mailinabox/setup/additionals.sh

55 lines
1.7 KiB
Bash
Raw Normal View History

2021-04-11 10:14:41 +00:00
source /etc/mailinabox.conf
source setup/functions.sh
2021-04-21 20:42:10 +00:00
# Add additional packages
apt_install pflogsumm rkhunter
2021-04-21 20:42:10 +00:00
2021-04-11 10:14:41 +00:00
# Cleanup old spam and trash email
hide_output install -m 755 conf/cron/miab_clean_mail /etc/cron.weekly/
2021-04-11 10:14:41 +00:00
# Reduce logs by not logging mail output in syslog
sed -i "s/\*\.\*;auth,authpriv.none.*\-\/var\/log\/syslog/\*\.\*;mail,auth,authpriv.none \-\/var\/log\/syslog/g" /etc/rsyslog.d/50-default.conf
# Reduce logs by only logging ufw in ufw.log
sed -i "s/#\& stop/\& stop/g" /etc/rsyslog.d/20-ufw.conf
2022-09-08 20:23:07 +00:00
# Add nextcloud logging
hide_output install -m 644 conf/rsyslog/20-nextcloud.conf /etc/rsyslog.d/
2021-04-11 10:14:41 +00:00
restart_service rsyslog
2021-04-26 19:46:07 +00:00
# Create forward for root emails
cat > /root/.forward << EOF;
administrator@$PRIMARY_HOSTNAME
2021-04-28 07:23:27 +00:00
EOF
2021-04-29 21:03:09 +00:00
2021-05-08 21:37:10 +00:00
# Adapt rkhunter cron job to reduce log file production
sed -i "s/--cronjob --report-warnings-only --appendlog/--cronjob --report-warnings-only --no-verbose-logging --appendlog/g" /etc/cron.daily/rkhunter
2021-04-29 21:03:09 +00:00
# Install fake mail script
if [ ! -f /usr/local/bin/mail ]; then
hide_output install -m 755 tools/fake_mail /usr/local/bin
mv -f /usr/local/bin/fake_mail /usr/local/bin/mail
fi
2021-05-08 21:37:10 +00:00
# Adapt rkhunter configuration
2021-04-29 21:03:09 +00:00
tools/editconf.py /etc/rkhunter.conf \
UPDATE_MIRRORS=1 \
MIRRORS_MODE=0 \
WEB_CMD='""' \
2021-05-08 21:21:11 +00:00
APPEND_LOG=1 \
2021-04-29 21:03:09 +00:00
ALLOWHIDDENDIR=/etc/.java
2021-04-30 20:37:03 +00:00
# Check presence of whitelist
if ! grep -Fxq "SCRIPTWHITELIST=/usr/local/bin/mail" /etc/rkhunter.conf > /dev/null; then
echo "SCRIPTWHITELIST=/usr/local/bin/mail" >> /etc/rkhunter.conf
fi
2021-04-29 21:03:09 +00:00
tools/editconf.py /etc/default/rkhunter \
CRON_DAILY_RUN='"true"' \
CRON_DB_UPDATE='"true"' \
APT_AUTOGEN='"true"'
# Should be last, update expected output
2021-04-29 21:03:09 +00:00
rkhunter --propupd