ispconfig3_install/CONTRIBUTING.md0000775000000000000000000002473415114345330015615 0ustar rootroot# Contributing to ISPConfig ISPConfig is a open source project and community contributions are very welcome. To contribute, please stick to the guidelines. This document is under development and will be continuously improved. Please do not refactor existing code and do not change the signature or the behaviour of central functions or libraries. Such changes may only be made by the core development team. We have had many bad experiences with such changes affecting the stability of ISPConfig, so we no longer accept submissions containing such changes. Merge requests containing such changes will be closed and not merged. # Issues * Before opening a new issue, use the search function to check if there isn't a bug report / feature request already. * If you are reporting a bug, please share your OS and PHP (CLI) version. * If you want to report several bugs or request several features, open a separate issue for each one of them. * Do note re-open issues that were closed by the core dev team unless something new and important that is not mentioned in the original issue needs to be added. Permanently re-opening issues that we commented on and closed will get your account banned. You may add comments to issues without re-opening them though. # Branches * If you are a new user, please send an email to: dev [at] ispconfig [dot] org to receive rights to fork the project. * Please create an issue for each contribution you want to make. * Do not put multiple contributions into a single branch and merge request. Each contribution should have it's own branch. * Do not use the develop branch in your forked project for your contribution. Create a separate branch for each issue. * Give your branch a name, e. g. `6049-update-the-contributing-doc ` where 6049 is the issue number. # Merge requests Please give your merge request a description that shortly states what it is about. Merge requests without a good title or with missing description will get delayed because it is more effort for us to check the meaning of the changes made. Once again: Do not put multiple things into a single merge request. If you for example fix two issues where one affects apache and one mail users, use separate issues and separate merge requests. You can group multiple issues in a single merge request if they have the same specific topic, e. g. if you have one issue stating that a language entry in mail users is missing and a second issue that a language entry for server config is missing, you can put both issues into a single branch and merge request. Be sure to include all issue ids (if multiple) into the merge request's description in this case. * Open a issue for the bug you want to fix / the feature you want to implement * After opening the issue, commit your changes to your branch * Note the issue # in every commit * Update the documentation (New devs will not have access to this. Please send a email to docs@ispconfig.org) * Add translations for every language * Use a short title * Write a clear description - for example, when updating the contributing guidelines with issue #6049: \ "Update of our contributing guidelines \ Closes #6049" * Please be aware that we are not able to accept merge request that do not stick to the coding guidelines. We need to insist on that to keep the code clean and maintainable. # Some guidelines for web development with php. ----------------------------------------------------- * Don't use features that are not supported in PHP 5.4, for compatibility with LTS OS releases, ISPConfig must support PHP 5.4+ * Don't use shorttags. A Shorttag is ` always use `uses() or $app->load() functions. * Classes for the server are located in server/lib/classes/ and loaded with $app->uses() or $app->load() functions. ### Indentations Indentations are always done with tabs. Do **not** use spaces. It is recommended to set your IDE to display tabs with a width of 4 spaces. ### Variable and method / function names Methods and functions should always be written in camel-case. Variables and properties should always be lowercase instead. **Correct:** ```php class MyClass { private $issue_list = []; private function getMyValue() { } } ``` **Wrong:** ```php class my_class { private $IssueList = []; private function get_my_value() { } } ``` ### Blocks #### Curly braces Opening curly braces always have to be in the same line as the preceding condition. They are separated by a single space from the closing paranthesis. Closing curly braces are always on a separate line after the last statement in the block. The only exception is a do-while block where the logic is inverted. Curly braces are **always** to be used. Do not leave them out, even if there is only a single statement in the corresponding block. **Correct:** ```php if($variable === true) { } while($condition) { } do { } while($condition); ``` **Wrong:** ```php if($variable === true){ } if($variable === true) { } if($variable === true) $x = 'no braces'; while($condition) { } ``` #### Short style The short style of conditional assignments is allowed to be used, but it must not affect readability, e. g. they shall not be nested. **Allowed:** ```php $a = 0; if($condition === true) { $a = 1; } $a = ($condition === true ? 1 : 0); ``` **Disallowed:** ```php $x = ($condition === true ? ($further == 'foo' ? true : false) : true); ``` #### Spaces and paranthesis The rules for using spaces are: - no space after `if`/`while` etc. and the following opening paranthesis - single space after closing paranthesis and before opening curly brace - no spaces at the end of a line - no spaces after opening paranthesis and before closing paranthesis - single space before and after comparators **Correct:** ```php if($variable === $condition) { } while(($condition !== false || $condition2 === true) && $n <= 15) { $n++; } ``` **Wrong:** ```php if ($variable===$condition) { } while(($condition!==false||$condition2===true))&&$n<=15){ } ``` #### Newlines inside of conditions Breaking up conditions into separate lines can be done if it positively affects readability. ```php if($condition === true && ($state === 'completed' || $state === 'pending') && ($processed_by !== null || $process_time < time())) { } ``` can also be written as ```php if($condition === true && ($state === 'completed' || $state === 'pending') && ($processed_by !== null || $process_time < time()) ) { } ``` This must not be abused, e. g. the following is not allowed: ```php if($a == 1 || $b == 2) { } ``` ### Arrays #### Short syntax Please **do** use short array syntax. We have deprecated the old-style array syntax. **Correct**: ```php $var = []; $var2 = [ 'conf' => [ 'setting1' => 'value1' ] ]; ``` **Wrong:** ```php $var = array(); $var2 = array( 'conf' => array( 'setting1' => 'value1' ) ); ``` #### Spaces and newlines When defining an empty array, both brackets shall be on the same line. When defining an array with values, the style depends on the values you are going to assign. ##### List of values When defining an array with a list of values, e. g. numbers or names, they should be on the same line as the brackets without using new lines, as long as the line does not exceed a total number of characters of about 90. After each comma there has to be a single space. ##### Nested array When defining a nested array onle the opening bracket is to be on the same line. The closing bracket has to be on a separate line indented by `tabs * level of array`. ##### Examples ```php // empty array $a = []; // array with list of values $array = [4, 3, 76, 12]; // array with long list of values $array = [ 'This is one entry', 'This is a second one', 'Another one', 'Further entries', 'foo', 'bar', 34, 42, $variable, // newline here for better readability 'Next entry', 'the last entry' ]; // nested array $array = [ 'conf' => [ 'level' => 1, 'settings' => [ 'window' => 'open', 'door' => 'closed ] ] ]; ``` **Not-to-dos:** ```php $array=[ ]; $array = [ 1, 4, 35, 23, 345, 11, 221, 'further', '...' ]; $array=['conf'=>['settings'=>['window' => 'open', 'door' => 'closed]]]; ``` ### Strings Whenever possible use single quotes `'` instead of double qoutes `"`. Try not to embedd variables in string. Concatenate them instead. **Correct:** ```php // simple text $var = 'This is a text'; // array index $array['index'] = 'value'; // text with variables $var = 'This is a text with ' . $value . ' values inside and at the end: ' . $sum_value; // dynamic array index $idx = 'index' . $key; $value = $array[$idx]; ``` **Wrong:** ```php // simple text $var = "This is a text"; // array index $array["index"] = 'value'; // text with variables $var = "This is a text with $value values inside and at the end: {$sum_value}"; // dynamic array index $value = $array['index' . $key]; $value = $array["index{$key}"]; ``` # Where to store custom settings ## Interface settings The recommended place to store global interface settings is the ini style global config system (see system.ini.master file in install/tpl/ to set defaults). The settings file gets stored inside the ispconfig database. Settings can be accessed with the function: ``` $app->uses('ini_parser,getconf'); $interface_settings = $app->getconf->get_global_config('modulename'); ``` where modulename corresponds to the config section in the system.ini.master file. To make the settings editable under System > interface config, add the new configuration fields to the file interface/web/admin/form/system_config.tform.php and the corresponding tempalte file in the templates subfolder of the admin module. ## Server settings Server settings are stored in the ini style server config system (see server.ini.master template file) The settings file gets stored inside the ispconfig database in the server table. Settings can be accessed with the function $app->getconf->get_server_config(....) Example to access the web configuration: ``` $app->uses('ini_parser,getconf'); $web_config = $app->getconf->get_server_config($server_id,'web'); ``` # Learn about the form validators There are form validators in interface/lib/classes/tform.inc.php to make validating forms easier. Read about: REGEX,UNIQUE,NOTEMPTY,ISEMAIL,ISINT,ISPOSITIVE,ISIPV4,ISIPV6,ISIP,CUSTOM ispconfig3_install/LICENSE0000775000000000000000000000276515114345330014371 0ustar rootrootCopyright (c) 2007-2020, Till Brehm, ISPConfig UG All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. * Neither the name of ISPConfig nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. ispconfig3_install/README.md0000775000000000000000000000411115132152722014627 0ustar rootroot# ISPConfig - Hosting Control Panel ![ISPConfig logo](https://www.ispconfig.org/wp-content/themes/ispconfig/images/ispconfig_logo.png "") \ Development branch: [![pipeline status](https://git.ispconfig.org/ispconfig/ispconfig3/badges/develop/pipeline.svg)](https://git.ispconfig.org/ispconfig/ispconfig3/commits/develop) ## Functions - Manage multiple servers from one control panel - Single server, multiserver and mirrored clusters. - Webserver management - Mailserver management - DNS server management - Virtualization (OpenVZ) - Administrator, reseller, client and mailuser login - Open Source software ([BSD license](LICENSE)) ## Supported daemons - HTTP: Apache2 and NGINX - HTTP stats: Webalizer, GoAccess and AWStats - Let's Encrypt: Acme.sh and certbot - SMTP: Postfix - POP3/IMAP: Dovecot - Spamfilter: Rspamd and Amavis - FTP: PureFTPD - DNS: BIND9 and PowerDNS[^1] - Database: MariaDB and MySQL [^1]: not actively tested ## Supported operating systems - Debian 11 - 13, and testing - Ubuntu 22.04 - 24.04 - CentOS 8 - AlmaLinux 8 - 10 - Rocky Linux 8 - 10 ## Supported PHP versions Multiple PHP versions are supported on the same server for hosted sites. But for the panel itself it's advised to stay with the version that comes with the OS. In general the ISPConfig panel supports PHP 7.4 - 8.4 ## Auto-install script You can install the "Perfect Server" with ISPConfig using [our official autoinstaller](https://www.howtoforge.com/ispconfig-autoinstall-debian-ubuntu/) ## Migration tool The Migration Tool helps you to import data from other control panels (currently ISPConfig 2 and 3 – 3.2, Plesk 10 – 12.5, Plesk Onyx, CPanel[^2] and Confixx 3). For more information, see https://www.ispconfig.org/add-ons/ispconfig-migration-tool/ [^2]: The Migration Toolkit now contains beta support for migrating CPanel to ISPConfig. ## Documentation You can support ISPConfig development by buying the manual: https://www.ispconfig.org/documentation/ ## Contributing If you like to contribute to the ISPConfig development, please read the contributing guidelines: [CONTRIBUTING.MD](CONTRIBUTING.md) ispconfig3_install/RELEASE.md0000775000000000000000000004663015253266632015000 0ustar rootroot## ISPConfig 3.3.2 Released This release adds support for Ubuntu 26.04, an option to enforce inbound DMARC rules, a separate sender address for system mails, an interface for extensions to add their own client and reseller limits, and fixes a number of bugs reported after the 3.3.1p1 release. A privilege escalation security vulnerability has been found in the Fetchmail function of the Email module. This issue has been fixed in ISPConfig 3.3.2. We thank Arvin Shivram of Brutecat Security for reporting the issue to us (#7052). A SQL injection vulnerability has been found in the update and delete functions of the remote API, which allowed a remote API user to modify or delete records beyond their permissions. This issue has been fixed in ISPConfig 3.3.2. We thank Nguyen Chi Quang from MBBank for reporting the issue to us (#7051). ## What's new in ISPConfig 3.3.2? ### Ubuntu 26.04 Support ISPConfig 3.3.2 adds support for Ubuntu 26.04 LTS, including the Dovecot 2.4 configuration syntax used by that release (#6996). ### Inbound DMARC Enforcement A new option allows to enforce inbound DMARC rules in rspamd, so that incoming mail is rejected or quarantined according to the DMARC policy published by the sending domain (#6995). ### Separate Sender Address for System Mails The e-mail address of the administrator was used as sender address and as recipient address for system mails at the same time. This caused problems with SPF when the mailbox of the administrator is hosted on a different server, as the ISPConfig server had to send mails using an address of a domain that it does not host. The setting has been split into two fields in System > Main Config > Mail: - **Administrator's contact e-mail** (`admin_mail`) is the recipient of system notifications and is used as reply address. - **Server sender e-mail address** (`server_sender_mail`) is the address that system mails are sent from. This affects notification mails like traffic and quota mails, monitoring notifications, OTP and password reset mails, the welcome mails for clients and resellers, and support messages. Custom mail templates in `conf-custom/mail/` that use their own sender address are not changed. The update sets the new field to the current administrator e-mail address, so the behaviour of existing installations does not change until a different sender address is configured (#7028). ### Extensible Client and Reseller Limits Extensions can now register additional client and reseller limits without patching core files. A new limits registry makes the limit fields available in the client and reseller forms and in the client templates (#7019). ### Updated CA List for CAA Records The list of certificate authorities offered for CAA DNS records has been updated to reflect the current trust landscape. Former CAs were removed, CAs that merged or changed their name were updated and new CAs were added (#7017). ### Database Backups Without Table Locks mysqldump locks all tables of a database while it dumps them, so a website can become unresponsive for as long as its database backup runs. A new setting in System > Server Config > Server controls whether the backup is made with `--single-transaction` instead, which does not lock the database. The setting defaults to **Automatic**. In this mode ISPConfig looks at the storage engines of the database and dumps it without table locks when all of its tables use a transactional engine such as InnoDB. A database that contains MyISAM or MEMORY tables is still dumped with table locks, because a dump taken without locks is not consistent for those engines. **Yes** always dumps without table locks, which is the right choice for a mixed database whose availability matters more than the consistency of its non transactional tables. **No** keeps the behaviour of earlier releases (#7049). ### Custom Error Pages Disabled by Default Custom error pages are now disabled by default for newly created websites. Existing websites are not changed by the update (#7021). ### Bugfixes - Fixed the password reset link in the password reset e-mail being built from the Host header of the request, which allowed an attacker to send a reset link pointing to a host under their control to the user. The link is now built from the interface_base_url setting in interface/lib/config.inc.php if set, otherwise from the hostname of the server that runs the interface. If the panel is reached under a different hostname than the server hostname, set interface_base_url accordingly (#7044) - Fixes from the code audit by siteguardian.io (#7044): the user type scope (any/user/admin) of entries in the IDS whitelist and htmlfield files is now enforced, it was ignored before. If you use a custom whitelist (security/ids.whitelist.custom), check that entries for fields that resellers can edit use the user scope. CSRF tokens are now required for backup actions, DNS zone import, extension installation and management, and the vpopmail import. TLS certificate verification is no longer disabled when downloading extensions and APS packages. The session ID is regenerated on login unless session_regenerate_id is set to no in security_settings.ini. Password hashes and CSRF tokens are compared in constant time, the CSRF token timeout is enforced for form submits, e-mail headers are protected against CRLF injection, shell arguments in the PowerDNS DNSSEC, certbot and PostgreSQL size commands are escaped, the APS package extraction rejects paths outside the target directory, and unserialize() calls no longer allow objects. The stale interface/web/remote/monitor.php file from versions before 3.2 is removed by the updater - Fixed the client select field of the website, mail domain, mailing list, XMPP domain, DNS zone, secondary DNS zone, database user, client domain and OpenVZ virtual machine forms falling back to the first entry of the list when the form was redisplayed after a validation error. For a reseller the first entry is the reseller himself, so correcting the reported error and saving again handed the record over to the reseller and, in case of a website, moved the site to a different directory. The field now keeps the client that was selected, or the current owner of the record if the selection can not be determined. A reseller can now only assign a record to himself or to one of his sub clients, other client groups sent with the form are ignored and logged (#7048) - Fixed resellers not being offered the additional PHP versions of the selected client in the website form, and the sort priority of PHP versions being ignored for resellers. PHP versions with the same sort priority are now listed with the most recently added version first, so that a new website defaults to the newest PHP version unless the sort priority says otherwise - Fixed BIND not being able to write the zone files of secondary DNS zones on Ubuntu 24.04 and other systems with AppArmor, as the installer did not detect AppArmor when the apparmor_status command is not available and did not reload the BIND AppArmor profile after adding the rules for the slave zone directory. The rules now also allow file locking. The fix is applied by the ISPConfig update - Fixed a privilege escalation vulnerability in the Fetchmail function of the Email module. The values of a Fetchmail account were written into the getmail configuration file without validation, which allowed a client to inject additional configuration sections through line breaks in the account fields. Line breaks and null bytes are now removed from the values, the destination has to be a valid e-mail address, and the getmail plugin refuses to write or delete a configuration file that is a symlink or resolves to a path outside the getmail configuration directory (#7052) - Fixed a SQL injection vulnerability in the remote API. The record ID passed to the update and delete functions of the API was used in the SQL query without validation, which allowed a remote API user with permission for an update or delete function to modify or delete records beyond that permission and to read data from other tables. The ID is now required to be a positive integer and the affected queries use parameter placeholders (#7051) - Fixed configuration values containing backslashes (e.g. the SMTP password in System > Main Config > Mail) losing one backslash each time an unrelated configuration tab was saved. The sections that are not being edited were unescaped when read and written back without re-escaping. Values set through the remote API system_config_set and server_config_set functions are now escaped in the same way as values saved through the interface (#7042) - Fixed PHP warnings "Trying to access array offset on value of type bool" and invalid width/height CSS on the login and main pages when the custom panel logo is an SVG image or can not be parsed. The logo now falls back to the stylesheet dimensions (#7039) - Fixed the "more" button of the donation dashlet reacting to every button on the dashboard, including the logout button and the close buttons of info messages. The dashlet now uses a plain HTML disclosure element without JavaScript (#7043) - Fixed an internal cron job never being executed again when a cron run was aborted while the job was running. The job is now released as soon as the cron run that started it is gone, instead of staying marked as running for up to a day. Cron jobs can declare a maximum expected run time, which is used when the process that started the job is not known (#7034) - Fixed the SSH key pair generation for a client failing with "Data too long for column ssh_rsa" when the domain or user name used in the key comment is long, as the public key of a 3072 bit RSA key with a long comment exceeds 600 characters. The column is now a text column. The database_password_sha2 column of database users, which was exactly as long as the generated hash, has been widened to 255 characters as pre-hashed values passed through the remote API can be longer (#7074) - Fixed the owner of an existing .htaccess file being changed to root:root when a folder protection is deleted or set to inactive. The file now keeps the system user and group of the website (#7035) - Fixed the rspamd settings file of a mailbox or forwarding not being regenerated when its greylisting setting is changed, so that disabling greylisting had no effect until the next resync (#7027) - Fixed traffic quota not being enforced when the quota is set to 0, which could be used to bypass the client traffic limit and the automatic deactivation of overtraffic websites (#7024) - Fixed uncaught DivisionByZeroError when opening the website traffic statistics on PHP 8.x (#7023) - Fixed undefined $php_fpm_reload_mode in the nginx plugin, which aborted the PHP-FPM reload when a website was deleted (#7022) - Fixed broken installation of the pureftpd_sni_plugin.inc.php plugin (#7020) - Fixed false warning "PHP cli binary is not available in the jail" when PHP is provided by the global jailkit configuration (#7018) - Fixed grant_master_database_rights silently failing on a master server (#7016). The fix in the development version aborted the update of a single server with "Unable to get the user rights" when the master database permissions were reconfigured, because a single server has no slave server users. An empty user list is now handled as the normal case and only a database error aborts the update - Fixed PHP fatal error after a deb.sury.org PHP upgrade when the IDS temp folder became read-only (#7010) - Fixed email routing error when adding routing for an email domain in multiserver setups (#7009) - Removed the stale interface/lib/config.inc.php file from the repository (#7007) - Fixed TypeError when sending a second mail from a cronjob (#7003) - Fixed admin not receiving notifications for failed nightly backups (#7002) - Fixed PHP fatal error (TypeError) in nginx_plugin.inc.php and apache2_plugin.inc.php (#7000) - Fixed shell_user_update being triggered before the web_domain record was replicated, which resulted in an outdated configuration on secondary servers (#6997) - Fixed invalid Sieve syntax when using Subject as source together with the domain or localpart operator (#7011) - Migrated rspamd user settings to follow the rspamd configuration best practices (#7006) - Fixed the sender address of the reseller welcome mail, which was empty because the mail section of the global config was not read (#7028) - Fixed a malformed From header in notification mails that use a sender name in the mail template (#7028) ### Other Improvements - Added a commandline option to ispconfig_update.sh to update to a specific branch beside develop - Improved acme.sh handling for local loopback addresses, improved acme.sh logging in the installer and added a curl fallback to download acme.sh - Added the systemd override for the ISPConfig temp dir to the Apache systemd unit as well - Avoid errors when the ISPConfig log directory does not exist yet - Improved getmail input field validation - Mailbox soft-delete values are automatically converted from y/n to the numeric values used by the new configuration Please see changelog for a full list of features and bugfixes: https://git.ispconfig.org/ispconfig/ispconfig3/-/milestones/99 --- ## ISPConfig 3.3.1p1 Released This is a patch release that fixes several bugs discovered after the 3.3.1 release, including Debian 13 PHP socket issues, Rspamd spam header handling, MySQL 8.0.45 compatibility, and various other improvements. ## What's new in ISPConfig 3.3.1p1? ### Bugfixes - Fixed Debian 13 PHP socket issue in apps vhost and PHP-FPM pools (#6983) - Fixed Rspamd X-Spam-Status header not being added when using "Rewrite Subject" spam tag method, which caused spam to be forwarded via CC/redirect rules (#6979) - Fixed Apache error.log rotation causing logs to not being written after rotation (#6992) - Fixed phpMyAdmin link not showing in database list (#6981) - Fixed SimplePie PHP 8 compatibility for RSS feeds (#6982) - Fixed client creation via API failing with usertheme_syntax_incorrect error (#6990) - Fixed mail user login field not being updated when renaming mailbox (#6989) - Fixed Dovecot last_access log parsing pattern for Debian 13/Dovecot 2.4 (#6994) - Fixed vmail user permissions to dovecot-sql.conf for Debian 13 (#6976) - Fixed stale content.php file causing errors (#6974) - Fixed system_update warning remaining after disabling the Check for Linux updates feature (#6896) - Fixed harddisk storage monitoring trigger values (#6978) - Cleaned up bouncing space in postfix config (#6985) - Added missing disablereplicator column to mail_user table (#6993) ### New Features - Added support for MySQL 8.0.45 (#6991) - Added support for extended RBL syntax for Spamhaus RBL (#6977) - Added support for per-domain mail relaying without username/password (#6877) - Added support for RHEL 10 postfix without hash map type (#6980) Please see changelog for a full list of features and bugfixes: https://git.ispconfig.org/ispconfig/ispconfig3/-/milestones/100 --- ## ISPConfig 3.3.1 Released This version brings Debian 13 support with Dovecot 2.4 compatibility, RHEL 10 based distribution support (AlmaLinux 10, RockyLinux 10), PHP 8.5 compatibility, pgAdmin for PostgreSQL databases, improved DNS validation, and many bugfixes. It also fixes 3 security issues. ## What's new in ISPConfig 3.3.1? ### Debian 13 Support ISPConfig 3.3.1 adds full support for Debian 13 (Trixie), including compatibility with Dovecot 2.4 which introduces an incompatible configuration language. The Dovecot configuration templates have been updated to work with the new 2.4 syntax. ### RHEL 10 Based Distribution Support Support has been added for RHEL 10 based distributions including AlmaLinux 10 and RockyLinux 10. ### PHP 8.5 Compatibility ISPConfig is now compatible with PHP 8.5. This includes fixes for deprecated functions like `mysqli_ping()` and non-canonical casts. ### pgAdmin for PostgreSQL Databases A pgAdmin link has been added for PostgreSQL databases, similar to how phpMyAdmin works for MySQL/MariaDB databases. The phpMyAdmin link is now correctly hidden for PostgreSQL databases. ### DNS Record Validation Improvements Improved validation for DNS records including better CNAME conflict detection, SRV record field validation, and DMARC record handling. ### Rspamd Greylisting Fixes Fixed issues where rspamd greylisting settings from spamfilter policies were not being applied correctly to domain-level spam filter entries and user configurations. ### Let's Encrypt Improvements - Removed OCSP stapling sections from vhosts as Let's Encrypt no longer supports OCSP - Fixed default CA setting when acme.sh is installed from the Let's Encrypt class ### Extended CLI Resync Functionality The Tools > Resync function has been extended in the ispc CLI command, allowing more flexible server synchronization from the command line. ### Improved Autoinstall Updates Improved updating with autoinstall.conf.php including better documentation and the ability to pass --autoinstall option from ispconfig_update.sh and ispc update to update.php. ### Improved website logfile permissions Website logfiles are now created with stricter permissions (640) and ownership (root:clientX). ### Security Fixes This release addresses three security vulnerabilities that could allow privilege escalation under certain conditions. The issues affect theme handling, backup restoration, and backup download functionality. We strongly recommend all users to update to this version as soon as possible. We would like to thank **SSD Secure Disclosure** for responsibly discovering and reporting these vulnerabilities. ### Backup System Changes - Removed zip and rar archive formats from rootgz backup mode as they do not preserve file ownership. These formats will automatically fall back to tar_gzip when selected with rootgz mode. The zip and rar mode will stay available for userzip mode. ### Bugfixes & Minor Features - Fixed DKIM config bug in amavis that could cause DKIM entries to be lost - Fixed PowerDNS records not being created when domain is inactive - Fixed PHP 8.3 compatibility issues - Fixed false positive "Possible attack detected" for valid Nginx directive snippets - Fixed trailing space in nginx vhost server_name property - Fixed data cleanup when server is deleted (monitor_data and server_ip) - Fixed sysdatalog processing with incorrect unixtime values - Improved useragent for cronjobs (wget) - Silenced z_php_fpm_incron_reload_plugin warnings when no PHP version is set - Fixed CAA DNS entry name handling with TLD - Improved email filter regex syntax validation - Fixed stats/.htaccess file permissions - Added more plugin events for interface plugins Please see changelog for a full list of features and bugfixes: https://git.ispconfig.org/ispconfig/ispconfig3/-/milestones/95 ## Known issues Please take a look at the bug tracker: https://git.ispconfig.org/ispconfig/ispconfig3/-/issues?scope=all&utf8=%E2%9C%93&state=opened&label_name[]=Bug You can report bugs at https://git.ispconfig.org/ispconfig/ispconfig3/issues ## Supported Linux distributions - Debian 11 – 13 (recommended) and Debian testing - Ubuntu 22.04 LTS – 26.04 LTS (recommended) - AlmaLinux 8 – 10 - RockyLinux 8 – 10 - CentOS 8 ## Download ISPConfig 3.3.2 https://www.ispconfig.org/downloads/ISPConfig-3.3.2.tar.gz The installation instructions for ISPConfig can be found here: https://www.ispconfig.org/ispconfig-3/documentation/ ## How can I update to ISPConfig 3.3.2? Run the following commands as root user on your ISPConfig server: ``` cd /tmp wget https://www.ispconfig.org/downloads/ISPConfig-3.3.2.tar.gz tar xvfz ISPConfig-3.3.2.tar.gz cd ispconfig3_install/install php -q update.php ``` ispconfig3_install/TODO.txt0000775000000000000000000000017215114345330014660 0ustar rootrootPlease see our GitLab issues for feature requests and bug reports. https://git.ispconfig.org/ispconfig/ispconfig3/issues ispconfig3_install/docs/0000775000000000000000000000000015253274022014302 5ustar rootrootispconfig3_install/docs/extensions/0000775000000000000000000000000015253274022016501 5ustar rootrootispconfig3_install/docs/extensions/README.md0000775000000000000000000000255215253274022017767 0ustar rootroot# ISPConfig extension developer documentation Documents for developers who write extensions for ISPConfig. Extensions are packages that are installed from the ISPConfig extension repository into `/usr/local/ispconfig/extensions//` on every server, through the panel (System > Extension Installer) or the command line (`ispc extension ...`). | Document | Content | |----------|---------| | [sql_files.md](sql_files.md) | Database tables of an extension: install and uninstall SQL, node vs. master scope, schema migrations on update, the `dbversion` file | | [master_grants.md](master_grants.md) | Giving the server processes of slave servers access to the extension's own tables in the master database: `install/master_grants.list`, `sys_extension_grant`, when the rights are applied | | [extension_limits.md](extension_limits.md) | Registering client, reseller and client-template limits from an extension without touching the core limit forms | Related code: - `server/lib/classes/extension_installer.inc.php`: download, install, update, uninstall, enable and disable of extensions on a server - `server/lib/classes/extension_installer_base.inc.php`: base class of the `_installer` class every extension ships in `install/installer.php` - `server/cli/modules/extension.inc.php`: the `ispc extension` commands - `interface/web/admin/extension_*.php`: the panel side ispconfig3_install/docs/extensions/master_grants.md0000775000000000000000000001203715253274022021702 0ustar rootroot# Extension master database grants How an extension gives the server processes of slave servers access to its own tables in the master database. Audience: extension developers. Read [sql_files.md](sql_files.md) first: it explains the node / master scope of the SQL files and where the master database lives. --- ## 1. The problem In a multiserver setup every slave server talks to the master database through its own MySQL user `ispcsrv`, created when the slave joins. That user only has the rights the ISPConfig installer grants explicitly, table by table (`grant_master_database_rights()` in `install/lib/installer_base.lib.php`). The rights are rebuilt from scratch on every ISPConfig update and by `install/setrights.php`: `REVOKE ALL`, then the fixed list of grants. Tables an extension creates with `install_master.sql` are therefore not reachable from the slaves' server processes (`$app->dbmaster`) until someone grants access, and a manual grant is lost at the next update. ## 2. The declaration file The extension declares the rights it needs in `install/master_grants.list`, one table per line: ``` # :[,...] myext_findings:SELECT,INSERT,UPDATE,DELETE myext_scan_run:SELECT,UPDATE ``` Rules, enforced by the framework: - The table name must start with the extension name followed by an underscore (`_`). An extension can only declare rights on its own tables, never on core tables or tables of other extensions. - Allowed privileges: `SELECT`, `INSERT`, `UPDATE`, `DELETE`. Nothing else, no column lists. Extensions that need more than that on the master are outside the scope of this mechanism. - Empty lines and lines starting with `#` are ignored. Privileges are case insensitive and deduplicated. - One invalid line makes the whole install or update fail; the extension is left not enabled and the error is reported. The grants apply to **all** `ispcsrv` users, so every slave gets the same rights on the table. Row scoping is the extension's job: tables written by servers carry a `server_id` column and a server only touches its own rows. A compromised slave can still write other servers' rows; this is a known limitation of MySQL grants that the planned REST API between nodes and master will remove. ## 3. What the framework does On the **master server** (the server where the master database is local; on a single server setup as well, where it is a no-op because there are no `ispcsrv` users): 1. On install, after the install SQL, and on update, after the migrations, the extension installer parses `master_grants.list` and stores the declarations in the core table `sys_extension_grant` (`extension`, `table_name`, `privileges`). Previous declarations of the extension are replaced, so removing a line from the file removes the stored declaration on the next update. 2. If the MySQL root credentials in `/usr/local/ispconfig/server/lib/mysql_clientdb.conf` are available (they are on a master that also hosts client databases), the grants are applied right away for every existing `ispcsrv` user. Otherwise the installer logs a hint and the grants are applied by the next step. 3. On uninstall, before the uninstall SQL drops the tables, the stored rights are revoked the same way and the declarations are deleted. On **slave servers** nothing happens; they have no access to the master database beyond their grants. **ISPConfig update, `install/setrights.php` and slave join**: whenever the master database rights of the `ispcsrv` users are rebuilt, the installer reads `sys_extension_grant` and grants the declared rights after the core ones. This covers a new slave joining an existing setup (it grants its own rights during installation, with the master root credentials entered there), and it restores the extension rights after the `REVOKE ALL` of an update. When the grants could not be applied right away (no root credentials on the master, or a MySQL error), run this on the master server from an unpacked ISPConfig tarball to apply them: ``` cd install php setrights.php ``` ## 4. Checking - Stored declarations: `SELECT * FROM sys_extension_grant;` in the master database. - Effective rights of a slave: `SHOW GRANTS FOR 'ispcsrv2'@'slave-host';` - Log lines in `/var/log/ispconfig/ispconfig.log` of the master server: `Registered N master database grant(s) for extension ...`, `Applied master database grants of extension ... for N server user(s)`, or the hint that the root credentials are missing. ## 5. Example ``` myext/ install/ install_master.sql CREATE TABLE IF NOT EXISTS `myext_findings` (...) install_node.sql (tables the server needs locally, if any) master_grants.list myext_findings:SELECT,INSERT,UPDATE,DELETE uninstall_master.sql DROP TABLE IF EXISTS `myext_findings`; ``` Server side code on any server then reads and writes the table through the master connection: ```php $app->dbmaster->query("INSERT INTO myext_findings (server_id, severity, message, created) VALUES (?, ?, ?, NOW())", $conf['server_id'], 'high', $message); ``` ispconfig3_install/docs/extensions/extension_limits.md0000775000000000000000000003571015253274022022431 0ustar rootroot# Extension Limits A reference for adding client / reseller / client-template **limits** from an extension, without modifying any of the limit forms, templates, language files or the dashboard dashlet in the core. Audience: anyone (human or AI) implementing an extension that needs to register one or more limit fields. --- ## 1. What this mechanism does ISPConfig stores per-client limits (e.g. `limit_web_domain`, `limit_mailbox`) as columns on the `client` and `client_template` tables, and renders them on the client, reseller and client-template edit forms. Historically a new limit had to be hardcoded into a dozen core files. The **limit registry** removes that requirement. An extension drops a single definition file into a directory, and the core then: 1. **injects** the limit fields into the `client` / `reseller` / `client_template` form definitions, so the form layer validates them, persists them, and exposes them through the SOAP/remote API; 2. **renders** the fields in a generic accordion panel on the three edit forms; 3. **provides** the label texts used outside the render loop; 4. **adds** usage/quota bars to the client dashboard "limits" dashlet. The extension keeps ownership of two things only: - its **database schema** — the `ALTER TABLE` that adds the limit columns; - its **enforcement** — the `checkClientLimit()` / `checkResellerLimit()` calls in the extension's own edit controllers. No limit-specific naming lives in the core. The mechanism is fully generic and works for any number of extensions at once. --- ## 2. Quick start 1. Add your limit columns to the `client` and `client_template` tables (§6). 2. Drop a definition file at `interface/web/client/lib/limits.d/.php` (§4). 3. Call `checkClientLimit()` / `checkResellerLimit()` in your extension's edit controllers (§7). That is the whole integration. The panel, validation, persistence, template merge, SOAP exposure and dashboard bars follow automatically. --- ## 3. The drop-in directory ``` interface/web/client/lib/limits.d/.php ``` The registry scans `interface/web/client/lib/limits.d/*.php` once per request. The core ships this directory with an `empty.dir` placeholder; your installer simply copies one file into it. A single central directory is used (not one per module) because limits are only ever edited in the client module. One file per extension keeps installs and uninstalls trivial: drop the file to enable, delete it to disable. --- ## 4. Definition file format A definition file **returns an array**. Minimal example: ```php 'example', // unique key, used for dedup 'section' => array( 'id' => 'Example', // -> accordion panel "collapseExample" 'title' => 'Example limits', // panel heading 'order' => 80, // sort position among panels ), 'limits' => array( 'limit_example' => array( 'label' => 'Max. number of examples', 'datatype' => 'INTEGER', 'formtype' => 'TEXT', 'default' => '-1', 'validators' => array( array('type' => 'ISINT', 'errmsg' => 'Max. number of examples must be a number.'), ), 'applies_to' => array('client', 'reseller', 'client_template'), 'usage' => array( 'db_table' => 'example_item', 'db_where' => '', ), ), ), ); ``` ### 4.1 Top-level keys | Key | Required | Meaning | |---|---|---| | `extension` | yes | Unique string key for this definition. Used to de-duplicate and as a logging handle. | | `min_core` | no | Minimum core version (e.g. `'3.3.2'`). If the installed core is older, the whole definition is skipped. Development builds are always treated as current. | | `section` | no | The accordion panel the fields are grouped into. Defaults to a generic "Extensions" panel. | | `limits` | yes | Map of `column_name => field definition`. | ### 4.2 The `section` block | Key | Meaning | |---|---| | `id` | Identifier used to build the panel's HTML ids (`heading`, `collapse`). Keep it alphanumeric. | | `title` | The heading shown on the panel. | | `order` | Integer sort position. Panels from all extensions are ordered by this value. | Two extensions may share the same `section.id` to render their fields in **one shared panel**; a different `id` produces a **separate panel**. ### 4.3 A limit's field definition | Key | Required | Meaning | |---|---|---| | `label` | yes | The field label (also used as `_txt` for the dashlet and other placeholders). | | `datatype` | no | tform datatype. Defaults to `INTEGER`. | | `formtype` | no | tform formtype. Defaults to `TEXT`. | | `default` | no | Default value for new records. Defaults to `-1` (the "unlimited" convention). | | `validators` | no | Array of tform validators. See §4.4. | | `applies_to` | no | Which forms the limit appears on: any of `client`, `reseller`, `client_template`. Defaults to all three. | | `usage` | no | Dashboard usage reporting. See §4.5. | Additional tform field keys are passed through verbatim, so any field type is supported (not only `INTEGER`/`TEXT`): `value`, `separator`, `width`, `maxlength`, `regex`, `filters`. ### 4.4 Validators and error messages Validators use the standard tform validator format. The important convention is the **`errmsg`**: put the **full human-readable message text** there, not a language-file key. ```php 'validators' => array( array('type' => 'ISINT', 'errmsg' => 'Max. number of examples must be a number.'), ), ``` The form layer renders the `errmsg` verbatim when it is not found as a wordbook key, so the message displays correctly without the extension shipping language files. (The label text in `label` is likewise inline.) ### 4.5 The `usage` block (dashboard reporting) If a limit declares a `usage` block, the client dashboard "limits" dashlet shows a usage/quota bar for it. The dashlet counts rows generically, exactly like the built-in limits. | Key | Meaning | |---|---| | `db_table` | The table whose rows represent the consumed items. | | `db_where` | Optional extra SQL `WHERE` fragment (without the leading `AND`). | | `q_type` | Optional. Set to a column name for a **sum/quota** style limit (the dashlet sums that column instead of counting rows). | Omit the whole `usage` block to keep a limit out of the dashlet. --- ## 5. The naming rule (hard requirement) **Every limit column name must contain the substring `limit`.** Examples: `limit_example`, `limit_example_size`, `example_limit`. The client-template engine recognises a column as a limit purely by this substring when it merges templates onto clients. A limit column without `limit` in its name will be stored, but it will **not** be carried by client templates. --- ## 6. Database schema (owned by the extension) The extension's installer adds the limit columns. Resellers are stored in the `client` table, so reseller limits need columns on `client` (no separate reseller table). Limits that apply to client templates also need the column on `client_template`. ```sql ALTER TABLE `client` ADD COLUMN IF NOT EXISTS `limit_example` int(11) NOT NULL DEFAULT '-1'; ALTER TABLE `client_template` ADD COLUMN IF NOT EXISTS `limit_example` int(11) NOT NULL DEFAULT '-1'; ``` Rules of thumb: - A limit with `applies_to` containing `client` or `reseller` → column on `client`. - A limit with `applies_to` containing `client_template` → column on `client_template`. - The `-1` default is the "unlimited" convention used throughout ISPConfig. ### Install ordering and the missing-column guard Install the columns **and** the definition file together. As a safety net, the registry verifies that a limit's backing column actually exists before using it: a limit whose column is missing is silently skipped (no panel, no SOAP field, no broken SQL). This keeps a half-finished install from breaking the client edit form. It is a safety net, not a substitute for installing both parts. To **uninstall**, remove the definition file. You may keep or drop the columns; while the file is gone the columns are simply ignored by the forms. --- ## 7. Enforcement (owned by the extension) The registry makes the limits visible, editable and stored. **Enforcing** them at create time is the extension's job, done in the extension's own edit controllers with the generic core helpers: ```php // In your extension's *_edit.php controller, before allowing a new item: if(!$app->tform->checkClientLimit('limit_example')) { $app->error($app->tform->wordbook['limit_example_txt'] . ': ' . $app->tform->lng('limit_reached_txt')); } if(!$app->tform->checkResellerLimit('limit_example')) { $app->error($app->tform->wordbook['limit_example_txt'] . ': ' . $app->tform->lng('limit_reached_txt')); } ``` `checkClientLimit($name)` compares the count of existing rows in the form's table against the logged-in client's value of column `$name`. `checkResellerLimit()` does the same against the client's reseller. Both are generic and need no registry awareness. --- ## 8. How it fits together (for reference) You do not need to touch any of the following — it is listed so the data flow is clear. | Concern | Where it happens | |---|---| | Field injection into forms | `limits_registry::apply_to_form()` is called at the end of `client.tform.php`, `reseller.tform.php`, `client_template.tform.php`. This drives tform validation, persistence, and SOAP exposure. | | Rendering | A generic `` accordion block in the three `*_edit_limits.htm` templates, populated by the controllers via `limits_registry::get_template_sections()`. | | Labels outside the loop | `limits_registry::get_labels()` (merged into the form wordbook and the dashlet). | | Dashboard bars | `limits_registry::get_dashlet_limits()` merged into the dashlet's limit list. | | Client-template merge | The core template engine treats any `limit*` column generically; no per-field code. | | SOAP / remote API | The remote API loads the same form definitions, so injected fields round-trip automatically. | The registry class is `interface/lib/classes/limits_registry.inc.php`, loaded with `$app->load('limits_registry')`. --- ## 9. Worked example An extension `example` that ships scheduled jobs with two limits — a count and a total size — grouped in one panel, both shown on the dashboard. `interface/web/client/lib/limits.d/example.php`: ```php 'example', 'min_core' => '3.3.2', 'section' => array('id' => 'Example', 'title' => 'Example jobs', 'order' => 80), 'limits' => array( 'limit_example_job' => array( 'label' => 'Max. number of jobs', 'datatype' => 'INTEGER', 'formtype' => 'TEXT', 'default' => '-1', 'validators' => array( array('type' => 'ISINT', 'errmsg' => 'Max. number of jobs must be a number.'), ), 'applies_to' => array('client', 'reseller', 'client_template'), 'usage' => array('db_table' => 'example_job', 'db_where' => ''), ), 'limit_example_size' => array( 'label' => 'Max. total job size (MB)', 'datatype' => 'INTEGER', 'formtype' => 'TEXT', 'default' => '-1', 'validators' => array( array('type' => 'ISINT', 'errmsg' => 'Max. total job size must be a number.'), ), 'applies_to' => array('client', 'reseller', 'client_template'), 'usage' => array('db_table' => 'example_job', 'db_where' => '', 'q_type' => 'size_mb'), ), ), ); ``` Installer SQL: ```sql -- The extension's own data table (referenced by the 'usage' block for dashboard reporting) CREATE TABLE IF NOT EXISTS `example_job` ( `id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT 'riud', `sys_perm_group` varchar(5) NOT NULL DEFAULT 'ru', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `size_mb` int(11) NOT NULL DEFAULT '0', PRIMARY KEY (`id`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8; -- Limit columns on the client / client_template tables ALTER TABLE `client` ADD COLUMN IF NOT EXISTS `limit_example_job` int(11) NOT NULL DEFAULT '-1'; ALTER TABLE `client` ADD COLUMN IF NOT EXISTS `limit_example_size` int(11) NOT NULL DEFAULT '-1'; ALTER TABLE `client_template` ADD COLUMN IF NOT EXISTS `limit_example_job` int(11) NOT NULL DEFAULT '-1'; ALTER TABLE `client_template` ADD COLUMN IF NOT EXISTS `limit_example_size` int(11) NOT NULL DEFAULT '-1'; ``` Enforcement in `example_job_edit.php`: ```php if(!$app->tform->checkClientLimit('limit_example_job')) { /* refuse */ } if(!$app->tform->checkResellerLimit('limit_example_job')) { /* refuse */ } ``` --- ## 10. Extension author checklist - [ ] Every limit column name contains the substring `limit` (§5). - [ ] Columns added to `client` (for `client`/`reseller`) and/or `client_template` (for `client_template`) with a sensible default, usually `-1` (§6). - [ ] Definition file at `interface/web/client/lib/limits.d/.php` returns an array with `extension` and `limits` (§4). - [ ] Each limit has a `label`; numeric limits have an `ISINT` validator whose `errmsg` is the full message text (§4.4). - [ ] `applies_to` lists exactly the forms you intend (§4.3). - [ ] Optional `usage` block added for any limit that should appear on the dashboard (§4.5). - [ ] Definition file and columns are installed together, and both are removed on uninstall (§6). - [ ] `checkClientLimit()` / `checkResellerLimit()` called in the extension's own edit controllers (§7). --- ## 11. Manual test plan 1. **Not installed** — client / reseller / client-template edit pages render exactly as before; no extra panel; no notices; dashlet unchanged. 2. **Installed** — the panel appears on all forms listed in `applies_to`, with one input per limit defaulting to the configured default. 3. **Persistence** — set values, save, reload → values persist. 4. **Validation** — enter a non-integer into an `ISINT` limit → the message from `errmsg` is shown and the save is rejected. 5. **Client template** — create a template with the limits, assign it as master to a client → the limits are written onto the client; additional templates add up as expected. 6. **Enforcement** — a client/reseller hits the limit → creating the next item is refused by `checkClientLimit()` / `checkResellerLimit()`. 7. **Dashboard** — limits with a `usage` block show usage/percentage bars. 8. **Remote API** — `client_add` / `client_update` accept and round-trip the limit fields. 9. **Multiple extensions** — a second definition sharing a `section.id` renders in the same panel; a different `id` renders a separate panel, ordered by `section.order`. ispconfig3_install/docs/extensions/sql_files.md0000775000000000000000000002322515253274022021013 0ustar rootroot# Extension SQL files: install, uninstall and schema migrations How an ISPConfig extension creates, updates and removes its database tables. Audience: extension developers. Everything described here is handled by the server side extension installer (`server/lib/classes/extension_installer.inc.php`). The extension only ships the SQL files in the right place; the framework runs them. --- ## 1. Where the SQL runs An extension is installed **locally on every server** of an ISPConfig setup (single server, master and every slave). Each server has its own local ISPConfig database (`dbispconfig`), and the master server additionally holds the master database that the panel works on. On a single server or on the master server, the local database and the master database are the same database. Slave servers never connect to the master database during install, update or uninstall. They only hold the credentials of their local database. Therefore the SQL of an extension is split into two scopes: | Scope | Runs on | Typical content | |----------|------------------------------------------------------|------------------------------------------------------------| | `node` | every server, against the local database | tables the server processes need locally | | `master` | only the server that holds the master database | tables the panel (interface) reads and writes | A table that a server writes and the panel reads (for example scan results) is a `master` table: the server process writes it through `$app->dbmaster`. The rights the slave servers need for that are declared in `install/master_grants.list`, see [master_grants.md](master_grants.md). All SQL files run as the local ISPConfig database user (`$conf['db_user']`) through the `mysql` command line client against `$conf['db_database']`. That user has all privileges on the local ISPConfig database, so `CREATE TABLE`, `ALTER TABLE` and `DROP TABLE` work. Do not put `USE` or `CREATE DATABASE` statements into the files. ## 2. File layout All SQL files live in the `install/` directory of the extension: ``` / install/ installer.php required, _installer class file.list files to copy / symlink into /usr/local/ispconfig install_node.sql full schema, node scope (optional) install_master.sql full schema, master scope (optional) uninstall_node.sql drops the node scope tables (optional) uninstall_master.sql drops the master scope tables (optional) master_grants.list rights of the slave servers on the master tables (optional) incremental/ upd_0001_node.sql migration step 1, node scope upd_0001_master.sql migration step 1, master scope upd_0002_master.sql migration step 2, master scope only ... ``` Legacy names: `install/install.sql` and `install/uninstall.sql` are still accepted and mean the same as `install_node.sql` / `uninstall_node.sql`. If both the new and the legacy name exist, the new name wins and the legacy file is ignored. New extensions should use the `_node` / `_master` names. Every file is optional. An extension without database tables ships none of them. ## 3. Install `install_extension()` runs, in this order: 1. `installer->install()` of the extension's installer class 2. `install_node.sql` (or legacy `install.sql`) on every server 3. `install_master.sql`, only where the master database is local 4. the schema version file `dbversion` is written (see section 5) 5. the master database grants of `master_grants.list` are registered and applied, only where the master database is local (see [master_grants.md](master_grants.md)) 6. `installer->enable()` If one of the SQL files fails, the install stops with an error. The extension is left downloaded but **not enabled**, and the error is reported to the caller (panel or `ispc extension install`). Fix the SQL, then run the install again. The install SQL always contains the **full current schema**. When you add a migration step (section 5), also update `install_node.sql` / `install_master.sql` so that a fresh install ends up with the same schema as an updated install. ## 4. Uninstall `uninstall_extension()` runs, in this order: 1. `installer->disable()` 2. `installer->uninstall()` 3. the master database grants are revoked, only where the master database is local 4. `uninstall_node.sql` (or legacy `uninstall.sql`) on every server 5. `uninstall_master.sql`, only where the master database is local 6. the extension directory is removed A failing uninstall SQL is logged and reported, but the uninstall continues and the extension directory is removed anyway. Write uninstall files so they cannot fail on a half installed extension: `DROP TABLE IF EXISTS`. ## 5. Schema migrations on update `update_extension()` runs no install SQL. Instead it applies the pending migration steps from `install/incremental/` after `installer->update()` and before `installer->enable()`. After the migrations the master database grants are registered again, so `master_grants.list` may change with an update. Steps are numbered consecutively, starting at 1, four digits zero padded, with the scope as suffix: ``` install/incremental/upd_0001_node.sql install/incremental/upd_0001_master.sql install/incremental/upd_0002_node.sql ``` A step may ship a node file, a master file, or both. The step number is one counter for the whole extension, regardless of scope. Numbers must not have gaps: the framework applies the steps from the current version plus one up to the highest number found, and treats a missing file of a scope as "nothing to do for this scope in this step". The applied schema version is stored in the file `dbversion` in the extension directory (`/usr/local/ispconfig/extensions//dbversion`), as a plain integer: - The framework owns this file. Do not ship a file with this name in the package. - After a fresh install it contains the highest step number shipped in `install/incremental/`, because the install SQL already contains the full schema. Without any migration files it contains `0`. - On update, all steps above the stored number are applied, then the number is raised. The number is raised after every complete step, so a failing step keeps the version of the last complete step. The update stops, the extension is **not enabled**, and the error is reported. After fixing the SQL, running the update again continues with the failed step. - A missing file counts as version `0`. This is the case for extensions that were installed before schema migrations existed. All steps are then applied on the next update, so migration files must be written **re-runnable**, see section 6. - Removing the file by hand forces all steps to run again on the next update. Useful for support cases, harmless when the migrations are re-runnable. The current schema version of every extension is also reported per server in the extension list that `scan_extensions()` stores in `monitor_data` (`dbversion` field). ## 6. Writing the SQL - Make migrations re-runnable. MariaDB and MySQL 8 support `CREATE TABLE IF NOT EXISTS`, `DROP TABLE IF EXISTS`, and MariaDB also supports `ALTER TABLE ... ADD COLUMN IF NOT EXISTS` / `DROP COLUMN IF EXISTS` / `ADD INDEX IF NOT EXISTS`. - One statement per line or terminated by `;` as usual, the file is piped into the `mysql` client. Comments with `--` and `/* */` are fine. - Tables that servers write and the panel reads carry a `server_id` column, so the panel can filter per server and a server only touches its own rows. - Prefix table names with the extension name (`_...`) to avoid clashes with core tables and other extensions. - Use `utf8mb4` and the `InnoDB` engine like the core tables. - Keep master scope tables out of node files and vice versa. On a single server both scopes run against the same database, so a mistake is not visible there; it shows up on a multiserver setup as a missing table on the slaves or on the master. Example `install_master.sql`: ```sql CREATE TABLE IF NOT EXISTS `myext_findings` ( `finding_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT 0, `sys_groupid` int(11) unsigned NOT NULL DEFAULT 0, `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `server_id` int(11) unsigned NOT NULL DEFAULT 0, `severity` enum('info','low','medium','high') NOT NULL DEFAULT 'info', `message` text, `created` datetime DEFAULT NULL, PRIMARY KEY (`finding_id`), KEY `server_id` (`server_id`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4; ``` Example `incremental/upd_0001_master.sql` adding a column later on: ```sql ALTER TABLE `myext_findings` ADD COLUMN IF NOT EXISTS `resolved` tinyint(1) NOT NULL DEFAULT 0; ``` Example `uninstall_master.sql`: ```sql DROP TABLE IF EXISTS `myext_findings`; ``` ## 7. Checking what happened - The applied version: `cat /usr/local/ispconfig/extensions//dbversion` - Log lines: the installer logs every SQL file it runs, skips or fails to `/var/log/ispconfig/ispconfig.log` (`Loaded install_node.sql for extension ...`, `Skipping install_master.sql of extension ..., the master database is not on this server`, `Failed to run upd_0002_node.sql for extension ...`). Set the server log level to debug to see the skip and "no pending migrations" messages. - Command line: `ispc extension install `, `ispc extension update ` and `ispc extension uninstall ` print the errors of the extension installer directly. ispconfig3_install/docs/old_server_plugins/0000775000000000000000000000000015114345330020204 5ustar rootrootispconfig3_install/docs/old_server_plugins/bind_dlz_plugin.inc.php0000775000000000000000000002570115114345330024640 0ustar rootrootplugins->registerEvent('dns_soa_insert', $this->plugin_name, 'soa_insert'); $app->plugins->registerEvent('dns_soa_update', $this->plugin_name, 'soa_update'); $app->plugins->registerEvent('dns_soa_delete', $this->plugin_name, 'soa_delete'); //* RR $app->plugins->registerEvent('dns_rr_insert', $this->plugin_name, 'rr_insert'); $app->plugins->registerEvent('dns_rr_update', $this->plugin_name, 'rr_update'); $app->plugins->registerEvent('dns_rr_delete', $this->plugin_name, 'rr_delete'); } function soa_insert($event_name, $data) { global $app, $conf; if($data["new"]["active"] != 'Y') return; $origin = substr($data["new"]["origin"], 0, -1); $ispconfig_id = $data["new"]["id"]; $serial = $app->db->queryOneRecord("SELECT * FROM dns_soa WHERE id = ?", $ispconfig_id); $ttl = $data["new"]["ttl"]; //$_db = clone $app->db; //$_db->dbName = 'named'; $app->db->query("INSERT INTO named.records (zone, ttl, type, primary_ns, resp_contact, serial, refresh, retry, expire, minimum, ispconfig_id) VALUES ". "(?, ?, 'SOA', ?, ?, ?, ?, ?, ?, ?, ?)", $origin, $ttl, $data["new"]["ns"], $data["new"]["mbox"], $serial["serial"], $serial["refresh"], $serial["retry"], $serial["expire"], $serial["minimum"], $ispconfig_id); //unset($_db); } function soa_update($event_name, $data) { global $app, $conf; if($data["new"]["active"] != 'Y') { if($data["old"]["active"] != 'Y') return; $this->soa_delete($event_name, $data); } else { if($data["old"]["active"] == 'Y') { $origin = substr($data["new"]["origin"], 0, -1); $ispconfig_id = $data["new"]["id"]; $serial = $app->db->queryOneRecord("SELECT * FROM dns_soa WHERE id = ?", $ispconfig_id); $ttl = $data["new"]["ttl"]; //$_db = clone $app->db; //$_db->dbName = 'named'; $app->db->query("UPDATE named.records SET zone = ?, ttl = ?, primary_ns = ?, resp_contact = ?, serial = ?, refresh = ?, retry = ?, expire = ?, minimum = ? WHERE ispconfig_id = ? AND type = 'SOA'", $origin, $ttl, $data["new"]["ns"], $data["new"]["mbox"], $serial["serial"], $serial["refresh"], $serial["retry"], $serial["expire"], $serial["minimum"], $data["new"]["id"]); //unset($_db); } else { $this->soa_insert($event_name, $data); $ispconfig_id = $data["new"]["id"]; if ($records = $app->db->queryAllRecords("SELECT * FROM dns_rr WHERE zone = ? AND active = 'Y'", $ispconfig_id)) { foreach($records as $record) { foreach ($record as $key => $val) { $data["new"][$key] = $val; } $this->rr_insert("dns_rr_insert", $data); } } } } } function soa_delete($event_name, $data) { global $app, $conf; //$_db = clone $app->db; //$_db->dbName = 'named'; $app->db->query( "DELETE FROM named.dns_records WHERE zone = ?", substr($data['old']['origin'], 0, -1)); //unset($_db); } function rr_insert($event_name, $data) { global $app, $conf; if($data["new"]["active"] != 'Y') return; $zone = $app->db->queryOneRecord("SELECT * FROM dns_soa WHERE id = ?", $data["new"]["zone"]); $origin = substr($zone["origin"], 0, -1); $ispconfig_id = $data["new"]["id"]; $type = $data["new"]["type"]; if (substr($data["new"]["name"], -1) == '.') { $name = substr($data["new"]["name"], 0, -1); } else { $name = ($data["new"]["name"] == "") ? $name = '@' : $data["new"]["name"]; } if ($name == $origin || $name == '') { $name = '@'; } switch ($type) { case "CNAME": case "MX": case "NS": case "ALIAS": case "PTR": case "SRV": if(substr($data["new"]["data"], -1) != '.'){ $content = $data["new"]["data"] . '.'; } else { $content = $data["new"]["data"]; } break; case "HINFO": $content = $data["new"]["data"]; $quote1 = strpos($content, '"'); if($quote1 !== FALSE) { $quote2 = strpos(substr($content, ($quote1 + 1)), '"'); } if ($quote1 !== FALSE && $quote2 !== FALSE) { $text_between_quotes = str_replace(' ', '_', substr($content, ($quote1 + 1), (($quote2 - $quote1)))); $content = $text_between_quotes.substr($content, ($quote2 + 2)); } break; default: $content = $data["new"]["data"]; } $ttl = $data["new"]["ttl"]; //$_db = clone $app->db; //$_db->dbName = 'named'; if ($type == 'MX') { $app->db->query("INSERT INTO named.records (zone, ttl, type, host, mx_priority, data, ispconfig_id)". " VALUES (?, ?, ?, ?, ?, ?, ?)", $origin, $ttl, $type, $name, $data["new"]["aux"], $content, $ispconfig_id); } elseif ($type == 'SRV') { $app->db->query("INSERT INTO named.records (zone, ttl, type, data, ispconfig_id)". " VALUES (?, ?, ?, ?, ?)", $origin, $ttl, $type, $data["new"]["aux"] . ' ' . $content, $ispconfig_id); } else { $app->db->query("INSERT INTO named.records (zone, ttl, type, host, data, ispconfig_id)". " VALUES (?, ?, ?, ?, ?, ?)", $origin, $ttl, $type, $name, $content, $ispconfig_id); } //unset($_db); } function rr_update($event_name, $data) { global $app, $conf; if ($data["new"]["active"] != 'Y') { if($data["old"]["active"] != 'Y') return; $this->rr_delete($event_name, $data); } else { if ($data["old"]["active"] == 'Y') { $zone = $app->db->queryOneRecord("SELECT * FROM dns_soa WHERE id = ?", $data["new"]["zone"]); $origin = substr($zone["origin"], 0, -1); $ispconfig_id = $data["new"]["id"]; $type = $data["new"]["type"]; if (substr($data["new"]["name"], -1) == '.') { $name = substr($data["new"]["name"], 0, -1); } else { $name = ($data["new"]["name"] == "") ? $name = '@' : $data["new"]["name"]; } if ($name == $origin || $name == '') { $name = '@'; } switch ($type) { case "CNAME": case "MX": case "NS": case "ALIAS": case "PTR": case "SRV": if(substr($data["new"]["data"], -1) != '.'){ $content = $data["new"]["data"] . '.'; } else { $content = $data["new"]["data"]; } break; case "HINFO": $content = $data["new"]["data"]; $quote1 = strpos($content, '"'); if($quote1 !== FALSE){ $quote2 = strpos(substr($content, ($quote1 + 1)), '"'); } if($quote1 !== FALSE && $quote2 !== FALSE){ $text_between_quotes = str_replace(' ', '_', substr($content, ($quote1 + 1), (($quote2 - $quote1)))); $content = $text_between_quotes.substr($content, ($quote2 + 2)); } break; default: $content = $data["new"]["data"]; } $ttl = $data["new"]["ttl"]; $prio = (int)$data["new"]["aux"]; //$_db = clone $app->db; //$_db->dbName = 'named'; if ($type == 'MX') { $app->db->query("UPDATE named.records SET zone = ?, ttl = ?, type = ?, host = ?, mx_priority = ?, data = ? WHERE ispconfig_id = ? AND type != 'SOA'", $origin, $ttl, $type, $name, $prio, $content, $ispconfig_id); } elseif ($type == 'SRV') { $app->db->query("UPDATE named.records SET zone = ?, ttl = ?, type = ?, data = ? WHERE ispconfig_id = ? AND type != 'SOA'", $origin, $ttl, $type, $prio . ' ' . $content, $ispconfig_id); } else { $app->db->query("UPDATE named.records SET zone = ?, ttl = ?, type = ?, host = ?, data = ? WHERE ispconfig_id = ? AND type != 'SOA'", $origin, $ttl, $type, $name, $content, $ispconfig_id); } //unset($_db); } else { $this->rr_insert($event_name, $data); } } } function rr_delete($event_name, $data) { global $app, $conf; //$_db = clone $app->db; //$_db->dbName = 'named'; $app->db->query( "DELETE FROM named.dns_records WHERE type != 'SOA' AND zone = ?", substr($data['old']['origin'], 0, -1)); //unset($_db); } } // end class ?> ispconfig3_install/docs/old_server_plugins/nginx_reverseproxy_plugin.inc.php0000775000000000000000000002725415114345330027040 0ustar rootrootplugins->registerEvent('web_domain_insert', $this->plugin_name, 'ssl'); $app->plugins->registerEvent('web_domain_update', $this->plugin_name, 'ssl'); $app->plugins->registerEvent('web_domain_delete', $this->plugin_name, 'ssl'); $app->plugins->registerEvent('web_domain_insert', $this->plugin_name, 'insert'); $app->plugins->registerEvent('web_domain_update', $this->plugin_name, 'update'); $app->plugins->registerEvent('web_domain_delete', $this->plugin_name, 'delete'); // $app->plugins->registerEvent('proxy_reverse_insert',$this->plugin_name,'rewrite_insert'); // $app->plugins->registerEvent('proxy_reverse_update',$this->plugin_name,'rewrite_update'); // $app->plugins->registerEvent('proxy_reverse_delete',$this->plugin_name,'rewrite_delete'); } function insert($event_name, $data) { global $app, $conf; // just run the update function $this->update($event_name, $data); } function update($event_name, $data) { global $app, $conf; if($this->action != 'insert') $this->action = 'update'; if($data['new']['type'] != 'vhost' && $data['new']['type'] != 'vhostsubdomain' && $data['new']['type'] != 'vhostalias' && $data['new']['parent_domain_id'] > 0) { $old_parent_domain_id = intval($data['old']['parent_domain_id']); $new_parent_domain_id = intval($data['new']['parent_domain_id']); // If the parent_domain_id has been chenged, we will have to update the old site as well. if($this->action == 'update' && $data['new']['parent_domain_id'] != $data['old']['parent_domain_id']) { $tmp = $app->dbmaster->queryOneRecord("SELECT * FROM web_domain WHERE domain_id = ? AND active = 'y'", $old_parent_domain_id); $data['new'] = $tmp; $data['old'] = $tmp; $this->action = 'update'; $this->update($event_name, $data); } // This is not a vhost, so we need to update the parent record instead. $tmp = $app->dbmaster->queryOneRecord("SELECT * FROM web_domain WHERE domain_id = ? AND active = 'y'", $new_parent_domain_id); $data['new'] = $tmp; $data['old'] = $tmp; $this->action = 'update'; } // load the server configuration options $app->uses('getconf'); $nginx_config = $app->getconf->get_server_config($conf['server_id'], 'web'); // Create group and user, if not exist $app->uses('system'); //* Create the vhost config file $app->load('tpl'); $tpl = new tpl(); $tpl->newTemplate('nginx_reverseproxy_vhost.conf.master'); $vhost_data = $data['new']; $vhost_data['config_dir'] = $config['nginx']['config_dir']; $vhost_data['ssl_domain'] = $data['new']['ssl_domain']; // Check if a SSL cert exists $ssl_dir = $config['nginx']['config_dir'].'