#!/bin/bash # Required for servers using other lang LANG=en_US.UTF-8 ######################################################################## # Use of code or any part of it is strictly prohibited. File protected by copyright law and provided under license. # To Use any part of this code you need to get a writen approval from the code owner: info@centos-webpanel.com ######################################################################## # # CWP instaler for CentOS 8 # ######################################################################## help() { echo "Usage: $0 [OPTIONS] -r, --restart Restart server after install [yes] default: no -p, --phpfpm Install PHP-FPM [5.4|5.5|5.6|7.0|7.1|7.2|7.3] default: no -s, --softaculous Install Softaculous [yes] default: no -m, --modsecurity Install ModSecurity CWAF [yes] default: no -h, --help Print this help Example: sh $0 -r yes --phpfpm 7.2 --softaculous yes --modsecurity yes" exit 1 } for argument; do delimiter="" case "$argument" in --restart) arguments="${arguments}-r " ;; --phpfpm) arguments="${arguments}-p " ;; --softaculous) arguments="${arguments}-s " ;; --modsecurity) arguments="${arguments}-m " ;; --help) arguments="${arguments}-h " ;; *) [[ "${argument:0:1}" == "-" ]] || delimiter="\"" arguments="${arguments}${delimiter}${argument}${delimiter} ";; esac done eval set -- "$arguments" while getopts "r:p:s:m:h" Oflags; do case $Oflags in r) restart=$OPTARG ;; # Restart server after install p) phpfpm=$OPTARG ;; # Install PHP-FPM s) softaculous=$OPTARG ;; # Install Softaculous m) modsecurity=$OPTARG ;; # Install ModSecurity CWAF h) help ;; # Print help *) help ;; # Print help esac done if [[ $EUID -ne 0 ]]; then echo "This script must be run as root" exit 1 fi if [ -e "/usr/local/cwpsrv/" ]; then echo echo "CWP is already installed on your server." echo "If you want to update it, run this command: sh /scripts/update_cwp" echo exit 1 fi # Check for unsupported Operating systems arch=$(uname -m) #centosversion=`rpm -qa \*-release | grep -Ei "oracle|redhat|centos|cloudlinux" | cut -d"-" -f3` centosversion=`rpm -qa \*-release | grep -Ei "oracle|redhat|centos|cloudlinux|rocky|alma" | cut -d"-" -f3|sed 's/\..$//'|head -n 1` if [[ $arch == "i686" ]]; then echo "Unsupported Operating system, please use CentOS 8.x 64bit" exit 1 elif [[ $arch == "armv7l" ]]; then echo "Unsupported Operating system ARM, please use CentOS 8.x 64bit" exit 1 elif [[ $arch == "aarch64" ]]; then echo "Unsupported Operating system ARM, please use CentOS 8.x 64bit" exit 1 fi if [ $centosversion -eq "7" ]; then echo "Unsupported Operating system, please use CentOS 8.x 64bit" exit 1 elif [[ $centosversion -eq "6" ]]; then echo "Unsupported Operating system, please use CentOS 8.x 64bit" exit 1 elif [[ $centosversion -eq "5" ]]; then echo "Unsupported Operating system, please use CentOS 8.x 64bit" exit 1 fi # Alma linux 8 fix rpm --import https://repo.almalinux.org/almalinux/RPM-GPG-KEY-AlmaLinux yum install -y ca-certificates #yum -y upgrade type mysql 2> /dev/null && MYSQLCHK="on" || MYSQLCHK="off" # MySQL checker if [ "$MYSQLCHK" = "on" ]; then # Check if current password from /root/.my.cnf is works if [ -f /root/.my.cnf ]; then passwd1=`grep ^password /root/.my.cnf| awk -F\= {'print $2'}|sed ':a;N;$!ba;s/\n//g'|sed 's/\"//g'|sed 's/[[:space:]]//g'` # CPanel password in /etc/.my.cnf passwd2=`/bin/cat /root/.my.cnf |grep -i password |sed 's/[[:space:]]//g' |sed 's/password=//'` # Non-CPanel password in /etc/.my.cnf if [ -z "ls -lA /root |grep -i migration" ]; then passwd=$passwd2 else passwd=$passwd1 fi fi test=`mysql -u root -p$passwd -e "show databases;" -B|head -n1` if [ "$test" = "Database" ]; then password=$passwd else #check pwd if works while [ "$check" != "Database" ] do echo "Enter MySQL root Password: " read -p "MySQL root password []:" password check=`mysql -u root -p$password -e "show databases;" -B|head -n1` if [ "$check" = "Database" ]; then echo "Password OK!!" else echo "MySQL root passwordis invalid!!!" echo "You can remove MySQL server using command: yum remove mysql" echo "after mysql is removed run installer again." echo "" echo "if exists you can check your mysql password in file: /root/.my.cnf" echo "" if [ -e "/root/.my.cnf" ]; then echo "" cat /root/.my.cnf echo "" fi fi done fi else password=$( /etc/yum.repos.d/mariadb.repo < /etc/yum.repos.d/cwp.repo < /etc/yum.repos.d/powertools.repo < /dev/null && yum config-manager --set-enabled ol8_codeready_builder #Umask Fix sed -ie "s/umask\=002/umask\=022/g" /etc/bashrc >/dev/null 2>&1 #install Postfix yum -y install postfix --enablerepo=cwp yum -y install dovecot dovecot-mysql dovecot-pigeonhole cyrus-sasl-devel cyrus-sasl-sql subversion bind bind-utils bind-libs file CHKDATE=`date +%Y` if [ "$CHKDATE" -le "2014" ];then echo "You have incorrect date set on your server!" echo `date` exit 1 fi #Install dependecies if [ $MYSQLCHK = "off" ]; then yum -y install mariadb mariadb-server cat > etc/systemd/system/mariadb.service.d/override.conf < "5.6.9" ]]; then NEW=1 else NEW=0 fi else # There is MariaDB server 10.4 if [[ "$VERSION" > "10.4" ]]; then NEW=1 else NEW=0 yum -y upgrade fi fi pubip=`curl -s http://centos-webpanel.com/webpanel/main.php?app=showip` fqdn=`/bin/hostname -f` # Check for hostname -f command issue hostnameissuecheck=$? if [ $hostnameissuecheck -ne 0 ];then fqdn=`/bin/hostname` fi echo "" echo "PREPARING THE SERVER" echo "##########################" if [ -e "/etc/selinux/config" ]; then sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config setenforce 0 fi # Disable Firewalld as we use CSF/LFD systemctl stop firewalld systemctl disable firewalld ## APACHE INSTALLER ## echo echo "#############################################" echo "Please wait... installing web server files..." echo "#############################################" echo yum -y install apr apr-util cwp-httpd 2>&1 |tee /tmp/cwp.log yum -y install cwp-suphp if [ ! -e "/usr/local/apache/bin/httpd" ] then echo echo "Compiler requires 512 MB RAM + SWAP" echo "Installation FAILED at httpd" echo "Installation FAILED at httpd" >> /tmp/cwp.log curl http://static.cdn-cwp.com/files/s_scripts/sinfo.sh|sh 2>&1 >> /tmp/cwp.log curl -F"operation=upload" -F"file=@/tmp/cwp.log" http://error-reporting.control-webpanel.com/?service=installer echo "Please contact CWP support about this issue and include the last few lines from the error:" echo "http://centos-webpanel.com/contact" exit 1 fi