2263 строки
72 KiB
Bash
2263 строки
72 KiB
Bash
#!/bin/bash
|
|
|
|
# T&M Hansson IT AB © - 2023, https://www.hanssonit.se/
|
|
# GNU General Public License v3.0
|
|
# https://github.com/nextcloud/vm/blob/master/LICENSE
|
|
|
|
# shellcheck disable=SC2034
|
|
true
|
|
# see https://github.com/koalaman/shellcheck/wiki/Directive
|
|
|
|
## VARIABLES
|
|
|
|
# Dirs
|
|
SCRIPTS=/var/scripts
|
|
HTML=/var/www
|
|
NCPATH="$HTML"/nextcloud
|
|
POOLNAME=ncdata
|
|
NCDATA=/mnt/"$POOLNAME"
|
|
SNAPDIR=/var/snap/spreedme
|
|
GPGDIR=/tmp/gpg
|
|
SHA256_DIR=/tmp/sha256
|
|
BACKUP=/mnt/NCBACKUP
|
|
NC_APPS_PATH=$NCPATH/apps
|
|
VMLOGS=/var/log/nextcloud
|
|
|
|
# Helper function for generating random passwords
|
|
gen_passwd() {
|
|
local length=$1
|
|
local charset="$2"
|
|
local password=""
|
|
while [ ${#password} -lt "$length" ]
|
|
do
|
|
password=$(echo "$password""$(head -c 100 /dev/urandom | LC_ALL=C tr -dc "$charset")" | fold -w "$length" | head -n 1)
|
|
done
|
|
echo "$password"
|
|
}
|
|
|
|
# Ubuntu OS
|
|
DISTRO=$(lsb_release -sr)
|
|
CODENAME=$(lsb_release -sc)
|
|
KEYBOARD_LAYOUT=$(localectl status | grep "Layout" | awk '{print $3}')
|
|
# Hypervisor
|
|
### TODO ### HYPERVISOR=$(dmesg --notime | grep -i hypervisor | cut -d ':' -f2 | head -1 | tr -d ' ')
|
|
SYSVENDOR=$(cat /sys/devices/virtual/dmi/id/sys_vendor)
|
|
# Network
|
|
IFACE=$(ip r | grep "default via" | awk '{print $5}')
|
|
IFACE2=$(ip -o link show | awk '{print $2,$9}' | grep 'UP' | cut -d ':' -f 1)
|
|
REPO=$(grep "^deb " /etc/apt/sources.list | grep http | awk '{print $2}' | head -1)
|
|
ADDRESS=$(hostname -I | cut -d ' ' -f 1)
|
|
WANIP4=$(curl -s -k -m 5 -4 https://api64.ipify.org)
|
|
INTERFACES="/etc/netplan/nextcloud.yaml"
|
|
GATEWAY=$(ip route | grep default | awk '{print $3}')
|
|
# Internet DNS required when a check needs to be made to a server outside the home/SME
|
|
INTERNET_DNS="9.9.9.9"
|
|
# Default Quad9 DNS servers, overwritten by the systemd global DNS defined servers, if set
|
|
DNS1="9.9.9.9"
|
|
DNS2="149.112.112.112"
|
|
NONO_PORTS=(22 25 53 80 443 1024 3012 3306 5178 5179 5432 7867 7983 8983 10000 8081 8443 9443 9000 9980 9090 9200 9600 1234)
|
|
# 9000 9980 9090 9200 9600 1234 are local docker ports, don't remember if they are needed here or not.
|
|
use_global_systemd_dns() {
|
|
if [ -f "/etc/systemd/resolved.conf" ]
|
|
then
|
|
local resolvedDns1
|
|
resolvedDns1=$(grep -m 1 -E "^DNS=.+" /etc/systemd/resolved.conf | sed s/^DNS=// | awk '{print $1}')
|
|
if [ -n "$resolvedDns1" ]
|
|
then
|
|
DNS1="$resolvedDns1"
|
|
|
|
local resolvedDns2
|
|
resolvedDns2=$(grep -m 1 -E "^DNS=.+" /etc/systemd/resolved.conf | sed s/^DNS=// | awk '{print $2}')
|
|
if [ -n "$resolvedDns2" ]
|
|
then
|
|
DNS2="$resolvedDns2"
|
|
else
|
|
DNS2=
|
|
fi
|
|
fi
|
|
fi
|
|
}
|
|
use_global_systemd_dns
|
|
|
|
# Whiptails
|
|
TITLE="Nextcloud VM - $(date +%Y)"
|
|
[ -n "$SCRIPT_NAME" ] && TITLE+=" - $SCRIPT_NAME"
|
|
CHECKLIST_GUIDE="Navigate with the [ARROW] keys and (de)select with the [SPACE] key. \
|
|
Confirm by pressing [ENTER]. Cancel by pressing [ESC]."
|
|
MENU_GUIDE="Navigate with the [ARROW] keys and confirm by pressing [ENTER]. Cancel by pressing [ESC]."
|
|
RUN_LATER_GUIDE="You can view this script later by running 'sudo bash $SCRIPTS/menu.sh'."
|
|
# Repo
|
|
GITHUB_REPO="https://raw.githubusercontent.com/nextcloud/vm/master"
|
|
STATIC="$GITHUB_REPO/static"
|
|
LETS_ENC="$GITHUB_REPO/lets-encrypt"
|
|
APP="$GITHUB_REPO/apps"
|
|
OLD="$GITHUB_REPO/old"
|
|
ADDONS="$GITHUB_REPO/addons"
|
|
DESEC="$GITHUB_REPO/addons/deSEC"
|
|
MENU="$GITHUB_REPO/menu"
|
|
DISK="$GITHUB_REPO/disk"
|
|
NETWORK="$GITHUB_REPO/network"
|
|
VAGRANT_DIR="$GITHUB_REPO/vagrant"
|
|
NOT_SUPPORTED_FOLDER="$GITHUB_REPO/not-supported"
|
|
GEOBLOCKDAT="$GITHUB_REPO/geoblockdat"
|
|
NCREPO="https://download.nextcloud.com/server/releases"
|
|
ISSUES="https://github.com/nextcloud/vm/issues"
|
|
# User information
|
|
GUIUSER=ncadmin
|
|
GUIPASS=nextcloud
|
|
UNIXUSER=$SUDO_USER
|
|
UNIXUSER_PROFILE="/home/$UNIXUSER/.bash_profile"
|
|
ROOT_PROFILE="/root/.bash_profile"
|
|
# User for Bitwarden
|
|
BITWARDEN_USER=bitwarden
|
|
BITWARDEN_HOME=/home/"$BITWARDEN_USER"
|
|
# Database
|
|
SHUF=$(shuf -i 25-29 -n 1)
|
|
PGDB_USER=nextcloud_db_user
|
|
PGDB_PASS=$(gen_passwd "$SHUF" "a-zA-Z0-9@#*")
|
|
NEWPGPASS=$(gen_passwd "$SHUF" "a-zA-Z0-9@#*")
|
|
ncdb() {
|
|
NCDB=$(grep "dbname" $NCPATH/config/config.php | awk '{print $3}' | sed "s/[',]//g")
|
|
NCDBPASS=$(grep "dbpassword" $NCPATH/config/config.php | awk '{print $3}' | sed "s/[',]//g")
|
|
NCDBUSER=$(grep "dbuser" $NCPATH/config/config.php | awk '{print $3}' | sed "s/[',]//g")
|
|
NCDBTYPE=$(grep "dbtype" /var/www/nextcloud/config/config.php | awk '{print $3}' | sed "s/[',]//g")
|
|
NCDBHOST=$(grep "dbhost" /var/www/nextcloud/config/config.php | awk '{print $3}' | sed "s/[',]//g")
|
|
}
|
|
# Path to specific files
|
|
SECURE="$SCRIPTS/setup_secure_permissions_nextcloud.sh"
|
|
# Nextcloud version
|
|
nc_update() {
|
|
CURRENTVERSION=$(sudo -u www-data php $NCPATH/occ status | grep "versionstring" | awk '{print $3}')
|
|
NCVERSION=$(curl -s -m 900 $NCREPO/ | sed --silent 's/.*href="nextcloud-\([^"]\+\).zip.asc".*/\1/p' | sort --version-sort | tail -1)
|
|
STABLEVERSION="nextcloud-$NCVERSION"
|
|
NCMAJOR="${NCVERSION%%.*}"
|
|
CURRENTMAJOR="${CURRENTVERSION%%.*}"
|
|
NCBAD=$((NCMAJOR-2))
|
|
NCNEXT="$((${CURRENTVERSION%%.*}+1))"
|
|
}
|
|
# Set the hour for automatic updates. This would be 18:00 as only the hour is configurable.
|
|
AUT_UPDATES_TIME="18"
|
|
# Keys
|
|
OpenPGP_fingerprint='28806A878AE423A28372792ED75899B9A724937A'
|
|
# Letsencrypt
|
|
SITES_AVAILABLE="/etc/apache2/sites-available"
|
|
LETSENCRYPTPATH="/etc/letsencrypt"
|
|
CERTFILES="$LETSENCRYPTPATH/live"
|
|
DHPARAMS_TLS="$CERTFILES/$TLSDOMAIN/dhparam.pem"
|
|
DHPARAMS_SUB="$CERTFILES/$SUBDOMAIN/dhparam.pem"
|
|
TLS_CONF="nextcloud_tls_domain_self_signed.conf"
|
|
HTTP_CONF="nextcloud_http_domain_self_signed.conf"
|
|
# Collabora App
|
|
HTTPS_CONF="$SITES_AVAILABLE/$SUBDOMAIN.conf"
|
|
HTTP2_CONF="/etc/apache2/mods-available/http2.conf"
|
|
# PHP-FPM
|
|
PHPVER=8.1
|
|
PHP_FPM_DIR=/etc/php/$PHPVER/fpm
|
|
PHP_INI=$PHP_FPM_DIR/php.ini
|
|
PHP_POOL_DIR=$PHP_FPM_DIR/pool.d
|
|
PHP_MODS_DIR=/etc/php/"$PHPVER"/mods-available
|
|
opcache_interned_strings_buffer_value=24
|
|
# Notify push
|
|
NOTIFY_PUSH_SERVICE_PATH="/etc/systemd/system/notify_push.service"
|
|
# Adminer
|
|
ADMINERDIR=/usr/share/adminer
|
|
ADMINER_CONF="$SITES_AVAILABLE/adminer.conf"
|
|
# Redis
|
|
REDIS_CONF=/etc/redis/redis.conf
|
|
REDIS_SOCK=/var/run/redis/redis-server.sock
|
|
REDIS_PASS=$(gen_passwd "$SHUF" "a-zA-Z0-9@#*")
|
|
# Extra security
|
|
SPAMHAUS=/etc/spamhaus.wl
|
|
ENVASIVE=/etc/apache2/mods-available/mod-evasive.load
|
|
APACHE2=/etc/apache2/apache2.conf
|
|
# Full text Search
|
|
fulltextsearch_install() {
|
|
FULLTEXTSEARCH_DIR="$SCRIPTS"/fulltextsearch
|
|
NEXTCLOUD_INDEX=$(gen_passwd "$SHUF" '[:lower:]')
|
|
ELASTIC_USER_PASSWORD=$(gen_passwd "$SHUF" '[:lower:]')
|
|
FULLTEXTSEARCH_IMAGE_NAME=fulltextsearch_es01
|
|
FULLTEXTSEARCH_SERVICE=nextcloud-fulltext-elasticsearch-worker.service
|
|
# Supports 0-9.0-99.0-9. Max supprted version with this function is 9.99.9. When ES 10.0.0 is out we have a problem.
|
|
FULLTEXTSEARCH_IMAGE_NAME_LATEST_TAG="$(curl -s -m 900 https://www.docker.elastic.co/r/elasticsearch | grep -Eo "[[:digit:]]\\.[[:digit:]][[:digit:]]\\.[[:digit:]]" | sort --version-sort | tail -1)"
|
|
# Legacy, changed 2023-09-21
|
|
DOCKER_IMAGE_NAME=es01
|
|
# Legacy, not used at all
|
|
RORDIR=/opt/es/
|
|
OPNSDIR=/opt/opensearch
|
|
nc_fts="ark74/nc_fts"
|
|
opens_fts="opensearchproject/opensearch"
|
|
fts_node="fts_os-node"
|
|
}
|
|
# Name in trusted_config
|
|
ncdomain() {
|
|
NCDOMAIN=$(nextcloud_occ_no_check config:system:get overwrite.cli.url | sed 's|https://||;s|/||')
|
|
}
|
|
# Talk
|
|
turn_install() {
|
|
TURN_CONF="/etc/turnserver.conf"
|
|
TURN_PORT=3478
|
|
TURN_DOMAIN=$(sudo -u www-data /var/www/nextcloud/occ config:system:get overwrite.cli.url | sed 's|https://||;s|/||')
|
|
SHUF=$(shuf -i 25-29 -n 1)
|
|
TURN_SECRET=$(gen_passwd "$SHUF" "a-zA-Z0-9")
|
|
JANUS_API_KEY=$(gen_passwd "$SHUF" "a-zA-Z0-9")
|
|
SIGNALING_SECRET=$(gen_passwd "$SHUF" "a-zA-Z0-9")
|
|
SIGNALING_SERVER_CONF=/etc/signaling/server.conf
|
|
TURN_INTERNAL_SECRET=$(gen_passwd "$SHUF" "a-zA-Z0-9")
|
|
TURN_RECORDING_SECRET=$(gen_passwd "$SHUF" "a-zA-Z0-9")
|
|
TURN_RECORDING_HOST=127.0.0.1
|
|
TURN_RECORDING_HOST_PORT=1234
|
|
}
|
|
|
|
## FUNCTIONS
|
|
|
|
# If script is running as root?
|
|
#
|
|
# Example:
|
|
# if is_root
|
|
# then
|
|
# # do stuff
|
|
# else
|
|
# print_text_in_color "$IRed" "You are not root..."
|
|
# exit 1
|
|
# fi
|
|
#
|
|
is_root() {
|
|
if [[ "$EUID" -ne 0 ]]
|
|
then
|
|
return 1
|
|
else
|
|
return 0
|
|
fi
|
|
}
|
|
|
|
# Check if root
|
|
root_check() {
|
|
if ! is_root
|
|
then
|
|
msg_box "Sorry, you are not root. You now have two options:
|
|
|
|
1. Use SUDO directly:
|
|
a) :~$ sudo bash $SCRIPTS/name-of-script.sh
|
|
|
|
2. Become ROOT and then type your command:
|
|
a) :~$ sudo -i
|
|
b) :~# bash $SCRIPTS/name-of-script.sh
|
|
|
|
In both cases above you can leave out $SCRIPTS/ if the script
|
|
is directly in your PATH.
