SM0 She11

Path: / / usr / local / src

Full Path (server): /usr/local/src

Create Fil3

Upl04d Fil3

• 📄 acme.sh [E] [D]
  [R]
• 📄 cwp-el7-latest [E] [D]
  [R]
• 📁 imagick-3.4.4 Open [D]
  [R]
• 📄 imagick-3.4.4.tgz [E] [D]
  [R]
• 📁 ioncube Open [D]
  [R]
• 📄 ioncube_loaders_lin_x86-64.zip [E] [D]
  [R]
• 📁 mod_rpaf-0.8.4 Open [D]
  [R]
• 📄 package.xml [E] [D]
  [R]
• 📄 php_switch_pre.conf [E] [D]
  [R]
• 📁 roundcubemail-1.3.8 Open [D]
  [R]
• 📄 roundcubemail-1.3.8-complete.tar.gz [E] [D]
  [R]
• 📄 v0.8.4.tar.gz [E] [D]
  [R]
• 📁 xcache-3.2.0 Open [D]
  [R]
• 📄 xcache-3.2.0.tar.gz [E] [D]
  [R]

Editing: cwp-el7-latest

#!/bin/bash ######################################################################## # Use of code or any part of it is strictly prohibited. File protected by copyright law and provided under license. # To Use any part of this code you need to get a writen approval from the code owner: info@centos-webpanel.com ######################################################################## # # CWP instaler for CentOS 7 # ######################################################################## if [[ $EUID -ne 0 ]]; then echo "This script must be run as root" exit 1 fi if [ -e "/usr/local/cwpsrv/" ]; then echo echo "CWP is already installed on your server." echo "If you want to update it, run this command: sh /scripts/update_cwp" echo exit 1 fi type mysql 2> /dev/null && MYSQLCHK="on" || MYSQLCHK="off" # MySQL checker if [ "$MYSQLCHK" = "on" ]; then #check pwd if works while [ "$check" != "Database" ] do echo "Enter MySQL root Password: " read -p "MySQL root password []:" password check=`mysql -u root -p$password -e "show databases;" -B|head -n1` if [ "$check" = "Database" ]; then echo "Password OK!!" else echo "MySQL root passwordis invalid!!!" echo "You can remove MySQL server using command: yum remove mysql" echo "after mysql is removed run installer again." echo "" echo "if exists you can check your mysql password in file: /root/.my.cnf" echo "" if [ -e "/root/.my.cnf" ]; then echo "" cat /root/.my.cnf echo "" fi fi done else password=$(</dev/urandom tr -dc A-Za-z0-9 | head -c12) fi # Enable epel respository yum -y install epel-release # Add CWP Repository cat > /etc/yum.repos.d/cwp.repo <<EOF [cwp] name=CentOS Web Panel repo for Linux 7 - \$basearch baseurl=http://repo.centos-webpanel.com/repo/7/\$basearch failovermethod=priority enabled=1 gpgcheck=0 EOF # MariaDB repository cat > /etc/yum.repos.d/mariadb.repo <<EOF [mariadb] name = MariaDB baseurl = http://yum.mariadb.org/10.1/centos7-amd64 gpgkey=https://yum.mariadb.org/RPM-GPG-KEY-MariaDB gpgcheck=0 EOF yum -y makecache fast #Umask Fix sed -ie "s/umask\=002/umask=022/g" /etc/bashrc >/dev/null 2>&1 CHKDATE=`date +%Y` if [ "$CHKDATE" -le "2014" ];then echo "You have incorrect date set on your server!" echo `date` exit 1 fi #Install dependecies yum -y install gcc gcc-c++ make automake autoconf rsync cpulimit nano links e2fsprogs rsyslog net-tools man mlocate which screen sysstat yum -y install mariadb mariadb-server at zip git unzip cronie perl-libwww-perl perl-LWP-Protocol-https perl-Crypt-SSLeay yum -y remove apr exim sendmail yum -y install apr apr-util postfix dovecot dovecot-mysql dovecot-pigeonhole cyrus-sasl-devel cyrus-sasl-sql subversion bind bind-utils bind-libs file pubip=`curl -s http://centos-webpanel.com/webpanel/main.php?app=showip` fqdn=`/bin/hostname -f` # Check for hostname -f command issue hostnameissuecheck=$? if [ $hostnameissuecheck -ne 0 ];then fqdn=`/bin/hostname` fi echo "" echo "PREPARING THE SERVER" echo "##########################" if [ -e "/etc/selinux/config" ]; then sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config setenforce 0 fi ## APACHE INSTALLER ## echo echo "#############################################" echo "Please wait... installing web