echo echo "#############################################" echo "Please wait... Installing PHP ..." echo "#############################################" echo yum -y install cwp-php --enablerepo=epel 2>&1 |tee /tmp/cwp.log if [ ! -e "/usr/local/bin/php" ] then echo echo "Compiler requires 512 MB RAM + SWAP" echo "Installation FAILED at php" echo "Installation FAILED at php" >> /tmp/cwp.log curl http://static.cdn-cwp.com/files/s_scripts/sinfo.sh|sh 2>&1 >> /tmp/cwp.log curl -F"operation=upload" -F"file=@/tmp/cwp.log" http://error-reporting.control-webpanel.com/?service=installer echo "Please contact CWP support about this issue and include the last few lines from the error:" echo "http://centos-webpanel.com/contact" exit 1 fi if [ -e "/usr/local/bin/php-config" ] then CHKEXTENSIONTDIR=`/usr/local/bin/php-config --extension-dir`;grep ^extension_dir /usr/local/php/php.ini || echo "extension_dir='$CHKEXTENSIONTDIR'" >> /usr/local/php/php.ini fi # Installing CWP server yum -y install cwpsrv cwpphp --enablerepo=epel if [ ! -e "/usr/local/cwpsrv/bin/cwpsrv" ] then echo echo "Compiler requires 512 MB RAM + SWAP" echo "Installation FAILED at cwpsrv" echo "Installation FAILED at cwpsrv" > /tmp/cwp.log curl http://static.cdn-cwp.com/files/s_scripts/sinfo.sh|sh 2>&1 >> /tmp/cwp.log curl -F"operation=upload" -F"file=@/tmp/cwp.log" http://error-reporting.control-webpanel.com/?service=installer echo "Please contact CWP support about this issue and include the last few lines from the error:" echo "http://centos-webpanel.com/contact" exit 1 fi if [ ! -e "/usr/local/cwp/php71/bin/php" ] then echo echo "Compiler requires 512 MB RAM + SWAP" echo "Installation FAILED at cwp phpfpm" echo "Installation FAILED at cwp phpfpm" > /tmp/cwp.log curl http://static.cdn-cwp.com/files/s_scripts/sinfo.sh|sh 2>&1 >> /tmp/cwp.log curl -F"operation=upload" -F"file=@/tmp/cwp.log" http://error-reporting.control-webpanel.com/?service=installer echo "Please contact CWP support about this issue and include the last few lines from the error:" echo "http://centos-webpanel.com/contact" exit 1 fi if ! [[ -d /usr/local/src/ ]]; then mkdir -p /usr/local/src ; fi # SSL Installer openssl genrsa -out /etc/pki/tls/cwp-$pubip.key 2048 openssl req -new -x509 -key /etc/pki/tls/cwp-$pubip.key -out /etc/pki/tls/cwp-$pubip.cert -days 3650 -subj /CN=$pubip # CONFIGURE MYSQL ################### cd /usr/local/src if [ $NEW_INSTALL = 1 ]; then echo "## CONFIGURE MYSQL" echo "###################" sed -i "s|old_passwords=1|#old_passwords=1|" /etc/my.cnf /bin/systemctl daemon-reload if [ -e "/var/run/mariadb" ];then chown -R mysql:mysql /var/run/mariadb/ fi /bin/systemctl restart mariadb.service /bin/systemctl enable mariadb.service mysqladmin -u root password $password mysql -u root -p$password -e "DROP DATABASE test"; mysql -u root -p$password -e "DELETE FROM mysql.user WHERE User='root' AND Host!