rebuild.sh 22 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654
  1. # User account rebuild
  2. rebuild_user_conf() {
  3. # Get user variables
  4. source $USER_DATA/user.conf
  5. # Creating user data files
  6. chmod 770 $USER_DATA
  7. chmod 660 $USER_DATA/user.conf
  8. touch $USER_DATA/backup.conf
  9. chmod 660 $USER_DATA/backup.conf
  10. touch $USER_DATA/history.log
  11. chmod 660 $USER_DATA/history.log
  12. touch $USER_DATA/stats.log
  13. chmod 660 $USER_DATA/stats.log
  14. # Run template trigger
  15. if [ -x "$VESTA/data/packages/$PACKAGE.sh" ]; then
  16. $VESTA/data/packages/$PACKAGE.sh "$user" "$CONTACT" "$FNAME" "$LNAME"
  17. fi
  18. # Rebuild user
  19. shell=$(grep -w "$SHELL" /etc/shells |head -n1)
  20. /usr/sbin/useradd "$user" -s "$shell" -c "$CONTACT" \
  21. -m -d "$HOMEDIR/$user" > /dev/null 2>&1
  22. # Update user shell
  23. /usr/bin/chsh -s "$shell" "$user" &>/dev/null
  24. # Update password
  25. shadow=$(grep ^$user: /etc/shadow)
  26. shdw3=$(echo "$shadow" | cut -f3 -d :)
  27. shdw4=$(echo "$shadow" | cut -f4 -d :)
  28. shdw5=$(echo "$shadow" | cut -f5 -d :)
  29. shdw6=$(echo "$shadow" | cut -f6 -d :)
  30. shdw7=$(echo "$shadow" | cut -f7 -d :)
  31. shdw8=$(echo "$shadow" | cut -f8 -d :)
  32. shdw9=$(echo "$shadow" | cut -f9 -d :)
  33. shadow_str="$user:$MD5:$shdw3:$shdw4:$shdw5:$shdw6"
  34. shadow_str="$shadow_str:$shdw7:$shdw8:$shdw9"
  35. chmod u+w /etc/shadow
  36. sed -i "/^$user:*/d" /etc/shadow
  37. echo "$shadow_str" >> /etc/shadow
  38. chmod u-w /etc/shadow
  39. # Building directory tree
  40. if [ -e "$HOMEDIR/$user/conf" ]; then
  41. chattr -i $HOMEDIR/$user/conf
  42. fi
  43. mkdir -p $HOMEDIR/$user/conf
  44. chmod a+x $HOMEDIR/$user
  45. chmod a+x $HOMEDIR/$user/conf
  46. chown --no-dereference $user:$user $HOMEDIR/$user
  47. chown root:root $HOMEDIR/$user/conf
  48. # Update disk pipe
  49. sed -i "/ $user$/d" $VESTA/data/queue/disk.pipe
  50. echo "$BIN/v-update-user-disk $user" >> $VESTA/data/queue/disk.pipe
  51. # WEB
  52. if [ ! -z "$WEB_SYSTEM" ] && [ "$WEB_SYSTEM" != 'no' ]; then
  53. mkdir -p $USER_DATA/ssl
  54. chmod 770 $USER_DATA/ssl
  55. touch $USER_DATA/web.conf
  56. chmod 660 $USER_DATA/web.conf
  57. if [ "$(grep -w $user $VESTA/data/queue/traffic.pipe)" ]; then
  58. echo "$BIN/v-update-web-domains-traff $user" \
  59. >> $VESTA/data/queue/traffic.pipe
  60. fi
  61. echo "$BIN/v-update-web-domains-disk $user" \
  62. >> $VESTA/data/queue/disk.pipe
  63. if [[ -L "$HOMEDIR/$user/web" ]]; then
  64. rm $HOMEDIR/$user/web
  65. fi
  66. mkdir -p $HOMEDIR/$user/conf/web
  67. mkdir -p $HOMEDIR/$user/web
  68. mkdir -p $HOMEDIR/$user/tmp
  69. chmod 751 $HOMEDIR/$user/conf/web
  70. chmod 751 $HOMEDIR/$user/web
  71. chmod 771 $HOMEDIR/$user/tmp
  72. chown --no-dereference $user:$user $HOMEDIR/$user/web
