rebuild.sh 22 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653
  1. # User account rebuild
  2. rebuild_user_conf() {
  3. # Get user variables
  4. source $USER_DATA/user.conf
  5. # Creating user data files
  6. chmod 770 $USER_DATA
  7. chmod 660 $USER_DATA/user.conf
  8. touch $USER_DATA/backup.conf
  9. chmod 660 $USER_DATA/backup.conf
  10. touch $USER_DATA/history.log
  11. chmod 660 $USER_DATA/history.log
  12. touch $USER_DATA/stats.log
  13. chmod 660 $USER_DATA/stats.log
  14. # Run template trigger
  15. if [ -x "$VESTA/data/packages/$PACKAGE.sh" ]; then
  16. $VESTA/data/packages/$PACKAGE.sh "$user" "$CONTACT" "$FNAME" "$LNAME"
  17. fi
  18. # Rebuild user
  19. shell=$(grep -w "$SHELL" /etc/shells |head -n1)
  20. /usr/sbin/useradd "$user" -s "$shell" -c "$CONTACT" \
  21. -m -d "$HOMEDIR/$user" > /dev/null 2>&1
  22. # Update user shell
  23. /usr/bin/chsh -s "$shell" "$user" &>/dev/null
  24. # Update password
  25. shadow=$(grep ^$user: /etc/shadow)
  26. shdw3=$(echo "$shadow" | cut -f3 -d :)
  27. shdw4=$(echo "$shadow" | cut -f4 -d :)
  28. shdw5=$(echo "$shadow" | cut -f5 -d :)
  29. shdw6=$(echo "$shadow" | cut -f6 -d :)
  30. shdw7=$(echo "$shadow" | cut -f7 -d :)
  31. shdw8=$(echo "$shadow" | cut -f8 -d :)
  32. shdw9=$(echo "$shadow" | cut -f9 -d :)
  33. shadow_str="$user:$MD5:$shdw3:$shdw4:$shdw5:$shdw6"
  34. shadow_str="$shadow_str:$shdw7:$shdw8:$shdw9"
  35. chmod u+w /etc/shadow
  36. sed -i "/^$user:*/d" /etc/shadow
  37. echo "$shadow_str" >> /etc/shadow
  38. chmod u-w /etc/shadow
  39. # Building directory tree
  40. if [ -e "$HOMEDIR/$user/conf" ]; then
  41. chattr -i $HOMEDIR/$user/conf
  42. fi
  43. mkdir -p $HOMEDIR/$user/conf
  44. chmod a+x $HOMEDIR/$user
  45. chmod a+x $HOMEDIR/$user/conf
  46. chown $user:$user $HOMEDIR/$user
  47. chown root:root $HOMEDIR/$user/conf
  48. # Update disk pipe
  49. sed -i "/ $user$/d" $VESTA/data/queue/disk.pipe
  50. echo "$BIN/v-update-user-disk $user" >> $VESTA/data/queue/disk.pipe
  51. # WEB
  52. if [ ! -z "$WEB_SYSTEM" ] && [ "$WEB_SYSTEM" != 'no' ]; then
  53. mkdir -p $USER_DATA/ssl
  54. chmod 770 $USER_DATA/ssl
  55. touch $USER_DATA/web.conf
  56. chmod 660 $USER_DATA/web.conf
  57. if [ "$(grep -w $user $VESTA/data/queue/traffic.pipe)" ]; then
  58. echo "$BIN/v-update-web-domains-traff $user" \
  59. >> $VESTA/data/queue/traffic.pipe
  60. fi
  61. echo "$BIN/v-update-web-domains-disk $user" \
  62. >> $VESTA/data/queue/disk.pipe
  63. if [[ -L "$HOMEDIR/$user/web" ]]; then
  64. rm $HOMEDIR/$user/web
  65. fi
  66. mkdir -p $HOMEDIR/$user/conf/web
  67. mkdir -p $HOMEDIR/$user/web
  68. mkdir -p $HOMEDIR/$user/tmp
  69. chmod 751 $HOMEDIR/$user/conf/web
  70. chmod 751 $HOMEDIR/$user/web
  71. chmod 771 $HOMEDIR/$user/tmp
  72. chown $user:$user $HOMEDIR/$user/web
