1737 lines
62 KiB
Bash
Executable File
1737 lines
62 KiB
Bash
Executable File
#!/bin/bash
|
|
#
|
|
# .---. . .
|
|
# | | |
|
|
# |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
|
|
# | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
|
|
# ' ' --' --' -' - -' ' ' -' -' -' ' - --'
|
|
#
|
|
# Freedom in the Cloud
|
|
#
|
|
# Administrator control panel for the Freedombone system
|
|
#
|
|
# License
|
|
# =======
|
|
#
|
|
# Copyright (C) 2015-2016 Bob Mottram <bob@robotics.uk.to>
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU Affero General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU Affero General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU Affero General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
PROJECT_NAME='freedombone'
|
|
|
|
export TEXTDOMAIN=${PROJECT_NAME}-controlpanel
|
|
export TEXTDOMAINDIR="/usr/share/locale"
|
|
|
|
COMPLETION_FILE=$HOME/${PROJECT_NAME}-completed.txt
|
|
SELECTED_USERNAME=
|
|
SIP_CONFIGURATION_FILE=/etc/sipwitch.conf
|
|
ADMIN_USER=
|
|
UPGRADE_SCRIPT_NAME="${PROJECT_NAME}-upgrade"
|
|
UPDATE_DATE_SCRIPT=/usr/bin/updatedate
|
|
|
|
# Minimum number of characters in a password
|
|
MINIMUM_PASSWORD_LENGTH=8
|
|
|
|
# voip
|
|
VOIP_PORT=64738
|
|
VOIP_ONION_PORT=8095
|
|
|
|
SSH_PORT=2222
|
|
|
|
IRC_PORT=6697
|
|
IRC_ONION_PORT=8093
|
|
|
|
USB_DRIVE=sdb
|
|
# get default USB from config file
|
|
CONFIGURATION_FILE=/root/${PROJECT_NAME}.cfg
|
|
if [ -f $CONFIGURATION_FILE ]; then
|
|
if grep -q "USB_DRIVE=" $CONFIGURATION_FILE; then
|
|
USB_DRIVE=$(cat $CONFIGURATION_FILE | grep "USB_DRIVE=" | awk -F '=' '{print $2}')
|
|
if [[ $USB_DRIVE == *"dev"* ]]; then
|
|
USB_DRIVE=$(echo ${USB_DRIVE} | awk -F '/' '{print $3}' | sed 's|1||g' | sed 's|2||g')
|
|
fi
|
|
fi
|
|
if grep -q "SSH_PORT=" $CONFIGURATION_FILE; then
|
|
SSH_PORT=$(cat $CONFIGURATION_FILE | grep "SSH_PORT=" | awk -F '=' '{print $2}')
|
|
fi
|
|
if grep -q "IRC_PORT=" $CONFIGURATION_FILE; then
|
|
IRC_PORT=$(cat $CONFIGURATION_FILE | grep "IRC_PORT=" | awk -F '=' '{print $2}')
|
|
fi
|
|
fi
|
|
|
|
# Mirrors settings
|
|
FRIENDS_MIRRORS_SERVER=
|
|
FRIENDS_MIRRORS_SSH_PORT=2222
|
|
FRIENDS_MIRRORS_PASSWORD=
|
|
MY_MIRRORS_PASSWORD=
|
|
|
|
function any_key {
|
|
echo ' '
|
|
read -n1 -r -p $"Press any key to continue..." key
|
|
}
|
|
|
|
function check_for_updates {
|
|
if [ ! -f /etc/cron.weekly/$UPGRADE_SCRIPT_NAME ]; then
|
|
dialog --title $"Check for updates" \
|
|
--msgbox $"Upgrade script was not found" 6 40
|
|
return
|
|
fi
|
|
|
|
clear
|
|
. /etc/cron.weekly/$UPGRADE_SCRIPT_NAME
|
|
any_key
|
|
}
|
|
|
|
function read_repo_servers {
|
|
if [ -f $CONFIGURATION_FILE ]; then
|
|
if grep -q "FRIENDS_MIRRORS_SERVER" $CONFIGURATION_FILE; then
|
|
FRIENDS_MIRRORS_SERVER=$(grep "FRIENDS_MIRRORS_SERVER" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
|
|
fi
|
|
if grep -q "FRIENDS_MIRRORS_SSH_PORT" $CONFIGURATION_FILE; then
|
|
FRIENDS_MIRRORS_SSH_PORT=$(grep "FRIENDS_MIRRORS_SSH_PORT" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
|
|
fi
|
|
if grep -q "MY_MIRRORS_PASSWORD" $CONFIGURATION_FILE; then
|
|
MY_MIRRORS_PASSWORD=$(grep "MY_MIRRORS_PASSWORD" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
|
|
fi
|
|
if grep -q "FRIENDS_MIRRORS_PASSWORD" $CONFIGURATION_FILE; then
|
|
FRIENDS_MIRRORS_PASSWORD=$(grep "FRIENDS_MIRRORS_PASSWORD" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
|
|
fi
|
|
fi
|
|
|
|
if [ ! $FRIENDS_MIRRORS_SERVER ]; then
|
|
return
|
|
fi
|
|
if [ ${#FRIENDS_MIRRORS_SERVER} -lt 2 ]; then
|
|
return
|
|
fi
|
|
|
|
MAIN_COMMAND=/usr/local/bin/${PROJECT_NAME}
|
|
if [ ! -f $MAIN_COMMAND ]; then
|
|
MAIN_COMMAND=/usr/bin/${PROJECT_NAME}
|
|
fi
|
|
|
|
REPOS=($(cat ${MAIN_COMMAND} | grep "_REPO=\"" | uniq -u | sed 's|${PROJECT_NAME}|'"${PROJECT_NAME}"'|g'))
|
|
|
|
for line in "${REPOS[@]}"
|
|
do
|
|
repo_name=$(echo "$line" | awk -F '=' '{print $1}')
|
|
mirrors_name=$(echo "$repo_name" | sed "s|_REPO||g" | awk '{print tolower($0)}')
|
|
friends_repo_url="ssh://mirrors@${FRIENDS_MIRRORS_SERVER}:${FRIENDS_MIRRORS_SSH_PORT}/home/mirrors/${mirrors_name}"
|
|
${repo_name}="${friends_repo_url}"
|
|
done
|
|
}
|
|
|
|
function set_main_repo {
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Main Repository (Mirrors)" \
|
|
--form $"If you do not wish to use the default repositories they can be obtained from mirrors on another ${PROJECT_NAME} server." 14 60 3 \
|
|
$"URL:" 1 1 "$FRIENDS_MIRRORS_SERVER" 1 14 40 15 \
|
|
$"SSH Port:" 2 1 "$FRIENDS_MIRRORS_SSH_PORT" 2 14 40 10000 \
|
|
$"Password:" 3 1 "$FRIENDS_MIRRORS_PASSWORD" 3 14 40 10000 \
|
|
2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
new_mirrors_url=$(cat $data | sed -n 1p)
|
|
new_mirrors_ssh_port=$(cat $data | sed -n 2p)
|
|
new_mirrors_password=$(cat $data | sed -n 3p)
|
|
|
|
if [ ${#new_mirrors_url} -lt 2 ]; then
|
|
return
|
|
fi
|
|
if [ ${#new_mirrors_ssh_port} -lt 1 ]; then
|
|
return
|
|
fi
|
|
if [ ${#new_mirrors_password} -lt 10 ]; then
|
|
dialog --title $"Main Repository" \
|
|
--msgbox $'Mirrors password was too short. Should be at least 10 characters.' 6 40
|
|
return
|
|
fi
|
|
|
|
if [[ $new_mirrors_url == *"."* ]]; then
|
|
FRIENDS_MIRRORS_SERVER=$new_mirrors_url
|
|
FRIENDS_MIRRORS_SSH_PORT=$new_mirrors_ssh_port
|
|
FRIENDS_MIRRORS_PASSWORD=$new_mirrors_password
|
|
|
|
if ! grep -q "FRIENDS_MIRRORS_SERVER" $CONFIGURATION_FILE; then
|
|
echo "FRIENDS_MIRRORS_SERVER=$FRIENDS_MIRRORS_SERVER" >> $CONFIGURATION_FILE
|
|
else
|
|
sed -i "s|FRIENDS_MIRRORS_SERVER=.*|FRIENDS_MIRRORS_SERVER=$FRIENDS_MIRRORS_SERVER|g" $CONFIGURATION_FILE
|
|
fi
|
|
|
|
if ! grep -q "FRIENDS_MIRRORS_SSH_PORT" $CONFIGURATION_FILE; then
|
|
echo "FRIENDS_MIRRORS_SSH_PORT=$FRIENDS_MIRRORS_SSH_PORT" >> $CONFIGURATION_FILE
|
|
else
|
|
sed -i "s|FRIENDS_MIRRORS_SSH_PORT=.*|FRIENDS_MIRRORS_SSH_PORT=$FRIENDS_MIRRORS_SSH_PORT|g" $CONFIGURATION_FILE
|
|
fi
|
|
|
|
if ! grep -q "FRIENDS_MIRRORS_PASSWORD" $CONFIGURATION_FILE; then
|
|
echo "FRIENDS_MIRRORS_PASSWORD=$FRIENDS_MIRRORS_PASSWORD" >> $CONFIGURATION_FILE
|
|
else
|
|
sed -i "s|FRIENDS_MIRRORS_PASSWORD=.*|FRIENDS_MIRRORS_PASSWORD=$FRIENDS_MIRRORS_PASSWORD|g" $CONFIGURATION_FILE
|
|
fi
|
|
|
|
# re-read the repos
|
|
read_repo_servers
|
|
|
|