  73. if [ -z "$create_user" ]; then
  74. $BIN/v-rebuild-web-domains $user $restart
  75. fi
  76. fi
  77. # DNS
  78. if [ ! -z "$DNS_SYSTEM" ] && [ "$DNS_SYSTEM" != 'no' ]; then
  79. mkdir -p $USER_DATA/dns
  80. chmod 770 $USER_DATA/dns
  81. touch $USER_DATA/dns.conf
  82. chmod 660 $USER_DATA/dns.conf
  83. mkdir -p $HOMEDIR/$user/conf/dns
  84. chmod 751 $HOMEDIR/$user/conf/dns
  85. if [ -z "$create_user" ]; then
  86. $BIN/v-rebuild-dns-domains $user $restart
  87. fi
  88. fi
  89. if [ ! -z "$MAIL_SYSTEM" ] && [ "$MAIL_SYSTEM" != 'no' ]; then
  90. mkdir -p $USER_DATA/mail
  91. chmod 770 $USER_DATA/mail
  92. touch $USER_DATA/mail.conf
  93. chmod 660 $USER_DATA/mail.conf
  94. echo "$BIN/v-update-mail-domains-disk $user" \
  95. >> $VESTA/data/queue/disk.pipe
  96. if [[ -L "$HOMEDIR/$user/mail" ]]; then
  97. rm $HOMEDIR/$user/mail
  98. fi
  99. mkdir -p $HOMEDIR/$user/conf/mail
  100. mkdir -p $HOMEDIR/$user/mail
  101. chmod 751 $HOMEDIR/$user/mail
  102. chmod 751 $HOMEDIR/$user/conf/mail
  103. if [ -z "$create_user" ]; then
  104. $BIN/v-rebuild-mail-domains $user
  105. fi
  106. fi
  107. if [ ! -z "$DB_SYSTEM" ] && [ "$DB_SYSTEM" != 'no' ]; then
  108. touch $USER_DATA/db.conf
  109. chmod 660 $USER_DATA/db.conf
  110. echo "$BIN/v-update-databases-disk $user" >> $VESTA/data/queue/disk.pipe
  111. if [ -z "$create_user" ]; then
  112. $BIN/v-rebuild-databases $user
  113. fi
  114. fi
  115. if [ ! -z "$CRON_SYSTEM" ] && [ "$CRON_SYSTEM" != 'no' ]; then
  116. touch $USER_DATA/cron.conf
  117. chmod 660 $USER_DATA/cron.conf
  118. if [ -z "$create_user" ]; then
  119. $BIN/v-rebuild-cron-jobs $user $restart
  120. fi
  121. fi
  122. # Set immutable flag
  123. chattr +i $HOMEDIR/$user/conf
  124. }
  125. # WEB domain rebuild
  126. rebuild_web_domain_conf() {
  127. get_domain_values 'web'
  128. is_ip_valid $IP
  129. prepare_web_domain_values
  130. # Rebuilding domain directories
  131. sudo -u $user mkdir -p $HOMEDIR/$user/web/$domain \
  132. $HOMEDIR/$user/web/$domain/public_html \
  133. $HOMEDIR/$user/web/$domain/public_shtml \
  134. $HOMEDIR/$user/web/$domain/document_errors \
  135. $HOMEDIR/$user/web/$domain/cgi-bin \
  136. $HOMEDIR/$user/web/$domain/private \
  137. $HOMEDIR/$user/web/$domain/stats \
  138. $HOMEDIR/$user/web/$domain/logs
  139. # Creating domain logs
  140. if [ ! -e "/var/log/$WEB_SYSTEM/domains" ]; then
  141. mkdir -p /var/log/$WEB_SYSTEM/domains
  142. chmod 771 /var/log/$WEB_SYSTEM/domains
  143. fi
  144. touch /var/log/$WEB_SYSTEM/domains/$domain.bytes \
  145. /var/log/$WEB_SYSTEM/domains/$domain.log \
  146. /var/log/$WEB_SYSTEM/domains/$domain.error.log
  147. # Creating symlinks
  148. cd $HOMEDIR/$user/web/$domain/logs/
  149. ln -f -s /var/log/$WEB_SYSTEM/domains/$domain.log .
