mirror of
https://github.com/myvesta/vesta
synced 2025-08-21 13:54:28 -07:00
web function refactoring
This commit is contained in:
Serghey Rodin
parent
73b63016d4
commit
872cd3ac45
20 changed files with 744 additions and 1239 deletions
804
func/domain.sh
804
func/domain.sh
|
|
@ -1,216 +1,378 @@
|
|||
#----------------------------------------------------------#
|
||||
# WEB #
|
||||
#----------------------------------------------------------#
|
||||
|
||||
# Web template check
|
||||
is_web_template_valid() {
|
||||
t="$WEBTPL/$WEB_SYSTEM/$WEB_BACKEND/$template.tpl"
|
||||
s="$WEBTPL/$WEB_SYSTEM/$WEB_BACKEND/$template.stpl"
|
||||
if [ ! -e $t ] || [ ! -e $s ]; then
|
||||
echo "Error: web template $template not found"
|
||||
log_event "$E_NOTEXIST" "$EVENT"
|
||||
exit $E_NOTEXIST
|
||||
if [ ! -z "$WEB_SYSTEM" ]; then
|
||||
template=$1
|
||||
if [ -z "$template" ]; then
|
||||
template=$(grep WEB_TEMPLATE $USER_DATA/user.conf |cut -f2 -d \')
|
||||
if [ -z "$template" ]; then
|
||||
template="default"
|
||||
fi
|
||||
fi
|
||||
tpl="$WEBTPL/$WEB_SYSTEM/$WEB_BACKEND/$template.tpl"
|
||||
stpl="$WEBTPL/$WEB_SYSTEM/$WEB_BACKEND/$template.stpl"
|
||||
if [ ! -e "$tpl" ] || [ ! -e "$stpl" ]; then
|
||||
check_result $E_NOTEXIST "$template web template doesn't exist"
|
||||
fi
|
||||
fi
|
||||
}
|
||||
|
||||
# Proxy template check
|
||||
is_proxy_template_valid() {
|
||||
proxy=$1
|
||||
t="$WEBTPL/$PROXY_SYSTEM/$proxy.tpl"
|
||||
s="$WEBTPL/$PROXY_SYSTEM/$proxy.stpl"
|
||||
if [ ! -e $t ] || [ ! -e $s ]; then
|
||||
echo "Error: proxy template $proxy not found"
|
||||
log_event "$E_NOTEXIST" "$EVENT"
|
||||
exit $E_NOTEXIST
|
||||
if [ ! -z "$PROXY_SYSTEM" ]; then
|
||||
proxy=$1
|
||||
if [ -z "$proxy" ]; then
|
||||
proxy=$(grep PROXY_TEMPLATE $USER_DATA/user.conf |cut -f2 -d \')
|
||||
if [ -z "$proxy" ]; then
|
||||
proxy="default"
|
||||
fi
|
||||
fi
|
||||
tpl="$WEBTPL/$PROXY_SYSTEM/$proxy.tpl"
|
||||
stpl="$WEBTPL/$PROXY_SYSTEM/$proxy.stpl"
|
||||
if [ ! -e "$tpl" ] || [ ! -e "$stpl" ]; then
|
||||
check_result $E_NOTEXIST "$proxy proxy template doesn't exist"
|
||||
fi
|
||||
fi
|
||||
}
|
||||
|
||||
# Backend template check
|
||||
is_web_backend_template_valid() {
|
||||
if [ ! -z "$1" ]; then
|
||||
template=$1
|
||||
else
|
||||
template=$(grep BACKEND_TEMPLATE $USER_DATA/user.conf)
|
||||
is_backend_template_valid() {
|
||||
if [ ! -e "$WEBTPL/$WEB_BACKEND/$1.tpl" ]; then
|
||||
check_result $E_NOTEXIST "$backend backend template doesn't exist"
|
||||
fi
|
||||
if [ -z "$template" ]; then
|
||||
if [ -e "$WEBTPL/$WEB_BACKEND/default.tpl" ]; then
|
||||
sed -i "s/^WEB_DOMAINS/BACKEND_TEMPLATE='default'\nWEB_DOMAINS/g" \
|
||||
$USER_DATA/user.conf
|
||||
template='default'
|
||||
else
|
||||
echo "Error: backend template default not found"
|
||||
log_event "$E_NOTEXIST" "$EVENT"
|
||||
exit $E_NOTEXIST
|
||||
}
|
||||
|
||||
# Web domain existence check
|
||||
is_web_domain_new() {
|
||||
web=$(grep -F -H "DOMAIN='$1'" $VESTA/data/users/*/web.conf)
|
||||
if [ ! -z "$web" ]; then
|
||||
if [ "$type" == 'web' ]; then
|
||||
check_result $E_EXISTS "Web domain $1 exist"
|
||||
fi
|
||||
else
|
||||
template=$(echo "$template"|cut -f 2 -d \'|head -n1)
|
||||
if [ ! -e "$WEBTPL/$WEB_BACKEND/$template.tpl" ]; then
|
||||
echo "Error: backend template $template not found"
|
||||
log_event "$E_NOTEXIST" "$EVENT"
|
||||
exit $E_NOTEXIST
|
||||
web_user=$(echo "$web" |cut -f 7 -d /)
|
||||
if [ "$web_user" != "$user" ]; then
|
||||
check_result $E_EXISTS "Web domain $1 exist"
|
||||
fi
|
||||
fi
|
||||
}
|
||||
|
||||
# Backend pool check
|
||||
is_web_backend_pool_valid(){
|
||||
# Web alias existence check
|
||||
is_web_alias_new() {
|
||||
web_alias=$(grep -wH "$1" $VESTA/data/users/*/web.conf)
|
||||
if [ ! -z "$web_alias" ]; then
|
||||
a1=$(echo "$web_alias" |grep -F "'$1'" |cut -f 7 -d /)
|
||||
if [ ! -z "$a1" ] && [ "$2" == "web" ]; then
|
||||
check_result $E_EXISTS "Web alias $1 exists"
|
||||
fi
|
||||
if [ ! -z "$a1" ] && [ "$a1" != "$user" ]; then
|
||||
check_result $E_EXISTS "Web alias $1 exists"
|
||||
fi
|
||||
a2=$(echo "$web_alias" |grep -F "'$1," |cut -f 7 -d /)
|
||||
if [ ! -z "$a2" ] && [ "$2" == "web" ]; then
|
||||
check_result $E_EXISTS "Web alias $1 exists"
|
||||
fi
|
||||
if [ ! -z "$a2" ] && [ "$a2" != "$user" ]; then
|
||||
check_result $E_EXISTS "Web alias $1 exists"
|
||||
fi
|
||||
a3=$(echo "$web_alias" |grep -F ",$1," |cut -f 7 -d /)
|
||||
if [ ! -z "$a3" ] && [ "$2" == "web" ]; then
|
||||
check_result $E_EXISTS "Web alias $1 exists"
|
||||
fi
|
||||
if [ ! -z "$a3" ] && [ "$a3" != "$user" ]; then
|
||||
check_result $E_EXISTS "Web alias $1 exists"
|
||||
fi
|
||||
a4=$(echo "$web_alias" |grep -F ",$1'" |cut -f 7 -d /)
|
||||
if [ ! -z "$a4" ] && [ "$2" == "web" ]; then
|
||||
check_result $E_EXISTS "Web alias $1 exists"
|
||||
fi
|
||||
if [ ! -z "$a4" ] && [ "$a4" != "$user" ]; then
|
||||
check_result $E_EXISTS "Web alias $1 exists"
|
||||
fi
|
||||
fi
|
||||
}
|
||||
|
||||
# Prepare web backend
|
||||
prepare_web_backend() {
|
||||
if [ -d "/etc/php-fpm.d" ]; then
|
||||
pool="/etc/php-fpm.d"
|
||||
fi
|
||||
if [ -d "/etc/php5/fpm/pool.d" ]; then
|
||||
pool="/etc/php5/fpm/pool.d"
|
||||
fi
|
||||
if [ -d "/etc/php-fpm-5.5.d" ]; then
|
||||