  73. if [ -z "$create_user" ]; then
  74. $BIN/v-rebuild-web-domains $user $restart
  75. fi
  76. fi
  77. # DNS
  78. if [ ! -z "$DNS_SYSTEM" ] && [ "$DNS_SYSTEM" != 'no' ]; then
  79. mkdir -p $USER_DATA/dns
  80. chmod 770 $USER_DATA/dns
  81. touch $USER_DATA/dns.conf
  82. chmod 660 $USER_DATA/dns.conf
  83. mkdir -p $HOMEDIR/$user/conf/dns
  84. chmod 751 $HOMEDIR/$user/conf/dns
  85. if [ -z "$create_user" ]; then
  86. $BIN/v-rebuild-dns-domains $user $restart
  87. fi
  88. fi
  89. if [ ! -z "$MAIL_SYSTEM" ] && [ "$MAIL_SYSTEM" != 'no' ]; then
  90. mkdir -p $USER_DATA/mail
  91. chmod 770 $USER_DATA/mail
  92. touch $USER_DATA/mail.conf
  93. chmod 660 $USER_DATA/mail.conf
  94. echo "$BIN/v-update-mail-domains-disk $user" \
  95. >> $VESTA/data/queue/disk.pipe
  96. if [[ -L "$HOMEDIR/$user/mail" ]]; then
  97. rm $HOMEDIR/$user/mail
  98. fi
  99. mkdir -p $HOMEDIR/$user/conf/mail
  100. mkdir -p $HOMEDIR/$user/mail
  101. chmod 751 $HOMEDIR/$user/mail
  102. chmod 751 $HOMEDIR/$user/conf/mail
  103. if [ -z "$create_user" ]; then
  104. $BIN/v-rebuild-mail-domains $user
  105. fi
  106. fi
  107. if [ ! -z "$DB_SYSTEM" ] && [ "$DB_SYSTEM" != 'no' ]; then
  108. touch $USER_DATA/db.conf
  109. chmod 660 $USER_DATA/db.conf
  110. echo "$BIN/v-update-databases-disk $user" >> $VESTA/data/queue/disk.pipe
  111. if [ -z "$create_user" ]; then
  112. $BIN/v-rebuild-databases $user
  113. fi
  114. fi
  115. if [ ! -z "$CRON_SYSTEM" ] && [ "$CRON_SYSTEM" != 'no' ]; then
  116. touch $USER_DATA/cron.conf
  117. chmod 660 $USER_DATA/cron.conf
  118. if [ -z "$create_user" ]; then
  119. $BIN/v-rebuild-cron-jobs $user $restart
  120. fi
  121. fi
  122. # Set immutable flag
  123. chattr +i $HOMEDIR/$user/conf
  124. }
  125. # WEB domain rebuild
  126. rebuild_web_domain_conf() {
  127. get_domain_values 'web'
  128. is_ip_valid $IP
  129. prepare_web_domain_values
  130. # Rebuilding domain directories
  131. mkdir -p $HOMEDIR/$user/web/$domain \
  132. $HOMEDIR/$user/web/$domain/public_html \
  133. $HOMEDIR/$user/web/$domain/public_shtml \
  134. $HOMEDIR/$user/web/$domain/document_errors \
  135. $HOMEDIR/$user/web/$domain/cgi-bin \
  136. $HOMEDIR/$user/web/$domain/private \
  137. $HOMEDIR/$user/web/$domain/stats \
  138. $HOMEDIR/$user/web/$domain/logs
  139. # Creating domain logs
  140. if [ ! -e "/var/log/$WEB_SYSTEM/domains" ]; then
  141. mkdir -p /var/log/$WEB_SYSTEM/domains
  142. chmod 771 /var/log/$WEB_SYSTEM/domains
  143. fi
  144. touch /var/log/$WEB_SYSTEM/domains/$domain.bytes \
  145. /var/log/$WEB_SYSTEM/domains/$domain.log \
  146. /var/log/$WEB_SYSTEM/domains/$domain.error.log
  147. # Creating symlinks
  148. cd $HOMEDIR/$user/web/$domain/logs/
  149. ln -f -s /var/log/$WEB_SYSTEM/domains/$domain.log .
