Subversion Repositories ALCASAR

Rev

Rev 1530 | Rev 1534 | Go to most recent revision | Show entire file | Regard whitespace | Details | Blame | Last modification | View Log

Rev 1530 Rev 1532
Line 1... Line 1...
1
#!/bin/bash
1
#!/bin/bash
2
#  $Id: alcasar.sh 1530 2014-12-21 19:59:20Z richard $ 
2
#  $Id: alcasar.sh 1532 2014-12-21 21:39:52Z richard $ 
3
 
3
 
4
# alcasar.sh
4
# alcasar.sh
5
 
5
 
6
# ALCASAR Install script -  CopyLeft ALCASAR Team [Rexy + 3abtux + Steweb + Crox + ...] 
6
# ALCASAR Install script -  CopyLeft ALCASAR Team [Rexy + 3abtux + Steweb + Crox + ...] 
7
# Ce programme est un logiciel libre ; This software is free and open source
7
# Ce programme est un logiciel libre ; This software is free and open source
Line 648... Line 648...
648
# Configuration et sécurisation Apache
648
# Configuration et sécurisation Apache
649
	rm -rf /var/www/cgi-bin/* /var/www/perl/* /var/www/icons/README* /var/www/error/README*
649
	rm -rf /var/www/cgi-bin/* /var/www/perl/* /var/www/icons/README* /var/www/error/README*
650
	[ -e /etc/httpd/conf/httpd.conf.default ] || cp /etc/httpd/conf/httpd.conf /etc/httpd/conf/httpd.conf.default
650
	[ -e /etc/httpd/conf/httpd.conf.default ] || cp /etc/httpd/conf/httpd.conf /etc/httpd/conf/httpd.conf.default
651
	$SED "s?^#ServerName.*?ServerName $HOSTNAME.$DOMAIN?g" /etc/httpd/conf/httpd.conf
651
	$SED "s?^#ServerName.*?ServerName $HOSTNAME.$DOMAIN?g" /etc/httpd/conf/httpd.conf
652
	$SED "s?^Listen.*?Listen $PRIVATE_IP:80?g" /etc/httpd/conf/httpd.conf
652
	$SED "s?^Listen.*?Listen $PRIVATE_IP:80?g" /etc/httpd/conf/httpd.conf
653
	$SED "s?^ServerTokens.*?ServerTokens Prod?g" /etc/httpd/conf/httpd.conf
653
	$SED "s?Options Indexes.*?Options -Indexes?g" /etc/httpd/conf/httpd.conf
-
 