dialog --title $"Main Repository" \
|
|
--msgbox $"Main repository set to $FRIENDS_MIRRORS_SERVER" 6 60
|
|
fi
|
|
}
|
|
|
|
function add_user {
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Add new user" \
|
|
--form "\n" 8 60 3 \
|
|
$"Username:" 1 1 "" 1 28 16 15 \
|
|
$"ssh public key (optional):" 2 1 "" 2 28 40 10000 \
|
|
2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
new_user_username=$(cat $data | sed -n 1p)
|
|
new_user_ssh_public_key=$(cat $data | sed -n 2p)
|
|
if [ ${#new_user_username} -lt 2 ]; then
|
|
dialog --title $"New username" \
|
|
--msgbox $"No username was given" 6 40
|
|
return
|
|
fi
|
|
if [[ "$new_user_username" == *" "* ]]; then
|
|
dialog --title $"Invalid username" \
|
|
--msgbox $"The username should not contain any spaces" 6 40
|
|
return
|
|
fi
|
|
if [ ${#new_user_ssh_public_key} -lt 20 ]; then
|
|
clear
|
|
${PROJECT_NAME}-adduser "$new_user_username"
|
|
any_key
|
|
else
|
|
if [[ "$new_user_ssh_public_key" == "ssh-"* ]]; then
|
|
clear
|
|
${PROJECT_NAME}-adduser "$new_user_username" "$new_user_ssh_public_key"
|
|
any_key
|
|
else
|
|
dialog --title $"ssh public key" \
|
|
--msgbox $"This does not look like an ssh public key" 6 40
|
|
fi
|
|
fi
|
|
}
|
|
|
|
function pad_string {
|
|
echo -n -e "$1" | sed -e :a -e 's/^.\{1,25\}$/& /;ta'
|
|
}
|
|
|
|
function show_domains {
|
|
DEFAULT_DOMAIN_NAME=$(cat $CONFIGURATION_FILE | grep "DEFAULT_DOMAIN_NAME=" | awk -F '=' '{print $2}')
|
|
|
|
echo 'Domains'
|
|
echo '======='
|
|
echo ''
|
|
echo -n -e "$(pad_string 'Name')"
|
|
echo -n -e "$(pad_string 'ICANN')"
|
|
echo -n -e "$(pad_string 'Tor')"
|
|
echo ''
|
|
echo '--------------------------------------------------------------------------'
|
|
if grep -q "ssh onion domain" $COMPLETION_FILE; then
|
|
echo -n -e "$(pad_string 'ssh')"
|
|
echo -n -e "$(pad_string ${DEFAULT_DOMAIN_NAME})"
|
|
echo "$(cat ${COMPLETION_FILE} | grep 'ssh onion domain' | awk -F ':' '{print $2}')"
|
|
fi
|
|
if grep -q "Email onion domain" $COMPLETION_FILE; then
|
|
echo -n -e "$(pad_string 'Email')"
|
|
echo -n -e "$(pad_string ${DEFAULT_DOMAIN_NAME})"
|
|
echo "$(cat ${COMPLETION_FILE} | grep 'Email onion domain' | awk -F ':' '{print $2}')"
|
|
fi
|
|
if grep -q "XMPP onion domain" $COMPLETION_FILE; then
|
|
echo -n -e "$(pad_string 'XMPP')"
|
|
echo -n -e "$(pad_string ${DEFAULT_DOMAIN_NAME})"
|
|
echo "$(cat ${COMPLETION_FILE} | grep 'XMPP onion domain' | awk -F ':' '{print $2}')"
|
|
fi
|
|
if grep -q "VoIP onion domain" $COMPLETION_FILE; then
|
|
echo -n -e "$(pad_string 'VoIP/Mumble')"
|
|
echo -n -e "$(pad_string ${DEFAULT_DOMAIN_NAME})"
|
|
echo "$(cat ${COMPLETION_FILE} | grep 'VoIP onion domain' | awk -F ':' '{print $2}')"
|
|
fi
|
|
if grep -q "SIP onion domain" $COMPLETION_FILE; then
|
|
echo -n -e "$(pad_string 'SIP')"
|
|
echo -n -e "$(pad_string ${DEFAULT_DOMAIN_NAME})"
|
|
echo "$(cat ${COMPLETION_FILE} | grep 'SIP onion domain' | awk -F ':' '{print $2}')"
|
|
fi
|
|
if grep -q "IRC onion domain" $COMPLETION_FILE; then
|
|
echo -n -e "$(pad_string 'IRC')"
|
|
echo -n -e "$(pad_string ${DEFAULT_DOMAIN_NAME})"
|
|
echo "$(cat ${COMPLETION_FILE} | grep 'IRC onion domain' | awk -F ':' '{print $2}')"
|
|
fi
|
|
if grep -q "tox onion domain" $COMPLETION_FILE; then
|
|
echo -n -e "$(pad_string 'Tox')"
|
|
echo -n -e "$(pad_string ${DEFAULT_DOMAIN_NAME})"
|
|
echo "$(cat ${COMPLETION_FILE} | grep 'tox onion domain' | awk -F ':' '{print $2}')"
|
|
fi
|
|
if grep -q "Wiki domain" $COMPLETION_FILE; then
|
|
echo -n -e "$(pad_string 'Wiki')"
|
|
WIKIDOM=$(cat ${COMPLETION_FILE} | grep 'Wiki domain' | awk -F ':' '{print $2}')
|
|
echo -n -e "$(pad_string ${WIKIDOM})"
|
|
if [ -d /var/lib/tor/hidden_service_wiki ]; then
|
|
echo -n "$(cat /var/lib/tor/hidden_service_wiki/hostname)"
|
|
fi
|
|
echo ''
|
|
fi
|
|
if grep -q "Hubzilla domain" $COMPLETION_FILE; then
|
|
echo -n -e "$(pad_string 'Hubzilla')"
|
|
HUBZILLADOM=$(cat ${COMPLETION_FILE} | grep 'Hubzilla domain' | awk -F ':' '{print $2}')
|
|
echo -n -e "$(pad_string ${HUBZILLADOM})"
|
|
if [ -d /var/lib/tor/hidden_service_hubzilla ]; then
|
|
echo -n "$(cat /var/lib/tor/hidden_service_hubzilla/hostname)"
|
|
fi
|
|
echo ''
|
|
fi
|
|
if grep -q "Blog domain" $COMPLETION_FILE; then
|
|
echo -n -e "$(pad_string 'Blog')"
|
|
BLOGDOM=$(cat ${COMPLETION_FILE} | grep 'Blog domain' | awk -F ':' '{print $2}')
|
|
echo -n -e "$(pad_string ${BLOGDOM})"
|
|
if [ -d /var/lib/tor/hidden_service_blog ]; then
|
|
echo -n "$(cat /var/lib/tor/hidden_service_blog/hostname)"
|
|
fi
|
|
echo ''
|
|
fi
|
|
if grep -q "GNU Social domain" $COMPLETION_FILE; then
|
|
echo -n -e "$(pad_string 'GNU Social')"
|
|
GNUSOCIALDOM=$(cat ${COMPLETION_FILE} | grep 'GNU Social domain' | awk -F ':' '{print $2}')
|
|
echo -n -e "$(pad_string ${GNUSOCIALDOM})"
|
|
if [ -d /var/lib/tor/hidden_service_microblog ]; then
|
|
echo -n "$(cat /var/lib/tor/hidden_service_microblog/hostname)"
|
|
fi
|
|
echo ''
|
|
fi
|
|
if grep -q "Owncloud domain" $COMPLETION_FILE; then
|
|
echo -n -e "$(pad_string 'Owncloud')"
|
|
OWNCLOUDDOM=$(cat ${COMPLETION_FILE} | grep 'Owncloud domain' | awk -F ':' '{print $2}')
|
|
echo -n -e "$(pad_string ${OWNCLOUDDOM})"
|
|
if [ -d /var/lib/tor/hidden_service_owncloud ]; then
|
|
echo -n "$(cat /var/lib/tor/hidden_service_owncloud/hostname)"
|
|
fi
|
|
echo ''
|
|
fi
|
|
if grep -q "Gogs domain" $COMPLETION_FILE; then
|
|
echo -n -e "$(pad_string 'Gogs')"
|
|
GOGSDOM=$(cat ${COMPLETION_FILE} | grep 'Gogs domain' | awk -F ':' '{print $2}')
|
|
echo -n -e "$(pad_string ${GOGSDOM})"
|
|
if [ -d /var/lib/tor/hidden_service_gogs ]; then
|
|
echo -n "$(cat /var/lib/tor/hidden_service_gogs/hostname)"
|
|
fi
|
|
echo ''
|
|
fi
|
|
if grep -q "RSS reader domain" $COMPLETION_FILE; then
|
|
echo -n -e "$(pad_string 'RSS reader')"
|
|
#RSSDOM=$(cat ${COMPLETION_FILE} | grep 'RSS reader domain' | awk -F ':' '{print $2}')
|
|
RSSDOM='-'
|
|
echo -n -e "$(pad_string ${RSSDOM})"
|
|
if [ -d /var/lib/tor/hidden_service_ttrss ]; then
|
|
echo -n "$(cat /var/lib/tor/hidden_service_ttrss/hostname)"
|
|
fi
|
|
echo ''
|
|
fi
|
|
|
|
echo ''
|
|
}
|
|
|
|
function show_users {
|
|
echo 'Users'
|
|
echo '====='
|
|
echo ''
|
|
echo -n -e "$(pad_string 'Name')"
|
|
echo -n -e "$(pad_string 'SIP ext')"
|
|
