842 lines
28 KiB
Bash
Executable File
842 lines
28 KiB
Bash
Executable File
#!/bin/bash
|
|
# _____ _ _
|
|
# | __|___ ___ ___ _| |___ _____| |_ ___ ___ ___
|
|
# | __| _| -_| -_| . | . | | . | . | | -_|
|
|
# |__| |_| |___|___|___|___|_|_|_|___|___|_|_|___|
|
|
#
|
|
# Freedom in the Cloud
|
|
#
|
|
# matrix server
|
|
#
|
|
# Test by visiting https://$MATRIX_DOMAIN_NAME/_matrix/key/v2/server/auto
|
|
#
|
|
# If working then telnet $MATRIX_DOMAIN_NAME 8448 should return a response
|
|
#
|
|
# License
|
|
# =======
|
|
#
|
|
# Copyright (C) 2016-2018 Bob Mottram <bob@freedombone.net>
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU Affero General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU Affero General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU Affero General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
# Login username is @username:domain
|
|
|
|
VARIANTS='full full-vim chat'
|
|
|
|
IN_DEFAULT_INSTALL=0
|
|
SHOW_ON_ABOUT=1
|
|
NOT_ON_ONION=1
|
|
MINIMUM_RAM_MB=1500
|
|
|
|
MATRIX_DOMAIN_NAME=
|
|
MATRIX_CODE=
|
|
|
|
MATRIX_DATA_DIR='/var/lib/matrix'
|
|
MATRIX_HTTP_PORT=8448
|
|
MATRIX_PORT=8009
|
|
MATRIX_FEDERATION_ONION_PORT=8111
|
|
MATRIX_ONION_PORT=8109
|
|
MATRIX_REPO="https://github.com/matrix-org/synapse"
|
|
MATRIX_COMMIT='9e8ab0a4f44a3ec9e4b049f5571c14e333e8f0fa'
|
|
REPORT_STATS="no"
|
|
MATRIX_SECRET=
|
|
MATRIX_EXPIRE_MONTHS=1
|
|
|
|
MATRIX_SHORT_DESCRIPTION=$'Matrix chat'
|
|
MATRIX_DESCRIPTION=$'Matrix chat'
|
|
MATRIX_MOBILE_APP_URL='https://f-droid.org/packages/im.vector.alpha'
|
|
|
|
matrix_variables=(ONION_ONLY
|
|
MY_USERNAME
|
|
MATRIX_SECRET
|
|
DEFAULT_DOMAIN_NAME
|
|
MATRIX_DOMAIN_NAME
|
|
MATRIX_EXPIRE_MONTHS
|
|
MATRIX_CODE)
|
|
|
|
function matrix_expire_old_posts {
|
|
read_config_param MY_USERNAME
|
|
read_config_param MATRIX_DOMAIN_NAME
|
|
read_config_param MATRIX_EXPIRE_MONTHS
|
|
read_config_param MATRIX_PORT
|
|
|
|
matrix_remove_posts=/usr/bin/matrix-remove
|
|
{ echo '#!/bin/bash';
|
|
echo "cd $MATRIX_DATA_DIR";
|
|
echo "ROOM=\$1";
|
|
echo "ADMIN=\"@${MY_USERNAME}:$MATRIX_DOMAIN_NAME\"";
|
|
echo "TIME='$MATRIX_EXPIRE_MONTHS months ago'";
|
|
echo "UNIX_TIMESTAMP=\$(date +%s%3N --date='TZ=\"UTC+0\" '\"\$TIME\")";
|
|
echo 'BUSY="pragma busy_timeout=20000"';
|
|
echo "BUFFER=\$(sqlite3 homeserver.db \"\$BUSY;select event_id from events where type='m.room.message' and received_ts<'\$UNIX_TIMESTAMP' and room_id='\$ROOM' order by received_ts desc limit 1;\")";
|
|
echo "EVENT_ID=\$(echo \$BUFFER|awk '{print \$2}')";
|
|
|
|
echo "BUFFER=\$(sqlite3 homeserver.db \"\$BUSY;select token from access_tokens where user_id like '\$ADMIN' order by id desc limit 1;\")";
|
|
echo "TOKEN=\$(echo \$BUFFER|awk '{print \$2}')";
|
|
|
|
echo 'set -x';
|
|
echo "curl -v -X POST 'https://$MATRIX_DOMAIN_NAME/_matrix/client/r0/admin/purge_history/'\$ROOM'/'\$EVENT_ID'?access_token='\$TOKEN"; } > $matrix_remove_posts
|
|
|
|
chmod +x $matrix_remove_posts
|
|
}
|
|
|
|
function logging_on_matrix {
|
|
if [ -f /var/lib/matrix/homeserver.yaml ]; then
|
|
if ! grep -q "log_file: /etc/matrix/homeserver.log" /var/lib/matrix/homeserver.yaml; then
|
|
sed -i 's|log_file:.*|log_file: /etc/matrix/homeserver.log|g' /var/lib/matrix/homeserver.yaml
|
|
fi
|
|
if ! grep -q "#log_config:" /var/lib/matrix/homeserver.yaml; then
|
|
sed -i 's|log_config:|#log_config:|g' /var/lib/matrix/homeserver.yaml
