vst-install-debian.sh 24 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826
  1. #!/bin/bash
  2. # Vesta Debian installer v.01
  3. #----------------------------------------------------------#
  4. # Variables&Functions #
  5. #----------------------------------------------------------#
  6. export PATH=$PATH:/sbin
  7. export DEBIAN_FRONTEND=noninteractive
  8. RHOST='apt.vestacp.com'
  9. CHOST='c.vestacp.com'
  10. VERSION='0.9.8/debian'
  11. software="nginx apache2 apache2-utils apache2.2-common apache2-suexec-custom
  12. libapache2-mod-ruid2 libapache2-mod-rpaf libapache2-mod-fcgid bind9 idn
  13. mysql-server mysql-common mysql-client php5-common php5-cgi php5-mysql
  14. php5-curl libapache2-mod-php5 vsftpd mc exim4 exim4-daemon-heavy
  15. clamav-daemon flex dovecot-imapd dovecot-pop3d phpMyAdmin awstats
  16. webalizer jwhois rssh git spamassassin roundcube roundcube-mysql
  17. roundcube-plugins sudo bc ftp lsof ntpdate rrdtool
  18. dnsutils vesta vesta-nginx vesta-php"
  19. help() {
  20. echo "usage: $0 [OPTIONS]
  21. -e, --email Define email address
  22. -h, --help Print this help and exit
  23. -f, --force Force installation
  24. -n, --noupdate Do not run apt-get upgrade command"
  25. exit 1
  26. }
  27. # Password generator
  28. gen_pass() {
  29. MATRIX='0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'
  30. LENGTH=10
  31. while [ ${n:=1} -le $LENGTH ]; do
  32. PASS="$PASS${MATRIX:$(($RANDOM%${#MATRIX})):1}"
  33. let n+=1
  34. done
  35. echo "$PASS"
  36. }
  37. #----------------------------------------------------------#
  38. # Verifications #
  39. #----------------------------------------------------------#
  40. # Translating argument to --gnu-long-options
  41. for arg; do
  42. delim=""
  43. case "$arg" in
  44. --help) args="${args}-h " ;;
  45. --force) args="${args}-f " ;;
  46. --email) args="${args}-e " ;;
  47. --noupdate) args="${args}-n " ;;
  48. *) [[ "${arg:0:1}" == "-" ]] || delim="\""
  49. args="${args}${delim}${arg}${delim} ";;
  50. esac
  51. done
  52. eval set -- "$args"
  53. # Getopt
  54. while getopts "dhfne:" Option; do
  55. case $Option in
  56. h) help ;; # Help
  57. e) email=$OPTARG ;; # Set email
  58. f) force='yes' ;; # Force apt-get install
  59. n) noupdate='yes' ;; # Disable apt-get upgrade
  60. *) help ;; # Default
  61. esac
  62. done
  63. # Am I root?
  64. if [ "x$(id -u)" != 'x0' ]; then
  65. echo 'Error: this script can only be executed by root'
  66. exit 1
  67. fi
  68. # Check supported version
  69. if [ -e '/etc/redhat-release' ] || [ -e '/etc/lsb-release' ]; then
  70. echo 'Error: sorry, this installer can work only on Debian 7'
  71. exit 1
  72. fi
  73. # Check supported OS
  74. if [ "$(arch)" != 'x86_64' ]; then
  75. arch='i386'
  76. else
  77. arch="amd64"
  78. fi
  79. os=$(head -n1 /etc/issue | cut -f 1 -d ' ')
  80. if [[ "$(cut -f 1 -d . /etc/debian_version)" -eq '7' ]]; then
  81. release="7"
  82. codename="wheezy"
  83. fi
  84. if [ $codename != 'wheezy' ]; then
  85. echo 'Error: only Debian 7 is supported'
  86. exit 1
  87. fi
  88. # Check admin user account
  89. if [ ! -z "$(grep ^admin: /etc/passwd)" ] && [ "$force" != 'yes' ]; then
  90. echo "Error: user admin exists"
  91. echo
  92. echo 'Please remove admin user account before proceeding.'
  93. echo 'If you want to do it automatically run installer with -f option:'
  94. echo "Example: bash $0 --force"
  95. exit 1
  96. fi
  97. # Check admin user account
  98. if [ ! -z "$(grep ^admin: /etc/group)" ] && [ "$force" != 'yes' ]; then
  99. echo "Error: user admin exists"
  100. echo
  101. echo 'Please remove admin user account before proceeding.'