|
|
|
|
More information can be found here: https://unix.stackexchange.com/a/3064"
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
debug_mode() {
|
|
if [ "$DEBUG" -eq 1 ]
|
|
then
|
|
set -ex
|
|
fi
|
|
}
|
|
|
|
msg_box() {
|
|
[ -n "$2" ] && local SUBTITLE=" - $2"
|
|
whiptail --title "$TITLE$SUBTITLE" --msgbox "$1" "$WT_HEIGHT" "$WT_WIDTH" 3>&1 1>&2 2>&3
|
|
}
|
|
|
|
yesno_box_yes() {
|
|
[ -n "$2" ] && local SUBTITLE=" - $2"
|
|
if (whiptail --title "$TITLE$SUBTITLE" --yesno "$1" "$WT_HEIGHT" "$WT_WIDTH" 3>&1 1>&2 2>&3)
|
|
then
|
|
return 0
|
|
else
|
|
return 1
|
|
fi
|
|
}
|
|
|
|
yesno_box_no() {
|
|
[ -n "$2" ] && local SUBTITLE=" - $2"
|
|
if (whiptail --title "$TITLE$SUBTITLE" --defaultno --yesno "$1" "$WT_HEIGHT" "$WT_WIDTH" 3>&1 1>&2 2>&3)
|
|
then
|
|
return 0
|
|
else
|
|
return 1
|
|
fi
|
|
}
|
|
|
|
input_box() {
|
|
[ -n "$2" ] && local SUBTITLE=" - $2"
|
|
local RESULT && RESULT=$(whiptail --title "$TITLE$SUBTITLE" --nocancel --inputbox "$1" "$WT_HEIGHT" "$WT_WIDTH" 3>&1 1>&2 2>&3)
|
|
echo "$RESULT"
|
|
}
|
|
|
|
input_box_flow() {
|
|
local RESULT
|
|
while :
|
|
do
|
|
RESULT=$(input_box "$1" "$2")
|
|
if [ -z "$RESULT" ]
|
|
then
|
|
msg_box "Input is empty, please try again." "$2"
|
|
elif ! yesno_box_yes "Is this correct? $RESULT" "$2"
|
|
then
|
|
msg_box "OK, please try again." "$2"
|
|
else
|
|
break
|
|
fi
|
|
done
|
|
echo "$RESULT"
|
|
}
|
|
|
|
install_popup() {
|
|
msg_box "$SCRIPT_EXPLAINER"
|
|
if yesno_box_yes "Do you want to install $1?"
|
|
then
|
|
print_text_in_color "$ICyan" "Installing $1..."
|
|
else
|
|
if [ -z "$2" ] || [ "$2" = "exit" ]
|
|
then
|
|
exit 1
|
|
elif [ "$2" = "sleep" ]
|
|
then
|
|
sleep 1
|
|
elif [ "$2" = "return" ]
|
|
then
|
|
return 1
|
|
else
|
|
exit 1
|
|
fi
|
|
fi
|
|
}
|
|
|
|
reinstall_remove_menu() {
|
|
REINSTALL_REMOVE=$(whiptail --title "$TITLE" --menu \
|
|
"It seems like $1 is already installed.\nChoose what you want to do.
|
|
$MENU_GUIDE\n\n$RUN_LATER_GUIDE" "$WT_HEIGHT" "$WT_WIDTH" 4 \
|
|
"Reinstall" " $1" \
|
|
"Uninstall" " $1" 3>&1 1>&2 2>&3)
|
|
if [ "$REINSTALL_REMOVE" = "Reinstall" ]
|
|
then
|
|
print_text_in_color "$ICyan" "Reinstalling $1..."
|
|
elif [ "$REINSTALL_REMOVE" = "Uninstall" ]
|
|
then
|
|
print_text_in_color "$ICyan" "Uninstalling $1..."
|
|
elif [ -z "$REINSTALL_REMOVE" ]
|
|
then
|
|
if [ -z "$2" ] || [ "$2" = "exit" ]
|
|
then
|
|
exit 1
|
|
elif [ "$2" = "sleep" ]
|
|
then
|
|
sleep 1
|
|
elif [ "$2" = "return" ]
|
|
then
|
|
return 1
|
|
else
|
|
exit 1
|
|
fi
|
|
fi
|
|
}
|
|
|
|
removal_popup() {
|
|
if [ "$REINSTALL_REMOVE" = "Uninstall" ]
|
|
then
|
|
msg_box "$1 was successfully uninstalled."
|
|
if [ -z "$2" ] || [ "$2" = "exit" ]
|
|
then
|
|
exit 1
|
|
elif [ "$2" = "sleep" ]
|
|
then
|
|
sleep 1
|
|
elif [ "$2" = "return" ]
|
|
then
|
|
return 1
|
|
else
|
|
exit 1
|
|
fi
|
|
elif [ "$REINSTALL_REMOVE" = "Reinstall" ]
|
|
then
|
|
print_text_in_color "$ICyan" "Reinstalling $1..."
|
|
else
|
|
msg_box "It seems like neither Uninstall nor Reinstall was selected, \
|
|
something is wrong here. Please report this to $ISSUES"
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
# Used in geoblock.sh
|
|
get_newest_dat_files() {
|
|
# IPv4
|
|
IPV4_NAME=$(curl -s https://github.com/nextcloud/vm/tree/master/geoblockdat \
|
|
| grep -oP '202[0-9]-[01][0-9]-Maxmind-Country-IPv4\.dat' | sort -r | head -1)
|
|
if [ -z "$IPV4_NAME" ]
|
|
then
|
|
print_text_in_color "$IRed" "Could not get the latest IPv4 name. Not updating the .dat file"
|
|
sleep 1
|
|
else
|
|
if ! [ -f "$SCRIPTS/$IPV4_NAME" ]
|
|
then
|
|
print_text_in_color "$ICyan" "Downloading new IPv4 dat file..."
|
|
sleep 1
|
|
curl_to_dir "$GEOBLOCKDAT" "$IPV4_NAME" "$SCRIPTS"
|
|
mkdir -p /usr/share/GeoIP
|
|
rm -f /usr/share/GeoIP/GeoIP.dat
|
|
check_command cp "$SCRIPTS/$IPV4_NAME" /usr/share/GeoIP
|
|
check_command mv "/usr/share/GeoIP/$IPV4_NAME" /usr/share/GeoIP/GeoIP.dat
|
|
chown root:root /usr/share/GeoIP/GeoIP.dat
|
|
chmod 644 /usr/share/GeoIP/GeoIP.dat
|
|
find /var/scripts -type f -regex \
|
|
"$SCRIPTS/202[0-9]-[01][0-9]-Maxmind-Country-IPv4\.dat" -not -name "$IPV4_NAME" -delete
|
|
else
|
|
print_text_in_color "$ICyan" "The latest IPv4 dat file is already downloaded."
|
|
sleep 1
|
|
fi
|
|
fi
|
|
# IPv6
|
|
IPV6_NAME=$(curl -s https://github.com/nextcloud/vm/tree/master/geoblockdat \
|
|
| grep -oP '202[0-9]-[01][0-9]-Maxmind-Country-IPv6\.dat' | sort -r | head -1)
|
|
if [ -z "$IPV6_NAME" ]
|
|
then
|
|
print_text_in_color "$IRed" "Could not get the latest IPv6 name. Not updating the .dat file"
|
|
sleep 1
|
|
else
|
|
if ! [ -f "$SCRIPTS/$IPV6_NAME" ]
|
|
then
|
|
print_text_in_color "$ICyan" "Downloading new IPv6 dat file..."
|
|
sleep 1
|
|
curl_to_dir "$GEOBLOCKDAT" "$IPV6_NAME" "$SCRIPTS"
|
|
mkdir -p /usr/share/GeoIP
|
|
rm -f /usr/share/GeoIP/GeoIPv6.dat
|
|
check_command cp "$SCRIPTS/$IPV6_NAME" /usr/share/GeoIP
|
|
check_command mv "/usr/share/GeoIP/$IPV6_NAME" /usr/share/GeoIP/GeoIPv6.dat
|
|
chown root:root /usr/share/GeoIP/GeoIPv6.dat
|
|
chmod 644 /usr/share/GeoIP/GeoIPv6.dat
|
|
find /var/scripts -type f -regex \
|
|
"$SCRIPTS/202[0-9]-[01][0-9]-Maxmind-Country-IPv6\.dat" -not -name "$IPV6_NAME" -delete
|
|
else
|
|
print_text_in_color "$ICyan" "The latest IPv6 dat file is already downloaded."
|
|
sleep 1
|
|
fi
|
|
fi
|
|
}
|
|
|
|
# Check if process is runnnig: is_process_running dpkg
|
|
is_process_running() {
|
|
PROCESS="$1"
|
|
|
|
while :
|
|
do
|
|
RESULT=$(pgrep "${PROCESS}")
|
|
|
|
if [ "${RESULT:-null}" = null ]; then
|
|
break
|
|
else
|
|
print_text_in_color "$ICyan" "${PROCESS} is running, waiting for it to stop. Please be patient..."
|
|
sleep 30
|
|
fi
|
|
done
|
|
}
|
|
|
|
# Fix issues like https://github.com/nextcloud/spreed/issues/5518
|
|
check_running_cronjobs() {
|
|
while [ -n "$(pgrep -f nextcloud/cron.php)" ]
|
|
do
|
|
countdown "Waiting for the Nextcloud cronjob to finish..." "30"
|
|
done
|
|
}
|
|
|
|
# Checks if site is reachable with a HTTP 200 status
|
|
site_200() {
|
|
print_text_in_color "$ICyan" "Checking connection..."
|
|
CURL_STATUS="$(curl -LI "${1}" -o /dev/null -w '%{http_code}\n' -s)"
|
|
if [[ "$CURL_STATUS" = "200" ]]
|
|
then
|
|
return 0
|
|
else
|
|
print_text_in_color "$IRed" "curl didn't produce a 200 status, is ${1} reachable?"
|
|
return 1
|
|
fi
|
|
}
|
|
|
|
# Do a DNS lookup and compare the WAN address with the A record
|
|
domain_check_200() {
|
|
print_text_in_color "$ICyan" "Doing a DNS lookup for ${1}..."
|
|
install_if_not dnsutils
|
|
|
|
# Try to resolve the domain with nslookup using $DNS as resolver
|
|
if nslookup "${1}" "$INTERNET_DNS"
|
|
then
|
|
print_text_in_color "$IGreen" "DNS seems correct when checking with nslookup!"
|
|
else
|
|
msg_box "DNS lookup failed with nslookup. \
|
|
Please check your DNS settings! Maybe the domain isn't propagated?
|
|
You can use this site to check if the IP seems correct: https://www.whatsmydns.net/#A/${1}"
|
|
if ! yesno_box_no "Are you 100% sure the domain is correct?"
|
|
then
|
|
exit
|
|
fi
|
|
fi
|
|
|
|
# Is the DNS record same as the external IP address of the server?
|
|
DIG="$(dig +short "${1}" @resolver1.opendns.com)"
|
|
if [ "$DIG" = "$WANIP4" ]
|
|
then
|
|
print_text_in_color "$IGreen" "DNS seems correct when checking with dig!"
|
|
else
|
|
msg_box "DNS lookup failed with dig. The external IP ($WANIP4) \
|
|
address of this server is not the same as the A-record ($DIG).
|
|
Please check your DNS settings! Maybe the domain hasn't propagated?
|
|
Please check https://www.whatsmydns.net/#A/${1} if the IP seems correct."
|
|
|
|
msg_box "As you noticed your WAN IP and DNS record doesn't match. \
|
|
This can happen when using DDNS for example, or in other edge cases.