  150. ln -f -s /var/log/$WEB_SYSTEM/domains/$domain.error.log .
  151. cd /
  152. # Propagating html skeleton
  153. if [ ! -e "$WEBTPL/skel/document_errors/" ]; then
  154. cp -r $WEBTPL/skel/document_errors/ $HOMEDIR/$user/web/$domain/
  155. fi
  156. # Set folder permissions
  157. chmod 551 $HOMEDIR/$user/web/$domain \
  158. $HOMEDIR/$user/web/$domain/stats \
  159. $HOMEDIR/$user/web/$domain/logs
  160. chmod 751 $HOMEDIR/$user/web/$domain/private \
  161. $HOMEDIR/$user/web/$domain/cgi-bin \
  162. $HOMEDIR/$user/web/$domain/public_html \
  163. $HOMEDIR/$user/web/$domain/public_shtml \
  164. $HOMEDIR/$user/web/$domain/document_errors
  165. chmod 640 /var/log/$WEB_SYSTEM/domains/$domain.*
  166. # Set ownership
  167. chown $user:$user $HOMEDIR/$user/web/$domain \
  168. $HOMEDIR/$user/web/$domain/private \
  169. $HOMEDIR/$user/web/$domain/cgi-bin \
  170. $HOMEDIR/$user/web/$domain/public_html \
  171. $HOMEDIR/$user/web/$domain/public_shtml
  172. chown -R $user:$user $HOMEDIR/$user/web/$domain/document_errors
  173. chown root:$user /var/log/$WEB_SYSTEM/domains/$domain.*
  174. # Adding vhost configuration
  175. conf="$HOMEDIR/$user/conf/web/$WEB_SYSTEM.conf"
  176. add_web_config "$WEB_SYSTEM" "$TPL.tpl"
  177. # Adding SSL vhost configuration
  178. if [ "$SSL" = 'yes' ]; then
  179. conf="$HOMEDIR/$user/conf/web/s$WEB_SYSTEM.conf"
  180. add_web_config "$WEB_SYSTEM" "$TPL.stpl"
  181. cp -f $USER_DATA/ssl/$domain.crt \
  182. $HOMEDIR/$user/conf/web/ssl.$domain.crt
  183. cp -f $USER_DATA/ssl/$domain.key \
  184. $HOMEDIR/$user/conf/web/ssl.$domain.key
  185. cp -f $USER_DATA/ssl/$domain.pem \
  186. $HOMEDIR/$user/conf/web/ssl.$domain.pem
  187. if [ -e "$USER_DATA/ssl/$domain.ca" ]; then
  188. cp -f $USER_DATA/ssl/$domain.ca \
  189. $HOMEDIR/$user/conf/web/ssl.$domain.ca
  190. fi
  191. fi
  192. # Adding proxy configuration
  193. if [ ! -z "$PROXY_SYSTEM" ] && [ ! -z "$PROXY" ]; then
  194. conf="$HOMEDIR/$user/conf/web/$PROXY_SYSTEM.conf"
  195. add_web_config "$PROXY_SYSTEM" "$PROXY.tpl"
  196. if [ "$SSL" = 'yes' ]; then
  197. conf="$HOMEDIR/$user/conf/web/s$PROXY_SYSTEM.conf"
  198. add_web_config "$PROXY_SYSTEM" "$PROXY.stpl"
  199. fi
  200. fi
  201. # Adding web stats parser
  202. if [ ! -z "$STATS" ]; then
  203. domain_idn=$domain
  204. format_domain_idn
  205. cat $WEBTPL/$STATS/$STATS.tpl |\
  206. sed -e "s|%ip%|$local_ip|g" \
  207. -e "s|%web_system%|$WEB_SYSTEM|g" \
  208. -e "s|%domain_idn%|$domain_idn|g" \
  209. -e "s|%domain%|$domain|g" \
  210. -e "s|%user%|$user|g" \
  211. -e "s|%home%|$HOMEDIR|g" \
  212. -e "s|%alias%|${aliases//,/ }|g" \
  213. -e "s|%alias_idn%|${aliases_idn//,/ }|g" \
  214. > $HOMEDIR/$user/conf/web/$STATS.$domain.conf
  215. if [ "$STATS" == 'awstats' ]; then