  102. echo 'If you want to do it automatically run installer with -f option:'
  103. echo "Example: bash $0 --force"
  104. exit 1
  105. fi
  106. # Check wget
  107. if [ ! -e '/usr/bin/wget' ]; then
  108. apt-get -y install wget
  109. if [ $? -ne 0 ]; then
  110. echo "Error: can't install wget"
  111. exit 1
  112. fi
  113. fi
  114. # Check repo availability
  115. wget -q "$CHOST/$VERSION/vesta.conf" -O /dev/null
  116. if [ $? -ne 0 ]; then
  117. echo "Error: no access to repository"
  118. exit 1
  119. fi
  120. # Check installed packages
  121. tmpfile=$(mktemp -p /tmp)
  122. dpkg --get-selections > $tmpfile
  123. for pkg in exim4 mysql-server apache2 nginx vesta; do
  124. if [ ! -z "$(grep $pkg $tmpfile)" ]; then
  125. conflicts="$pkg $conflicts"
  126. fi
  127. done
  128. rm -f $tmpfile
  129. if [ ! -z "$conflicts" ] && [ -z "$force" ]; then
  130. echo '!!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!!'
  131. echo
  132. echo 'Following packages are already installed:'
  133. echo "$conflicts"
  134. echo
  135. echo 'It is highly recommended to remove them before proceeding.'
  136. echo 'If you want to force installation run this script with -f option:'
  137. echo "Example: bash $0 --force"
  138. echo
  139. echo '!!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!!'
  140. echo
  141. exit 1
  142. fi
  143. # Check server type
  144. memory=$(grep 'MemTotal' /proc/meminfo |tr ' ' '\n' |grep [0-9])
  145. if [ "$memory" -lt '350000' ] && [ -z "$force" ]; then
  146. echo "Error: not enough memory to install Vesta Control Panel."
  147. echo -e "\nMinimum RAM required: 350Mb"
  148. echo 'If you want to force installation run this script with -f option:'
  149. echo "Example: bash $0 --force"
  150. exit 1
  151. fi
  152. srv_type='micro'
  153. if [ "$memory" -gt '1000000' ]; then
  154. srv_type='small'
  155. fi
  156. if [ "$memory" -gt '3000000' ]; then
  157. srv_type='medium'
  158. fi
  159. if [ "$memory" -gt '7000000' ]; then
  160. srv_type='large'
  161. fi
  162. # Are you sure ?
  163. if [ -z $email ]; then
  164. clear
  165. echo
  166. echo ' _| _| _|_|_|_| _|_|_| _|_|_|_|_| _|_| '
  167. echo ' _| _| _| _| _| _| _| '
  168. echo ' _| _| _|_|_| _|_| _| _|_|_|_| '
  169. echo ' _| _| _| _| _| _| _| '
  170. echo ' _| _|_|_|_| _|_|_| _| _| _| '
  171. echo
  172. echo ' Vesta Control Panel'
  173. echo
  174. echo
  175. echo 'Following software will be installed on your system:'
  176. echo ' - Nginx frontend web server'
  177. echo ' - Apache application web server'
  178. echo ' - Bind DNS server'
  179. echo ' - Exim mail server'
  180. echo ' - Dovecot IMAP and POP3 server'
  181. if [ "$srv_type" = 'medium' ] || [ "$srv_type" = 'large' ]; then
  182. echo ' - Clam mail antivirus'
  183. echo ' - SpamAssassin antispam'
  184. fi
  185. echo ' - MySQL database server'
  186. echo ' - Vsftpd FTP server'
  187. echo
  188. echo
  189. read -p 'Do you want to proceed? [y/n]): ' answer
  190. if [ "$answer" != 'y' ] && [ "$answer" != 'Y' ]; then
  191. echo 'Goodbye'
  192. exit 1
  193. fi
  194. # Check email
  195. read -p 'Please enter valid email address: ' email
  196. fi
  197. # Validate email
  198. local_part=$(echo $email | cut -s -f1 -d\@)
  199. remote_host=$(echo $email | cut -s -f2 -d\@)
  200. mx_failed=1
  201. if [ ! -z "$remote_host" ] && [ ! -z "$local_part" ]; then
  202. /usr/bin/host -t mx "$remote_host" > /dev/null 2>&1
  203. mx_failed="$?"