pool="/etc/php-fpm-5.5.d"
|
||||
fi
|
||||
if [ ! -e "$pool" ]; then
|
||||
echo "Error: backend pool directory not found"
|
||||
log_event "$E_NOTEXIST" "$EVENT"
|
||||
pool=$(find /etc/php* -type d \( -name "pool.d" -o -name "*fpm.d" \))
|
||||
if [ ! -e "$pool" ]; then
|
||||
check_result $E_NOTEXIST "php-fpm pool doesn't exist"
|
||||
fi
|
||||
fi
|
||||
|
||||
backend_type="$domain"
|
||||
if [ "$WEB_BACKEND_POOL" = 'user' ]; then
|
||||
backend_type="$user"
|
||||
fi
|
||||
if [ -e "$pool/$backend_type.conf" ]; then
|
||||
backend_lsnr=$(grep "listen =" $pool/$backend_type.conf)
|
||||
backend_lsnr=$(echo "$backend_lsnr" |cut -f 2 -d = |sed "s/ //")
|
||||
if [ ! -z "$(echo $backend_lsnr |grep /)" ]; then
|
||||
backend_lsnr="unix:$backend_lsnr"
|
||||
fi
|
||||
fi
|
||||
}
|
||||
|
||||
# Prepare web aliases
|
||||
prepare_web_aliases() {
|
||||
i=1
|
||||
for tmp_alias in ${1//,/ }; do
|
||||
tmp_alias_idn="$tmp_alias"
|
||||
if [[ "$tmp_alias" = *[![:ascii:]]* ]]; then
|
||||
tmp_alias_idn=$(idn -t --quiet -a $tmp_alias)
|
||||
fi
|
||||
if [[ $i -eq 1 ]]; then
|
||||
aliases="$tmp_alias"
|
||||
aliases_idn="$tmp_alias_idn"
|
||||
alias_string="ServerAlias $tmp_alias_idn"
|
||||
else
|
||||
aliases="$aliases,$tmp_alias"
|
||||
aliases_idn="$aliases_idn,$tmp_alias_idn"
|
||||
if (( $i % 100 == 0 )); then
|
||||
alias_string="$alias_string\n ServerAlias $tmp_alias_idn"
|
||||
else
|
||||
alias_string="$alias_string $tmp_alias_idn"
|
||||
fi
|
||||
fi
|
||||
alias_number=$i
|
||||
((i++))
|
||||
done
|
||||
}
|
||||
|
||||
# Update web domain values
|
||||
prepare_web_domain_values() {
|
||||
if [[ "$domain" = *[![:ascii:]]* ]]; then
|
||||
domain_idn=$(idn -t --quiet -a $domain)
|
||||
else
|
||||
domain_idn=$domain
|
||||
fi
|
||||
group="$user"
|
||||
email="info@$domain"
|
||||
docroot="$HOMEDIR/$user/web/$domain/public_html"
|
||||
sdocroot="$docroot"
|
||||
if [ "$SSL_HOME" = 'single' ]; then
|
||||
sdocroot="$HOMEDIR/$user/web/$domain/public_shtml" ;
|
||||
fi
|
||||
|
||||
if [ ! -z "$WEB_BACKEND" ]; then
|
||||
prepare_web_backend
|
||||
fi
|
||||
|
||||
server_alias=''
|
||||
alias_string=''
|
||||
aliases_idn=''
|
||||
prepare_web_aliases $ALIAS
|
||||
|
||||
ssl_crt="$HOMEDIR/$user/conf/web/ssl.$domain.crt"
|
||||
ssl_key="$HOMEDIR/$user/conf/web/ssl.$domain.key"
|
||||
ssl_pem="$HOMEDIR/$user/conf/web/ssl.$domain.pem"
|
||||
ssl_ca="$HOMEDIR/$user/conf/web/ssl.$domain.ca"
|
||||
if [ ! -e "$USER_DATA/ssl/$domain.ca" ]; then
|
||||
ssl_ca_str='#'
|
||||
fi
|
||||
if [ "$SUSPENDED" = 'yes' ]; then
|
||||
docroot="$VESTA/data/templates/web/suspend"
|
||||
sdocroot="$VESTA/data/templates/web/suspend"
|
||||
fi
|
||||
}
|
||||
|
||||
# Add web config
|
||||
add_web_config() {
|
||||
conf="$HOMEDIR/$user/conf/web/$1.conf"
|
||||
if [[ "$2" =~ stpl$ ]]; then
|
||||
conf="$HOMEDIR/$user/conf/web/s$1.conf"
|
||||
fi
|
||||
|
||||
cat $WEBTPL/$1/$WEB_BACKEND/$2 | \
|
||||
sed -e "s|%ip%|$local_ip|g" \
|
||||
-e "s|%domain%|$domain|g" \
|
||||
-e "s|%domain_idn%|$domain_idn|g" \
|
||||
-e "s|%alias%|${aliases//,/ }|g" \
|
||||
-e "s|%alias_idn%|${aliases_idn//,/ }|g" \
|
||||
-e "s|%alias_string%|$alias_string|g" \
|
||||
-e "s|%email%|info@$domain|g" \
|
||||
-e "s|%web_system%|$WEB_SYSTEM|g" \
|
||||
-e "s|%web_port%|$WEB_PORT|g" \
|
||||
-e "s|%web_ssl_port%|$WEB_SSL_PORT|g" \
|
||||
-e "s|%backend_lsnr%|$backend_lsnr|g" \
|
||||
-e "s|%rgroups%|$WEB_RGROUPS|g" \
|
||||
-e "s|%proxy_system%|$PROXY_SYSTEM|g" \
|
||||
-e "s|%proxy_port%|$PROXY_PORT|g" \
|
||||
-e "s|%proxy_ssl_port%|$PROXY_SSL_PORT|g" \
|
||||
-e "s/%proxy_extentions%/${PROXY_EXT//,/|}/g" \
|
||||
-e "s|%user%|$user|g" \
|
||||
-e "s|%group%|$group|g" \
|
||||
-e "s|%home%|$HOMEDIR|g" \
|
||||
-e "s|%docroot%|$HOMEDIR/$user/web/$domain/public_html|g" \
|
||||
-e "s|%sdocroot%|$HOMEDIR/$user/web/$domain/public_html|g" \
|
||||
-e "s|%ssl_crt%|$ssl_crt|g" \
|
||||
-e "s|%ssl_key%|$ssl_key|g" \
|
||||
-e "s|%ssl_pem%|$ssl_pem|g" \
|
||||
-e "s|%ssl_ca_str%|$ssl_ca_str|g" \
|
||||
-e "s|%ssl_ca%|$ssl_ca|g" \
|
||||
>> $conf
|
||||
|
||||
chown root:$user $conf
|
||||
chmod 640 $conf
|
||||
|
||||
if [ -z "$(grep "$conf" /etc/$1/conf.d/vesta.conf)" ]; then
|
||||
if [ "$WEB_SYSTEM" != 'nginx' ]; then
|
||||
echo "Include $conf" >> /etc/$1/conf.d/vesta.conf
|
||||
else
|
||||
echo "include $conf;" >> /etc/$1/conf.d/vesta.conf
|
||||
fi
|
||||
fi
|
||||
|
||||
trigger="${2/.*pl/.sh}"
|
||||
if [ -x "$WEBTPL/$1/$WEB_BACKEND/$trigger" ]; then
|
||||
$WEBTPL/$1/$WEB_BACKEND/$trigger \
|
||||
$user $domain $ip $HOMEDIR $HOMEDIR/$user/web/$domain/public_html
|
||||
fi
|
||||
}
|
||||
|
||||
# Get config top and bottom line number
|
||||
get_web_config_lines() {
|
||||
tpl_lines=$(egrep -ni "name %domain_idn%" $1 |grep -w %domain_idn%)
|
||||
tpl_lines=$(echo "$tpl_lines" |cut -f 1 -d :)
|
||||
tpl_last_line=$(wc -l $1 |cut -f 1 -d ' ')
|
||||
if [ -z "$tpl_lines" ]; then
|
||||
check_result $E_PARSING "can't parse template $1"
|
||||
fi
|
||||
|
||||
vhost_lines=$(grep -niF "name $domain_idn" $2)
|
||||
vhost_lines=$(echo "$vhost_lines" |egrep "$domain_idn$|$domain_idn ")
|
||||
vhost_lines=$(echo "$vhost_lines" |cut -f 1 -d :)
|
||||
if [ -z "$vhost_lines" ]; then
|
||||
check_result $E_PARSING "can't parse config $2"
|
||||
fi