|
|
If you feel brave, or are sure that everything is set up correctly, \
|
|
then you can choose to skip this test in the next step.
|
|
|
|
If needed, you can always contact us for further support: \
|
|
https://shop.hanssonit.se/product/premium-support-per-30-minutes/"
|
|
if ! yesno_box_no "Do you feel brave and want to continue?"
|
|
then
|
|
exit
|
|
fi
|
|
fi
|
|
}
|
|
|
|
# A function to set the systemd-resolved default DNS servers based on the
|
|
# current Internet facing interface. This is needed for docker interfaces
|
|
# that might not use the same DNS servers otherwise.
|
|
set_systemd_resolved_dns() {
|
|
local iface="$1"
|
|
local pattern="$iface(?:.|\n)*?DNS Servers: ((?:[0-9a-f.: ]|\n)*?)\s*(?=\n\S|\n.+: |$)"
|
|
local dnss
|
|
dnss=$( systemd-resolve --status | perl -0777 -ne "if ((\$v) = (/$pattern/)) {\$v=~s/(?:\s|\n)+/ /g;print \"\$v\n\";}" )
|
|
if [ -n "$dnss" ]
|
|
then
|
|
sed -i "s/^#\?DNS=.*$/DNS=${dnss}/" /etc/systemd/resolved.conf
|
|
systemctl restart systemd-resolved &>/dev/null
|
|
sleep 1
|
|
fi
|
|
}
|
|
|
|
# A function to fetch a file with curl to a directory
|
|
# 1 = https://example.com
|
|
# 2 = name of file
|
|
# 3 = directory that the file should end up in
|
|
curl_to_dir() {
|
|
if [ ! -d "$3" ]
|
|
then
|
|
mkdir -p "$3"
|
|
fi
|
|
rm -f "$3"/"$2"
|
|
if [ -n "$download_script_function_in_use" ]
|
|
then
|
|
curl -sfL "$1"/"$2" -o "$3"/"$2"
|
|
else
|
|
local retries=0
|
|
while :
|
|
do
|
|
if [ "$retries" -ge 10 ]
|
|
then
|
|
if yesno_box_yes "Tried 10 times but didn't succeed. We will now exit the script because it might break things. You can choose 'No' to continue on your own risk."
|
|
then
|
|
exit 1
|
|
else
|
|
return 1
|
|
fi
|
|
fi
|
|
if ! curl -sfL "$1"/"$2" -o "$3"/"$2"
|
|
then
|
|
msg_box "We just tried to fetch '$1/$2', but it seems like the server for the download isn't reachable, or that a temporary error occurred. We will now try again.
|
|
Please report this issue to $ISSUES"
|
|
retries=$((retries+1))
|
|
print_text_in_color "$ICyan" "$retries of 10 retries."
|
|
countdown "Trying again in 30 seconds..." "30"
|
|
else
|
|
break
|
|
fi
|
|
done
|
|
fi
|
|
}
|
|
|
|
start_if_stopped() {
|
|
if ! pgrep "$1"
|
|
then
|
|
print_text_in_color "$ICyan" "Starting $1..."
|
|
systemctl start "$1".service
|
|
fi
|
|
}
|
|
|
|
# Warn user that HTTP/2 will be disabled if installing app that use Apache2 PHP instead of PHP-FPM
|
|
# E.g: http2_warn Modsecurity
|
|
http2_warn() {
|
|
msg_box "This VM has HTTP/2 enabled by default.
|
|
|
|
If you continue with installing $1, HTTP/2 will be disabled since it's not compatible with the mpm module used by $1.
|
|
|
|
This is what Apache will say in the error.log if you enable $1 anyway:
|
|
'The mpm module (prefork.c) is not supported by mod_http2.
|
|
The mpm determines how things are processed in your server.
|
|
HTTP/2 has more demands in this regard and the currently selected mpm will just not do.
|
|
This is an advisory warning. Your server will continue to work, but the HTTP/2 protocol will be inactive.'"
|
|
|
|
if ! yesno_box_yes "Do you really want to enable $1 anyway?"
|
|
then
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
calculate_php_fpm() {
|
|
# Get current PHP version
|
|
check_php
|
|
|
|
# Minimum amount of max children (lower than this won't work with 2 GB RAM)
|
|
min_max_children=8
|
|
# If start servers are lower than this then it's likely that there are room for max_spare_servers
|
|
min_start_servers=20
|
|
# Maximum amount of children is only set if the min_start_servers value are met
|
|
min_max_spare_servers=35
|
|
|
|
# Calculate the sum of the current values
|
|
CURRENT_START="$(grep pm.start_servers "$PHP_POOL_DIR"/nextcloud.conf | awk '{ print $3}')"
|
|
CURRENT_MAX="$(grep pm.max_spare_servers "$PHP_POOL_DIR"/nextcloud.conf | awk '{ print $3}')"
|
|
CURRENT_MIN="$(grep pm.min_spare_servers "$PHP_POOL_DIR"/nextcloud.conf | awk '{ print $3}')"
|
|
CURRENT_SUM="$((CURRENT_START + CURRENT_MAX + CURRENT_MIN))"
|
|
|
|
# Calculate max_children depending on RAM
|
|
# Tends to be between 30-50MB per children
|
|
average_php_memory_requirement=50
|
|
available_memory=$(awk '/MemAvailable/ {printf "%d", $2/1024}' /proc/meminfo)
|
|
PHP_FPM_MAX_CHILDREN=$((available_memory/average_php_memory_requirement))
|
|
|
|
# Lowest possible value is 8
|
|
print_text_in_color "$ICyan" "Automatically configures pm.max_children for php-fpm..."
|
|
if [ $PHP_FPM_MAX_CHILDREN -lt $min_max_children ]
|
|
then
|
|
msg_box "The current max_children value available to set is \
|
|
$PHP_FPM_MAX_CHILDREN, and PHP-FPM won't function properly with that value.
|
|
The minimum value is 8, and the value is calculated depening on how much available RAM you have left.
|
|
|
|
The absolute minimum amount of RAM required to run the VM is 2 GB, but we recommend 4 GB.
|
|
|
|
You now have two choices:
|
|
1. Import this VM again, raise the amount of RAM with at least 1 GB, and run this script
|
|
in the same way as you just have.
|
|
2. Import this VM again without raising the RAM, but don't install any of the following apps:
|
|
1) Collabora
|
|
2) OnlyOffice
|
|
3) Full Text Search
|
|
|
|
This script will now exit.
|
|
The installation was not successful, sorry for the inconvenience.
|
|
|
|
If you think this is a bug, please report it to $ISSUES"
|
|
exit 1
|
|
else
|
|
check_command sed -i "s|pm.max_children.*|pm.max_children = $PHP_FPM_MAX_CHILDREN|g" "$PHP_POOL_DIR"/nextcloud.conf
|
|
print_text_in_color "$IGreen" "pm.max_children was set to $PHP_FPM_MAX_CHILDREN"
|
|
# Check if the sum of all the current values are more than $PHP_FPM_MAX_CHILDREN and only continue it is
|
|
if [ $PHP_FPM_MAX_CHILDREN -gt $CURRENT_SUM ]
|
|
then
|
|
# Set pm.max_spare_servers
|
|
if [ $PHP_FPM_MAX_CHILDREN -ge $min_max_spare_servers ]
|
|
then
|
|
if [ "$(grep pm.start_servers "$PHP_POOL_DIR"/nextcloud.conf | awk '{ print $3}')" -lt $min_start_servers ]
|
|
then
|
|
check_command sed -i "s|pm.max_spare_servers.*|pm.max_spare_servers = $((PHP_FPM_MAX_CHILDREN - 30))|g" "$PHP_POOL_DIR"/nextcloud.conf
|
|
print_text_in_color "$IGreen" "pm.max_spare_servers was set to $((PHP_FPM_MAX_CHILDREN - 30))"
|
|
fi
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
# If $PHP_FPM_MAX_CHILDREN is lower than the current sum of all values, revert to default settings
|
|
if [ $PHP_FPM_MAX_CHILDREN -lt $CURRENT_SUM ]
|
|
then
|
|
check_command sed -i "s|pm.max_children.*|pm.max_children = $PHP_FPM_MAX_CHILDREN|g" "$PHP_POOL_DIR"/nextcloud.conf
|
|
check_command sed -i "s|pm.start_servers.*|pm.start_servers = 3|g" "$PHP_POOL_DIR"/nextcloud.conf
|
|
check_command sed -i "s|pm.min_spare_servers.*|pm.min_spare_servers = 2|g" "$PHP_POOL_DIR"/nextcloud.conf
|
|
check_command sed -i "s|pm.max_spare_servers.*|pm.max_spare_servers = 3|g" "$PHP_POOL_DIR"/nextcloud.conf
|
|
print_text_in_color "$ICyan" "All PHP-INI values were set back to default values as the value for pm.max_children ($PHP_FPM_MAX_CHILDREN) was lower than the sum of all the current values ($CURRENT_SUM)"
|
|
print_text_in_color "$ICyan" "Please run this again to set optimal values"
|
|
fi
|
|
restart_webserver
|
|
}
|
|
|
|
# Compatibility with older VMs
|
|
calculate_max_children() {
|
|
calculate_php_fpm
|
|
}
|
|
|
|
test_connection() {
|
|
version(){
|
|
local h t v
|
|
|
|
[[ $2 = "$1" || $2 = "$3" ]] && return 0
|
|
|
|
v=$(printf '%s\n' "$@" | sort -V)
|
|
h=$(head -n1 <<<"$v")
|
|
t=$(tail -n1 <<<"$v")
|
|
|
|
[[ $2 != "$h" && $2 != "$t" ]]
|
|
}
|
|
if ! version 20.04 "$DISTRO" 22.04.10
|
|
then
|
|
print_text_in_color "$IRed" "Your current Ubuntu version is $DISTRO but must be between \
|
|
20.04 - 22.04.10 to run this script."
|
|
print_text_in_color "$ICyan" "Please contact us for support upgrading your server:"
|
|
print_text_in_color "$ICyan" "https://www.hanssonit.se/#contact"
|
|
print_text_in_color "$ICyan" "https://shop.hanssonit.se/"
|
|
sleep 300
|
|
fi
|
|
|
|
# Install dnsutils if not existing
|
|
if ! dpkg-query -W -f='${Status}' "dnsutils" | grep -q "ok installed"
|
|
then
|
|
apt-get update -q4 & spinner_loading && apt-get install dnsutils -y
|
|
fi
|
|
# Install net-tools if not existing
|
|
if ! dpkg-query -W -f='${Status}' "net-tools" | grep -q "ok installed"
|
|
then
|
|
apt-get update -q4 & spinner_loading && apt-get install net-tools -y
|
|
fi
|
|
# After applying Netplan settings, try a DNS lookup.
|
|
# Restart systemd-networkd if this fails and try again.
|
|
# If this second check also fails, consider this a problem.
|
|
print_text_in_color "$ICyan" "Checking connection..."
|
|
netplan apply
|
|
sleep 2
|
|
if ! nslookup github.com
|
|
then
|
|
print_text_in_color "$ICyan" "Trying to restart netplan service..."
|
|
check_command systemctl restart systemd-networkd && sleep 2
|
|
if ! nslookup github.com
|
|
then
|
|
msg_box "Network is NOT OK. You must have a working network connection to run this script.
|
|
If you think that this is a bug, please report it to https://github.com/nextcloud/vm/issues."
|
|
return 1
|
|
fi
|
|
fi
|
|
print_text_in_color "$IGreen" "Online!"
|
|
return 0
|
|
}
|
|
|
|
|
|
# Check that the script can see the external IP (apache fails otherwise), used e.g. in the adminer app script.
|
|
check_external_ip() {
|
|
if [ -z "$WANIP4" ]
|
|
then
|
|
print_text_in_color "$IRed" "WANIP4 is an empty value, Apache will fail on reboot due to this. \
|
|
Please check your network and try again."
|
|
sleep 3
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
# Check if Nextcloud is installed with TLS
|
|
check_nextcloud_https() {
|
|
if ! nextcloud_occ_no_check config:system:get overwrite.cli.url | grep -q "https"
|
|
then
|
|
# Check if it's used by any of the Documentserver apps and adopt the message to that
|
|
if [ "$1" == 'Collabora (Docker)' ] || [ "$1" == 'OnlyOffice (Docker)' ]
|
|
then
|
|
ncdomain
|
|
if ! curl -s https://"$NCDOMAIN"/status.php | grep -q 'installed":true'
|
|
then
|
|
msg_box "Sorry, but Nextcloud needs to be run on HTTPS.
|
|
You can easily activate TLS (HTTPS) by running the Let's Encrypt script.
|
|
More info here: http://shortio.hanssonit.se/1EAgBmPyFc
|
|
|
|
To run this script again, just exectue 'sudo bash $SCRIPTS/menu.sh' and choose:
|
|
Additional Apps --> Documentserver --> $1."
|
|
exit
|
|
fi
|
|
else
|
|
# Adopt the error message to anything else but the Documentserver apps
|
|
ncdomain
|
|
if ! curl -s https://"$NCDOMAIN"/status.php | grep -q 'installed":true'
|
|
then
|
|
msg_box "Sorry, but Nextcloud needs to be run on HTTPS.
