installs script for debian 10 (mailtrain v1)
This commit is contained in:
Eric Seigne
parent
3b365701bb
commit
fd0b701e55
1 changed files with 248 additions and 0 deletions
248
setup/install-debian10.sh
Executable file
248
setup/install-debian10.sh
Executable file
|
|
@ -0,0 +1,248 @@
|
|||
#!/bin/bash
|
||||
|
||||
# This installation script works on Ubuntu 14.04 and 16.04
|
||||
# Run as root!
|
||||
|
||||
if [[ $EUID -ne 0 ]]; then
|
||||
echo "This script must be run as root" 1>&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
CONF=~/mailtrain_install.txt
|
||||
|
||||
set -e
|
||||
|
||||
export DEBIAN_FRONTEND=noninteractive
|
||||
|
||||
#just in case of multiple launch of this script
|
||||
if [ -f ${CONF} ]; then
|
||||
. ${CONF}
|
||||
else
|
||||
MYSQL_ROOT_PASSWORD=`pwgen 12 -1`
|
||||
MYSQL_PASSWORD=`pwgen 12 -1`
|
||||
MYSQL_RO_PASSWORD=`pwgen 12 -1`
|
||||
DKIM_API_KEY=`pwgen 12 -1`
|
||||
SMTP_PASS=`pwgen 12 -1`
|
||||
|
||||
echo "MYSQL_ROOT_PASSWORD=$MYSQL_ROOT_PASSWORD" > ${CONF}
|
||||
echo "MYSQL_PASSWORD=$MYSQL_PASSWORD" >> ${CONF}
|
||||
echo "MYSQL_RO_PASSWORD=$MYSQL_RO_PASSWORD" >> ${CONF}
|
||||
echo "DKIM_API_KEY=$DKIM_API_KEY" >> ${CONF}
|
||||
echo "SMTP_PASS=$SMTP_PASS" >> ${CONF}
|
||||
fi
|
||||
|
||||
apt-get update
|
||||
|
||||
debconf-set-selections <<< "mariadb-server-10.3 mysql-server/root_password password ${MYSQL_ROOT_PASSWORD}"
|
||||
debconf-set-selections <<< "mariadb-server-10.3 mysql-server/root_password_again password ${MYSQL_ROOT_PASSWORD}"
|
||||
|
||||
apt-get -q -y install mariadb-server pwgen nodejs imagemagick git ufw build-essential dnsutils python software-properties-common npm redis-server
|
||||
|
||||
apt-get clean
|
||||
|
||||
PUBLIC_IP=`curl -s https://api.ipify.org`
|
||||
if [ ! -z "$PUBLIC_IP" ]; then
|
||||
HOSTNAME=`dig +short -x $PUBLIC_IP | sed 's/\.$//'`
|
||||
HOSTNAME="${HOSTNAME:-$PUBLIC_IP}"
|
||||
fi
|
||||
HOSTNAME="${HOSTNAME:-`hostname`}"
|
||||
|
||||
# Setup MySQL user for Mailtrain
|
||||
mysql -u root -e "CREATE USER 'mailtrain'@'localhost' IDENTIFIED BY '$MYSQL_PASSWORD';" -p$MYSQL_ROOT_PASSWORD
|
||||
mysql -u root -e "GRANT ALL PRIVILEGES ON mailtrain.* TO 'mailtrain'@'localhost';" -p$MYSQL_ROOT_PASSWORD
|
||||
mysql -u root -e "CREATE USER 'mailtrain_ro'@'localhost' IDENTIFIED BY '$MYSQL_RO_PASSWORD';" -p$MYSQL_ROOT_PASSWORD
|
||||
mysql -u root -e "GRANT SELECT ON mailtrain.* TO 'mailtrain_ro'@'localhost';" -p$MYSQL_ROOT_PASSWORD
|
||||
mysql -u mailtrain --password="$MYSQL_PASSWORD" -e "CREATE database mailtrain;"
|
||||
|
||||
# Enable firewall, allow connections to SSH, HTTP, HTTPS and SMTP
|
||||
ufw allow 22/tcp
|
||||
ufw allow 80/tcp
|
||||
ufw allow 443/tcp
|
||||
ufw allow 25/tcp
|
||||
ufw --force enable
|
||||
|
||||
# Fetch Mailtrain files
|
||||
mkdir -p /opt/mailtrain
|
||||
cd /opt/mailtrain
|
||||
git clone git://github.com/Mailtrain-org/mailtrain.git .
