings" \
|
|
--msgbox $"No wifi hotspot passphrase was given" 6 40
|
|
return
|
|
fi
|
|
if [ ${#TEMP_WIFI_PASSPHRASE} -lt 2 ]; then
|
|
dialog --title $"Wifi Settings" \
|
|
--msgbox $"Wifi hotspot passphrase was too short" 6 40
|
|
return
|
|
fi
|
|
|
|
WIFI_HOTSPOT=$TEMP_WIFI_HOTSPOT
|
|
WIFI_SSID=$TEMP_WIFI_SSID
|
|
WIFI_TYPE=$TEMP_WIFI_TYPE
|
|
WIFI_PASSPHRASE=$TEMP_WIFI_PASSPHRASE
|
|
|
|
${PROJECT_NAME}-wifi -i $WIFI_INTERFACE -s $WIFI_SSID -t $WIFI_TYPE -p $WIFI_PASSPHRASE --hotspot $WIFI_HOTSPOT $WIFI_EXTRA
|
|
else
|
|
WIFI_HOTSPOT=$TEMP_WIFI_HOTSPOT
|
|
WIFI_SSID=$TEMP_WIFI_SSID
|
|
WIFI_TYPE=$TEMP_WIFI_TYPE
|
|
WIFI_PASSPHRASE=$TEMP_WIFI_PASSPHRASE
|
|
|
|
${PROJECT_NAME}-wifi -i $WIFI_INTERFACE -s $WIFI_SSID -t $WIFI_TYPE --hotspot $WIFI_HOTSPOT $WIFI_EXTRA
|
|
fi
|
|
|
|
# store any changes
|
|
write_config_param "WIFI_HOTSPOT" "$WIFI_HOTSPOT"
|
|
write_config_param "WIFI_SSID" "$WIFI_SSID"
|
|
write_config_param "WIFI_TYPE" "$WIFI_TYPE"
|
|
write_config_param "WIFI_PASSPHRASE" "$WIFI_PASSPHRASE"
|
|
|
|
dialog --title $"Wifi Settings" \
|
|
--msgbox $"Hotspot settings were changed" 6 40
|
|
}
|
|
|
|
function reinstall_mariadb {
|
|
dialog --title $"Reinstall MariaDB" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--defaultno \
|
|
--yesno $"\nThis should be a LAST RESORT, if the mysql daemon won't start. You will lose ALL databases and will then need to restore them from backup.\n\nAre you sure that you wish to continue?" 12 60
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
|
|
clear
|
|
database_reinstall
|
|
|
|
dialog --title $"Reinstall MariaDB" \
|
|
--msgbox $"MariaDB has been reinstalled" 6 40
|
|
}
|
|
|
|
function show_firewall {
|
|
clear
|
|
echo $"Firewall Settings"
|
|
echo ''
|
|
while read line; do
|
|
firewall_name=$(echo "$line" | awk -F '=' '{print $1}')
|
|
firewall_port=$(echo "$line" | awk -F '=' '{print $2}')
|
|
echo -n -e "$(pad_string ${firewall_name})"
|
|
echo "${firewall_port}"
|
|
done < $FIREWALL_CONFIG
|
|
any_key
|
|
}
|
|
|
|
function email_extra_domains {
|
|
email_hostnames=$(cat /etc/exim4/update-exim4.conf.conf | grep "dc_other_hostnames" | awk -F "'" '{print $2}')
|
|
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --title $"Email Domains" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--inputbox $"Enter the list of email domains to use, separated by semicolons" 8 60 $email_hostnames 2>$data
|
|
sel=$?