echo -n -e "$(pad_string 'Data')"
|
|
echo ''
|
|
echo '--------------------------------------------------------------------------'
|
|
for d in /home/*/ ; do
|
|
USRNAME=$(echo "$d" | awk -F '/' '{print $3}')
|
|
if [[ $USRNAME != "git" && $USRNAME != "mirrors" ]]; then
|
|
echo -n -e "$(pad_string ${USRNAME})"
|
|
# get the SIP extension
|
|
SIPEXT=
|
|
while read ext; do
|
|
if [[ $ext == *"user id"* ]]; then
|
|
CURR_UID=$(echo "$ext" | awk -F '"' '{print $2}' | awk -F '"' '{print $1}')
|
|
fi
|
|
if [[ $ext == *"extension"* ]]; then
|
|
if [[ $CURR_UID == $USRNAME ]]; then
|
|
SIPEXT=$(echo "$ext" | awk -F '>' '{print $2}' | awk -F '<' '{print $1}')
|
|
fi
|
|
fi
|
|
done < $SIP_CONFIGURATION_FILE
|
|
if [ $SIPEXT ]; then
|
|
echo -n -e "$(pad_string SIP:${SIPEXT})"
|
|
else
|
|
echo -n -e "$(pad_string '')"
|
|
fi
|
|
|
|
# size of the home directory
|
|
echo "$(du -s -h /home/${USRNAME} | awk -F ' ' '{print $1}')"
|
|
fi
|
|
done
|
|
echo ''
|
|
}
|
|
|
|
function show_mirrors_password {
|
|
if [ ! /home/mirrors ]; then
|
|
return
|
|
fi
|
|
if grep -q "MY_MIRRORS_PASSWORD" $CONFIGURATION_FILE; then
|
|
MY_MIRRORS_PASSWORD=$(grep "MY_MIRRORS_PASSWORD" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
|
|
fi
|
|
echo 'Local Mirrors'
|
|
echo '============='
|
|
echo ''
|
|
echo -n "URL: "
|
|
echo "$(cat ${COMPLETION_FILE} | grep 'ssh onion domain' | awk -F ':' '{print $2}')"
|
|
echo "SSH Port: $SSH_PORT"
|
|
echo "Password: $MY_MIRRORS_PASSWORD"
|
|
echo ''
|
|
}
|
|
|
|
function show_about {
|
|
clear
|
|
show_domains
|
|
show_mirrors_password
|
|
show_users
|
|
any_key
|
|
}
|
|
|
|
function select_user {
|
|
SELECTED_USERNAME=
|
|
|
|
users_array=($(ls /home))
|
|
|
|
delete=(mirrors git)
|
|
for del in ${delete[@]}
|
|
do
|
|
users_array=(${users_array[@]/$del})
|
|
done
|
|
|
|
i=0
|
|
W=()
|
|
name=()
|
|
for u in ${users_array[@]}
|
|
do
|
|
i=$((i+1))
|
|
W+=($i "$u")
|
|
name+=("$u")
|
|
done
|
|
|
|
user_index=$(dialog --backtitle $"Freedombone Control Panel" --title $"Select User" --menu $"Select one of the following:" 24 40 17 "${W[@]}" 3>&2 2>&1 1>&3)
|
|
|
|
if [ $? -eq 0 ]; then
|
|
SELECTED_USERNAME="${name[$((user_index-1))]}"
|
|
fi
|
|
}
|
|
|
|
function delete_user {
|
|
select_user
|
|
if [ ! $SELECTED_USERNAME ]; then
|
|
return
|
|
fi
|
|
if grep -Fxq "Admin user:$SELECTED_USERNAME" $COMPLETION_FILE; then
|
|
dialog --title $"Administrator user" \
|
|
--msgbox $"You can't delete the administrator user" 6 40
|
|
return
|
|
fi
|
|
clear
|
|
${PROJECT_NAME}-rmuser $SELECTED_USERNAME
|
|
any_key
|
|
}
|
|
|
|
function configure_remote_backups {
|
|
if ! grep -Fxq "Admin user:$ADMIN_USER" $COMPLETION_FILE; then
|
|
dialog --title $"Administrator user" \
|
|
--msgbox $"No Administrator user found. Check $COMPLETION_FILE" 6 40
|
|
return
|
|
fi
|
|
if [ ${#ADMIN_USER} -lt 2 ]; then
|
|
dialog --title $"Administrator user" \
|
|
--msgbox $"Username not found" 6 40
|
|
return
|
|
fi
|
|
if [ ! -d /home/$ADMIN_USER ]; then
|
|
dialog --title $"Administrator user" \
|
|
--msgbox $"Home directory not found" 6 40
|
|
return
|
|
fi
|
|
${PROJECT_NAME}-remote -u $ADMIN_USER
|
|
if [ ! "$?" = "0" ]; then
|
|
any_key
|
|
fi
|
|
}
|
|
|
|
function change_password {
|
|
select_user
|
|
if [ ! $SELECTED_USERNAME ]; then
|
|
return
|
|
fi
|
|
|
|
dialog --title $"Change password" \
|
|
--passwordbox $"New password for user $SELECTED_USERNAME" 8 40 2> $data
|
|
newpassword=$(<$data)
|
|
if [ ${#newpassword} -lt ${MINIMUM_PASSWORD_LENGTH} ]; then
|
|
dialog --title $"Change password" \
|
|
--msgbox $"The password should be ${MINIMUM_PASSWORD_LENGTH} or more characters" 6 40
|
|
return
|
|
fi
|
|
|
|
echo "$SELECTED_USERNAME:$newpassword"|chpasswd
|
|
|
|
dialog --title $"Change password" \
|
|
--msgbox $"Password for $SELECTED_USERNAME was changed" 6 40
|
|
}
|
|
|
|
function irc_set_global_password {
|
|
dialog --title $"IRC Password" \
|
|
--clear \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--passwordbox $"Password for all IRC users, or press Enter for no password" 10 50 2> $data
|
|
sel=$?
|
|
case $sel in
|
|
0)
|
|
NEW_IRC_PASSWORD=$(<$data)
|
|
sed -i "0,/RE/s/Password =.*/Password =$NEW_IRC_PASSWORD/" /etc/ngircd/ngircd.conf
|
|
dialog --title $"IRC Password" \
|
|
--msgbox $"The IRC password was changed" 6 40
|
|
;;
|
|
esac
|
|
}
|
|
|
|
function change_ssh_public_key {
|
|
select_user
|
|
if [ ! $SELECTED_USERNAME ]; then
|
|
return
|
|
fi
|
|
|
|
if grep -Fxq "Admin user:$SELECTED_USERNAME" $COMPLETION_FILE; then
|
|
dialog --title $"Change ssh public key" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--defaultno \
|
|
--yesno $"\nThis is the administrator user.\n\nAre you sure you want to change the ssh public key for the administrator?" 10 60
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
fi
|
|
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --title $"Change ssh public key for $SELECTED_USERNAME" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--inputbox $"Paste the ssh public key below" 8 60 2>$data
|
|
sel=$?
|
|
case $sel in
|
|
0)
|
|
SSH_PUBLIC_KEY=$(<$data)
|
|
if [ "$SSH_PUBLIC_KEY" ]; then
|
|
if [ ${#SSH_PUBLIC_KEY} -gt 5 ]; then
|
|
if [ -f "$SSH_PUBLIC_KEY" ]; then
|
|
if [ ! -d /home/$SELECTED_USERNAME/.ssh ]; then
|
|
mkdir /home/$SELECTED_USERNAME/.ssh
|
|
fi
|
|
cp $SSH_PUBLIC_KEY \
|
|
/home/$SELECTED_USERNAME/.ssh/authorized_keys
|
|
chown -R $SELECTED_USERNAME:$SELECTED_USERNAME \
|
|
/home/$SELECTED_USERNAME/.ssh
|
|
dialog --title $"Change ssh public key" \
|
|
--msgbox $"ssh public key was installed" 6 40
|
|
else
|
|
if [[ "$SSH_PUBLIC_KEY" == "ssh-"* ]]; then
|
|
if [ ! -d /home/$SELECTED_USERNAME/.ssh ]; then
|
|
mkdir /home/$SELECTED_USERNAME/.ssh
|
|
fi
|
|
echo "$SSH_PUBLIC_KEY" > \
|
|
/home/$SELECTED_USERNAME/.ssh/authorized_keys
|
|
chown -R $SELECTED_USERNAME:$SELECTED_USERNAME \
|
|
/home/$SELECTED_USERNAME/.ssh
|
|
dialog --title $"Change ssh public key" \
|
|
--msgbox $"ssh public key was installed" 6 40
|
|
fi
|
|
fi
|
|
fi
|
|
fi
|
|
;;
|
|
esac
|
|
}
|
|
|
|
function irc_via_onion {
|
|
dialog --title $"IRC Server" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--defaultno \
|
|
--yesno $"\nAccess the IRC server via an onion address?" 8 60
|
|
sel=$?