|
||||
|
||||
# Normally we would let Mailtrain itself to import the initial SQL data but in this case
|
||||
# we need to modify it, before we start Mailtrain
|
||||
mysql -u mailtrain -p"$MYSQL_PASSWORD" mailtrain < setup/sql/mailtrain.sql
|
||||
|
||||
mysql -u mailtrain -p"$MYSQL_PASSWORD" mailtrain <<EOT
|
||||
INSERT INTO \`settings\` (\`key\`, \`value\`) VALUES ('admin_email','admin@$HOSTNAME') ON DUPLICATE KEY UPDATE \`value\`='admin@$HOSTNAME';
|
||||
INSERT INTO \`settings\` (\`key\`, \`value\`) VALUES ('default_address','admin@$HOSTNAME') ON DUPLICATE KEY UPDATE \`value\`='admin@$HOSTNAME';
|
||||
INSERT INTO \`settings\` (\`key\`, \`value\`) VALUES ('smtp_hostname','localhost') ON DUPLICATE KEY UPDATE \`value\`='localhost';
|
||||
INSERT INTO \`settings\` (\`key\`, \`value\`) VALUES ('smtp_disable_auth','') ON DUPLICATE KEY UPDATE \`value\`='';
|
||||
INSERT INTO \`settings\` (\`key\`, \`value\`) VALUES ('smtp_user','mailtrain') ON DUPLICATE KEY UPDATE \`value\`='mailtrain';
|
||||
INSERT INTO \`settings\` (\`key\`, \`value\`) VALUES ('smtp_pass','$SMTP_PASS') ON DUPLICATE KEY UPDATE \`value\`='$SMTP_PASS';
|
||||
INSERT INTO \`settings\` (\`key\`, \`value\`) VALUES ('smtp_encryption','NONE') ON DUPLICATE KEY UPDATE \`value\`='NONE';
|
||||
INSERT INTO \`settings\` (\`key\`, \`value\`) VALUES ('smtp_port','2525') ON DUPLICATE KEY UPDATE \`value\`='2525';
|
||||
INSERT INTO \`settings\` (\`key\`, \`value\`) VALUES ('default_homepage','http://$HOSTNAME/') ON DUPLICATE KEY UPDATE \`value\`='http://$HOSTNAME/';
|
||||
INSERT INTO \`settings\` (\`key\`, \`value\`) VALUES ('service_url','http://$HOSTNAME/') ON DUPLICATE KEY UPDATE \`value\`='http://$HOSTNAME/';
|
||||
INSERT INTO \`settings\` (\`key\`, \`value\`) VALUES ('dkim_api_key','$DKIM_API_KEY') ON DUPLICATE KEY UPDATE \`value\`='$DKIM_API_KEY';
|
||||
EOT
|
||||
|
||||
# Add new user for the mailtrain daemon to run as
|
||||
useradd mailtrain || true
|
||||
useradd zone-mta || true
|
||||
|
||||
# Setup installation configuration
|
||||
cat >> config/production.toml <<EOT
|
||||
user="mailtrain"
|
||||
group="mailtrain"
|
||||
[log]
|
||||
level="error"
|
||||
[www]
|
||||
port=80
|
||||
secret="`pwgen -1`"
|
||||
[mysql]
|
||||
password="$MYSQL_PASSWORD"
|
||||
[redis]
|
||||
enabled=true
|
||||
[queue]
|
||||
processes=5
|
||||
EOT
|
||||
|
||||
cat >> workers/reports/config/production.toml <<EOT
|
||||
[log]
|
||||
level="error"
|
||||
[mysql]
|
||||
user="mailtrain_ro"
|
||||
password="$MYSQL_RO_PASSWORD"
|
||||
EOT
|
||||
|
||||
# Install required node packages
|
||||
npm install --no-progress --production
|
||||
chown -R mailtrain:mailtrain .