|
||||
|
||||
top_line=$((vhost_lines + 1 - tpl_lines))
|
||||
bottom_line=$((top_line - 1 + tpl_last_line))
|
||||
multi=$(sed -n "$top_line,$bottom_line p" $2 |grep ServerAlias |wc -l)
|
||||
if [ "$multi" -ge 2 ]; then
|
||||
bottom_line=$((bottom_line + multi -1))
|
||||
fi
|
||||
}
|
||||
|
||||
# Replace web config
|
||||
replace_web_config() {
|
||||
get_web_config_lines $WEBTPL/$1/$WEB_BACKEND/$2 $conf
|
||||
sed -i "$top_line,$bottom_line s|$old|$new|g" $conf
|
||||
}
|
||||
|
||||
# Delete web configuartion
|
||||
del_web_config() {
|
||||
conf="$HOMEDIR/$user/conf/web/$1.conf"
|
||||
if [[ "$2" =~ stpl$ ]]; then
|
||||
conf="$HOMEDIR/$user/conf/web/s$1.conf"
|
||||
fi
|
||||
|
||||
get_web_config_lines $WEBTPL/$1/$WEB_BACKEND/$2 $conf
|
||||
sed -i "$top_line,$bottom_line d" $conf
|
||||
|
||||
web_domains=$(grep DOMAIN $USER_DATA/web.conf |wc -l)
|
||||
if [ "$web_domains" -eq '0' ]; then
|
||||
sed -i "/.*\/$user\/.*$WEB_SYSTEM.conf/d" /etc/$1/conf.d/vesta.conf
|
||||
rm -f $HOMEDIR/$user/conf/web/$WEB_SYSTEM.conf
|
||||
rm -f $HOMEDIR/$user/conf/web/s$WEB_SYSTEM.conf
|
||||
fi
|
||||
}
|
||||
|
||||
# SSL certificate verification
|
||||
is_web_domain_cert_valid() {
|
||||
if [ ! -e "$ssl_dir/$domain.crt" ]; then
|
||||
echo "Error: $ssl_dir/$domain.crt not found"
|
||||
log_event "$E_NOTEXIST" "$ARGUMENTS"
|
||||
exit $E_NOTEXIST
|
||||
fi
|
||||
|
||||
backend="$domain"
|
||||
if [ "$WEB_BACKEND_POOL" = 'user' ]; then
|
||||
backend="$user"
|
||||
if [ ! -e "$ssl_dir/$domain.key" ]; then
|
||||
echo "Error: $ssl_dir/$domain.key not found"
|
||||
log_event "$E_NOTEXIST" "$ARGUMENTS"
|
||||
exit $E_NOTEXIST
|
||||
fi
|
||||
|
||||
crt_vrf=$(openssl verify $ssl_dir/$domain.crt 2>&1)
|
||||
if [ ! -z "$(echo $crt_vrf | grep 'unable to load')" ]; then
|
||||
echo "Error: SSL Certificate is not valid"
|
||||
log_event "$E_INVALID" "$ARGUMENTS"
|
||||
exit $E_INVALID
|
||||
fi
|
||||
|
||||
if [ ! -z "$(echo $crt_vrf | grep 'unable to get local issuer')" ]; then
|
||||
if [ ! -e "$ssl_dir/$domain.ca" ]; then
|
||||
echo "Error: Certificate Authority not found"
|
||||
log_event "$E_NOTEXIST" "$ARGUMENTS"
|
||||
exit $E_NOTEXIST
|
||||
fi
|
||||
fi
|
||||
|
||||
if [ -e "$ssl_dir/$domain.ca" ]; then
|
||||
s1=$(openssl x509 -text -in $ssl_dir/$domain.crt 2>/dev/null)
|
||||
s1=$(echo "$s1" |grep Issuer |awk -F = '{print $6}' |head -n1)
|
||||
s2=$(openssl x509 -text -in $ssl_dir/$domain.ca 2>/dev/null)
|
||||
s2=$(echo "$s2" |grep Subject |awk -F = '{print $6}' |head -n1)
|
||||
if [ "$s1" != "$s2" ]; then
|
||||
echo "Error: SSL intermediate chain is not valid"
|
||||
log_event "$E_NOTEXIST" "$ARGUMENTS"
|
||||
exit $E_NOTEXIST
|
||||
fi
|
||||
fi
|
||||
|
||||
key_vrf=$(grep 'PRIVATE KEY' $ssl_dir/$domain.key | wc -l)
|
||||
if [ "$key_vrf" -ne 2 ]; then
|
||||
echo "Error: SSL Key is not valid"
|
||||
log_event "$E_INVALID" "$ARGUMENTS"
|
||||
exit $E_INVALID
|
||||
fi
|
||||
|
||||
openssl s_server -quiet -cert $ssl_dir/$domain.crt \
|
||||
-key $ssl_dir/$domain.key >> /dev/null 2>&1 &
|
||||
pid=$!
|
||||
sleep 0.5
|
||||
disown &> /dev/null
|
||||
kill $pid &> /dev/null
|
||||
if [ "$?" -ne '0' ]; then
|
||||
echo "Error: ssl certificate key pair is not valid"
|
||||
log_event "$E_INVALID" "$ARGUMENTS"
|
||||
exit $E_INVALID
|
||||
fi
|
||||
}
|
||||
|
||||
|
||||
#----------------------------------------------------------#
|
||||
# DNS #
|
||||
#----------------------------------------------------------#
|
||||
|
||||
# DNS template check
|
||||
is_dns_template_valid() {
|
||||
t="$DNSTPL/$template.tpl"
|
||||
if [ ! -e $t ]; then
|
||||
echo "Error: dns template $template not found"
|
||||
log_event "$E_NOTEXIST" "$EVENT"
|
||||
exit $E_NOTEXIST
|
||||
check_result $E_NOTEXIST "dns template $template doesn't exist"
|
||||
fi
|
||||
}
|
||||
|
||||
# Checking domain existance
|
||||
is_domain_new() {
|
||||
type="$1"
|
||||
dom=${2-$domain}
|
||||
object=${3-domain}
|
||||
|
||||
# Check web domain
|
||||
if [ ! -z "$WEB_SYSTEM" ]; then
|
||||
web=$(grep -F -H "DOMAIN='$dom'" $VESTA/data/users/*/web.conf)
|
||||
fi
|
||||
if [ ! -z "$web" ] && [ "$type" == 'web' ]; then
|
||||
echo "Error: $object $dom exist"
|
||||
log_event "$E_EXISTS" "$EVENT"
|
||||
exit $E_EXISTS
|
||||
fi
|
||||
if [ ! -z "$web" ]; then
|
||||
web_user=$(echo "$web" |cut -f 7 -d /)
|
||||
if [ "$web_user" != "$user" ]; then
|
||||
echo "Error: $object $dom exist"
|
||||
log_event "$E_EXISTS" "$EVENT"
|
||||
exit $E_EXISTS
|
||||
fi
|
||||
fi
|
||||
|
||||
# Check dns domain
|
||||
if [ ! -z "$DNS_SYSTEM" ]; then
|
||||
dns=$(grep -F -H "DOMAIN='$dom'" $VESTA/data/users/*/dns.conf)
|
||||
fi
|
||||
if [ ! -z "$dns" ] && [ "$type" == 'dns' ]; then
|
||||
echo "Error: $object $dom exist"
|
||||
log_event "$E_EXISTS" "$EVENT"
|
||||
exit $E_EXISTS
|
||||
fi
|
||||
# DNS domain existence check
|
||||
is_dns_domain_new() {
|
||||
dns=$(ls $VESTA/data/users/*/dns/$1.conf 2>/dev/null)
|
||||
if [ ! -z "$dns" ]; then
|
||||
if [ "$2" == 'dns' ]; then
|
||||
check_result $E_EXISTS "DNS domain $1 exists"
|
||||
fi
|
||||
dns_user=$(echo "$dns" |cut -f 7 -d /)
|
||||
if [ "$dns_user" != "$user" ]; then
|
||||
echo "Error: $object $dom exist"
|
||||
log_event "$E_EXISTS" "$EVENT"
|
||||
exit $E_EXISTS
|
||||