  150. ln -f -s /var/log/$WEB_SYSTEM/domains/$domain.error.log .
  151. cd /
  152. # Propagating html skeleton
  153. if [ ! -e "$WEBTPL/skel/document_errors/" ]; then
  154. sudo -u $user cp -r $WEBTPL/skel/document_errors/ \
  155. $HOMEDIR/$user/web/$domain/
  156. fi
  157. # Set folder permissions
  158. no_symlink_chmod 551 $HOMEDIR/$user/web/$domain \
  159. $HOMEDIR/$user/web/$domain/stats \
  160. $HOMEDIR/$user/web/$domain/logs
  161. no_symlink_chmod 751 $HOMEDIR/$user/web/$domain/private \
  162. $HOMEDIR/$user/web/$domain/cgi-bin \
  163. $HOMEDIR/$user/web/$domain/public_html \
  164. $HOMEDIR/$user/web/$domain/public_shtml \
  165. $HOMEDIR/$user/web/$domain/document_errors
  166. chmod 640 /var/log/$WEB_SYSTEM/domains/$domain.*
  167. # Set ownership
  168. chown --no-dereference $user:$user $HOMEDIR/$user/web/$domain \
  169. $HOMEDIR/$user/web/$domain/private \
  170. $HOMEDIR/$user/web/$domain/cgi-bin \
  171. $HOMEDIR/$user/web/$domain/public_html \
  172. $HOMEDIR/$user/web/$domain/public_shtml
  173. chown -R $user:$user $HOMEDIR/$user/web/$domain/document_errors
  174. chown root:$user /var/log/$WEB_SYSTEM/domains/$domain.*
  175. # Adding vhost configuration
  176. conf="$HOMEDIR/$user/conf/web/$WEB_SYSTEM.conf"
  177. add_web_config "$WEB_SYSTEM" "$TPL.tpl"
  178. # Adding SSL vhost configuration
  179. if [ "$SSL" = 'yes' ]; then
  180. conf="$HOMEDIR/$user/conf/web/s$WEB_SYSTEM.conf"
  181. add_web_config "$WEB_SYSTEM" "$TPL.stpl"
  182. cp -f $USER_DATA/ssl/$domain.crt \
  183. $HOMEDIR/$user/conf/web/ssl.$domain.crt
  184. cp -f $USER_DATA/ssl/$domain.key \
  185. $HOMEDIR/$user/conf/web/ssl.$domain.key
  186. cp -f $USER_DATA/ssl/$domain.pem \
  187. $HOMEDIR/$user/conf/web/ssl.$domain.pem
  188. if [ -e "$USER_DATA/ssl/$domain.ca" ]; then
  189. cp -f $USER_DATA/ssl/$domain.ca \
  190. $HOMEDIR/$user/conf/web/ssl.$domain.ca
  191. fi
  192. fi
  193. # Adding proxy configuration
  194. if [ ! -z "$PROXY_SYSTEM" ] && [ ! -z "$PROXY" ]; then
  195. conf="$HOMEDIR/$user/conf/web/$PROXY_SYSTEM.conf"
  196. add_web_config "$PROXY_SYSTEM" "$PROXY.tpl"
  197. if [ "$SSL" = 'yes' ]; then
  198. conf="$HOMEDIR/$user/conf/web/s$PROXY_SYSTEM.conf"
  199. add_web_config "$PROXY_SYSTEM" "$PROXY.stpl"
  200. fi
  201. fi
  202. # Adding web stats parser
  203. if [ ! -z "$STATS" ]; then
  204. domain_idn=$domain
  205. format_domain_idn
  206. cat $WEBTPL/$STATS/$STATS.tpl |\
  207. sed -e "s|%ip%|$local_ip|g" \
  208. -e "s|%web_system%|$WEB_SYSTEM|g" \
  209. -e "s|%domain_idn%|$domain_idn|g" \
  210. -e "s|%domain%|$domain|g" \
  211. -e "s|%user%|$user|g" \
  212. -e "s|%home%|$HOMEDIR|g" \
  213. -e "s|%alias%|${aliases//,/ }|g" \
  214. -e "s|%alias_idn%|${aliases_idn//,/ }|g" \
  215. > $HOMEDIR/$user/conf/web/$STATS.$domain.conf