|
||||
chmod o-rwx config
|
||||
|
||||
# Setup log rotation to not spend up entire storage on logs
|
||||
cat <<EOM > /etc/logrotate.d/mailtrain
|
||||
/var/log/mailtrain.log {
|
||||
daily
|
||||
rotate 12
|
||||
compress
|
||||
delaycompress
|
||||
missingok
|
||||
notifempty
|
||||
copytruncate
|
||||
nomail
|
||||
}
|
||||
EOM
|
||||
|
||||
if [ -d "/run/systemd/system" ]; then
|
||||
# Set up systemd service script
|
||||
cp setup/mailtrain.service /etc/systemd/system/
|
||||
systemctl enable mailtrain.service
|
||||
else
|
||||
# Set up upstart service script
|
||||
cp setup/mailtrain.conf /etc/init/
|
||||
fi
|
||||
|
||||
# Fetch ZoneMTA files
|
||||
mkdir -p /opt/zone-mta
|
||||
cd /opt/zone-mta
|
||||
git clone git://github.com/zone-eu/zone-mta.git .
|
||||
git checkout 6964091273
|
||||
|
||||
# Ensure queue folder
|
||||
mkdir -p /var/data/zone-mta/mailtrain
|
||||
|
||||
# Setup installation configuration
|
||||
cat >> config/production.json <<EOT
|
||||
{
|
||||
"name": "Mailtrain",
|
||||
"user": "zone-mta",
|
||||
"group": "zone-mta",
|
||||
"queue": {
|
||||
"db": "/var/data/zone-mta/mailtrain"
|
||||
},
|
||||
"smtpInterfaces": {
|
||||
"feeder": {
|
||||
"enabled": true,
|
||||
"port": 2525,
|
||||
"processes": 2,
|
||||
"authentication": true
|
||||
}
|
||||
},
|
||||
"api": {
|
||||
"maildrop": false,
|
||||
"user": "mailtrain",
|
||||
"pass": "$SMTP_PASS"
|
||||
},
|
||||
"log": {
|
||||
"level": "info",
|
||||
"syslog": true
|
||||
},
|
||||
"plugins": {
|
||||
"core/email-bounce": false,
|
||||
"core/http-bounce": {
|
||||
"enabled": "main",
|
||||
"url": "http://localhost/webhooks/zone-mta"
|
||||
},
|
||||
"core/http-auth": {
|
||||
"enabled": ["receiver", "main"],
|
||||
"url": "http://localhost:8080/test-auth"
|
||||
},
|
||||
"core/default-headers": {
|
||||
"enabled": ["receiver", "main", "sender"],
|
||||
"futureDate": false,
|
||||
"xOriginatingIP": false
|
||||
},
|
||||
"core/http-config": {
|
||||
"enabled": ["main", "receiver"],
|
||||
"url": "http://localhost/webhooks/zone-mta/sender-config?api_token=$DKIM_API_KEY"
|
||||
},
|
||||
"core/rcpt-mx": false
|
||||
},
|
||||
"pools": {
|
||||
"default": [{
|
||||
"address": "0.0.0.0",
|
||||
"name": "$HOSTNAME"
|
||||
}]
|
||||
},
|
||||
"zones": {
|
||||
"default": {
|
||||
"processes": 3,
|
||||
"connections": 5,
|
||||
"throttling": false,
|
||||
"pool": "default"
|
||||
},
|
||||
"transactional": {
|
||||
"processes": 1,
|
||||
"connections": 1,
|
||||
"pool": "default"
|
||||
}
|
||||
},
|
||||
"domainConfig": {
|
||||
"default": {
|
||||
"maxConnections": 4
|
||||
}
|
||||
}
|
||||
}
|
||||
EOT
|
||||
|
||||
# Install required node packages
|
||||
npm install --no-progress --production
|
||||
npm install leveldown
|
||||
|
||||
# Ensure queue folder is owned by MTA user
|
||||
chown -R zone-mta:zone-mta /var/data/zone-mta/mailtrain
|
||||
|
||||
if [ -d "/run/systemd/system" ]; then
|
||||
# Set up systemd service script
|
||||
cp setup/zone-mta.service /etc/systemd/system/
|
||||
systemctl enable zone-mta.service
|
||||
else
|
||||
# Set up upstart service script
|
||||
cp setup/zone-mta.conf /etc/init/
|
||||
fi
|
||||
|
||||
# Start the service
|
||||
service zone-mta start
|
||||
service mailtrain start
|
||||
|
||||
echo "MySQL root password: $MYSQL_ROOT_PASSWORD"
|
||||
echo "Success! Open http://$HOSTNAME/ and log in as admin:test";
|
||||
Loading…
Add table
Add a link
Reference in a new issue