check_result $E_EXISTS "DNS domain $1 exists"
|
||||
fi
|
||||
fi
|
||||
|
||||
# Check mail domain
|
||||
if [ ! -z "$MAIL_SYSTEM" ]; then
|
||||
mail=$(grep -F -H "DOMAIN='$dom'" $VESTA/data/users/*/mail.conf)
|
||||
fi
|
||||
if [ ! -z "$mail" ] && [ "$type" == 'mail' ]; then
|
||||
echo "Error: $object $dom exist"
|
||||
log_event "$E_EXISTS" "$EVENT"
|
||||
exit $E_EXISTS
|
||||
fi
|
||||
if [ ! -z "$mail" ]; then
|
||||
mail_user=$(echo "$mail" |cut -f 7 -d /)
|
||||
if [ "$mail_user" != "$user" ]; then
|
||||
echo "Error: $object $dom exist"
|
||||
log_event "$E_EXISTS" "$EVENT"
|
||||
exit $E_EXISTS
|
||||
fi
|
||||
fi
|
||||
|
||||
# Check web aliases
|
||||
if [ ! -z "$WEB_SYSTEM" ]; then
|
||||
web_alias=$(grep -w $dom $VESTA/data/users/*/web.conf)
|
||||
fi
|
||||
if [ ! -z "$web_alias" ]; then
|
||||
c1=$(grep -HF "'$dom'" $VESTA/data/users/*/web.conf | cut -f 7 -d /)
|
||||
c2=$(grep -HF "'$dom," $VESTA/data/users/*/web.conf | cut -f 7 -d /)
|
||||
c3=$(grep -HF ",$dom," $VESTA/data/users/*/web.conf | cut -f 7 -d /)
|
||||
c4=$(grep -HF ",$dom'" $VESTA/data/users/*/web.conf | cut -f 7 -d /)
|
||||
if [ ! -z "$c1" ] && [ "$type" == "web" ]; then
|
||||
echo "Error: $object $dom exist"
|
||||
log_event "$E_EXISTS" "$EVENT"
|
||||
exit $E_EXISTS
|
||||
fi
|
||||
if [ ! -z "$c1" ] && [ "$c1" != "$user" ]; then
|
||||
echo "Error: domain $dom exist"
|
||||
log_event "$E_EXISTS" "$EVENT"
|
||||
exit $E_EXISTS
|
||||
fi
|
||||
|
||||
if [ ! -z "$c2" ] && [ "$type" == "web" ]; then
|
||||
echo "Error: $object $dom exist"
|
||||
log_event "$E_EXISTS" "$EVENT"
|
||||
exit $E_EXISTS
|
||||
fi
|
||||
if [ ! -z "$c2" ] && [ "$c2" != "$user" ]; then
|
||||
echo "Error: $object $dom exist"
|
||||
log_event "$E_EXISTS" "$EVENT"
|
||||
exit $E_EXISTS
|
||||
fi
|
||||
|
||||
if [ ! -z "$c3" ] && [ "$type" == "web" ]; then
|
||||
echo "Error: $object $dom exist"
|
||||
log_event "$E_EXISTS" "$EVENT"
|
||||
exit $E_EXISTS
|
||||
fi
|
||||
if [ ! -z "$c3" ] && [ "$c3" != "$user" ]; then
|
||||
echo "Error: $object $dom exist"
|
||||
log_event "$E_EXISTS" "$EVENT"
|
||||
exit $E_EXISTS
|
||||
fi
|
||||
|
||||
if [ ! -z "$c4" ] && [ "$type" == "web" ]; then
|
||||
echo "Error: $object $dom exist"
|
||||
log_event "$E_EXISTS" "$EVENT"
|
||||
exit $E_EXISTS
|
||||
fi
|
||||
if [ ! -z "$c4" ] && [ "$c4" != "$user" ]; then
|
||||
echo "Error: $object $dom exist"
|
||||
log_event "$E_EXISTS" "$EVENT"
|
||||
exit $E_EXISTS
|
||||
fi
|
||||
fi
|
||||
}
|
||||
|
||||
# Checking mail account existance
|
||||
is_mail_new() {
|
||||
check_acc=$(grep "ACCOUNT='$1'" $USER_DATA/mail/$domain.conf)
|
||||
if [ ! -z "$check_acc" ]; then
|
||||
echo "Error: mail account $1 exist"
|
||||
log_event "$E_EXISTS" "$EVENT"
|
||||
exit $E_EXISTS
|
||||
fi
|
||||
check_als=$(awk -F "ALIAS='" '{print $2}' $USER_DATA/mail/$domain.conf )
|
||||
check_als=$(echo "$check_als" | cut -f 1 -d "'" | grep -w $1)
|
||||
if [ ! -z "$check_als" ]; then
|
||||
echo "Error: mail alias $1 exist"
|
||||
log_event "$E_EXISTS" "$EVENT"
|
||||
exit $E_EXISTS
|
||||
fi
|
||||
}
|
||||
|
||||
# Update domain zone
|
||||
|
|
@ -289,238 +451,6 @@ sort_dns_records() {
|
|||
mv -f $conf.tmp $conf
|
||||
}
|
||||
|
||||
# Add web config
|
||||
add_web_config() {
|
||||
cat $tpl_file | \
|
||||
sed -e "s|%ip%|$ip|g" \
|
||||
-e "s|%web_system%|$WEB_SYSTEM|g" \
|
||||
-e "s|%web_port%|$WEB_PORT|g" \
|
||||
-e "s|%web_ssl_port%|$WEB_SSL_PORT|g" \
|
||||
-e "s|%backend_lsnr%|$backend_lsnr|g" \
|
||||
-e "s|%rgroups%|$WEB_RGROUPS|g" \
|
||||
-e "s|%proxy_system%|$PROXY_SYSTEM|g" \
|
||||
-e "s|%proxy_port%|$PROXY_PORT|g" \
|
||||
-e "s|%proxy_ssl_port%|$PROXY_SSL_PORT|g" \
|
||||
-e "s/%proxy_extentions%/${PROXY_EXT//,/|}/g" \
|
||||
-e "s|%domain_idn%|$domain_idn|g" \
|
||||
-e "s|%domain%|$domain|g" \
|
||||
-e "s|%user%|$user|g" \
|
||||
-e "s|%group%|$group|g" \
|
||||
-e "s|%home%|$HOMEDIR|g" \
|
||||
-e "s|%docroot%|$docroot|g" \
|
||||
-e "s|%sdocroot%|$sdocroot|g" \
|
||||
-e "s|%email%|$email|g" \
|
||||
-e "s|%alias_string%|$alias_string|g" \
|
||||
-e "s|%alias_idn%|${aliases_idn//,/ }|g" \
|
||||
-e "s|%alias%|${aliases//,/ }|g" \
|
||||
-e "s|%ssl_crt%|$ssl_crt|g" \
|
||||
-e "s|%ssl_key%|$ssl_key|g" \
|
||||
-e "s|%ssl_pem%|$ssl_pem|g" \
|
||||
-e "s|%ssl_ca_str%|$ssl_ca_str|g" \
|
||||
-e "s|%ssl_ca%|$ssl_ca|g" \
|
||||
>> $conf
|
||||
}
|
||||
|
||||
# Get config top and bottom line numbers
|
||||
get_web_config_brds() {
|
||||
|
||||
serv_line=$(egrep -ni "Name %domain_idn%($| )" $tpl_file |cut -f 1 -d :)
|
||||
if [ -z "$serv_line" ]; then
|
||||
log_event "$E_PARSING" "$EVENT"
|
||||
return $E_PARSING
|
||||
fi
|
||||
|
||||
last_line=$(wc -l $tpl_file|cut -f 1 -d ' ')
|
||||
bfr_line=$((serv_line - 1))
|
||||
aftr_line=$((last_line - serv_line - 1))
|
||||
|
||||
str=$(grep -niF "Name $domain_idn" $conf |egrep "$domain_idn$|$domain_idn ")
|
||||
str=$(echo "$str" |cut -f 1 -d :)
|
||||
top_line=$((str - serv_line + 1))
|
||||
bottom_line=$((top_line + last_line -1))
|
||||
multi=$(sed -n "$top_line,$bottom_line p" $conf |grep ServerAlias |wc -l)
|
||||
if [ "$multi" -ge 2 ]; then
|
||||
bottom_line=$((bottom_line + multi -1))
|
||||
fi
|
||||
}
|
||||
|
||||
# Replace web config
|
||||
replace_web_config() {
|
||||
get_web_config_brds || exit $?
