uberspace-webadmin/action.sh

#!/bin/bash

########################################################################
#  Copyright (C) 2016 Max Mehl <mail [at] mehl [dot] mx>
########################################################################
#  
#  This program is free software: you can redistribute it and/or modify 
#  it under the terms of the GNU Affero General Public License as 
#  published by the Free Software Foundation, either version 3 of the 
#  License, or (at your option) any later version.
#  
#  This program is distributed in the hope that it will be useful, 
#  but WITHOUT ANY WARRANTY; without even the implied warranty of 
#  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the 
#  GNU Affero General Public License for more details.
#  
#  You should have received a copy of the GNU Affero General Public 
#  License along with this program.  If not, see 
#  <http://www.gnu.org/licenses/>.
#  
########################################################################
#  
#  This script handles calls from submit.php.
#  It checks the validity of usernames, executes basic command
#  When password entries are required, it starts the respective python
#   scripts
#  
########################################################################

# Test if config.cfg exists and set needed variables
if [ ! -e config.cfg ]; then echo "Missing config.cfg file. Edit and rename config.cfg.sample"; exit 1; fi
source config.cfg

ACTION=$1     # adduser, changepw, listusers, userdetail, deluser, sizeall, sizeuser, viewdata
USER=$2
PASSFILE=$3   # $3 is a file containing the password
PASS=$(cat $PASSFILE)
PATH=$PATH:$HOME/bin

## FUNCTIONS
function checkaction {
  REGEX="^adduser$|^changepw$|^listusers$|^userdetail$|^deluser$|^sizeall$|^sizeuser$|^viewdata$|^addalias$|^quota$|^installwp$|^uninstallwp$"
  if [[ $1 =~ $REGEX ]]; then 
    echo "true" 
  else
    echo "false"
  fi
}

function checkuser {
  REGEX="^[A-Za-z0-9._+-]+$"    # Allowed symbols
  if [[ $1 =~ $REGEX ]]; then 
    echo "true" 
  else
    echo "false"
  fi
}

function checkpass {
  REGEX="[ '\\]"   # Not allowed symbols
  if [[ $(grep -E "$REGEX" $1 ; echo $?) == 1 ]]; then 
    echo "true" 
  else
    echo "false"
  fi
}

function userexists {
  STATUS=$(listvdomain | cut -d" " -f 1 | sed '1d' | grep -q "^$1$" ; echo $?)
  if [ $STATUS == 0 ]; then
    echo "true"
  else
    echo "false"
  fi
}

function mailsend { 
  TOEMAIL="$TOEMAIL";
  FREMAIL="$FREMAIL";
  SUBJECT="[$DOMAIN] $1";
  MSGBODY1="$2"
  MSGBODY2="$3"

  printf '%s\n' "From: $FREMAIL
To: $TOEMAIL
Reply-To: $FREMAIL
Subject: $SUBJECT

$MSGBODY1

$MSGBODY2
" > $MAILTMP
  cat $MAILTMP | "$SENDMAILPATH" -t;
  rm $MAILTMP;
}

function mailsendenc {
  
  if [ ! -e $SSLKEY ]; then
    #echo "Encryption key \"$SSLKEY\" is not available. Aborting."
    #exit 1
    
    openssl genrsa -out $SSLKEY 2048
  fi
  
  TOEMAIL="$TOEMAIL";
  FREMAIL="$FREMAIL";
  SUBJECT="[$DOMAIN] $1";
  MSGBODY1="$2"
  BOUNDARY="ZZafgwejwepfgkl.9453x1q"
  ATTACHMENT=$(echo $3 | openssl rsautl -inkey $SSLKEY -encrypt | base64)

printf '%s\n' "From: $FREMAIL
To: $TOEMAIL
Reply-To: $FREMAIL
Subject: $SUBJECT
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary=\"$BOUNDARY\"

--${BOUNDARY}
Content-Type: text/plain; charset=\"us-ascii\"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

$MSGBODY1

Upload the attached encrypted file to your Account Administration Panel 
in order to see sensitive details. Please visit the section \"Decrypt 
system email\" for more details.

--${BOUNDARY}
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename=\"message.txt.crypt\"

$ATTACHMENT

--${BOUNDARY}

" > $MAILTMP
  cat $MAILTMP | "$SENDMAILPATH" -t;
  rm $MAILTMP;
}

function notesdelete { 
  USER="$1"
  # Extract Mail part | exclude LEAD and TAIL | delete user
  sed -n "/$LEAD/,/$TAIL/ p" $NOTES | grep -v "$LEAD\|$TAIL" | sed "/User:[ \t]*$USER$/,+2d" > $NOTESTMP
  # Put edited part in between $LEAD and $TAIL again
  sed -i "/$LEAD/,/$TAIL/{ /$LEAD/{p; r $NOTESTMP
          }; /$TAIL/p; d }" $NOTES
  rm $NOTESTMP
}

function notesinsert {
  # Update datasheet (add new entry in Email section)
  USER=$1
  PASSFILE=$2
  
  # Create temporary file from $PASSFILE
  sed -E "s/(.*)/User:     $USER\nPass:     \1\n\n/" $PASSFILE > .$PASSFILE.tmp
  
  # Insert this edited file into the datasheet
  sed -i "/$TAIL/ {
         h
         r .$PASSFILE.tmp
         g
         N
     }" $NOTES

  rm .$PASSFILE.tmp
}

## FIRST CHECKS
if ! $(checkaction "$ACTION"); then
  echo "No valid action chosen"
  exit 1
fi


# # # # #
# ADDING USER
# # # # #
if [ "$ACTION" == "adduser" ]; then
  echo "Adding new Email user..."
  echo
  
  if ! $(checkuser "$USER"); then
    echo "Username \"$USER\" invalid"
    exit 1
  fi
  
  if $(userexists "$USER"); then
    echo "User \"$USER\" does already exist!"
    exit 1
  fi
  
  if ! $(checkpass "$PASSFILE"); then
    echo "Password \""$(cat $PASSFILE)"\" invalid"
    exit 1
  fi
  
  python adduser.py "$USER" "$PASSFILE"
  
  if [ $? == 0 ]; then
    # Send infomail
    $MAILTYPE "New Email account created" \
             "A new Email account has been created." \
             "User: $USER"
    
    LEAD='## > EMAIL'
    TAIL='## < EMAIL'
    notesinsert "$USER" "$PASSFILE"
  
  fi
fi # /adduser

# # # # #
# ADD ALIAS
# # # # #
if [ "$ACTION" == "addalias" ]; then
  echo "Extracting details of Email account..."
  echo
  
  DEST=$PASS
  
  if ! $(checkuser "$USER"); then
    echo "Username \"$USER\" invalid"
    exit 1
  fi
  
  if $(userexists "$USER"); then
    echo "User \"$USER\" does already exist!"
    exit 1
  fi
  
  if ! $(userexists "$DEST"); then
    echo "Destination account \"$DEST\" does not exist!"
    exit 1
  fi
  
  vaddalias $USER $DEST
  
fi # /addalias

# # # # #
# CHANGE PASSWORD
# # # # #
if [ "$ACTION" == "changepw" ]; then
  echo "Changing password of Email account..."
  echo
  
  if ! $(userexists "$USER"); then
    echo "User \"$USER\" does not exist!"
    exit 1
  fi
  
  if ! $(checkpass "$PASSFILE"); then
    echo "Password \""$(cat $PASSFILE)"\" invalid"
    exit 1
  fi
  
  python changepw.py "$USER" "$PASSFILE"
  
  if [ $? == 0 ]; then
    # Send infomail
    $MAILTYPE "Email password changed" \
             "An Email account password has been changed." \
             "User: $USER"

    # Update datasheet (delete entry in Email section and add a new one with the new password)
    # In fact a combination of deluser and adduser
    LEAD='## > EMAIL'
    TAIL='## < EMAIL'
    
    notesdelete "$USER" 
    notesinsert "$USER" "$PASSFILE"
    
  fi
fi # /changepw

# # # # #
# LIST USERS
# # # # #
if [ "$ACTION" == "listusers" ]; then
  echo "Listing all Email accounts..."
  echo
  
  listvdomain | column -s $' ' -t
  
fi # /listusers

# # # # #
# SIZE ALL USERS
# # # # #
if [ "$ACTION" == "sizeall" ]; then
  echo "Calculate total size of all Email accounts..."
  echo
  
  du -sBM ~/users/* | sed -e "s:/home/$SYSUSER/users/::g"
  
fi # /sizeall

# # # # #
# VIEW DATASHEET
# # # # #
if [ "$ACTION" == "viewdata" ]; then
  echo "Extracting data sheet..."
  echo
  
  cat $NOTES
  
fi # /viewdata

# # # # #
# SIZE USER
# # # # #
if [ "$ACTION" == "sizeuser" ]; then
  echo "Calculate size of all folders of an Email account..."
  echo
  
  # Show size in MB, strip long paths, strip tmp and new folders, rename .INBOX cur-folder
  du -BM ~/users/"$USER" | sed -e "s:/home/$SYSUSER/users/$USER/::g" | grep -v "/cur$\|new$\|tmp$" | sed "s:cur$:.INBOX:" | grep -v "/home/$SYSUSER/users/$USER" | sort -nr
  
fi # /sizeuser

# # # # #
# USER DETAIL
# # # # #
if [ "$ACTION" == "userdetail" ]; then
  echo "Extracting details of Email account..."
  echo
  
  if ! $(userexists "$USER"); then
    echo "User \"$USER\" does not exist!"
    exit 1
  fi
  
  dumpvuser "$USER" | column -s $' ' -t
  
fi # /userdetail

# # # # #
# QUOTA
# # # # #
if [ "$ACTION" == "quota" ]; then
  echo "Calculating account disk usage..."
  echo
  
  USAGE=$(quota -gsl | tail -n 1 | awk -F" " '{ print $2 }')
  QUOTA=$(quota -gsl | tail -n 1 | awk -F" " '{ print $3 }' | sed 's/[A-Za-z]//g')
  
  # If smaller than 1M, set usage to 1M to avoid miscalcuations
  if [ $(echo $USAGE | grep -q "[A-Za-z]$" ; echo $?) != 0 ]; then
    USAGE="1"
  else
    USAGE=$(echo $USAGE | sed 's/[A-Za-z]//g')
  fi
  
  PERC=$(echo "scale=2; $USAGE/$QUOTA" | bc)
  PERC=$(echo "scale=2; $PERC*100" | bc)
  
  echo "$USAGE MB of $QUOTA MB are used ($PERC %)."
  
  PERC=$(echo "scale=2; 100 - $PERC" | bc)
  
  echo "You have "$[$QUOTA - $USAGE]" MB free ($PERC %)."
  
fi # /quota

# # # # #
# DELETE USER
# # # # #
if [ "$ACTION" == "deluser" ]; then
  echo "Extracting details of Email account..."
  echo
  
  if ! $(userexists "$USER"); then
    echo "User \"$USER\" does not exist!"
    exit 1
  fi
  
  vdeluser "$USER"
  
  if [ $? == 0 ]; then
    # Send infomail
    $MAILTYPE "Email account deleted" \
             "An Email account has been deleted." \
             "User: $USER"
    
    # Update datasheet (delete entry in Email section)
    LEAD='## > EMAIL'
    TAIL='## < EMAIL'
    
    notesdelete "$USER" 
  
  fi
fi # /deluser

# # # # #
# INSTALL WORDPRESS
# # # # #
if [ "$ACTION" == "installwp" ]; then
  echo "Installing WordPress..."
  echo
  
  # $USER: Username for Wordpress
  # $PASS: Email address for Wordpress user
  
  if ! $(checkuser "$USER"); then
    echo "Username \"$USER\" invalid"
    exit 1
  fi
  
  WEBDIR=$HOME/html
  WPUSER=$USER
  WPPASS=$(apg -n 1 -M NCL -m 14)
  WPMAIL=$PASS
  WPDOMAIN=http://$DOMAIN

  # Get MySQL password
  LEAD='## > MYSQL'
  TAIL='## < MYSQL'
  MYSQLUSER=$SYSUSER
  MYSQLDB=${MYSQLUSER}_wp
  MYSQLPASS=$(sed -n "/$LEAD/,/$TAIL/ p" $NOTES | grep "^Pass:" | awk -F" " '{ print $2 }')

  # Check if ready for install: WEBDIR empty, Database available
  if [ $(ls -a $WEBDIR | wc -l) -gt 2 ]; then
    echo "The website directory \"$WEBDIR\" doesn't seem to be empty."
    exit 1
  fi
  if [ $(mysql -e "SHOW DATABASES;" | tr -d "| " | grep -v Database | grep "^$$WPDB$" ; echo $?) = 0 ]; then
    echo "The default database \"${USER}_wp\" already exists."
    exit 1
  fi
  
  # Downloading wordpress
  wget $WPDL
  unzip $(basename $WPDL)
  mv wordpress/* $WEBDIR
  rm -r wordpress $(basename $WPDL)

  # Downloading wp-cli
  curl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar
  chmod +x wp-cli.phar
  mv wp-cli.phar $HOME/bin/wp-cli

  # Create database
  mysql -e "CREATE DATABASE $MYSQLDB;"
  
  # Use wp-cli to create config.php and install WP
  wp-cli core config --dbname=${MYSQLDB} --dbpass=${MYSQLPASS} --dbuser=${MYSQLUSER} --path=${WEBDIR}
  wp-cli core install --url="$WPDOMAIN" --title="CHANGE THIS TITLE" --admin_user=${WPUSER} --admin_password=${WPPASS} --admin_email=${WPMAIL} --path=${WEBDIR}

  # Update datasheet
  TAIL='## < WORDPRESS'
  sed -i "/$TAIL/i User:     $WPUSER\nPass:     $WPPASS\n" $NOTES
  
  echo
  echo "Wordpress successfully installed to $WPDOMAIN"
  echo "You can login on $WPDOMAIN/wp-login.php"
  echo "Please take a look into your data sheet for the login data."
  
fi # /installwp

# # # # #
# REMOVE WORDPRESS
# # # # #
if [ "$ACTION" == "uninstallwp" ]; then
  echo "Uninstalling WordPress..."
  echo
  
  # $USER: Username for Wordpress
  # $PASS: Email address for Wordpress user
  
  WEBDIR=$HOME/html

  MYSQLUSER=$SYSUSER
  MYSQLDB=${MYSQLUSER}_wp
  
  # Delete database and content of ~/htmp
  mysql -e "DROP DATABASE ${MYSQLDB};"
  rm -rf $WEBDIR/*
  rm -rf $WEBDIR/.*

  # Update datasheet
  LEAD='## > WORDPRESS'
  TAIL='## < WORDPRESS'
  
  notesdelete ".*"
  
  echo
  echo "Wordpress successfully uninstalled."
  
fi # /uninstallwp