676 lines
28 KiB
Bash
Executable File
676 lines
28 KiB
Bash
Executable File
#!/bin/bash
|
|
#
|
|
# .---. . .
|
|
# | | |
|
|
# |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
|
|
# | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
|
|
# ' ' --' --' -' - -' ' ' -' -' -' ' - --'
|
|
#
|
|
# Freedom in the Cloud
|
|
#
|
|
# cryptpad application
|
|
#
|
|
# License
|
|
# =======
|
|
#
|
|
# Copyright (C) 2017 Bob Mottram <bob@freedombone.net>
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU Affero General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU Affero General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU Affero General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
VARIANTS='full full-vim writer'
|
|
|
|
IN_DEFAULT_INSTALL=0
|
|
SHOW_ON_ABOUT=1
|
|
SHOW_ICANN_ADDRESS_ON_ABOUT=0
|
|
|
|
CRYPTPAD_ONION_PORT=8119
|
|
CRYPTPAD_PORT=9003
|
|
CRYPTPAD_PORT2=9005
|
|
CRYPTPAD_REPO="https://github.com/xwiki-labs/cryptpad"
|
|
CRYPTPAD_COMMIT='cfc9ce33d6c7034a13cb0e6d606de6fba38697e0'
|
|
CRYPTPAD_DIR=/etc/cryptpad
|
|
|
|
cryptpad_variables=(ONION_ONLY)
|
|
|
|
function logging_on_cryptpad {
|
|
echo -n ''
|
|
}
|
|
|
|
function logging_off_cryptpad {
|
|
echo -n ''
|
|
}
|
|
|
|
function remove_user_cryptpad {
|
|
remove_username="$1"
|
|
}
|
|
|
|
function add_user_cryptpad {
|
|
new_username="$1"
|
|
new_user_password="$2"
|
|
echo '0'
|
|
}
|
|
|
|
function install_interactive_cryptpad {
|
|
echo -n ''
|
|
APP_INSTALLED=1
|
|
}
|
|
|
|
function change_password_cryptpad {
|
|
curr_username="$1"
|
|
new_user_password="$2"
|
|
}
|
|
|
|
function reconfigure_cryptpad {
|
|
if [ -d $CRYPTPAD_DIR/datastore ]; then
|
|
rm -rf $CRYPTPAD_DIR/datastore
|
|
fi
|
|
}
|
|
|
|
function cryptpad_generate_api_config {
|
|
if [ ! -d $CRYPTPAD_DIR/customize/api ]; then
|
|
mkdir -p $CRYPTPAD_DIR/customize/api
|
|
fi
|
|
wget 127.0.0.1:$CRYPTPAD_PORT/api/config -O $CRYPTPAD_DIR/customize/api/config
|
|
if [ ! -f $CRYPTPAD_DIR/customize/api/config ]; then
|
|
echo $'Unable to wget api/config'
|
|
exit 89252
|
|
fi
|
|
chown -R cryptpad:cryptpad $CRYPTPAD_DIR
|
|
}
|
|
|
|
function upgrade_cryptpad {
|
|
CURR_CRYPTPAD_COMMIT=$(get_completion_param "cryptpad commit")
|
|
if [[ "$CURR_CRYPTPAD_COMMIT" == "$CRYPTPAD_COMMIT" ]]; then
|
|
return
|
|
fi
|
|
|
|
systemctl stop cryptpad
|
|
|
|
# update to the next commit
|
|
function_check set_repo_commit
|
|
set_repo_commit $CRYPTPAD_DIR "cryptpad commit" "$CRYPTPAD_COMMIT" $CRYPTPAD_REPO
|
|
|
|
cd $CRYPTPAD_DIR
|
|
cryptpad_create_config
|
|
npm upgrade
|
|
npm install
|
|
su -c 'echo "2" | bower update' - cryptpad
|
|
su -c 'bower install --config.interactive=false' - cryptpad
|
|
cryptpad_generate_api_config
|
|
chown -R cryptpad:cryptpad $CRYPTPAD_DIR
|
|
|
|
systemctl start cryptpad
|
|
}
|
|
|
|
function backup_local_cryptpad {
|
|
source_directory=$CRYPTPAD_DIR/datastore
|
|
if [ -d $source_directory ]; then
|
|
systemctl stop cryptpad
|
|
|
|
dest_directory=cryptpad
|
|
function_check suspend_site
|
|
suspend_site cryptpad
|
|
|
|
function_check backup_directory_to_usb
|
|
backup_directory_to_usb $source_directory $dest_directory
|
|
|
|
function_check restart_site
|
|
restart_site
|
|
|
|
systemctl start cryptpad
|
|
fi
|
|
}
|
|
|
|
function restore_local_cryptpad {
|
|
if [ -d $CRYPTPAD_DIR ]; then
|
|
systemctl stop cryptpad
|
|
temp_restore_dir=/root/tempcryptpad
|
|
function_check restore_directory_from_usb
|
|
restore_directory_from_usb $temp_restore_dir cryptpad
|
|
if [ ! -d $temp_restore_dir$CRYPTPAD_DIR/datastore ]; then
|
|
if [ -d $temp_restore_dir ]; then
|
|
cp -r $temp_restore_dir/* $CRYPTPAD_DIR/datastore/
|
|
else
|
|
systemctl start cryptpad
|
|
echo 'Failed to restore cryptpad'
|
|
rm -rf $temp_restore_dir
|
|
