333 lines
11 KiB
Bash
Executable File
333 lines
11 KiB
Bash
Executable File
#!/bin/bash
|
|
# _____ _ _
|
|
# | __|___ ___ ___ _| |___ _____| |_ ___ ___ ___
|
|
# | __| _| -_| -_| . | . | | . | . | | -_|
|
|
# |__| |_| |___|___|___|___|_|_|_|___|___|_|_|___|
|
|
#
|
|
# Freedom in the Cloud
|
|
#
|
|
# DNS functions
|
|
#
|
|
# License
|
|
# =======
|
|
#
|
|
# Copyright (C) 2014-2018 Bob Mottram <bob@freedombone.net>
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU Affero General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU Affero General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU Affero General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
# DNS
|
|
NAMESERVER1='91.239.100.100'
|
|
NAMESERVER2='89.233.43.71'
|
|
NAMESERVER3='87.118.100.175'
|
|
NAMESERVER4='94.75.228.29'
|
|
NAMESERVER5='85.25.251.254'
|
|
NAMESERVER6='2.141.58.13'
|
|
|
|
# parameters used when adding a new domain
|
|
DDNS_PROVIDER="freedns"
|
|
DDNS_USERNAME=
|
|
DDNS_PASSWORD=
|
|
|
|
INADYN_REPO="https://github.com/troglobit/inadyn"
|
|
INADYN_COMMIT='3fe26d2235ddda9047cf33e8ed1453bcc3bbbf19'
|
|
INADYN_CONFIG_FILE=/etc/inadyn.conf
|
|
|
|
# web site used to obtain the external IP address of the system
|
|
GET_IP_ADDRESS_URL="checkip.two-dns.de"
|
|
|
|
# other possible services to obtain the external IP address
|
|
EXTERNAL_IP_SERVICES=( \
|
|
'https://check.torproject.org/' \
|
|
'https://www.whatsmydns.net/whats-my-ip-address.html' \
|
|
'https://www.privateinternetaccess.com/pages/whats-my-ip/' \
|
|
'http://checkip.two-dns.de' \
|
|
'http://ip.dnsexit.com' \
|
|
'http://ifconfig.me/ip' \
|
|
'http://ipecho.net/plain' \
|
|
'http://checkip.dyndns.org/plain' \
|
|
'http://ipogre.com/linux.php' \
|
|
'http://whatismyipaddress.com/' \
|
|
'http://ip.my-proxy.com/' \
|
|
'http://websiteipaddress.com/WhatIsMyIp' \
|
|
'http://getmyipaddress.org/' \
|
|
'http://www.my-ip-address.net/' \
|
|
'http://myexternalip.com/raw' \
|
|
'http://www.canyouseeme.org/' \
|
|
'http://www.trackip.net/' \
|
|
'http://icanhazip.com/' \
|
|
'http://www.iplocation.net/' \
|
|
'http://www.howtofindmyipaddress.com/' \
|
|
'http://www.ipchicken.com/' \
|
|
'http://whatsmyip.net/' \
|
|
'http://www.ip-adress.com/' \
|
|
'http://checkmyip.com/' \
|
|
'http://www.tracemyip.org/' \
|
|
'http://checkmyip.net/' \
|
|
'http://www.lawrencegoetz.com/programs/ipinfo/' \
|
|
'http://www.findmyip.co/' \
|
|
'http://ip-lookup.net/' \
|
|
'http://www.dslreports.com/whois' \
|
|
'http://www.mon-ip.com/en/my-ip/' \
|
|
'http://www.myip.ru' \
|
|
'http://ipgoat.com/' \
|
|
'http://www.myipnumber.com/my-ip-address.asp' \
|
|
'http://www.whatsmyipaddress.net/' \
|
|
'http://formyip.com/' \
|
|
'http://www.displaymyip.com/' \
|
|
'http://www.bobborst.com/tools/whatsmyip/' \
|
|
'http://www.geoiptool.com/' \
|
|
'http://checkip.dyndns.com/' \
|
|
'http://myexternalip.com/' \
|
|
'http://www.ip-adress.eu/' \
|
|
'http://www.infosniper.net/' \
|
|
'http://wtfismyip.com/' \
|
|
'http://ipinfo.io/' \
|
|
'http://httpbin.org/ip')
|
|
|
|
function update_inadyn_config {
|
|
if [ ! -f "${INADYN_CONFIG_FILE}" ]; then
|
|
return
|
|
fi
|
|
|
|
if [[ "$DDNS_PROVIDER" == *'freedns'* ]]; then
|
|
return
|
|
fi
|
|
|
|
if ! grep -q "$DDNS_PROVIDER" "${INADYN_CONFIG_FILE}"; then
|
|
if grep -q "{" "${INADYN_CONFIG_FILE}"; then