654
	echo "ServerTokens Prod" >> /etc/httpd/conf/httpd.conf
654
	$SED "s?^ServerSignature.*?ServerSignature Off?g" /etc/httpd/conf/httpd.conf
655
	echo "ServerSignature Off" >> /etc/httpd/conf/httpd.conf
655
	$SED "s?^#ErrorDocument 404 /missing.html.*?ErrorDocument 404 /index.html?g" /etc/httpd/conf/httpd.conf
656
	[ -e /etc/httpd/conf/modules.d/00_base.conf.default ] || cp /etc/httpd/conf/modules.d/00_base.conf /etc/httpd/conf/modules.d/00_base.conf.default
656
	$SED "s?^LoadModule authn_anon_module.*?#LoadModule authn_anon_module modules/mod_authn_anon.so?g" /etc/httpd/conf/httpd.conf
657
	$SED "s?^LoadModule authn_anon_module.*?#LoadModule authn_anon_module modules/mod_authn_anon.so?g" /etc/httpd/conf/modules.d/00_base.conf
657
	$SED "s?^LoadModule status_module.*?#LoadModule status_module modules/mod_status.so?g" /etc/httpd/conf/httpd.conf
658
	$SED "s?^LoadModule status_module.*?#LoadModule status_module modules/mod_status.so?g" /etc/httpd/conf/modules.d/00_base.conf
658
	$SED "s?^LoadModule autoindex_module.*?#LoadModule autoindex_module modules/mod_autoindex.so?g" /etc/httpd/conf/httpd.conf
659
	$SED "s?^LoadModule autoindex_module.*?#LoadModule autoindex_module modules/mod_autoindex.so?g" /etc/httpd/conf/modules.d/00_base.conf
659
	$SED "s?^LoadModule info_module.*?#LoadModule info_module modules/mod_info.so?g" /etc/httpd/conf/httpd.conf
660
	$SED "s?^LoadModule info_module.*?#LoadModule info_module modules/mod_info.so?g" /etc/httpd/conf/modules.d/00_base.conf
660
	$SED "s?^LoadModule imagemap_module.*?#LoadModule imagemap_module modules/mod_imagemap.so?g" /etc/httpd/conf/httpd.conf
661
	$SED "s?^LoadModule imagemap_module.*?#LoadModule imagemap_module modules/mod_imagemap.so?g" /etc/httpd/conf/modules.d/00_base.conf
661
	$SED "s?^LoadModule rewrite_module.*?#LoadModule rewrite_module modules/mod_rewrite.so?g" /etc/httpd/conf/httpd.conf
662
	$SED "s?^LoadModule rewrite_module.*?#LoadModule rewrite_module modules/mod_rewrite.so?g" /etc/httpd/conf/modules.d/00_base.conf
662
	$SED "s?LoadModule speling_module.*?LoadModule speling_module modules/mod_speling.so?g" /etc/httpd/conf/httpd.conf
663
	$SED "s?^LoadModule speling_module.*?#LoadModule speling_module modules/mod_speling.so?g" /etc/httpd/conf/modules.d/00_base.conf
663
	[ -e /etc/httpd/conf/conf.d/ssl.conf.default ] || cp /etc/httpd/conf/conf.d/ssl.conf /etc/httpd/conf/conf.d/ssl.conf.default
664
	[ -e /etc/httpd/conf/conf.d/ssl.conf.default ] || cp /etc/httpd/conf/conf.d/ssl.conf /etc/httpd/conf/conf.d/ssl.conf.default
664
	$SED "s?^Listen.*?Listen $PRIVATE_IP:443?g" /etc/httpd/conf/conf.d/ssl.conf # Listen only on INTIF
665
	$SED "s?^Listen.*?Listen $PRIVATE_IP:443?g" /etc/httpd/conf/conf.d/ssl.conf # Listen only on INTIF
-
 