='localhost'"; mysql -u root -p$password -e "DELETE FROM mysql.user WHERE User=''"; mysql -u root -p$password -e "FLUSH PRIVILEGES"; fi cat > /root/.my.cnf < /usr/local/apache/conf.d/server-status.conf < SetHandler server-status Order deny,allow Allow from localhost EOF if ! [[ -L /etc/systemd/system/multi-user.target.wants/httpd.service ]]; then ln -s /usr/lib/systemd/system/httpd.service /etc/systemd/system/multi-user.target.wants/httpd.service fi grep ^LimitNOFILE /usr/lib/systemd/system/httpd.service 1> /dev/null|| echo -e "\n[Service]\nLimitNOFILE=65535" >> /usr/lib/systemd/system/httpd.service /bin/systemctl daemon-reload # Set PHP Config sed -i "s|\;date\.timezone \=.*|date\.timezone = Etc/UTC|" /usr/local/php/php.ini echo "127.0.0.1 "$fqdn >> /etc/hosts /bin/systemctl enable httpd.service /bin/systemctl restart httpd.service # Mail Server Config sed -i "s|inet_interfaces = localhost|inet_interfaces = all|" /etc/postfix/main.cf sed -i "s|mydestination = $myhostname, localhost.$mydomain, localhost|mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, $domain|" /etc/postfix/main.cf sed -i "s|#home_mailbox = Maildir/|home_mailbox = Maildir/|" /etc/postfix/main.cf #install csf firewall echo "Installing CSF Firewall" echo "#######################" cd /tmp rm -fv csf.tgz wget http://download.configserver.com/csf.tgz tar -xzf csf.tgz cd csf sh install.sh #sed -i "s|465,587,993,995|465,587,993,995,2030,2031,2082,2083,2086,2087,2095,2096|" /etc/csf/csf.conf sed -i "s|80,110,113,443|80,110,113,443,2030,2031,2082,2083,2086,2087,2095,2096|" /etc/csf/csf.conf sed -i 's|TESTING = "1"|TESTING = "0"|' /etc/csf/csf.conf echo "# Run external commands before csf configures iptables" >> /usr/local/csf/bin/csfpre.sh echo "# Run external commands after csf configures iptables" >> /usr/local/csf/bin/csfpost.sh csf -x cat >> /etc/csf/csf.pignore < /usr/local/csf/bin/regex.custom.pm < /etc/cron.daily/cwp <> /var/spool/cron/root echo "0 0 * * * /usr/local/cwp/php71/bin/php -d max_execution_time=18000 -q /usr/local/cwpsrv/htdocs/resources/admin/include/alertandautorenewssl.php" >> /var/spool/cron/root # MySQL Database import curl 'http://static.cdn-cwp.com/files/cwp/sql/root_cwp.sql'|mysql -uroot -p$password curl 'http://static.cdn-cwp.com/files/cwp/sql/oauthv2.sql'|mysql -uroot -p$password mysql -u root -p$password << EOF use root_cwp; UPDATE settings SET shared_ip="$pubip"; EOF # Disable named for antiDDoS security /bin/systemctl enable named # Google DNS #CHECKDNS=`dig a centos-webpanel.com @8.8.8.8 +short` #CHECKDNSERROR=$? #if [ $CHECKDNSERROR -eq 0 ];then #echo "nameserver 8.8.8.8" > /etc/resolv.conf #echo "nameserver 8.8.4.4" >> /etc/resolv.conf #fi sed -i "s|127.0.0.1|any|" /etc/named.conf sed -i "s|localhost|any|" /etc/named.conf sed -i 's/recursion yes/recursion no/g' /etc/named.conf # MAIL SERVER INSTALLER # clean yum yum clean all ########################################################## # MAIL SERVER ########################################################## # check MySQL root password mysql_root_password=$password if [ -z "${mysql_root_password}" ]; then read -p "MySQL root password []:" mysql_root_password fi #clear echo "#########################################################" echo " CentOS Web Panel MailServer Installer " echo "#########################################################" echo echo "visit for help: www.centos-webpanel.com" echo check=`mysql -u root -p$mysql_root_password -e "show databases;" -B|head -n1` if [ "$check" = "Database" ]; then echo "Password OK!!" else echo "MySQL root