2017-08-31 17:40:24 +00:00
#!/bin/bash
2017-08-31 19:49:18 +00:00
setup_ldap( ) {
apt-get -y install slapd
echo "Hashage du mot de passe ldap..."
hashed_ldap_passwd = $( slappasswd -s $1 )
echo $hashed_ldap_passwd
echo "Formatage des fichiers de config ldap"
sed 's|dc=example,dc=org|' " $2 " '|g' install_utils/db.ldiff | sed 's|FILL_IT|' " $hashed_ldap_passwd " '|g' > /tmp/db
sed 's|dc=example,dc=org|' " $2 " '|g' install_utils/schema.ldiff | sed 's|FILL_IT|' " $hashed_ldap_passwd " '|g' > /tmp/schema
echo "Destruction config ldap existante"
service slapd stop
rm -rf /etc/ldap/slapd.d/*
rm -rf /var/lib/ldap/*
echo "Ecriture de la configuration actuelle"
slapadd -n 0 -l /tmp/schema -F /etc/ldap/slapd.d/
slapadd -n 1 -l /tmp/db
echo "Reparation des permissions et redémarage de slapd"
chown -R openldap:openldap /etc/ldap/slapd.d
chown -R openldap:openldap /var/lib/ldap
service slapd start
}
install_re2o_server( ) {
2018-01-21 19:07:10 +00:00
2017-08-31 17:40:24 +00:00
export DEBIAN_FRONTEND = noninteractive
2017-09-10 12:45:34 +00:00
apt-get -y install sudo dialog
2017-08-31 17:40:24 +00:00
2018-01-21 19:07:10 +00:00
HEIGHT = 15
WIDTH = 40
init = $( dialog --clear \
--title "Installation de Re2o !" \
--msgbox "Cet utilitaire va procéder à l'installation initiale de re2o. Le serveur présent doit être vierge de préférence. Preconfiguration..." \
$HEIGHT $WIDTH \
2>& 1 >/dev/tty)
2017-08-31 17:40:24 +00:00
HEIGHT = 15
WIDTH = 40
CHOICE_HEIGHT = 4
BACKTITLE = "Preconfiguration re2o"
MENU = "Choisir une option"
TITLE = "Choix du moteur bdd"
OPTIONS = ( 1 "mysql"
2 "postgresql" )
sql_bdd_type = $( dialog --clear \
--backtitle " $BACKTITLE " \
--title " $TITLE " \
--menu " $MENU " \
$HEIGHT $WIDTH $CHOICE_HEIGHT \
" ${ OPTIONS [@] } " \
2>& 1 >/dev/tty)
clear
TITLE = "Extension locale (ex : example.org)"
extension_locale = $( dialog --title " $TITLE " \
--backtitle " $BACKTITLE " \
--inputbox " $TITLE " $HEIGHT $WIDTH \
2>& 1 >/dev/tty)
clear
2017-08-30 12:56:27 +00:00
IFS = '.' read -a extension_locale_array <<< $extension_locale
for i in " ${ extension_locale_array [@] } "
do
ldap_dn += " dc= $i , "
done
ldap_dn = ${ ldap_dn : :- 1 }
echo $ldap_dn
2017-08-31 17:40:24 +00:00
TITLE = "Emplacement de la bdd"
OPTIONS = ( 1 "Local"
2 "Distant" )
sql_is_local = $( dialog --clear \
--backtitle " $BACKTITLE " \
--title " $TITLE " \
--menu " $MENU " \
$HEIGHT $WIDTH $CHOICE_HEIGHT \
" ${ OPTIONS [@] } " \
2>& 1 >/dev/tty)
clear
TITLE = "Mot de passe sql"
2017-08-30 12:56:27 +00:00
2017-08-31 17:40:24 +00:00
sql_password = $( dialog --title " $TITLE " \
--backtitle " $BACKTITLE " \
--inputbox " $TITLE " $HEIGHT $WIDTH \
2>& 1 >/dev/tty)
clear
if [ $sql_is_local = = 2 ]
2018-01-27 11:50:11 +00:00
then
2017-08-31 17:40:24 +00:00
TITLE = "Login sql"
sql_login = $( dialog --title " $TITLE " \
--backtitle " $BACKTITLE " \
--inputbox " $TITLE " $HEIGHT $WIDTH \