exit 8736529
|
|
fi
|
|
else
|
|
cp -r $temp_restore_dir$CRYPTPAD_DIR/datastore/* $CRYPTPAD_DIR/datastore/
|
|
fi
|
|
rm -rf $temp_restore_dir
|
|
systemctl start cryptpad
|
|
fi
|
|
}
|
|
|
|
function backup_remote_cryptpad {
|
|
if grep -q "cryptpad domain" $COMPLETION_FILE; then
|
|
temp_backup_dir=$CRYPTPAD_DIR/datastore
|
|
if [ -d $temp_backup_dir ]; then
|
|
systemctl stop cryptpad
|
|
|
|
function_check suspend_site
|
|
suspend_site cryptpad
|
|
|
|
echo $"Backing up Cryptpad installation"
|
|
|
|
function_check backup_directory_to_friend
|
|
backup_directory_to_friend $temp_backup_dir cryptpad
|
|
|
|
function_check restart_site
|
|
restart_site
|
|
|
|
systemctl start cryptpad
|
|
else
|
|
echo $"cryptpad domain specified but not found in ${temp_backup_dir}"
|
|
fi
|
|
fi
|
|
}
|
|
|
|
function restore_remote_cryptpad {
|
|
if [ -d $CRYPTPAD_DIR ]; then
|
|
systemctl stop cryptpad
|
|
temp_restore_dir=/root/tempcryptpad
|
|
function_check restore_directory_from_usb
|
|
restore_directory_from_friend $temp_restore_dir cryptpad
|
|
|
|
if [ ! -d $temp_restore_dir$CRYPTPAD_DIR/datastore ]; then
|
|
if [ -d $temp_restore_dir ]; then
|
|
cp -r $temp_restore_dir/* $CRYPTPAD_DIR/datastore/
|
|
else
|
|
systemctl start cryptpad
|
|
echo 'Failed to restore cryptpad'
|
|
rm -rf $temp_restore_dir
|
|
return
|
|
fi
|
|
else
|
|
cp -r $temp_restore_dir$CRYPTPAD_DIR/datastore/* $CRYPTPAD_DIR/datastore/
|
|
fi
|
|
rm -rf $temp_restore_dir
|
|
systemctl start cryptpad
|
|
fi
|
|
}
|
|
|
|
function remove_cryptpad {
|
|
systemctl stop cryptpad
|
|
systemctl disable cryptpad
|
|
if [ -f /etc/systemd/system/cryptpad.service ]; then
|
|
rm /etc/systemd/system/cryptpad.service
|
|
fi
|
|
systemctl daemon-reload
|
|
|
|
function_check remove_nodejs
|
|
remove_nodejs cryptpad
|
|
|
|
nginx_dissite cryptpad
|
|
|
|
if [ -d $CRYPTPAD_DIR ]; then
|
|
rm -rf $CRYPTPAD_DIR
|
|
fi
|
|
if [ -f /etc/nginx/sites-available/cryptpad ]; then
|
|
rm /etc/nginx/sites-available/cryptpad
|
|
fi
|
|
function_check remove_onion_service
|
|
remove_onion_service cryptpad ${CRYPTPAD_ONION_PORT}
|
|
remove_app cryptpad
|
|
remove_completion_param install_cryptpad
|
|
sed -i '/cryptpad/d' $COMPLETION_FILE
|
|
|
|
userdel -r cryptpad
|
|
}
|
|
|
|
function cryptpad_create_config {
|
|
cryptpad_install_type=$1
|
|
|
|
cryptpad_prefix=
|
|
if [[ "$cryptpad_install_type" == "mesh" ]]; then
|
|
cryptpad_prefix=$rootdir
|
|
fi
|
|
|
|
echo '/*@flow*/' > $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo '/*' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' globals module' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo '*/' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo "var domain = ' http://localhost:${CRYPTPAD_PORT}/';" >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo 'module.exports = {' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " httpAddress: '::'," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' httpHeaders: {' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' "X-XSS-Protection": "1; mode=block",' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' "X-Content-Type-Options": "nosniff",' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' "Access-Control-Allow-Origin": "*"' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' },' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo '' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' contentSecurity: [' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " \"default-src 'none'\"," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " \"style-src 'unsafe-inline' 'self' \" + domain," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " \"script-src 'self'\" + domain," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " \"font-src 