mirror of
https://github.com/YunoHost-Apps/teampass_ynh.git
synced 2024-09-03 20:26:37 +02:00
Reprise du package et update 2.1.26-3
This commit is contained in:
parent
77c72a45a5
commit
223629f23f
18 changed files with 584 additions and 444 deletions
1
.gitignore
vendored
1
.gitignore
vendored
|
@ -1,2 +1,3 @@
|
|||
*.swp
|
||||
*~
|
||||
Notes
|
||||
|
|
14
README.md
14
README.md
|
@ -1,6 +1,8 @@
|
|||
Teampass for YunoHost
|
||||
==================
|
||||
|
||||
**Ce package n'est pas pleinement fonctionnel. Lisez bien ce qui suit avant de l'installer...**
|
||||
|
||||
[Yunohost project](https://yunohost.org/#/)
|
||||
|
||||
Gestionnaire de mot de passe collaboratif.
|
||||
|
@ -14,7 +16,13 @@ Teampass peut-être configuré uniquement via le compte administrateur. Pour cel
|
|||
Pour utiliser la fonction de sauvegarde automatique, il est nécessaire de mettre en place un cron contenant ceci dans /etc/cron.d/teampass:
|
||||
```0 0 * * * www-data cd /var/www/teampass/backups && php script.backup.php```
|
||||
|
||||
Mise à jour du package:
|
||||
sudo yunohost app upgrade -u https://github.com/Ackak/teampass_ynh
|
||||
**Mise à jour du package:**
|
||||
sudo yunohost app upgrade teampass -u https://github.com/YunoHost-Apps/teampass_ynh
|
||||
|
||||
Multi-utilisateur: Oui, avec support ldap.
|
||||
**Multi-utilisateur:** Oui, avec support ldap.
|
||||
> *Depuis la dernière mise à jour, 2.1.26-3, le support ldap est cassé. Mais des corrections de bug justifient un changement de version.*
|
||||
*Les utilisateurs sont dans la base de données de teampass, mais le mot est généré aléatoirement et devra être réinitialisé pour chaque utilisateur souhaitant utiliser l'application*
|
||||
*Pour la première connexion, utiliser l'accès admin, avec le login 'admin' et le mot de passe renseigné à l'installation.*
|
||||
|
||||
*Bon les mails ne fonctionne pas non plus, donc impossible d'utiliser la fonction 'Mot de passe oublié'.*
|
||||
*Je pense que Teampass n'est toujours pas prêt... Le sera-t-il un jour?*
|
23
check_process
Normal file
23
check_process
Normal file
|
@ -0,0 +1,23 @@
|
|||
;; Test complet
|
||||
auto_remove=1
|
||||
; Manifest
|
||||
domain="domain.tld" (DOMAIN)
|
||||
path="/path" (PATH)
|
||||
password="pass" (PASSWORD)
|
||||
; Checks
|
||||
pkg_linter=1
|
||||
setup_sub_dir=1
|
||||
setup_root=1
|
||||
setup_nourl=0
|
||||
setup_private=0
|
||||
setup_public=0
|
||||
upgrade=1
|
||||
backup_restore=1
|
||||
multi_instance=0
|
||||
wrong_user=0
|
||||
wrong_path=1
|
||||
incorrect_path=1
|
||||
corrupt_source=0
|
||||
fail_download_source=0
|
||||
port_already_use=0
|
||||
final_path_already_use=0
|
|
@ -1,19 +1,21 @@
|
|||
location __PATHTOCHANGE__ {
|
||||
location __PATH__ {
|
||||
alias __FINALPATH__/;
|
||||
|
||||
alias __WWWPATH__ ;
|
||||
if ($scheme = http) {
|
||||
rewrite ^ https://$server_name$request_uri? permanent;
|
||||
}
|
||||
index index.html index.php ;
|
||||
try_files $uri $uri/ index.php;
|
||||
location ~ [^/]\.php(/|$) {
|
||||
fastcgi_split_path_info ^(.+?\.php)(/.*)$;
|
||||
fastcgi_pass unix:/var/run/php5-fpm-__NAMETOCHANGE__.sock;
|
||||
fastcgi_index index.php;
|
||||
include fastcgi_params;
|
||||
fastcgi_param REMOTE_USER $remote_user;
|
||||
fastcgi_param PATH_INFO $fastcgi_path_info;
|
||||
fastcgi_param SCRIPT_FILENAME $request_filename;
|
||||
}
|
||||
|
||||
index index.html index.php ;
|
||||
try_files $uri $uri/ index.php;
|
||||
location ~ [^/]\.php(/|$) {
|
||||
fastcgi_split_path_info ^(.+?\.php)(/.*)$;
|
||||
fastcgi_pass unix:/var/run/php5-fpm-__NAMETOCHANGE__.sock;
|
||||
fastcgi_index index.php;
|
||||
include fastcgi_params;
|
||||
fastcgi_param REMOTE_USER $remote_user;
|
||||
fastcgi_param PATH_INFO $fastcgi_path_info;
|
||||
fastcgi_param SCRIPT_FILENAME $request_filename;
|
||||
}
|
||||
|
||||
# Include SSOWAT user panel.
|
||||
include conf.d/yunohost_panel.conf.inc;
|
||||
# Include SSOWAT user panel.
|
||||
include conf.d/yunohost_panel.conf.inc;
|
||||
}
|
||||
|
|
|
@ -19,8 +19,8 @@
|
|||
; Unix user/group of processes
|
||||
; Note: The user is mandatory. If the group is not set, the default user's group
|
||||
; will be used.
|
||||
user = www-data
|
||||
group = www-data
|
||||
user = __USER__
|
||||
group = __USER__
|
||||
|
||||
; The address on which to accept FastCGI requests.
|
||||
; Valid syntaxes are:
|
||||
|
@ -315,7 +315,7 @@ request_slowlog_timeout = 5s
|
|||
; does not stop script execution for some reason. A value of '0' means 'off'.
|
||||
; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
|
||||
; Default Value: 0
|
||||
request_terminate_timeout = 10m
|
||||
request_terminate_timeout = 1d
|
||||
|
||||
; Set open file descriptor rlimit.
|
||||
; Default Value: system defined value
|
||||
|
|
|
@ -1,38 +1,44 @@
|
|||
-- Infos à charger en base de donnée tirée du fichier install/install.queries.php. A partir de ligne 220
|
||||
-- Infos à charger en base de donnée tirée du fichier install/install.queries.php. A partir de la ligne 248
|
||||
|
||||
ALTER DATABASE `teampass` DEFAULT CHARACTER SET utf8 COLLATE utf8_general_ci;
|
||||
|
||||
USE `teampass`;
|
||||
|
||||
CREATE TABLE IF NOT EXISTS `teampass_items` (
|
||||
`id` int(12) NOT NULL,
|
||||
`label` varchar(100) NOT NULL,
|
||||
`description` text NOT NULL,
|
||||
`pw` text,
|
||||
`pw_iv` text NOT NULL,
|
||||
`pw_len` int(5) NOT NULL,
|
||||
`url` varchar(250) DEFAULT NULL,
|
||||
`id` int(12) NOT null AUTO_INCREMENT,
|
||||
`label` varchar(500) NOT NULL,
|
||||
`description` text DEFAULT NULL,
|
||||
`pw` text DEFAULT NULL,
|
||||
`pw_iv` text DEFAULT NULL,
|
||||
`pw_len` int(5) NOT NULL DEFAULT '0',
|
||||
`url` varchar(500) DEFAULT NULL,
|
||||
`id_tree` varchar(10) DEFAULT NULL,
|
||||
`perso` tinyint(1) NOT NULL DEFAULT '0',
|
||||
`perso` tinyint(1) NOT null DEFAULT '0',
|
||||
`login` varchar(200) DEFAULT NULL,
|
||||
`inactif` tinyint(1) NOT NULL DEFAULT '0',
|
||||
`restricted_to` varchar(200) NOT NULL,
|
||||
`anyone_can_modify` tinyint(1) NOT NULL DEFAULT '0',
|
||||
`inactif` tinyint(1) NOT null DEFAULT '0',
|
||||
`restricted_to` varchar(200) DEFAULT NULL,
|
||||
`anyone_can_modify` tinyint(1) NOT null DEFAULT '0',
|
||||
`email` varchar(100) DEFAULT NULL,
|
||||
`notification` varchar(250) DEFAULT NULL,
|
||||
`viewed_no` int(12) NOT NULL DEFAULT '0',
|
||||
`complexity_level` varchar(2) NOT NULL DEFAULT '-1'
|
||||
`viewed_no` int(12) NOT null DEFAULT '0',
|
||||
`complexity_level` varchar(3) NOT null DEFAULT '-1',
|
||||
`auto_update_pwd_frequency` tinyint(2) NOT null DEFAULT '0',
|
||||
`auto_update_pwd_next_date` int(15) NOT null DEFAULT '0',
|
||||
PRIMARY KEY (`id`),
|
||||