|
|
fi
|
|
fi
|
|
}
|
|
|
|
function logging_off_matrix {
|
|
if [ -f /var/lib/matrix/homeserver.yaml ]; then
|
|
if ! grep -q "log_file: /dev/null" /var/lib/matrix/homeserver.yaml; then
|
|
sed -i 's|log_file:.*|log_file: /dev/null|g' /var/lib/matrix/homeserver.yaml
|
|
fi
|
|
if ! grep -q "#log_config:" /var/lib/matrix/homeserver.yaml; then
|
|
sed -i 's|log_config:|#log_config:|g' /var/lib/matrix/homeserver.yaml
|
|
fi
|
|
if [ -f /etc/matrix/homeserver.log ]; then
|
|
$REMOVE_FILES_COMMAND /etc/matrix/homeserver.log
|
|
fi
|
|
if [ -f /etc/matrix/homeserver.log.1 ]; then
|
|
$REMOVE_FILES_COMMAND /etc/matrix/homeserver.log.1
|
|
fi
|
|
if [ -f /etc/matrix/homeserver.log.2 ]; then
|
|
$REMOVE_FILES_COMMAND /etc/matrix/homeserver.log.2
|
|
fi
|
|
if [ -f /etc/matrix/homeserver.log.3 ]; then
|
|
$REMOVE_FILES_COMMAND /etc/matrix/homeserver.log.3
|
|
fi
|
|
fi
|
|
}
|
|
|
|
function matrix_nginx {
|
|
matrix_nginx_site=/etc/nginx/sites-available/$MATRIX_DOMAIN_NAME
|
|
if [[ $ONION_ONLY == "no" ]]; then
|
|
{ echo 'server {';
|
|
echo " listen 443;";
|
|
echo " server_name ${MATRIX_DOMAIN_NAME};";
|
|
echo '';
|
|
echo ' # Security'; } > $matrix_nginx_site
|
|
function_check nginx_ssl
|
|
nginx_ssl ${MATRIX_DOMAIN_NAME}
|
|
|
|
function_check nginx_security_options
|
|
nginx_security_options ${MATRIX_DOMAIN_NAME}
|
|
|
|
{ echo ' add_header Strict-Transport-Security max-age=15768000;';
|
|
echo '';
|
|
echo ' # Logs';
|
|
echo ' access_log /dev/null;';
|
|
echo ' error_log /dev/null;';
|
|
echo '';
|
|
echo ' root /var/lib/matrix/media_store;';
|
|
echo '';
|
|
echo ' # Index';
|
|
echo ' index index.html;';
|
|
echo '';
|
|
echo ' location /_matrix {'; } >> $matrix_nginx_site
|
|
function_check nginx_limits
|
|
nginx_limits ${MATRIX_DOMAIN_NAME} '15m'
|
|
{ echo " proxy_pass http://localhost:${MATRIX_PORT};";
|
|
echo ' }';
|
|
echo '}';
|
|
echo '';
|
|
echo 'server {';
|
|
echo " listen ${MATRIX_HTTP_PORT};";
|
|
echo " server_name ${MATRIX_DOMAIN_NAME};";
|
|
echo '';
|
|
echo ' # Security'; } >> $matrix_nginx_site
|
|
function_check nginx_ssl
|
|
nginx_ssl ${MATRIX_DOMAIN_NAME}
|
|
|
|
function_check nginx_security_options
|
|
nginx_security_options ${MATRIX_DOMAIN_NAME}
|
|
|
|
{ echo ' add_header Strict-Transport-Security max-age=15768000;';
|
|
echo '';
|
|
echo ' # Logs';
|
|
echo ' access_log /dev/null;';
|
|
echo ' error_log /dev/null;';
|
|
echo '';
|
|
echo ' root /var/lib/matrix/media_store;';
|
|
echo '';
|
|
echo ' # Index';
|
|
echo ' index index.html;';
|
|
echo '';
|
|
echo ' # Location';
|
|
echo ' location /_matrix {'; } >> $matrix_nginx_site
|
|
function_check nginx_limits
|
|
nginx_limits ${MATRIX_DOMAIN_NAME} '15m'
|
|
{ echo " proxy_pass http://localhost:${MATRIX_PORT};";
|
|
echo ' }';
|
|
echo '}';
|
|
echo ''; } >> $matrix_nginx_site
|
|
else
|
|
echo -n '' > $matrix_nginx_site
|
|
fi
|
|
{ echo 'server {';
|
|
echo " listen 127.0.0.1:$MATRIX_FEDERATION_ONION_PORT default_server;";
|
|
echo " server_name $MATRIX_DOMAIN_NAME;";
|
|
echo ''; } >> $matrix_nginx_site
|
|
function_check nginx_security_options
|
|
nginx_security_options $MATRIX_DOMAIN_NAME
|
|
{ echo '';
|
|
echo ' # Logs';
|
|
echo ' access_log /dev/null;';
|
|
echo ' error_log /dev/null;';
|
|
echo '';
|
|
echo ' root /var/lib/matrix/media_store;';
|
|
echo '';
|
|
echo ' # Location';
|
|
echo ' location /_matrix {'; } >> $matrix_nginx_site