/ssl'; $domain = $data['new']['ssl_domain']; $key_file = $ssl_dir.'/'.$domain.'.key'; $crt_file = $ssl_dir.'/'.$domain.'.crt'; $bundle_file = $ssl_dir.'/'.$domain.'.bundle'; if($vhost_data['nginx_directives']) { $vhost_data['nginx_directives'] = preg_replace("/\[IP\]/", $vhost_data['ip_address'], $vhost_data['nginx_directives']); } if($data['new']['ssl'] == 'y' && @is_file($crt_file) && @is_file($key_file)) { $vhost_data['ssl_enabled'] = 1; $app->log('Enable SSL for: '.$domain, LOGLEVEL_DEBUG); } else { $vhost_data['ssl_enabled'] = 0; $app->log('Disable SSL for: '.$domain, LOGLEVEL_DEBUG); } if(@is_file($bundle_file)) $vhost_data['has_bundle_cert'] = 1; $tpl->setVar($vhost_data); // get alias domains (co-domains and subdomains) $aliases = $app->dbmaster->queryAllRecords("SELECT * FROM web_domain WHERE parent_domain_id = ? AND (type != 'vhostsubdomain' OR type != 'vhostalias') AND active = 'y'", $data['new']['domain_id']); $server_alias = array(); switch($data['new']['subdomain']) { case 'www': $server_alias[] .= 'www.'.$data['new']['domain'].' '; break; case '*': $server_alias[] .= '*.'.$data['new']['domain'].' '; break; } if(is_array($aliases)) { foreach($aliases as $alias) { switch($alias['subdomain']) { case 'www': $server_alias[] .= 'www.'.$alias['domain'].' '.$alias['domain'].' '; break; case '*': $server_alias[] .= '*.'.$alias['domain'].' '.$alias['domain'].' '; break; default: $server_alias[] .= $alias['domain'].' '; break; } $app->log('Add server alias: '.$alias['domain'], LOGLEVEL_DEBUG); } } //* If we have some alias records if(count($server_alias) > 0) { $server_alias_str = ''; $n = 0; // begin a new ServerAlias line after 30 alias domains foreach($server_alias as $tmp_alias) { if($n % 30 == 0) $server_alias_str .= " "; $server_alias_str .= $tmp_alias; } unset($tmp_alias); $tpl->setVar('alias', trim($server_alias_str)); } else { $tpl->setVar('alias', ''); } $vhost_file = $nginx_config['nginx_vhost_conf_dir'].'/'.$data['new']['domain'].'.vhost'; //* Make a backup copy of vhost file copy($vhost_file, $vhost_file.'~'); //* Write vhost file file_put_contents($vhost_file, $tpl->grab()); $app->log('Writing the vhost file: '.$vhost_file, LOGLEVEL_DEBUG); unset($tpl); // Set the symlink to enable the vhost $vhost_symlink = $nginx_config['nginx_vhost_conf_enabled_dir'].'/'.$data['new']['domain'].'.vhost'; if($data['new']['active'] == 'y' && !is_link($vhost_symlink)) { symlink($vhost_file, $vhost_symlink); $app->log('Creating symlink: '.$vhost_symlink.'->'.$vhost_file, LOGLEVEL_DEBUG); } // Remove the symlink, if site is inactive if($data['new']['active'] == 'n' && is_link($vhost_symlink)) { unlink($vhost_symlink); $app->log('Removing symlink: '.$vhost_symlink.'->'.$vhost_file, LOGLEVEL_DEBUG); } if(!is_dir('/var/log/ispconfig/nginx/'.$data['new']['domain'])) $app->system->exec_safe('mkdir -p ?', '/var/log/ispconfig/nginx/'.$data['new']['domain']); // remove old symlink and vhost file, if domain name of the site has changed if($this->action == 'update' && $data['old']['domain'] != '' && $data['new']['domain'] != $data['old']['domain']) { $vhost_symlink = $nginx_config['nginx_vhost_conf_enabled_dir'].'/'.$data['old']['domain'].'.vhost'; unlink($vhost_symlink); $app->log('Removing symlink: '.$vhost_symlink.'->'.$vhost_file, LOGLEVEL_DEBUG); $vhost_file = $nginx_config['nginx_vhost_conf_dir'].'/'.$data['old']['domain'].'.vhost'; unlink($vhost_file); $app->log('Removing file: '.$vhost_file, LOGLEVEL_DEBUG); if(is_dir('/var/log/ispconfig/nginx/'.$data['old']['domain'])) $app->system->exec_safe('rm -rf ?', '/var/log/ispconfig/nginx/'.$data['old']['domain']); } // request a httpd reload when all records have been processed $app->services->restartServiceDelayed('nginx', 'restart'); // Remove the backup copy of the config file. if(@is_file($vhost_file.'~')) unlink($vhost_file.'~'); //* Unset action to clean it for next processed vhost. $this->action = ''; } // Handle the creation of SSL certificates function ssl($event_name, $data) { global $app, $conf; if(!is_dir($conf['nginx']['config_dir'].'/ssl')) $app->system->exec_safe('mkdir -p ?', $conf['nginx']['config_dir'].'/ssl'); $ssl_dir = $conf['nginx']['config_dir'].'/ssl'; $domain = $data['new']['ssl_domain']; $key_file = $ssl_dir.'/'.$domain.'.key.org'; $key_file2 = $ssl_dir.'/'.$domain.'.key'; $csr_file = $ssl_dir.'/'.$domain.'.csr'; $crt_file = $ssl_dir.'/'.$domain.'.crt'; //* Save a SSL certificate to disk if($data["new"]["ssl_action"] == 'save') { $web = $app->masterdb->queryOneRecord("select wd.document_root, sp.ip_address from web_domain wd INNER JOIN server_ip sp USING(server_id) WHERE domain = ?", $data['new']['domain']); $src_ssl_dir = $web["document_root"]."/ssl"; //$domain = $data["new"]["ssl_domain"]; //$csr_file = $ssl_dir.'/'.$domain.".csr"; //$crt_file = $ssl_dir.'/'.$domain.".crt"; //$bundle_file = $ssl_dir.'/'.$domain.".bundle"; $app->system->exec_safe('rsync -v -e ssh root@?:? ?', $web['ip_address'], '~/'.$src_ssl_dir, $ssl_dir); $app->log('Syncing SSL Cert for: '.$domain, LOGLEVEL_DEBUG); } //* Delete a SSL certificate if($data['new']['ssl_action'] == 'del') { //$ssl_dir = $data['new']['document_root'].'/ssl'; $domain = $data['new']['ssl_domain']; $csr_file = $ssl_dir.'/'.$domain.'.csr'; $crt_file = $ssl_dir.'/'.$domain.'.crt'; $bundle_file = $ssl_dir.'/'.$domain.'.bundle'; unlink($csr_file); unlink($crt_file); unlink($bundle_file); $app->log('Deleting SSL Cert for: '.$domain, LOGLEVEL_DEBUG); } } function delete($event_name, $data) { global $app, $conf; // load the server configuration options $app->uses('getconf'); $nginx_config = $app->getconf->get_server_config($conf['server_id'], 'web'); if($data['old']['type'] == 'vhost' || $data['old']['type'] == 'vhostsubdomain' || $data['old']['type'] == 'vhostalias') { //* This is a website // Deleting the vhost file, symlink and the data directory $vhost_symlink = $nginx_config['nginx_vhost_conf_enabled_dir'].'/'.$data['old']['domain'].'.vhost'; unlink($vhost_symlink); $app->log('Removing symlink: '.$vhost_symlink.'->'.$vhost_file, LOGLEVEL_DEBUG); $vhost_file = $nginx_config['nginx_vhost_conf_dir'].'/'.$data['old']['domain'].'.vhost'; unlink($vhost_file); $app->log('Removing vhost file: '.$vhost_file, LOGLEVEL_DEBUG); // Delete the log file directory $vhost_logfile_dir = '/var/log/ispconfig/nginx/'.$data['old']['domain']; if($data['old']['domain'] != '' && !stristr($vhost_logfile_dir, '..')) $app->system->exec_safe('rm -rf ?', $vhost_logfile_dir); $app->log('Removing website logfile directory: '.$vhost_logfile_dir, LOGLEVEL_DEBUG); } } function rewrite_insert($event_name, $data) { global $app, $conf; // just run the update function $this->update($event_name, $data); } function rewrite_update($event_name, $data) { global $app, $conf; $rules = $this->_getRewriteRules($app); $app->uses('getconf'); $nginx_config = $app->getconf->get_server_config($conf['server_id'], 'web'); $app->load('tpl'); $tpl = new tpl(); $tpl->newTemplate("nginx_reverseproxy_rewrites.conf.master"); if (!empty($rules))$tpl->setLoop('nginx_rewrite_rules', $rules); $rewrites_file = $nginx_config['nginx_vhost_conf_dir'].'/default.rewrites.conf'; //* Make a backup copy of vhost file copy($rewrites_file, $rewrites_file.'~'); //* Write vhost file file_put_contents($rewrites_file, $tpl->grab()); $app->log('Writing the nginx rewrites file: '.$rewrites_file, LOGLEVEL_DEBUG); unset($tpl); // Set the symlink to enable the vhost $rewrite_symlink = $nginx_config['nginx_vhost_conf_enabled_dir'].'/default.rewrites.conf'; if(!is_link($rewrite_symlink)) { symlink($rewrites_file, $rewrite_symlink); $app->log('Creating symlink for nginx rewrites: '.$rewrite_symlink.'->'.$rewrites_file, LOGLEVEL_DEBUG); } } function rewrite_delete($event_name, $data) { global $app, $conf; // just run the update function $this->rewrite_update($event_name, $data); } function _getRewriteRules($app) { $rules = array(); $rules = $app->db->queryAllRecords("SELECT rewrite_url_src, rewrite_url_dst FROM proxy_reverse ORDER BY rewrite_id ASC"); return $rules; } } // end class ?> ispconfig3_install/docs/autoinstall_samples/0000775000000000000000000000000015123305415020362 5ustar rootrootispconfig3_install/docs/autoinstall_samples/autoinstall.ini.sample0000775000000000000000000000357515123305415024717 0ustar rootroot[install] language=en install_mode=standard hostname=server1.example.com mysql_hostname=localhost mysql_port=3306 mysql_root_user=root mysql_root_password=ispconfig mysql_database=dbispconfig mysql_charset=utf8mb4 http_server=apache ispconfig_port=8080 ispconfig_use_ssl=y ispconfig_admin_password=admin create_ssl_server_certs=y ignore_hostname_dns=n ispconfig_postfix_ssl_symlink=y ispconfig_pureftpd_ssl_symlink=y [ssl_cert] ssl_cert_country=AU ssl_cert_state=Some-State ssl_cert_locality=Chicago ssl_cert_organisation=Internet Widgits Pty Ltd ssl_cert_organisation_unit=IT department ssl_cert_common_name=server1.example.com ssl_cert_email=hostmaster@example.com [expert] mysql_ispconfig_user=ispconfig mysql_ispconfig_password=afStEratXBsgatRtsa42CadwhQ join_multiserver_setup=n mysql_master_hostname=master.example.com mysql_master_root_user=root mysql_master_root_password=ispconfig mysql_master_database=dbispconfig configure_mail=y configure_jailkit=y configure_ftp=y configure_dns=y configure_apache=y configure_nginx=y configure_firewall=y install_ispconfig_web_interface=y [update] do_backup=yes mysql_root_password=ispconfig mysql_master_hostname=master.example.com mysql_master_port=3306 mysql_master_root_user=root mysql_master_root_password=ispconfig mysql_master_database=dbispconfig reconfigure_permissions_in_master_database=no reconfigure_services=yes ispconfig_port=8080 create_new_ispconfig_ssl_cert=no reconfigure_crontab=yes create_ssl_server_certs=y ignore_hostname_dns=n ispconfig_postfix_ssl_symlink=y ispconfig_pureftpd_ssl_symlink=y ; These are for service-detection (defaulting to old behaviour where all changes were automatically accepted) svc_detect_change_mail_server=yes svc_detect_change_web_server=yes svc_detect_change_dns_server=yes svc_detect_change_xmpp_server=yes svc_detect_change_firewall_server=yes svc_detect_change_vserver_server=yes svc_detect_change_db_server=yes ispconfig3_install/docs/autoinstall_samples/autoinstall.conf_sample.php0000775000000000000000000000777015123305415025735 0ustar rootroot ispconfig3_install/docs/Remote_API_docs.txt0000775000000000000000000000011515114345330017774 0ustar rootroot The remote API documentation is in the remoting_client/API-docs subfolder. ispconfig3_install/docs/INSTALL.txt0000775000000000000000000000017015114345330016147 0ustar rootroot The installation instructions for ISPConfig can be found here: https://www.ispconfig.org/page/en/documentation.html ispconfig3_install/docs/AUTOUPDATE.md0000775000000000000000000001465715123305415016314 0ustar rootroot# ISPConfig Automatic/Unattended Updates This guide explains how to set up and use automatic (unattended) updates for ISPConfig servers. ## Overview ISPConfig supports unattended updates using a configuration file that pre-answers all update prompts. This is useful for: - Automated server maintenance - Scripted updates across multiple servers - CI/CD pipelines - Reducing human error during updates ## Quick Start 1. **Create the autoinstall configuration file:** ```bash cp /usr/local/ispconfig/docs/autoinstall_samples/autoinstall.conf_sample.php /usr/local/ispconfig/server/lib/autoinstall.conf.php ``` 2. **Edit the configuration file** with your settings (see Configuration section below) 3. **Run the update:** ```bash ispconfig_update.sh --autoinstall=/usr/local/ispconfig/server/lib/autoinstall.conf.php ``` Or using the CLI: ```bash ispc update --autoinstall=/usr/local/ispconfig/server/lib/autoinstall.conf.php ``` ## Configuration File The configuration file can be either: - **PHP format** (`autoinstall.conf.php`) - Recommended, allows dynamic values - **INI format** (`autoinstall.ini`) - Simple key-value pairs ### PHP Format Example ```php ``` ### Configuration Options Reference | Option | Values | Default | Description | |--------|--------|---------|-------------| | `do_backup` | yes, no | yes | Create backup before update | | `mysql_root_password` | string | - | MySQL root password for local server | | `mysql_master_hostname` | string | - | Master DB hostname (multiserver only) | | `mysql_master_port` | string | 3306 | Master DB port (multiserver only) | | `mysql_master_root_user` | string | root | Master DB root username | | `mysql_master_root_password` | string | - | Master DB root password | | `mysql_master_database` | string | dbispconfig | Master DB database name | | `reconfigure_permissions_in_master_database` | yes, no | no | Reconfigure DB permissions | | `reconfigure_services` | yes, no, selected | yes | Reconfigure all services | | `ispconfig_port` | number | 8080 | ISPConfig web interface port | | `create_new_ispconfig_ssl_cert` | yes, no | no | Generate new SSL certificate | | `reconfigure_crontab` | yes, no | yes | Update crontab entries | | `create_ssl_server_certs` | y, n | y | Create SSL server certificates | | `ignore_hostname_dns` | y, n | n | Ignore hostname DNS check | | `ispconfig_postfix_ssl_symlink` | y, n | y | Create Postfix SSL symlink | | `ispconfig_pureftpd_ssl_symlink` | y, n | y | Create PureFTPd SSL symlink | | `svc_detect_change_*` | yes, no | yes | Auto-accept service detection changes | ## Helper Script A helper script is available to generate the configuration file: ```bash /usr/local/ispconfig/server/scripts/generate_autoinstall_conf.sh ``` This script will: 1. Read your current ISPConfig configuration 2. Prompt for any sensitive values (passwords) 3. Generate a ready-to-use `autoinstall.conf.php` file ## Security Considerations ⚠️ **Important Security Notes:** 1. **Protect the configuration file** - It contains sensitive passwords: ```bash chmod 600 /usr/local/ispconfig/server/lib/autoinstall.conf.php chown root:root /usr/local/ispconfig/server/lib/autoinstall.conf.php ``` 2. **Consider using environment variables** for passwords in the PHP config: ```php $autoupdate['mysql_root_password'] = getenv('MYSQL_ROOT_PASSWORD'); ``` 3. **Do not commit** the configuration file to version control 4. **Test updates** on a staging server before production ## Multiserver Setup For multiserver setups, update servers in this order: 1. Enable maintenance mode on the master 2. Update the **master server first** 3. Update all slave servers 4. Disable maintenance mode Each slave server needs the master database credentials in its configuration file. ## Cron-based Automatic Updates To schedule automatic updates (use with caution): ```bash # Edit root's crontab crontab -e # Add weekly update on Sunday at 3 AM 0 3 * * 0 /usr/local/bin/ispconfig_update.sh --autoinstall=/usr/local/ispconfig/server/lib/autoinstall.conf.php >> /var/log/ispconfig/update_cron.log 2>&1 ``` **Recommendation:** Only use automated cron updates if you have: - Proper backup systems in place - Monitoring to detect update failures - A staging environment to test updates first ## Troubleshooting ### Update fails with "Unable to connect to mysql server" - Verify `mysql_root_password` is correct - Check MySQL is running: `systemctl status mysql` ### Master database connection fails - Verify master server is accessible from slave - Check firewall rules allow MySQL connections - Verify `mysql_master_*` credentials are correct ### Configuration file not found - Use absolute path: `--autoinstall=/full/path/to/autoinstall.conf.php` - Verify file exists and is readable by root ## See Also - Sample configuration: `docs/autoinstall_samples/autoinstall.conf_sample.php` - ISPConfig documentation: https://www.ispconfig.org/documentation/ ispconfig3_install/docs/examples/0000775000000000000000000000000015114345330016115 5ustar rootrootispconfig3_install/docs/examples/blacklist_helo.master0000775000000000000000000001404015114345330022313 0ustar rootroot# blacklist_helo - after permit_sasl, used to stop common spammers/misconfigurations # # This file can be used to block hostnames used in smtp HELO command which are known bad. # Occasionally you will run into legitimate mail servers which are misconfigured and end # up blocked here, so this is not enabled by default, but it is useful if you are prepared # to address those cases. .local is particularly problematic, and commented out by default. # # Note that any server hitting this check is misconfigured, all of the names below are bogus # and not allowed per RFC 2821. # # If your own users are blocked by this, they are not authenticating to your server when # sending (this check is after permit_sasl, which permits authenticated senders). # # Instructions: # # Copy this file to /usr/local/ispconfig/server/conf-custom/install/blacklist_helo.master, # as well as /etc/postfix/blacklist_helo, so your changes are not overwritten with ispconfig # updates. # probably just put REJECT lines in here, # as OK lines will bypass a lot of other checks you may want done # (use DUNNO instead of OK) # # common for spammers (check https://data.iana.org/TLD/tlds-alpha-by-domain.txt and remove valid tld's occasionally) /.*\.administrator$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.admin$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.adsl$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.arpa$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.bac$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.coma$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.dhcp$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.dlink$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.dns$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.domain$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.dynamic$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.dyndns\.org$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.dyn$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.firewall$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.gateway$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.home$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.internal$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.intern$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.janak$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.kornet$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.lab$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.lan$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.localdomain$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.localhost$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. # .local is used by spammers a lot, but too many otherwise legit servers hit it # (instead of REJECT, should send to greylisting) #/.*\.local$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.loc$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.lokal$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.mail$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.nat$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.netzwerk$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.pc$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.privat$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.private$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.router$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.setup$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.119$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.beeline$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.cici$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.gt_3g$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.gt-3g$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.hananet$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.skbroadband$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.tbroad$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. ispconfig3_install/docs/under_development/0000775000000000000000000000000015114345330020016 5ustar rootrootispconfig3_install/docs/under_development/DEV_CHROOTED_DEBIAN_5.0.txt0000775000000000000000000000716315114345330024062 0ustar rootroot Setting up a chrooted ispconfig 3 installation -------------------------------------------------------------------- # Follow the steps 1 - 8 of the INSTALL_DEBIAN_5.0 Guide, then proceed # with the steps below. # # This guide is experimental as there are a few changes necessary in # ispconfig to get it working. These changes will be part of ISPConfig 3.0.2 # Install packages apt-get install debootstrap libapache2-mod-chroot # Create the chroot environment debootstrap lenny /var/www/ ftp://ftp.fr.debian.org/debian/ # Add mountpoints for the chroot env into the fstab file echo "/proc /var/www/proc proc defaults 0 0">>/etc/fstab echo "devpts /var/www/dev/pts devpts defaults 0 0">>/etc/fstab # mount all the filesystems mount -a # add a default chroot dir for all users of the sshusers group echo "@sshusers - chroot /var/www/">>/etc/security/limits.conf # copy passwd and group files to the chroot env cp -rf /etc/apt /etc/passwd /etc/group /var/www/etc/ # Cleaning unnecessary users and groups # Create symlinks cd /var/www/var/ rm -rf /var/www/var/www ln -s / www # Enter the chroot chroot /var/www # Update files in the chroot environment and install some packages. # You can ignore warnings about locales, we will fix them in the next step. apt-get update apt-get install fakeroot --force-yes -y apt-get install locales # Reconfigure locales. Select e.g the en_US* locales. dpkg-reconfigure locales # run a dist-upgrade fakeroot apt-get dist-upgrade # Install Apache and PHP in the chroot environment apt-get install apache2 apache2.2-common apache2-doc apache2-mpm-prefork apache2-utils libexpat1 ssl-cert libapache2-mod-php5 php5 php5-common php5-gd php5-mysql php5-imap phpmyadmin php5-cli php5-cgi libapache2-mod-fcgid apache2-suexec php-pear php-auth php5-mcrypt mcrypt php5-imagick imagemagick libapache2-mod-suphp libopenssl-ruby /etc/init.d/apache2 stop # Exit the chroot exit # Moving the apache configuration is not necessary, as Apache reads # the config files before it moves into the chroot # rm -rf /var/www/etc/apache2 # mv -f /etc/apache2 /var/www/etc/ # ln -s /var/www/etc/apache2 /etc/apache2 rm -rf /var/www/etc/php5/cgi/ mv -f /etc/php5/cgi/ /var/www/etc/php5/ ln -s /var/www/etc/php5/cgi /etc/php5/ rm -rf /var/www/etc/php5/apache2/ mv -f /etc/php5/apache2/ /var/www/etc/php5/ ln -s /var/www/etc/php5/apache2 /etc/php5/ ln -s /var/www/var/run/apache2.pid /var/run/apache2.pid # enable mod_chroot a2enmod mod_chroot echo "ChrootDir /var/www" > /etc/apache2/conf.d/mod_chroot.conf # Start apache /etc/init.d/apache2 start # Install ISPConfig cd /tmp wget https://www.ispconfig.org/downloads/ISPConfig-3.0.1.4-beta-2.tar.gz tar xvfz ISPConfig-3.0.1.4-beta-2.tar.gz cd ispconfig3_install/install/ php -q install.php cd /tmp/ rm -rf ispconfig3_install rm -f ISPConfig-3.0.1.4-beta-2.tar.gz # Move the ispconfig interface part to the chroot environment and create a symlink mkdir /var/www/usr/local/ispconfig chown ispconfig:ispconfig /var/www/usr/local/ispconfig chmod 750 /var/www/usr/local/ispconfig mv /usr/local/ispconfig/interface /var/www/usr/local/ispconfig/ ln -s /var/www/usr/local/ispconfig/interface /usr/local/ispconfig/interface chroot /var/www adduser www-data ispconfig # Create a link for the MySQL socket ln /var/run/mysqld/mysqld.sock /var/www/var/run/mysqld/mysqld.sock # As an alternative to making a hardlink to the MySQL socket, # change the my.cnf file in the chroot to use TCP sockets. # This is more secure but a bit slower than using the mysqld.sock file. # Restart Apache /etc/init.d/apache2 restart ispconfig3_install/docs/under_development/CHROOTED_DEBIAN_5.0.txt0000775000000000000000000002273315114345330023364 0ustar rootroot#!/bin/sh # # rev 0.6 # # dxr@brutalsec.net # 01-09-2009 # # We can create a script for configure chroot environment but, # YOU MUST UNDERSTAND HOW TO WORK IT for can solve possible # problems in the future. # # Every service has its own chroot environment: # BIND -> chroot # Apache -> chroot # Dovecot -> chroot # Pureftpd -> Apache's chroot # # Only apache and php packages aren't installed in real system, # only in chroot environment with symbolic links from real system. # # PLEASE, CONFIGURE CHROOT ENVIROMENT IF SECURITY IS REALLY # IMPORTANT FOR YOU AND YOU KNOWN HOW TO WORK IT! # exit 1 1. BACKUP before changing anything on the system 2. Create partitions 3. Remove possible Apache or PHP installations on real system 4. Prepare Chroot environment 5. Linking Webserver aplication from real system 6. mini_sendmail 7. Test services 8. Howto install ispconfig3 9. Migration 1. BACKUP before changing anything on the system # If is not a new installation, then BACKUP BACKUP BACKUP BACKUP BACKUP BACKUP BACKUP BACKUP BACKUP BACKUP BACKUP BACKUP BACKUP BACKUP BACKUP BACKUP BACKUP BACKUP BACKUP BACKUP BACKUP BACKUP BACKUP BACKUP 2. Create partitions /var/www/ Chroot partition (ext3) /var/www/html/ Chroot system /var/www/html/var/log/apache2 Log partition (ext3) /var/www/html/var/www/html Webs partition (xfs) /var/www/html/tmp Temporal dir (tmpfs, options: ) /dev/lvm_foobar1/chroot_lv -> /var/www/ (ext3) /dev/lvm_foobar2/apachelogs_lv -> /var/www/html/var/log/apache2 (ext3) /dev/lvm_foobar3/hosting_lv -> /var/www/html/var/www/html (xfs) mount /dev/lvm_foobar1/chroot_lv /var/www/ mkdir -p /var/www/html/var/log/apache2 /var/www/html/var/www/html mount /dev/lvm_foobar2/apachelogs_lv /var/www/html/var/log/apache2 mount /dev/lvm_foobar3/hosting_lv /var/www/html/var/www/html 3. Remove possible Apache or PHP installations on real system # We never wont install apache or php in non-chroot system, if we have installed, we only have do a backup of configurations, uninstall, and check every symbolic link dpkg -l|egrep --color -i 'apache|php' 4. Prepare Chroot environment # Install packages in real system apt-get install debootstrap libpcre3 libaprutil1 libxml2 mime-support patch make gcc mysql-server subversion ssh openssh-server ntp ntpdate vim libdbd-mysql libdbi-perl dnsutils # The non webserver will install outside of chroot apt-get install postfix postfix-mysql postfix-doc mysql-client openssl getmail4 rkhunter amavisd-new spamassassin clamav clamav-daemon zoo unzip bzip2 arj nomarch lzop cabextract apt-listchanges libnet-ldap-perl libauthen-sasl-perl clamav-docs daemon libio-string-perl libio-socket-ssl-perl libnet-ident-perl zip libnet-dns-perl pure-ftpd-common pure-ftpd-mysql quota quotatool # If you will use courier: apt-get install courier-authdaemon courier-authlib-mysql courier-pop courier-pop-ssl courier-imap courier-imap-ssl libsasl2-2 libsasl2-modules libsasl2-modules-sql sasl2-bin libpam-mysql courier-maildrop # If you will use dovecot: #apt-get install dovecot-imapd dovecot-pop3d # If you will use BIND: apt-get install bind9 bind9utils # # If we want execute php from real system (crontabs for example) we need install php dependencies in real system: # libgd2-xpm libt1-5 libmagick10 libc-client2007b libmcrypt4 # cat /var/log/ispconfig/cron.log # ldd /usr/lib/php5/20060613/mcrypt.so # time debootstrap --arch=amd64 lenny /var/www/html/ ftp://ftp.fr.debian.org/debian/ echo "/proc /var/www/html/proc proc defaults 0 0">>/etc/fstab echo "devpts /var/www/html/dev/pts devpts defaults 0 0">>/etc/fstab mount -a # We must create sshusers group echo "@sshusers - chroot /var/www/html/">>/etc/security/limits.conf chroot /var/www/html apt-get update chroot /var/www/html apt-get install fakeroot --force-yes -y chroot /var/www/html apt-get install locales chroot /var/www/html dpkg-reconfigure locales mv /usr/lib/apache2 /usr/lib/apache2_old mv /var/log/apache2 /var/log/apache2_old mv /var/lock/apache2 /var/lock/apache2_old mv /var/lib/apache2 /var/lib/apache2_old mv /usr/lib/php5 /usr/lib/php5_old mv /etc/apache2 /etc/apache2_old mv /etc/suphp /etc/suphp_old chroot /var/www/html apt-get install apache2 apache2.2-common apache2-doc apache2-mpm-prefork apache2-utils libexpat1 ssl-cert libapache2-mod-php5 php5 php5-common php5-gd php5-mysql php5-imap phpmyadmin php5-cli php5-cgi libapache2-mod-fcgid apache2-suexec php-pear php-auth php5-mcrypt mcrypt php5-imagick imagemagick libapache2-mod-suphp libopenssl-ruby libapache2-mod-chroot php-apc libtimedate-perl chroot /var/www/html /etc/init.d/apache2 stop chroot /var/www/html a2enmod mod_chroot chroot /var/www/html a2enmod suexec echo "ChrootDir /var/www/html" > /var/www/html/etc/apache2/conf.d/mod_chroot.conf sed -i -e 's#DocumentRoot /var/www/#DocumentRoot /var/www/html/#' /var/www/html/etc/apache2/sites-enabled/000-default sed -i -e 's#x-httpd-php=php:/usr/bin/php-cgi#x-httpd-php=php:/usr/bin/php-cgi\nx-httpd-suphp=php:/usr/bin/php-cgi\nx-httpd-php=php:/usr/bin/php-cgi#' /var/www/html/etc/suphp/suphp.conf sed -i -e 's#/var/run/apache2.pid#/var/run/apache2/apache2.pid#' /var/www/html/etc/apache2/envvars sed -i -e 's/^"syntax on/syntax on/' /etc/vim/vimrc sed -i -e 's/^"syntax on/syntax on/' /var/www/html/etc/vim/vimrc # Protect apache configuration. ONLY root can read it chown root:root /var/www/html/etc/apache2/ && chmod 700 /var/www/html/etc/apache2/ chmod 711 /var/www/html/etc/php5/ 5. # Is good idea to add Nagios alarm for check every symbolic link is correct. ln -s /var/www/html/etc/apache2 /etc/apache2 ln -s /var/www/html/etc/suphp /etc/suphp ln -s /var/www/html/var/run/apache2 /var/run/apache2 ln -s /var/www/html/var/run/apache2.pid /var/run/apache2.pid ln -s /var/www/html/usr/sbin/apache2ctl /usr/sbin/apache2ctl ln -s /var/www/html/usr/sbin/apache2 /usr/sbin/apache2 ln -s /var/www/html/usr/lib/apache2 /usr/lib/apache2 ln -s /var/www/html/usr/sbin/a2enmod /usr/sbin/a2enmod ln -s /var/www/html/usr/sbin/a2dismod /usr/sbin/a2dismod ln -s /var/www/html/usr/sbin/a2ensite /usr/sbin/a2ensite ln -s /var/www/html/usr/sbin/a2dissite /usr/sbin/a2dissite ln -s /var/www/html/var/log/apache2 /var/log/apache2 ln -s /var/www/html/var/lock/apache2 /var/lock/apache2 ln -s /var/www/html/var/lib/apache2 /var/lib/apache2 ln -s /var/www/html/usr/lib/php5 /usr/lib/php5 ln -s /var/www/html/etc/init.d/apache2 /etc/init.d/apache2 # Neccessary for to install ispconfig3 from real system: ln -s /var/www/html/usr/bin/php5 /usr/bin/php5 ln -s /var/www/html/etc/alternatives/php /etc/alternatives/php ln -s /var/www/html/usr/bin/php /usr/bin/php ln -s /var/www/html/etc/php5 /etc/php5 6. # Install mini_sendmail for chroot # We can use mini_sendmail for delivery emails directy in remote servers, but i prefer to control it in central mailserver for check spammers and limit it. cd /tmp/ wget http://acme.com/software/mini_sendmail/mini_sendmail-1.3.6.tar.gz tar xzf mini_sendmail-1.3.6.tar.gz wget http://users1.leipzig.freifunk.net/%7Efirmware-build/brcm_2_4_Broadcom_default/build/openwrt_packages/mail/mini_sendmail/patches/200-fullname.patch patch -p0 < 200-fullname.patch cd mini_sendmail-1.3.6 make # 2e555b2573c3ea65a467a5960f0b51f6 mini_sendmail mv /var/www/html/usr/lib/sendmail /var/www/html/usr/lib/sendmail_old mv /var/www/html/usr/sbin/sendmail /var/www/html/usr/sbin/sendmail_old cp mini_sendmail /var/www/html/usr/sbin/mini_sendmail cd /var/www/html/usr/lib/ && ln -s ../sbin/mini_sendmail sendmail cd /var/www/html/usr/sbin && ln -s mini_sendmail sendmail # ./mini_sendmail -h # usage: ./mini_sendmail [-f] [-t] [-s] [-p] [-T] [-v] [address ...] #add to php.ini (/var/www/html/etc/php5/apache2/php.ini /var/www2/etc/php5/cli/php.ini /var/www2/etc/php5/cgi/php.ini line :672) # sendmail_path = /usr/sbin/mini_sendmail -t -i -fhosting@alojamientotecnico.com -s127.0.0.1 sed -i -e 's#^;sendmail_path =$#sendmail_path = /usr/sbin/mini_sendmail -t -i -fhosting@alojamientotecnico.com -s127.0.0.1#' /var/www/html/etc/php5/apache2/php.ini /var/www/html/etc/php5/cli/php.ini /var/www/html/etc/php5/cgi/php.ini 7. # Test apache2ctl restart # php -i|grep --color sendmail #sendmail_from => no value => no value #sendmail_path => /usr/sbin/mini_sendmail -t -i -fhosting@alojamientotecnico.com -s127.0.0.1 => /usr/sbin/mini_sendmail -t -i -fhosting@alojamientotecnico.com -s127.0.0.1 #Path to sendmail => /usr/sbin/mini_sendmail -t -i -fhosting@alojamientotecnico.com -s127.0.0.1 # Sould be good idea check /var/www/html/usr/lib/sendmail /var/www/html/usr/sbin/sendmail and /var/www/html/usr/sbin/mini_sendmail with nagios alarm ;) 8. Install ispconfig ........ cd /tmp/ svn co svn://svn.ispconfig.org/ispconfig3 svn.ispconfig.org mv /usr/local/ispconfig /var/www/html/usr/local/ ln -s /var/www/html/usr/local/ispconfig /usr/local/ispconfig mv /var/www/apps /var/www/html/var/www/ mv /var/www/php-fcgi-scripts /var/www/html/var/www/ mv /var/www/ispconfig /var/www/html/var/www/ ln -s /var/www/html//var/www/ispconfig /var/www/ispconfig ln -s /var/www/html/var/www/php-fcgi-scripts /var/www/php-fcgi-scripts ln -s /var/www/html/var/www/apps /var/www/apps # After copy, we must clean unnecessary users and groups cp -r /etc/{passwd,group,apt} /var/www/html/etc/ apache2ctl stop apache2ctl start ### Migration to other server ### Really easy: Do step 1 And after do a simple rsync: screen time rsync -a --progress root@host1:/var/www/ /var/www/ # Install some apache's dependencies apt-get install debootstrap libpcre3 libaprutil1 libxml2 mime-support Do step 5 Do step 6 ispconfig3_install/extensions/0000775000000000000000000000000015114345330015546 5ustar rootrootispconfig3_install/extensions/empty.dir0000775000000000000000000000000015114345330017375 0ustar rootrootispconfig3_install/helper_scripts/0000775000000000000000000000000015132152722016376 5ustar rootrootispconfig3_install/helper_scripts/gentoo_setup.sh0000775000000000000000000005413515114345330021457 0ustar rootroot#!/bin/bash # Copyright (c) 2009, Scott Barr # All rights reserved. # # Redistribution and use in source and binary forms, with or without # modification, are permitted provided that the following conditions are met: # * Redistributions of source code must retain the above copyright # notice, this list of conditions and the following disclaimer. # * Redistributions in binary form must reproduce the above copyright # notice, this list of conditions and the following disclaimer in the # documentation and/or other materials provided with the distribution. # * Neither the name of the nor the # names of its contributors may be used to endorse or promote products # derived from this software without specific prior written permission. # # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS ''AS IS'' # AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED # WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE # DISCLAIMED. IN NO EVENT SHALL BE LIABLE FOR ANY # DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES # (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; # LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND # ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT # (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS # SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. # Global vars install_mail="no" install_web="no" install_ftp="no" install_dns="no" spinner_pid=0 version="0.7" source_path=`dirname $0` source ${source_path}/utils.sh function package_has_use_flag() { local package=$1 local useflag=$2 res=`equery -C -N uses $package | grep -o -P "^ [-+]{1} \+ $useflag"` [ -n "$res" ] } function package_is_emerged() { local package=$1 installed=`equery -C -N list -e -i $1 | grep $1 | grep "^\[I"` [ -n "$installed" ] } function is_package_installed() { local usechange="no" local uselist="" package_is_emerged "$1" installed=$? if [ -n "$2" ] # Use flags parsed then for useflag in $2 do uselist="$uselist +$useflag" # If the use flag isn't currently set or wasn't enabled when installed we'll need to re-install it. package_has_use_flag "$1" "$useflag" || usechange="yes" done flagedit $1 $uselist --nowarn fi [ $installed -eq 0 ] && [ "$usechange" == "no" ] } function install_progress() { SP_STRING="/-\\|" packages=( $2 ) IP_STRING=`printf "1 of %d" "${#packages[@]}"` loop_count=0 nowf=`date +'%b %d, %Y %H:%M'` while [ -d /proc/$1 ] && [ -d /proc/$$ ] do printf "\e[1;37m\e7[ %1.1s %s ] \e8\e[0m" "$SP_STRING" "$IP_STRING" sleep 0.2 if [ $loop_count -lt 8 ] then loop_count=$(($loop_count+1)) else current=`sed -n "/Started emerge on: $nowf/,/G/p" /var/log/emerge.log | grep ">>> emerge" | tail -1 | grep -m 1 -o -P "\d+ of \d+"` if [ -n "$current" ] then IP_STRING=$current fi loop_count=0 fi SP_STRING=${SP_STRING#"${SP_STRING%?}"}${SP_STRING%?}; done printf "%-15s" " " } function install_packages() { local package_list=$1 local title=$2 if [ -z "$title" ] then title="Installing packages" fi if [ -n "$package_list" ] then echo -e "The following packages are going to be emerged (not including dependencies):" echo -e "$package_list" echo -e "" countdown "00:00:10" Continue in echo -e "" printf "%-40s" "$title" (emerge $package_list >/dev/null 2>&1) & pid=$! install_progress $pid "$package_list" wait $pid status=$? if [ $status -eq 0 ]; then echo -e "\e[1;37m[ \e[0m\e[1;32mok\e[0m\e[1;37m ] \e[0m" else echo -e "\e[1;37m[ \e[0m\e[1;31mfailed\e[0m\e[1;37m ] \e[0m" echo -e "Failed installing the following packages:" echo -e "$1" exit 1 fi else echo -e "No packages to install!" fi } function install_rcscripts() { if [ -n "$1" ] then for rc in $1 do res=`rc-status default | grep "$1" | grep -v grep` if [ -z "$res" ] then printf "\e[1;37m%-40s\e[0m" "Adding $rc to default runlevel" start_spinner rc-update add $rc default &> /dev/null stop_spinner echo -e "\e[1;37m[ \e[0m\e[1;32mdone\e[0m\e[1;37m ]\e[0m" fi done fi } function enable_apache_module() { local apache_conffile='/etc/conf.d/apache2' if [ -n "$1" ] then source $apache_conffile if [ $(expr "$APACHE2_OPTS" : ".*$1.*") == "0" ] then APACHE2_OPTS="${APACHE2_OPTS} -D $1" sed -i -e "s:APACHE2_OPTS=\".*\":APACHE2_OPTS=\"${APACHE2_OPTS}\":" $apache_conffile fi fi } function meta_mail() { local package_list="" local add_maildrop="" local remove_ssmtp="no" local rc_scripts="" local use_courier="no" local use_dovecot="no" local useflags_postfix="mysql" local installed_postfix="no" local installed_amavisd="no" valid_input "Do you want to use dovecot or courier?" "dovecot/courier" if [ "$Return_Val" = "dovecot" ] then use_dovecot="yes" else use_courier="yes" fi echo -e "" printf "\e[1;37m%-40s\e[0m" "Building list of required mail packages" start_spinner if [ "$use_courier" == "yes" ] then is_package_installed "net-libs/courier-authlib" "mysql" || { package_list="$package_list net-libs/courier-authlib"; rc_scripts="$rc_scripts courier-authlib"; } is_package_installed "net-mail/courier-imap" "fam" || { package_list="$package_list net-mail/courier-imap"; rc_scripts="$rc_scripts courier-imapd courier-imapd-ssl courier-pop3d courier-pop3d-ssl"; } is_package_installed "mail-filter/maildrop" || add_maildrop="yes" # Avoid file collision warnings from emerge is_package_installed "dev-libs/cyrus-sasl" "mysql" || { package_list="$package_list dev-libs/cyrus-sasl"; rc_scripts="$rc_scripts saslauthd"; } useflags_postfix="$useflags_postfix sasl" fi if [ "$use_dovecot" == "yes" ] then is_package_installed "net-mail/dovecot" "sieve managesieve maildir" || { package_list="$package_list net-mail/dovecot"; rc_scripts="$rc_scripts dovecot"; } useflags_postfix="$useflags_postfix dovecot-sasl" fi if ! is_package_installed "mail-mta/postfix" "$useflags_postfix" then is_package_installed "mail-mta/ssmtp" && local remove_ssmtp="yes"; # Ssmtp blocks postfix and is installed by default. package_list="$package_list mail-mta/postfix" rc_scripts="$rc_scripts postfix" package_is_emerged "mail-mta/postfix" # USE flag difference will result in re-installing. If we are installing for the first time do some things later. installed=$? if [ $installed -eq 1 ] then installed_postfix="yes" fi fi is_package_installed "net-mail/getmail" || package_list="$package_list net-mail/getmail" if ! is_package_installed "mail-filter/amavisd-new" "mysql razor spamassassin" then package_list="$package_list mail-filter/amavisd-new" rc_scripts="$rc_scripts amavisd" package_is_emerged "mail-filter/amavisd-new" # USE flag difference will result in re-installing. If we are installing for the first time do some things later. installed=$? if [ $installed -eq 1 ] then installed_amavisd="yes" fi fi is_package_installed "app-antivirus/clamav" || { package_list="$package_list app-antivirus/clamav"; rc_scripts="$rc_scripts clamd"; } is_package_installed "dev-perl/Authen-SASL" || package_list="$package_list dev-perl/Authen-SASL" is_package_installed "dev-perl/perl-ldap" || package_list="$package_list dev-perl/perl-ldap" stop_spinner echo -e "\e[1;37m[ \e[0m\e[1;32mdone\e[0m\e[1;37m ]\e[0m" if [ "$remove_ssmtp" == "yes" ] then exec_command "emerge --unmerge mail-mta/ssmtp" "Removing ssmtp to install postfix" fi install_packages "$package_list" "Installing mail packages" if [ -n "$add_maildrop" ] then exec_command "COLLISION_IGNORE=\"/usr\" emerge mail-filter/maildrop" "Installing maildrop" fi if [ "$installed_postfix" == "yes" ] && [ ! -d '/etc/mail/aliases.db' ] then postmap /etc/mail/aliases 2> /dev/null fi if [ "$installed_amavisd" == "yes" ] then if [ -e '/usr/share/spamassassin/sa-update-pubkey.txt' ] then sa-update --import /usr/share/spamassassin/sa-update-pubkey.txt fi sa-update fi install_rcscripts "$rc_scripts" } function meta_web() { local package_list="" local fix_jailkit="no" local linguas_add="no" local webmail_add="no" local rc_scripts="" local installed_fcgid="no" if ! is_package_installed "dev-vcs/subversion" then flagedit dev-vcs/subversion -apache2 --nowarn fi is_package_installed "app-portage/layman" "subversion" || exec_command "emerge app-portage/layman" "Installing layman"; # Check if sunrise overlay has been enabled if [ -z "$(layman -l | grep sunrise)" ] then layman -q -S > /dev/null exec_command "layman -a sunrise" "Adding/syncing package overlay" fi if [ -z "$(grep 'var/lib/layman' /etc/make.conf)" ] then echo "source /var/lib/layman/make.conf" >> /etc/make.conf fi echo -e "" printf "\e[1;37m%-40s\e[0m" "Building list of required web packages" start_spinner # Check profile and ensure the apache modules ISPConfig needs are enabled. source /etc/make.conf if [ -z "${APACHE2_MODULES+xxx}" ] # Not set, fetch defaults then source /usr/portage/profiles/base/make.defaults echo "APACHE2_MODULES=\"$APACHE2_MODULES\"" >> /etc/make.conf source /etc/make.conf fi local added_module='no' for module in rewrite dav dav_fs auth_digest do if [ $(expr "$APACHE2_MODULES" : ".*$module.*") == "0" ] then APACHE2_MODULES="${APACHE2_MODULES} $module" added_module='yes' fi done if [ "$added_module" == "yes" ] then sed -i -e "s:APACHE2_MODULES=\".*\":APACHE2_MODULES=\"${APACHE2_MODULES}\":" /etc/make.conf fi local added_worker='no' if [ -z "${APACHE2_MPMS+xxx}" ] # Not set, fetch defaults then echo 'APACHE2_MPMS="prefork"' >> /etc/make.conf added_worker='yes' else if [ $(expr "$APACHE2_MPMS" : '.*prefork.*') == "0" ] then APACHE2_MPMS="${APACHE2_MPMS} prefork" sed -i -e "s:APACHE2_MPMS=\".*\":APACHE2_MPMS=\"${APACHE2_MPMS}\":" /etc/make.conf added_worker='yes' fi fi if is_package_installed "www-servers/apache" "ssl suexec doc" || "$added_module" == "yes" || "$added_worker" == "yes" then package_list="$package_list www-servers/apache" rc_scripts="$rc_scripts apache2" fi if ! is_package_installed "www-apache/mod_fcgid" then installed_fcgid="yes" package_list="$package_list www-apache/mod_fcgid" fi if ! is_package_installed "app-admin/webalizer" "vhosts apache2" then is_package_installed "media-libs/gd" "jpeg png" || package_list="$package_list media-libs/gd" if package_has_use_flag "app-admin/webalizer" "nls" then source /etc/make.conf if [ -z "${LINGUAS}" ] then linguas_add="yes" fi fi package_list="$package_list app-admin/webalizer" fi is_package_installed "www-misc/awstats" "vhosts apache2" || package_list="$package_list www-misc/awstats" if ! is_package_installed "app-admin/vlogger" "dbi" then # Check if package is masked if [ -n "$(equery -C -N list -I -o -e app-admin/vlogger | grep app-admin/vlogger | awk '{print $2}' | grep '^\[M')" ] then flagedit app-admin/vlogger -- +~amd64 +~x86 > /dev/null fi package_list="$package_list app-admin/vlogger" fi is_package_installed "app-crypt/mcrypt" || package_list="$package_list app-crypt/mcrypt" is_package_installed "dev-lang/php" "apache2 gd mysql mysqli imap cli cgi pcre xml zlib crypt ctype session unicode mhash ftp soap" || package_list="$package_list dev-lang/php" if ! is_package_installed "www-apache/mod_suphp" then # Check if package is masked if [ -n "$(equery -C -N list -I -p -e www-apache/mod_suphp | grep www-apache/mod_suphp | awk '{print $2}' | grep '^\[M')" ] then flagedit www-apache/mod_suphp -- +~amd64 +~x86 > /dev/null fi package_list="$package_list www-apache/mod_suphp" fi is_package_installed "www-apache/mod_ruby" || package_list="$package_list www-apache/mod_ruby" is_package_installed "media-gfx/imagemagick" "jpeg png tiff" || package_list="$package_list media-gfx/imagemagick" is_package_installed "dev-php/PEAR-PEAR" || package_list="$package_list dev-php/PEAR-PEAR" is_package_installed "dev-php/PEAR-Auth" || package_list="$package_list dev-php/PEAR-Auth" is_package_installed "dev-php5/pecl-imagick" || package_list="$package_list dev-php5/pecl-imagick" is_package_installed "sys-auth/pam_mysql" || package_list="$package_list sys-auth/pam_mysql" is_package_installed "app-admin/sudo" || package_list="$package_list app-admin/sudo" is_package_installed "app-arch/zip" || package_list="$package_list app-arch/zip" if ! is_package_installed "app-admin/jailkit" then # Check if package is masked if [ -n "$(equery -C -N list -I -o -e app-admin/jailkit | grep app-admin/jailkit | awk '{print $2}' | grep '^\[M')" ] then flagedit app-admin/jailkit -- +~amd64 +~x86 > /dev/null fi # The ebuild for jailkit 2.3 has a nasty bug that breaks the login shell. Check for version and # apply the fix if necessary. if [ "$(emerge -pv app-admin/jailkit | grep -o -P '(?<=jailkit-)[\d-.rp_]+')" == "2.3" ] then fix_jailkit="yes" cp /etc/shells /etc/shells~ fi package_list="$package_list app-admin/jailkit" fi #if [ "$install_mail" == "yes" ] && ! is_package_installed "mail-client/squirrelmail" "vhosts" #then # if ! is_package_installed "app-admin/webapp-config" # then # package_list="$package_list app-admin/webapp-config" # fi # webmail_add="yes" # package_list="$package_list mail-client/squirrelmail" #fi stop_spinner echo -e "\e[1;37m[ \e[0m\e[1;32mdone\e[0m\e[1;37m ]\e[0m" if [ "$linguas_add" == "yes" ] then echo -e "" echo -e "The nls use flag is enabled for webalizer and no locale preference is set in make.conf. If " echo -e "not set webalizer will fail to install." echo -e "" accept_locales=`find /usr/share/locale/ -maxdepth 1 -type d -exec basename '{}' \; | grep -v "locale" | sort | tr "\n" "/" | sed -e 's,\(.\)/$,\1,'` valid_input "Set locale value for gettext-based programs to: " "$accept_locales" "en" echo "LINGUAS=\"$Return_Val\"" >> /etc/make.conf echo -e "" fi install_packages "$package_list" "Installing web packages" if [ $? -eq 0 ] && [ "$fix_jailkit" == "yes" ] && [ -z "$(grep 'jk_chrootsh' /etc/shells)" ] then cp /etc/shells /etc/shells.jailkit-v2.3 cp /etc/shells~ /etc/shells echo "/usr/sbin/jk_chrootsh" >> /etc/shells fi for config_module in SUEXEC FCGID AUTH_DIGEST DAV DAV_FS RUBY do enable_apache_module "$config_module" done #if [ "$webmail_add" == "yes" ] #then # exec_command "webapp-config -I -h localhost -u apache -d /webmail squirrelmail $(ls -r /usr/share/webapps/squirrelmail/ | awk '{print $1}')" "Adding squirrelmail to localhost" #fi install_rcscripts "$rc_scripts" } function meta_ftp() { local package_list="" local rc_scripts="" echo -e "" printf "\e[1;37m%-40s\e[0m" "Building list of required ftp packages" start_spinner is_package_installed "net-ftp/pure-ftpd" "mysql" || { package_list="$package_list net-ftp/pure-ftpd"; rc_scripts="$rc_scripts pure-ftpd"; } is_package_installed "sys-fs/quota" || package_list="$package_list sys-fs/quota"; if ! is_package_installed "sys-fs/quotatool" then # Check if package is masked if [ -n "$(equery -C -N list -I -p -e sys-fs/quotatool | grep sys-fs/quotatool | awk '{print $2}' | grep '^\[M')" ] then flagedit sys-fs/quotatool -- +~amd64 +~x86 > /dev/null fi package_list="$package_list sys-fs/quotatool" fi stop_spinner echo -e "\e[1;37m[ \e[0m\e[1;32mdone\e[0m\e[1;37m ]\e[0m" if [ $(expr "$package_list" : '.*sys-fs/quota.*') -ne 0 ] then echo -e "" echo -e "\e[1;33mNotice:\e[0m Don't forget to edit your fstab file and add the usrquota & grpquota options to your data partition." echo -e "" sleep 2 fi install_packages "$package_list" "Installing ftp packages" install_rcscripts "$rc_scripts" } function meta_dns() { local package_list="" local use_bind="no" local use_pdns="no" valid_input "Do you want to use bind or powerdns?" "bind/powerdns" if [ "$Return_Val" = "bind" ] then use_bind="yes" else use_pdns="yes" fi echo -e "" printf "\e[1;37m%-40s\e[0m" "Building list of required dns packages" start_spinner if [ "$use_bind" == "yes" ] then is_package_installed "net-dns/bind" "mysql dlz" || { package_list="$package_list net-dns/bind"; rc_scripts="$rc_scripts named"; } fi if [ "$use_pdns" == "yes" ] then is_package_installed "net-dns/pdns" "mysql" || package_list="$package_list net-dns/pdns"; fi stop_spinner echo -e "\e[1;37m[ \e[0m\e[1;32mdone\e[0m\e[1;37m ]\e[0m" install_packages "$package_list" "Installing dns packages" install_rcscripts "$rc_scripts" } function meta_all() { meta_mail meta_web meta_ftp meta_dns } case $1 in "--version"|"-h"|"--help") echo -e "Gentoo Linux ISPConfig setup script" echo -e "Version $version" echo -e "" echo -e "No arguments needed, simply execute the script." exit 0 ;; *) ;; esac clear echo -e "\e[1;33mGentoo Linux ISPConfig setup script v$version\e[0m" echo -e "\e[1;32m========================================\e[0m" echo -e "" if [ -e "/etc/gentoo-release" ] then BASELAYOUT_VERSION=$(cat /etc/gentoo-release | sed "s/[^0-9.]//g") package_is_emerged "sys-apps/baselayout-$BASELAYOUT_VERSION" installed=$? if [ "$installed" != "0" ] then echo -e "" echo "This script is exclusively for use with a Gentoo Linux system." exit 10 fi else echo -e "" echo "This script is exclusively for use with a Gentoo Linux system." exit 10 fi sleep 0.5 valid_input "Would you like to sync portage now?" if [ "$Return_Val" = "yes" ] then exec_command "emerge --sync --quiet" "Updating portage tree" fi # Get all the programs we need to do portage queries etc. echo -en "\e[1;37mChecking for required packages\e[0m\n" # Verify if gentoolkit has been emerged and install if not which equery &> /dev/null if [ $? -ne 0 ] then exec_command "emerge app-portage/gentoolkit" "Installing gentoolkit" fi which flagedit &> /dev/null if [ $? -ne 0 ] then exec_command "emerge app-portage/flagedit" "Installing flagedit" fi if ! is_package_installed "app-admin/rsyslog" then printf "\e[1;37m%-40s\e[0m" "Checking for installed system loggers" start_spinner loggers=( syslog-ng metalog sysklogd ) clogger="" rsyslog_install="yes" for logger in $loggers do if is_package_installed "app-admin/$logger" && [ -n "$(rc-config list default | grep $logger)" ] then clogger=$logger break fi done stop_spinner echo -e "\e[1;37m[ \e[0m\e[1;32mdone\e[0m\e[1;37m ]\e[0m" if [ "$clogger" != "" ] then echo -e "" echo -e "$clogger appears to be installed on your system." echo -e "To use the log monitoring features in ISPConfig" echo -e "the log facilities need to be configured to certain" echo -e "paths. Currently the default rsyslog file is used." echo -e "" valid_input "Would you like to replace $clogger with rsyslog?" if [ "$Return_Val" = "yes" ] then echo -e "" exec_command "/etc/init.d/$clogger stop" "Stopping $clogger" exec_command "rc-update del $clogger default" "Remove $clogger from default runlevel" else rsyslog_install="no" fi fi if [ "$rsyslog_install" == "yes" ] then exec_command "emerge app-admin/rsyslog" "Installing rsyslog" exec_command "/etc/init.d/rsyslog start" "Starting rsyslog" exec_command "rc-update add rsyslog default" "Add rsyslog to default runlevel" fi echo -e "" fi if ! is_package_installed "dev-db/mysql" "extraengine big-tables" then package_is_emerged "dev-db/mysql" installed=$? exec_command "emerge dev-db/mysql" "Installing MySql" if [ $installed -eq 1 ] then echo -e "" echo -e "\e[1;33mNotice:\e[0m Don't forget to set the mysql root password with: /usr/bin/mysqladmin -u root password 'new-password'." echo -e "" fi fi if [ ! -d '/var/lib/mysql/mysql' ] then exec_command "mysql_install_db" "Set-up mysql grant tables" fi install_rcscripts "mysql" mysql_started=`eselect rc show | grep mysql | grep started | grep -v grep` if [ -z "$mysql_started" ] then exec_command "/etc/init.d/mysql start" "Starting MySQL service" fi which vim &> /dev/null if [ $? -ne 0 ] then exec_command "emerge app-editors/vim" "Installing vim" fi is_package_installed "sys-devel/binutils" || exec_command "emerge sys-devel/binutils" "Installing binutils"; is_package_installed "app-forensics/rkhunter" || exec_command "emerge app-forensics/rkhunter" "Installing rkhunter"; is_package_installed "net-analyzer/fail2ban" || exec_command "emerge net-analyzer/fail2ban" "Installing fail2ban"; echo -e "" # Service based packages echo -en "\e[1;37mService based packages\e[0m\n" valid_input "Install all packages or select targeted services?" "all/targeted" if [ "$Return_Val" = "all" ] then install_mail="yes" install_web="yes" install_ftp="yes" install_dns="yes" meta_all else valid_input "Install mail related packages?" install_mail=$Return_Val if [ "$install_mail" = "yes" ] then meta_mail fi echo -e "" echo -e "\e[1;33mNotice:\e[0m If this server is going to run the ISPConfig interface, say 'yes' to web related packages." echo -e "" valid_input "Install web related packages?" install_web=$Return_Val if [ "$install_web" = "yes" ] then meta_web fi echo -e "" valid_input "Install ftp related packages?" install_ftp=$Return_Val if [ "$install_ftp" = "yes" ] then meta_ftp fi echo -e "" valid_input "Install dns related packages?" install_dns=$Return_Val if [ "$install_dns" = "yes" ] then meta_dns fi fi if [ "$install_web" = "no" ] && ! is_package_installed "dev-lang/php" "-apache2 gd mysql mysqli imap cli cgi pcre xml zlib crypt ctype session unicode mhash ftp" then exec_command "emerge dev-lang/php" "Installing PHP" fi echo -e "" echo -e "\e[1;33mSetup script completed\e[0m" echo -e "\e[1;32m========================================\e[0m" echo -e "" valid_input "Do you want to start the ISPConfig installer?" if [ "$Return_Val" = "yes" ] then clear php -q ../install/install.php fi exit $? ispconfig3_install/helper_scripts/debian_setup.sh0000775000000000000000000000146715114345330021406 0ustar rootroot#!/bin/sh apt-get install postfix postfix-mysql postfix-doc mysql-client mysql-server courier-authdaemon courier-authlib-mysql courier-pop courier-pop-ssl courier-imap courier-imap-ssl postfix-tls libsasl2-2 libsasl2-modules libsasl2-modules-sql sasl2-bin libpam-mysql openssl courier-maildrop getmail4 apt-get install amavisd-new spamassassin clamav clamav-daemon zoo unzip bzip2 arj nomarch lzop cabextract apt-listchanges libnet-ldap-perl libauthen-sasl-perl clamav-docs daemon libio-string-perl libio-socket-ssl-perl libnet-ident-perl zip libnet-dns-perl modprobe capability echo 'capability' >> /etc/modules apt-get install pure-ftpd-common pure-ftpd-mysql quota quotatool echo 'yes' > /etc/pure-ftpd/conf/DontResolve apt-get install mydns-mysql apt-get install vlogger webalizer php -q ../install/install.php ispconfig3_install/helper_scripts/cert_check.sh0000775000000000000000000000362015114345330021027 0ustar rootroot#!/bin/bash chkdata() { F=$1 CRT=$2 KEY=$3 if [[ "$CRT" != "" && "$KEY" != "" ]] ; then if [[ ! -f "$CRT" ]] ; then echo "[WARN] CERTIFICATE FILE ${CRT} MISSING FOR ${F}" ; else echo -n "Checking ${CRT}" ; CHK=$(openssl x509 -in "${CRT}" -text -noout >/dev/null 2>&1 ; echo $?); if [[ $CHK -ne 0 ]] ; then echo " FAILED!" ; else echo " OK" ; fi fi if [[ ! -f "$KEY" ]] ; then echo "[WARN] KEY FILE ${KEY} MISSING FOR ${F}" ; else echo -n "Checking ${KEY}" ; CHK=$(openssl rsa -in "${KEY}" -check -noout >/dev/null 2>&1 ; echo $?); if [[ $CHK -ne 0 ]] ; then echo " FAILED!" ; else echo " OK" ; fi fi if [[ -f "$CRT" && -f "$KEY" ]] ; then echo -n "Checking that key and certificate match"; MDCRT=$(openssl x509 -noout -modulus -in "${CRT}" | openssl md5) ; MDKEY=$(openssl rsa -noout -modulus -in "${KEY}" | openssl md5) ; if [[ "$MDCRT" != "$MDKEY" ]] ; then echo " FAILED!" ; else echo " OK" ; fi fi echo "---" ; elif [[ "$CRT" != "" || "$KEY" != "" ]] ; then echo "[WARN] Check SSL config of ${F}"; echo "---" ; fi } if [[ -d /etc/apache2/sites-enabled ]] ; then echo "Checking enabled apache vhosts" ; for FIL in /etc/apache2/sites-enabled/* ; do CRT=$(grep 'SSLCertificateFile' "${FIL}" | grep -E -v '^[[:space:]]*#' | awk '{print $2}' | head -n 1) ; KEY=$(grep 'SSLCertificateKeyFile' "${FIL}" | grep -E -v '^[[:space:]]*#' | awk '{print $2}' | head -n 1) ; chkdata "$FIL" "$CRT" "$KEY" ; done fi if [[ -d /etc/nginx/sites-enabled ]] ; then echo "Checking enabled nginx vhosts" ; for FIL in /etc/nginx/sites-enabled/* ; do CRT=$(grep 'ssl_certificate' "${FIL}" | grep -E -v '^[[:space:]]*#' | awk '{print $2}' | head -n 1) ; CRT=${CRT%;} KEY=$(grep 'ssl_certificate_key' "${FIL}" | grep -E -v '^[[:space:]]*#' | awk '{print $2}' | head -n 1) ; KEY=${KEY%;} chkdata "$FIL" "$CRT" "$KEY" ; done fiispconfig3_install/helper_scripts/import_langfile.php0000775000000000000000000001401615114345330022266 0ustar rootroot') return $line; // don't treat empty lines as malicious $ok = preg_match('/^\s*\$wb\[(["\'])(.*?)\\1\]\s*=\s*(["\'])(.*?)\\3\s*;\s*$/', $line, $matches); if(!$ok) return false; // this line has invalid form and could lead to malfunction $keyquote = $matches[1]; // ' or " $key = $matches[2]; if(strpos($key, '"') !== false || strpos($key, "'") !== false) return false; $textquote = $matches[3]; // ' or " $text = $matches[4]; $new_line = '$wb[\''; // validate the language key $key = normalize_string($key, $keyquote); $new_line .= $key . '\'] = \''; // validate this text to avoid code injection $text = normalize_string($text, $textquote, true); $new_line .= $text . '\';'; return $new_line; } $lines = file($lang_file); define('ISPC_ROOT_PATH', $ispconfig_path.'/interface'); define('ISPC_LIB_PATH', ISPC_ROOT_PATH.'/lib'); define('ISPC_WEB_PATH', ISPC_ROOT_PATH.'/web'); // initial check $parts = explode('|', $lines[0]); if($parts[0] == '---' && $parts[1] == 'ISPConfig Language File') { unset($lines[0]); $buffer = ''; $langfile_path = ''; // all other lines $ln = 1; foreach($lines as $line) { $ln++; $parts = explode('|', $line); if(is_array($parts) && count($parts) > 0 && $parts[0] == '--') { // Write language file, if its not the first file if($buffer != '' && $langfile_path != '') { $buffer = trim($buffer)."\n"; $msg .= "File written: $langfile_path\n"; file_put_contents($langfile_path, $buffer); } // empty buffer and set variables $buffer = ''; $module_name = trim($parts[1]); $selected_language = trim($parts[2]); $file_name = trim($parts[3]); if(!preg_match("/^[a-z]{2}$/i", $selected_language)) die("unallowed characters in selected language name: $selected_language"); if(!preg_match("/^[a-z_]+$/i", $module_name)) die('unallowed characters in module name.'); if(!preg_match("/^[a-z\._\-]+$/i", $file_name) || stristr($file_name, '..')) die("unallowed characters in language file name: '$file_name'"); if($module_name == 'global') { $langfile_path = trim(ISPC_LIB_PATH."/lang/".$selected_language.".lng"); } else { $langfile_path = trim(ISPC_WEB_PATH.'/'.$module_name.'/lib/lang/'.$file_name); } } elseif(is_array($parts) && count($parts) > 1 && $parts[0] == '---' && $parts[1] == 'EOF') { // EOF line, ignore it. } else { $line = validate_line($line); if($line === false) $error .= "Language file contains invalid language entry on line $ln.\n"; else $buffer .= $line."\n"; } } } echo $error; echo $msg; die("finished import.\n"); ?> ispconfig3_install/helper_scripts/ubuntu-amavisd-new-2.11.patch0000775000000000000000000000136415114345330023537 0ustar rootroot--- amavisd-new.orig 2017-11-16 11:51:19.000000000 +0100 +++ amavisd-new 2018-05-25 16:53:45.623398108 +0200 @@ -22829,6 +22829,7 @@ } # load policy banks from the 'client_ipaddr_policy' lookup Amavis::load_policy_bank($_,$msginfo) for @bank_names_cl; + $msginfo->originating(c('originating')); $msginfo->client_addr($cl_ip); # ADDR $msginfo->client_port($cl_port); # PORT @@ -34361,6 +34362,7 @@ $sig_ind++; } Amavis::load_policy_bank($_,$msginfo) for @bank_names; + $msginfo->originating(c('originating')); $msginfo->dkim_signatures_valid(\@signatures_valid) if @signatures_valid; # if (ll(5) && $sig_ind > 0) { # # show which header fields are covered by which signature ispconfig3_install/helper_scripts/dns_export_to_bind_retrans_daily.php0000775000000000000000000000056115114345330025716 0ustar rootroot ispconfig3_install/helper_scripts/import_dkim.php0000775000000000000000000001302215114345330021425 0ustar rootroot /dev/null', $tmp_output, $tmp_retval); if ($tmp_retval != 0) { exec('which amavisd 2> /dev/null', $tmp_output, $tmp_retval); if ($tmp_retval == 0) $amavis = $tmp_output[0]; } else $amavis = $tmp_output[0]; if (!isset($amavis)) die ("amavisd not found"); echo "Importing dkim-settings from amavis.\n\nTo import the settings even when the public-key is not available, use ".$argv[0]." --force\nNOTE: In force-mode dkim will be set to 'no' if no public-key was found.\n\n"; if ( isset($argv) && isset ($argv[1]) && $argv[1] == '--force' ) $force = true; else $force = false; $client = new SoapClient(null, array('location' => $soap_location, 'uri' => $soap_uri, 'trace' => 1, 'exceptions' => 1)); exec($amavis.' showkeys', $tmp_output, $tmp_retval); foreach ( $tmp_output as $line ) { //* get domain and private key-file if ( preg_match('#^; key#', $line) ) { $line_array = explode(' ', $line); if ( $line_array[2] = 'domain' ) { $domain = rtrim($line_array[3], ','); $private_keyfile = $line_array[4]; //* get the public-key from private-key unset($public_key); unset($pubkey); unset($private_key); $private_key = file_get_contents($private_keyfile); if ( isset($private_key) && !empty($private_key)) { exec('echo '.escapeshellarg($private_key).'|openssl rsa -pubout -outform PEM 2> /dev/null',$pubkey,$result); $public_key=''; foreach($pubkey as $values) $public_key=$public_key.$values."\n"; } } } //* get selector if ( isset($domain) ) { if ( preg_match('/_domainkey.'.$domain.'.* TXT \(/', $line) ) { $line_array = explode(' ', $line); $selector = substr ( $line_array[0], 0, strpos($line_array[0], '.') ); } } if ( isset($domain) && isset($selector) && isset($private_keyfile) && isset($public_key) ) { try { if ( !$session_id = $client->login($username, $password) ) { echo 'SOAP-ERROR: Cant login'; } echo "\nprocessing ".$domain."...\n"; $record = $client->mail_domain_get_by_domain($session_id, $domain); if ( !empty($record) ) { $record = $record[0]; echo " OK: domain exists in the database\n"; //* check if the public-key is available exec($amavis.' testkeys '.escapeshellarg($domain).'', $test_output, $test_retval); $pub_key = false; if ( preg_match('/^TESTING.*'.$selector.'._domainkey.'.$domain.'.*pass/',$test_output[0]) ) $pub_key = true; $client_id = $client->client_get_id($session_id, $record['sys_userid']); unset($test_output); if ( $pub_key ) { $record['dkim_selector'] = $selector; $record['dkim'] = 'y'; if ( preg_match("/(^-----BEGIN PUBLIC KEY-----)[a-zA-Z0-9\r\n\/\+=]{1,221}(-----END PUBLIC KEY-----(\n|\r)?$)/", $record['dkim_public'] ) ) { $record['dkim_public'] = $public_key; echo " OK: public key\n"; } else { $record['dkim_public'] = ''; $record['dkim'] = 'n'; echo " ERROR: public key invalid\n disable dkim for ".$domain."\n"; } if ( preg_match("/(^-----BEGIN RSA PRIVATE KEY-----)[a-zA-Z0-9\r\n\/\+=]{1,850}(-----END RSA PRIVATE KEY-----(\n|\r)?$)/", $private_key) ) { $record['dkim_private'] = $private_key; echo " OK: private key\n"; } else { $record['dkim_private'] = ''; $record['dkim'] = 'n'; echo " ERROR: private key invalid\n disable dkim for ".$domain."\n"; } $client->mail_domain_update($session_id, $client_id, $record['domain_id'], $record); echo " OK: updating database\n"; } else { echo " ERROR: no public-key available - skipping ".$domain."\n"; } } else { echo " ERROR: domain not in the database - skipping ".$domain."\n"; } $client->logout($session_id); } catch (SoapFault $e) { echo $client->__getLastResponse(); die('SOAP Error: '.$e->getMessage()); } unset($domain); unset($selector); } } ?> ispconfig3_install/helper_scripts/fixcerts0000775000000000000000000001555215114345330020162 0ustar rootroot #!/bin/bash ##################################################################################### # # # Syntax: fixcerts DOMAIN # # # # Use: Extend Letsencrypt SSl certificates for commonly grouped services such as # # Apache,Postfix,Dovecot using Certbot. Useful for keeping all client # # applications referencing the same virtual domain name, such as auto-config # # email clients on phones, i.e. mailuser@mydomain.TLD smtp.mydomain.TLD # # imaps.mydomain.TLD instead of mailuser@mydomain.TLD mail.ISPmaildomain.TLD # # Also useful when sending mail through services like Gmail that will # # validate sender through a negotiated TLS encrypted connection. # # # # Ex: sh fixcerts myhosteddomain.com # # # # Prerequisites: # # - A Letsencrypt certificate for the DOMAIN must already exist # # - A seperate certificate each for Dovecot and Postfix were previously generated # # - All new host names to add MUST already exist in DNS at least as a CNAME # # - Edit the Dovecot/Postfix conf to use the alternate certificate # # - Set the variable wr_file to a directory that certbot can read and write from # # - Set the dom_cert=,dv_cert=,pf_cert=,dv_file=, and pf_file= variables # # # # In my case, I ran: # # certbot certonly -webroot /usr/local/ispconfig/interface/acme -d dc.hrst.xyz # # certbot certonly -webroot /usr/local/ispconfig/interface/acme -d pf.hrst.xyz # # to create the separate Dovecot and Postscript certificates, then edited and # # ran the script to extend those certificate, once per hosted domain # # # # If you use only one alternate certifcate for both mail services, set both dv_file # # and pf_file to the same file name and set one of _cert files="" and # # use the other. If you don't wish to add to a particular certificate, set the # # variable ="", such as dom_cert # # TODO: Pre-validate desired additions as already existing in DNS # # Generate SRV Records and add to DNS to autoconfig clients # # # # Author: tad.hasse@gmail.com # # # ##################################################################################### #bail out on error set -e # Hostnames to add to the main domain certificate dom_cert="webmail" # Hostnames to add to the Dovecot domain certificate dv_cert="pop3s imap" # Hostnames to add to the Postfix domain certificate pf_cert="mail smtp smtps" # Name of the certificate file that handles Dovecot dv_file="dc.hrst.xyz" # Name of the certificate file that handles Postfix pf_file="pf.hrst.xyz" # Writeable webroot for certbot (I use ISPConfig, wr_file="/usr/local/ispconfig/interface/acme" new_cert="" nanobot="" affected_services="" if [ -z "$1" ] # Is parameter #1 zero length? then echo "-No DOMAIN specified" # Or no parameter passed. exit 1 fi #live_check='/etc/letsencrypt/live/'$1 if [[ ! -d '/etc/letsencrypt/live/'$1 ]]; then echo "- DOMAIN certificate for \"$1\" not found -" exit 1 fi if [[ ! -d '/etc/letsencrypt/live/'${dv_file} ]]; then echo "- Dovecot/postoffice certificate" ${dv_file}" for \"$1\" not found -" exit 1 fi if [[ ! -d '/etc/letsencrypt/live/'${pf_file} ]]; then echo "- Postfix/mail certificate" ${pf_file}" for \"$1\" not found -" exit 1 fi # Have certbot generate its current certificate list for use as input certbot certificates >~/certfile # Extend base domain certificate which typically only contains the domain.TLD and www.domain.TLD if [[ ! -z "${dom_cert}" ]]; then echo new_cert=$(echo $dom_cert| sed -e "s/ /.$1 /g" -e 's/ / -d /g' -e "s/$/.$1 /g" -e 's/^/-d /g') echo "Adding" ${new_cert} " to "$1 nanobot=$(grep -A1 "Certificate Name: "$1 certfile |awk -F': ' '{ {getline}; $1=""; print }'|sed 's/ / -d /g') doit_cert=$(echo "certbot certonly --webroot -w ${wr_file}${nanobot} ${new_cert}") ${doit_cert} affected_services=${affected_services}+"A" else echo "Domain Certificate unaffected" fi # Extend the Dovecot certificate if [[ ! -z "${dv_cert}" ]]; then echo new_cert=$(echo $dv_cert| sed -e "s/ /.$1 /g" -e 's/ / -d /g' -e "s/$/.$1 /g" -e 's/^/-d /g') echo "Adding" ${new_cert} " to "${dv_file} nanobot=$(grep -A1 "Certificate Name: "${dv_file} certfile |awk -F': ' '{ {getline}; $1=""; print }'|sed 's/ / -d /g') doit_cert=$(echo "certbot certonly --webroot -w ${wr_file}${nanobot} ${new_cert}") ${doit_cert} affected_services=${affected_services}+"D" else echo "Dovecot Certificate unaffected" fi # Extend the Postscript certificate if [[ ! -z "{$pf_cert}" ]]; then echo new_cert=$(echo $pf_cert| sed -e "s/ /.$1 /g" -e 's/ / -d /g' -e "s/$/.$1 /g" -e 's/^/-d /g') echo "Adding" ${new_cert} " to " ${pf_file} nanobot=$(grep -A1 "Certificate Name: "${pf_file} certfile |awk -F': ' '{ {getline}; $1=""; print }'|sed 's/ / -d /g') doit_cert=$(echo "certbot certonly --webroot -w ${wr_file}${nanobot} ${new_cert}") ${doit_cert} affected_services=${affected_services}+"P" else echo "Postfix Certificate unaffected" fi if [[ $affected_services == *"A"* ]]; then echo "Remember to restart the httpd service" fi if [[ $affected_services == *"D"* ]]; then echo "Remember to restart the dovecot/postoffice service" fi if [[ $affected_services == *"P"* ]]; then echo "Remember to restart the postfix/sendmail service" fi echo echo echo "Add the following SRV records to DNS for client setup for "$1 if [[ $affected_services == *"D"* ]]; then echo "_imaps._tcp."$1 "SRV 3600 4 60 993 imaps" echo "_pop3s._tcp."$1 "SRV 3600 6 60 995 pop3s" echo "_imap._tcp."$1 " SRV 3600 8 60 143 imap" fi if [[ $affected_services == *"P"* ]]; then echo "_smtps._tcp."$1 "SRV 3600 8 60 465 smtps" echo "_smtp._tcp."$1 " SRV 3600 10 60 587 smtp" fiispconfig3_install/helper_scripts/multifile_add0000775000000000000000000000223115121314320021114 0ustar rootroot#!/bin/bash # Adding a new translation string to the files for all languages. # If you already added the string to your current language, be sure to deduplicate. new=$(cat << 'EOD' $wb['foo_txt'] = 'Some translation'; EOD ) if [ -z "$1" ]; then echo "Usage: $0 [seek_pattern] " echo echo "Add a hard coded set of new lines to a number of language files." echo "When the first argument is not a file it's treated as a string to search for, adding the new lines directly below it. This only supports adding a single new line though." exit 1 fi if [ ! -f "$1" ]; then seek_pattern=$1; shift; fi for f in $*; do if [ "$(grep --fixed-strings "$new" $f)" ]; then echo "Skipping file[$f] already matches" continue fi if [ -n "$seek_pattern" ]; then # Add inplace, only a single line is supported. sed -i "/$seek_pattern/a\ $new" $f else # Add at the end # Preserve a php close tag as the last line. close='?>' if [ "$(tail -n 1 $f)" == "$close" ]; then ( head -n -1 $f; echo "$new"; echo "?>"; ) > ${f}.new mv ${f}.new $f else echo "$new" >> $f fi fi done ispconfig3_install/helper_scripts/import_dkim.txt0000775000000000000000000000054515114345330021463 0ustar rootrootThis scripts stores all dkim-keys from the amavis-config to the ispconfig-database Create a remote-user with at least rights for mail_domain and clients and adjust the settings for $username = 'admin'; $password = 'admin'; $soap_location = 'http://192.168.0.105:8080/remote/index.php'; $soap_uri = 'http://192.168.0.105:8080/remote/'; in import_dkim.php ispconfig3_install/helper_scripts/utils.sh0000775000000000000000000000673115114345330020103 0ustar rootroot#!