|
|
case $sel in
|
|
0)
|
|
emailhostnames=$(<$data)
|
|
if [ ${#emailhostnames} -gt 2 ]; then
|
|
if [[ "$email_hostnames" != "$emailhostnames" ]]; then
|
|
if [[ "$emailhostnames" == *"."* ]]; then
|
|
if [[ "$emailhostnames" != *" "* ]]; then
|
|
sed -i "s|dc_other_hostnames=.*|dc_other_hostnames='$emailhostnames'|g" /etc/exim4/update-exim4.conf.conf
|
|
update-exim4.conf
|
|
dpkg-reconfigure --frontend noninteractive exim4-config
|
|
systemctl restart saslauthd
|
|
dialog --title $"Email Domains" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--msgbox $"Email domains were changed" 6 50
|
|
else
|
|
dialog --title $"Email Domains not set" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--msgbox $"There should be no spaces in the list" 6 50
|
|
fi
|
|
fi
|
|
fi
|
|
fi
|
|
;;
|
|
esac
|
|
}
|
|
|
|
function email_smtp_proxy {
|
|
MUTTRC_FILE=/home/$ADMIN_USER/.muttrc
|
|
if [ ! -f $MUTTRC_FILE ]; then
|
|
return
|
|
fi
|
|
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"SMTP Proxy for $ADMIN_USER" \
|
|
--form $"You may need to proxy outgoing email via your ISP's mail server. If so enter the details below." 14 75 6 \
|
|
$"Enable proxy:" 1 1 "$SMTP_PROXY_ENABLE" 1 24 5 5 \
|
|
$"Protocol (smtp/smtps):" 2 1 "$SMTP_PROXY_PROTOCOL" 2 24 5 5 \
|
|
$"ISP mail server:" 3 1 "$SMTP_PROXY_SERVER" 3 24 40 10000 \
|
|
$"Port:" 4 1 "$SMTP_PROXY_PORT" 4 24 5 5 \
|
|
$"Username:" 5 1 "$SMTP_PROXY_USERNAME" 5 24 40 10000 \
|
|
$"Password:" 6 1 "$SMTP_PROXY_PASSWORD" 6 24 40 10000 \
|
|
2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
SMTP_PROXY_ENABLE=$(cat $data | sed -n 1p)
|
|
SMTP_PROXY_PROTOCOL=$(cat $data | sed -n 2p)
|
|
SMTP_PROXY_SERVER=$(cat $data | sed -n 3p)
|
|
SMTP_PROXY_PORT=$(cat $data | sed -n 4p)
|
|
SMTP_PROXY_USERNAME=$(cat $data | sed -n 5p)
|
|
SMTP_PROXY_PASSWORD=$(cat $data | sed -n 6p)
|
|
|
|
# change muttrc
|
|
if [ $SMTP_PROXY_ENABLE != $'no' ]; then
|
|
if ! grep "set smtp_url" $MUTTRC_FILE; then
|
|
echo "set smtp_url=\"${SMTP_PROXY_PROTOCOL}://${SMTP_PROXY_USERNAME}:${SMTP_PROXY_PASSWORD}@${SMTP_PROXY_SERVER}:${SMTP_PROXY_PORT}/\"" >> $MUTTRC_FILE
|
|
else
|
|
sed -i "s|set smtp_url=.*|set smtp_url=\"${SMTP_PROXY_PROTOCOL}://${SMTP_PROXY_USERNAME}:${SMTP_PROXY_PASSWORD}@${SMTP_PROXY_SERVER}:${SMTP_PROXY_PORT}/\"|g" $MUTTRC_FILE
|
|
fi
|
|
sed -i 's|#set smtp_url|set smtp_url|g' $MUTTRC_FILE
|
|
else
|
|
if grep "set smtp_url" $MUTTRC_FILE; then
|
|
sed -i 's|set smtp_url|#set smtp_url|g' $MUTTRC_FILE
|
|
fi
|
|
fi
|
|
|
|
# save settings within the main configuration file
|
|
write_config_param "SMTP_PROXY_ENABLE" "$SMTP_PROXY_ENABLE"
|
|
write_config_param "SMTP_PROXY_PROTOCOL" "$SMTP_PROXY_PROTOCOL"
|
|
write_config_param "SMTP_PROXY_SERVER" "$SMTP_PROXY_SERVER"
|
|
write_config_param "SMTP_PROXY_PORT" "$SMTP_PROXY_PORT"
|
|
write_config_param "SMTP_PROXY_USERNAME" "$SMTP_PROXY_USERNAME"