server files..." echo "#############################################" echo yum -y install apr apr-util cwp-httpd 2>&1 |tee /tmp/cwp.log yum -y install cwp-suphp if [ ! -e "/usr/local/apache/bin/httpd" ] then echo echo "Compiler requires 512 MB RAM + SWAP" echo "Installation FAILED at httpd" echo "Installation FAILED at httpd" >> /tmp/cwp.log curl http://dl1.centos-webpanel.com/files/s_scripts/sinfo.sh|sh 2>&1 >> /tmp/cwp.log curl -F"operation=upload" -F"file=@/tmp/cwp.log" http://error-reporting.control-webpanel.com/?service=installer echo "Please contact CWP support about this issue and include the last few lines from the error:" echo "http://centos-webpanel.com/contact" exit 1 fi echo echo "#############################################" echo "Please wait... Installing PHP ..." echo "#############################################" echo yum -y install cwp-php --enablerepo=epel 2>&1 |tee /tmp/cwp.log if [ ! -e "/usr/local/bin/php" ] then echo echo "Compiler requires 512 MB RAM + SWAP" echo "Installation FAILED at php" echo "Installation FAILED at php" >> /tmp/cwp.log curl http://dl1.centos-webpanel.com/files/s_scripts/sinfo.sh|sh 2>&1 >> /tmp/cwp.log curl -F"operation=upload" -F"file=@/tmp/cwp.log" http://error-reporting.control-webpanel.com/?service=installer echo "Please contact CWP support about this issue and include the last few lines from the error:" echo "http://centos-webpanel.com/contact" exit 1 fi if [ -e "/usr/local/bin/php-config" ] then CHKEXTENSIONTDIR=`/usr/local/bin/php-config --extension-dir`;grep ^extension_dir /usr/local/php/php.ini || echo "extension_dir='$CHKEXTENSIONTDIR'" >> /usr/local/php/php.ini fi # Installing CWP server yum -y install cwpsrv cwpphp --enablerepo=epel if [ ! -e "/usr/local/cwpsrv/bin/cwpsrv" ] then echo echo "Compiler requires 512 MB RAM + SWAP" echo "Installation FAILED at cwpsrv" echo "Installation FAILED at cwpsrv" > /tmp/cwp.log curl http://dl1.centos-webpanel.com/files/s_scripts/sinfo.sh|sh 2>&1 >> /tmp/cwp.log curl -F"operation=upload" -F"file=@/tmp/cwp.log" http://error-reporting.control-webpanel.com/?service=installer echo "Please contact CWP support about this issue and include the last few lines from the error:" echo "http://centos-webpanel.com/contact" exit 1 fi if [ ! -e "/usr/local/cwp/php71/bin/php" ] then echo echo "Compiler requires 512 MB RAM + SWAP" echo "Installation FAILED at cwp phpfpm" echo "Installation FAILED at cwp phpfpm" > /tmp/cwp.log curl http://dl1.centos-webpanel.com/files/s_scripts/sinfo.sh|sh 2>&1 >> /tmp/cwp.log curl -F"operation=upload" -F"file=@/tmp/cwp.log" http://error-reporting.control-webpanel.com/?service=installer echo "Please contact CWP support about this issue and include the last few lines from the error:" echo "http://centos-webpanel.com/contact" exit 1 fi if ! [[ -d /usr/local/src/ ]]; then mkdir -p /usr/local/src ; fi # SSL Installer openssl genrsa -out /etc/pki/tls/cwp-$pubip.key 2048 openssl req -new -x509 -key /etc/pki/tls/cwp-$pubip.key -out /etc/pki/tls/cwp-$pubip.cert -days 3650 -subj /CN=$pubip # CONFIGURE MYSQL ################### cd /usr/local/src echo "## CONFIGURE MYSQL" echo "###################" sed -i "s|old_passwords=1|#old_passwords=1|" /etc/my.cnf /bin/systemctl daemon-reload if [ -e "/var/run/mariadb" ];then chown -R mysql:mysql /var/run/mariadb/ fi /bin/systemctl restart mariadb.service /bin/systemctl enable mariadb.service mysqladmin -u root password $password mysql -u root -p$password -e "DROP DATABASE test"; mysql -u root -p$password -e "DELETE FROM mysql.user WHERE User='root' AND Host!