|
|
irc_onion='no'
|
|
case $sel in
|
|
0) irc_onion='yes';;
|
|
255) return;;
|
|
esac
|
|
if [[ $irc_onion == 'no' ]]; then
|
|
if grep -q ";Ports = 6667" /etc/ngircd/ngircd.conf; then
|
|
sed -i "s/;Ports =.*/;Ports = $IRC_PORT, $IRC_ONION_PORT/1" /etc/ngircd/ngircd.conf
|
|
else
|
|
if ! grep -q ";Ports = $IRC_PORT, $IRC_ONION_PORT" /etc/ngircd/ngircd.conf; then
|
|
sed -i "s/Ports = $IRC_PORT, $IRC_ONION_PORT/;Ports = $IRC_PORT, $IRC_ONION_PORT/1" /etc/ngircd/ngircd.conf
|
|
fi
|
|
fi
|
|
systemctl restart ngircd
|
|
dialog --title $"IRC Server" \
|
|
--msgbox $"The IRC server can now be accessed via SSL at your main domain name" 8 50
|
|
else
|
|
if grep -q ";Ports = $IRC_PORT, $IRC_ONION_PORT" /etc/ngircd/ngircd.conf; then
|
|
sed -i "s/;Ports =.*/Ports = $IRC_PORT, $IRC_ONION_PORT/1" /etc/ngircd/ngircd.conf
|
|
systemctl restart ngircd
|
|
fi
|
|
dialog --title $"IRC Server" \
|
|
--msgbox $"The IRC server can now be accessed via its onion address without SSL" 8 50
|
|
fi
|
|
}
|
|
|
|
function remove_user_from_mailing_list {
|
|
select_user
|
|
if [ ! $SELECTED_USERNAME ]; then
|
|
return
|
|
fi
|
|
USER_MAILING_LISTS=$(cat "/home/$SELECTED_USERNAME/.procmailrc" | grep '\[' | grep '\]' | awk -F '\[' '{print $2}' | awk -F '\\' '{print $1}')
|
|
|
|
i=0
|
|
W=()
|
|
list_name=()
|
|
while read -r listname; do
|
|
i=$((i+1))
|
|
W+=($i "$listname")
|
|
list_name+=("$listname")
|
|
echo $listname
|
|
done <<< "$USER_MAILING_LISTS"
|
|
|
|
i=$((i+1))
|
|
W+=($i $"Exit back to user mainenance")
|
|
|
|
list_selected=$(dialog --default-item "$i" --backtitle $"Freedombone Control Panel" --title $"Remove a mailing list for $SELECTED_USERNAME" --menu $"Select one of the following:" 24 50 17 "${W[@]}" 3>&2 2>&1 1>&3)
|
|
|
|
if [ $? -eq 0 ]; then # Exit with OK
|
|
if [ ${list_selected} -ne ${i} ]; then
|
|
remove_list_name="${list_name[$((list_selected-1))]}"
|
|
|
|
# find the line number where the list is defined
|
|
line_number=0
|
|
i=0
|
|
while read -r line
|
|
do
|
|
if [[ "$line" == *"\[${remove_list_name}\\]"* ]]; then
|
|
line_number=${i}
|
|
fi
|
|
i=$((i+1))
|
|
done < "/home/$SELECTED_USERNAME/.procmailrc"
|
|
|
|
if [ ${line_number} -eq 0 ]; then
|
|
# no match was found
|
|
return
|
|
fi
|
|
|
|
# recreate the file
|
|
if [ -f /home/${SELECTED_USERNAME}/.procmailrc_new ]; then
|
|
rm /home/${SELECTED_USERNAME}/.procmailrc_new
|
|
fi
|
|
i=0
|
|
clip=0
|
|
while read -r line
|
|
do
|
|
i=$((i+1))
|
|
if [ ${i} -gt $((line_number-1)) ]; then
|
|
if [ ${clip} -eq 0 ]; then
|
|
clip=1
|
|
fi
|
|
if [ ${clip} -eq 1 ]; then
|
|
if [ ${i} -lt $((line_number+2)) ]; then
|
|
continue
|
|
else
|
|
if [ ${#line} -lt 1 ]; then
|
|
clip=2
|
|
continue
|
|
fi
|
|
if [[ "$line" == ":"* || "$line" == "#"* ]]; then
|
|
clip=2
|
|
else
|
|
continue
|
|
fi
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
echo "$line" >> /home/${SELECTED_USERNAME}/.procmailrc_new
|
|
|
|
if [[ "$line" == *"\[${remove_list_name}\\]"* ]]; then
|
|
line_number=${i}
|
|
fi
|
|
done < "/home/$SELECTED_USERNAME/.procmailrc"
|
|
cp /home/${SELECTED_USERNAME}/.procmailrc_new /home/${SELECTED_USERNAME}/.procmailrc
|
|
rm /home/${SELECTED_USERNAME}/.procmailrc_new
|
|
chown ${SELECTED_USERNAME}:${SELECTED_USERNAME} /home/${SELECTED_USERNAME}/.procmailrc
|
|
dialog --title $"Remove user from mailing list" \
|
|
--msgbox $"${SELECTED_USERNAME} has been removed from ${remove_list_name}" 6 50
|
|
fi
|
|
fi
|
|
}
|
|
|
|
function add_to_mailing_list {
|
|
select_user
|
|
if [ ! $SELECTED_USERNAME ]; then
|
|
return
|
|
fi
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Subscribe $SELECTED_USERNAME to a mailing list" \
|
|
--form $"You can either enter a subject or an email address\n" 11 68 4 \
|
|
$"List folder name:" 1 1 "" 1 35 26 25 \
|
|
$"Name between [] on subject line:" 2 1 "" 2 35 26 25 \
|
|
$"List email address:" 3 1 "" 3 35 26 25 \
|
|
$"Public:" 4 1 $"yes" 4 35 4 25 \
|
|
2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
LIST_NAME=$(cat $data | sed -n 1p)
|
|
LIST_SUBJECT=$(cat $data | sed -n 2p)
|
|
LIST_EMAIL=$(cat $data | sed -n 3p)
|
|
LIST_PUBLIC=$(cat $data | sed -n 4p)
|
|
|
|
if [ ${#LIST_PUBLIC} -lt 1 ]; then
|
|
LIST_PUBLIC='no'
|
|
fi
|
|
if [[ $LIST_PUBLIC == $'y' || $LIST_PUBLIC == $'Y' || $LIST_PUBLIC == $'true' || $LIST_PUBLIC == $'True' || $LIST_PUBLIC == $'yes' || $LIST_PUBLIC == $'Yes' || $LIST_PUBLIC == $'YES' ]]; then
|
|
LIST_PUBLIC='yes'
|
|
else
|
|
LIST_PUBLIC='no'
|
|
fi
|
|
if [ ${#LIST_NAME} -lt 2 ]; then
|
|
dialog --title $"Add mailing list" \
|
|
--msgbox $"No mailing list name was given" 6 40
|
|
return
|
|
fi
|
|
if [ ${#LIST_SUBJECT} -lt 2 ]; then
|
|
if [ ${#LIST_EMAIL} -lt 2 ]; then
|
|
dialog --title $"Add mailing list" \
|
|
--msgbox $"No mailing list subject or address was given" 6 40
|
|
return
|
|
fi
|
|
fi
|
|
if [ ${#LIST_SUBJECT} -gt 1 ]; then
|
|
${PROJECT_NAME}-addlist -u $SELECTED_USERNAME -l "$LIST_NAME" \
|
|
-s "$LIST_SUBJECT" --public $LIST_PUBLIC
|
|
else
|
|
if [[ "$LIST_EMAIL" != *"@"* || "$LIST_EMAIL" != *"."* ]]; then
|
|
dialog --title $"Add mailing list" \
|
|
--msgbox $"Unrecognised email address" 6 40
|
|
return
|
|
else
|
|
${PROJECT_NAME}-addlist -u $SELECTED_USERNAME -l "$LIST_NAME" \
|
|
-e "$LIST_EMAIL" --public $LIST_PUBLIC
|
|
fi
|
|
fi
|
|
|
|
dialog --title $"Add mailing list" \
|
|
--msgbox $"$LIST_NAME list was added" 6 40
|
|
}
|
|
|
|
function email_rule {
|
|
select_user
|
|
if [ ! $SELECTED_USERNAME ]; then
|
|
return
|
|
fi
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Email rule for user $SELECTED_USERNAME" \
|
|
--form "\n" 9 65 4 \
|
|
$"When email arrives from address:" 1 1 "" 1 35 24 28 \
|
|
$"Move to folder:" 2 1 "" 2 35 24 28 \
|
|
$"Public:" 3 1 $"no" 3 35 4 25 \
|
|
2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
RULE_EMAIL=$(cat $data | sed -n 1p)
|
|
RULE_FOLDER=$(cat $data | sed -n 2p)
|
|
RULE_PUBLIC=$(cat $data | sed -n 3p)
|
|
|
|
if [ ${#RULE_PUBLIC} -lt 1 ]; then
|
|
RULE_PUBLIC='no'
|
|
fi
|
|
if [[ $RULE_PUBLIC == $'y' || $RULE_PUBLIC == $'Y' || $RULE_PUBLIC == $'true' || $RULE_PUBLIC == $'True' || $RULE_PUBLIC == $'yes' || $RULE_PUBLIC == $'Yes' || $RULE_PUBLIC == $'YES' ]]; then
|
|
RULE_PUBLIC='yes'
|
|
else
|
|
RULE_PUBLIC='no'
|
|
fi
|
|
if [ ${#RULE_EMAIL} -lt 2 ]; then
|
|
dialog --title $"Add email rule" \
|
|
--msgbox $"No email address was given" 6 40
|
|
return
|
|
fi
|
|
if [ ${#RULE_FOLDER} -lt 2 ]; then
|
|
dialog --title $"Add email rule" \
|
|
--msgbox $"No folder name was given" 6 40
|
|
return
|
|
fi
|
|
if [[ "$RULE_EMAIL" != *"@"* || "$RULE_EMAIL" != *"."* ]]; then
|
|
dialog --title $"Add email rule" \
|
|
--msgbox $"Unrecognised email address" 6 40
|
|
return
|
|
fi
|
|
|
|
${PROJECT_NAME}-addemail -u $SELECTED_USERNAME -e "$RULE_EMAIL" \
|
|
-g "$RULE_FOLDER" --public $RULE_PUBLIC
|
|
dialog --title $"Add email rule" \
|
|
