mirror of
https://github.com/YunoHost/moulinette.git
synced 2024-09-03 20:06:31 +02:00
290 lines
11 KiB
Python
290 lines
11 KiB
Python
# -*- coding: utf-8 -*-
|
|
|
|
""" License
|
|
|
|
Copyright (C) 2013 YunoHost
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU Affero General Public License as published
|
|
by the Free Software Foundation, either version 3 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU Affero General Public License for more details.
|
|
|
|
You should have received a copy of the GNU Affero General Public License
|
|
along with this program; if not, see http://www.gnu.org/licenses
|
|
|
|
"""
|
|
|
|
""" yunohost_domain.py
|
|
|
|
Manage domains
|
|
"""
|
|
import os
|
|
import sys
|
|
import datetime
|
|
import re
|
|
import shutil
|
|
from urllib import urlopen
|
|
from yunohost import YunoHostError, YunoHostLDAP, win_msg, colorize, validate, get_required_args
|
|
from yunohost_tools import tools_lemonrule
|
|
|
|
a2_template_path = '/etc/yunohost/apache/templates'
|
|
a2_app_conf_path = '/etc/yunohost/apache/domains'
|
|
lemon_tmp_conf = '/tmp/tmplemonconf'
|
|
|
|
def domain_list(filter=None, limit=None, offset=None):
|
|
"""
|
|
List domains
|
|
|
|
Keyword argument:
|
|
limit -- Maximum number of domain fetched
|
|
offset -- Starting number for domain fetching
|
|
filter -- LDAP filter used to search
|
|
|
|
"""
|
|
with YunoHostLDAP() as yldap:
|
|
result_list = []
|
|
if offset: offset = int(offset)
|
|
else: offset = 0
|
|
if limit: limit = int(limit)
|
|
else: limit = 1000
|
|
if not filter: filter = 'virtualdomain=*'
|
|
|
|
result = yldap.search('ou=domains,dc=yunohost,dc=org', filter, attrs=['virtualdomain'])
|
|
|
|
if result and len(result) > (0 + offset) and limit > 0:
|
|
i = 0 + offset
|
|
for domain in result[i:]:
|
|
if i <= limit:
|
|
result_list.append(domain['virtualdomain'][0])
|
|
i += 1
|
|
else:
|
|
raise YunoHostError(167, _("No domain found"))
|
|
|
|
return { 'Domains': result_list }
|
|
|
|
|
|
def domain_add(domains, raw=False, main=False):
|
|
"""
|
|
Create a custom domain
|
|
|
|
Keyword argument:
|
|
domains -- Domain name to add
|
|
raw -- Auto-configure Apache and LemonLDAP for the domain
|
|
|
|
"""
|
|
with YunoHostLDAP() as yldap:
|
|
attr_dict = { 'objectClass' : ['mailDomain', 'top'] }
|
|
ip = str(urlopen('http://ip.yunohost.org').read())
|
|
now = datetime.datetime.now()
|
|
timestamp = str(now.year) + str(now.month) + str(now.day)
|
|
result = []
|
|
|
|
if not isinstance(domains, list):
|
|
domains = [ domains ]
|
|
|
|
for domain in domains:
|
|
try:
|
|
if domain in domain_list()['Domains']: continue
|
|
except YunoHostError: pass
|
|
ssl_dir = '/usr/share/yunohost/yunohost-config/ssl/yunoCA'
|
|
ssl_domain_path = '/etc/yunohost/certs/'+ domain
|
|
with open(ssl_dir +'/serial', 'r') as f:
|
|
serial = f.readline().rstrip()
|
|
try: os.listdir(ssl_domain_path)
|
|
except OSError: os.makedirs(ssl_domain_path)
|
|
|
|
command_list = [
|
|
'cp '+ ssl_dir +'/openssl.cnf '+ ssl_domain_path,
|
|
'sed -i "s/yunohost.org/' + domain + '/g" '+ ssl_domain_path +'/openssl.cnf',
|
|