='localhost'"; mysql -u root -p$password -e "DELETE FROM mysql.user WHERE User=''"; mysql -u root -p$password -e "FLUSH PRIVILEGES"; cat > /root/.my.cnf <<EOF [client] password=$password user=root EOF chmod 600 /root/.my.cnf # CONFIGURE APACHE #################### #touch /usr/local/apache/conf.d/vhosts.conf sed -i "s|#Include conf/extra/httpd-userdir.conf|Include conf/extra/httpd-userdir.conf|" /usr/local/apache/conf/httpd.conf # Apache Server Status cat > /usr/local/apache/conf.d/server-status.conf <<EOF <Location /server-status> SetHandler server-status Order deny,allow Allow from localhost </Location> EOF if ! [[ -L /etc/systemd/system/multi-user.target.wants/httpd.service ]]; then ln -s /usr/lib/systemd/system/httpd.service /etc/systemd/system/multi-user.target.wants/httpd.service fi /bin/systemctl daemon-reload # Set PHP Config sed -i "s|\;date\.timezone \=.*|date\.timezone = Etc/UTC|" /usr/local/php/php.ini echo "127.0.0.1 "$fqdn >> /etc/hosts /bin/systemctl enable httpd.service /bin/systemctl restart httpd.service # Mail Server Config sed -i "s|inet_interfaces = localhost|inet_interfaces = all|" /etc/postfix/main.cf sed -i "s|mydestination = $myhostname, localhost.$mydomain, localhost|mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, $domain|" /etc/postfix/main.cf sed -i "s|#home_mailbox = Maildir/|home_mailbox = Maildir/|" /etc/postfix/main.cf #install csf firewall echo "Installing CSF Firewall" echo "#######################" cd /tmp rm -fv csf.tgz wget https://download.configserver.com/csf.tgz tar -xzf csf.tgz cd csf sh install.sh sed -i "s|465,587,993,995|465,587,993,995,2030,2031,2082,2083,2086,2087,2095,2096|" /etc/csf/csf.conf sed -i "s|80,110,113,443|80,110,113,443,2030,2031,2082,2083,2086,2087,2095,2096|" /etc/csf/csf.conf sed -i 's|TESTING = "1"|TESTING = "0"|' /etc/csf/csf.conf echo "# Run external commands before csf configures iptables" >> /usr/local/csf/bin/csfpre.sh echo "# Run external commands after csf configures iptables" >> /usr/local/csf/bin/csfpost.sh csf -x cat >> /etc/csf/csf.pignore <<EOF # CWP CUSTOM exe:/usr/sbin/clamd exe:/usr/sbin/opendkim exe:/usr/libexec/mysqld exe:/usr/sbin/mysqld exe:/usr/libexec/dovecot/anvil exe:/usr/libexec/dovecot/auth exe:/usr/libexec/dovecot/imap-login exe:/usr/libexec/dovecot/dict exe:/usr/libexec/dovecot/pop3-login exe:/usr/local/cwp/php71/sbin/php-fpm exe:/usr/libexec/postfix/tlsmgr exe:/usr/libexec/postfix/qmgr exe:/usr/libexec/postfix/pickup exe:/usr/libexec/postfix/smtpd exe:/usr/libexec/postfix/smtp exe:/usr/libexec/postfix/bounce exe:/usr/libexec/postfix/scache exe:/usr/libexec/postfix/anvil exe:/usr/libexec/postfix/cleanup exe:/usr/libexec/postfix/proxymap exe:/usr/libexec/postfix/trivial-rewrite exe:/usr/libexec/postfix/local exe:/usr/libexec/postfix/pipe exe:/usr/libexec/postfix/spawn exe:/usr/sbin/varnishd exe:/usr/sbin/nginx exe:/usr/bin/perl user:amavis cmd:/usr/sbin/amavisd EOF touch /var/lib/csf/csf.tempban touch /var/lib/csf/csf.tempallow # Till the CSF/LFD turned on #iptables -I INPUT -m tcp -p tcp --dport 2030 -j ACCEPT # CWP BruteForce Protection sed -i "s|CUSTOM1_LOG.*|CUSTOM1_LOG = \"/var/log/cwp_client_login.log\"|g" /etc/csf/csf.conf cat > /usr/local/csf/bin/regex.custom.pm <<EOF #!/usr/bin/perl sub custom_line { my \$line = shift; my \$lgfile = shift; # Do not edit before this point if ((\$globlogs{CUSTOM1_LOG}{\$lgfile}) and (\$line =~ /^\S+\s+\S+\s+(\S+)\s+Failed Login from:\s+(\S+) on: (\S+)/)) { return ("Failed CWP-Login login for User: \$1 from IP: \$2 URL: \$3",\$2,"cwplogin","5","2030,2031","1"); } # Do not edit beyond this point return 0; } 1; EOF #Dovecot bug fix touch /var/log/dovecot-debug.log touch /var/log/dovecot-info.log touch /var/log/dovecot.log chmod 600 /var/log/dovecot-debug.log chmod 600 /var/log/dovecot-info.log chmod 600 /var/log/dovecot.log usermod -G mail dovecot # WebPanel Install echo "Installing CWP Files" echo "#######################" mkdir /usr/local/cwpsrv/htdocs cd /usr/local/cwpsrv/htdocs wget dl1.centos-webpanel.com/files/cwp/el7/cwp-el7-0.9.8.762.zip unzip -o -q cwp-el7-0.9.8.762.zip