  216. if [ ! -e "/etc/awstats/$STATS.$domain_idn.conf" ]; then
  217. ln -f -s $HOMEDIR/$user/conf/web/$STATS.$domain.conf \
  218. /etc/awstats/$STATS.$domain_idn.conf
  219. fi
  220. fi
  221. webstats="$BIN/v-update-web-domain-stat $user $domain"
  222. check_webstats=$(grep "$webstats" $VESTA/data/queue/webstats.pipe)
  223. if [ -z "$check_webstats" ]; then
  224. echo "$webstats" >> $VESTA/data/queue/webstats.pipe
  225. fi
  226. if [ ! -z "$STATS_USER" ]; then
  227. stats_dir="$HOMEDIR/$user/web/$domain/stats"
  228. if [ "$WEB_SYSTEM" = 'nginx' ]; then
  229. echo "auth_basic \"Web Statistics\";" > $stats_dir/auth.conf
  230. echo "auth_basic_user_file $stats_dir/.htpasswd;" >> \
  231. $stats_dir/auth.conf
  232. else
  233. echo "AuthUserFile $stats_dir/.htpasswd" > $stats_dir/.htaccess
  234. echo "AuthName \"Web Statistics\"" >> $stats_dir/.htaccess
  235. echo "AuthType Basic" >> $stats_dir/.htaccess
  236. echo "Require valid-user" >> $stats_dir/.htaccess
  237. fi
  238. echo "$STATS_USER:$STATS_CRYPT" > $stats_dir/.htpasswd
  239. fi
  240. fi
  241. # Adding ftp users
  242. if [ -z "$FTP_SHELL" ]; then
  243. shell=$(which nologin)
  244. if [ -e "/usr/bin/rssh" ]; then
  245. shell='/usr/bin/rssh'
  246. fi
  247. else
  248. shell=$FTP_SHELL
  249. fi
  250. for ftp_user in ${FTP_USER//:/ }; do
  251. if [ -z "$(grep ^$ftp_user: /etc/passwd)" ]; then
  252. position=$(echo $FTP_USER |tr ':' '\n' |grep -n '' |\
  253. grep ":$ftp_user$" |cut -f 1 -d:)
  254. ftp_path=$(echo $FTP_PATH |tr ':' '\n' |grep -n '' |\
  255. grep "^$position:" |cut -f 2 -d :)
  256. ftp_md5=$(echo $FTP_MD5 | tr ':' '\n' |grep -n '' |\
  257. grep "^$position:" |cut -f 2 -d :)
  258. /usr/sbin/useradd $ftp_user \
  259. -s $shell \
  260. -o -u $(id -u $user) \
  261. -g $(id -u $user) \
  262. -M -d "$HOMEDIR/$user/web/$domain${ftp_path}" >/dev/null 2>&1
  263. # Updating ftp user password
  264. shadow=$(grep "^$ftp_user:" /etc/shadow)
  265. shdw3=$(echo "$shadow" |cut -f3 -d :)
  266. shdw4=$(echo "$shadow" |cut -f4 -d :)
  267. shdw5=$(echo "$shadow" |cut -f5 -d :)
  268. shdw6=$(echo "$shadow" |cut -f6 -d :)
  269. shdw7=$(echo "$shadow" |cut -f7 -d :)
  270. shdw8=$(echo "$shadow" |cut -f8 -d :)
  271. shdw9=$(echo "$shadow" |cut -f9 -d :)
  272. shadow_str="$ftp_user:$ftp_md5:$shdw3:$shdw4:$shdw5:$shdw6"
  273. shadow_str="$shadow_str:$shdw7:$shdw8:$shdw9"
  274. chmod u+w /etc/shadow
  275. sed -i "/^$ftp_user:*/d" /etc/shadow
  276. echo "$shadow_str" >> /etc/shadow
  277. chmod u-w /etc/shadow
  278. fi
  279. done
  280. # Adding http auth protection
  281. htaccess="$HOMEDIR/$user/conf/web/$WEB_SYSTEM.$domain.conf_htaccess"
  282. htpasswd="$HOMEDIR/$user/conf/web/$WEB_SYSTEM.$domain.htpasswd"
  283. docroot="$HOMEDIR/$user/web/$domain/public_html"