'openssl req -new -config '+ ssl_domain_path +'/openssl.cnf -days 3650 -out '+ ssl_dir +'/certs/yunohost_csr.pem -keyout '+ ssl_dir +'/certs/yunohost_key.pem -nodes -batch',
|
|
'openssl ca -config '+ ssl_domain_path +'/openssl.cnf -days 3650 -in '+ ssl_dir +'/certs/yunohost_csr.pem -out '+ ssl_dir +'/certs/yunohost_crt.pem -batch',
|
|
'ln -s /etc/ssl/certs/ca-yunohost_crt.pem '+ ssl_domain_path +'/ca.pem',
|
|
'cp '+ ssl_dir +'/certs/yunohost_key.pem '+ ssl_domain_path +'/key.pem',
|
|
'cp '+ ssl_dir +'/newcerts/'+ serial +'.pem '+ ssl_domain_path +'/crt.pem',
|
|
'chmod 600 '+ ssl_domain_path +'/key.pem'
|
|
]
|
|
|
|
for command in command_list:
|
|
if os.system(command) != 0:
|
|
raise YunoHostError(17, _("An error occurred during certificate generation"))
|
|
|
|
if not raw:
|
|
lemonrules = [
|
|
(('exportedHeaders', domain, 'Auth-User'), '$uid'),
|
|
(('exportedHeaders', domain, 'Remote-User'), '$uid'),
|
|
(('exportedHeaders', domain, 'Desc'), '$description'),
|
|
(('exportedHeaders', domain, 'Email'), "(ref($mail) eq 'ARRAY' ? $mail[0] : $mail)"),
|
|
(('exportedHeaders', domain, 'Name'), '$cn'),
|
|
(('exportedHeaders', domain, 'Authorization'), '"Basic ".encode_base64("$uid:$_password")'),
|
|
(('vhostOptions', domain, 'vhostMaintenance'), 0),
|
|
(('vhostOptions', domain, 'vhostPort'), -1),
|
|
(('vhostOptions', domain, 'vhostHttps'), -1),
|
|
(('locationRules', domain, 'default'), 'accept', apply=True)
|
|
]
|
|
for lemonrule in lemonrules: tools_lemonrule(*lemonrule)
|
|
_apache_config(domain)
|
|
|
|
try:
|
|
yldap.validate_uniqueness({ 'virtualdomain' : domain })
|
|
except YunoHostError:
|
|
if not raw:
|
|
win_msg(_("Web config created"))
|
|
result.append(domain)
|
|
break
|
|
else:
|
|
raise YunoHostError(17, _("Domain already created"))
|
|
|
|
|
|
attr_dict['virtualdomain'] = domain
|
|
|
|
try:
|
|
with open('/var/lib/bind/'+ domain +'.zone') as f: pass
|
|
except IOError as e:
|
|
zone_lines = [
|
|
'$TTL 38400',
|
|
domain +'. IN SOA ns.'+ domain +'. root.'+ domain +'. '+ timestamp +' 10800 3600 604800 38400',
|
|
domain +'. IN NS ns.'+ domain +'.',
|
|
domain +'. IN A '+ ip,
|
|
domain +'. IN MX 5 '+ domain +'.',
|
|
domain +'. IN TXT "v=spf1 a mx a:'+ domain +' ?all"',
|
|
'ns.'+ domain +'. IN A '+ ip,
|
|
'_xmpp-client._tcp.'+ domain +'. IN SRV 0 5 5222 '+ domain +'.',
|
|
'_xmpp-server._tcp.'+ domain +'. IN SRV 0 5 5269 '+ domain +'.',
|
|
'_jabber._tcp.'+ domain +'. IN SRV 0 5 5269 '+ domain +'.',
|
|
]
|
|
if main:
|
|
zone_lines.extend([
|
|
'pubsub.'+ domain +'. IN A '+ ip,
|
|
'muc.'+ domain +'. IN A '+ ip,
|
|
'vjud.'+ domain +'. IN A '+ ip
|
|
])
|
|
with open('/var/lib/bind/' + domain + '.zone', 'w') as zone:
|
|
for line in zone_lines:
|
|
zone.write(line + '\n')
|
|
else:
|
|
raise YunoHostError(17, _("Zone file already exists for ") + domain)
|
|
|
|
conf_lines = [
|
|
'zone "'+ domain +'" {',
|
|
' type master;',
|
|
' file "/var/lib/bind/'+ domain +'.zone";',
|
|
' allow-transfer {',
|
|
' 127.0.0.1;',
|
|
' localnets;',
|
|
' };',
|
|
'};'
|
|
]
|
|
with open('/etc/bind/named.conf.local', 'a') as conf:
|
|