/bin/bash # Copyright (c) 2009, Scott Barr # All rights reserved. # # Redistribution and use in source and binary forms, with or without # modification, are permitted provided that the following conditions are met: # * Redistributions of source code must retain the above copyright # notice, this list of conditions and the following disclaimer. # * Redistributions in binary form must reproduce the above copyright # notice, this list of conditions and the following disclaimer in the # documentation and/or other materials provided with the distribution. # * Neither the name of the nor the # names of its contributors may be used to endorse or promote products # derived from this software without specific prior written permission. # # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS ''AS IS'' # AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED # WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE # DISCLAIMED. IN NO EVENT SHALL BE LIABLE FOR ANY # DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES # (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; # LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND # ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT # (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS # SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. function countdown { local OLD_IFS="${IFS}" IFS=":" local ARR=( $1 ) ; shift IFS="${OLD_IFS}" local PREFIX="$*" ; [ -n "${PREFIX}" ] && PREFIX="${PREFIX}" local SECONDS=$(( (ARR[0] * 60 * 60) + (ARR[1] * 60) + ARR[2] )) local START=$(date +%s) local END=$((START + SECONDS)) local CUR=$START while [[ $CUR -lt $END ]] do CUR=$(date +%s) LEFT=$((END-CUR)) printf "\r${PREFIX} %02d" \ $((LEFT%60)) sleep 1 done echo " " } function outputVar() { y=\$"$1" x=`eval "expr \"$y\" "` eval "$1=\"$2\"" } function valid_input() { local correct="no" Return_Val="" if [ -z "$2" ] then local opts=( yes no ) local opt_list="yes/no" else local opts=( `echo $2 | tr "/" " "` ) local opt_list=$2 fi while [ "$correct" != "yes" ] do if [ -n "$3" ] then line_prompt="$1 [default: $3] " else line_prompt="$1 [$opt_list] " fi echo -en "$line_prompt" read answer if [ -n "$3" ] then answer=$3 else ret=`echo "${opts[@]}" | grep -w "$answer"` fi if [ $? -eq 0 ] then correct="yes" Return_Val=$answer fi done } function start_spinner() { parent_pid=$$ (SP_STRING="/-\\|"; while [ -d /proc/$1 ] && [ -d /proc/$parent_pid ]; do printf "\e[1;37m\e7[ %1.1s ] \e8\e[0m" "$SP_STRING"; sleep .2; SP_STRING=${SP_STRING#"${SP_STRING%?}"}${SP_STRING%?}; done) & disown spinner_pid=$! } function stop_spinner() { if [ $spinner_pid -gt 0 ] then kill -HUP $spinner_pid 2>/dev/null fi } function exec_command() { printf "%-40s" "$2" (eval $1 >/dev/null 2>&1) & pid=$! start_spinner wait $pid status=$? stop_spinner if [ $status -eq 0 ]; then echo -e "\e[1;37m[ \e[0m\e[1;32mok\e[0m\e[1;37m ]\e[0m" else echo -e "\e[1;37m[ \e[0m\e[1;31mfailed\e[0m\e[1;37m ]\e[0m" echo -e "The following command did not complete successfully:" echo -e "$1" exit 1 fi } ispconfig3_install/helper_scripts/setup_in_openvz/0000775000000000000000000000000015114345330021624 5ustar rootrootispconfig3_install/helper_scripts/setup_in_openvz/recreate_ssh_and_hostname.sh0000775000000000000000000000102515114345330027350 0ustar rootroot#!/bin/bash set -x echo "" > /etc/resolv.conf echo "" > /etc/hostname echo "" > /etc/mailname rm -f /etc/ssh/ssh_host_* cat << EOF > /etc/rc2.d/S15ssh_gen_host_keys #!/bin/bash ssh-keygen -f /etc/ssh/ssh_host_rsa_key -t rsa -N '' ssh-keygen -f /etc/ssh/ssh_host_dsa_key -t dsa -N '' dpkg-reconfigure -u webalizer postconf -e "myhostname = $(hostname -f)" postconf -e "mydestination = $(hostname -f), localhost" echo $(hostname -f) > /etc/mailname dpkg-reconfigure -u postfix rm -f \$0 EOF chmod a+x /etc/rc2.d/S15ssh_gen_host_keys ispconfig3_install/helper_scripts/setup_in_openvz/install_server.sh0000775000000000000000000000377215114345330025230 0ustar rootroot#!/bin/bash # Script to configuring an ispconfig3 server in a Debian VPS # by calocen [at] gmail [dot] com # getting some enviromment values myhostname=`hostname -f` mydomain=`hostname -d` myip=`hostname -i` [ ! -x /usr/bin/geoiplookup ] && apt-get --assume-yes install geoip-bin mycountry=`geoiplookup $myip | cut -f4 -d" " | cut -f1 -d","` myprovince=`geoiplookup $myip | cut -f5 -d" "` # reconfiguring webalizer, postfix # could be cool to modify here webalizer values dpkg-reconfigure -u webalizer postconf -e "myhostname = $myhostname" postconf -e "mydestination = $myhostname, localhost" echo $myhostname > /etc/mailname dpkg-reconfigure -u postfix # request new password oldpwd=`grep password /root/.my.cnf | tr "\t" " " | tr -s " " | cut -f3 -d" "` read -p "mysql password: [$oldpwd] " mysqlpwd [ -z $mysqlpwd ] && mysqlpwd=$oldpwd echo $mysqlpwd #read -p "Are you sure? (y/n) " sure ## who said fear ## set -x mysqladmin -u root -p$oldpwd password $mysqlpwd mysqladmin -u root -p$mysqlpwd -h localhost password $mysqlpwd cat << EOF > /root/.my.cnf [client] password = $mysqlpwd EOF chmod 600 /root/.my.cnf # changing mydns password mysql -e "SET PASSWORD FOR 'mydns'@'%' = PASSWORD( '$mysqlpwd' )" mysql -e "SET PASSWORD FOR 'mydns'@'localhost' = PASSWORD( '$mysqlpwd' )" cp -ax /etc/mydns.conf /etc/mydns.conf~ sed s/$oldpwd/$mysqlpwd/g < /etc/mydns.conf~ > /etc/mydns.conf # enabling mydns mydns --create-tables > /tmp/mydns.sql mysql -e "CREATE DATABASE IF NOT EXISTS mydns ; USE mydns ; SOURCE /tmp/mydns.sql;" rm /tmp/mydns.* invoke-rc.d mydns restart # preparing server installation mv /etc/ssl/openssl.cnf /etc/ssl/openssl.cnf~ sed s/"YOURHOSTNAME"/"$myhostname"/g < /usr/local/bin/openssl.cnf | sed s/"YOURDOMAIN"/"$mydomain"/g | \ sed s/"YOURCOUNTRY"/"$mycountry"/g | \ sed s/"YOURPROVINCE"/"$myprovince"/g > /etc/ssl/openssl.cnf tar xfz /root/downloads/ISPConfig-3.0.0.7-beta.tar.gz -C /usr/local/src # here would be some stuff to update from SVN cd /usr/local/src/ispconfig3_install/install/ php -q install.php ispconfig3_install/helper_scripts/setup_in_openvz/diff_openssl.cnf0000775000000000000000000000116415114345330024774 0ustar rootroot# diff openssl.cnf /usr/lib/ssl/openssl.cnf 68c68 < default_days = 3653 # how long to certify for --- > default_days = 365 # how long to certify for 125c125 < countryName_default = YOURCOUNTRY --- > countryName_default = AU 130c130 < stateOrProvinceName_default = YOURPROVINCE --- > stateOrProvinceName_default = Some-State 135c135 < 0.organizationName_default = YOURDOMAIN --- > 0.organizationName_default = Internet Widgits Pty Ltd 142c142 < organizationalUnitName_default = ISP --- > #organizationalUnitName_default = 145d144 < commonName_default = YOURHOSTNAME 149d147 < emailAddress_default = postmaster@YOURDOMAIN ispconfig3_install/helper_scripts/pdns-slave-zone-cleanup.sh0000775000000000000000000000315615114345330023413 0ustar rootroot#!/bin/bash #### Config ################################ DBHOST="localhost" DBUSER="powerdns" DBPASS="password" DATABASE="powerdns" DEBUG="no" #### End of Config ######################### REQUIRED_COMMANDS=" mysql host grep awk tail " # print debug messages to STDERR function debug { if [ "${DEBUG}" == "yes" ] ; then echo "DEBUG: $@" >&2 fi } for CMD in ${REQUIRED_COMMANDS} ; do CMDNAME=`echo ${CMD} | awk '{print toupper($1) }' | sed -e s@"-"@""@g` export $(eval "echo ${CMDNAME}")=`which ${CMD} 2>/dev/null` if [ -z "${!CMDNAME}" ] ; then debug "Command: ${CMD} not found!" exit 1 else debug "Found command $(echo $CMDNAME) in ${!CMDNAME}" fi done MYSQLCMD="${MYSQL} -h ${DBHOST} -u ${DBUSER} -p${DBPASS} --skip-column-name --silent -e" check() { AUTH=`${HOST} -t SOA ${2} ${1} | ${TAIL} -n1 | ${GREP} "has no SOA record"` if [ "${AUTH}" == "${2} has no SOA record" ]; then debug "Server ${1} has no SOA for ${2} - removing zone..." DOMAIN_ID=`${MYSQLCMD} "USE ${DATABASE}; SELECT id FROM domains WHERE name='${2}' AND type='SLAVE' AND master='${1}' LIMIT 1;"` ${MYSQLCMD} "USE ${DATABASE}; DELETE FROM records WHERE domain_id='${DOMAIN_ID}';" ${MYSQLCMD} "USE ${DATABASE}; DELETE FROM domains WHERE id='${DOMAIN_ID}';" fi } MASTERS=(`${MYSQLCMD} "USE ${DATABASE}; SELECT DISTINCT ip FROM supermasters;"`) for m in "${MASTERS[@]}"; do NAMES=(`${MYSQLCMD} "USE ${DATABASE}; SELECT name FROM domains WHERE type = 'SLAVE' AND master = '${m}';"`) for d in "${NAMES[@]}"; do check ${m} ${d} done done ispconfig3_install/helper_scripts/dns_export_to_bind.php0000775000000000000000000001014215132152722022773 0ustar rootroot0) { $arr3[$xx1]=$arr2[$xx1].$row2['2']." ".$row2['3']."\n"; } else { $arr3[$xx1]=$arr2[$xx1].$row2['3']."\n"; } $xx1=$xx1+1; } $f = fopen("/var/cache/bind/$varx11", "a+"); foreach($arr3 as $values) fputs($f, $values); fclose($f); $arr2=array(); $arr3=array(); //## ENDE Primärer Nameserver TEIL 2 ##################################################################################################### //## Hier ALLES Aktivieren bei Secondary Nameserver ###################################################################################### // $tmp1 = substr($row["ns"],0,-1); // $tmp2 = substr($row["origin"],0,-1); // if (!isset($dnscache[$tmp1])) $nsip = hostname2ipfunktion($tmp1) ; // else $nsip=$dnscache[$tmp1] ; // if ($nsip == $tmp1) // { // echo "$tmp2 $tmp1 Not a valid Nameserver"; // echo "\n"; // } // else // { // $dnscache[$tmp1]=$nsip; // $arr1[$x11]="zone \"".$tmp2."\" in { type slave; file \"".$tmp2."\"; masters {".$nsip."; }; };\n"; // $x11=$x11+1; // } //## ENDE Secondary Nameserver ########################################################################################################### } unlink("/etc/bind/named.conf.local"); $fx = fopen("/etc/bind/named.conf.local", "a+"); foreach($arr1 as $values) fputs($fx, $values); fclose($fx); system("rndc reconfig >/dev/null 2>&1"); //## ANFANG Primärer Namerserver TEIL 2 ################################################################################################## $serialsearch=date("Ymd"); $resultx13 = mysql_query("SELECT origin,serial FROM dns_soa WHERE serial LIKE '$serialsearch%' ORDER BY origin ASC;"); while ($rowx13=mysql_fetch_array($resultx13)) { $serial_ist=($rowx13["serial"]); $zone=substr($rowx13["origin"], 0, -1); // echo "zone: ".$zone." ist: ".$serial_ist." vergleich: ".$serialvergleich[$zone]."\n"; if ($serialvergleich[$zone] != $serial_ist) { $reload=system("rndc reload $zone >/dev/null 2>&1"); } } //## ENDE Primärer NamerserverTEIL 2 ###################################################################################################### ?> ispconfig3_install/helper_scripts/test_install_docker.sh0000775000000000000000000000212215114345330022765 0ustar rootroot#!/bin/sh # This script is used from .gitlab-ci.yml to do an automated installation inside a docker container for testing. if [ -f /usr/local/ispconfig/interface/lib/config.inc.php ]; then echo "Found an existing configfile, bailing out!" exit 1 fi mysql_install_db service mysql start \ && echo "UPDATE mysql.user SET Password = PASSWORD('pass') WHERE User = 'root';" | mysql -u root \ && echo "UPDATE mysql.user SET plugin='mysql_native_password' where user='root';" | mysql -u root \ && echo "DELETE FROM mysql.user WHERE User='';" | mysql -u root \ && echo "DELETE FROM mysql.user WHERE User='root' AND Host NOT IN ('localhost', '127.0.0.1', '::1');" | mysql -u root \ && echo "DROP DATABASE IF EXISTS test;" | mysql -u root \ && echo "DELETE FROM mysql.db WHERE Db='test' OR Db='test\\_%';" | mysql -u root \ && echo "FLUSH PRIVILEGES;" | mysql -u root sed -i "s/^hostname=server1.example.com$/hostname=$HOSTNAME/g" /root/ispconfig3_install/install/autoinstall.ini service mysql start && php -q $CI_PROJECT_DIR/install/install.php --autoinstall=/root/ispconfig3_install/install/autoinstall.ini ispconfig3_install/helper_scripts/recreate_webalizer_stats.php0000775000000000000000000000266415114345330024175 0ustar rootrootdb->queryAllRecords($sql, $conf["server_id"]); foreach($records as $rec) { $domain = escapeshellcmd($rec["domain"]); $logdir = escapeshellcmd($rec["document_root"].'/log'); $statsdir = escapeshellcmd($rec["document_root"].'/web/stats'); $webalizer = '/usr/bin/webalizer'; $webalizer_conf_main = '/etc/webalizer/webalizer.conf'; $webalizer_conf = escapeshellcmd($rec["document_root"].'/log/webalizer.conf'); exec("rm -rf $webalizer_conf"); if(!@is_file($webalizer_conf)) { exec("cp $webalizer_conf_main $webalizer_conf"); setConfigVar($webalizer_conf, 'Incremental', 'yes'); setConfigVar($webalizer_conf, 'IncrementalName', $logdir.'/webalizer.current'); setConfigVar($webalizer_conf, 'HistoryName', $logdir.'/webalizer.hist'); } if(!@is_dir($statsdir)) mkdir($statsdir); echo "Remove stats dir $statsdir ...\n"; exec("rm -rf $statsdir/*"); echo "Re-Create stats for $domain...\n"; exec("for logfile in $logdir/*access*; do\n$webalizer -c $webalizer_conf -n $domain -s $domain -r $domain -q -T -p -o $statsdir ".'$logfile'."\ndone"); echo "done.\n"; } die("finished.\n"); ?> ispconfig3_install/helper_scripts/mydns_to_powerdns_migration.php0000775000000000000000000000646415114345330024751 0ustar rootroot ispconfig3_install/install/0000775000000000000000000000000015234342134015017 5ustar rootrootispconfig3_install/install/sql/0000775000000000000000000000000015253274023015620 5ustar rootrootispconfig3_install/install/sql/incremental/0000775000000000000000000000000015253274022020120 5ustar rootrootispconfig3_install/install/sql/incremental/upd_0009.sql0000775000000000000000000000546315114345330022111 0ustar rootrootCREATE TABLE IF NOT EXISTS `proxy_reverse` ( `rewrite_id` int(11) NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `server_id` int(11) unsigned NOT NULL default '0', `rewrite_url_src` varchar(100) NOT NULL, `rewrite_url_dst` varchar(100) NOT NULL, `active` enum('n','y') NOT NULL default 'y', PRIMARY KEY (`rewrite_id`) ) AUTO_INCREMENT=5 DEFAULT CHARSET=utf8; CREATE TABLE IF NOT EXISTS `firewall_filter` ( `firewall_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `domain_id` int(11) NOT NULL, `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `server_id` int(11) unsigned NOT NULL default '0', `rule_name` varchar(100) default NULL, `rule_id` int(11) default 1, `src_ip` varchar(20) NOT NULL, `src_netmask` varchar(20) NOT NULL, `dst_ip` varchar(20) NOT NULL, `dst_netmask` varchar(20) NOT NULL, `src_from_port` varchar(10) NOT NULL, `src_to_port` varchar(10) NOT NULL, `dst_to_port` varchar(10) NOT NULL, `dst_from_port` varchar(10) NOT NULL, `protocol` varchar(10) default 'tcp', `inbound_policy` enum('allow','deny','reject','limit') default 'allow', `outbound_policy` enum('allow','deny','reject','limit') default 'allow', `active` enum('n','y') NOT NULL default 'y', `client_id` int(11) NOT NULL, PRIMARY KEY (`firewall_id`) ) AUTO_INCREMENT=12 DEFAULT CHARSET=utf8; CREATE TABLE IF NOT EXISTS `firewall_forward` ( `firewall_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `domain_id` int(11) NOT NULL, `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `server_id` int(11) unsigned NOT NULL default '0', `application_name` varchar(100) default NULL, `dst_ip` varchar(20) NOT NULL, `src_from_port` varchar(10) NOT NULL, `src_to_port` varchar(10) NOT NULL, `dst_to_port` varchar(10) NOT NULL, `dst_from_port` varchar(10) NOT NULL, `protocol` int(3) default 0, `active` enum('n','y') NOT NULL default 'y', `client_id` int(11) NOT NULL, PRIMARY KEY (`firewall_id`) ) AUTO_INCREMENT=12 DEFAULT CHARSET=utf8; alter table `server` add column `proxy_server` tinyint(1) not null after `vserver_server`; alter table `server` add column `firewall_server` tinyint(1) not null after `proxy_server`; alter table `web_domain` add column `nginx_directives` mediumtext null after `apache_directives`; ispconfig3_install/install/sql/incremental/upd_0003.sql0000775000000000000000000000020515114345330022070 0ustar rootrootALTER TABLE `client` ADD `customer_no` VARCHAR( 64 ) NULL AFTER `contact_name` , ADD `vat_id` VARCHAR( 64 ) NULL AFTER `customer_no`;ispconfig3_install/install/sql/incremental/upd_0095.sql0000775000000000000000000000013415114345330022104 0ustar rootrootALTER TABLE `remote_session` ADD `remote_ip` VARCHAR(39) NOT NULL DEFAULT '' AFTER `tstamp`;ispconfig3_install/install/sql/incremental/upd_0014.sql0000775000000000000000000000020015114345330022065 0ustar rootroot-- database patch for getmail read_all option ALTER TABLE `mail_get` ADD ( `source_read_all` varchar(255) NOT NULL default 'y');ispconfig3_install/install/sql/incremental/upd_0017.sql0000775000000000000000000000031515114345330022077 0ustar rootrootALTER TABLE `client_template` ADD `limit_openvz_vm` int(11) NOT NULL DEFAULT '0' AFTER `limit_mailmailinglist` , ADD `limit_openvz_vm_template_id` int(11) NOT NULL DEFAULT '0' AFTER `limit_openvz_vm`;ispconfig3_install/install/sql/incremental/upd_0021.sql0000775000000000000000000000016115114345330022071 0ustar rootrootALTER TABLE `web_domain` ADD `php_fpm_use_socket` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `nginx_directives`;ispconfig3_install/install/sql/incremental/upd_0012.sql0000775000000000000000000001565015114345330022102 0ustar rootroot-- -- Table structure for table `openvz_ip` -- CREATE TABLE IF NOT EXISTS `openvz_ip` ( `ip_address_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `ip_address` varchar(15) DEFAULT NULL, `vm_id` int(11) NOT NULL DEFAULT '0', `reserved` varchar(255) NOT NULL DEFAULT 'n', PRIMARY KEY (`ip_address_id`) ) DEFAULT CHARSET=utf8 ; -- -- Dumping data for table `openvz_ip` -- -- -------------------------------------------------------- -- -- Table structure for table `openvz_ostemplate` -- CREATE TABLE IF NOT EXISTS `openvz_ostemplate` ( `ostemplate_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `template_name` varchar(255) DEFAULT NULL, `template_file` varchar(255) NOT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `allservers` varchar(255) NOT NULL DEFAULT 'y', `active` varchar(255) NOT NULL DEFAULT 'y', `description` text, PRIMARY KEY (`ostemplate_id`) ) DEFAULT CHARSET=utf8 ; -- -- Dumping data for table `openvz_ostemplate` -- INSERT INTO `openvz_ostemplate` (`ostemplate_id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `template_name`, `template_file`, `server_id`, `allservers`, `active`, `description`) VALUES(1, 1, 1, 'riud', 'riud', '', 'Debian minimal', 'debian-minimal-x86', 1, 'y', 'y', 'Debain minmal image.'); -- -------------------------------------------------------- -- -- Table structure for table `openvz_template` -- CREATE TABLE IF NOT EXISTS `openvz_template` ( `template_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `template_name` varchar(255) DEFAULT NULL, `diskspace` int(11) NOT NULL DEFAULT '0', `traffic` int(11) NOT NULL DEFAULT '-1', `bandwidth` int(11) NOT NULL DEFAULT '-1', `ram` int(11) NOT NULL DEFAULT '0', `ram_burst` int(11) NOT NULL DEFAULT '0', `cpu_units` int(11) NOT NULL DEFAULT '1000', `cpu_num` int(11) NOT NULL DEFAULT '4', `cpu_limit` int(11) NOT NULL DEFAULT '400', `io_priority` int(11) NOT NULL DEFAULT '4', `active` varchar(255) NOT NULL DEFAULT 'y', `description` text, `numproc` varchar(255) DEFAULT NULL, `numtcpsock` varchar(255) DEFAULT NULL, `numothersock` varchar(255) DEFAULT NULL, `vmguarpages` varchar(255) DEFAULT NULL, `kmemsize` varchar(255) DEFAULT NULL, `tcpsndbuf` varchar(255) DEFAULT NULL, `tcprcvbuf` varchar(255) DEFAULT NULL, `othersockbuf` varchar(255) DEFAULT NULL, `dgramrcvbuf` varchar(255) DEFAULT NULL, `oomguarpages` varchar(255) DEFAULT NULL, `privvmpages` varchar(255) DEFAULT NULL, `lockedpages` varchar(255) DEFAULT NULL, `shmpages` varchar(255) DEFAULT NULL, `physpages` varchar(255) DEFAULT NULL, `numfile` varchar(255) DEFAULT NULL, `avnumproc` varchar(255) DEFAULT NULL, `numflock` varchar(255) DEFAULT NULL, `numpty` varchar(255) DEFAULT NULL, `numsiginfo` varchar(255) DEFAULT NULL, `dcachesize` varchar(255) DEFAULT NULL, `numiptent` varchar(255) DEFAULT NULL, `swappages` varchar(255) DEFAULT NULL, `hostname` varchar(255) DEFAULT NULL, `nameserver` varchar(255) DEFAULT NULL, `create_dns` varchar(1) NOT NULL DEFAULT 'n', `capability` varchar(255) DEFAULT NULL, PRIMARY KEY (`template_id`) ) DEFAULT CHARSET=utf8 ; -- -- Dumping data for table `openvz_template` -- INSERT INTO `openvz_template` (`template_id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `template_name`, `diskspace`, `traffic`, `bandwidth`, `ram`, `ram_burst`, `cpu_units`, `cpu_num`, `cpu_limit`, `io_priority`, `active`, `description`, `numproc`, `numtcpsock`, `numothersock`, `vmguarpages`, `kmemsize`, `tcpsndbuf`, `tcprcvbuf`, `othersockbuf`, `dgramrcvbuf`, `oomguarpages`, `privvmpages`, `lockedpages`, `shmpages`, `physpages`, `numfile`, `avnumproc`, `numflock`, `numpty`, `numsiginfo`, `dcachesize`, `numiptent`, `swappages`, `hostname`, `nameserver`, `create_dns`, `capability`) VALUES(1, 1, 1, 'riud', 'riud', '', 'small', 10, -1, -1, 256, 512, 1000, 4, 400, 4, 'y', '', '999999:999999', '7999992:7999992', '7999992:7999992', '65536:65536', '2147483646:2147483646', '214748160:396774400', '214748160:396774400', '214748160:396774400', '214748160:396774400', '65536:65536', '131072:131072', '999999:999999', '65536:65536', '0:2147483647', '23999976:23999976', '180:180', '999999:999999', '500000:500000', '999999:999999', '2147483646:2147483646', '999999:999999', '256000:256000', 'v{VEID}.test.tld', '8.8.8.8 8.8.4.4', 'n', ''); -- -------------------------------------------------------- -- -- Table structure for table `openvz_traffic` -- CREATE TABLE IF NOT EXISTS `openvz_traffic` ( `veid` int(11) NOT NULL, `traffic_date` date NOT NULL, `traffic_bytes` bigint(32) unsigned NOT NULL DEFAULT '0', PRIMARY KEY (`veid`,`traffic_date`) ) DEFAULT CHARSET=utf8; -- -- Dumping data for table `openvz_traffic` -- -- -------------------------------------------------------- -- -- Table structure for table `openvz_vm` -- CREATE TABLE IF NOT EXISTS `openvz_vm` ( `vm_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `veid` int(10) unsigned NOT NULL, `ostemplate_id` int(11) NOT NULL DEFAULT '0', `template_id` int(11) NOT NULL DEFAULT '0', `ip_address` varchar(255) NOT NULL, `hostname` varchar(255) DEFAULT NULL, `vm_password` varchar(255) DEFAULT NULL, `start_boot` varchar(255) NOT NULL DEFAULT 'y', `active` varchar(255) NOT NULL DEFAULT 'y', `active_until_date` date NOT NULL, `description` text, `diskspace` int(11) NOT NULL DEFAULT '0', `traffic` int(11) NOT NULL DEFAULT '-1', `bandwidth` int(11) NOT NULL DEFAULT '-1', `ram` int(11) NOT NULL DEFAULT '0', `ram_burst` int(11) NOT NULL DEFAULT '0', `cpu_units` int(11) NOT NULL DEFAULT '1000', `cpu_num` int(11) NOT NULL DEFAULT '4', `cpu_limit` int(11) NOT NULL DEFAULT '400', `io_priority` int(11) NOT NULL DEFAULT '4', `nameserver` varchar(255) NOT NULL DEFAULT '8.8.8.8 8.8.4.4', `create_dns` varchar(1) NOT NULL DEFAULT 'n', `capability` text NOT NULL, `config` mediumtext NOT NULL, PRIMARY KEY (`vm_id`) ) DEFAULT CHARSET=utf8 ; -- -- Dumping data for table `openvz_vm` -- -- -------------------------------------------------------- ispconfig3_install/install/sql/incremental/upd_0105.sql0000775000000000000000000000101115247721566022107 0ustar rootroot-- Store the process id of the cron run that started a cron job, so that a job which is still marked -- as running after its cron run has died can be detected and started again. ALTER TABLE `sys_cron` ADD COLUMN IF NOT EXISTS `pid` int(11) unsigned NULL DEFAULT NULL; -- Release cron job locks that were left behind by an aborted cron run and that could not be -- released automatically because no start time had been recorded for the job. UPDATE `sys_cron` SET `running` = 0 WHERE `running` = 1 AND `last_run` IS NULL; ispconfig3_install/install/sql/incremental/upd_0068.sql0000775000000000000000000000031615114345330022106 0ustar rootrootALTER TABLE `web_domain` ADD UNIQUE `serverdomain` ( `server_id` , `domain` ); ALTER TABLE `dns_rr` DROP KEY rr, CHANGE `name` `name` VARCHAR( 128 ) NOT NULL, ADD KEY `rr` (`zone`,`type`,`name`); ispconfig3_install/install/sql/incremental/upd_0045.sql0000775000000000000000000000041415114345330022100 0ustar rootrootUPDATE `web_domain` SET `redirect_path` = CONCAT(`redirect_path`, '/') WHERE `redirect_path` != '' AND RIGHT(`redirect_path`, 1) != '/' AND (LEFT(`redirect_path`, 7) = 'http://' OR LEFT(`redirect_path`, 8) = 'https://' OR LEFT(`redirect_path`, 11) = '[scheme]://'); ispconfig3_install/install/sql/incremental/upd_0059.sql0000775000000000000000000000013015114345330022100 0ustar rootrootALTER TABLE `client` CHANGE `company_id` `company_id` VARCHAR( 255 ) NULL DEFAULT NULL ;ispconfig3_install/install/sql/incremental/upd_0107.sql0000775000000000000000000002466315253220351022112 0ustar rootroot-- ============================================================= -- CA list corrections -- Ref: issue #7017 -- Sources: CCADB AllCAAIdentifiersReport 2026-06-10 -- SSLMate CAA helper CA list 2026-06-10 -- -- Changes vs original: -- REMOVE - distrusted / defunct / removed CAs -- UPDATE - wrong ca_issue domains -- UPDATE - wrong / outdated ca_name values -- ADD - CAs missing from the table -- ============================================================= -- ------------------------------------------------------------- -- REMOVE: distrusted / defunct CAs -- ------------------------------------------------------------- -- WoSign: distrusted by all major browsers since 2016/2017 (certificate backdating, fraud) DELETE FROM `dns_ssl_ca` WHERE `ca_issue` = 'wosign.com'; -- StartCom: distrusted by all major browsers; shut down January 2018 DELETE FROM `dns_ssl_ca` WHERE `ca_issue` = 'startcomca.com'; -- AC Camerfirma: distrusted by Chrome and Firefox for repeated compliance failures DELETE FROM `dns_ssl_ca` WHERE `ca_issue` = 'camerfirma.com'; -- Entrust: distrusted by Chrome and Mozilla for new issuances since Nov 2024 DELETE FROM `dns_ssl_ca` WHERE `ca_issue` = 'entrust.net'; -- Symantec: distrusted by all browsers since 2018; CA sold to DigiCert -- symantec.com remains a recognised alias under DigiCert but not a standalone entry DELETE FROM `dns_ssl_ca` WHERE `ca_issue` = 'symantec.com'; -- PROCERT: Venezuelan CA with documented Mozilla compliance issues; ceased operations DELETE FROM `dns_ssl_ca` WHERE `ca_issue` = 'procert.net.ve'; -- DocuSign: exited the CA business DELETE FROM `dns_ssl_ca` WHERE `ca_issue` = 'docusign.fr'; -- ------------------------------------------------------------- -- UPDATE: wrong ca_issue domains -- ------------------------------------------------------------- -- Certinomis: CCADB/SSLMate primary is www.certinomis.com; owner is now Docaposte UPDATE `dns_ssl_ca` SET `ca_name` = 'Certinomis (Docaposte)', `ca_issue` = 'www.certinomis.com' WHERE `ca_name` = 'Certinomis'; -- PKIoverheid: correct CAA domain pkioverheid.nl (was stored as a markdown hyperlink) UPDATE `dns_ssl_ca` SET `ca_issue` = 'pkioverheid.nl' WHERE `ca_name` = 'PKIoverheid'; -- Chunghwa Telecom: CCADB/SSLMate primary is pki.hinet.net, not cht.com.tw UPDATE `dns_ssl_ca` SET `ca_issue` = 'pki.hinet.net' WHERE `ca_name` = 'Chunghwa Telecom'; -- D-TRUST: CCADB/SSLMate primary is dtrust.de UPDATE `dns_ssl_ca` SET `ca_issue` = 'dtrust.de' WHERE `ca_name` = 'D-TRUST'; -- Certizen: SSLMate primary is ecert.gov.hk (hongkongpost.gov.hk is secondary) UPDATE `dns_ssl_ca` SET `ca_issue` = 'ecert.gov.hk' WHERE `ca_name` = 'Certizen'; -- ------------------------------------------------------------- -- UPDATE: outdated ca_name values -- ------------------------------------------------------------- -- Asseco is the parent; Certum is the CA brand (CCADB: "Asseco Data Systems S.A.") UPDATE `dns_ssl_ca` SET `ca_name` = 'Certum (Asseco Data Systems)' WHERE `ca_issue` = 'certum.pl'; -- Atos rebranded to Eviden in 2023 (CCADB: "Eviden") UPDATE `dns_ssl_ca` SET `ca_name` = 'Eviden (Atos TrustedRoot)', `ca_issue` = 'atos.net' WHERE `ca_name` = 'Atos TrustedRoot'; -- "(formerly Comodo CA)" is now ~6 years stale UPDATE `dns_ssl_ca` SET `ca_name` = 'Sectigo' WHERE `ca_name` = 'Sectigo (formerly Comodo CA)'; -- DigiCert acquired Thawte, GeoTrust, RapidSSL; all covered by digicert.com UPDATE `dns_ssl_ca` SET `ca_name` = 'DigiCert (incl. Thawte, GeoTrust, RapidSSL)' WHERE `ca_issue` = 'digicert.com'; -- T-Systems PKI business now operates as Deutsche Telekom Security GmbH -- telesec.de is the CAA domain (SSLMate aka: "Deutsche Telekom Security GmbH, TeleSec, T-Systems") UPDATE `dns_ssl_ca` SET `ca_name` = 'Deutsche Telekom Security (T-Systems)' WHERE `ca_name` = 'T-Systems'; -- WISeKey operates under the OISTE Foundation root (SSLMate primary name: "OISTE") UPDATE `dns_ssl_ca` SET `ca_name` = 'OISTE (WISeKey)' WHERE `ca_issue` = 'wisekey.com'; -- Microsec is the correct short name (SSLMate: "Microsec"; product brand: e-Szigno) UPDATE `dns_ssl_ca` SET `ca_name` = 'Microsec (e-Szigno)' WHERE `ca_name` = 'Microsec e-Szigno'; -- Sertifitseerimiskeskuse rebranded to SK ID Solutions; CAA domain is skidsolutions.eu UPDATE `dns_ssl_ca` SET `ca_name` = 'SK ID Solutions', `ca_issue` = 'skidsolutions.eu' WHERE `ca_issue` = 'sk.ee'; -- ------------------------------------------------------------- -- ADD: CAs missing from the table -- ------------------------------------------------------------- INSERT INTO `dns_ssl_ca` (`id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `active`, `ca_name`, `ca_issue`, `ca_wildcard`, `ca_iodef`, `ca_critical`) VALUES -- Apple: publicly trusted CA (SSLMate) (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Apple', 'pki.apple.com', 'Y', '', 0), -- ANF AC: Spanish CA in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'ANF AC', 'anf.es', 'Y', '', 0), -- BJCA: Beijing Certificate Authority in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'BJCA', 'bjca.cn', 'Y', '', 0), -- Certicámara: Colombian CA in Mozilla root store (CCADB) (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Certicámara', 'certicamara.com', 'Y', '', 0), -- Certigna: French CA by Dhimyotis/Tessi; in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Certigna', 'certigna.fr', 'Y', '', 0), -- Certainly: Fastly's publicly trusted CA; accepted by Mozilla/Apple/Google since 2023 (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Certainly', 'certainly.com', 'Y', '', 0), -- Cybertrust Japan / JCSI: Japanese CA in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Cybertrust Japan / JCSI', 'cybertrust.co.jp', 'Y', '', 0), -- DFN-PKI: German research network CA (SSLMate); intermediate under Deutsche Telekom (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'DFN-PKI', 'pki.dfn.de', 'Y', '', 0), -- eMudhra / emSign: Indian CA in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'emSign (eMudhra)', 'emsign.com', 'Y', '', 0), -- Eviden (Atos TrustedRoot): German CA; Mozilla-trusted roots added 2021; rebranded 2023 (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Eviden (Atos TrustedRoot)', 'atos.net', 'Y', '', 0), -- GDCA: Chinese CA in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'GDCA', 'gdca.com.cn', 'Y', '', 0), -- GLOBALTRUST: Austrian CA (e-commerce monitoring GmbH); in SSLMate list (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'GLOBALTRUST', 'globaltrust.eu', 'Y', '', 0), -- GRCA: Government of Taiwan Root Certification Authority (SSLMate) (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'GRCA', 'gca.nat.gov.tw', 'Y', '', 0), -- iTrusChina: Chinese CA in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'iTrusChina', 'itrus.cn', 'Y', '', 0), -- KIR: Polish CA in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'KIR (Poland)', 'elektronicznypodpis.pl', 'Y', '', 0), -- KPN: Dutch telecom CA (SSLMate) (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'KPN', 'kpn.com', 'Y', '', 0), -- MULTICERT: Portuguese CA in Mozilla root store (CCADB) (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'MULTICERT', 'multicert.com', 'Y', '', 0), -- NAVER Cloud Trust Services: Korean CA in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'NAVER Cloud Trust Services', 'navercloudtrust.com', 'Y', '', 0), -- Network Solutions (Web.com): US registrar CA (SSLMate) (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Network Solutions (Web.com)', 'web.com', 'Y', '', 0), -- PostSignum: Czech postal CA in Mozilla root store (CCADB) (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'PostSignum', 'postsignum.cz', 'Y', '', 0), -- SHECA: Shanghai Electronic Certification Authority in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'SHECA', 'sheca.com', 'Y', '', 0), -- SK ID Solutions: Estonian CA; rebranded from Sertifitseerimiskeskuse; CAA: skidsolutions.eu (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'SK ID Solutions', 'skidsolutions.eu', 'Y', '', 0), -- SSL.com: major commercial CA; also now backend for Entrust issuances (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'SSL.com', 'ssl.com', 'Y', '', 0), -- Swiss Federal IT (FOITT): admin.ch CA in CCADB (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Swiss Federal IT (FOITT)', 'admin.ch', 'Y', '', 0), -- TrustAsia: widely used Asia-Pacific CA in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'TrustAsia', 'trustasia.com', 'Y', '', 0), -- TunTrust: Tunisian national CA (ANCE) in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'TunTrust (ANCE)', 'tuntrust.tn', 'Y', '', 0), -- TWCA: Taiwan CA in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'TWCA', 'twca.com.tw', 'Y', '', 0), -- Viking Cloud (Trustwave / SecureTrust): rebranded from Trustwave (SSLMate) (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Viking Cloud (Trustwave)', 'trustwave.com', 'Y', '', 0); -- The public key comment contains the domain or user name, so ssh-keygen output for a -- 3072 bit key with a long domain name exceeds 600 characters (#7074). ALTER TABLE `client` CHANGE `ssh_rsa` `ssh_rsa` text; ALTER TABLE `sys_user` CHANGE `id_rsa` `id_rsa` text, CHANGE `ssh_rsa` `ssh_rsa` text; -- Give the caching_sha2_password hash column the same length as the other password columns, -- the generated hash is exactly 70 characters long and pre-hashed values passed through the -- remote API (e.g. by the Migration Tool) can be longer (#7074). ALTER TABLE `web_database_user` CHANGE `database_password_sha2` `database_password_sha2` varchar(255) DEFAULT NULL; ispconfig3_install/install/sql/incremental/upd_0007.sql0000775000000000000000000000145415114345330022103 0ustar rootrootALTER TABLE client ADD COLUMN limit_mailmailinglist int(11) NOT NULL default '-1'; ALTER TABLE client_template ADD COLUMN limit_mailmailinglist int(11) NOT NULL default '-1'; CREATE TABLE IF NOT EXISTS `mail_mailinglist` ( `mailinglist_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL, `sys_perm_group` varchar(5) character set ucs2 NOT NULL, `sys_perm_other` varchar(5) NOT NULL, `server_id` int(11) unsigned NOT NULL default '0', `domain` varchar(255) NOT NULL, `listname` varchar(255) NOT NULL, `email` varchar(255) NOT NULL, `password` varchar(255) NOT NULL, PRIMARY KEY (`mailinglist_id`) ) AUTO_INCREMENT=1; DROP TABLE `mail_mailman_domain`;ispconfig3_install/install/sql/incremental/upd_0029.sql0000775000000000000000000000053315114345330022104 0ustar rootrootALTER TABLE `web_domain` CHANGE `pm_max_children` `pm_max_children` INT( 11 ) NOT NULL DEFAULT '10', CHANGE `pm_start_servers` `pm_start_servers` INT( 11 ) NOT NULL DEFAULT '2', CHANGE `pm_min_spare_servers` `pm_min_spare_servers` INT( 11 ) NOT NULL DEFAULT '1', CHANGE `pm_max_spare_servers` `pm_max_spare_servers` INT( 11 ) NOT NULL DEFAULT '5';ispconfig3_install/install/sql/incremental/upd_0069.sql0000775000000000000000000000012215114345330022102 0ustar rootrootALTER TABLE `cron` ADD `log` enum('n','y') NOT NULL default 'n' AFTER `run_wday`; ispconfig3_install/install/sql/incremental/upd_dev_collection.sql0000775000000000000000000000000015253207415024475 0ustar rootrootispconfig3_install/install/sql/incremental/upd_0040.sql0000775000000000000000000000161315114345330022075 0ustar rootroot -- Removal of the domain module UPDATE sys_user SET startmodule = 'dashboard' WHERE startmodule = 'domain'; UPDATE sys_user SET modules = replace(modules, ',domain', '') WHERE modules like '%domain%'; -- -------------------------------------------------------- -- -- Table structure for table `directive_snippets` -- CREATE TABLE IF NOT EXISTS `directive_snippets` ( `directive_snippets_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `name` varchar(255) DEFAULT NULL, `type` varchar(255) DEFAULT NULL, `snippet` mediumtext, `active` enum('n','y') NOT NULL DEFAULT 'y', PRIMARY KEY (`directive_snippets_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ispconfig3_install/install/sql/incremental/upd_0063.sql0000775000000000000000000000204015114345330022075 0ustar rootrootALTER TABLE `client` ADD `limit_domainmodule` INT NOT NULL DEFAULT '0'; ALTER TABLE `client_template` ADD `limit_domainmodule` INT NOT NULL DEFAULT '0'; CREATE TABLE `client_message_template` ( `client_message_template_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `template_type` varchar(255) DEFAULT NULL, `template_name` varchar(255) DEFAULT NULL, `subject` varchar(255) DEFAULT NULL, `message` text, PRIMARY KEY (`client_message_template_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ALTER TABLE `spamfilter_policy` ADD `policyd_quota_in` int(11) NOT NULL DEFAULT '-1', ADD `policyd_quota_in_period` int(11) NOT NULL DEFAULT '24', ADD `policyd_quota_out` int(11) NOT NULL DEFAULT '-1', ADD `policyd_quota_out_period` int(11) NOT NULL DEFAULT '24', ADD `policyd_greylist` ENUM( 'Y', 'N' ) NOT NULL DEFAULT 'N'; ispconfig3_install/install/sql/incremental/upd_0083.sql0000775000000000000000000000256715114345330022115 0ustar rootrootALTER TABLE `client` CHANGE `web_servers` `web_servers` TEXT NULL DEFAULT NULL; ALTER TABLE `client` CHANGE `mail_servers` `mail_servers` TEXT NULL DEFAULT NULL; ALTER TABLE `client` CHANGE `xmpp_servers` `xmpp_servers` TEXT NULL DEFAULT NULL; ALTER TABLE `client` CHANGE `db_servers` `db_servers` TEXT NULL DEFAULT NULL; ALTER TABLE `client` CHANGE `dns_servers` `dns_servers` TEXT NULL DEFAULT NULL; UPDATE client SET web_servers = default_webserver WHERE (web_servers = '' OR web_servers IS NULL); UPDATE client SET mail_servers = default_mailserver WHERE (mail_servers = '' OR mail_servers IS NULL); UPDATE client SET xmpp_servers = default_xmppserver WHERE (xmpp_servers = '' OR xmpp_servers IS NULL); UPDATE client SET db_servers = default_dbserver WHERE (db_servers = '' OR db_servers IS NULL); UPDATE client SET dns_servers = default_dnsserver WHERE (dns_servers = '' OR dns_servers IS NULL); ALTER TABLE `client_template` ADD `default_slave_dnsserver` INT NOT NULL DEFAULT '0' AFTER `limit_dns_slave_zone`; ALTER TABLE `client_template` ADD `mail_servers` TEXT NULL DEFAULT NULL AFTER `template_type`; ALTER TABLE `client_template` ADD `web_servers` TEXT NULL DEFAULT NULL AFTER `limit_xmpp_httparchive`; ALTER TABLE `client_template` ADD `dns_servers` TEXT NULL DEFAULT NULL AFTER `limit_aps`; ALTER TABLE `client_template` ADD `db_servers` TEXT NULL DEFAULT NULL AFTER `limit_dns_record`;ispconfig3_install/install/sql/incremental/upd_0065.sql0000775000000000000000000000117115114345330022103 0ustar rootrootALTER TABLE `web_backup` ADD `filesize` VARCHAR(10) NOT NULL AFTER `filename`; ALTER TABLE `client_template` CHANGE `limit_aps` `limit_aps` INT( 11 ) NOT NULL DEFAULT '-1'; ALTER TABLE `mail_domain` ADD `dkim_public` MEDIUMTEXT NULL AFTER `domain`; ALTER TABLE `mail_domain` ADD `dkim_private` MEDIUMTEXT NULL AFTER `domain`; ALTER TABLE `mail_domain` ADD `dkim` ENUM( 'n', 'y' ) NOT NULL AFTER `domain`; ALTER TABLE `web_backup` CHANGE `backup_type` `backup_type` enum('web','mysql','mongodb') NOT NULL DEFAULT 'web'; ALTER TABLE `web_database_user` ADD `database_password_mongo` varchar(32) DEFAULT NULL AFTER `database_password`; ispconfig3_install/install/sql/incremental/upd_0073.sql0000775000000000000000000000066515114345330022111 0ustar rootrootALTER TABLE `client_template` ADD `limit_backup` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y' AFTER `limit_webdav_user`; ALTER TABLE `client` ADD `limit_backup` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y' AFTER `limit_webdav_user`; ALTER TABLE `web_domain` CHANGE `php_fpm_use_socket` `php_fpm_use_socket` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y'; ALTER TABLE `mail_domain` ADD `dkim_selector` VARCHAR(63) NOT NULL DEFAULT 'default' AFTER `dkim`; ispconfig3_install/install/sql/incremental/upd_0074.sql0000775000000000000000000002615315114345330022112 0ustar rootrootALTER TABLE `aps_instances` CHANGE `customer_id` `customer_id` int(4) NOT NULL DEFAULT '0', CHANGE `package_id` `package_id` int(4) NOT NULL DEFAULT '0', CHANGE `instance_status` `instance_status` int(4) NOT NULL DEFAULT '0'; ALTER TABLE `aps_instances_settings` CHANGE `instance_id` `instance_id` int(4) NOT NULL DEFAULT '0', CHANGE `name` `name` varchar(255) NOT NULL DEFAULT '', CHANGE `value` `value` text; ALTER TABLE `aps_packages` CHANGE `path` `path` varchar(255) NOT NULL DEFAULT '', CHANGE `name` `name` varchar(255) NOT NULL DEFAULT '', CHANGE `category` `category` varchar(255) NOT NULL DEFAULT '', CHANGE `version` `version` varchar(20) NOT NULL DEFAULT '', CHANGE `release` `release` int(4) NOT NULL DEFAULT '0', CHANGE `package_url` `package_url` TEXT; ALTER TABLE `aps_settings` CHANGE `name` `name` varchar(255) NOT NULL DEFAULT '', CHANGE `value` `value` text; ALTER TABLE `attempts_login` CHANGE `ip` `ip` varchar(39) NOT NULL DEFAULT ''; ALTER TABLE `client` CHANGE `internet` `internet` varchar(255) NOT NULL DEFAULT '', CHANGE `mail_servers` `mail_servers` blob, CHANGE `web_servers` `web_servers` blob, CHANGE `db_servers` `db_servers` blob, CHANGE `dns_servers` `dns_servers` blob, CHANGE `template_additional` `template_additional` text; ALTER TABLE `client_template` CHANGE `template_name` `template_name` varchar(64) NOT NULL DEFAULT ''; ALTER TABLE `country` CHANGE `iso` `iso` char(2) NOT NULL DEFAULT '', CHANGE `name` `name` varchar(64) NOT NULL DEFAULT '', CHANGE `printable_name` `printable_name` varchar(64) NOT NULL DEFAULT ''; ALTER TABLE `cron` CHANGE `command` `command` TEXT; ALTER TABLE `dns_rr` CHANGE `sys_userid` `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_groupid` `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_perm_user` `sys_perm_user` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_group` `sys_perm_group` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_other` `sys_perm_other` varchar(5) NOT NULL DEFAULT '', CHANGE `zone` `zone` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `name` `name` varchar(255) NOT NULL DEFAULT '', CHANGE `data` `data` varchar(255) NOT NULL DEFAULT ''; ALTER TABLE `dns_slave` CHANGE `sys_userid` `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_groupid` `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_perm_user` `sys_perm_user` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_group` `sys_perm_group` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_other` `sys_perm_other` varchar(5) NOT NULL DEFAULT '', CHANGE `origin` `origin` varchar(255) NOT NULL DEFAULT '', CHANGE `ns` `ns` varchar(255) NOT NULL DEFAULT '', CHANGE `active` `active` enum('N','Y') NOT NULL DEFAULT 'N', CHANGE `xfer` `xfer` varchar(255) NOT NULL DEFAULT ''; ALTER TABLE `dns_soa` CHANGE `sys_userid` `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_groupid` `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_perm_user` `sys_perm_user` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_group` `sys_perm_group` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_other` `sys_perm_other` varchar(5) NOT NULL DEFAULT '', CHANGE `origin` `origin` varchar(255) NOT NULL DEFAULT '', CHANGE `ns` `ns` varchar(255) NOT NULL DEFAULT '', CHANGE `mbox` `mbox` varchar(255) NOT NULL DEFAULT '', CHANGE `active` `active` enum('N','Y') NOT NULL DEFAULT 'N', CHANGE `xfer` `xfer` varchar(255) NOT NULL DEFAULT ''; ALTER TABLE `mail_access` CHANGE `source` `source` varchar(255) NOT NULL DEFAULT '', CHANGE `access` `access` varchar(255) NOT NULL DEFAULT '', CHANGE `type` `type` set('recipient','sender','client') NOT NULL DEFAULT 'recipient'; ALTER TABLE `mail_backup` CHANGE `server_id` `server_id` int(10) unsigned NOT NULL DEFAULT '0', CHANGE `parent_domain_id` `parent_domain_id` int(10) unsigned NOT NULL DEFAULT '0', CHANGE `mailuser_id` `mailuser_id` int(10) unsigned NOT NULL DEFAULT '0', CHANGE `tstamp` `tstamp` int(10) unsigned NOT NULL DEFAULT '0', CHANGE `filename` `filename` varchar(255) NOT NULL DEFAULT '', CHANGE `filesize` `filesize` VARCHAR(10) NOT NULL DEFAULT ''; ALTER TABLE `mail_domain` CHANGE `active` `active` enum('n','y') NOT NULL DEFAULT 'n'; ALTER TABLE `mail_forwarding` CHANGE `source` `source` varchar(255) NOT NULL DEFAULT '', CHANGE `active` `active` enum('n','y') NOT NULL DEFAULT 'n'; ALTER TABLE `mail_mailinglist` CHANGE `sys_perm_user` `sys_perm_user` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_group` `sys_perm_group` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_other` `sys_perm_other` varchar(5) NOT NULL DEFAULT '', CHANGE `domain` `domain` varchar(255) NOT NULL DEFAULT '', CHANGE `listname` `listname` varchar(255) NOT NULL DEFAULT '', CHANGE `email` `email` varchar(255) NOT NULL DEFAULT '', CHANGE `password` `password` varchar(255) NOT NULL DEFAULT ''; ALTER TABLE `mail_traffic` CHANGE `mailuser_id` `mailuser_id` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `month` `month` char(7) NOT NULL DEFAULT '', CHANGE `traffic` `traffic` bigint(20) unsigned NOT NULL DEFAULT '0'; ALTER TABLE `mail_transport` CHANGE `transport` `transport` varchar(255) NOT NULL DEFAULT '', CHANGE `active` `active` enum('n','y') NOT NULL DEFAULT 'n'; ALTER TABLE `mail_user` CHANGE `login` `login` varchar(255) NOT NULL default '', CHANGE `password` `password` varchar(255) NOT NULL default '', CHANGE `homedir` `homedir` varchar(255) NOT NULL default '', CHANGE `postfix` `postfix` enum('n','y') NOT NULL default 'y', CHANGE `access` `access` enum('n','y') NOT NULL default 'y'; ALTER TABLE `monitor_data` CHANGE `server_id` `server_id` int(11) unsigned NOT NULL default '0', CHANGE `type` `type` varchar(255) NOT NULL default '', CHANGE `created` `created` int(11) unsigned NOT NULL default '0', CHANGE `data` `data` mediumtext; ALTER TABLE `openvz_ostemplate` CHANGE `template_file` `template_file` varchar(255) NOT NULL DEFAULT ''; ALTER TABLE `openvz_traffic` CHANGE `veid` `veid` int(11) NOT NULL DEFAULT '0', CHANGE `traffic_date` `traffic_date` date NOT NULL DEFAULT '0000-00-00'; ALTER TABLE `openvz_vm` CHANGE `veid` `veid` int(10) unsigned NOT NULL DEFAULT '0', CHANGE `ip_address` `ip_address` varchar(255) NOT NULL DEFAULT '', CHANGE `active_until_date` `active_until_date` date NOT NULL DEFAULT '0000-00-00', CHANGE `capability` `capability` text, CHANGE `config` `config` mediumtext; ALTER TABLE `remote_session` CHANGE `remote_session` `remote_session` varchar(64) NOT NULL DEFAULT '', CHANGE `remote_userid` `remote_userid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `remote_functions` `remote_functions` text, CHANGE `tstamp` `tstamp` int(10) unsigned NOT NULL DEFAULT '0'; ALTER TABLE `remote_user` CHANGE `remote_username` `remote_username` varchar(64) NOT NULL DEFAULT '', CHANGE `remote_password` `remote_password` varchar(64) NOT NULL DEFAULT '', CHANGE `remote_functions` `remote_functions` text; ALTER TABLE `server` CHANGE `config` `config` text; ALTER TABLE `shell_user` CHANGE `chroot` `chroot` varchar(255) NOT NULL DEFAULT '', CHANGE `ssh_rsa` `ssh_rsa` text; ALTER TABLE `software_update` CHANGE `software_repo_id` `software_repo_id` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `package_name` `package_name` varchar(64) NOT NULL DEFAULT '', CHANGE `update_url` `update_url` varchar(255) NOT NULL DEFAULT '', CHANGE `update_md5` `update_md5` varchar(255) NOT NULL DEFAULT '', CHANGE `update_dependencies` `update_dependencies` varchar(255) NOT NULL DEFAULT '', CHANGE `update_title` `update_title` varchar(64) NOT NULL DEFAULT ''; ALTER TABLE `software_update_inst` CHANGE `package_name` `package_name` varchar(64) NOT NULL DEFAULT '', CHANGE `server_id` `server_id` int(11) unsigned NOT NULL DEFAULT '0'; ALTER TABLE `spamfilter_policy` CHANGE `sys_userid` `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_groupid` `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_perm_user` `sys_perm_user` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_group` `sys_perm_group` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_other` `sys_perm_other` varchar(5) NOT NULL DEFAULT ''; ALTER TABLE `spamfilter_users` CHANGE `sys_userid` `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_groupid` `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_perm_user` `sys_perm_user` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_group` `sys_perm_group` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_other` `sys_perm_other` varchar(5) NOT NULL DEFAULT '', CHANGE `server_id` `server_id` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `email` `email` varchar(255) NOT NULL DEFAULT ''; ALTER TABLE `spamfilter_wblist` CHANGE `sys_userid` `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_groupid` `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_perm_user` `sys_perm_user` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_group` `sys_perm_group` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_other` `sys_perm_other` varchar(5) NOT NULL DEFAULT '', CHANGE `server_id` `server_id` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `rid` `rid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `email` `email` varchar(255) NOT NULL DEFAULT '', CHANGE `priority` `priority` tinyint(3) unsigned NOT NULL DEFAULT '0'; ALTER TABLE `sys_config` CHANGE `group` `group` varchar(64) NOT NULL DEFAULT '', CHANGE `name` `name` varchar(64) NOT NULL DEFAULT '', CHANGE `value` `value` varchar(255) NOT NULL DEFAULT ''; ALTER TABLE `sys_cron` CHANGE `name` `name` varchar(50) NOT NULL DEFAULT ''; ALTER TABLE `sys_datalog` CHANGE `server_id` `server_id` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `data` `data` longtext; ALTER TABLE `sys_group` CHANGE `description` `description` text; ALTER TABLE `sys_ini` CHANGE `config` `config` longtext; ALTER TABLE `sys_log` CHANGE `tstamp` `tstamp` int(11) unsigned NOT NULL DEFAULT '0'; ALTER TABLE `sys_remoteaction` CHANGE `server_id` `server_id` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `tstamp` `tstamp` int(11) NOT NULL DEFAULT '0', CHANGE `action_type` `action_type` varchar(20) NOT NULL DEFAULT '', CHANGE `action_param` `action_param` mediumtext, CHANGE `action_state` `action_state` enum('pending','ok','warning','error') NOT NULL DEFAULT 'pending', CHANGE `response` `response` mediumtext; ALTER TABLE `sys_theme` CHANGE `tpl_name` `tpl_name` varchar(32) NOT NULL DEFAULT '', CHANGE `username` `username` varchar(64) NOT NULL DEFAULT '', CHANGE `logo_url` `logo_url` varchar(255) NOT NULL DEFAULT ''; ALTER TABLE `sys_user` CHANGE `groups` `groups` TEXT; ALTER TABLE `web_backup` CHANGE `server_id` `server_id` int(10) unsigned NOT NULL DEFAULT '0', CHANGE `parent_domain_id` `parent_domain_id` int(10) unsigned NOT NULL DEFAULT '0', CHANGE `tstamp` `tstamp` int(10) unsigned NOT NULL DEFAULT '0', CHANGE `filename` `filename` varchar(255) NOT NULL DEFAULT '', CHANGE `filesize` `filesize` VARCHAR(10) NOT NULL DEFAULT ''; ALTER TABLE `web_database` CHANGE `remote_ips` `remote_ips` text; ALTER TABLE `web_traffic` CHANGE `hostname` `hostname` varchar(255) NOT NULL DEFAULT '', CHANGE `traffic_date` `traffic_date` date NOT NULL DEFAULT '0000-00-00'; ispconfig3_install/install/sql/incremental/upd_0018.sql0000775000000000000000000000033515114345330022102 0ustar rootrootalter table client_template add column web_php_options varchar(255) not null default 'no' after limit_web_quota; alter table client_template add column ssh_chroot varchar(255) not null default 'no' after limit_shell_user;ispconfig3_install/install/sql/incremental/upd_0048.sql0000775000000000000000000000012415114345330022101 0ustar rootrootALTER TABLE `client` CHANGE `limit_aps` `limit_aps` INT( 11 ) NOT NULL DEFAULT '-1';ispconfig3_install/install/sql/incremental/upd_0041.sql0000775000000000000000000000016315114345330022075 0ustar rootroot -- Add bank account owner ALTER TABLE `client` ADD `bank_account_owner` varchar(255) DEFAULT NULL AFTER `notes`; ispconfig3_install/install/sql/incremental/upd_0076.sql0000775000000000000000000000011315114345330022100 0ustar rootrootALTER TABLE `dns_rr` CHANGE `name` `name` varchar(255) NOT NULL DEFAULT '';ispconfig3_install/install/sql/incremental/upd_0051.sql0000775000000000000000000000041015114345330022071 0ustar rootrootUPDATE `country` SET `iso` = 'RS', `name` = 'SERBIA', `printable_name` = 'Serbia', `iso3` = 'SRB', `numcode` = 381 WHERE `iso` = 'CS'; INSERT INTO `country` (`iso`, `name`, `printable_name`, `iso3`, `numcode`) VALUES ('ME', 'MONTENEGRO', 'Montenegro', 'MNE', 382);ispconfig3_install/install/sql/incremental/upd_0093.sql0000775000000000000000000000240415114345330022104 0ustar rootrootALTER TABLE `remote_user` MODIFY `remote_password` VARCHAR(200) NOT NULL DEFAULT ''; ALTER TABLE `client` ADD COLUMN `limit_mail_wblist` INT(11) NOT NULL DEFAULT '0' AFTER `limit_mailrouting`; ALTER TABLE `client_template` ADD COLUMN `limit_mail_wblist` INT(11) NOT NULL DEFAULT '0' AFTER `limit_mailrouting`; ALTER TABLE mail_access DROP CONSTRAINT `server_id`; SET SESSION old_alter_table=1; ALTER IGNORE TABLE mail_access ADD UNIQUE KEY `unique_source` (`server_id`,`source`,`type`); SET SESSION old_alter_table=0; ALTER TABLE mail_domain ADD COLUMN `relay_host` varchar(255) NOT NULL default '' AFTER `dkim_public`, ADD COLUMN `relay_user` varchar(255) NOT NULL default '' AFTER `relay_host`, ADD COLUMN `relay_pass` varchar(255) NOT NULL default '' AFTER `relay_user`; -- Purge apps & addons installer (#5795) DROP TABLE `software_package`; DROP TABLE `software_repo`; DROP TABLE `software_update`; DROP TABLE `software_update_inst`; -- Brexit UPDATE `country` SET `eu` = 'n' WHERE `iso` = 'GB'; -- Add limit for per domain relaying ALTER TABLE `client` ADD `limit_relayhost` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_spamfilter_policy`; ALTER TABLE `client_template` ADD `limit_relayhost` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_spamfilter_policy`; ispconfig3_install/install/sql/incremental/upd_0106.sql0000775000000000000000000000111015253274022022073 0ustar rootroot-- Master database rights that extensions declare for their own tables (install/master_grants.list -- of the extension). Read by the updater when it rebuilds the rights of the ispcsrv users. CREATE TABLE IF NOT EXISTS `sys_extension_grant` ( `grant_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `extension` varchar(64) NOT NULL DEFAULT '', `table_name` varchar(64) NOT NULL DEFAULT '', `privileges` varchar(64) NOT NULL DEFAULT '', PRIMARY KEY (`grant_id`), UNIQUE KEY `extension_table` (`extension`,`table_name`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1; ispconfig3_install/install/sql/incremental/upd_0039.sql0000775000000000000000000000323415114345330022106 0ustar rootroot-- -------------------------------------------------------- -- -- Tabellenstruktur für Tabelle `web_database_user` -- CREATE TABLE IF NOT EXISTS `web_database_user` ( `database_user_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) UNSIGNED NOT NULL DEFAULT '0', `database_user` varchar(64) DEFAULT NULL, `database_password` varchar(64) DEFAULT NULL, PRIMARY KEY (`database_user_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- ALTER TABLE `web_database` ADD `database_user_id` INT( 11 ) UNSIGNED NULL DEFAULT NULL AFTER `database_password` , ADD `database_ro_user_id` INT( 11 ) UNSIGNED NULL DEFAULT NULL AFTER `database_user_id`, ADD INDEX ( `database_user_id` ), ADD INDEX ( `database_ro_user_id` ) ; -- -------------------------------------------------------- INSERT INTO `web_database_user` SELECT NULL, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, '0', `database_user`, `database_password` FROM `web_database` WHERE 1; -- -------------------------------------------------------- UPDATE `web_database`, `web_database_user` SET `web_database`.`database_user_id` = `web_database_user`.`database_user_id` WHERE `web_database_user`.`database_user` = `web_database`.`database_user`; -- -------------------------------------------------------- ALTER TABLE `web_database` DROP `database_user`, DROP `database_password`; ispconfig3_install/install/sql/incremental/upd_0091.sql0000775000000000000000000000434115114345330022104 0ustar rootroot-- we need those to fix some installations failing in 0089 and 0090 ALTER TABLE `web_domain` ROW_FORMAT=DYNAMIC; ALTER TABLE `mail_user` ROW_FORMAT=DYNAMIC; ALTER TABLE `web_domain` ADD COLUMN `proxy_protocol` ENUM('n','y') NOT NULL DEFAULT 'n' AFTER `log_retention`; ALTER TABLE `web_domain` ADD `backup_format_web` VARCHAR( 255 ) NOT NULL default 'default' AFTER `backup_copies`; ALTER TABLE `web_domain` ADD `backup_format_db` VARCHAR( 255 ) NOT NULL default 'gzip' AFTER `backup_format_web`; ALTER TABLE `web_domain` ADD `backup_encrypt` enum('n','y') NOT NULL DEFAULT 'n' AFTER `backup_format_db`; ALTER TABLE `web_domain` ADD `backup_password` VARCHAR( 255 ) NOT NULL DEFAULT '' AFTER `backup_encrypt`; ALTER TABLE `web_backup` ADD `backup_format` VARCHAR( 64 ) NOT NULL DEFAULT '' AFTER `backup_mode`; ALTER TABLE `web_backup` ADD `backup_password` VARCHAR( 255 ) NOT NULL DEFAULT '' AFTER `filesize`; ALTER TABLE `web_domain` ALTER pm SET DEFAULT 'ondemand'; ALTER TABLE `web_domain` DROP COLUMN `enable_spdy`; ALTER TABLE `web_domain` ADD `folder_directive_snippets` TEXT NULL AFTER `https_port`; ALTER TABLE `web_domain` ADD `server_php_id` INT(11) UNSIGNED NOT NULL DEFAULT 0; ALTER TABLE `web_domain` CHANGE `apache_directives` `apache_directives` mediumtext NULL DEFAULT NULL; ALTER TABLE `web_domain` CHANGE `nginx_directives` `nginx_directives` mediumtext NULL DEFAULT NULL; UPDATE `web_domain` as w LEFT JOIN sys_group as g ON (g.groupid = w.sys_groupid) INNER JOIN `server_php` as p ON (w.fastcgi_php_version = CONCAT(p.name, ':', p.php_fastcgi_binary, ':', p.php_fastcgi_ini_dir) AND p.server_id IN (0, w.server_id) AND p.client_id IN (0, g.client_id)) SET w.server_php_id = p.server_php_id, w.fastcgi_php_version = '' WHERE w.server_php_id = 0; UPDATE `web_domain` as w LEFT JOIN sys_group as g ON (g.groupid = w.sys_groupid) INNER JOIN `server_php` as p ON (w.fastcgi_php_version = CONCAT(p.name, ':', p.php_fpm_init_script, ':', p.php_fpm_ini_dir, ':', p.php_fpm_pool_dir) AND p.server_id IN (0, w.server_id) AND p.client_id IN (0, g.client_id)) SET w.server_php_id = p.server_php_id, w.fastcgi_php_version = '' WHERE w.server_php_id = 0; ALTER TABLE `mail_user` ADD `forward_in_lda` enum('n','y') NOT NULL default 'n' AFTER `cc`; -- end of fixesispconfig3_install/install/sql/incremental/upd_0057.sql0000775000000000000000000000037615114345330022112 0ustar rootrootCREATE TABLE IF NOT EXISTS `sys_cron` ( `name` varchar(50) NOT NULL, `last_run` datetime NULL DEFAULT NULL, `next_run` datetime NULL DEFAULT NULL, `running` tinyint(1) UNSIGNED NOT NULL DEFAULT '0', PRIMARY KEY (`name`) ) DEFAULT CHARSET=utf8; ispconfig3_install/install/sql/incremental/upd_0043.sql0000775000000000000000000000055015114345330022077 0ustar rootrootALTER TABLE `sys_theme` ADD `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', ADD `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', ADD `sys_perm_user` varchar(5) DEFAULT NULL, ADD `sys_perm_group` varchar(5) DEFAULT NULL, ADD `sys_perm_other` varchar(5) DEFAULT NULL; ispconfig3_install/install/sql/incremental/upd_0071.sql0000775000000000000000000000050415114345330022077 0ustar rootrootALTER TABLE `client` ADD `limit_database_quota` int(11) NOT NULL default '-1' AFTER `limit_database`; ALTER TABLE `client_template` ADD `limit_database_quota` int(11) NOT NULL default '-1' AFTER `limit_database`; ALTER TABLE `web_database` ADD `database_quota` int(11) unsigned DEFAULT NULL AFTER `database_name_prefix`; ispconfig3_install/install/sql/incremental/upd_0101.sql0000775000000000000000000000273115114345330022075 0ustar rootrootALTER TABLE `web_database_user` ADD `database_password_sha2` varchar(70) DEFAULT NULL AFTER `database_password`; ALTER TABLE `web_database_user` ADD `database_password_postgres` varchar(255) DEFAULT NULL AFTER `database_password_mongo`; ALTER TABLE `client` ADD `limit_database_postgresql` INT NOT NULL DEFAULT '-1' AFTER `limit_database`; ALTER TABLE `client_template` ADD `limit_database_postgresql` INT NOT NULL DEFAULT '-1' AFTER `limit_database`; ALTER TABLE `server_php` ADD `php_cli_binary` varchar(255) DEFAULT NULL AFTER `php_fpm_socket_dir`; ALTER TABLE `server_php` ADD `php_jk_section` varchar(255) DEFAULT NULL AFTER `php_cli_binary`; ALTER TABLE `mail_domain` ADD `local_delivery` enum('n','y') NOT NULL DEFAULT 'y' AFTER `active`; ALTER TABLE `sys_remoteaction` CHANGE `action_type` `action_type` VARCHAR(64) NOT NULL; CREATE TABLE IF NOT EXISTS `sys_message` ( `message_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT 0, `sys_groupid` int(11) unsigned NOT NULL DEFAULT 0, `sys_perm_user` VARCHAR(5) DEFAULT 'r', `sys_perm_group` VARCHAR(5) DEFAULT 'r', `sys_perm_other` VARCHAR(5) DEFAULT '', `message_state` enum('info','warning','error') NOT NULL DEFAULT 'info', `message_date` datetime NULL DEFAULT NULL, `message_ack` enum('y','n') NOT NULL DEFAULT 'n', `relation` varchar(255) NULL DEFAULT NULL, `message` TEXT DEFAULT NULL, PRIMARY KEY (`message_id`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8 AUTO_INCREMENT=1; ispconfig3_install/install/sql/incremental/upd_0023.sql0000775000000000000000000000020415114345330022071 0ustar rootrootALTER TABLE `sys_session` CHANGE `session_id` `session_id` VARCHAR( 64 ) CHARACTER SET latin1 COLLATE latin1_swedish_ci NOT NULL;ispconfig3_install/install/sql/incremental/upd_0050.sql0000775000000000000000000000145415114345330022101 0ustar rootrootCREATE TABLE IF NOT EXISTS `dns_slave` ( `id` int(10) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `server_id` int(11) NOT NULL default '1', `origin` varchar(255) NOT NULL DEFAULT '', `ns` varchar(255) NOT NULL DEFAULT '', `active` enum('N','Y') NOT NULL DEFAULT 'N', `xfer` varchar(255) NOT NULL DEFAULT '', PRIMARY KEY (`id`), KEY `origin` (`origin`), KEY `active` (`active`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ALTER TABLE `dns_slave` DROP INDEX `origin`; ALTER TABLE `dns_slave` ADD CONSTRAINT `slave` UNIQUE (`origin`,`server_id`);ispconfig3_install/install/sql/incremental/upd_0030.sql0000775000000000000000000000062515114345330022076 0ustar rootrootALTER TABLE `client` ADD `bank_account_number` VARCHAR( 255 ) NULL DEFAULT NULL AFTER `notes` , ADD `bank_code` VARCHAR( 255 ) NULL DEFAULT NULL AFTER `bank_account_number` , ADD `bank_name` VARCHAR( 255 ) NULL DEFAULT NULL AFTER `bank_code` , ADD `bank_account_iban` VARCHAR( 255 ) NULL DEFAULT NULL AFTER `bank_name` , ADD `bank_account_swift` VARCHAR( 255 ) NULL DEFAULT NULL AFTER `bank_account_iban`;ispconfig3_install/install/sql/incremental/upd_0035.sql0000775000000000000000000000171415114345330022103 0ustar rootroot-- -------------------------------------------------------- -- -- Table structure for table `sys_theme` -- CREATE TABLE IF NOT EXISTS `sys_theme` ( `var_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `tpl_name` varchar(32) NOT NULL, `username` varchar(64) NOT NULL, `logo_url` varchar(255) NOT NULL, PRIMARY KEY (`var_id`) ) DEFAULT CHARSET=utf8 ; -- -------------------------------------------------------- INSERT INTO `sys_theme` (`var_id`, `tpl_name`, `username`, `logo_url`) VALUES (NULL, 'default', 'global', 'themes/default/images/header_logo.png'); INSERT INTO `sys_theme` (`var_id`, `tpl_name`, `username`, `logo_url`) VALUES (NULL, 'default-v2', 'global', 'themes/default-v2/images/header_logo.png'); -- -------------------------------------------------------- ALTER TABLE `web_domain` ADD `ssl_key` MEDIUMTEXT NOT NULL AFTER `ssl_bundle`; ALTER TABLE `mail_user` ADD `disabledoveadm` enum('n','y') NOT NULL default 'n' AFTER `disablelda`; ispconfig3_install/install/sql/incremental/upd_0002.sql0000775000000000000000000000050115114345330022066 0ustar rootrootCREATE TABLE IF NOT EXISTS `sys_session` ( `session_id` varchar(32) NOT NULL default '', `date_created` datetime NOT NULL default '0000-00-00 00:00:00', `last_updated` datetime NOT NULL default '0000-00-00 00:00:00', `session_data` longtext, PRIMARY KEY (`session_id`), KEY `last_updated` (`last_updated`) );ispconfig3_install/install/sql/incremental/upd_0013.sql0000775000000000000000000000140615114345330022075 0ustar rootroot-- -- Table structure for table `iptables` -- DROP TABLE IF EXISTS `iptables`; CREATE TABLE `iptables` ( `iptables_id` int(10) unsigned NOT NULL AUTO_INCREMENT, `server_id` int(10) unsigned NOT NULL DEFAULT '0', `table` varchar(10) DEFAULT NULL COMMENT 'INPUT OUTPUT FORWARD', `source_ip` varchar(16) DEFAULT NULL, `destination_ip` varchar(16) DEFAULT NULL, `protocol` varchar(10) DEFAULT 'TCP' COMMENT 'TCP UDP GRE', `singleport` varchar(10) DEFAULT NULL, `multiport` varchar(40) DEFAULT NULL, `state` varchar(20) DEFAULT NULL COMMENT 'NEW ESTABLISHED RECNET etc', `target` varchar(10) DEFAULT NULL COMMENT 'ACCEPT DROP REJECT LOG', `active` enum('n','y') NOT NULL DEFAULT 'y', PRIMARY KEY (`iptables_id`) ) AUTO_INCREMENT=5 DEFAULT CHARSET=utf8; ispconfig3_install/install/sql/incremental/upd_0052.sql0000775000000000000000000000016315114345330022077 0ustar rootrootALTER TABLE `client` ADD `default_slave_dnsserver` INT( 11 ) UNSIGNED NOT NULL DEFAULT '1' AFTER `limit_dns_zone`; ispconfig3_install/install/sql/incremental/upd_0027.sql0000775000000000000000000000021315114345330022075 0ustar rootrootALTER TABLE `mail_user` ADD `autoresponder_subject` VARCHAR(255) NOT NULL DEFAULT 'Out of office reply' AFTER `autoresponder_end_date`; ispconfig3_install/install/sql/incremental/upd_0042.sql0000775000000000000000000000016115114345330022074 0ustar rootroot -- increase column size ALTER TABLE `client` CHANGE `template_additional` `template_additional` TEXT NOT NULL; ispconfig3_install/install/sql/incremental/upd_0064.sql0000775000000000000000000000035115114345330022101 0ustar rootrootALTER TABLE `mail_user` ADD `disablelmtp` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `disablelda` ; ALTER TABLE `mail_user` CHANGE `uid` `uid` INT( 11 ) NOT NULL DEFAULT '5000', CHANGE `gid` `gid` INT( 11 ) NOT NULL DEFAULT '5000' ;ispconfig3_install/install/sql/incremental/upd_0092.sql0000775000000000000000000000061115114345330022101 0ustar rootroot-- drop old php column because new installations don't have them (fails in multi-server) ALTER TABLE `web_domain` DROP COLUMN `fastcgi_php_version`; -- add php_fpm_socket_dir column to server_php ALTER TABLE `server_php` ADD `php_fpm_socket_dir` varchar(255) DEFAULT NULL AFTER `php_fpm_pool_dir`; -- fix #5939 UPDATE `ftp_user` SET `expires` = NULL WHERE `expires` = '0000-00-00 00:00:00'; ispconfig3_install/install/sql/incremental/upd_0055.sql0000775000000000000000000000010415114345330022075 0ustar rootrootALTER TABLE `sys_datalog` ADD `error` MEDIUMTEXT NULL DEFAULT NULL; ispconfig3_install/install/sql/incremental/upd_0016.sql0000775000000000000000000000072315114345330022101 0ustar rootrootALTER TABLE `server_ip` ADD `ip_type` enum( 'IPv4', 'IPv6' ) NOT NULL DEFAULT 'IPv4' AFTER `server_id`; ALTER TABLE `server_ip` ADD `virtualhost_port` VARCHAR( 255 ) NOT NULL DEFAULT '80,443'; ALTER TABLE `server_ip` ADD `client_id` int(11) unsigned NOT NULL default '0' AFTER `server_id`; ALTER TABLE `mail_user` ADD `disablesieve` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n'; ALTER TABLE `mail_user` ADD `disablelda` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n';ispconfig3_install/install/sql/incremental/upd_0037.sql0000775000000000000000000000357515114345330022114 0ustar rootroot-- -------------------------------------------------------- ALTER TABLE `client` ADD `limit_cgi` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `web_php_options`, ADD `limit_ssi` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_cgi`, ADD `limit_perl` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_ssi`, ADD `limit_ruby` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_perl`, ADD `limit_python` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_ruby`, ADD `force_suexec` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y' AFTER `limit_python`, ADD `limit_hterror` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `force_suexec`, ADD `limit_wildcard` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_hterror`, ADD `limit_ssl` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_wildcard`; ALTER TABLE `client_template` ADD `limit_cgi` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `web_php_options`, ADD `limit_ssi` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_cgi`, ADD `limit_perl` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_ssi`, ADD `limit_ruby` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_perl`, ADD `limit_python` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_ruby`, ADD `force_suexec` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y' AFTER `limit_python`, ADD `limit_hterror` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `force_suexec`, ADD `limit_wildcard` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_hterror`, ADD `limit_ssl` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_wildcard`; ispconfig3_install/install/sql/incremental/upd_0028.sql0000775000000000000000000000126715114345330022110 0ustar rootrootALTER TABLE `web_database` ADD `parent_domain_id` int(11) unsigned NOT NULL DEFAULT '0' AFTER `server_id`; ALTER TABLE `web_database` ADD `backup_interval` VARCHAR( 255 ) NOT NULL DEFAULT 'none', ADD `backup_copies` INT NOT NULL DEFAULT '1' AFTER `remote_ips`; CREATE TABLE `web_backup` ( `backup_id` int(10) unsigned NOT NULL AUTO_INCREMENT, `server_id` int(10) unsigned NOT NULL, `parent_domain_id` int(10) unsigned NOT NULL, `backup_type` enum('web','mysql') NOT NULL DEFAULT 'web', `backup_mode` varchar(64) NOT NULL DEFAULT '', `tstamp` int(10) unsigned NOT NULL, `filename` varchar(255) NOT NULL, PRIMARY KEY (`backup_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ispconfig3_install/install/sql/incremental/upd_0054.sql0000775000000000000000000000011315114345330022074 0ustar rootrootALTER TABLE `web_domain` ADD `rewrite_rules` MEDIUMTEXT NULL DEFAULT NULL; ispconfig3_install/install/sql/incremental/upd_0053.sql0000775000000000000000000000023515114345330022100 0ustar rootrootALTER TABLE `web_domain` ADD `last_quota_notification` DATE NULL DEFAULT NULL; ALTER TABLE `mail_user` ADD `last_quota_notification` DATE NULL DEFAULT NULL; ispconfig3_install/install/sql/incremental/upd_0070.sql0000775000000000000000000000015615114345330022101 0ustar rootrootALTER TABLE `mail_user` ADD `disablesieve-filter` ENUM( 'y', 'n' ) NOT NULL DEFAULT 'n' AFTER `disablesieve`; ispconfig3_install/install/sql/incremental/upd_0080.sql0000775000000000000000000000015315114345330022077 0ustar rootrootALTER TABLE `web_domain` ADD COLUMN `enable_spdy` ENUM('y','n') NULL DEFAULT 'n' AFTER `proxy_directives`; ispconfig3_install/install/sql/incremental/upd_0026.sql0000775000000000000000000000015515114345330022101 0ustar rootrootALTER TABLE `shell_user` CHANGE `ssh_rsa` `ssh_rsa` TEXT CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL;ispconfig3_install/install/sql/incremental/upd_0038.sql0000775000000000000000000000023515114345330022103 0ustar rootroot-- -------------------------------------------------------- ALTER TABLE `web_domain` ADD `web_folder` VARCHAR( 100 ) DEFAULT NULL AFTER `document_root` ; ispconfig3_install/install/sql/incremental/upd_0079.sql0000775000000000000000000000031015114345330022102 0ustar rootrootALTER TABLE `directive_snippets` ADD `customer_viewable` ENUM('n','y') NOT NULL DEFAULT 'n' AFTER `snippet`; ALTER TABLE `web_domain` ADD `directive_snippets_id` int(11) unsigned NOT NULL default '0';ispconfig3_install/install/sql/incremental/upd_0047.sql0000775000000000000000000000025715114345330022107 0ustar rootrootALTER TABLE `client` CHANGE `web_php_options` `web_php_options` VARCHAR( 255 ) CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'no,fast-cgi,cgi,mod,suphp,php-fpm';ispconfig3_install/install/sql/incremental/upd_0084.sql0000775000000000000000000000031215114345330022100 0ustar rootrootUPDATE `sys_user` SET `app_theme` = 'default' WHERE 1; ALTER TABLE `ftp_user` ADD `user_type` SET('user','system') NOT NULL DEFAULT 'user' AFTER `expires`, ADD `user_config` TEXT NULL AFTER `user_type`;ispconfig3_install/install/sql/incremental/upd_0090.sql0000775000000000000000000000064615114345330022107 0ustar rootrootALTER TABLE `web_domain` ADD `jailkit_chroot_app_sections` mediumtext NULL DEFAULT NULL; ALTER TABLE `web_domain` ADD `jailkit_chroot_app_programs` mediumtext