2>& 1 >/dev/tty)
clear
TITLE = "Nom de la bdd sql"
sql_name = $( dialog --title " $TITLE " \
--backtitle " $BACKTITLE " \
--inputbox " $TITLE " $HEIGHT $WIDTH \
2>& 1 >/dev/tty)
clear
TITLE = "Hote de la base de donnée"
sql_host = $( dialog --title " $TITLE " \
--backtitle " $BACKTITLE " \
--inputbox " $TITLE " $HEIGHT $WIDTH \
2>& 1 >/dev/tty)
clear
2017-08-30 12:56:27 +00:00
else
sql_name = "re2o"
sql_login = "re2o"
sql_host = "localhost"
fi
2017-09-10 12:45:34 +00:00
mysql_command = " CREATE DATABASE $sql_name collate='utf8_general_ci';
2017-08-30 12:56:27 +00:00
CREATE USER '$sql_login' @'localhost' IDENTIFIED BY '$sql_password' ;
GRANT ALL PRIVILEGES ON $sql_name .* TO '$sql_login' @'localhost' ;
FLUSH PRIVILEGES; "
2017-09-10 12:45:34 +00:00
pgsql_command1 = " CREATE DATABASE $sql_name ENCODING 'UTF8' LC_COLLATE='fr_FR.UTF-8' LC_CTYPE='fr_FR.UTF-8'; "
pgsql_command2 = " CREATE USER $sql_login with password ' $sql_password '; "
pgsql_command3 = " ALTER DATABASE $sql_name owner to $sql_login ; "
2017-08-30 12:56:27 +00:00
2017-08-31 17:40:24 +00:00
TITLE = "Emplacement du ldap"
OPTIONS = ( 1 "Local"
2 "Distant" )
ldap_is_local = $( dialog --clear \
--backtitle " $BACKTITLE " \
--title " $TITLE " \
--menu " $MENU " \
$HEIGHT $WIDTH $CHOICE_HEIGHT \
" ${ OPTIONS [@] } " \
2>& 1 >/dev/tty)
2017-08-30 12:56:27 +00:00
2018-01-21 19:07:10 +00:00
HEIGHT = 15
WIDTH = 40
instal_ldap = $( dialog --clear \
--title "Installation de Re2o !" \
--msgbox "Vous devrez fournir un login/host dans le cas où le ldap est non local" \
$HEIGHT $WIDTH \
2>& 1 >/dev/tty)
2017-08-31 17:40:24 +00:00
TITLE = "Mot de passe ldap"
ldap_password = $( dialog --title " $TITLE " \
--backtitle " $BACKTITLE " \
--inputbox " $TITLE " $HEIGHT $WIDTH \
2>& 1 >/dev/tty)
clear
if [ $ldap_is_local = = 2 ]
2018-01-27 11:50:11 +00:00
then
2017-08-31 17:40:24 +00:00
TITLE = "Cn ldap admin"
ldap_cn = $( dialog --title " $TITLE " \
--backtitle " $BACKTITLE " \
--inputbox " $TITLE " $HEIGHT $WIDTH \
2>& 1 >/dev/tty)
clear
TITLE = "Hote ldap"
ldap_host = $( dialog --title " $TITLE " \
--backtitle " $BACKTITLE " \
--inputbox " $TITLE " $HEIGHT $WIDTH \
2>& 1 >/dev/tty)
clear
2017-08-30 12:56:27 +00:00
else
ldap_cn = "cn=admin,"
ldap_cn += $ldap_dn
ldap_host = "localhost"
fi
2017-09-08 19:19:32 +00:00
TITLE = "Hôte pour l'envoi de mail"
email_host = $( dialog --title " $TITLE " \
--backtitle " $BACKTITLE " \
--inputbox " $TITLE " $HEIGHT $WIDTH \
2>& 1 >/dev/tty)
TITLE = "Port du serveur mail"
OPTIONS = ( 25 "25 (SMTP)"
465 "465 (SMTPS)"
587 "587 (Submission)" )
email_port = $( dialog --clear \
--backtitle " $BACKTITLE " \
--title " $TITLE " \
--menu " $MENU " \
$HEIGHT $WIDTH $CHOICE_HEIGHT \
" ${ OPTIONS [@] } " \
2>& 1 >/dev/tty)
clear
if [ $ldap_is_local = = 2 ]
2018-01-27 11:50:11 +00:00
then
2017-09-08 19:19:32 +00:00
TITLE = "Cn ldap admin"
ldap_cn = $( dialog --title " $TITLE " \