|
||||
clean_new=$(echo "$new" | sed \
|
||||
-e 's/\\/\\\\/g' \
|
||||
-e 's/&/\\&/g' \
|
||||
-e 's/\//\\\//g')
|
||||
clean_old=$(echo "$old" | sed \
|
||||
-e 's/\\/\\\\/g' \
|
||||
-e 's/&/\\&/g' \
|
||||
-e 's/\//\\\//g')
|
||||
|
||||
sed -i "$top_line,$bottom_line s/$clean_old/$clean_new/" $conf
|
||||
}
|
||||
|
||||
# Get domain variables
|
||||
get_domain_values() {
|
||||
for line in $(grep "DOMAIN='$domain'" $USER_DATA/$1.conf); do
|
||||
eval $line
|
||||
done
|
||||
}
|
||||
|
||||
# Get backend values
|
||||
get_domain_backend_values() {
|
||||
lsnr=$(grep "listen =" $pool/$backend.conf |cut -f 2 -d = |sed "s/ //")
|
||||
backend_lsnr="$lsnr"
|
||||
if [ ! -z "$(echo $lsnr |grep /)" ]; then
|
||||
backend_lsnr="unix:$backend_lsnr"
|
||||
fi
|
||||
}
|
||||
|
||||
# SSL certificate verification
|
||||
is_web_domain_cert_valid() {
|
||||
if [ ! -e "$ssl_dir/$domain.crt" ]; then
|
||||
echo "Error: $ssl_dir/$domain.crt not found"
|
||||
log_event "$E_NOTEXIST" "$EVENT"
|
||||
exit $E_NOTEXIST
|
||||
fi
|
||||
|
||||
if [ ! -e "$ssl_dir/$domain.key" ]; then
|
||||
echo "Error: $ssl_dir/$domain.key not found"
|
||||
log_event "$E_NOTEXIST" "$EVENT"
|
||||
exit $E_NOTEXIST
|
||||
fi
|
||||
|
||||
crt_vrf=$(openssl verify $ssl_dir/$domain.crt 2>&1)
|
||||
if [ ! -z "$(echo $crt_vrf | grep 'unable to load')" ]; then
|
||||
echo "Error: SSL Certificate is not valid"
|
||||
log_event "$E_INVALID" "$EVENT"
|
||||
exit $E_INVALID
|
||||
fi
|
||||
|
||||
if [ ! -z "$(echo $crt_vrf | grep 'unable to get local issuer')" ]; then
|
||||
if [ ! -e "$ssl_dir/$domain.ca" ]; then
|
||||
echo "Error: Certificate Authority not found"
|
||||
log_event "$E_NOTEXIST" "$EVENT"
|
||||
exit $E_NOTEXIST
|
||||
fi
|
||||
fi
|
||||
|
||||
if [ -e "$ssl_dir/$domain.ca" ]; then
|
||||
s1=$(openssl x509 -text -in $ssl_dir/$domain.crt 2>/dev/null)
|
||||
s1=$(echo "$s1" |grep Issuer |awk -F = '{print $6}' |head -n1)
|
||||
s2=$(openssl x509 -text -in $ssl_dir/$domain.ca 2>/dev/null)
|
||||
s2=$(echo "$s2" |grep Subject |awk -F = '{print $6}' |head -n1)
|
||||
if [ "$s1" != "$s2" ]; then
|
||||
echo "Error: SSL intermediate chain is not valid"
|
||||
log_event "$E_NOTEXIST" "$EVENT"
|
||||
exit $E_NOTEXIST
|
||||
fi
|
||||
fi
|
||||
|
||||
key_vrf=$(grep 'PRIVATE KEY' $ssl_dir/$domain.key | wc -l)
|
||||
if [ "$key_vrf" -ne 2 ]; then
|
||||
echo "Error: SSL Key is not valid"
|
||||
log_event "$E_INVALID" "$EVENT"
|
||||
exit $E_INVALID
|
||||
fi
|
||||
|
||||
openssl s_server -quiet -cert $ssl_dir/$domain.crt \
|
||||
-key $ssl_dir/$domain.key >> /dev/null 2>&1 &
|
||||
pid=$!
|
||||
sleep 0.5
|
||||
disown &> /dev/null
|
||||
kill $pid &> /dev/null
|
||||
if [ "$?" -ne '0' ]; then
|
||||
echo "Error: ssl certificate key pair is not valid"
|
||||
log_event "$E_INVALID" "$EVENT"
|
||||
exit $E_INVALID
|
||||
fi
|
||||
}
|
||||
|
||||
# Delete web configuartion
|
||||
del_web_config() {
|
||||
get_web_config_brds || exit $?
|
||||
sed -i "$top_line,$bottom_line d" $conf
|
||||
}
|
||||
|
||||
# Update web domain values
|
||||
upd_web_domain_values() {
|
||||
group="$user"
|
||||
email="info@$domain"
|
||||
docroot="$HOMEDIR/$user/web/$domain/public_html"
|
||||
sdocroot=$docroot
|
||||
if [ "$SSL_HOME" = 'single' ]; then
|
||||
sdocroot="$HOMEDIR/$user/web/$domain/public_shtml" ;
|
||||
fi
|
||||
if [ ! -z "$WEB_BACKEND" ]; then
|
||||
is_web_backend_pool_valid
|
||||
get_domain_backend_values
|
||||
fi
|
||||
i=1
|
||||
j=1
|
||||
OLD_IFS="$IFS"
|
||||
IFS=','
|
||||
server_alias=''
|
||||
alias_string=''
|
||||
aliases_idn=''
|
||||
|
||||
for dalias in $ALIAS; do
|
||||
dalias=$(idn -t --quiet -a $dalias)
|
||||
check_8k="$server_alias $dalias"
|
||||
if [ "${#check_8k}" -ge '8100' ]; then
|
||||
if [ "$j" -eq 1 ]; then
|
||||
alias_string="ServerAlias $server_alias"
|
||||
else
|
||||
alias_string="$alias_string\n ServerAlias $server_alias"
|
||||
fi
|
||||
j=2
|
||||
server_alias=''
|
||||
fi
|
||||
if [ "$i" -eq 1 ]; then
|
||||
aliases_idn="$dalias"
|
||||
server_alias="$dalias"
|
||||
alias_string="ServerAlias $server_alias"
|
||||
else
|
||||
aliases_idn="$aliases_idn,$dalias"
|
||||
server_alias="$server_alias $dalias"
|
||||
fi
|
||||
i=2
|
||||
done
|
||||
|
||||
if [ $j -gt 1 ]; then
|
||||
alias_string="$alias_string\n ServerAlias $server_alias"
|
||||
else
|
||||
alias_string="ServerAlias $server_alias"
|
||||
fi
|
||||
|
||||
IFS=$OLD_IFS
|
||||
if [ "$ELOG" = 'no' ]; then
|
||||
elog='#'
|
||||
else
|
||||
elog=''
|
||||
fi
|
||||
|
||||
if [ "$CGI" != 'yes' ]; then
|
||||
cgi='#'
|
||||
cgi_option='-ExecCGI'
|
||||
else
|
||||
cgi=''
|
||||
cgi_option='+ExecCGI'
|
||||
fi
|
||||
|
||||
ssl_crt="$HOMEDIR/$user/conf/web/ssl.$domain.crt"
|
||||
ssl_key="$HOMEDIR/$user/conf/web/ssl.$domain.key"
|
||||
ssl_pem="$HOMEDIR/$user/conf/web/ssl.$domain.pem"
|
||||
ssl_ca="$HOMEDIR/$user/conf/web/ssl.$domain.ca"
|
||||
if [ ! -e "$USER_DATA/ssl/$domain.ca" ]; then
|
||||
ssl_ca_str='#'
|
||||
fi
|
||||
|
||||
if [ "$SUSPENDED" = 'yes' ]; then
|
||||
docroot="$VESTA/data/templates/web/suspend"
|
||||
sdocroot="$VESTA/data/templates/web/suspend"
|
||||
fi
|
||||
}
|
||||
|
||||
# Check if this is a last record
|
||||
is_dns_record_critical() {
|
||||
str=$(grep "ID='$id'" $USER_DATA/dns/$domain.conf)
|
||||
|
|
@ -529,7 +459,7 @@ is_dns_record_critical() {
|
|||
records=$(grep "TYPE='$TYPE'" $USER_DATA/dns/$domain.conf| wc -l)
|
||||
if [ $records -le 1 ]; then
|
||||
echo "Error: at least one $TYPE record should remain active"
|
||||
log_event "$E_INVALID" "$EVENT"
|
||||
log_event "$E_INVALID" "$ARGUMENTS"
|
||||
exit $E_INVALID
|
||||
fi
|
||||
fi
|
||||
|
|
@ -551,7 +481,7 @@ is_dns_fqnd() {
|
|||
r=$(echo $r|sed -e "s/\.$//")
|
||||
msg="$t record $r should be a fully qualified domain name (FQDN)"
|
||||
echo "Error: $msg"
|
||||
log_event "$E_INVALID" "$EVENT"
|
||||
log_event "$E_INVALID" "$ARGUMENTS"
|
||||
exit $E_INVALID
|
||||
fi
|
||||
fi
|
||||
|
|
@ -569,10 +499,68 @@ is_dns_nameserver_valid() {
|
|||
a_record=$(echo $r |cut -f 1 -d '.')