|
|
function_check nginx_limits
|
|
nginx_limits ${MATRIX_DOMAIN_NAME} '15m'
|
|
{ echo " proxy_pass http://localhost:${MATRIX_PORT};";
|
|
echo ' }';
|
|
echo '}';
|
|
echo '';
|
|
echo 'server {';
|
|
echo " listen 127.0.0.1:$MATRIX_ONION_PORT default_server;";
|
|
echo " server_name $MATRIX_DOMAIN_NAME;";
|
|
echo ''; } >> $matrix_nginx_site
|
|
function_check nginx_security_options
|
|
nginx_security_options $MATRIX_DOMAIN_NAME
|
|
{ echo '';
|
|
echo ' # Logs';
|
|
echo ' access_log /dev/null;';
|
|
echo ' error_log /dev/null;';
|
|
echo '';
|
|
echo ' root /var/lib/matrix/media_store;';
|
|
echo '';
|
|
echo ' # Location';
|
|
echo ' location /_matrix {'; } >> $matrix_nginx_site
|
|
function_check nginx_limits
|
|
nginx_limits ${MATRIX_DOMAIN_NAME} '15m'
|
|
{ echo " proxy_pass http://localhost:${MATRIX_PORT};";
|
|
echo ' }';
|
|
echo '}'; } >> $matrix_nginx_site
|
|
|
|
if [ ! -d /var/www/$MATRIX_DOMAIN_NAME ]; then
|
|
mkdir -p /var/www/$MATRIX_DOMAIN_NAME/htdocs
|
|
fi
|
|
|
|
function_check add_ddns_domain
|
|
add_ddns_domain $MATRIX_DOMAIN_NAME
|
|
}
|
|
|
|
function matrix_generate_homeserver_file {
|
|
local filepath="${1}"
|
|
|
|
cd /etc/matrix || exit 468246824
|
|
python -m synapse.app.homeserver \
|
|
--config-path "${filepath}" \
|
|
--generate-config \
|
|
--report-stats ${REPORT_STATS} \
|
|
--server-name ${MATRIX_DOMAIN_NAME}
|
|
}
|
|
|
|
function matrix_configure_homeserver_yaml {
|
|
turnkey="${1}"
|
|
filepath="${2}"
|
|
|
|
ymltemp="$(mktemp)"
|
|
|
|
awk -v TURNURIES="turn_uris: [\"turn:${MATRIX_DOMAIN_NAME}:${TURN_HTTP_PORT}?transport=udp\", \"turn:${DEFAULT_DOMAIN_NAME}:${TURN_HTTP_PORT}?transport=tcp\"]" \
|
|
-v TURNSHAREDSECRET="turn_shared_secret: \"${turnkey}\"" \
|
|
-v PIDFILE="pid_file: ${MATRIX_DATA_DIR}/homeserver.pid" \
|
|
-v DATABASE="database: \"${MATRIX_DATA_DIR}/homeserver.db\"" \
|
|
-v LOGFILE="log_file: \"/dev/null\"" \
|
|
-v MEDIASTORE="media_store_path: \"${MATRIX_DATA_DIR}/media_store\"" \
|
|
'{
|
|
sub(/turn_shared_secret: "YOUR_SHARED_SECRET"/, TURNSHAREDSECRET);
|
|
sub(/turn_uris: \[\]/, TURNURIES);
|
|
sub(/pid_file: \/homeserver.pid/, PIDFILE);
|
|
sub(/database: "\/homeserver.db"/, DATABASE);
|
|
sub(/log_file: "\/homeserver.log"/, LOGFILE);
|
|
sub(/media_store_path: "\/media_store"/, MEDIASTORE);
|
|
print;
|
|
}' "${filepath}" > "${ymltemp}"
|
|
|
|
# shellcheck disable=SC2086
|
|
mv ${ymltemp} ${filepath}
|
|
|
|
if [[ $ONION_ONLY == "no" ]]; then
|
|
sed -i "s|tls_certificate_path:.*|tls_certificate_path: \"/etc/ssl/certs/${MATRIX_DOMAIN_NAME}.pem\"|g" "${filepath}"
|
|
if ! grep -q '#tls_private_key_path' "${filepath}"; then
|
|
sed -i 's|tls_private_key_path|#tls_private_key_path|g' "${filepath}"
|
|
fi
|
|
sed -i "s|tls_dh_params_path:.*|tls_dh_params_path: \"/etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam\"|g" "${filepath}"
|
|
fi
|
|
sed -i "s|${MATRIX_HTTP_PORT}|8449|g" "${filepath}"
|
|
sed -i "s|8008|${MATRIX_PORT}|g" "${filepath}"
|
|
sed -i 's|tls:.*|tls: False|g' "${filepath}"
|
|
sed -i 's|no_tls: .*|no_tls: True|g' "${filepath}"
|
|
sed -i ':a;N;$!ba;s/ tls: [^\n]*/ tls: False/2' "${filepath}"
|
|
sed -i 's|enable_registration_captcha.*|enable_registration_captcha: False|g' "${filepath}"
|
|
sed -i "s|database: \".*|database: \"${MATRIX_DATA_DIR}/homeserver.db\"|g" "${filepath}"
|
|