password is invalid!!!" echo "Check password and run this script again." exit 1 fi ## Needed to add password in root folder if [ $NEW = 0 ]; then mysql -u root -p$mysql_root_password -e "UPDATE mysql.user SET Password = PASSWORD('$mysql_root_password') WHERE user = 'root';" mysql -u root -p$mysql_root_password -e "FLUSH PRIVILEGES;" else mysql -u root -p$mysql_root_password < /etc/postfix/transport postmap /etc/postfix/transport chown -R vacation:vacation /var/spool/vacation echo "127.0.0.1 autoreply.$cnf_hostname" >> /etc/hosts #sieve mkdir -p /var/sieve/ cat > /var/sieve/globalfilter.sieve <> /etc/shells systemctl enable pure-ftpd systemctl restart pure-ftpd # /etc/postfix/main.cf sed -i "s|MY_HOSTNAME|$cnf_hostname|g" /etc/postfix/main.cf sed -i "s|MY_HOSTNAME|autoreply.$cnf_hostname|g" /etc/postfix/mysql-virtual_vacation.cf sed -i "s|MY_DOMAIN|$cnf_hostname|g" /etc/postfix/main.cf # MySQL PWD Fix for postfix sed -i "s|MYSQL_PASSWORD|$postfix_pwd|g" /etc/postfix/mysql-relay_domains_maps.cf sed -i "s|MYSQL_PASSWORD|$postfix_pwd|g" /etc/postfix/mysql-virtual_alias_maps.cf sed -i "s|MYSQL_PASSWORD|$postfix_pwd|g" /etc/postfix/mysql-virtual_alias_pipe_maps.cf sed -i "s|MYSQL_PASSWORD|$postfix_pwd|g" /etc/postfix/mysql-virtual_alias_default_maps.cf sed -i "s|MYSQL_PASSWORD|$postfix_pwd|g" /etc/postfix/mysql-virtual_domains_maps.cf sed -i "s|MYSQL_PASSWORD|$postfix_pwd|g" /etc/postfix/mysql-virtual_mailbox_limit_maps.cf sed -i "s|MYSQL_PASSWORD|$postfix_pwd|g" /etc/postfix/mysql-virtual_mailbox_maps.cf sed -i "s|MYSQL_PASSWORD|$postfix_pwd|g" /etc/postfix/mysql-virtual_mailbox_uid_maps.cf sed -i "s|MYSQL_PASSWORD|$postfix_pwd|g" /etc/postfix/mysql-virtual_mailbox_gid_maps.cf sed -i "s|MYSQL_PASSWORD|$postfix_pwd|g" /etc/postfix/mysql-virtual_vacation.cf sed -i '/^.*smtpd_bind_address.*$/d' /etc/postfix/master.cf sed -i '/^.*virtual_mailbox_limit_maps.*$/d' /etc/postfix/main.cf # Postfix Web panel SQL setup if [ ! -e "/usr/local/cwpsrv/htdocs/resources/admin/include/postfix.php" ] then cd /usr/local/cwpsrv/htdocs/resources/admin/include wget -q http://centos-webpanel.com/webpanel/main.php?dl=postfix.txt mv main.php?dl=postfix.txt postfix.php fi sed -i "s|\$db_pass_postfix = ''|\$db_pass_postfix = '$postfix_pwd'|" /usr/local/cwpsrv/htdocs/resources/admin/include/postfix.php chmod 600 /usr/local/cwpsrv/htdocs/resources/admin/include/postfix.php # Vacation fix sed -i "s|MYSQL_PASSWORD|$postfix_pwd|" /etc/postfix/vacation.conf sed -i "s|AUTO_REPLAY|autoreply.$cnf_hostname|" /etc/postfix/vacation.conf # DOVECOT fix sed -i "s|MYSQL_PASSWORD|$postfix_pwd|" /etc/dovecot/dovecot-dict-quota.conf sed -i "s|MYSQL_PASSWORD|$postfix_pwd|" /etc/dovecot/dovecot-mysql.conf sed -i "s|MYSQL_PASSWORD|$postfix_pwd|" /etc/dovecot/dovecot-token.conf sed -i "s|MY_DOMAIN|$cnf_hostname|" /etc/dovecot/dovecot.conf sed -i "s|MY_DOMAIN|$cnf_hostname|" /etc/dovecot/dovecot.conf ##### ROUNDCUBE INSTALLER ##### /usr/local/cwp/php71/bin/pear install Mail_mime /usr/local/cwp/php71/bin/pear install Net_SMTP /usr/local/cwp/php71/bin/pear install channel://pear.php.net/Net_IDNA2-0.1.1 #SIEVE REQUIREMENTS # >=5.3.0, roundcube/plugin-installer: >=0.1.3, roundcube/net_sieve: "1.5.0 /usr/local/cwp/php71/bin/pear