mirror of
https://github.com/YunoHost-Apps/restic_ynh.git
synced 2024-09-03 20:16:22 +02:00
161 lines
6.2 KiB
Bash
Executable file
161 lines
6.2 KiB
Bash
Executable file
#!/bin/bash
|
|
|
|
#=================================================
|
|
# GENERIC START
|
|
#=================================================
|
|
# IMPORT GENERIC HELPERS
|
|
#=================================================
|
|
|
|
source _common.sh
|
|
source /usr/share/yunohost/helpers
|
|
|
|
#=================================================
|
|
# MANAGE SCRIPT FAILURE
|
|
#=================================================
|
|
|
|
# Exit if an error occurs during the execution of the script
|
|
ynh_abort_if_errors
|
|
|
|
#=================================================
|
|
# RETRIEVE ARGUMENTS FROM THE MANIFEST
|
|
#=================================================
|
|
export app=$YNH_APP_INSTANCE_NAME
|
|
export final_path="/opt/yunohost/${app}"
|
|
|
|
# Retrieve arguments
|
|
ynh_export server port ssh_user backup_path passphrase on_calendar check_on_calendar check_read_data_on_calendar conf data apps allow_extra_space_use
|
|
|
|
#=================================================
|
|
# STORE SETTINGS FROM MANIFEST
|
|
#=================================================
|
|
ynh_save_args server port ssh_user backup_path passphrase on_calendar check_on_calendar check_read_data_on_calendar conf data apps allow_extra_space_use
|
|
|
|
#=================================================
|
|
# INSTALL RESTIC
|
|
#=================================================
|
|
ynh_script_progression --message="Installing restic binary" --weight=7
|
|
install_restic
|
|
|
|
#=================================================
|
|
# CREATE APP USER
|
|
#=================================================
|
|
ynh_script_progression --message="Creating user ${app}"
|
|
useradd -m ${app}
|
|
ynh_script_progression --message="Configure ${app} user sudoer rights"
|
|
cat > /tmp/${app}_sudoer << EOSUDOER
|
|
${app} ALL = (root) NOPASSWD: /usr/bin/yunohost*, /bin/journalctl*
|
|
EOSUDOER
|
|
visudo -cf /tmp/${app}_sudoer && mv /tmp/${app}_sudoer /etc/sudoers.d/${app}
|
|
|
|
#=================================================
|
|
# ACTIVATE BACKUP METHODS
|
|
#=================================================
|
|
ynh_script_progression --message="Activating backup methods"
|
|
mkdir -p /etc/yunohost/hooks.d/backup_method
|
|
mkdir -p /usr/share/yunohost/backup_method
|
|
|
|
#=================================================
|
|
# SETUP THE BACKUP METHOD
|
|
#=================================================
|
|
ynh_script_progression --message="Setting up backup methods"
|
|
ynh_configure backup_method "/etc/yunohost/hooks.d/backup_method/05-${app}_app"
|
|
ynh_configure check_method "${final_path}/check_method_${app}"
|
|
|
|
#=================================================
|
|
# SETUP LOG SCRIPT
|
|
#=================================================
|
|
ynh_script_progression --message="Setting up log script"
|
|
ynh_configure restic_log "${final_path}/restic_log_${app}"
|
|
chmod u+x "${final_path}/restic_log_${app}"
|
|
chown ${app}: "${final_path}/restic_log_${app}"
|
|
|
|
#=================================================
|
|
# CONFIGURE CRON
|
|
#=================================================
|
|
ynh_script_progression --message="Configuring cron" --weight=5
|
|
ynh_configure backup-with-restic "/usr/local/bin/backup-with-${app}"
|
|
ynh_configure check-restic "${final_path}/check-${app}"
|
|
chmod u+x "/usr/local/bin/backup-with-${app}"
|
|