|
|
You can easily activate TLS (HTTPS) by running the Let's Encrypt script.
|
|
More info here: http://shortio.hanssonit.se/1EAgBmPyFc
|
|
|
|
To run this script again, just exectue 'sudo bash $SCRIPTS/menu.sh' and choose:
|
|
Additional Apps --> $1."
|
|
exit
|
|
fi
|
|
fi
|
|
fi
|
|
}
|
|
|
|
restart_webserver() {
|
|
# https://github.com/nextcloud/vm/issues/2358
|
|
sleep 2
|
|
print_text_in_color "$ICyan" "Restarting Apache2 and PHP-FPM..."
|
|
check_command systemctl restart apache2.service
|
|
check_php
|
|
if is_this_installed php"$PHPVER"-fpm
|
|
then
|
|
check_command systemctl restart php"$PHPVER"-fpm.service
|
|
fi
|
|
|
|
}
|
|
|
|
# Install certbot (Let's Encrypt)
|
|
install_certbot() {
|
|
if certbot --version >/dev/null 2>&1
|
|
then
|
|
# Reinstall certbot (use snap instead of package)
|
|
# https://askubuntu.com/a/1271565
|
|
if dpkg -l | grep certbot >/dev/null 2>&1
|
|
then
|
|
# certbot will be removed, but still listed, so we need to check if the snap is installed as well so that this doesn't run every time
|
|
if ! snap list certbot >/dev/null 2>&1
|
|
then
|
|
print_text_in_color "$ICyan" "Reinstalling certbot (Let's Encrypt) as a snap instead..."
|
|
apt-get remove certbot -y
|
|
apt-get autoremove -y
|
|
install_if_not snapd
|
|
snap install core
|
|
snap install certbot --classic
|
|
# Update $PATH in current session (login and logout is required otherwise)
|
|
check_command hash -r
|
|
fi
|
|
fi
|
|
else
|
|
print_text_in_color "$ICyan" "Installing certbot (Let's Encrypt)..."
|
|
install_if_not snapd
|
|
snap install certbot --classic
|
|
# Update $PATH in current session (login and logout is required otherwise)
|
|
check_command hash -r
|
|
fi
|
|
}
|
|
|
|
# Generate certs and configure it automatically
|
|
# https://certbot.eff.org/docs/using.html#certbot-command-line-options
|
|
generate_cert() {
|
|
uir_hsts=""
|
|
if [ -z "$SUBDOMAIN" ]
|
|
then
|
|
uir_hsts="--uir --hsts"
|
|
fi
|
|
a2dissite 000-default.conf
|
|
systemctl reload apache2.service
|
|
default_le="--cert-name $1 --key-type ecdsa --renew-by-default --no-eff-email --agree-tos $uir_hsts --server https://acme-v02.api.letsencrypt.org/directory -d $1"
|
|
#http-01
|
|
local standalone="certbot certonly --standalone --pre-hook \"systemctl stop apache2.service\" --post-hook \"systemctl start apache2.service\" $default_le"
|
|
#tls-alpn-01
|
|
local tls_alpn_01="certbot certonly --preferred-challenges tls-alpn-01 $default_le"
|
|
#dns
|
|
local dns="certbot certonly --manual --manual-public-ip-logging-ok --preferred-challenges dns $default_le"
|
|
local methods=(standalone dns)
|
|
|
|
for f in "${methods[@]}"
|
|
do
|
|
print_text_in_color "${ICyan}" "Trying to generate certs and validate them with $f method."
|
|
current_method=""
|
|
eval current_method="\$$f"
|
|
if eval "$current_method"
|
|
then
|
|
return 0
|
|
elif [ "$f" != "${methods[$((${#methods[*]} - 1))]}" ]
|
|
then
|
|
msg_box "It seems like no certs were generated when trying \
|
|
to validate them with the $f method. We will retry."
|
|
else
|
|
msg_box "It seems like no certs were generated when trying \
|
|
to validate them with the $f method. We have exhausted all the methods. Please check your DNS and try again."
|
|
return 1;
|
|
fi
|
|
done
|
|
}
|
|
|
|
is_desec_installed() {
|
|
# Check if deSEC is installed and add the needed variables if yes
|
|
if [ -f "$SCRIPTS"/deSEC/.dedynauth ]
|
|
then
|
|
if [ -f /etc/ddclient.conf ]
|
|
then
|
|
DEDYN_TOKEN=$(grep DEDYN_TOKEN "$SCRIPTS"/deSEC/.dedynauth | cut -d '=' -f2)
|
|
DEDYN_NAME=$(grep DEDYN_NAME "$SCRIPTS"/deSEC/.dedynauth | cut -d '=' -f2)
|
|
return 0
|
|
fi
|
|
else
|
|
msg_box "It seems like deSEC isn't configured on this server.
|
|
Please run 'sudo bash $SCRIPTS/menu.sh --> Server Configuration --> deSEC' to configure it."
|
|
return 1
|
|
fi
|
|
}
|
|
|
|
generate_desec_cert() {
|
|
# Check if the hook is in place
|
|
if [ ! -f "$SCRIPTS"/deSEC/hook.sh ]
|
|
then
|
|
msg_box "Sorry, but it seems like the needed hook for this to work is missing.
|
|
|
|
No TLS will be generated. Please report this to $ISSUES."
|
|
exit 1
|
|
fi
|
|
|
|
print_text_in_color "$ICyan" "Generating new TLS cert with DNS and deSEC, please don't abort the hook, it may take a while..."
|
|
# Renew with DNS by default
|
|
if certbot certonly --manual --text --key-type ecdsa --renew-by-default --server https://acme-v02.api.letsencrypt.org/directory --no-eff-email --agree-tos --preferred-challenges dns --manual-auth-hook "$SCRIPTS"/deSEC/hook.sh --manual-cleanup-hook "$SCRIPTS"/deSEC/hook.sh -d "$1"
|
|
then
|
|
# Generate DHparams cipher
|
|
if [ ! -f "$DHPARAMS_TLS" ]
|
|
then
|
|
openssl dhparam -out "$DHPARAMS_TLS" 2048
|
|
fi
|
|
# Choose which port for public access
|
|
msg_box "You will now be able to choose which port you want to put your Nextcloud on for public access.\n
|
|
The default port is 443 for HTTPS and if you don't change port, that's the port we will use.\n
|
|
Please keep in mind NOT to use the following ports as they are likely in use already:
|
|
${NONO_PORTS[*]}"
|
|
if yesno_box_no "Do you want to change the default HTTPS port (443) to something else?"
|
|
then
|
|
# Ask for port
|
|
while :
|
|
do
|
|
DEDYNPORT=$(input_box_flow "Please choose which port you want between 1024 - 49151.\n\nPlease remember to open this port in your firewall.")
|
|
if (("$DEDYNPORT" >= 1024 && "$DEDYNPORT" <= 49151))
|
|
then
|
|
if check_nono_ports "$DEDYNPORT"
|
|
then
|
|
print_text_in_color "$ICyan" "Changing to port $DEDYNPORT for public access..."
|
|
# Main port
|
|
if ! grep -q "Listen $DEDYNPORT" /etc/apache2/ports.conf
|
|
then
|
|
echo "Listen $DEDYNPORT" >> /etc/apache2/ports.conf
|
|
restart_webserver
|
|
fi
|
|
break
|
|
fi
|
|
else
|
|
msg_box "The port number needs to be between 1024 - 49151, please try again."
|
|
fi
|
|
done
|
|
fi
|
|
fi
|
|
}
|
|
|
|
# Last message depending on with script that is being run when using the generate_cert() function
|
|
last_fail_tls() {
|
|
msg_box "All methods failed. :/
|
|
|
|
You can run the script again by executing: sudo bash $SCRIPTS/menu.sh
|
|
Please try to run it again some other time with other settings.
|
|
|
|
There are different configs you can try in Let's Encrypt's user guide:
|
|
https://letsencrypt.readthedocs.org/en/latest/index.html
|
|
Please check the guide for further information on how to enable TLS.
|
|
|
|
This script is developed on GitHub, feel free to contribute:
|
|
https://github.com/nextcloud/vm"
|
|
|
|
if [ -n "$2" ]
|
|
then
|
|
msg_box "The script will now do some cleanup and revert the settings."
|
|
# Cleanup
|
|
snap remove certbot
|
|
rm -f "$SCRIPTS"/test-new-config.sh
|
|
fi
|
|
|
|
# Restart webserver services
|
|
restart_webserver
|
|
}
|
|
|
|
# Use like this: open_port 443 TCP
|
|
# or e.g. open_port 3478 UDP
|
|
open_port() {
|
|
install_if_not miniupnpc
|
|
print_text_in_color "$ICyan" "Trying to open port $1 automatically..."
|
|
if ! upnpc -a "$ADDRESS" "$1" "$1" "$2" &>/dev/null
|
|
then
|
|
msg_box "Failed to open port $1 $2 automatically. You have to do this manually."
|
|
FAIL=1
|
|
fi
|
|
}
|
|
|
|
cleanup_open_port() {
|
|
if [ -n "$FAIL" ]
|
|
then
|
|
apt-get purge miniupnpc -y
|
|
apt-get autoremove -y
|
|
fi
|
|
}
|
|
|
|
# Check if port is open # check_open_port 443 domain.example.com
|
|
check_open_port() {
|
|
print_text_in_color "$ICyan" "Checking if port ${1} is open..."
|
|
install_if_not curl
|
|
# WAN Address
|
|
if check_command curl -s -H 'Cache-Control: no-cache' -H 'Referer: https://www.networkappers.com/tools/open-port-checker' "https://networkappers.com/api/port.php?ip=${WANIP4}&port=${1}" | grep -q "open"
|
|
then
|
|
print_text_in_color "$IGreen" "Port ${1} is open on ${WANIP4}!"
|
|
elif check_command curl -s -H 'Cache-Control: no-cache' -H 'Referer: https://please-do-not-be-so-greedy-with-resources.now' 'https://ports.yougetsignal.com/check-port.php' --data "remoteAddress=${WANIP4}&portNumber=${1}" | grep -q "open"
|
|
then
|
|
print_text_in_color "$IGreen" "Port ${1} is open on ${WANIP4}!"
|
|
# Domain name
|
|
elif check_command curl -s -H 'Cache-Control: no-cache' -H 'Referer: https://www.networkappers.com/tools/open-port-checker' "https://www.networkappers.com/api/port.php?ip=${2}&port=${1}" | grep -q "open"
|
|
then
|
|
print_text_in_color "$IGreen" "Port ${1} is open on ${2}!"
|
|
elif check_command curl -s -H 'Cache-Control: no-cache' -H 'Referer: https://please-do-not-be-so-greedy-with-resources.now' 'https://ports.yougetsignal.com/check-port.php' --data "remoteAddress=${2}&portNumber=${1}" | grep -q "open"
|
|
then
|
|
print_text_in_color "$IGreen" "Port ${1} is open on ${2}!"
|
|
else
|
|
msg_box "It seems like the port ${1} is closed. This could happened when your
|
|
ISP has blocked the port, or the port isn't open.
|
|
|
|
If you are 100% sure the port ${1} is open, you can choose to
|
|
continue. There are no guarantees that it will work though,
|
|
since the service depends on port ${1} being open and
|
|
accessible from outside your network."
|
|
if ! yesno_box_no "Are you 100% sure the port ${1} is open?"
|
|
then
|
|
msg_box "Port $1 is not open on either ${WANIP4} or ${2}.
|
|
|
|
Please follow this guide to open ports in your router or firewall:\nhttps://www.techandme.se/open-port-80-443/"
|
|
any_key "Press any key to exit..."
|
|
exit 1
|
|
fi
|
|
fi
|
|
}
|
|
|
|
# $1=domain/ip-address
|
|
add_to_trusted_domains() {
|
|
local element="$1"
|
|
local count=0
|
|
print_text_in_color "$ICyan" "Adding $element to trusted domains..."
|
|
while [ "$count" -le 10 ]
|
|
do
|
|
if [ "$(nextcloud_occ_no_check config:system:get trusted_domains "$count")" = "$element" ]
|
|
then
|
|
break
|
|
elif [ -z "$(nextcloud_occ_no_check config:system:get trusted_domains "$count")" ]
|
|
then
|
|
nextcloud_occ_no_check config:system:set trusted_domains "$count" --value="$element"
|
|
break
|
|
else
|
|
count=$((count+1))
|
|
fi
|
|
done
|
|
}
|
|
|
|
# $1=domain/ip-address
|
|
remove_from_trusted_domains() {
|
|
local element="$1"
|
|
local count=0
|
|
print_text_in_color "$ICyan" "Removing $element from trusted domains..."
|
|
while [ "$count" -lt 10 ]
|
|
do
|
|
if [ "$(nextcloud_occ_no_check config:system:get trusted_domains "$count")" = "$element" ]
|
|
then
|
|
nextcloud_occ_no_check config:system:delete trusted_domains "$count"
|
|
break
|
|
else
|
|
count=$((count+1))
|
|
fi
|
|
done
|
|
}
|
|
|
|
check_distro_version() {
|
|
# Subṕport Ubuntu 22.0.4 jammy, and Ubuntu 20.04 focal.
|
|
|
|
# Check Ubuntu version
|
|
if [ "${CODENAME}" == "jammy" ] || [ "${CODENAME}" == "focal" ]
|
|
then
|
|
OS=1
|
|
elif lsb_release -i | grep -ic "Ubuntu" &> /dev/null
|
|
then
|
|
OS=1
|
|
elif uname -a | grep -ic "jammy" &> /dev/null || uname -a | grep -ic "focal" &> /dev/null
|
|
then
|
|
OS=1
|
|
elif uname -v | grep -ic "Ubuntu" &> /dev/null
|
|
then
|
|
OS=1
|
|
fi
|
|
|
|
if [ "$OS" != 1 ]
|
|
then
|
|
msg_box "Ubuntu Server is required to run this script.
|
|
Please install that distro and try again.
|
|
|
|
You can find the download link here: https://www.ubuntu.com/download/server"
|
|
exit 1
|
|
fi
|
|
|
|
if ! version 20.04 "$DISTRO" 22.04.10; then
|
|
msg_box "Your current Ubuntu version is $DISTRO but must be between 20.04 - 22.04.10 to run this script."
|
|
msg_box "Please contact us to get support for upgrading your server:
|
|
https://www.hanssonit.se/#contact
|
|
https://shop.hanssonit.se/product/upgrade-ubuntu-os-between-major-versions/"
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
# Check if program is installed (stop_if_installed apache2)
|
|
stop_if_installed() {
|
|
if [ "$(dpkg-query -W -f='${Status}' "${1}" 2>/dev/null | grep -c "ok installed")" = "1" ]
|
|
then
|
|
print_text_in_color "$IRed" "${1} is installed, it must be a clean server."