'self' data:\" + domain," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo '' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' "child-src blob: *",' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' "frame-src blob: *",' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' "media-src * blob:",' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo '' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " \"connect-src 'self' ws: wss: blob:\" + domain," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo '' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " \"img-src 'self' data: blob:\" + domain," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo '' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' "frame-ancestors *",' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " ].join('; ')," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo '' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' padContentSecurity: [' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " \"default-src 'none'\"," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " \"style-src 'unsafe-inline' 'self'\" + domain," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " \"script-src 'self' 'unsafe-eval' 'unsafe-inline'\" + domain," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " \"font-src 'self'\" + domain," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo '' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' "child-src *",' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' "frame-src *",' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo '' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " \"connect-src 'self' ws: wss:\" + domain," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo '' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' "img-src * blob:",' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " ].join('; ')," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo '' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " httpPort: ${CRYPTPAD_PORT}," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo '' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' // This is for allowing the cross-domain iframe to function when developing' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " httpSafePort: ${CRYPTPAD_PORT2}," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo '' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " websocketPath: '/cryptpad_websocket'," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo '' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' logToStdout: false,' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo '' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' verbose: false,' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo '' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' mainPages: [' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " 'index'" >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' ],' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo '' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' removeDonateButton: true,' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' allowSubscriptions: false,' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
if [[ "$cryptpad_install_type" == "mesh" ]]; then
|
|
echo " myDomain: 'http://P${PEER_ID}.local'," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
else
|
|
CRYPTPAD_ONION_HOSTNAME=$(cat /var/lib/tor/hidden_service_cryptpad/hostname)
|
|
echo " myDomain: 'http://${CRYPTPAD_ONION_HOSTNAME}'," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
fi
|
|
echo ' defaultStorageLimit: 50 * 1024 * 1024,' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
|
|