  204. fi
  205. if [ "$mx_failed" -eq 1 ]; then
  206. echo "Error: email $email is not valid"
  207. exit 1
  208. fi
  209. #----------------------------------------------------------#
  210. # Install repository #
  211. #----------------------------------------------------------#
  212. # Let's start
  213. echo -e "\n\n\n\nInstallation will take about 15 minutes ...\n"
  214. sleep 5
  215. # Update system
  216. if [ -z "$noupdate" ]; then
  217. apt-get -y upgrade
  218. if [ $? -ne 0 ]; then
  219. echo 'Error: apt-get upgrade failed'
  220. exit 1
  221. fi
  222. fi
  223. # Install nginx repo
  224. apt=/etc/apt/sources.list.d
  225. echo "deb http://nginx.org/packages/debian/ $codename nginx" > $apt/nginx.list
  226. wget http://nginx.org/keys/nginx_signing.key -O /tmp/nginx_signing.key
  227. apt-key add /tmp/nginx_signing.key
  228. # Install vesta repo
  229. echo "deb http://$RHOST/$codename/ $codename vesta" > $apt/vesta.list
  230. wget $CHOST/deb_signing.key -O deb_signing.key
  231. apt-key add deb_signing.key
  232. #----------------------------------------------------------#
  233. # Backups #
  234. #----------------------------------------------------------#
  235. # Prepare backup tree
  236. vst_backups="/root/vst_install_backups/$(date +%s)"
  237. mkdir -p $vst_backups/nginx
  238. mkdir -p $vst_backups/apache2
  239. mkdir -p $vst_backups/mysql
  240. mkdir -p $vst_backups/exim4
  241. mkdir -p $vst_backups/dovecot
  242. mkdir -p $vst_backups/clamav
  243. mkdir -p $vst_backups/spamassassin
  244. mkdir -p $vst_backups/vsftpd
  245. mkdir -p $vst_backups/bind
  246. mkdir -p $vst_backups/vesta
  247. mkdir -p $vst_backups/home
  248. # Backup sudoers
  249. if [ -e '/etc/sudoers' ]; then
  250. cp /etc/sudoers $vst_backups/
  251. fi
  252. # Backup nginx
  253. service nginx stop > /dev/null 2>&1
  254. if [ -e '/etc/nginx/nginx.conf' ]; then
  255. cp -r /etc/nginx/* $vst_backups/nginx/
  256. fi
  257. # Backup apache2
  258. service apache2 stop > /dev/null 2>&1
  259. if [ -e '/etc/apache2/apache2.conf' ]; then
  260. cp -r /etc/apache2/* $vst_backups/apache2/
  261. fi
  262. # Backup bind9
  263. service bind9 stop > /dev/null 2>&1
  264. if [ -e '/etc/bind/named.conf' ]; then
  265. cp -r /etc/bind/* $vst_backups/bind/
  266. fi
  267. # Backup vsftpd
  268. service vsftpd stop > /dev/null 2>&1
  269. if [ -e '/etc/vsftpd.conf' ]; then
  270. cp /etc/vsftpd.conf $vst_backups/vsftpd/
  271. fi
  272. # Backup exim4
  273. service exim4 stop > /dev/null 2>&1
  274. if [ -e '/etc/exim4/exim4.conf.template' ]; then
  275. cp -r /etc/exim4/* $vst_backups/exim4/
  276. fi
  277. # Backup clamav
  278. service clamav-daemon stop > /dev/null 2>&1
  279. if [ -e '/etc/clamav/clamd.conf' ]; then
  280. cp -r /etc/clamav/* $vst_backups/clamav/
  281. fi
  282. # Backup SpamAssassin
  283. service spamassassin stop > /dev/null 2>&1
  284. if [ -e '/etc/spamassassin/local.cf' ]; then
  285. cp -r /etc/spamassassin/* $vst_backups/spamassassin/
  286. fi
  287. # Backup dovecot
  288. service dovecot stop > /dev/null 2>&1
  289. if [ -e '/etc/dovecot.conf' ]; then
  290. cp /etc/dovecot.conf $vst_backups/dovecot/
  291. fi
  292. if [ -e '/etc/dovecot' ]; then
  293. cp -r /etc/dovecot/* $vst_backups/dovecot/
  294. fi
  295. # Backup MySQL stuff
  296. service mysql stop > /dev/null 2>&1
  297. if [ -e '/var/lib/mysql' ]; then
  298. mv /var/lib/mysql $vst_backups/mysql/mysql_datadir