for line in conf_lines:
|
|
conf.write(line + '\n')
|
|
|
|
os.system('service bind9 reload')
|
|
|
|
# XMPP
|
|
try:
|
|
with open('/etc/metronome/conf.d/'+ domain +'.cfg.lua') as f: pass
|
|
except IOError as e:
|
|
conf_lines = [
|
|
'VirtualHost "'+ domain +'"',
|
|
' authentication = "ldap2"',
|
|
' ldap = {',
|
|
' hostname = "localhost",',
|
|
' user = {',
|
|
' basedn = "ou=users,dc=yunohost,dc=org",',
|
|
' filter = "(&(objectClass=posixAccount)(mail=*@'+ domain +'))",',
|
|
' usernamefield = "mail",',
|
|
' namefield = "cn",',
|
|
' },',
|
|
' }',
|
|
]
|
|
with open('/etc/metronome/conf.d/' + domain + '.cfg.lua', 'w') as conf:
|
|
for line in conf_lines:
|
|
conf.write(line + '\n')
|
|
|
|
os.system('mkdir -p /var/lib/metronome/'+ domain.replace('.', '%2e') +'/pep')
|
|
os.system('chown -R metronome: /var/lib/metronome/')
|
|
os.system('chown -R metronome: /etc/metronome/conf.d/')
|
|
os.system('service metronome restart')
|
|
|
|
if yldap.add('virtualdomain=' + domain + ',ou=domains', attr_dict):
|
|
result.append(domain)
|
|
continue
|
|
else:
|
|
raise YunoHostError(169, _("An error occured during domain creation"))
|
|
|
|
win_msg(_("Domain(s) successfully created"))
|
|
|
|
return { 'Domains' : result }
|
|
|
|
|
|
def domain_remove(domains):
|
|
"""
|
|
Delete domains
|
|
|
|
Keyword argument:
|
|
domains -- Domain(s) to delete
|
|
|
|
"""
|
|
with YunoHostLDAP() as yldap:
|
|
result = []
|
|
|
|
if not isinstance(domains, list):
|
|
domains = [ domains ]
|
|
|
|
for domain in domains:
|
|
if yldap.remove('virtualdomain=' + domain + ',ou=domains'):
|
|
try:
|
|
shutil.rmtree('/etc/yunohost/certs/'+ domain)
|
|
os.remove('/var/lib/bind/'+ domain +'.zone')
|
|
shutil.rmtree('/var/lib/metronome/'+ domain.replace('.', '%2e'))
|
|
os.remove('/etc/metronome/conf.d/'+ domain +'.cfg.lua')
|
|
except:
|
|
pass
|
|
with open('/etc/bind/named.conf.local', 'r') as conf:
|
|
conf_lines = conf.readlines()
|
|
with open('/etc/bind/named.conf.local', 'w') as conf:
|
|
in_block = False
|
|
for line in conf_lines:
|
|
if re.search(r'^zone "'+ domain, line):
|
|
in_block = True
|
|
if in_block:
|
|
if re.search(r'^};$', line):
|
|
in_block = False
|
|
else:
|
|
conf.write(line)
|
|
result.append(domain)
|
|
continue
|
|
else:
|
|
raise YunoHostError(169, _("An error occured during domain deletion"))
|
|
|
|
win_msg(_("Domain(s) successfully deleted"))
|
|
|
|
return { 'Domains' : result }
|
|
|
|
|
|
def _apache_config(domain):
|
|
"""
|
|
Fill Apache configuration templates
|
|
|
|
Keyword arguments:
|
|
domain -- Domain to configure Apache around
|
|
|
|
"""
|
|
try: os.listdir(a2_app_conf_path +'/'+ domain +'.d/')
|
|
except OSError: os.makedirs(a2_app_conf_path +'/'+ domain +'.d/')
|
|
|
|
with open(a2_app_conf_path +'/'+ domain +'.conf', 'w') as a2_conf:
|
|
for line in open(a2_template_path +'/template.conf.tmp'):
|
|
line = line.replace('[domain]',domain)
|
|
a2_conf.write(line)
|
|
|
|
if os.system('service apache2 reload') == 0:
|
|
win_msg(_("Apache configured"))
|
|
else:
|
|
raise YunoHostError(1, _("An error occured during Apache configuration"))
|
|
|