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
# Check if program is installed (is_this_installed apache2)
|
|
is_this_installed() {
|
|
if dpkg-query -W -f='${Status}' "${1}" | grep -q "ok installed"
|
|
then
|
|
return 0
|
|
else
|
|
return 1
|
|
fi
|
|
}
|
|
|
|
# Install_if_not program
|
|
install_if_not() {
|
|
if ! dpkg-query -W -f='${Status}' "${1}" | grep -q "ok installed"
|
|
then
|
|
# https://askubuntu.com/questions/1235914/hash-sum-mismatch-error-due-to-identical-sha1-and-md5-but-different-sha256#1242739
|
|
#if ! -f /etc/gcrypt/hwf.deny ]
|
|
#then
|
|
# mkdir -p /etc/gcrypt
|
|
# echo all > /etc/gcrypt/hwf.deny
|
|
#fi
|
|
apt-get update -q4 & spinner_loading && RUNLEVEL=1 apt-get install "${1}" -y
|
|
fi
|
|
}
|
|
|
|
# Test RAM size
|
|
# Call it like this: ram_check [amount of min RAM in GB] [for which program]
|
|
# Example: ram_check 2 Nextcloud
|
|
ram_check() {
|
|
install_if_not bc
|
|
# First, we need to check locales, since the functino depends on it.
|
|
# When we know the locale, we can then calculate mem available without any errors.
|
|
if locale | grep -c "C.UTF-8"
|
|
then
|
|
mem_available="$(awk '/MemTotal/{print $2}' /proc/meminfo)"
|
|
mem_available_gb="$(LC_NUMERIC="C.UTF-8" printf '%0.2f\n' "$(echo "scale=3; $mem_available/(1024*1024)" | bc)")"
|
|
elif locale | grep -c "en_US.UTF-8"
|
|
then
|
|
mem_available="$(awk '/MemTotal/{print $2}' /proc/meminfo)"
|
|
mem_available_gb="$(LC_NUMERIC="en_US.UTF-8" printf '%0.2f\n' "$(echo "scale=3; $mem_available/(1024*1024)" | bc)")"
|
|
fi
|
|
|
|
# Now check required mem
|
|
mem_required="$((${1}*(924*1024)))" # 100MiB/GiB margin and allow 90% to be able to run on physical machines
|
|
if [ "${mem_available}" -lt "${mem_required}" ]
|
|
then
|
|
print_text_in_color "$IRed" "Error: ${1} GB RAM required to install ${2}!" >&2
|
|
print_text_in_color "$IRed" "Current RAM is: ($mem_available_gb GB)" >&2
|
|
sleep 3
|
|
msg_box "** Error: insufficient memory. ${mem_available_gb}GB RAM installed, ${1}GB required."
|
|
exit 1
|
|
else
|
|
print_text_in_color "$IGreen" "RAM for ${2} OK! ($mem_available_gb GB)"
|
|
fi
|
|
}
|
|
|
|
# Test number of CPU
|
|
# Call it like this: cpu_check [amount of min CPU] [for which program]
|
|
# Example: cpu_check 2 Nextcloud
|
|
cpu_check() {
|
|
nr_cpu="$(nproc)"
|
|
if [ "${nr_cpu}" -lt "${1}" ]
|
|
then
|
|
print_text_in_color "$IRed" "Error: ${1} CPU required to install ${2}!" >&2
|
|
print_text_in_color "$IRed" "Current CPU: ($((nr_cpu)))" >&2
|
|
sleep 3
|
|
exit 1
|
|
else
|
|
print_text_in_color "$IGreen" "CPU for ${2} OK! ($((nr_cpu)))"
|
|
fi
|
|
}
|
|
|
|
check_command() {
|
|
if ! "$@";
|
|
then
|
|
print_text_in_color "$ICyan" "Sorry but something went wrong. Please report \
|
|
this issue to $ISSUES and include the output of the error message. Thank you!"
|
|
print_text_in_color "$IRed" "$* failed"
|
|
if nextcloud_occ_no_check -V > /dev/null
|
|
then
|
|
notify_admin_gui \
|
|
"Sorry but something went wrong. Please report this issue to \
|
|
$ISSUES and include the output of the error message. Thank you!" \
|
|
"$* failed"
|
|
fi
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
|
|
# Example: nextcloud_occ_no_check 'maintenance:mode --on'
|
|
nextcloud_occ() {
|
|
# Check it maintenance:mode is enabled
|
|
if sudo -u www-data php "$NCPATH"/occ maintenance:mode | grep -q enabled >/dev/null 2>&1
|
|
then
|
|
# Disable maintenance:mode
|
|
sudo -u www-data php "$NCPATH"/occ maintenance:mode --off >/dev/null 2>&1
|
|
# Run the actual command
|
|
check_command sudo -u www-data php "$NCPATH"/occ "$@";
|
|
# Enable maintenance:mode again
|
|
sudo -u www-data php "$NCPATH"/occ maintenance:mode --on >/dev/null 2>&1
|
|
else
|
|
check_command sudo -u www-data php "$NCPATH"/occ "$@";
|
|
fi
|
|
}
|
|
|
|
# Example: nextcloud_occ_no_check 'maintenance:mode --on'
|
|
nextcloud_occ_no_check() {
|
|
# Check it maintenance:mode is enabled
|
|
if sudo -u www-data php "$NCPATH"/occ maintenance:mode | grep -q enabled >/dev/null 2>&1
|
|
then
|
|
# Disable maintenance:mode
|
|
sudo -u www-data php "$NCPATH"/occ maintenance:mode --off >/dev/null 2>&1
|
|
# Run the actual command
|
|
sudo -u www-data php "$NCPATH"/occ "$@";
|
|
# Enable maintenance:mode again
|
|
sudo -u www-data php "$NCPATH"/occ maintenance:mode --on >/dev/null 2>&1
|
|
else
|
|
sudo -u www-data php "$NCPATH"/occ "$@";
|
|
fi
|
|
}
|
|
|
|
# Backwards compatibility (2020-10-08)
|
|
occ_command() {
|
|
nextcloud_occ "$@";
|
|
}
|
|
|
|
occ_command_no_check() {
|
|
nextcloud_occ_no_check "$@";
|
|
}
|
|
|
|
network_ok() {
|
|
version(){
|
|
local h t v
|
|
|
|
[[ $2 = "$1" || $2 = "$3" ]] && return 0
|
|
|
|
v=$(printf '%s\n' "$@" | sort -V)
|
|
h=$(head -n1 <<<"$v")
|
|
t=$(tail -n1 <<<"$v")
|
|
|
|
[[ $2 != "$h" && $2 != "$t" ]]
|
|
}
|
|
if version 20.04 "$DISTRO" 22.04.10
|
|
then
|
|
print_text_in_color "$ICyan" "Testing if network is OK..."
|
|
if site_200 github.com
|
|
then
|
|
return
|
|
fi
|
|
if ! netplan apply
|
|
then
|
|
systemctl restart systemd-networkd > /dev/null
|
|
fi
|
|
# Check the connention
|
|
countdown 'Waiting for network to restart...' 3
|
|
if ! site_200 github.com
|
|
then
|
|
# sleep 10 seconds so that some slow networks have time to restart
|
|
countdown 'Not online yet, waiting a bit more...' 10
|
|
if ! site_200 github.com
|
|
then
|
|
# sleep 30 seconds so that some REALLY slow networks have time to restart
|
|
countdown 'Not online yet, waiting a bit more (final attempt)...' 30
|
|
site_200 github.com
|
|
fi
|
|
fi
|
|
else
|
|
msg_box "Your current Ubuntu version is $DISTRO but must be between 20.04 - 22.04.10 to run this script."
|
|
msg_box "Please contact us to get support for upgrading your server:
|
|
https://www.hanssonit.se/#contact
|
|
https://shop.hanssonit.se/"
|
|
msg_box "We will now pause for 60 seconds. Please press CTRL+C when prompted to do so."
|
|
countdown "Please press CTRL+C to abort..." 60
|
|
fi
|
|
}
|
|
|
|
# Whiptail auto-size
|
|
calc_wt_size() {
|
|
WT_HEIGHT=17
|
|
WT_WIDTH=$(tput cols)
|
|
|
|
if [ -z "$WT_WIDTH" ] || [ "$WT_WIDTH" -lt 60 ]; then
|
|
WT_WIDTH=80
|
|
fi
|
|
if [ "$WT_WIDTH" -gt 178 ]; then
|
|
WT_WIDTH=120
|
|
fi
|
|
WT_MENU_HEIGHT=$((WT_HEIGHT-7))
|
|
export WT_MENU_HEIGHT
|
|
}
|
|
|
|
# example: is_app_enabled documentserver_community
|
|
is_app_enabled() {
|
|
if nextcloud_occ app:list | sed '/Disabled/,$d' | awk '{print$2}' | tr -d ':' | sed '/^$/d' | grep -q "^$1$"
|
|
then
|
|
return 0
|
|
else
|
|
return 1
|
|
fi
|
|
}
|
|
|
|
#example: is_app_installed documentserver_community
|
|
is_app_installed() {
|
|
if nextcloud_occ app:list | grep -wq "$1"
|
|
then
|
|
return 0
|
|
else
|
|
return 1
|
|
fi
|
|
}
|
|
|
|
install_and_enable_app() {
|
|
# Download and install $1
|
|
if ! is_app_installed "$1"
|
|
then
|
|
print_text_in_color "$ICyan" "Installing $1..."
|
|
# nextcloud_occ not possible here because it uses check_command and will exit if nextcloud_occ fails
|
|
installcmd="$(nextcloud_occ_no_check app:install "$1")"
|
|
if grep 'dependencies are not fulfilled' <<< "$installcmd"
|
|
then
|
|
msg_box "The $1 app could not be installed.
|
|
It's probably not compatible with $(nextcloud_occ -V).
|
|
|
|
You can try to install the app manually after the script has finished,
|
|
or when a new version of the app is released with the following command:
|
|
|
|
'sudo -u www-data php ${NCPATH}/occ app:install $1'"
|
|
rm -Rf "$NCPATH/apps/$1"
|
|
else
|
|
# Enable $1 if it's installed but not enabled
|
|
if is_app_installed "$1"
|
|
then
|
|
if ! is_app_enabled "$1"
|
|
then
|
|
nextcloud_occ_no_check app:enable "$1"
|
|
chown -R www-data:www-data "$NC_APPS_PATH"
|
|
fi
|
|
fi
|
|
fi
|
|
else
|
|
print_text_in_color "$ICyan" "It seems like $1 is installed already, trying to enable it..."
|
|
nextcloud_occ_no_check app:enable "$1"
|
|
fi
|
|
}
|
|
|
|
download_verify_nextcloud_stable() {
|
|
# Check the current Nextcloud version
|
|
while [ -z "$NCVERSION" ]
|
|
do
|
|
print_text_in_color "$ICyan" "Fetching the latest Nextcloud version..."
|
|
NCVERSION=$(curl -s -m 900 $NCREPO/ | sed --silent 's/.*href="nextcloud-\([^"]\+\).zip.asc".*/\1/p' | sort --version-sort | tail -1)
|
|
STABLEVERSION="nextcloud-$NCVERSION"
|
|
print_text_in_color "$IGreen" "$NCVERSION"
|
|
done
|
|
|
|
# Download the file
|
|
rm -f "$HTML/$STABLEVERSION.tar.bz2"
|
|
cd $HTML
|
|
print_text_in_color "$ICyan" "Downloading $STABLEVERSION..."