|
|
write_config_param "SMTP_PROXY_PASSWORD" "$SMTP_PROXY_PASSWORD"
|
|
}
|
|
|
|
function menu_backup_restore {
|
|
while true
|
|
do
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Backup and Restore" \
|
|
--radiolist $"Choose an operation:" 19 70 12 \
|
|
1 $"Backup data to USB drive" off \
|
|
2 $"Restore GPG key from USB keydrive" off \
|
|
3 $"Restore data from USB drive" off \
|
|
4 $"Reinstall mariadb" off \
|
|
5 $"Configure remote backups" off \
|
|
6 $"Restore from remote backup" off \
|
|
7 $"Backup GPG key to USB (master keydrive)" off \
|
|
8 $"Backup GPG key to USB (fragment keydrive)" off \
|
|
9 $"Format a USB drive (LUKS encrypted)" off \
|
|
10 $"Remove backups from a USB drive" off \
|
|
11 $"Back to main menu" on 2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) break;;
|
|
255) break;;
|
|
esac
|
|
case $(cat $data) in
|
|
1) backup_data;;
|
|
2) restore_gpg_key;;
|
|
3) restore_data;;
|
|
4) reinstall_mariadb;;
|
|
5) configure_remote_backups;;
|
|
6) restore_data_remote;;
|
|
7) create_keydrive_master;;
|
|
8) create_keydrive_fragment;;
|
|
9) format_drive;;
|
|
10) remove_backups;;
|
|
11) break;;
|
|
esac
|
|
done
|
|
}
|
|
|
|
function menu_email {
|
|
while true
|
|
do
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Email Menu" \
|
|
--radiolist $"Choose an operation:" 15 70 8 \
|
|
1 $"Add a user to a mailing list" off \
|
|
2 $"Remove a user from a mailing list" off \
|
|
3 $"Add an email rule" off \
|
|
4 $"Block/Unblock an email address" off \
|
|
5 $"Block/Unblock email with subject text" off \
|
|
6 $"Outgoing Email Proxy" off \
|
|
7 $"Extra email domains" off \
|
|
8 $"Back to main menu" on 2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) break;;
|
|
255) break;;
|
|
esac
|
|
case $(cat $data) in
|
|
1) add_to_mailing_list;;
|
|
2) remove_user_from_mailing_list;;
|
|
3) email_rule;;
|
|
4) block_unblock_email;;
|
|
5) block_unblock_subject;;
|
|
6) email_smtp_proxy;;
|
|
7) email_extra_domains;;
|
|
8) break;;
|
|
esac
|
|
done
|
|
}
|
|
|
|
function menu_users {
|
|
while true
|
|
do
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Manage Users" \
|
|
--radiolist $"Choose an operation:" 12 70 5 \
|
|
1 $"Add a user" off \
|
|
2 $"Delete a user" off \
|
|
3 $"Change user password" off \
|
|
4 $"Change user ssh public key" off \
|
|
5 $"Back to main menu" on 2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) break;;
|
|
255) break;;
|
|
esac
|
|
case $(cat $data) in
|
|
1) add_user;;
|
|
2) delete_user;;
|
|
3) change_password;;
|
|
4) change_ssh_public_key;;
|
|
5) break;;
|
|
esac
|
|
done
|
|
}
|
|
|
|
function wifi_enable {
|
|
disable_wifi='yes'
|
|
dialog --title $"Enable Wifi" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--defaultno \
|
|
--yesno $"\nDo you wish to enable wifi?" 10 50
|
|
sel=$?