  284. for auth_user in ${AUTH_USER//:/ }; do
  285. # Parsing auth user variables
  286. position=$(echo $AUTH_USER |tr ':' '\n' |grep -n '' |\
  287. grep ":$auth_user$" |cut -f 1 -d:)
  288. auth_hash=$(echo $AUTH_HASH |tr ':' '\n' |grep -n '' |\
  289. grep "^$position:" |cut -f 2 -d :)
  290. # Adding http auth user
  291. touch $htpasswd
  292. sed -i "/^$auth_user:/d" $htpasswd
  293. echo "$auth_user:$auth_hash" >> $htpasswd
  294. # Checking web server include
  295. if [ ! -e "$htaccess" ]; then
  296. if [ "$WEB_SYSTEM" != 'nginx' ]; then
  297. echo "<Directory $docroot>" > $htaccess
  298. echo " AuthUserFile $htpasswd" >> $htaccess
  299. echo " AuthName \"$domain access\"" >> $htaccess
  300. echo " AuthType Basic" >> $htaccess
  301. echo " Require valid-user" >> $htaccess
  302. echo "</Directory>" >> $htaccess
  303. else
  304. echo "auth_basic \"$domain password access\";" > $htaccess
  305. echo "auth_basic_user_file $htpasswd;" >> $htaccess
  306. fi
  307. chmod 640 $htpasswd $htaccess >/dev/null 2>&1
  308. fi
  309. done
  310. }
  311. # DNS domain rebuild
  312. rebuild_dns_domain_conf() {
  313. # Get domain values
  314. get_domain_values 'dns'
  315. domain_idn=$(idn -t --quiet -a "$domain")
  316. # Checking zone file
  317. if [ ! -e "$USER_DATA/dns/$domain.conf" ]; then
  318. cat $DNSTPL/$TPL.tpl |\
  319. sed -e "s/%ip%/$IP/g" \
  320. -e "s/%domain_idn%/$domain_idn/g" \
  321. -e "s/%domain%/$domain/g" \
  322. -e "s/%ns1%/$ns1/g" \
  323. -e "s/%ns2%/$ns2/g" \
  324. -e "s/%ns3%/$ns3/g" \
  325. -e "s/%ns4%/$ns4/g" \
  326. -e "s/%time%/$TIME/g" \
  327. -e "s/%date%/$DATE/g" > $USER_DATA/dns/$domain.conf
  328. fi
  329. # Sorting records
  330. sort_dns_records
  331. # Updating zone
  332. update_domain_zone
  333. # Set permissions
  334. if [ "$DNS_SYSTEM" = 'named' ]; then
  335. dns_group='named'
  336. else
  337. dns_group='bind'
  338. fi
  339. # Set file permissions
  340. chmod 640 $HOMEDIR/$user/conf/dns/$domain.db
  341. chown root:$dns_group $HOMEDIR/$user/conf/dns/$domain.db
  342. # Get dns config path
  343. if [ -e '/etc/named.conf' ]; then
  344. dns_conf='/etc/named.conf'
  345. fi
  346. if [ -e '/etc/bind/named.conf' ]; then
  347. dns_conf='/etc/bind/named.conf'
  348. fi
  349. # Bind config check
  350. if [ "$SUSPENDED" = 'yes' ]; then
  351. rm_string=$(grep -n /etc/namedb/$domain.db $dns_conf | cut -d : -f 1)
  352. if [ ! -z "$rm_string" ]; then
  353. sed -i "$rm_string d" $dns_conf
  354. fi
  355. suspended_dns=$((suspended_dns + 1))
  356. else
  357. if [ -z "$(grep /$domain.db $dns_conf)" ]; then
  358. named="zone \"$domain_idn\" {type master; file"
  359. named="$named \"$HOMEDIR/$user/conf/dns/$domain.db\";};"
  360. echo "$named" >> $dns_conf