install Net_Sieve if [ -z "${mysql_roundcube_password}" ]; then tmp=$(> .passwords fi if [ -z "${mysql_root_password}" ]; then read -p "MySQL root password []:" mysql_root_password fi wget -P /usr/local/cwpsrv/var/services http://static.cdn-cwp.com/files/mail/roundcubemail-1.2.3.tar.gz tar -C /usr/local/cwpsrv/var/services -zxf /usr/local/cwpsrv/var/services/roundcubemail-*.tar.gz rm -f /usr/local/cwpsrv/var/services/roundcubemail-*.tar.gz mv /usr/local/cwpsrv/var/services/roundcubemail-* /usr/local/cwpsrv/var/services/roundcube chown cwpsvc:cwpsvc -R /usr/local/cwpsrv/var/services/roundcube chmod 777 -R /usr/local/cwpsrv/var/services/roundcube/temp/ chmod 777 -R /usr/local/cwpsrv/var/services/roundcube/logs/ sed -e "s|mypassword|${mysql_roundcube_password}|" <<'EOF' | mysql -u root -p"${mysql_root_password}" USE mysql; CREATE DATABASE IF NOT EXISTS roundcube; GRANT ALL PRIVILEGES ON roundcube.* TO 'roundcube'@'localhost' IDENTIFIED BY 'mypassword'; FLUSH PRIVILEGES; EOF mysql -u root -p"${mysql_root_password}" 'roundcube' < /usr/local/cwpsrv/var/services/roundcube/SQL/mysql.initial.sql cp /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php.sample /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['default_host'\] =\).*$|\1 \'localhost\';|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['smtp_server'\] =\).*$|\1 \'localhost\';|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['smtp_user'\] =\).*$|\1 \'%u\';|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['smtp_pass'\] =\).*$|\1 \'%p\';|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php #sed -i "s|^\(\$config\['support_url'\] =\).*$|\1 \'mailto:${E}\';|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['quota_zero_as_unlimited'\] =\).*$|\1 true;|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['preview_pane'\] =\).*$|\1 true;|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['read_when_deleted'\] =\).*$|\1 false;|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['check_all_folders'\] =\).*$|\1 true;|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['display_next'\] =\).*$|\1 true;|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['top_posting'\] =\).*$|\1 true;|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['sig_above'\] =\).*$|\1 true;|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|^\(\$config\['login_lc'\] =\).*$|\1 2;|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php sed -i "s|MYSQL_PASSWORD|$postfix_pwd|g" /usr/local/cwpsrv/var/services/roundcube/plugins/password/config.inc.php sed -i "s|^\(\$config\['db_dsnw'\] =\).*$|\1 \'mysqli://roundcube:${mysql_roundcube_password}@localhost/roundcube\';|" /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php rm -rf /usr/local/cwpsrv/var/services/roundcube/installer sh /usr/local/cwpsrv/htdocs/resources/scripts/mail_roundcube_update chown -R cwpsvc:cwpsvc /usr/local/cwpsrv/var/services/roundcube # MAIL SECURITY chmod 640 /etc/postfix/mysql-*.cf chmod 640 /etc/dovecot/dovecot-*.conf chmod 640 /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php chown root.mail /etc/postfix/mysql-*.cf chown root.mail /etc/dovecot/dovecot-*.conf # Opendkim /usr/bin/yum --enablerepo=epel -y install opendkim libopendkim