  216. if [ "$STATS" == 'awstats' ]; then
  217. if [ ! -e "/etc/awstats/$STATS.$domain_idn.conf" ]; then
  218. ln -f -s $HOMEDIR/$user/conf/web/$STATS.$domain.conf \
  219. /etc/awstats/$STATS.$domain_idn.conf
  220. fi
  221. fi
  222. webstats="$BIN/v-update-web-domain-stat $user $domain"
  223. check_webstats=$(grep "$webstats" $VESTA/data/queue/webstats.pipe)
  224. if [ -z "$check_webstats" ]; then
  225. echo "$webstats" >> $VESTA/data/queue/webstats.pipe
  226. fi
  227. if [ ! -z "$STATS_USER" ]; then
  228. stats_dir="$HOMEDIR/$user/web/$domain/stats"
  229. if [ "$WEB_SYSTEM" = 'nginx' ]; then
  230. echo "auth_basic \"Web Statistics\";" > $stats_dir/auth.conf
  231. echo "auth_basic_user_file $stats_dir/.htpasswd;" >> \
  232. $stats_dir/auth.conf
  233. else
  234. echo "AuthUserFile $stats_dir/.htpasswd" > $stats_dir/.htaccess
  235. echo "AuthName \"Web Statistics\"" >> $stats_dir/.htaccess
  236. echo "AuthType Basic" >> $stats_dir/.htaccess
  237. echo "Require valid-user" >> $stats_dir/.htaccess
  238. fi
  239. echo "$STATS_USER:$STATS_CRYPT" > $stats_dir/.htpasswd
  240. fi
  241. fi
  242. # Adding ftp users
  243. if [ -z "$FTP_SHELL" ]; then
  244. shell=$(which nologin)
  245. if [ -e "/usr/bin/rssh" ]; then
  246. shell='/usr/bin/rssh'
  247. fi
  248. else
  249. shell=$FTP_SHELL
  250. fi
  251. for ftp_user in ${FTP_USER//:/ }; do
  252. if [ -z "$(grep ^$ftp_user: /etc/passwd)" ]; then
  253. position=$(echo $FTP_USER |tr ':' '\n' |grep -n '' |\
  254. grep ":$ftp_user$" |cut -f 1 -d:)
  255. ftp_path=$(echo $FTP_PATH |tr ':' '\n' |grep -n '' |\
  256. grep "^$position:" |cut -f 2 -d :)
  257. ftp_md5=$(echo $FTP_MD5 | tr ':' '\n' |grep -n '' |\
  258. grep "^$position:" |cut -f 2 -d :)
  259. /usr/sbin/useradd $ftp_user \
  260. -s $shell \
  261. -o -u $(id -u $user) \
  262. -g $(id -u $user) \
  263. -M -d "$HOMEDIR/$user/web/$domain${ftp_path}" >/dev/null 2>&1
  264. # Updating ftp user password
  265. shadow=$(grep "^$ftp_user:" /etc/shadow)
  266. shdw3=$(echo "$shadow" |cut -f3 -d :)
  267. shdw4=$(echo "$shadow" |cut -f4 -d :)
  268. shdw5=$(echo "$shadow" |cut -f5 -d :)
  269. shdw6=$(echo "$shadow" |cut -f6 -d :)
  270. shdw7=$(echo "$shadow" |cut -f7 -d :)
  271. shdw8=$(echo "$shadow" |cut -f8 -d :)
  272. shdw9=$(echo "$shadow" |cut -f9 -d :)
  273. shadow_str="$ftp_user:$ftp_md5:$shdw3:$shdw4:$shdw5:$shdw6"
  274. shadow_str="$shadow_str:$shdw7:$shdw8:$shdw9"
  275. chmod u+w /etc/shadow
  276. sed -i "/^$ftp_user:*/d" /etc/shadow
  277. echo "$shadow_str" >> /etc/shadow
  278. chmod u-w /etc/shadow
  279. fi
  280. done
  281. # Adding http auth protection
  282. htaccess="$HOMEDIR/$user/conf/web/$WEB_SYSTEM.$domain.conf_htaccess"
  283. htpasswd="$HOMEDIR/$user/conf/web/$WEB_SYSTEM.$domain.htpasswd"