|
|
case $sel in
|
|
0) disable_wifi='no';;
|
|
1) disable_wifi='yes';;
|
|
255) return;;
|
|
esac
|
|
${PROJECT_NAME}-wifi --disable $disable_wifi
|
|
}
|
|
|
|
function menu_wifi {
|
|
while true
|
|
do
|
|
status_str=$'Wifi OFF'
|
|
if [ -f /etc/hostapd/hostapd.conf ]; then
|
|
status_str=$'Hotspot ON'
|
|
else
|
|
if grep -q "# wifi enabled" /etc/network/interfaces; then
|
|
status_str=$'Wifi ON'
|
|
fi
|
|
fi
|
|
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Wifi Menu" \
|
|
--radiolist $"${status_str}\n\nChoose an operation:" 14 70 6 \
|
|
1 $"Enable or disable Wifi" off \
|
|
2 $"Configure wifi networks" off \
|
|
3 $"Manually edit wifi networks file" off \
|
|
4 $"Hotspot settings" off \
|
|
5 $"Exit" on 2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) break;;
|
|
255) break;;
|
|
esac
|
|
case $(cat $data) in
|
|
1) wifi_enable;;
|
|
2) wifi_settings;;
|
|
3) wifi_edit_networks;;
|
|
4) hotspot_settings;;
|
|
5) break;;
|
|
esac
|
|
done
|
|
}
|
|
|
|
function menu_app_settings {
|
|
detect_installable_apps
|
|
|
|
applist=""
|
|
appnames=()
|
|
n=1
|
|
app_index=0
|
|
for a in "${APPS_AVAILABLE[@]}"
|
|
do
|
|
if [[ ${APPS_INSTALLED[$app_index]} != "0" ]]; then
|
|
if [[ $(function_exists configure_interactive_${a}) == "1" ]]; then
|
|
applist="$applist $n $a off"
|
|
n=$[n+1]
|
|
appnames+=("$a")
|
|
fi
|
|
fi
|
|
app_index=$[app_index+1]
|
|
done
|
|
if [ $n -le 1 ]; then
|
|
return
|
|
fi
|
|
backstr=$'Exit'
|
|
applist="$applist $n $backstr on"
|
|
appnames+=("Exit")
|
|
|
|
choice=$(dialog --stdout --backtitle $"Freedombone" \
|
|
--title $"Change Settings for an App" \
|
|
--radiolist $'Choose:' \
|
|
16 40 20 $applist)
|
|
|
|
if [ $? -eq 0 ]; then
|
|
app_index=$[choice-1]
|
|
chosen_app=${appnames[$app_index]}
|
|
if [[ $chosen_app != "Exit" ]]; then
|
|
configure_interactive_${chosen_app}
|
|
fi
|
|
fi
|
|
}
|
|
|
|
function menu_top_level {
|
|
while true
|
|
do
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Control Panel" \
|
|
--radiolist $"Choose an operation:" 27 70 20 \
|
|
1 $"About this system" off \
|
|
2 $"Backup and Restore" off \
|
|
3 $"Show Firewall" off \
|
|
4 $"Reset Tripwire" off \
|
|
5 $"App Settings" off \
|
|
6 $"Add/Remove Apps" off \
|
|
7 $"Logging on/off" off \
|
|
8 $"Ping enable/disable" off \
|
|
9 $"Manage Users" off \
|
|
10 $"Email Menu" off \
|
|
11 $"Security Settings" off \
|
|
12 $"Set the main repository (repo mirrors)" off \
|
|
13 $"Change the name of this system" off \
|
|
14 $"Set a static local IP address" off \
|
|
15 $"Wifi menu" off \
|
|
16 $"Check for updates" off \
|
|
17 $"Power off the system" off \
|
|
18 $"Restart the system" off \
|
|
19 $"Exit" on 2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) exit 1;;
|
|
255) exit 1;;
|
|
esac
|
|
case $(cat $data) in
|
|
1) show_about;;
|
|
2) menu_backup_restore;;
|
|
3) show_firewall;;
|
|
4) reset_tripwire;;
|
|
5) menu_app_settings;;
|
|
6) ${PROJECT_NAME}-addremove;;
|
|
7) logging_on_off;;
|
|
8) ping_enable_disable;;
|
|
9) menu_users;;
|
|
10) menu_email;;
|
|
11) security_settings;;
|
|
12) set_main_repo;;
|
|
13) change_system_name;;
|
|
14) set_static_IP;;
|
|
15) menu_wifi;;
|
|
16) check_for_updates;;
|
|
17) shut_down_system;;
|
|
18) restart_system;;
|
|
19) break;;
|
|
esac
|
|
done
|
|
}
|
|
|
|
if [[ $USER != 'root' ]]; then
|
|
# show the user version of the control panel
|
|
${PROJECT_NAME}-controlpanel-user
|
|
exit 0
|
|
fi
|
|
|
|
if [ ! -f $COMPLETION_FILE ]; then
|
|
echo $'This command should only be run on an installed Freedombone system'
|
|
exit 1
|
|
fi
|
|
|
|
ADMIN_USER=$(get_completion_param "Admin user")
|
|
read_repo_servers
|
|
menu_top_level
|
|
clear
|
|
cat /etc/motd
|
|
exit 0
|