|
|
if network_ok
|
|
then
|
|
curl -fSLO --retry 3 "$NCREPO"/"$STABLEVERSION".tar.bz2
|
|
else
|
|
msg_box "There seems to be an issue with your network, please try again later.\nThis script will now exit."
|
|
exit 1
|
|
fi
|
|
# Checksum of the downloaded file
|
|
print_text_in_color "$ICyan" "Checking SHA256 checksum..."
|
|
mkdir -p "$SHA256_DIR"
|
|
curl_to_dir "$NCREPO" "$STABLEVERSION.tar.bz2.sha256" "$SHA256_DIR"
|
|
SHA256SUM="$(tail "$SHA256_DIR"/"$STABLEVERSION".tar.bz2.sha256 | awk '{print$1}')"
|
|
if ! echo "$SHA256SUM" "$STABLEVERSION.tar.bz2" | sha256sum -c
|
|
then
|
|
msg_box "The SHA256 checksums of $STABLEVERSION.tar.bz2 didn't match, please try again."
|
|
exit 1
|
|
fi
|
|
# integrity of the downloaded file
|
|
print_text_in_color "$ICyan" "Checking GPG integrity..."
|
|
install_if_not gnupg
|
|
mkdir -p "$GPGDIR"
|
|
curl_to_dir "$NCREPO" "$STABLEVERSION.tar.bz2.asc" "$GPGDIR"
|
|
chmod -R 600 "$GPGDIR"
|
|
gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys "$OpenPGP_fingerprint"
|
|
gpg --verify "$GPGDIR/$STABLEVERSION.tar.bz2.asc" "$HTML/$STABLEVERSION.tar.bz2"
|
|
rm -r "$SHA256_DIR"
|
|
rm -r "$GPGDIR"
|
|
rm -f releases
|
|
}
|
|
|
|
# call like: download_script folder_variable name_of_script
|
|
# e.g. download_script MENU additional_apps
|
|
# Use it for functions like download_static_script
|
|
download_script() {
|
|
download_script_function_in_use=yes
|
|
rm -f "${SCRIPTS}/${2}.sh" "${SCRIPTS}/${2}.php" "${SCRIPTS}/${2}.py"
|
|
if ! { curl_to_dir "${!1}" "${2}.sh" "$SCRIPTS" || curl_to_dir "${!1}" "${2}.php" "$SCRIPTS" || curl_to_dir "${!1}" "${2}.py" "$SCRIPTS"; }
|
|
then
|
|
print_text_in_color "$IRed" "Downloading ${2} failed"
|
|
sleep 2
|
|
msg_box "Script failed to download. Please run: \
|
|
'sudo curl -sLO ${!1}/${2}.sh|php|py' and try again.
|
|
|
|
If it still fails, please report this issue to: $ISSUES."
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
# call like: run_script folder_variable name_of_script
|
|
# e.g. run_script MENU additional_apps
|
|
# Use it for functions like run_script STATIC
|
|
run_script() {
|
|
rm -f "${SCRIPTS}/${2}.sh" "${SCRIPTS}/${2}.php" "${SCRIPTS}/${2}.py"
|
|
if download_script "${1}" "${2}"
|
|
then
|
|
if [ -f "${SCRIPTS}/${2}".sh ]
|
|
then
|
|
bash "${SCRIPTS}/${2}.sh"
|
|
rm -f "${SCRIPTS}/${2}.sh"
|
|
elif [ -f "${SCRIPTS}/${2}".php ]
|
|
then
|
|
php "${SCRIPTS}/${2}.php"
|
|
rm -f "${SCRIPTS}/${2}.php"
|
|
elif [ -f "${SCRIPTS}/${2}".py ]
|
|
then
|
|
install_if_not python3
|
|
python3 "${SCRIPTS}/${2}.py"
|
|
rm -f "${SCRIPTS}/${2}.py"
|
|
fi
|
|
else
|
|
print_text_in_color "$IRed" "Running ${2} failed"
|
|
sleep 2
|
|
msg_box "Script failed to execute. Please run: \
|
|
'sudo curl -sLO ${!1}/${2}.sh|php|py' and try again.
|
|
|
|
If it still fails, please report this issue to: $ISSUES."
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
# Run any script in ../master
|
|
# call like: run_main_script name_of_script
|
|
run_main_script() {
|
|
run_script GITHUB_REPO "${1}"
|
|
}
|
|
|
|
# Backwards compatibility (2020-10-25) Needed for update.sh to run in all VMs, even those several years old
|
|
run_static_script() {
|
|
run_script STATIC "${1}"
|
|
}
|
|
|
|
version(){
|
|
local h t v
|
|
|
|
[[ $2 = "$1" || $2 = "$3" ]] && return 0
|
|
|
|
v=$(printf '%s\n' "$@" | sort -V)
|
|
h=$(head -n1 <<<"$v")
|
|
t=$(tail -n1 <<<"$v")
|
|
|
|
[[ $2 != "$h" && $2 != "$t" ]]
|
|
}
|
|
|
|
version_gt() {
|
|
local v1 v2 IFS=.
|
|
read -ra v1 <<< "$1"
|
|
read -ra v2 <<< "$2"
|
|
printf -v v1 %03d "${v1[@]}"
|
|
printf -v v2 %03d "${v2[@]}"
|
|
[[ $v1 > $v2 ]]
|
|
}
|
|
|
|
spinner_loading() {
|
|
printf '['
|
|
while ps "$!" > /dev/null; do
|
|
echo -n '⣾⣽⣻'
|
|
sleep '.7'
|
|
done
|
|
echo ']'
|
|
}
|
|
|
|
any_key() {
|
|
local PROMPT="$1"
|
|
read -r -sn 1 -p "$(printf "%b" "${IGreen}${PROMPT}${Color_Off}")";echo
|
|
}
|
|
|
|
lowest_compatible_nc() {
|
|
# .ocdata needs to exist to be able to check version, occ relies on everytihgn working
|
|
until [ -f "$NCDATA"/.ocdata ]
|
|
do
|
|
# SUPPORT LEGACY: If it's not in the standard path, check for existing datadir in config.php
|
|
if [ -f "$NCPATH"/config/config.php ]
|
|
then
|
|
NCDATA="$(grep 'datadir' "${NCPATH}"/config/config.php | awk '{print $3}' | cut -d "'" -f2)"
|
|
# Check if ncdata is set, else fetch value from lib again (maybe happens during installation)
|
|
if [ -z "${NCDATA}" ]
|
|
then
|
|
msg_box "You are not using the default path for your datadir, and we can't find it in your config.php, so you can't run this script.
|
|
If you think this is a bug, please report it to $ISSUES"
|
|
else
|
|
# Check again an break if found
|
|
if [ -f "$NCDATA"/.ocdata ]
|
|
then
|
|
break
|
|
fi
|
|
fi
|
|
fi
|
|
msg_box "Your .ocdata are missing in the Nextcloud data folder. This probably means that you failed to mount the second drive, or that it failed to import during boot of the system.
|
|
We can't continue without it, so please shutdown the machine and double check that the second disk is correctly mounted in your hypervisor/server then try again.
|
|
|
|
If you need support, feel free to contact us here: https://www.hanssonit.se/#contact"
|
|
exit 1
|
|
done
|
|
|
|
# Check version
|
|
if [ -z "$NCVERSION" ]
|
|
then
|
|
nc_update
|
|
fi
|
|
if [ "${CURRENTVERSION%%.*}" -lt "$1" ]
|
|
then
|
|
msg_box "This script is developed to work with Nextcloud $1 and later.
|
|
This means we can't use our own script for now. But don't worry,
|
|
we automated the update process and we will now use Nextcloud's updater instead.
|
|
|
|
Press [OK] to continue the update, or press [CTRL+C] to abort.
|
|
|
|
If you are using Nextcloud $1 and later and still see this message,
|
|
or experience other issues then please report this to $ISSUES"
|
|
|
|
# Download the latest updater
|
|
# cd $NCPATH
|
|
# curl sLO https://github.com/nextcloud/updater/archive/master.zip
|
|
# install_if_not unzip
|
|
# unzip -q master.zip
|
|
# rm master.zip*
|
|
# rm updater/ -R
|
|
# mv updater-master/ updater/
|
|
# download_script STATIC setup_secure_permissions_nextcloud -P $SCRIPTS
|
|
# bash $SECURE
|
|
# cd
|
|
|
|
# Do the upgrade
|
|
chown -R www-data:www-data "$NCPATH"
|
|
rm -rf "$NCPATH"/assets
|
|
yes | sudo -u www-data php /var/www/nextcloud/updater/updater.phar
|
|
download_script STATIC setup_secure_permissions_nextcloud -P "$SCRIPTS"
|
|
bash "$SECURE"
|
|
nextcloud_occ maintenance:mode --off
|
|
fi
|
|
|
|
# Check new version
|
|
# shellcheck source=lib.sh
|
|
if [ -z "$NCVERSION" ]
|
|
then
|
|
nc_update
|
|
fi
|
|
if [ "${CURRENTVERSION%%.*}" -ge "$1" ]
|
|
then
|
|
sleep 1
|
|
else
|
|
msg_box "Your current version is still not compatible with the version required to run this script.
|
|
|
|
To upgrade between major versions, please check this out:
|
|
https://shop.hanssonit.se/product/upgrade-between-major-owncloud-nextcloud-versions/"
|
|
nextcloud_occ -V
|
|
exit
|
|
fi
|
|
}
|
|
|
|
# Check universe repository
|
|
check_universe() {
|
|
UNIV=$(apt-cache policy | grep http | awk '{print $3}' | grep universe | head -n 1 | cut -d "/" -f 2)
|
|
if [ "$UNIV" != "universe" ]
|
|
then
|
|
print_text_in_color "$ICyan" "Adding required repo (universe)."
|
|
add-apt-repository universe
|
|
fi
|
|
}
|
|
|
|
# Check universe repository
|
|
check_multiverse() {
|
|
if [ "$(apt-cache policy | grep http | awk '{print $3}' | grep multiverse | head -n 1 | cut -d "/" -f 2)" != "multiverse" ]
|
|
then
|
|
print_text_in_color "$ICyan" "Adding required repo (multiverse)."
|
|
yes | add-apt-repository multiverse
|
|
fi
|
|
}
|
|
|
|
set_max_count() {
|
|
if grep -F 'vm.max_map_count=512000' /etc/sysctl.conf ; then
|
|
print_text_in_color "$ICyan" "Max map count already set, skipping..."
|
|
else
|
|
sysctl -w vm.max_map_count=512000
|
|
{
|
|
echo "###################################################################"
|
|
echo "# Docker ES max virtual memory"
|
|
echo "vm.max_map_count=512000"
|
|
} >> /etc/sysctl.conf
|
|
fi
|
|
}
|
|
|
|
remove_collabora_docker() {
|
|
# Check if Collabora is previously installed
|
|
# If yes, then stop and prune the docker container
|
|
docker_prune_this 'collabora/code'
|
|
# Revoke LE
|
|
SUBDOMAIN=$(input_box_flow "Please enter the subdomain you are using for Collabora, e.g: office.yourdomain.com")
|
|
if [ -f "$CERTFILES/$SUBDOMAIN/cert.pem" ]
|
|
then
|
|
yes no | certbot revoke --cert-path "$CERTFILES/$SUBDOMAIN/cert.pem"
|
|
REMOVE_OLD="$(find "$LETSENCRYPTPATH/" -name "$SUBDOMAIN*")"
|
|
for remove in $REMOVE_OLD
|
|
do rm -rf "$remove"
|
|
done
|
|
fi
|
|
# Remove Apache2 config
|
|
if [ -f "$SITES_AVAILABLE/$SUBDOMAIN.conf" ]
|
|
then
|
|
a2dissite "$SUBDOMAIN".conf
|
|
restart_webserver
|
|
rm -f "$SITES_AVAILABLE/$SUBDOMAIN.conf"
|
|
fi
|
|
# Disable RichDocuments (Collabora App) if activated
|
|
if is_app_installed richdocuments
|
|
then
|
|
nextcloud_occ app:remove richdocuments
|
|
fi
|
|
# Remove trusted domain
|
|
remove_from_trusted_domains "$SUBDOMAIN"
|
|
}
|
|
|
|
remove_onlyoffice_docker() {
|
|
# Check if Onlyoffice is previously installed
|
|
# If yes, then stop and prune the docker container
|
|
docker_prune_this 'onlyoffice/documentserver'
|
|
# Revoke LE
|
|
SUBDOMAIN=$(input_box_flow "Please enter the subdomain you are using for OnlyOffice, e.g: office.yourdomain.com")
|
|
if [ -f "$CERTFILES/$SUBDOMAIN/cert.pem" ]
|
|
then
|
|
yes no | certbot revoke --cert-path "$CERTFILES/$SUBDOMAIN/cert.pem"
|
|
REMOVE_OLD="$(find "$LETSENCRYPTPATH/" -name "$SUBDOMAIN*")"
|
|
for remove in $REMOVE_OLD
|
|
do rm -rf "$remove"
|
|
done
|
|
fi
|
|
# Remove Apache2 config
|
|
if [ -f "$SITES_AVAILABLE/$SUBDOMAIN.conf" ]
|
|
then
|
|
a2dissite "$SUBDOMAIN".conf
|
|
restart_webserver
|
|
rm -f "$SITES_AVAILABLE/$SUBDOMAIN.conf"
|
|
fi
|
|
# Disable onlyoffice if activated
|
|
if is_app_installed onlyoffice
|
|
then
|
|
nextcloud_occ app:remove onlyoffice
|
|
fi
|
|
# Remove trusted domain
|
|
remove_from_trusted_domains "$SUBDOMAIN"
|
|
}
|
|
|
|
# Remove all office apps
|
|
remove_all_office_apps() {
|
|
# remove OnlyOffice-documentserver if installed
|
|
if is_app_installed documentserver_community
|
|
then
|
|
nextcloud_occ app:remove documentserver_community
|
|
fi
|
|
|
|
# Disable OnlyOffice App if installed
|
|
if is_app_installed onlyoffice
|
|
then
|
|
nextcloud_occ app:remove onlyoffice
|
|
fi
|
|
|
|
# remove richdocumentscode-documentserver if installed
|
|
if is_app_installed richdocumentscode
|
|
then
|
|
nextcloud_occ app:remove richdocumentscode
|
|
fi
|
|
|
|
# Disable RichDocuments (Collabora App) if installed
|
|
if is_app_installed richdocuments
|
|
then
|
|
nextcloud_occ app:remove richdocuments
|
|
fi
|
|
}
|
|
|
|
# Check if docker is installed
|
|
is_docker_running() {
|
|
docker ps -a > /dev/null 2>&1
|
|
}
|
|
|
|
# Check if specific docker image is present
|
|
is_image_present() {
|
|
[[ $(docker images -q "$1") ]]
|
|
}
|
|
|
|
# Check if old docker exists
|
|
# FULL NAME e.g. ark74/nc_fts or containrrr/watchtower or collabora/code or 'nextcloud/aio-imaginary'
|
|
does_this_docker_exist() {
|
|
is_docker_running && is_image_present "$1";
|
|
}
|
|
|
|
install_docker() {
|
|
if ! is_docker_running
|
|
then
|
|
is_process_running dpkg
|
|
is_process_running apt
|
|
print_text_in_color "$ICyan" "Installing Docker CE..."