  299. fi
  300. if [ -e '/etc/mysql/my.cnf' ]; then
  301. cp -r /etc/mysql/* $vst_backups/mysql/
  302. fi
  303. if [ -e '/root/.my.cnf' ]; then
  304. mv /root/.my.cnf $vst_backups/mysql/
  305. fi
  306. # Backup vesta
  307. service vesta stop > /dev/null 2>&1
  308. if [ -e '/usr/local/vesta' ]; then
  309. cp -r /usr/local/vesta/* $vst_backups/vesta/
  310. apt-get -y remove vesta*
  311. apt-get -y purge vesta*
  312. rm -rf /usr/local/vesta
  313. fi
  314. #----------------------------------------------------------#
  315. # Install packages #
  316. #----------------------------------------------------------#
  317. # Exclude heavy packages
  318. if [ "$srv_type" = 'micro' ]; then
  319. software=$(echo "$software" | sed -e 's/libapache2-mod-fcgid//')
  320. software=$(echo "$software" | sed -e 's/clamav-daemon//')
  321. software=$(echo "$software" | sed -e 's/spamassassin//')
  322. fi
  323. if [ "$srv_type" = 'small' ]; then
  324. software=$(echo "$software" | sed -e 's/clamav-daemon//')
  325. software=$(echo "$software" | sed -e 's/spamassassin//')
  326. fi
  327. # Update system packages
  328. apt-get update
  329. # Disable daemon autostart
  330. # For more details /usr/share/doc/sysv-rc/README.policy-rc.d.gz
  331. echo -e '#!/bin/sh \nexit 101' > /usr/sbin/policy-rc.d
  332. chmod a+x /usr/sbin/policy-rc.d
  333. # Install Vesta packages
  334. apt-get -y install $software
  335. if [ $? -ne 0 ]; then
  336. echo 'Error: apt-get install failed'
  337. exit 1
  338. fi
  339. # Restore policy
  340. rm -f /usr/sbin/policy-rc.d
  341. #----------------------------------------------------------#
  342. # Configure system #
  343. #----------------------------------------------------------#
  344. # Set writable permission on tmp directory
  345. chmod 777 /tmp
  346. # Enable password auth
  347. sed -i "s/rdAuthentication no/rdAuthentication yes/g" /etc/ssh/sshd_config
  348. service ssh restart
  349. # AppArmor
  350. #aa-complain /usr/sbin/named
  351. # Disable awstats cron
  352. rm -f /etc/cron.d/awstats
  353. # Set directory color
  354. echo 'LS_COLORS="$LS_COLORS:di=00;33"' >> /etc/profile
  355. # Register /sbin/nologin
  356. echo "/sbin/nologin" >> /etc/shells
  357. # Sudo configuration
  358. wget $CHOST/$VERSION/sudoers.conf -O /etc/sudoers
  359. chmod 0440 /etc/sudoers
  360. # NTP Synchronization
  361. echo '#!/bin/sh' > /etc/cron.daily/ntpdate
  362. echo "$(which ntpdate) -s pool.ntp.org" >> /etc/cron.daily/ntpdate
  363. chmod 775 /etc/cron.daily/ntpdate
  364. ntpdate -s pool.ntp.org
  365. # Setup rssh
  366. if [ -z "$(grep /usr/bin/rssh /etc/shells)" ]; then
  367. echo /usr/bin/rssh >> /etc/shells
  368. fi
  369. sed -i 's/#allowscp/allowscp/' /etc/rssh.conf
  370. sed -i 's/#allowsftp/allowsftp/' /etc/rssh.conf
  371. sed -i 's/#allowrsync/allowrsync/' /etc/rssh.conf
  372. chmod 755 /usr/bin/rssh
  373. # Nginx configuration
  374. rm -f /etc/nginx/conf.d/*.conf
  375. wget $CHOST/$VERSION/nginx.conf -O /etc/nginx/nginx.conf
  376. wget $CHOST/$VERSION/nginx-status.conf -O /etc/nginx/conf.d/status.conf
  377. touch /etc/nginx/conf.d/vesta.conf
  378. update-rc.d nginx defaults
  379. service nginx stop > /dev/null 2>&1
  380. service nginx start
  381. if [ "$?" -ne 0 ]; then
  382. echo "Error: nginx start failed"
  383. exit 1
  384. fi
  385. # Apache configuration
  386. wget $CHOST/$VERSION/apache2.conf -O /etc/apache2/apache2.conf