666
# Error page management
-
 
667
FIC_ERROR_DOC=`find /etc/httpd/conf -type f -name multilang-errordoc.conf`
-
 
668
[ -e $FIC_ERROR_DOC ]  || cp $FIC_ERROR_DOC $FIC_ERROR_DOC.default
-
 
669
cat <<EOF > $FIC_ERROR_DOC
-
 
670
Alias /error/ "/var/www/html/"
-
 
671
<Directory "/usr/share/httpd/error">
-
 
672
    AllowOverride None
-
 
673
    Options IncludesNoExec
-
 
674
    AddOutputFilter Includes html
-
 
675
    AddHandler type-map var
-
 
676
    Require all granted
-
 
677
    LanguagePriority en cs de es fr it ja ko nl pl pt-br ro sv tr
-
 
678
    ForceLanguagePriority Prefer Fallback
-
 
679
</Directory>
-
 
680
ErrorDocument 400 /error/error.php?error=400
-
 
681
ErrorDocument 401 /error/error.php?error=401
-
 
682
ErrorDocument 403 /error/error.php?error=403
-
 
683
ErrorDocument 404 /error/error.php?error=404
-
 
684
ErrorDocument 405 /error/error.php?error=405
-
 
685
ErrorDocument 408 /error/error.php?error=408
-
 
686
ErrorDocument 410 /error/error.php?error=410
-
 
687
ErrorDocument 411 /error/error.php?error=411
-
 
688
ErrorDocument 412 /error/error.php?error=412
-
 
689
ErrorDocument 413 /error/error.php?error=413
-
 
690
ErrorDocument 414 /error/error.php?error=414
-
 
691
ErrorDocument 415 /error/error.php?error=415
-
 
692
ErrorDocument 500 /error/error.php?error=500
-
 
693
ErrorDocument 501 /error/error.php?error=501
-
 
694
ErrorDocument 502 /error/error.php?error=502
-
 
695
ErrorDocument 503 /error/error.php?error=503
-
 
696
ErrorDocument 506 /error/error.php?error=506
-
 
697
EOF
665
	[ -e /usr/share/httpd/error/include/top.html.default ] || cp /usr/share/httpd/error/include/top.html /usr/share/httpd/error/include/top.html.default
698
	[ -e /usr/share/httpd/error/include/top.html.default ] || cp /usr/share/httpd/error/include/top.html /usr/share/httpd/error/include/top.html.default
666
	$SED "s?background-color.*?background-color: #EFEFEF; }?g" /usr/share/httpd/error/include/top.html
699
	$SED "s?background-color.*?background-color: #EFEFEF; }?g" /usr/share/httpd/error/include/top.html
667
	[ -e /usr/share/httpd/error/include/bottom.html.default ] || cp /usr/share/httpd/error/include/bottom.html /usr/share/httpd/error/include/bottom.html.default
700
	[ -e /usr/share/httpd/error/include/bottom.html.default ] || cp /usr/share/httpd/error/include/bottom.html /usr/share/httpd/error/include/bottom.html.default
668
	cat <<EOF > /usr/share/httpd/error/include/bottom.html
701
	cat <<EOF > /usr/share/httpd/error/include/bottom.html
669
</body>
702
</body>
Line 784... Line 817...
784
	AuthType digest
817
	AuthType digest
785
	AuthName $HOSTNAME.$DOMAIN
818
	AuthName $HOSTNAME.$DOMAIN
786
	AuthUserFile $DIR_DEST_ETC/digest/key_backup
819
	AuthUserFile $DIR_DEST_ETC/digest/key_backup
787
	ErrorDocument 404 https://$HOSTNAME.$DOMAIN/
820
	ErrorDocument 404 https://$HOSTNAME.$DOMAIN/
788
</Directory>
821
</Directory>
789
<Directory $DIR_ACC/stats>
-
 
790
	SSLRequireSSL
-
 
791
	AllowOverride None
-
 
792
	Order deny,allow
-
 
793
	Deny from all
-
 
794
	Allow from 127.0.0.1
-
 
795
	Allow from $PRIVATE_NETWORK_MASK
-
 
796
#	Allow from AA.BB.CC.DD/32	# Allow from specific @IP
-
 
797
	require valid-user
-
 
798
	AuthType digest
-
 
799
	AuthName $HOSTNAME.$DOMAIN
-
 
800
	BrowserMatch "MSIE" AuthDigestEnableQueryStringHack=On
-
 
801
	AuthUserFile $DIR_DEST_ETC/digest/key_manager
-
 
802
	ErrorDocument 404 https://$HOSTNAME.$DOMAIN/
-
 
803
</Directory>
-
 
804
EOF
822
EOF
805
# Launch after coova
823
# Launch after coova
806
$SED "s?^After=.*?After=network.target remote-fs.target nss-lookup.target chilli.service?g" /lib/systemd/system/httpd.service
824
$SED "s?^After=.*?After=network.target remote-fs.target nss-lookup.target chilli.service?g" /lib/systemd/system/httpd.service
807
# Error page management
-
 