KEY `restricted_inactif_idx` (`restricted_to`,`inactif`)
|
||||
) CHARSET=utf8;
|
||||
|
||||
CREATE TABLE IF NOT EXISTS `teampass_log_items` (
|
||||
`id_item` int(8) NOT NULL,
|
||||
`date` varchar(50) NOT NULL,
|
||||
`id_user` int(8) DEFAULT NULL,
|
||||
`action` varchar(250) DEFAULT NULL,
|
||||
`raison` text,
|
||||
`raison_iv` text
|
||||
`id_user` int(8) NOT NULL,
|
||||
`action` varchar(250) NULL,
|
||||
`raison` text NULL,
|
||||
`raison_iv` text NULL
|
||||
) CHARSET=utf8;
|
||||
|
||||
CREATE INDEX `teampass_log_items_id_item_IDX` ON `teampass_log_items` (`id_item`,`date`);
|
||||
|
||||
CREATE TABLE IF NOT EXISTS `teampass_misc` (
|
||||
`type` varchar(50) NOT NULL,
|
||||
`intitule` varchar(100) NOT NULL,
|
||||
|
@ -40,33 +46,34 @@ CREATE TABLE IF NOT EXISTS `teampass_misc` (
|
|||
) CHARSET=utf8;
|
||||
|
||||
INSERT INTO `teampass_misc` (`type`, `intitule`, `valeur`) VALUES
|
||||
('admin', 'max_latest_items', '10'),
|
||||
('admin', 'enable_favourites', '1'),
|
||||
('admin', 'show_last_items', '1'),
|
||||
('admin', 'enable_pf_feature', '1'),
|
||||
('admin', 'log_connections', '0'),
|
||||
('admin', 'log_accessed', '0'),
|
||||
('admin', 'time_format', 'H:i:s'),
|
||||
('admin', 'date_format', 'd/m/Y'),
|
||||
('admin', 'duplicate_folder', '0'),
|
||||
('admin', 'item_duplicate_in_same_folder', '0'),
|
||||
('admin', 'duplicate_item', '0'),
|
||||
('admin', 'number_of_used_pw', '3'),
|
||||
('admin', 'manager_edit', '1'),
|
||||
('admin', 'cpassman_dir', '__FINALPATH__'),
|
||||
('admin', 'cpassman_url', 'https://__DOMAIN____PATH__'),
|
||||
('admin', 'favicon', 'https://__DOMAIN____PATH__/favico.ico'),
|
||||
('admin', 'path_to_upload_folder', '__FINALPATH__/upload'),
|
||||
('admin', 'url_to_upload_folder', 'https://__DOMAIN____PATH__/upload'),
|
||||
('admin', 'path_to_files_folder', '__FINALPATH__/files'),
|
||||
('admin', 'url_to_files_folder', 'https://__DOMAIN____PATH__/files'),
|
||||
('admin', 'activate_expiration', '0'),
|
||||
('admin','max_latest_items', '10'),
|
||||
('admin','enable_favourites', '1'),
|
||||
('admin','show_last_items', '1'),
|
||||
('admin','enable_pf_feature', '1'),
|
||||
('admin','log_connections', '0'),
|
||||
('admin','log_accessed', '0'),
|
||||
('admin','time_format', 'H:i:s'),
|
||||
('admin','date_format', 'd/m/Y'),
|
||||
('admin','duplicate_folder', '0'),
|
||||
('admin','item_duplicate_in_same_folder', '0'),
|
||||
('admin','duplicate_item', '0'),
|
||||
('admin','number_of_used_pw', '3'),
|
||||
('admin','manager_edit', '1'),
|
||||
('admin','cpassman_dir', '__FINALPATH__'),
|
||||
('admin','cpassman_url', 'https://__DOMAIN____PATH__'),
|
||||
('admin','favicon', 'https://__DOMAIN____PATH__/favico.ico'),
|
||||
('admin','path_to_upload_folder', '__FINALPATH__/upload'),
|
||||
('admin','url_to_upload_folder', 'https://__DOMAIN____PATH__/upload'),
|
||||
('admin','path_to_files_folder', '__FINALPATH__/files'),
|
||||
('admin','url_to_files_folder', 'https://__DOMAIN____PATH__/files'),
|
||||
('admin','activate_expiration', '0'),
|
||||
('admin','pw_life_duration','0'),
|
||||
('admin','maintenance_mode','0'),
|
||||
('admin','enable_sts','0'),
|
||||
('admin','encryptClientServer','1'),
|
||||
('admin','cpassman_version','__VERSION__'),
|
||||
('admin','ldap_mode','1'),
|
||||
-- ('admin','ldap_mode','1'), -- ldap est cassé sur la version 2.1.26-3
|
||||
('admin','ldap_mode','0'),
|
||||
('admin','ldap_type','posix-search'),
|
||||
('admin','ldap_suffix','0'),
|
||||
('admin','ldap_domain_dn','0'),
|
||||
|
@ -108,12 +115,12 @@ INSERT INTO `teampass_misc` (`type`, `intitule`, `valeur`) VALUES
|
|||
('admin','email_auth_username', ''),
|
||||
('admin','email_auth_pwd', ''),
|
||||
('admin','email_port', '465'),
|
||||
('admin','email_security', 'ssl'),
|
||||
('admin','email_security', 'tls'),
|
||||
('admin','email_server_url', 'https://__DOMAIN____PATH__'),
|
||||
('admin','email_from', 'admin@__DOMAIN__'),
|
||||
('admin','email_from', 'root@__DOMAIN__'),
|
||||
('admin','email_from_name', 'Teampass'),
|
||||
('admin','pwd_maximum_length', '100'),
|
||||
('admin','2factors_authentication', '0'),
|
||||
('admin','google_authentication', '0'),
|
||||
('admin','delay_item_edition', '0'),
|
||||
('admin','allow_import','1'),
|
||||
('admin','proxy_ip',''),
|
||||
|
@ -134,17 +141,22 @@ INSERT INTO `teampass_misc` (`type`, `intitule`, `valeur`) VALUES
|
|||
('admin','show_only_accessible_folders','1'),
|
||||
('admin','enable_suggestion','0'),
|
||||
('admin','otv_expiration_period','7'),
|
||||
('admin', 'timezone', '__TIMEZONE__'),
|
||||
('admin', 'can_create_root_folder', '1'),
|
||||
('admin', 'settings_offline_mode', '1'),
|
||||
('admin', 'offline_key_level', '50'),
|
||||
-- ('admin', 'timezone', '__TIMEZONE__'),
|
||||
-- ('admin', 'can_create_root_folder', '1'),
|
||||
-- ('admin', 'settings_offline_mode', '1'),
|
||||
-- ('admin', 'offline_key_level', '50'),
|
||||
('admin','default_session_expiration_time','60'),
|
||||
('admin','bck_script_path','__FINALPATH__/backups/'),
|
||||
('complex','1','0'),
|
||||
('admin', 'menu_type', 'context'),
|
||||
-- ('complex','1','0'),
|
||||
-- ('admin', 'menu_type', 'context'),
|
||||
('admin', 'duo', '0'),
|
||||
('update', 'encrypt_pw_in_log_items', '1');
|
||||
|
||||
-- ('update', 'encrypt_pw_in_log_items', '1');
|
||||
('admin','enable_server_password_change','0'),
|
||||
('admin','ldap_object_class','0'),
|
||||
('admin','bck_script_filename', 'bck_cpassman'),
|
||||
('admin','syslog_enable','0'),
|
||||
('admin','syslog_host','localhost'),
|
||||
('admin','syslog_port','514');
|
||||
|
||||
CREATE TABLE IF NOT EXISTS `teampass_nested_tree` (
|
||||
`id` bigint(20) unsigned NOT null AUTO_INCREMENT,
|
||||
|
@ -179,20 +191,20 @@ CREATE TABLE IF NOT EXISTS `teampass_rights` (
|
|||
CREATE TABLE IF NOT EXISTS `teampass_users` (
|
||||
`id` int(12) NOT null AUTO_INCREMENT,
|
||||
`login` varchar(50) NOT NULL,
|
||||
`pw` varchar(400) DEFAULT NULL,
|
||||
`pw` varchar(400) NOT NULL,
|
||||
`groupes_visibles` varchar(250) NOT NULL,
|
||||
`derniers` text,
|
||||
`key_tempo` varchar(100) DEFAULT NULL,
|
||||
`last_pw_change` varchar(30) DEFAULT NULL,
|
||||
`last_pw` text,
|
||||
`derniers` text NULL,
|
||||
`key_tempo` varchar(100) NULL,
|
||||
`last_pw_change` varchar(30) NULL,
|
||||
`last_pw` text NULL,
|
||||
`admin` tinyint(1) NOT null DEFAULT '0',
|
||||
`fonction_id` varchar(255) DEFAULT NULL,
|
||||
`groupes_interdits` varchar(255) DEFAULT NULL,
|
||||
`last_connexion` varchar(30) DEFAULT NULL,
|
||||
`fonction_id` varchar(255) NULL,
|
||||
`groupes_interdits` varchar(255) NULL,
|
||||
`last_connexion` varchar(30) NULL,
|
||||
`gestionnaire` int(11) NOT null DEFAULT '0',
