Updated Ubuntu installer to support up to 24.04 LTS (#436)

- Added optional applications.sh scripts.
- Added call_recordings.php script for wav - mp3 conversion.
- Updated ubuntu\resources\fusionpbx\config.conf to add entry for setting the event socket password and a comment at the top to direct admins to where they can find more configuration options for this file.
- Updated config.sh to add switch_token entry and some version changes to make the installer Ubuntu 24.04 compatible.  
- Added on the Optional applications.
- Updated environment.sh to include setting the PATH just in case.
- Updated finish.sh to include output of database username and password to save a few steps when setting up.
- Added freeswitch-acl.conf from the Debian side as more security is important.
- Updated jail.local to include freeswitch-acl as well as turning several items on by default (security should always be the default).
- Updated install.sh to include some missing dependencies (nginx and build-essential)
- Updated php.sh, and nginx.sh to include 8.1, 8.2 and 8.3
- Swapped plocate for mlocate in dependency install in ubuntu\resources\switch\source-release.sh
- uncommented ./bootstrap.sh -j line for git compatibility
- removed duplicate $switch_version from sed commands, added sed command to disable mod_av.
- Added environment.sh include to switch.sh
- Added monit files for freeswitch perms etc.
This commit is contained in:
Chad Sheridan
2024-08-30 20:06:50 -04:00
committed by GitHub
parent d0322070ff
commit 4fc59b5e5e
15 changed files with 335 additions and 32 deletions

View File

@@ -0,0 +1,20 @@
# Fail2Ban configuration file
#
[Definition]
# Option: failregex
# Notes.: regex to match the password failures messages in the logfile. The
# host must be matched by a group named "host". The tag "<HOST>" can
# be used for standard IP/hostname matching and is only an alias for
# (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
# Values: TEXT
#
#2021-02-03 16:27:57.292697 [WARNING] sofia_reg.c:2353 IP 62.210.78.91 Rejected by register acl "domains"
failregex = \[WARNING\] sofia_reg.c:\d+ IP <HOST> Rejected by register acl
# Option: ignoreregex
# Notes.: regex to ignore. If this regex matches, the line is ignored.
# Values: TEXT
#
ignoreregex =

View File

@@ -22,6 +22,18 @@ findtime = 600
bantime = 3600
# sendmail-whois[name=FreeSwitch, dest=root, sender=fail2ban@example.org] #no smtp server installed
[freeswitch-acl]
enabled = false
port = 5060:5091
protocol = all
filter = freeswitch-acl
logpath = /var/log/freeswitch/freeswitch.log
#logpath = /usr/local/freeswitch/log/freeswitch.log
action = iptables-allports[name=freeswitch-acl, protocol=all]
maxretry = 900
findtime = 60
bantime = 86400
[freeswitch-ip]
enabled = false
port = 5060:5091
@@ -30,7 +42,7 @@ filter = freeswitch-ip
logpath = /var/log/freeswitch/freeswitch.log
#logpath = /usr/local/freeswitch/log/freeswitch.log
action = iptables-allports[name=freeswitch-ip, protocol=all]
maxretry = 1
maxretry = 3
findtime = 30
bantime = 86400
@@ -42,7 +54,7 @@ filter = auth-challenge-ip
logpath = /var/log/freeswitch/freeswitch.log
#logpath = /usr/local/freeswitch/log/freeswitch.log
action = iptables-allports[name=auth-challenge-ip, protocol=all]
maxretry = 1
maxretry = 3
findtime = 30
bantime = 86400