perl-Mail-DKIM perl-Mail-SPF pypolicyd-spf /usr/bin/yum --enablerepo=epel -y install opendkim-tools /bin/cat > /etc/opendkim.conf << EOL AutoRestart Yes AutoRestartRate 10/1h LogWhy Yes Syslog Yes SyslogSuccess Yes Mode sv Canonicalization relaxed/simple ExternalIgnoreList refile:/etc/opendkim/TrustedHosts InternalHosts refile:/etc/opendkim/TrustedHosts KeyTable refile:/etc/opendkim/KeyTable SigningTable refile:/etc/opendkim/SigningTable SignatureAlgorithm rsa-sha256 Socket inet:8891@localhost PidFile /var/run/opendkim/opendkim.pid UMask 022 UserID opendkim:opendkim TemporaryDirectory /var/tmp EOL if [ ! -e "/usr/sbin/opendkim-genkey" ];then /usr/bin/yum --enablerepo=epel -y install opendkim-tools fi # Setup Login Screen [[ $(grep "bash_cwp" /root/.bash_profile) == "" ]] && echo "sh /root/.bash_cwp" >> /root/.bash_profile cat > /root/.bash_cwp <&1 |tee /var/log/php-selector-rebuild.log fi # Softaculous Installer if [ "$softaculous" = "yes" ];then IONCUBELOADED=`/usr/local/cwp/php71/bin/php -v|grep ionCube` IONCUBECONF=`grep ioncube_loader /usr/local/cwp/php71/php.ini` SOFTACULOUSPWD=$(> /usr/local/cwp/php71/php.ini fi fi if [ -z "$SOFTACULOUSAPI" ];then echo "softaculous:${SOFTACULOUSPWD}:1: " > /usr/local/cwp/.conf/.api_keys fi if [ ! -e "/usr/local/cwp/php" ];then ln -s /usr/local/cwp/php71/ /usr/local/cwp/php fi cd /usr/local/src;rm -f install.sh;wget -N http://files.softaculous.com/install.sh;chmod 755 install.sh; cd /usr/local/src/;sh /usr/local/src/install.sh --quick if [ -e "/usr/local/cwpsrv/conf.d/softaculous.conf" ];then rm -f /usr/local/cwpsrv/conf.d/softaculous.conf fi if [ -e "/usr/local/cwpsrv/conf/include/softaculous.conf" ];then rm -f /usr/local/cwpsrv/conf/include/softaculous.conf fi cd /usr/local/cwpsrv/conf/include; wget http://static.cdn-cwp.com/files/3rdparty/softaculous/el7/softaculous.conf fi if [ "$modsecurity" = "yes" ];then MODSECCONF="/usr/local/cwp/.conf/mod_security.conf" MODSECMAINCONF="/usr/local/apache/conf.d/mod_security.conf" RHELLIBDIR=`if [[ \`uname -m\` != "x86_64" ]]; then libdir=/usr/lib/ ; else libdir=/usr/lib64/ ; fi;echo $libdir` # Install dependencies yum -y install libxml2 libxml2-devel pcre-devel curl-devel expat-devel apr-devel apr-util-devel libuuid-devel gcc --enablerepo=cwp # Install Mod_Security for CWP cd /usr/local/src wget -q http://static.cdn-cwp.com/files/apache/modsecurity-2.9.1.tar.gz tar -xzf modsecurity-2.9.1.tar.gz cd /usr/local/src/modsecurity-2.9.1 ./configure --with-apxs=/usr/local/apache/bin/apxs --with-apr=/usr/bin/apr-1-config --with-apu=/usr/bin/apu-1-config make clean make make install # Create CWP Conf file touch $MODSECCONF # Create Mod_Security Configuration if [ -e "/usr/local/apache/modules/mod_security2.so" ];then echo "modsecurityinstall = 1" >> $MODSECCONF cat > $MODSECMAINCONF < LoadModule unique_id_module modules/mod_unique_id.so LoadModule security2_module modules/mod_security2.so SecAuditLogStorageDir /usr/local/apache/logs/modsec_audit SecAuditLogType Concurrent SecAuditLogStorageDir /usr/local/apache/logs/modsec_audit SecAuditLogType Concurrent SecRuleEngine On SecAuditEngine RelevantOnly SecAuditLog /usr/local/apache/logs/modsec_audit.log SecDebugLog /usr/local/apache/logs/modsec_debug.log