rm -f cwp-el7-0.9.8.762.zip if [ ! -e "/usr/local/cwpsrv/var/services" ];then mkdir -p /usr/local/cwpsrv/var/services/ fi cd /usr/local/cwpsrv/var/services/ wget dl1.centos-webpanel.com/files/cwp/el7/cwp-services.zip unzip -o -q cwp-services.zip rm -f cwp-services.zip cd /usr/local/cwpsrv/htdocs/resources/admin/include wget -q http://dl1.centos-webpanel.com/files/cwp/sql/db_conn.txt mv db_conn.txt db_conn.php cd /usr/local/cwpsrv/htdocs/resources/admin/modules wget -q http://dl1.centos-webpanel.com/files/cwp/modules/example.txt mv example.txt example.php # phpMyAdmin Installer echo "Installing phpMyAdmin" echo "#######################" cd /usr/local/cwpsrv/var/services wget -q http://dl1.centos-webpanel.com/files/mysql/phpMyAdmin-4.6.6-all-languages.zip unzip -o -q phpMyAdmin-4.6.6-all-languages.zip mv phpMyAdmin-4.6.6-all-languages pma rm -Rf phpMyAdmin-4.6.6-all-languages.zip pma/setup # webFTP Installer cd /usr/local/apache/htdocs/ wget -q dl1.centos-webpanel.com/files/cwp/addons/webftp_simple.zip unzip -o -q webftp_simple.zip rm -f webftp_simple.zip # Default website setup cp /usr/local/cwpsrv/htdocs/resources/admin/tpl/new_account_tpl/* /usr/local/apache/htdocs/. # WebPanel Settings mv /usr/local/cwpsrv/var/services/pma/config.sample.inc.php /usr/local/cwpsrv/var/services/pma/config.inc.php ran_password=$(</dev/urandom tr -dc A-Za-z0-9 | head -c32) sed -i "s|\['blowfish_secret'\] = ''|\['blowfish_secret'\] = '${ran_password}'|" /usr/local/cwpsrv/var/services/pma/config.inc.php ran_password2=$(</dev/urandom tr -dc A-Za-z0-9 | head -c12) sed -i "s|\$crypt_pwd = ''|\$crypt_pwd = '${ran_password2}'|" /usr/local/cwpsrv/htdocs/resources/admin/include/db_conn.php sed -i "s|\$db_pass = ''|\$db_pass = '$password'|" /usr/local/cwpsrv/htdocs/resources/admin/include/db_conn.php chmod 600 /usr/local/cwpsrv/htdocs/resources/admin/include/db_conn.php if [ -e "/var/lib/php/session" ];then chmod 777 /var/lib/php/session/ fi # PHP Short tags fix sed -i "s|short_open_tag = Off|short_open_tag = On|" /usr/local/cwp/php/php.ini sed -i "s|short_open_tag = Off|short_open_tag = On|" /usr/local/php/php.ini # Setup Cron cat > /etc/cron.daily/cwp <<EOF /usr/local/cwp/php71/bin/php -d max_execution_time=1000000 -q /usr/local/cwpsrv/htdocs/resources/admin/include/cron.php /usr/local/cwp/php71/bin/php -d max_execution_time=1000000 -q /usr/local/cwpsrv/htdocs/resources/admin/include/cron_backup.php EOF chmod +x /etc/cron.daily/cwp # MySQL Database import curl 'http://dl1.centos-webpanel.com/files/cwp/sql/root_cwp.sql'|mysql -uroot -p$password curl 'http://dl1.centos-webpanel.com/files/cwp/sql/oauthv2.sql'|mysql -uroot -p$password mysql -u root -p$password << EOF use root_cwp; UPDATE settings SET shared_ip="$pubip"; EOF # Disable named for antiDDoS security /bin/systemctl enable named # Google DNS CHECKDNS=`dig a centos-webpanel.com @8.8.8.8 +short` CHECKDNSERROR=$? if [ $CHECKDNSERROR -eq 0 ];then echo "nameserver 8.8.8.8" > /etc/resolv.conf echo "nameserver 8.8.4.4" >> /etc/resolv.conf fi sed -i "s|127.0.0.1|any|" /etc/named.conf sed -i "s|localhost|any|" /etc/named.conf sed -i 's/recursion yes/recursion no/g' /etc/named.conf # MAIL SERVER INSTALLER # clean yum yum clean all ########################################################## # MAIL SERVER ########################################################## # check MySQL root password mysql_root_password=$password if [ -z "${mysql_root_password}" ]; then read -p "MySQL root password []:" mysql_root_password fi #clear echo "#########################################################" echo " CentOS Web Panel MailServer Installer " echo "#########################################################" echo echo "visit for help: www.centos-webpanel.com" echo check=`mysql -u root -p$mysql_root_password -e "show databases;" -B|head -n1` if [ "$check" = "Database" ]; then echo "Password OK!!" else echo "MySQL root password is invalid!!!" echo "Check password and run this script again." exit 1 fi ## Needed to add password in root folder mysql -u root -p$mysql_root_password -e "UPDATE mysql.user SET Password = PASSWORD('$mysql_root_password') WHERE user = 'root';" mysql -u root -p$mysql_root_password -e "FLUSH PRIVILEGES;" # password generator postfix_pwd=$(</dev/urandom tr -dc A-Za-z0-9 | head -c12) cnf_hostname=`/bin/hostname -f` # Check for hostname -f command issue hostnameissuecheck=$? if [ $hostnameissuecheck -ne 0 ];then cnf_hostname=`/bin/hostname` fi # create database and user mysql -u root -p$mysql_root_password -e "CREATE DATABASE postfix;" mysql -u root -p$mysql_root_password -e "CREATE USER postfix@localhost IDENTIFIED BY '$postfix_pwd';" mysql -u root -p$mysql_root_password -e "GRANT ALL PRIVILEGES ON postfix . * TO postfix@localhost;" # MySQL Database import curl 'http://centos-webpanel.com/webpanel/main.php?dl=postfix.sql'|mysql -uroot -p$mysql_root_password -h localhost postfix yum -y install perl-MailTools perl-MIME-EncWords perl-MIME-Charset perl-Email-Valid perl-Test-Pod perl-TimeDate yum -y install perl-Mail-Sender perl-Log-Log4perl imapsync offlineimap yum -y install perl-Razor-Agent perl-Convert-BinHex crypto-utils yum --enablerepo=epel -y install clamav clamav-data clamav-lib clamav-server clamav-update clamav-server-systemd clamav-scanner-systemd amavisd-new # Fix knowns issues with amavisd and ClamAV sed -i '/^Example$/d' /etc/clamd.d/scan.conf sed -i '/^Example$/d' /etc/freshclam.conf sed -i 's/^#LocalSocket/LocalSocket/' /etc/clamd.d/scan.conf sed -i 's/^LocalSocketGroup.*$/LocalSocketGroup amavis/' /etc/clamd.d/scan.conf usermod -a -G amavis clamscan cd /usr/lib/systemd/system mv clamd\@.service clamd.service sed -i 's/^ExecStart.*$/ExecStart = \/usr\/sbin\/clamd -c \/etc\/clamd.d\/amavisd.conf --foreground=yes/' clamd.service sed -i "s/^Type \= forking/Type \= simple/" clamd.service mv clamd\@scan.service clamd-scan.service sed -i 's/clamd@.service/clamd.service/' clamd-scan.service #sed -i 's/Wants\=clamd.*$/Wants\=clamd.service/' /usr/lib/systemd/system/amavisd.service #sed -i '/^NoNewPrivileges.*$/d' /usr/lib/systemd/system/amavisd.service systemctl daemon-reload # End of fix # GET MAIL configs cd / wget -q http://dl1.centos-webpanel.com/files/mail/el7/mail_server.zip unzip -o -q /mail_server.zip rm -f /mail_server.zip #User add mkdir /var/vmail chmod 770 /var/vmail useradd -r -u 101 -g mail -d /var/vmail -s /sbin/nologin -c "Virtual mailbox" vmail chown vmail:mail /var/vmail touch /etc/postfix/virtual_regexp #vacation useradd -r -d /var/spool/vacation -s /sbin/nologin -c "Virtual vacation" vacation if [ ! -e "/var/spool/vacation" ];then mkdir /var/spool/vacation fi chmod 770 /var/spool/vacation cd /var/spool/vacation/ #ln -s /etc/postfix/vacation.pl /var/spool/vacation/vacation.pl ln -s /etc/postfix/vacation.php /var/spool/vacation/vacation.php chmod +x /etc/postfix/vacation.php usermod -G mail vacation chown vacation /etc/postfix/vacation.php #chown postfix.mail /usr/local/cwpsrv/htdocs/resources/admin/include/postfix.php #chmod 440 /usr/local/cwpsrv/htdocs/resources/admin/include/postfix.php echo "autoreply.$cnf_hostname vacation:" > /etc/postfix/transport postmap /etc/postfix/transport chown -R vacation:vacation /var/spool/vacation echo "127.0.0.1 autoreply.