  361. fi
  362. fi
  363. user_domains=$((user_domains + 1))
  364. records=$(wc -l $USER_DATA/dns/$domain.conf | cut -f 1 -d ' ')
  365. user_records=$((user_records + records))
  366. update_object_value 'dns' 'DOMAIN' "$domain" '$RECORDS' "$records"
  367. }
  368. # MAIL domain rebuild
  369. rebuild_mail_domain_conf() {
  370. get_domain_values 'mail'
  371. if [[ "$domain" = *[![:ascii:]]* ]]; then
  372. domain_idn=$(idn -t --quiet -a $domain)
  373. else
  374. domain_idn=$domain
  375. fi
  376. if [ "$SUSPENDED" = 'yes' ]; then
  377. SUSPENDED_MAIL=$((SUSPENDED_MAIL +1))
  378. fi
  379. # Rebuilding exim config structure
  380. if [[ "$MAIL_SYSTEM" =~ exim ]]; then
  381. rm -f /etc/$MAIL_SYSTEM/domains/$domain_idn
  382. mkdir -p $HOMEDIR/$user/conf/mail/$domain
  383. ln -s $HOMEDIR/$user/conf/mail/$domain \
  384. /etc/$MAIL_SYSTEM/domains/$domain_idn
  385. rm -f $HOMEDIR/$user/conf/mail/$domain/aliases
  386. rm -f $HOMEDIR/$user/conf/mail/$domain/antispam
  387. rm -f $HOMEDIR/$user/conf/mail/$domain/antivirus
  388. rm -f $HOMEDIR/$user/conf/mail/$domain/protection
  389. rm -f $HOMEDIR/$user/conf/mail/$domain/passwd
  390. rm -f $HOMEDIR/$user/conf/mail/$domain/fwd_only
  391. touch $HOMEDIR/$user/conf/mail/$domain/aliases
  392. touch $HOMEDIR/$user/conf/mail/$domain/passwd
  393. touch $HOMEDIR/$user/conf/mail/$domain/fwd_only
  394. # Adding antispam protection
  395. if [ "$ANTISPAM" = 'yes' ]; then
  396. touch $HOMEDIR/$user/conf/mail/$domain/antispam
  397. fi
  398. # Adding antivirus protection
  399. if [ "$ANTIVIRUS" = 'yes' ]; then
  400. touch $HOMEDIR/$user/conf/mail/$domain/antivirus
  401. fi
  402. # Adding dkim
  403. if [ "$DKIM" = 'yes' ]; then
  404. cp $USER_DATA/mail/$domain.pem \
  405. $HOMEDIR/$user/conf/mail/$domain/dkim.pem
  406. fi
  407. # Removing symbolic link if domain is suspended
  408. if [ "$SUSPENDED" = 'yes' ]; then
  409. rm -f /etc/exim/domains/$domain_idn
  410. fi
  411. # Adding mail directiry
  412. if [ ! -e $HOMEDIR/$user/mail/$domain_idn ]; then
  413. mkdir $HOMEDIR/$user/mail/$domain_idn
  414. fi
  415. # Adding catchall email
  416. dom_aliases=$HOMEDIR/$user/conf/mail/$domain/aliases
  417. if [ ! -z "$CATCHALL" ]; then
  418. echo "*@$domain_idn:$CATCHALL" >> $dom_aliases
  419. fi
  420. fi
  421. # Rebuild domain accounts
  422. accs=0
  423. dom_diks=0
  424. if [ -e "$USER_DATA/mail/$domain.conf" ]; then
  425. accounts=$(search_objects "mail/$domain" 'SUSPENDED' "no" 'ACCOUNT')
  426. else
  427. accounts=''
  428. fi
  429. for account in $accounts; do
  430. (( ++accs))
  431. dom_diks=$((dom_diks + U_DISK))
  432. object=$(grep "ACCOUNT='$account'" $USER_DATA/mail/$domain.conf)
  433. FWD_ONLY='no'
  434. eval "$object"
  435. if [ "$SUSPENDED" = 'yes' ]; then