--backtitle " $BACKTITLE " \
--inputbox " $TITLE " $HEIGHT $WIDTH \
2>& 1 >/dev/tty)
clear
TITLE = "Hote ldap"
ldap_host = $( dialog --title " $TITLE " \
--backtitle " $BACKTITLE " \
--inputbox " $TITLE " $HEIGHT $WIDTH \
2>& 1 >/dev/tty)
clear
else
ldap_cn = "cn=admin,"
ldap_cn += $ldap_dn
ldap_host = "localhost"
fi
2018-01-21 19:07:10 +00:00
HEIGHT = 15
WIDTH = 40
install_base = $( dialog --clear \
--title "Installation de Re2o !" \
--msgbox "Installation des paquets de base" \
$HEIGHT $WIDTH \
2>& 1 >/dev/tty)
2017-09-08 19:19:32 +00:00
2017-08-30 12:56:27 +00:00
apt-get -y install python3-django python3-dateutil texlive-latex-base texlive-fonts-recommended python3-djangorestframework python3-django-reversion python3-pip libsasl2-dev libldap2-dev libssl-dev
pip3 install django-bootstrap3
pip3 install django-ldapdb
pip3 install django-macaddress
2018-01-27 11:50:11 +00:00
pip3 install pycrypto
2017-08-30 12:56:27 +00:00
2017-08-31 17:40:24 +00:00
if [ $sql_bdd_type = = 1 ]
2017-08-30 12:56:27 +00:00
then
2017-09-10 12:45:34 +00:00
apt-get -y install python3-mysqldb mysql-client
2017-08-31 17:40:24 +00:00
if [ $sql_is_local = = 1 ]
2017-08-30 12:56:27 +00:00
then
apt-get -y install mysql-server
2017-09-10 12:45:34 +00:00
mysql -u root --execute= " $mysql_command "
2017-08-30 12:56:27 +00:00
else
echo "Veuillez saisir la commande suivante sur le serveur sql distant, puis validez"
2017-09-10 12:45:34 +00:00
echo $mysql_command
2017-08-30 12:56:27 +00:00
while true; do
read -p "Continue (y/n)?" choice
2018-01-27 11:50:11 +00:00
case " $choice " in
2017-08-30 12:56:27 +00:00
y| Y ) break; ;
n| N ) exit; ;
* ) echo "invalid" ; ;
esac
done
fi
2017-09-10 12:45:34 +00:00
else
apt-get -y install postgresql-client
apt-get -y install python3-psycopg2
2017-08-31 17:40:24 +00:00
if [ $sql_is_local = = 1 ]
2017-08-30 12:56:27 +00:00
then
2017-09-10 12:45:34 +00:00
apt-get -y install postgresql
sudo -u postgres psql --command= " $pgsql_command1 "
sudo -u postgres psql --command= " $pgsql_command2 "
sudo -u postgres psql --command= " $pgsql_command3 "
else
echo "Veuillez saisir la commande suivante sur le serveur sql distant, puis validez"
echo sudo -u postgres psql $pgsql_command1
echo sudo -u postgres psql $pgsql_command2
echo sudo -u postgres psql $pgsql_command3
while true; do
read -p "Continue (y/n)?" choice
2018-01-27 11:50:11 +00:00
case " $choice " in
2017-09-10 12:45:34 +00:00
y| Y ) break; ;
n| N ) exit; ;
* ) echo "invalid" ; ;
esac
done
2017-08-30 12:56:27 +00:00
fi
2018-01-27 11:50:11 +00:00
fi
2017-08-30 12:56:27 +00:00
2017-08-31 17:40:24 +00:00
if [ $ldap_is_local = = 1 ]
2017-08-30 12:56:27 +00:00
then
2017-08-31 19:49:18 +00:00
setup_ldap $ldap_password $ldap_dn
2017-08-30 12:56:27 +00:00
else
2018-01-21 19:07:10 +00:00
HEIGHT = 15
WIDTH = 40
ldap_setup = $( dialog --clear \
--title "Setup ldap" \