  387. wget $CHOST/$VERSION/apache2-status.conf \
  388. -O /etc/apache2/mods-enabled/status.conf
  389. wget $CHOST/$VERSION/apache2.log -O /etc/logrotate.d/apache2
  390. rm -f /etc/apache2/conf.d/vesta.conf
  391. echo > /etc/apache2/conf.d/vesta.conf
  392. echo "# Powever by vesta" > /etc/apache2/sites-available/default
  393. echo "# Powever by vestas" > /etc/apache2/sites-available/default-ssl
  394. echo "# Powever by vestas" > /etc/apache2/ports.conf
  395. touch /var/log/apache2/access.log
  396. touch /var/log/apache2/error.log
  397. mkdir -p /var/log/apache2/domains
  398. chmod a+x /var/log/apache2
  399. chmod 640 /var/log/apache2/access.log
  400. chmod 640 /var/log/apache2/error.log
  401. chmod 751 /var/log/apache2/domains
  402. a2enmod rewrite
  403. a2enmod suexec
  404. a2enmod ssl
  405. a2enmod actions
  406. a2enmod ruid2
  407. echo -e "/home\npublic_html/cgi-bin" > /etc/apache2/suexec/www-data
  408. update-rc.d apache2 defaults
  409. service apache2 stop > /dev/null 2>&1
  410. service apache2 start
  411. if [ "$?" -ne 0 ]; then
  412. echo "Error: apache2 start failed"
  413. exit 1
  414. fi
  415. # Vsftpd configuration
  416. wget $CHOST/$VERSION/vsftpd.conf -O /etc/vsftpd.conf
  417. update-rc.d vsftpd defaults
  418. service vsftpd stop > /dev/null 2>&1
  419. service vsftpd start
  420. if [ "$?" -ne 0 ]; then
  421. echo "Error: vsftpd start failed"
  422. exit 1
  423. fi
  424. # MySQL configuration
  425. mpass=$(gen_pass)
  426. wget $CHOST/$VERSION/my.cnf -O /etc/mysql/my.cnf
  427. mysql_install_db
  428. update-rc.d mysql defaults
  429. service mysql stop > /dev/null 2>&1
  430. service mysql start
  431. if [ "$?" -ne 0 ]; then
  432. echo "Error: mysql start failed"
  433. exit 1
  434. fi
  435. mysqladmin -u root password $mpass
  436. echo -e "[client]\npassword='$mpass'\n" > /root/.my.cnf
  437. chmod 600 /root/.my.cnf
  438. mysql -e "DELETE FROM mysql.user WHERE User=''"
  439. mysql -e "DROP DATABASE test"
  440. mysql -e "DELETE FROM mysql.db WHERE Db='test' OR Db='test\\_%'"
  441. mysql -e "DELETE FROM mysql.user WHERE user='' or password='';"
  442. mysql -e "FLUSH PRIVILEGES"
  443. # Bind configuration
  444. wget $CHOST/$VERSION/named.conf -O /etc/bind/named.conf
  445. sed -i "s%listen-on%//listen%" /etc/bind/named.conf.options
  446. chown root:bind /etc/bind/named.conf
  447. chmod 640 /etc/bind/named.conf
  448. update-rc.d bind9 defaults
  449. service bind9 stop > /dev/null 2>&1
  450. service bind9 start
  451. if [ "$?" -ne 0 ]; then
  452. echo "Error: bind9 start failed"
  453. exit 1
  454. fi
  455. # Exim
  456. wget $CHOST/$VERSION/exim4.conf.template -O /etc/exim4/exim4.conf.template
  457. if [ "$srv_type" = 'micro' ] || [ "$srv_type" = 'small' ]; then
  458. sed -i "s/^SPAMASSASSIN/#SPAMASSASSIN/g" /etc/exim4/exim4.conf.template
  459. sed -i "s/^CLAMD/#CLAMD/g" /etc/exim4/exim4.conf.template
  460. fi
  461. wget $CHOST/$VERSION/dnsbl.conf -O /etc/exim4/dnsbl.conf
  462. wget $CHOST/$VERSION/spam-blocks.conf -O /etc/exim4/spam-blocks.conf
  463. touch /etc/exim4/white-blocks.conf
  464. rm -rf /etc/exim4/domains
  465. mkdir -p /etc/exim4/domains
  466. chmod 640 /etc/exim4/exim4.conf.template
  467. gpasswd -a Debian-exim mail
  468. if [ -e /etc/init.d/sendmail ]; then
  469. update-rc.d -f sendmail remove
  470. service sendmail stop
  471. fi
  472. if [ -e /etc/init.d/postfix ]; then
  473. update-rc.d -f postfix remove