NULL DEFAULT NULL; ALTER TABLE `web_domain` ADD `delete_unused_jailkit` enum('n','y') NOT NULL DEFAULT 'n'; ALTER TABLE `web_domain` ADD `last_jailkit_update` date NULL DEFAULT NULL; ALTER TABLE `web_domain` ADD `last_jailkit_hash` varchar(255) DEFAULT NULL;ispconfig3_install/install/sql/incremental/upd_0072.sql0000775000000000000000000000276615114345330022114 0ustar rootrootALTER TABLE `country` ADD `eu` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'BE'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'BG'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'DK'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'DE'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'EE'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'FI'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'FR'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'GR'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'IE'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'IT'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'HR'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'LV'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'LT'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'LU'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'MT'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'NL'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'AT'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'PL'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'PT'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'RO'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'SE'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'SK'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'SI'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'ES'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'CZ'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'HU'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'GB'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'CY'; ispconfig3_install/install/sql/incremental/upd_0000.sql0000775000000000000000000000034415114345330022071 0ustar rootroot-- ----------------------------------------------------------- -- Dummy patch file -- Do not edit this file -- See README.txt in sql folder for detailed instructions -- -----------------------------------------------------------ispconfig3_install/install/sql/incremental/upd_0078.sql0000775000000000000000000000026315114345330022110 0ustar rootrootALTER TABLE `dns_rr` CHANGE `data` `data` TEXT NOT NULL; ALTER TABLE `web_domain` DROP INDEX `serverdomain`, ADD UNIQUE `serverdomain` ( `server_id` , `ip_address`, `domain` ); ispconfig3_install/install/sql/incremental/upd_0104.sql0000775000000000000000000000043515152623414022103 0ustar rootroot-- Add disablereplicator column to mail_user if not existing, and ensure correct type ALTER TABLE `mail_user` ADD COLUMN IF NOT EXISTS `disablereplicator` enum('n','y') NOT NULL DEFAULT 'n'; ALTER TABLE `mail_user` MODIFY COLUMN `disablereplicator` enum('n','y') NOT NULL DEFAULT 'n'; ispconfig3_install/install/sql/incremental/upd_0011.sql0000775000000000000000000000011515114345330022067 0ustar rootroot-- use text for groups ALTER TABLE `sys_user` CHANGE `groups` `groups` TEXT; ispconfig3_install/install/sql/incremental/upd_0089.sql0000775000000000000000000001143215114345330022112 0ustar rootroot-- add new proxy_protocol column ALTER TABLE `web_domain` ADD COLUMN `proxy_protocol` ENUM('n','y') NOT NULL DEFAULT 'n' AFTER `log_retention`; -- backup format ALTER TABLE `web_domain` ADD `backup_format_web` VARCHAR( 255 ) NOT NULL default 'default' AFTER `backup_copies`; ALTER TABLE `web_domain` ADD `backup_format_db` VARCHAR( 255 ) NOT NULL default 'gzip' AFTER `backup_format_web`; -- end of backup format -- backup encryption ALTER TABLE `web_domain` ADD `backup_encrypt` enum('n','y') NOT NULL DEFAULT 'n' AFTER `backup_format_db`; ALTER TABLE `web_domain` ADD `backup_password` VARCHAR( 255 ) NOT NULL DEFAULT '' AFTER `backup_encrypt`; ALTER TABLE `web_backup` ADD `backup_format` VARCHAR( 64 ) NOT NULL DEFAULT '' AFTER `backup_mode`; ALTER TABLE `web_backup` ADD `backup_password` VARCHAR( 255 ) NOT NULL DEFAULT '' AFTER `filesize`; -- end of backup encryption -- rename Comodo to "Sectigo / Comodo CA" UPDATE `dns_ssl_ca` SET `ca_name` = 'Sectigo / Comodo CA' WHERE `ca_issue` = 'comodoca.com'; -- default php-fpm to ondemand mode ALTER TABLE `web_domain` ALTER pm SET DEFAULT 'ondemand'; ALTER TABLE `mail_user` ADD `purge_trash_days` INT NOT NULL DEFAULT '0' AFTER `move_junk`, ADD `purge_junk_days` INT NOT NULL DEFAULT '0' AFTER `purge_trash_days`; -- doveadm should be enabled for all mailboxes UPDATE `mail_user` set `disabledoveadm` = 'n'; -- add disablequota-status for quota-status policy daemon ALTER TABLE `mail_user` ADD `disablequota-status` ENUM('n','y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'n' AFTER `disabledoveadm`; -- add disableindexer-worker for solr search ALTER TABLE `mail_user` ADD `disableindexer-worker` ENUM('n','y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'n' AFTER `disablequota-status`; -- add SSHFP and DNAME record ALTER TABLE `dns_rr` CHANGE `type` `type` ENUM('A','AAAA','ALIAS','CNAME','DNAME','CAA','DS','HINFO','LOC','MX','NAPTR','NS','PTR','RP','SRV','SSHFP','TXT','TLSA','DNSKEY') NULL DEFAULT NULL AFTER `name`; -- change cc and sender_cc column type ALTER TABLE `mail_user` CHANGE `cc` `cc` TEXT CHARACTER SET utf8 COLLATE utf8_general_ci; -- remove SPDY option ALTER TABLE `web_domain` DROP COLUMN `enable_spdy`; -- was missing in incremental, inserted for fixing older installations ALTER TABLE `web_domain` ADD `folder_directive_snippets` TEXT NULL AFTER `https_port`; ALTER TABLE `web_domain` ADD `server_php_id` INT(11) UNSIGNED NOT NULL DEFAULT 0; UPDATE `web_domain` as w LEFT JOIN sys_group as g ON (g.groupid = w.sys_groupid) INNER JOIN `server_php` as p ON (w.fastcgi_php_version = CONCAT(p.name, ':', p.php_fastcgi_binary, ':', p.php_fastcgi_ini_dir) AND p.server_id IN (0, w.server_id) AND p.client_id IN (0, g.client_id)) SET w.server_php_id = p.server_php_id, w.fastcgi_php_version = '' WHERE 1; UPDATE `web_domain` as w LEFT JOIN sys_group as g ON (g.groupid = w.sys_groupid) INNER JOIN `server_php` as p ON (w.fastcgi_php_version = CONCAT(p.name, ':', p.php_fpm_init_script, ':', p.php_fpm_ini_dir, ':', p.php_fpm_pool_dir) AND p.server_id IN (0, w.server_id) AND p.client_id IN (0, g.client_id)) SET w.server_php_id = p.server_php_id, w.fastcgi_php_version = '' WHERE 1; ALTER TABLE `web_domain` CHANGE `apache_directives` `apache_directives` mediumtext NULL DEFAULT NULL; ALTER TABLE `web_domain` CHANGE `nginx_directives` `nginx_directives` mediumtext NULL DEFAULT NULL; -- add move to junk before/after option, default to after ALTER TABLE `mail_user` MODIFY `move_junk` enum('y','a','n') NOT NULL DEFAULT 'y'; -- Change id_rsa column to TEXT format ALTER TABLE `client` CHANGE `id_rsa` `id_rsa` TEXT CHARACTER SET utf8 COLLATE utf8_general_ci; ALTER TABLE `directive_snippets` ADD `update_sites` ENUM('y','n') NOT NULL DEFAULT 'n' ; -- Add DNSSEC Algorithm setting ALTER TABLE `dns_soa` ADD `dnssec_algo` SET('NSEC3RSASHA1','ECDSAP256SHA256') NULL DEFAULT NULL AFTER `dnssec_wanted`; UPDATE `dns_soa` SET `dnssec_algo` = 'NSEC3RSASHA1' WHERE `dnssec_algo` IS NULL AND dnssec_initialized = 'Y'; UPDATE `dns_soa` SET `dnssec_algo` = 'ECDSAP256SHA256' WHERE `dnssec_algo` IS NULL AND dnssec_initialized = 'N'; ALTER TABLE `dns_soa` CHANGE `dnssec_algo` `dnssec_algo` SET('NSEC3RSASHA1','ECDSAP256SHA256') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'ECDSAP256SHA256'; -- Fix issue #5635 ALTER TABLE `client_template` CHANGE `ssh_chroot` `ssh_chroot` VARCHAR(255) CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT ''; ALTER TABLE `client_template` CHANGE `web_php_options` `web_php_options` VARCHAR(255) CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT ''; -- add option to forward in lda, default to forward in mta except for existing forwards ALTER TABLE `mail_user` ADD `forward_in_lda` enum('n','y') NOT NULL default 'n' AFTER `cc`; UPDATE `mail_user` set `forward_in_lda` = 'y' where `cc` != '';ispconfig3_install/install/sql/incremental/upd_0020.sql0000775000000000000000000000030315114345330022066 0ustar rootrootALTER TABLE `web_domain` ADD `seo_redirect` VARCHAR( 255 ) default NULL AFTER `redirect_path`; ALTER TABLE `web_folder_user` ADD `server_id` INT( 11 ) NOT NULL DEFAULT '0' AFTER `sys_perm_other`;ispconfig3_install/install/sql/incremental/upd_0060.sql0000775000000000000000000000125215114345330022076 0ustar rootrootALTER TABLE `client` ADD `customer_no_template` VARCHAR( 255 ) NULL DEFAULT 'C[CUSTOMER_NO]' AFTER `ssh_rsa` , ADD `customer_no_start` INT NOT NULL DEFAULT '1' AFTER `customer_no_template` , ADD `customer_no_counter` INT NOT NULL DEFAULT '0' AFTER `customer_no_start` , ADD `added_date` DATE NOT NULL default '0000-00-00' AFTER `customer_no_counter` , ADD `added_by` VARCHAR( 255 ) NULL AFTER `added_date` ; ALTER TABLE `web_domain` ADD `added_date` DATE NOT NULL default '0000-00-00' AFTER `rewrite_rules` , ADD `added_by` VARCHAR( 255 ) NULL AFTER `added_date` ; ALTER TABLE `sys_session` ADD `permanent` ENUM('n','y') NOT NULL DEFAULT 'n' AFTER `last_updated`;ispconfig3_install/install/sql/incremental/upd_0005.sql0000775000000000000000000000006715114345330022100 0ustar rootrootALTER TABLE client ADD COLUMN company_id varchar(30); ispconfig3_install/install/sql/incremental/upd_0097.sql0000775000000000000000000000044115114345330022107 0ustar rootrootALTER TABLE `sys_user` ADD `otp_type` SET('none', 'email') NOT NULL DEFAULT 'none' AFTER `lost_password_reqtime`, ADD `otp_data` VARCHAR(255) NULL AFTER `otp_type`, ADD `otp_recovery` VARCHAR(64) NULL AFTER `otp_data`, ADD `otp_attempts` TINYINT NOT NULL DEFAULT '0' AFTER `otp_recovery`; ispconfig3_install/install/sql/incremental/upd_0001.sql0000775000000000000000000000013315114345330022066 0ustar rootrootALTER TABLE `web_domain` ADD `document_root_www` VARCHAR( 255 ) NULL AFTER `document_root`;ispconfig3_install/install/sql/incremental/upd_0086.sql0000775000000000000000000000075415114345330022114 0ustar rootrootALTER TABLE `web_domain` ADD COLUMN `ssl_letsencrypt_exclude` enum('n','y') NOT NULL DEFAULT 'n' AFTER `ssl_letsencrypt`; ALTER TABLE `remote_user` ADD `remote_access` ENUM('y','n') NOT NULL DEFAULT 'y' AFTER `remote_password`; ALTER TABLE `remote_user` ADD `remote_ips` TEXT AFTER `remote_access`; ALTER TABLE `server_php` ADD `active` enum('y','n') NOT NULL DEFAULT 'y' AFTER `php_fpm_pool_dir`; ALTER TABLE `web_domain` CHANGE `log_retention` `log_retention` INT(11) NOT NULL DEFAULT '10';ispconfig3_install/install/sql/incremental/upd_0004.sql0000775000000000000000000000213315114345330022073 0ustar rootroot-- -------------------------------------------------------- -- tables for the FAQ module CREATE TABLE `help_faq_sections` ( `hfs_id` int(11) NOT NULL AUTO_INCREMENT, `hfs_name` varchar(255) DEFAULT NULL, `hfs_order` int(11) DEFAULT '0', `sys_userid` int(11) DEFAULT NULL, `sys_groupid` int(11) DEFAULT NULL, `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, PRIMARY KEY (`hfs_id`) ) AUTO_INCREMENT=1; INSERT INTO `help_faq_sections` VALUES (1,'General',0,NULL,NULL,NULL,NULL,NULL); CREATE TABLE `help_faq` ( `hf_id` int(11) NOT NULL AUTO_INCREMENT, `hf_section` int(11) DEFAULT NULL, `hf_order` int(11) DEFAULT '0', `hf_question` text, `hf_answer` text, `sys_userid` int(11) DEFAULT NULL, `sys_groupid` int(11) DEFAULT NULL, `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, PRIMARY KEY (`hf_id`) ) AUTO_INCREMENT=1; INSERT INTO `help_faq` VALUES (1,1,0,'I\'d like to know ...','Yes, of course.',1,1,'riud','riud','r'); ispconfig3_install/install/sql/incremental/upd_0067.sql0000775000000000000000000000066615114345330022115 0ustar rootrootALTER TABLE `client` ADD `web_servers` blob NOT NULL AFTER `default_webserver`, ADD `mail_servers` blob NOT NULL AFTER `default_mailserver`, ADD `db_servers` blob NOT NULL AFTER `default_dbserver`, ADD `dns_servers` blob NOT NULL AFTER `default_dnsserver`; UPDATE `client` SET `web_servers` = `default_webserver`, `mail_servers` = `default_mailserver`, `db_servers` = `default_dbserver`, `dns_servers` = `default_dnsserver` WHERE 1; ispconfig3_install/install/sql/incremental/upd_0085.sql0000775000000000000000000000557715114345330022123 0ustar rootroot-- folder_directive_snippets was missing in incremental, inserted for fixing older installations ALTER TABLE `web_domain` ADD `folder_directive_snippets` TEXT NULL AFTER `https_port`; ALTER TABLE `web_domain` CHANGE `folder_directive_snippets` `folder_directive_snippets` TEXT CHARACTER SET utf8 COLLATE utf8_general_ci NULL; ALTER TABLE `web_domain` ADD `log_retention` INT NOT NULL DEFAULT '30' AFTER `https_port`; ALTER TABLE `web_domain` CHANGE `stats_type` `stats_type` VARCHAR(255) CHARACTER SET utf8 COLLATE utf8_general_ci NULL DEFAULT 'awstats'; ALTER TABLE `spamfilter_policy` CHANGE `virus_lover` `virus_lover` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N', CHANGE `spam_lover` `spam_lover` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N', CHANGE `banned_files_lover` `banned_files_lover` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N', CHANGE `bad_header_lover` `bad_header_lover` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N', CHANGE `bypass_virus_checks` `bypass_virus_checks` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N', CHANGE `bypass_spam_checks` `bypass_spam_checks` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N', CHANGE `bypass_banned_checks` `bypass_banned_checks` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N', CHANGE `bypass_header_checks` `bypass_header_checks` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N', CHANGE `spam_modifies_subj` `spam_modifies_subj` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N', CHANGE `warnvirusrecip` `warnvirusrecip` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N', CHANGE `warnbannedrecip` `warnbannedrecip` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N', CHANGE `warnbadhrecip` `warnbadhrecip` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N'; ALTER TABLE `dns_rr` CHANGE `data` `data` TEXT NOT NULL; ALTER TABLE `web_database` CHANGE `database_quota` `database_quota` INT(11) NULL DEFAULT NULL; ALTER TABLE `web_domain` ADD `log_retention` INT NOT NULL DEFAULT '30' ; ALTER TABLE spamfilter_policy CHANGE spam_tag_level spam_tag_level DECIMAL(5,2) NULL DEFAULT NULL, CHANGE spam_tag2_level spam_tag2_level DECIMAL(5,2) NULL DEFAULT NULL, CHANGE spam_kill_level spam_kill_level DECIMAL(5,2) NULL DEFAULT NULL, CHANGE spam_dsn_cutoff_level spam_dsn_cutoff_level DECIMAL(5,2) NULL DEFAULT NULL, CHANGE spam_quarantine_cutoff_level spam_quarantine_cutoff_level DECIMAL(5,2) NULL DEFAULT NULL; UPDATE `web_database` as d LEFT JOIN `web_domain` as w ON (w.domain_id = d.parent_domain_id) SET d.parent_domain_id = 0 WHERE w.domain_id IS NULL AND d.parent_domain_id != 0 AND (SELECT EXISTS(SELECT * FROM web_domain)); ispconfig3_install/install/sql/incremental/upd_0033.sql0000775000000000000000000000100315114345330022070 0ustar rootrootCREATE TABLE IF NOT EXISTS `client_circle` ( `circle_id` int(11) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `circle_name` varchar(64) DEFAULT NULL, `client_ids` text, `description` text, `active` enum('n','y') NOT NULL default 'y', PRIMARY KEY (`circle_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ;ispconfig3_install/install/sql/incremental/upd_0081.sql0000775000000000000000000003751015114345330022107 0ustar rootrootALTER TABLE `mail_user` CHANGE `uid` `uid` int(11) NOT NULL DEFAULT '5000', CHANGE `gid` `gid` int(11) NOT NULL DEFAULT '5000'; ALTER TABLE `mail_user` ADD COLUMN `sender_cc` varchar(255) NOT NULL DEFAULT '' AFTER `cc`; ALTER TABLE `client_template` ADD `default_mailserver` INT(11) NOT NULL DEFAULT 1; ALTER TABLE `client_template` ADD `default_webserver` INT(11) NOT NULL DEFAULT 1; ALTER TABLE `client_template` ADD `default_dnsserver` INT(11) NOT NULL DEFAULT 1; ALTER TABLE `client_template` ADD `default_slave_dnsserver` INT(11) NOT NULL DEFAULT 1; ALTER TABLE `client_template` ADD `default_dbserver` INT(11) NOT NULL DEFAULT 1; ALTER TABLE `client_template` ADD COLUMN `default_xmppserver` int(11) unsigned NOT NULL DEFAULT '1', ADD COLUMN `xmpp_servers` blob, ADD COLUMN `limit_xmpp_domain` int(11) NOT NULL DEFAULT '-1', ADD COLUMN `limit_xmpp_user` int(11) NOT NULL DEFAULT '-1', ADD COLUMN `limit_xmpp_muc` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_anon` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_vjud` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_proxy` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_status` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_pastebin` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_httparchive` ENUM( 'n', 'y' ) NOT NULL default 'n'; ALTER TABLE `client` ADD `contact_firstname` VARCHAR( 64 ) NOT NULL DEFAULT '' AFTER `gender`; UPDATE `dns_template` SET `fields` = 'DOMAIN,IP,NS1,NS2,EMAIL,DKIM,DNSSEC' WHERE `dns_template`.`template_id` =1; UPDATE `dns_template` SET `template` = '[ZONE] origin={DOMAIN}. ns={NS1}. mbox={EMAIL}. refresh=7200 retry=540 expire=604800 minimum=3600 ttl=3600 [DNS_RECORDS] A|{DOMAIN}.|{IP}|0|3600 A|www|{IP}|0|3600 A|mail|{IP}|0|3600 NS|{DOMAIN}.|{NS1}.|0|3600 NS|{DOMAIN}.|{NS2}.|0|3600 MX|{DOMAIN}.|mail.{DOMAIN}.|10|3600 TXT|{DOMAIN}.|v=spf1 mx a ~all|0|3600' WHERE `dns_template`.`template_id` = 1; ALTER TABLE `sys_user` ADD `lost_password_function` TINYINT(1) NOT NULL DEFAULT '1' ; ALTER TABLE `mail_backup` CHANGE `filesize` `filesize` VARCHAR(20) NOT NULL DEFAULT ''; ALTER TABLE `web_backup` CHANGE `filesize` `filesize` VARCHAR(20) NOT NULL DEFAULT ''; ALTER TABLE `sys_datalog` ADD INDEX `dbtable` (`dbtable` (25), `dbidx` (25)), ADD INDEX (`action`); ALTER TABLE `mail_user` ADD `greylisting` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `postfix`; ALTER TABLE `mail_user` ADD `maildir_format` varchar(255) NOT NULL default 'maildir' AFTER `maildir`; ALTER TABLE `mail_forwarding` ADD `greylisting` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `active`; ALTER TABLE `openvz_ip` CHANGE `ip_address` `ip_address` VARCHAR(39) DEFAULT NULL; -- XMPP Support ALTER TABLE `server` ADD COLUMN `xmpp_server` tinyint(1) NOT NULL default '0' AFTER `firewall_server`; ALTER TABLE `client` ADD COLUMN `default_xmppserver` int(11) unsigned NOT NULL DEFAULT '1', ADD COLUMN `xmpp_servers` blob, ADD COLUMN `limit_xmpp_domain` int(11) NOT NULL DEFAULT '-1', ADD COLUMN `limit_xmpp_user` int(11) NOT NULL DEFAULT '-1', ADD COLUMN `limit_xmpp_muc` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_anon` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_auth_options` varchar(255) NOT NULL DEFAULT 'plain,hashed,isp', ADD COLUMN `limit_xmpp_vjud` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_proxy` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_status` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_pastebin` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_httparchive` ENUM( 'n', 'y' ) NOT NULL default 'n'; CREATE TABLE `xmpp_domain` ( `domain_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL default '', `sys_perm_group` varchar(5) NOT NULL default '', `sys_perm_other` varchar(5) NOT NULL default '', `server_id` int(11) unsigned NOT NULL default '0', `domain` varchar(255) NOT NULL default '', `management_method` ENUM( 'normal', 'maildomain' ) NOT NULL default 'normal', `public_registration` ENUM( 'n', 'y' ) NOT NULL default 'n', `registration_url` varchar(255) NOT NULL DEFAULT '', `registration_message` varchar(255) NOT NULL DEFAULT '', `domain_admins` text, `use_pubsub` enum('n','y') NOT NULL DEFAULT 'n', `use_proxy` enum('n','y') NOT NULL DEFAULT 'n', `use_anon_host` enum('n','y') NOT NULL DEFAULT 'n', `use_vjud` enum('n','y') NOT NULL DEFAULT 'n', `vjud_opt_mode` enum('in', 'out') NOT NULL DEFAULT 'in', `use_muc_host` enum('n','y') NOT NULL DEFAULT 'n', `muc_name` varchar(30) NOT NULL DEFAULT '', `muc_restrict_room_creation` enum('n', 'y', 'm') NOT NULL DEFAULT 'm', `muc_admins` text, `use_pastebin` enum('n','y') NOT NULL DEFAULT 'n', `pastebin_expire_after` int(3) NOT NULL DEFAULT 48, `pastebin_trigger` varchar(10) NOT NULL DEFAULT '!paste', `use_http_archive` enum('n','y') NOT NULL DEFAULT 'n', `http_archive_show_join` enum('n', 'y') NOT NULL DEFAULT 'n', `http_archive_show_status` enum('n', 'y') NOT NULL DEFAULT 'n', `use_status_host` enum('n','y') NOT NULL DEFAULT 'n', `ssl_state` varchar(255) NULL, `ssl_locality` varchar(255) NULL, `ssl_organisation` varchar(255) NULL, `ssl_organisation_unit` varchar(255) NULL, `ssl_country` varchar(255) NULL, `ssl_email` varchar(255) NULL, `ssl_request` mediumtext NULL, `ssl_cert` mediumtext NULL, `ssl_bundle` mediumtext NULL, `ssl_key` mediumtext NULL, `ssl_action` varchar(16) NULL, `active` enum('n','y') NOT NULL DEFAULT 'n', PRIMARY KEY (`domain_id`), KEY `server_id` (`server_id`,`domain`), KEY `domain_active` (`domain`,`active`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; -- -- Table structure for table `xmpp_user` -- CREATE TABLE `xmpp_user` ( `xmppuser_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL default '', `sys_perm_group` varchar(5) NOT NULL default '', `sys_perm_other` varchar(5) NOT NULL default '', `server_id` int(11) unsigned NOT NULL default '0', `jid` varchar(255) NOT NULL default '', `password` varchar(255) NOT NULL default '', `active` enum('n','y') NOT NULL DEFAULT 'n', PRIMARY KEY (`xmppuser_id`), KEY `server_id` (`server_id`,`jid`), KEY `jid_active` (`jid`,`active`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- ALTER TABLE `sys_ini` ADD `default_logo` TEXT CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL , ADD `custom_logo` TEXT CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL ; UPDATE `sys_ini` SET `default_logo` = 'data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAMgAAABBCAYAAACU5+uOAAAItUlEQVR42u1dCWwVVRStUJZCK6HsFNAgWpaCJkKICZKApKUFhURQpEnZF4EEUJZYEEpBIamgkQpUQBZRW7YCBqQsggsQEAgKLbIGCYsSCNqyQ8D76h18Hd/MvJk/n/bXc5KT+TNz79vPzNv+/2FhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAe++s0akTsRZxMnE6cGkKcxkwhPofaBPwWRzxxB/EO8UGI8xhxEGoV8EscY8qBKFRcgdoFAhXHC+VUHAbHo5aBQASyrZwL5DoxEjUNeBXI9XIuEMEE1DTgVSA3FA3qIDEtBLnTQiBDUNOAV4EUKhpURojmZQQEAjwKgSwK0bykWQgEU74ABAKBABAIBOIJffoNrkRsS0whDiMO5uNw4gBiSxvfGOJrbDtMOgr2JNa18HmZmETsopnGp4h9xdF0TcQRb8NEPkawTzv2qaWIoybnZYRUBoJD+difGAuBlCy0qsRM4mfERcTFfGygsBUF/xFxE/EQ8RixwIbi/j7il8R3iE8qwuxAXMJxuuFiTvNMYleb/E0gXiI+cOBaISTJrzLxcw2/+8Q5pjjfNNkM0RDILLadpbimw+bsc4DPkxRpuqkZ1orisoBAiguuhkUhPSvZRBA3u6gsK94g9jDFP9aHcAV3EKNNYX8i3RcNJ4M4nTiROJCYykIzbGZKvouk68vYbyS/cUbz+RrJZpzkO5Sv3eajaJhRDvUwg21nKK4VcF5WKPgFH6PZZw/7dJXC6S6lczunfbIQLpeDkZ+lJcoCAikuvChioaLBtfD4JHPiXSFKKexBPoa9Wwr3ael6skMZDGO7K3z+uOSb5OA7mu2KiOGmPH3ADVh8/sohnDS2S1NcG+uiO/kd+8RL146YRWzj359tb0Eg+gIpsHkjFNrQqiF3DZJABDtyuCP5/FuNRlHN8Ofz9nx+XLNR3jR1c4w8TSFGSmnr4FEgU7wKhI51jAeTpv+/ZQGBOAuEu1d/Ku6LV35t9rdigkUjHuMgkHPEecQsxdjjUx4zHbMI+10OdzqfZ2o0iiqSfzgPfMXnzZqN6iTbJ5jytMTU0E97FEhaAAJ5kc/PuJjQOCoIgegJpKbUl5b5vGaBT+A+vOgn5/JYIdFBIOs1wo1kIZl93+P70/h8oUZYFXkmKInPU9h3m2YeT8lvRilPyyWbi3xt4iMWSDc+P4lp3uAIRDxdryjui6dmuujXcr91IDcMmaJv31WISfTrLeJXCUT3yb1a4Ztmalyu61MaZG/XtD9tapRGnpZKNp2lNNZ3KZARAQgk3untBYEEPgbJ92FsIAax34v1AQ2B5Go2BlW60n0QyCC/BWISdJ5LgewWU8k86DdTzMyNh0BKVyAzfB5I93YQyBGeTlW9lQbwIle2Rdgzy7BAxJT6Hb6X6EIgTrznRSCiHli02cwcPor1pbkQiL5AKvOA+ZZPAtkfxFms3j4IZHAwBGJaRPxdjH00BSImJRqKOlEwjtjUo0Dm2pWla4HMzsyqQIxSMKI8C8RkL9YXuhDf5gqcw4NweaZJiGkh8UeLwi+Utkb4KZCrYszkVSDiQRDMN4hkf5DvZ2gKZJyLPJgFkmAjEDEF3EYSWzPeklO8Q8CLQGKJhQquK+eDdLFNZBJxFLEf8XUXFTbcYv2kRhAEIq+vGNO88zTTKVaRzxPrSSvPW11O8yZqCiROSnMsX0sP0ixWops1Hfbx/AaJIz5QcFc5n+ZVNcbxmoWtEsBNB4EU8Tgk32Gv1wneEybeWG1N8RoNbplmOo2neiyxE3/eoun7G9t31hGIqXuzl8/HB0kgxhvhD03/KoEIpIWFQPLK+UJhkWpgKLZP8IKhajNhJg8A7yt8/5K6QoFM8z5mc68Ph3VWM6wTbN+a+AR/vqThV13KYyMXAgmXps9FnK8GSSA17KaXFf7R3gUyd8H/TiBss9fngfQehzfMpkDLgxcS73J4k1y85WrxtTtOjZPuVZA2O55RhLfUId5XpI2UHwZDIHxtp7HtRrVL25SfhWy7z7VAMuYvipszd0FJcfxzHspdrMctGnGcZNPTZ4F0VszqyPSlPHm8JG9f2SDtgF3Nq/rnJZssyXeUdP0CN64c9l/FDfGyZNNNkaeVGmnMM+Vdtd19los8/2e7Ow/E70lxiG7pRmkn8AaeULlcoo4sBDLfKvL0nLUxablfX0hfmfuQ01avI65fUQYEkupRIJHcAMwbDWNNdmLgupV4zeMO3stcIZ1M4aYo4vZt0oO7Locd0ndGTEQofN+QxiZ22+y7W+RpgUb66vOU7232SZXupZqvaYT3Dfu8ZLrejtc47mvkJ9FoVEWKBmW7dyc7ZXD1Nb2TH3JVn5Tqa3r1repzY6/gwWeqhUCGO/XjWSTmjYYVLOzFoP0Z/qJTks033brxrtjmxCbGtK4ivEqKuH2fNuc0tDatIYgna4yGbz2eeTL8WhJbic2aDnmqqpm2KlLeK5vWn0pc0wirGvtUtBkzNdPKDzWe24oGdZX4CzGfWCD4U93GBQdqNSw4Uiny8K9h4buOhlU2scq+Q1G1i233k63hFwBPEfcS04l1FGJoynbH+fgz8ZKFQJLDAMDjk/psCPzw20XxE6mmdLd24d8KNQ14FciUEPl1xHvEhlK6W2j65aOWgUAEUpV4NEREstyDQNqjloFARVKL/xukrAvkGjGC09zGwfYKsQdqF/BTKMnEJcTtxC3EPAU3iic5cRkfjc/ZFvZuuZm4gXjOouG35LQ2Yfutkq/4pfpN/E9TDVCjQGkJqQExho+CjYlRPseRiQE3EIriaMZTw4K3mOJv23J8jme23RsEAMqqQJrb9PnnEbPEVpUAuJD4Mf/PoCqeONQCUJYFElGKf7ojpnqjUQtAWRdJaf1t2w8ofSAUBNKulATSEaUPhIpIRj9icbyFUgdCTSRTeR0i2HwfpQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBnG392D9QU+JXhxAAAAAElFTkSuQmCC' WHERE `sys_ini`.`sysini_id` = 1; ALTER TABLE `directive_snippets` ADD `required_php_snippets` VARCHAR(255) NOT NULL DEFAULT '' AFTER `customer_viewable`; ALTER TABLE `dns_rr` CHANGE `ttl` `ttl` INT(11) UNSIGNED NOT NULL DEFAULT '3600'; ALTER TABLE `dns_soa` CHANGE `minimum` `minimum` INT(11) UNSIGNED NOT NULL DEFAULT '3600', CHANGE `ttl` `ttl` INT(11) UNSIGNED NOT NULL DEFAULT '3600'; ALTER TABLE `client` CHANGE `web_php_options` `web_php_options` VARCHAR(255) NOT NULL DEFAULT 'no,fast-cgi,cgi,mod,suphp,php-fpm,hhvm'; ALTER TABLE `web_domain` ADD COLUMN `enable_pagespeed` ENUM('y','n') NOT NULL DEFAULT 'n' AFTER `directive_snippets_id`; ALTER TABLE openvz_template ADD COLUMN `features` varchar(255) DEFAULT NULL AFTER `capability`; ALTER TABLE openvz_vm ADD COLUMN `features` TEXT DEFAULT NULL AFTER `capability`; ALTER TABLE openvz_template ADD COLUMN `iptables` varchar(255) DEFAULT NULL AFTER `features`; ALTER TABLE openvz_vm ADD COLUMN `iptables` TEXT DEFAULT NULL AFTER `features`; CREATE TABLE `server_ip_map` ( `server_ip_map_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) unsigned NOT NULL DEFAULT '0', `source_ip` varchar(15) DEFAULT NULL, `destination_ip` varchar(35) DEFAULT '', `active` enum('n','y') NOT NULL DEFAULT 'y', PRIMARY KEY (`server_ip_map_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ALTER TABLE `web_domain` ADD COLUMN `rewrite_to_https` ENUM('y','n') NOT NULL DEFAULT 'n' AFTER `seo_redirect`; ALTER TABLE openvz_ip ADD COLUMN `additional` VARCHAR(255) NOT NULL DEFAULT 'n'; ALTER TABLE openvz_template ADD COLUMN `custom` text; ALTER TABLE openvz_vm ADD COLUMN `bootorder` INT(11) NOT NULL DEFAULT '1' AFTER `start_boot`, ADD COLUMN `custom` text; ALTER TABLE `web_domain` ADD `ssl_letsencrypt` enum('n','y') NOT NULL DEFAULT 'n' AFTER `ssl`; ALTER TABLE `openvz_template` CHANGE `vmguarpages` `vmguarpages` varchar(255) DEFAULT '65536:unlimited'; ALTER TABLE `openvz_template` CHANGE `privvmpages` `privvmpages` varchar(255) DEFAULT '131072:139264'; CREATE TABLE `ftp_traffic` ( `hostname` varchar(255) NOT NULL, `traffic_date` date NOT NULL, `in_bytes` bigint(32) unsigned NOT NULL, `out_bytes` bigint(32) unsigned NOT NULL, UNIQUE KEY (`hostname`,`traffic_date`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ALTER TABLE `mail_forwarding` ADD COLUMN `allow_send_as` ENUM('n','y') NOT NULL DEFAULT 'n' AFTER `active`; UPDATE `mail_forwarding` SET `allow_send_as` = 'y' WHERE `type` = 'alias'; ALTER TABLE `dns_rr` CHANGE COLUMN `type` `type` ENUM('A','AAAA','ALIAS','CNAME','DS','HINFO','LOC','MX','NAPTR','NS','PTR','RP','SRV','TXT','TLSA','DNSKEY') NULL DEFAULT NULL AFTER `name`; ALTER TABLE `dns_soa` ADD COLUMN `dnssec_initialized` ENUM('Y','N') NOT NULL DEFAULT 'N', ADD COLUMN `dnssec_wanted` ENUM('Y','N') NOT NULL DEFAULT 'N', ADD COLUMN `dnssec_last_signed` BIGINT NOT NULL DEFAULT '0', ADD COLUMN `dnssec_info` TEXT NULL; ALTER TABLE `client` ADD COLUMN `limit_ssl_letsencrypt` enum('n','y') NOT NULL DEFAULT 'n' AFTER `limit_ssl`; ALTER TABLE `client_template` ADD COLUMN `limit_ssl_letsencrypt` enum('n','y') NOT NULL DEFAULT 'n' AFTER `limit_ssl`; ALTER TABLE `client` ADD COLUMN `limit_directive_snippets` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_backup`; ALTER TABLE `client_template` ADD COLUMN `limit_directive_snippets` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_backup`; ALTER TABLE `sys_user` ADD COLUMN `lost_password_hash` VARCHAR(50) NOT NULL DEFAULT '', ADD COLUMN `lost_password_reqtime` DATETIME NULL default NULL; ALTER TABLE `web_database` ADD COLUMN `quota_exceeded` enum('n','y') NOT NULL DEFAULT 'n' AFTER `database_quota`; ALTER TABLE `client` ADD COLUMN `limit_database_user` int(11) NOT NULL DEFAULT '-1' after limit_database; ALTER TABLE `client_template` ADD COLUMN `limit_database_user` int(11) NOT NULL DEFAULT '-1' after limit_database; ALTER TABLE `client` CHANGE `customer_no_template` `customer_no_template` VARCHAR(255) NULL DEFAULT 'R[CLIENTID]C[CUSTOMER_NO]'; ALTER TABLE `client` CHANGE `added_date` `added_date` DATE NULL DEFAULT NULL; ALTER TABLE `ftp_user` CHANGE `expires` `expires` DATETIME NULL DEFAULT NULL; ALTER TABLE `mail_user` CHANGE `autoresponder_start_date` `autoresponder_start_date` DATETIME NULL DEFAULT NULL; ALTER TABLE `mail_user` CHANGE `autoresponder_end_date` `autoresponder_end_date` DATETIME NULL DEFAULT NULL; ALTER TABLE `openvz_traffic` CHANGE `traffic_date` `traffic_date` DATE NULL DEFAULT NULL; ALTER TABLE `openvz_vm` CHANGE `active_until_date` `active_until_date` DATE NULL DEFAULT NULL; ALTER TABLE `sys_session` CHANGE `date_created` `date_created` DATETIME NULL DEFAULT NULL; ALTER TABLE `sys_session` CHANGE `last_updated` `last_updated` DATETIME NULL DEFAULT NULL; ALTER TABLE `web_domain` CHANGE `added_date` `added_date` DATE NULL DEFAULT NULL; ALTER TABLE `web_traffic` CHANGE `traffic_date` `traffic_date` DATE NULL DEFAULT NULL; UPDATE `client` SET `added_date` = NULL WHERE `added_date` = '0000-00-00'; UPDATE `ftp_user` SET `expires` = NULL WHERE `expires` = '0000-00-00 00:00:00'; UPDATE `mail_user` SET `autoresponder_start_date` = NULL WHERE `autoresponder_start_date` = '0000-00-00 00:00:00'; UPDATE `mail_user` SET `autoresponder_end_date` = NULL WHERE `autoresponder_end_date` = '0000-00-00 00:00:00'; UPDATE `openvz_traffic` SET `traffic_date` = NULL WHERE `traffic_date` = '0000-00-00'; UPDATE `openvz_vm` SET `active_until_date` = NULL WHERE `active_until_date` = '0000-00-00'; UPDATE `sys_session` SET `date_created` = NULL WHERE `date_created` = '0000-00-00 00:00:00'; UPDATE `sys_session` SET `last_updated` = NULL WHERE `last_updated` = '0000-00-00 00:00:00'; UPDATE `web_domain` SET `added_date` = NULL WHERE `added_date` = '0000-00-00'; UPDATE `web_traffic` SET `traffic_date` = NULL WHERE `traffic_date` = '0000-00-00'; ALTER TABLE `web_domain` ADD `http_port` INT NOT NULL DEFAULT '80' , ADD `https_port` INT NOT NULL DEFAULT '443' ; ispconfig3_install/install/sql/incremental/upd_0058.sql0000775000000000000000000000033715114345330022110 0ustar rootrootALTER TABLE `client` ADD COLUMN `can_use_api` enum('n','y') NOT NULL DEFAULT 'n' AFTER `canceled`; ALTER TABLE `remote_session` ADD COLUMN `client_login` tinyint(1) unsigned NOT NULL default '0' AFTER `remote_functions`; ispconfig3_install/install/sql/incremental/upd_0062.sql0000775000000000000000000000113315114345330022076 0ustar rootrootCREATE TABLE `mail_backup` ( `backup_id` int(10) unsigned NOT NULL AUTO_INCREMENT, `server_id` int(10) unsigned NOT NULL, `parent_domain_id` int(10) unsigned NOT NULL, `mailuser_id` int(10) unsigned NOT NULL, `backup_mode` varchar(64) NOT NULL DEFAULT '', `tstamp` int(10) unsigned NOT NULL, `filename` varchar(255) NOT NULL, `filesize` VARCHAR(10) NOT NULL, PRIMARY KEY (`backup_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ALTER TABLE `mail_user` ADD `backup_interval` VARCHAR( 255 ) NOT NULL DEFAULT 'none'; ALTER TABLE `mail_user` ADD `backup_copies` INT NOT NULL DEFAULT '1'; ispconfig3_install/install/sql/incremental/upd_0100.sql0000775000000000000000000000132315114345330022070 0ustar rootrootINSERT IGNORE INTO `dns_ssl_ca` (`id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `active`, `ca_name`, `ca_issue`, `ca_wildcard`, `ca_iodef`, `ca_critical`) VALUES (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Amazon Trust Services', 'amazontrust.com', 'Y', '', 0); -- 5374-mail-last-accessed-frontend ALTER TABLE `mail_user` ADD `last_access` int(11) NULL DEFAULT NULL after `disabledoveadm`; ALTER TABLE `web_domain` ADD `disable_symlinknotowner` enum('n','y') NOT NULL default 'n' AFTER `last_jailkit_hash`; UPDATE `web_domain` SET `backup_format_web` = 'tar_gzip' WHERE `backup_format_web` = 'rar'; UPDATE `web_domain` SET `backup_format_db` = 'zip' WHERE `backup_format_db` = 'rar';ispconfig3_install/install/sql/incremental/upd_0019.sql0000775000000000000000000000421215114345330022101 0ustar rootrootCREATE TABLE IF NOT EXISTS `help_faq` ( `hf_id` int(11) NOT NULL AUTO_INCREMENT, `hf_section` int(11) DEFAULT NULL, `hf_order` int(11) DEFAULT '0', `hf_question` text, `hf_answer` text, `sys_userid` int(11) DEFAULT NULL, `sys_groupid` int(11) DEFAULT NULL, `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, PRIMARY KEY (`hf_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; CREATE TABLE IF NOT EXISTS `help_faq_sections` ( `hfs_id` int(11) NOT NULL AUTO_INCREMENT, `hfs_name` varchar(255) DEFAULT NULL, `hfs_order` int(11) DEFAULT '0', `sys_userid` int(11) DEFAULT NULL, `sys_groupid` int(11) DEFAULT NULL, `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, PRIMARY KEY (`hfs_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; CREATE TABLE IF NOT EXISTS `web_folder` ( `web_folder_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `parent_domain_id` int(11) NOT NULL DEFAULT '0', `path` varchar(255) DEFAULT NULL, `active` varchar(255) NOT NULL DEFAULT 'y', PRIMARY KEY (`web_folder_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; CREATE TABLE IF NOT EXISTS `web_folder_user` ( `web_folder_user_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `web_folder_id` int(11) NOT NULL DEFAULT '0', `username` varchar(255) DEFAULT NULL, `password` varchar(255) DEFAULT NULL, `active` varchar(255) NOT NULL DEFAULT 'y', PRIMARY KEY (`web_folder_user_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; DROP TABLE `mail_greylist`; DROP TABLE `firewall_filter`; DROP TABLE `firewall_forward`; DROP TABLE `proxy_reverse`; ispconfig3_install/install/sql/incremental/upd_0025.sql0000775000000000000000000000052215114345330022076 0ustar rootrootALTER TABLE `web_domain` ADD `pm_max_children` INT NOT NULL DEFAULT '50' AFTER `php_fpm_use_socket` , ADD `pm_start_servers` INT NOT NULL DEFAULT '20' AFTER `pm_max_children` , ADD `pm_min_spare_servers` INT NOT NULL DEFAULT '5' AFTER `pm_start_servers` , ADD `pm_max_spare_servers` INT NOT NULL DEFAULT '35' AFTER `pm_min_spare_servers`;ispconfig3_install/install/sql/incremental/upd_0088.sql0000775000000000000000000000572015114345330022114 0ustar rootroot-- rspamd ALTER TABLE `spamfilter_policy` ADD `rspamd_greylisting` ENUM('n','y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'n' AFTER `policyd_greylist`; ALTER TABLE `spamfilter_policy` ADD `rspamd_spam_greylisting_level` DECIMAL(5,2) NULL DEFAULT NULL AFTER `rspamd_greylisting`; ALTER TABLE `spamfilter_policy` ADD `rspamd_spam_tag_level` DECIMAL(5,2) NULL DEFAULT NULL AFTER `rspamd_spam_greylisting_level`; ALTER TABLE `spamfilter_policy` ADD `rspamd_spam_tag_method` ENUM('add_header','rewrite_subject') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'rewrite_subject' AFTER `rspamd_spam_tag_level`; ALTER TABLE `spamfilter_policy` ADD `rspamd_spam_kill_level` DECIMAL(5,2) NULL DEFAULT NULL AFTER `rspamd_spam_tag_method`; UPDATE `spamfilter_policy` SET `rspamd_greylisting` = 'y' WHERE id = 4; UPDATE `spamfilter_policy` SET `rspamd_greylisting` = 'y' WHERE id = 5; UPDATE `spamfilter_policy` SET `rspamd_greylisting` = 'y' WHERE id = 6; UPDATE `spamfilter_policy` SET `rspamd_spam_greylisting_level` = '4.00'; UPDATE `spamfilter_policy` SET `rspamd_spam_greylisting_level` = '6.00' WHERE id = 1; UPDATE `spamfilter_policy` SET `rspamd_spam_greylisting_level` = '999.00' WHERE id = 2; UPDATE `spamfilter_policy` SET `rspamd_spam_greylisting_level` = '999.00' WHERE id = 3; UPDATE `spamfilter_policy` SET `rspamd_spam_greylisting_level` = '2.00' WHERE id = 6; UPDATE `spamfilter_policy` SET `rspamd_spam_greylisting_level` = '7.00' WHERE id = 7; UPDATE `spamfilter_policy` SET `rspamd_spam_tag_level` = '6.00'; UPDATE `spamfilter_policy` SET `rspamd_spam_tag_level` = '8.00' WHERE id = 1; UPDATE `spamfilter_policy` SET `rspamd_spam_tag_level` = '999.00' WHERE id = 2; UPDATE `spamfilter_policy` SET `rspamd_spam_tag_level` = '999.00' WHERE id = 3; UPDATE `spamfilter_policy` SET `rspamd_spam_tag_level` = '4.00' WHERE id = 6; UPDATE `spamfilter_policy` SET `rspamd_spam_tag_level` = '10.00' WHERE id = 7; UPDATE `spamfilter_policy` SET `rspamd_spam_kill_level` = '10.00'; UPDATE `spamfilter_policy` SET `rspamd_spam_kill_level` = '12.00' WHERE id = 1; UPDATE `spamfilter_policy` SET `rspamd_spam_kill_level` = '999.00' WHERE id = 2; UPDATE `spamfilter_policy` SET `rspamd_spam_kill_level` = '999.00' WHERE id = 3; UPDATE `spamfilter_policy` SET `rspamd_spam_kill_level` = '8.00' WHERE id = 6; UPDATE `spamfilter_policy` SET `rspamd_spam_kill_level` = '20.00' WHERE id = 7; -- end of rspamd ALTER TABLE `client` CHANGE COLUMN `password` `password` VARCHAR(200) DEFAULT NULL; ALTER TABLE `ftp_user` CHANGE COLUMN `password` `password` VARCHAR(200) DEFAULT NULL; ALTER TABLE `shell_user` CHANGE COLUMN `password` `password` VARCHAR(200) DEFAULT NULL; ALTER TABLE `sys_user` CHANGE COLUMN `passwort` `passwort` VARCHAR(200) DEFAULT NULL; ALTER TABLE `webdav_user` CHANGE COLUMN `password` `password` VARCHAR(200) DEFAULT NULL; DELETE FROM sys_cron WHERE `next_run` IS NOT NULL AND `next_run` >= DATE_ADD(`last_run`, INTERVAL 30 DAY) AND `next_run` BETWEEN '2020-01-01' AND '2020-01-02';ispconfig3_install/install/sql/incremental/upd_0034.sql0000775000000000000000000000457215114345330022107 0ustar rootroot-- -------------------------------------------------------- -- -- Table structure for table `aps_instances` -- CREATE TABLE IF NOT EXISTS `aps_instances` ( `id` int(4) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `customer_id` int(4) NOT NULL, `package_id` int(4) NOT NULL, `instance_status` int(4) NOT NULL, PRIMARY KEY (`id`) ) DEFAULT CHARSET=utf8 ; -- -------------------------------------------------------- -- -- Table structure for table `aps_instances_settings` -- CREATE TABLE IF NOT EXISTS `aps_instances_settings` ( `id` int(4) NOT NULL AUTO_INCREMENT, `server_id` int(11) NOT NULL DEFAULT '0', `instance_id` int(4) NOT NULL, `name` varchar(255) NOT NULL, `value` text NOT NULL, PRIMARY KEY (`id`) ) DEFAULT CHARSET=utf8 ; -- -------------------------------------------------------- -- -- Table structure for table `aps_packages` -- CREATE TABLE IF NOT EXISTS `aps_packages` ( `id` int(4) NOT NULL AUTO_INCREMENT, `path` varchar(255) NOT NULL, `name` varchar(255) NOT NULL, `category` varchar(255) NOT NULL, `version` varchar(20) NOT NULL, `release` int(4) NOT NULL, `package_url` TEXT NOT NULL, `package_status` int(1) NOT NULL DEFAULT '2', PRIMARY KEY (`id`) ) DEFAULT CHARSET=utf8 ; -- -------------------------------------------------------- -- -- Table structure for table `aps_settings` -- CREATE TABLE IF NOT EXISTS `aps_settings` ( `id` int(4) NOT NULL AUTO_INCREMENT, `name` varchar(255) NOT NULL, `value` text NOT NULL, PRIMARY KEY (`id`), UNIQUE KEY `name` (`name`) ) DEFAULT CHARSET=utf8 ; -- -------------------------------------------------------- -- -- Dumping data for table `aps_settings` -- INSERT INTO `aps_settings` (`id`, `name`, `value`) VALUES(1, 'ignore-php-extension', ''); INSERT INTO `aps_settings` (`id`, `name`, `value`) VALUES(2, 'ignore-php-configuration', ''); INSERT INTO `aps_settings` (`id`, `name`, `value`) VALUES(3, 'ignore-webserver-module', ''); ALTER TABLE `client` ADD `limit_aps` int(11) NOT NULL DEFAULT '0' AFTER `limit_webdav_user`; ALTER TABLE `client_template` ADD `limit_aps` int(11) NOT NULL DEFAULT '0' AFTER `limit_webdav_user`;ispconfig3_install/install/sql/incremental/upd_0031.sql0000775000000000000000000000155315114345330022100 0ustar rootrootCREATE TABLE `server_php` ( `server_php_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) unsigned NOT NULL DEFAULT '0', `client_id` int(11) unsigned NOT NULL DEFAULT '0', `name` varchar(255) DEFAULT NULL, `php_fastcgi_binary` varchar(255) DEFAULT NULL, `php_fastcgi_ini_dir` varchar(255) DEFAULT NULL, `php_fpm_init_script` varchar(255) DEFAULT NULL, `php_fpm_ini_dir` varchar(255) DEFAULT NULL, `php_fpm_pool_dir` varchar(255) DEFAULT NULL, PRIMARY KEY (`server_php_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ALTER TABLE `web_domain` ADD `fastcgi_php_version` VARCHAR( 255 ) NULL DEFAULT NULL;ispconfig3_install/install/sql/incremental/upd_0077.sql0000775000000000000000000000015415114345330022106 0ustar rootrootALTER TABLE `ftp_user` ADD `expires` datetime NOT NULL DEFAULT '0000-00-00 00:00:00' AFTER `dl_bandwidth` ; ispconfig3_install/install/sql/incremental/upd_0102.sql0000775000000000000000000000640715147077627022123 0ustar rootroot-- Add last_password_change column to sys_user table ALTER TABLE `sys_user` ADD COLUMN `last_password_change` DATE NULL DEFAULT (CURDATE()); -- Set default php_cli_binary and php_jk_section values for known PHP versions (#6938). -- Only set the values if they are currently NULL - this will not work on all systems but it will not break anything more than it is with NULL. UPDATE `server_php` sp JOIN ( SELECT server_id, `data` FROM `monitor_data` WHERE `type` = 'os_info' ) md ON md.server_id = sp.server_id SET sp.`php_cli_binary` = CASE WHEN (sp.`php_cli_binary` IS NULL OR sp.`php_cli_binary` = '') THEN CASE -- RHEL derivatives -> /usr/bin/phpXY WHEN ( md.`data` LIKE '%"name";s:%:"CentOS%"%' OR md.`data` LIKE '%"name";s:%:"Fedora%"%' OR md.`data` LIKE '%"name";s:%:"Rocky Linux"%' OR md.`data` LIKE '%"name";s:%:"AlmaLinux"%' OR md.`data` LIKE '%"name";s:%:"Red Hat%"%' OR md.`data` LIKE '%"name";s:%:"RHEL%"%' OR md.`data` LIKE '%"name";s:%:"Oracle Linux"%' OR md.`data` LIKE '%"name";s:%:"CloudLinux"%' ) THEN CASE sp.`name` WHEN 'PHP 5.6' THEN '/usr/bin/php56' WHEN 'PHP 7.0' THEN '/usr/bin/php70' WHEN 'PHP 7.1' THEN '/usr/bin/php71' WHEN 'PHP 7.2' THEN '/usr/bin/php72' WHEN 'PHP 7.3' THEN '/usr/bin/php73' WHEN 'PHP 7.4' THEN '/usr/bin/php74' WHEN 'PHP 8.0' THEN '/usr/bin/php80' WHEN 'PHP 8.1' THEN '/usr/bin/php81' WHEN 'PHP 8.2' THEN '/usr/bin/php82' WHEN 'PHP 8.3' THEN '/usr/bin/php83' WHEN 'PHP 8.4' THEN '/usr/bin/php84' ELSE sp.`php_cli_binary` END -- Default (non-RHEL) -> Debian/Ubuntu style /usr/bin/phpX.Y ELSE CASE sp.`name` WHEN 'PHP 5.6' THEN '/usr/bin/php5.6' WHEN 'PHP 7.0' THEN '/usr/bin/php7.0' WHEN 'PHP 7.1' THEN '/usr/bin/php7.1' WHEN 'PHP 7.2' THEN '/usr/bin/php7.2' WHEN 'PHP 7.3' THEN '/usr/bin/php7.3' WHEN 'PHP 7.4' THEN '/usr/bin/php7.4' WHEN 'PHP 8.0' THEN '/usr/bin/php8.0' WHEN 'PHP 8.1' THEN '/usr/bin/php8.1' WHEN 'PHP 8.2' THEN '/usr/bin/php8.2' WHEN 'PHP 8.3' THEN '/usr/bin/php8.3' WHEN 'PHP 8.4' THEN '/usr/bin/php8.4' ELSE sp.`php_cli_binary` END END ELSE sp.`php_cli_binary` END, sp.`php_jk_section` = CASE WHEN (sp.`php_jk_section` IS NULL OR sp.`php_jk_section` = '') THEN CASE sp.`name` WHEN 'PHP 5.6' THEN 'php5_6' WHEN 'PHP 7.0' THEN 'php7_0' WHEN 'PHP 7.1' THEN 'php7_1' WHEN 'PHP 7.2' THEN 'php7_2' WHEN 'PHP 7.3' THEN 'php7_3' WHEN 'PHP 7.4' THEN 'php7_4' WHEN 'PHP 8.0' THEN 'php8_0' WHEN 'PHP 8.1' THEN 'php8_1' WHEN 'PHP 8.2' THEN 'php8_2' WHEN 'PHP 8.3' THEN 'php8_3' WHEN 'PHP 8.4' THEN 'php8_4' ELSE sp.`php_jk_section` END ELSE sp.`php_jk_section` END WHERE sp.`name` IN ('PHP 5.6','PHP 7.0','PHP 7.1','PHP 7.2','PHP 7.3','PHP 7.4', 'PHP 8.0','PHP 8.1','PHP 8.2','PHP 8.3','PHP 8.4') AND ( sp.`php_cli_binary` IS NULL OR sp.`php_cli_binary` = '' OR sp.`php_jk_section` IS NULL OR sp.`php_jk_section` = '' );ispconfig3_install/install/sql/incremental/upd_0006.sql0000775000000000000000000000010615114345330022073 0ustar rootrootALTER TABLE `sys_datalog` CHANGE `data` `data` LONGTEXT NOT NULL; ispconfig3_install/install/sql/incremental/upd_0066.sql0000775000000000000000000000011715114345330022103 0ustar rootrootALTER TABLE `sys_config` DROP `config_id`, ADD PRIMARY KEY (`group`, `name`); ispconfig3_install/install/sql/incremental/upd_0008.sql0000775000000000000000000000035515114345330022103 0ustar rootroot-- database patch for rsa-key based shell access. ALTER TABLE `client` ADD `id_rsa` VARCHAR( 2000 ) NOT NULL ; ALTER TABLE `client` ADD `ssh_rsa` VARCHAR( 600 ) NOT NULL ; ALTER TABLE `shell_user` ADD `ssh_rsa` VARCHAR( 600 ) NOT NULL ; ispconfig3_install/install/sql/incremental/upd_0061.sql0000775000000000000000000000012615114345330022076 0ustar rootrootALTER TABLE `web_domain` ADD `backup_excludes` MEDIUMTEXT NULL AFTER `backup_copies` ;ispconfig3_install/install/sql/incremental/upd_0082.sql0000775000000000000000000000017115114345330022101 0ustar rootrootALTER TABLE `directive_snippets` ADD `master_directive_snippets_id` int(11) unsigned NOT NULL DEFAULT '0' AFTER `active`;ispconfig3_install/install/sql/incremental/upd_0044.sql0000775000000000000000000000026715114345330022105 0ustar rootrootALTER TABLE `client` ADD `paypal_email` VARCHAR( 255 ) NULL DEFAULT NULL AFTER `bank_account_swift` ; ALTER TABLE `web_domain` ADD `proxy_directives` MEDIUMTEXT NULL DEFAULT NULL ; ispconfig3_install/install/sql/incremental/upd_0075.sql0000775000000000000000000001003415114345330022102 0ustar rootrootALTER TABLE `web_database` ADD `last_quota_notification` date NULL default NULL AFTER `database_quota`; ALTER TABLE `ftp_user` CHANGE `username_prefix` `username_prefix` varchar(50) NOT NULL DEFAULT ''; ALTER TABLE `mail_domain` CHANGE `dkim` `dkim` enum('n','y') NOT NULL DEFAULT 'n'; ALTER TABLE `mail_forwarding` CHANGE `destination` `destination` text; ALTER TABLE `mail_user` CHANGE `uid` `uid` int(11) unsigned NOT NULL DEFAULT '5000', CHANGE `gid` `gid` int(11) unsigned NOT NULL DEFAULT '5000'; ALTER TABLE `server` CHANGE `proxy_server` `proxy_server` tinyint(1) NOT NULL DEFAULT '0', CHANGE `firewall_server` `firewall_server` tinyint(1) NOT NULL DEFAULT '0', CHANGE `dbversion` `dbversion` int(11) unsigned NOT NULL DEFAULT '1'; ALTER TABLE `server_ip` CHANGE `virtualhost_port` `virtualhost_port` varchar(255) DEFAULT '80,443'; ALTER TABLE `shell_user` CHANGE `username_prefix` `username_prefix` varchar(50) NOT NULL DEFAULT ''; ALTER TABLE `client` ADD `limit_dns_slave_zone` int(11) NOT NULL DEFAULT '-1' AFTER `default_slave_dnsserver`; ALTER TABLE `client_template` ADD `limit_dns_slave_zone` int(11) NOT NULL DEFAULT '-1' AFTER `limit_dns_zone`; ALTER TABLE `client` CHANGE `id_rsa` `id_rsa` varchar(2000) NOT NULL DEFAULT '', CHANGE `ssh_rsa` `ssh_rsa` varchar(600) NOT NULL DEFAULT ''; ALTER TABLE `software_package` CHANGE `software_repo_id` `software_repo_id` int(11) unsigned NOT NULL DEFAULT '0'; ALTER TABLE `software_package` ADD `package_installable` enum('yes','no','key') NOT NULL default 'yes' AFTER `package_type`; ALTER TABLE `software_package` ADD `package_requires_db` enum('no','mysql') NOT NULL default 'no' AFTER `package_installable`; ALTER TABLE `software_package` ADD `package_remote_functions` TEXT NULL AFTER `package_requires_db`; ALTER TABLE `software_package` ADD `package_key` varchar(255) NOT NULL DEFAULT '' AFTER `package_remote_functions`; ALTER TABLE `software_package` ADD `package_config` text AFTER `package_key`; ALTER TABLE `software_package` CHANGE `package_name` `package_name` varchar(64) NOT NULL DEFAULT '', CHANGE `package_title` `package_title` varchar(64) NOT NULL DEFAULT '', CHANGE `package_key` `package_key` varchar(255) NOT NULL DEFAULT ''; INSERT IGNORE INTO `sys_config` (`group`, `name`, `value`) VALUES ('interface', 'session_timeout', '0'); ALTER TABLE `sys_datalog` CHANGE `status` `status` set('pending','ok','warning','error') NOT NULL DEFAULT 'ok'; ALTER TABLE `sys_session` CHANGE `session_id` `session_id` varchar(64) NOT NULL DEFAULT ''; ALTER TABLE `sys_user` CHANGE `language` `language` varchar(2) NOT NULL DEFAULT 'en'; ALTER TABLE `sys_user` ADD `id_rsa` varchar(2000) NOT NULL DEFAULT '' AFTER `client_id`, ADD `ssh_rsa` varchar(600) NOT NULL DEFAULT '' AFTER `id_rsa`; ALTER TABLE `webdav_user` CHANGE `username_prefix` `username_prefix` varchar(50) NOT NULL DEFAULT ''; ALTER TABLE `web_database` CHANGE `database_name_prefix` `database_name_prefix` varchar(50) NOT NULL DEFAULT ''; ALTER TABLE `web_database_user` CHANGE `database_user_prefix` `database_user_prefix` varchar(50) NOT NULL DEFAULT ''; ALTER TABLE `web_domain` DROP COLUMN `document_root_www`; ALTER TABLE `web_domain` CHANGE `ssl_key` `ssl_key` mediumtext, CHANGE `apache_directives` `apache_directives` mediumtext, CHANGE `php_open_basedir` `php_open_basedir` mediumtext, CHANGE `custom_php_ini` `custom_php_ini` mediumtext; CREATE TABLE IF NOT EXISTS `dns_slave` ( `id` int(10) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `server_id` int(11) NOT NULL default '1', `origin` varchar(255) NOT NULL DEFAULT '', `ns` varchar(255) NOT NULL DEFAULT '', `active` enum('N','Y') NOT NULL DEFAULT 'N', `xfer` varchar(255) NOT NULL DEFAULT '', PRIMARY KEY (`id`), UNIQUE KEY `slave` (`origin`,`server_id`), KEY `active` (`active`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ispconfig3_install/install/sql/incremental/upd_0046.sql0000775000000000000000000000140315114345330022100 0ustar rootroot ALTER TABLE `web_database` ADD `database_name_prefix` VARCHAR( 50 ) NOT NULL AFTER `database_name`; UPDATE `web_database` SET `database_name_prefix` = '#' WHERE 1; ALTER TABLE `web_database_user` ADD `database_user_prefix` VARCHAR( 50 ) NOT NULL AFTER `database_user`; UPDATE `web_database_user` SET `database_user_prefix` = '#' WHERE 1; ALTER TABLE `ftp_user` ADD `username_prefix` VARCHAR( 50 ) NOT NULL AFTER `username`; UPDATE `ftp_user` SET `username_prefix` = '#' WHERE 1; ALTER TABLE `shell_user` ADD `username_prefix` VARCHAR( 50 ) NOT NULL AFTER `username`; UPDATE `shell_user` SET `username_prefix` = '#' WHERE 1; ALTER TABLE `webdav_user` ADD `username_prefix` VARCHAR( 50 ) NOT NULL AFTER `username`; UPDATE `webdav_user` SET `username_prefix` = '#' WHERE 1;ispconfig3_install/install/sql/incremental/upd_0103.sql0000775000000000000000000000456715123466177022125 0ustar rootroot-- #6846 migrate from utf8(mb3) to utf8mb4 -- change database default charset ALTER DATABASE `dbispconfig` CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci; -- convert all tables to utf8mb4 DROP PROCEDURE IF EXISTS convert_all_tables; DELIMITER $$ CREATE PROCEDURE convert_all_tables() BEGIN DECLARE done INT DEFAULT FALSE; DECLARE tbl_name VARCHAR(255); DECLARE cur CURSOR FOR SELECT TABLE_NAME FROM information_schema.TABLES WHERE TABLE_SCHEMA = DATABASE() AND TABLE_TYPE = 'BASE TABLE'; DECLARE CONTINUE HANDLER FOR NOT FOUND SET done = TRUE; OPEN cur; read_loop: LOOP FETCH cur INTO tbl_name; IF done THEN LEAVE read_loop; END IF; SET @sql_stmt = CONCAT( 'ALTER TABLE `', tbl_name, '` CONVERT TO CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;' ); PREPARE stmt FROM @sql_stmt; EXECUTE stmt; DEALLOCATE PREPARE stmt; END LOOP; CLOSE cur; END$$ DELIMITER ; CALL convert_all_tables(); DROP PROCEDURE convert_all_tables; -- convert leftover utf8/utf8mb3 columns to utf8mb4 DROP PROCEDURE IF EXISTS convert_utf8_columns; DELIMITER $$ CREATE PROCEDURE convert_utf8_columns() BEGIN DECLARE done INT DEFAULT FALSE; DECLARE tbl VARCHAR(255); DECLARE col VARCHAR(255); DECLARE col_type TEXT; DECLARE is_nullable VARCHAR(3); DECLARE col_default TEXT; DECLARE extra TEXT; DECLARE cur CURSOR FOR SELECT TABLE_NAME, COLUMN_NAME, COLUMN_TYPE, IS_NULLABLE, COLUMN_DEFAULT, EXTRA FROM information_schema.COLUMNS WHERE TABLE_SCHEMA = DATABASE() AND CHARACTER_SET_NAME IN ('utf8', 'utf8mb3') AND EXTRA NOT LIKE '%VIRTUAL%'; DECLARE CONTINUE HANDLER FOR NOT FOUND SET done = TRUE; OPEN cur; col_loop: LOOP FETCH cur INTO tbl, col, col_type, is_nullable, col_default, extra; IF done THEN LEAVE col_loop; END IF; SET @sql_stmt = CONCAT( 'ALTER TABLE `', tbl, '` CHANGE `', col, '` `', col, '` ', col_type, ' CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci', IF(is_nullable = 'NO', ' NOT NULL', ''), IF(col_default IS NOT NULL, CONCAT(' DEFAULT ', QUOTE(col_default)), ''), ';' ); PREPARE stmt FROM @sql_stmt; EXECUTE stmt; DEALLOCATE PREPARE stmt; END LOOP; CLOSE cur; END$$ DELIMITER ; CALL convert_utf8_columns(); DROP PROCEDURE convert_utf8_columns; ALTER TABLE mail_user ADD COLUMN disablereplicator CHAR(1) NOT NULL DEFAULT 'n';ispconfig3_install/install/sql/incremental/upd_0032.sql0000775000000000000000000000050015114345330022070 0ustar rootrootALTER TABLE `web_domain` ADD `pm` ENUM( 'static', 'dynamic', 'ondemand' ) NOT NULL DEFAULT 'dynamic' AFTER `php_fpm_use_socket`; ALTER TABLE `web_domain` ADD `pm_process_idle_timeout` INT NOT NULL DEFAULT '10' AFTER `pm_max_spare_servers` , ADD `pm_max_requests` INT NOT NULL DEFAULT '0' AFTER `pm_process_idle_timeout`;ispconfig3_install/install/sql/incremental/upd_0094.sql0000775000000000000000000000173415114345330022112 0ustar rootroot-- Add column for email backup limit (#5732) ALTER TABLE `client_template` ADD `limit_mail_backup` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y' AFTER `limit_spamfilter_policy`; ALTER TABLE `client` ADD `limit_mail_backup` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y' AFTER `limit_spamfilter_policy`; -- default spamfilter_users.policy_id to 0 ALTER TABLE `spamfilter_users` ALTER `policy_id` SET DEFAULT 0; -- mail_forwarding.source must be unique ALTER TABLE `mail_forwarding` DROP KEY `server_id`; ALTER TABLE `mail_forwarding` ADD KEY `server_id` (`server_id`, `source`); -- Purge apps & addons installer (#5795) - second time due to syntax error in 0093 DROP TABLE IF EXISTS `software_package`; DROP TABLE IF EXISTS `software_repo`; DROP TABLE IF EXISTS `software_update`; DROP TABLE IF EXISTS `software_update_inst`; -- mail_transport.domain must be unique ALTER TABLE `mail_transport` DROP KEY `server_id_2`; ALTER TABLE `mail_transport` ADD UNIQUE KEY `server_id_2` (`server_id`, `domain`); ispconfig3_install/install/sql/incremental/upd_0099.sql0000775000000000000000000000116315114345330022113 0ustar rootrootALTER TABLE `spamfilter_policy` CHANGE `warnvirusrecip` `warnvirusrecip` VARCHAR(1) CHARACTER SET utf8mb3 COLLATE utf8mb3_general_ci NULL DEFAULT 'N', CHANGE `warnbannedrecip` `warnbannedrecip` VARCHAR(1) CHARACTER SET utf8mb3 COLLATE utf8mb3_general_ci NULL DEFAULT 'N', CHANGE `warnbadhrecip` `warnbadhrecip` VARCHAR(1) CHARACTER SET utf8mb3 COLLATE utf8mb3_general_ci NULL DEFAULT 'N'; ALTER TABLE `sys_ini` CHANGE `default_logo` `default_logo` TEXT CHARACTER SET utf8mb3 COLLATE utf8mb3_general_ci NULL; ALTER TABLE `sys_ini` CHANGE `custom_logo` `custom_logo` TEXT CHARACTER SET utf8mb3 COLLATE utf8mb3_general_ci NULL;ispconfig3_install/install/sql/incremental/upd_0010.sql0000775000000000000000000000024715114345330022074 0ustar rootroot-- database patch for separate login for mailbox users ALTER TABLE `mail_user` ADD `login` VARCHAR( 255 ) NOT NULL ; UPDATE `mail_user` SET `login` = `email` WHERE 1 ;ispconfig3_install/install/sql/incremental/upd_0036.sql0000775000000000000000000000023015114345330022074 0ustar rootroot-- -------------------------------------------------------- ALTER TABLE `web_domain` ADD `perl` enum('n','y') NOT NULL default 'n' AFTER `python`; ispconfig3_install/install/sql/incremental/upd_0024.sql0000775000000000000000000000013115114345330022071 0ustar rootrootALTER TABLE `web_domain` ADD `python` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `ruby`;ispconfig3_install/install/sql/incremental/upd_0056.sql0000775000000000000000000000112215114345330022077 0ustar rootrootCREATE TABLE `client_template_assigned` ( `assigned_template_id` bigint(20) NOT NULL auto_increment, `client_id` bigint(11) NOT NULL DEFAULT '0', `client_template_id` int(11) NOT NULL DEFAULT '0', PRIMARY KEY (`assigned_template_id`), KEY `client_id` (`client_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ALTER TABLE `client` ADD `gender` enum('','m','f') NOT NULL DEFAULT '' AFTER `company_id`, ADD `locked` enum('n','y') NOT NULL DEFAULT 'n' AFTER `created_at`, ADD `canceled` enum('n','y') NOT NULL DEFAULT 'n' AFTER `locked`, ADD `tmp_data` mediumblob AFTER `canceled` ; ispconfig3_install/install/sql/incremental/upd_0049.sql0000775000000000000000000000013615114345330022105 0ustar rootrootALTER TABLE `client_template` CHANGE `limit_aps` `limit_aps` INT( 11 ) NOT NULL DEFAULT '-1'; ispconfig3_install/install/sql/incremental/upd_0015.sql0000775000000000000000000000040415114345330022074 0ustar rootrootALTER TABLE `cron` CHANGE `command` `command` TEXT NOT NULL; ALTER TABLE `client` ADD `limit_openvz_vm` int(11) NOT NULL DEFAULT '0' AFTER `limit_mailmailinglist` , ADD `limit_openvz_vm_template_id` int(11) NOT NULL DEFAULT '0' AFTER `limit_openvz_vm`;ispconfig3_install/install/sql/incremental/upd_0098.sql0000775000000000000000000000211115114345330022104 0ustar rootrootALTER TABLE `mail_user` CHANGE `quota` `quota` BIGINT(20) NOT NULL DEFAULT '0'; ALTER TABLE `server_php` ADD `sortprio` INT(20) NOT NULL DEFAULT '100' AFTER `active`; ALTER TABLE `mail_user` ADD COLUMN `imap_prefix` varchar(255) NULL default NULL AFTER `backup_copies`; -- #6456 comodoca.com needs to become sectigo.com UPDATE `dns_ssl_ca` SET `ca_issue` = 'sectigo.com' WHERE `ca_issue` = 'comodo.com'; UPDATE `dns_ssl_ca` SET `ca_issue` = 'sectigo.com' WHERE `ca_issue` = 'comodoca.com'; UPDATE `dns_ssl_ca` SET `ca_name` = 'Sectigo (formerly Comodo CA)' WHERE `ca_issue` = 'sectigo.com'; -- not updating the dns_rr table to change all CAA records that have comodo.com / comodoca.com - we should not touch users records imo - TP -- #6445 Update the mailbox_soft_delete config option to it's new structure. -- UPDATE server SET config=REGEXP_REPLACE(config, 'mailbox_soft_delete=n', 'mailbox_soft_delete=0') WHERE config LIKE '%mailbox_soft_delete=n%' -- UPDATE server SET config=REGEXP_REPLACE(config, 'mailbox_soft_delete=y', 'mailbox_soft_delete=7') WHERE config LIKE '%mailbox_soft_delete=y%'ispconfig3_install/install/sql/incremental/upd_0096.sql0000775000000000000000000000206415114345330022111 0ustar rootroot-- create mail_relay_domain and load with current domains from mail_transport table CREATE TABLE IF NOT EXISTS `mail_relay_domain` ( `relay_domain_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `domain` varchar(255) DEFAULT NULL, `access` varchar(255) NOT NULL DEFAULT 'OK', `active` varchar(255) NOT NULL DEFAULT 'y', PRIMARY KEY (`relay_domain_id`), UNIQUE KEY `domain` (`domain`, `server_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; INSERT INTO `mail_relay_domain` SELECT NULL, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `server_id`, `domain`, 'OK', `active` FROM `mail_transport` WHERE `domain` NOT LIKE '%@%' AND `domain` LIKE '%.%' GROUP BY `domain`, `server_id`; ALTER TABLE `dns_soa` ADD `rendered_zone` MEDIUMTEXT NULL AFTER `dnssec_info`; ispconfig3_install/install/sql/incremental/upd_0087.sql0000775000000000000000000001402615114345330022112 0ustar rootrootALTER TABLE `sys_datalog` ADD `session_id` varchar(64) NOT NULL DEFAULT '' AFTER `error`; ALTER TABLE `sys_user` CHANGE `sys_userid` `sys_userid` INT(11) UNSIGNED NOT NULL DEFAULT '1' COMMENT 'Created by userid'; ALTER TABLE `sys_user` CHANGE `sys_groupid` `sys_groupid` INT(11) UNSIGNED NOT NULL DEFAULT '1' COMMENT 'Created by groupid'; ALTER TABLE `web_domain` ADD COLUMN `php_fpm_chroot` enum('n','y') NOT NULL DEFAULT 'n' AFTER `php_fpm_use_socket`; CREATE TABLE IF NOT EXISTS `dns_ssl_ca` ( `id` int(10) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `active` enum('N','Y') NOT NULL DEFAULT 'N', `ca_name` varchar(255) NOT NULL DEFAULT '', `ca_issue` varchar(255) NOT NULL DEFAULT '', `ca_wildcard` enum('Y','N') NOT NULL DEFAULT 'N', `ca_iodef` text NOT NULL, `ca_critical` tinyint(1) NOT NULL DEFAULT '0', PRIMARY KEY (`id`), UNIQUE KEY (`ca_issue`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ALTER TABLE `dns_ssl_ca` ADD UNIQUE(`ca_issue`); UPDATE `dns_ssl_ca` SET `ca_issue` = 'comodo.com' WHERE `ca_issue` = 'comodoca.com'; DELETE FROM `dns_ssl_ca` WHERE `ca_issue` = 'geotrust.com'; DELETE FROM `dns_ssl_ca` WHERE `ca_issue` = 'thawte.com'; UPDATE `dns_ssl_ca` SET `ca_name` = 'Symantec / Thawte / GeoTrust' WHERE `ca_issue` = 'symantec.com'; ALTER TABLE `dns_rr` CHANGE `type` `type` ENUM('A','AAAA','ALIAS','CAA','CNAME','DS','HINFO','LOC','MX','NAPTR','NS','PTR','RP','SRV','TXT','TLSA','DNSKEY') CHARACTER SET utf8 COLLATE utf8_general_ci NULL DEFAULT NULL; ALTER TABLE `dns_rr` CHANGE `data` `data` TEXT NOT NULL; INSERT IGNORE INTO `dns_ssl_ca` (`id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `active`, `ca_name`, `ca_issue`, `ca_wildcard`, `ca_iodef`, `ca_critical`) VALUES (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'AC Camerfirma', 'camerfirma.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'ACCV', 'accv.es', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Actalis', 'actalis.it', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Amazon', 'amazon.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Asseco', 'certum.pl', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Buypass', 'buypass.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'CA Disig', 'disig.sk', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'CATCert', 'aoc.cat', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Certinomis', 'www.certinomis.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Certizen', 'hongkongpost.gov.hk', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'certSIGN', 'certsign.ro', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'CFCA', 'cfca.com.cn', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Chunghwa Telecom', 'cht.com.tw', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Comodo', 'comodoca.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'D-TRUST', 'd-trust.net', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'DigiCert', 'digicert.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'DocuSign', 'docusign.fr', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'e-tugra', 'e-tugra.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'EDICOM', 'edicomgroup.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Entrust', 'entrust.net', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Firmaprofesional', 'firmaprofesional.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'FNMT', 'fnmt.es', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'GlobalSign', 'globalsign.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'GoDaddy', 'godaddy.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Google Trust Services', 'pki.goog', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'GRCA', 'gca.nat.gov.tw', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'HARICA', 'harica.gr', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'IdenTrust', 'identrust.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Izenpe', 'izenpe.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Kamu SM', 'kamusm.gov.tr', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Let''s Encrypt', 'letsencrypt.org', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Microsec e-Szigno', 'e-szigno.hu', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'NetLock', 'netlock.hu', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'PKIoverheid', 'www.pkioverheid.nl', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'PROCERT', 'procert.net.ve', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'QuoVadis', 'quovadisglobal.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'SECOM', 'secomtrust.net', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Sertifitseerimiskeskuse', 'sk.ee', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'StartCom', 'startcomca.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'SwissSign', 'swisssign.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Symantec / Thawte / GeoTrust', 'symantec.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'T-Systems', 'telesec.de', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Telia', 'telia.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Trustwave', 'trustwave.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Web.com', 'web.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'WISeKey', 'wisekey.