--msgbox " Vous devrez manuellement effectuer les opérations de setup de la base ldap sur le serveurs distant. Lancez la commande : ./install_re2o.sh ldap $ldap_password $ldap_dn " \
$HEIGHT $WIDTH \
2>& 1 >/dev/tty)
2017-08-30 12:56:27 +00:00
fi
echo "Ecriture de settings_local"
2017-08-31 17:40:24 +00:00
django_secret_key = $( python -c "import random; print(''.join([random.SystemRandom().choice('abcdefghijklmnopqrstuvwxyz0123456789%=+') for i in range(50)]))" )
2017-08-30 12:56:27 +00:00
cp re2o/settings_local.example.py re2o/settings_local.py
2017-09-10 12:45:34 +00:00
if [ $sql_bdd_type = = 1 ]
then
sed -i 's/db_engine/django.db.backends.mysql/g' re2o/settings_local.py
else
sed -i 's/db_engine/django.db.backends.postgresql_psycopg2/g' re2o/settings_local.py
fi
2017-08-31 17:40:24 +00:00
sed -i 's/SUPER_SECRET_KEY/' " $django_secret_key " '/g' re2o/settings_local.py
2017-08-30 12:56:27 +00:00
sed -i 's/SUPER_SECRET_DB/' " $sql_password " '/g' re2o/settings_local.py
sed -i 's/db_name_value/' " $sql_name " '/g' re2o/settings_local.py
sed -i 's/db_user_value/' " $sql_login " '/g' re2o/settings_local.py
sed -i 's/db_host_value/' " $sql_host " '/g' re2o/settings_local.py
sed -i 's/ldap_dn/' " $ldap_cn " '/g' re2o/settings_local.py
sed -i 's/SUPER_SECRET_LDAP/' " $ldap_password " '/g' re2o/settings_local.py
sed -i 's/ldap_host_ip/' " $ldap_host " '/g' re2o/settings_local.py
sed -i 's/dc=example,dc=org/' " $ldap_dn " '/g' re2o/settings_local.py
sed -i 's/example.org/' " $extension_locale " '/g' re2o/settings_local.py
2017-09-08 19:19:32 +00:00
sed -i 's/MY_EMAIL_HOST/' " $email_host " '/g' re2o/settings_local.py
sed -i 's/MY_EMAIL_PORT/' " $email_port " '/g' re2o/settings_local.py
2017-08-30 12:56:27 +00:00
2018-01-21 19:07:10 +00:00
HEIGHT = 15
WIDTH = 40
migrations = $( dialog --clear \
--title "Setup django" \
--msgbox "Application des migrations" \
$HEIGHT $WIDTH \
2>& 1 >/dev/tty)
2017-08-31 17:40:24 +00:00
python3 manage.py migrate
2018-01-21 19:07:10 +00:00
HEIGHT = 15
WIDTH = 40
static = $( dialog --clear \
--title "Setup django" \
--msgbox "Collecte des statiques" \
$HEIGHT $WIDTH \
2>& 1 >/dev/tty)
2017-09-01 21:41:56 +00:00
python3 manage.py collectstatic
2017-08-31 17:40:24 +00:00
BACKTITLE = "Fin de l'installation"
TITLE = "Serveur web à utiliser"
OPTIONS = ( 1 "apache2"
2 "nginx" )
web_serveur = $( dialog --clear \
--backtitle " $BACKTITLE " \
--title " $TITLE " \
--menu " $MENU " \
$HEIGHT $WIDTH $CHOICE_HEIGHT \
" ${ OPTIONS [@] } " \
2>& 1 >/dev/tty)
clear
2018-01-21 19:07:10 +00:00
TITLE = "Url où servir le serveur web (ex : re2o.example.org). Assurez-vous que ce tld existe bien et répond auprès du DNS"
2017-08-31 17:40:24 +00:00
url_server = $( dialog --title " $TITLE " \
--backtitle " $BACKTITLE " \
--inputbox " $TITLE " $HEIGHT $WIDTH \
2>& 1 >/dev/tty)
clear
2017-08-31 19:49:18 +00:00
TITLE = "Utiliser tls et générer automatiquement le certificat LE ?"