|
||||
`email` varchar(300) NOT NULL,
|
||||
`favourites` varchar(300) DEFAULT NULL,
|
||||
`latest_items` varchar(300) DEFAULT NULL,
|
||||
`favourites` varchar(300) NULL,
|
||||
`latest_items` varchar(300) NULL,
|
||||
`personal_folder` int(1) NOT null DEFAULT '0',
|
||||
`disabled` tinyint(1) NOT null DEFAULT '0',
|
||||
`no_bad_attempts` tinyint(1) NOT null DEFAULT '0',
|
||||
|
@ -206,15 +218,18 @@ CREATE TABLE IF NOT EXISTS `teampass_users` (
|
|||
`isAdministratedByRole` tinyint(5) NOT null DEFAULT '0',
|
||||
`psk` varchar(400) NULL,
|
||||
`ga` varchar(50) NULL,
|
||||
`avatar` varchar(255) NOT NULL DEFAULT '',
|
||||
`avatar_thumb` varchar(255) NOT NULL DEFAULT '',
|
||||
`upgrade_needed` tinyint(1) NOT NULL DEFAULT '0',
|
||||
`avatar` varchar(255) NULL,
|
||||
`avatar_thumb` varchar(255) NULL,
|
||||
`upgrade_needed` BOOLEAN NOT NULL DEFAULT FALSE,
|
||||
`treeloadstrategy` varchar(30) NOT null DEFAULT 'full',
|
||||
`can_manage_all_users` tinyint(1) NOT NULL DEFAULT '0',
|
||||
`usertimezone` VARCHAR(50) NOT NULL DEFAULT 'not_defined',
|
||||
PRIMARY KEY (`id`),
|
||||
UNIQUE KEY `login` (`login`)
|
||||
) CHARSET=utf8;
|
||||
|
||||
INSERT INTO `teampass_users` (`id`, `login`, `pw`, `groupes_visibles`, `derniers`, `key_tempo`, `last_pw_change`, `last_pw`, `admin`, `fonction_id`, `groupes_interdits`, `last_connexion`, `gestionnaire`, `email`, `favourites`, `latest_items`, `personal_folder`) VALUES
|
||||
(NULL, 'admin', '__BCRYPT_MDP__', '', '', '', '', '', '1', '', '', '', '0', '', '', '', '0');
|
||||
(NULL, 'admin', '__BCRYPT_MDP__', '', '', '', '', '', '1', '', '', '', '0', 'admin@__DOMAIN__', '', '', '0');
|
||||
|
||||
CREATE TABLE IF NOT EXISTS `teampass_tags` (
|
||||
`id` int(12) NOT null AUTO_INCREMENT,
|
||||
|
@ -229,7 +244,7 @@ CREATE TABLE IF NOT EXISTS `teampass_log_system` (
|
|||
`type` varchar(20) NOT NULL,
|
||||
`date` varchar(30) NOT NULL,
|
||||
`label` text NOT NULL,
|
||||
`qui` varchar(30) NOT NULL,
|
||||
`qui` varchar(255) NOT NULL,
|
||||
`field_1` varchar(250) DEFAULT NULL,
|
||||
PRIMARY KEY (`id`)
|
||||
) CHARSET=utf8;
|
||||
|
@ -240,23 +255,25 @@ CREATE TABLE IF NOT EXISTS `teampass_files` (
|
|||
`name` varchar(100) NOT NULL,
|
||||
`size` int(10) NOT NULL,
|
||||
`extension` varchar(10) NOT NULL,
|
||||
`type` varchar(50) NOT NULL,
|
||||
`type` varchar(255) NOT NULL,
|
||||
`file` varchar(50) NOT NULL,
|
||||
PRIMARY KEY (`id`)
|
||||
) CHARSET=utf8;
|
||||
|
||||
CREATE TABLE IF NOT EXISTS `teampass_cache` (
|
||||
`id` int(12) NOT NULL,
|
||||
`label` varchar(50) NOT NULL,
|
||||
`label` varchar(500) NOT NULL,
|
||||
`description` text NOT NULL,
|
||||
`tags` text NOT NULL,
|
||||
`tags` text DEFAULT NULL,
|
||||
`id_tree` int(12) NOT NULL,
|
||||
`perso` tinyint(1) NOT NULL,
|
||||
`restricted_to` varchar(200) NOT NULL,
|
||||
`login` varchar(200) NOT NULL,
|
||||
`restricted_to` varchar(200) DEFAULT NULL,
|
||||
`login` varchar(200) DEFAULT NULL,
|
||||
`folder` varchar(300) NOT NULL,
|
||||
`author` varchar(50) NOT NULL,
|
||||
`renewal_period` tinyint(4) NOT NULL DEFAULT '0'
|
||||
`renewal_period` tinyint(4) NOT NULL DEFAULT '0',
|
||||
`timestamp` varchar(50) DEFAULT NULL,
|
||||
`url` varchar(500) NOT NULL DEFAULT '0'
|
||||
) CHARSET=utf8;
|
||||
|
||||
CREATE TABLE IF NOT EXISTS `teampass_roles_title` (
|
||||
|
@ -301,18 +318,11 @@ CREATE TABLE IF NOT EXISTS `teampass_kb_items` (
|
|||
) CHARSET=utf8;
|
||||
|
||||
CREATE TABLE IF NOT EXISTS `teampass_restriction_to_roles` (
|
||||
`role_id` int(12) DEFAULT NULL,
|
||||
`item_id` int(12) DEFAULT NULL,
|
||||
`role_id` int(12) NOT NULL,
|
||||
`item_id` int(12) NOT NULL,
|
||||
KEY `role_id_idx` (`role_id`)
|
||||
) CHARSET=utf8;
|
||||
|
||||
CREATE TABLE IF NOT EXISTS `teampass_keys` (
|
||||
`sql_table` varchar(25) NOT NULL,
|
||||
`id` int(20) NOT NULL,
|
||||
`rand_key` varchar(25) NOT NULL,
|
||||
UNIQUE KEY `rand_key_id_idx` (`rand_key`,`id`)
|
||||
) CHARSET=utf8;
|
||||
|
||||
CREATE TABLE IF NOT EXISTS `teampass_languages` (
|
||||
`id` INT(10) NOT null AUTO_INCREMENT PRIMARY KEY ,
|
||||
`name` VARCHAR(50) NOT null ,
|
||||
|
@ -337,7 +347,8 @@ INSERT INTO `teampass_languages` (`name`, `label`, `code`, `flag`) VALUES
|
|||
('swedish', 'Swedish' , 'se', 'se.png'),
|
||||
('dutch', 'Dutch' , 'nl', 'nl.png'),
|
||||
('catalan', 'Catalan' , 'ct', 'ct.png'),
|
||||
('vietnamese', 'Vietnamese', 'vi', 'vi.png');
|
||||
('vietnamese', 'Vietnamese', 'vi', 'vi.png'),
|
||||
('estonian', 'Estonian' , 'ee', 'ee.png');
|
||||
|
||||
CREATE TABLE IF NOT EXISTS `teampass_emails` (
|
||||
`timestamp` INT(30) NOT null ,
|
||||
|
@ -365,9 +376,9 @@ CREATE TABLE IF NOT EXISTS `teampass_categories` (
|
|||
`parent_id` int(12) NOT NULL,
|
||||
`title` varchar(255) NOT NULL,
|
||||
`level` int(2) NOT NULL,
|
||||
`description` text NOT NULL,
|
||||
`type` varchar(50) NOT NULL,
|
||||
`order` int(12) NOT NULL DEFAULT '0',
|
||||
`description` text NULL,
|
||||
`type` varchar(50) NULL default '',
|
||||
`order` int(12) NOT NULL default '0',
|
||||
PRIMARY KEY (`id`)
|
||||
) CHARSET=utf8;
|
||||
|
||||
|
@ -406,13 +417,13 @@ CREATE TABLE IF NOT EXISTS `teampass_otv` (
|
|||
CREATE TABLE IF NOT EXISTS `teampass_suggestion` (
|
||||
`id` tinyint(12) NOT NULL AUTO_INCREMENT,
|
||||
`label` varchar(255) NOT NULL,
|
||||
`pw` text,
|
||||
`pw` text NOT NULL,
|
||||
`pw_iv` text NOT NULL,
|
||||
`pw_len` int(5) NOT NULL,
|
||||
`description` text NOT NULL,
|
||||
`author_id` int(12) NOT NULL,
|
||||
`folder_id` int(12) NOT NULL,
|
||||
`comment` text NOT NULL,
|
||||
`pw_iv` text,
|
||||
`pw_len` int(5) NOT NULL DEFAULT '0',
|
||||
PRIMARY KEY (`id`)
|
||||
) CHARSET=utf8;
|
||||
|
||||
|
@ -424,3 +435,13 @@ CREATE TABLE IF NOT EXISTS `teampass_export` (
|
|||
`pw` text NOT NULL,
|
||||
`path` varchar(255) NOT NULL
|
||||
) CHARSET=utf8;
|
||||
|
||||
CREATE TABLE IF NOT EXISTS `teampass_tokens` (
|
||||
`id` int(12) NOT NULL AUTO_INCREMENT,
|
||||
`user_id` int(10) NOT NULL,
|
||||
`token` varchar(255) NOT NULL,
|
||||
`reason` varchar(255) NOT NULL,
|
||||
`creation_timestamp` varchar(50) NOT NULL,
|
||||
`end_timestamp` varchar(50) NOT NULL,
|
||||
PRIMARY KEY (`id`)
|
||||
) CHARSET=utf8;
|
||||
|
|
|
@ -12,6 +12,6 @@ $port = 3306;
|
|||
$encoding = "utf8";
|
||||
|
||||
@date_default_timezone_set($_SESSION['settings']['timezone']);
|
||||
@define('SECUREPATH', '__FINALPATH__');
|
||||
@define('SECUREPATH', '__FINALPATH__/includes');
|
||||
require_once "__SKPATH__sk.php";
|
||||
?>
|
||||
?>
|
||||
|
|
|
@ -1,4 +1,8 @@
|
|||
<?php
|
||||
@define('SALT', '__SALTKEY__'); //Never Change it once it has been used !!!!!
|
||||
@define('COST', '13'); // Don't change this.
