| Line 1... |
Line 1... |
| 1 |
#!/bin/bash
|
1 |
#!/bin/bash
|
| 2 |
# $Id: alcasar.sh 2290 2017-06-20 10:00:17Z richard $
|
2 |
# $Id: alcasar.sh 2293 2017-06-20 15:31:12Z tom.houdayer $
|
| 3 |
|
3 |
|
| 4 |
# alcasar.sh
|
4 |
# alcasar.sh
|
| 5 |
|
5 |
|
| 6 |
# ALCASAR Install script - CopyLeft ALCASAR Team [Rexy + 3abtux + Steweb + Crox + ...]
|
6 |
# ALCASAR Install script - CopyLeft ALCASAR Team [Rexy + 3abtux + Steweb + Crox + ...]
|
| 7 |
# Ce programme est un logiciel libre ; This software is free and open source
|
7 |
# Ce programme est un logiciel libre ; This software is free and open source
|
| Line 837... |
Line 837... |
| 837 |
$DIR_DEST_BIN/alcasar-profil.sh --list
|
837 |
$DIR_DEST_BIN/alcasar-profil.sh --list
|
| 838 |
fi
|
838 |
fi
|
| 839 |
# ACC partitioning
|
839 |
# ACC partitioning
|
| 840 |
rm -f /etc/httpd/conf/webapps.d/alcasar*
|
840 |
rm -f /etc/httpd/conf/webapps.d/alcasar*
|
| 841 |
cat <<EOF > /etc/httpd/conf/webapps.d/alcasar.conf
|
841 |
cat <<EOF > /etc/httpd/conf/webapps.d/alcasar.conf
|
| - |
|
842 |
<Directory $DIR_WEB>
|
| - |
|
843 |
AllowOverride None
|
| - |
|
844 |
Order deny,allow
|
| - |
|
845 |
Deny from all
|
| - |
|
846 |
Allow from 127.0.0.1
|
| - |
|
847 |
Allow from $PRIVATE_NETWORK_MASK
|
| - |
|
848 |
ErrorDocument 404 https://$HOSTNAME.$DOMAIN/
|
| - |
|
849 |
</Directory>
|
| - |
|
850 |
<Directory $DIR_WEB/certs>
|
| - |
|
851 |
AddType application/x-x509-ca-cert crt
|
| - |
|
852 |
</Directory>
|
| 842 |
<Directory $DIR_ACC>
|
853 |
<Directory $DIR_ACC>
|
| 843 |
SSLRequireSSL
|
854 |
SSLRequireSSL
|
| 844 |
AllowOverride None
|
855 |
AllowOverride None
|
| 845 |
Order deny,allow
|
856 |
Order deny,allow
|
| 846 |
Deny from all
|
857 |
Deny from all
|
| Line 913... |
Line 924... |
| 913 |
AuthDigestDomain $HOSTNAME.$DOMAIN
|
924 |
AuthDigestDomain $HOSTNAME.$DOMAIN
|
| 914 |
AuthUserFile $DIR_DEST_ETC/digest/key_backup
|
925 |
AuthUserFile $DIR_DEST_ETC/digest/key_backup
|
| 915 |
ErrorDocument 404 https://$HOSTNAME.$DOMAIN/
|
926 |
ErrorDocument 404 https://$HOSTNAME.$DOMAIN/
|
| 916 |
</Directory>
|
927 |
</Directory>
|
| 917 |
EOF
|
928 |
EOF
|
| 918 |
# Replacement of the extension .cer by .der in MIME type
|
- |
|
| 919 |
$SED "s?^application/pkix-cert.*?application/pkix-cert der?g" /etc/mime.types
|
- |
|
| 920 |
# Launch after coova (in order to wait tun0 to be up)
|
929 |
# Launch after coova (in order to wait tun0 to be up)
|
| 921 |
$SED "s?^After=.*?After=network.target remote-fs.target nss-lookup.target chilli.service?g" /lib/systemd/system/httpd.service
|
930 |
$SED "s?^After=.*?After=network.target remote-fs.target nss-lookup.target chilli.service?g" /lib/systemd/system/httpd.service
|
| 922 |
# Log file for ACC access imputability
|
931 |
# Log file for ACC access imputability
|
| 923 |
[ -e /var/Save/security/acc_access.log ] || touch /var/Save/security/acc_access.log
|
932 |
[ -e /var/Save/security/acc_access.log ] || touch /var/Save/security/acc_access.log
|
| 924 |
chown root:apache /var/Save/security/acc_access.log
|
933 |
chown root:apache /var/Save/security/acc_access.log
|