$cnf_hostname" >> /etc/hosts #sieve mkdir -p /var/sieve/ cat > /var/sieve/globalfilter.sieve <<EOF require "fileinto"; if exists "X-Spam-Flag" { if header :contains "X-Spam-Flag" "NO" { } else { fileinto "Spam"; stop; } } if header :contains "subject" ["***SPAM***"] { fileinto "Spam"; stop; } EOF chown -R vmail:mail /var/sieve #razor-admin -register -user=some_user -pass=somepas #freshclam #service clamd restart ##### SSL Cert START ##### # SSL Self signed certificate cd /root DOMAIN="$cnf_hostname" if [ -z "$DOMAIN" ]; then echo "Hostname is not properly set!" exit 11 fi fail_if_error() { [ $1 != 0 ] && { unset PASSPHRASE exit 10 } } # Generate a passphrase export PASSPHRASE=$(head -c 500 /dev/urandom | tr -dc a-z0-9A-Z | head -c 128; echo) # Certificate details; replace items in angle brackets with your own info subj=" C=HR ST=Zagreb O=CentOS Web Panel localityName=HR commonName=$DOMAIN organizationalUnitName=CentOS Web Panel emailAddress=info@studio4host.com " # Generate the server private key openssl genrsa -des3 -out $DOMAIN.key -passout env:PASSPHRASE 2048 fail_if_error $? # Generate the CSR openssl req \ -new \ -batch \ -subj "$(echo -n "$subj" | tr "\n" "/")" \ -key $DOMAIN.key \ -out $DOMAIN.csr \ -passin env:PASSPHRASE fail_if_error $? cp $DOMAIN.key $DOMAIN.key.org fail_if_error $? # Strip the password so we don't have to type it every time we restart Apache openssl rsa -in $DOMAIN.key.org -out $DOMAIN.key -passin env:PASSPHRASE fail_if_error $? # Generate the cert (good for 10 years) openssl x509 -req -days 3650 -in $DOMAIN.csr -signkey $DOMAIN.key -out $DOMAIN.crt fail_if_error $? mv /root/$cnf_hostname.key /etc/pki/tls/private/hostname.key mv /root/$cnf_hostname.crt /etc/pki/tls/certs/hostname.crt ln -s /etc/pki/tls/private/hostname.key /etc/pki/tls/private/$cnf_hostname.key ln -s /etc/pki/tls/certs/hostname.crt /etc/pki/tls/certs/$cnf_hostname.crt # Services Certs ln -s /etc/pki/tls/certs/hostname.crt /etc/pki/tls/certs/server-cwp.crt ln -s /etc/pki/tls/certs/hostname.crt /etc/pki/tls/certs/server-dovecot.crt ln -s /etc/pki/tls/certs/hostname.crt /etc/pki/tls/certs/server-http.crt ln -s /etc/pki/tls/certs/hostname.crt /etc/pki/tls/certs/server-postfix.crt ln -s /etc/pki/tls/private/hostname.key /etc/pki/tls/private/server-cwp.key ln -s /etc/pki/tls/private/hostname.key /etc/pki/tls/private/server-dovecot.key ln -s /etc/pki/tls/private/hostname.key /etc/pki/tls/private/server-http.key ln -s /etc/pki/tls/private/hostname.key /etc/pki/tls/private/server-postfix.key cat /etc/pki/tls/private/hostname.key > /etc/pki/tls/certs/server-ftp.crt cat /etc/pki/tls/certs/hostname.crt >> /etc/pki/tls/certs/server-ftp.crt echo " " > /etc/pki/tls/certs/$cnf_hostname.bundle ##### END SSL Cert ##### #FTPD configuration if [ ! -e "/etc/pure-ftpd/pure-ftpd.conf" ] then yum -y install pure-ftpd --enablerepo=epel touch /etc/pure-ftpd/pure-ftpd.passwd pure-pw mkdb /etc/pure-ftpd/pureftpd.pdb -f /etc/pure-ftpd/pure-ftpd.passwd -m fi if [ ! -e "/etc/pure-ftpd/pure-ftpd.conf" ] then echo "Installation FAILED at pure-ftpd" echo "Please contact CWP support about this issue and include the last few lines from the error:" echo "http://centos-webpanel.com/contact" exit 1 fi sed -i 's|.*pureftpd.pdb.*|PureDB /etc/pure-ftpd/pureftpd.pdb|g' /etc/pure-ftpd/pure-ftpd.conf sed -i 's|.*PAMAuthentication.*yes|PAMAuthentication yes|g' /etc/pure-ftpd/pure-ftpd.conf sed -i 's|.*UnixAuthentication.*yes|UnixAuthentication yes|g' /etc/pure-ftpd/pure-ftpd.conf # CentOS 7.6 fix for pure-ftpd grep "^/sbin/nologin$" /etc/shells || echo "/sbin/nologin" >> /etc/shells systemctl enable pure-ftpd systemctl restart pure-ftpd # /etc/postfix/main.cf sed -i "s|MY_HOSTNAME|$cnf_hostname|g" /etc/postfix/main.cf sed -i "s|MY_HOSTNAME|autoreply.$cnf_hostname|g" /etc/postfix/mysql-virtual_vacation.cf sed -i "s|MY_DOMAIN|$cnf_hostname|g" /etc/postfix/main.cf # MySQL PWD Fix for postfix sed -i "s|MYSQL_PASSWORD|$postfix_pwd|g" /etc/postfix/mysql-relay_domains_maps.cf sed -i "s|MYSQL_PASSWORD|$postfix_pwd|g" /etc/postfix/mysql-virtual_alias_maps.cf sed -i "s|MYSQL_PASSWORD|$postfix_pwd|g" /etc/postfix/mysql-virtual_domains_maps.cf sed -i "s|MYSQL_PASSWORD|$postfix_pwd|g" /etc/postfix/mysql-virtual_mailbox_limit_maps.cf sed -i "s|MYSQL_PASSWORD|$postfix_pwd|g" /etc/postfix/mysql-virtual_mailbox_maps.cf sed -i "s|MYSQL_PASSWORD|$postfix_pwd|g" /etc/postfix/mysql-virtual_vacation.cf sed -i '/^.