|
||||
@define('AKEY', '');
|
||||
@define('IKEY', '');
|
||||
@define('SKEY', '');
|
||||
@define('HOST', '');
|
||||
?>
|
|
@ -4,7 +4,9 @@ user=$1
|
|||
root_pwd=$(sudo cat /etc/yunohost/mysql)
|
||||
db_user=root
|
||||
db_name=teampass
|
||||
password=$(sudo php /var/www/teampass/mdphash.php $user)
|
||||
real_password=$(ynh_string_random) # Génère un mot de passe aléatoire
|
||||
password=$(sudo php /var/www/teampass/mdphash.php $real_password)
|
||||
|
||||
|
||||
mail=$(sudo ldapsearch -h localhost -b ou=users,dc=yunohost,dc=org -x uid=$user mail | grep mail: | sed 's/mail: //' | head -n1)
|
||||
|
||||
|
|
106
manifest.json
106
manifest.json
|
@ -1,53 +1,57 @@
|
|||
{
|
||||
"name": "Teampass",
|
||||
"id": "teampass",
|
||||
"packaging_format": 1,
|
||||
"requirements": {
|
||||
"yunohost": ">= 2.4"
|
||||
},
|
||||
"description": {
|
||||
"en": "Passwords Manager",
|
||||
"fr": "Gestionnaire de mots de passes."
|
||||
},
|
||||
"version": "2.1.24.4",
|
||||
"url": "http://www.teampass.net",
|
||||
"licence": "free",
|
||||
"maintainer": {
|
||||
"name": "Ackak, Maniack Crudelis et matlink",
|
||||
"email": "ackak_ynh@ackak.net maniackc_dev@crudelis.fr matlink@matlink.fr"
|
||||
},
|
||||
"multi_instance": "false",
|
||||
"services": [
|
||||
"nginx",
|
||||
"php5-fpm",
|
||||
"mysql"
|
||||
],
|
||||
"arguments": {
|
||||
"install" : [
|
||||
{
|
||||
"name": "domain",
|
||||
"ask": {
|
||||
"en": "Choose a domain for Teampass",
|
||||
"fr": "Choisissez un domaine pour Teampass"
|
||||
},
|
||||
"example": "domain.org"
|
||||
},
|
||||
{
|
||||
"name": "path",
|
||||
"ask": {
|
||||
"en": "Choose a path for Teampass",
|
||||
"fr": "Choisissez un chemin pour Teampass"
|
||||
},
|
||||
"example": "/teampass",
|
||||
"default": "/teampass"
|
||||
},
|
||||
{
|
||||
"name": "password",
|
||||
"ask": {
|
||||
"en": "Choose a password for the admin",
|
||||
"fr": "Choisissez un mot de passe pour l'administrateur"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
"name": "Teampass",
|
||||
"id": "teampass",
|
||||
"packaging_format": 1,
|
||||
"requirements": {
|
||||
"yunohost": ">= 2.4"
|
||||
},
|
||||
"description": {
|
||||
"en": "Passwords Manager",
|
||||
"fr": "Gestionnaire de mots de passes."
|
||||
},
|
||||
"version": "2.1.26-3",
|
||||
"url": "http://www.teampass.net",
|
||||
"license": "free",
|
||||
"maintainer": {
|
||||
"name": "Ackak, Maniack Crudelis et matlink",
|
||||
"email": "ackak_ynh@ackak.net maniackc_dev@crudelis.fr matlink@matlink.fr"
|
||||
},
|
||||
"multi_instance": false,
|
||||
"services": [
|
||||
"nginx",
|
||||
"php5-fpm",
|
||||
"mysql"
|
||||
],
|
||||
"arguments": {
|
||||
"install" : [
|
||||
{
|
||||
"name": "domain",
|
||||
"type": "domain",
|
||||
"ask": {
|
||||
"en": "Choose a domain for Teampass",
|
||||
"fr": "Choisissez un domaine pour Teampass"
|
||||
},
|
||||
"example": "domain.org"
|
||||
},
|
||||
{
|
||||
"name": "path",
|
||||
"type": "path",
|
||||
"ask": {
|
||||
"en": "Choose a path for Teampass",
|
||||
"fr": "Choisissez un chemin pour Teampass"
|
||||
},
|
||||
"example": "/teampass",
|
||||
"default": "/teampass"
|
||||
},
|
||||
{
|
||||
"name": "password",
|
||||
"type": "password",
|
||||
"ask": {
|
||||
"en": "Choose a password for the admin",
|
||||
"fr": "Choisissez un mot de passe pour l'administrateur"
|
||||
},
|
||||
"example": "Choose a password"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
|
|
|
@ -1,50 +0,0 @@
|
|||
{
|
||||
"name": "Teampass",
|
||||
"id": "teampass",
|
||||
"packaging_format": 1,
|
||||
"description": {
|
||||
"en": "Passwords Manager",
|
||||
"fr": "Gestionnaire de mots de passes."
|
||||
},
|
||||
"version": "2.1.24.4",
|
||||
"url": "http://www.teampass.net",
|
||||
"licence": "free",
|
||||
"maintainer": {
|
||||
"name": "Ackak, Maniack Crudelis et matlink",
|
||||
"email": "ackak_ynh@ackak.net maniackc_dev@crudelis.fr matlink@matlink.fr"
|
||||
},
|
||||
"multi_instance": "false",
|
||||
"services": [
|
||||
"nginx",
|
||||
"php5-fpm",
|
||||
"mysql"
|
||||
],
|
||||
"arguments": {
|
||||
"install" : [
|
||||
{
|
||||
"name": "domain",
|
||||
"ask": {
|
||||
"en": "Choose a domain for Teampass",
|
||||
"fr": "Choisissez un domaine pour Teampass"
|
||||
},
|
||||
"example": "domain.org"
|
||||
},
|
||||
{
|
||||
"name": "path",
|
||||
"ask": {
|
||||
"en": "Choose a path for Teampass",
|
||||
"fr": "Choisissez un chemin pour Teampass"
|
||||
},
|
||||
"example": "/teampass",
|
||||
"default": "/teampass"
|
||||
},
|
||||
{
|
||||
"name": "password",
|
||||
"ask": {
|
||||
"en": "Choose a password for the admin",
|
||||
"fr": "Choisissez un mot de passe pour l'administrateur"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
211
scripts/.fonctions
Executable file
211
scripts/.fonctions
Executable file
|
@ -0,0 +1,211 @@
|
|||
#!/bin/bash
|
||||
|
||||
CHECK_VAR () { # Vérifie que la variable n'est pas vide.
|
||||
# $1 = Variable à vérifier
|
||||
# $2 = Texte à afficher en cas d'erreur
|
||||
test -n "$1" || (echo "$2" >&2 && false)
|
||||
}
|
||||
|
||||
EXIT_PROPERLY () { # Provoque l'arrêt du script en cas d'erreur. Et nettoye les résidus.
|
||||
trap '' ERR
|
||||
echo -e "\e[91m \e[1m" # Shell in light red bold
|
||||
echo -e "!!\n $app install's script has encountered an error. Installation was cancelled.\n!!" >&2
|
||||
|
||||
CLEAN_SETUP # Appel la fonction de nettoyage spécifique du script install.
|
||||
|
||||
# Compense le bug de ssowat qui ne supprime pas l'entrée de l'app en cas d'erreur d'installation.
|
||||
sudo sed -i "\@\"$domain$path/\":@d" /etc/ssowat/conf.json
|
||||
|
||||
ynh_die
|
||||
}
|
||||
|
||||
TRAP_ON () { # Activate signal capture
|
||||
trap EXIT_PROPERLY ERR # Capturing exit signals on error
|
||||
}
|
||||
|
||||
TRAP_OFF () { # Ignoring signal capture until TRAP_ON
|
||||
# Pour une raison que j'ignore, la fonction TRAP_ON fonctionne très bien.
|
||||
# Mais pas la fonction TRAP_OFF...
|
||||
# Utiliser directement `trap '' ERR` dans le code pour l'utiliser, à la place de la fonction.
|
||||
trap '' ERR # Ignoring exit signals
|
||||
}
|
||||
|
||||
CHECK_USER () { # Vérifie la validité de l'user admin
|
||||
# $1 = Variable de l'user admin.
|
||||
ynh_user_exists "$1" || (echo "Wrong admin" >&2 && false)
|
||||
}
|
||||
|
||||
CHECK_PATH () { # Vérifie la présence du / en début de path. Et son absence à la fin.
|
||||
if [ "${path:0:1}" != "/" ]; then # Si le premier caractère n'est pas un /
|
||||
path="/$path" # Ajoute un / en début de path
|
||||
fi
|
||||
if [ "${path:${#path}-1}" == "/" ] && [ ${#path} -gt 1 ]; then # Si le dernier caractère est un / et que ce n'est pas le seul caractère.
|
||||
path="${path:0:${#path}-1}" # Supprime le dernier caractère
|
||||
fi
|
||||
}
|
||||
|
||||
CHECK_DOMAINPATH () { # Vérifie la disponibilité du path et du domaine.
|
||||
sudo yunohost app checkurl $domain$path -a $app
|
||||
}
|
||||
|
||||
CHECK_FINALPATH () { # Vérifie que le dossier de destination n'est pas déjà utilisé.
|
||||
final_path=/var/www/$app
|
||||
if [ -e "$final_path" ]
|
||||
then
|
||||
echo "This path already contains a folder" >&2
|
||||
false
|
||||
fi
|
||||
}
|
||||
|
||||
GENERATE_DB () { # Créer une base de données et un utilisateur dédié au nom de l'app.