echo '' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' customLimits: {' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' },' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo '' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' adminEmail: false,' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo '' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " storage: './storage/file'," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo '' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " filePath: './datastore/'," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " pinPath: './pins'," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " blobPath: './blob'," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " blobStagingPath: './blobstage'," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' channelExpirationMs: 30000,' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' openFileLimit: 1024,' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo " rpc: './rpc.js'," >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' suppressRPCErrors: false,' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' enableUploads: true,' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' //restrictUploads: false,' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' maxUploadSize: 20 * 1024 * 1024,' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' //logFeedback: true,' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo ' //logRPC: true,' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
echo '};' >> $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
|
|
if [[ "$cryptpad_install_type" != "mesh" ]]; then
|
|
chown cryptpad:cryptpad $cryptpad_prefix$CRYPTPAD_DIR/config.js
|
|
else
|
|
chroot "$rootdir" chown cryptpad:cryptpad $CRYPTPAD_DIR/config.js
|
|
fi
|
|
}
|
|
|
|
function mesh_install_cryptpad {
|
|
if [[ $VARIANT != "meshclient" && $VARIANT != "meshusb" ]]; then
|
|
return
|
|
fi
|
|
|
|
if [ ! -d $rootdir/var/www/cryptpad ]; then
|
|
mkdir $rootdir/var/www/cryptpad
|
|
fi
|
|
if [ -d $rootdir$CRYPTPAD_DIR ]; then
|
|
rm -rf $rootdir$CRYPTPAD_DIR
|
|
fi
|
|
|
|
git_clone $CRYPTPAD_REPO $rootdir$CRYPTPAD_DIR
|
|
|
|
if [ ! -d $rootdir$CRYPTPAD_DIR ]; then
|
|
echo $'Unable to clone cryptpad repo'
|
|
exit 783251
|
|
fi
|
|
|
|
# an unprivileged user to run as
|
|
chroot "$rootdir" useradd -d $CRYPTPAD_DIR/ cryptpad
|
|
|
|
cd $rootdir$CRYPTPAD_DIR
|
|
git checkout $CRYPTPAD_COMMIT -b $CRYPTPAD_COMMIT
|
|
|
|
chroot "$rootdir" chown -R cryptpad:cryptpad $CRYPTPAD_DIR
|
|
|
|
cryptpad_nginx_site=$rootdir/etc/nginx/sites-available/cryptpad
|
|
echo 'server {' > $cryptpad_nginx_site
|
|
echo " listen 80 default_server;" >> $cryptpad_nginx_site
|
|
echo " server_name P${PEER_ID}.local;" >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' # Logs' >> $cryptpad_nginx_site
|
|
echo ' access_log /dev/null;' >> $cryptpad_nginx_site
|
|
echo ' error_log /dev/null;' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' # Root' >> $cryptpad_nginx_site
|
|
echo " root $CRYPTPAD_DIR;" >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' index index.html;' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' add_header X-XSS-Protection "1; mode=block";' >> $cryptpad_nginx_site
|
|
echo ' add_header X-Content-Type-Options nosniff;' >> $cryptpad_nginx_site
|
|
echo ' add_header X-Frame-Options SAMEORIGIN;' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' if ($uri = /pad/inner.html) {' >> $cryptpad_nginx_site
|
|
echo " set \$scriptSrc \"'self' 'unsafe-eval' 'unsafe-inline'\";" >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' location = /cryptpad_websocket {' >> $cryptpad_nginx_site
|
|
echo " proxy_pass http://localhost:$CRYPTPAD_PORT;" >> $cryptpad_nginx_site
|
|
echo ' proxy_set_header X-Real-IP $remote_addr;' >> $cryptpad_nginx_site
|
|