sed -i "s|media_store_path:.*|media_store_path: \"${MATRIX_DATA_DIR}/media_store\"|g" "${filepath}"
|
|
sed -i "s|pid_file:.*|pid_file: \"${MATRIX_DATA_DIR}/homeserver.pid\"|g" "${filepath}"
|
|
sed -i "s|log_file:.*|log_file: \"/dev/null\"|g" "${filepath}"
|
|
sed -i "s|log_config:|#log_config:|g" "${filepath}"
|
|
sed -i 's|bind_address:.*|bind_address: 127.0.0.1|g' "${filepath}"
|
|
sed -i "s|bind_addresses:.*|bind_addresses: ['127.0.0.1']|g" "${filepath}"
|
|
sed -i 's|x_forwarded:.*|x_forwarded: false|g' "${filepath}"
|
|
sed -i "s|server_name:.*|server_name: \"${MATRIX_DOMAIN_NAME}\"|g" "${filepath}"
|
|
sed -i "/trusted_third_party_id_servers:/a - ${MATRIX_DOMAIN_NAME}" "${filepath}"
|
|
sed -i "s|- ${MATRIX_DOMAIN_NAME}| - ${MATRIX_DOMAIN_NAME}|g" "${filepath}"
|
|
sed -i "s|enable_registration:.*|enable_registration: False|g" "${filepath}"
|
|
}
|
|
|
|
function matrix_diff {
|
|
DIFFPARAMS="${DIFFPARAMS:-Naur}"
|
|
MATRIX_DOMAIN_NAME="${MATRIX_DOMAIN_NAME:-demo_server_name}"
|
|
REPORT_STATS="${REPORT_STATS:-no_or_yes}"
|
|
export MATRIX_DOMAIN_NAME REPORT_STATS
|
|
|
|
matrix_generate_synapse_file "$INSTALL_DIR/homeserver.synapse.yaml"
|
|
# shellcheck disable=SC2086
|
|
diff -${DIFFPARAMS} "$INSTALL_DIR/homeserver.synapse.yaml" "${MATRIX_DATA_DIR}/homeserver.yaml"
|
|
rm "$INSTALL_DIR/homeserver.synapse.yaml"
|
|
}
|
|
|
|
function matrix_generate {
|
|
breakup="0"
|
|
[[ -z "${MATRIX_DOMAIN_NAME}" ]] && echo "STOP! environment variable MATRIX_DOMAIN_NAME must be set" && breakup="1"
|
|
[[ -z "${REPORT_STATS}" ]] && echo "STOP! environment variable REPORT_STATS must be set to 'no' or 'yes'" && breakup="1"
|
|
[[ "${breakup}" == "1" ]] && exit 1
|
|
|
|
[[ "${REPORT_STATS}" != "yes" ]] && [[ "${REPORT_STATS}" != "no" ]] && \
|
|
echo "STOP! REPORT_STATS needs to be 'no' or 'yes'" && breakup="1"
|
|
|
|
homeserver_config=${MATRIX_DATA_DIR}/homeserver.yaml
|
|
if [ -f $homeserver_config ]; then
|
|
rm $homeserver_config
|
|
fi
|
|
matrix_generate_homeserver_file $homeserver_config
|
|
matrix_configure_homeserver_yaml "${turnkey}" $homeserver_config
|
|
}
|
|
|
|
function create_matrix_user_removal_script {
|
|
read_config_param MY_USERNAME
|
|
read_config_param MATRIX_DOMAIN_NAME
|
|
|
|
matrix_remove_user=/usr/bin/matrix-remove-user
|
|
{ echo '#!/bin/bash';
|
|
echo "cd $MATRIX_DATA_DIR";
|
|
echo "remove_username=\$1";
|
|
echo "ADMIN=\"@${MY_USERNAME}:$MATRIX_DOMAIN_NAME\"";
|
|
echo 'BUSY="pragma busy_timeout=20000"';
|
|
echo "BUFFER=\$(sqlite3 homeserver.db \"\$BUSY;select token from access_tokens where user_id like '\$ADMIN' order by id desc limit 1;\")";
|
|
echo "TOKEN=\$(echo \$BUFFER|awk '{print \$2}')";
|
|
echo 'set -x';
|
|
echo "curl -X POST 'https://$MATRIX_DOMAIN_NAME/_matrix/client/r0/admin/deactivate/%40\$remove_username%3A$MATRIX_DOMAIN_NAME?access_token=\$TOKEN' --data '{}'"; } > $matrix_remove_user
|
|
|
|
chmod +x $matrix_remove_user
|
|
}
|
|
|
|
function remove_user_matrix {
|
|
remove_username="$1"
|
|
|
|
create_matrix_user_removal_script
|
|
"${PROJECT_NAME}-pass" -u "$remove_username" --rmapp matrix
|
|
$matrix_remove_user "$remove_username"
|
|
}
|
|
|
|
function add_user_matrix {
|
|
new_username="$1"
|
|
new_user_password="$2"
|
|
|
|
read_config_param MY_USERNAME
|
|
read_config_param MATRIX_DOMAIN_NAME
|
|
|
|
"${PROJECT_NAME}-pass" -u "$new_username" -a matrix -p "$new_user_password"
|
|
|
|