chown ${app}: "/usr/local/bin/backup-with-${app}"
|
|
chmod u+x "${final_path}/check-${app}"
|
|
chmod u+x "${final_path}/check_method_${app}"
|
|
ynh_add_systemd_config --service=${app} --template=systemd.service
|
|
ynh_add_systemd_config --service=${app}_check --template=systemd_check.service
|
|
ynh_add_systemd_config --service=${app}_check_read_data --template=systemd_check_read_data.service
|
|
ynh_configure systemd.timer "/etc/systemd/system/${app}.timer"
|
|
ynh_configure systemd_check.timer "/etc/systemd/system/${app}_check.timer"
|
|
ynh_configure systemd_check_read_data.timer "/etc/systemd/system/${app}_check_read_data.timer"
|
|
systemctl disable --quiet ${app}.service
|
|
systemctl disable --quiet ${app}_check.service
|
|
systemctl disable --quiet ${app}_check_read_data.service
|
|
systemctl enable --quiet ${app}.timer
|
|
systemctl enable --quiet ${app}_check.timer
|
|
systemctl enable --quiet ${app}_check_read_data.timer
|
|
systemctl start ${app}.timer
|
|
systemctl start ${app}_check.timer
|
|
systemctl start ${app}_check_read_data.timer
|
|
|
|
#=================================================
|
|
# SET PERMISSIONS ON FINAL PATH
|
|
#=================================================
|
|
ynh_script_progression --message="Set permissions on ${final_path}"
|
|
chown -R ${app}: ${final_path}
|
|
|
|
#=================================================
|
|
# GENERATE SSH KEY
|
|
#=================================================
|
|
ynh_script_progression --message="Generating private key"
|
|
ssh_dir="/root/.ssh"
|
|
if [ ! -d "${ssh_dir}" ];then
|
|
mkdir -p "${ssh_dir}"
|
|
fi
|
|
private_key="${ssh_dir}/id_${app}_ed25519"
|
|
test -f $private_key || ssh-keygen -q -t ed25519 -N "" -f $private_key
|
|
|
|
#=================================================
|
|
# GENERATE SSH CONFIG
|
|
#=================================================
|
|
ynh_script_progression --message="Generating ssh config for ${app} server ${server}"
|
|
grep -q "${app}" ${ssh_dir}/config 2>/dev/null || cat << EOCONF >> ${ssh_dir}/config
|
|
# begin $app ssh config
|
|
Host ${server}
|
|
Hostname ${server}
|
|
Port ${port}
|
|
User ${ssh_user}
|
|
IdentityFile ${private_key}
|
|
StrictHostKeyChecking no
|
|
UserKnownHostsFile /dev/null
|
|
# end $app ssh config
|
|
EOCONF
|
|
|
|
#=================================================
|
|
# Display key
|
|
#=================================================
|
|
|
|
ynh_script_progression --message="You should now allow the following public key for user ${ssh_user} on server ${server}:
|
|
$(cat ${private_key}.pub)"
|
|
|
|
|
|
#=================================================
|
|
# SEND A README FOR THE ADMIN
|
|
#=================================================
|
|
ynh_script_progression --message="Sending post-installation instructions to admin" --last
|
|
ynh_print_OFF
|
|
message="You should now allow the following public key for user ${ssh_user} on server ${server}:
|
|
$(cat ${private_key}.pub)
|
|
|
|
Do so by running those commands on ${server} with user ${ssh_user}:
|
|
|
|
mkdir ~/.ssh 2>/dev/null
|
|
touch ~/.ssh/authorized_keys
|
|
chmod u=rw,go= ~/.ssh/authorized_keys
|
|
cat << EOPKEY >> ~/.ssh/authorized_keys
|
|
$(cat ${private_key}.pub)
|
|
EOPKEY
|
|
|
|
$(if [ "$backup_path" != "./" ];then echo "Also make sure ${backup_path} exists and is writable by ${ssh_user}";fi)
|
|
|
|
If you're facing an issue or want to improve this app, please open a new issue in this project: https://github.com/YunoHost-Apps/restic_ynh"
|
|
|
|
ynh_send_readme_to_admin "$message" "root"
|
|
ynh_print_ON
|