  474. service postfix stop
  475. fi
  476. rm -f /etc/alternatives/mta
  477. ln -s /usr/sbin/exim4 /etc/alternatives/mta
  478. update-rc.d exim4 defaults
  479. service exim4 stop > /dev/null 2>&1
  480. service exim4 start
  481. if [ "$?" -ne 0 ]; then
  482. echo "Error: exim start failed"
  483. exit
  484. fi
  485. # Dovecot configuration
  486. wget $CHOST/$VERSION/dovecot.conf -O /etc/dovecot/dovecot.conf
  487. cd /etc/dovecot/
  488. wget $CHOST/$VERSION/dovecot-conf.d.tar.gz
  489. rm -rf conf.d *.ext README
  490. tar -xzf dovecot-conf.d.tar.gz
  491. rm -f dovecot-conf.d.tar.gz
  492. chown -R root:root /etc/dovecot
  493. gpasswd -a dovecot mail
  494. if [ "$codename" = 'precise' ]; then
  495. dovecot_ssl_conf="/etc/dovecot/conf.d/10-ssl.conf"
  496. echo "ssl = yes" > $dovecot_ssl_conf
  497. echo "ssl_cert = </etc/ssl/certs/dovecot.pem" >> $dovecot_ssl_conf
  498. echo "ssl_key = </etc/ssl/private/dovecot.pem" >> $dovecot_ssl_conf
  499. fi
  500. update-rc.d dovecot defaults
  501. service dovecot stop > /dev/null 2>&1
  502. service dovecot start
  503. if [ "$?" -ne 0 ]; then
  504. echo "Error: dovecot start failed"
  505. exit 1
  506. fi
  507. # ClamAV configuration
  508. if [ "$srv_type" = 'medium' ] || [ "$srv_type" = 'large' ]; then
  509. wget $CHOST/$VERSION/clamd.conf -O /etc/clamav/clamd.conf
  510. gpasswd -a clamav mail
  511. gpasswd -a clamav Debian-exim
  512. /usr/bin/freshclam
  513. update-rc.d clamav-daemon defaults
  514. service clamav-daemon stop > /dev/null 2>&1
  515. service clamav-daemon start
  516. if [ "$?" -ne 0 ]; then
  517. echo "Error: clamav start failed"
  518. exit 1
  519. fi
  520. fi
  521. # SpamAssassin configuration
  522. if [ "$srv_type" = 'medium' ] || [ "$srv_type" = 'large' ]; then
  523. update-rc.d spamassassin defaults
  524. sed -i "s/ENABLED=0/ENABLED=1/" /etc/default/spamassassin
  525. service spamassassin stop > /dev/null 2>&1
  526. service spamassassin start
  527. if [ "$?" -ne 0 ]; then
  528. echo "Error: spamassassin start failed"
  529. exit 1
  530. fi
  531. fi
  532. # php configuration
  533. sed -i "s/;date.timezone =/date.timezone = UTC/g" /etc/php5/apache2/php.ini
  534. sed -i "s/;date.timezone =/date.timezone = UTC/g" /etc/php5/cli/php.ini
  535. # phpMyAdmin configuration
  536. wget $CHOST/$VERSION/apache2-pma.conf -O /etc/phpmyadmin/apache.conf
  537. wget $CHOST/$VERSION/pma.conf -O /etc/phpmyadmin/config.inc.php
  538. ln -s /etc/phpmyadmin/apache.conf /etc/apache2/conf.d/phpmyadmin.conf
  539. mv -f /etc/phpmyadmin/config-db.php /etc/phpmyadmin/config-db.php_
  540. # Roundcube configuration
  541. wget $CHOST/$VERSION/apache2-webmail.conf -O /etc/roundcube/apache.conf
  542. wget $CHOST/$VERSION/roundcube-main.conf -O /etc/roundcube/main.inc.php
  543. wget $CHOST/$VERSION/roundcube-db.conf -O /etc/roundcube/db.inc.php
  544. wget $CHOST/$VERSION/roundcube-driver.php -O \
  545. /usr/share/roundcube/plugins/password/drivers/vesta.php
  546. wget $CHOST/$VERSION/roundcube-pw.conf -O \
  547. /etc/roundcube/plugins/password/config.inc.php
  548. r="$(gen_pass)"
  549. mysql -e "CREATE DATABASE roundcube"
  550. mysql -e "GRANT ALL ON roundcube.* TO roundcube@localhost IDENTIFIED BY '$r'"
  551. sed -i "s/%password%/$r/g" /etc/roundcube/db.inc.php
  552. mysql roundcube < /usr/share/dbconfig-common/data/roundcube/install/mysql
  553. mkdir -p /var/log/roundcube/error
  554. chmod -R 777 /var/log/roundcube