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'WoSign', 'wosign.com', 'Y', '', 0); ALTER TABLE `dns_soa` CHANGE `xfer` `xfer` TEXT NULL; ALTER TABLE `dns_soa` CHANGE `also_notify` `also_notify` TEXT NULL; ALTER TABLE `dns_slave` CHANGE `xfer` `xfer` TEXT NULL; ALTER TABLE `firewall` CHANGE `tcp_port` `tcp_port` TEXT CHARACTER SET utf8 COLLATE utf8_general_ci NULL DEFAULT NULL; ALTER TABLE `firewall` CHANGE `udp_port` `udp_port` TEXT CHARACTER SET utf8 COLLATE utf8_general_ci NULL DEFAULT NULL;ispconfig3_install/install/sql/incremental/upd_0022.sql0000775000000000000000000000013615114345330022074 0ustar rootrootALTER TABLE `web_domain` ADD `ipv6_address` VARCHAR( 255 ) default NULL AFTER `ip_address`;ispconfig3_install/install/sql/pre_update.sql0000775000000000000000000000403315114345330020470 0ustar rootroot/* Copyright (c) 2007-2009, Till Brehm, projektfarm Gmbh All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. * Neither the name of ISPConfig nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */ -- -- These SQL commands will be executed before the ISPConfig update is performed. -- SET FOREIGN_KEY_CHECKS = 0; DROP TABLE IF EXISTS `billing_invoice`; DROP TABLE IF EXISTS `billing_product`; DROP TABLE IF EXISTS `billing_service`; DROP TABLE IF EXISTS `billing_service_class`; DROP TABLE IF EXISTS `billing_tax`; DROP TABLE IF EXISTS `client_address_book`; -- DROP TABLE IF EXISTS `domain`; DROP TABLE IF EXISTS `domain_handle`; DROP TABLE IF EXISTS `domain_provider`; DROP TABLE IF EXISTS `domain_tld`; SET FOREIGN_KEY_CHECKS = 1;ispconfig3_install/install/sql/ispconfig3.sql0000775000175000017500000035501215253274023020060 0ustar phpphp/* Copyright (c) 2007-2012, Till Brehm, projektfarm Gmbh All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. * Neither the name of ISPConfig nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */ -- Includes -- -- iso_country_list.sql -- -- This will create and then populate a MySQL table with a list of the names and -- ISO 3166 codes for countries in existence as of the date below. -- -- For updates to this file, see http://27.org/isocountrylist/ -- For more about ISO 3166, see http://www.iso.ch/iso/en/prods-services/iso3166ma/02iso-3166-code-lists/list-en1.html -- -- Created by getisocountrylist.pl on Sun Nov 2 14:59:20 2003. -- Wm. Rhodes -- -- -- ISPConfig 3 -- DB-Version: 3.0.0.9 -- SET FOREIGN_KEY_CHECKS = 0; -- -------------------------------------------------------- -- -------------------------------------------------------- -- DB-STRUCTURE -- -------------------------------------------------------- -- -------------------------------------------------------- -- -- Table structure for table `aps_instances` -- CREATE TABLE IF NOT EXISTS `aps_instances` ( `id` int(4) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `customer_id` int(4) NOT NULL DEFAULT '0', `package_id` int(4) NOT NULL DEFAULT '0', `instance_status` int(4) NOT NULL DEFAULT '0', PRIMARY KEY (`id`) ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Table structure for table `aps_instances_settings` -- CREATE TABLE IF NOT EXISTS `aps_instances_settings` ( `id` int(4) NOT NULL AUTO_INCREMENT, `server_id` int(11) NOT NULL DEFAULT '0', `instance_id` int(4) NOT NULL DEFAULT '0', `name` varchar(255) NOT NULL DEFAULT '', `value` text, PRIMARY KEY (`id`) ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Table structure for table `aps_packages` -- CREATE TABLE IF NOT EXISTS `aps_packages` ( `id` int(4) NOT NULL AUTO_INCREMENT, `path` varchar(255) NOT NULL DEFAULT '', `name` varchar(255) NOT NULL DEFAULT '', `category` varchar(255) NOT NULL DEFAULT '', `version` varchar(20) NOT NULL DEFAULT '', `release` int(4) NOT NULL DEFAULT '0', `package_url` TEXT, `package_status` int(1) NOT NULL DEFAULT '2', PRIMARY KEY (`id`) ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Tabellenstruktur für Tabelle `aps_settings` -- CREATE TABLE IF NOT EXISTS `aps_settings` ( `id` int(4) NOT NULL AUTO_INCREMENT, `name` varchar(255) NOT NULL DEFAULT '', `value` text, PRIMARY KEY (`id`), UNIQUE KEY `name` (`name`) ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Table structure for table `attempts_login` -- CREATE TABLE `attempts_login` ( `ip` varchar(39) NOT NULL DEFAULT '', `times` int(11) DEFAULT NULL, `login_time` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Table structure for table `client` -- CREATE TABLE `client` ( `client_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `company_name` varchar(64) DEFAULT NULL, `company_id` varchar(255) DEFAULT NULL, `gender` enum('','m','f') NOT NULL DEFAULT '', `contact_firstname` varchar( 64 ) NOT NULL DEFAULT '', `contact_name` varchar(64) DEFAULT NULL, `customer_no` varchar(64) DEFAULT NULL, `vat_id` varchar(64) DEFAULT NULL, `street` varchar(255) DEFAULT NULL, `zip` varchar(32) DEFAULT NULL, `city` varchar(64) DEFAULT NULL, `state` varchar(32) DEFAULT NULL, `country` char(2) DEFAULT NULL, `telephone` varchar(32) DEFAULT NULL, `mobile` varchar(32) DEFAULT NULL, `fax` varchar(32) DEFAULT NULL, `email` varchar(255) DEFAULT NULL, `internet` varchar(255) NOT NULL DEFAULT '', `icq` varchar(16) DEFAULT NULL, `notes` text, `bank_account_owner` varchar(255) DEFAULT NULL, `bank_account_number` varchar(255) DEFAULT NULL, `bank_code` varchar(255) DEFAULT NULL, `bank_name` varchar(255) DEFAULT NULL, `bank_account_iban` varchar(255) DEFAULT NULL, `bank_account_swift` varchar(255) DEFAULT NULL, `paypal_email` varchar(255) DEFAULT NULL, `default_mailserver` int(11) unsigned NOT NULL DEFAULT '1', `mail_servers` text, `limit_maildomain` int(11) NOT NULL DEFAULT '-1', `limit_mailbox` int(11) NOT NULL DEFAULT '-1', `limit_mailalias` int(11) NOT NULL DEFAULT '-1', `limit_mailaliasdomain` int(11) NOT NULL DEFAULT '-1', `limit_mailforward` int(11) NOT NULL DEFAULT '-1', `limit_mailcatchall` int(11) NOT NULL DEFAULT '-1', `limit_mailrouting` int(11) NOT NULL DEFAULT '0', `limit_mail_wblist` int(11) NOT NULL DEFAULT '0', `limit_mailfilter` int(11) NOT NULL DEFAULT '-1', `limit_fetchmail` int(11) NOT NULL DEFAULT '-1', `limit_mailquota` int(11) NOT NULL DEFAULT '-1', `limit_spamfilter_wblist` int(11) NOT NULL DEFAULT '0', `limit_spamfilter_user` int(11) NOT NULL DEFAULT '0', `limit_spamfilter_policy` int(11) NOT NULL DEFAULT '0', `limit_mail_backup` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y', `limit_relayhost` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n', `default_xmppserver` int(11) unsigned NOT NULL DEFAULT '1', `xmpp_servers` text, `limit_xmpp_domain` int(11) NOT NULL DEFAULT '-1', `limit_xmpp_user` int(11) NOT NULL DEFAULT '-1', `limit_xmpp_muc` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_anon` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_auth_options` varchar(255) NOT NULL DEFAULT 'plain,hashed,isp', `limit_xmpp_vjud` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_proxy` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_status` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_pastebin` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_httparchive` ENUM( 'n', 'y' ) NOT NULL default 'n', `default_webserver` int(11) unsigned NOT NULL DEFAULT '1', `web_servers` text, `limit_web_ip` text, `limit_web_domain` int(11) NOT NULL DEFAULT '-1', `limit_web_quota` int(11) NOT NULL DEFAULT '-1', `web_php_options` varchar(255) NOT NULL DEFAULT 'no,fast-cgi,cgi,mod,suphp,php-fpm,hhvm', `limit_cgi` enum('n','y') NOT NULL DEFAULT 'n', `limit_ssi` enum('n','y') NOT NULL DEFAULT 'n', `limit_perl` enum('n','y') NOT NULL DEFAULT 'n', `limit_ruby` enum('n','y') NOT NULL DEFAULT 'n', `limit_python` enum('n','y') NOT NULL DEFAULT 'n', `force_suexec` enum('n','y') NOT NULL DEFAULT 'y', `limit_hterror` enum('n','y') NOT NULL DEFAULT 'n', `limit_wildcard` enum('n','y') NOT NULL DEFAULT 'n', `limit_ssl` enum('n','y') NOT NULL DEFAULT 'n', `limit_ssl_letsencrypt` enum('n','y') NOT NULL DEFAULT 'n', `limit_web_subdomain` int(11) NOT NULL DEFAULT '-1', `limit_web_aliasdomain` int(11) NOT NULL DEFAULT '-1', `limit_ftp_user` int(11) NOT NULL DEFAULT '-1', `limit_shell_user` int(11) NOT NULL DEFAULT '0', `ssh_chroot` varchar(255) NOT NULL DEFAULT 'no,jailkit,ssh-chroot', `limit_webdav_user` int(11) NOT NULL DEFAULT '0', `limit_backup` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y', `limit_directive_snippets` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n', `limit_aps` int(11) NOT NULL DEFAULT '-1', `default_dnsserver` int(11) unsigned NOT NULL DEFAULT '1', `db_servers` text, `limit_dns_zone` int(11) NOT NULL DEFAULT '-1', `default_slave_dnsserver` int(11) unsigned NOT NULL DEFAULT '1', `limit_dns_slave_zone` int(11) NOT NULL DEFAULT '-1', `limit_dns_record` int(11) NOT NULL DEFAULT '-1', `default_dbserver` int(11) NOT NULL DEFAULT '1', `dns_servers` text, `limit_database` int(11) NOT NULL DEFAULT '-1', `limit_database_postgresql` int(11) NOT NULL default '-1', `limit_database_user` int(11) NOT NULL DEFAULT '-1', `limit_database_quota` int(11) NOT NULL default '-1', `limit_cron` int(11) NOT NULL DEFAULT '0', `limit_cron_type` enum('url','chrooted','full') NOT NULL DEFAULT 'url', `limit_cron_frequency` int(11) NOT NULL DEFAULT '5', `limit_traffic_quota` int(11) NOT NULL DEFAULT '-1', `limit_client` int(11) NOT NULL DEFAULT '0', `limit_domainmodule` int(11) NOT NULL DEFAULT '0', `limit_mailmailinglist` int(11) NOT NULL DEFAULT '-1', `limit_openvz_vm` int(11) NOT NULL DEFAULT '0', `limit_openvz_vm_template_id` int(11) NOT NULL DEFAULT '0', `parent_client_id` int(11) unsigned NOT NULL DEFAULT '0', `username` varchar(64) DEFAULT NULL, `password` varchar(200) DEFAULT NULL, `language` char(2) NOT NULL DEFAULT 'en', `usertheme` varchar(32) NOT NULL DEFAULT 'default', `template_master` int(11) unsigned NOT NULL DEFAULT '0', `template_additional` text, `created_at` bigint(20) DEFAULT NULL, `locked` enum('n','y') NOT NULL DEFAULT 'n', `canceled` enum('n','y') NOT NULL DEFAULT 'n', `can_use_api` enum('n','y') NOT NULL DEFAULT 'n', `tmp_data` mediumblob, `id_rsa` text, `ssh_rsa` text, `customer_no_template` varchar(255) DEFAULT 'R[CLIENTID]C[CUSTOMER_NO]', `customer_no_start` int(11) NOT NULL DEFAULT '1', `customer_no_counter` int(11) NOT NULL DEFAULT '0', `added_date` date NULL DEFAULT NULL, `added_by` varchar(255) DEFAULT NULL, `validation_status` enum('accept','review','reject') NOT NULL DEFAULT 'accept', `risk_score` int(10) unsigned NOT NULL DEFAULT '0', `activation_code` varchar(10) NOT NULL DEFAULT '', PRIMARY KEY (`client_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `client_circle` -- CREATE TABLE `client_circle` ( `circle_id` int(11) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `circle_name` varchar(64) DEFAULT NULL, `client_ids` text, `description` text, `active` enum('n','y') NOT NULL default 'y', PRIMARY KEY (`circle_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `client_template` -- CREATE TABLE `client_template` ( `template_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `template_name` varchar(64) NOT NULL DEFAULT '', `template_type` varchar(1) NOT NULL default 'm', `mail_servers` text, `limit_maildomain` int(11) NOT NULL default '-1', `limit_mailbox` int(11) NOT NULL default '-1', `limit_mailalias` int(11) NOT NULL default '-1', `limit_mailaliasdomain` int(11) NOT NULL default '-1', `limit_mailforward` int(11) NOT NULL default '-1', `limit_mailcatchall` int(11) NOT NULL default '-1', `limit_mailrouting` int(11) NOT NULL default '0', `limit_mail_wblist` int(11) NOT NULL default '0', `limit_mailfilter` int(11) NOT NULL default '-1', `limit_fetchmail` int(11) NOT NULL default '-1', `limit_mailquota` int(11) NOT NULL default '-1', `limit_spamfilter_wblist` int(11) NOT NULL default '0', `limit_spamfilter_user` int(11) NOT NULL default '0', `limit_spamfilter_policy` int(11) NOT NULL default '0', `limit_mail_backup` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y', `limit_relayhost` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n', `default_xmppserver` int(11) unsigned NOT NULL DEFAULT '1', `xmpp_servers` text, `limit_xmpp_domain` int(11) NOT NULL DEFAULT '-1', `limit_xmpp_user` int(11) NOT NULL DEFAULT '-1', `limit_xmpp_muc` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_anon` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_vjud` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_proxy` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_status` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_pastebin` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_httparchive` ENUM( 'n', 'y' ) NOT NULL default 'n', `web_servers` text, `limit_web_ip` text, `limit_web_domain` int(11) NOT NULL default '-1', `limit_web_quota` int(11) NOT NULL default '-1', `web_php_options` varchar(255) NOT NULL DEFAULT '', `limit_cgi` enum('n','y') NOT NULL DEFAULT 'n', `limit_ssi` enum('n','y') NOT NULL DEFAULT 'n', `limit_perl` enum('n','y') NOT NULL DEFAULT 'n', `limit_ruby` enum('n','y') NOT NULL DEFAULT 'n', `limit_python` enum('n','y') NOT NULL DEFAULT 'n', `force_suexec` enum('n','y') NOT NULL DEFAULT 'y', `limit_hterror` enum('n','y') NOT NULL DEFAULT 'n', `limit_wildcard` enum('n','y') NOT NULL DEFAULT 'n', `limit_ssl` enum('n','y') NOT NULL DEFAULT 'n', `limit_ssl_letsencrypt` enum('n','y') NOT NULL DEFAULT 'n', `limit_web_subdomain` int(11) NOT NULL default '-1', `limit_web_aliasdomain` int(11) NOT NULL default '-1', `limit_ftp_user` int(11) NOT NULL default '-1', `limit_shell_user` int(11) NOT NULL default '0', `ssh_chroot` varchar(255) NOT NULL DEFAULT '', `limit_webdav_user` int(11) NOT NULL default '0', `limit_backup` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y', `limit_directive_snippets` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n', `limit_aps` int(11) NOT NULL DEFAULT '-1', `dns_servers` text, `limit_dns_zone` int(11) NOT NULL default '-1', `default_slave_dnsserver` int(11) NOT NULL DEFAULT '0', `limit_dns_slave_zone` int(11) NOT NULL default '-1', `limit_dns_record` int(11) NOT NULL default '-1', `db_servers` text, `limit_database` int(11) NOT NULL default '-1', `limit_database_postgresql` int(11) NOT NULL default '-1', `limit_database_user` int(11) NOT NULL DEFAULT '-1', `limit_database_quota` int(11) NOT NULL default '-1', `limit_cron` int(11) NOT NULL default '0', `limit_cron_type` enum('url','chrooted','full') NOT NULL default 'url', `limit_cron_frequency` int(11) NOT NULL default '5', `limit_traffic_quota` int(11) NOT NULL default '-1', `limit_client` int(11) NOT NULL default '0', `limit_domainmodule` int(11) NOT NULL DEFAULT '0', `limit_mailmailinglist` int(11) NOT NULL default '-1', `limit_openvz_vm` int(11) NOT NULL DEFAULT '0', `limit_openvz_vm_template_id` int(11) NOT NULL DEFAULT '0', PRIMARY KEY (`template_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `client_template_assigned` -- CREATE TABLE `client_template_assigned` ( `assigned_template_id` bigint(20) NOT NULL auto_increment, `client_id` bigint(11) NOT NULL DEFAULT '0', `client_template_id` int(11) NOT NULL DEFAULT '0', PRIMARY KEY (`assigned_template_id`), KEY `client_id` (`client_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `invoice_message_template` -- CREATE TABLE `client_message_template` ( `client_message_template_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `template_type` varchar(255) DEFAULT NULL, `template_name` varchar(255) DEFAULT NULL, `subject` varchar(255) DEFAULT NULL, `message` text, PRIMARY KEY (`client_message_template_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -- Dumping data for table `invoice_message_template` -- -- -------------------------------------------------------- -- -- Table structure for table `country` -- CREATE TABLE `country` ( `iso` char(2) NOT NULL DEFAULT '', `name` varchar(64) NOT NULL DEFAULT '', `printable_name` varchar(64) NOT NULL DEFAULT '', `iso3` char(3) DEFAULT NULL, `numcode` smallint(6) DEFAULT NULL, `eu` enum('n','y') NOT NULL DEFAULT 'n', PRIMARY KEY (`iso`) ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Table structure for table `cron` -- CREATE TABLE `cron` ( `id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NULL default NULL, `sys_perm_group` varchar(5) NULL default NULL, `sys_perm_other` varchar(5) NULL default NULL, `server_id` int(11) unsigned NOT NULL default '0', `parent_domain_id` int(11) unsigned NOT NULL default '0', `type` enum('url','chrooted','full') NOT NULL default 'url', `command` TEXT, `run_min` varchar(100) NULL, `run_hour` varchar(100) NULL, `run_mday` varchar(100) NULL, `run_month` varchar(100) NULL, `run_wday` varchar(100) NULL, `log` enum('n','y') NOT NULL default 'n', `active` enum('n','y') NOT NULL default 'y', PRIMARY KEY (`id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `directive_snippets` -- CREATE TABLE IF NOT EXISTS `directive_snippets` ( `directive_snippets_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `name` varchar(255) DEFAULT NULL, `type` varchar(255) DEFAULT NULL, `snippet` mediumtext, `customer_viewable` ENUM('n','y') NOT NULL DEFAULT 'n', `required_php_snippets` varchar(255) NOT NULL DEFAULT '', `active` enum('n','y') NOT NULL DEFAULT 'y', `master_directive_snippets_id` int(11) unsigned NOT NULL DEFAULT '0', `update_sites` ENUM('y','n') NOT NULL DEFAULT 'n', PRIMARY KEY (`directive_snippets_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `dns_rr` -- CREATE TABLE `dns_rr` ( `id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `server_id` int(11) NOT NULL default '1', `zone` int(11) unsigned NOT NULL DEFAULT '0', `name` varchar(255) NOT NULL DEFAULT '', `type` enum('A','AAAA','ALIAS','CNAME','DNAME','CAA','DS','HINFO','LOC','MX','NAPTR','NS','PTR','RP','SRV','SSHFP','TXT','TLSA','DNSKEY') default NULL, `data` TEXT NOT NULL, `aux` int(11) unsigned NOT NULL default '0', `ttl` int(11) unsigned NOT NULL default '3600', `active` enum('N','Y') NOT NULL default 'Y', `stamp` timestamp NOT NULL default CURRENT_TIMESTAMP, `serial` int(10) unsigned default NULL, PRIMARY KEY (`id`), KEY `rr` (`zone`,`type`,`name`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `dns_slave` -- CREATE TABLE `dns_slave` ( `id` int(10) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `server_id` int(11) NOT NULL default '1', `origin` varchar(255) NOT NULL DEFAULT '', `ns` varchar(255) NOT NULL DEFAULT '', `active` enum('N','Y') NOT NULL DEFAULT 'N', `xfer` TEXT NULL, PRIMARY KEY (`id`), UNIQUE KEY `slave` (`origin`,`server_id`), KEY `active` (`active`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `dns_ssl_ca` -- CREATE TABLE IF NOT EXISTS `dns_ssl_ca` ( `id` int(10) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `active` enum('N','Y') NOT NULL DEFAULT 'N', `ca_name` varchar(255) NOT NULL DEFAULT '', `ca_issue` varchar(255) NOT NULL DEFAULT '', `ca_wildcard` enum('Y','N') NOT NULL DEFAULT 'N', `ca_iodef` text NOT NULL, `ca_critical` tinyint(1) NOT NULL DEFAULT '0', PRIMARY KEY (`id`), UNIQUE KEY (`ca_issue`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; ALTER TABLE `dns_ssl_ca` ADD UNIQUE(`ca_issue`); INSERT INTO `dns_ssl_ca` (`id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `active`, `ca_name`, `ca_issue`, `ca_wildcard`, `ca_iodef`, `ca_critical`) VALUES (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'ACCV', 'accv.es', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Actalis', 'actalis.it', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Amazon Trust Services', 'amazon.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'ANF AC', 'anf.es', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Apple', 'pki.apple.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'BJCA', 'bjca.cn', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Buypass', 'buypass.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'CATCert', 'aoc.cat', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Certicámara', 'certicamara.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Certigna', 'certigna.fr', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Certainly', 'certainly.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'certSIGN', 'certsign.ro', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Certinomis (Docaposte)', 'www.certinomis.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Certizen', 'ecert.gov.hk', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Certum (Asseco Data Systems)', 'certum.pl', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'CFCA', 'cfca.com.cn', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Chunghwa Telecom', 'pki.hinet.net', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Cybertrust Japan / JCSI', 'cybertrust.co.jp', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Deutsche Telekom Security (T-Systems)', 'telesec.de', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'DFN-PKI', 'pki.dfn.de', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'DigiCert (incl. Thawte, GeoTrust, RapidSSL)', 'digicert.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'D-TRUST', 'dtrust.de', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'EDICOM', 'edicomgroup.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'emSign (eMudhra)', 'emsign.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'e-tugra', 'e-tugra.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Eviden (Atos TrustedRoot)', 'atos.net', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Firmaprofesional', 'firmaprofesional.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'FNMT', 'fnmt.es', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'GDCA', 'gdca.com.cn', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'GlobalSign', 'globalsign.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'GLOBALTRUST', 'globaltrust.eu', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'GoDaddy', 'godaddy.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Google Trust Services', 'pki.goog', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'GRCA', 'gca.nat.gov.tw', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'HARICA', 'harica.gr', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'IdenTrust', 'identrust.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'iTrusChina', 'itrus.cn', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Izenpe', 'izenpe.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Kamu SM', 'kamusm.gov.tr', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'KIR (Poland)', 'elektronicznypodpis.pl', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'KPN', 'kpn.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Let''s Encrypt', 'letsencrypt.org', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Microsec (e-Szigno)', 'e-szigno.hu', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'MULTICERT', 'multicert.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'NAVER Cloud Trust Services', 'navercloudtrust.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'NetLock', 'netlock.hu', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Network Solutions (Web.com)', 'web.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'OISTE (WISeKey)', 'wisekey.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'PKIoverheid', 'pkioverheid.nl', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'PostSignum', 'postsignum.cz', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'QuoVadis', 'quovadisglobal.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'SECOM', 'secomtrust.net', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Sectigo', 'sectigo.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'SHECA', 'sheca.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'SK ID Solutions', 'skidsolutions.eu', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'SSL.com', 'ssl.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'SwissSign', 'swisssign.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Swiss Federal IT (FOITT)', 'admin.ch', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Telia', 'telia.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'TrustAsia', 'trustasia.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'TunTrust (ANCE)', 'tuntrust.tn', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'TWCA', 'twca.com.tw', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Viking Cloud (Trustwave)', 'trustwave.com', 'Y', '', 0); -- -------------------------------------------------------- -- -- Table structure for table `dns_soa` -- CREATE TABLE `dns_soa` ( `id` int(10) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `server_id` int(11) NOT NULL default '1', `origin` varchar(255) NOT NULL DEFAULT '', `ns` varchar(255) NOT NULL DEFAULT '', `mbox` varchar(255) NOT NULL DEFAULT '', `serial` int(11) unsigned NOT NULL default '1', `refresh` int(11) unsigned NOT NULL default '28800', `retry` int(11) unsigned NOT NULL default '7200', `expire` int(11) unsigned NOT NULL default '604800', `minimum` int(11) unsigned NOT NULL default '3600', `ttl` int(11) unsigned NOT NULL default '3600', `active` enum('N','Y') NOT NULL DEFAULT 'N', `xfer` TEXT NULL, `also_notify` TEXT NULL, `update_acl` varchar(255) default NULL, `dnssec_initialized` ENUM('Y','N') NOT NULL DEFAULT 'N', `dnssec_wanted` ENUM('Y','N') NOT NULL DEFAULT 'N', `dnssec_algo` SET('NSEC3RSASHA1','ECDSAP256SHA256') NOT NULL DEFAULT 'ECDSAP256SHA256', `dnssec_last_signed` BIGINT NOT NULL DEFAULT '0', `dnssec_info` TEXT NULL, `rendered_zone` MEDIUMTEXT NULL, PRIMARY KEY (`id`), UNIQUE KEY `origin` (`origin`), KEY `active` (`active`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `dns_template` -- CREATE TABLE `dns_template` ( `template_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `name` varchar(64) default NULL, `fields` varchar(255) default NULL, `template` text, `visible` enum('N','Y') NOT NULL default 'Y', PRIMARY KEY (`template_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -- Table structure for table `domain` -- CREATE TABLE `domain` ( `domain_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL default '', `sys_perm_group` varchar(5) NOT NULL default '', `sys_perm_other` varchar(5) NOT NULL default '', `domain` varchar(255) NOT NULL default '', PRIMARY KEY (`domain_id`), UNIQUE KEY `domain` (`domain`) ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Table structure for table `firewall` -- CREATE TABLE `firewall` ( `firewall_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `server_id` int(11) unsigned NOT NULL default '0', `tcp_port` text, `udp_port` text, `active` enum('n','y') NOT NULL default 'y', PRIMARY KEY (`firewall_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `ftp_user` -- CREATE TABLE `ftp_user` ( `ftp_user_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `server_id` int(11) unsigned NOT NULL default '0', `parent_domain_id` int(11) unsigned NOT NULL default '0', `username` varchar(64) default NULL, `username_prefix` varchar(50) NOT NULL default '', `password` varchar(200) default NULL, `quota_size` bigint(20) NOT NULL default '-1', `active` enum('n','y') NOT NULL default 'y', `uid` varchar(64) default NULL, `gid` varchar(64) default NULL, `dir` varchar(255) default NULL, `quota_files` bigint(20) NOT NULL default '-1', `ul_ratio` int(11) NOT NULL default '-1', `dl_ratio` int(11) NOT NULL default '-1', `ul_bandwidth` int(11) NOT NULL default '-1', `dl_bandwidth` int(11) NOT NULL default '-1', `expires` datetime NULL DEFAULT NULL, `user_type` set('user','system') NOT NULL DEFAULT 'user', `user_config` text, PRIMARY KEY (`ftp_user_id`), KEY `active` (`active`), KEY `server_id` (`server_id`), KEY `username` (`username`), KEY `quota_files` (`quota_files`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `ftp_traffic` -- CREATE TABLE `ftp_traffic` ( `hostname` varchar(255) NOT NULL, `traffic_date` date NOT NULL, `in_bytes` bigint(32) unsigned NOT NULL, `out_bytes` bigint(32) unsigned NOT NULL, UNIQUE KEY (`hostname`,`traffic_date`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `help_faq` -- CREATE TABLE `help_faq` ( `hf_id` int(11) NOT NULL AUTO_INCREMENT, `hf_section` int(11) DEFAULT NULL, `hf_order` int(11) DEFAULT '0', `hf_question` text, `hf_answer` text, `sys_userid` int(11) DEFAULT NULL, `sys_groupid` int(11) DEFAULT NULL, `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, PRIMARY KEY (`hf_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `help_faq_sections` -- CREATE TABLE `help_faq_sections` ( `hfs_id` int(11) NOT NULL AUTO_INCREMENT, `hfs_name` varchar(255) DEFAULT NULL, `hfs_order` int(11) DEFAULT '0', `sys_userid` int(11) DEFAULT NULL, `sys_groupid` int(11) DEFAULT NULL, `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, PRIMARY KEY (`hfs_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- Table structure for table `iptables` -- DROP TABLE IF EXISTS `iptables`; CREATE TABLE `iptables` ( `iptables_id` int(10) unsigned NOT NULL AUTO_INCREMENT, `server_id` int(10) unsigned NOT NULL DEFAULT '0', `table` varchar(10) DEFAULT NULL COMMENT 'INPUT OUTPUT FORWARD', `source_ip` varchar(16) DEFAULT NULL, `destination_ip` varchar(16) DEFAULT NULL, `protocol` varchar(10) DEFAULT 'TCP' COMMENT 'TCP UDP GRE', `singleport` varchar(10) DEFAULT NULL, `multiport` varchar(40) DEFAULT NULL, `state` varchar(20) DEFAULT NULL COMMENT 'NEW ESTABLISHED RECNET etc', `target` varchar(10) DEFAULT NULL COMMENT 'ACCEPT DROP REJECT LOG', `active` enum('n','y') NOT NULL DEFAULT 'y', PRIMARY KEY (`iptables_id`) ) AUTO_INCREMENT=5 DEFAULT CHARSET=utf8; -- -------------------------------------------------------- -- -- Table structure for table `mail_access` -- CREATE TABLE `mail_access` ( `access_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL default '', `sys_perm_group` varchar(5) NOT NULL default '', `sys_perm_other` varchar(5) NOT NULL default '', `server_id` int(11) NOT NULL default '0', `source` varchar(255) NOT NULL DEFAULT '', `access` varchar(255) NOT NULL DEFAULT '', `type` set('recipient','sender','client') NOT NULL DEFAULT 'recipient', `active` enum('n','y') NOT NULL default 'y', PRIMARY KEY (`access_id`), UNIQUE KEY `unique_source` (`server_id`,`source`,`type`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `mail_backup` -- CREATE TABLE `mail_backup` ( `backup_id` int(10) unsigned NOT NULL AUTO_INCREMENT, `server_id` int(10) unsigned NOT NULL DEFAULT '0', `parent_domain_id` int(10) unsigned NOT NULL DEFAULT '0', `mailuser_id` int(10) unsigned NOT NULL DEFAULT '0', `backup_mode` varchar(64) NOT NULL DEFAULT '', `tstamp` int(10) unsigned NOT NULL DEFAULT '0', `filename` varchar(255) NOT NULL DEFAULT '', `filesize` VARCHAR(20) NOT NULL DEFAULT '', PRIMARY KEY (`backup_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `mail_content_filter` -- CREATE TABLE `mail_content_filter` ( `content_filter_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `server_id` int(11) NOT NULL default '0', `type` varchar(255) default NULL, `pattern` varchar(255) default NULL, `data` varchar(255) default NULL, `action` varchar(255) default NULL, `active` varchar(255) NOT NULL default 'y', PRIMARY KEY (`content_filter_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `mail_domain` -- CREATE TABLE `mail_domain` ( `domain_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL default '', `sys_perm_group` varchar(5) NOT NULL default '', `sys_perm_other` varchar(5) NOT NULL default '', `server_id` int(11) unsigned NOT NULL default '0', `domain` varchar(255) NOT NULL default '', `dkim` ENUM( 'n', 'y' ) NOT NULL default 'n', `dkim_selector` varchar(63) NOT NULL DEFAULT 'default', `dkim_private` mediumtext NULL, `dkim_public` mediumtext NULL, `relay_host` varchar(255) NOT NULL DEFAULT '', `relay_user` varchar(255) NOT NULL DEFAULT '', `relay_pass` varchar(255) NOT NULL DEFAULT '', `active` enum('n','y') NOT NULL DEFAULT 'n', `local_delivery` enum('n','y') NOT NULL DEFAULT 'y', PRIMARY KEY (`domain_id`), KEY `server_id` (`server_id`,`domain`), KEY `domain_active` (`domain`,`active`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `mail_forwarding` -- CREATE TABLE `mail_forwarding` ( `forwarding_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL default '', `sys_perm_group` varchar(5) NOT NULL default '', `sys_perm_other` varchar(5) NOT NULL default '', `server_id` int(11) unsigned NOT NULL default '0', `source` varchar(255) NOT NULL DEFAULT '', `destination` text, `type` enum('alias','aliasdomain','forward','catchall') NOT NULL default 'alias', `active` enum('n','y') NOT NULL DEFAULT 'n', `allow_send_as` ENUM('n','y') NOT NULL DEFAULT 'n', `greylisting` enum('n','y' ) NOT NULL DEFAULT 'n', PRIMARY KEY (`forwarding_id`), KEY `server_id` (`server_id`, `source`), KEY `type` (`type`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `mail_get` -- CREATE TABLE `mail_get` ( `mailget_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `server_id` int(11) unsigned NOT NULL default '0', `type` varchar(255) default NULL, `source_server` varchar(255) default NULL, `source_username` varchar(255) default NULL, `source_password` varchar(64) default NULL, `source_delete` varchar(255) NOT NULL default 'y', `source_read_all` varchar(255) NOT NULL default 'y', `destination` varchar(255) default NULL, `active` varchar(255) NOT NULL default 'y', PRIMARY KEY (`mailget_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Tabellenstruktur für Tabelle `mail_mailinglist` -- CREATE TABLE `mail_mailinglist` ( `mailinglist_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `server_id` int(11) unsigned NOT NULL default '0', `domain` varchar(255) NOT NULL DEFAULT '', `listname` varchar(255) NOT NULL DEFAULT '', `email` varchar(255) NOT NULL DEFAULT '', `password` varchar(255) NOT NULL DEFAULT '', PRIMARY KEY (`mailinglist_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for Table `mail_relay_domain` -- CREATE TABLE IF NOT EXISTS `mail_relay_domain` ( `relay_domain_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `domain` varchar(255) DEFAULT NULL, `access` varchar(255) NOT NULL DEFAULT 'OK', `active` varchar(255) NOT NULL DEFAULT 'y', PRIMARY KEY (`relay_domain_id`), UNIQUE KEY `domain` (`domain`, `server_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for Table `mail_relay_recipient` -- CREATE TABLE IF NOT EXISTS `mail_relay_recipient` ( `relay_recipient_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `source` varchar(255) DEFAULT NULL, `access` varchar(255) NOT NULL DEFAULT 'OK', `active` varchar(255) NOT NULL DEFAULT 'y', PRIMARY KEY (`relay_recipient_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `mail_traffic` -- CREATE TABLE `mail_traffic` ( `traffic_id` int(11) unsigned NOT NULL auto_increment, `mailuser_id` int(11) unsigned NOT NULL DEFAULT '0', `month` char(7) NOT NULL DEFAULT '', `traffic` bigint(20) unsigned NOT NULL DEFAULT '0', PRIMARY KEY (`traffic_id`), KEY `mailuser_id` (`mailuser_id`,`month`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `mail_transport` -- CREATE TABLE `mail_transport` ( `transport_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL default '', `sys_perm_group` varchar(5) NOT NULL default '', `sys_perm_other` varchar(5) NOT NULL default '', `server_id` int(11) unsigned NOT NULL default '0', `domain` varchar(255) NOT NULL default '', `transport` varchar(255) NOT NULL DEFAULT '', `sort_order` int(11) unsigned NOT NULL default '5', `active` enum('n','y') NOT NULL DEFAULT 'n', PRIMARY KEY (`transport_id`), KEY `server_id` (`server_id`,`transport`), UNIQUE KEY `server_id_2` (`server_id`, `domain`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `mail_user` -- CREATE TABLE `mail_user` ( `mailuser_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL default '', `sys_perm_group` varchar(5) NOT NULL default '', `sys_perm_other` varchar(5) NOT NULL default '', `server_id` int(11) unsigned NOT NULL default '0', `email` varchar(255) NOT NULL default '', `login` varchar(255) NOT NULL default '', `password` varchar(255) NOT NULL default '', `name` varchar(255) NOT NULL default '', `uid` int(11) NOT NULL default '5000', `gid` int(11) NOT NULL default '5000', `maildir` varchar(255) NOT NULL default '', `maildir_format` varchar(255) NOT NULL default 'maildir', `quota` bigint(20) NOT NULL default '0', `cc` text, `forward_in_lda` enum('n','y') NOT NULL default 'n', `sender_cc` varchar(255) NOT NULL default '', `homedir` varchar(255) NOT NULL default '', `autoresponder` enum('n','y') NOT NULL default 'n', `autoresponder_start_date` datetime NULL default NULL, `autoresponder_end_date` datetime NULL default NULL, `autoresponder_subject` varchar(255) NOT NULL default 'Out of office reply', `autoresponder_text` mediumtext NULL, `move_junk` enum('y','a','n') NOT NULL default 'y', `purge_trash_days` INT NOT NULL DEFAULT '0', `purge_junk_days` INT NOT NULL DEFAULT '0', `custom_mailfilter` mediumtext, `postfix` enum('n','y') NOT NULL default 'y', `greylisting` enum('n','y' ) NOT NULL DEFAULT 'n', `access` enum('n','y') NOT NULL default 'y', `disableimap` enum('n','y') NOT NULL default 'n', `disablepop3` enum('n','y') NOT NULL default 'n', `disabledeliver` enum('n','y') NOT NULL default 'n', `disablesmtp` enum('n','y') NOT NULL default 'n', `disablesieve` enum('n','y') NOT NULL default 'n', `disablesieve-filter` enum('n','y') NOT NULL default 'n', `disablelda` enum('n','y') NOT NULL default 'n', `disablelmtp` enum('n','y') NOT NULL default 'n', `disabledoveadm` enum('n','y') NOT NULL default 'n', `last_access` int(11) NULL DEFAULT NULL, `disablequota-status` enum('n','y') NOT NULL default 'n', `disableindexer-worker` enum('n','y') NOT NULL default 'n', `disablereplicator` enum('n','y') NOT NULL default 'n', `last_quota_notification` date NULL default NULL, `backup_interval` VARCHAR( 255 ) NOT NULL default 'none', `backup_copies` INT NOT NULL DEFAULT '1', `imap_prefix` varchar(255) NULL default NULL, PRIMARY KEY (`mailuser_id`), KEY `server_id` (`server_id`,`email`), KEY `email_access` (`email`,`access`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `mail_user_filter` -- CREATE TABLE `mail_user_filter` ( `filter_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `mailuser_id` int(11) unsigned NOT NULL default '0', `rulename` varchar(64) default NULL, `source` varchar(255) default NULL, `searchterm` varchar(255) default NULL, `op` varchar(255) default NULL, `action` varchar(255) default NULL, `target` varchar(255) default NULL, `active` enum('n','y') NOT NULL default 'y', PRIMARY KEY (`filter_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `monitor_data` -- CREATE TABLE `monitor_data` ( `server_id` int(11) unsigned NOT NULL default '0', `type` varchar(255) NOT NULL default '', `created` int(11) unsigned NOT NULL default '0', `data` mediumtext, `state` enum('no_state','unknown','ok','info','warning','critical','error') NOT NULL DEFAULT 'unknown', PRIMARY KEY (`server_id`,`type`,`created`) ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Table structure for table `openvz_ip` -- CREATE TABLE IF NOT EXISTS `openvz_ip` ( `ip_address_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `ip_address` varchar(39) DEFAULT NULL, `vm_id` int(11) NOT NULL DEFAULT '0', `reserved` varchar(255) NOT NULL DEFAULT 'n', `additional` varchar(255) NOT NULL DEFAULT 'n', PRIMARY KEY (`ip_address_id`) ) DEFAULT CHARSET=utf8mb4 ; -- -- Dumping data for table `openvz_ip` -- -- -------------------------------------------------------- -- -- Table structure for table `openvz_ostemplate` -- CREATE TABLE IF NOT EXISTS `openvz_ostemplate` ( `ostemplate_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `template_name` varchar(255) DEFAULT NULL, `template_file` varchar(255) NOT NULL DEFAULT '', `server_id` int(11) NOT NULL DEFAULT '0', `allservers` varchar(255) NOT NULL DEFAULT 'y', `active` varchar(255) NOT NULL DEFAULT 'y', `description` text, PRIMARY KEY (`ostemplate_id`) ) DEFAULT CHARSET=utf8mb4 ; -- -- Dumping data for table `openvz_ostemplate` -- INSERT INTO `openvz_ostemplate` (`ostemplate_id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `template_name`, `template_file`, `server_id`, `allservers`, `active`, `description`) VALUES(1, 1, 1, 'riud', 'riud', '', 'Debian minimal', 'debian-minimal-x86', 1, 'y', 'y', 'Debian minimal image.'); -- -------------------------------------------------------- -- -- Table structure for table `openvz_template` -- CREATE TABLE IF NOT EXISTS `openvz_template` ( `template_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `template_name` varchar(255) DEFAULT NULL, `diskspace` int(11) NOT NULL DEFAULT '0', `traffic` int(11) NOT NULL DEFAULT '-1', `bandwidth` int(11) NOT NULL DEFAULT '-1', `ram` int(11) NOT NULL DEFAULT '0', `ram_burst` int(11) NOT NULL DEFAULT '0', `cpu_units` int(11) NOT NULL DEFAULT '1000', `cpu_num` int(11) NOT NULL DEFAULT '4', `cpu_limit` int(11) NOT NULL DEFAULT '400', `io_priority` int(11) NOT NULL DEFAULT '4', `active` varchar(255) NOT NULL DEFAULT 'y', `description` text, `numproc` varchar(255) DEFAULT NULL, `numtcpsock` varchar(255) DEFAULT NULL, `numothersock` varchar(255) DEFAULT NULL, `vmguarpages` varchar(255) DEFAULT NULL, `kmemsize` varchar(255) DEFAULT NULL, `tcpsndbuf` varchar(255) DEFAULT NULL, `tcprcvbuf` varchar(255) DEFAULT NULL, `othersockbuf` varchar(255) DEFAULT NULL, `dgramrcvbuf` varchar(255) DEFAULT NULL, `oomguarpages` varchar(255) DEFAULT NULL, `privvmpages` varchar(255) DEFAULT NULL, `lockedpages` varchar(255) DEFAULT NULL, `shmpages` varchar(255) DEFAULT NULL, `physpages` varchar(255) DEFAULT NULL, `numfile` varchar(255) DEFAULT NULL, `avnumproc` varchar(255) DEFAULT NULL, `numflock` varchar(255) DEFAULT NULL, `numpty` varchar(255) DEFAULT NULL, `numsiginfo` varchar(255) DEFAULT NULL, `dcachesize` varchar(255) DEFAULT NULL, `numiptent` varchar(255) DEFAULT NULL, `swappages` varchar(255) DEFAULT NULL, `hostname` varchar(255) DEFAULT NULL, `nameserver` varchar(255) DEFAULT NULL, `create_dns` varchar(1) NOT NULL DEFAULT 'n', `capability` varchar(255) DEFAULT NULL, `features` varchar(255) DEFAULT NULL, `iptables` varchar(255) DEFAULT NULL, `custom` text, PRIMARY KEY (`template_id`) ) DEFAULT CHARSET=utf8mb4 ; -- -- Dumping data for table `openvz_template` -- INSERT INTO `openvz_template` (`template_id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `template_name`, `diskspace`, `traffic`, `bandwidth`, `ram`, `ram_burst`, `cpu_units`, `cpu_num`, `cpu_limit`, `io_priority`, `active`, `description`, `numproc`, `numtcpsock`, `numothersock`, `vmguarpages`, `kmemsize`, `tcpsndbuf`, `tcprcvbuf`, `othersockbuf`, `dgramrcvbuf`, `oomguarpages`, `privvmpages`, `lockedpages`, `shmpages`, `physpages`, `numfile`, `avnumproc`, `numflock`, `numpty`, `numsiginfo`, `dcachesize`, `numiptent`, `swappages`, `hostname`, `nameserver`, `create_dns`, `capability`, `features`, `iptables`, `custom`) VALUES(1, 1, 1, 'riud', 'riud', '', 'small', 10, -1, -1, 256, 512, 1000, 4, 400, 4, 'y', '', '999999:999999', '7999992:7999992', '7999992:7999992', '65536:unlimited', '2147483646:2147483646', '214748160:396774400', '214748160:396774400', '214748160:396774400', '214748160:396774400', '65536:65536', '131072:139264', '999999:999999', '65536:65536', '0:2147483647', '23999976:23999976', '180:180', '999999:999999', '500000:500000', '999999:999999', '2147483646:2147483646', '999999:999999', '256000:256000', 'v{VEID}.test.tld', '8.8.8.8 8.8.4.4', 'n', '', '', '', ''); -- -------------------------------------------------------- -- -- Table structure for table `openvz_traffic` -- CREATE TABLE IF NOT EXISTS `openvz_traffic` ( `veid` int(11) NOT NULL DEFAULT '0', `traffic_date` date NULL DEFAULT NULL, `traffic_bytes` bigint(32) unsigned NOT NULL DEFAULT '0', UNIQUE KEY (`veid`,`traffic_date`) ) DEFAULT CHARSET=utf8; -- -- Dumping data for table `openvz_traffic` -- -- -------------------------------------------------------- -- -- Table structure for table `openvz_vm` -- CREATE TABLE IF NOT EXISTS `openvz_vm` ( `vm_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `veid` int(10) unsigned NOT NULL DEFAULT '0', `ostemplate_id` int(11) NOT NULL DEFAULT '0', `template_id` int(11) NOT NULL DEFAULT '0', `ip_address` varchar(255) NOT NULL DEFAULT '', `hostname` varchar(255) DEFAULT NULL, `vm_password` varchar(255) DEFAULT NULL, `start_boot` varchar(255) NOT NULL DEFAULT 'y', `bootorder` int(11) NOT NULL DEFAULT '1', `active` varchar(255) NOT NULL DEFAULT 'y', `active_until_date` date NULL DEFAULT NULL, `description` text, `diskspace` int(11) NOT NULL DEFAULT '0', `traffic` int(11) NOT NULL DEFAULT '-1', `bandwidth` int(11) NOT NULL DEFAULT '-1', `ram` int(11) NOT NULL DEFAULT '0', `ram_burst` int(11) NOT NULL DEFAULT '0', `cpu_units` int(11) NOT NULL DEFAULT '1000', `cpu_num` int(11) NOT NULL DEFAULT '4', `cpu_limit` int(11) NOT NULL DEFAULT '400', `io_priority` int(11) NOT NULL DEFAULT '4', `nameserver` varchar(255) NOT NULL DEFAULT '8.8.8.8 8.8.4.4', `create_dns` varchar(1) NOT NULL DEFAULT 'n', `capability` text, `features` text, `iptabless` text, `config` mediumtext, `custom` text, PRIMARY KEY (`vm_id`) ) DEFAULT CHARSET=utf8mb4 ; -- -- Dumping data for table `openvz_vm` -- -- -------------------------------------------------------- -- -- Table structure for table `remote_session` -- CREATE TABLE `remote_session` ( `remote_session` varchar(64) NOT NULL DEFAULT '', `remote_userid` int(11) unsigned NOT NULL DEFAULT '0', `remote_functions` text, `client_login` tinyint(1) unsigned NOT NULL default '0', `tstamp` int(10) unsigned NOT NULL DEFAULT '0', `remote_ip` varchar(39) NOT NULL DEFAULT '', PRIMARY KEY (`remote_session`) ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Table structure for table `remote_user` -- CREATE TABLE `remote_user` ( `remote_userid` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `remote_username` varchar(64) NOT NULL DEFAULT '', `remote_password` varchar(200) NOT NULL DEFAULT '', `remote_access` enum('y','n') NOT NULL DEFAULT 'y', `remote_ips` TEXT, `remote_functions` text, PRIMARY KEY (`remote_userid`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `server` -- CREATE TABLE `server` ( `server_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL default '', `sys_perm_group` varchar(5) NOT NULL default '', `sys_perm_other` varchar(5) NOT NULL default '', `server_name` varchar(255) NOT NULL default '', `mail_server` tinyint(1) NOT NULL default '0', `web_server` tinyint(1) NOT NULL default '0', `dns_server` tinyint(1) NOT NULL default '0', `file_server` tinyint(1) NOT NULL default '0', `db_server` tinyint(1) NOT NULL default '0', `vserver_server` tinyint(1) NOT NULL default '0', `proxy_server` tinyint(1) NOT NULL default '0', `firewall_server` tinyint(1) NOT NULL default '0', `xmpp_server` tinyint(1) NOT NULL default '0', `config` text, `updated` bigint(20) unsigned NOT NULL default '0', `mirror_server_id` int(11) unsigned NOT NULL default '0', `dbversion` int(11) unsigned NOT NULL default '1', `active` tinyint(1) NOT NULL default '1', PRIMARY KEY (`server_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `server_ip` -- CREATE TABLE `server_ip` ( `server_ip_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `server_id` int(11) unsigned NOT NULL default '0', `client_id` int(11) unsigned NOT NULL default '0', `ip_type` enum( 'IPv4', 'IPv6' ) NOT NULL DEFAULT 'IPv4', `ip_address` varchar(39) default NULL, `virtualhost` enum('n','y') NOT NULL default 'y', `virtualhost_port` varchar(255) default '80,443', PRIMARY KEY (`server_ip_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `server_ip_map` -- CREATE TABLE `server_ip_map` ( `server_ip_map_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) unsigned NOT NULL DEFAULT '0', `source_ip` varchar(15) DEFAULT NULL, `destination_ip` varchar(35) DEFAULT '', `active` enum('n','y') NOT NULL DEFAULT 'y', PRIMARY KEY (`server_ip_map_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `server_php` -- CREATE TABLE `server_php` ( `server_php_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) unsigned NOT NULL DEFAULT '0', `client_id` int(11) unsigned NOT NULL DEFAULT '0', `name` varchar(255) DEFAULT NULL, `php_fastcgi_binary` varchar(255) DEFAULT NULL, `php_fastcgi_ini_dir` varchar(255) DEFAULT NULL, `php_fpm_init_script` varchar(255) DEFAULT NULL, `php_fpm_ini_dir` varchar(255) DEFAULT NULL, `php_fpm_pool_dir` varchar(255) DEFAULT NULL, `php_fpm_socket_dir` varchar(255) DEFAULT NULL, `php_cli_binary` varchar(255) DEFAULT NULL, `php_jk_section` varchar(255) DEFAULT NULL, `active` enum('n','y') NOT NULL DEFAULT 'y', `sortprio` int(20) NOT NULL DEFAULT 100, PRIMARY KEY (`server_php_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `shell_user` -- CREATE TABLE `shell_user` ( `shell_user_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `server_id` int(11) unsigned NOT NULL default '0', `parent_domain_id` int(11) unsigned NOT NULL default '0', `username` varchar(64) default NULL, `username_prefix` varchar(50) NOT NULL default '', `password` varchar(200) default NULL, `quota_size` bigint(20) NOT NULL default '-1', `active` enum('n','y') NOT NULL default 'y', `puser` varchar(255) default NULL, `pgroup` varchar(255) default NULL, `shell` varchar(255) NOT NULL default '/bin/bash', `dir` varchar(255) default NULL, `chroot` varchar(255) NOT NULL DEFAULT '', `ssh_rsa` text, PRIMARY KEY (`shell_user_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `spamfilter_policy` -- CREATE TABLE `spamfilter_policy` ( `id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `policy_name` varchar(64) default NULL, `virus_lover` enum('N','Y') default 'N', `spam_lover` enum('N','Y') default 'N', `banned_files_lover` enum('N','Y') default 'N', `bad_header_lover` enum('N','Y') default 'N', `bypass_virus_checks` enum('N','Y') default 'N', `bypass_spam_checks` enum('N','Y') default 'N', `bypass_banned_checks` enum('N','Y') default 'N', `bypass_header_checks` enum('N','Y') default 'N', `spam_modifies_subj` enum('N','Y') default 'N', `virus_quarantine_to` varchar(255) default NULL, `spam_quarantine_to` varchar(255) default NULL, `banned_quarantine_to` varchar(255) default NULL, `bad_header_quarantine_to` varchar(255) default NULL, `clean_quarantine_to` varchar(255) default NULL, `other_quarantine_to` varchar(255) default NULL, `spam_tag_level` DECIMAL(5,2) default NULL, `spam_tag2_level` DECIMAL(5,2) default NULL, `spam_kill_level` DECIMAL(5,2) default NULL, `spam_dsn_cutoff_level` DECIMAL(5,2) default NULL, `spam_quarantine_cutoff_level` DECIMAL(5,2) default NULL, `addr_extension_virus` varchar(64) default NULL, `addr_extension_spam` varchar(64) default NULL, `addr_extension_banned` varchar(64) default NULL, `addr_extension_bad_header` varchar(64) default NULL, `warnvirusrecip` VARCHAR(1) NULL default 'N', `warnbannedrecip` VARCHAR(1) NULL default 'N', `warnbadhrecip` VARCHAR(1) NULL default 'N', `newvirus_admin` varchar(64) default NULL, `virus_admin` varchar(64) default NULL, `banned_admin` varchar(64) default NULL, `bad_header_admin` varchar(64) default NULL, `spam_admin` varchar(64) default NULL, `spam_subject_tag` varchar(64) default NULL, `spam_subject_tag2` varchar(64) default NULL, `message_size_limit` int(11) unsigned default NULL, `banned_rulenames` varchar(64) default NULL, `policyd_quota_in` int(11) NOT NULL DEFAULT '-1', `policyd_quota_in_period` int(11) NOT NULL DEFAULT '24', `policyd_quota_out` int(11) NOT NULL DEFAULT '-1', `policyd_quota_out_period` int(11) NOT NULL DEFAULT '24', `policyd_greylist` ENUM( 'Y', 'N' ) NOT NULL DEFAULT 'N', `rspamd_greylisting` enum('n','y') NOT NULL DEFAULT 'n', `rspamd_spam_greylisting_level` decimal(5,2) DEFAULT NULL, `rspamd_spam_tag_level` decimal(5,2) DEFAULT NULL, `rspamd_spam_tag_method` enum('add_header','rewrite_subject') NOT NULL DEFAULT 'rewrite_subject', `rspamd_spam_kill_level` decimal(5,2) DEFAULT NULL, PRIMARY KEY (`id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `spamfilter_users` -- CREATE TABLE `spamfilter_users` ( `id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `server_id` int(11) unsigned NOT NULL DEFAULT '0', `priority` tinyint(3) unsigned NOT NULL default '7', `policy_id` int(11) unsigned NOT NULL default '0', `email` varchar(255) NOT NULL DEFAULT '', `fullname` varchar(64) default NULL, `local` varchar(1) default NULL, PRIMARY KEY (`id`), UNIQUE KEY `email` (`email`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `spamfilter_wblist` -- CREATE TABLE `spamfilter_wblist` ( `wblist_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `server_id` int(11) unsigned NOT NULL DEFAULT '0', `wb` enum('W','B') NOT NULL default 'W', `rid` int(11) unsigned NOT NULL DEFAULT '0', `email` varchar(255) NOT NULL DEFAULT '', `priority` tinyint(3) unsigned NOT NULL DEFAULT '0', `active` enum('y','n') NOT NULL default 'y', PRIMARY KEY (`wblist_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `support_message` -- CREATE TABLE `support_message` ( `support_message_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `recipient_id` int(11) unsigned NOT NULL default '0', `sender_id` int(11) unsigned NOT NULL default '0', `subject` varchar(255) default NULL, `message` text default NULL, `tstamp` int(11) NOT NULL default '0', PRIMARY KEY (`support_message_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `sys_config` -- CREATE TABLE `sys_config` ( `group` varchar(64) NOT NULL DEFAULT '', `name` varchar(64) NOT NULL DEFAULT '', `value` varchar(255) NOT NULL DEFAULT '', PRIMARY KEY (`group`, `name`) ) DEFAULT CHARSET=utf8; -- -------------------------------------------------------- -- -- Table structure for table `sys_cron` -- CREATE TABLE IF NOT EXISTS `sys_cron` ( `name` varchar(50) NOT NULL DEFAULT '', `last_run` datetime NULL DEFAULT NULL, `next_run` datetime NULL DEFAULT NULL, `running` tinyint(1) UNSIGNED NOT NULL DEFAULT '0', `pid` int(11) unsigned NULL DEFAULT NULL, PRIMARY KEY (`name`) ) DEFAULT CHARSET=utf8; -- -------------------------------------------------------- -- -- Table structure for table `sys_datalog` -- CREATE TABLE `sys_datalog` ( `datalog_id` int(11) unsigned NOT NULL auto_increment, `server_id` int(11) unsigned NOT NULL DEFAULT '0', `dbtable` varchar(255) NOT NULL default '', `dbidx` varchar(255) NOT NULL default '', `action` char(1) NOT NULL default '', `tstamp` int(11) NOT NULL default '0', `user` varchar(255) NOT NULL default '', `data` longtext, `status` set('pending','ok','warning','error') NOT NULL default 'ok', `error` mediumtext, `session_id` varchar(64) NOT NULL DEFAULT '', PRIMARY KEY (`datalog_id`), KEY `server_id` (`server_id`,`status`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `sys_dbsync` -- CREATE TABLE `sys_dbsync` ( `id` int(11) unsigned NOT NULL auto_increment, `jobname` varchar(64) NOT NULL default '', `sync_interval_minutes` int(11) unsigned NOT NULL default '0', `db_type` varchar(16) NOT NULL default '', `db_host` varchar(255) NOT NULL default '', `db_name` varchar(64) NOT NULL default '', `db_username` varchar(64) NOT NULL default '', `db_password` varchar(64) NOT NULL default '', `db_tables` varchar(255) NOT NULL default 'admin,forms', `empty_datalog` int(11) unsigned NOT NULL default '0', `sync_datalog_external` int(11) unsigned NOT NULL default '0', `active` tinyint(1) NOT NULL default '1', `last_datalog_id` int(11) unsigned NOT NULL default '0', PRIMARY KEY (`id`), KEY `last_datalog_id` (`last_datalog_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `sys_extension_grant` -- CREATE TABLE `sys_extension_grant` ( `grant_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `extension` varchar(64) NOT NULL DEFAULT '', `table_name` varchar(64) NOT NULL DEFAULT '', `privileges` varchar(64) NOT NULL DEFAULT '', PRIMARY KEY (`grant_id`), UNIQUE KEY `extension_table` (`extension`,`table_name`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1; -- -------------------------------------------------------- -- -- Table structure for table `sys_filesync` -- CREATE TABLE `sys_filesync` ( `id` int(11) unsigned NOT NULL auto_increment, `jobname` varchar(64) NOT NULL default '', `sync_interval_minutes` int(11) unsigned NOT NULL default '0', `ftp_host` varchar(255) NOT NULL default '', `ftp_path` varchar(255) NOT NULL default '', `ftp_username` varchar(64) NOT NULL default '', `ftp_password` varchar(64) NOT NULL default '', `local_path` varchar(255) NOT NULL default '', `wput_options` varchar(255) NOT NULL default '--timestamping --reupload --dont-continue', `active` tinyint(1) NOT NULL default '1', PRIMARY KEY (`id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `sys_group` -- CREATE TABLE `sys_group` ( `groupid` int(11) unsigned NOT NULL auto_increment, `name` varchar(64) NOT NULL default '', `description` text, `client_id` int(11) unsigned NOT NULL default '0', PRIMARY KEY (`groupid`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `sys_ini` -- CREATE TABLE `sys_ini` ( `sysini_id` int(11) unsigned NOT NULL auto_increment, `config` longtext, `default_logo` text NULL, `custom_logo` text NULL, PRIMARY KEY (`sysini_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `sys_log` -- CREATE TABLE `sys_log` ( `syslog_id` int(11) unsigned NOT NULL auto_increment, `server_id` int(11) unsigned NOT NULL default '0', `datalog_id` int(11) unsigned NOT NULL default '0', `loglevel` tinyint(4) NOT NULL default '0', `tstamp` int(11) unsigned NOT NULL DEFAULT '0', `message` text, PRIMARY KEY (`syslog_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `sys_message` -- CREATE TABLE IF NOT EXISTS `sys_message` ( `message_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT 0, `sys_groupid` int(11) unsigned NOT NULL DEFAULT 0, `sys_perm_user` VARCHAR(5) DEFAULT 'r', `sys_perm_group` VARCHAR(5) DEFAULT 'r', `sys_perm_other` VARCHAR(5) DEFAULT '', `message_state` enum('info','warning','error') NOT NULL DEFAULT 'info', `message_date` datetime NULL DEFAULT NULL, `message_ack` enum('y','n') NOT NULL DEFAULT 'n', `relation` varchar(255) NULL DEFAULT NULL, `message` TEXT DEFAULT NULL, PRIMARY KEY (`message_id`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1; -- -------------------------------------------------------- -- -- Table structure for table `sys_remoteaction` -- CREATE TABLE `sys_remoteaction` ( `action_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `server_id` int(11) unsigned NOT NULL DEFAULT '0', `tstamp` int(11) NOT NULL DEFAULT '0', `action_type` varchar(20) NOT NULL DEFAULT '', `action_param` mediumtext, `action_state` enum('pending','ok','warning','error') NOT NULL DEFAULT 'pending', `response` mediumtext, PRIMARY KEY (`action_id`), KEY `server_id` (`server_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `sys_session` -- CREATE TABLE `sys_session` ( `session_id` varchar(64) NOT NULL DEFAULT '', `date_created` datetime NULL DEFAULT NULL, `last_updated` datetime NULL DEFAULT NULL, `permanent` enum('n','y') NOT NULL DEFAULT 'n', `session_data` longtext, PRIMARY KEY (`session_id`), KEY `last_updated` (`last_updated`) ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Table structure for table `sys_theme` -- CREATE TABLE IF NOT EXISTS `sys_theme` ( `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `var_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `tpl_name` varchar(32) NOT NULL DEFAULT '', `username` varchar(64) NOT NULL DEFAULT '', `logo_url` varchar(255) NOT NULL DEFAULT '', PRIMARY KEY (`var_id`) ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Table structure for table `sys_user` -- CREATE TABLE `sys_user` ( `userid` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '1' COMMENT 'Created by userid', `sys_groupid` int(11) unsigned NOT NULL default '1' COMMENT 'Created by groupid', `sys_perm_user` varchar(5) NOT NULL default 'riud', `sys_perm_group` varchar(5) NOT NULL default 'riud', `sys_perm_other` varchar(5) NOT NULL default '', `username` varchar(64) NOT NULL default '', `passwort` varchar(200) NOT NULL default '', `modules` varchar(255) NOT NULL default '', `startmodule` varchar(255) NOT NULL default '', `app_theme` varchar(32) NOT NULL default 'default', `typ` varchar(16) NOT NULL default 'user', `active` tinyint(1) NOT NULL default '1', `language` varchar(2) NOT NULL default 'en', `groups` TEXT, `default_group` int(11) unsigned NOT NULL default '0', `client_id` int(11) unsigned NOT NULL default '0', `id_rsa` text, `ssh_rsa` text, `lost_password_function` tinyint(1) NOT NULL default '1', `lost_password_hash` VARCHAR(50) NOT NULL default '', `lost_password_reqtime` DATETIME NULL default NULL, `otp_type` set('none', 'email') NOT NULL DEFAULT 'none', `otp_data` varchar(255) DEFAULT NULL, `otp_recovery` varchar(64) DEFAULT NULL, `otp_attempts` tinyint(4) NOT NULL DEFAULT 0, `last_password_change` DATE NULL DEFAULT (CURDATE()), PRIMARY KEY (`userid`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `webdav_user` -- CREATE TABLE `webdav_user` ( `webdav_user_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) unsigned NOT NULL DEFAULT '0', `parent_domain_id` int(11) unsigned NOT NULL DEFAULT '0', `username` varchar(64) DEFAULT NULL, `username_prefix` varchar(50) NOT NULL default '', `password` varchar(200) DEFAULT NULL, `active` enum('n','y') NOT NULL DEFAULT 'y', `dir` varchar(255) DEFAULT NULL, PRIMARY KEY (`webdav_user_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `web_backup` -- CREATE TABLE `web_backup` ( `backup_id` int(10) unsigned NOT NULL AUTO_INCREMENT, `server_id` int(10) unsigned NOT NULL DEFAULT '0', `parent_domain_id` int(10) unsigned NOT NULL DEFAULT '0', `backup_type` enum('web','mysql','mongodb') NOT NULL DEFAULT 'web', `backup_mode` varchar(64) NOT NULL DEFAULT '', `backup_format` varchar(64) NOT NULL DEFAULT '', `tstamp` int(10) unsigned NOT NULL DEFAULT '0', `filename` varchar(255) NOT NULL DEFAULT '', `filesize` VARCHAR(20) NOT NULL DEFAULT '', `backup_password` VARCHAR(255) NOT NULL DEFAULT '', PRIMARY KEY (`backup_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `web_database` -- CREATE TABLE `web_database` ( `database_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) unsigned NOT NULL DEFAULT '0', `parent_domain_id` int(11) unsigned NOT NULL DEFAULT '0', `type` varchar(16) NOT NULL DEFAULT 'mysql', `database_name` varchar(64) DEFAULT NULL, `database_name_prefix` varchar(50) NOT NULL default '', `database_quota` int(11) DEFAULT NULL, `quota_exceeded` enum('n','y') NOT NULL DEFAULT 'n', `last_quota_notification` date NULL default NULL, `database_user_id` int(11) unsigned DEFAULT NULL, `database_ro_user_id` int(11) unsigned DEFAULT NULL, `database_charset` varchar(64) DEFAULT NULL, `remote_access` enum('n','y') NOT NULL DEFAULT 'y', `remote_ips` text, `backup_interval` VARCHAR( 255 ) NOT NULL DEFAULT 'none', `backup_copies` INT NOT NULL DEFAULT '1', `active` enum('n','y') NOT NULL DEFAULT 'y', PRIMARY KEY (`database_id`), KEY `database_user_id` (`database_user_id`), KEY `database_ro_user_id` (`database_ro_user_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Tabellenstruktur für Tabelle `web_database_user` -- CREATE TABLE IF NOT EXISTS `web_database_user` ( `database_user_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) UNSIGNED NOT NULL DEFAULT '0', `database_user` varchar(64) DEFAULT NULL, `database_user_prefix` varchar(50) NOT NULL default '', `database_password` varchar(64) DEFAULT NULL, `database_password_sha2` varchar(255) DEFAULT NULL, `database_password_mongo` varchar(32) DEFAULT NULL, `database_password_postgres` varchar(255) DEFAULT NULL, PRIMARY KEY (`database_user_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `web_domain` -- CREATE TABLE `web_domain` ( `domain_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `server_id` int(11) unsigned NOT NULL default '0', `ip_address` varchar(39) default NULL, `ipv6_address` VARCHAR( 255 ) default NULL, `domain` varchar(255) default NULL, `type` varchar(32) default NULL, `parent_domain_id` int(11) unsigned NOT NULL default '0', `vhost_type` varchar(32) default NULL, `document_root` varchar(255) default NULL, `web_folder` varchar(100) default NULL, `system_user` varchar(255) default NULL, `system_group` varchar(255) default NULL, `hd_quota` bigint(20) NOT NULL default '0', `traffic_quota` bigint(20) NOT NULL default '-1', `cgi` enum('n','y') NOT NULL default 'y', `ssi` enum('n','y') NOT NULL default 'y', `suexec` enum('n','y') NOT NULL default 'y', `errordocs` tinyint(1) NOT NULL default '1', `is_subdomainwww` tinyint(1) NOT NULL default '1', `subdomain` enum('none','www','*') NOT NULL default 'none', `php` varchar(32) NOT NULL default 'y', `ruby` enum('n','y') NOT NULL default 'n', `python` enum('n','y') NOT NULL default 'n', `perl` enum('n','y') NOT NULL default 'n', `redirect_type` varchar(255) default NULL, `redirect_path` varchar(255) default NULL, `seo_redirect` varchar(255) default NULL, `rewrite_to_https` ENUM('y','n') NOT NULL DEFAULT 'n', `ssl` enum('n','y') NOT NULL default 'n', `ssl_letsencrypt` enum('n','y') NOT NULL DEFAULT 'n', `ssl_letsencrypt_exclude` enum('n','y') NOT NULL DEFAULT 'n', `ssl_state` varchar(255) NULL, `ssl_locality` varchar(255) NULL, `ssl_organisation` varchar(255) NULL, `ssl_organisation_unit` varchar(255) NULL, `ssl_country` varchar(255) NULL, `ssl_domain` varchar(255) NULL, `ssl_request` mediumtext NULL, `ssl_cert` mediumtext NULL, `ssl_bundle` mediumtext NULL, `ssl_key` mediumtext NULL, `ssl_action` varchar(16) NULL, `stats_password` varchar(255) default NULL, `stats_type` varchar(255) default 'awstats', `allow_override` varchar(255) NOT NULL default 'All', `apache_directives` mediumtext NULL DEFAULT NULL, `nginx_directives` mediumtext NULL DEFAULT NULL, `php_fpm_use_socket` ENUM('n','y') NOT NULL DEFAULT 'y', `php_fpm_chroot` enum('n','y') NOT NULL DEFAULT 'n', `pm` enum('static','dynamic','ondemand') NOT NULL DEFAULT 'ondemand', `pm_max_children` int(11) NOT NULL DEFAULT '10', `pm_start_servers` int(11) NOT NULL DEFAULT '2', `pm_min_spare_servers` int(11) NOT NULL DEFAULT '1', `pm_max_spare_servers` int(11) NOT NULL DEFAULT '5', `pm_process_idle_timeout` int(11) NOT NULL DEFAULT '10', `pm_max_requests` int(11) NOT NULL DEFAULT '0', `php_open_basedir` mediumtext, `custom_php_ini` mediumtext, `backup_interval` VARCHAR( 255 ) NOT NULL DEFAULT 'none', `backup_copies` INT NOT NULL DEFAULT '1', `backup_format_web` VARCHAR( 255 ) NOT NULL default 'default', `backup_format_db` VARCHAR( 255 ) NOT NULL default 'gzip', `backup_encrypt` enum('n','y') NOT NULL DEFAULT 'n', `backup_password` VARCHAR( 255 ) NOT NULL DEFAULT '', `backup_excludes` mediumtext, `active` enum('n','y') NOT NULL default 'y', `traffic_quota_lock` enum('n','y') NOT NULL default 'n', `proxy_directives` mediumtext, `last_quota_notification` date NULL default NULL, `rewrite_rules` mediumtext, `added_date` date NULL DEFAULT NULL, `added_by` varchar(255) DEFAULT NULL, `directive_snippets_id` int(11) unsigned NOT NULL default '0', `enable_pagespeed` ENUM('y','n') NOT NULL DEFAULT 'n', `http_port` int(11) unsigned NOT NULL DEFAULT '80', `https_port` int(11) unsigned NOT NULL DEFAULT '443', `folder_directive_snippets` text, `log_retention` int(11) NOT NULL DEFAULT '10', `proxy_protocol` enum('n','y') NOT NULL default 'n', `server_php_id` INT(11) UNSIGNED NOT NULL DEFAULT 0, `jailkit_chroot_app_sections` mediumtext NULL DEFAULT NULL, `jailkit_chroot_app_programs` mediumtext NULL DEFAULT NULL, `delete_unused_jailkit` enum('n','y') NOT NULL default 'n', `last_jailkit_update` date NULL DEFAULT NULL, `last_jailkit_hash` varchar(255) DEFAULT NULL, `disable_symlinknotowner` enum('n','y') NOT NULL default 'n', PRIMARY KEY (`domain_id`), UNIQUE KEY `serverdomain` ( `server_id` , `ip_address`, `domain` ) ) ENGINE=InnoDB ROW_FORMAT=DYNAMIC DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `web_folder` -- CREATE TABLE IF NOT EXISTS `web_folder` ( `web_folder_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `parent_domain_id` int(11) NOT NULL DEFAULT '0', `path` varchar(255) DEFAULT NULL, `active` varchar(255) NOT NULL DEFAULT 'y', PRIMARY KEY (`web_folder_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -- Dumping data for table `web_folder` -- -- -------------------------------------------------------- -- -- Table structure for table `web_folder_user` -- CREATE TABLE IF NOT EXISTS `web_folder_user` ( `web_folder_user_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `web_folder_id` int(11) NOT NULL DEFAULT '0', `username` varchar(255) DEFAULT NULL, `password` varchar(255) DEFAULT NULL, `active` varchar(255) NOT NULL DEFAULT 'y', PRIMARY KEY (`web_folder_user_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -- Dumping data for table `web_folder_user` -- -- -------------------------------------------------------- -- -- Table structure for table `web_traffic` -- CREATE TABLE `web_traffic` ( `hostname` varchar(255) NOT NULL DEFAULT '', `traffic_date` date NULL DEFAULT NULL, `traffic_bytes` bigint(32) unsigned NOT NULL default '0', UNIQUE KEY (`hostname`,`traffic_date`) ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Table structure for table `xmpp_domain` -- CREATE TABLE `xmpp_domain` ( `domain_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL default '', `sys_perm_group` varchar(5) NOT NULL default '', `sys_perm_other` varchar(5) NOT NULL default '', `server_id` int(11) unsigned NOT NULL default '0', `domain` varchar(255) NOT NULL default '', `management_method` ENUM( 'normal', 'maildomain' ) NOT NULL default 'normal', `public_registration` ENUM( 'n', 'y' ) NOT NULL default 'n', `registration_url` varchar(255) NOT NULL DEFAULT '', `registration_message` varchar(255) NOT NULL DEFAULT '', `domain_admins` text, `use_pubsub` enum('n','y') NOT NULL DEFAULT 'n', `use_proxy` enum('n','y') NOT NULL DEFAULT 'n', `use_anon_host` enum('n','y') NOT NULL DEFAULT 'n', `use_vjud` enum('n','y') NOT NULL DEFAULT 'n', `vjud_opt_mode` enum('in', 'out') NOT NULL DEFAULT 'in', `use_muc_host` enum('n','y') NOT NULL DEFAULT 'n', `muc_name` varchar(30) NOT NULL DEFAULT '', `muc_restrict_room_creation` enum('n', 'y', 'm') NOT NULL DEFAULT 'm', `muc_admins` text, `use_pastebin` enum('n','y') NOT NULL DEFAULT 'n', `pastebin_expire_after` int(3) NOT NULL DEFAULT 48, `pastebin_trigger` varchar(10) NOT NULL DEFAULT '!paste', `use_http_archive` enum('n','y') NOT NULL DEFAULT 'n', `http_archive_show_join` enum('n', 'y') NOT NULL DEFAULT 'n', `http_archive_show_status` enum('n', 'y') NOT NULL DEFAULT 'n', `use_status_host` enum('n','y') NOT NULL DEFAULT 'n', `ssl_state` varchar(255) NULL, `ssl_locality` varchar(255) NULL, `ssl_organisation` varchar(255) NULL, `ssl_organisation_unit` varchar(255) NULL, `ssl_country` varchar(255) NULL, `ssl_email` varchar(255) NULL, `ssl_request` mediumtext NULL, `ssl_cert` mediumtext NULL, `ssl_bundle` mediumtext NULL, `ssl_key` mediumtext NULL, `ssl_action` varchar(16) NULL, `active` enum('n','y') NOT NULL DEFAULT 'n', PRIMARY KEY (`domain_id`), KEY `server_id` (`server_id`,`domain`), KEY `domain_active` (`domain`,`active`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `xmpp_user` -- CREATE TABLE `xmpp_user` ( `xmppuser_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL default '', `sys_perm_group` varchar(5) NOT NULL default '', `sys_perm_other` varchar(5) NOT NULL default '', `server_id` int(11) unsigned NOT NULL default '0', `jid` varchar(255) NOT NULL default '', `password` varchar(255) NOT NULL default '', `active` enum('n','y') NOT NULL DEFAULT 'n', PRIMARY KEY (`xmppuser_id`), KEY `server_id` (`server_id`,`jid`), KEY `jid_active` (`jid`,`active`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -------------------------------------------------------- -- -------------------------------------------------------- -- DB-DATA -- -------------------------------------------------------- -- -------------------------------------------------------- -- -- Dumping data for table `aps_settings` -- INSERT INTO `aps_settings` (`id`, `name`, `value`) VALUES(1, 'ignore-php-extension', ''); INSERT INTO `aps_settings` (`id`, `name`, `value`) VALUES(2, 'ignore-php-configuration', ''); INSERT INTO `aps_settings` (`id`, `name`, `value`) VALUES(3, 'ignore-webserver-module', ''); -- -------------------------------------------------------- -- -- Dumping data for table `country` -- INSERT INTO `country` (`iso`, `name`, `printable_name`, `iso3`, `numcode`, `eu`) VALUES ('AF', 'AFGHANISTAN', 'Afghanistan', 'AFG', 4, 'n'), ('AL', 'ALBANIA', 'Albania', 'ALB', 8, 'n'), ('DZ', 'ALGERIA', 'Algeria', 'DZA', 12, 'n'), ('AS', 'AMERICAN SAMOA', 'American Samoa', 'ASM', 16, 'n'), ('AD', 'ANDORRA', 'Andorra', 'AND', 20, 'n'), ('AO', 'ANGOLA', 'Angola', 'AGO', 24, 'n'), ('AI', 'ANGUILLA', 'Anguilla', 'AIA', 660, 'n'), ('AQ', 'ANTARCTICA', 'Antarctica', NULL, NULL, 'n'), ('AG', 'ANTIGUA AND BARBUDA', 'Antigua and Barbuda', 'ATG', 28, 'n'), ('AR', 'ARGENTINA', 'Argentina', 'ARG', 32, 'n'), ('AM', 'ARMENIA', 'Armenia', 'ARM', 51, 'n'), ('AW', 'ARUBA', 'Aruba', 'ABW', 533, 'n'), ('AU', 'AUSTRALIA', 'Australia', 'AUS', 36, 'n'), ('AT', 'AUSTRIA', 'Austria', 'AUT', 40, 'y'), ('AZ', 'AZERBAIJAN', 'Azerbaijan', 'AZE', 31, 'n'), ('BS', 'BAHAMAS', 'Bahamas', 'BHS', 44, 'n'), ('BH', 'BAHRAIN', 'Bahrain', 'BHR', 48, 'n'), ('BD', 'BANGLADESH', 'Bangladesh', 'BGD', 50, 'n'), ('BB', 'BARBADOS', 'Barbados', 'BRB', 52, 'n'), ('BY', 'BELARUS', 'Belarus', 'BLR', 112, 'n'), ('BE', 'BELGIUM', 'Belgium', 'BEL', 56, 'y'), ('BZ', 'BELIZE', 'Belize', 'BLZ', 84, 'n'), ('BJ', 'BENIN', 'Benin', 'BEN', 204, 'n'), ('BM', 'BERMUDA', 'Bermuda', 'BMU', 60, 'n'), ('BT', 'BHUTAN', 'Bhutan', 'BTN', 64, 'n'), ('BO', 'BOLIVIA', 'Bolivia', 'BOL', 68, 'n'), ('BA', 'BOSNIA AND HERZEGOVINA', 'Bosnia and Herzegovina', 'BIH', 70, 'n'), ('BW', 'BOTSWANA', 'Botswana', 'BWA', 72, 'n'), ('BV', 'BOUVET ISLAND', 'Bouvet Island', NULL, NULL, 'n'), ('BR', 'BRAZIL', 'Brazil', 'BRA', 76, 'n'), ('IO', 'BRITISH INDIAN OCEAN TERRITORY', 'British Indian Ocean Territory', NULL, NULL, 'n'), ('BN', 'BRUNEI DARUSSALAM', 'Brunei Darussalam', 'BRN', 96, 'n'), ('BG', 'BULGARIA', 'Bulgaria', 'BGR', 100, 'y'), ('BF', 'BURKINA FASO', 'Burkina Faso', 'BFA', 854, 'n'), ('BI', 'BURUNDI', 'Burundi', 'BDI', 108, 'n'), ('KH', 'CAMBODIA', 'Cambodia', 'KHM', 116, 'n'), ('CM', 'CAMEROON', 'Cameroon', 'CMR', 120, 'n'), ('CA', 'CANADA', 'Canada', 'CAN', 124, 'n'), ('CV', 'CAPE VERDE', 'Cape Verde', 'CPV', 132, 'n'), ('KY', 'CAYMAN ISLANDS', 'Cayman Islands', 'CYM', 136, 'n'), ('CF', 'CENTRAL AFRICAN REPUBLIC', 'Central African Republic', 'CAF', 140, 'n'), ('TD', 'CHAD', 'Chad', 'TCD', 148, 'n'), ('CL', 'CHILE', 'Chile', 'CHL', 152, 'n'), ('CN', 'CHINA', 'China', 'CHN', 156, 'n'), ('CX', 'CHRISTMAS ISLAND', 'Christmas Island', NULL, NULL, 'n'), ('CC', 'COCOS (KEELING) ISLANDS', 'Cocos (Keeling) Islands', NULL, NULL, 'n'), ('CO', 'COLOMBIA', 'Colombia', 'COL', 170, 'n'), ('KM', 'COMOROS', 'Comoros', 'COM', 174, 'n'), ('CG', 'CONGO', 'Congo', 'COG', 178, 'n'), ('CD', 'CONGO, THE DEMOCRATIC REPUBLIC OF THE', 'Congo, the Democratic Republic of the', 'COD', 180, 'n'), ('CK', 'COOK ISLANDS', 'Cook Islands', 'COK', 184, 'n'), ('CR', 'COSTA RICA', 'Costa Rica', 'CRI', 188, 'n'), ('CI', 'COTE D''IVOIRE', 'Cote D''Ivoire', 'CIV', 384, 'n'), ('HR', 'CROATIA', 'Croatia', 'HRV', 191, 'y'), ('CU', 'CUBA', 'Cuba', 'CUB', 192, 'n'), ('CY', 'CYPRUS', 'Cyprus', 'CYP', 196, 'y'), ('CZ', 'CZECH REPUBLIC', 'Czech Republic', 'CZE', 203, 'y'), ('DK', 'DENMARK', 'Denmark', 'DNK', 208, 'y'), ('DJ', 'DJIBOUTI', 'Djibouti', 'DJI', 262, 'n'), ('DM', 'DOMINICA', 'Dominica', 'DMA', 212, 'n'), ('DO', 'DOMINICAN REPUBLIC', 'Dominican Republic', 'DOM', 214, 'n'), ('EC', 'ECUADOR', 'Ecuador', 'ECU', 218, 'n'), ('EG', 'EGYPT', 'Egypt', 'EGY', 818, 'n'), ('SV', 'EL SALVADOR', 'El Salvador', 'SLV', 222, 'n'), ('GQ', 'EQUATORIAL GUINEA', 'Equatorial Guinea', 'GNQ', 226, 'n'), ('ER', 'ERITREA', 'Eritrea', 'ERI', 232, 'n'), ('EE', 'ESTONIA', 'Estonia', 'EST', 233, 'y'), ('ET', 'ETHIOPIA', 'Ethiopia', 'ETH', 231, 'n'), ('FK', 'FALKLAND ISLANDS (MALVINAS)', 'Falkland Islands (Malvinas)', 'FLK', 238, 'n'), ('FO', 'FAROE ISLANDS', 'Faroe Islands', 'FRO', 234, 'n'), ('FJ', 'FIJI', 'Fiji', 'FJI', 242, 'n'), ('FI', 'FINLAND', 'Finland', 'FIN', 246, 'y'), ('FR', 'FRANCE', 'France', 'FRA', 250, 'y'), ('GF', 'FRENCH GUIANA', 'French Guiana', 'GUF', 254, 'n'), ('PF', 'FRENCH POLYNESIA', 'French Polynesia', 'PYF', 258, 'n'), ('TF', 'FRENCH SOUTHERN TERRITORIES', 'French Southern Territories', NULL, NULL, 'n'), ('GA', 'GABON', 'Gabon', 'GAB', 266, 'n'), ('GM', 'GAMBIA', 'Gambia', 'GMB', 270, 'n'), ('GE', 'GEORGIA', 'Georgia', 'GEO', 268, 'n'), ('DE', 'GERMANY', 'Germany', 'DEU', 276, 'y'), ('GH', 'GHANA', 'Ghana', 'GHA', 288, 'n'), ('GI', 'GIBRALTAR', 'Gibraltar', 'GIB', 292, 'n'), ('GR', 'GREECE', 'Greece', 'GRC', 300, 'y'), ('GL', 'GREENLAND', 'Greenland', 'GRL', 304, 'n'), ('GD', 'GRENADA', 'Grenada', 'GRD', 308, 'n'), ('GP', 'GUADELOUPE', 'Guadeloupe', 'GLP', 312, 'n'), ('GU', 'GUAM', 'Guam', 'GUM', 316, 'n'), ('GT', 'GUATEMALA', 'Guatemala', 'GTM', 320, 'n'), ('GN', 'GUINEA', 'Guinea', 'GIN', 324, 'n'), ('GW', 'GUINEA-BISSAU', 'Guinea-Bissau', 'GNB', 624, 'n'), ('GY', 'GUYANA', 'Guyana', 'GUY', 328, 'n'), ('HT', 'HAITI', 'Haiti', 'HTI', 332, 'n'), ('HM', 'HEARD ISLAND AND MCDONALD ISLANDS', 'Heard Island and Mcdonald Islands', NULL, NULL, 'n'), ('VA', 'HOLY SEE (VATICAN CITY STATE)', 'Holy See (Vatican City State)', 'VAT', 336, 'n'), ('HN', 'HONDURAS', 'Honduras', 'HND', 340, 'n'), ('HK', 'HONG KONG', 'Hong Kong', 'HKG', 344, 'n'), ('HU', 'HUNGARY', 'Hungary', 'HUN', 348, 'y'), ('IS', 'ICELAND', 'Iceland', 'ISL', 352, 'n'), ('IN', 'INDIA', 'India', 'IND', 356, 'n'), ('ID', 'INDONESIA', 'Indonesia', 'IDN', 360, 'n'), ('IR', 'IRAN, ISLAMIC REPUBLIC OF', 'Iran, Islamic Republic of', 'IRN', 364, 'n'), ('IQ', 'IRAQ', 'Iraq', 'IRQ', 368, 'n'), ('IE', 'IRELAND', 'Ireland', 'IRL', 372, 'y'), ('IL', 'ISRAEL', 'Israel', 'ISR', 376, 'n'), ('IT', 'ITALY', 'Italy', 'ITA', 380, 'y'), ('JM', 'JAMAICA', 'Jamaica', 'JAM', 388, 'n'), ('JP', 'JAPAN', 'Japan', 'JPN', 392, 'n'), ('JO', 'JORDAN', 'Jordan', 'JOR', 400, 'n'), ('KZ', 'KAZAKHSTAN', 'Kazakhstan', 'KAZ', 398, 'n'), ('KE', 'KENYA', 'Kenya', 'KEN', 404, 'n'), ('KI', 'KIRIBATI', 'Kiribati', 'KIR', 296, 'n'), ('KP', 'KOREA, DEMOCRATIC PEOPLE''S REPUBLIC OF', 'Korea, Democratic People''s Republic of', 'PRK', 408, 'n'), ('KR', 'KOREA, REPUBLIC OF', 'Korea, Republic of', 'KOR', 410, 'n'), ('KW', 'KUWAIT', 'Kuwait', 'KWT', 414, 'n'), ('KG', 'KYRGYZSTAN', 'Kyrgyzstan', 'KGZ', 417, 'n'), ('LA', 'LAO PEOPLE''S DEMOCRATIC REPUBLIC', 'Lao People''s Democratic Republic', 'LAO', 418, 'n'), ('LV', 'LATVIA', 'Latvia', 'LVA', 428, 'y'), ('LB', 'LEBANON', 'Lebanon', 'LBN', 422, 'n'), ('LS', 'LESOTHO', 'Lesotho', 'LSO', 426, 'n'), ('LR', 'LIBERIA', 'Liberia', 'LBR', 430, 'n'), ('LY', 'LIBYAN ARAB JAMAHIRIYA', 'Libyan Arab Jamahiriya', 'LBY', 434, 'n'), ('LI', 'LIECHTENSTEIN', 'Liechtenstein', 'LIE', 438, 'n'), ('LT', 'LITHUANIA', 'Lithuania', 'LTU', 440, 'y'), ('LU', 'LUXEMBOURG', 'Luxembourg', 'LUX', 442, 'y'), ('MO', 'MACAO', 'Macao', 'MAC', 446, 'n'), ('MK', 'MACEDONIA, THE FORMER YUGOSLAV REPUBLIC OF', 'Macedonia, the Former Yugoslav Republic of', 'MKD', 807, 'n'), ('MG', 'MADAGASCAR', 'Madagascar', 'MDG', 450, 'n'), ('MW', 'MALAWI', 'Malawi', 'MWI', 454, 'n'), ('MY', 'MALAYSIA', 'Malaysia', 'MYS', 458, 'n'), ('MV', 'MALDIVES', 'Maldives', 'MDV', 462, 'n'), ('ML', 'MALI', 'Mali', 'MLI', 466, 'n'), ('MT', 'MALTA', 'Malta', 'MLT', 470, 'y'), ('MH', 'MARSHALL ISLANDS', 'Marshall Islands', 'MHL', 584, 'n'), ('MQ', 'MARTINIQUE', 'Martinique', 'MTQ', 474, 'n'), ('MR', 'MAURITANIA', 'Mauritania', 'MRT', 478, 'n'), ('MU', 'MAURITIUS', 'Mauritius', 'MUS', 480, 'n'), ('YT', 'MAYOTTE', 'Mayotte', NULL, NULL, 'n'), ('MX', 'MEXICO', 'Mexico', 'MEX', 484, 'n'), ('FM', 'MICRONESIA, FEDERATED STATES OF', 'Micronesia, Federated States of', 'FSM', 583, 'n'), ('MD', 'MOLDOVA, REPUBLIC OF', 'Moldova, Republic of', 'MDA', 498, 'n'), ('MC', 'MONACO', 'Monaco', 'MCO', 492, 'n'), ('MN', 'MONGOLIA', 'Mongolia', 'MNG', 496, 'n'), ('MS', 'MONTSERRAT', 'Montserrat', 'MSR', 500, 'n'), ('MA', 'MOROCCO', 'Morocco', 'MAR', 504, 'n'), ('MZ', 'MOZAMBIQUE', 'Mozambique', 'MOZ', 508, 'n'), ('MM', 'MYANMAR', 'Myanmar', 'MMR', 104, 'n'), ('NA', 'NAMIBIA', 'Namibia', 'NAM', 516, 'n'), ('NR', 'NAURU', 'Nauru', 'NRU', 520, 'n'), ('NP', 'NEPAL', 'Nepal', 'NPL', 524, 'n'), ('NL', 'NETHERLANDS', 'Netherlands', 'NLD', 528, 'y'), ('AN', 'NETHERLANDS ANTILLES', 'Netherlands Antilles', 'ANT', 530, 'n'), ('NC', 'NEW CALEDONIA', 'New Caledonia', 'NCL', 540, 'n'), ('NZ', 'NEW ZEALAND', 'New Zealand', 'NZL', 554, 'n'), ('NI', 'NICARAGUA', 'Nicaragua', 'NIC', 558, 'n'), ('NE', 'NIGER', 'Niger', 'NER', 562, 'n'), ('NG', 'NIGERIA', 'Nigeria', 'NGA', 566, 'n'), ('NU', 'NIUE', 'Niue', 'NIU', 570, 'n'), ('NF', 'NORFOLK ISLAND', 'Norfolk Island', 'NFK', 574, 'n'), ('MP', 'NORTHERN MARIANA ISLANDS', 'Northern Mariana Islands', 'MNP', 580, 'n'), ('NO', 'NORWAY', 'Norway', 'NOR', 578, 'n'), ('OM', 'OMAN', 'Oman', 'OMN', 512, 'n'), ('PK', 'PAKISTAN', 'Pakistan', 'PAK', 586, 'n'), ('PW', 'PALAU', 'Palau', 'PLW', 585, 'n'), ('PS', 'PALESTINIAN TERRITORY, OCCUPIED', 'Palestinian Territory, Occupied', NULL, NULL, 'n'), ('PA', 'PANAMA', 'Panama', 'PAN', 591, 'n'), ('PG', 'PAPUA NEW GUINEA', 'Papua New Guinea', 'PNG', 598, 'n'), ('PY', 'PARAGUAY', 'Paraguay', 'PRY', 600, 'n'), ('PE', 'PERU', 'Peru', 'PER', 604, 'n'), ('PH', 'PHILIPPINES', 'Philippines', 'PHL', 608, 'n'), ('PN', 'PITCAIRN', 'Pitcairn', 'PCN', 612, 'n'), ('PL', 'POLAND', 'Poland', 'POL', 616, 'y'), ('PT', 'PORTUGAL', 'Portugal', 'PRT', 620, 'y'), ('PR', 'PUERTO RICO', 'Puerto Rico', 'PRI', 630, 'n'), ('QA', 'QATAR', 'Qatar', 'QAT', 634, 'n'), ('RE', 'REUNION', 'Reunion', 'REU', 638, 'n'), ('RO', 'ROMANIA', 'Romania', 'ROM', 642, 'y'), ('RU', 'RUSSIAN FEDERATION', 'Russian Federation', 'RUS', 643, 'n'), ('RW', 'RWANDA', 'Rwanda', 'RWA', 646, 'n'), ('SH', 'SAINT HELENA', 'Saint Helena', 'SHN', 654, 'n'), ('KN', 'SAINT KITTS AND NEVIS', 'Saint Kitts and Nevis', 'KNA', 659, 'n'), ('LC', 'SAINT LUCIA', 'Saint Lucia', 'LCA', 662, 'n'), ('PM', 'SAINT PIERRE AND MIQUELON', 'Saint Pierre and Miquelon', 'SPM', 666, 'n'), ('VC', 'SAINT VINCENT AND THE GRENADINES', 'Saint Vincent and the Grenadines', 'VCT', 670, 'n'), ('WS', 'SAMOA', 'Samoa', 'WSM', 882, 'n'), ('SM', 'SAN MARINO', 'San Marino', 'SMR', 674, 'n'), ('ST', 'SAO TOME AND PRINCIPE', 'Sao Tome and Principe', 'STP', 678, 'n'), ('SA', 'SAUDI ARABIA', 'Saudi Arabia', 'SAU', 682, 'n'), ('SN', 'SENEGAL', 'Senegal', 'SEN', 686, 'n'), ('RS', 'SERBIA', 'Serbia', 'SRB', 381, 'n'), ('SC', 'SEYCHELLES', 'Seychelles', 'SYC', 690, 'n'), ('SL', 'SIERRA LEONE', 'Sierra Leone', 'SLE', 694, 'n'), ('SG', 'SINGAPORE', 'Singapore', 'SGP', 702, 'n'), ('SK', 'SLOVAKIA', 'Slovakia', 'SVK', 703, 'y'), ('SI', 'SLOVENIA', 'Slovenia', 'SVN', 705, 'y'), ('SB', 'SOLOMON ISLANDS', 'Solomon Islands', 'SLB', 90, 'n'), ('SO', 'SOMALIA', 'Somalia', 'SOM', 706, 'n'), ('ZA', 'SOUTH AFRICA', 'South Africa', 'ZAF', 710, 'n'), ('GS', 'SOUTH GEORGIA AND THE SOUTH SANDWICH ISLANDS', 'South Georgia and the South Sandwich Islands', NULL, NULL, 'n'), ('ES', 'SPAIN', 'Spain', 'ESP', 724, 'y'), ('LK', 'SRI LANKA', 'Sri Lanka', 'LKA', 144, 'n'), ('SD', 'SUDAN', 'Sudan', 'SDN', 736, 'n'), ('SR', 'SURINAME', 'Suriname', 'SUR', 740, 'n'), ('SJ', 'SVALBARD AND JAN MAYEN', 'Svalbard and Jan Mayen', 'SJM', 744, 'n'), ('SZ', 'SWAZILAND', 'Swaziland', 'SWZ', 748, 'n'), ('SE', 'SWEDEN', 'Sweden', 'SWE', 752, 'y'), ('CH', 'SWITZERLAND', 'Switzerland', 'CHE', 756, 'n'), ('SY', 'SYRIAN ARAB REPUBLIC', 'Syrian Arab Republic', 'SYR', 760, 'n'), ('TW', 'TAIWAN, PROVINCE OF CHINA', 'Taiwan, Province of China', 'TWN', 158, 'n'), ('TJ', 'TAJIKISTAN', 'Tajikistan', 'TJK', 762, 'n'), ('TZ', 'TANZANIA, UNITED REPUBLIC OF', 'Tanzania, United Republic of', 'TZA', 834, 'n'), ('TH', 'THAILAND', 'Thailand', 'THA', 764, 'n'), ('TL', 'TIMOR-LESTE', 'Timor-Leste', NULL, NULL, 'n'), ('TG', 'TOGO', 'Togo', 'TGO', 768, 'n'), ('TK', 'TOKELAU', 'Tokelau', 'TKL', 772, 'n'), ('TO', 'TONGA', 'Tonga', 'TON', 776, 'n'), ('TT', 'TRINIDAD AND TOBAGO', 'Trinidad and Tobago', 'TTO', 780, 'n'), ('TN', 'TUNISIA', 'Tunisia', 'TUN', 788, 'n'), ('TR', 'TURKEY', 'Turkey', 'TUR', 792, 'n'), ('TM', 'TURKMENISTAN', 'Turkmenistan', 'TKM', 795, 'n'), ('TC', 'TURKS AND CAICOS ISLANDS', 'Turks and Caicos Islands', 'TCA', 796, 'n'), ('TV', 'TUVALU', 'Tuvalu', 'TUV', 798, 'n'), ('UG', 'UGANDA', 'Uganda', 'UGA', 800, 'n'), ('UA', 'UKRAINE', 'Ukraine', 'UKR', 804, 'n'), ('AE', 'UNITED ARAB EMIRATES', 'United Arab Emirates', 'ARE', 784, 'n'), ('GB', 'UNITED KINGDOM', 'United Kingdom', 'GBR', 826, 'n'), ('US', 'UNITED STATES', 'United States', 'USA', 840, 'n'), ('UM', 'UNITED STATES MINOR OUTLYING ISLANDS', 'United States Minor Outlying Islands', NULL, NULL, 'n'), ('UY', 'URUGUAY', 'Uruguay', 'URY', 858, 'n'), ('UZ', 'UZBEKISTAN', 'Uzbekistan', 'UZB', 860, 'n'), ('VU', 'VANUATU', 'Vanuatu', 'VUT', 548, 'n'), ('VE', 'VENEZUELA', 'Venezuela', 'VEN', 862, 'n'), ('VN', 'VIET NAM', 'Viet Nam', 'VNM', 704, 'n'), ('VG', 'VIRGIN ISLANDS, BRITISH', 'Virgin Islands, British', 'VGB', 92, 'n'), ('VI', 'VIRGIN ISLANDS, U.S.', 'Virgin Islands, U.s.', 'VIR', 850, 'n'), ('WF', 'WALLIS AND FUTUNA', 'Wallis and Futuna', 'WLF', 876, 'n'), ('EH', 'WESTERN SAHARA', 'Western Sahara', 'ESH', 732, 'n'), ('YE', 'YEMEN', 'Yemen', 'YEM', 887, 'n'), ('ZM', 'ZAMBIA', 'Zambia', 'ZMB', 894, 'n'), ('ZW', 'ZIMBABWE', 'Zimbabwe', 'ZWE', 716, 'n'), ('ME', 'MONTENEGRO', 'Montenegro', 'MNE', 382, 'n'); -- -------------------------------------------------------- -- -- Dumping data for table `dns_template` -- INSERT INTO `dns_template` (`template_id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `name`, `fields`, `template`, `visible`) VALUES (1, 1, 1, 'riud', 'riud', '', 'Default', 'DOMAIN,IP,NS1,NS2,EMAIL,DKIM,DNSSEC', '[ZONE]\norigin={DOMAIN}.