  284. docroot="$HOMEDIR/$user/web/$domain/public_html"
  285. for auth_user in ${AUTH_USER//:/ }; do
  286. # Parsing auth user variables
  287. position=$(echo $AUTH_USER |tr ':' '\n' |grep -n '' |\
  288. grep ":$auth_user$" |cut -f 1 -d:)
  289. auth_hash=$(echo $AUTH_HASH |tr ':' '\n' |grep -n '' |\
  290. grep "^$position:" |cut -f 2 -d :)
  291. # Adding http auth user
  292. touch $htpasswd
  293. sed -i "/^$auth_user:/d" $htpasswd
  294. echo "$auth_user:$auth_hash" >> $htpasswd
  295. # Checking web server include
  296. if [ ! -e "$htaccess" ]; then
  297. if [ "$WEB_SYSTEM" != 'nginx' ]; then
  298. echo "<Directory $docroot>" > $htaccess
  299. echo " AuthUserFile $htpasswd" >> $htaccess
  300. echo " AuthName \"$domain access\"" >> $htaccess
  301. echo " AuthType Basic" >> $htaccess
  302. echo " Require valid-user" >> $htaccess
  303. echo "</Directory>" >> $htaccess
  304. else
  305. echo "auth_basic \"$domain password access\";" > $htaccess
  306. echo "auth_basic_user_file $htpasswd;" >> $htaccess
  307. fi
  308. chmod 640 $htpasswd $htaccess >/dev/null 2>&1
  309. fi
  310. done
  311. }
  312. # DNS domain rebuild
  313. rebuild_dns_domain_conf() {
  314. # Get domain values
  315. get_domain_values 'dns'
  316. domain_idn=$(idn -t --quiet -a "$domain")
  317. # Checking zone file
  318. if [ ! -e "$USER_DATA/dns/$domain.conf" ]; then
  319. cat $DNSTPL/$TPL.tpl |\
  320. sed -e "s/%ip%/$IP/g" \
  321. -e "s/%domain_idn%/$domain_idn/g" \
  322. -e "s/%domain%/$domain/g" \
  323. -e "s/%ns1%/$ns1/g" \
  324. -e "s/%ns2%/$ns2/g" \
  325. -e "s/%ns3%/$ns3/g" \
  326. -e "s/%ns4%/$ns4/g" \
  327. -e "s/%time%/$TIME/g" \
  328. -e "s/%date%/$DATE/g" > $USER_DATA/dns/$domain.conf
  329. fi
  330. # Sorting records
  331. sort_dns_records
  332. # Updating zone
  333. update_domain_zone
  334. # Set permissions
  335. if [ "$DNS_SYSTEM" = 'named' ]; then
  336. dns_group='named'
  337. else
  338. dns_group='bind'
  339. fi
  340. # Set file permissions
  341. chmod 640 $HOMEDIR/$user/conf/dns/$domain.db
  342. chown root:$dns_group $HOMEDIR/$user/conf/dns/$domain.db
  343. # Get dns config path
  344. if [ -e '/etc/named.conf' ]; then
  345. dns_conf='/etc/named.conf'
  346. fi
  347. if [ -e '/etc/bind/named.conf' ]; then
  348. dns_conf='/etc/bind/named.conf'
  349. fi
  350. # Bind config check
  351. if [ "$SUSPENDED" = 'yes' ]; then
  352. rm_string=$(grep -n /etc/namedb/$domain.db $dns_conf | cut -d : -f 1)
  353. if [ ! -z "$rm_string" ]; then
  354. sed -i "$rm_string d" $dns_conf
  355. fi
  356. suspended_dns=$((suspended_dns + 1))
  357. else
  358. if [ -z "$(grep /$domain.db $dns_conf)" ]; then
  359. named="zone \"$domain_idn\" {type master; file"
  360. named="$named \"$HOMEDIR/$user/conf/dns/$domain.db\";};"