*smtpd_bind_address.*$/d' /etc/postfix/master.cf sed -i '/^.*virtual_mailbox_limit_maps.*$/d' /etc/postfix/main.cf # Postfix Web panel SQL setup if [ ! -e "/usr/local/cwpsrv/htdocs/resources/admin/include/postfix.php" ] then cd /usr/local/cwpsrv/htdocs/resources/admin/include wget -q http://centos-webpanel.com/webpanel/main.php?dl=postfix.txt mv main.php?dl=postfix.txt postfix.php fi sed -i "s|\$db_pass_postfix = ''|\$db_pass_postfix = '$postfix_pwd'|" /usr/local/cwpsrv/htdocs/resources/admin/include/postfix.php chmod 600 /usr/local/cwpsrv/htdocs/resources/admin/include/postfix.php # Vacation fix sed -i "s|MYSQL_PASSWORD|$postfix_pwd|" /etc/postfix/vacation.conf sed -i "s|AUTO_REPLAY|autoreply.$cnf_hostname|" /etc/postfix/vacation.conf # DOVECOT fix sed -i "s|MYSQL_PASSWORD|$postfix_pwd|" /etc/dovecot/dovecot-dict-quota.conf sed -i "s|MYSQL_PASSWORD|$postfix_pwd|" /etc/dovecot/dovecot-mysql.conf sed -i "s|MY_DOMAIN|$cnf_hostname|" /etc/dovecot/dovecot.conf sed -i "s|MY_DOMAIN|$cnf_hostname|" /etc/dovecot/dovecot.conf ##### ROUNDCUBE INSTALLER ##### /usr/local/cwp/php71/bin/pear install Mail_mime /usr/local/cwp/php71/bin/pear install Net_SMTP /usr/local/cwp/php71/bin/pear install channel://pear.php.net/Net_IDNA2-0.1.1 #SIEVE REQUIREMENTS # >=5.3.0, roundcube/plugin-installer: >=0.1.3, roundcube/net_sieve: "1.5.0 /usr/local/cwp/php71/bin/pear install Net_Sieve if [ -z "${mysql_roundcube_password}" ]; then tmp=$(</dev/urandom tr -dc A-Za-z0-9 | head -c12) mysql_roundcube_password=${mysql_roundcube_password:-${tmp}} echo "MySQL roundcube: ${mysql_roundcube_password}" >> .passwords fi if [ -z "${mysql_root_password}" ]; then read -p "MySQL root password []:" mysql_root_password fi wget -P /usr/local/cwpsrv/var/services http://dl1.centos-webpanel.com/files/mail/roundcubemail-1.2.3.tar.gz tar -C /usr/local/cwpsrv/var/services -zxf /usr/local/cwpsrv/var/services/roundcubemail-*.tar.gz rm -f /usr/local/cwpsrv/var/services/roundcubemail-*.tar.gz mv /usr/local/cwpsrv/var/services/roundcubemail-* /usr/local/cwpsrv/var/services/roundcube chown cwpsvc:cwpsvc -R /usr/local/cwpsrv/var/services/roundcube chmod 777 -R /usr/local/cwpsrv/var/services/roundcube/temp/ chmod 777 -R /usr/local/cwpsrv/var/services/roundcube/logs/ sed -e "s|mypassword|${mysql_roundcube_password}|" <<'EOF' | mysql -u root -p"${mysql_root_password}" USE mysql; CREATE DATABASE IF NOT EXISTS roundcube; GRANT ALL PRIVILEGES ON roundcube.* TO 'roundcube'@'localhost' IDENTIFIED BY 'mypassword'; FLUSH PRIVILEGES; EOF mysql -u root -p"${mysql_root_password}" 'roundcube' < /usr/local/cwpsrv/var/services/roundcube/SQL/mysql.initial.sql cp /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php.sample /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['default_host'\] =\).*$|\1 \'localhost\';|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['smtp_server'\] =\).*$|\1 \'localhost\';|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['smtp_user'\] =\).*$|\1 \'%u\';|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['smtp_pass'\] =\).*$|\1 \'%p\';|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php #sed -i "s|^\(\$config\['support_url'\] =\).*$|\1 \'mailto:${E}\';|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['quota_zero_as_unlimited'\] =\).*$|\1 true;|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['preview_pane'\] =\).*$|\1 true;|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['read_when_deleted'\] =\).*$|\1 false;|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['check_all_folders'\] =\).*$|\1 true;|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['display_next'\] =\).