\nns={NS1}.\nmbox={EMAIL}.\nrefresh=7200\nretry=540\nexpire=604800\nminimum=3600\nttl=3600\nxfer=\nalso_notify=\ndnssec_wanted=N\ndnssec_algo=ECDSAP256SHA256\n\n[DNS_RECORDS]\nA|{DOMAIN}.|{IP}|0|3600\nA|www|{IP}|0|3600\nA|mail|{IP}|0|3600\nNS|{DOMAIN}.|{NS1}.|0|3600\nNS|{DOMAIN}.|{NS2}.|0|3600\nMX|{DOMAIN}.|mail.{DOMAIN}.|10|3600\nTXT|{DOMAIN}.|v=spf1 mx a ~all|0|3600', 'y'); -- -------------------------------------------------------- -- -- Dumping data for table `help_faq` -- INSERT INTO `help_faq` VALUES (1,1,0,'I would like to know ...','Yes, of course.',1,1,'riud','riud','r'); -- -------------------------------------------------------- -- -- Dumping data for table `help_faq_sections` -- INSERT INTO `help_faq_sections` VALUES (1,'General',0,NULL,NULL,NULL,NULL,NULL); -- -------------------------------------------------------- -- -- Dumping data for table `spamfilter_policy` -- INSERT INTO `spamfilter_policy` (`id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `policy_name`, `virus_lover`, `spam_lover`, `banned_files_lover`, `bad_header_lover`, `bypass_virus_checks`, `bypass_spam_checks`, `bypass_banned_checks`, `bypass_header_checks`, `spam_modifies_subj`, `virus_quarantine_to`, `spam_quarantine_to`, `banned_quarantine_to`, `bad_header_quarantine_to`, `clean_quarantine_to`, `other_quarantine_to`, `spam_tag_level`, `spam_tag2_level`, `spam_kill_level`, `spam_dsn_cutoff_level`, `spam_quarantine_cutoff_level`, `addr_extension_virus`, `addr_extension_spam`, `addr_extension_banned`, `addr_extension_bad_header`, `warnvirusrecip`, `warnbannedrecip`, `warnbadhrecip`, `newvirus_admin`, `virus_admin`, `banned_admin`, `bad_header_admin`, `spam_admin`, `spam_subject_tag`, `spam_subject_tag2`, `message_size_limit`, `banned_rulenames`, `rspamd_greylisting`, `rspamd_spam_greylisting_level`, `rspamd_spam_tag_level`, `rspamd_spam_tag_method`, `rspamd_spam_kill_level`) VALUES(1, 1, 0, 'riud', 'riud', 'r', 'Non-paying', 'N', 'N', 'N', 'N', 'Y', 'Y', 'Y', 'N', 'Y', '', '', '', '', '', '', 3, 7, 10, 0, 0, '', '', '', '', 'N', 'N', 'N', '', '', '', '', '', '', '', 0, '', 'n', 6.00, 8.00, 'rewrite_subject', 12.00); INSERT INTO `spamfilter_policy` (`id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `policy_name`, `virus_lover`, `spam_lover`, `banned_files_lover`, `bad_header_lover`, `bypass_virus_checks`, `bypass_spam_checks`, `bypass_banned_checks`, `bypass_header_checks`, `spam_modifies_subj`, `virus_quarantine_to`, `spam_quarantine_to`, `banned_quarantine_to`, `bad_header_quarantine_to`, `clean_quarantine_to`, `other_quarantine_to`, `spam_tag_level`, `spam_tag2_level`, `spam_kill_level`, `spam_dsn_cutoff_level`, `spam_quarantine_cutoff_level`, `addr_extension_virus`, `addr_extension_spam`, `addr_extension_banned`, `addr_extension_bad_header`, `warnvirusrecip`, `warnbannedrecip`, `warnbadhrecip`, `newvirus_admin`, `virus_admin`, `banned_admin`, `bad_header_admin`, `spam_admin`, `spam_subject_tag`, `spam_subject_tag2`, `message_size_limit`, `banned_rulenames`, `rspamd_greylisting`, `rspamd_spam_greylisting_level`, `rspamd_spam_tag_level`, `rspamd_spam_tag_method`, `rspamd_spam_kill_level`) VALUES(2, 1, 0, 'riud', 'riud', 'r', 'Uncensored', 'Y', 'Y', 'Y', 'Y', 'N', 'N', 'N', 'N', 'N', NULL, NULL, NULL, NULL, NULL, NULL, 3, 999, 999, NULL, NULL, NULL, NULL, NULL, NULL, 'N', 'N', 'N', NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 'n', 999.00, 999.00, 'rewrite_subject', 999.00); INSERT INTO `spamfilter_policy` (`id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `policy_name`, `virus_lover`, `spam_lover`, `banned_files_lover`, `bad_header_lover`, `bypass_virus_checks`, `bypass_spam_checks`, `bypass_banned_checks`, `bypass_header_checks`, `spam_modifies_subj`, `virus_quarantine_to`, `spam_quarantine_to`, `banned_quarantine_to`, `bad_header_quarantine_to`, `clean_quarantine_to`, `other_quarantine_to`, `spam_tag_level`, `spam_tag2_level`, `spam_kill_level`, `spam_dsn_cutoff_level`, `spam_quarantine_cutoff_level`, `addr_extension_virus`, `addr_extension_spam`, `addr_extension_banned`, `addr_extension_bad_header`, `warnvirusrecip`, `warnbannedrecip`, `warnbadhrecip`, `newvirus_admin`, `virus_admin`, `banned_admin`, `bad_header_admin`, `spam_admin`, `spam_subject_tag`, `spam_subject_tag2`, `message_size_limit`, `banned_rulenames`, `rspamd_greylisting`, `rspamd_spam_greylisting_level`, `rspamd_spam_tag_level`, `rspamd_spam_tag_method`, `rspamd_spam_kill_level`) VALUES(3, 1, 0, 'riud', 'riud', 'r', 'Wants all spam', 'N', 'Y', 'N', 'N', 'N', 'N', 'N', 'N', 'Y', NULL, NULL, NULL, NULL, NULL, NULL, 3, 999, 999, NULL, NULL, NULL, NULL, NULL, NULL, 'N', 'N', 'N', NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 'n', 999.00, 999.00, 'rewrite_subject', 999.00); INSERT INTO `spamfilter_policy` (`id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `policy_name`, `virus_lover`, `spam_lover`, `banned_files_lover`, `bad_header_lover`, `bypass_virus_checks`, `bypass_spam_checks`, `bypass_banned_checks`, `bypass_header_checks`, `spam_modifies_subj`, `virus_quarantine_to`, `spam_quarantine_to`, `banned_quarantine_to`, `bad_header_quarantine_to`, `clean_quarantine_to`, `other_quarantine_to`, `spam_tag_level`, `spam_tag2_level`, `spam_kill_level`, `spam_dsn_cutoff_level`, `spam_quarantine_cutoff_level`, `addr_extension_virus`, `addr_extension_spam`, `addr_extension_banned`, `addr_extension_bad_header`, `warnvirusrecip`, `warnbannedrecip`, `warnbadhrecip`, `newvirus_admin`, `virus_admin`, `banned_admin`, `bad_header_admin`, `spam_admin`, `spam_subject_tag`, `spam_subject_tag2`, `message_size_limit`, `banned_rulenames`, `rspamd_greylisting`, `rspamd_spam_greylisting_level`, `rspamd_spam_tag_level`, `rspamd_spam_tag_method`, `rspamd_spam_kill_level`) VALUES(4, 1, 0, 'riud', 'riud', 'r', 'Wants viruses', 'Y', 'N', 'Y', 'Y', 'N', 'N', 'N', 'N', 'Y', NULL, NULL, NULL, NULL, NULL, NULL, 3, 6.9, 6.9, NULL, NULL, NULL, NULL, NULL, NULL, 'N', 'N', 'N', NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 'y', 4.00, 6.00, 'rewrite_subject', 10.00); INSERT INTO `spamfilter_policy` (`id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `policy_name`, `virus_lover`, `spam_lover`, `banned_files_lover`, `bad_header_lover`, `bypass_virus_checks`, `bypass_spam_checks`, `bypass_banned_checks`, `bypass_header_checks`, `spam_modifies_subj`, `virus_quarantine_to`, `spam_quarantine_to`, `banned_quarantine_to`, `bad_header_quarantine_to`, `clean_quarantine_to`, `other_quarantine_to`, `spam_tag_level`, `spam_tag2_level`, `spam_kill_level`, `spam_dsn_cutoff_level`, `spam_quarantine_cutoff_level`, `addr_extension_virus`, `addr_extension_spam`, `addr_extension_banned`, `addr_extension_bad_header`, `warnvirusrecip`, `warnbannedrecip`, `warnbadhrecip`, `newvirus_admin`, `virus_admin`, `banned_admin`, `bad_header_admin`, `spam_admin`, `spam_subject_tag`, `spam_subject_tag2`, `message_size_limit`, `banned_rulenames`, `rspamd_greylisting`, `rspamd_spam_greylisting_level`, `rspamd_spam_tag_level`, `rspamd_spam_tag_method`, `rspamd_spam_kill_level`) VALUES(5, 1, 0, 'riud', 'riud', 'r', 'Normal', 'N', 'N', 'N', 'N', 'N', 'N', 'N', 'N', 'Y', '', '', '', '', '', '', 1, 4.5, 50, 0, 0, NULL, NULL, NULL, NULL, 'N', 'N', 'N', NULL, NULL, NULL, NULL, NULL, '', '***SPAM***', NULL, NULL, 'y', 4.00, 6.00, 'rewrite_subject', 10.00); INSERT INTO `spamfilter_policy` (`id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `policy_name`, `virus_lover`, `spam_lover`, `banned_files_lover`, `bad_header_lover`, `bypass_virus_checks`, `bypass_spam_checks`, `bypass_banned_checks`, `bypass_header_checks`, `spam_modifies_subj`, `virus_quarantine_to`, `spam_quarantine_to`, `banned_quarantine_to`, `bad_header_quarantine_to`, `clean_quarantine_to`, `other_quarantine_to`, `spam_tag_level`, `spam_tag2_level`, `spam_kill_level`, `spam_dsn_cutoff_level`, `spam_quarantine_cutoff_level`, `addr_extension_virus`, `addr_extension_spam`, `addr_extension_banned`, `addr_extension_bad_header`, `warnvirusrecip`, `warnbannedrecip`, `warnbadhrecip`, `newvirus_admin`, `virus_admin`, `banned_admin`, `bad_header_admin`, `spam_admin`, `spam_subject_tag`, `spam_subject_tag2`, `message_size_limit`, `banned_rulenames`, `rspamd_greylisting`, `rspamd_spam_greylisting_level`, `rspamd_spam_tag_level`, `rspamd_spam_tag_method`, `rspamd_spam_kill_level`) VALUES(6, 1, 0, 'riud', 'riud', 'r', 'Trigger happy', 'N', 'N', 'N', 'N', 'N', 'N', 'N', 'N', 'Y', NULL, NULL, NULL, NULL, NULL, NULL, 3, 5, 5, NULL, NULL, NULL, NULL, NULL, NULL, 'N', 'N', 'N', NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 'y', 2.00, 4.00, 'rewrite_subject', 8.00); INSERT INTO `spamfilter_policy` (`id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `policy_name`, `virus_lover`, `spam_lover`, `banned_files_lover`, `bad_header_lover`, `bypass_virus_checks`, `bypass_spam_checks`, `bypass_banned_checks`, `bypass_header_checks`, `spam_modifies_subj`, `virus_quarantine_to`, `spam_quarantine_to`, `banned_quarantine_to`, `bad_header_quarantine_to`, `clean_quarantine_to`, `other_quarantine_to`, `spam_tag_level`, `spam_tag2_level`, `spam_kill_level`, `spam_dsn_cutoff_level`, `spam_quarantine_cutoff_level`, `addr_extension_virus`, `addr_extension_spam`, `addr_extension_banned`, `addr_extension_bad_header`, `warnvirusrecip`, `warnbannedrecip`, `warnbadhrecip`, `newvirus_admin`, `virus_admin`, `banned_admin`, `bad_header_admin`, `spam_admin`, `spam_subject_tag`, `spam_subject_tag2`, `message_size_limit`, `banned_rulenames`, `rspamd_greylisting`, `rspamd_spam_greylisting_level`, `rspamd_spam_tag_level`, `rspamd_spam_tag_method`, `rspamd_spam_kill_level`) VALUES(7, 1, 0, 'riud', 'riud', 'r', 'Permissive', 'N', 'N', 'N', 'Y', 'N', 'N', 'N', 'N', 'Y', NULL, NULL, NULL, NULL, NULL, NULL, 3, 10, 20, NULL, NULL, NULL, NULL, NULL, NULL, 'N', 'N', 'N', NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 'n', 7.00, 10.00, 'rewrite_subject', 20.00); -- -------------------------------------------------------- -- -- Dumping data for table `sys_group` -- INSERT INTO `sys_group` (`groupid`, `name`, `description`, `client_id`) VALUES (1, 'admin', 'Administrators group', 0); -- -------------------------------------------------------- -- -- Dumping data for table `sys_ini` -- INSERT INTO `sys_ini` (`sysini_id`, `config`, `default_logo`, `custom_logo`) VALUES (1, '', 'data:image/png;base64,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', ''); -- -------------------------------------------------------- -- -- Dumping data for table `sys_user` -- INSERT INTO `sys_theme` (`var_id`, `tpl_name`, `username`, `logo_url`) VALUES (NULL, 'default', 'global', 'themes/default/images/header_logo.png'); INSERT INTO `sys_theme` (`var_id`, `tpl_name`, `username`, `logo_url`) VALUES (NULL, 'default-v2', 'global', 'themes/default-v2/images/header_logo.png'); -- -------------------------------------------------------- -- -- Dumping data for table `sys_user` -- INSERT INTO `sys_user` (`userid`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `username`, `passwort`, `modules`, `startmodule`, `app_theme`, `typ`, `active`, `language`, `groups`, `default_group`, `client_id`) VALUES (1, 1, 0, 'riud', 'riud', '', 'admin', 'xxx', 'dashboard,admin,client,mail,monitor,sites,dns,vm,tools,help', 'dashboard', 'default', 'admin', 1, 'en', '1,2', 1, 0); -- -------------------------------------------------------- -- -- Dumping data for table `sys_config` -- INSERT INTO sys_config VALUES ('db','db_version','3.3.2'); INSERT INTO sys_config VALUES ('interface','session_timeout','0'); SET FOREIGN_KEY_CHECKS = 1; ispconfig3_install/install/sql/README.txt0000775000000000000000000000415315114345330017320 0ustar rootroot --------------------------------------------------------------------------------- - Developer README --------------------------------------------------------------------------------- When you add or modify a database field or table in the ISPConfig database, then follow these steps: 1) Add the field or table in the ispconfig3.sql file. This file contains the complete database dump which is used when ISPConfig gets installed. 2) Edit the file "incremental/upd_dev_collection.sql" which contains the SQL statements (alter table, add table, update, etc.) in MySQL syntax which are required to modify the current ispconfig database during update. The upd_dev_collection.sql file contains all db schema modifications for changes made since the last ISPConfig release. If SQL statements are already present in the file when you make your additions, add yours to the end of the file, and do not remove any existing statements. When a new ISPConfig update is released, the contents of upd_dev_collections.sql will move to an sql patch file, using the naming scheme upd_0001.sql, upd_0002.sql, upd_0003.sql etc. A patch file may contain one or more SQL modification statements. Every patch file gets executed once in the database, so do not modify older (already released) patch files, they will not get executed again if the update was already run once on a system, and will result in missing updates on any system where they have not run yet. After a patch has been executed, the dbversion field in the server table gets increeased to the version number of the last installed patch. If you like to run a patch file again for testing purposes on your dev machine, then set the number in "dbversion" field of the server table to be lower then the number of your patch. Note: Incremental patches are supported for installed ISPConfig versions > 3.0.3. If the installed version is < 3.0.3, then the full update method is used. In other words, ISPConfig 3.0.3 is the patch release (dbversion) 0 as the incremental update feature has been introduced in 3.0.3. ispconfig3_install/install/sql/powerdns.sql0000775000000000000000000000404615114345330020205 0ustar rootrootCREATE TABLE IF NOT EXISTS `domains` ( `id` int(11) NOT NULL auto_increment, `name` varchar(255) NOT NULL, `master` varchar(128) default NULL, `last_check` int(11) default NULL, `type` varchar(6) NOT NULL, `notified_serial` int(11) default NULL, `account` varchar(40) default NULL, `ispconfig_id` int(11) NOT NULL, PRIMARY KEY (`id`), UNIQUE KEY `name_index` (`name`) ) ENGINE=InnoDB; CREATE TABLE IF NOT EXISTS `records` ( `id` int(11) NOT NULL auto_increment, `domain_id` int(11) default NULL, `name` varchar(255) default NULL, `type` varchar(6) default NULL, `content` TEXT default NULL, `ttl` int(11) default NULL, `prio` int(11) default NULL, `change_date` int(11) default NULL, `disabled` tinyint(1) default 0, `auth` tinyint(1) default 1, `ispconfig_id` int(11) NOT NULL, PRIMARY KEY (`id`), KEY `rec_name_index` (`name`), KEY `nametype_index` (`name`,`type`), KEY `domain_id` (`domain_id`) ) ENGINE=InnoDB; CREATE TABLE IF NOT EXISTS `supermasters` ( `ip` varchar(25) NOT NULL, `nameserver` varchar(255) NOT NULL, `account` varchar(40) default NULL ) ENGINE=InnoDB; CREATE TABLE IF NOT EXISTS `domainmetadata` ( `id` int auto_increment, `domain_id` int NOT NULL, `kind` varchar(32), `content` TEXT, PRIMARY KEY (`id`) ) Engine=InnoDB; -- add new columns if not existing SET @dbname = DATABASE(); SELECT count(*) INTO @exist FROM `information_schema`.`columns` WHERE `table_schema` = @dbname AND `column_name` = 'auth' AND `table_name` = 'records' LIMIT 1; SET @query = IF(@exist <= 0, 'ALTER TABLE `records` ADD COLUMN `auth` tinyint(1) default 1 AFTER `change_date`', 'SELECT \'Column Exists\' STATUS'); PREPARE stmt FROM @query; EXECUTE stmt; SELECT count(*) INTO @exist FROM `information_schema`.`columns` WHERE `table_schema` = @dbname AND `column_name` = 'disabled' AND `table_name` = 'records' LIMIT 1; SET @query = IF(@exist <= 0, 'ALTER TABLE `records` ADD COLUMN `disabled` tinyint(1) default 0 AFTER `change_date`', 'SELECT \'Column Exists\' STATUS'); PREPARE stmt FROM @query; EXECUTE stmt; ispconfig3_install/install/update.php0000775000000000000000000010010015234342134017005 0ustar rootroot> Update \n\n"; //** Include the library with the basic installer functions require_once 'lib/install.lib.php'; //** Include the library with the basic updater functions require_once 'lib/update.lib.php'; //** Include the base class of the installer class require_once 'lib/installer_base.lib.php'; //** Ensure that current working directory is install directory $cur_dir = getcwd(); if(realpath(dirname(__FILE__)) != $cur_dir) die("Please run installation/update from _inside_ the install directory!\n"); //** Install logfile define('ISPC_INSTALL_ROOT', realpath(dirname(__FILE__).'/../')); //** Include the templating lib require_once 'lib/classes/tpl.inc.php'; //** Check for ISPConfig 2.x versions if(is_dir('/root/ispconfig') || is_dir('/home/admispconfig')) { if(is_dir('/home/admispconfig')) { die('This software cannot be installed on a server which runs ISPConfig 2.x.'); } else { die('This software cannot be installed on a server which runs ISPConfig 2.x; the presence of the /root/ispconfig/ directory may indicate an ISPConfig 2.x installation, otherwise you can remove or rename it to continue.'); } } // Patch is required to reapir latest amavis versions if(is_installed('amavisd-new') && !is_installed('patch')) die('The patch command is missing. Install patch command and start update again.'); //** Get distribution identifier $dist = get_distname(); include_once "/usr/local/ispconfig/server/lib/config.inc.php"; $conf_old = $conf; unset($conf); define('ISPC_LOG_FILE', $conf_old['ispconfig_log_dir'] . '/update.log'); if($dist['id'] == '') die('Linux distribution or version not recognized.'); //** Include the autoinstaller configuration (for non-interactive setups) error_reporting(E_ALL ^ E_NOTICE); //** Get commandline options $cmd_opt = getopt('', array('autoinstall::')); //** Load autoinstall file if(isset($cmd_opt['autoinstall'])) { if (empty($cmd_opt['autoinstall'])) { // Meaning --autoinstall was passed without a value. // Set default $cmd_opt['autoinstall'] = "/usr/local/ispconfig/server/lib/autoinstall.conf.php"; } if (!is_file($cmd_opt['autoinstall'])) { die("Autoinstall config file not found. (default is /usr/local/ispconfig/server/lib/autoinstall.conf.php)"); } $path_parts = pathinfo($cmd_opt['autoinstall']); if($path_parts['extension'] == 'php') { include_once $cmd_opt['autoinstall']; } elseif($path_parts['extension'] == 'ini') { if(is_file('autoinstall.ini')) { $tmp = ini_to_array(file_get_contents('autoinstall.ini')); } else { $tmp = ini_to_array(file_get_contents($cmd_opt['autoinstall'])); } if(!is_array($tmp['install'])) $tmp['install'] = array(); if(!is_array($tmp['ssl_cert'])) $tmp['ssl_cert'] = array(); if(!is_array($tmp['expert'])) $tmp['expert'] = array(); if(!is_array($tmp['update'])) $tmp['update'] = array(); $autoinstall = $tmp['install'] + $tmp['ssl_cert'] + $tmp['expert'] + $tmp['update']; unset($tmp); } unset($path_parts); define('AUTOINSTALL', true); } else { $autoinstall = array(); define('AUTOINSTALL', false); } //** Include the distribution-specific installer class library and configuration if(is_file('dist/lib/'.$dist['baseid'].'.lib.php')) include_once 'dist/lib/'.$dist['baseid'].'.lib.php'; include_once 'dist/lib/'.$dist['id'].'.lib.php'; include_once 'dist/conf/'.$dist['confid'].'.conf.php'; //** Get hostname exec('hostname -f', $tmp_out); $conf['hostname'] = $tmp_out[0]; unset($tmp_out); //** Set the mysql login information $conf["mysql"]["host"] = $conf_old["db_host"]; $conf["mysql"]["database"] = $conf_old["db_database"]; $conf['mysql']['charset'] = 'utf8mb4'; $conf["mysql"]["ispconfig_user"] = $conf_old["db_user"]; $conf["mysql"]["ispconfig_password"] = $conf_old["db_password"]; $conf['mysql']['port'] = $conf_old["db_port"]; if($conf['mysql']['port'] == 0 || $conf['mysql']['port'] == '') $conf['mysql']['port'] = 3306; $conf['language'] = $conf_old['language']; $conf['theme'] = $conf_old['theme']; if($conf['language'] == '{language}') $conf['language'] = 'en'; $conf['timezone'] = (isset($conf_old['timezone']))?$conf_old['timezone']:'UTC'; if($conf['timezone'] == '{timezone}' or trim($conf['timezone']) == '') $conf['timezone'] = 'UTC'; $conf['language_file_import_enabled'] = (isset($conf_old['language_file_import_enabled']))?$conf_old['language_file_import_enabled']:true; if(isset($conf_old["dbmaster_host"])) $conf["mysql"]["master_host"] = $conf_old["dbmaster_host"]; if(isset($conf_old["dbmaster_port"])) $conf["mysql"]["master_port"] = $conf_old["dbmaster_port"]; if(isset($conf_old["dbmaster_database"])) $conf["mysql"]["master_database"] = $conf_old["dbmaster_database"]; if(isset($conf_old["dbmaster_user"])) $conf["mysql"]["master_ispconfig_user"] = $conf_old["dbmaster_user"]; if(isset($conf_old["dbmaster_password"])) $conf["mysql"]["master_ispconfig_password"] = $conf_old["dbmaster_password"]; //* Check if this is a master / slave setup if($conf["mysql"]["master_host"] != '' && $conf["mysql"]["host"] != $conf["mysql"]["master_host"]) { $conf['mysql']['master_slave_setup'] = 'y'; } // Resolve the IP address of the mysql hostname. if(!$conf['mysql']['ip'] = gethostbyname($conf['mysql']['host'])) die('Unable to resolve hostname'.$conf['mysql']['host']); $conf['server_id'] = intval($conf_old["server_id"]); $conf['ispconfig_log_priority'] = $conf_old["log_priority"]; $conf['db_log_message_max_length'] = (isset($conf_old['db_log_message_max_length'])) ? $conf_old['db_log_message_max_length'] : '32768'; $inst = new installer(); $inst->is_update = true; $inst->check_prerequisites(); echo "This application will update ISPConfig 3 on your server.\n\n"; //* Make a backup before we start the update $do_backup = $inst->simple_query('Shall the script create a ISPConfig backup in /var/backup/ now?', array('yes', 'no'), 'yes','do_backup'); if($do_backup == 'yes') { //* Create the backup directory $backup_path = '/var/backup/ispconfig_'.$conf['hostname'].'_'.@date('Y-m-d_H-i'); $conf['backup_path'] = $backup_path; exec("mkdir -p $backup_path"); exec("chown root:root $backup_path"); exec("chmod 700 $backup_path"); //* Do the backup swriteln('Creating backup of "/usr/local/ispconfig" directory...'); exec("tar pcfz $backup_path/ispconfig_software.tar.gz /usr/local/ispconfig 2> /dev/null", $out, $returnvar); if($returnvar != 0) die("Backup failed. We stop here...\n"); swriteln('Creating backup of "/etc" directory...'); exec("tar pcfz $backup_path/etc.tar.gz /etc 2> /dev/null", $out, $returnvar); if($returnvar != 0) die("Backup failed. We stop here...\n"); if (is_dir('/root/.acme.sh')) { swriteln('Creating backup of "/root/.acme.sh" directory...'); exec("tar pcfz $backup_path/acme.sh.tar.gz /root/.acme.sh 2> /dev/null", $out, $returnvar); if($returnvar != 0) die("Backup failed. We stop here...\n"); } exec("chown root:root $backup_path/*.tar.gz"); exec("chmod 700 $backup_path/*.tar.gz"); } //** Initialize the MySQL server connection include_once 'lib/mysql.lib.php'; //** Database update is a bit brute force and should be rebuild later ;) /* * Try to read the DB-admin settings */ $clientdb_host = ''; $clientdb_user = ''; $clientdb_password = ''; include_once "/usr/local/ispconfig/server/lib/mysql_clientdb.conf"; $conf["mysql"]["admin_user"] = $clientdb_user; $conf["mysql"]["admin_password"] = $clientdb_password; $clientdb_host = ''; $clientdb_user = ''; $clientdb_password = ''; //** Test mysql root connection $finished = false; do { if(@mysqli_connect($conf["mysql"]["host"], $conf["mysql"]["admin_user"], $conf["mysql"]["admin_password"])) { $finished = true; } else { swriteln($inst->lng('Unable to connect to mysql server').' '.mysqli_connect_error()); $conf["mysql"]["admin_password"] = $inst->free_query('MySQL root password', $conf['mysql']['admin_password'],'mysql_root_password'); } } while ($finished == false); unset($finished); /* * Prepare the dump of the database */ prepareDBDump(); //* initialize the database $inst->db = new db(); $inst->db->setDBData($conf['mysql']["host"], $conf['mysql']["ispconfig_user"], $conf['mysql']["ispconfig_password"], $conf['mysql']["port"]); $inst->db->setDBName($conf['mysql']['database']); //* Check MySQL version $inst->check_mysql_version(); //* initialize the master DB, if we have a multiserver setup if($conf['mysql']['master_slave_setup'] == 'y') { //** Get MySQL root credentials $finished = false; do { $tmp_mysql_server_host = $inst->free_query('MySQL master server hostname', $conf['mysql']['master_host'],'mysql_master_hostname'); $tmp_mysql_server_port = $inst->free_query('MySQL master server port', $conf['mysql']['master_port'],'mysql_master_port'); $tmp_mysql_server_admin_user = $inst->free_query('MySQL master server root username', $conf['mysql']['master_admin_user'],'mysql_master_root_user'); $tmp_mysql_server_admin_password = $inst->free_query('MySQL master server root password', $conf['mysql']['master_admin_password'],'mysql_master_root_password'); $tmp_mysql_server_database = $inst->free_query('MySQL master server database name', $conf['mysql']['master_database'],'mysql_master_database'); //* Initialize the MySQL server connection if(@mysqli_connect($tmp_mysql_server_host, $tmp_mysql_server_admin_user, $tmp_mysql_server_admin_password, $tmp_mysql_server_database, (int)$tmp_mysql_server_port)) { $conf['mysql']['master_host'] = $tmp_mysql_server_host; $conf['mysql']['master_port'] = $tmp_mysql_server_port; $conf['mysql']['master_admin_user'] = $tmp_mysql_server_admin_user; $conf['mysql']['master_admin_password'] = $tmp_mysql_server_admin_password; $conf['mysql']['master_database'] = $tmp_mysql_server_database; $finished = true; } else { swriteln($inst->lng('Unable to connect to mysql server').' '.mysqli_connect_error()); } } while ($finished == false); unset($finished); // initialize the connection to the master database $inst->dbmaster = new db(); if($inst->dbmaster->linkId) $inst->dbmaster->closeConn(); $inst->dbmaster->setDBData($conf['mysql']["master_host"], $conf['mysql']["master_admin_user"], $conf['mysql']["master_admin_password"], $conf['mysql']["master_port"]); $inst->dbmaster->setDBName($conf['mysql']["master_database"]); } else { $inst->dbmaster= new db(); $inst->dbmaster->setDBData($conf['mysql']["host"], $conf['mysql']["admin_user"], $conf['mysql']["admin_password"], $conf['mysql']["port"]); $inst->dbmaster->setDBName($conf['mysql']['database']); } /* * Check all tables */ checkDbHealth(); /* * Check command line mysql login */ if( !empty($conf["mysql"]["admin_password"]) ) { $cmd = "mysql --default-character-set=".escapeshellarg($conf['mysql']['charset'])." --force -h ".escapeshellarg($conf['mysql']['host'])." -u ".escapeshellarg($conf['mysql']['admin_user'])." -p".escapeshellarg($conf['mysql']['admin_password'])." -P ".escapeshellarg($conf['mysql']['port'])." -D ".escapeshellarg($conf['mysql']['database'])." -e ". escapeshellarg('SHOW DATABASES'); } else { $cmd = "mysql --default-character-set=".escapeshellarg($conf['mysql']['charset'])." --force -h ".escapeshellarg($conf['mysql']['host'])." -u ".escapeshellarg($conf['mysql']['admin_user'])." -P ".escapeshellarg($conf['mysql']['port'])." -D ".escapeshellarg($conf['mysql']['database'])." -e ". escapeshellarg('SHOW DATABASES'); } $retval = 0; $retout = array(); exec($cmd, $retout, $retval); if($retval != 0) { die("Unable to call mysql command line with credentials from mysql_clientdb.conf\n"); } /* * dump the new Database and reconfigure the server.ini */ updateDbAndIni(); //** read server config from db into $conf['server_config'] $tmp = $inst->db->queryOneRecord("SELECT config FROM ?? WHERE server_id = ?", $conf["mysql"]["database"] . '.server', $conf['server_id']); $conf['server_config'] = ini_to_array(stripslashes($tmp['config'])); unset($tmp); /* * Reconfigure the permisson if needed * (if this is done at client side, only this client is updated. * If this is done at server side, all clients are updated. */ //if($conf_old['dbmaster_user'] != '' or $conf_old['dbmaster_host'] != '') { //** Update master database rights $reconfigure_master_database_rights_answer = $inst->simple_query('Reconfigure Permissions in master database?', array('yes', 'no'), 'no','reconfigure_permissions_in_master_database'); if($reconfigure_master_database_rights_answer == 'yes') { $inst->grant_master_database_rights(); } //} //** Detect the installed applications $inst->find_installed_apps(); //** Check for current service config state and compare to our results if ($conf['mysql']['master_slave_setup'] == 'y') $current_svc_config = $inst->dbmaster->queryOneRecord("SELECT mail_server,web_server,dns_server,xmpp_server,firewall_server,vserver_server,db_server FROM ?? WHERE server_id=?", $conf['mysql']['master_database'] . '.server', $conf['server_id']); else $current_svc_config = $inst->db->queryOneRecord("SELECT mail_server,web_server,dns_server,xmpp_server,firewall_server,vserver_server,db_server FROM ?? WHERE server_id=?", $conf["mysql"]["database"] . '.server', $conf['server_id']); if(isset($conf['postfix']['installed']) && $conf['postfix']['installed'] == true) { $conf['services']['mail'] = check_service_config_state('mail_server', true); } else { $conf['services']['mail'] = check_service_config_state('mail_server', false); } if(isset($conf['powerdns']['installed']) && $conf['powerdns']['installed'] == true || isset($conf['bind']['installed']) && $conf['bind']['installed'] == true || isset($conf['mydns']['installed']) && $conf['mydns']['installed'] == true) { $conf['services']['dns'] = check_service_config_state('dns_server', true); } else { $conf['services']['dns'] = check_service_config_state('dns_server', false); } if(isset($conf['apache']['installed']) && $conf['apache']['installed'] == true || isset($conf['nginx']['installed']) && $conf['nginx']['installed'] == true) { $conf['services']['web'] = check_service_config_state('web_server', true); } else { $conf['services']['web'] = check_service_config_state('web_server', false); } if(isset($conf['xmpp']['installed']) && $conf['xmpp']['installed'] == true) { $conf['services']['xmpp'] = check_service_config_state('xmpp_server', true); } else { $conf['services']['xmpp'] = check_service_config_state('xmpp_server', false); } if(isset($conf['ufw']['installed']) && $conf['ufw']['installed'] == true || isset($conf['firewall']['installed']) && $conf['firewall']['installed'] == true) { $conf['services']['firewall'] = check_service_config_state('firewall_server', true); } else { $conf['services']['firewall'] = check_service_config_state('firewall_server', false); } if(isset($conf['vserver']['installed']) && $conf['vserver']['installed'] == true) { $conf['services']['vserver'] = check_service_config_state('vserver_server', true); } else { $conf['services']['vserver'] = check_service_config_state('vserver_server', false); } $conf['services']['db'] = check_service_config_state('db_server', true); /* Will always offer as MySQL is of course installed on this host as it's a requirement for ISPC to work... */ unset($current_svc_config); //** Write new decisions into DB $sql = "UPDATE ?? SET mail_server = '{$conf['services']['mail']}', web_server = '{$conf['services']['web']}', dns_server = '{$conf['services']['dns']}', file_server = '{$conf['services']['file']}', db_server = '{$conf['services']['db']}', vserver_server = '{$conf['services']['vserver']}', proxy_server = '{$conf['services']['proxy']}', firewall_server = '{$conf['services']['firewall']}', xmpp_server = '{$conf['services']['xmpp']}' WHERE server_id = ?"; $inst->db->query($sql, $conf['mysql']['database'].'.server', $conf['server_id']); if($conf['mysql']['master_slave_setup'] == 'y') { $inst->dbmaster->query($sql, $conf['mysql']['master_database'].'.server', $conf['server_id']); } //** Is the ISPConfg Panel installed on this host? This might partially override user's preferences later. if($conf['apache']['installed'] == true){ if(!is_file($conf['apache']['vhost_conf_dir'].'/ispconfig.vhost')) $inst->install_ispconfig_interface = false; } elseif($conf['nginx']['installed'] == true){ if(!is_file($conf['nginx']['vhost_conf_dir'].'/ispconfig.vhost')) $inst->install_ispconfig_interface = false; } else { // If neither webserver is installed then this can't be the server that hosts the ispconfig interface. $inst->install_ispconfig_interface = false; } //* Check and install rsync (required for secure backup restoration) swriteln('Checking for rsync...'); $inst->check_and_install_rsync(); //** Shall the services be reconfigured during update $reconfigure_services_answer = $inst->simple_query('Reconfigure Services?', array('yes', 'no', 'selected'), 'yes','reconfigure_services'); if($reconfigure_services_answer == 'yes' || $reconfigure_services_answer == 'selected') { checkAndRenameCustomTemplates(); if($conf['services']['mail']) { //** Configure postfix if($inst->reconfigure_app('Postfix and IMAP/POP3', $reconfigure_services_answer)) { swriteln('Configuring Postfix'); $inst->configure_postfix('dont-create-certs'); if($conf['dovecot']['installed'] == true) { //* Configure dovecot swriteln('Configuring Dovecot'); $inst->configure_dovecot(); } elseif ($conf['courier']['installed'] == true) { //** Configure saslauthd swriteln('Configuring SASL'); $inst->configure_saslauthd(); //** Configure PAM swriteln('Configuring PAM'); $inst->configure_pam(); //* Configure courier swriteln('Configuring Courier'); $inst->configure_courier(); } } //** Configure mailman if($conf['mailman']['installed'] == true && $inst->reconfigure_app('Mailman', $reconfigure_services_answer)) { swriteln('Configuring Mailman'); $inst->configure_mailman('update'); } //** Configure Spamasassin if($inst->reconfigure_app('Spamassassin', $reconfigure_services_answer)) { swriteln('Configuring Spamassassin'); $inst->configure_spamassassin(); } //** Configure Amavis if($conf['amavis']['installed'] == true && $inst->reconfigure_app('Amavisd', $reconfigure_services_answer)) { swriteln('Configuring Amavisd'); $inst->configure_amavis(); } //** Configure Rspamd if($conf['rspamd']['installed'] == true && $inst->reconfigure_app('Rspamd', $reconfigure_services_answer)) { swriteln('Configuring Rspamd'); $inst->configure_rspamd(); } //** Configure Getmail if ($inst->reconfigure_app('Getmail', $reconfigure_services_answer)) { swriteln('Configuring Getmail'); $inst->configure_getmail(); } } if($conf['services']['dns'] && $inst->reconfigure_app('DNS', $reconfigure_services_answer)) { //* Configure DNS if($conf['powerdns']['installed'] == true) { swriteln('Configuring PowerDNS'); $inst->configure_powerdns(); } elseif($conf['bind']['installed'] == true) { swriteln('Configuring BIND'); $inst->configure_bind(); if(!is_installed('haveged')) { swriteln("[INFO] haveged not detected - DNSSEC can fail"); } } else { swriteln('Configuring MyDNS'); $inst->configure_mydns(); } } if($conf['services']['web'] || $inst->install_ispconfig_interface) { if($conf['pureftpd']['installed'] == true && $inst->reconfigure_app('Pureftpd', $reconfigure_services_answer)) { //** Configure Pureftpd swriteln('Configuring Pureftpd'); $inst->configure_pureftpd(); } if($inst->reconfigure_app('Web-Server', $reconfigure_services_answer)) { if($conf['webserver']['server_type'] == 'apache'){ //** Configure Apache swriteln('Configuring Apache'); $inst->configure_apache(); //** Configure vlogger swriteln('Configuring vlogger'); $inst->configure_vlogger(); } else { //** Configure nginx swriteln('Configuring nginx'); $inst->configure_nginx(); } if ($conf['server_config']['web']['apps_vhost_enabled'] == 'y') { //** Configure apps vhost swriteln('Configuring Apps vhost'); $inst->configure_apps_vhost(); } else swriteln('Skipping config of Apps vhost'); } //* Configure Jailkit if($inst->reconfigure_app('Jailkit', $reconfigure_services_answer)) { swriteln('Configuring Jailkit'); $inst->configure_jailkit(); } } if($conf['services']['xmpp'] && $inst->reconfigure_app('XMPP', $reconfigure_services_answer)) { //** Configure Metronome XMPP $inst->configure_xmpp('dont-create-certs'); } // Configure AppArmor if($conf['apparmor']['installed']){ swriteln('Configuring AppArmor'); $inst->configure_apparmor(); } if($conf['services']['firewall'] && $inst->reconfigure_app('Firewall', $reconfigure_services_answer)) { if(isset($conf['ufw']['installed']) && $conf['ufw']['installed'] == true) { //* Configure Ubuntu Firewall $conf['services']['firewall'] = true; swriteln('Configuring Ubuntu Firewall'); $inst->configure_ufw_firewall(); } else { //* Configure Bastille Firewall swriteln('Configuring Bastille Firewall'); $inst->configure_bastille_firewall(); } } //* Configure DBServer swriteln('Configuring Database'); $inst->configure_dbserver(); /* if($conf['squid']['installed'] == true) { swriteln('Configuring Squid'); $inst->configure_squid(); } else if($conf['nginx']['installed'] == true) { swriteln('Configuring Nginx'); $inst->configure_nginx(); } */ } //** Configure ISPConfig swriteln('Updating ISPConfig'); $issue_asked = false; $issue_tried = false; // create acme vhost if($conf['nginx']['installed'] == true) { $inst->make_acme_vhost('nginx'); // we need this config file but we don't want nginx to be restarted at this point } if($conf['apache']['installed'] == true) { $inst->make_acme_vhost('apache'); // we need this config file but we don't want apache to be restarted at this point } if ($inst->install_ispconfig_interface) { //** Customise the port ISPConfig runs on $ispconfig_port_number = get_ispconfig_port_number(); if(isset($autoupdate['ispconfig_port']) && $autoupdate['ispconfig_port'] == 'default') $autoupdate['ispconfig_port'] = $ispconfig_port_number; if($conf['webserver']['server_type'] == 'nginx'){ $conf['nginx']['vhost_port'] = $inst->free_query('ISPConfig Port', $ispconfig_port_number,'ispconfig_port'); } else { $conf['apache']['vhost_port'] = $inst->free_query('ISPConfig Port', $ispconfig_port_number,'ispconfig_port'); } // $ispconfig_ssl_default = (is_ispconfig_ssl_enabled() == true)?'y':'n'; if(strtolower($inst->simple_query('Create new ISPConfig SSL certificate', array('yes', 'no'), 'no','create_new_ispconfig_ssl_cert')) == 'yes') { $inst->make_ispconfig_ssl_cert(); $issue_tried = true; } $issue_asked = true; } // Create SSL certs for non-webserver(s)? if(!$issue_asked) { if(!file_exists('/usr/local/ispconfig/interface/ssl/ispserver.crt')) { if(!$issue_tried && strtolower($inst->simple_query('Do you want to create SSL certs for your server?', array('y', 'n'), 'y','create_ssl_server_certs')) == 'y') { $inst->make_ispconfig_ssl_cert(); } } else { swriteln('Certificate exists. Not creating a new one.'); } } // update acme.sh if installed $inst->update_acme(); $inst->install_ispconfig(); // Cleanup $inst->cleanup_ispconfig(); //** Configure Crontab $update_crontab_answer = $inst->simple_query('Reconfigure Crontab?', array('yes', 'no'), 'yes','reconfigure_crontab'); if($update_crontab_answer == 'yes') { swriteln('Updating Crontab'); $inst->install_crontab(); } //** Restart services: if($reconfigure_services_answer == 'yes') { swriteln('Restarting services ...'); if($conf['mysql']['installed'] == true && isset($conf['mysql']['init_script']) && $conf['mysql']['init_script'] != '') system($inst->getinitcommand($conf['mysql']['init_script'], 'restart').' >/dev/null 2>&1'); if($conf['services']['mail']) { if($conf['postfix']['installed'] == true && isset($conf['postfix']['init_script']) && $conf['postfix']['init_script'] != '') system($inst->getinitcommand($conf['postfix']['init_script'], 'restart')); if($conf['saslauthd']['installed'] == true && isset($conf['saslauthd']['init_script']) && $conf['saslauthd']['init_script'] != '') system($inst->getinitcommand($conf['saslauthd']['init_script'], 'restart')); if($conf['amavis']['installed'] == true && isset($conf['amavis']['init_script']) && $conf['amavis']['init_script'] != '') system($inst->getinitcommand($conf['amavis']['init_script'], 'restart')); if($conf['rspamd']['installed'] == true && isset($conf['rspamd']['init_script']) && $conf['rspamd']['init_script'] != '') system($inst->getinitcommand($conf['rspamd']['init_script'], 'restart')); if($conf['clamav']['installed'] == true && isset($conf['clamav']['init_script']) && $conf['clamav']['init_script'] != '' && $conf['amavis']['installed'] == true) system($inst->getinitcommand($conf['clamav']['init_script'], 'restart')); if($conf['courier']['installed'] == true){ if($conf['courier']['courier-authdaemon'] != '') system($inst->getinitcommand($conf['courier']['courier-authdaemon'], 'restart')); if($conf['courier']['courier-imap'] != '') system($inst->getinitcommand($conf['courier']['courier-imap'], 'restart')); if($conf['courier']['courier-imap-ssl'] != '') system($inst->getinitcommand($conf['courier']['courier-imap-ssl'], 'restart')); if($conf['courier']['courier-pop'] != '') system($inst->getinitcommand($conf['courier']['courier-pop'], 'restart')); if($conf['courier']['courier-pop-ssl'] != '') system($inst->getinitcommand($conf['courier']['courier-pop-ssl'], 'restart')); } if($conf['dovecot']['installed'] == true && isset($conf['dovecot']['init_script']) && $conf['dovecot']['init_script'] != '') system($inst->getinitcommand($conf['dovecot']['init_script'], 'restart')); if($conf['mailman']['installed'] == true && isset($conf['mailman']['init_script']) && $conf['mailman']['init_script'] != '') system('nohup '.$inst->getinitcommand($conf['mailman']['init_script'], 'restart').' >/dev/null 2>&1 &'); } if($conf['services']['web'] || $inst->install_ispconfig_interface) { if($conf['webserver']['server_type'] == 'apache') { // If user has configured a custom Apache init script, use that. Otherwise use the default auto-detected init script if(!empty($conf['server_config']['web']['apache_init_script'])) { system($inst->getinitcommand($conf['server_config']['web']['apache_init_script'], 'restart')); } elseif(!empty($conf['apache']['init_script'])) { system($inst->getinitcommand($conf['apache']['init_script'], 'restart')); } } //* Reload is enough for nginx if($conf['webserver']['server_type'] == 'nginx'){ if($conf['nginx']['php_fpm_init_script'] != '') system($inst->getinitcommand($conf['nginx']['php_fpm_init_script'], 'reload')); if(isset($conf['nginx']['init_script']) && $conf['nginx']['init_script'] != '') system($inst->getinitcommand($conf['nginx']['init_script'], 'reload')); } if($conf['pureftpd']['installed'] == true && isset($conf['pureftpd']['init_script']) && $conf['pureftpd']['init_script'] != '') system($inst->getinitcommand($conf['pureftpd']['init_script'], 'restart')); } if($conf['services']['dns']) { if($conf['mydns']['installed'] == true && isset($conf['mydns']['init_script']) && $conf['mydns']['init_script'] != '') system($inst->getinitcommand($conf['mydns']['init_script'], 'restart').' &> /dev/null'); if($conf['powerdns']['installed'] == true && isset($conf['powerdns']['init_script']) && $conf['powerdns']['init_script'] != '') system($inst->getinitcommand($conf['powerdns']['init_script'], 'restart').' &> /dev/null'); if($conf['bind']['installed'] == true && isset($conf['bind']['init_script']) && $conf['bind']['init_script'] != '') system($inst->getinitcommand($conf['bind']['init_script'], 'restart').' &> /dev/null'); } if($conf['services']['xmpp']) { if($conf['xmpp']['installed'] == true && isset($conf['xmpp']['init_script']) && $conf['xmpp']['init_script'] != '') system($inst->getinitcommand($conf['xmpp']['init_script'], 'restart').' &> /dev/null'); } if($conf['services']['proxy']) { // if($conf['squid']['installed'] == true && isset($conf['squid']['init_script']) && $conf['squid']['init_script'] != '' && is_executable($conf['init_scripts'].'/'.$conf['squid']['init_script'])) system($conf['init_scripts'].'/'.$conf['squid']['init_script'].' restart &> /dev/null'); if($conf['nginx']['installed'] == true && isset($conf['nginx']['init_script']) && $conf['nginx']['init_script'] != '') system($inst->getinitcommand($conf['nginx']['init_script'], 'restart').' &> /dev/null'); } if($conf['services']['firewall']) { if(isset($conf['ufw']['installed']) && $conf['ufw']['installed'] == true && isset($conf['ufw']['init_script']) && $conf['ufw']['init_script'] != '' && is_executable($conf['init_scripts'].'/'.$conf['ufw']['init_script'])) system($conf['init_scripts'].'/'.$conf['ufw']['init_script'].' restart &> /dev/null'); } } //* Set default servers setDefaultServers(); $inst->create_mount_script(); //* Create md5 filelist $md5_filename = '/usr/local/ispconfig/security/data/file_checksums_'.date('Y-m-d_h-i').'.md5'; exec('find /usr/local/ispconfig -type f -print0 | xargs -0 md5sum > '.$md5_filename . ' 2>/dev/null'); chmod($md5_filename,0700); // TODO: In a future update, stop the update script when running courier if ($conf['courier']['installed'] == true) { swriteln('WARNING: You are running Courier. We are removing support for Courier from ISPConfig. Migrate your system to Dovecot as soon as possible. See https://www.howtoforge.com/community/threads/migrate-from-courier-to-dovecot-on-your-ispconfig-managed-mailserver.88523/ for more information.'); } echo "Update finished.\n"; ?> ispconfig3_install/install/setrights.php0000775000000000000000000001222715123305415017551 0ustar rootroot>This script tries to repair the client rights \n\n"; //** Include the library with the basic installer functions require_once 'lib/install.lib.php'; //** Include the library with the basic updater functions require_once 'lib/update.lib.php'; //** Include the base class of the installer class require_once 'lib/installer_base.lib.php'; //** Ensure that current working directory is install directory $cur_dir = getcwd(); if(realpath(dirname(__FILE__)) != $cur_dir) die("Please run installation/update from _inside_ the install directory!\n"); //** Get distribution identifier $dist = get_distname(); include_once "/usr/local/ispconfig/server/lib/config.inc.php"; $conf_old = $conf; unset($conf); if($dist['id'] == '') die('Linux distribution or version not recognized.'); //** Include the distribution-specific installer class library and configuration if(is_file('dist/lib/'.$dist['baseid'].'.lib.php')) include_once 'dist/lib/'.$dist['baseid'].'.lib.php'; include_once 'dist/lib/'.$dist['id'].'.lib.php'; include_once 'dist/conf/'.$dist['id'].'.conf.php'; //** Get hostname exec('hostname -f', $tmp_out); $conf['hostname'] = $tmp_out[0]; unset($tmp_out); //* Check if this is a master / slave setup $conf['mysql']['master_slave_setup'] = 'n'; if($conf["mysql"]["master_host"] != '' && $conf["mysql"]["host"] != $conf["mysql"]["master_host"]) { $conf['mysql']['master_slave_setup'] = 'y'; } /* * Try to read the DB-admin settings */ $clientdb_host = ''; $clientdb_user = ''; $clientdb_password = ''; include_once "/usr/local/ispconfig/server/lib/mysql_clientdb.conf"; $conf["mysql"]["admin_user"] = $clientdb_user; $conf["mysql"]["admin_password"] = $clientdb_password; $clientdb_host = ''; $clientdb_user = ''; $clientdb_password = ''; //** There is a error if user for mysql admin_password if empty if( empty($conf["mysql"]["admin_password"]) ) { die("internal error - MYSQL-Root passord not known"); } $inst = new installer(); //** Initialize the MySQL server connection include_once 'lib/mysql.lib.php'; //* initialize the database $inst->db = new db(); /* * The next line is a bit tricky! * At the automated update we have no connection to the master-db (we don't need it, because * there are only TWO points, where this is needed) * 1) update the rights --> the autoupdater sets the rights of all clients when the server is * autoupdated) * 2) update the server-settings (is web installed, is mail installed) --> the autoupdates * doesn't change any of this settings, so there ist no need to update this. * This means, the autoupdater did not need any connection to the master-db (only to the local bd * of the master-server). To avoid any problems, we set the master-db to the local one. */ $inst->dbmaster = $inst->db; /* * If it is NOT a master-slave - Setup then we are at the Master-DB. So set all rights */ if($conf['mysql']['master_slave_setup'] != 'y') { $inst->grant_master_database_rights(true); } echo "finished.\n"; ?> ispconfig3_install/install/dist/0000775000000000000000000000000015114345330015760 5ustar rootrootispconfig3_install/install/dist/conf/0000775000000000000000000000000015220162403016701 5ustar rootrootispconfig3_install/install/dist/conf/gentoo.conf.php0000775000000000000000000002545315121314320021642 0ustar rootroot ispconfig3_install/install/dist/conf/fedora9.conf.php0000775000000000000000000002266215121314320021677 0ustar rootroot ispconfig3_install/install/dist/conf/ubuntu2204.conf.php0000775000000000000000000002404415121314320022174 0ustar rootrootispconfig3_install/install/dist/conf/debian120.conf.php0000775000000000000000000002424515121314320022012 0ustar rootroot ispconfig3_install/install/dist/conf/debian40.conf.php0000775000000000000000000002357615121314320021741 0ustar rootroot ispconfig3_install/install/dist/conf/centos72.conf.php0000775000000000000000000002304015121314320022001 0ustar rootroot ispconfig3_install/install/dist/conf/debian60.conf.php0000775000000000000000000002374115121314320021735 0ustar rootroot ispconfig3_install/install/dist/conf/centos90.conf.php0000775000000000000000000002304415121314320022005 0ustar rootroot ispconfig3_install/install/dist/conf/debian130.conf.php0000775000000000000000000002424515123305415022022 0ustar rootroot ispconfig3_install/install/dist/conf/opensuse110.conf.php0000775000000000000000000002300315121314320022417 0ustar rootroot ispconfig3_install/install/dist/conf/debian110.conf.php0000775000000000000000000002424515121314320022011 0ustar rootroot ispconfig3_install/install/dist/conf/centos80.conf.php0000775000000000000000000002304415121314320022004 0ustar rootroot ispconfig3_install/install/dist/conf/ubuntu1804.conf.php0000775000000000000000000002404515121314320022202 0ustar rootroot ispconfig3_install/install/dist/conf/debiantesting.conf.php0000775000000000000000000002425215121314320023163 0ustar rootroot ispconfig3_install/install/dist/conf/centos53.conf.php0000775000000000000000000002266115121314320022010 0ustar rootroot ispconfig3_install/install/dist/conf/ubuntu2004.conf.php0000775000000000000000000002404515121314320022173 0ustar rootroot ispconfig3_install/install/dist/conf/debian100.conf.php0000775000000000000000000002424515121314320022010 0ustar rootroot ispconfig3_install/install/dist/conf/enterpriselinux10.conf.php0000775000000000000000000002305315123305415023751 0ustar rootroot ispconfig3_install/install/dist/conf/fedora32.conf.php0000775000000000000000000002306615121314320021752 0ustar rootroot ispconfig3_install/install/dist/conf/ubuntu1710.conf.php0000775000000000000000000002400715121314320022174 0ustar rootroot ispconfig3_install/install/dist/conf/fedora33.conf.php0000775000000000000000000002306615121314320021753 0ustar rootroot ispconfig3_install/install/dist/conf/opensuse112.conf.php0000775000000000000000000002277315121314320022436 0ustar rootroot ispconfig3_install/install/dist/conf/centos70.conf.php0000775000000000000000000002265615121314320022013 0ustar rootroot ispconfig3_install/install/dist/conf/ubuntu1604.conf.php0000775000000000000000000002404515121314320022200 0ustar rootroot ispconfig3_install/install/dist/conf/ubuntu2404.conf.php0000775000000000000000000002404415121314320022176 0ustar rootrootispconfig3_install/install/dist/conf/centos52.conf.php0000775000000000000000000002266115121314320022007 0ustar rootroot ispconfig3_install/install/dist/conf/debian90.conf.php0000775000000000000000000002424615121314320021741 0ustar rootroot ispconfig3_install/install/dist/conf/ubuntu2604.conf.php0000775000000000000000000002404515220162403022204 0ustar rootroot ispconfig3_install/install/dist/tpl/0000775000000000000000000000000015114345330016557 5ustar rootrootispconfig3_install/install/dist/tpl/gentoo/0000775000000000000000000000000015234342134020054 5ustar rootrootispconfig3_install/install/dist/tpl/gentoo/apache_ispconfig.vhost.master0000775000000000000000000001240215123305415025715 0ustar rootroot ###################################################### # This virtual host contains the configuration # for the ISPConfig controlpanel ###################################################### Listen NameVirtualHost *: > ServerAdmin webmaster@localhost Alias /mail /var/www/ispconfig/mail SetHandler None SetHandler None DocumentRoot /var/www/ispconfig/ SuexecUserGroup ispconfig ispconfig Options -Indexes +FollowSymLinks +MultiViews +ExecCGI AllowOverride AuthConfig Indexes Limit Options FileInfo SetHandler fcgid-script FCGIWrapper /var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter .php Require all granted Order allow,deny Allow from all DirectoryIndex index.php IPCCommTimeout 7200 MaxRequestLen 15728640 DocumentRoot /usr/local/ispconfig/interface/web SuexecUserGroup ispconfig ispconfig DirectoryIndex index.php Options -Indexes +FollowSymLinks +MultiViews +ExecCGI AllowOverride AuthConfig Indexes Limit Options FileInfo Require all granted Order allow,deny Allow from all #SetHandler "proxy:unix:/var/lib/php5-fpm/ispconfig.sock|fcgi://localhost" SetHandler "proxy:fcgi://127.0.0.1:9000" DocumentRoot /usr/local/ispconfig/interface/web/ AssignUserId ispconfig ispconfig AddType application/x-httpd-php .php # php_admin_value open_basedir "/usr/local/ispconfig/interface:/usr/share:/tmp" Options +FollowSymLinks AllowOverride None Require all granted Order allow,deny Allow from all php_value magic_quotes_gpc 0 # ErrorLog /var/log/apache2/error.log # CustomLog /var/log/apache2/access.log combined ServerSignature Off SecRuleEngine Off # SSL Configuration SSLEngine On SSLProtocol All -SSLv3 -TLSv1 -TLSv1.1 SSLProtocol All -SSLv2 -SSLv3 SSLCertificateFile /usr/local/ispconfig/interface/ssl/ispserver.crt SSLCertificateKeyFile /usr/local/ispconfig/interface/ssl/ispserver.key SSLCACertificateFile /usr/local/ispconfig/interface/ssl/ispserver.bundle SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 SSLHonorCipherOrder On SSLCompression Off SSLSessionTickets Off # ISPConfig 3.1 currently requires unsafe-line for both scripts and styles, as well as unsafe-eval Header set Content-Security-Policy "default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:; object-src 'none'" Header set Content-Security-Policy "default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:; object-src 'none'; upgrade-insecure-requests" Header set X-Content-Type-Options: nosniff Header set X-Frame-Options: SAMEORIGIN Header set X-XSS-Protection: "1; mode=block" Header always edit Set-Cookie (.*) "$1; HTTPOnly" Header always edit Set-Cookie (.*) "$1; Secure" = 2.4.7> Header setifempty Strict-Transport-Security "max-age=15768000" Header set Strict-Transport-Security "max-age=15768000" RequestHeader unset Proxy early # Redirect http to https ErrorDocument 400 "

Error 400 - trying to redirect

" ispconfig3_install/install/dist/tpl/gentoo/dovecot2.conf.master0000775000000000000000000000570615114345330023753 0ustar rootroot# Do not change this file, as changes will be overwritten by any ISPConfig update. # Put your custom settings in /usr/local/ispconfig/server/conf-custom/install/dovecot_custom.conf.master. # To start using those changes, do a force upgrade and let it reconfigure your services. (ispconfig_update.sh --force) listen = *,[::] protocols = imap pop3 auth_mechanisms = plain login disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_privileged_group = vmail postmaster_address = postmaster@example.com ssl_cert = 1, smtpd_discard_ehlo_keywords => ['8BITMIME'], }; # IP-Addresses for internal networks => load policy MYNETS # - requires -o smtp_send_xforward_command=yes in postfix master.cf @mynetworks = qw(0.0.0.0/8 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 [::1] [FE80::]/10 [FEC0::]/10); # Allow SMTP access from IPs in @inet_acl to amvisd SMTP Port @inet_acl = qw( 127.0.0.1 [::1] 192.168.0.0/16 ); # DKIM $enable_dkim_verification = 1; $enable_dkim_signing = 1; # load DKIM signing code $signed_header_fields{'received'} = 0; # turn off signing of Received @dkim_signature_options_bysender_maps = ( { '.' => { ttl => 21*24*3600, c => 'relaxed/simple' } } ); #------------ Do not modify anything below this line ------------- 1; # insure a defined return ispconfig3_install/install/dist/tpl/gentoo/apache_apps.vhost.master0000775000000000000000000000230715114345330024702 0ustar rootroot ###################################################### # This virtual host contains the configuration # for the ISPConfig apps vhost ###################################################### {vhost_port_listen} Listen {apps_vhost_port} # NameVirtualHost *:{apps_vhost_port} ServerAdmin webmaster@localhost {apps_vhost_servername} DocumentRoot {apps_vhost_dir} SuexecUserGroup ispapps ispapps Options +Indexes +FollowSymLinks +MultiViews +ExecCGI AllowOverride AuthConfig Indexes Limit Options FileInfo SetHandler fcgid-script FCGIWrapper {website_basedir}/php-fcgi-scripts/apps/.php-fcgi-starter .php Order allow,deny Allow from all DirectoryIndex index.php DocumentRoot {apps_vhost_dir} AddType application/x-httpd-php .php Options +FollowSymLinks AllowOverride None Order allow,deny Allow from all ServerSignature Off ispconfig3_install/install/dist/tpl/gentoo/apache_ispconfig.conf.master0000775000000000000000000000132315114345330025477 0ustar rootroot ################################################ # ISPConfig Logfile configuration for vlogger ################################################ LogFormat "%v %h %l %u %t \"%r\" %>s %B \"%{Referer}i\" \"%{User-Agent}i\"" combined_ispconfig CustomLog "| /usr/local/ispconfig/server/scripts/vlogger -s access.log -t \"%Y%m%d-access.log\" -d \"/etc/vlogger/vlogger-dbi.conf\" /var/log/ispconfig/httpd" combined_ispconfig AllowOverride None Order Deny,Allow Deny from all # allow path to awstats and alias for awstats icons Order allow,deny Allow from all Alias /awstats/icon "/usr/share/awstats/htdocs/icon" ispconfig3_install/install/dist/tpl/gentoo/jk_init.ini.master0000775000000000000000000001165415114345330023506 0ustar rootroot[ldconfig] executables = /sbin/ldconfig regularfiles = /etc/ld.so.conf [uidbasics] comment = common files for all jails that need user/group information libraries = /lib/libnsl.so.1, /lib64/libnsl.so.1, /lib/libnss*.so.2, /lib64/libnss*.so.2 regularfiles = /etc/nsswitch.conf includesections = ldconfig [netbasics] comment = common files for all jails that need any internet connectivity libraries = /lib/libnss_dns.so.2, /lib64/libnss_dns.so.2 regularfiles = /etc/resolv.conf, /etc/host.conf, /etc/hosts, /etc/protocols [logbasics] comment = timezone information regularfiles = /etc/localtime need_logsocket = 1 [jk_lsh] comment = Jailkit limited shell executables = /usr/sbin/jk_lsh regularfiles = /etc/jailkit/jk_lsh.ini users = root groups = root need_logsocket = 1 includesections = uidbasics [limitedshell] comment = alias for jk_lsh includesections = jk_lsh [cvs] comment = Concurrent Versions System executables = /usr/bin/cvs devices = /dev/null [git] comment = Fast Version Control System executables = /usr/bin/git* directories = /usr/share/git-core includesections = editors [scp] comment = ssh secure copy executables = /usr/bin/scp includesections = netbasics, uidbasics devices = /dev/urandom [sftp] comment = ssh secure ftp executables = /usr/lib/sftp-server, /usr/libexec/openssh/sftp-server, /usr/lib/misc/sftp-server, /usr/libexec/sftp-server includesections = netbasics, uidbasics devices = /dev/urandom, /dev/null [ssh] comment = ssh secure shell executables = /usr/bin/ssh includesections = netbasics, uidbasics devices = /dev/urandom, /dev/tty [rsync] executables = /usr/bin/rsync includesections = netbasics, uidbasics [procmail] comment = procmail mail delivery executables = /usr/bin/procmail, /bin/sh devices = /dev/null [basicshell] comment = bash based shell with several basic utilities executables = /bin/sh, /bin/bash, /bin/ls, /bin/cat, /bin/chmod, /bin/mkdir, /bin/cp, /bin/cpio, /bin/date, /bin/dd, /bin/echo, /bin/egrep, /bin/false, /bin/fgrep, /bin/grep, /bin/gunzip, /bin/gzip, /bin/ln, /bin/ls, /bin/mkdir, /bin/mktemp, /bin/more, /bin/mv, /bin/pwd, /bin/rm, /bin/rmdir, /bin/sed, /bin/sh, /bin/sleep, /bin/sync, /bin/tar, /bin/touch, /bin/true, /bin/uncompress, /bin/zcat regularfiles = /etc/motd, /etc/issue, /etc/bash.bashrc, /etc/bashrc, /etc/profile #directories = users = root groups = root includesections = uidbasics [midnightcommander] comment = Midnight Commander executables = /usr/bin/mc, /usr/bin/mcedit, /usr/bin/mcview directories = /etc/terminfo, /usr/share/terminfo, /usr/share/mc includesections = basicshell [extendedshell] comment = bash shell including things like awk, bzip, tail, less executables = /usr/bin/awk, /bin/bzip2, /bin/bunzip2, /usr/bin/ldd, /usr/bin/less, /usr/bin/clear, /usr/bin/cut, /usr/bin/du, /usr/bin/find, /usr/bin/head, /usr/bin/md5sum, /usr/bin/nice, /usr/bin/sort, /usr/bin/tac, /usr/bin/tail, /usr/bin/tr, /usr/bin/wc, /usr/bin/watch, /usb/bin/whoami includesections = basicshell, midnightcommander, editors [editors] comment = joe and nano executables = /usr/bin/joe, /usr/bin/nano, /usr/bin/vi, /usr/bin/vim regularfiles = /etc/vimrc directories = /etc/joe, /etc/terminfo, /usr/share/vim, /usr/share/terminfo, /usr/lib/terminfo [netutils] comment = several internet utilities like curl, wget, ftp, rsync, scp, ssh executables = /usr/bin/curl /usr/bin/wget, /usr/bin/lynx, /usr/bin/ftp, /usr/bin/host, /usr/bin/rsync, /usr/bin/smbclient includesections = netbasics, ssh, sftp, scp directories = /etc/ssl/certs/ regularfiles = /usr/lib/ssl/certs [apacheutils] comment = htpasswd utility executables = /usr/bin/htpasswd [extshellplusnet] comment = alias for extendedshell + netutils + apacheutils includesections = extendedshell, netutils, apacheutils [openvpn] comment = jail for the openvpn daemon executables = /usr/sbin/openvpn users = root,nobody groups = root,nogroup includesections = netbasics devices = /dev/urandom, /dev/random, /dev/net/tun includesections = netbasics, uidbasics need_logsocket = 1 [apache] comment = the apache webserver, very basic setup, probably too limited for you executables = /usr/sbin/apache2 users = root, apache groups = root, apache includesections = netbasics, uidbasics [perl] comment = the perl interpreter and libraries executables = /usr/bin/perl directories = /usr/lib/perl, /usr/lib/perl5, /usr/share/perl, /usr/share/perl5 [xauth] comment = getting X authentication to work executables = /usr/bin/X11/xauth regularfiles = /usr/X11R6/lib/X11/rgb.txt, /etc/ld.so.conf [xclients] comment = minimal files for X clients regularfiles = /usr/X11R6/lib/X11/rgb.txt includesections = xauth [vncserver] comment = the VNC server program executables = /usr/bin/Xvnc, /usr/bin/Xrealvnc directories = /usr/X11R6/lib/X11/fonts/ includesections = xclients #[xterm] #comment = xterm #executables = /usr/bin/X11/xterm #directories = /usr/share/terminfo, /etc/terminfo #devices = /dev/pts/0, /dev/pts/1, /dev/pts/2, /dev/pts/3, /dev/pts/4, /dev/ptyb4, /dev/ptya4, /dev/tty, /dev/tty0, /dev/tty4 ispconfig3_install/install/dist/tpl/gentoo/apache_apps_fcgi_starter.master0000775000000000000000000000030315114345330026266 0ustar rootroot#!/bin/sh PHPRC=/etc/php/cgi-php5/ export PHPRC export PHP_FCGI_MAX_REQUESTS=5000 export PHP_FCGI_CHILDREN=1 export PHP_FCGI_MAX_REQUESTLEN=15728640 exec /usr/bin/php-cgi -d magic_quotes_gpc=off ispconfig3_install/install/dist/tpl/gentoo/dovecot.conf.master0000775000000000000000000000347415114345330023671 0ustar rootrootprotocols = imap imaps pop3 pop3s disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_privileged_group = mail ssl_cert_file = /etc/ssl/dovecot/server.crt ssl_key_file = /etc/ssl/dovecot/server.key ## ## IMAP specific settings ## protocol imap { login_executable = /usr/libexec/dovecot/imap-login mail_executable = /usr/libexec/dovecot/imap mail_plugins = quota imap_quota mail_plugin_dir = /usr/lib/dovecot/imap } ## ## POP3 specific settings ## protocol pop3 { login_executable = /usr/libexec/dovecot/pop3-login mail_executable = /usr/libexec/dovecot/pop3 pop3_uidl_format = %08Xu%08Xv mail_plugins = quota mail_plugin_dir = /usr/lib/dovecot/pop3 } ## ## LDA specific settings ## protocol lda { postmaster_address = postmaster@example.com mail_plugin_dir = /usr/lib/dovecot/lda auth_socket_path = /var/run/dovecot/auth-master mail_plugins = sieve quota } ## Plugin settings plugin { quota = maildir sieve=/var/vmail/%d/%n/.sieve } ## ## Authentication processes ## auth default { mechanisms = plain login passdb pam { args = "*" } # SQL database passdb sql { # Path for SQL configuration file args = /etc/dovecot/dovecot-sql.conf } # new quota support: userdb prefetch { } userdb sql { args = /etc/dovecot/dovecot-sql.conf } ## dovecot-lda specific settings ## socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = vmail # User running Dovecot LDA #group = vmail # Or alternatively mode 0660 + LDA user in this group } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } mail_location = maildir:/var/vmail/%d/%n/Maildir mail_uid = 5000 mail_gid = 5000 ispconfig3_install/install/dist/lib/0000775000000000000000000000000015220243764016534 5ustar rootrootispconfig3_install/install/dist/lib/centos80.lib.php0000775000000000000000000000336415114345330021460 0ustar rootroot ispconfig3_install/install/dist/lib/centos52.lib.php0000775000000000000000000000334715114345330021460 0ustar rootroot ispconfig3_install/install/dist/lib/centos72.lib.php0000775000000000000000000000336415114345330021461 0ustar rootroot ispconfig3_install/install/dist/lib/opensuse.lib.php0000775000000000000000000020700015220243764021655 0ustar rootrootlng(' WARNING! You are using mod_authz_compat.')); swriteln($inst->lng(' Please make sure that your apache config uses the new auth syntax:')); swriteln($inst->lng(' ')); swriteln($inst->lng(' Options None')); swriteln($inst->lng(' AllowOverride None')); swriteln($inst->lng(' Require all denied')); swriteln($inst->lng(' '."\n")); swriteln($inst->lng(' If it uses the old syntax (deny from all) ISPConfig would fail to work.')); } } function configure_postfix($options = '') { global $conf,$autoinstall; $cf = $conf['postfix']; $config_dir = $cf['config_dir']; if(!is_dir($config_dir)){ $this->error("The postfix configuration directory '$config_dir' does not exist."); } //* Install virtual mappings foreach (glob('tpl/mysql-virtual_*.master') as $filename) { $this->process_postfix_config( basename($filename, '.master') ); } //* mysql-verify_recipients.cf $this->process_postfix_config('mysql-verify_recipients.cf'); //* postfix-dkim $filename='tag_as_originating.re'; $full_file_name=$config_dir.'/'.$filename; if(is_file($full_file_name)) copy($full_file_name, $full_file_name.'~'); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/postfix-'.$filename.'.master', 'tpl/postfix-'.$filename.'.master'); wf($full_file_name, $content); $filename='tag_as_foreign.re'; $full_file_name=$config_dir.'/'.$filename; if(is_file($full_file_name)) copy($full_file_name, $full_file_name.'~'); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/postfix-'.$filename.'.master', 'tpl/postfix-'.$filename.'.master'); wf($full_file_name, $content); if(!is_dir($cf['vmail_mailbox_base'])) mkdir($cf['vmail_mailbox_base']); //* Creating virtual mail user and group if(is_group($cf['vmail_groupname'])) { $command = 'groupmod -g '.$cf['vmail_groupid'].' '.$cf['vmail_groupname']; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } else { $command = 'groupadd -g '.$cf['vmail_groupid'].' '.$cf['vmail_groupname']; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } if(is_user($cf['vmail_username'])) { $command = 'usermod -g '.$cf['vmail_groupname'].' -u '.$cf['vmail_userid'].' -d '.$cf['vmail_mailbox_base'].' -s /bin/bash '.$cf['vmail_username']; caselog("$command &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } else { $command = 'useradd -g '.$cf['vmail_groupname'].' -u '.$cf['vmail_userid'].' '.$cf['vmail_username'].' -d '.