  436. MD5='SUSPENDED'
  437. fi
  438. if [[ "$MAIL_SYSTEM" =~ exim ]]; then
  439. if [ "$QUOTA" = 'unlimited' ]; then
  440. QUOTA=0
  441. fi
  442. str="$account:$MD5:$user:mail::$HOMEDIR/$user:$QUOTA"
  443. echo $str >> $HOMEDIR/$user/conf/mail/$domain/passwd
  444. for malias in ${ALIAS//,/ }; do
  445. echo "$malias@$domain_idn:$account@$domain_idn" >> $dom_aliases
  446. done
  447. if [ ! -z "$FWD" ]; then
  448. echo "$account@$domain_idn:$FWD" >> $dom_aliases
  449. fi
  450. if [ "$FWD_ONLY" = 'yes' ]; then
  451. echo "$account" >> $HOMEDIR/$user/conf/mail/$domain/fwd_only
  452. fi
  453. fi
  454. done
  455. # Set permissions and ownership
  456. if [[ "$MAIL_SYSTEM" =~ exim ]]; then
  457. chmod 660 $USER_DATA/mail/$domain.*
  458. chmod 771 $HOMEDIR/$user/conf/mail/$domain
  459. chmod 660 $HOMEDIR/$user/conf/mail/$domain/*
  460. chmod 771 /etc/$MAIL_SYSTEM/domains/$domain_idn
  461. chmod 770 $HOMEDIR/$user/mail/$domain_idn
  462. chown -R $MAIL_USER:mail $HOMEDIR/$user/conf/mail/$domain
  463. chown -R dovecot:mail $HOMEDIR/$user/conf/mail/$domain/passwd
  464. chown $user:mail $HOMEDIR/$user/mail/$domain_idn
  465. fi
  466. # Update counters
  467. update_object_value 'mail' 'DOMAIN' "$domain" '$ACCOUNTS' "$accs"
  468. update_object_value 'mail' 'DOMAIN' "$domain" '$U_DISK' "$dom_diks"
  469. U_MAIL_ACCOUNTS=$((U_MAIL_ACCOUNTS + accs))
  470. U_DISK_MAIL=$((U_DISK_MAIL + dom_diks))
  471. U_MAIL_DOMAINS=$((U_MAIL_DOMAINS + 1))
  472. }
  473. # Rebuild MySQL
  474. rebuild_mysql_database() {
  475. mysql_connect $HOST
  476. mysql_query "CREATE DATABASE \`$DB\` CHARACTER SET $CHARSET" >/dev/null
  477. if [ "$mysql_fork" = "mysql" ]; then
  478. # mysql
  479. if [ "$(echo $mysql_ver |cut -d '.' -f2)" -ge 7 ] || [ "$(echo $mysql_ver |cut -d '.' -f1)" -eq 8 ]; then
  480. # mysql >= 5.7
  481. mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`" > /dev/null
  482. mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`@localhost" > /dev/null
  483. query="UPDATE mysql.user SET authentication_string='$MD5'"
  484. query="$query WHERE User='$DBUSER'"
  485. else
  486. # mysql < 5.7
  487. query="UPDATE mysql.user SET Password='$MD5' WHERE User='$DBUSER'"
  488. fi
  489. else
  490. # mariadb
  491. if [ "$(echo $mysql_ver |cut -d '.' -f1)" -eq 5 ]; then
  492. # mariadb = 5
  493. mysql_query "CREATE USER \`$DBUSER\`" > /dev/null
  494. mysql_query "CREATE USER \`$DBUSER\`@localhost" > /dev/null
  495. else
  496. # mariadb = 10
  497. mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`" > /dev/null
  498. mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`@localhost" > /dev/null
  499. fi
  500. # mariadb any version
  501. query="UPDATE mysql.user SET Password='$MD5' WHERE User='$DBUSER'"