808
FIC_ERROR_DOC=`find /etc/httpd/conf -type f -name multilang-errordoc.conf`
-
 
809
[ -e $FIC_ERROR_DOC ]  || cp $FIC_ERROR_DOC $FIC_ERROR_DOC.default
-
 
810
 
-
 
811
cat <<EOF > $FIC_ERROR_DOC
-
 
812
Alias /error/ "/var/www/html/"
-
 
813
 
-
 
814
<Directory "/usr/share/httpd/error">
-
 
815
    AllowOverride None
-
 
816
    Options IncludesNoExec
-
 
817
    AddOutputFilter Includes html
-
 
818
    AddHandler type-map var
-
 
819
    Require all granted
-
 
820
    LanguagePriority en cs de es fr it ja ko nl pl pt-br ro sv tr
-
 
821
    ForceLanguagePriority Prefer Fallback
-
 
822
</Directory>
-
 
823
 
-
 
824
ErrorDocument 400 /error/error.php?error=400
-
 
825
ErrorDocument 401 /error/error.php?error=401
-
 
826
ErrorDocument 403 /error/error.php?error=403
-
 
827
ErrorDocument 404 /error/error.php?error=404
-
 
828
ErrorDocument 405 /error/error.php?error=405
-
 
829
ErrorDocument 408 /error/error.php?error=408
-
 
830
ErrorDocument 410 /error/error.php?error=410
-
 
831
ErrorDocument 411 /error/error.php?error=411
-
 
832
ErrorDocument 412 /error/error.php?error=412
-
 
833
ErrorDocument 413 /error/error.php?error=413
-
 
834
ErrorDocument 414 /error/error.php?error=414
-
 
835
ErrorDocument 415 /error/error.php?error=415
-
 
836
ErrorDocument 500 /error/error.php?error=500
-
 
837
ErrorDocument 501 /error/error.php?error=501
-
 
838
ErrorDocument 502 /error/error.php?error=502
-
 
839
ErrorDocument 503 /error/error.php?error=503
-
 
840
ErrorDocument 506 /error/error.php?error=506
-
 
841
EOF
-
 
842
 
-
 
843
# Initialization of Vnstat
825
# Initialization of Vnstat
844
	 [ -e /etc/vnstat.conf.default ]  || cp /etc/vnstat.conf /etc/vnstat.conf.default
826
	 [ -e /etc/vnstat.conf.default ]  || cp /etc/vnstat.conf /etc/vnstat.conf.default
845
	 $SED "s?Interface.*?Interface \"$EXTIF\"?g" /etc/vnstat.conf
827
	 $SED "s?Interface.*?Interface \"$EXTIF\"?g" /etc/vnstat.conf
846
	/usr/bin/vnstat -u -i $EXTIF
828
	/usr/bin/vnstat -u -i $EXTIF
847
 
-
 
848
} # End of ACC ()
829
} # End of ACC ()
849
 
830
 
850
##########################################################################################
831
##########################################################################################
851
##				Fonction "CA"						##
832
##				Fonction "CA"						##
852
## - Création d'une Autorité de Certification et du certificat serveur pour apache 	##
833
## - Création d'une Autorité de Certification et du certificat serveur pour apache 	##
Line 854... Line 835...
854
CA ()
835
CA ()
855
{
836
{
856
	$DIR_DEST_BIN/alcasar-CA.sh
837
	$DIR_DEST_BIN/alcasar-CA.sh
857
	FIC_VIRTUAL_SSL=`find /etc/httpd/conf -type f -name *default_ssl_vhost.conf`
838
	FIC_VIRTUAL_SSL=`find /etc/httpd/conf -type f -name *default_ssl_vhost.conf`
858
	[ -e /etc/httpd/conf/vhosts-ssl.default ]  || cp $FIC_VIRTUAL_SSL /etc/httpd/conf/vhosts-ssl.default
839
	[ -e /etc/httpd/conf/vhosts-ssl.default ]  || cp $FIC_VIRTUAL_SSL /etc/httpd/conf/vhosts-ssl.default
859
	
-
 
860
	#$SED "s?localhost.crt?alcasar.crt?g" $FIC_VIRTUAL_SSL
-
 
861
	#$SED "s?localhost.key?alcasar.key?g" $FIC_VIRTUAL_SSL
-
 
862
	#$SED "s?^#SSLCertificateChainFile.*?SSLCertificateChainFile /etc/pki/tls/certs/server-chain.crt?" $FIC_VIRTUAL_SSL
-
 
863
	
-
 
864
	cat <<EOF > $FIC_VIRTUAL_SSL
840
	cat <<EOF > $FIC_VIRTUAL_SSL
865
# default SSL virtual host, used for all HTTPS requests that do not
841
# default SSL virtual host, used for all HTTPS requests that do not
866
# match a ServerName or ServerAlias in any <VirtualHost> block.
842
# match a ServerName or ServerAlias in any <VirtualHost> block.
867
 
843
 
868
<VirtualHost _default_:443>
844
<VirtualHost _default_:443>