|
||||
# $1 = Nom de la base de donnée
|
||||
db_user=$1
|
||||
# Génère un mot de passe aléatoire.
|
||||
# db_pwd=$(head -n20 /dev/urandom | tr -c -d 'A-Za-z0-9' | head -c20)
|
||||
db_pwd=$(ynh_string_random)
|
||||
CHECK_VAR "$db_pwd" "db_pwd empty"
|
||||
# Utilise '$app' comme nom d'utilisateur et de base de donnée
|
||||
# Initialise la base de donnée et stocke le mot de passe mysql.
|
||||
ynh_mysql_create_db $db_user $db_user $db_pwd
|
||||
ynh_app_setting_set $app mysqlpwd $db_pwd
|
||||
}
|
||||
|
||||
SETUP_SOURCE () { # Télécharge la source, décompresse et copie dans $final_path
|
||||
# $1 = Nom de l'archive téléchargée.
|
||||
wget -nv -i ../sources/source_url -O $1
|
||||
# Vérifie la somme de contrôle de la source téléchargée.
|
||||
md5sum -c ../sources/source_md5 --status || (echo "Corrupt source" >&2 && false)
|
||||
# Décompresse la source
|
||||
if [ "$(echo ${1##*.})" == "gz" ]; then
|
||||
tar -x -f $1
|
||||
elif [ "$(echo ${1##*.})" == "zip" ]; then
|
||||
unzip -q $1
|
||||
else
|
||||
false # Format d'archive non pris en charge.
|
||||
fi
|
||||
# Copie les fichiers sources
|
||||
sudo cp -a $(cat ../sources/source_dir)/. "$final_path"
|
||||
# Copie les fichiers additionnels ou modifiés.
|
||||
if test -e "../sources/ajouts"; then
|
||||
sudo cp -a ../sources/ajouts/. "$final_path"
|
||||
fi
|
||||
}
|
||||
|
||||
ADD_SYS_USER () { # Créer un utilisateur système dédié à l'app
|
||||
if ! ynh_system_user_exists "$app" # Test l'existence de l'utilisateur
|
||||
then
|
||||
sudo useradd -d /var/www/$app --system --user-group $app --shell /usr/sbin/nologin || (echo "Unable to create $app system account" >&2 && false)
|
||||
fi
|
||||
}
|
||||
|
||||
POOL_FPM () { # Créer le fichier de configuration du pool php-fpm et le configure.
|
||||
sed -i "s@__NAMETOCHANGE__@$app@g" ../conf/php-fpm.conf
|
||||
sed -i "s@__FINALPATH__@$final_path@g" ../conf/php-fpm.conf
|
||||
sed -i "s@__USER__@$app@g" ../conf/php-fpm.conf
|
||||
finalphpconf=/etc/php5/fpm/pool.d/$app.conf
|
||||
sudo cp ../conf/php-fpm.conf $finalphpconf
|
||||
sudo chown root: $finalphpconf
|
||||
finalphpini=/etc/php5/fpm/conf.d/20-$app.ini
|
||||
sudo cp ../conf/php-fpm.ini $finalphpini
|
||||
sudo chown root: $finalphpini
|
||||
sudo service php5-fpm reload
|
||||
}
|
||||
|
||||
STORE_MD5_CONFIG () { # Enregistre la somme de contrôle du fichier de config
|
||||
# $1 = Nom du fichier de conf pour le stockage dans settings.yml
|
||||
# $2 = Nom complet et chemin du fichier de conf.
|
||||
ynh_app_setting_set $app $1_file_md5 $(sudo md5sum "$2" | cut -d' ' -f1)
|
||||
}
|
||||
|
||||
CHECK_MD5_CONFIG () { # Créé un backup du fichier de config si il a été modifié.
|
||||
# $1 = Nom du fichier de conf pour le stockage dans settings.yml
|
||||
# $2 = Nom complet et chemin du fichier de conf.
|
||||
if [ "$(ynh_app_setting_get $app $1_file_md5)" != $(sudo md5sum "$2" | cut -d' ' -f1) ]; then
|
||||
sudo cp -a "$2" "$2.backup.$(date '+%d.%m.%y_%Hh%M,%Ss')" # Si le fichier de config a été modifié, créer un backup.
|
||||
fi
|
||||
}
|
||||
|
||||
FIND_PORT () { # Cherche un port libre.
|
||||
# $1 = Numéro de port pour débuter la recherche.
|
||||
port=$1
|
||||
while ! sudo yunohost app checkport $port ; do
|
||||
port=$((port+1))
|
||||
done
|
||||
CHECK_VAR "$port" "port empty"
|
||||
}
|
||||
|
||||
|
||||
### REMOVE SCRIPT
|
||||
|
||||
REMOVE_NGINX_CONF () { # Suppression de la configuration nginx
|
||||
if [ -e "/etc/nginx/conf.d/$domain.d/$app.conf" ]; then # Delete nginx config
|
||||
echo "Delete nginx config"
|
||||
sudo rm "/etc/nginx/conf.d/$domain.d/$app.conf"
|
||||
sudo service nginx reload
|
||||
fi
|
||||
}
|
||||
|
||||
REMOVE_FPM_CONF () { # Suppression de la configuration du pool php-fpm
|
||||
if [ -e "/etc/php5/fpm/pool.d/$app.conf" ]; then # Delete fpm config
|
||||
echo "Delete fpm config"
|
||||
sudo rm "/etc/php5/fpm/pool.d/$app.conf"
|
||||
fi
|
||||
if [ -e "/etc/php5/fpm/conf.d/20-$app.ini" ]; then # Delete php config
|
||||
echo "Delete php config"
|
||||
sudo rm "/etc/php5/fpm/conf.d/20-$app.ini"
|
||||
fi
|
||||
sudo service php5-fpm reload
|
||||
}
|
||||
|
||||
REMOVE_LOGROTATE_CONF () { # Suppression de la configuration de logrotate
|
||||
if [ -e "/etc/logrotate.d/$app" ]; then
|
||||
echo "Delete logrotate config"
|
||||
sudo rm "/etc/logrotate.d/$app"
|
||||
fi
|
||||
}
|
||||
|
||||
SECURE_REMOVE () { # Suppression de dossier avec vérification des variables
|
||||
chaine="$1" # L'argument doit être donné entre quotes simple '', pour éviter d'interpréter les variables.
|
||||
no_var=0
|
||||
while (echo "$chaine" | grep -q '\$') # Boucle tant qu'il y a des $ dans la chaine
|
||||
do
|
||||
no_var=1
|
||||
global_var=$(echo "$chaine" | cut -d '$' -f 2) # Isole la première variable trouvée.
|
||||
only_var=\$$(expr "$global_var" : '\([A-Za-z0-9_]*\)') # Isole complètement la variable en ajoutant le $ au début et en gardant uniquement le nom de la variable. Se débarrasse surtout du / et d'un éventuel chemin derrière.
|
||||
real_var=$(eval "echo ${only_var}") # `eval "echo ${var}` permet d'interpréter une variable contenue dans une variable.
|
||||
if test -z "$real_var" || [ "$real_var" = "/" ]; then
|
||||
echo "Variable $only_var is empty, suppression of $chaine cancelled." >&2
|
||||
return 1
|
||||
fi
|
||||
chaine=$(echo "$chaine" | sed "s@$only_var@$real_var@") # remplace la variable par sa valeur dans la chaine.
|
||||
done
|
||||
if [ "$no_var" -eq 1 ]
|
||||
then
|
||||
if [ -e "$chaine" ]; then
|
||||
echo "Delete directory $chaine"
|
||||
sudo rm -r "$chaine"
|
||||
fi
|
||||
return 0
|
||||
else
|
||||
echo "No detected variable." >&2
|
||||
return 1
|
||||
fi
|
||||
}
|
||||
|
||||
REMOVE_BDD () { # Suppression de la base de donnée et de l'utilisateur associé.
|
||||
# $1 = Nom de la base de donnée
|
||||
# Utilise '$app' comme nom d'utilisateur et de base de donnée
|
||||
db_user=$1
|
||||
if mysqlshow -u root -p$(sudo cat $MYSQL_ROOT_PWD_FILE) | grep -q "^| $db_user"; then
|
||||
echo "Delete db"