|
||||
n_record=$(grep "RECORD='$a_record'" $zone| grep "TYPE='A'")
|
||||
if [ -z "$n_record" ]; then
|
||||
echo "Error: corresponding A record $a_record.$d does not exist"
|
||||
log_event "$E_NOTEXIST" "$EVENT"
|
||||
exit $E_NOTEXIST
|
||||
check_result $E_NOTEXIST "IN A $a_record.$d does not exist"
|
||||
fi
|
||||
fi
|
||||
fi
|
||||
}
|
||||
|
||||
|
||||
|
||||
#----------------------------------------------------------#
|
||||
# MAIL #
|
||||
#----------------------------------------------------------#
|
||||
|
||||
# Mail domain existence check
|
||||
is_mail_domain_new() {
|
||||
mail=$(ls $VESTA/data/users/*/mail/$1.conf 2>/dev/null)
|
||||
if [ ! -z "$mail" ]; then
|
||||
if [ "$2" == 'mail' ]; then
|
||||
check_result $E_EXISTS "Mail domain $1 exists"
|
||||
fi
|
||||
mail_user=$(echo "$mail" |cut -f 7 -d /)
|
||||
if [ "$mail_user" != "$user" ]; then
|
||||
check_result $E_EXISTS "Mail domain $1 exists"
|
||||
fi
|
||||
fi
|
||||
}
|
||||
|
||||
# Checking mail account existance
|
||||
is_mail_new() {
|
||||
check_acc=$(grep "ACCOUNT='$1'" $USER_DATA/mail/$domain.conf)
|
||||
if [ ! -z "$check_acc" ]; then
|
||||
check_result $E_EXIST "mail account $1 is already exists"
|
||||
fi
|
||||
check_als=$(awk -F "ALIAS='" '{print $2}' $USER_DATA/mail/$domain.conf )
|
||||
check_als=$(echo "$check_als" | cut -f 1 -d "'" | grep -w $1)
|
||||
if [ ! -z "$check_als" ]; then
|
||||
check_result $E_EXIST "mail alias $1 is already exists"
|
||||
fi
|
||||
}
|
||||
|
||||
|
||||
#----------------------------------------------------------#
|
||||
# CMN #
|
||||
#----------------------------------------------------------#
|
||||
|
||||
# Checking domain existance
|
||||
is_domain_new() {
|
||||
type=$1
|
||||
for object in ${2//,/ }; do
|
||||
if [ ! -z "$WEB_SYSTEM" ]; then
|
||||
is_web_domain_new $object $type
|
||||
is_web_alias_new $object $type
|
||||
fi
|
||||
if [ ! -z "$DNS_SYSTEM" ]; then
|
||||
is_dns_domain_new $object $type
|
||||
fi
|
||||
if [ ! -z "$MAIL_SYSTEM" ]; then
|
||||
is_mail_domain_new $object $type
|
||||
fi
|
||||
done
|
||||
}
|
||||
|
||||
# Get domain variables
|
||||
get_domain_values() {
|
||||
eval $(grep "DOMAIN='$domain'" $USER_DATA/$1.conf)
|
||||
}
|
||||
|
|
|
|||
192
func/rebuild.sh
192
func/rebuild.sh
|
|
@ -141,15 +141,11 @@ rebuild_user_conf() {
|
|||
# WEB domain rebuild
|
||||
rebuild_web_domain_conf() {
|
||||
|
||||
# Get domain values
|
||||
domain_idn=$(idn -t --quiet -a "$domain")
|
||||
get_domain_values 'web'
|
||||
ip=$(get_real_ip $IP)
|
||||
is_ip_valid $IP
|
||||
prepare_web_domain_values
|
||||
|
||||
# Preparing domain values for the template substitution
|
||||
upd_web_domain_values
|
||||
|
||||
# Rebuilding directories
|
||||
# Rebuilding domain directories
|
||||
mkdir -p $HOMEDIR/$user/web/$domain \
|
||||
$HOMEDIR/$user/web/$domain/public_html \
|
||||
$HOMEDIR/$user/web/$domain/public_shtml \
|
||||
|
|
@ -159,18 +155,22 @@ rebuild_web_domain_conf() {
|
|||
$HOMEDIR/$user/web/$domain/stats \
|
||||
$HOMEDIR/$user/web/$domain/logs
|
||||
|
||||
# Create domain logs
|
||||
# Creating domain logs
|
||||
if [ ! -e "/var/log/$WEB_SYSTEM/domains" ]; then
|
||||
mkdir -p /var/log/$WEB_SYSTEM/domains
|
||||
chmod 771 /var/log/$WEB_SYSTEM/domains
|
||||
fi
|
||||
touch /var/log/$WEB_SYSTEM/domains/$domain.bytes \
|
||||
/var/log/$WEB_SYSTEM/domains/$domain.log \
|
||||
/var/log/$WEB_SYSTEM/domains/$domain.error.log
|
||||
|
||||
# Create symlinks
|
||||
# Creating symlinks
|
||||
cd $HOMEDIR/$user/web/$domain/logs/
|
||||
ln -f -s /var/log/$WEB_SYSTEM/domains/$domain.log .
|
||||
ln -f -s /var/log/$WEB_SYSTEM/domains/$domain.error.log .
