2014-06-03 13:24:48 +00:00
|
|
|
#!/bin/bash
|
|
|
|
|
|
|
|
source setup/functions.sh
|
|
|
|
|
2015-08-19 19:58:35 +00:00
|
|
|
echo "Installing Mail-in-a-Box system management daemon..."
|
|
|
|
|
2017-02-01 14:14:01 +00:00
|
|
|
# DEPENDENCIES
|
|
|
|
|
2018-05-13 00:02:25 +00:00
|
|
|
# We used to install management daemon-related Python packages
|
|
|
|
# directly to /usr/local/lib. We moved to a virtualenv because
|
|
|
|
# these packages might conflict with apt-installed packages.
|
|
|
|
# We may have a lingering version of acme that conflcits with
|
|
|
|
# certbot, which we're about to install below, so remove it
|
|
|
|
# first. Once acme is installed by an apt package, this might
|
|
|
|
# break the package version and `apt-get install --reinstall python3-acme`
|
|
|
|
# might be needed in that case.
|
|
|
|
while [ -d /usr/local/lib/python3.4/dist-packages/acme ]; do
|
|
|
|
pip3 uninstall -y acme;
|
|
|
|
done
|
|
|
|
|
2018-01-15 17:43:32 +00:00
|
|
|
# duplicity is used to make backups of user data. It uses boto
|
|
|
|
# (via Python 2) to do backups to AWS S3. boto from the Ubuntu
|
|
|
|
# package manager is too out-of-date -- it doesn't support the newer
|
|
|
|
# S3 api used in some regions, which breaks backups to those regions.
|
|
|
|
# See #627, #653.
|
2018-05-12 15:32:54 +00:00
|
|
|
#
|
2018-10-24 21:20:48 +00:00
|
|
|
# virtualenv is used to isolate the Python 3 packages we
|
2018-05-12 15:32:54 +00:00
|
|
|
# install via pip from the system-installed packages.
|
2018-05-13 00:02:25 +00:00
|
|
|
#
|
|
|
|
# certbot installs EFF's certbot which we use to
|
|
|
|
# provision free TLS certificates.
|
2020-05-17 14:14:43 +00:00
|
|
|
apt_install duplicity python3-pip virtualenv certbot
|
2020-05-17 14:20:14 +00:00
|
|
|
hide_output pip3 install --upgrade boto
|
2015-07-27 19:56:08 +00:00
|
|
|
|
2018-01-15 17:43:32 +00:00
|
|
|
# Create a virtualenv for the installation of Python 3 packages
|
|
|
|
# used by the management daemon.
|
|
|
|
inst_dir=/usr/local/lib/mailinabox
|
|
|
|
mkdir -p $inst_dir
|
|
|
|
venv=$inst_dir/env
|
|
|
|
if [ ! -d $venv ]; then
|
2019-05-15 18:59:32 +00:00
|
|
|
hide_output virtualenv -ppython3 $venv
|
2018-01-15 17:43:32 +00:00
|
|
|
fi
|
2016-02-18 11:59:38 +00:00
|
|
|
|
2018-05-12 15:32:54 +00:00
|
|
|
# Upgrade pip because the Ubuntu-packaged version is out of date.
|
2018-01-15 17:43:32 +00:00
|
|
|
hide_output $venv/bin/pip install --upgrade pip
|
2017-02-01 14:14:01 +00:00
|
|
|
|
2016-02-18 11:59:38 +00:00
|
|
|
# Install other Python 3 packages used by the management daemon.
|
|
|
|
# The first line is the packages that Josh maintains himself!
|
|
|
|
# NOTE: email_validator is repeated in setup/questions.sh, so please keep the versions synced.
|
2018-01-15 17:43:32 +00:00
|
|
|
hide_output $venv/bin/pip install --upgrade \
|
2018-05-13 00:02:25 +00:00
|
|
|
rtyaml "email_validator>=1.0.0" "exclusiveprocess" \
|
2018-01-15 17:43:32 +00:00
|
|
|
flask dnspython python-dateutil \
|
2020-09-02 17:12:15 +00:00
|
|
|
qrcode[pil] pyotp \
|
2020-05-17 16:10:38 +00:00
|
|
|
"idna>=2.0.0" "cryptography==2.2.2" boto psutil postfix-mta-sts-resolver
|
2014-06-03 20:21:17 +00:00
|
|
|
|
2017-02-01 14:14:01 +00:00
|
|
|
# CONFIGURATION
|
|
|
|
|
2014-06-03 20:21:17 +00:00
|
|
|
# Create a backup directory and a random key for encrypting backups.
|