|
||||
ynh_mysql_drop_db $db_user
|
||||
ynh_mysql_drop_user $db_user
|
||||
fi
|
||||
}
|
||||
|
||||
REMOVE_SYS_USER () { # Supprime l'utilisateur système dédié à l'app
|
||||
if ynh_system_user_exists "$app" # Test l'existence de l'utilisateur
|
||||
then
|
||||
sudo userdel $app
|
||||
fi
|
||||
}
|
|
@ -1,14 +1,12 @@
|
|||
#!/bin/bash
|
||||
|
||||
# Récupère les infos de l'application.
|
||||
ynh_version=$(sudo yunohost -v | grep "moulinette:" | cut -d' ' -f2 | cut -d'.' -f1,2)
|
||||
if [ $ynh_version = "2.4" ]; then
|
||||
app=$YNH_APP_INSTANCE_NAME
|
||||
else
|
||||
app=teampass
|
||||
fi
|
||||
final_path=$(sudo yunohost app setting $app final_path)
|
||||
domain=$(sudo yunohost app setting $app domain)
|
||||
app=$YNH_APP_INSTANCE_NAME
|
||||
|
||||
# Source app helpers
|
||||
source /usr/share/yunohost/helpers
|
||||
final_path=$(ynh_app_setting_get $app final_path)
|
||||
domain=$(ynh_app_setting_get $app domain)
|
||||
|
||||
|
||||
# The parameter $1 is the backup directory location
|
||||
|
@ -27,5 +25,9 @@ sudo cp -a /etc/nginx/conf.d/$domain.d/$app.conf $backup_dir/nginx.conf
|
|||
sudo cp -a /etc/php5/fpm/pool.d/$app.conf $backup_dir/php-fpm.conf
|
||||
sudo cp -a /etc/php5/fpm/conf.d/20-$app.ini $backup_dir/php-fpm.ini
|
||||
|
||||
# Backup db
|
||||
root_pwd=$(sudo cat /etc/yunohost/mysql)
|
||||
sudo mysqldump -u root -p$root_pwd --no-create-db $app --result-file="$backup_dir/db.sql"
|
||||
|
||||
# Copie du fichier sk.php
|
||||
sudo cp -a /etc/teampass/sk.php $backup_dir/sk.php
|
||||
|
|
170
scripts/install
170
scripts/install
|
@ -1,130 +1,59 @@
|
|||
#!/bin/bash
|
||||
|
||||
ynh_version=$(sudo yunohost -v | grep "moulinette:" | cut -d' ' -f2 | cut -d'.' -f1,2)
|
||||
# Retrieve arguments
|
||||
if [ $ynh_version = "2.4" ]
|
||||
then
|
||||
domain=$YNH_APP_ARG_DOMAIN
|
||||
path=$YNH_APP_ARG_PATH
|
||||
password_admin=$YNH_APP_ARG_PASSWORD
|
||||
source .fonctions # Charge les fonctions génériques habituellement utilisées dans le script
|
||||
|
||||
app=$YNH_APP_INSTANCE_NAME
|
||||
|
||||
# Source app helpers
|
||||
source /usr/share/yunohost/helpers
|
||||
else
|
||||
domain=$1
|
||||
path=$2
|
||||
password_admin=$3
|
||||
app=teampass
|
||||
fi
|
||||
|
||||
# Checks variables are not empty
|
||||
test -z "$domain" && (echo "domain not set" && touch /force_stop)
|
||||
test -z "$path" && (echo "path not set" && touch /force_stop)
|
||||
test -z "$password_admin" && (echo "password_admin not set" && touch /force_stop)
|
||||
|
||||
|
||||
# Delete files and db if exit with an error
|
||||
EXIT_PROPERLY () {
|
||||
trap '' ERR
|
||||
echo -e "\e[91m \e[1m" # Shell in light red bold
|
||||
echo -e "!!\n $app install's script has encountered an error. Installation was cancelled.\n!!"
|
||||
|
||||
if [ $ynh_version = "2.2" ]; then
|
||||
/bin/bash ./remove # Appel le script remove. En 2.2, ce comportement n'est pas automatique.
|
||||
fi
|
||||
exit 1
|
||||
CLEAN_SETUP () {
|
||||
# Nettoyage des résidus d'installation non pris en charge par le script remove.
|
||||
# Pas de nettoyage supplémentaire nécessaire ici...
|
||||
echo ""
|
||||
}
|
||||
TRAP_ON () { # Activate signal capture
|
||||
trap EXIT_PROPERLY ERR # Capturing exit signals on error
|
||||
}
|
||||
TRAP_OFF () { # Ignoring signal capture until TRAP_ON
|
||||
# Pour une raison que j'ignore, la fonction TRAP_ON fonctionne très bien.
|
||||
# Mais pas la fonction TRAP_OFF...
|
||||
# Utiliser directement `trap '' ERR` dans le code pour l'utiliser, à la place de la fonction.
|
||||
trap '' ERR # Ignoring exit signals
|
||||
}
|
||||
TRAP_ON
|
||||
TRAP_ON # Active trap pour arrêter le script si une erreur est détectée.
|
||||
|
||||
domain=$YNH_APP_ARG_DOMAIN
|
||||
path=$YNH_APP_ARG_PATH
|
||||
password_admin=$YNH_APP_ARG_PASSWORD
|
||||
|
||||
# Vérifie la présence du / en début de path
|
||||
if [ $(echo $path | cut -c1) != "/" ]; then
|
||||
path="/$path"
|
||||
fi
|
||||
app=$YNH_APP_INSTANCE_NAME
|
||||
|
||||
# Vérifie la disponibilité du path et du domaine.
|
||||
sudo yunohost app checkurl $domain$path -a $app
|
||||
# Source app helpers
|
||||
source /usr/share/yunohost/helpers
|
||||
|
||||
# Vérifie que le mot de passe n'est pas vide.
|
||||
if [[ -z $password_admin ]]; then
|
||||
echo "Mot de passe incorrect"
|
||||
touch /force_stop 2> /dev/null
|
||||
fi
|
||||
# Vérifie que les variables ne sont pas vides.
|
||||
CHECK_VAR "$app" "app name not set"
|
||||
|
||||
# Vérifie que le dossier de destination n'est pas déjà utilisé.
|
||||
final_path=/var/www/$app
|
||||
if [ -e "$final_path" ]
|
||||
then
|
||||
echo "This path already contains a folder"
|
||||
touch /force_stop 2> /dev/null
|
||||
fi
|
||||
CHECK_PATH # Vérifie et corrige la syntaxe du path.
|
||||
CHECK_DOMAINPATH # Vérifie la disponibilité du path et du domaine.
|
||||
|
||||
CHECK_FINALPATH # Vérifie que le dossier de destination n'est pas déjà utilisé.
|
||||
|
||||
|
||||
# Enregistre les infos dans la config YunoHost
|
||||
sudo yunohost app setting $app domain -v $domain
|
||||
sudo yunohost app setting $app path -v $path
|
||||
ynh_app_setting_set $app domain $domain
|
||||
ynh_app_setting_set $app path $path
|
||||
|
||||
GENERATE_DB $app # Créer une base de données et un utilisateur dédié au nom de l'app.
|
||||
|
||||
|
||||
# Génère un mot de passe aléatoire.
|
||||
db_pwd=$(head -n20 /dev/urandom | tr -c -d 'A-Za-z0-9' | head -c20)
|
||||
# Utilise '$app' comme nom d'utilisateur et de base de donnée
|
||||
db_user=$app
|
||||
# Initialise la base de donnée et stocke le mot de passe mysql.
|
||||
if [ $ynh_version = "2.4" ]; then
|
||||
ynh_mysql_create_db $db_user $db_user $db_pwd
|
||||
else
|
||||
sudo yunohost app initdb $db_user -p $db_pwd
|
||||
fi
|
||||
sudo yunohost app setting $app mysqlpwd -v $db_pwd
|
||||
|
||||
|
||||
# Crée le repertoire de destination et stocke son emplacement.
|
||||
# Créer le repertoire de destination et stocke son emplacement.
|
||||
sudo mkdir "$final_path"
|
||||
sudo yunohost app setting $app final_path -v $final_path
|
||||
ynh_app_setting_set $app final_path $final_path
|
||||
|
||||
SETUP_SOURCE "teampass.tar.gz" # Télécharge la source, décompresse et copie dans $final_path
|
||||
|
||||
# Delete the install directory.
|
||||
# SECURE_REMOVE '$final_path/install'
|
||||
|
||||
# Décompresse la source
|
||||
tar -x -f ../sources/teampass.tar.gz
|
||||
# Copie les fichiers sources
|
||||
sudo cp -a teampass/. "$final_path"
|
||||
# Copie les fichiers additionnels ou modifiés.
|
||||
sudo cp -a ../sources/ajouts/. "$final_path"
|
||||
# Et copie le fichier de config nginx
|
||||
sudo cp ../conf/nginx.conf /etc/nginx/conf.d/$domain.d/$app.conf
|
||||
# Delete the install directory.
|
||||
sudo rm -r $final_path/install
|
||||
|
||||
|
||||
# Modifie les variables dans le fichier de configuration nginx
|
||||
sudo sed -i "s@__PATHTOCHANGE__@$path@g" /etc/nginx/conf.d/$domain.d/$app.conf
|
||||
sudo sed -i "s@__WWWPATH__@$final_path@g" /etc/nginx/conf.d/$domain.d/$app.conf
|
||||
sudo sed -i "s@__PATH__@$path@g" /etc/nginx/conf.d/$domain.d/$app.conf
|
||||
sudo sed -i "s@__FINALPATH__@$final_path@g" /etc/nginx/conf.d/$domain.d/$app.conf
|
||||
sudo sed -i "s@__NAMETOCHANGE__@$app@g" /etc/nginx/conf.d/$domain.d/$app.conf
|
||||
|
||||
# Créer le fichier de configuration du pool php-fpm et le configure.
|
||||
sed -i "s@__NAMETOCHANGE__@$app@g" ../conf/php-fpm.conf
|
||||
sed -i "s@__FINALPATH__@$final_path@g" ../conf/php-fpm.conf
|
||||
finalphpconf=/etc/php5/fpm/pool.d/$app.conf
|
||||
sudo cp ../conf/php-fpm.conf $finalphpconf
|
||||
sudo chown root: $finalphpconf
|
||||
finalphpini=/etc/php5/fpm/conf.d/20-$app.ini
|
||||
sudo cp ../conf/php-fpm.ini $finalphpini
|
||||
sudo chown root: $finalphpini
|
||||
sudo service php5-fpm reload
|
||||
|
||||
|
||||
# Installation de php5-cli
|
||||
# sudo apt-get update
|
||||
# sudo apt-get -y install php5-cli
|
||||
ADD_SYS_USER # Créer un user système dédié pour l'application
|
||||
POOL_FPM # Créer le fichier de configuration du pool php-fpm et le configure.