if [[ "$new_username" != "$MY_USERNAME" ]]; then
|
|
echo 'no' | register_new_matrix_user -c ${MATRIX_DATA_DIR}/homeserver.yaml -u "${new_username}" -p "${new_user_password}" http://localhost:${MATRIX_PORT}
|
|
else
|
|
echo 'yes' | register_new_matrix_user -c ${MATRIX_DATA_DIR}/homeserver.yaml -u "${new_username}" -p "${new_user_password}" -a http://localhost:${MATRIX_PORT}
|
|
fi
|
|
echo "0"
|
|
}
|
|
|
|
function install_interactive_matrix {
|
|
if [ ! "$ONION_ONLY" ]; then
|
|
ONION_ONLY='no'
|
|
fi
|
|
|
|
if [[ $ONION_ONLY != "no" ]]; then
|
|
MATRIX_DOMAIN_NAME='matrix.local'
|
|
write_config_param "MATRIX_DOMAIN_NAME" "$MATRIX_DOMAIN_NAME"
|
|
else
|
|
function_check interactive_site_details
|
|
interactive_site_details "matrix" "MATRIX_DOMAIN_NAME" "MATRIX_CODE"
|
|
if [ ! $MATRIX_DOMAIN_NAME ]; then
|
|
return
|
|
fi
|
|
read_config_param "MATRIX_DOMAIN_NAME"
|
|
read_config_param "MATRIX_CODE"
|
|
fi
|
|
APP_INSTALLED=1
|
|
}
|
|
|
|
function change_password_matrix {
|
|
#curr_username="$1"
|
|
new_user_password="$2"
|
|
|
|
#${PROJECT_NAME}-pass -u "$curr_username" -a matrix -p "$new_user_password"
|
|
}
|
|
|
|
function reconfigure_matrix {
|
|
echo -n ''
|
|
}
|
|
|
|
function upgrade_matrix {
|
|
if [ ! -d /etc/matrix ]; then
|
|
return
|
|
fi
|
|
|
|
CURR_MATRIX_COMMIT=$(get_completion_param "matrix commit")
|
|
if [[ "$CURR_MATRIX_COMMIT" == "$MATRIX_COMMIT" ]]; then
|
|
return
|
|
fi
|
|
|
|
systemctl stop turn
|
|
systemctl stop matrix
|
|
|
|
function_check set_repo_commit
|
|
set_repo_commit /etc/matrix "matrix commit" "$MATRIX_COMMIT" $MATRIX_REPO
|
|
cd /etc/matrix || exit 62476724
|
|
if [ ! -d /etc/matrix/tmp ]; then
|
|
mkdir /etc/matrix/tmp
|
|
fi
|
|
export TMPDIR=/etc/matrix/tmp
|
|
|
|
pip install --upgrade --process-dependency-links .
|
|
pip install --upgrade --force "pynacl>=1.2.1"
|
|
|
|
sed -i 's/ssl.PROTOCOL_SSLv23/ssl.PROTOCOL_TLSv1/g' /usr/local/bin/register_new_matrix_user
|
|
|
|
chown -R matrix:matrix /etc/matrix
|
|
chown -R matrix:matrix $MATRIX_DATA_DIR
|
|
|
|
pip install --upgrade --force "pynacl>=1.2.1"
|
|
pip install --upgrade --force "canonicaljson>=1.1.3"
|
|
pip install --upgrade --force "phonenumbers>=8.2.0"
|
|
|
|
if [ -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam ]; then
|
|
chmod 755 /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam
|
|
fi
|
|
systemctl start turn
|
|
systemctl start matrix
|
|
|
|
export TMPDIR=/tmp
|
|
if [ -d /etc/matrix/tmp ]; then
|
|
rm -rf /etc/matrix/tmp/*
|
|
fi
|
|
}
|
|
|
|
function backup_local_matrix {
|
|
source_directory=/etc/matrix
|
|
if [ -d $source_directory ]; then
|
|
systemctl stop turn
|
|
systemctl stop matrix
|
|
|
|
function_check backup_directory_to_usb
|
|
backup_directory_to_usb $source_directory matrix
|
|
source_directory=$MATRIX_DATA_DIR
|
|
if [ -d $source_directory ]; then
|
|
backup_directory_to_usb $source_directory matrixdata
|
|
fi
|
|
|
|
systemctl start turn
|
|
systemctl start matrix
|
|
fi
|
|
}
|
|
|
|
function restore_local_matrix {
|
|
if [ -d /etc/matrix ]; then
|
|
systemctl stop turn
|
|
systemctl stop matrix
|
|
|
|
temp_restore_dir=/root/tempmatrix
|
|
function_check restore_directory_from_usb
|
|
restore_directory_from_usb $temp_restore_dir matrix
|
|
if [ -d $temp_restore_dir/etc/matrix ]; then
|
|
cp -r $temp_restore_dir/etc/matrix/* /etc/matrix
|
|
else
|
|
cp -r $temp_restore_dir/* /etc/matrix/