*$|\1 true;|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['top_posting'\] =\).*$|\1 true;|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['sig_above'\] =\).*$|\1 true;|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['login_lc'\] =\).*$|\1 2;|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|MYSQL_PASSWORD|$postfix_pwd|g" /usr/local/cwpsrv/var/services/roundcube/plugins/password/config.inc.php sed -i "s|^\(\$config\['db_dsnw'\] =\).*$|\1 \'mysqli://roundcube:${mysql_roundcube_password}@localhost/roundcube\';|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php rm -rf /usr/local/cwpsrv/var/services/roundcube/installer chown -R cwpsvc:cwpsvc /usr/local/cwpsrv/var/services/roundcube # MAIL SECURITY chmod 640 /etc/postfix/mysql-*.cf chmod 640 /etc/dovecot/dovecot-*.conf chmod 640 /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php chown root.mail /etc/postfix/mysql-*.cf chown root.mail /etc/dovecot/dovecot-*.conf # Setup Login Screen [[ $(grep "bash_cwp" /root/.bash_profile) == "" ]] && echo "sh /root/.bash_cwp" >> /root/.bash_profile cat > /root/.bash_cwp <<EOF echo "" echo "********************************************" echo " Welcome to CWP (CentOS WebPanel) server" echo "********************************************" echo "" echo "CWP Wiki: http://wiki.centos-webpanel.com" echo "CWP Forum: http://forum.centos-webpanel.com" echo "CWP Support: http://centos-webpanel.com/support-services" echo "" w echo "" EOF if [ ! -e "/scripts" ] then cd /;ln -s /usr/local/cwpsrv/htdocs/resources/scripts /scripts chmod +x /scripts/* fi # Chkconfig # iptables -F /bin/systemctl daemon-reload /bin/systemctl enable httpd /bin/systemctl enable cwpsrv /bin/systemctl enable mariadb /bin/systemctl enable postfix /bin/systemctl enable dovecot /bin/systemctl daemon-reload # Lets make php easier for usage ln -s /usr/local/bin/php /bin/php ln -s /usr/local/bin/php /usr/bin/php # service restart /bin/systemctl restart httpd /bin/systemctl restart cwpsrv chown vmail.mail /var/log/dovecot* mkdir /usr/local/apache/htdocs/.well-known chown -R nobody:nobody /usr/local/apache/htdocs/* chown -R cwpsvc.cwpsvc /usr/local/cwpsrv/var/services /usr/bin/chattr +i /usr/local/cwpsrv/htdocs/admin # All non standart ports are closed by default iptables -A INPUT ! -i lo -p tcp -m state --state NEW -m tcp --dport 2030 -j ACCEPT iptables -A INPUT ! -i lo -p tcp -m state --state NEW -m tcp --dport 2031 -j ACCEPT service iptables save # NAT-ed networking setup detection checklocal=`/sbin/ip addr sh | grep $pubip` if [ -z "$checklocal" ];then mkdir -p /usr/local/cwp/.conf/ touch /usr/local/cwp/.conf/nat_check.conf fi # Secure home folder chmod 711 /home clear echo "#############################" echo "# CWP Installed #" echo "#############################" sleep 2 clear echo "#############################" echo "# CWP Installed #" echo "#############################" echo "" echo "go to CentOS WebPanel Admin GUI at http://SERVER_IP:2030/" echo "" echo "http://${pubip}:2030" echo "SSL: https://${pubip}:2031" echo -e "---------------------" echo "Username: root" echo "Password: ssh server root password" echo "MySQL root Password: $password" echo echo "#########################################################" echo " CentOS Web Panel MailServer Installer " echo "#########################################################" #echo "Roundcube MySQL Password: ${mysql_roundcube_password}" #echo "Postfix MySQL Password: ${postfix_pwd}" echo "SSL Cert name (hostname): ${cnf_hostname}" echo "SSL Cert file location /etc/pki/tls/ private|certs" echo "#########################################################" echo echo "visit for help: www.centos-webpanel.com" echo "Write down login details and press ENTER for server reboot!" read -p "Press ENTER for server reboot!" shutdown -r now
Save