|
||||
cd - > /dev/null
|
||||
cd /
|
||||
|
||||
# Propagate html skeleton
|
||||
# Propagating html skeleton
|
||||
if [ ! -e "$WEBTPL/skel/document_errors/" ]; then
|
||||
cp -r $WEBTPL/skel/document_errors/ $HOMEDIR/$user/web/$domain/
|
||||
fi
|
||||
|
|
@ -195,35 +195,41 @@ rebuild_web_domain_conf() {
|
|||
chown -R $user:$user $HOMEDIR/$user/web/$domain/document_errors
|
||||
chown root:$user /var/log/$WEB_SYSTEM/domains/$domain.*
|
||||
|
||||
# Adding tmp conf
|
||||
tpl_file="$WEBTPL/$WEB_SYSTEM/$WEB_BACKEND/$TPL.tpl"
|
||||
conf="$HOMEDIR/$user/conf/web/tmp_$WEB_SYSTEM.conf"
|
||||
add_web_config
|
||||
chown root:$user $conf
|
||||
chmod 640 $conf
|
||||
# Adding vhost configuration
|
||||
conf="$HOMEDIR/$user/conf/web/$WEB_SYSTEM.conf"
|
||||
add_web_config "$WEB_SYSTEM" "$TPL.tpl"
|
||||
|
||||
# Running template trigger
|
||||
if [ -x $WEBTPL/$WEB_SYSTEM/$WEB_BACKEND/$TPL.sh ]; then
|
||||
$WEBTPL/$WEB_SYSTEM/$WEB_BACKEND/$TPL.sh \
|
||||
$user $domain $ip $HOMEDIR $docroot
|
||||
# Adding SSL vhost configuration
|
||||
if [ "$SSL" = 'yes' ]; then
|
||||
conf="$HOMEDIR/$user/conf/web/s$WEB_SYSTEM.conf"
|
||||
add_web_config "$WEB_SYSTEM" "$TPL.stpl"
|
||||
cp -f $USER_DATA/ssl/$domain.crt \
|
||||
$HOMEDIR/$user/conf/web/ssl.$domain.crt
|
||||
cp -f $USER_DATA/ssl/$domain.key \
|
||||
$HOMEDIR/$user/conf/web/ssl.$domain.key
|
||||
cp -f $USER_DATA/ssl/$domain.pem \
|
||||
$HOMEDIR/$user/conf/web/ssl.$domain.pem
|
||||
if [ -e "$USER_DATA/ssl/$domain.ca" ]; then
|
||||
cp -f $USER_DATA/ssl/$domain.ca \
|
||||
$HOMEDIR/$user/conf/web/ssl.$domain.ca
|
||||
fi
|
||||
fi
|
||||
|
||||
# Checking aliases
|
||||
if [ ! -z "$ALIAS" ]; then
|
||||
aliases=$(echo "$ALIAS"|tr ',' '\n'| wc -l)
|
||||
user_aliases=$((user_aliases + aliases))
|
||||
# Adding proxy configuration
|
||||
if [ ! -z "$PROXY_SYSTEM" ] && [ ! -z "$PROXY" ]; then
|
||||
conf="$HOMEDIR/$user/conf/web/$PROXY_SYSTEM.conf"
|
||||
add_web_config "$PROXY_SYSTEM" "$PROXY.tpl"
|
||||
if [ "$SSL" = 'yes' ]; then
|
||||
conf="$HOMEDIR/$user/conf/web/s$PROXY_SYSTEM.conf"
|
||||
add_web_config "$PROXY_SYSTEM" "$PROXY.stpl"
|
||||
fi
|
||||
fi
|
||||
|
||||
# Checking stats
|
||||
# Adding web stats parser
|
||||
if [ ! -z "$STATS" ]; then
|
||||
cat $WEBTPL/$STATS/$STATS.tpl |\
|
||||
sed -e "s|%ip%|$ip|g" \
|
||||
sed -e "s|%ip%|$local_ip|g" \
|
||||
-e "s|%web_system%|$WEB_SYSTEM|g" \
|
||||
-e "s|%web_port%|$WEB_PORT|g" \
|
||||
-e "s|%web_ssl_port%|$WEB_SSL_PORT|g" \
|
||||
-e "s|%backend_lsnr%|$backend_lsnr|g" \
|
||||
-e "s|%proxy_port%|$PROXY_PORT|g" \
|
||||
-e "s|%proxy_ssl_port%|$PROXY_SSL_PORT|g" \
|
||||
-e "s|%domain_idn%|$domain_idn|g" \
|
||||
-e "s|%domain%|$domain|g" \
|
||||
-e "s|%user%|$user|g" \
|
||||
|
|
@ -231,7 +237,6 @@ rebuild_web_domain_conf() {
|
|||
-e "s|%alias%|${aliases//,/ }|g" \
|
||||
-e "s|%alias_idn%|${aliases_idn//,/ }|g" \
|
||||
> $HOMEDIR/$user/conf/web/$STATS.$domain.conf
|
||||
|
||||
if [ "$STATS" == 'awstats' ]; then
|
||||
if [ ! -e "/etc/awstats/$STATS.$domain_idn.conf" ]; then
|
||||
ln -f -s $HOMEDIR/$user/conf/web/$STATS.$domain.conf \
|
||||
|
|
@ -247,82 +252,15 @@ rebuild_web_domain_conf() {
|
|||
|
||||
if [ ! -z "$STATS_USER" ]; then
|
||||
stats_dir="$HOMEDIR/$user/web/$domain/stats"
|
||||
|
||||
# Adding htaccess file
|
||||
echo "AuthUserFile $stats_dir/.htpasswd" > $stats_dir/.htaccess
|
||||
echo "AuthName \"Web Statistics\"" >> $stats_dir/.htaccess
|
||||
echo "AuthType Basic" >> $stats_dir/.htaccess
|
||||
echo "Require valid-user" >> $stats_dir/.htaccess
|
||||
|
||||
# Generating htaccess user and password
|
||||
echo "$STATS_USER:$STATS_CRYPT" > $stats_dir/.htpasswd
|
||||
fi
|
||||
fi
|
||||
|
||||
# Checking SSL
|
||||
if [ "$SSL" = 'yes' ]; then
|
||||
|
||||
# Adding domain to the web conf
|
||||
conf="$HOMEDIR/$user/conf/web/tmp_s$WEB_SYSTEM.conf"
|
||||
tpl_file="$WEBTPL/$WEB_SYSTEM/$WEB_BACKEND/$TPL.stpl"
|
||||
add_web_config
|
||||
chown root:$user $conf
|
||||
chmod 640 $conf
|
||||
|
||||
cp -f $USER_DATA/ssl/$domain.crt \
|
||||
$HOMEDIR/$user/conf/web/ssl.$domain.crt
|
||||
cp -f $USER_DATA/ssl/$domain.key \
|
||||
$HOMEDIR/$user/conf/web/ssl.$domain.key
|
||||
cp -f $USER_DATA/ssl/$domain.pem \
|
||||
$HOMEDIR/$user/conf/web/ssl.$domain.pem
|
||||
if [ -e "$USER_DATA/ssl/$domain.ca" ]; then
|
||||
cp -f $USER_DATA/ssl/$domain.ca \
|
||||
$HOMEDIR/$user/conf/web/ssl.$domain.ca
|
||||
fi
|
||||
|
||||
# Running template trigger
|
||||
if [ -x $WEBTPL/$WEB_SYSTEM/$WEB_BACKEND/$TPL.sh ]; then
|
||||
$WEBTPL/$WEB_SYSTEM/$WEB_BACKEND/$TPL.sh \
|
||||
$user $domain $ip $HOMEDIR $sdocroot
|
||||
fi
|
||||
|
||||
user_ssl=$((user_ssl + 1))
|
||||
ssl_change='yes'
|
||||
fi
|
||||
|
||||
# Checking proxy
|
||||
if [ ! -z "$PROXY_SYSTEM" ] && [ ! -z "$PROXY" ]; then
|
||||
tpl_file="$WEBTPL/$PROXY_SYSTEM/$PROXY.tpl"
|
||||
conf="$HOMEDIR/$user/conf/web/tmp_$PROXY_SYSTEM.conf"
|
||||
add_web_config
|
||||
chown root:$user $conf
|
||||
chmod 640 $conf
|
||||
proxy_change='yes'
|
||||
fi
|
||||
|
||||
if [ ! -z "$PROXY_SYSTEM" ] && [ "$SSL" = 'yes' ]; then
|
||||
tpl_file="$WEBTPL/$PROXY_SYSTEM/$PROXY.stpl"
|
||||
if [ -z "$PROXY" ]; then
|
||||
tpl_file="$WEBTPL/$PROXY_SYSTEM/default.stpl"
|
||||
fi
|
||||
conf="$HOMEDIR/$user/conf/web/tmp_s$PROXY_SYSTEM.conf"
|
||||
add_web_config
|
||||
chown root:$user $conf
|
||||
chmod 640 $conf
|
||||
proxy_change='yes'
|