|
|
sed -i "s|provider .*|provider $DDNS_PROVIDER {|g" "${INADYN_CONFIG_FILE}"
|
|
sed -i "s|username .*|username = $DDNS_USERNAME|g" "${INADYN_CONFIG_FILE}"
|
|
sed -i "s|password .*|password = $DDNS_PASSWORD|g" "${INADYN_CONFIG_FILE}"
|
|
sed -i "s|checkip-server .*|checkip-server = $GET_IP_ADDRESS_URL|g" "${INADYN_CONFIG_FILE}"
|
|
else
|
|
# Old inadyn config file format
|
|
# store any previous aliases
|
|
grep 'alias ' "${INADYN_CONFIG_FILE}" > /tmp/inadyn_aliases
|
|
|
|
# remove entry for any previous ddns
|
|
sed -i '/system /,$d' "${INADYN_CONFIG_FILE}"
|
|
|
|
# add the new provider
|
|
{ echo '';
|
|
echo "system $DDNS_PROVIDER";
|
|
echo ' ssl';
|
|
echo " checkip-url $GET_IP_ADDRESS_URL /"; } >> "${INADYN_CONFIG_FILE}"
|
|
if [ "$DDNS_USERNAME" ]; then
|
|
echo " username $DDNS_USERNAME" >> "${INADYN_CONFIG_FILE}"
|
|
fi
|
|
if [ "$DDNS_PASSWORD" ]; then
|
|
echo " password $DDNS_PASSWORD" >> "${INADYN_CONFIG_FILE}"
|
|
fi
|
|
|
|
if [ -f /tmp/inadyn_aliases ]; then
|
|
cat /tmp/inadyn_aliases >> "${INADYN_CONFIG_FILE}"
|
|
rm /tmp/inadyn_aliases
|
|
fi
|
|
fi
|
|
else
|
|
if grep -q "{" "${INADYN_CONFIG_FILE}"; then
|
|
sed -i "s|username .*|username = $DDNS_USERNAME|g" "${INADYN_CONFIG_FILE}"
|
|
sed -i "s|password .*|password = $DDNS_PASSWORD|g" "${INADYN_CONFIG_FILE}"
|
|
sed -i "s|checkip-server .*|checkip-server = $GET_IP_ADDRESS_URL|g" "${INADYN_CONFIG_FILE}"
|
|
else
|
|
# Old inadyn config file format
|
|
# change username/password for an existing provider
|
|
if [ "$DDNS_USERNAME" ]; then
|
|
if grep -q " username " "${INADYN_CONFIG_FILE}"; then
|
|
sed -i "s| username .*| username $DDNS_USERNAME|g" "${INADYN_CONFIG_FILE}"
|
|
else
|
|
echo " username $DDNS_USERNAME" >> "${INADYN_CONFIG_FILE}"
|
|
fi
|
|
fi
|
|
if [ "$DDNS_PASSWORD" ]; then
|
|
if grep -q " password " "${INADYN_CONFIG_FILE}"; then
|
|
sed -i "s| password .*| password $DDNS_PASSWORD|g" "${INADYN_CONFIG_FILE}"
|
|
else
|
|
echo " password $DDNS_PASSWORD" >> "${INADYN_CONFIG_FILE}"
|
|
fi
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
systemctl enable inadyn
|
|
systemctl restart inadyn
|
|
}
|
|
|
|
function create_freedns_updater {
|
|
if [[ $ONION_ONLY != "no" ]]; then
|
|
return
|
|
fi
|
|
|
|
# currently inadyn doesn't work as expected with freeDNS, so this is a workaround
|
|
if [[ $(is_completed "${FUNCNAME[0]}") == "1" ]]; then
|
|
return
|
|
fi
|
|
if [[ $DDNS_PROVIDER != *"freedns"* ]]; then
|
|
return
|
|
fi
|
|
if [[ $SYSTEM_TYPE == "mesh"* ]]; then
|
|
return
|
|
fi
|
|
|
|
# remove any legacy command
|
|
if [ -f /usr/bin/dynamicdns ]; then
|
|
rm /usr/bin/dynamicdns
|
|
fi
|
|
if grep -q "dynamicdns" /etc/crontab; then
|
|
sed -i '/dynamicdns/d' /etc/crontab
|
|
fi
|
|
|
|
# add the update command to cron
|
|
if ! grep -q "/usr/local/bin/${PROJECT_NAME}-freedns" /etc/crontab; then
|
|
function_check cron_add_mins
|
|
cron_add_mins 3 "/usr/local/bin/${PROJECT_NAME}-freedns"
|
|
systemctl restart cron
|
|
fi
|
|
|
|
mark_completed "${FUNCNAME[0]}"
|
|
}
|
|
|
|
function add_ddns_domain {
|
|
if [ ! "$1" ]; then
|
|
echo $'ddns domain not specified'
|
|
exit 5638
|
|
fi
|
|
CURRENT_DDNS_DOMAIN="$1"
|
|
if [[ $ONION_ONLY != "no" ]]; then
|
|
return
|
|
fi
|
|
if [ ! "$DDNS_PROVIDER" ]; then
|
|
return
|
|
fi
|
|