  361. echo "$named" >> $dns_conf
  362. fi
  363. fi
  364. user_domains=$((user_domains + 1))
  365. records=$(wc -l $USER_DATA/dns/$domain.conf | cut -f 1 -d ' ')
  366. user_records=$((user_records + records))
  367. update_object_value 'dns' 'DOMAIN' "$domain" '$RECORDS' "$records"
  368. }
  369. # MAIL domain rebuild
  370. rebuild_mail_domain_conf() {
  371. get_domain_values 'mail'
  372. if [[ "$domain" = *[![:ascii:]]* ]]; then
  373. domain_idn=$(idn -t --quiet -a $domain)
  374. else
  375. domain_idn=$domain
  376. fi
  377. if [ "$SUSPENDED" = 'yes' ]; then
  378. SUSPENDED_MAIL=$((SUSPENDED_MAIL +1))
  379. fi
  380. # Rebuilding exim config structure
  381. if [[ "$MAIL_SYSTEM" =~ exim ]]; then
  382. rm -f /etc/$MAIL_SYSTEM/domains/$domain_idn
  383. mkdir -p $HOMEDIR/$user/conf/mail/$domain
  384. ln -s $HOMEDIR/$user/conf/mail/$domain \
  385. /etc/$MAIL_SYSTEM/domains/$domain_idn
  386. rm -f $HOMEDIR/$user/conf/mail/$domain/aliases
  387. rm -f $HOMEDIR/$user/conf/mail/$domain/antispam
  388. rm -f $HOMEDIR/$user/conf/mail/$domain/antivirus
  389. rm -f $HOMEDIR/$user/conf/mail/$domain/protection
  390. rm -f $HOMEDIR/$user/conf/mail/$domain/passwd
  391. rm -f $HOMEDIR/$user/conf/mail/$domain/fwd_only
  392. touch $HOMEDIR/$user/conf/mail/$domain/aliases
  393. touch $HOMEDIR/$user/conf/mail/$domain/passwd
  394. touch $HOMEDIR/$user/conf/mail/$domain/fwd_only
  395. # Adding antispam protection
  396. if [ "$ANTISPAM" = 'yes' ]; then
  397. touch $HOMEDIR/$user/conf/mail/$domain/antispam
  398. fi
  399. # Adding antivirus protection
  400. if [ "$ANTIVIRUS" = 'yes' ]; then
  401. touch $HOMEDIR/$user/conf/mail/$domain/antivirus
  402. fi
  403. # Adding dkim
  404. if [ "$DKIM" = 'yes' ]; then
  405. cp $USER_DATA/mail/$domain.pem \
  406. $HOMEDIR/$user/conf/mail/$domain/dkim.pem
  407. fi
  408. # Removing symbolic link if domain is suspended
  409. if [ "$SUSPENDED" = 'yes' ]; then
  410. rm -f /etc/exim/domains/$domain_idn
  411. fi
  412. # Adding mail directiry
  413. if [ ! -e $HOMEDIR/$user/mail/$domain_idn ]; then
  414. mkdir $HOMEDIR/$user/mail/$domain_idn
  415. fi
  416. # Adding catchall email
  417. dom_aliases=$HOMEDIR/$user/conf/mail/$domain/aliases
  418. if [ ! -z "$CATCHALL" ]; then
  419. echo "*@$domain_idn:$CATCHALL" >> $dom_aliases
  420. fi
  421. fi
  422. # Rebuild domain accounts
  423. accs=0
  424. dom_diks=0
  425. if [ -e "$USER_DATA/mail/$domain.conf" ]; then
  426. accounts=$(search_objects "mail/$domain" 'SUSPENDED' "no" 'ACCOUNT')
  427. else
  428. accounts=''
  429. fi
  430. for account in $accounts; do
  431. (( ++accs))
  432. dom_diks=$((dom_diks + U_DISK))
  433. object=$(grep "ACCOUNT='$account'" $USER_DATA/mail/$domain.conf)
  434. FWD_ONLY='no'