|
|
|
mkdir -p $STORAGE_ROOT/backup
|
|
|
|
if [ ! -f $STORAGE_ROOT/backup/secret_key.txt ]; then
|
2014-08-22 21:23:56 +00:00
|
|
|
$(umask 077; openssl rand -base64 2048 > $STORAGE_ROOT/backup/secret_key.txt)
|
2014-06-03 20:21:17 +00:00
|
|
|
fi
|
2014-06-03 13:24:48 +00:00
|
|
|
|
2017-05-08 11:25:16 +00:00
|
|
|
|
|
|
|
# Download jQuery and Bootstrap local files
|
|
|
|
|
|
|
|
# Make sure we have the directory to save to.
|
2018-01-15 17:43:32 +00:00
|
|
|
assets_dir=$inst_dir/vendor/assets
|
2017-05-31 11:36:17 +00:00
|
|
|
rm -rf $assets_dir
|
2017-05-08 11:25:16 +00:00
|
|
|
mkdir -p $assets_dir
|
|
|
|
|
|
|
|
# jQuery CDN URL
|
2020-06-21 15:02:17 +00:00
|
|
|
jquery_version=3.5.1
|
2017-05-08 11:25:16 +00:00
|
|
|
jquery_url=https://code.jquery.com
|
|
|
|
|
|
|
|
# Get jQuery
|
2020-06-21 15:02:17 +00:00
|
|
|
wget_verify $jquery_url/jquery-$jquery_version.min.js c8e1c8b386dc5b7a9184c763c88d19a346eb3342 $assets_dir/jquery.min.js
|
2017-05-08 11:25:16 +00:00
|
|
|
|
|
|
|
# Bootstrap CDN URL
|
2020-09-27 01:34:37 +00:00
|
|
|
bootstrap_version=4.5.2
|
2017-05-31 11:36:17 +00:00
|
|
|
bootstrap_url=https://github.com/twbs/bootstrap/releases/download/v$bootstrap_version/bootstrap-$bootstrap_version-dist.zip
|
2017-05-08 11:25:16 +00:00
|
|
|
|
|
|
|
# Get Bootstrap
|
2020-09-27 01:34:37 +00:00
|
|
|
wget_verify $bootstrap_url f23782f6f421c167b3101270dfc89d8a4d36dbe9 /tmp/bootstrap.zip
|
2018-01-15 17:43:32 +00:00
|
|
|
unzip -q /tmp/bootstrap.zip -d $assets_dir
|
|
|
|
mv $assets_dir/bootstrap-$bootstrap_version-dist $assets_dir/bootstrap
|
2017-05-31 11:36:17 +00:00
|
|
|
rm -f /tmp/bootstrap.zip
|
2017-05-08 11:25:16 +00:00
|
|
|
|
2014-06-03 13:24:48 +00:00
|
|
|
# Create an init script to start the management daemon and keep it
|
|
|
|
# running after a reboot.
|
2018-01-15 17:43:32 +00:00
|
|
|
cat > $inst_dir/start <<EOF;
|
|
|
|
#!/bin/bash
|
|
|
|
source $venv/bin/activate
|
2018-01-28 13:51:36 +00:00
|
|
|
exec python `pwd`/management/daemon.py
|
2018-01-15 17:43:32 +00:00
|
|
|
EOF
|
|
|
|
chmod +x $inst_dir/start
|
2019-12-01 22:43:56 +00:00
|
|
|
cp --remove-destination conf/mailinabox.service /lib/systemd/system/mailinabox.service # target was previously a symlink so remove it first
|
2019-12-01 21:15:04 +00:00
|
|
|
hide_output systemctl link -f /lib/systemd/system/mailinabox.service
|
2018-07-07 18:41:41 +00:00
|
|
|
hide_output systemctl daemon-reload
|
|
|
|
hide_output systemctl enable mailinabox.service
|
2014-06-03 13:24:48 +00:00
|
|
|
|
2015-12-26 13:39:22 +00:00
|
|
|
# Perform nightly tasks at 3am in system time: take a backup, run
|
|
|
|
# status checks and email the administrator any changes.
|
2015-12-23 22:29:13 +00:00
|
|
|
|
2020-05-03 14:34:42 +00:00
|
|
|
minute=$((RANDOM % 60)) # avoid overloading mailinabox.email
|
2015-12-26 13:39:22 +00:00
|
|
|
cat > /etc/cron.d/mailinabox-nightly << EOF;
|
2015-03-08 21:56:28 +00:00
|
|
|
# Mail-in-a-Box --- Do not edit / will be overwritten on update.
|
2015-12-26 13:39:22 +00:00
|
|
|
# Run nightly tasks: backup, status checks.
|
2020-05-03 14:34:42 +00:00
|
|
|
$minute 3 * * * root (cd `pwd` && management/daily_tasks.sh)
|
2015-03-08 21:56:28 +00:00
|
|
|
EOF
|
|
|
|
|
2015-10-10 22:03:55 +00:00
|
|
|
# Start the management server.
|
2014-07-16 13:06:45 +00:00
|
|
|
restart_service mailinabox
|