if [[ "$DDNS_PROVIDER" == 'none' ]]; then
|
|
return
|
|
fi
|
|
if [ ! -f "${INADYN_CONFIG_FILE}" ]; then
|
|
echo $'Unable to find inadyn configuration file "${INADYN_CONFIG_FILE}"'
|
|
exit 5745
|
|
fi
|
|
if ! grep -q "$DDNS_PROVIDER" "${INADYN_CONFIG_FILE}"; then
|
|
read_config_param DEFAULT_DOMAIN_NAME
|
|
{ echo 'period = 300';
|
|
echo '';
|
|
echo "provider $DDNS_PROVIDER {";
|
|
echo " ssl = true";
|
|
echo " username = $DDNS_USERNAME";
|
|
echo " password = $DDNS_PASSWORD";
|
|
echo " hostname = $DEFAULT_DOMAIN_NAME";
|
|
echo '}'; } > "${INADYN_CONFIG_FILE}"
|
|
fi
|
|
|
|
sed -i "s|hostname .*|hostname = $DEFAULT_DOMAIN_NAME"
|
|
chmod 600 "${INADYN_CONFIG_FILE}"
|
|
|
|
systemctl daemon-reload
|
|
systemctl restart inadyn
|
|
}
|
|
|
|
function remove_ddns_domain {
|
|
if [ ! "$1" ]; then
|
|
echo $'ddns domain not specified'
|
|
exit 5638
|
|
fi
|
|
CURRENT_DDNS_DOMAIN="$1"
|
|
if [[ $ONION_ONLY != "no" ]]; then
|
|
return
|
|
fi
|
|
if [[ "$DDNS_PROVIDER" == 'none' ]]; then
|
|
return
|
|
fi
|
|
if [ ! -f "${INADYN_CONFIG_FILE}" ]; then
|
|
echo $'Unable to find inadyn configuration file "${INADYN_CONFIG_FILE}"'
|
|
exit 5745
|
|
fi
|
|
#if grep -q "$CURRENT_DDNS_DOMAIN" "${INADYN_CONFIG_FILE}"; then
|
|
# systemctl stop inadyn
|
|
# sed -i "s|, ${CURRENT_DDNS_DOMAIN}||g" "${INADYN_CONFIG_FILE}"
|
|
# if grep -q "$CURRENT_DDNS_DOMAIN" "${INADYN_CONFIG_FILE}"; then
|
|
# sed -i "s|${CURRENT_DDNS_DOMAIN}||g" "${INADYN_CONFIG_FILE}"
|
|
# fi
|
|
# systemctl daemon-reload
|
|
# systemctl start inadyn
|
|
#fi
|
|
}
|
|
|
|
function configure_dns {
|
|
if [[ $(is_completed "${FUNCNAME[0]}") == "1" ]]; then
|
|
return
|
|
fi
|
|
|
|
apt-get -yq install resolvconf
|
|
|
|
resolvconf=/etc/resolvconf/resolv.conf.d/head
|
|
|
|
# allow changes to resolv.conf
|
|
chattr -i $resolvconf
|
|
|
|
{ echo 'domain localdomain';
|
|
echo 'search localdomain';
|
|
echo "nameserver $NAMESERVER1";
|
|
echo "nameserver $NAMESERVER2";
|
|
echo "nameserver $NAMESERVER3";
|
|
echo "nameserver $NAMESERVER4";
|
|
echo "nameserver $NAMESERVER5";
|
|
echo "nameserver $NAMESERVER6"; } > $resolvconf
|
|
|
|
# prevent resolv.conf from changing
|
|
resolvconf -u
|
|
|
|
mark_completed "${FUNCNAME[0]}"
|
|
}
|
|
|
|
function set_hostname {
|
|
DEFAULT_DOMAIN_NAME="$1"
|
|
|
|
echo "$DEFAULT_DOMAIN_NAME" > /etc/hostname
|
|
hostname "$DEFAULT_DOMAIN_NAME"
|
|
echo "$DEFAULT_DOMAIN_NAME" > /etc/mailname
|
|
|
|
if grep -q "127.0.1.1" /etc/hosts; then
|
|
sed -i "s/127.0.1.1.*/127.0.1.1 $DEFAULT_DOMAIN_NAME/g" /etc/hosts
|
|
else
|
|
echo "127.0.1.1 $DEFAULT_DOMAIN_NAME" >> /etc/hosts
|
|
fi
|
|
}
|
|
|
|
function set_your_domain_name {
|
|
if [[ $(is_completed "${FUNCNAME[0]}") == "1" ]]; then
|
|
return
|
|
fi
|
|
|
|
function_check set_hostname
|
|
set_hostname "$DEFAULT_DOMAIN_NAME"
|
|
|
|
mark_completed "${FUNCNAME[0]}"
|
|
}
|
|
|
|
function configure_firewall_for_dns {
|
|
if [[ $(is_completed "${FUNCNAME[0]}") == "1" ]]; then
|
|
return
|
|
fi
|
|
if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
|
|
# docker does its own firewalling
|
|
return
|
|
fi
|
|
iptables -A INPUT -p udp -m udp --dport 1024:65535 --sport 53 -j ACCEPT
|
|
function_check save_firewall_settings
|
|
save_firewall_settings
|
|
mark_completed "${FUNCNAME[0]}"
|
|
}
|
|
|
|
# NOTE: deliberately no exit 0
|