  435. eval "$object"
  436. if [ "$SUSPENDED" = 'yes' ]; then
  437. MD5='SUSPENDED'
  438. fi
  439. if [[ "$MAIL_SYSTEM" =~ exim ]]; then
  440. if [ "$QUOTA" = 'unlimited' ]; then
  441. QUOTA=0
  442. fi
  443. str="$account:$MD5:$user:mail::$HOMEDIR/$user:$QUOTA"
  444. echo $str >> $HOMEDIR/$user/conf/mail/$domain/passwd
  445. for malias in ${ALIAS//,/ }; do
  446. echo "$malias@$domain_idn:$account@$domain_idn" >> $dom_aliases
  447. done
  448. if [ ! -z "$FWD" ]; then
  449. echo "$account@$domain_idn:$FWD" >> $dom_aliases
  450. fi
  451. if [ "$FWD_ONLY" = 'yes' ]; then
  452. echo "$account" >> $HOMEDIR/$user/conf/mail/$domain/fwd_only
  453. fi
  454. fi
  455. done
  456. # Set permissions and ownership
  457. if [[ "$MAIL_SYSTEM" =~ exim ]]; then
  458. chmod 660 $USER_DATA/mail/$domain.*
  459. chmod 771 $HOMEDIR/$user/conf/mail/$domain
  460. chmod 660 $HOMEDIR/$user/conf/mail/$domain/*
  461. chmod 771 /etc/$MAIL_SYSTEM/domains/$domain_idn
  462. chmod 770 $HOMEDIR/$user/mail/$domain_idn
  463. chown -R $MAIL_USER:mail $HOMEDIR/$user/conf/mail/$domain
  464. chown -R dovecot:mail $HOMEDIR/$user/conf/mail/$domain/passwd
  465. chown $user:mail $HOMEDIR/$user/mail/$domain_idn
  466. fi
  467. # Update counters
  468. update_object_value 'mail' 'DOMAIN' "$domain" '$ACCOUNTS' "$accs"
  469. update_object_value 'mail' 'DOMAIN' "$domain" '$U_DISK' "$dom_diks"
  470. U_MAIL_ACCOUNTS=$((U_MAIL_ACCOUNTS + accs))
  471. U_DISK_MAIL=$((U_DISK_MAIL + dom_diks))
  472. U_MAIL_DOMAINS=$((U_MAIL_DOMAINS + 1))
  473. }
  474. # Rebuild MySQL
  475. rebuild_mysql_database() {
  476. mysql_connect $HOST
  477. mysql_query "CREATE DATABASE \`$DB\` CHARACTER SET $CHARSET" >/dev/null
  478. if [ "$mysql_fork" = "mysql" ]; then
  479. # mysql
  480. if [ "$(echo $mysql_ver |cut -d '.' -f2)" -ge 7 ]; then
  481. # mysql >= 5.7
  482. mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`" > /dev/null
  483. mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`@localhost" > /dev/null
  484. query="UPDATE mysql.user SET authentication_string='$MD5'"
  485. query="$query WHERE User='$DBUSER'"
  486. else
  487. # mysql < 5.7
  488. query="UPDATE mysql.user SET Password='$MD5' WHERE User='$DBUSER'"
  489. fi
  490. else
  491. # mariadb
  492. if [ "$(echo $mysql_ver |cut -d '.' -f1)" -eq 5 ]; then
  493. # mariadb = 5
  494. mysql_query "CREATE USER \`$DBUSER\`" > /dev/null
  495. mysql_query "CREATE USER \`$DBUSER\`@localhost" > /dev/null
  496. else
  497. # mariadb = 10
  498. mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`" > /dev/null
  499. mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`@localhost" > /dev/null
  500. fi
  501. # mariadb any version
  502. query="UPDATE mysql.user SET Password='$MD5' WHERE User='$DBUSER'"
  503. fi
  504. mysql_query "GRANT ALL ON \`$DB\`.* TO \`$DBUSER\`@\`%\`" >/dev/null
  505. mysql_query "GRANT ALL ON \`$DB\`.* TO \`$DBUSER\`@localhost" >/dev/null
  506. mysql_query "$query" >/dev/null
  507. mysql_query "FLUSH PRIVILEGES" >/dev/null
  508. }
  509. # Rebuild PostgreSQL
  510. rebuild_pgsql_database() {
  511. host_str=$(grep "HOST='$HOST'" $VESTA/conf/pgsql.conf)
  512. eval $host_str
  513. export PGPASSWORD="$PASSWORD"
  514. if [ -z $HOST ] || [ -z $USER ] || [ -z $PASSWORD ] || [ -z $TPL ]; then
  515. echo "Error: postgresql config parsing failed"
  516. if [ ! -z "$SENDMAIL" ]; then
  517. echo "Can't parse PostgreSQL config" | $SENDMAIL -s "$subj" $email
  518. fi
  519. log_event "$E_PARSING" "$ARGUMENTS"
  520. exit $E_PARSING
  521. fi
  522. query='SELECT VERSION()'
  523. psql -h $HOST -U $USER -c "$query" > /dev/null 2>&1
  524. if [ '0' -ne "$?" ]; then
  525. echo "Error: Connection failed"
  526. if [ ! -z "$SENDMAIL" ]; then
  527. echo "Database connection to PostgreSQL host $HOST failed" |\
  528. $SENDMAIL -s "$subj" $email
  529. fi
  530. log_event "$E_CONNECT" "$ARGUMENTS"
  531. exit $E_CONNECT
  532. fi
  533. query="CREATE ROLE $DBUSER WITH LOGIN"
  534. psql -h $HOST -U $USER -c "$query" > /dev/null 2>&1
  535. query="UPDATE pg_authid SET rolpassword='$MD5' WHERE rolname='$DBUSER'"
  536. psql -h $HOST -U $USER -c "$query" > /dev/null 2>&1
  537. query="CREATE DATABASE $DB OWNER $DBUSER"
  538. if [ "$TPL" = 'template0' ]; then
  539. query="$query ENCODING '$CHARSET' TEMPLATE $TPL"
  540. else
  541. query="$query TEMPLATE $TPL"
  542. fi
  543. psql -h $HOST -U $USER -c "$query" > /dev/null 2>&1
  544. query="GRANT ALL PRIVILEGES ON DATABASE $DB TO $DBUSER"
  545. psql -h $HOST -U $USER -c "$query" > /dev/null 2>&1
  546. query="GRANT CONNECT ON DATABASE template1 to $DBUSER"
  547. psql -h $HOST -U $USER -c "$query" > /dev/null 2>&1
  548. }
  549. # Import MySQL dump
  550. import_mysql_database() {
  551. host_str=$(grep "HOST='$HOST'" $VESTA/conf/mysql.conf)
  552. eval $host_str
  553. if [ -z $HOST ] || [ -z $USER ] || [ -z $PASSWORD ]; then
  554. echo "Error: mysql config parsing failed"
  555. log_event "$E_PARSING" "$ARGUMENTS"
  556. exit $E_PARSING
  557. fi
  558. mysql -h $HOST -u $USER -p$PASSWORD $DB < $1 > /dev/null 2>&1
  559. }
  560. # Import PostgreSQL dump
  561. import_pgsql_database() {
  562. host_str=$(grep "HOST='$HOST'" $VESTA/conf/pgsql.conf)
  563. eval $host_str
  564. export PGPASSWORD="$PASSWORD"
  565. if [ -z $HOST ] || [ -z $USER ] || [ -z $PASSWORD ] || [ -z $TPL ]; then
  566. echo "Error: postgresql config parsing failed"
  567. log_event "$E_PARSING" "$ARGUMENTS"
  568. exit $E_PARSING
  569. fi
  570. psql -h $HOST -U $USER $DB < $1 > /dev/null 2>&1
  571. }