SecAuditLogType Serial SecDebugLogLevel 0 SecRequestBodyAccess On SecDataDir /tmp SecTmpDir /tmp SecUploadDir /tmp SecCollectionTimeout 600 SecPcreMatchLimit 1250000 SecPcreMatchLimitRecursion 1250000 Include "/usr/local/apache/modsecurity-cwaf/cwaf.conf" EOF # Install CWP Mod_Security Rules if [ -e "/usr/local/apache/" ];then cd /usr/local/apache/ rm -Rf modsecurity-cwaf modsecurity-cwaf.zip wget -q http://static.cdn-cwp.com/files/apache/mod-security/modsecurity-cwaf.zip unzip modsecurity-cwaf.zip cd /usr/local/apache/modsecurity-cwaf/rules rm -f comodo_waf.zip wget -q http://static.cdn-cwp.com/files/apache/mod-security/comodo_waf.zip unzip -o comodo_waf.zip;rm -f comodo_waf.zip echo "modsecurityrules = 3" >> $MODSECCONF mkdir /usr/local/apache/logs/tmp;chown nobody.root /usr/local/apache/logs/tmp fi fi fi # Apache-only conf if [ ! -e "/usr/local/cwp/.conf" ];then mkdir /usr/local/cwp/.conf fi cat > /usr/local/cwp/.conf/web_servers.conf </dev/null 2>&1 if [[ $? -ne 0 ]]; then echo "You have an error with remount filesystem." echo "Try adding manualy usrquota,grpquota in your /etc/fstab on ${MNT}" if [ `cat /etc/mtab |grep -v cgroup |grep ' / ' | awk '{print $1}'` == '/dev/root' ]; then #geting correct device DEV=`mount|grep -v cgroup |grep ' / '| awk '{print $1}'` # make the symlink ln -s $DEV /dev/root fi /bin/mv /etc/fstab /root/etc/fstab_ /bin/mv /etc/fstab.backup /etc/fstab mount -o remount ${MNT} fi /sbin/quotacheck -cugm ${MNT} if [ ! -e "/usr/local/cwp/.conf" ];then mkdir -p /usr/local/cwp/.conf fi echo "${MNT}" > /usr/local/cwp/.conf/quota_part.conf fi fi # Postfix 3.4 fix if [ ! -e "/etc/postfix/postfix-files" ];then touch /etc/postfix/postfix-files fi # Install goaccess stats yum -y install goaccess --enablerepo=epel wget static.cdn-cwp.com/files/3rdparty/stats/goaccess/goaccess.conf -O /etc/goaccess.conf # update cwp chmod +x /scripts/cwp_api sh /scripts/update_cwp sh /scripts/cwp_set_memory_limit # Security mysql -e "DROP USER IF EXISTS 'Any'@'%';" mysql -e "DROP USER IF EXISTS 'Any'@'localhost';" clear echo "#############################" echo "# CWP Installed #" echo "#############################" echo "" echo "Go to CentOS WebPanel Admin GUI at http://SERVER_IP:2030/" echo "" echo "http://${pubip}:2030" echo "SSL: https://${pubip}:2031" echo -e "---------------------" echo "Username: root" echo "Password: ssh server root password" echo "MySQL root Password: $password" echo echo "#########################################################" echo " CentOS Web Panel MailServer Installer " echo "#########################################################" #echo "Roundcube MySQL Password: ${mysql_roundcube_password}" #echo "Postfix MySQL Password: ${postfix_pwd}" echo "SSL Cert name (hostname): ${cnf_hostname}" echo "SSL Cert file location /etc/pki/tls/ private|certs" echo "#########################################################" echo echo "Visit for help: www.centos-webpanel.com" echo "Write down login details and press ENTER for server reboot!" # clean yum to get fresh repo data yum clean all if [ "$restart" = "yes" ]; then echo "restarting server...." shutdown -r now else echo "Please reboot the server!" echo "Reboot command: shutdown -r now" fi