  502. fi
  503. mysql_query "GRANT ALL ON \`$DB\`.* TO \`$DBUSER\`@\`%\`" >/dev/null
  504. mysql_query "GRANT ALL ON \`$DB\`.* TO \`$DBUSER\`@localhost" >/dev/null
  505. mysql_query "$query" >/dev/null
  506. mysql_query "FLUSH PRIVILEGES" >/dev/null
  507. }
  508. # Rebuild PostgreSQL
  509. rebuild_pgsql_database() {
  510. host_str=$(grep "HOST='$HOST'" $VESTA/conf/pgsql.conf)
  511. eval $host_str
  512. export PGPASSWORD="$PASSWORD"
  513. if [ -z $HOST ] || [ -z $USER ] || [ -z $PASSWORD ] || [ -z $TPL ]; then
  514. echo "Error: postgresql config parsing failed"
  515. if [ ! -z "$SENDMAIL" ]; then
  516. echo "Can't parse PostgreSQL config" | $SENDMAIL -s "$subj" $email
  517. fi
  518. log_event "$E_PARSING" "$ARGUMENTS"
  519. exit $E_PARSING
  520. fi
  521. query='SELECT VERSION()'
  522. psql -h $HOST -U $USER -c "$query" > /dev/null 2>&1
  523. if [ '0' -ne "$?" ]; then
  524. echo "Error: Connection failed"
  525. if [ ! -z "$SENDMAIL" ]; then
  526. echo "Database connection to PostgreSQL host $HOST failed" |\
  527. $SENDMAIL -s "$subj" $email
  528. fi
  529. log_event "$E_CONNECT" "$ARGUMENTS"
  530. exit $E_CONNECT
  531. fi
  532. query="CREATE ROLE $DBUSER"
  533. psql -h $HOST -U $USER -c "$query" > /dev/null 2>&1
  534. query="UPDATE pg_authid SET rolpassword='$MD5' WHERE rolname='$DBUSER'"
  535. psql -h $HOST -U $USER -c "$query" > /dev/null 2>&1
  536. query="CREATE DATABASE $DB OWNER $DBUSER"
  537. if [ "$TPL" = 'template0' ]; then
  538. query="$query ENCODING '$CHARSET' TEMPLATE $TPL"
  539. else
  540. query="$query TEMPLATE $TPL"
  541. fi
  542. psql -h $HOST -U $USER -c "$query" > /dev/null 2>&1
  543. query="GRANT ALL PRIVILEGES ON DATABASE $DB TO $DBUSER"
  544. psql -h $HOST -U $USER -c "$query" > /dev/null 2>&1
  545. query="GRANT CONNECT ON DATABASE template1 to $dbuser"
  546. psql -h $HOST -U $USER -c "$query" > /dev/null 2>&1
  547. }
  548. # Import MySQL dump
  549. import_mysql_database() {
  550. host_str=$(grep "HOST='$HOST'" $VESTA/conf/mysql.conf)
  551. eval $host_str
  552. if [ -z $HOST ] || [ -z $USER ] || [ -z $PASSWORD ]; then
  553. echo "Error: mysql config parsing failed"
  554. log_event "$E_PARSING" "$ARGUMENTS"
  555. exit $E_PARSING
  556. fi
  557. mysql -h $HOST -u $USER -p$PASSWORD $DB < $1 > /dev/null 2>&1
  558. }
  559. # Import PostgreSQL dump
  560. import_pgsql_database() {
  561. host_str=$(grep "HOST='$HOST'" $VESTA/conf/pgsql.conf)
  562. eval $host_str
  563. export PGPASSWORD="$PASSWORD"
  564. if [ -z $HOST ] || [ -z $USER ] || [ -z $PASSWORD ] || [ -z $TPL ]; then
  565. echo "Error: postgresql config parsing failed"
  566. log_event "$E_PARSING" "$ARGUMENTS"
  567. exit $E_PARSING
  568. fi
  569. psql -h $HOST -U $USER $DB < $1 > /dev/null 2>&1
  570. }