forked from norman/fusionpbx-install.sh-github-mirror
b5d59f85e9
The sed entries to update the config file was creating the following issues: 1) It was creating duplicate config files, the second has a trailing space. 2) The email variable was not passed to the config file. 3) removing the leading # from WELLKNOWN does not require the file path as it does not change. This shortened command may eliminate the creating of two config files.
128 lines
4.2 KiB
Bash
Executable File
128 lines
4.2 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
# FusionPBX - Install
|
|
# Mark J Crane <markjcrane@fusionpbx.com>
|
|
# Copyright (C) 2018
|
|
# All Rights Reserved.
|
|
|
|
#move to script directory so all relative paths work
|
|
cd "$(dirname "$0")"
|
|
|
|
#includes
|
|
. ./config.sh
|
|
|
|
#remove dehyrdated letsencrypt script
|
|
#rm -R /etc/dehydrated/
|
|
#rm /usr/local/sbin/dehydrated
|
|
#rm -R /usr/src/dehydrated
|
|
#rm -R /usr/src/dns-01-manual
|
|
#rm -R /var/www/dehydrated
|
|
|
|
#request the domain name, email address and wild card domain
|
|
read -p 'Domain Name: ' domain_name
|
|
read -p 'Email Address: ' email_address
|
|
|
|
#get and install dehydrated
|
|
cd /usr/src && git clone https://github.com/lukas2511/dehydrated.git
|
|
cd /usr/src/dehydrated
|
|
cp dehydrated /usr/local/sbin
|
|
mkdir -p /var/www/dehydrated
|
|
mkdir -p /etc/dehydrated/certs
|
|
|
|
#wildcard detection
|
|
wilcard_domain=$(echo $domain_name | cut -c1-1)
|
|
if [ "$wilcard_domain" = "*" ]; then
|
|
wilcard_domain="true"
|
|
else
|
|
wilcard_domain="false"
|
|
fi
|
|
|
|
#remove the wildcard and period
|
|
if [ .$wilcard_domain = ."true" ]; then
|
|
domain_name=$(echo "$domain_name" | cut -c3-255)
|
|
fi
|
|
|
|
#manual dns hook
|
|
if [ .$wilcard_domain = ."true" ]; then
|
|
cd /usr/src
|
|
git clone https://github.com/gheja/dns-01-manual.git
|
|
cd /usr/src/dns-01-manual/
|
|
cp hook.sh /etc/dehydrated/hook.sh
|
|
chmod 755 /etc/dehydrated/hook.sh
|
|
fi
|
|
|
|
#copy config and hook.sh into /etc/dehydrated
|
|
cd /usr/src/dehydrated
|
|
cp docs/examples/config /etc/dehydrated
|
|
#cp docs/examples/hook.sh /etc/dehydrated
|
|
|
|
#update the dehydrated config
|
|
#sed "s#CONTACT_EMAIL=#CONTACT_EMAIL=$email_address" -i /etc/dehydrated/config
|
|
sed -i 's/#CONTACT_EMAIL=/CONTACT_EMAIL="'"$email_address"'"/g' /etc/dehydrated/config
|
|
sed -i 's/#WELLKNOWN=/WELLKNOWN=/g' /etc/dehydrated/config
|
|
|
|
#accept the terms
|
|
dehydrated --register --accept-terms --config /etc/dehydrated/config
|
|
|
|
#set the domain alias
|
|
domain_alias=$(echo "$domain_name" | head -n1 | cut -d " " -f1)
|
|
|
|
#create an alias when using wildcard dns
|
|
if [ .$wilcard_domain = ."true" ]; then
|
|
echo "*.$domain_name > $domain_name" > /etc/dehydrated/domains.txt
|
|
fi
|
|
|
|
#add the domain name to domains.txt
|
|
if [ .$wilcard_domain = ."false" ]; then
|
|
echo "$domain_name" > /etc/dehydrated/domains.txt
|
|
fi
|
|
|
|
#request the certificates
|
|
if [ .$wilcard_domain = ."true" ]; then
|
|
dehydrated --cron --domain *.$domain_name --alias $domain_alias --config /etc/dehydrated/config --out /etc/dehydrated/certs --challenge dns-01 --hook /etc/dehydrated/hook.sh
|
|
fi
|
|
if [ .$wilcard_domain = ."false" ]; then
|
|
dehydrated --cron --alias $domain_alias --config /etc/dehydrated/config --config /etc/dehydrated/config --out /etc/dehydrated/certs --challenge http-01
|
|
fi
|
|
|
|
#make sure the nginx ssl directory exists
|
|
mkdir -p /etc/nginx/ssl
|
|
|
|
#update nginx config
|
|
sed "s@ssl_certificate /etc/ssl/certs/nginx.crt;@ssl_certificate /etc/dehydrated/certs/$domain_alias/fullchain.pem;@g" -i /etc/nginx/sites-available/fusionpbx
|
|
sed "s@ssl_certificate_key /etc/ssl/private/nginx.key;@ssl_certificate_key /etc/dehydrated/certs/$domain_alias/privkey.pem;@g" -i /etc/nginx/sites-available/fusionpbx
|
|
|
|
#read the config
|
|
/usr/sbin/nginx -t && /usr/sbin/nginx -s reload
|
|
|
|
#setup freeswitch tls
|
|
if [ .$switch_tls = ."true" ]; then
|
|
|
|
#make sure the freeswitch directory exists
|
|
mkdir -p /etc/freeswitch/tls
|
|
|
|
#make sure the freeswitch certificate directory is empty
|
|
rm /etc/freeswitch/tls/*
|
|
|
|
#combine the certs into all.pem
|
|
cat /etc/dehydrated/certs/$domain_alias/fullchain.pem > /etc/freeswitch/tls/all.pem
|
|
cat /etc/dehydrated/certs/$domain_alias/privkey.pem >> /etc/freeswitch/tls/all.pem
|
|
#cat /etc/dehydrated/certs/$domain_alias/chain.pem >> /etc/freeswitch/tls/all.pem
|
|
|
|
#copy the certificates
|
|
cp /etc/dehydrated/certs/$domain_alias/cert.pem /etc/freeswitch/tls
|
|
cp /etc/dehydrated/certs/$domain_alias/chain.pem /etc/freeswitch/tls
|
|
cp /etc/dehydrated/certs/$domain_alias/fullchain.pem /etc/freeswitch/tls
|
|
cp /etc/dehydrated/certs/$domain_alias/privkey.pem /etc/freeswitch/tls
|
|
|
|
#add symbolic links
|
|
ln -s /etc/freeswitch/tls/all.pem /etc/freeswitch/tls/agent.pem
|
|
ln -s /etc/freeswitch/tls/all.pem /etc/freeswitch/tls/tls.pem
|
|
ln -s /etc/freeswitch/tls/all.pem /etc/freeswitch/tls/wss.pem
|
|
ln -s /etc/freeswitch/tls/all.pem /etc/freeswitch/tls/dtls-srtp.pem
|
|
|
|
#set the permissions
|
|
chown -R www-data:www-data /etc/freeswitch/tls
|
|
|
|
fi
|