$cf['vmail_mailbox_base'].' -m'; caselog("$command &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } if($cf['vmail_mailbox_base'] != '' && strlen($cf['vmail_mailbox_base']) >= 10 && $this->is_update === false) exec('chown -R '.$cf['vmail_username'].':'.$cf['vmail_groupname'].' '.$cf['vmail_mailbox_base']); //* These postconf commands will be executed on installation and update $server_ini_rec = $this->db->queryOneRecord("SELECT config FROM server WHERE server_id = ?", $conf['server_id']); $server_ini_array = ini_to_array(stripslashes($server_ini_rec['config'])); unset($server_ini_rec); //* If there are RBL's defined, format the list and add them to smtp_recipient_restrictions to prevent removeal after an update $rbl_list = ''; if (@isset($server_ini_array['mail']['realtime_blackhole_list']) && $server_ini_array['mail']['realtime_blackhole_list'] != '') { $rbl_hosts = explode(",", str_replace(" ", "", $server_ini_array['mail']['realtime_blackhole_list'])); foreach ($rbl_hosts as $key => $value) { $rbl_list .= ", reject_rbl_client ". $value; } } unset($rbl_hosts); //* If Postgrey is installed, configure it $greylisting = ''; if($conf['postgrey']['installed'] == true) { $greylisting = ', check_recipient_access mysql:/etc/postfix/mysql-virtual_policy_greylist.cf'; } $reject_sender_login_mismatch = ''; $reject_authenticated_sender_login_mismatch = ''; if(isset($server_ini_array['mail']['reject_sender_login_mismatch']) && ($server_ini_array['mail']['reject_sender_login_mismatch'] == 'y')) { $reject_sender_login_mismatch = ', reject_sender_login_mismatch'; $reject_authenticated_sender_login_mismatch = 'reject_authenticated_sender_login_mismatch, '; } # placeholder includes comment char $stress_adaptive_placeholder = '#{stress_adaptive} '; $stress_adaptive = (isset($server_ini_array['mail']['stress_adaptive']) && ($server_ini_array['mail']['stress_adaptive'] == 'y')) ? '' : $stress_adaptive_placeholder; $reject_unknown_client_hostname=''; if (isset($server_ini_array['mail']['reject_unknown']) && ($server_ini_array['mail']['reject_unknown'] == 'client' || $server_ini_array['mail']['reject_unknown'] == 'client_helo')) { $reject_unknown_client_hostname=', reject_unknown_client_hostname'; } $reject_unknown_helo_hostname=''; if ((!isset($server_ini_array['mail']['reject_unknown'])) || $server_ini_array['mail']['reject_unknown'] == 'helo' || $server_ini_array['mail']['reject_unknown'] == 'client_helo') { $reject_unknown_helo_hostname=', reject_unknown_helo_hostname'; } unset($server_ini_array); $myhostname = str_replace('.','\.',$conf['hostname']); $postconf_placeholders = array('{config_dir}' => $config_dir, '{vmail_mailbox_base}' => $cf['vmail_mailbox_base'], '{vmail_userid}' => $cf['vmail_userid'], '{vmail_groupid}' => $cf['vmail_groupid'], '{rbl_list}' => $rbl_list, '{greylisting}' => $greylisting, '{reject_slm}' => $reject_sender_login_mismatch, '{reject_aslm}' => $reject_authenticated_sender_login_mismatch, '{myhostname}' => $myhostname, $stress_adaptive_placeholder => $stress_adaptive, '{reject_unknown_client_hostname}' => $reject_unknown_client_hostname, '{reject_unknown_helo_hostname}' => $reject_unknown_helo_hostname, ); $postconf_tpl = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/opensuse_postfix.conf.master', 'tpl/opensuse_postfix.conf.master'); $postconf_tpl = strtr($postconf_tpl, $postconf_placeholders); $postconf_commands = array_filter(explode("\n", $postconf_tpl)); // read and remove empty lines //* These postconf commands will be executed on installation only if($this->is_update == false) { $postconf_commands = array_merge($postconf_commands, array( 'myhostname = '.$conf['hostname'], 'mydestination = '.$conf['hostname'].', localhost, localhost.localdomain', 'mynetworks = 127.0.0.0/8 [::1]/128' )); } //* Create the header and body check files touch($config_dir.'/header_checks'); touch($config_dir.'/mime_header_checks'); touch($config_dir.'/nested_header_checks'); touch($config_dir.'/body_checks'); touch($config_dir.'/sasl_passwd'); //* Create the mailman files if(!is_dir('/var/lib/mailman/data')) exec('mkdir -p /var/lib/mailman/data'); if(!is_file('/var/lib/mailman/data/aliases')) touch('/var/lib/mailman/data/aliases'); exec('postalias /var/lib/mailman/data/aliases'); if(!is_file('/var/lib/mailman/data/virtual-mailman')) touch('/var/lib/mailman/data/virtual-mailman'); exec('postmap /var/lib/mailman/data/virtual-mailman'); if(!is_file('/var/lib/mailman/data/transport-mailman')) touch('/var/lib/mailman/data/transport-mailman'); exec('/usr/sbin/postmap /var/lib/mailman/data/transport-mailman'); //* Create auxillary postfix conf files $configfile = 'helo_access'; if(is_file($config_dir.'/'.$configfile)) { copy($config_dir.'/'.$configfile, $config_dir.'/'.$configfile.'~'); chmod($config_dir.'/'.$configfile.'~', 0400); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); $content = strtr($content, $postconf_placeholders); # todo: look up this server's ip addrs and loop through each # todo: look up domains hosted on this server and loop through each wf($config_dir.'/'.$configfile, $content); $configfile = 'blacklist_helo'; if(is_file($config_dir.'/'.$configfile)) { copy($config_dir.'/'.$configfile, $config_dir.'/'.$configfile.'~'); chmod($config_dir.'/'.$configfile.'~', 0400); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); $content = strtr($content, $postconf_placeholders); wf($config_dir.'/'.$configfile, $content); //* Make a backup copy of the main.cf file copy($config_dir.'/main.cf', $config_dir.'/main.cf~'); //* Executing the postconf commands foreach($postconf_commands as $cmd) { $command = "postconf -e '$cmd'"; caselog($command." &> /dev/null", __FILE__, __LINE__, 'EXECUTED: '.$command, 'Failed to execute the command '.$command); } if(!stristr($options, 'dont-create-certs')) { //* Create the SSL certificate if(AUTOINSTALL){ $command = 'cd '.$config_dir.'; ' ."openssl req -new -subj '/C=".escapeshellcmd($autoinstall['ssl_cert_country'])."/ST=".escapeshellcmd($autoinstall['ssl_cert_state'])."/L=".escapeshellcmd($autoinstall['ssl_cert_locality'])."/O=".escapeshellcmd($autoinstall['ssl_cert_organisation'])."/OU=".escapeshellcmd($autoinstall['ssl_cert_organisation_unit'])."/CN=".escapeshellcmd($autoinstall['ssl_cert_common_name'])."' -outform PEM -out smtpd.cert -newkey rsa:4096 -nodes -keyout smtpd.key -keyform PEM -days 3650 -x509"; } else { $command = 'cd '.$config_dir.'; ' .'openssl req -new -outform PEM -out smtpd.cert -newkey rsa:4096 -nodes -keyout smtpd.key -keyform PEM -days 3650 -x509'; } exec($command); $command = 'chmod o= '.$config_dir.'/smtpd.key'; caselog($command.' &> /dev/null', __FILE__, __LINE__, 'EXECUTED: '.$command, 'Failed to execute the command '.$command); } //** We have to change the permissions of the courier authdaemon directory to make it accessible for maildrop. $command = 'chmod 755 /var/run/authdaemon.courier-imap'; caselog($command.' &> /dev/null', __FILE__, __LINE__, 'EXECUTED: '.$command, 'Failed to execute the command '.$command); //* Check maildrop service in posfix master.cf $regex = "/^maildrop unix.*pipe flags=DRhu user=vmail argv=\\/usr\\/bin\\/maildrop -d ".$cf['vmail_username']." \\$\{extension} \\$\{recipient} \\$\{user} \\$\{nexthop} \\$\{sender}/"; $configfile = $config_dir.'/master.cf'; if($this->get_postfix_service('maildrop', 'unix')) { exec ("postconf -M maildrop.unix &> /dev/null", $out, $ret); $change_maildrop_flags = @(preg_match($regex, $out[0]) && $out[0] !='')?false:true; } else { $change_maildrop_flags = @(preg_match($regex, $configfile))?false:true; } if ($change_maildrop_flags) { //* Change maildrop service in posfix master.cf if(is_file($config_dir.'/master.cf')) { copy($config_dir.'/master.cf', $config_dir.'/master.cf~'); } if(is_file($config_dir.'/master.cf~')) { chmod($config_dir.'/master.cf~', 0400); } $configfile = $config_dir.'/master.cf'; $content = rf($configfile); $content = str_replace(' flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}', 'flags=DRhu user='.$cf['vmail_username'].' argv=/usr/bin/maildrop -d '.$cf['vmail_username'].' ${extension} ${recipient} ${user} ${nexthop} ${sender}', $content); $content = str_replace(' flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}', 'flags=DRhu user='.$cf['vmail_username'].' argv=/usr/bin/maildrop -d '.$cf['vmail_username'].' ${extension} ${recipient} ${user} ${nexthop} ${sender}', $content); } // enable tlsmanager $content = str_replace('#tlsmgr unix - - n 1000? 1 tlsmgr', 'tlsmgr unix - - n 1000? 1 tlsmgr', $content); wf($configfile, $content); //* Writing the Maildrop mailfilter file $configfile = 'mailfilter'; if(is_file($cf['vmail_mailbox_base'].'/.'.$configfile)){ copy($cf['vmail_mailbox_base'].'/.'.$configfile, $cf['vmail_mailbox_base'].'/.'.$configfile.'~'); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/$configfile.master"); $content = str_replace('{dist_postfix_vmail_mailbox_base}', $cf['vmail_mailbox_base'], $content); wf($cf['vmail_mailbox_base'].'/.'.$configfile, $content); //* Create the directory for the custom mailfilters $command = 'mkdir '.$cf['vmail_mailbox_base'].'/mailfilters'; caselog($command." &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Chmod and chown the .mailfilter file $command = 'chown -R '.$cf['vmail_username'].':'.$cf['vmail_groupname'].' '.$cf['vmail_mailbox_base'].'/.mailfilter'; caselog($command." &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chmod -R 600 '.$cf['vmail_mailbox_base'].'/.mailfilter'; caselog($command." &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } public function configure_saslauthd() { global $conf; // Edit the file /etc/init.d/saslauthd $configfile = $conf["init_scripts"].'/'.$conf["saslauthd"]["init_script"]; $content = rf($configfile); $content = str_replace('/sbin/startproc $AUTHD_BIN -a $SASLAUTHD_AUTHMECH -n $SASLAUTHD_THREADS > /dev/null 2>&1', '/sbin/startproc $AUTHD_BIN -r -a $SASLAUTHD_AUTHMECH -n $SASLAUTHD_THREADS > /dev/null 2>&1', $content); $content = str_replace('/sbin/startproc $AUTHD_BIN $SASLAUTHD_PARAMS -a $SASLAUTHD_AUTHMECH -n $SASLAUTHD_THREADS > /dev/null 2>&1', '/sbin/startproc $AUTHD_BIN $SASLAUTHD_PARAMS -r -a $SASLAUTHD_AUTHMECH -n $SASLAUTHD_THREADS > /dev/null 2>&1', $content); if(is_file($configfile)) wf($configfile, $content); } public function configure_pam() { global $conf; $pam = $conf['pam']; //* configure pam for SMTP authentication agains the ispconfig database $configfile = 'pamd_smtp'; if(is_file("$pam/smtp")) copy("$pam/smtp", "$pam/smtp~"); if(is_file("$pam/smtp~")) exec("chmod 400 $pam/smtp~"); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/$configfile.master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_ip}', $conf['mysql']['ip'], $content); wf("$pam/smtp", $content); // On some OSes smtp is world readable which allows for reading database information. Removing world readable rights should have no effect. if(is_file("$pam/smtp")) exec("chmod o= $pam/smtp"); } public function configure_courier() { global $conf; $config_dir = $conf['courier']['config_dir']; //* authmysqlrc $configfile = 'authmysqlrc'; if(is_file("$config_dir/$configfile")){ copy("$config_dir/$configfile", "$config_dir/$configfile~"); } exec("chmod 400 $config_dir/$configfile~"); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/$configfile.master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); wf("$config_dir/$configfile", $content); exec("chmod 660 $config_dir/$configfile"); exec("chown root:root $config_dir/$configfile"); //* authdaemonrc $configfile = $conf['courier']['config_dir'].'/authdaemonrc'; if(is_file($configfile)){ copy($configfile, $configfile.'~'); } if(is_file($configfile.'~')){ exec('chmod 400 '.$configfile.'~'); } $content = rf($configfile); $content = str_replace('authmodulelist=', 'authmodulelist="authmysql"', $content); wf($configfile, $content); } public function configure_dovecot() { global $conf; $virtual_transport = 'dovecot'; $configure_lmtp = false; // check if virtual_transport must be changed if ($this->is_update) { $tmp = $this->db->queryOneRecord("SELECT * FROM ?? WHERE server_id = ?", $conf["mysql"]["database"] . ".server", $conf['server_id']); $ini_array = ini_to_array(stripslashes($tmp['config'])); // ini_array needs not to be checked, because already done in update.php -> updateDbAndIni() if(isset($ini_array['mail']['mailbox_virtual_uidgid_maps']) && $ini_array['mail']['mailbox_virtual_uidgid_maps'] == 'y') { $virtual_transport = 'lmtp:unix:private/dovecot-lmtp'; $configure_lmtp = true; } } $config_dir = $conf['postfix']['config_dir']; //* Configure master.cf and add a line for deliver if(!$this->get_postfix_service('dovecot', 'unix')) { //* backup if(is_file($config_dir.'/master.cf')){ copy($config_dir.'/master.cf', $config_dir.'/master.cf~2'); } if(is_file($config_dir.'/master.cf~2')){ chmod($config_dir.'/master.cf~2', 0400); } //* Configure master.cf and add a line for deliver $content = rf($conf["postfix"]["config_dir"].'/master.cf'); $deliver_content = 'dovecot unix - n n - - pipe'."\n".' flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop}'."\n"; af($conf["postfix"]["config_dir"].'/master.cf', $deliver_content); unset($content); unset($deliver_content); } //* Reconfigure postfix to use dovecot authentication // Adding the amavisd commands to the postfix configuration $postconf_commands = array ( 'dovecot_destination_recipient_limit = 1', 'virtual_transport = '.$virtual_transport, 'smtpd_sasl_type = dovecot', 'smtpd_sasl_path = private/auth', ); // Make a backup copy of the main.cf file copy($conf["postfix"]["config_dir"].'/main.cf', $conf["postfix"]["config_dir"].'/main.cf~3'); // Executing the postconf commands foreach($postconf_commands as $cmd) { $command = "postconf -e '$cmd'"; caselog($command." &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } $config_dir = $conf['dovecot']['config_dir']; //* backup dovecot.conf $configfile = 'dovecot.conf'; if(is_file("$config_dir/$configfile")){ copy("$config_dir/$configfile", "$config_dir/$configfile~"); } //* Get the dovecot version exec('dovecot --version', $tmp); $parts = explode('.', trim($tmp[0])); $dovecot_version = $parts[0]; unset($tmp); unset($parts); //* Copy dovecot configuration file if($dovecot_version == 2) { if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/opensuse_dovecot2.conf.master')) { copy($conf['ispconfig_install_dir'].'/server/conf-custom/install/opensuse_dovecot2.conf.master', $config_dir.'/'.$configfile); } else { copy('tpl/opensuse_dovecot2.conf.master', $config_dir.'/'.$configfile); } replaceLine($config_dir.'/'.$configfile, 'postmaster_address = postmaster@example.com', 'postmaster_address = postmaster@'.$conf['hostname'], 1, 0); replaceLine($config_dir.'/'.$configfile, 'postmaster_address = webmaster@localhost', 'postmaster_address = postmaster@'.$conf['hostname'], 1, 0); } else { if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/opensuse_dovecot.conf.master')) { copy($conf['ispconfig_install_dir'].'/server/conf-custom/install/opensuse_dovecot.conf.master', $config_dir.'/'.$configfile); } else { copy('tpl/opensuse_dovecot.conf.master', $config_dir.'/'.$configfile); } } //* dovecot-lmtpd if($configure_lmtp) { replaceLine($config_dir.'/'.$configfile, 'protocols = imap pop3', 'protocols = imap pop3 lmtp', 1, 0); } //* dovecot-sql.conf $configfile = 'dovecot-sql.conf'; if(is_file("$config_dir/$configfile")){ copy("$config_dir/$configfile", "$config_dir/$configfile~"); exec("chmod 400 $config_dir/$configfile~"); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/opensuse_dovecot-sql.conf.master', "tpl/opensuse_dovecot-sql.conf.master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{server_id}', $conf['server_id'], $content); # enable iterate_query for dovecot2 if(version_compare($dovecot_version,2, '>=')) { $content = str_replace('# iterate_query', 'iterate_query', $content); } wf("$config_dir/$configfile", $content); exec("chmod 600 $config_dir/$configfile"); exec("chown root:root $config_dir/$configfile"); // Dovecot shall ignore mounts in website directory if(is_installed('doveadm')) exec("doveadm mount add '/srv/www/*' ignore > /dev/null 2> /dev/null"); } public function configure_amavis() { global $conf; // amavisd user config file $configfile = 'opensuse_amavisd_conf'; if(is_file($conf["amavis"]["config_dir"].'/amavisd.conf')) @copy($conf["amavis"]["config_dir"].'/amavisd.conf', $conf["amavis"]["config_dir"].'/amavisd.conf~'); if(is_file($conf["amavis"]["config_dir"].'/amavisd.conf~')) exec('chmod 400 '.$conf["amavis"]["config_dir"].'/amavisd.conf~'); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/".$configfile.".master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_port}', $conf["mysql"]["port"], $content); $content = str_replace('{mysql_server_ip}', $conf['mysql']['ip'], $content); $content = str_replace('{hostname}', $conf['hostname'], $content); $content = str_replace('{amavis_config_dir}', $conf['amavis']['config_dir'], $content); wf($conf["amavis"]["config_dir"].'/amavisd.conf', $content); chmod($conf['amavis']['config_dir'].'/amavisd.conf', 0640); // Adding the amavisd commands to the postfix configuration $postconf_commands = array ( 'content_filter = amavis:[127.0.0.1]:10024', 'receive_override_options = no_address_mappings' ); // Make a backup copy of the main.cf file copy($conf["postfix"]["config_dir"].'/main.cf', $conf["postfix"]["config_dir"].'/main.cf~2'); // Executing the postconf commands foreach($postconf_commands as $cmd) { $command = "postconf -e '$cmd'"; caselog($command." &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } $config_dir = $conf['postfix']['config_dir']; // Adding amavis-services to the master.cf file // backup master.cf if(is_file($config_dir.'/master.cf')) copy($config_dir.'/master.cf', $config_dir.'/master.cf~'); // first remove the old service definitions $this->remove_postfix_service('amavis','unix'); $this->remove_postfix_service('127.0.0.1:10025','inet'); $this->remove_postfix_service('127.0.0.1:10027','inet'); // then add them back $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis.master', 'tpl/master_cf_amavis.master'); af($config_dir.'/master.cf', $content); unset($content); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis10025.master', 'tpl/master_cf_amavis10025.master'); af($config_dir.'/master.cf', $content); unset($content); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis10027.master', 'tpl/master_cf_amavis10027.master'); af($config_dir.'/master.cf', $content); unset($content); // Add the clamav user to the vscan group //exec('groupmod --add-user clamav vscan'); $command = 'usermod -a -G clamav vscan'; caselog($command." &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } public function configure_spamassassin() { global $conf; //* Enable spamasasssin on debian and ubuntu /* $configfile = '/etc/default/spamassassin'; if(is_file($configfile)){ copy($configfile, $configfile.'~'); } $content = rf($configfile); $content = str_replace('ENABLED=0', 'ENABLED=1', $content); wf($configfile, $content); */ } public function configure_getmail() { global $conf; $config_dir = $conf['getmail']['config_dir']; if(!is_dir($config_dir)) exec("mkdir -p ".escapeshellcmd($config_dir)); $command = "useradd -d $config_dir getmail"; if(!is_user('getmail')) caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = "chown -R getmail $config_dir"; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = "chmod -R 700 $config_dir"; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } public function configure_pureftpd() { global $conf; $config_dir = $conf['pureftpd']['config_dir']; //* configure pam for SMTP authentication agains the ispconfig database $configfile = 'db/mysql.conf'; if(is_file("$config_dir/$configfile")){ copy("$config_dir/$configfile", "$config_dir/$configfile~"); } if(is_file("$config_dir/$configfile~")){ exec("chmod 400 $config_dir/$configfile~"); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/pureftpd_mysql.conf.master', 'tpl/pureftpd_mysql.conf.master'); $content = str_replace('{mysql_server_ispconfig_user}', $conf["mysql"]["ispconfig_user"], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf["mysql"]["ispconfig_password"], $content); $content = str_replace('{mysql_server_database}', $conf["mysql"]["database"], $content); $content = str_replace('{mysql_server_ip}', $conf["mysql"]["ip"], $content); $content = str_replace('{server_id}', $conf["server_id"], $content); wf("$config_dir/$configfile", $content); exec("chmod 600 $config_dir/$configfile"); exec("chown root:root $config_dir/$configfile"); // copy our customized copy of pureftpd.conf to the pure-ftpd config directory if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/opensuse_pureftpd_conf.master')) { exec("cp " . $conf['ispconfig_install_dir']."/server/conf-custom/install/opensuse_pureftpd_conf.master $config_dir/pure-ftpd.conf"); } else { exec("cp tpl/opensuse_pureftpd_conf.master $config_dir/pure-ftpd.conf"); } } public function configure_mydns() { global $conf; // configure mydns $configfile = 'mydns.conf'; if(is_file($conf["mydns"]["config_dir"].'/'.$configfile)) copy($conf["mydns"]["config_dir"].'/'.$configfile, $conf["mydns"]["config_dir"].'/'.$configfile.'~'); if(is_file($conf["mydns"]["config_dir"].'/'.$configfile.'~')) exec('chmod 400 '.$conf["mydns"]["config_dir"].'/'.$configfile.'~'); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/".$configfile.".master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf["mysql"]["host"], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{server_id}', $conf["server_id"], $content); wf($conf["mydns"]["config_dir"].'/'.$configfile, $content); exec('chmod 600 '.$conf["mydns"]["config_dir"].'/'.$configfile); exec('chown root:root '.$conf["mydns"]["config_dir"].'/'.$configfile); } public function configure_apache() { global $conf; if($conf['apache']['installed'] == false) return; //* Create the logging directory for the vhost logfiles exec('mkdir -p /var/log/ispconfig/httpd'); //* enable apache logio module exec('a2enmod logio'); //if(is_file('/etc/suphp.conf')) { replaceLine('/etc/suphp.conf', 'php=php', 'x-httpd-suphp="php:/srv/www/cgi-bin/php5"', 0, 0); replaceLine('/etc/suphp.conf', 'php="php', 'x-httpd-suphp="php:/srv/www/cgi-bin/php5"', 0, 0); replaceLine('/etc/suphp.conf', 'docroot=', 'docroot=/srv/www', 0, 0); replaceLine('/etc/suphp.conf', 'umask=0077', 'umask=0022', 0); //} if(!file_exists('/srv/www/cgi-bin/php5') && file_exists('/srv/www/cgi-bin/php')) { symlink('/srv/www/cgi-bin/php', '/srv/www/cgi-bin/php5'); } // Sites enabled and available dirs exec('mkdir -p '.$conf['apache']['vhost_conf_enabled_dir']); exec('mkdir -p '.$conf['apache']['vhost_conf_dir']); $content = rf('/etc/apache2/httpd.conf'); if(!stristr($content, 'Include /etc/apache2/sites-enabled/')) { af('/etc/apache2/httpd.conf', "\n\n Options +FollowSymlinks\n\n\nInclude /etc/apache2/sites-enabled/\n\n"); } unset($content); //* Copy the ISPConfig configuration include $vhost_conf_dir = $conf['apache']['vhost_conf_dir']; $vhost_conf_enabled_dir = $conf['apache']['vhost_conf_enabled_dir']; $tpl = new tpl('apache_ispconfig.conf.master'); $tpl->setVar('apache_version',getapacheversion()); if($this->is_update == true) { $tpl->setVar('logging',get_logging_state()); } else { $tpl->setVar('logging','yes'); } $records = $this->db->queryAllRecords("SELECT * FROM ?? WHERE server_id = ? AND virtualhost = 'y'", $conf['mysql']['master_database'] . '.server_ip', $conf['server_id']); $ip_addresses = array(); if(is_array($records) && count($records) > 0) { foreach($records as $rec) { if($rec['ip_type'] == 'IPv6') { $ip_address = '['.$rec['ip_address'].']'; } else { $ip_address = $rec['ip_address']; } $ports = explode(',', $rec['virtualhost_port']); if(is_array($ports)) { foreach($ports as $port) { $port = intval($port); if($port > 0 && $port < 65536 && $ip_address != '') { $ip_addresses[] = array('ip_address' => $ip_address, 'port' => $port); } } } } } if(count($ip_addresses) > 0) $tpl->setLoop('ip_adresses',$ip_addresses); wf($vhost_conf_dir.'/ispconfig.conf', $tpl->grab()); unset($tpl); if(!@is_link($vhost_conf_enabled_dir."/000-ispconfig.conf")) { exec("ln -s ".$vhost_conf_dir."/ispconfig.conf ".$vhost_conf_enabled_dir."/000-ispconfig.conf"); } //* make sure that webalizer finds its config file when it is directly in /etc if(@is_file('/etc/webalizer.conf') && !@is_dir('/etc/webalizer')) { exec('mkdir /etc/webalizer'); exec('ln -s /etc/webalizer.conf /etc/webalizer/webalizer.conf'); } if(is_file('/etc/webalizer/webalizer.conf')) { // Change webalizer mode to incremental replaceLine('/etc/webalizer/webalizer.conf', '#IncrementalName', 'IncrementalName webalizer.current', 0, 0); replaceLine('/etc/webalizer/webalizer.conf', '#Incremental', 'Incremental yes', 0, 0); replaceLine('/etc/webalizer/webalizer.conf', '#HistoryName', 'HistoryName webalizer.hist', 0, 0); } //* add a sshusers group $command = 'groupadd sshusers'; if(!is_group('sshusers')) caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); // create PHP-FPM pool dir exec('mkdir -p '.$conf['nginx']['php_fpm_pool_dir']); $content = rf('/etc/php5/fpm/php-fpm.conf'); if(stripos($content, 'include=/etc/php5/fpm/pool.d/*.conf') === false){ af('/etc/php5/fpm/php-fpm.conf', "\ninclude=/etc/php5/fpm/pool.d/*.conf"); } unset($content); if(!@is_file($conf['nginx']['php_fpm_ini_path'])){ if(@is_file('/etc/php5/cli/php.ini')){ exec('cp -f /etc/php5/cli/php.ini '.$conf['nginx']['php_fpm_ini_path']); } elseif(@is_file('/etc/php5/fastcgi/php.ini')){ exec('cp -f /etc/php5/fastcgi/php.ini '.$conf['nginx']['php_fpm_ini_path']); } elseif(@is_file('/etc/php5/apache2/php.ini')){ exec('cp -f /etc/php5/apache2/php.ini '.$conf['nginx']['php_fpm_ini_path']); } } } public function configure_nginx(){ global $conf; if($conf['nginx']['installed'] == false) return; //* Create the logging directory for the vhost logfiles if(!@is_dir($conf['ispconfig_log_dir'].'/httpd')) mkdir($conf['ispconfig_log_dir'].'/httpd', 0755, true); // Sites enabled and available dirs exec('mkdir -p '.$conf['nginx']['vhost_conf_enabled_dir']); exec('mkdir -p '.$conf['nginx']['vhost_conf_dir']); $content = rf('/etc/nginx/nginx.conf'); if(stripos($content, 'include /etc/nginx/sites-enabled/*.vhost;') === false){ $content = trim($content); $content = substr($content, 0, -1)."\n include /etc/nginx/sites-enabled/*.vhost;\n}"; wf('/etc/nginx/nginx.conf', $content); } unset($content); // create PHP-FPM pool dir exec('mkdir -p '.$conf['nginx']['php_fpm_pool_dir']); $content = rf('/etc/php5/fpm/php-fpm.conf'); if(stripos($content, 'include=/etc/php5/fpm/pool.d/*.conf') === false){ af('/etc/php5/fpm/php-fpm.conf', "\ninclude=/etc/php5/fpm/pool.d/*.conf"); } unset($content); if(!@is_file($conf['nginx']['php_fpm_ini_path'])){ if(@is_file('/etc/php5/cli/php.ini')){ exec('cp -f /etc/php5/cli/php.ini '.$conf['nginx']['php_fpm_ini_path']); } elseif(@is_file('/etc/php5/fastcgi/php.ini')){ exec('cp -f /etc/php5/fastcgi/php.ini '.$conf['nginx']['php_fpm_ini_path']); } elseif(@is_file('/etc/php5/apache2/php.ini')){ exec('cp -f /etc/php5/apache2/php.ini '.$conf['nginx']['php_fpm_ini_path']); } } //* make sure that webalizer finds its config file when it is directly in /etc if(@is_file('/etc/webalizer.conf') && !@is_dir('/etc/webalizer')) { mkdir('/etc/webalizer'); symlink('/etc/webalizer.conf', '/etc/webalizer/webalizer.conf'); } if(is_file('/etc/webalizer/webalizer.conf')) { // Change webalizer mode to incremental replaceLine('/etc/webalizer/webalizer.conf', '#IncrementalName', 'IncrementalName webalizer.current', 0, 0); replaceLine('/etc/webalizer/webalizer.conf', '#Incremental', 'Incremental yes', 0, 0); replaceLine('/etc/webalizer/webalizer.conf', '#HistoryName', 'HistoryName webalizer.hist', 0, 0); } // Check the awsatst script if(!is_dir('/usr/share/awstats/tools')) exec('mkdir -p /usr/share/awstats/tools'); if(!file_exists('/usr/share/awstats/tools/awstats_buildstaticpages.pl') && file_exists('/usr/share/doc/awstats/examples/awstats_buildstaticpages.pl')) symlink('/usr/share/doc/awstats/examples/awstats_buildstaticpages.pl', '/usr/share/awstats/tools/awstats_buildstaticpages.pl'); if(file_exists('/etc/awstats/awstats.conf.local')) replaceLine('/etc/awstats/awstats.conf.local', 'LogFormat=4', 'LogFormat=1', 0, 1); //* add a sshusers group $command = 'groupadd sshusers'; if(!is_group('sshusers')) caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); // add anonymized log option to nginxx.conf file $nginx_conf_file = $conf['nginx']['config_dir'].'/nginx.conf'; if(is_file($nginx_conf_file)) { $tmp = file_get_contents($nginx_conf_file); if(!stristr($tmp, 'log_format anonymized')) { copy($nginx_conf_file,$nginx_conf_file.'~'); replaceLine($nginx_conf_file, 'http {', "http {\n\n".file_get_contents('tpl/nginx_anonlog.master'), 0, 0); } } } public function configure_bastille_firewall() { global $conf; $dist_init_scripts = $conf['init_scripts']; if(is_dir("/etc/Bastille.backup")) caselog("rm -rf /etc/Bastille.backup", __FILE__, __LINE__); if(is_dir("/etc/Bastille")) caselog("mv -f /etc/Bastille /etc/Bastille.backup", __FILE__, __LINE__); @mkdir("/etc/Bastille", octdec($directory_mode)); if(is_dir("/etc/Bastille.backup/firewall.d")) caselog("cp -pfr /etc/Bastille.backup/firewall.d /etc/Bastille/", __FILE__, __LINE__); if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/bastille-firewall.cfg.master')) { caselog("cp -f " . $conf['ispconfig_install_dir']."/server/conf-custom/install/bastille-firewall.cfg.master /etc/Bastille/bastille-firewall.cfg", __FILE__, __LINE__); } else { caselog("cp -f tpl/bastille-firewall.cfg.master /etc/Bastille/bastille-firewall.cfg", __FILE__, __LINE__); } caselog("chmod 644 /etc/Bastille/bastille-firewall.cfg", __FILE__, __LINE__); $content = rf("/etc/Bastille/bastille-firewall.cfg"); $content = str_replace("{DNS_SERVERS}", "", $content); $tcp_public_services = ''; $udp_public_services = ''; $row = $this->db->queryOneRecord('SELECT * FROM ?? WHERE server_id = ?', $conf["mysql"]["database"] . '.firewall', $conf['server_id']); if(trim($row["tcp_port"]) != '' || trim($row["udp_port"]) != ''){ $tcp_public_services = trim(str_replace(',', ' ', $row["tcp_port"])); $udp_public_services = trim(str_replace(',', ' ', $row["udp_port"])); } else { $tcp_public_services = '21 22 25 53 80 110 443 3306 8080 10000'; $udp_public_services = '53'; } if(!stristr($tcp_public_services, $conf['apache']['vhost_port'])) { $tcp_public_services .= ' '.intval($conf['apache']['vhost_port']); if($row["tcp_port"] != '') $this->db->query("UPDATE firewall SET tcp_port = tcp_port + ? WHERE server_id = ?", ',' . intval($conf['apache']['vhost_port']), $conf['server_id']); } $content = str_replace("{TCP_PUBLIC_SERVICES}", $tcp_public_services, $content); $content = str_replace("{UDP_PUBLIC_SERVICES}", $udp_public_services, $content); wf("/etc/Bastille/bastille-firewall.cfg", $content); if(is_file($dist_init_scripts."/bastille-firewall")) caselog("mv -f $dist_init_scripts/bastille-firewall $dist_init_scripts/bastille-firewall.backup", __FILE__, __LINE__); caselog("cp -f apps/bastille-firewall $dist_init_scripts", __FILE__, __LINE__); caselog("chmod 700 $dist_init_scripts/bastille-firewall", __FILE__, __LINE__); if(is_file("/sbin/bastille-ipchains")) caselog("mv -f /sbin/bastille-ipchains /sbin/bastille-ipchains.backup", __FILE__, __LINE__); caselog("cp -f apps/bastille-ipchains /sbin", __FILE__, __LINE__); caselog("chmod 700 /sbin/bastille-ipchains", __FILE__, __LINE__); if(is_file("/sbin/bastille-netfilter")) caselog("mv -f /sbin/bastille-netfilter /sbin/bastille-netfilter.backup", __FILE__, __LINE__); caselog("cp -f apps/bastille-netfilter /sbin", __FILE__, __LINE__); caselog("chmod 700 /sbin/bastille-netfilter", __FILE__, __LINE__); if(!@is_dir('/var/lock/subsys')) caselog("mkdir /var/lock/subsys", __FILE__, __LINE__); exec("which ipchains &> /dev/null", $ipchains_location, $ret_val); if(!is_file("/sbin/ipchains") && !is_link("/sbin/ipchains") && $ret_val == 0) phpcaselog(@symlink(shell_exec("which ipchains"), "/sbin/ipchains"), 'create symlink', __FILE__, __LINE__); unset($ipchains_location); exec("which iptables &> /dev/null", $iptables_location, $ret_val); if(!is_file("/sbin/iptables") && !is_link("/sbin/iptables") && $ret_val == 0) phpcaselog(@symlink(trim(shell_exec("which iptables")), "/sbin/iptables"), 'create symlink', __FILE__, __LINE__); unset($iptables_location); } public function install_ispconfig() { global $conf; $install_dir = $conf['ispconfig_install_dir']; //* Create the ISPConfig installation directory if(!@is_dir("$install_dir")) { $command = "mkdir $install_dir"; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } //* Create a ISPConfig user and group $command = 'groupadd ispconfig'; if(!is_group('ispconfig')) caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = "useradd -g ispconfig -d $install_dir ispconfig"; if(!is_user('ispconfig')) caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* copy the ISPConfig interface part $command = "cp -rf ../interface $install_dir"; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* copy the ISPConfig server part $command = "cp -rf ../server $install_dir"; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Make a backup of the security settings if(is_file('/usr/local/ispconfig/security/security_settings.ini')) copy('/usr/local/ispconfig/security/security_settings.ini','/usr/local/ispconfig/security/security_settings.ini~'); //* copy the ISPConfig security part $command = 'cp -rf ../security '.$install_dir; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Apply changed security_settings.ini values to new security_settings.ini file if(is_file('/usr/local/ispconfig/security/security_settings.ini~')) { $security_settings_old = ini_to_array(file_get_contents('/usr/local/ispconfig/security/security_settings.ini~')); $security_settings_new = ini_to_array(file_get_contents('/usr/local/ispconfig/security/security_settings.ini')); if(is_array($security_settings_new) && is_array($security_settings_old)) { foreach($security_settings_new as $section => $sval) { if(is_array($sval)) { foreach($sval as $key => $val) { if(isset($security_settings_old[$section]) && isset($security_settings_old[$section][$key])) { $security_settings_new[$section][$key] = $security_settings_old[$section][$key]; } } } } file_put_contents('/usr/local/ispconfig/security/security_settings.ini',array_to_ini($security_settings_new)); } } //* Create a symlink, so ISPConfig is accessible via web // Replaced by a separate vhost definition for port 8080 // $command = "ln -s $install_dir/interface/web/ /var/www/ispconfig"; // caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Create the config file for ISPConfig interface $configfile = 'config.inc.php'; if(is_file($install_dir.'/interface/lib/'.$configfile)){ copy("$install_dir/interface/lib/$configfile", "$install_dir/interface/lib/$configfile~"); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/$configfile.master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{mysql_master_server_ispconfig_user}', $conf['mysql']['master_ispconfig_user'], $content); $content = str_replace('{mysql_master_server_ispconfig_password}', $conf['mysql']['master_ispconfig_password'], $content); $content = str_replace('{mysql_master_server_database}', $conf['mysql']['master_database'], $content); $content = str_replace('{mysql_master_server_host}', $conf['mysql']['master_host'], $content); $content = str_replace('{mysql_master_server_port}', $conf['mysql']['master_port'], $content); $content = str_replace('{server_id}', $conf['server_id'], $content); $content = str_replace('{ispconfig_log_priority}', $conf['ispconfig_log_priority'], $content); $content = str_replace('{language}', $conf['language'], $content); $content = str_replace('{timezone}', $conf['timezone'], $content); $content = str_replace('{theme}', $conf['theme'], $content); $content = str_replace('{language_file_import_enabled}', ($conf['language_file_import_enabled'] == true)?'true':'false', $content); wf("$install_dir/interface/lib/$configfile", $content); //* Create the config file for ISPConfig server $configfile = 'config.inc.php'; if(is_file($install_dir.'/server/lib/'.$configfile)){ copy("$install_dir/server/lib/$configfile", "$install_dir/server/lib/$configfile~"); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/$configfile.master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{mysql_master_server_ispconfig_user}', $conf['mysql']['master_ispconfig_user'], $content); $content = str_replace('{mysql_master_server_ispconfig_password}', $conf['mysql']['master_ispconfig_password'], $content); $content = str_replace('{mysql_master_server_database}', $conf['mysql']['master_database'], $content); $content = str_replace('{mysql_master_server_host}', $conf['mysql']['master_host'], $content); $content = str_replace('{mysql_master_server_port}', $conf['mysql']['master_port'], $content); $content = str_replace('{server_id}', $conf['server_id'], $content); $content = str_replace('{ispconfig_log_priority}', $conf['ispconfig_log_priority'], $content); $content = str_replace('{language}', $conf['language'], $content); $content = str_replace('{timezone}', $conf['timezone'], $content); $content = str_replace('{theme}', $conf['theme'], $content); $content = str_replace('{language_file_import_enabled}', ($conf['language_file_import_enabled'] == true)?'true':'false', $content); wf("$install_dir/server/lib/$configfile", $content); //* Create the config file for remote-actions (but only, if it does not exist, because // the value is a autoinc-value and so changed by the remoteaction_core_module if (!file_exists($install_dir.'/server/lib/remote_action.inc.php')) { $content = ''; wf($install_dir.'/server/lib/remote_action.inc.php', $content); } //* Enable the server modules and plugins. // TODO: Implement a selector which modules and plugins shall be enabled. $dir = $install_dir.'/server/mods-available/'; if (is_dir($dir)) { if ($dh = opendir($dir)) { while (($file = readdir($dh)) !== false) { if($file != '.' && $file != '..' && substr($file, -8, 8) == '.inc.php') { include_once $install_dir.'/server/mods-available/'.$file; $module_name = substr($file, 0, -8); $tmp = new $module_name; if($tmp->onInstall()) { if(!@is_link($install_dir.'/server/mods-enabled/'.$file)) @symlink($install_dir.'/server/mods-available/'.$file, $install_dir.'/server/mods-enabled/'.$file); if (strpos($file, '_core_module') !== false) { if(!@is_link($install_dir.'/server/mods-core/'.$file)) @symlink($install_dir.'/server/mods-available/'.$file, $install_dir.'/server/mods-core/'.$file); } } unset($tmp); } } closedir($dh); } } $dir = $install_dir.'/server/plugins-available/'; if (is_dir($dir)) { if ($dh = opendir($dir)) { while (($file = readdir($dh)) !== false) { if($conf['apache']['installed'] == true && $file == 'nginx_plugin.inc.php') continue; if($conf['nginx']['installed'] == true && $file == 'apache2_plugin.inc.php') continue; if($file != '.' && $file != '..' && substr($file, -8, 8) == '.inc.php') { include_once $install_dir.'/server/plugins-available/'.$file; $plugin_name = substr($file, 0, -8); $tmp = new $plugin_name; if($tmp->onInstall()) { if(!@is_link($install_dir.'/server/plugins-enabled/'.$file)) @symlink($install_dir.'/server/plugins-available/'.$file, $install_dir.'/server/plugins-enabled/'.$file); if (strpos($file, '_core_plugin') !== false) { if(!@is_link($install_dir.'/server/plugins-core/'.$file)) @symlink($install_dir.'/server/plugins-available/'.$file, $install_dir.'/server/plugins-core/'.$file); } } unset($tmp); } } closedir($dh); } } // Update the server config $mail_server_enabled = ($conf['services']['mail'])?1:0; $web_server_enabled = ($conf['services']['web'])?1:0; $dns_server_enabled = ($conf['services']['dns'])?1:0; $file_server_enabled = ($conf['services']['file'])?1:0; $db_server_enabled = ($conf['services']['db'])?1:0; $vserver_server_enabled = ($conf['services']['vserver'])?1:0; $sql = "UPDATE `server` SET mail_server = ?, web_server = ?, dns_server = ?, file_server = ?, db_server = ?, vserver_server = ? WHERE server_id = ?"; $this->db->query($sql, $mail_server_enabled, $web_server_enabled, $dns_server_enabled, $file_server_enabled, $db_server_enabled, $vserver_server_enabled, $conf['server_id']); if($conf['mysql']['master_slave_setup'] == 'y') { $this->dbmaster->query($sql, $mail_server_enabled, $web_server_enabled, $dns_server_enabled, $file_server_enabled, $db_server_enabled, $vserver_server_enabled, $conf['server_id']); } // chown install dir to root and chmod 755 $command = 'chown root:root '.$install_dir; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chmod 755 '.$install_dir; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Chmod the files and directories in the install dir $command = 'chmod -R 750 '.$install_dir.'/*'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the interface files to the ispconfig user and group $command = 'chown -R ispconfig:ispconfig '.$install_dir.'/interface'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the extensions directory to the ispconfig user and group $command = 'chown ispconfig:ispconfig '.$install_dir.'/extensions'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the server files to the root user and group $command = 'chown -R root:root '.$install_dir.'/server'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the security files to the root user and group $command = 'chown -R root:root '.$install_dir.'/security'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the security directory and security_settings.ini to root:ispconfig $command = 'chown root:ispconfig '.$install_dir.'/security/security_settings.ini'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/ids.whitelist'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/ids.htmlfield'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/apache_directives.blacklist'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/nginx_directives.blacklist'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Make the global language file directory group writable exec("chmod -R 770 $install_dir/interface/lib/lang"); //* Make the temp directory for language file exports writable exec("chmod -R 770 $install_dir/interface/web/temp"); //* Make all interface language file directories group writable $handle = @opendir($install_dir.'/interface/web'); while ($file = @readdir($handle)) { if ($file != '.' && $file != '..') { if(@is_dir($install_dir.'/interface/web'.'/'.$file.'/lib/lang')) { $handle2 = opendir($install_dir.'/interface/web'.'/'.$file.'/lib/lang'); chmod($install_dir.'/interface/web'.'/'.$file.'/lib/lang', 0770); while ($lang_file = @readdir($handle2)) { if ($lang_file != '.' && $lang_file != '..') { chmod($install_dir.'/interface/web'.'/'.$file.'/lib/lang/'.$lang_file, 0770); } } } } } //* Make the APS directories group writable exec("chmod -R 770 $install_dir/interface/web/sites/aps_meta_packages"); exec("chmod -R 770 $install_dir/server/aps_packages"); //* make sure that the server config file (not the interface one) is only readable by the root user chmod($install_dir.'/server/lib/config.inc.php', 0600); chown($install_dir.'/server/lib/config.inc.php', 'root'); chgrp($install_dir.'/server/lib/config.inc.php', 'root'); //* Make sure thet the interface config file is readable by user ispconfig only chmod($install_dir.'/interface/lib/config.inc.php', 0600); chown($install_dir.'/interface/lib/config.inc.php', 'ispconfig'); chgrp($install_dir.'/interface/lib/config.inc.php', 'ispconfig'); if(@is_file("$install_dir/server/lib/mysql_clientdb.conf")) { exec("chmod 600 $install_dir/server/lib/mysql_clientdb.conf"); exec("chown root:root $install_dir/server/lib/mysql_clientdb.conf"); } if(is_dir($install_dir.'/interface/invoices')) { exec('chmod -R 770 '.escapeshellarg($install_dir.'/interface/invoices')); exec('chown -R ispconfig:ispconfig '.escapeshellarg($install_dir.'/interface/invoices')); } exec('chown -R root:root /usr/local/ispconfig/interface/ssl'); // TODO: FIXME: add the www-data user to the ispconfig group. This is just for testing // and must be fixed as this will allow the apache user to read the ispconfig files. // Later this must run as own apache server or via suexec! if($conf['apache']['installed'] == true){ $command = 'usermod -a -G ispconfig '.$conf['apache']['user']; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); if(is_group('ispapps')){ $command = 'usermod -a -G ispapps '.$conf['apache']['user']; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } } if($conf['nginx']['installed'] == true){ $command = 'usermod -a -G ispconfig '.$conf['nginx']['user']; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); if(is_group('ispapps')){ $command = 'usermod -a -G ispapps '.$conf['nginx']['user']; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } // add nobody user to www group, as the default php-fpm pool from opensuse runs as nobody $command = 'usermod -a -G www nobody'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } //* Make the shell scripts executable $command = "chmod +x $install_dir/server/scripts/*.sh"; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); if ($this->install_ispconfig_interface == true && isset($conf['interface_password']) && $conf['interface_password']!='admin') { $sql = "UPDATE sys_user SET passwort = ? WHERE username = 'admin';"; $this->db->query($sql, $this->crypt_password($conf['interface_password'])); } if($conf['apache']['installed'] == true && $this->install_ispconfig_interface == true){ //* Copy the ISPConfig vhost for the controlpanel // TODO: These are missing! should they be "vhost_dist_*_dir" ? $vhost_conf_dir = $conf['apache']['vhost_conf_dir']; $vhost_conf_enabled_dir = $conf['apache']['vhost_conf_enabled_dir']; // Dont just copy over the virtualhost template but add some custom settings $tpl = new tpl('apache_ispconfig.vhost.master'); $tpl->setVar('vhost_port',$conf['apache']['vhost_port']); // comment out the listen directive if port is 80 or 443 if($conf['apache']['vhost_port'] == 80 or $conf['apache']['vhost_port'] == 443) { $tpl->setVar('vhost_port_listen','#'); } else { $tpl->setVar('vhost_port_listen',''); } if(is_file($install_dir.'/interface/ssl/ispserver.crt') && is_file($install_dir.'/interface/ssl/ispserver.key')) { $tpl->setVar('ssl_comment',''); } else { $tpl->setVar('ssl_comment','#'); } if(is_file($install_dir.'/interface/ssl/ispserver.crt') && is_file($install_dir.'/interface/ssl/ispserver.key') && is_file($install_dir.'/interface/ssl/ispserver.bundle')) { $tpl->setVar('ssl_bundle_comment',''); } else { $tpl->setVar('ssl_bundle_comment','#'); } $tpl->setVar('apache_version',getapacheversion()); $content = $tpl->grab(); $content = str_replace('/var/www/', '/srv/www/', $content); wf($vhost_conf_dir.'/ispconfig.vhost', $content); //if(!is_file('/srv/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter')) { $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/apache_ispconfig_fcgi_starter.master', 'tpl/apache_ispconfig_fcgi_starter.master'); $content = str_replace('{fastcgi_bin}', $conf['fastcgi']['fastcgi_bin'], $content); $content = str_replace('{fastcgi_phpini_path}', $conf['fastcgi']['fastcgi_phpini_path'], $content); exec('mkdir -p /srv/www/php-fcgi-scripts/ispconfig'); $this->set_immutable('/srv/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter', false); wf('/srv/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter', $content); exec('chmod +x /srv/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter'); exec('ln -s /usr/local/ispconfig/interface/web /srv/www/ispconfig'); exec('chown -R ispconfig:ispconfig /srv/www/php-fcgi-scripts/ispconfig'); $this->set_immutable('/srv/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter', true); //} //copy('tpl/apache_ispconfig.vhost.master', "$vhost_conf_dir/ispconfig.vhost"); //* and create the symlink if($this->is_update == false) { if(@is_link("$vhost_conf_enabled_dir/ispconfig.vhost")) unlink("$vhost_conf_enabled_dir/ispconfig.vhost"); if(!@is_link("$vhost_conf_enabled_dir/000-ispconfig.vhost")) { exec("ln -s $vhost_conf_dir/ispconfig.vhost $vhost_conf_enabled_dir/000-ispconfig.vhost"); } } // Fix a setting in vhost master file for suse replaceLine('/usr/local/ispconfig/server/conf/vhost.conf.master', "suPHP_UserGroup", " suPHP_UserGroup ", 0); } if($conf['nginx']['installed'] == true && $this->install_ispconfig_interface == true){ //* Copy the ISPConfig vhost for the controlpanel $vhost_conf_dir = $conf['nginx']['vhost_conf_dir']; $vhost_conf_enabled_dir = $conf['nginx']['vhost_conf_enabled_dir']; // Dont just copy over the virtualhost template but add some custom settings $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/nginx_ispconfig.vhost.master', 'tpl/nginx_ispconfig.vhost.master'); $content = str_replace('{vhost_port}', $conf['nginx']['vhost_port'], $content); if(is_file($install_dir.'/interface/ssl/ispserver.crt') && is_file($install_dir.'/interface/ssl/ispserver.key')) { $content = str_replace('{ssl_on}', 'ssl', $content); $content = str_replace('{ssl_comment}', '', $content); $content = str_replace('{fastcgi_ssl}', 'on', $content); } else { $content = str_replace('{ssl_on}', '', $content); $content = str_replace('{ssl_comment}', '#', $content); $content = str_replace('{fastcgi_ssl}', 'off', $content); } $socket_dir = escapeshellcmd($conf['nginx']['php_fpm_socket_dir']); if(substr($socket_dir, -1) != '/') $socket_dir .= '/'; if(!is_dir($socket_dir)) exec('mkdir -p '.$socket_dir); $fpm_socket = $socket_dir.'ispconfig.sock'; //$content = str_replace('{fpm_port}', $conf['nginx']['php_fpm_start_port'], $content); $content = str_replace('{fpm_socket}', $fpm_socket, $content); wf($vhost_conf_dir.'/ispconfig.vhost', $content); unset($content); // PHP-FPM // Dont just copy over the php-fpm pool template but add some custom settings $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/php_fpm_pool.conf.master', 'tpl/php_fpm_pool.conf.master'); $content = str_replace('{fpm_pool}', 'ispconfig', $content); //$content = str_replace('{fpm_port}', $conf['nginx']['php_fpm_start_port'], $content); $content = str_replace('{fpm_socket}', $fpm_socket, $content); $content = str_replace('{fpm_user}', 'ispconfig', $content); $content = str_replace('{fpm_group}', 'ispconfig', $content); wf($conf['nginx']['php_fpm_pool_dir'].'/ispconfig.conf', $content); //copy('tpl/nginx_ispconfig.vhost.master', $vhost_conf_dir.'/ispconfig.vhost'); //* and create the symlink if($this->is_update == false) { if(@is_link($vhost_conf_enabled_dir.'/ispconfig.vhost')) unlink($vhost_conf_enabled_dir.'/ispconfig.vhost'); if(!@is_link($vhost_conf_enabled_dir.'/000-ispconfig.vhost')) { symlink($vhost_conf_dir.'/ispconfig.vhost', $vhost_conf_enabled_dir.'/000-ispconfig.vhost'); } } // create symlinks from /usr/share to phpMyAdmin and SquirrelMail, if they are installed if(!@file_exists('/usr/share/phpmyadmin') && @is_dir('/srv/www/htdocs/phpMyAdmin')) symlink('/srv/www/htdocs/phpMyAdmin/', '/usr/share/phpmyadmin'); if(!@file_exists('/usr/share/squirrelmail') && @is_dir('/srv/www/htdocs/squirrelmail')) symlink('/srv/www/htdocs/squirrelmail/', '/usr/share/squirrelmail'); } // Make the Clamav log files readable by ISPConfig //exec('chmod +r /var/log/clamav/clamav.log'); //exec('chmod +r /var/log/clamav/freshclam.log'); //* Install the update script if(is_file('/usr/local/bin/ispconfig_update_from_dev.sh')) unlink('/usr/local/bin/ispconfig_update_from_dev.sh'); exec('chown root /usr/local/ispconfig/server/scripts/update_from_dev.sh'); exec('chmod 700 /usr/local/ispconfig/server/scripts/update_from_dev.sh'); exec('chown root /usr/local/ispconfig/server/scripts/update_stable.sh'); exec('chmod 700 /usr/local/ispconfig/server/scripts/update_stable.sh'); exec('chown root /usr/local/ispconfig/server/scripts/ispconfig_update.sh'); exec('chmod 700 /usr/local/ispconfig/server/scripts/ispconfig_update.sh'); if(!is_link('/usr/local/bin/ispconfig_update_from_dev.sh')) exec('ln -s /usr/local/ispconfig/server/scripts/ispconfig_update.sh /usr/local/bin/ispconfig_update_from_dev.sh'); if(!is_link('/usr/local/bin/ispconfig_update.sh')) exec('ln -s /usr/local/ispconfig/server/scripts/ispconfig_update.sh /usr/local/bin/ispconfig_update.sh'); //set the fast cgi starter script to executable //exec('chmod 755 '.$install_dir.'/interface/bin/php-fcgi'); //* Make the logs readable for the ispconfig user if(@is_file('/var/log/mail.log')) exec('chmod +r /var/log/mail.log'); if(@is_file('/var/log/mail.warn')) exec('chmod +r /var/log/mail.warn'); if(@is_file('/var/log/mail.err')) exec('chmod +r /var/log/mail.err'); if(@is_file('/var/log/messages')) exec('chmod +r /var/log/messages'); //To enable apache to read the directories exec('chmod a+rx /usr/local/ispconfig'); exec('chmod -R 751 /usr/local/ispconfig/interface'); exec('chmod a+rx /usr/local/ispconfig/interface/web'); //* Create the ispconfig log directory if(!is_dir($conf['ispconfig_log_dir'])) mkdir($conf['ispconfig_log_dir']); if(!is_file($conf['ispconfig_log_dir'].'/ispconfig.log')) exec('touch '.$conf['ispconfig_log_dir'].'/ispconfig.log'); chmod($conf['ispconfig_log_dir'].'/ispconfig.log', 0600); if(is_dir('/var/log/ispconfig')) exec('chmod o-rw /var/log/ispconfig/*.gz /var/log/ispconfig/*.log 2>/dev/null'); if(is_user('getmail')) { exec('mv /usr/local/ispconfig/server/scripts/run-getmail.sh /usr/local/bin/run-getmail.sh'); exec('chown getmail /usr/local/bin/run-getmail.sh'); exec('chmod 744 /usr/local/bin/run-getmail.sh'); } if(is_dir($install_dir.'/interface/invoices')) { exec('chmod -R 770 '.escapeshellarg($install_dir.'/interface/invoices')); exec('chown -R ispconfig:ispconfig '.escapeshellarg($install_dir.'/interface/invoices')); } //* Create the ispconfig auth log file and set uid/gid if(!is_file($conf['ispconfig_log_dir'].'/auth.log')) { touch($conf['ispconfig_log_dir'].'/auth.log'); } exec('chown ispconfig:ispconfig '. $conf['ispconfig_log_dir'].'/auth.log'); exec('chmod 660 '. $conf['ispconfig_log_dir'].'/auth.log'); //* Remove Domain module as its functions are available in the client module now if(@is_dir('/usr/local/ispconfig/interface/web/domain')) exec('rm -rf /usr/local/ispconfig/interface/web/domain'); // Add symlink for patch tool if(!is_link('/usr/local/bin/ispconfig_patch')) exec('ln -s /usr/local/ispconfig/server/scripts/ispconfig_patch /usr/local/bin/ispconfig_patch'); // Change mode of a few files from amavisd if(is_file($conf['amavis']['config_dir'].'/conf.d/50-user')) chmod($conf['amavis']['config_dir'].'/conf.d/50-user', 0640); if(is_file($conf['amavis']['config_dir'].'/50-user~')) chmod($conf['amavis']['config_dir'].'/50-user~', 0400); if(is_file($conf['amavis']['config_dir'].'/amavisd.conf')) chmod($conf['amavis']['config_dir'].'/amavisd.conf', 0640); if(is_file($conf['amavis']['config_dir'].'/amavisd.conf~')) chmod($conf['amavis']['config_dir'].'/amavisd.conf~', 0400); } } ?> ispconfig3_install/install/dist/lib/fedora33.lib.php0000775000000000000000000000336415114345330021423 0ustar rootroot ispconfig3_install/install/dist/lib/centos70.lib.php0000775000000000000000000000335515114345330021457 0ustar rootroot ispconfig3_install/install/dist/lib/fedora9.lib.php0000775000000000000000000000306315114345330021342 0ustar rootroot ispconfig3_install/install/dist/lib/fedora32.lib.php0000775000000000000000000000336415114345330021422 0ustar rootroot ispconfig3_install/install/dist/lib/fedora.lib.php0000775000000000000000000015701615220243764021267 0ustar rootrootlng(' WARNING! You are using mod_authz_compat.')); swriteln($inst->lng(' Please make sure that your apache config uses the new auth syntax:')); swriteln($inst->lng(' ')); swriteln($inst->lng(' Options None')); swriteln($inst->lng(' AllowOverride None')); swriteln($inst->lng(' Require all denied')); swriteln($inst->lng(' '."\n")); swriteln($inst->lng(' If it uses the old syntax (deny from all) ISPConfig would fail to work.')); } } public function configure_saslauthd() { global $conf; $configfile = 'tpl/fedora_saslauthd_smtpd_conf.master'; $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/fedora_saslauthd_smtpd_conf.master', $configfile); wf('/usr/lib/sasl2/smtpd.conf', $content); if(is_dir('/usr/lib64')) wf('/usr/lib64/sasl/smtpd.conf', $content); if(is_dir('/usr/lib64')) wf('/usr/lib64/sasl2/smtpd.conf', $content); } public function configure_pam() { global $conf; $pam = $conf['pam']; //* configure pam for SMTP authentication agains the ispconfig database $configfile = 'pamd_smtp'; if(is_file("$pam/smtp")) copy("$pam/smtp", "$pam/smtp~"); if(is_file("$pam/smtp~")) exec("chmod 400 $pam/smtp~"); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/$configfile.master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_ip}', $conf['mysql']['ip'], $content); wf("$pam/smtp", $content); // On some OSes smtp is world readable which allows for reading database information. Removing world readable rights should have no effect. if(is_file("$pam/smtp")) exec("chmod o= $pam/smtp"); } public function configure_courier() { global $conf; $config_dir = $conf['courier']['config_dir']; //* authmysqlrc $configfile = 'authmysqlrc'; if(is_file("$config_dir/$configfile")){ copy("$config_dir/$configfile", "$config_dir/$configfile~"); } exec("chmod 400 $config_dir/$configfile~"); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/$configfile.master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); wf("$config_dir/$configfile", $content); exec("chmod 660 $config_dir/$configfile"); exec("chown root:root $config_dir/$configfile"); //* authdaemonrc $configfile = $conf['courier']['config_dir'].'/authdaemonrc'; if(is_file($configfile)){ copy($configfile, $configfile.'~'); } if(is_file($configfile.'~')){ exec('chmod 400 '.$configfile.'~'); } $content = rf($configfile); $content = str_replace('authmodulelist=', 'authmodulelist="authmysql"', $content); wf($configfile, $content); } public function configure_dovecot() { global $conf; $virtual_transport = 'dovecot'; $configure_lmtp = false; // use lmtp if installed if($configure_lmtp = (is_file('/usr/lib/dovecot/lmtp') || is_file('/usr/libexec/dovecot/lmtp'))) { $virtual_transport = 'lmtp:unix:private/dovecot-lmtp'; } // check if virtual_transport must be changed if ($this->is_update) { $tmp = $this->db->queryOneRecord("SELECT * FROM ?? WHERE server_id = ?", $conf["mysql"]["database"] . ".server", $conf['server_id']); $ini_array = ini_to_array(stripslashes($tmp['config'])); // ini_array needs not to be checked, because already done in update.php -> updateDbAndIni() if(isset($ini_array['mail']['mailbox_virtual_uidgid_maps']) && $ini_array['mail']['mailbox_virtual_uidgid_maps'] == 'y') { $virtual_transport = 'lmtp:unix:private/dovecot-lmtp'; $configure_lmtp = true; } } $config_dir = $conf['postfix']['config_dir']; //* Configure master.cf and add a line for deliver if(!$this->get_postfix_service('dovecot', 'unix')) { //* backup if(is_file($config_dir.'/master.cf')){ copy($config_dir.'/master.cf', $config_dir.'/master.cf~2'); } if(is_file($config_dir.'/master.cf~2')){ chmod($config_dir.'/master.cf~2', 0400); } //* Configure master.cf and add a line for deliver $content = rf($conf["postfix"]["config_dir"].'/master.cf'); $deliver_content = 'dovecot unix - n n - - pipe'."\n".' flags=DRhu user=vmail:vmail argv=/usr/libexec/dovecot/deliver -f ${sender} -d ${user}@${nexthop}'."\n"; af($conf["postfix"]["config_dir"].'/master.cf', $deliver_content); unset($content); unset($deliver_content); } //* Reconfigure postfix to use dovecot authentication $postconf_commands = array ( 'dovecot_destination_recipient_limit = 1', 'virtual_transport = '.$virtual_transport, 'smtpd_sasl_type = dovecot', 'smtpd_sasl_path = private/auth', ); // Make a backup copy of the main.cf file copy($conf["postfix"]["config_dir"].'/main.cf', $conf["postfix"]["config_dir"].'/main.cf~3'); // Executing the postconf commands foreach($postconf_commands as $cmd) { $command = "postconf -e '$cmd'"; caselog($command." &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } //* Use /etc/dovecot as config dir if exists // if(is_dir('/etc/dovecot')) $config_dir = '/etc/dovecot'; $config_dir = $conf['dovecot']['config_dir']; //* backup dovecot.conf $configfile = 'dovecot.conf'; if(is_file("$config_dir/$configfile")){ copy("$config_dir/$configfile", "$config_dir/$configfile~"); } //* Get the dovecot version exec('dovecot --version', $tmp); $dovecot_version = $tmp[0]; unset($tmp); //* Copy dovecot configuration file if(version_compare($dovecot_version,2) >= 0) { if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/fedora_dovecot2.conf.master')) { copy($conf['ispconfig_install_dir'].'/server/conf-custom/install/fedora_dovecot2.conf.master', $config_dir.'/'.$configfile); } else { copy('tpl/fedora_dovecot2.conf.master', $config_dir.'/'.$configfile); } if(version_compare($dovecot_version,2.1) < 0) { removeLine($config_dir.'/'.$configfile, 'ssl_protocols ='); } if(version_compare($dovecot_version,2.2) >= 0) { // Dovecot > 2.2 does not recognize !SSLv2 anymore on Debian 9 $content = file_get_contents($config_dir.'/'.$configfile); $content = str_replace('!SSLv2','',$content); file_put_contents($config_dir.'/'.$configfile,$content); unset($content); } if(version_compare($dovecot_version,2.3) >= 0) { // Remove deprecated setting(s) removeLine($config_dir.'/'.$configfile, 'ssl_protocols ='); // Check if we have a dhparams file and if not, create it if(!file_exists('/etc/dovecot/dh.pem')) { swriteln('Creating new DHParams file, this takes several minutes. Do not interrupt the script.'); if(file_exists('/var/lib/dovecot/ssl-parameters.dat')) { // convert existing ssl parameters file $command = 'dd if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dhparam -inform der > /etc/dovecot/dh.pem'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } else { /* Create a new dhparams file. We use 2048 bit only as it simply takes too long on smaller systems to generate a 4096 bit dh file (> 30 minutes). If you need a 4096 bit file, create it manually before you install ISPConfig */ $command = 'openssl dhparam -out /etc/dovecot/dh.pem 2048'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } } //remove #2.3+ comment $content = file_get_contents($config_dir.'/'.$configfile); $content = str_replace('#2.3+','',$content); file_put_contents($config_dir.'/'.$configfile,$content); unset($content); } else { // remove settings which are not supported in Dovecot < 2.3 removeLine($config_dir.'/'.$configfile, 'ssl_min_protocol ='); removeLine($config_dir.'/'.$configfile, 'ssl_dh ='); } replaceLine($config_dir.'/'.$configfile, 'postmaster_address = postmaster@example.com', 'postmaster_address = postmaster@'.$conf['hostname'], 1, 0); replaceLine($config_dir.'/'.$configfile, 'postmaster_address = webmaster@localhost', 'postmaster_address = postmaster@'.$conf['hostname'], 1, 0); } else { if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/fedora_dovecot.conf.master')) { copy($conf['ispconfig_install_dir'].'/server/conf-custom/install/fedora_dovecot.conf.master', $config_dir.'/'.$configfile); } else { copy('tpl/fedora_dovecot.conf.master', $config_dir.'/'.$configfile); } } //* dovecot-lmtpd if($configure_lmtp) { replaceLine($config_dir.'/'.$configfile, 'protocols = imap pop3', 'protocols = imap pop3 lmtp', 1, 0); } //* dovecot-sql.conf $configfile = 'dovecot-sql.conf'; if(is_file("$config_dir/$configfile")){ copy("$config_dir/$configfile", "$config_dir/$configfile~"); exec("chmod 400 $config_dir/$configfile~"); } if(!@file_exists('/etc/dovecot-sql.conf')) exec('ln -s /etc/dovecot/dovecot-sql.conf /etc/dovecot-sql.conf'); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/fedora_dovecot-sql.conf.master', "tpl/fedora_dovecot-sql.conf.master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{server_id}', $conf['server_id'], $content); # enable iterate_query for dovecot2 if(version_compare($dovecot_version,2, '>=')) { $content = str_replace('# iterate_query', 'iterate_query', $content); } wf("$config_dir/$configfile", $content); exec("chmod 600 $config_dir/$configfile"); exec("chown root:root $config_dir/$configfile"); // Dovecot shall ignore mounts in website directory if(is_installed('doveadm')) exec("doveadm mount add '/var/www/*' ignore > /dev/null 2> /dev/null"); } public function configure_amavis() { global $conf, $dist; // amavisd user config file $configfile = 'fedora_amavisd_conf'; if(is_file($conf["amavis"]["config_dir"].'/amavisd.conf')) copy($conf["amavis"]["config_dir"].'/amavisd.conf', $conf["amavis"]["config_dir"].'/amavisd.conf~'); if(is_file($conf["amavis"]["config_dir"].'/amavisd.conf~')) exec('chmod 400 '.$conf["amavis"]["config_dir"].'/amavisd.conf~'); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/".$configfile.".master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_port}', $conf["mysql"]["port"], $content); $content = str_replace('{mysql_server_ip}', $conf['mysql']['ip'], $content); $content = str_replace('{hostname}', $conf['hostname'], $content); $content = str_replace('{amavis_config_dir}', $conf['amavis']['config_dir'], $content); wf($conf["amavis"]["config_dir"].'/amavisd.conf', $content); chmod($conf['amavis']['config_dir'].'/amavisd.conf', 0640); if(!is_file($conf['amavis']['config_dir'].'/60-dkim')) { touch($conf['amavis']['config_dir'].'/60-dkim'); chmod($conf['amavis']['config_dir'].'/60-dkim', 0640); } // for CentOS 7.2 only if($dist['confid'] == 'centos72') { chmod($conf['amavis']['config_dir'].'/amavisd.conf', 0750); chgrp($conf['amavis']['config_dir'].'/amavisd.conf', 'amavis'); chmod($conf['amavis']['config_dir'].'/60-dkim', 0750); chgrp($conf['amavis']['config_dir'].'/60-dkim', 'amavis'); } // Adding the amavisd commands to the postfix configuration $postconf_commands = array ( 'content_filter = amavis:[127.0.0.1]:10024', 'receive_override_options = no_address_mappings' ); // Make a backup copy of the main.cf file copy($conf["postfix"]["config_dir"].'/main.cf', $conf["postfix"]["config_dir"].'/main.cf~2'); // Executing the postconf commands foreach($postconf_commands as $cmd) { $command = "postconf -e '$cmd'"; caselog($command." &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } $config_dir = $conf['postfix']['config_dir']; // Adding amavis-services to the master.cf file // backup master.cf if(is_file($config_dir.'/master.cf')) copy($config_dir.'/master.cf', $config_dir.'/master.cf~'); // first remove the old service definitions $this->remove_postfix_service('amavis','unix'); $this->remove_postfix_service('127.0.0.1:10025','inet'); $this->remove_postfix_service('127.0.0.1:10027','inet'); // then add them back $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis.master', 'tpl/master_cf_amavis.master'); af($config_dir.'/master.cf', $content); unset($content); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis10025.master', 'tpl/master_cf_amavis10025.master'); af($config_dir.'/master.cf', $content); unset($content); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis10027.master', 'tpl/master_cf_amavis10027.master'); af($config_dir.'/master.cf', $content); unset($content); removeLine('/etc/sysconfig/freshclam', 'FRESHCLAM_DELAY=disabled-warn # REMOVE ME', 1); replaceLine('/etc/freshclam.conf', 'Example', '# Example', 1); // Add the clamav user to the vscan group //exec('groupmod --add-user clamav vscan'); } public function configure_spamassassin() { global $conf; //* Enable spamasasssin on debian and ubuntu /* $configfile = '/etc/default/spamassassin'; if(is_file($configfile)){ copy($configfile, $configfile.'~'); } $content = rf($configfile); $content = str_replace('ENABLED=0', 'ENABLED=1', $content); wf($configfile, $content); */ } public function configure_getmail() { global $conf; $config_dir = $conf['getmail']['config_dir']; if(!is_dir($config_dir)) exec("mkdir -p ".escapeshellcmd($config_dir)); $command = "useradd -d $config_dir getmail"; if(!is_user('getmail')) caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = "chown -R getmail $config_dir"; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = "chmod -R 700 $config_dir"; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } public function configure_pureftpd() { global $conf; $config_dir = $conf['pureftpd']['config_dir']; //* configure pam for SMTP authentication agains the ispconfig database $configfile = 'pureftpd-mysql.conf'; if(is_file("$config_dir/$configfile")){ copy("$config_dir/$configfile", "$config_dir/$configfile~"); } if(is_file("$config_dir/$configfile~")){ exec("chmod 400 $config_dir/$configfile~"); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/pureftpd_mysql.conf.master', 'tpl/pureftpd_mysql.conf.master'); $content = str_replace('{mysql_server_ispconfig_user}', $conf["mysql"]["ispconfig_user"], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf["mysql"]["ispconfig_password"], $content); $content = str_replace('{mysql_server_database}', $conf["mysql"]["database"], $content); $content = str_replace('{mysql_server_ip}', $conf["mysql"]["ip"], $content); $content = str_replace('{server_id}', $conf["server_id"], $content); wf("$config_dir/$configfile", $content); exec("chmod 600 $config_dir/$configfile"); exec("chown root:root $config_dir/$configfile"); // copy our customized copy of pureftpd.conf to the pure-ftpd config directory if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/fedora_pureftpd_conf.master')) { exec("cp " . $conf['ispconfig_install_dir'].'/server/conf-custom/install/fedora_pureftpd_conf.master ' . "$config_dir/pure-ftpd.conf"); }else { exec("cp tpl/fedora_pureftpd_conf.master $config_dir/pure-ftpd.conf"); } } public function configure_mydns() { global $conf; // configure mydns $configfile = 'mydns.conf'; if(is_file($conf["mydns"]["config_dir"].'/'.$configfile)) copy($conf["mydns"]["config_dir"].'/'.$configfile, $conf["mydns"]["config_dir"].'/'.$configfile.'~'); if(is_file($conf["mydns"]["config_dir"].'/'.$configfile.'~')) exec('chmod 400 '.$conf["mydns"]["config_dir"].'/'.$configfile.'~'); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/".$configfile.".master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf["mysql"]["host"], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{server_id}', $conf["server_id"], $content); wf($conf["mydns"]["config_dir"].'/'.$configfile, $content); exec('chmod 600 '.$conf["mydns"]["config_dir"].'/'.$configfile); exec('chown root:root '.$conf["mydns"]["config_dir"].'/'.$configfile); } public function configure_bind() { global $conf; // add the include line at the end of named.conf. replaceLine('/etc/named.conf', 'include "/etc/named.conf.local";', 'include "/etc/named.conf.local";', 0, 1); //* Check if the zonefile directory has a slash at the end $content=$conf['bind']['bind_zonefiles_dir']; if(substr($content, -1, 1) != '/') { $content .= '/'; } //* Create the slave subdirectory $content .= 'slave'; $content_mkdir = 'mkdir -p '.$content; exec($content_mkdir); //* Chown the slave subdirectory to $conf['bind']['bind_user'] exec('chown '.$conf['bind']['bind_user'].':'.$conf['bind']['bind_group'].' '.$content); exec('chmod 2770 '.$content); } public function configure_apache() { global $conf; if($conf['apache']['installed'] == false) return; if(is_file('/etc/suphp.conf')) { //replaceLine('/etc/suphp.conf','php=php:/usr/bin','x-httpd-suphp=php:/usr/bin/php-cgi',0); replaceLine('/etc/suphp.conf', 'docroot=', 'docroot=/var/www', 0); replaceLine('/etc/suphp.conf', 'umask=0077', 'umask=0022', 0); } //* Create the logging directory for the vhost logfiles exec('mkdir -p /var/log/ispconfig/httpd'); // Sites enabled and avaulable dirs exec('mkdir -p '.$conf['apache']['vhost_conf_enabled_dir']); exec('mkdir -p '.$conf['apache']['vhost_conf_dir']); $content = rf('/etc/httpd/conf/httpd.conf'); if(!stristr($content, 'Include /etc/httpd/conf/sites-enabled/')) { af('/etc/httpd/conf/httpd.conf', "\nNameVirtualHost *:80\nNameVirtualHost *:443\nInclude /etc/httpd/conf/sites-enabled/\n\n"); } unset($content); //* Copy the ISPConfig configuration include $vhost_conf_dir = $conf['apache']['vhost_conf_dir']; $vhost_conf_enabled_dir = $conf['apache']['vhost_conf_enabled_dir']; $tpl = new tpl('apache_ispconfig.conf.master'); $tpl->setVar('apache_version',getapacheversion()); if($this->is_update == true) { $tpl->setVar('logging',get_logging_state()); } else { $tpl->setVar('logging','yes'); } $records = $this->db->queryAllRecords("SELECT * FROM ?? WHERE server_id = ? AND virtualhost = 'y'", $conf['mysql']['master_database'] . '.server_ip', $conf['server_id']); $ip_addresses = array(); if(is_array($records) && count($records) > 0) { foreach($records as $rec) { if($rec['ip_type'] == 'IPv6') { $ip_address = '['.