||||
fi
|
||||
|
||||
if [ "$SUSPENDED" = 'yes' ]; then
|
||||
suspended_web=$((suspended_web + 1))
|
||||
fi
|
||||
user_domains=$((user_domains + 1))
|
||||
|
||||
# Running template trigger
|
||||
if [ -x $WEBTPL/$PROXY_SYSTEM/$PROXY.sh ]; then
|
||||
$WEBTPL/$PROXY_SYSTEM/$PROXY.sh $user $domain $ip $HOMEDIR $docroot
|
||||
fi
|
||||
|
||||
# Defining ftp user shell
|
||||
# Adding ftp users
|
||||
if [ -z "$FTP_SHELL" ]; then
|
||||
shell='/sbin/nologin'
|
||||
if [ -e "/usr/bin/rssh" ]; then
|
||||
|
|
@ -331,19 +269,15 @@ rebuild_web_domain_conf() {
|
|||
else
|
||||
shell=$FTP_SHELL
|
||||
fi
|
||||
|
||||
# Checking ftp users
|
||||
for ftp_user in ${FTP_USER//:/ }; do
|
||||
if [ -z "$(grep ^$ftp_user: /etc/passwd)" ]; then
|
||||
# Parsing ftp user variables
|
||||
position=$(echo $FTP_USER | tr ':' '\n' | grep -n '' |\
|
||||
grep ":$ftp_user$" | cut -f 1 -d:)
|
||||
ftp_path=$(echo $FTP_PATH | tr ':' '\n' | grep -n '' |\
|
||||
grep "^$position:" | cut -f 2 -d :)
|
||||
ftp_md5=$(echo $FTP_MD5 | tr ':' '\n' | grep -n '' |\
|
||||
grep "^$position:" | cut -f 2 -d :)
|
||||
position=$(echo $FTP_USER |tr ':' '\n' |grep -n '' |\
|
||||
grep ":$ftp_user$" |cut -f 1 -d:)
|
||||
ftp_path=$(echo $FTP_PATH |tr ':' '\n' |grep -n '' |\
|
||||
grep "^$position:" |cut -f 2 -d :)
|
||||
ftp_md5=$(echo $FTP_MD5 | tr ':' '\n' |grep -n '' |\
|
||||
grep "^$position:" |cut -f 2 -d :)
|
||||
|
||||
# Adding ftp user
|
||||
/usr/sbin/useradd $ftp_user \
|
||||
-s $shell \
|
||||
-o -u $(id -u $user) \
|
||||
|
|
@ -352,13 +286,13 @@ rebuild_web_domain_conf() {
|
|||
|
||||
# Updating ftp user password
|
||||
shadow=$(grep "^$ftp_user:" /etc/shadow)
|
||||
shdw3=$(echo "$shadow" | cut -f3 -d :)
|
||||
shdw4=$(echo "$shadow" | cut -f4 -d :)
|
||||
shdw5=$(echo "$shadow" | cut -f5 -d :)
|
||||
shdw6=$(echo "$shadow" | cut -f6 -d :)
|
||||
shdw7=$(echo "$shadow" | cut -f7 -d :)
|
||||
shdw8=$(echo "$shadow" | cut -f8 -d :)
|
||||
shdw9=$(echo "$shadow" | cut -f9 -d :)
|
||||
shdw3=$(echo "$shadow" |cut -f3 -d :)
|
||||
shdw4=$(echo "$shadow" |cut -f4 -d :)
|
||||
shdw5=$(echo "$shadow" |cut -f5 -d :)
|
||||
shdw6=$(echo "$shadow" |cut -f6 -d :)
|
||||
shdw7=$(echo "$shadow" |cut -f7 -d :)
|
||||
shdw8=$(echo "$shadow" |cut -f8 -d :)
|
||||
shdw9=$(echo "$shadow" |cut -f9 -d :)
|
||||
shadow_str="$ftp_user:$ftp_md5:$shdw3:$shdw4:$shdw5:$shdw6"
|
||||
shadow_str="$shadow_str:$shdw7:$shdw8:$shdw9"
|
||||
chmod u+w /etc/shadow
|
||||
|
|
@ -374,10 +308,10 @@ rebuild_web_domain_conf() {
|
|||
docroot="$HOMEDIR/$user/web/$domain/public_html"
|
||||
for auth_user in ${AUTH_USER//:/ }; do
|
||||
# Parsing auth user variables
|
||||
position=$(echo $AUTH_USER | tr ':' '\n' | grep -n '' |\
|
||||
grep ":$auth_user$" | cut -f 1 -d:)
|
||||
auth_hash=$(echo $AUTH_HASH | tr ':' '\n' | grep -n '' |\
|
||||
grep "^$position:" | cut -f 2 -d :)
|
||||
position=$(echo $AUTH_USER |tr ':' '\n' |grep -n '' |\
|
||||
grep ":$auth_user$" |cut -f 1 -d:)
|
||||
auth_hash=$(echo $AUTH_HASH |tr ':' '\n' |grep -n '' |\
|
||||
grep "^$position:" |cut -f 2 -d :)
|
||||
|
||||
# Adding http auth user
|
||||
touch $htpasswd
|
||||
|
|
@ -397,9 +331,9 @@ rebuild_web_domain_conf() {
|
|||
echo "auth_basic \"$domain password access\";" > $htaccess
|
||||
echo "auth_basic_user_file $htpasswd;" >> $htaccess
|
||||
fi
|
||||
chmod 640 $htpasswd $htaccess >/dev/null 2>&1
|
||||
fi
|
||||
done
|
||||
chmod 640 $htpasswd $htaccess >/dev/null 2>&1
|
||||
}
|
||||
|
||||
# DNS domain rebuild
|
||||
|
|
@ -595,7 +529,7 @@ rebuild_mysql_database() {
|
|||
if [ ! -z "$send_mail" ]; then
|
||||
echo "Can't parse MySQL DB config" | $send_mail -s "$subj" $email
|
||||
fi
|
||||
log_event "$E_PARSING" "$EVENT"
|
||||
log_event "$E_PARSING" "$ARGUMENTS"
|
||||
exit $E_PARSING
|
||||
fi
|
||||
|
||||
|
|
@ -607,7 +541,7 @@ rebuild_mysql_database() {
|
|||
echo "Database connection to MySQL host $HOST failed" |\
|
||||
$send_mail -s "$subj" $email
|
||||
fi
|
||||
log_event "$E_CONNECT" "$EVENT"
|
||||
log_event "$E_CONNECT" "$ARGUMENTS"
|
||||
exit $E_CONNECT
|
||||
fi
|
||||
|
||||
|
|
@ -638,7 +572,7 @@ rebuild_pgsql_database() {
|
|||
if [ ! -z "$send_mail" ]; then
|
||||
echo "Can't parse PostgreSQL config" | $send_mail -s "$subj" $email
|
||||
fi
|
||||
log_event "$E_PARSING" "$EVENT"
|
||||
log_event "$E_PARSING" "$ARGUMENTS"
|
||||
exit $E_PARSING
|
||||
fi
|
||||
|
||||
|
|
@ -650,7 +584,7 @@ rebuild_pgsql_database() {
|
|||
echo "Database connection to PostgreSQL host $HOST failed" |\
|
||||
$send_mail -s "$subj" $email
|
||||
fi
|
||||
log_event "$E_CONNECT" "$EVENT"
|
||||
log_event "$E_CONNECT" "$ARGUMENTS"
|
||||
exit $E_CONNECT
|
||||
fi
|
||||
|
||||
|
|
@ -683,7 +617,7 @@ import_mysql_database() {
|
|||
eval $host_str
|
||||
if [ -z $HOST ] || [ -z $USER ] || [ -z $PASSWORD ]; then
|
||||
echo "Error: mysql config parsing failed"
|
||||
log_event "$E_PARSING" "$EVENT"
|
||||
log_event "$E_PARSING" "$ARGUMENTS"
|
||||
exit $E_PARSING
|
||||
fi
|
||||
|
||||
|
|
@ -699,7 +633,7 @@ import_pgsql_database() {
|
|||
export PGPASSWORD="$PASSWORD"
|
||||
if [ -z $HOST ] || [ -z $USER ] || [ -z $PASSWORD ] || [ -z $TPL ]; then
|
||||
echo "Error: postgresql config parsing failed"
|
||||
log_event "$E_PARSING" "$EVENT"
|
||||
log_event "$E_PARSING" "$ARGUMENTS"
|
||||
exit $E_PARSING
|
||||
fi
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue