provision-webmail.sh

#!/bin/sh

# shellcheck disable=1091
. mail-toaster.sh || exit

# shellcheck disable=2016
export JAIL_CONF_EXTRA="
		mount += \"$ZFS_DATA_MNT/webmail \$path/data nullfs rw 0 0\";"

install_php()
{
	tell_status "installing PHP"
	stage_pkg_install php56 php56-fileinfo php56-mcrypt php56-exif php56-openssl

	local _php_ini="$STAGE_MNT/usr/local/etc/php.ini"
	cp "$STAGE_MNT/usr/local/etc/php.ini-production" "$_php_ini" || exit
	sed -i .bak \
		-e 's/^;date.timezone =/date.timezone = America\/Los_Angeles/' \
		-e '/^post_max_size/ s/8M/25M/' \
		-e '/^upload_max_filesize/ s/2M/25M/' \
		"$_php_ini"
}

install_roundcube_mysql()
{
	local _init_db=0
	if ! mysql_db_exists roundcubemail; then
		tell_status "creating roundcube mysql db"
		echo "CREATE DATABASE roundcubemail;" | jexec mysql /usr/local/bin/mysql || exit
		_init_db=1
	fi

	local _active_cfg="$ZFS_JAIL_MNT/webmail/usr/local/www/roundcube/config/config.inc.php"
	if [ -f "$_active_cfg" ]; then
		local _rcpass
		# shellcheck disable=2086
		_rcpass=$(grep '//roundcube:' $_active_cfg | cut -f3 -d: | cut -f1 -d@)
		if [ -n "$_rcpass" ] && [ "$_rcpass" != "pass" ]; then
			echo "preserving roundcube password $_rcpass"
		fi
	else
		_rcpass=$(openssl rand -hex 18)
	fi

	local _rcc_dir="$STAGE_MNT/usr/local/www/roundcube/config"
	sed -i .bak \
		-e "s/roundcube:pass@/roundcube:${_rcpass}@/" \
		-e "s/@localhost\//@$(get_jail_ip mysql)\//" \
		"$_rcc_dir/config.inc.php" || exit

	if [ "$_init_db" = "1" ]; then
		tell_status "configuring roundcube mysql permissions"
		local _grant='GRANT ALL PRIVILEGES ON roundcubemail.* to'

		echo "$_grant 'roundcube'@'$(get_jail_ip webmail)' IDENTIFIED BY '${_rcpass}';" \
			| jexec mysql /usr/local/bin/mysql || exit

		echo "$_grant 'roundcube'@'$(get_jail_ip stage)' IDENTIFIED BY '${_rcpass}';" \
			| jexec mysql /usr/local/bin/mysql || exit

		roundcube_init_db
	fi
}

roundcube_init_db()
{
	tell_status "initializating roundcube db"
	pkg install -y curl || exit
	stage_exec service php-fpm restart
	curl -i -F initdb='Initialize database' -XPOST \
		"http://$(get_jail_ip stage)/roundcube/installer/index.php?_step=3" || exit
}

install_roundcube()
{
	tell_status "installing roundcube"
	stage_pkg_install roundcube

	# for sqlite storage
	mkdir -p "$STAGE_MNT/data/roundcube"
	chown 80:80 "$STAGE_MNT/data/roundcube"

	local _rcc_conf="$STAGE_MNT/usr/local/www/roundcube/config/config.inc.php"
	cp "$_rcc_conf.sample" "$_rcc_conf" || exit

	local _dovecot_ip; _dovecot_ip=$(get_jail_ip dovecot)
	sed -i .bak \
		-e "/'default_host'/ s/'localhost'/'$_dovecot_ip'/" \
		-e "/'smtp_server'/  s/'';/'tls:\/\/haraka';/" \
		-e "/'smtp_port'/    s/25;/587;/" \
		-e "/'smtp_user'/    s/'';/'%u';/" \
		-e "/'smtp_pass'/    s/'';/'%p';/" \
		"$_rcc_conf"

	tee -a "$_rcc_conf" <<'EO_RC_ADD'

$config['log_driver'] = 'syslog';
$config['session_lifetime'] = 30;
$config['enable_installer'] = true;
$config['mime_types'] = '/usr/local/etc/mime.types';
$config['smtp_conn_options'] = array(
 'ssl'            => array(
   'verify_peer'  => false,
   'verify_peer_name' => false,
   'verify_depth' => 3,
   'cafile'       => '/etc/ssl/cert.pem',
 ),
);
EO_RC_ADD

	if [ "$TOASTER_MYSQL" = "1" ]; then
		install_roundcube_mysql
	else
		sed -i -e "/^\$config\['db_dsnw'/ s/= .*/= 'sqlite:\/\/\/\/data\/roundcube\/sqlite.db?mode=0646'/" "$_rcc_conf"
		if [ ! -f "/data/roundcube/sqlite.db" ]; then
			roundcube_init_db
		fi
	fi

	sed -i -e "s/enable_installer'] = true;/enable_installer'] = false;/" "$_rcc_conf"
}

install_squirrelmail_mysql()
{
	if [ "$TOASTER_MYSQL" != "1" ]; then return; fi

	local _init_db=0
	if ! mysql_db_exists squirrelmail; then
		tell_status "creating squirrelmail database"
		echo "CREATE DATABASE squirrelmail;" | jexec mysql /usr/local/bin/mysql || exit
		echo "
CREATE TABLE address (
  owner varchar(128) DEFAULT '' NOT NULL,
  nickname varchar(16) DEFAULT '' NOT NULL,
  firstname varchar(128) DEFAULT '' NOT NULL,
  lastname varchar(128) DEFAULT '' NOT NULL,
  email varchar(128) DEFAULT '' NOT NULL,
  label varchar(255),
  PRIMARY KEY (owner,nickname),
  KEY firstname (firstname,lastname)
);

CREATE TABLE global_abook (
  owner varchar(128) DEFAULT '' NOT NULL,
  nickname varchar(16) DEFAULT '' NOT NULL,
  firstname varchar(128) DEFAULT '' NOT NULL,
  lastname varchar(128) DEFAULT '' NOT NULL,
  email varchar(128) DEFAULT '' NOT NULL,
  label varchar(255),
  PRIMARY KEY (owner,nickname),
  KEY firstname (firstname,lastname)
);

CREATE TABLE userprefs (
  user varchar(128) DEFAULT '' NOT NULL,
  prefkey varchar(64) DEFAULT '' NOT NULL,
  prefval BLOB NOT NULL,
  PRIMARY KEY (user,prefkey)
);" | jexec mysql /usr/local/bin/mysql squirrelmail || exit

	fi

	tee -a "$_sq_dir/config_local.php" <<EO_SQUIRREL_SQL
\$prefs_dsn = 'mysql://squirrelmail:${_sqpass}@$(get_jail_ip mysql)/squirrelmail';
\$addrbook_dsn = 'mysql://squirrelmail:${_sqpass}@$(get_jail_ip mysql)/squirrelmail';
EO_SQUIRREL_SQL

	local _grant='GRANT ALL PRIVILEGES ON squirrelmail.* to'

	echo "$_grant 'squirrelmail'@'$(get_jail_ip webmail)' IDENTIFIED BY '${_sqpass}';" \
		| jexec mysql /usr/local/bin/mysql || exit

	echo "$_grant 'squirrelmail'@'$(get_jail_ip stage)' IDENTIFIED BY '${_sqpass}';" \
		| jexec mysql /usr/local/bin/mysql || exit
}

install_squirrelmail()
{
	tell_status "installing squirrelmail"
	stage_pkg_install squirrelmail squirrelmail-sasql-plugin \
		squirrelmail-quota_usage-plugin || exit

	_sq_dir="$STAGE_MNT/usr/local/www/squirrelmail/config"

	local _active_cfg; _active_cfg="$_sq_dir/config.inc.php"
	if [ -f "$_active_cfg" ]; then
		_sqpass=$(grep '//squirrelmail:' "$_active_cfg" | cut -f3 -d: | cut -f1 -d@)
		echo "preserving existing squirrelmail mysql password: $_sqpass"
	else
		_sqpass=$(openssl rand -hex 18)
	fi

	cp "$_sq_dir/config_local.php.sample" "$_sq_dir/config_local.php"
	cp "$_sq_dir/config_default.php" "$_sq_dir/config.php"
	cp "$_sq_dir/../plugins/sasql/sasql_conf.php.dist" \
	   "$_sq_dir/../plugins/sasql/sasql_conf.php"
	cp "$_sq_dir/../plugins/quota_usage/config.php.sample" \
	   "$_sq_dir/../plugins/quota_usage/config.php"

	tee -a "$_sq_dir/config_local.php" <<EO_SQUIRREL
\$signout_page = 'https://$TOASTER_HOSTNAME/';
\$domain = '$TOASTER_MAIL_DOMAIN';

\$smtpServerAddress = '$(get_jail_ip haraka)';
\$smtpPort = 465;
\$use_smtp_tls = true;
// PHP 5.6 enables verify_peer by default, which is good but in this context,
// unnecessary. Setting smtp_stream_options *should* disable that, but doesn't.
// Leave squirrelmail disabled until squirrelmail gets this sorted out.
\$smtp_stream_options = [
    'ssl' => [
       'verify_peer'      => false,
       'verify_peer_name' => false,
       'verify_depth' => 3,
       'cafile' => '/etc/ssl/cert.pem',
       // 'allow_self_signed' => true,
    ],
];
\$smtp_auth_mech = 'login';

\$imapServerAddress = '$(get_jail_ip dovecot)';
\$imap_server_type = 'dovecot';
\$use_imap_tls     = false;

\$data_dir = '/data/squirrelmail/data';
\$attachment_dir = '/data/squirrelmail/attach';
// \$check_referrer = '$TOASTER_MAIL_DOMAIN';
\$check_mail_mechanism = 'advanced';

EO_SQUIRREL

	mkdir -p "$STAGE_MNT/data/squirrelmail/attach" "$STAGE_MNT/data/squirrelmail/data"
	cp "$_sq_dir/../data/default_pref" "$STAGE_MNT/data/squirrelmail/data/"
	chown -R www:www "$STAGE_MNT/data/squirrelmail"
	chmod 733 "$STAGE_MNT/data/squirrelmail/attach"

	install_squirrelmail_mysql
}

install_nginx()
{
	stage_pkg_install nginx dialog4ports || exit

	local _nginx_conf="$STAGE_MNT/usr/local/etc/nginx/conf.d"
	mkdir -p "$_nginx_conf" || exit

	tee "$_nginx_conf/mail-toaster.conf" <<EO_NGINX_MT6
set_real_ip_from 172.16.15.12;
real_ip_header X-Forwarded-For;
client_max_body_size 25m;

location / {
   root   /data/htdocs;
   index  index.html index.htm;
}

location ~  ^/(squirrelmail|roundcube)/(.+\.php)\$ {
    alias /usr/local/www;
    fastcgi_pass   127.0.0.1:9000;
    fastcgi_index  index.php;
    fastcgi_param  SCRIPT_FILENAME  \$document_root/\$1/\$2;
    include        fastcgi_params;
}

location /squirrelmail/ {
    root /usr/local/www/;
    index  index.php;
}

location /roundcube/ {
    root /usr/local/www/;
    index  index.php;
}
EO_NGINX_MT6

	patch -d "$STAGE_MNT/usr/local/etc/nginx" <<'EO_NGINX_CONF'
--- nginx.conf-dist	2015-11-28 23:21:55.597113000 -0800
+++ nginx.conf	2015-11-28 23:43:25.508039518 -0800
@@ -34,16 +34,13 @@
 
     server {
         listen       80;
-        server_name  localhost;
+        server_name  webmail;
 
         #charset koi8-r;
 
         #access_log  logs/host.access.log  main;
 
-        location / {
-            root   /usr/local/www/nginx;
-            index  index.html index.htm;
-        }
+        include conf.d/mail-toaster.conf;
 
         #error_page  404              /404.html;
 
EO_NGINX_CONF

	export BATCH=${BATCH:="1"}
	stage_make_conf www_nginx 'www_nginx_SET=HTTP_REALIP'
	stage_exec make -C /usr/ports/www/nginx build deinstall install clean
}

install_lighttpd()
{
	tell_status "installing lighttpd"
	stage_pkg_install lighttpd
	mkdir -p "$STAGE_MNT/var/spool/lighttpd/sockets"
	chown -R www "$STAGE_MNT/var/spool/lighttpd/sockets"

	local _lighttpd_dir="$STAGE_MNT/usr/local/etc/lighttpd"
	local _lighttpd_conf="$_lighttpd_dir/lighttpd.conf"

	# shellcheck disable=2016
	sed -i .bak \
		-e 's/server.use-ipv6 = "enable"/server.use-ipv6 = "disable"/' \
		-e 's/^\$SERVER\["socket"\]/#\$SERVER\["socket"\]/' \
		-e 's/^#include_shell "cat/include_shell "cat/' \
		-e '/^var.server_root/ s/\/usr\/local\/www\/data/\/data\/htdocs/' \
		"$_lighttpd_conf"

	tee "$_lighttpd_dir/vhosts.d/mail-toaster.conf" <<EO_LIGHTTPD_MT6
server.modules += ( "mod_alias" )

alias.url = ( "/cgi-bin/"        => "/usr/local/www/cgi-bin/",
              "/squirrelmail/"   => "/usr/local/www/squirrelmail/",
              "/roundcube/"      => "/usr/local/www/roundcube/",
              "/v-webmail/"      => "/usr/local/www/v-webmail/htdocs/",
              "/horde/"          => "/usr/local/www/horde/",
              "/awstatsclasses"  => "/usr/local/www/awstats/classes/",
              "/awstatscss"      => "/usr/local/www/awstats/css/",
              "/awstatsicons"    => "/usr/local/www/awstats/icons/",
              "/awstats/"        => "/usr/local/www/awstats/cgi-bin/",
           )

server.modules += ( "mod_cgi" )

$HTTP["url"] =~ "^/awstats/" {
   cgi.assign = ( "" => "/usr/bin/perl" )
}
$HTTP["url"] =~ "^/cgi-bin" {
   cgi.assign = ( "" => "" )
}

server.modules += ( "mod_fastcgi" )
fastcgi.server = (
                   ".php" =>
                    ( "php-tcp" =>
                      (
                        "host" => "172.16.15.10",
                        "port" => 9000,
                        "check-local" => "disable",
                        "broken-scriptfilename" => "enable",
                      )
                    )
                 )
EO_LIGHTTPD_MT6
}

install_php_mysql()
{
	if [ "$TOASTER_MYSQL" != "1" ]; then
		return
	fi

	tell_status "install php mysql module"
	stage_pkg_install php56-mysql
}

install_webmail()
{
	install_php || exit
	install_php_mysql

	tell_status "starting PHP"
	stage_sysrc php_fpm_enable=YES
	stage_exec service php-fpm start

	if [ "$WEBMAIL_HTTPD" = "lighttpd" ]; then
		install_lighttpd || exit
		tell_status "starting lighttpd"
		stage_sysrc lighttpd_enable=YES
		stage_exec service lighttpd start
	else
		install_nginx || exit
		tell_status "starting nginx"
		stage_sysrc nginx_enable=YES
		stage_exec service nginx start
	fi

	install_roundcube || exit
	install_squirrelmail || exit
}

install_index()
{
    tell_status "installing index.html"
    tee "$_htdocs/index.html" <<'EO_INDEX'
<html>
<head>
 <script src="//ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js"></script>
 <script src="//ajax.googleapis.com/ajax/libs/jqueryui/1.11.0/jquery-ui.min.js"></script>
 <link rel="stylesheet" href="//ajax.googleapis.com/ajax/libs/jqueryui/1.11.0/themes/smoothness/jquery-ui.css" />
 <script>
  var loggedIn = false;
  $(function() {
    $( "#tabs" ).tabs({ disabled: [3] });
  });
  function changeWebmail(sel) {
      if (sel.value === 'roundcube') $('#webmail-item').prop('src','/roundcube/');
      if (sel.value === 'squirrelmail') $('#webmail-item').prop('src','/squirrelmail/');
      console.log(sel);
  };
  function changeAdmin(sel) {
      if (sel.value === 'qmailadmin') $('#admin-item').prop('src','/cgi-bin/qmailadmin/qmailadmin/');
      if (sel.value === 'rspamd') $('#admin-item').prop('src','/rspamd/');
      if (sel.value === 'watch') $('#admin-item').prop('src','/watch/');
  };
  function changeStats(sel) {
      if (sel.value === 'munin') $('#stats-item').prop('src','/munin/');
      if (sel.value === 'nagios') $('#stats-item').prop('src','/nagios/');
      if (sel.value === 'watch') $('#stats-item').prop('src','/watch/');
  };
  </script>
  <style>
body {
  font-size: 9pt;
}
  </style>
</head>
<body>
<div id="tabs">
   <ul>
       <li id=tab_webmail><a href="#webmail">
           <select id="webmail-select" onChange="changeWebmail(this);">
               <option value=webmail>Webmail</option>
               <option value=roundcube>Roundcube</option>
               <option value=squirrelmail>Squirrelmail</option>
           </select>
       </a>
       </li>
       <li id=tab_admin><a href="#admin">
           <select onChange="changeAdmin(this)">
               <option value=admin>Administration</option>
               <option value=qmailadmin>Qmailadmin</option>
               <option value=rspamd>Rspamd</option>
               <option value=watch>Haraka Watch</option>
           </select>
       </a>
       </li>
       <li id=tab_stats><a href="#stats">
           <select onChange="changeStats(this)">
               <option value=statistics>Statistics</option>
               <option value=munin>Munin</option>
               <option value=nagios>Nagios</option>
               <option value=watch>Haraka</option>
           </select>
       </a>
       </li>
       <!--<li><a href="#help">Help</a> </li>-->
       <li><a href="#login">Login</a></li>
   </ul>
 <div id="webmail">
     <iframe id="webmail-item" src="" style="width: 100%; height: 100%;"></iframe>
 </div>
 <div id="admin">
     <iframe id="admin-item" src="" style="width: 100%; height: 100%;"></iframe>
 </div>
 <div id="stats">
     <iframe id="stats-item" src="" style="width: 100%; height: 100%;"></iframe>
 </div>
 <div id="login">
     <fieldset>
         <legend>Login</legend>
         <input type=text id=login placeholder="user@domain.com"></input>
         <input type=password id=password></input>
     </fieldset>
 </div>
<!-- <div id="help">
  <p>Help</p>
 </div>-->
</div>
</body>
</html>
EO_INDEX
}

configure_webmail()
{
	_htdocs="$ZFS_DATA_MNT/webmail/htdocs"
	if [ ! -d "$_htdocs" ]; then
	   mkdir -p "$_htdocs"
	fi

	if [ ! -f "$_htdocs/index.html" ]; then
		install_index
	fi

	tell_status "installing mime.types"
	fetch -o "$STAGE_MNT/usr/local/etc/mime.types" \
		http://svn.apache.org/repos/asf/httpd/httpd/trunk/docs/conf/mime.types

	if [ ! -f "$_htdocs/robots.txt" ]; then
		tell_status "installing robots.txt"
		tee "$_htdocs/robots.txt" <<EO_ROBOTS_TXT
User-agent: *
Disallow: /
EO_ROBOTS_TXT
	fi
}

start_webmail()
{
	true
}

test_webmail()
{
	tell_status "testing webmail"
	stage_exec sockstat -l -4 | grep :80 || exit
	stage_exec sockstat -l -4 | grep :9000 || exit
	echo "it worked"
}

base_snapshot_exists || exit
create_staged_fs webmail
start_staged_jail
install_webmail
configure_webmail
start_webmail
test_webmail
promote_staged_jail webmail