|
|
fi
|
|
# shellcheck disable=SC2181
|
|
if [ ! "$?" = "0" ]; then
|
|
function_check backup_unmount_drive
|
|
backup_unmount_drive
|
|
exit 3783
|
|
fi
|
|
rm -rf $temp_restore_dir
|
|
chown -R matrix:matrix /etc/matrix
|
|
|
|
temp_restore_dir=/root/tempmatrixdata
|
|
restore_directory_from_usb $temp_restore_dir matrixdata
|
|
if [ -d $temp_restore_dir$MATRIX_DATA_DIR ]; then
|
|
cp -r $temp_restore_dir$MATRIX_DATA_DIR/* $MATRIX_DATA_DIR
|
|
else
|
|
cp -r $temp_restore_dir/* $MATRIX_DATA_DIR/
|
|
fi
|
|
# shellcheck disable=SC2181
|
|
if [ ! "$?" = "0" ]; then
|
|
function_check backup_unmount_drive
|
|
backup_unmount_drive
|
|
exit 78352
|
|
fi
|
|
rm -rf $temp_restore_dir
|
|
chown -R matrix:matrix $MATRIX_DATA_DIR
|
|
|
|
if [[ "$ONION_ONLY" == "no" ]]; then
|
|
if [ -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam ]; then
|
|
chmod 755 /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam
|
|
fi
|
|
fi
|
|
|
|
systemctl start turn
|
|
systemctl start matrix
|
|
fi
|
|
}
|
|
|
|
function backup_remote_matrix {
|
|
source_directory=/etc/matrix
|
|
if [ -d $source_directory ]; then
|
|
systemctl stop turn
|
|
systemctl stop matrix
|
|
|
|
function_check backup_directory_to_friend
|
|
backup_directory_to_friend $source_directory matrix
|
|
source_directory=$MATRIX_DATA_DIR
|
|
if [ -d $source_directory ]; then
|
|
backup_directory_to_friend $source_directory matrixdata
|
|
fi
|
|
|
|
systemctl start turn
|
|
systemctl start matrix
|
|
fi
|
|
}
|
|
|
|
function restore_remote_matrix {
|
|
if [ -d /etc/matrix ]; then
|
|
systemctl stop turn
|
|
systemctl stop matrix
|
|
|
|
temp_restore_dir=/root/tempmatrix
|
|
function_check restore_directory_from_friend
|
|
restore_directory_from_friend $temp_restore_dir matrix
|
|
if [ -d $temp_restore_dir/etc/matrix ]; then
|
|
cp -r $temp_restore_dir/etc/matrix/* /etc/matrix
|
|
else
|
|
cp -r $temp_restore_dir/* /etc/matrix/
|
|
fi
|
|
# shellcheck disable=SC2181
|
|
if [ ! "$?" = "0" ]; then
|
|
exit 38935
|
|
fi
|
|
rm -rf $temp_restore_dir
|
|
chown -R matrix:matrix /etc/matrix
|
|
|
|
temp_restore_dir=/root/tempmatrixdata
|
|
restore_directory_from_friend $temp_restore_dir matrixdata
|
|
if [ -d $temp_restore_dir$MATRIX_DATA_DIR ]; then
|
|
cp -r $temp_restore_dir$MATRIX_DATA_DIR/* $MATRIX_DATA_DIR
|
|
else
|
|
cp -r $temp_restore_dir/* $MATRIX_DATA_DIR/
|
|
fi
|
|
# shellcheck disable=SC2181
|
|
if [ ! "$?" = "0" ]; then
|
|
exit 60923
|
|
fi
|
|
rm -rf $temp_restore_dir
|
|
chown -R matrix:matrix $MATRIX_DATA_DIR
|
|
|
|
systemctl start turn
|
|
systemctl start matrix
|
|
fi
|
|
}
|
|
|
|
function remove_matrix {
|
|
firewall_remove ${MATRIX_HTTP_PORT}
|
|
|
|
nginx_dissite $MATRIX_DOMAIN_NAME
|
|
remove_certs $MATRIX_DOMAIN_NAME
|
|
if [ -f /etc/nginx/sites-available/$MATRIX_DOMAIN_NAME ]; then
|
|
rm /etc/nginx/sites-available/$MATRIX_DOMAIN_NAME
|
|
fi
|
|
if [ ! -d /var/www/$MATRIX_DOMAIN_NAME ]; then
|
|
rm -rf /var/www/$MATRIX_DOMAIN_NAME
|
|
fi
|
|
function_check remove_ddns_domain
|
|
remove_ddns_domain $MATRIX_DOMAIN_NAME
|
|
|
|
systemctl stop matrix
|
|
|
|
function_check remove_turn
|
|
remove_turn
|
|
|
|
systemctl disable matrix
|
|
if [ -f /etc/systemd/system/matrix.service ]; then
|
|
rm /etc/systemd/system/matrix.service
|
|
fi
|
|
systemctl daemon-reload
|
|
apt-get -y remove --purge coturn
|
|
cd /etc/matrix || exit 26472462
|
|
pip uninstall .