|
||||
|
||||
# Copie du script contenant la fonction bCrypt
|
||||
sudo cp ../conf/mdphash.php $final_path
|
||||
|
@ -145,13 +74,13 @@ sed -i "s@__DOMAIN__@$domain@g" ../conf/populate.sql
|
|||
sed -i "s@__PATH__@$path@g" ../conf/populate.sql
|
||||
sed -i "s@__FOLDERS__@$folders@g" ../conf/populate.sql
|
||||
sed -i "s@__ROLES__@$roles@g" ../conf/populate.sql
|
||||
sed -i "s@__VERSION__@$(sed -n 2p $final_path/changelog.md)@g" ../conf/populate.sql
|
||||
sed -i "s@__VERSION__@$(sed -n 3p $final_path/changelog.md)@g" ../conf/populate.sql
|
||||
sed -i "s@__TIMEZONE__@$(cat /etc/timezone)@g" ../conf/populate.sql
|
||||
sed -i "s@__BCRYPT_MDP__@$(php ../conf/mdphash.php $password_admin)@g" ../conf/populate.sql
|
||||
sed -i "s@__LANG__@$langue@g" ../conf/populate.sql
|
||||
|
||||
# Enregistre les infos dans la config YunoHost
|
||||
sudo yunohost app setting $app langue -v $langue
|
||||
ynh_app_setting_set $app langue $langue
|
||||
|
||||
# Import du fichier SQL
|
||||
mysql -u $db_user -p$db_pwd $db_user < ../conf/populate.sql
|
||||
|
@ -169,18 +98,21 @@ sed -i "s@__SALTKEY__@$saltkey@g" ../conf/sk.php
|
|||
|
||||
# Et copie des fichiers à leurs emplacements.
|
||||
sudo cp ../conf/sk.php $path_sk_file/sk.php
|
||||
sudo chown -R root:www-data $path_sk_file
|
||||
sudo chown -R root:$app $path_sk_file
|
||||
sudo chmod 750 $path_sk_file
|
||||
sudo cp ../conf/settings.php $final_path/includes/settings.php
|
||||
sudo cp $final_path/includes/libraries/csrfp/libs/csrfp.config.sample.php $final_path/includes/libraries/csrfp/libs/csrfp.config.php
|
||||
|
||||
sudo cp ../conf/settings.php $final_path/includes/config/settings.php
|
||||
STORE_MD5_CONFIG "settings.php" "$final_path/includes/config/settings.php" # Enregistre la somme de contrôle du fichier de config
|
||||
sudo cp $final_path/includes/libraries/csrfp/libs/csrfp.config.sample.php $final_path/includes/libraries/csrfp/libs/csrfp.config.php # Créer le fichier de config de csrfp
|
||||
sed -i "s@CSRFP_TOKEN\" => \"@&$(head -n40 /dev/urandom | tr -c -d 'a-f0-9' | head -c50)@g" $final_path/includes/libraries/csrfp/libs/csrfp.config.php # Renseigne un token, valide en hexadécimal
|
||||
sed -i "s@jsUrl\" => \"@&$domain$path/includes/libraries/csrfp/js/csrfprotector.js@g" $final_path/includes/libraries/csrfp/libs/csrfp.config.php # Renseigne l'adresse de csrfprotector.js
|
||||
|
||||
# Ajout des utilisateurs actuels dans la base yunohost
|
||||
teampass_users=$(ldapsearch -h localhost -b ou=users,dc=yunohost,dc=org -x objectClass=mailAccount uid | grep uid: | sed 's/uid: //' | xargs)
|
||||
id=1
|
||||
for teampassuser in $teampass_users
|
||||
do
|
||||
password=$(php ../conf/mdphash.php $teampassuser)
|
||||
real_password=$(ynh_string_random) # Génère un mot de passe aléatoire
|
||||
password=$(php ../conf/mdphash.php $real_password)
|
||||
mail=$(sudo ldapsearch -h localhost -b ou=users,dc=yunohost,dc=org -x uid=$teampassuser mail | grep mail: | sed 's/mail: //' | head -n1)
|
||||
# Creation de l'utilisateur
|
||||
mysql -u $db_user -p$db_pwd $db_user -e "INSERT INTO teampass_users (id, login, pw, groupes_visibles, derniers, key_tempo, last_pw_change, last_pw, admin, fonction_id, groupes_interdits, last_connexion, gestionnaire, email, favourites, latest_items, personal_folder, can_create_root_folder) VALUES (NULL, '$teampassuser', '$password', '1', '', '', '', '', '0', '1', '', '', '0', '$mail', '', '', '1', '1');"
|
||||
|
@ -193,16 +125,16 @@ done
|
|||
|
||||
|
||||
# Configure les droits d'accès au fichiers
|
||||
# -rw-r----- sur les fichiers
|
||||
sudo find $final_path -type f -print0 | xargs -0 sudo chmod 640
|
||||
# drwxr-x--- sur les dossiers
|
||||
sudo find $final_path -type d -print0 | xargs -0 sudo chmod 750
|
||||
# -rw-r--r-- sur les fichiers
|
||||
sudo find $final_path -type f -print0 | xargs -0 sudo chmod 644
|
||||
# drwxr-xr-x sur les dossiers
|
||||
sudo find $final_path -type d -print0 | xargs -0 sudo chmod 755
|
||||
# Les dossiers files et upload ont besoin d'un droit d'écriture.
|
||||
sudo chmod 770 -R $final_path/files $final_path/upload
|
||||
sudo chmod 774 -R $final_path/files $final_path/upload
|
||||
# Le script de conversion csv xml doit être exécutable, au moins par root.
|
||||
sudo chmod 740 $final_path/CsvToXml_For_Teampass.sh
|
||||
# Les fichiers appartiennent à root et sont lisibles par www-data
|
||||
sudo chown -R root:www-data $final_path
|
||||
sudo chmod 744 $final_path/CsvToXml_For_Teampass.sh
|
||||
# Les fichiers appartiennent à root
|
||||
sudo chown -R root:$app $final_path
|
||||
|
||||
# Recharge la configuration Nginx
|
||||
sudo service nginx reload
|
||||
|
|
|
@ -1,66 +1,32 @@
|
|||
#!/bin/bash
|
||||
|
||||
source .fonctions # Charge les fonctions génériques habituellement utilisées dans le script
|
||||
|
||||
# Récupère les infos de l'application.
|
||||
ynh_version=$(sudo yunohost -v | grep "moulinette:" | cut -d' ' -f2 | cut -d'.' -f1,2)
|
||||
if [ $ynh_version = "2.4" ]; then
|
||||
app=$YNH_APP_INSTANCE_NAME
|
||||
app=$YNH_APP_INSTANCE_NAME
|
||||
|
||||
# Source app helpers
|
||||
source /usr/share/yunohost/helpers
|
||||
else
|
||||
app=teampass
|
||||
MYSQL_ROOT_PWD_FILE="/etc/yunohost/mysql"
|
||||
fi
|
||||
domain=$(sudo yunohost app setting $app domain)
|
||||
# Source app helpers
|
||||
source /usr/share/yunohost/helpers
|
||||
|
||||
# Suppression de la base de donnée et de l'utilisateur associé.
|
||||
# Utilise '$app' comme nom d'utilisateur et de base de donnée
|
||||
db_user=$app
|
||||
if mysqlshow -u root -p$(sudo cat $MYSQL_ROOT_PWD_FILE) | grep -q "^| $db_user"; then
|
||||
echo "Delete db"
|
||||
if [ $ynh_version = "2.4" ]; then
|
||||
ynh_mysql_drop_db $db_user
|
||||
ynh_mysql_drop_user $db_user
|
||||
else
|
||||
mysql -u root -p$(sudo cat $MYSQL_ROOT_PWD_FILE) -e "DROP DATABASE $db_user ; DROP USER $db_user@localhost ;"
|
||||
fi
|
||||
fi
|
||||
domain=$(ynh_app_setting_get $app domain)
|
||||
|
||||
# Suppression du dossier de l'application
|
||||
if [ -e "/var/www/$app" ]; then # Delete final_path
|
||||
echo "Delete app dir"
|
||||
sudo rm -r "/var/www/$app"
|
||||
fi
|
||||
REMOVE_BDD $app # Suppression de la base de donnée et de l'utilisateur associé.
|
||||
|
||||
#Remove the sk.php
|
||||
SECURE_REMOVE '/var/www/$app' # Suppression du dossier de l'application
|
||||
|
||||
# Remove the sk.php
|
||||
if [ -e "/etc/teampass/" ]; then
|
||||
echo "Delete sk.php"
|
||||
sudo rm -r "/etc/teampass/"
|
||||
fi
|
||||
|
||||
# Suppression de la configuration nginx
|
||||
if [ -e "/etc/nginx/conf.d/$domain.d/$app.conf" ]; then # Delete nginx config
|
||||
echo "Delete nginx config"
|
||||
sudo rm "/etc/nginx/conf.d/$domain.d/$app.conf"
|
||||
sudo service nginx reload
|
||||
fi
|
||||
REMOVE_NGINX_CONF # Suppression de la configuration nginx
|
||||
|
||||
# Suppression des log
|
||||
if [ -e "/var/log/$app/" ]; then
|
||||
echo "Delete log"
|
||||
sudo rm -r "/var/log/$app/"
|
||||
fi
|
||||
SECURE_REMOVE '/var/log/$app/' # Suppression des log
|
||||
|
||||
# Suppression de la configuration du pool php-fpm
|
||||
if [ -e "/etc/php5/fpm/pool.d/$app.conf" ]; then # Delete fpm config
|
||||
echo "Delete fpm config"
|
||||
sudo rm "/etc/php5/fpm/pool.d/$app.conf"
|
||||
fi
|
||||
if [ -e "/etc/php5/fpm/conf.d/20-$app.ini" ]; then # Delete php config
|
||||
echo "Delete php config"
|
||||
sudo rm "/etc/php5/fpm/conf.d/20-$app.ini"