  555. # Vesta configuration
  556. echo "export VESTA='/usr/local/vesta'" > /etc/profile.d/vesta.sh
  557. chmod 755 /etc/profile.d/vesta.sh
  558. source /etc/profile.d/vesta.sh
  559. echo 'PATH=$PATH:/usr/local/vesta/bin' >> /root/.bash_profile
  560. echo 'export PATH' >> /root/.bash_profile
  561. source /root/.bash_profile
  562. wget $CHOST/$VERSION/vesta.log -O /etc/logrotate.d/vesta
  563. # Directory tree
  564. mkdir -p $VESTA/conf
  565. mkdir -p $VESTA/log
  566. mkdir -p $VESTA/ssl
  567. mkdir -p $VESTA/data
  568. mkdir -p $VESTA/data/ips
  569. mkdir -p $VESTA/data/queue
  570. mkdir -p $VESTA/data/users
  571. touch $VESTA/data/queue/backup.pipe
  572. touch $VESTA/data/queue/disk.pipe
  573. touch $VESTA/data/queue/webstats.pipe
  574. touch $VESTA/data/queue/restart.pipe
  575. touch $VESTA/data/queue/traffic.pipe
  576. chmod 750 $VESTA/conf
  577. chmod 750 $VESTA/data/users
  578. chmod 750 $VESTA/data/ips
  579. chmod -R 750 $VESTA/data/queue
  580. ln -s /usr/local/vesta/log /var/log/vesta
  581. touch /var/log/vesta/system.log
  582. touch /var/log/vesta/nginx-error.log
  583. touch /var/log/vesta/auth.log
  584. chmod 660 /var/log/vesta/*
  585. adduser backup > /dev/null 2>&1
  586. mkdir -p /home/backup
  587. chown backup:backup /home/backup
  588. ln -s /home/backup /backup
  589. chmod a+x /backup
  590. # vesta.conf
  591. wget $CHOST/$VERSION/vesta.conf -O $VESTA/conf/vesta.conf
  592. if [ "$srv_type" = 'micro' ] || [ "$srv_type" = 'small' ]; then
  593. sed -i "s/clamav-daemon//g" $VESTA/conf/vesta.conf
  594. sed -i "s/spamassassin//g" $VESTA/conf/vesta.conf
  595. fi
  596. # Templates
  597. cd /usr/local/vesta/data
  598. wget $CHOST/$VERSION/packages.tar.gz -O packages.tar.gz
  599. tar -xzf packages.tar.gz
  600. rm -f packages.tar.gz
  601. cd /usr/local/vesta/data
  602. wget $CHOST/$VERSION/templates.tar.gz -O templates.tar.gz
  603. tar -xzf templates.tar.gz
  604. rm -f templates.tar.gz
  605. chmod -R 755 /usr/local/vesta/data/templates
  606. cp templates/web/skel/public_html/index.html /var/www/
  607. sed -i 's/%domain%/It worked!/g' /var/www/index.html
  608. if [ "$srv_type" = 'micro' ]; then
  609. rm -f /usr/local/vesta/data/templates/web/apache2/phpfcgid.*
  610. fi
  611. # Default SSL keys
  612. cd /usr/local/vesta/ssl
  613. wget $CHOST/$VERSION/certificate.crt -O certificate.crt
  614. wget $CHOST/$VERSION/certificate.key -O certificate.key
  615. # Adding admin user
  616. if [ ! -z "$(grep ^admin: /etc/passwd)" ] && [ "$force" = 'yes' ]; then
  617. chattr -i /home/admin/conf > /dev/null 2>&1
  618. userdel -f admin
  619. chattr -i /home/admin/conf
  620. mv -f /home/admin $vst_backups/home/
  621. rm -f /tmp/sess_*
  622. fi
  623. if [ ! -z "$(grep ^admin: /etc/group)" ]; then
  624. groupdel admin > /dev/null 2>&1
  625. fi
  626. vpass=$(gen_pass)
  627. $VESTA/bin/v-add-user admin $vpass $email default System Administrator
  628. if [ $? -ne 0 ]; then
  629. echo "Error: can't create admin user"
  630. exit 1
  631. fi
  632. $VESTA/bin/v-change-user-shell admin bash
  633. $VESTA/bin/v-change-user-language admin en
  634. # Configure mysql host
  635. $VESTA/bin/v-add-database-host mysql localhost root $mpass
  636. $VESTA/bin/v-add-database admin default default $(gen_pass) mysql
  637. # Configuring system ips
  638. $VESTA/bin/v-update-sys-ip
  639. # Get main ip
  640. main_ip=$(ifconfig |grep 'inet addr:' |grep -v 127.0.0.1 |head -n1 | \