|
|
rm -rf $MATRIX_DATA_DIR
|
|
rm -rf /etc/matrix
|
|
|
|
groupdel -f matrix
|
|
userdel -r matrix
|
|
|
|
remove_onion_service matrix ${MATRIX_ONION_PORT}
|
|
remove_onion_service matrix ${MATRIX_FEDERATION_ONION_PORT}
|
|
|
|
#sed -i "/# Matrix Server/,/# End of Matrix Server/d" /etc/nginx/sites-available/${MATRIX_DOMAIN_NAME}
|
|
systemctl restart nginx
|
|
|
|
remove_completion_param install_matrix
|
|
sed -i '/matrix/d' "$COMPLETION_FILE"
|
|
|
|
rm /etc/avahi/services/matrix.service
|
|
systemctl restart avahi-daemon
|
|
}
|
|
|
|
function install_home_server {
|
|
if [ ! -d /etc/matrix ]; then
|
|
|
|
if [ -d /repos/matrix ]; then
|
|
mkdir /etc/matrix
|
|
cp -r -p /repos/matrix/. /etc/matrix
|
|
cd /etc/matrix || exit 2324962946
|
|
git pull
|
|
else
|
|
function_check git_clone
|
|
git_clone $MATRIX_REPO /etc/matrix
|
|
fi
|
|
|
|
if [ ! -d /etc/matrix ]; then
|
|
echo $'Unable to clone matrix repo'
|
|
exit 6724683
|
|
fi
|
|
fi
|
|
|
|
cd /etc/matrix || exit 7385452724
|
|
git checkout $MATRIX_COMMIT -b $MATRIX_COMMIT
|
|
set_completion_param "matrix commit" "$MATRIX_COMMIT"
|
|
if [ ! -d "$INSTALL_DIR/matrix" ]; then
|
|
mkdir -p "$INSTALL_DIR/matrix"
|
|
fi
|
|
rm -rf /usr/local/lib/python2.7/dist-packages/ldap*
|
|
if [ -d "$INSTALL_DIR/matrix" ]; then
|
|
rm -rf "$INSTALL_DIR/matrix/"*
|
|
fi
|
|
if ! pip install --upgrade --process-dependency-links . -b "$INSTALL_DIR/matrix"; then
|
|
echo $'Failed to install matrix home server'
|
|
exit 782542
|
|
fi
|
|
|
|
if [ ! -d $MATRIX_DATA_DIR ]; then
|
|
mkdir $MATRIX_DATA_DIR
|
|
fi
|
|
|
|
groupadd matrix
|
|
useradd -c "Matrix system account" -d $MATRIX_DATA_DIR -m -r -g matrix matrix
|
|
usermod -a -G www-data matrix
|
|
usermod -a -G ssl-cert matrix
|
|
|
|
function_check install_turn
|
|
install_turn
|
|
MATRIX_SECRET="${turnkey}"
|
|
|
|
function_check matrix_generate
|
|
matrix_generate
|
|
|
|
# Disable the web client
|
|
sed -i 's|web_client:.*|web_client: False|g' $MATRIX_DATA_DIR/homeserver.yaml
|
|
sed -i 's|, webclient||g' $MATRIX_DATA_DIR/homeserver.yaml
|
|
sed -i "/- '0.0.0.0'/d" $MATRIX_DATA_DIR/homeserver.yaml
|
|
|
|
chmod -R 700 $MATRIX_DATA_DIR/homeserver.yaml
|
|
chown -R matrix:matrix /etc/matrix
|
|
chown -R matrix:matrix $MATRIX_DATA_DIR
|
|
|
|
sed -i 's/ssl.PROTOCOL_SSLv23/ssl.PROTOCOL_TLSv1/g' /usr/local/bin/register_new_matrix_user
|
|
|
|
{ echo '[Unit]';
|
|
echo 'Description=Synapse Matrix homeserver';
|
|
echo 'After=network.target nginx.target';
|
|
echo '';
|
|
echo '[Service]';
|
|
echo 'Type=simple';
|
|
echo 'User=matrix';
|
|
echo "WorkingDirectory=/etc/matrix";
|
|
echo "ExecStart=/usr/bin/python -m synapse.app.homeserver --config-path ${MATRIX_DATA_DIR}/homeserver.yaml";
|
|
echo 'Restart=on-failure';
|
|
echo 'RestartSec=10';
|
|
echo '';
|
|
echo '[Install]';
|
|
echo 'WantedBy=multi-user.target'; } > /etc/systemd/system/matrix.service
|
|
systemctl enable matrix
|
|
systemctl daemon-reload
|
|
systemctl start matrix
|
|
|
|
# wait for the database to be created
|
|
sleep 5
|
|
|
|
if [ ! -f $MATRIX_DATA_DIR/homeserver.db ]; then
|
|
# On low power systems more sleeping may be needed
|
|
sleep 10
|
|
|
|
if [ ! -f $MATRIX_DATA_DIR/homeserver.db ]; then
|
|
echo $'No matrix home server database was created'
|
|
exit 23782
|
|
fi
|
|
fi
|
|
chmod -R 700 $MATRIX_DATA_DIR/homeserver.db
|
|
|
|
cd "$MATRIX_DATA_DIR" || exit 365856835
|
|
sqlite3 homeserver.db "PRAGMA auto_vacuum = FULL;"
|
|
|
|
#MATRIX_ONION_HOSTNAME=$(add_onion_service matrix ${MATRIX_PORT} ${MATRIX_ONION_PORT})
|
|
add_onion_service matrix ${MATRIX_PORT} ${MATRIX_ONION_PORT}
|
|
echo "HiddenServicePort ${MATRIX_HTTP_PORT} 127.0.0.1:${MATRIX_FEDERATION_ONION_PORT}" >> "$ONION_SERVICES_FILE"