|
|
apt-get update -q4 & spinner_loading
|
|
install_if_not curl
|
|
curl -fsSL https://get.docker.com | sh
|
|
fi
|
|
|
|
# Set overlay2
|
|
if ! [ -f /etc/docker/daemon.json ] || ! grep -q '"storage-driver": "overlay2"' /etc/docker/daemon.json
|
|
then
|
|
cat << OVERLAY2 > /etc/docker/daemon.json
|
|
{
|
|
"storage-driver": "overlay2"
|
|
}
|
|
OVERLAY2
|
|
|
|
# Only restart if changed
|
|
systemctl daemon-reload
|
|
systemctl restart docker.service
|
|
fi
|
|
}
|
|
|
|
# Remove all dockers excluding one
|
|
# docker_prune_except_this fts_esror 'Full Text Search'
|
|
docker_prune_except_this() {
|
|
print_text_in_color "$ICyan" "Checking if there are any old images and removing them..."
|
|
DOCKERPS=$(docker ps -a | grep -v "$1" | awk 'NR>1 {print $1}')
|
|
if [ "$DOCKERPS" != "" ]
|
|
then
|
|
if yesno_box_yes "Do you want to remove old Docker instance(s)... ($DOCKERPS)? Please note that we will not remove $1 ($2)."
|
|
then
|
|
docker stop "$(docker ps -a | grep -v "$1" | awk 'NR>1 {print $1}')"
|
|
docker container prune -f
|
|
docker image prune -a -f
|
|
docker volume prune -f
|
|
else
|
|
msg_box "OK, this script will now exit, but there's still leftovers to cleanup. You can run it again at any time."
|
|
exit
|
|
fi
|
|
fi
|
|
}
|
|
|
|
# Remove selected Docker image
|
|
# docker_prune_this 'collabora/code' 'onlyoffice/documentserver' 'ark74/nc_fts' 'imaginary'
|
|
docker_prune_this() {
|
|
if does_this_docker_exist "$1"
|
|
then
|
|
if yesno_box_yes "Do you want to remove $1?"
|
|
then
|
|
CONTAINER="$(docker container ls -a | grep "$1" | awk '{print $1}' | tail -1)"
|
|
if [ -z "$CONTAINER" ]
|
|
then
|
|
# Special solution if the container name is scrambled, then search for the actual name instead
|
|
CONTAINER="$(docker container ls -a | grep "$2" | awk '{print $1}' | tail -1)"
|
|
fi
|
|
docker stop "$CONTAINER"
|
|
docker rm "$CONTAINER"
|
|
docker image prune -a -f
|
|
docker system prune -a -f
|
|
else
|
|
msg_box "OK, this script will now exit, but there's still leftovers to cleanup. You can run it again at any time."
|
|
exit
|
|
fi
|
|
fi
|
|
}
|
|
|
|
# Remove selected Docker volume
|
|
# docker_prune_volume ''
|
|
docker_prune_volume() {
|
|
if docker volume ls | grep -q "$1$"
|
|
then
|
|
msg_box "Removing old Docker volume: $1
|
|
You will be given the option to abort when you hit OK."
|
|
any_key "Press any key to continue. Press CTRL+C to abort"
|
|
docker volume rm "$1" -f
|
|
fi
|
|
}
|
|
|
|
# Stop and remove selected docker-compose items (containers, networks, volumes) by up.
|
|
# docker-compose_down "$OPNSDIR/docker-compose.yml" (absolute path to docker-compose.yml)
|
|
docker-compose_down() {
|
|
if [ -f "$1" ]
|
|
then
|
|
cd "$(dirname "$1")"
|
|
if is_this_installed docker-compose
|
|
then
|
|
docker-compose down --volumes --rmi all
|
|
else
|
|
docker compose down --volumes --rmi all
|
|
fi
|
|
# Remove leftovers
|
|
docker system prune -a -f
|
|
else
|
|
echo "Non-existing docker-compose file path, skipping..."
|
|
fi
|
|
}
|
|
|
|
# Update specific Docker image
|
|
# docker_update_specific 'vaultwarden' 'Vaultwarden' (docker conainter name = $1, the name in text = $2)
|
|
docker_update_specific() {
|
|
if is_docker_running && docker ps -a --format "{{.Names}}" | grep -q "^$1$"
|
|
then
|
|
if docker run --rm --name temporary_watchtower -v /var/run/docker.sock:/var/run/docker.sock containrrr/watchtower --cleanup --run-once "$1"
|
|
then
|
|
print_text_in_color "$IGreen" "$2 docker image just got updated!"
|
|
echo "Docker image just got updated! We just updated $2 docker image automatically! $(date +%Y%m%d)" >> "$VMLOGS"/update.log
|
|
fi
|
|
fi
|
|
}
|
|
# docker-compose_update 'fulltextsearch-elasticsearch' 'Full Text Search' "$FTSDIR"
|
|
# (docker conainter name = $1, the name in text = $2 , docker-compose directory = $3)
|
|
docker-compose_update() {
|
|
if is_docker_running && docker ps -a --format "{{.Names}}" | grep -q "^$1$"
|
|
then
|
|
cd "$3"
|
|
docker compose pull
|
|
docker compose up -d --remove-orphans
|
|
docker image prune -a -f
|
|
print_text_in_color "$IGreen" "$2 docker image just got updated!"
|
|
echo "Docker image just got updated! We just updated $2 docker image automatically! $(date +%Y%m%d)" >> "$VMLOGS"/update.log
|
|
fi
|
|
}
|
|
|
|
# countdown 'message looks like this' 10
|
|
countdown() {
|
|
print_text_in_color "$ICyan" "$1"
|
|
secs="$(($2))"
|
|
while [ $secs -gt 0 ]; do
|
|
echo -ne "$secs\033[0K\r"
|
|
sleep 1
|
|
: $((secs--))
|
|
done
|
|
}
|
|
|
|
print_text_in_color() {
|
|
printf "%b%s%b\n" "$1" "$2" "$Color_Off"
|
|
}
|
|
|
|
# Apply patch
|
|
# App:
|
|
# git_apply_patch "319" "fulltextsearch_elasticsearch" "27.1.1" "$NCPATH/apps/fulltextsearch_elasticsearch"
|
|
# Server:
|
|
# git_apply_patch "15992" "server" "16.0.2" "$NCPATH"
|
|
# 1 = pull
|
|
# 2 = repository
|
|
# 3 = Nextcloud version
|
|
# 4 = Folder on system
|
|
git_apply_patch() {
|
|
if [ -z "$NCVERSION" ]
|
|
then
|
|
nc_update
|
|
fi
|
|
if [[ "$CURRENTVERSION" = "$3" ]]
|
|
then
|
|
curl_to_dir "https://patch-diff.githubusercontent.com/raw/nextcloud/${2}/pull" "${1}.patch" "/tmp"
|
|
install_if_not git
|
|
cd "${4}"
|
|
if git apply --check /tmp/"${1}".patch >/dev/null 2>&1
|
|
then
|
|
print_text_in_color "$IGreen" "Applying patch https://github.com/nextcloud/${2}/pull/${1} ..."
|
|
git apply /tmp/"${1}".patch
|
|
fi
|
|
fi
|
|
}
|
|
|
|
# Check if it's the Home/SME Server
|
|
|
|
# if home_sme_server
|
|
# then
|
|
# do something
|
|
# fi
|
|
home_sme_server() {
|
|
# OLD DISKS: "Samsung SSD 860" || ST5000LM000-2AN1 || ST5000LM015-2E81
|
|
# OLD MEMORY: BLS16G4 (Balistix Sport) || 18ASF2G72HZ (ECC)
|
|
if lshw -c system | grep -q "NUC8i3BEH\|NUC10i3FNH\|PN50\|PN51\|PN52"
|
|
then
|
|
if lshw -c memory | grep -q "BLS16G4\|18ASF2G72HZ\|16ATF2G64HZ\|CT16G4SFD8266\|M471A4G43MB1\|9905744\|HMA82GS6JJR8N\|HMA82GS6CJR8N\|9905703-023\|9905744-110"
|
|
then
|
|
if lshw -c disk | grep -q "ST2000LM015-2E81\|WDS400\|ST5000LM000-2AN1\|ST5000LM015-2E81\|Samsung SSD 860\|WDS500G1R0B"
|
|
then
|
|
NEXTCLOUDHOMESME=yes-this-is-the-home-sme-server
|
|
elif lshw -c storage | grep -q "SN700"
|
|
then
|
|
NEXTCLOUDHOMESME=yes-this-is-the-home-sme-server
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
if [ -n "$NEXTCLOUDHOMESME" ]
|
|
then
|
|
return 0
|
|
else
|
|
return 1
|
|
fi
|
|
}
|
|
|
|
asuspn51() {
|
|
if lshw -c system | grep -q "PN51"
|
|
then
|
|
return 0
|
|
else
|
|
return 1
|
|
fi
|
|
}
|
|
|
|
# Check if the value is a number
|
|
# EXAMPLE: https://github.com/nextcloud/vm/pull/1012
|
|
check_if_number() {
|
|
case "${1}" in
|
|
''|*[!0-9]*) return 1 ;;
|
|
*) return 0 ;;
|
|
esac
|
|
}
|
|
|
|
# Prettify Json files
|
|
# $1 = json input
|
|
prettify_json() {
|
|
local JSON_INPUT
|
|
JSON_INPUT="$(echo "$1" | sed 's|\\||g' | sed 's|,"|,\\n "|g;s|":|": |g;s|{"|{\n "|;s|"}|"\n}|')"
|
|
echo -e "$JSON_INPUT"
|
|
}
|
|
|
|
# Example:
|
|
# notify_admin_gui \
|
|
# "Subject" \
|
|
# "Message"
|
|
#
|
|
# nextcloud_occ_no_check notification:generate -l "$2" "$admin" "$1"
|
|
notify_admin_gui() {
|
|
local NC_USERS
|
|
local user
|
|
local admin
|
|
if ! is_app_enabled notifications
|
|
then
|
|
print_text_in_color "$IRed" "The notifications app isn't enabled - unable to send notifications"
|
|
return 1
|
|
fi
|
|
|
|
print_text_in_color "$ICyan" "Posting notification to users that are admins, this might take a while..."