OPTIONS = ( 1 "Oui"
2 "Non" )
is_tls = $( dialog --clear \
--backtitle " $BACKTITLE " \
--title " $TITLE " \
--menu " $MENU " \
$HEIGHT $WIDTH $CHOICE_HEIGHT \
" ${ OPTIONS [@] } " \
2>& 1 >/dev/tty)
clear
2017-08-31 20:09:38 +00:00
sed -i 's/URL_SERVER/' " $url_server " '/g' re2o/settings_local.py
2017-08-31 19:49:18 +00:00
2017-08-31 17:40:24 +00:00
if [ $web_serveur = = 1 ]
then
apt-get -y install apache2 libapache2-mod-wsgi-py3
2017-08-31 19:49:18 +00:00
a2enmod ssl
2017-09-10 12:45:34 +00:00
a2enmod wsgi
2017-08-31 19:49:18 +00:00
if [ $is_tls = = 1 ]
then
cp install_utils/apache2/re2o-tls.conf /etc/apache2/sites-available/re2o.conf
apt-get -y install certbot
apt-get -y install python-certbot-apache
certbot certonly --rsa-key-size 4096 --apache -d $url_server
2017-08-31 20:09:38 +00:00
sed -i 's/LE_PATH/' " $url_server " '/g' /etc/apache2/sites-available/re2o.conf
2017-08-31 19:49:18 +00:00
else
2017-08-31 17:40:24 +00:00
cp install_utils/apache2/re2o.conf /etc/apache2/sites-available/re2o.conf
2017-08-31 19:49:18 +00:00
fi
2017-09-01 21:41:56 +00:00
rm /etc/apache2/sites-enabled/000-default.conf
2017-08-31 19:49:18 +00:00
sed -i 's|URL_SERVER|' " $url_server " '|g' /etc/apache2/sites-available/re2o.conf
2017-08-31 17:40:24 +00:00
current_path = $( pwd )
sed -i 's|PATH|' " $current_path " '|g' /etc/apache2/sites-available/re2o.conf
a2ensite re2o
service apache2 reload
else
2018-01-21 19:07:10 +00:00
HEIGHT = 15
WIDTH = 40
web_server = $( dialog --clear \
--title "Setup serveur web" \
--msgbox "Nginx non supporté, vous devrez installer manuellement" \
$HEIGHT $WIDTH \
2>& 1 >/dev/tty)
2017-08-31 17:40:24 +00:00
fi
2017-08-30 12:56:27 +00:00
2017-08-31 19:49:18 +00:00
python3 manage.py createsuperuser
2018-01-21 19:07:10 +00:00
HEIGHT = 15
WIDTH = 40
end = $( dialog --clear \
--title "Installation terminée" \
--msgbox " Vous pouvez à présent vous rendre sur $url_server , et vous connecter. Votre utilisateur dispose des privilèges superuser " \
$HEIGHT $WIDTH \
2>& 1 >/dev/tty)
2017-08-31 19:49:18 +00:00
}
main_function( ) {
if [ ! -z " $1 " ]
then
if [ $1 = = ldap ]
then
2018-01-27 11:50:11 +00:00
if [ ! -z " $2 " ]
2017-08-31 19:49:18 +00:00
then
echo Installation du ldap
setup_ldap $2 $3
else
echo Arguments invalides !
exit
fi
fi
else
install_re2o_server
fi
}
main_function $1 $2 $3