--msgbox $"Email rule for $RULE_EMAIL was added" 6 40
|
|
}
|
|
|
|
function block_unblock_email {
|
|
select_user
|
|
if [ ! $SELECTED_USERNAME ]; then
|
|
return
|
|
fi
|
|
blockstr=$"Block/Unblock email going to"
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title "$blockstr $SELECTED_USERNAME" \
|
|
--form "\n" 8 65 3 \
|
|
$"When email arrives from address:" 1 1 "" 1 35 24 28 \
|
|
$"Block it:" 2 1 "yes" 2 35 4 4 \
|
|
2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
BLOCK_EMAIL=$(cat $data | sed -n 1p)
|
|
BLOCK=$(cat $data | sed -n 2p)
|
|
if [ ${#BLOCK_EMAIL} -lt 2 ]; then
|
|
dialog --title $"Block/Unblock an email" \
|
|
--msgbox $"No email address was given" 6 40
|
|
return
|
|
fi
|
|
if [[ "$BLOCK_EMAIL" != *"@"* || "$BLOCK_EMAIL" != *"."* ]]; then
|
|
dialog --title $"Block/Unblock an email" \
|
|
--msgbox $"Unrecognised email address" 6 40
|
|
return
|
|
fi
|
|
if [[ $BLOCK == "y"* || $BLOCK == "Y"* ]]; then
|
|
${PROJECT_NAME}-ignore -u $SELECTED_USERNAME -e "$BLOCK_EMAIL"
|
|
dialog --title $"Block an email" \
|
|
--msgbox "Email from $BLOCK_EMAIL to $SELECTED_USERNAME blocked" 6 40
|
|
else
|
|
${PROJECT_NAME}-unignore -u $SELECTED_USERNAME -e "$BLOCK_EMAIL"
|
|
dialog --title $"Unblock an email" \
|
|
--msgbox "Email from $BLOCK_EMAIL to $SELECTED_USERNAME unblocked" 6 40
|
|
fi
|
|
}
|
|
|
|
function block_unblock_subject {
|
|
select_user
|
|
if [ ! $SELECTED_USERNAME ]; then
|
|
return
|
|
fi
|
|
blockstr=$"Block/Unblock email going to"
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title "$blockstr $SELECTED_USERNAME" \
|
|
--form "\n" 8 70 3 \
|
|
$"When email arrives with subject text:" 1 1 "" 1 40 24 28 \
|
|
$"Block it:" 2 1 "yes" 2 40 4 4 \
|
|
2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
BLOCK_SUBJECT=$(cat $data | sed -n 1p)
|
|
BLOCK=$(cat $data | sed -n 2p)
|
|
if [ ${#BLOCK_SUBJECT} -lt 2 ]; then
|
|
dialog --title $"Block/Unblock an email" \
|
|
--msgbox $"No subject was given" 6 40
|
|
return
|
|
fi
|
|
if [[ $BLOCK == "y"* || $BLOCK == "Y"* ]]; then
|
|
${PROJECT_NAME}-ignore -u $SELECTED_USERNAME -t "$BLOCK_SUBJECT"
|
|
dialog --title $"Block an email" \
|
|
--msgbox "Email with subject $BLOCK_SUBJECT to $SELECTED_USERNAME blocked" 6 40
|
|
else
|
|
${PROJECT_NAME}-unignore -u $SELECTED_USERNAME -t "$BLOCK_SUBJECT"
|
|
dialog --title $"Unblock an email" \
|
|
--msgbox "Email with subject $BLOCK_SUBJECT to $SELECTED_USERNAME unblocked" 6 40
|
|
fi
|
|
}
|
|
|
|
function create_keydrive_master {
|
|
select_user
|
|
if [ ! $SELECTED_USERNAME ]; then
|
|
return
|
|
fi
|
|
dialog --title $"USB Master Keydrive" \
|
|
--msgbox $"Plug in a LUKS encrypted USB drive" 6 40
|
|
clear
|
|
${PROJECT_NAME}-keydrive -u $SELECTED_USERNAME --master 'yes'
|
|
any_key
|
|
}
|
|
|
|
function create_keydrive_fragment {
|
|
select_user
|
|
if [ ! $SELECTED_USERNAME ]; then
|
|
return
|
|
fi
|
|
dialog --title $"USB Fragment Keydrive" \
|
|
--msgbox $"Plug in a LUKS encrypted USB drive" 6 40
|
|
clear
|
|
${PROJECT_NAME}-keydrive -u $SELECTED_USERNAME
|
|
any_key
|
|
}
|
|
|
|
function backup_data {
|
|
dialog --title $"Backup data to USB" \
|
|
--msgbox $"Plug in a LUKS encrypted USB drive" 6 40
|
|
clear
|
|
echo ' '
|
|
echo $'Enter the passphrase for your LUKS encrypted backup drive:'
|
|
${PROJECT_NAME}-backup-local
|
|
any_key
|
|
}
|
|
|
|
function restore_from_usb {
|
|
while true
|
|
do
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Restore from USB backup" \
|
|
--radiolist $"Choose an application to restore:" 30 70 27 \
|
|
1 $"Everything" on \
|
|
2 $"Return to the backup and restore menu" off \
|
|
3 $"Configuration files" off \
|
|
4 $"MariaDB settings" off \
|
|
5 $"Let's Encrypt account" off \
|
|
6 $"Mutt email client settings" off \
|
|
7 $"GPG keys" off \
|
|
8 $"Email processing rules" off \
|
|
9 $"Spam filtering rules" off \
|
|
10 $"Administrator's README file" off \
|
|
11 $"IPFS" off \
|
|
12 $"SSH keys" off \
|
|
13 $"User configuration files" off \
|
|
14 $"SSL/TLS certificates" off \
|
|
15 $"Personal settings" off \
|
|
16 $"Mailing List" off \
|
|
17 $"XMPP chat" off \
|
|
18 $"GNU Social" off \
|
|
19 $"Hubzilla" off \
|
|
20 $"Owncloud" off \
|
|
21 $"Gogs" off \
|
|
22 $"Wiki" off \
|
|
23 $"Blog" off \
|
|
24 $"CJDNS" off \
|
|
25 $"Email" off \
|
|
26 $"DLNA" off \
|
|
27 $"VoIP" off \
|
|
28 $"Tox" off 2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) break;;
|
|
255) break;;
|
|
esac
|
|
case $(cat $data) in
|
|
1) ${PROJECT_NAME}-restore-local $USB_DRIVE;;
|
|
2) return;;
|
|
3) ${PROJECT_NAME}-restore-local $USB_DRIVE configuration;;
|
|
4) ${PROJECT_NAME}-restore-local $USB_DRIVE mariadb;;
|
|
5) ${PROJECT_NAME}-restore-local $USB_DRIVE letsencrypt;;
|
|
6) ${PROJECT_NAME}-restore-local $USB_DRIVE mutt;;
|
|
7) ${PROJECT_NAME}-restore-local $USB_DRIVE gpg;;
|
|
8) ${PROJECT_NAME}-restore-local $USB_DRIVE procmail;;
|
|
9) ${PROJECT_NAME}-restore-local $USB_DRIVE spamassassin;;
|
|
10) ${PROJECT_NAME}-restore-local $USB_DRIVE readme;;
|
|
11) ${PROJECT_NAME}-restore-local $USB_DRIVE ipfs;;
|
|
12) ${PROJECT_NAME}-restore-local $USB_DRIVE ssh;;
|
|
13) ${PROJECT_NAME}-restore-local $USB_DRIVE userconfig;;
|
|
14) ${PROJECT_NAME}-restore-local $USB_DRIVE certs;;
|
|
15) ${PROJECT_NAME}-restore-local $USB_DRIVE personal;;
|
|
16) ${PROJECT_NAME}-restore-local $USB_DRIVE mailinglist;;
|
|
17) ${PROJECT_NAME}-restore-local $USB_DRIVE xmpp;;
|
|
18) ${PROJECT_NAME}-restore-local $USB_DRIVE gnusocial;;
|
|
19) ${PROJECT_NAME}-restore-local $USB_DRIVE hubzilla;;
|
|
20) ${PROJECT_NAME}-restore-local $USB_DRIVE owncloud;;
|
|
21) ${PROJECT_NAME}-restore-local $USB_DRIVE gogs;;
|
|
22) ${PROJECT_NAME}-restore-local $USB_DRIVE wiki;;
|
|
23) ${PROJECT_NAME}-restore-local $USB_DRIVE blog;;
|
|
24) ${PROJECT_NAME}-restore-local $USB_DRIVE cjdns;;
|
|
25) ${PROJECT_NAME}-restore-local $USB_DRIVE email;;
|
|
26) ${PROJECT_NAME}-restore-local $USB_DRIVE dlna;;
|
|
27) ${PROJECT_NAME}-restore-local $USB_DRIVE voip;;
|
|
28) ${PROJECT_NAME}-restore-local $USB_DRIVE tox;;
|
|
esac
|
|
done
|
|
any_key
|
|
}
|
|
|
|
function restore_from_remote {
|
|
remote_domain_name=$1
|
|
|
|
while true
|
|
do
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Restore from ${remote_domain_name}" \
|
|
--radiolist $"Choose an application to restore:" 30 70 27 \
|
|
1 $"Everything" on \
|
|
2 $"Return to the backup and restore menu" off \
|
|
3 $"Configuration files" off \
|
|
4 $"MariaDB settings" off \
|
|
5 $"Let's Encrypt account" off \
|
|
6 $"Mutt email client settings" off \
|
|
7 $"GPG keys" off \
|
|
8 $"Email processing rules" off \
|
|
9 $"Spam filtering rules" off \
|
|
10 $"Administrator's README file" off \
|
|
11 $"IPFS" off \
|
|
12 $"SSH keys" off \
|
|
13 $"User configuration files" off \
|
|
14 $"SSL/TLS certificates" off \
|
|
15 $"Personal settings" off \
|
|
16 $"Mailing List" off \
|
|