echo ' proxy_set_header Host $host;' >> $cryptpad_nginx_site
|
|
echo ' proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' # WebSocket support (nginx 1.4)' >> $cryptpad_nginx_site
|
|
echo ' proxy_http_version 1.1;' >> $cryptpad_nginx_site
|
|
echo ' proxy_set_header Upgrade $http_upgrade;' >> $cryptpad_nginx_site
|
|
echo ' proxy_set_header Connection upgrade;' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
|
|
echo ' location ^~ /customize.dist/ {' >> $cryptpad_nginx_site
|
|
echo ' # This is needed in order to prevent infinite recursion between /customize/ and the root' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo ' location ^~ /customize/ {' >> $cryptpad_nginx_site
|
|
echo ' rewrite ^/customize/(.*)$ $1 break;' >> $cryptpad_nginx_site
|
|
echo ' try_files /customize/$uri /customize.dist/$uri;' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo ' location = /api/config {' >> $cryptpad_nginx_site
|
|
echo ' default_type text/javascript;' >> $cryptpad_nginx_site
|
|
echo ' rewrite ^.*$ /customize/api/config break;' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' location ^~ /blob/ {' >> $cryptpad_nginx_site
|
|
echo ' try_files $uri =404;' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' location ^~ /register/ {' >> $cryptpad_nginx_site
|
|
echo ' try_files $uri =404;' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' location ^~ /login/ {' >> $cryptpad_nginx_site
|
|
echo ' try_files $uri =404;' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' location ^~ /about.html {' >> $cryptpad_nginx_site
|
|
echo ' try_files $uri =404;' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' location ^~ /contact.html {' >> $cryptpad_nginx_site
|
|
echo ' try_files $uri =404;' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' location ^~ /what-is-cryptpad.html {' >> $cryptpad_nginx_site
|
|
echo ' try_files $uri =404;' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' location ~ ^/(register|login|settings|user|pad|drive|poll|slide|code|whiteboard|file|media)$ {' >> $cryptpad_nginx_site
|
|
echo ' rewrite ^(.*)$ $1/ redirect;' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' try_files /www/$uri /www/$uri/index.html /customize/$uri;' >> $cryptpad_nginx_site
|
|
echo '}' >> $cryptpad_nginx_site
|
|
|
|
cd $rootdir$CRYPTPAD_DIR
|
|
|
|
get_npm_arch
|
|
|
|
cat <<EOF > $rootdir/usr/bin/install_cryptpad
|
|
#!/bin/bash
|
|
cd $CRYPTPAD_DIR
|
|
npm install --arch=$NPM_ARCH --build-from-source
|
|
npm install --arch=$NPM_ARCH -g bower@1.8.0
|
|
chown -R cryptpad:cryptpad $CRYPTPAD_DIR
|
|
su -c 'bower install' - cryptpad
|
|
cp config.example.js config.js
|
|
EOF
|
|
chmod +x $rootdir/usr/bin/install_cryptpad
|
|
chroot "$rootdir" /usr/bin/install_cryptpad
|
|
|
|
if [ ! -f $rootdir$CRYPTPAD_DIR/config.js ]; then
|
|
echo $'Cryptpad config file not found'
|
|
exit 628252
|
|
fi
|
|
|
|
rm $rootdir/usr/bin/install_cryptpad
|
|
|
|
cryptpad_create_config mesh
|
|
|
|
chroot "$rootdir" chown -R cryptpad:cryptpad $CRYPTPAD_DIR
|
|
|
|
# daemon
|
|
echo '[Unit]' > $rootdir/etc/systemd/system/cryptpad.service
|
|
echo 'Description=Cryptpad' >> $rootdir/etc/systemd/system/cryptpad.service
|
|
echo 'After=syslog.target' >> $rootdir/etc/systemd/system/cryptpad.service
|
|
echo 'After=network.target' >> $rootdir/etc/systemd/system/cryptpad.service
|
|
echo '' >> $rootdir/etc/systemd/system/cryptpad.service
|
|
echo '[Service]' >> $rootdir/etc/systemd/system/cryptpad.service
|
|
echo 'User=cryptpad' >> $rootdir/etc/systemd/system/cryptpad.service
|
|
echo 'Group=cryptpad' >> $rootdir/etc/systemd/system/cryptpad.service
|
|
echo "WorkingDirectory=$CRYPTPAD_DIR" >> $rootdir/etc/systemd/system/cryptpad.service
|
|
echo "ExecStart=/usr/local/bin/node $CRYPTPAD_DIR/server.js" >> $rootdir/etc/systemd/system/cryptpad.service