|
|
send_mail "$1" "$2"
|
|
if [ -z "${NC_ADMIN_USER[*]}" ]
|
|
then
|
|
NC_USERS=$(nextcloud_occ_no_check user:list | sed 's|^ - ||g' | sed 's|:.*||')
|
|
mapfile -t NC_USERS <<< "$NC_USERS"
|
|
for user in "${NC_USERS[@]}"
|
|
do
|
|
if nextcloud_occ_no_check user:info "$user" | cut -d "-" -f2 | grep -x -q " admin"
|
|
then
|
|
NC_ADMIN_USER+=("$user")
|
|
fi
|
|
done
|
|
fi
|
|
|
|
for admin in "${NC_ADMIN_USER[@]}"
|
|
do
|
|
print_text_in_color "$IGreen" "Posting '$1' to: $admin"
|
|
nextcloud_occ_no_check notification:generate -l "$2" "$admin" "$(hostname -f): $1"
|
|
done
|
|
}
|
|
|
|
# Use this to send system mails
|
|
# e.g.: send_mail "subject" "text"
|
|
send_mail() {
|
|
local RECIPIENT
|
|
if [ -f /etc/msmtprc ]
|
|
then
|
|
RECIPIENT=$(grep "recipient=" /etc/msmtprc)
|
|
RECIPIENT="${RECIPIENT##*recipient=}"
|
|
if [ -n "$RECIPIENT" ]
|
|
then
|
|
print_text_in_color "$ICyan" "Sending '$1' to $RECIPIENT"
|
|
if echo -e "$2" | mail -s "NcVM: $(hostname -f) - $1" "$RECIPIENT"
|
|
then
|
|
return 0
|
|
fi
|
|
fi
|
|
fi
|
|
return 1
|
|
}
|
|
|
|
zpool_import_if_missing() {
|
|
# ZFS needs to be installed
|
|
if ! is_this_installed zfsutils-linux
|
|
then
|
|
print_text_in_color "$IRed" "This function is only intended to be run if you have ZFS installed."
|
|
return 1
|
|
elif [ -z "$POOLNAME" ]
|
|
then
|
|
print_text_in_color "$IRed" "Please define the POOLNAME variable, as we can't continue without it."
|
|
return 1
|
|
fi
|
|
# Import zpool in case missing
|
|
if ! zpool list "$POOLNAME" >/dev/null 2>&1
|
|
then
|
|
zpool import -f "$POOLNAME"
|
|
fi
|
|
# Check if UUID is used
|
|
if zpool list -v | grep sdb
|
|
then
|
|
# Get UUID
|
|
check_command partprobe -s
|
|
if fdisk -l /dev/sdb1 >/dev/null 2>&1
|
|
then
|
|
UUID_SDB1=$(blkid -o value -s UUID /dev/sdb1)
|
|
fi
|
|
# Export / import the correct way (based on UUID)
|
|
check_command zpool export "$POOLNAME"
|
|
check_command zpool import -d /dev/disk/by-uuid/"$UUID_SDB1" "$POOLNAME"
|
|
fi
|
|
}
|
|
|
|
# Check for free space on the ubuntu-vg
|
|
check_free_space() {
|
|
if vgs &>/dev/null
|
|
then
|
|
FREE_SPACE=$(vgs | grep ubuntu-vg | awk '{print $7}' | grep g | grep -oP "[0-9]+[\.,][0-9]" | sed 's|[.,]||')
|
|
fi
|
|
if [ -z "$FREE_SPACE" ]
|
|
then
|
|
FREE_SPACE=0
|
|
fi
|
|
}
|
|
|
|
# Check if snapshotname already exists
|
|
does_snapshot_exist() {
|
|
local SNAPSHOTS
|
|
local snapshot
|
|
if lvs &>/dev/null
|
|
then
|
|
SNAPSHOTS="$(lvs | grep ubuntu-vg | awk '{print $1}' | grep -v ubuntu-lv)"
|
|
fi
|
|
if [ -z "$SNAPSHOTS" ]
|
|
then
|
|
return 1
|
|
fi
|
|
mapfile -t SNAPSHOTS <<< "$SNAPSHOTS"
|
|
for snapshot in "${SNAPSHOTS[@]}"
|
|
do
|
|
if [ "$snapshot" = "$1" ]
|
|
then
|
|
return 0
|
|
fi
|
|
done
|
|
return 1
|
|
}
|
|
|
|
check_php() {
|
|
print_text_in_color "$ICyan" "Getting current PHP-version..."
|
|
GETPHP="$(php -v | grep -m 1 PHP | awk '{print $2}' | cut -d '-' -f1)"
|
|
|
|
if [ -z "$GETPHP" ]
|
|
then
|
|
print_text_in_color "$IRed" "Can't find proper PHP version, aborting..."
|
|
exit 1
|
|
fi
|
|
|
|
if grep 7.0 <<< "$GETPHP" >/dev/null 2>&1
|
|
then
|
|
export PHPVER=7.0
|
|
elif grep 7.1 <<< "$GETPHP" >/dev/null 2>&1
|
|
then
|
|
export PHPVER=7.1
|
|
elif grep 7.2 <<< "$GETPHP" >/dev/null 2>&1
|
|
then
|
|
export PHPVER=7.2
|
|
elif grep 7.3 <<< "$GETPHP" >/dev/null 2>&1
|
|
then
|
|
export PHPVER=7.3
|
|
elif grep 7.4 <<< "$GETPHP" >/dev/null 2>&1
|
|
then
|
|
export PHPVER=7.4
|
|
elif grep 8.0 <<< "$GETPHP" >/dev/null 2>&1
|
|
then
|
|
export PHPVER=8.0
|
|
elif grep 8.1 <<< "$GETPHP" >/dev/null 2>&1
|
|
then
|
|
export PHPVER=8.1
|
|
elif grep 8.2 <<< "$GETPHP" >/dev/null 2>&1
|
|
then
|
|
export PHPVER=8.2
|
|
elif grep 8.3 <<< "$GETPHP" >/dev/null 2>&1
|
|
then
|
|
export PHPVER=8.3
|
|
fi
|
|
|
|
# Export other PHP variables based on PHPVER
|
|
export PHP_FPM_DIR=/etc/php/$PHPVER/fpm
|
|
export PHP_INI=$PHP_FPM_DIR/php.ini
|
|
export PHP_POOL_DIR=$PHP_FPM_DIR/pool.d
|
|
export PHP_MODS_DIR=/etc/php/"$PHPVER"/mods-available
|
|
|
|
# Show version
|
|
print_text_in_color "$IGreen" PHPVER="$PHPVER"
|
|
}
|
|
|
|
add_dockerprune() {
|
|
if ! crontab -u root -l | grep -q 'dockerprune.sh'
|
|
then
|
|
print_text_in_color "$ICyan" "Adding cronjob for Docker weekly prune..."
|
|
mkdir -p "$SCRIPTS"
|
|
crontab -u root -l | { cat; echo "@weekly $SCRIPTS/dockerprune.sh > /dev/null"; } | crontab -u root -
|
|
check_command echo "#!/bin/bash" > "$SCRIPTS/dockerprune.sh"
|
|
check_command echo "docker system prune -a --force" >> "$SCRIPTS/dockerprune.sh"
|
|
check_command echo "exit" >> "$SCRIPTS/dockerprune.sh"
|
|
chmod a+x "$SCRIPTS"/dockerprune.sh
|
|
print_text_in_color "$IGreen" "Docker automatic prune job added."
|
|
fi
|
|
}
|
|
|
|
test_nono_ports() {
|
|
local e match="$1"
|
|
shift
|
|
for e; do [[ "$e" == "$match" ]] && return 0; done
|
|
return 1
|
|
}
|
|
|
|
check_nono_ports() {
|
|
if test_nono_ports "${1}" "${NONO_PORTS[@]}"
|
|
then
|
|
msg_box "You have to choose another port than $1. Please start over.\n
|
|
Please keep in mind NOT to use the following ports as they are likely in use already:
|
|
${NONO_PORTS[*]}"
|
|
return 1
|
|
fi
|
|
}
|
|
|
|
add_trusted_key_and_repo() {
|
|
# EXAMPLE: add_trusted_key_and_repo "jcameron-key.asc" \
|
|
# "https://download.webmin.com" \
|
|
# "https://download.webmin.com/download/repository" \
|
|
# "sarge contrib" \
|
|
# "webmin-test.list"
|
|
|
|
# $1 = whatever.asc
|
|
# $2 = Key URL e.g. https://download.webmin.com
|
|
# $3 = Deb URL e.g. https://download.webmin.com/download/repository
|
|
# $4 = "$CODENAME $CODENAME main" (e.g. jammy jammy main)
|
|
# $5 = debpackage-name.list
|
|
|
|
# This function is only supported in the currently supported release
|
|
check_distro_version
|
|
|
|
# Do the magic
|
|
if version 22.04 "$DISTRO" 22.04.10
|
|
then
|
|
# New recommended way not using apt-key
|
|
print_text_in_color "$ICyan" "Adding trusted key in /etc/apt/keyrings/$1..."
|
|
curl -sL "$2"/"$1" | tee -a /etc/apt/keyrings/"$1"
|
|
echo "deb [signed-by=/etc/apt/keyrings/$1] $3 $4" > "/etc/apt/sources.list.d/$5"
|
|
apt-get update -q4 & spinner_loading
|
|
elif version 20.04 "$DISTRO" 20.04.10
|
|
then
|
|
# Legacy way with apt-key
|
|
print_text_in_color "$ICyan" "Adding trusted key with apt-key..."
|
|
curl -sL "$2"/"$1" | apt-key add -
|
|
echo "deb $3 $4" > "/etc/apt/sources.list.d/$5"
|
|
apt-get update -q4 & spinner_loading
|
|
fi
|
|
}
|
|
|
|
major_versions_unsupported() {
|
|
# Major versions unsupported
|
|
if [[ "${CURRENTVERSION%%.*}" -le "$NCBAD" ]]
|
|
then
|
|
msg_box "Please note that updates between multiple major versions are unsupported! Your situation is:
|
|
Current version: $CURRENTVERSION
|
|
Latest release: $NCVERSION
|
|
It is best to keep your Nextcloud server upgraded regularly, and to install all point releases
|
|
and major releases, as skipping releases increases the risk of errors. Major releases are
|
|
16, 17, 18 and 19. Point releases are intermediate releases for each major release.
|
|
For example, 18.0.5 and 19.0.2 are point releases.
|
|
You can read more about Nextcloud releases here: https://github.com/nextcloud/server/wiki/Maintenance-and-Release-Schedule
|
|
Please contact T&M Hansson IT AB to help you with upgrading between major versions.
|
|
https://shop.hanssonit.se/product/upgrade-between-major-owncloud-nextcloud-versions/"
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
## bash colors
|
|
# Reset
|
|
Color_Off='\e[0m' # Text Reset
|
|
|
|
# Regular Colors
|
|
Black='\e[0;30m' # Black
|
|
Red='\e[0;31m' # Red
|
|
Green='\e[0;32m' # Green
|
|
Yellow='\e[0;33m' # Yellow
|
|
Blue='\e[0;34m' # Blue
|
|
Purple='\e[0;35m' # Purple
|
|
Cyan='\e[0;36m' # Cyan
|
|
White='\e[0;37m' # White
|
|
|
|
# Bold
|
|
BBlack='\e[1;30m' # Black
|
|
BRed='\e[1;31m' # Red
|
|
BGreen='\e[1;32m' # Green
|
|
BYellow='\e[1;33m' # Yellow
|
|
BBlue='\e[1;34m' # Blue
|
|
BPurple='\e[1;35m' # Purple
|
|
BCyan='\e[1;36m' # Cyan
|
|
BWhite='\e[1;37m' # White
|
|
|
|
# Underline
|
|
UBlack='\e[4;30m' # Black
|
|
URed='\e[4;31m' # Red
|
|
UGreen='\e[4;32m' # Green
|
|
UYellow='\e[4;33m' # Yellow
|
|
UBlue='\e[4;34m' # Blue
|
|
UPurple='\e[4;35m' # Purple
|
|
UCyan='\e[4;36m' # Cyan
|
|
UWhite='\e[4;37m' # White
|
|
|
|
# Background
|
|
On_Black='\e[40m' # Black
|
|
On_Red='\e[41m' # Red
|
|
On_Green='\e[42m' # Green
|
|
On_Yellow='\e[43m' # Yellow
|
|
On_Blue='\e[44m' # Blue
|
|
On_Purple='\e[45m' # Purple
|
|
On_Cyan='\e[46m' # Cyan
|
|
On_White='\e[47m' # White
|
|
|
|
# High Intensity
|
|
IBlack='\e[0;90m' # Black
|
|
IRed='\e[0;91m' # Red
|
|
IGreen='\e[0;92m' # Green
|
|
IYellow='\e[0;93m' # Yellow
|
|
IBlue='\e[0;94m' # Blue
|
|
IPurple='\e[0;95m' # Purple
|
|
ICyan='\e[0;96m' # Cyan
|
|
IWhite='\e[0;97m' # White
|
|
|
|
# Bold High Intensity
|
|
BIBlack='\e[1;90m' # Black
|
|
BIRed='\e[1;91m' # Red
|
|
BIGreen='\e[1;92m' # Green
|
|
BIYellow='\e[1;93m' # Yellow
|
|
BIBlue='\e[1;94m' # Blue
|
|
BIPurple='\e[1;95m' # Purple
|
|
BICyan='\e[1;96m' # Cyan
|
|
BIWhite='\e[1;97m' # White
|
|
|
|
# High Intensity backgrounds
|
|
On_IBlack='\e[0;100m' # Black
|
|
On_IRed='\e[0;101m' # Red
|
|
On_IGreen='\e[0;102m' # Green
|
|
On_IYellow='\e[0;103m' # Yellow
|
|
On_IBlue='\e[0;104m' # Blue
|
|
On_IPurple='\e[0;105m' # Purple
|
|
On_ICyan='\e[0;106m' # Cyan
|
|
On_IWhite='\e[0;107m' # White
|