17 $"XMPP chat" off \
|
|
18 $"GNU Social" off \
|
|
19 $"Hubzilla" off \
|
|
20 $"Owncloud" off \
|
|
21 $"Gogs" off \
|
|
22 $"Wiki" off \
|
|
23 $"Blog" off \
|
|
24 $"CJDNS" off \
|
|
25 $"Email" off \
|
|
26 $"DLNA" off \
|
|
27 $"VoIP" off \
|
|
28 $"Tox" off 2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) break;;
|
|
255) break;;
|
|
esac
|
|
case $(cat $data) in
|
|
1) ${PROJECT_NAME}-restore-remote $remote_domain_name;;
|
|
2) return;;
|
|
3) ${PROJECT_NAME}-restore-remote $remote_domain_name configuration;;
|
|
4) ${PROJECT_NAME}-restore-remote $remote_domain_name mariadb;;
|
|
5) ${PROJECT_NAME}-restore-remote $remote_domain_name letsencrypt;;
|
|
6) ${PROJECT_NAME}-restore-remote $remote_domain_name mutt;;
|
|
7) ${PROJECT_NAME}-restore-remote $remote_domain_name gpg;;
|
|
8) ${PROJECT_NAME}-restore-remote $remote_domain_name procmail;;
|
|
9) ${PROJECT_NAME}-restore-remote $remote_domain_name spamassassin;;
|
|
10) ${PROJECT_NAME}-restore-remote $remote_domain_name readme;;
|
|
11) ${PROJECT_NAME}-restore-remote $remote_domain_name ipfs;;
|
|
12) ${PROJECT_NAME}-restore-remote $remote_domain_name ssh;;
|
|
13) ${PROJECT_NAME}-restore-remote $remote_domain_name userconfig;;
|
|
14) ${PROJECT_NAME}-restore-remote $remote_domain_name certs;;
|
|
15) ${PROJECT_NAME}-restore-remote $remote_domain_name personal;;
|
|
16) ${PROJECT_NAME}-restore-remote $remote_domain_name mailinglist;;
|
|
17) ${PROJECT_NAME}-restore-remote $remote_domain_name xmpp;;
|
|
18) ${PROJECT_NAME}-restore-remote $remote_domain_name gnusocial;;
|
|
19) ${PROJECT_NAME}-restore-remote $remote_domain_name hubzilla;;
|
|
20) ${PROJECT_NAME}-restore-remote $remote_domain_name owncloud;;
|
|
21) ${PROJECT_NAME}-restore-remote $remote_domain_name gogs;;
|
|
22) ${PROJECT_NAME}-restore-remote $remote_domain_name wiki;;
|
|
23) ${PROJECT_NAME}-restore-remote $remote_domain_name blog;;
|
|
24) ${PROJECT_NAME}-restore-remote $remote_domain_name cjdns;;
|
|
25) ${PROJECT_NAME}-restore-remote $remote_domain_name email;;
|
|
26) ${PROJECT_NAME}-restore-remote $remote_domain_name dlna;;
|
|
27) ${PROJECT_NAME}-restore-remote $remote_domain_name voip;;
|
|
28) ${PROJECT_NAME}-restore-remote $remote_domain_name tox;;
|
|
esac
|
|
done
|
|
any_key
|
|
}
|
|
|
|
function restore_data {
|
|
dialog --title $"Restore data from USB" \
|
|
--msgbox $"Plug in your backup USB drive" 6 40
|
|
clear
|
|
echo ' '
|
|
echo $'Enter the passphrase for your LUKS encrypted backup drive:'
|
|
restore_from_usb
|
|
}
|
|
|
|
function restore_data_remote {
|
|
if [ ! $ADMIN_USER ]; then
|
|
dialog --title $"Restore data from remote server" \
|
|
--msgbox $"Unknown admin user" 6 40
|
|
return
|
|
fi
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --title $"Restore from remote server" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--inputbox $"Enter the domain name of the server from which you wish to restore" 8 60 2>$data
|
|
sel=$?
|
|
case $sel in
|
|
0)
|
|
friend_server_domain_name=$(<$data)
|
|
|
|
if [ ${#friend_server_domain_name} -lt 2 ]; then
|
|
return
|
|
fi
|
|
|
|
if [[ $friend_server_domain_name != *"."* ]]; then
|
|
dialog --title $"Remote server domain name" \
|
|
--msgbox $"Invalid domain name" 6 40
|
|
return
|
|
fi
|
|
|
|
restore_from_remote $friend_server_domain_name
|
|
;;
|
|
esac
|
|
}
|
|
|
|
function ping_enable_disable {
|
|
ping_str=$"\nDo you want to enable other systems to ping this machine?\n\nPing may be useful for diagnostic purposes, but for added security you may not want to enable it."
|
|
enable_ping="no"
|
|
dialog --title $"Enable Ping / ICMP" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--defaultno \
|
|
--yesno "$ping_str" 10 60
|
|
sel=$?
|
|
case $sel in
|
|
0) enable_ping="yes";;
|
|
255) return;;
|
|
esac
|
|
|
|
if [[ $enable_ping == "yes" ]]; then
|
|
iptables -A INPUT -p icmp --icmp-type echo-request -j ACCEPT
|
|
iptables -A OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT
|
|
echo "0" > /proc/sys/net/ipv4/icmp_echo_ignore_all
|
|
else
|
|
iptables -D INPUT -p icmp --icmp-type echo-request -j ACCEPT
|
|
iptables -D OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT
|
|
echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_all
|
|
fi
|
|
}
|
|
|
|
function logging_on_off {
|
|
logging="no"
|
|
dialog --title $"Logging" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--yesno $"\nDo you want to turn logging on?" 7 60
|
|
sel=$?
|
|
case $sel in
|
|
0) logging="yes";;
|
|
255) return;;
|
|
esac
|
|
|
|
clear
|
|
echo ''
|
|
echo $'This may take a few seconds. Please wait...'
|
|
if [[ $logging == "no" ]]; then
|
|
${PROJECT_NAME}-logging off
|
|
else
|
|
${PROJECT_NAME}-logging on
|
|
fi
|
|
}
|
|
|
|
function restore_gpg_key {
|
|
select_user
|
|
if [ ! $SELECTED_USERNAME ]; then
|
|
return
|
|
fi
|
|
restorestr=$"Restore GPG key for user"
|
|
dialog --title "$restorestr $SELECTED_USERNAME" \
|
|
--msgbox $"Plug in your USB keydrive" 6 40
|
|
clear
|
|
${PROJECT_NAME}-recoverkey -u $SELECTED_USERNAME
|
|
any_key
|
|
}
|
|
|
|
function security_settings {
|
|
${PROJECT_NAME}-sec
|
|
any_key
|
|
}
|
|
|
|
function reset_tripwire {
|
|
clear
|
|
echo $'Resetting the Tripwire...'
|
|
echo ' '
|
|
echo '
|
|
|
|
' | reset-tripwire
|
|
any_key
|
|
}
|
|
|
|
function hubzilla_renew_cert {
|
|
dialog --title $"Renew SSL certificate" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--yesno $"\nThis will renew a letsencrypt certificate. Select 'yes' to continue" 16 60
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
HUBZILLA_DOMAIN_NAME=$(cat $COMPLETION_FILE | grep "Hubzilla domain" | awk -F ':' '{print $2}')
|
|
if [ ! -d /var/www/$HUBZILLA_DOMAIN_NAME/htdocs ]; then
|
|
dialog --title $"Renew SSL certificate" \
|
|
--msgbox $"Hubzilla install directory not found" 6 40
|
|
return
|
|
fi
|
|
${PROJECT_NAME}-renew-cert -h $HUBZILLA_DOMAIN_NAME -p 'letsencrypt'
|
|
if [ ! "$?" = "0" ]; then
|
|
any_key
|
|
else
|
|
dialog --title $"Renew SSL certificate" \
|
|
--msgbox $"Hubzilla certificate has been renewed" 6 40
|
|
fi
|
|
}
|
|
|
|
function hubzilla_channel_directory_server {
|
|
if ! grep -q "Hubzilla domain" $COMPLETION_FILE; then
|
|
dialog --title $"Hubzilla channel directory server" \
|
|
--msgbox $"Hubzilla is not installed on this system" 6 40
|
|
return
|
|
fi
|
|
HUBZILLA_DOMAIN_NAME=$(cat $COMPLETION_FILE | grep "Hubzilla domain" | awk -F ':' '{print $2}')
|
|
if [ ! -d /var/www/$HUBZILLA_DOMAIN_NAME/htdocs ]; then
|
|
dialog --title $"Hubzilla channel directory server" \
|
|
--msgbox $"Hubzilla install directory not found" 6 40
|
|
return
|
|
fi
|
|
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --title $"Hubzilla channel directory server" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--inputbox $"When you click on 'channel directory' this is where Hubzilla will obtain its list from" 8 60 2>$data
|
|
sel=$?