|
|
echo 'Environment=PATH=/usr/bin:/usr/local/bin' >> $rootdir/etc/systemd/system/cryptpad.service
|
|
echo 'Environment=NODE_ENV=production' >> $rootdir/etc/systemd/system/cryptpad.service
|
|
echo 'Restart=on-failure' >> $rootdir/etc/systemd/system/cryptpad.service
|
|
echo '' >> $rootdir/etc/systemd/system/cryptpad.service
|
|
echo '[Install]' >> $rootdir/etc/systemd/system/cryptpad.service
|
|
echo 'WantedBy=multi-user.target' >> $rootdir/etc/systemd/system/cryptpad.service
|
|
chroot "$rootdir" systemctl enable cryptpad.service
|
|
}
|
|
|
|
function install_cryptpad_main {
|
|
if [[ $(app_is_installed cryptpad_main) == "1" ]]; then
|
|
return
|
|
fi
|
|
|
|
if [ ! -d /var/www/cryptpad ]; then
|
|
mkdir /var/www/cryptpad
|
|
fi
|
|
if [ -d $CRYPTPAD_DIR ]; then
|
|
rm -rf $CRYPTPAD_DIR
|
|
fi
|
|
|
|
if [ -d /repos/cryptpad ]; then
|
|
mkdir $CRYPTPAD_DIR
|
|
cp -r -p /repos/cryptpad/. $CRYPTPAD_DIR
|
|
cd $CRYPTPAD_DIR
|
|
git pull
|
|
else
|
|
function_check git_clone
|
|
git_clone $CRYPTPAD_REPO $CRYPTPAD_DIR
|
|
fi
|
|
|
|
if [ ! -d $CRYPTPAD_DIR ]; then
|
|
echo $'Unable to clone cryptpad repo'
|
|
exit 783251
|
|
fi
|
|
|
|
# an unprivileged user to run as
|
|
useradd -d $CRYPTPAD_DIR/ cryptpad
|
|
|
|
cd $CRYPTPAD_DIR
|
|
git checkout $CRYPTPAD_COMMIT -b $CRYPTPAD_COMMIT
|
|
set_completion_param "cryptpad commit" "$CRYPTPAD_COMMIT"
|
|
|
|
chown -R cryptpad:cryptpad $CRYPTPAD_DIR
|
|
|
|
CRYPTPAD_ONION_HOSTNAME=$(add_onion_service cryptpad 80 ${CRYPTPAD_ONION_PORT})
|
|
|
|
cryptpad_nginx_site=/etc/nginx/sites-available/cryptpad
|
|
echo 'server {' > $cryptpad_nginx_site
|
|
echo " listen 127.0.0.1:$CRYPTPAD_ONION_PORT default_server;" >> $cryptpad_nginx_site
|
|
echo " server_name $CRYPTPAD_ONION_HOSTNAME;" >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' # Logs' >> $cryptpad_nginx_site
|
|
echo ' access_log /dev/null;' >> $cryptpad_nginx_site
|
|
echo ' error_log /dev/null;' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' # Root' >> $cryptpad_nginx_site
|
|
echo " root $CRYPTPAD_DIR;" >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' index index.html;' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' if ($args ~ ver=) {' >> $cryptpad_nginx_site
|
|
echo ' set $cacheControl max-age=31536000;' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo ' add_header Cache-Control $cacheControl;' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' add_header X-XSS-Protection "1; mode=block";' >> $cryptpad_nginx_site
|
|
echo ' add_header X-Content-Type-Options nosniff;' >> $cryptpad_nginx_site
|
|
echo ' add_header X-Frame-Options SAMEORIGIN;' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' if ($uri = /pad/inner.html) {' >> $cryptpad_nginx_site
|
|
echo " set \$scriptSrc \"'self' 'unsafe-eval' 'unsafe-inline'\";" >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' location = /cryptpad_websocket {' >> $cryptpad_nginx_site
|
|
echo " proxy_pass http://localhost:$CRYPTPAD_PORT;" >> $cryptpad_nginx_site
|
|
echo ' proxy_set_header X-Real-IP $remote_addr;' >> $cryptpad_nginx_site
|
|
echo ' proxy_set_header Host $host;' >> $cryptpad_nginx_site
|
|
echo ' proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' # WebSocket support (nginx 1.4)' >> $cryptpad_nginx_site
|
|
echo ' proxy_http_version 1.1;' >> $cryptpad_nginx_site
|
|
echo ' proxy_set_header Upgrade $http_upgrade;' >> $cryptpad_nginx_site
|
|
echo ' proxy_set_header Connection upgrade;' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
|
|
echo ' location ^~ /customize.dist/ {' >> $cryptpad_nginx_site
|
|
echo ' # This is needed in order to prevent infinite recursion between /customize/ and the root' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo ' location ^~ /customize/ {' >> $cryptpad_nginx_site