|
||||
fi
|
||||
sudo service php5-fpm reload
|
||||
REMOVE_FPM_CONF # Suppression de la configuration du pool php-fpm
|
||||
|
||||
REMOVE_SYS_USER # Supprime l'user système dédié pour l'application
|
||||
|
||||
# Régénère la configuration de SSOwat
|
||||
sudo yunohost app ssowatconf
|
||||
|
|
|
@ -1,33 +1,57 @@
|
|||
#!/bin/bash
|
||||
|
||||
# Récupère les infos de l'application.
|
||||
ynh_version=$(sudo yunohost -v | grep "moulinette:" | cut -d' ' -f2 | cut -d'.' -f1,2)
|
||||
if [ $ynh_version = "2.4" ]; then
|
||||
app=$YNH_APP_INSTANCE_NAME
|
||||
else
|
||||
app=teampass
|
||||
fi
|
||||
final_path=$(sudo yunohost app setting $app final_path)
|
||||
domain=$(sudo yunohost app setting $app domain)
|
||||
app=$YNH_APP_INSTANCE_NAME
|
||||
|
||||
# Source app helpers
|
||||
source /usr/share/yunohost/helpers
|
||||
|
||||
domain=$(ynh_app_setting_get $app domain)
|
||||
final_path=$(ynh_app_setting_get $app final_path)
|
||||
|
||||
# The parameter $1 is the uncompressed restore directory location
|
||||
backup_dir=$1/apps/$app
|
||||
|
||||
# Restore sources & data
|
||||
sudo cp -a $backup_dir/sources/. $final_path
|
||||
# Restore Nginx
|
||||
conf=/etc/nginx/conf.d/$domain.d/$app.conf
|
||||
if [ -f $conf ]; then
|
||||
echo "There is already a nginx conf file at this path: $conf " >&2
|
||||
ynh_die
|
||||
fi
|
||||
sudo cp -a $backup_dir/nginx.conf $conf
|
||||
|
||||
# Restore Nginx and YunoHost parameters
|
||||
# Restore YunoHost parameters
|
||||
sudo cp -a $backup_dir/yunohost/. /etc/yunohost/apps/$app
|
||||
sudo cp -a $backup_dir/nginx.conf /etc/nginx/conf.d/$domain.d/$app.conf
|
||||
|
||||
# Restore sources & data
|
||||
sudo cp -a "$backup_dir/sources/." $final_path
|
||||
|
||||
# Créer la base de donnée et la restaure
|
||||
db_pwd=$(ynh_app_setting_get $app mysqlpwd)
|
||||
db_user=$app
|
||||
ynh_mysql_create_db $db_user $db_user $db_pwd
|
||||
mysql --debug-check -u $db_user -p$db_pwd $db_user < ${backup_dir}/db.sql
|
||||
|
||||
# Copy dedicated php-fpm process from backup folder to the right location
|
||||
sudo cp -a $backup_dir/php-fpm.conf /etc/php5/fpm/pool.d/$app.conf
|
||||
sudo cp -a $backup_dir/php-fpm.ini /etc/php5/fpm/conf.d/20-$app.ini
|
||||
# And restart service
|
||||
sudo service php5-fpm reload
|
||||
|
||||
# ADD_SYS_USER # Créer un user système dédié pour l'application
|
||||
if ! ynh_system_user_exists "$app" # Test l'existence de l'utilisateur
|
||||
then
|
||||
sudo useradd -d /var/www/$app --system --user-group $app --shell /usr/sbin/nologin || (echo "Unable to create $app system account" >&2 && false)
|
||||
fi
|
||||
|
||||
# Copie du fichier sk.php
|
||||
sudo mkdir /etc/teampass
|
||||
sudo cp -a $backup_dir/sk.php /etc/teampass/sk.php
|
||||
sudo chown -R root:$app /etc/teampass/sk.php
|
||||
|
||||
# Restart webserver
|
||||
# Les fichiers appartiennent à root
|
||||
sudo chown -R root:$app $final_path
|
||||
|
||||
# And Reload service
|
||||
sudo service php5-fpm reload
|
||||
|
||||
# Reload webserver
|
||||
sudo service nginx reload
|
||||
|
|
|
@ -1,44 +1,34 @@
|
|||
#!/bin/bash
|
||||
|
||||
source .fonctions # Charge les fonctions génériques habituellement utilisées dans le script
|
||||
|
||||
# Récupère les infos de l'application.
|
||||
ynh_version=$(sudo yunohost -v | grep "moulinette:" | cut -d' ' -f2 | cut -d'.' -f1,2)
|
||||
if [ $ynh_version = "2.4" ]; then
|
||||
app=$YNH_APP_INSTANCE_NAME
|
||||
else
|
||||
app=teampass
|
||||
fi
|
||||
domain=$(sudo yunohost app setting $app domain)
|
||||
path=$(sudo yunohost app setting $app path)
|
||||
final_path=$(sudo yunohost app setting $app final_path)
|
||||
app=$YNH_APP_INSTANCE_NAME
|
||||
|
||||
# Source app helpers
|
||||
source /usr/share/yunohost/helpers
|
||||
|
||||
domain=$(ynh_app_setting_get $app domain)
|
||||
path=$(ynh_app_setting_get $app path)
|
||||
final_path=$(ynh_app_setting_get $app final_path)
|
||||
|
||||
CHECK_PATH # Vérifie et corrige la syntaxe du path.
|
||||
|
||||
SETUP_SOURCE "teampass.tar.gz" # Télécharge la source, décompresse et copie dans $final_path
|
||||
|
||||
# Delete the install directory.
|
||||
SECURE_REMOVE '$final_path/install'
|
||||
|
||||
# Décompresse la source
|
||||
tar -x -f ../sources/teampass.tar.gz
|
||||
# Copie les fichiers sources
|
||||
sudo cp -a teampass/. "$final_path"
|
||||
# Copie les fichiers additionnels ou modifiés.
|
||||
sudo cp -a ../sources/ajouts/. "$final_path"
|
||||
# Et copie le fichier de config nginx
|
||||
sudo cp ../conf/nginx.conf /etc/nginx/conf.d/$domain.d/$app.conf
|
||||
|
||||
# Delete the install directory.
|
||||
sudo rm -r $final_path/install
|
||||
|
||||
# Modifie les variables dans le fichier de configuration nginx
|
||||
sudo sed -i "s@__PATHTOCHANGE__@$path@g" /etc/nginx/conf.d/$domain.d/$app.conf
|
||||
sudo sed -i "s@__WWWPATH__@$final_path@g" /etc/nginx/conf.d/$domain.d/$app.conf
|
||||
sudo sed -i "s@__PATH__@$path@g" /etc/nginx/conf.d/$domain.d/$app.conf
|
||||
sudo sed -i "s@__FINALPATH__@$final_path@g" /etc/nginx/conf.d/$domain.d/$app.conf
|
||||
sudo sed -i "s@__NAMETOCHANGE__@$app@g" /etc/nginx/conf.d/$domain.d/$app.conf
|
||||
|
||||
# Créer le fichier de configuration du pool php-fpm et le configure.
|
||||
sed -i "s@__NAMETOCHANGE__@$app@g" ../conf/php-fpm.conf
|
||||
sed -i "s@__FINALPATH__@$final_path@g" ../conf/php-fpm.conf
|
||||
finalphpconf=/etc/php5/fpm/pool.d/$app.conf
|
||||
sudo cp ../conf/php-fpm.conf $finalphpconf
|
||||
sudo chown root: $finalphpconf
|
||||
finalphpini=/etc/php5/fpm/conf.d/20-$app.ini
|
||||
sudo cp ../conf/php-fpm.ini $finalphpini
|
||||
sudo chown root: $finalphpini
|
||||
sudo service php5-fpm reload
|
||||
ADD_SYS_USER # Créer un user système dédié pour l'application
|
||||
POOL_FPM # Créer le fichier de configuration du pool php-fpm et le configure.
|
||||
|
||||
# sudo chown www-data: -R $final_path
|
||||
# sudo chmod 770 -R $final_path
|
||||
|
@ -46,18 +36,18 @@ sudo service php5-fpm reload
|
|||
# sudo chmod 770 -R $final_path/files $final_path/upload
|
||||
# sudo chmod a+x $final_path/CsvToXml_For_Teampass.sh
|
||||
|
||||
sudo find $final_path -type f -print0 | xargs -0 sudo chmod 640
|
||||
# drwxr-x--- sur les dossiers
|
||||
sudo find $final_path -type d -print0 | xargs -0 sudo chmod 750
|
||||
# -rw-r--r-- sur les fichiers
|
||||
sudo find $final_path -type f -print0 | xargs -0 sudo chmod 644
|
||||
# drwxr-xr-x sur les dossiers
|
||||
sudo find $final_path -type d -print0 | xargs -0 sudo chmod 755
|
||||
# Les dossiers files et upload ont besoin d'un droit d'écriture.
|
||||
sudo chmod 770 -R $final_path/files $final_path/upload
|
||||
sudo chmod 774 -R $final_path/files $final_path/upload
|
||||
# Le script de conversion csv xml doit être exécutable, au moins par root.
|
||||
sudo chmod 740 $final_path/CsvToXml_For_Teampass.sh
|
||||
# Les fichiers appartiennent à root et sont lisibles par www-data
|
||||
sudo chown -R root:www-data $final_path
|
||||
|
||||
sudo chmod 744 $final_path/CsvToXml_For_Teampass.sh
|
||||
# Les fichiers appartiennent à root
|
||||
sudo chown -R root: $final_path
|
||||
|
||||
# Recharge la configuration Nginx
|
||||
sudo service nginx reload
|
||||
# Régénère la configuration de SSOwat
|
||||
sudo yunohost app ssowatconf
|
||||
sudo yunohost app ssowatconf
|
||||
|
|
Loading…
Add table
Reference in a new issue