|
|
case $sel in
|
|
0)
|
|
hubzilla_domain_server=$(<$data)
|
|
if [[ $hubzilla_domain_server != *"."* ]]; then
|
|
return
|
|
fi
|
|
if [[ $hubzilla_domain_server != "https"* ]]; then
|
|
dialog --title $"Hubzilla channel directory server" \
|
|
--msgbox $"Invalid domain - include the https://" 6 40
|
|
return
|
|
fi
|
|
./var/www/$HUBZILLA_DOMAIN_NAME/htdocs/util/config system directory_server $hubzilla_domain_server
|
|
dialog --title $"Hubzilla channel directory server" \
|
|
--msgbox $"Domain channel directory server changed to $hubzilla_domain_server" 6 40
|
|
;;
|
|
esac
|
|
}
|
|
|
|
function format_drive {
|
|
drive=
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Format a USB drive (LUKS encrypted)" \
|
|
--radiolist $"Choose a drive:" 12 70 5 \
|
|
1 $"sda (Beaglebone Black)" off \
|
|
2 $"sdb" off \
|
|
3 $"sdc" off \
|
|
4 $"sdd" off \
|
|
5 $"Back to Backup and Restore menu" on 2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
case $(cat $data) in
|
|
1) drive='sda';;
|
|
2) drive='sdb';;
|
|
3) drive='sdc';;
|
|
4) drive='sdd';;
|
|
5) return;;
|
|
esac
|
|
|
|
dialog --title $"Format USB drive" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--defaultno \
|
|
--yesno $"\nPlease confirm that you wish to format drive\n\n ${drive}\n\nAll current data on the drive will be lost, and you will be prompted to give a password used to encrypt the drive.\n\nDANGER: If you screw up here and format the wrong drive it's your own fault!" 16 60
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
|
|
clear
|
|
${PROJECT_NAME}-format $drive
|
|
any_key
|
|
}
|
|
|
|
function remove_backups {
|
|
drive=
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Remove backups from a USB drive" \
|
|
--radiolist $"Choose a drive:" 12 70 5 \
|
|
1 $"sda (Beaglebone Black)" off \
|
|
2 $"sdb" off \
|
|
3 $"sdc" off \
|
|
4 $"sdd" off \
|
|
5 $"Back to Backup and Restore menu" on 2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
case $(cat $data) in
|
|
1) drive='sda';;
|
|
2) drive='sdb';;
|
|
3) drive='sdc';;
|
|
4) drive='sdd';;
|
|
5) return;;
|
|
esac
|
|
|
|
dialog --title $"Remove backups from a USB drive" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--defaultno \
|
|
--yesno $"\nPlease confirm that you wish to remove backups from this drive\n\n ${drive}\n\nYou will not be able to recover them afterwards." 12 60
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
|
|
clear
|
|
${PROJECT_NAME}-backup-local $drive remove
|
|
any_key
|
|
}
|
|
|
|
function shut_down_system {
|
|
dialog --title $"Power off the system" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--defaultno \
|
|
--yesno $"\nPlease confirm that you wish to power off the system.\n\nWARNING: to power on again you will need to have physical access to the hardware." 10 60
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
shutdown now
|
|
}
|
|
|
|
function restart_system {
|
|
dialog --title $"Restart the system" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--defaultno \
|
|
--yesno $"\nPlease confirm that you wish to restart the system.\n\nWARNING: If you are using full disk encryption then you will need physical access to the hardware to type in the password" 10 60
|
|
sel=$?
|
|
case $sel in
|
|
1) return;;
|
|
255) return;;
|
|
esac
|
|
reboot
|
|
}
|
|
|
|
function change_system_name {
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --title $"Change the name of this system" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--inputbox $'Enter a new name for this system on your local network\n\nIt will appear as newname.local' 10 60 2>$data
|
|
sel=$?
|
|
case $sel in
|
|
0) NEW_SYSTEM_NAME=$(<$data)
|
|
if [ "$NEW_SYSTEM_NAME" ]; then
|
|
if [ ${#NEW_SYSTEM_NAME} -gt 1 ]; then
|
|
sed -i "s|host-name=.*|host-name=$NEW_SYSTEM_NAME|g" /etc/avahi/avahi-daemon.conf
|
|
systemctl restart avahi-daemon
|
|
if grep -q "host-name=$NEW_SYSTEM_NAME" /etc/avahi/avahi-daemon.conf; then
|
|
dialog --title $"New local network name" \
|
|
--msgbox $"The name of this system on your local network was changed successfully" 6 70
|
|
fi
|
|
fi
|
|
fi
|
|
;;
|
|
esac
|
|
}
|
|
|
|
function set_tls_time_source {
|
|
TLS_DATE_SOURCE=$(cat /usr/bin/updatedate | grep "TIMESOURCE='" | awk -F '=' '{print $2}' | awk -F "'" '{print $2}')
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --title $"Set the TLS date/time source" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--inputbox $"Enter a domain name to use as a TLS time source.\n\nFactors to consider when choosing a source are whether you wish that site to know that your system is 'alive' and also what might happen if an adversary were to try to mess with the date/time from that domain (i.e. how much blowback would there be)." 14 60 "$TLS_DATE_SOURCE" 2>$data
|
|
sel=$?
|
|
case $sel in
|
|
0) NEW_TLS_DATE_SOURCE=$(<$data)
|
|
if [[ $NEW_TLS_DATE_SOURCE == *"."* && $NEW_TLS_DATE_SOURCE != *'/'* ]]; then
|
|
if [[ $NEW_TLS_DATE_SOURCE != "http"* ]]; then
|
|
sed -i "s|TIMESOURCE='.*|TIMESOURCE='${NEW_TLS_DATE_SOURCE}'|g" $UPDATE_DATE_SCRIPT
|
|
else
|
|
dialog --title $"Invalid domain name" \
|
|
--msgbox $"Don't include the 'https'" 6 70
|
|
fi
|
|
else
|
|
dialog --title $"Invalid domain name" \
|
|
--msgbox $"That doesn't look like a domain name" 6 70
|
|
fi
|
|
;;
|
|
esac
|
|
}
|
|
|
|
function set_static_IP {
|
|
STATIC_IP='192.168.1.60'
|
|
STATIC_GATEWAY='192.168.1.1'
|
|
NEW_STATIC_IP=
|
|
NEW_STATIC_GATEWAY=
|
|
if grep -q 'iface eth0 inet static' /etc/network/interfaces; then
|
|
STATIC_IP=$(cat /etc/network/interfaces | grep "address " | awk -F ' ' '{print $2}' | head -n 1)
|
|
STATIC_GATEWAY=$(cat /etc/network/interfaces | grep "gateway " | awk -F ' ' '{print $2}' | head -n 1)
|
|
fi
|
|
|
|
# get the IP for the box
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --title $"Set a static local IP address" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--inputbox $"In order to forward incoming internet traffic to this system most internet routers need to know a static local IP address to send the data to.\n\n
|
|
Enter a static local IP address for this system.\n\nIt will typically be 192.168.1.x" 15 60 "$STATIC_IP" 2>$data
|
|
sel=$?
|
|
case $sel in
|
|
0) NEW_STATIC_IP=$(<$data)
|
|
if [[ "$NEW_STATIC_IP" != *"."* ]]; then
|
|
return
|
|
fi
|
|
if grep -q 'iface eth0 inet static' /etc/network/interfaces; then
|
|
if [[ "$NEW_STATIC_IP" != "$STATIC_IP" ]]; then
|
|
sed -i "s|${STATIC_IP}|${NEW_STATIC_IP}|g" /etc/network/interfaces
|
|
fi
|
|
fi
|
|
;;
|
|
esac
|
|
|
|
# get the gateway
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --title $"Set the IP address of your internet router/modem" \
|
|
--backtitle $"Freedombone Control Panel" \
|
|
--inputbox $"Set the local IP address for your internet router or ADSL modem.\n\nIt will typically be 192.168.1.1, 192.168.1.254, or similar" 12 60 "$STATIC_GATEWAY" 2>$data
|
|
sel=$?