|
|
echo ' rewrite ^/customize/(.*)$ $1 break;' >> $cryptpad_nginx_site
|
|
echo ' try_files /customize/$uri /customize.dist/$uri;' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo ' location = /api/config {' >> $cryptpad_nginx_site
|
|
echo ' default_type text/javascript;' >> $cryptpad_nginx_site
|
|
echo ' rewrite ^.*$ /customize/api/config break;' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' location ^~ /blob/ {' >> $cryptpad_nginx_site
|
|
echo ' try_files $uri =404;' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' location ^~ /register/ {' >> $cryptpad_nginx_site
|
|
echo ' try_files $uri =404;' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' location ^~ /login/ {' >> $cryptpad_nginx_site
|
|
echo ' try_files $uri =404;' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' location ^~ /about.html {' >> $cryptpad_nginx_site
|
|
echo ' try_files $uri =404;' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' location ^~ /contact.html {' >> $cryptpad_nginx_site
|
|
echo ' try_files $uri =404;' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' location ^~ /what-is-cryptpad.html {' >> $cryptpad_nginx_site
|
|
echo ' try_files $uri =404;' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' location ~ ^/(register|login|settings|user|pad|drive|poll|slide|code|whiteboard|file|media)$ {' >> $cryptpad_nginx_site
|
|
echo ' rewrite ^(.*)$ $1/ redirect;' >> $cryptpad_nginx_site
|
|
echo ' }' >> $cryptpad_nginx_site
|
|
echo '' >> $cryptpad_nginx_site
|
|
echo ' try_files /www/$uri /www/$uri/index.html /customize/$uri;' >> $cryptpad_nginx_site
|
|
echo '}' >> $cryptpad_nginx_site
|
|
|
|
function_check nginx_ensite
|
|
nginx_ensite cryptpad
|
|
|
|
install_completed cryptpad_main
|
|
}
|
|
|
|
function install_cryptpad {
|
|
function_check install_nodejs
|
|
install_nodejs cryptpad
|
|
|
|
install_cryptpad_main
|
|
|
|
cd $CRYPTPAD_DIR
|
|
|
|
npm install
|
|
npm install -g bower@1.8.0
|
|
chown -R cryptpad:cryptpad $CRYPTPAD_DIR
|
|
su -c 'bower install' - cryptpad
|
|
cp config.example.js config.js
|
|
if [ ! -f config.js ]; then
|
|
echo $'Cryptpad config file not found'
|
|
exit 628252
|
|
fi
|
|
|
|
cryptpad_create_config
|
|
chown -R cryptpad:cryptpad $CRYPTPAD_DIR
|
|
|
|
# daemon
|
|
echo '[Unit]' > /etc/systemd/system/cryptpad.service
|
|
echo 'Description=Cryptpad' >> /etc/systemd/system/cryptpad.service
|
|
echo 'After=syslog.target' >> /etc/systemd/system/cryptpad.service
|
|
echo 'After=network.target' >> /etc/systemd/system/cryptpad.service
|
|
echo '' >> /etc/systemd/system/cryptpad.service
|
|
echo '[Service]' >> /etc/systemd/system/cryptpad.service
|
|
echo 'User=cryptpad' >> /etc/systemd/system/cryptpad.service
|
|
echo 'Group=cryptpad' >> /etc/systemd/system/cryptpad.service
|
|
echo "WorkingDirectory=$CRYPTPAD_DIR" >> /etc/systemd/system/cryptpad.service
|
|
echo "ExecStart=/usr/local/bin/node $CRYPTPAD_DIR/server.js" >> /etc/systemd/system/cryptpad.service
|
|
echo 'Environment=PATH=/usr/bin:/usr/local/bin' >> /etc/systemd/system/cryptpad.service
|
|
echo 'Environment=NODE_ENV=production' >> /etc/systemd/system/cryptpad.service
|
|
echo 'Restart=on-failure' >> /etc/systemd/system/cryptpad.service
|
|
echo '' >> /etc/systemd/system/cryptpad.service
|
|
echo '[Install]' >> /etc/systemd/system/cryptpad.service
|
|
echo 'WantedBy=multi-user.target' >> /etc/systemd/system/cryptpad.service
|
|
systemctl enable cryptpad.service
|
|
systemctl daemon-reload
|
|
systemctl start cryptpad.service
|
|
|
|
sleep 6
|
|
|
|
cryptpad_generate_api_config
|
|
|
|
# install again
|
|
cd $CRYPTPAD_DIR
|
|
su -c 'bower install' - cryptpad
|
|
|
|
systemctl restart nginx
|
|
|
|
APP_INSTALLED=1
|
|
}
|
|
|
|
# NOTE: deliberately there is no "exit 0"
|