|
|
systemctl restart tor
|
|
|
|
if [ ! "${MATRIX_PASSWORD}" ]; then
|
|
if [ -f "${IMAGE_PASSWORD_FILE}" ]; then
|
|
MATRIX_PASSWORD="$(printf "%s" "$(cat "$IMAGE_PASSWORD_FILE")")"
|
|
else
|
|
MATRIX_PASSWORD="$(create_password "${MINIMUM_PASSWORD_LENGTH}")"
|
|
fi
|
|
fi
|
|
|
|
firewall_add matrix ${MATRIX_HTTP_PORT}
|
|
|
|
rm -rf ${MATRIX_DATA_DIR}/Maildir
|
|
rm -rf ${MATRIX_DATA_DIR}/.mutt
|
|
rm -f ${MATRIX_DATA_DIR}/.muttrc
|
|
rm -f ${MATRIX_DATA_DIR}/.mutt-alias
|
|
rm -f ${MATRIX_DATA_DIR}/.procmailrc
|
|
rm -f ${MATRIX_DATA_DIR}/.emacs-mutt
|
|
}
|
|
|
|
function install_matrix {
|
|
if [[ $ONION_ONLY != 'no' ]]; then
|
|
return
|
|
fi
|
|
|
|
check_ram_availability 1500
|
|
|
|
if [ ! -d "$INSTALL_DIR" ]; then
|
|
mkdir -p "$INSTALL_DIR"
|
|
fi
|
|
|
|
if [[ ${ONION_ONLY} == 'no' ]]; then
|
|
if [ ! -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.pem ]; then
|
|
if [ -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.crt ]; then
|
|
rm /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.crt
|
|
fi
|
|
if [ -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam ]; then
|
|
rm /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam
|
|
fi
|
|
echo $'Obtaining certificate for the matrix domain'
|
|
function_check create_site_certificate
|
|
create_site_certificate ${MATRIX_DOMAIN_NAME} 'yes'
|
|
chmod 755 /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.dhparam
|
|
|
|
if [ -f /etc/ssl/certs/${MATRIX_DOMAIN_NAME}.crt ]; then
|
|
echo $'Incorrect certificate generated'
|
|
exit 73572
|
|
fi
|
|
fi
|
|
chgrp -R ssl-cert /etc/letsencrypt
|
|
chmod -R g=rX /etc/letsencrypt
|
|
fi
|
|
|
|
export DEBIAN_FRONTEND=noninteractive
|
|
apt-get -yq install coreutils \
|
|
curl file gcc git libevent-2.0-5 \
|
|
libevent-dev libffi-dev libffi6 \
|
|
libgnutls28-dev libjpeg62-turbo \
|
|
libjpeg62-turbo-dev libldap-2.4-2 \
|
|
libldap2-dev libsasl2-dev \
|
|
libsqlite3-dev libssl-dev \
|
|
libssl1.1 libtool libxml2 \
|
|
libxml2-dev libxslt1-dev libxslt1.1 \
|
|
make python python-dev \
|
|
python-pip python-psycopg2 \
|
|
python-virtualenv sqlite unzip \
|
|
zlib1g zlib1g-dev
|
|
|
|
pip install --upgrade pip
|
|
pip install --upgrade python-ldap
|
|
pip install --upgrade lxml
|
|
pip install --upgrade --force "phonenumbers>=8.2.0"
|
|
|
|
function_check matrix_nginx
|
|
matrix_nginx
|
|
|
|
function_check install_home_server
|
|
install_home_server
|
|
|
|
systemctl restart nginx
|
|
systemctl restart turn
|
|
systemctl restart matrix
|
|
|
|
function_check update_default_domain
|
|
update_default_domain
|
|
|
|
# wait for nginx to start otherwise user add fails later
|
|
sleep 5
|
|
|
|
pip install --upgrade --force "pynacl>=1.2.1"
|
|
pip install --upgrade --force "canonicaljson>=1.1.3"
|
|
|
|
if [[ $(add_user_matrix "${MY_USERNAME}" "${MATRIX_PASSWORD}" | tail -n 1) != "0" ]]; then
|
|
echo $'Failed to add matrix admin user';
|
|
exit 879352
|
|
fi
|
|
create_matrix_user_removal_script
|
|
|
|
set_completion_param "matrix domain" "$MATRIX_DOMAIN_NAME"
|
|
|
|
# Add avahi services
|
|
{ echo '<?xml version="1.0" standalone="no"?><!--*-nxml-*-->';
|
|
echo '<!DOCTYPE service-group SYSTEM "avahi-service.dtd">';
|
|
echo '<service-group>';
|
|
echo ' <name replace-wildcards="yes">%h MATRIX</name>';
|
|
echo ' <service>';
|
|
echo ' <type>_matrix._tcp</type>';
|
|
echo " <port>$MATRIX_HTTP_PORT</port>";
|
|
echo ' </service>';
|
|
echo ' <service>';
|
|
echo ' <type>_matrix._udp</type>';
|
|
echo " <port>$MATRIX_HTTP_PORT</port>";
|
|
echo ' </service>';
|
|
echo '</service-group>'; } > /etc/avahi/services/matrix.service
|
|
|
|
systemctl restart avahi-daemon
|
|
|
|
APP_INSTALLED=1
|
|
}
|