|
|
case $sel in
|
|
0) NEW_STATIC_GATEWAY=$(<$data)
|
|
if [[ "$NEW_STATIC_GATEWAY" != *"."* ]]; then
|
|
return
|
|
fi
|
|
if grep -q 'iface eth0 inet static' /etc/network/interfaces; then
|
|
if [[ "$NEW_STATIC_GATEWAY" != "$STATIC_GATEWAY" ]]; then
|
|
sed -i "s|${STATIC_GATEWAY}|${NEW_STATIC_GATEWAY}|g" /etc/network/interfaces
|
|
fi
|
|
return
|
|
fi
|
|
;;
|
|
esac
|
|
|
|
if ! grep -q 'iface eth0 inet static' /etc/network/interfaces; then
|
|
if [ "$NEW_STATIC_GATEWAY" && "$NEW_STATIC_IP" ]; then
|
|
echo '# This file describes the network interfaces available on your system' > /etc/network/interfaces
|
|
echo '# and how to activate them. For more information, see interfaces(5).' >> /etc/network/interfaces
|
|
echo '' >> /etc/network/interfaces
|
|
echo '# The loopback network interface' >> /etc/network/interfaces
|
|
echo 'auto lo' >> /etc/network/interfaces
|
|
echo 'iface lo inet loopback' >> /etc/network/interfaces
|
|
echo '' >> /etc/network/interfaces
|
|
echo '# The primary network interface' >> /etc/network/interfaces
|
|
echo 'auto eth0' >> /etc/network/interfaces
|
|
echo 'iface eth0 inet static' >> /etc/network/interfaces
|
|
echo " address ${NEW_STATIC_IP}" >> /etc/network/interfaces
|
|
echo ' netmask 255.255.255.0' >> /etc/network/interfaces
|
|
echo " gateway ${NEW_STATIC_GATEWAY}" >> /etc/network/interfaces
|
|
echo " dns-nameservers 213.73.91.35 85.214.20.141" >> /etc/network/interfaces
|
|
echo '# Example to keep MAC address between reboots' >> /etc/network/interfaces
|
|
echo '#hwaddress ether DE:AD:BE:EF:CA:FE' >> /etc/network/interfaces
|
|
echo '' >> /etc/network/interfaces
|
|
echo '# The secondary network interface' >> /etc/network/interfaces
|
|
echo '#auto eth1' >> /etc/network/interfaces
|
|
echo '#iface eth1 inet dhcp' >> /etc/network/interfaces
|
|
echo '' >> /etc/network/interfaces
|
|
echo '# WiFi Example' >> /etc/network/interfaces
|
|
echo "#auto $WIFI_INTERFACE" >> /etc/network/interfaces
|
|
echo "#iface $WIFI_INTERFACE inet dhcp" >> /etc/network/interfaces
|
|
echo '# wpa-ssid "essid"' >> /etc/network/interfaces
|
|
echo '# wpa-psk "password"' >> /etc/network/interfaces
|
|
echo '' >> /etc/network/interfaces
|
|
echo '# Ethernet/RNDIS gadget (g_ether)' >> /etc/network/interfaces
|
|
echo '# ... or on host side, usbnet and random hwaddr' >> /etc/network/interfaces
|
|
echo '# Note on some boards, usb0 is automaticly setup with an init script' >> /etc/network/interfaces
|
|
echo '#iface usb0 inet static' >> /etc/network/interfaces
|
|
echo '# address 192.168.7.2' >> /etc/network/interfaces
|
|
echo '# netmask 255.255.255.0' >> /etc/network/interfaces
|
|
echo '# network 192.168.7.0' >> /etc/network/interfaces
|
|
echo '# gateway 192.168.7.1' >> /etc/network/interfaces
|
|
fi
|
|
fi
|
|
}
|
|
|
|
function menu_backup_restore {
|
|
while true
|
|
do
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Backup and Restore" \
|
|
--radiolist $"Choose an operation:" 18 70 11 \
|
|
1 $"Backup data to USB drive" off \
|
|
2 $"Restore GPG key from USB keydrive" off \
|
|
3 $"Restore data from USB drive" off \
|
|
4 $"Configure remote backups" off \
|
|
5 $"Restore from remote backup" off \
|
|
6 $"Backup GPG key to USB (master keydrive)" off \
|
|
7 $"Backup GPG key to USB (fragment keydrive)" off \
|
|
8 $"Format a USB drive (LUKS encrypted)" off \
|
|
9 $"Remove backups from a USB drive" off \
|
|
10 $"Back to main menu" on 2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) break;;
|
|
255) break;;
|
|
esac
|
|
case $(cat $data) in
|
|
1) backup_data;;
|
|
2) restore_gpg_key;;
|
|
3) restore_data;;
|
|
4) configure_remote_backups;;
|
|
5) restore_data_remote;;
|
|
6) create_keydrive_master;;
|
|
7) create_keydrive_fragment;;
|
|
8) format_drive;;
|
|
9) remove_backups;;
|
|
10) break;;
|
|
esac
|
|
done
|
|
}
|
|
|
|
function menu_email {
|
|
while true
|
|
do
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Email Filtering Rules" \
|
|
--radiolist $"Choose an operation:" 13 70 6 \
|
|
1 $"Add a user to a mailing list" off \
|
|
2 $"Remove a user from a mailing list" off \
|
|
3 $"Add an email rule" off \
|
|
4 $"Block/Unblock an email address" off \
|
|
5 $"Block/Unblock email with subject text" off \
|
|
6 $"Back to main menu" on 2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) break;;
|
|
255) break;;
|
|
esac
|
|
case $(cat $data) in
|
|
1) add_to_mailing_list;;
|
|
2) remove_user_from_mailing_list;;
|
|
3) email_rule;;
|
|
4) block_unblock_email;;
|
|
5) block_unblock_subject;;
|
|
6) break;;
|
|
esac
|
|
done
|
|
}
|
|
|
|
function menu_users {
|
|
while true
|
|
do
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Manage Users" \
|
|
--radiolist $"Choose an operation:" 12 70 5 \
|
|
1 $"Add a user" off \
|
|
2 $"Delete a user" off \
|
|
3 $"Change user password" off \
|
|
4 $"Change user ssh public key" off \
|
|
5 $"Back to main menu" on 2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) break;;
|
|
255) break;;
|
|
esac
|
|
case $(cat $data) in
|
|
1) add_user;;
|
|
2) delete_user;;
|
|
3) change_password;;
|
|
4) change_ssh_public_key;;
|
|
5) break;;
|
|
esac
|
|
done
|
|
}
|
|
|
|
function menu_hubzilla {
|
|
while true
|
|
do
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Hubzilla" \
|
|
--radiolist $"Choose an operation:" 13 70 4 \
|
|
1 $"Set channel directory server" off \
|
|
2 $"Renew SSL certificate" off \
|
|
3 $"Back to main menu" on 2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) break;;
|
|
255) break;;
|
|
esac
|
|
case $(cat $data) in
|
|
1) hubzilla_channel_directory_server;;
|
|
2) hubzilla_renew_cert;;
|
|
3) break;;
|
|
esac
|
|
done
|
|
}
|
|
|
|
function menu_media {
|
|
while true
|
|
do
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Media Menu" \
|
|
--radiolist $"Choose an operation:" 13 70 3 \
|
|
1 $"Attach a drive containing playable media" off \
|
|
2 $"Remove a drive containing playable media" off \
|
|
3 $"Exit" on 2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) break;;
|
|
255) break;;
|
|
esac
|
|
case $(cat $data) in
|
|
1) remove-music
|
|
attach-music;;
|
|
2) remove-music;;
|
|
3) break;;
|
|
esac
|
|
done
|
|
}
|
|
|
|
function menu_irc {
|
|
while true
|
|
do
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"IRC Menu" \
|
|
--radiolist $"Choose an operation:" 14 70 4 \
|
|
1 $"Set a password for all IRC users" off \
|
|
2 $"Access via the onion address" off \
|
|
3 $"Exit" on 2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) break;;
|
|
255) break;;
|
|
esac
|
|
case $(cat $data) in
|
|
1) irc_set_global_password;;
|
|
2) irc_via_onion;;
|
|
3) break;;
|
|
esac
|
|
done
|
|
}
|
|
|
|
function menu_top_level {
|
|
while true
|
|
do
|
|
data=$(tempfile 2>/dev/null)
|
|
trap "rm -f $data" 0 1 2 5 15
|
|
dialog --backtitle $"Freedombone Control Panel" \
|
|
--title $"Control Panel" \
|
|
--radiolist $"Choose an operation:" 26 70 19 \
|
|
1 $"About this system" off \
|
|
2 $"Backup and Restore" off \
|
|
3 $"Reset Tripwire" off \
|
|
4 $"Logging on/off" off \
|
|
5 $"Ping enable/disable" off \
|
|
6 $"Manage Users" off \
|
|
7 $"Email Filtering Rules" off \
|
|
8 $"Security Settings" off \
|
|
9 $"Set the main repository (repo mirrors)" off \
|
|
10 $"Hubzilla" off \
|
|
11 $"Media menu" off \
|
|
12 $"IRC menu" off \
|
|
13 $"Change the name of this system" off \
|
|
14 $"Set the TLS date/time source" off \
|
|
15 $"Set a static local IP address" off \
|
|
16 $"Check for updates" off \
|
|
17 $"Power off the system" off \
|
|
18 $"Restart the system" off \
|
|
19 $"Exit" on 2> $data
|
|
sel=$?
|
|
case $sel in
|
|
1) exit 1;;
|
|
255) exit 1;;
|
|
esac
|
|
case $(cat $data) in
|
|
1) show_about;;
|
|
2) menu_backup_restore;;
|
|
3) reset_tripwire;;
|
|
4) logging_on_off;;
|
|
5) ping_enable_disable;;
|
|
6) menu_users;;
|
|
7) menu_email;;
|
|
8) security_settings;;
|
|
9) set_main_repo;;
|
|
10) menu_hubzilla;;
|
|
11) menu_media;;
|
|
12) menu_irc;;
|
|
13) change_system_name;;
|
|
14) set_tls_time_source;;
|
|
15) set_static_IP;;
|
|
16) check_for_updates;;
|
|
17) shut_down_system;;
|
|
18) restart_system;;
|
|
19) break;;
|
|
esac
|
|
done
|
|
}
|
|
|
|
if [ ! -f $COMPLETION_FILE ]; then
|
|
echo $'This command should only be run on an installed Freedombone system'
|
|
exit 1
|
|
fi
|
|
|
|
ADMIN_USER=$(cat $COMPLETION_FILE | grep "Admin user" | awk -F ':' '{print $2}')
|
|
read_repo_servers
|
|
menu_top_level
|
|
clear
|
|
cat /etc/motd
|
|
exit 0
|