forked from norman/fusionpbx-install.sh-github-mirror
f84c40f7e6
sed command was broken because tabs had been replaced with spaces in the nginx fusionpbx file.
131 lines
4.3 KiB
Bash
Executable File
131 lines
4.3 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
# FusionPBX - Install
|
|
# Mark J Crane <markjcrane@fusionpbx.com>
|
|
# Copyright (C) 2018
|
|
# All Rights Reserved.
|
|
|
|
#move to script directory so all relative paths work
|
|
cd "$(dirname "$0")"
|
|
|
|
#includes
|
|
. ./config.sh
|
|
|
|
#Add dependencies
|
|
apt-get install -y curl
|
|
|
|
#remove dehyrdated letsencrypt script
|
|
rm /usr/local/sbin/dehydrated
|
|
rm -R /usr/src/dehydrated
|
|
#rm -R /etc/dehydrated/
|
|
#rm -R /usr/src/dns-01-manual
|
|
#rm -R /var/www/dehydrated
|
|
|
|
#request the domain name, email address and wild card domain
|
|
read -p 'Domain Name: ' domain_name
|
|
read -p 'Email Address: ' email_address
|
|
|
|
#get and install dehydrated
|
|
cd /usr/src && git clone https://github.com/lukas2511/dehydrated.git
|
|
cd /usr/src/dehydrated
|
|
cp dehydrated /usr/local/sbin
|
|
mkdir -p /var/www/dehydrated
|
|
mkdir -p /etc/dehydrated/certs
|
|
|
|
#wildcard detection
|
|
wildcard_domain=$(echo $domain_name | cut -c1-1)
|
|
if [ "$wildcard_domain" = "*" ]; then
|
|
wildcard_domain="true"
|
|
else
|
|
wildcard_domain="false"
|
|
fi
|
|
|
|
#remove the wildcard and period
|
|
if [ .$wildcard_domain = ."true" ]; then
|
|
domain_name=$(echo "$domain_name" | cut -c3-255)
|
|
fi
|
|
|
|
#manual dns hook
|
|
if [ .$wildcard_domain = ."true" ]; then
|
|
cd /usr/src
|
|
git clone https://github.com/gheja/dns-01-manual.git
|
|
cd /usr/src/dns-01-manual/
|
|
cp hook.sh /etc/dehydrated/hook.sh
|
|
chmod 755 /etc/dehydrated/hook.sh
|
|
fi
|
|
|
|
#copy config and hook.sh into /etc/dehydrated
|
|
cd /usr/src/dehydrated
|
|
cp docs/examples/config /etc/dehydrated
|
|
#cp docs/examples/hook.sh /etc/dehydrated
|
|
|
|
#update the dehydrated config
|
|
#sed "s#CONTACT_EMAIL=#CONTACT_EMAIL=$email_address" -i /etc/dehydrated/config
|
|
sed -i 's/#CONTACT_EMAIL=/CONTACT_EMAIL="'"$email_address"'"/g' /etc/dehydrated/config
|
|
sed -i 's/#WELLKNOWN=/WELLKNOWN=/g' /etc/dehydrated/config
|
|
|
|
#accept the terms
|
|
./dehydrated --register --accept-terms --config /etc/dehydrated/config
|
|
|
|
#set the domain alias
|
|
domain_alias=$(echo "$domain_name" | head -n1 | cut -d " " -f1)
|
|
|
|
#create an alias when using wildcard dns
|
|
if [ .$wildcard_domain = ."true" ]; then
|
|
echo "*.$domain_name > $domain_name" > /etc/dehydrated/domains.txt
|
|
fi
|
|
|
|
#add the domain name to domains.txt
|
|
if [ .$wildcard_domain = ."false" ]; then
|
|
echo "$domain_name" > /etc/dehydrated/domains.txt
|
|
fi
|
|
|
|
#request the certificates
|
|
if [ .$wildcard_domain = ."true" ]; then
|
|
./dehydrated --cron --domain *.$domain_name --preferred-chain "ISRG Root X1" --algo rsa --alias $domain_alias --config /etc/dehydrated/config --out /etc/dehydrated/certs --challenge dns-01 --hook /etc/dehydrated/hook.sh
|
|
fi
|
|
if [ .$wildcard_domain = ."false" ]; then
|
|
./dehydrated --cron --alias $domain_alias --preferred-chain "ISRG Root X1" --algo rsa --config /etc/dehydrated/config --config /etc/dehydrated/config --out /etc/dehydrated/certs --challenge http-01
|
|
fi
|
|
|
|
#make sure the nginx ssl directory exists
|
|
mkdir -p /etc/nginx/ssl
|
|
|
|
#update nginx config
|
|
sed "s@ssl_certificate[ \t]*/etc/ssl/certs/nginx.crt;@ssl_certificate /etc/dehydrated/certs/$domain_alias/fullchain.pem;@g" -i /etc/nginx/sites-available/fusionpbx
|
|
sed "s@ssl_certificate_key[ \t]*/etc/ssl/private/nginx.key;@ssl_certificate_key /etc/dehydrated/certs/$domain_alias/privkey.pem;@g" -i /etc/nginx/sites-available/fusionpbx
|
|
|
|
#read the config
|
|
/usr/sbin/nginx -t && /usr/sbin/nginx -s reload
|
|
|
|
#setup freeswitch tls
|
|
if [ .$switch_tls = ."true" ]; then
|
|
|
|
#make sure the freeswitch directory exists
|
|
mkdir -p /etc/freeswitch/tls
|
|
|
|
#make sure the freeswitch certificate directory is empty
|
|
rm /etc/freeswitch/tls/*
|
|
|
|
#combine the certs into all.pem
|
|
cat /etc/dehydrated/certs/$domain_alias/fullchain.pem > /etc/freeswitch/tls/all.pem
|
|
cat /etc/dehydrated/certs/$domain_alias/privkey.pem >> /etc/freeswitch/tls/all.pem
|
|
#cat /etc/dehydrated/certs/$domain_alias/chain.pem >> /etc/freeswitch/tls/all.pem
|
|
|
|
#copy the certificates
|
|
cp /etc/dehydrated/certs/$domain_alias/cert.pem /etc/freeswitch/tls
|
|
cp /etc/dehydrated/certs/$domain_alias/chain.pem /etc/freeswitch/tls
|
|
cp /etc/dehydrated/certs/$domain_alias/fullchain.pem /etc/freeswitch/tls
|
|
cp /etc/dehydrated/certs/$domain_alias/privkey.pem /etc/freeswitch/tls
|
|
|
|
#add symbolic links
|
|
ln -s /etc/freeswitch/tls/all.pem /etc/freeswitch/tls/agent.pem
|
|
ln -s /etc/freeswitch/tls/all.pem /etc/freeswitch/tls/tls.pem
|
|
ln -s /etc/freeswitch/tls/all.pem /etc/freeswitch/tls/wss.pem
|
|
ln -s /etc/freeswitch/tls/all.pem /etc/freeswitch/tls/dtls-srtp.pem
|
|
|
|
#set the permissions
|
|
chown -R www-data:www-data /etc/freeswitch/tls
|
|
|
|
fi
|