  641. cut -f2 -d: | cut -f1 -d ' ')
  642. # Get remote ip
  643. vst_ip=$(wget vestacp.com/what-is-my-ip/ -O - 2>/dev/null)
  644. if [ ! -z "$vst_ip" ] && [ "$vst_ip" != "$main_ip" ]; then
  645. # Set NAT association
  646. $VESTA/bin/v-change-sys-ip-nat $main_ip $vst_ip
  647. fi
  648. if [ -z "$vst_ip" ]; then
  649. vst_ip=$main_ip
  650. fi
  651. # Add default web domain
  652. $VESTA/bin/v-add-web-domain admin default.domain $vst_ip
  653. # Add default dns domain
  654. $VESTA/bin/v-add-dns-domain admin default.domain $vst_ip
  655. # Add default mail domain
  656. $VESTA/bin/v-add-mail-domain admin default.domain
  657. # Configuring crond
  658. command='sudo /usr/local/vesta/bin/v-update-sys-queue disk'
  659. $VESTA/bin/v-add-cron-job 'admin' '15' '02' '*' '*' '*' "$command"
  660. command='sudo /usr/local/vesta/bin/v-update-sys-queue traffic'
  661. $VESTA/bin/v-add-cron-job 'admin' '10' '00' '*' '*' '*' "$command"
  662. command='sudo /usr/local/vesta/bin/v-update-sys-queue webstats'
  663. $VESTA/bin/v-add-cron-job 'admin' '30' '03' '*' '*' '*' "$command"
  664. command='sudo /usr/local/vesta/bin/v-update-sys-queue backup'
  665. $VESTA/bin/v-add-cron-job 'admin' '*/5' '*' '*' '*' '*' "$command"
  666. command='sudo /usr/local/vesta/bin/v-backup-users'
  667. $VESTA/bin/v-add-cron-job 'admin' '10' '05' '*' '*' '*' "$command"
  668. command='sudo /usr/local/vesta/bin/v-update-user-stats'
  669. $VESTA/bin/v-add-cron-job 'admin' '20' '00' '*' '*' '*' "$command"
  670. command='sudo /usr/local/vesta/bin/v-update-sys-rrd'
  671. $VESTA/bin/v-add-cron-job 'admin' '*/5' '*' '*' '*' '*' "$command"
  672. # Build inititall rrd images
  673. $VESTA/bin/v-update-sys-rrd
  674. # Start system service
  675. update-rc.d vesta defaults
  676. service vesta stop > /dev/null 2>&1
  677. service vesta start
  678. if [ "$?" -ne 0 ]; then
  679. echo "Error: vesta start failed"
  680. exit 1
  681. fi
  682. # Send notification to vestacp.com
  683. wget vestacp.com/notify/?$codename -O /dev/null
  684. # Send notification to admin email
  685. echo -e "Congratulations, you have just successfully installed \
  686. the Vesta Control Panel
  687. You can login in Vesta with following credentials:
  688. username: admin
  689. password: $vpass
  690. https://$vst_ip:8083
  691. We hope that you enjoy your installation of Vesta. Please \
  692. feel free to contact us anytime if you have any questions.
  693. Thank you.
  694. --
  695. Sincerely yours
  696. vestacp.com team
  697. " > $tmpfile
  698. send_mail="$VESTA/web/inc/mail-wrapper.php"
  699. cat $tmpfile | $send_mail -s "Vesta Control Panel" $email
  700. rm -f $tmpfile
  701. # Congrats
  702. echo '======================================================='
  703. echo
  704. echo
  705. echo ' _| _| _|_|_|_| _|_|_| _|_|_|_|_| _|_| '
  706. echo ' _| _| _| _| _| _| _| '
  707. echo ' _| _| _|_|_| _|_| _| _|_|_|_| '
  708. echo ' _| _| _| _| _| _| _| '
  709. echo ' _| _|_|_|_| _|_|_| _| _| _| '
  710. echo
  711. echo
  712. echo '-------------------------------'
  713. echo " https://$vst_ip:8083"
  714. echo ' username: admin'
  715. echo " password: $vpass"
  716. echo '-------------------------------'
  717. echo
  718. echo
  719. echo 'Congratulations,'
  720. echo 'you have successfully installed Vesta Control Panel.'
  721. echo
  722. echo
  723. # Tricky way to get new PATH variable
  724. cd
  725. bash
  726. #EOF