$rec['ip_address'].']'; } else { $ip_address = $rec['ip_address']; } $ports = explode(',', $rec['virtualhost_port']); if(is_array($ports)) { foreach($ports as $port) { $port = intval($port); if($port > 0 && $port < 65536 && $ip_address != '') { $ip_addresses[] = array('ip_address' => $ip_address, 'port' => $port); } } } } } if(count($ip_addresses) > 0) $tpl->setLoop('ip_adresses',$ip_addresses); wf($vhost_conf_dir.'/ispconfig.conf', $tpl->grab()); unset($tpl); if(!@is_link($vhost_conf_enabled_dir."/000-ispconfig.conf")) { exec("ln -s ".$vhost_conf_dir."/ispconfig.conf ".$vhost_conf_enabled_dir."/000-ispconfig.conf"); } //* make sure that webalizer finds its config file when it is directly in /etc if(@is_file('/etc/webalizer.conf') && !@is_dir('/etc/webalizer')) { exec('mkdir /etc/webalizer'); exec('ln -s /etc/webalizer.conf /etc/webalizer/webalizer.conf'); } if(is_file('/etc/webalizer/webalizer.conf')) { // Change webalizer mode to incremental replaceLine('/etc/webalizer/webalizer.conf', '#IncrementalName', 'IncrementalName webalizer.current', 0, 0); replaceLine('/etc/webalizer/webalizer.conf', '#Incremental', 'Incremental yes', 0, 0); replaceLine('/etc/webalizer/webalizer.conf', '#HistoryName', 'HistoryName webalizer.hist', 0, 0); } //* add a sshusers group $command = 'groupadd sshusers'; if(!is_group('sshusers')) caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } public function configure_nginx(){ global $conf; if($conf['nginx']['installed'] == false) return; //* Create the logging directory for the vhost logfiles if(!@is_dir($conf['ispconfig_log_dir'].'/httpd')) mkdir($conf['ispconfig_log_dir'].'/httpd', 0755, true); // Sites enabled and avaulable dirs exec('mkdir -p '.$conf['nginx']['vhost_conf_enabled_dir']); exec('mkdir -p '.$conf['nginx']['vhost_conf_dir']); wf('/etc/nginx/conf.d/ispconfig_vhosts.conf', "include /etc/nginx/sites-enabled/*.vhost;"); //* make sure that webalizer finds its config file when it is directly in /etc if(@is_file('/etc/webalizer.conf') && !@is_dir('/etc/webalizer')) { mkdir('/etc/webalizer'); symlink('/etc/webalizer.conf', '/etc/webalizer/webalizer.conf'); } if(is_file('/etc/webalizer/webalizer.conf')) { // Change webalizer mode to incremental replaceLine('/etc/webalizer/webalizer.conf', '#IncrementalName', 'IncrementalName webalizer.current', 0, 0); replaceLine('/etc/webalizer/webalizer.conf', '#Incremental', 'Incremental yes', 0, 0); replaceLine('/etc/webalizer/webalizer.conf', '#HistoryName', 'HistoryName webalizer.hist', 0, 0); } // Check the awsatst script if(!is_dir('/usr/share/awstats/tools')) exec('mkdir -p /usr/share/awstats/tools'); if(!file_exists('/usr/share/awstats/tools/awstats_buildstaticpages.pl') && file_exists('/usr/share/doc/awstats/examples/awstats_buildstaticpages.pl')) symlink('/usr/share/doc/awstats/examples/awstats_buildstaticpages.pl', '/usr/share/awstats/tools/awstats_buildstaticpages.pl'); if(file_exists('/etc/awstats/awstats.conf.local')) replaceLine('/etc/awstats/awstats.conf.local', 'LogFormat=4', 'LogFormat=1', 0, 1); //* add a sshusers group $command = 'groupadd sshusers'; if(!is_group('sshusers')) caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); // add anonymized log option to nginxx.conf file $nginx_conf_file = $conf['nginx']['config_dir'].'/nginx.conf'; if(is_file($nginx_conf_file)) { $tmp = file_get_contents($nginx_conf_file); if(!stristr($tmp, 'log_format anonymized')) { copy($nginx_conf_file,$nginx_conf_file.'~'); replaceLine($nginx_conf_file, 'http {', "http {\n\n".file_get_contents('tpl/nginx_anonlog.master'), 0, 0); } } } public function configure_bastille_firewall() { global $conf; $dist_init_scripts = $conf['init_scripts']; if(is_dir("/etc/Bastille.backup")) caselog("rm -rf /etc/Bastille.backup", __FILE__, __LINE__); if(is_dir("/etc/Bastille")) caselog("mv -f /etc/Bastille /etc/Bastille.backup", __FILE__, __LINE__); @mkdir("/etc/Bastille", octdec($directory_mode)); if(is_dir("/etc/Bastille.backup/firewall.d")) caselog("cp -pfr /etc/Bastille.backup/firewall.d /etc/Bastille/", __FILE__, __LINE__); if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/bastille-firewall.cfg.master')) { caselog("cp -f " . $conf['ispconfig_install_dir']."/server/conf-custom/install/bastille-firewall.cfg.master /etc/Bastille/bastille-firewall.cfg", __FILE__, __LINE__); } else { caselog("cp -f tpl/bastille-firewall.cfg.master /etc/Bastille/bastille-firewall.cfg", __FILE__, __LINE__); } caselog("chmod 644 /etc/Bastille/bastille-firewall.cfg", __FILE__, __LINE__); $content = rf("/etc/Bastille/bastille-firewall.cfg"); $content = str_replace("{DNS_SERVERS}", "", $content); $tcp_public_services = ''; $udp_public_services = ''; $row = $this->db->queryOneRecord('SELECT * FROM ?? WHERE server_id = ?', $conf["mysql"]["database"] . '.firewall', $conf['server_id']); if($row && (trim($row["tcp_port"] ?? '') != '' || trim($row["udp_port"] ?? '') != '')){ $tcp_public_services = trim(str_replace(',', ' ', $row["tcp_port"])); $udp_public_services = trim(str_replace(',', ' ', $row["udp_port"])); } else { $tcp_public_services = '21 22 25 53 80 110 443 3306 8080 10000'; $udp_public_services = '53'; } if(!stristr($tcp_public_services, $conf['apache']['vhost_port'])) { $tcp_public_services .= ' '.intval($conf['apache']['vhost_port']); if($row && ($row["tcp_port"] ?? '') != '') $this->db->query("UPDATE firewall SET tcp_port = tcp_port + ? WHERE server_id = ?", ',' . intval($conf['apache']['vhost_port']), $conf['server_id']); } $content = str_replace("{TCP_PUBLIC_SERVICES}", $tcp_public_services, $content); $content = str_replace("{UDP_PUBLIC_SERVICES}", $udp_public_services, $content); wf("/etc/Bastille/bastille-firewall.cfg", $content); if(is_file($dist_init_scripts."/bastille-firewall")) caselog("mv -f $dist_init_scripts/bastille-firewall $dist_init_scripts/bastille-firewall.backup", __FILE__, __LINE__); caselog("cp -f apps/bastille-firewall $dist_init_scripts", __FILE__, __LINE__); caselog("chmod 700 $dist_init_scripts/bastille-firewall", __FILE__, __LINE__); if(is_file("/sbin/bastille-ipchains")) caselog("mv -f /sbin/bastille-ipchains /sbin/bastille-ipchains.backup", __FILE__, __LINE__); caselog("cp -f apps/bastille-ipchains /sbin", __FILE__, __LINE__); caselog("chmod 700 /sbin/bastille-ipchains", __FILE__, __LINE__); if(is_file("/sbin/bastille-netfilter")) caselog("mv -f /sbin/bastille-netfilter /sbin/bastille-netfilter.backup", __FILE__, __LINE__); caselog("cp -f apps/bastille-netfilter /sbin", __FILE__, __LINE__); caselog("chmod 700 /sbin/bastille-netfilter", __FILE__, __LINE__); if(!@is_dir('/var/lock/subsys')) caselog("mkdir /var/lock/subsys", __FILE__, __LINE__); exec("which ipchains &> /dev/null", $ipchains_location, $ret_val); if(!is_file("/sbin/ipchains") && !is_link("/sbin/ipchains") && $ret_val == 0) phpcaselog(@symlink(shell_exec("which ipchains"), "/sbin/ipchains"), 'create symlink', __FILE__, __LINE__); unset($ipchains_location); exec("which iptables &> /dev/null", $iptables_location, $ret_val); if(!is_file("/sbin/iptables") && !is_link("/sbin/iptables") && $ret_val == 0) phpcaselog(@symlink(trim(shell_exec("which iptables")), "/sbin/iptables"), 'create symlink', __FILE__, __LINE__); unset($iptables_location); } public function install_ispconfig() { global $conf; $install_dir = $conf['ispconfig_install_dir']; //* Create the ISPConfig installation directory if(!@is_dir("$install_dir")) { $command = "mkdir $install_dir"; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } //* Create a ISPConfig user and group $command = 'groupadd ispconfig'; if(!is_group('ispconfig')) caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = "useradd -g ispconfig -d $install_dir ispconfig"; if(!is_user('ispconfig')) caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* copy the ISPConfig interface part $command = "cp -rf ../interface $install_dir"; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* copy the ISPConfig server part $command = "cp -rf ../server $install_dir"; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Make a backup of the security settings if(is_file('/usr/local/ispconfig/security/security_settings.ini')) copy('/usr/local/ispconfig/security/security_settings.ini','/usr/local/ispconfig/security/security_settings.ini~'); //* copy the ISPConfig security part $command = 'cp -rf ../security '.$install_dir; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $configfile = 'security_settings.ini'; if(is_file($install_dir.'/security/'.$configfile)) { copy($install_dir.'/security/'.$configfile, $install_dir.'/security/'.$configfile.'~'); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); wf($install_dir.'/security/'.$configfile, $content); //* Create a symlink, so ISPConfig is accessible via web // Replaced by a separate vhost definition for port 8080 // $command = "ln -s $install_dir/interface/web/ /var/www/ispconfig"; // caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Create the config file for ISPConfig interface $configfile = 'config.inc.php'; if(is_file($install_dir.'/interface/lib/'.$configfile)){ copy("$install_dir/interface/lib/$configfile", "$install_dir/interface/lib/$configfile~"); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/$configfile.master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{mysql_master_server_ispconfig_user}', $conf['mysql']['master_ispconfig_user'], $content); $content = str_replace('{mysql_master_server_ispconfig_password}', $conf['mysql']['master_ispconfig_password'], $content); $content = str_replace('{mysql_master_server_database}', $conf['mysql']['master_database'], $content); $content = str_replace('{mysql_master_server_host}', $conf['mysql']['master_host'], $content); $content = str_replace('{mysql_master_server_port}', $conf['mysql']['master_port'], $content); $content = str_replace('{server_id}', $conf['server_id'], $content); $content = str_replace('{ispconfig_log_priority}', $conf['ispconfig_log_priority'], $content); $content = str_replace('{language}', $conf['language'], $content); $content = str_replace('{timezone}', $conf['timezone'], $content); $content = str_replace('{theme}', $conf['theme'], $content); $content = str_replace('{language_file_import_enabled}', ($conf['language_file_import_enabled'] == true)?'true':'false', $content); wf("$install_dir/interface/lib/$configfile", $content); //* Create the config file for ISPConfig server $configfile = 'config.inc.php'; if(is_file($install_dir.'/server/lib/'.$configfile)){ copy("$install_dir/server/lib/$configfile", "$install_dir/server/lib/$configfile~"); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/$configfile.master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{mysql_master_server_ispconfig_user}', $conf['mysql']['master_ispconfig_user'], $content); $content = str_replace('{mysql_master_server_ispconfig_password}', $conf['mysql']['master_ispconfig_password'], $content); $content = str_replace('{mysql_master_server_database}', $conf['mysql']['master_database'], $content); $content = str_replace('{mysql_master_server_host}', $conf['mysql']['master_host'], $content); $content = str_replace('{mysql_master_server_port}', $conf['mysql']['master_port'], $content); $content = str_replace('{server_id}', $conf['server_id'], $content); $content = str_replace('{ispconfig_log_priority}', $conf['ispconfig_log_priority'], $content); $content = str_replace('{language}', $conf['language'], $content); $content = str_replace('{timezone}', $conf['timezone'], $content); $content = str_replace('{theme}', $conf['theme'], $content); $content = str_replace('{language_file_import_enabled}', ($conf['language_file_import_enabled'] == true)?'true':'false', $content); wf("$install_dir/server/lib/$configfile", $content); //* Create the config file for remote-actions (but only, if it does not exist, because // the value is a autoinc-value and so changed by the remoteaction_core_module if (!file_exists($install_dir.'/server/lib/remote_action.inc.php')) { $content = ''; wf($install_dir.'/server/lib/remote_action.inc.php', $content); } //* Enable the server modules and plugins. // TODO: Implement a selector which modules and plugins shall be enabled. $dir = $install_dir.'/server/mods-available/'; if (is_dir($dir)) { if ($dh = opendir($dir)) { while (($file = readdir($dh)) !== false) { if($file != '.' && $file != '..' && substr($file, -8, 8) == '.inc.php') { include_once $install_dir.'/server/mods-available/'.$file; $module_name = substr($file, 0, -8); $tmp = new $module_name; if($tmp->onInstall()) { if(!@is_link($install_dir.'/server/mods-enabled/'.$file)) @symlink($install_dir.'/server/mods-available/'.$file, $install_dir.'/server/mods-enabled/'.$file); if (strpos($file, '_core_module') !== false) { if(!@is_link($install_dir.'/server/mods-core/'.$file)) @symlink($install_dir.'/server/mods-available/'.$file, $install_dir.'/server/mods-core/'.$file); } } unset($tmp); } } closedir($dh); } } $dir = $install_dir.'/server/plugins-available/'; if (is_dir($dir)) { if ($dh = opendir($dir)) { while (($file = readdir($dh)) !== false) { if($conf['apache']['installed'] == true && $file == 'nginx_plugin.inc.php') continue; if($conf['nginx']['installed'] == true && $file == 'apache2_plugin.inc.php') continue; if($file != '.' && $file != '..' && substr($file, -8, 8) == '.inc.php') { include_once $install_dir.'/server/plugins-available/'.$file; $plugin_name = substr($file, 0, -8); $tmp = new $plugin_name; if($tmp->onInstall()) { if(!@is_link($install_dir.'/server/plugins-enabled/'.$file)) @symlink($install_dir.'/server/plugins-available/'.$file, $install_dir.'/server/plugins-enabled/'.$file); if (strpos($file, '_core_plugin') !== false) { if(!@is_link($install_dir.'/server/plugins-core/'.$file)) @symlink($install_dir.'/server/plugins-available/'.$file, $install_dir.'/server/plugins-core/'.$file); } } unset($tmp); } } closedir($dh); } } // Update the server config $mail_server_enabled = ($conf['services']['mail'])?1:0; $web_server_enabled = ($conf['services']['web'])?1:0; $dns_server_enabled = ($conf['services']['dns'])?1:0; $file_server_enabled = ($conf['services']['file'])?1:0; $db_server_enabled = ($conf['services']['db'])?1:0; $vserver_server_enabled = ($conf['services']['vserver'])?1:0; $sql = "UPDATE `server` SET mail_server = ?, web_server = ?, dns_server = ?, file_server = ?, db_server = ?, vserver_server = ? WHERE server_id = ?"; $this->db->query($sql, $mail_server_enabled, $web_server_enabled, $dns_server_enabled, $file_server_enabled, $db_server_enabled, $vserver_server_enabled, $conf['server_id']); if($conf['mysql']['master_slave_setup'] == 'y') { $this->dbmaster->query($sql, $mail_server_enabled, $web_server_enabled, $dns_server_enabled, $file_server_enabled, $db_server_enabled, $vserver_server_enabled, $conf['server_id']); } // chown install dir to root and chmod 755 $command = 'chown root:root '.$install_dir; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chmod 755 '.$install_dir; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Chmod the files and directories in the install dir $command = 'chmod -R 750 '.$install_dir.'/*'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the interface files to the ispconfig user and group $command = 'chown -R ispconfig:ispconfig '.$install_dir.'/interface'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the extensions directory to the ispconfig user and group $command = 'chown ispconfig:ispconfig '.$install_dir.'/extensions'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the server files to the root user and group $command = 'chown -R root:root '.$install_dir.'/server'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the security files to the root user and group $command = 'chown -R root:root '.$install_dir.'/security'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the security directory and security_settings.ini to root:ispconfig $command = 'chown root:ispconfig '.$install_dir.'/security/security_settings.ini'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/ids.whitelist'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/ids.htmlfield'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/apache_directives.blacklist'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/nginx_directives.blacklist'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Make the global language file directory group writable exec("chmod -R 770 $install_dir/interface/lib/lang"); //* Make the temp directory for language file exports writable exec("chmod -R 770 $install_dir/interface/web/temp"); //* Make all interface language file directories group writable $handle = @opendir($install_dir.'/interface/web'); while ($file = @readdir($handle)) { if ($file != '.' && $file != '..') { if(@is_dir($install_dir.'/interface/web'.'/'.$file.'/lib/lang')) { $handle2 = opendir($install_dir.'/interface/web'.'/'.$file.'/lib/lang'); chmod($install_dir.'/interface/web'.'/'.$file.'/lib/lang', 0770); while ($lang_file = @readdir($handle2)) { if ($lang_file != '.' && $lang_file != '..') { chmod($install_dir.'/interface/web'.'/'.$file.'/lib/lang/'.$lang_file, 0770); } } } } } //* Make the APS directories group writable exec("chmod -R 770 $install_dir/interface/web/sites/aps_meta_packages"); exec("chmod -R 770 $install_dir/server/aps_packages"); //* make sure that the server config file (not the interface one) is only readable by the root user chmod($install_dir.'/server/lib/config.inc.php', 0600); chown($install_dir.'/server/lib/config.inc.php', 'root'); chgrp($install_dir.'/server/lib/config.inc.php', 'root'); //* Make sure thet the interface config file is readable by user ispconfig only chmod($install_dir.'/interface/lib/config.inc.php', 0600); chown($install_dir.'/interface/lib/config.inc.php', 'ispconfig'); chgrp($install_dir.'/interface/lib/config.inc.php', 'ispconfig'); if(@is_file("$install_dir/server/lib/mysql_clientdb.conf")) { exec("chmod 600 $install_dir/server/lib/mysql_clientdb.conf"); exec("chown root:root $install_dir/server/lib/mysql_clientdb.conf"); } if(is_dir($install_dir.'/interface/invoices')) { exec('chmod -R 770 '.escapeshellarg($install_dir.'/interface/invoices')); exec('chown -R ispconfig:ispconfig '.escapeshellarg($install_dir.'/interface/invoices')); } exec('chown -R root:root /usr/local/ispconfig/interface/ssl'); // TODO: FIXME: add the www-data user to the ispconfig group. This is just for testing // and must be fixed as this will allow the apache user to read the ispconfig files. // Later this must run as own apache server or via suexec! if($conf['apache']['installed'] == true){ $command = 'usermod -a -G ispconfig '.$conf['apache']['user']; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); if(is_group('ispapps')){ $command = 'usermod -a -G ispapps '.$conf['apache']['user']; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } } if($conf['nginx']['installed'] == true){ $command = 'usermod -a -G ispconfig '.$conf['nginx']['user']; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); if(is_group('ispapps')){ $command = 'usermod -a -G ispapps '.$conf['nginx']['user']; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } } //* Make the shell scripts executable $command = "chmod +x $install_dir/server/scripts/*.sh"; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); if ($this->install_ispconfig_interface == true && isset($conf['interface_password']) && $conf['interface_password']!='admin') { $sql = "UPDATE sys_user SET passwort = ? WHERE username = 'admin';"; $this->db->query($sql, $this->crypt_password($conf['interface_password'])); } if($conf['apache']['installed'] == true && $this->install_ispconfig_interface == true){ //* Copy the ISPConfig vhost for the controlpanel // TODO: These are missing! should they be "vhost_dist_*_dir" ? $vhost_conf_dir = $conf['apache']['vhost_conf_dir']; $vhost_conf_enabled_dir = $conf['apache']['vhost_conf_enabled_dir']; // Dont just copy over the virtualhost template but add some custom settings $tpl = new tpl('apache_ispconfig.vhost.master'); $tpl->setVar('vhost_port',$conf['apache']['vhost_port']); // comment out the listen directive if port is 80 or 443 if($conf['apache']['vhost_port'] == 80 or $conf['apache']['vhost_port'] == 443) { $tpl->setVar('vhost_port_listen','#'); } else { $tpl->setVar('vhost_port_listen',''); } if(is_file($install_dir.'/interface/ssl/ispserver.crt') && is_file($install_dir.'/interface/ssl/ispserver.key')) { $tpl->setVar('ssl_comment',''); } else { $tpl->setVar('ssl_comment','#'); } if(is_file($install_dir.'/interface/ssl/ispserver.crt') && is_file($install_dir.'/interface/ssl/ispserver.key') && is_file($install_dir.'/interface/ssl/ispserver.bundle')) { $tpl->setVar('ssl_bundle_comment',''); } else { $tpl->setVar('ssl_bundle_comment','#'); } $tpl->setVar('apache_version',getapacheversion()); wf($vhost_conf_dir.'/ispconfig.vhost', $tpl->grab()); //copy('tpl/apache_ispconfig.vhost.master', "$vhost_conf_dir/ispconfig.vhost"); //* and create the symlink //if($this->is_update == false) { if(@is_link("$vhost_conf_enabled_dir/ispconfig.vhost")) unlink("$vhost_conf_enabled_dir/ispconfig.vhost"); if(!@is_link("$vhost_conf_enabled_dir/000-ispconfig.vhost")) { exec("ln -s $vhost_conf_dir/ispconfig.vhost $vhost_conf_enabled_dir/000-ispconfig.vhost"); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/apache_ispconfig_fcgi_starter.master', 'tpl/apache_ispconfig_fcgi_starter.master'); $content = str_replace('{fastcgi_bin}', $conf['fastcgi']['fastcgi_bin'], $content); $content = str_replace('{fastcgi_phpini_path}', $conf['fastcgi']['fastcgi_phpini_path'], $content); if(!is_dir('/var/www/php-fcgi-scripts/ispconfig')) exec('mkdir -p /var/www/php-fcgi-scripts/ispconfig'); $this->set_immutable('/var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter', false); wf('/var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter', $content); exec('chmod +x /var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter'); if(!is_link('/var/www/ispconfig')) exec('ln -s /usr/local/ispconfig/interface/web /var/www/ispconfig'); exec('chown -R ispconfig:ispconfig /var/www/php-fcgi-scripts/ispconfig'); $this->set_immutable('/var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter', true); //} //} } if($conf['nginx']['installed'] == true && $this->install_ispconfig_interface == true){ //* Copy the ISPConfig vhost for the controlpanel $vhost_conf_dir = $conf['nginx']['vhost_conf_dir']; $vhost_conf_enabled_dir = $conf['nginx']['vhost_conf_enabled_dir']; // Dont just copy over the virtualhost template but add some custom settings $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/nginx_ispconfig.vhost.master', 'tpl/nginx_ispconfig.vhost.master'); $content = str_replace('{vhost_port}', $conf['nginx']['vhost_port'], $content); if(is_file($install_dir.'/interface/ssl/ispserver.crt') && is_file($install_dir.'/interface/ssl/ispserver.key')) { $content = str_replace('{ssl_on}', 'ssl', $content); $content = str_replace('{ssl_comment}', '', $content); $content = str_replace('{fastcgi_ssl}', 'on', $content); } else { $content = str_replace('{ssl_on}', '', $content); $content = str_replace('{ssl_comment}', '#', $content); $content = str_replace('{fastcgi_ssl}', 'off', $content); } $socket_dir = escapeshellcmd($conf['nginx']['php_fpm_socket_dir']); if(substr($socket_dir, -1) != '/') $socket_dir .= '/'; if(!is_dir($socket_dir)) exec('mkdir -p '.$socket_dir); $fpm_socket = $socket_dir.'ispconfig.sock'; //$content = str_replace('{fpm_port}', $conf['nginx']['php_fpm_start_port'], $content); $content = str_replace('{fpm_socket}', $fpm_socket, $content); wf($vhost_conf_dir.'/ispconfig.vhost', $content); unset($content); // PHP-FPM // Dont just copy over the php-fpm pool template but add some custom settings $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/php_fpm_pool.conf.master', 'tpl/php_fpm_pool.conf.master'); $content = str_replace('{fpm_pool}', 'ispconfig', $content); //$content = str_replace('{fpm_port}', $conf['nginx']['php_fpm_start_port'], $content); $content = str_replace('{fpm_socket}', $fpm_socket, $content); $content = str_replace('{fpm_user}', 'ispconfig', $content); $content = str_replace('{fpm_group}', 'ispconfig', $content); wf($conf['nginx']['php_fpm_pool_dir'].'/ispconfig.conf', $content); //copy('tpl/nginx_ispconfig.vhost.master', $vhost_conf_dir.'/ispconfig.vhost'); //* and create the symlink if($this->is_update == false) { if(@is_link($vhost_conf_enabled_dir.'/ispconfig.vhost')) unlink($vhost_conf_enabled_dir.'/ispconfig.vhost'); if(!@is_link($vhost_conf_enabled_dir.'/000-ispconfig.vhost')) { symlink($vhost_conf_dir.'/ispconfig.vhost', $vhost_conf_enabled_dir.'/000-ispconfig.vhost'); } } // create symlink from /usr/share/phpmyadmin to /usr/share/phpMyAdmin, if it is installed if(!@file_exists('/usr/share/phpmyadmin') && @is_dir('/usr/share/phpMyAdmin')) symlink('/usr/share/phpMyAdmin/', '/usr/share/phpmyadmin'); } // Make the Clamav log files readable by ISPConfig //exec('chmod +r /var/log/clamav/clamav.log'); //exec('chmod +r /var/log/clamav/freshclam.log'); //* Install the update script if(is_file('/usr/local/bin/ispconfig_update_from_dev.sh')) unlink('/usr/local/bin/ispconfig_update_from_dev.sh'); exec('chown root /usr/local/ispconfig/server/scripts/update_from_dev.sh'); exec('chmod 700 /usr/local/ispconfig/server/scripts/update_from_dev.sh'); exec('chown root /usr/local/ispconfig/server/scripts/update_stable.sh'); exec('chmod 700 /usr/local/ispconfig/server/scripts/update_stable.sh'); exec('chown root /usr/local/ispconfig/server/scripts/ispconfig_update.sh'); exec('chmod 700 /usr/local/ispconfig/server/scripts/ispconfig_update.sh'); if(!is_link('/usr/local/bin/ispconfig_update_from_dev.sh')) exec('ln -s /usr/local/ispconfig/server/scripts/ispconfig_update.sh /usr/local/bin/ispconfig_update_from_dev.sh'); if(!is_link('/usr/local/bin/ispconfig_update.sh')) exec('ln -s /usr/local/ispconfig/server/scripts/ispconfig_update.sh /usr/local/bin/ispconfig_update.sh'); // Install ISPConfig cli command if(is_file('/usr/local/bin/ispc')) unlink('/usr/local/bin/ispc'); chown($install_dir.'/server/cli/ispc', 'root'); chmod($install_dir.'/server/cli/ispc', 0700); symlink($install_dir.'/server/cli/ispc', '/usr/local/bin/ispc'); // set the fast cgi starter script to executable // exec('chmod 755 '.$install_dir.'/interface/bin/php-fcgi'); //* Make the logs readable for the ispconfig user if(@is_file('/var/log/maillog')) exec('chmod +r /var/log/maillog'); //if(@is_file('/var/log/mail.warn')) exec('chmod +r /var/log/mail.warn'); //if(@is_file('/var/log/mail.err')) exec('chmod +r /var/log/mail.err'); if(@is_file('/var/log/messages')) exec('chmod +r /var/log/messages'); //To enable apache to read the directories // exec('chmod a+rx /usr/local/ispconfig'); // exec('chmod -R 751 /usr/local/ispconfig/interface'); // exec('chmod a+rx /usr/local/ispconfig/interface/web'); //* Create the ispconfig log directory if(!is_dir($conf['ispconfig_log_dir'])) mkdir($conf['ispconfig_log_dir']); if(!is_file($conf['ispconfig_log_dir'].'/ispconfig.log')) exec('touch '.$conf['ispconfig_log_dir'].'/ispconfig.log'); chmod($conf['ispconfig_log_dir'].'/ispconfig.log', 0600); if(is_dir('/var/log/ispconfig')) exec('chmod o-rw /var/log/ispconfig/*.gz /var/log/ispconfig/*.log 2>/dev/null'); if(is_user('getmail')) { exec('mv /usr/local/ispconfig/server/scripts/run-getmail.sh /usr/local/bin/run-getmail.sh'); exec('chown getmail /usr/local/bin/run-getmail.sh'); exec('chmod 744 /usr/local/bin/run-getmail.sh'); } // Edit the file Edit the file /etc/sudoers and comment out the requiregetty line, otherwise the backup function will fail replaceLine('/etc/sudoers', 'Defaults requiretty', '#Defaults requiretty', 0, 0); if(is_dir($install_dir.'/interface/invoices')) { exec('chmod -R 770 '.escapeshellarg($install_dir.'/interface/invoices')); exec('chown -R ispconfig:ispconfig '.escapeshellarg($install_dir.'/interface/invoices')); } //* Create the ispconfig auth log file and set uid/gid if(!is_file($conf['ispconfig_log_dir'].'/auth.log')) { touch($conf['ispconfig_log_dir'].'/auth.log'); } exec('chown ispconfig:ispconfig '. $conf['ispconfig_log_dir'].'/auth.log'); exec('chmod 660 '. $conf['ispconfig_log_dir'].'/auth.log'); //* Remove Domain module as its functions are available in the client module now if(@is_dir('/usr/local/ispconfig/interface/web/domain')) exec('rm -rf /usr/local/ispconfig/interface/web/domain'); // Add symlink for patch tool if(!is_link('/usr/local/bin/ispconfig_patch')) exec('ln -s /usr/local/ispconfig/server/scripts/ispconfig_patch /usr/local/bin/ispconfig_patch'); // Change mode of a few files from amavisd if(is_file($conf['amavis']['config_dir'].'/conf.d/50-user')) chmod($conf['amavis']['config_dir'].'/conf.d/50-user', 0640); if(is_file($conf['amavis']['config_dir'].'/50-user~')) chmod($conf['amavis']['config_dir'].'/50-user~', 0400); if(is_file($conf['amavis']['config_dir'].'/amavisd.conf')) chmod($conf['amavis']['config_dir'].'/amavisd.conf', 0640); if(is_file($conf['amavis']['config_dir'].'/amavisd.conf~')) chmod($conf['amavis']['config_dir'].'/amavisd.conf~', 0400); } } ?> ispconfig3_install/install/dist/lib/opensuse110.lib.php0000775000000000000000000000306315114345330022074 0ustar rootroot ispconfig3_install/install/dist/lib/centos_base.lib.php0000775000000000000000000001423615114345330022302 0ustar rootrootclamav_socket, $content); $content = str_replace('{amavis_config_dir}', $conf['amavis']['config_dir'], $content); wf($conf["amavis"]["config_dir"].'/amavisd.conf', $content); chmod($conf['amavis']['config_dir'].'/amavisd.conf', 0640); if(!is_file($conf['amavis']['config_dir'].'/60-dkim')) { touch($conf['amavis']['config_dir'].'/60-dkim'); chmod($conf['amavis']['config_dir'].'/60-dkim', 0640); } // for CentOS 7.2 only if($dist['confid'] == 'centos72') { chmod($conf['amavis']['config_dir'].'/amavisd.conf', 0750); chgrp($conf['amavis']['config_dir'].'/amavisd.conf', 'amavis'); chmod($conf['amavis']['config_dir'].'/60-dkim', 0750); chgrp($conf['amavis']['config_dir'].'/60-dkim', 'amavis'); } // Adding the amavisd commands to the postfix configuration $postconf_commands = array ( 'content_filter = amavis:[127.0.0.1]:10024', 'receive_override_options = no_address_mappings' ); // Make a backup copy of the main.cf file copy($conf["postfix"]["config_dir"].'/main.cf', $conf["postfix"]["config_dir"].'/main.cf~2'); // Executing the postconf commands foreach($postconf_commands as $cmd) { $command = "postconf -e '$cmd'"; caselog($command." &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } $config_dir = $conf['postfix']['config_dir']; // Adding amavis-services to the master.cf file // backup master.cf if(is_file($config_dir.'/master.cf')) copy($config_dir.'/master.cf', $config_dir.'/master.cf~'); // first remove the old service definitions $this->remove_postfix_service('amavis','unix'); $this->remove_postfix_service('127.0.0.1:10025','inet'); $this->remove_postfix_service('127.0.0.1:10027','inet'); // then add them back $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis.master', 'tpl/master_cf_amavis.master'); af($config_dir.'/master.cf', $content); unset($content); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis10025.master', 'tpl/master_cf_amavis10025.master'); af($config_dir.'/master.cf', $content); unset($content); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis10027.master', 'tpl/master_cf_amavis10027.master'); af($config_dir.'/master.cf', $content); unset($content); removeLine('/etc/sysconfig/freshclam', 'FRESHCLAM_DELAY=disabled-warn # REMOVE ME', 1); replaceLine('/etc/freshclam.conf', 'Example', '# Example', 1); // get shell-group for amavis $amavis_group=exec('grep -o "^amavis:\|^vscan:" /etc/group'); if(!empty($amavis_group)) { $amavis_group=rtrim($amavis_group, ":"); } // get shell-user for amavis $amavis_user=exec('grep -o "^amavis:\|^vscan:" /etc/passwd'); if(!empty($amavis_user)) { $amavis_user=rtrim($amavis_user, ":"); } // Create the director for DKIM-Keys if(!is_dir('/var/lib/amavis')) mkdir('/var/lib/amavis', 0750, true); if(!empty($amavis_user)) exec('chown '.$amavis_user.' /var/lib/amavis'); if(!empty($amavis_group)) exec('chgrp '.$amavis_group.' /var/lib/amavis'); if(!is_dir('/var/lib/amavis/dkim')) mkdir('/var/lib/amavis/dkim', 0750); if(!empty($amavis_user)) exec('chown -R '.$amavis_user.' /var/lib/amavis/dkim'); if(!empty($amavis_group)) exec('chgrp -R '.$amavis_group.' /var/lib/amavis/dkim'); } } ?> ispconfig3_install/install/dist/lib/debian40.lib.php0000775000000000000000000000306315114345330021377 0ustar rootroot ispconfig3_install/install/dist/lib/centos90.lib.php0000775000000000000000000000336415114345330021461 0ustar rootroot ispconfig3_install/install/dist/lib/gentoo.lib.php0000775000000000000000000023302415153602013021303 0ustar rootrootget_template_file($conf['jailkit']['jk_init'], true); //* get contents $this->write_config_file($conf['jailkit']['config_dir'] . '/' . $conf['jailkit']['jk_init'], $jkinit_content); $jkchroot_content = $this->get_template_file($conf['jailkit']['jk_chrootsh'], true); //* get contents $this->write_config_file($conf['jailkit']['config_dir'] . '/' . $conf['jailkit']['jk_chrootsh'], $jkchroot_content); } $command = 'chown root:root /var/www'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } public function configure_postfix($options = '') { global $conf,$autoinstall; $cf = $conf['postfix']; $config_dir = $cf['config_dir']; if(!is_dir($config_dir)){ $this->error("The postfix configuration directory '$config_dir' does not exist."); } //* Get postfix version exec('postconf -d mail_version 2>&1', $out); $postfix_version = preg_replace('/.*=\s*/', '', $out[0]); unset($out); //* Install virtual mappings foreach (glob('tpl/mysql-virtual_*.master') as $filename) { $this->process_postfix_config( basename($filename, '.master') ); } //* mysql-verify_recipients.cf $this->process_postfix_config('mysql-verify_recipients.cf'); // test if lmtp if available $configure_lmtp = $this->get_postfix_service('lmtp','unix'); //* postfix-dkim $filename='tag_as_originating.re'; $full_file_name=$config_dir.'/'.$filename; if(is_file($full_file_name)) copy($full_file_name, $full_file_name.'~'); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/postfix-'.$filename.'.master', 'tpl/postfix-'.$filename.'.master'); if($configure_lmtp) { $content = preg_replace('/amavis:/', 'lmtp:', $content); } wf($full_file_name, $content); $filename='tag_as_foreign.re'; $full_file_name=$config_dir.'/'.$filename; if(is_file($full_file_name)) copy($full_file_name, $full_file_name.'~'); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/postfix-'.$filename.'.master', 'tpl/postfix-'.$filename.'.master'); if($configure_lmtp) { $content = preg_replace('/amavis:/', 'lmtp:', $content); } wf($full_file_name, $content); //* Changing mode and group of the new created config files. /*caselog('chmod o= '.$config_dir.'/mysql-virtual_*.cf* &> /dev/null', __FILE__, __LINE__, 'chmod on mysql-virtual_*.cf*', 'chmod on mysql-virtual_*.cf* failed'); caselog('chgrp '.$cf['group'].' '.$config_dir.'/mysql-virtual_*.cf* &> /dev/null', __FILE__, __LINE__, 'chgrp on mysql-virtual_*.cf*', 'chgrp on mysql-virtual_*.cf* failed');*/ //* Creating virtual mail user and group $command = 'groupadd -g '.$cf['vmail_groupid'].' '.$cf['vmail_groupname']; if(!is_group($cf['vmail_groupname'])) caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'useradd -g '.$cf['vmail_groupname'].' -u '.$cf['vmail_userid'].' '.$cf['vmail_username'].' -d '.$cf['vmail_mailbox_base'].' -m'; if(!is_user($cf['vmail_username'])) caselog("$command &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* These postconf commands will be executed on installation and update $server_ini_rec = $this->db->queryOneRecord("SELECT config FROM ?? WHERE server_id = ?", $conf["mysql"]["database"].'.server', $conf['server_id']); $server_ini_array = ini_to_array(stripslashes($server_ini_rec['config'])); unset($server_ini_rec); //* If there are RBL's defined, format the list and add them to smtp_recipient_restrictions to prevent removal after an update $rbl_list = ''; if (@isset($server_ini_array['mail']['realtime_blackhole_list']) && $server_ini_array['mail']['realtime_blackhole_list'] != '') { $rbl_hosts = explode(",", str_replace(" ", "", $server_ini_array['mail']['realtime_blackhole_list'])); foreach ($rbl_hosts as $key => $value) { $rbl_list .= ", reject_rbl_client ". $value; } } unset($rbl_hosts); //* If Postgrey is installed, configure it $greylisting = ''; if($conf['postgrey']['installed'] == true) { $greylisting = ', check_recipient_access mysql:/etc/postfix/mysql-virtual_policy_greylist.cf'; } $reject_sender_login_mismatch = ''; $reject_authenticated_sender_login_mismatch = ''; if(isset($server_ini_array['mail']['reject_sender_login_mismatch']) && ($server_ini_array['mail']['reject_sender_login_mismatch'] == 'y')) { $reject_sender_login_mismatch = ', reject_sender_login_mismatch,'; $reject_authenticated_sender_login_mismatch = 'reject_authenticated_sender_login_mismatch, '; } # placeholder includes comment char $stress_adaptive_placeholder = '#{stress_adaptive} '; $stress_adaptive = (isset($server_ini_array['mail']['stress_adaptive']) && ($server_ini_array['mail']['stress_adaptive'] == 'y')) ? '' : $stress_adaptive_placeholder; $reject_unknown_client_hostname=''; if (isset($server_ini_array['mail']['reject_unknown']) && ($server_ini_array['mail']['reject_unknown'] == 'client' || $server_ini_array['mail']['reject_unknown'] == 'client_helo')) { $reject_unknown_client_hostname=', reject_unknown_client_hostname'; } $reject_unknown_helo_hostname=''; if ((!isset($server_ini_array['mail']['reject_unknown'])) || $server_ini_array['mail']['reject_unknown'] == 'helo' || $server_ini_array['mail']['reject_unknown'] == 'client_helo') { $reject_unknown_helo_hostname=', reject_unknown_helo_hostname'; } unset($server_ini_array); $myhostname = str_replace('.','\.',$conf['hostname']); $postconf_placeholders = array('{config_dir}' => $config_dir, '{vmail_mailbox_base}' => $cf['vmail_mailbox_base'], '{vmail_userid}' => $cf['vmail_userid'], '{vmail_groupid}' => $cf['vmail_groupid'], '{rbl_list}' => $rbl_list, '{greylisting}' => $greylisting, '{reject_slm}' => $reject_sender_login_mismatch, '{reject_aslm}' => $reject_authenticated_sender_login_mismatch, '{myhostname}' => $myhostname, $stress_adaptive_placeholder => $stress_adaptive, '{reject_unknown_client_hostname}' => $reject_unknown_client_hostname, '{reject_unknown_helo_hostname}' => $reject_unknown_helo_hostname, ); $postconf_tpl = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/gentoo_postfix.conf.master', 'tpl/gentoo_postfix.conf.master'); $postconf_tpl = strtr($postconf_tpl, $postconf_placeholders); $postconf_commands = array_filter(explode("\n", $postconf_tpl)); // read and remove empty lines //* Merge version-specific postfix config if(version_compare($postfix_version , '2.5', '>=')) { $configfile = 'postfix_2-5.conf'; $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); $content = strtr($content, $postconf_placeholders); $postconf_commands = array_merge($postconf_commands, array_filter(explode("\n", $content))); } if(version_compare($postfix_version , '2.10', '>=')) { $configfile = 'postfix_2-10.conf'; $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); $content = strtr($content, $postconf_placeholders); $postconf_commands = array_merge($postconf_commands, array_filter(explode("\n", $content))); } if(version_compare($postfix_version , '3.0', '>=')) { $configfile = 'postfix_3-0.conf'; $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); $content = strtr($content, $postconf_placeholders); $postconf_commands = array_merge($postconf_commands, array_filter(explode("\n", $content))); } if(version_compare($postfix_version , '3.3', '>=')) { $configfile = 'postfix_3-3.conf'; $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); $content = strtr($content, $postconf_placeholders); $postconf_commands = array_merge($postconf_commands, array_filter(explode("\n", $content))); } $configfile = 'postfix_custom.conf'; if(file_exists($conf['ispconfig_install_dir'].'/server/conf-custom/install/' . $configfile . '.master')) { $content = file_get_contents($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master'); $content = strtr($content, $postconf_placeholders); $postconf_commands = array_merge($postconf_commands, array_filter(explode("\n", $content))); } // Remove comment lines, these would give fatal errors when passed to postconf. $postconf_commands = array_filter($postconf_commands, function($line) { return preg_match('/^[^#]/', $line); }); //* These postconf commands will be executed on installation only if($this->is_update == false) { $postconf_commands = array_merge($postconf_commands, array( 'myhostname = '.$conf['hostname'], 'mydestination = '.$conf['hostname'].', localhost, localhost.localdomain', 'mynetworks = 127.0.0.0/8 [::1]/128' )); } //* Create the header and body check files touch($config_dir.'/header_checks'); touch($config_dir.'/mime_header_checks'); touch($config_dir.'/nested_header_checks'); touch($config_dir.'/body_checks'); touch($config_dir.'/sasl_passwd'); //* Create the mailman files if(!is_dir('/var/lib/mailman/data')) exec('mkdir -p /var/lib/mailman/data'); if(!is_file('/var/lib/mailman/data/aliases')) touch('/var/lib/mailman/data/aliases'); exec('postalias /var/lib/mailman/data/aliases'); if(!is_file('/var/lib/mailman/data/virtual-mailman')) touch('/var/lib/mailman/data/virtual-mailman'); exec('postmap /var/lib/mailman/data/virtual-mailman'); if(!is_file('/var/lib/mailman/data/transport-mailman')) touch('/var/lib/mailman/data/transport-mailman'); exec('/usr/sbin/postmap /var/lib/mailman/data/transport-mailman'); //* Create auxillary postfix conf files $configfile = 'helo_access'; if(is_file($config_dir.'/'.$configfile)) { copy($config_dir.'/'.$configfile, $config_dir.'/'.$configfile.'~'); chmod($config_dir.'/'.$configfile.'~', 0400); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); $content = strtr($content, $postconf_placeholders); # todo: look up this server's ip addrs and loop through each # todo: look up domains hosted on this server and loop through each wf($config_dir.'/'.$configfile, $content); $configfile = 'blacklist_helo'; if(is_file($config_dir.'/'.$configfile)) { copy($config_dir.'/'.$configfile, $config_dir.'/'.$configfile.'~'); chmod($config_dir.'/'.$configfile.'~', 0400); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); $content = strtr($content, $postconf_placeholders); wf($config_dir.'/'.$configfile, $content); //* Make a backup copy of the main.cf file copy($config_dir.'/main.cf', $config_dir.'/main.cf~'); //* Executing the postconf commands foreach($postconf_commands as $cmd) { $command = "postconf -e '$cmd'"; swriteln($command); caselog($command." &> /dev/null", __FILE__, __LINE__, 'EXECUTED: '.$command, 'Failed to execute the command '.$command); } if (!stristr($options, 'dont-create-certs')){ //* Create the SSL certificate if(AUTOINSTALL){ $command = 'cd '.$config_dir.'; ' ."openssl req -new -subj '/C=".escapeshellcmd($autoinstall['ssl_cert_country'])."/ST=".escapeshellcmd($autoinstall['ssl_cert_state'])."/L=".escapeshellcmd($autoinstall['ssl_cert_locality'])."/O=".escapeshellcmd($autoinstall['ssl_cert_organisation'])."/OU=".escapeshellcmd($autoinstall['ssl_cert_organisation_unit'])."/CN=".escapeshellcmd($autoinstall['ssl_cert_common_name'])."' -outform PEM -out smtpd.cert -newkey rsa:4096 -nodes -keyout smtpd.key -keyform PEM -days 3650 -x509"; } else { $command = 'cd '.$config_dir.'; ' .'openssl req -new -outform PEM -out smtpd.cert -newkey rsa:4096 -nodes -keyout smtpd.key -keyform PEM -days 3650 -x509'; } exec($command); $command = 'chmod o= '.$config_dir.'/smtpd.key'; caselog($command.' &> /dev/null', __FILE__, __LINE__, 'EXECUTED: '.$command, 'Failed to execute the command '.$command); } //** We have to change the permissions of the courier authdaemon directory to make it accessible for maildrop. $command = 'chmod 755 /var/run/courier/authdaemon/'; if(is_file('/var/run/courier/authdaemon/')) caselog($command.' &> /dev/null', __FILE__, __LINE__, 'EXECUTED: '.$command, 'Failed to execute the command '.$command); //* Check maildrop service in posfix master.cf $quoted_regex = '^maildrop unix.*pipe flags=DRhu user=vmail '.preg_quote('argv=/usr/bin/maildrop -d '.$cf['vmail_username'].' ${extension} ${recipient} ${user} ${nexthop} ${sender}', '/'); $configfile = $config_dir.'/master.cf'; if($this->get_postfix_service('maildrop', 'unix')) { exec ("postconf -M maildrop.unix 2> /dev/null", $out, $ret); $change_maildrop_flags = @(preg_match("/$quoted_regex/", $out[0]) && $out[0] !='')?false:true; } else { $change_maildrop_flags = @(preg_match("/$quoted_regex/", $configfile))?false:true; } if ($change_maildrop_flags) { //* Change maildrop service in posfix master.cf if(is_file($config_dir.'/master.cf')) { copy($config_dir.'/master.cf', $config_dir.'/master.cf~'); } if(is_file($config_dir.'/master.cf~')) { chmod($config_dir.'/master.cf~', 0400); } $configfile = $config_dir.'/master.cf'; $content = rf($configfile); $content = str_replace('flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}', 'flags=DRhu user='.$cf['vmail_username'].' argv=/usr/bin/maildrop -d '.$cf['vmail_username'].' ${extension} ${recipient} ${user} ${nexthop} ${sender}', $content); wf($configfile, $content); } //* Writing the Maildrop mailfilter file $configfile = 'mailfilter'; if(is_file($cf['vmail_mailbox_base'].'/.'.$configfile)) { copy($cf['vmail_mailbox_base'].'/.'.$configfile, $cf['vmail_mailbox_base'].'/.'.$configfile.'~'); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); $content = str_replace('{dist_postfix_vmail_mailbox_base}', $cf['vmail_mailbox_base'], $content); wf($cf['vmail_mailbox_base'].'/.'.$configfile, $content); //* Create the directory for the custom mailfilters if(!is_dir($cf['vmail_mailbox_base'].'/mailfilters')) { $command = 'mkdir '.$cf['vmail_mailbox_base'].'/mailfilters'; caselog($command." &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } //* Chmod and chown the .mailfilter file $command = 'chown '.$cf['vmail_username'].':'.$cf['vmail_groupname'].' '.$cf['vmail_mailbox_base'].'/.mailfilter'; caselog($command." &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chmod 600 '.$cf['vmail_mailbox_base'].'/.mailfilter'; caselog($command." &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } public function configure_saslauthd() { global $conf; $content = $this->get_template_file('sasl_smtpd.conf', true, true); //* get contents & insert db cred $this->write_config_file($conf['saslauthd']['config_dir'].'/smtpd.conf', $content); //* Edit the file saslauthd config file $content = rf($conf['saslauthd']['config_file']); $content = preg_replace('/(?<=\n)SASLAUTHD_OPTS="\$\{SASLAUTHD_OPTS\}[^"]+"/', 'SASLAUTHD_OPTS="${SASLAUTHD_OPTS} -a pam -r -c -s 128 -t 30 -n 5"', $content); $this->write_config_file($conf['saslauthd']['config_file'], $content); } public function configure_courier() { global $conf; //* authmysqlrc $content = $this->get_template_file('authmysqlrc', true, true); //* get contents & insert db cred $this->write_config_file($conf['courier']['config_dir'].'/authmysqlrc', $content); //* authdaemonrc $configfile = $conf['courier']['config_dir'].'/authdaemonrc'; $content = rf($configfile); $content = preg_replace('/(?<=\n)authmodulelist="[^"]+"/', "authmodulelist=\"authmysql\"", $content); $this->write_config_file($configfile, $content); //* create certificates $command = 'mkimapdcert'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'mkpop3dcert'; caselog($command." &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } public function configure_dovecot() { global $conf; $virtual_transport = 'dovecot'; $configure_lmtp = false; // use lmtp if installed if($configure_lmtp = (is_file('/usr/lib/dovecot/lmtp') || is_file('/usr/libexec/dovecot/lmtp'))) { $virtual_transport = 'lmtp:unix:private/dovecot-lmtp'; } // check if virtual_transport must be changed if ($this->is_update) { $tmp = $this->db->queryOneRecord("SELECT * FROM ?? WHERE server_id = ?", $conf["mysql"]["database"] . ".server", $conf['server_id']); $ini_array = ini_to_array(stripslashes($tmp['config'])); // ini_array needs not to be checked, because already done in update.php -> updateDbAndIni() if(isset($ini_array['mail']['mailbox_virtual_uidgid_maps']) && $ini_array['mail']['mailbox_virtual_uidgid_maps'] == 'y') { $virtual_transport = 'lmtp:unix:private/dovecot-lmtp'; $configure_lmtp = true; } } $config_dir = $conf['postfix']['config_dir']; $quoted_config_dir = preg_quote($config_dir, '|'); $postfix_version = shell_exec("postconf -d mail_version 2>/dev/null"); $postfix_version = preg_replace( '/mail_version\s*=\s*(.*)\s*/', '$1', $postfix_version ); //* Configure master.cf and add a line for deliver if(!$this->get_postfix_service('dovecot', 'unix')) { //* backup if(is_file($config_dir.'/master.cf')){ copy($config_dir.'/master.cf', $config_dir.'/master.cf~2'); } if(is_file($config_dir.'/master.cf~2')){ chmod($config_dir.'/master.cf~2', 0400); } //* Configure master.cf and add a line for deliver $content = rf($config_dir.'/master.cf'); $deliver_content = 'dovecot unix - n n - - pipe'."\n".' flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop}'."\n"; af($config_dir.'/master.cf', $deliver_content); unset($content); unset($deliver_content); } //* Reconfigure postfix to use dovecot authentication // Adding the amavisd commands to the postfix configuration $postconf_commands = array ( 'dovecot_destination_recipient_limit = 1', 'virtual_transport = '.$virtual_transport, 'smtpd_sasl_type = dovecot', 'smtpd_sasl_path = private/auth' ); // Make a backup copy of the main.cf file copy($config_dir.'/main.cf', $config_dir.'/main.cf~3'); $options = preg_split("/,\s*/", exec("postconf -h smtpd_recipient_restrictions")); $new_options = array(); foreach ($options as $value) { $value = trim($value); if ($value == '') continue; if (preg_match("|check_recipient_access\s+proxy:mysql:{$quoted_config_dir}/mysql-verify_recipients.cf|", $value)) { continue; } $new_options[] = $value; } if ($configure_lmtp && (!isset($conf['mail']['content_filter']) || $conf['mail']['content_filter'] === 'amavisd')) { for ($i = 0; isset($new_options[$i]); $i++) { if ($new_options[$i] == 'reject_unlisted_recipient') { array_splice($new_options, $i+1, 0, array("check_recipient_access proxy:mysql:{$config_dir}/mysql-verify_recipients.cf")); break; } } # postfix < 3.3 needs this when using reject_unverified_recipient: if(version_compare($postfix_version, 3.3, '<')) { $postconf_commands[] = "enable_original_recipient = yes"; } } $postconf_commands[] = "smtpd_recipient_restrictions = ".implode(", ", $new_options); // Executing the postconf commands foreach($postconf_commands as $cmd) { $command = "postconf -e '$cmd'"; caselog($command." &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } //* backup dovecot.conf $config_dir = $conf['dovecot']['config_dir']; $configfile = 'dovecot.conf'; if(is_file($config_dir.'/'.$configfile)) { copy($config_dir.'/'.$configfile, $config_dir.'/'.$configfile.'~'); } //* Get the dovecot version exec('dovecot --version', $tmp); $dovecot_version = $tmp[0]; unset($tmp); //* Copy dovecot configuration file if(version_compare($dovecot_version,1, '<=')) { //* Dovecot 1.x if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/gentoo_dovecot.conf.master')) { copy($conf['ispconfig_install_dir'].'/server/conf-custom/install/gentoo_dovecot.conf.master', $config_dir.'/'.$configfile); } else { copy('dist/tpl/gentoo/dovecot.conf.master', $config_dir.'/'.$configfile); } } else { //* Dovecot 2.x if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/gentoo_dovecot2.conf.master')) { copy($conf['ispconfig_install_dir'].'/server/conf-custom/install/gentoo_dovecot2.conf.master', $config_dir.'/'.$configfile); } else { copy('dist/tpl/gentoo/dovecot2.conf.master', $config_dir.'/'.$configfile); } // Copy custom config file if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/dovecot_custom.conf.master')) { if(!@is_dir($config_dir . '/conf.d')) { mkdir($config_dir . '/conf.d'); } copy($conf['ispconfig_install_dir'].'/server/conf-custom/install/dovecot_custom.conf.master', $config_dir.'/conf.d/99-ispconfig-custom-config.conf'); } replaceLine($config_dir.'/'.$configfile, 'postmaster_address = postmaster@example.com', 'postmaster_address = postmaster@'.$conf['hostname'], 1, 0); replaceLine($config_dir.'/'.$configfile, 'postmaster_address = webmaster@localhost', 'postmaster_address = postmaster@'.$conf['hostname'], 1, 0); if(version_compare($dovecot_version, 2.1, '<')) { removeLine($config_dir.'/'.$configfile, 'ssl_protocols ='); } if(version_compare($dovecot_version,2.2) >= 0) { // Dovecot > 2.2 does not recognize !SSLv2 anymore on Debian 9 $content = file_get_contents($config_dir.'/'.$configfile); $content = str_replace('!SSLv2','',$content); file_put_contents($config_dir.'/'.$configfile,$content); unset($content); } if(version_compare($dovecot_version,2.3) >= 0) { // Remove deprecated setting(s) removeLine($config_dir.'/'.$configfile, 'ssl_protocols ='); // Check if we have a dhparams file and if not, create it if(!file_exists('/etc/dovecot/dh.pem')) { // Create symlink to ISPConfig dhparam file swriteln('Creating symlink /etc/dovecot/dh.pem to ISPConfig DHParam file.'); symlink('/usr/local/ispconfig/interface/ssl/dhparam4096.pem', '/etc/dovecot/dh.pem'); /* swriteln('Creating new DHParams file, this takes several minutes. Do not interrupt the script.'); if(file_exists('/var/lib/dovecot/ssl-parameters.dat')) { // convert existing ssl parameters file $command = 'dd if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dhparam -inform der > /etc/dovecot/dh.pem'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } else { //Create a new dhparams file. We use 2048 bit only as it simply takes too long //on smaller systems to generate a 4096 bit dh file (> 30 minutes). If you need // a 4096 bit file, create it manually before you install ISPConfig $command = 'openssl dhparam -out /etc/dovecot/dh.pem 2048'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } */ } //remove #2.3+ comment $content = file_get_contents($config_dir.'/'.$configfile); $content = str_replace('#2.3+ ','',$content); file_put_contents($config_dir.'/'.$configfile,$content); unset($content); } else { // remove settings which are not supported in Dovecot < 2.3 removeLine($config_dir.'/'.$configfile, 'ssl_min_protocol ='); removeLine($config_dir.'/'.$configfile, 'ssl_dh ='); } } $dovecot_protocols = 'imap pop3'; //* dovecot-lmtpd if($configure_lmtp) { $dovecot_protocols .= ' lmtp'; } //* dovecot-managesieved if(is_file('/usr/lib/dovecot/managesieve') || is_file('/usr/libexec/dovecot/managesieve')) { $dovecot_protocols .= ' sieve'; } replaceLine($config_dir.'/'.$configfile, 'protocols = imap pop3', "protocols = $dovecot_protocols", 1, 0); //* dovecot-sql.conf $configfile = 'dovecot-sql.conf'; if(is_file($config_dir.'/'.$configfile)) { copy($config_dir.'/'.$configfile, $config_dir.'/'.$configfile.'~'); } if(is_file($config_dir.'/'.$configfile.'~')) chmod($config_dir.'/'.$configfile.'~', 0400); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/debian_dovecot-sql.conf.master', 'tpl/debian_dovecot-sql.conf.master'); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{server_id}', $conf['server_id'], $content); # enable iterate_query for dovecot2 if(version_compare($dovecot_version,2, '>=')) { $content = str_replace('# iterate_query', 'iterate_query', $content); } wf($config_dir.'/'.$configfile, $content); chmod($config_dir.'/'.$configfile, 0600); chown($config_dir.'/'.$configfile, 'root'); chgrp($config_dir.'/'.$configfile, 'root'); // Dovecot shall ignore mounts in website directory if(is_installed('doveadm')) exec("doveadm mount add '/var/www/*' ignore > /dev/null 2> /dev/null"); } public function configure_spamassassin() { return true; } public function configure_getmail() { global $conf; $config_dir = $conf['getmail']['config_dir']; if (!is_dir($config_dir)) { exec('mkdir -p '.escapeshellcmd($config_dir)); } $command = "useradd -d $config_dir ".$conf['getmail']['user']; if (!is_user('getmail')) { caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } $command = "chown -R getmail $config_dir"; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = "chmod -R 700 $config_dir"; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Getmail will be run from cron. In order to have access to cron the getmail user needs to be part of the cron group. $command = "gpasswd -a getmail " . $conf['cron']['group']; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } public function configure_amavis() { global $conf; //* Amavisd-new user config file $conf_file = 'amavisd-ispconfig.conf'; $conf_path = dirname($conf['amavis']['config_file']) . '/' . $conf_file; $content = $this->get_template_file($conf_file, true, true); //* get contents & insert db cred $this->write_config_file($conf_path, $content); //* Activate config directory in default file $amavis_conf = rf($conf['amavis']['config_file']); if (stripos($amavis_conf, $conf_path) === false) { $amavis_conf = preg_replace('/^(1;.*)$/m', "include_config_files('$conf_path');\n$1", $amavis_conf); $this->write_config_file($conf['amavis']['config_file'], $amavis_conf); } //* Adding the amavisd commands to the postfix configuration $postconf_commands = array ( 'content_filter = amavis:[127.0.0.1]:10024', 'receive_override_options = no_address_mappings' ); foreach($postconf_commands as $cmd) { $command = "postconf -e '$cmd'"; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } $config_dir = $conf['postfix']['config_dir']; // Adding amavis-services to the master.cf file // backup master.cf if(is_file($config_dir.'/master.cf')) copy($config_dir.'/master.cf', $config_dir.'/master.cf~'); // first remove the old service definitions $this->remove_postfix_service('amavis','unix'); $this->remove_postfix_service('127.0.0.1:10025','inet'); $this->remove_postfix_service('127.0.0.1:10027','inet'); // then add them back $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis.master', 'tpl/master_cf_amavis.master'); af($config_dir.'/master.cf', $content); unset($content); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis10025.master', 'tpl/master_cf_amavis10025.master'); af($config_dir.'/master.cf', $content); unset($content); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis10027.master', 'tpl/master_cf_amavis10027.master'); af($config_dir.'/master.cf', $content); unset($content); //* Add the clamav user to the amavis group exec('usermod -a -G amavis clamav'); } public function configure_pureftpd() { global $conf; //* configure pure-ftpd for MySQL authentication against the ispconfig database $content = $this->get_template_file('pureftpd_mysql.conf', true, true); //* get contents & insert db cred $content = str_replace('{server_id}', $conf['server_id'], $content); $this->write_config_file($conf['pureftpd']['mysql_config_file'], $content, 600, 'root', 'root'); //* enable pure-ftpd and server settings $content = rf($conf["pureftpd"]["config_file"]); $content = preg_replace('/#?IS_CONFIGURED="(?:yes|no)"/', 'IS_CONFIGURED="yes"', $content); $content = str_replace('AUTH="-l unix"', 'AUTH="-l mysql:'.$conf['pureftpd']['mysql_config_file'].'"', $content); //* Logging defaults to syslog's ftp facility. Override this behaviour for better compatibility with debian/ubuntu //* and specify the format. $logdir = '/var/log/pure-ftpd'; if (!is_dir($logdir)) { mkdir($logdir, 0755, true); } /** * @link http://download.pureftpd.org/pub/pure-ftpd/doc/README * -b brokenclientscompatibility * -A chrooteveryone * -E noanonymous * -O altlog : * -Z customerproof (Add safe guards against common customer mistakes ie. like chmod 0 on their own files) * -D displaydotfiles * -H dontresolve */ //* Enable TLS if certificate file exists $enable_tls = ''; if(file_exists('/etc/ssl/private/pure-ftpd.pem')) { $enable_tls = ' -Y 1'; } $content = preg_replace('/MISC_OTHER="[^"]+"/', 'MISC_OTHER="-b -A -E -Z -D -H -O clf:'.$logdir.'/transfer.log'.$enable_tls.'"', $content); $this->write_config_file($conf['pureftpd']['config_file'], $content); //* Since version 1.0.50: Configuration through /etc/conf.d/pure-ftpd is now deprecated! exec("/usr/sbin/pure-ftpd --help | head -1",$out); if(preg_match("#v([0-9\.]+)\s#",$out[0],$matches)){ $pureftpd_version = $matches[1]; if(version_compare($pureftpd_version, '1.0.50', '>=')) { $configfile = $conf['pureftpd']['main_config_file']; if(is_file($configfile)) { copy($configfile, $configfile.'~'); } $content = rf($configfile); $content = preg_replace('/BrokenClientsCompatibility\s+(yes|no)/', 'BrokenClientsCompatibility yes', $content); $content = preg_replace('/ChrootEveryone\s+(yes|no)/', 'ChrootEveryone yes', $content); $content = preg_replace('/NoAnonymous\s+(yes|no)/', 'NoAnonymous yes', $content); $content = preg_replace('/#? AltLog\s+clf.*\s/', 'AltLog clf:/var/log/pureftpd.log', $content); $content = preg_replace('/CustomerProof\s+(yes|no)/', 'CustomerProof yes', $content); $content = preg_replace('/DisplayDotFiles\s+(yes|no)/', 'DisplayDotFiles yes', $content); $content = preg_replace('/DontResolve\s+(yes|no)/', 'DontResolve yes', $content); $content = preg_replace('/#? MySQLConfigFile\s+\/.*\s/', 'MySQLConfigFile ' . $conf['pureftpd']['mysql_config_file'], $content); if(file_exists('/etc/ssl/private/pure-ftpd.pem')) { $content = preg_replace('/(#?) TLS\s+(0|1)/', 'TLS 1', $content); } wf($configfile, $content); } } } public function configure_powerdns() { global $conf; //* Create the database if(!$this->db->query('CREATE DATABASE IF NOT EXISTS ?? DEFAULT CHARACTER SET ?', $conf['powerdns']['database'], $conf['mysql']['charset'])) { $this->error('Unable to create MySQL database: '.$conf['powerdns']['database'].'.'); } //* Create the ISPConfig database user in the local database $query = 'GRANT ALL ON ??.* TO ?@?'; if(!$this->db->query($query, $conf['powerdns']['database'], $conf['mysql']['ispconfig_user'], 'localhost')) { $this->error('Unable to create user for powerdns database Error: '.$this->db->errorMessage); } //* load the powerdns databse dump if($conf['mysql']['admin_password'] == '') { caselog("mysql --default-character-set=".$conf['mysql']['charset']." -h '".$conf['mysql']['host']."' -u '".$conf['mysql']['admin_user']."' --force '".$conf['powerdns']['database']."' < '".ISPC_INSTALL_ROOT."/install/sql/powerdns.sql' &> /dev/null", __FILE__, __LINE__, 'read in ispconfig3.sql', 'could not read in powerdns.sql'); } else { caselog("mysql --default-character-set=".$conf['mysql']['charset']." -h '".$conf['mysql']['host']."' -u '".$conf['mysql']['admin_user']."' -p'".$conf['mysql']['admin_password']."' --force '".$conf['powerdns']['database']."' < '".ISPC_INSTALL_ROOT."/install/sql/powerdns.sql' &> /dev/null", __FILE__, __LINE__, 'read in ispconfig3.sql', 'could not read in powerdns.sql'); } //* Create the powerdns config file $content = $this->get_template_file('pdns.local', true, true); //* get contents & insert db cred $content = str_replace('{powerdns_database}', $conf['powerdns']['database'], $content); $this->write_config_file($conf["powerdns"]["config_dir"].'/'.$conf["powerdns"]["config_file"], $content, 600, 'root', 'root'); //* Create symlink to init script to start the correct config file if( !is_link($conf['init_scripts'].'/'.$conf['powerdns']['init_script']) ) { symlink($conf['init_scripts'].'/pdns', $conf['init_scripts'].'/'.$conf['powerdns']['init_script']); } } public function configure_bind() { global $conf; //* Check if the zonefile directory has a slash at the end $content=$conf['bind']['bind_zonefiles_dir']; if(substr($content, -1, 1) != '/') { $content .= '/'; } //* New default format of named.conf uses views. Check which version the system is using and include our zones file. $named_conf = rf($conf['bind']['named_conf_path']); if (stripos($named_conf, 'include "'.$conf['bind']['named_conf_local_path'].'";') === false) { preg_match_all("/(?<=\n)view \"(?:public|internal)\" in \{.*\n\};/Us", $named_conf, $views); if (count($views[0]) == 2) { foreach ($views[0] as $view) { $named_conf = str_replace($view, substr($view, 0, -2)."include \"{$conf['bind']['named_conf_local_path']}\";\n};", $named_conf); } wf($conf['bind']['named_conf_path'], $named_conf); } else { af($conf['bind']['named_conf_path'], 'include "'.$conf['bind']['named_conf_local_path'].'";'); } } } public function configure_apache() { global $conf; if($conf['apache']['installed'] == false) return; //* Create the logging directory for the vhost logfiles if (!is_dir($conf['ispconfig_log_dir'].'/httpd')) { mkdir($conf['ispconfig_log_dir'].'/httpd', 0755, true); } if (is_file($conf['suphp']['config_file'])) { $content = rf($conf['suphp']['config_file']); if (!preg_match('|^x-httpd-suphp=php:/usr/bin/php-cgi$|m', $content)) { $content = preg_replace('/;Handler for php-scripts/', ";Handler for php-scripts\nx-httpd-suphp=php:/usr/bin/php-cgi", $content); $content = preg_replace('/;?umask=\d+/', 'umask=0022', $content); } $this->write_config_file($conf['suphp']['config_file'], $content); } //* Enable ISPConfig default vhost settings $default_vhost_path = $conf['apache']['vhost_conf_dir'].'/'.$conf['apache']['vhost_default']; if (is_file($default_vhost_path)) { $content = rf($default_vhost_path); $content = preg_replace('/^#?\s*NameVirtualHost.*$/m', 'NameVirtualHost *:80', $content); $content = preg_replace('/]+>/', '', $content); $this->write_config_file($default_vhost_path, $content); } //* Generate default ssl certificates if (!is_dir($conf['apache']['ssl_dir'])) { mkdir($conf['apache']['ssl_dir']); } if ($conf['services']['mail'] == true) { copy($conf['postfix']['config_dir']."/smtpd.key", $conf['apache']['ssl_dir']."/server.key"); copy($conf['postfix']['config_dir']."/smtpd.cert", $conf['apache']['ssl_dir']."/server.crt"); } else { if (!is_file($conf['apache']['ssl_dir'] . '/server.crt')) { exec("openssl req -new -outform PEM -out {$conf['apache']['ssl_dir']}/server.crt -newkey rsa:2048 -nodes -keyout {$conf['apache']['ssl_dir']}/server.key -keyform PEM -days 365 -x509"); } } //* Copy the ISPConfig configuration include $tpl = new tpl('apache_ispconfig.conf.master'); $tpl->setVar('apache_version',getapacheversion()); if($this->is_update == true) { $tpl->setVar('logging',get_logging_state()); } else { $tpl->setVar('logging','yes'); } $records = $this->db->queryAllRecords("SELECT * FROM ?? WHERE server_id = ? AND virtualhost = 'y'", $conf['mysql']['master_database'] . '.server_ip', $conf['server_id']); $ip_addresses = array(); if(is_array($records) && count($records) > 0) { foreach($records as $rec) { if($rec['ip_type'] == 'IPv6') { $ip_address = '['.$rec['ip_address'].']'; } else { $ip_address = $rec['ip_address']; } $ports = explode(',', $rec['virtualhost_port']); if(is_array($ports)) { foreach($ports as $port) { $port = intval($port); if($port > 0 && $port < 65536 && $ip_address != '') { $ip_addresses[] = array('ip_address' => $ip_address, 'port' => $port); } } } } } if(count($ip_addresses) > 0) $tpl->setLoop('ip_adresses',$ip_addresses); wf($conf['apache']['vhost_conf_dir'].'/000-ispconfig.conf', $tpl->grab()); unset($tpl); //* Gentoo by default does not include .vhost files. Add include line to config file. $content = rf($conf['apache']['config_file']); if ( strpos($content, 'Include /etc/apache2/vhosts.d/*.vhost') === false ) { $content = preg_replace('|(Include /etc/apache2/vhosts.d/\*.conf)|', "$1\nInclude /etc/apache2/vhosts.d/*.vhost", $content); } $this->write_config_file($conf['apache']['config_file'], $content); //* make sure that webalizer finds its config file when it is directly in /etc if(is_file('/etc/webalizer.conf') && !is_dir('/etc/webalizer')) { mkdir('/etc/webalizer', 0755); symlink('/etc/webalizer.conf', '/etc/webalizer/webalizer.conf'); } if(is_file('/etc/webalizer/webalizer.conf')) //* Change webalizer mode to incremental { replaceLine('/etc/webalizer/webalizer.conf', '#IncrementalName', 'IncrementalName webalizer.current', 0, 0); replaceLine('/etc/webalizer/webalizer.conf', '#Incremental', 'Incremental yes', 0, 0); replaceLine('/etc/webalizer/webalizer.conf', '#HistoryName', 'HistoryName webalizer.hist', 0, 0); } //* add a sshusers group if (!is_group('sshusers')) { $command = 'groupadd sshusers'; caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } } public function configure_apps_vhost() { global $conf; //* Create the ispconfig apps vhost user and group if($conf['apache']['installed'] == true){ $apps_vhost_user = escapeshellcmd($conf['web']['apps_vhost_user']); $apps_vhost_group = escapeshellcmd($conf['web']['apps_vhost_group']); $install_dir = escapeshellcmd($conf['web']['website_basedir'].'/apps'); $command = 'groupadd '.$apps_vhost_user; if ( !is_group($apps_vhost_group) ) { caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } $command = "useradd -g '$apps_vhost_group' -d $install_dir $apps_vhost_group"; if ( !is_user($apps_vhost_user) ) { caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } //$command = 'adduser '.$conf['apache']['user'].' '.$apps_vhost_group; $command = 'usermod -a -G '.$apps_vhost_group.' '.$conf['apache']['user']; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); if(!@is_dir($install_dir)){ mkdir($install_dir, 0755, true); } else { chmod($install_dir, 0755); } chown($install_dir, $apps_vhost_user); chgrp($install_dir, $apps_vhost_group); //* Copy the apps vhost file $vhost_conf_dir = $conf['apache']['vhost_conf_dir']; $vhost_conf_enabled_dir = $conf['apache']['vhost_conf_enabled_dir']; $apps_vhost_servername = ($conf['web']['apps_vhost_servername'] == '') ? '' : 'ServerName '.$conf['web']['apps_vhost_servername']; //* Dont just copy over the virtualhost template but add some custom settings $content = $this->get_template_file('apache_apps.vhost', true); $content = str_replace('{apps_vhost_ip}', $conf['web']['apps_vhost_ip'], $content); $content = str_replace('{apps_vhost_port}', $conf['web']['apps_vhost_port'], $content); $content = str_replace('{apps_vhost_dir}', $conf['web']['website_basedir'].'/apps', $content); $content = str_replace('{website_basedir}', $conf['web']['website_basedir'], $content); $content = str_replace('{apps_vhost_servername}', $apps_vhost_servername, $content); //* comment out the listen directive if port is 80 or 443 if($conf['web']['apps_vhost_ip'] == 80 or $conf['web']['apps_vhost_ip'] == 443) { $content = str_replace('{vhost_port_listen}', '#', $content); } else { $content = str_replace('{vhost_port_listen}', '', $content); } $this->write_config_file("$vhost_conf_dir/apps.vhost", $content); //if ( !is_file($conf['web']['website_basedir'].'/php-fcgi-scripts/apps/.php-fcgi-starter') ) //{ $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/apache_apps_fcgi_starter.master', 'tpl/apache_apps_fcgi_starter.master'); $content = str_replace('{fastcgi_bin}', $conf['fastcgi']['fastcgi_bin'], $content); $content = str_replace('{fastcgi_phpini_path}', $conf['fastcgi']['fastcgi_phpini_path'], $content); mkdir($conf['web']['website_basedir'].'/php-fcgi-scripts/apps', 0755, true); //copy('tpl/apache_apps_fcgi_starter.master',$conf['web']['website_basedir'].'/php-fcgi-scripts/apps/.php-fcgi-starter'); $this->set_immutable($conf['web']['website_basedir'].'/php-fcgi-scripts/apps/.php-fcgi-starter', false); wf($conf['web']['website_basedir'].'/php-fcgi-scripts/apps/.php-fcgi-starter', $content); exec('chmod +x '.$conf['web']['website_basedir'].'/php-fcgi-scripts/apps/.php-fcgi-starter'); exec('chown -R ispapps:ispapps '.$conf['web']['website_basedir'].'/php-fcgi-scripts/apps'); $this->set_immutable($conf['web']['website_basedir'].'/php-fcgi-scripts/apps/.php-fcgi-starter', true); //} } if($conf['nginx']['installed'] == true){ $apps_vhost_user = escapeshellcmd($conf['web']['apps_vhost_user']); $apps_vhost_group = escapeshellcmd($conf['web']['apps_vhost_group']); $install_dir = escapeshellcmd($conf['web']['website_basedir'].'/apps'); $command = 'groupadd '.$apps_vhost_user; if(!is_group($apps_vhost_group)) caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'useradd -g '.$apps_vhost_group.' -d '.$install_dir.' '.$apps_vhost_group; if(!is_user($apps_vhost_user)) caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //$command = 'adduser '.$conf['nginx']['user'].' '.$apps_vhost_group; $command = 'usermod -a -G '.$apps_vhost_group.' '.$conf['nginx']['user']; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); if(!@is_dir($install_dir)){ mkdir($install_dir, 0755, true); } else { chmod($install_dir, 0755); } chown($install_dir, $apps_vhost_user); chgrp($install_dir, $apps_vhost_group); //* Copy the apps vhost file $vhost_conf_dir = $conf['nginx']['vhost_conf_dir']; $vhost_conf_enabled_dir = $conf['nginx']['vhost_conf_enabled_dir']; $apps_vhost_servername = ($conf['web']['apps_vhost_servername'] == '')?'_':$conf['web']['apps_vhost_servername']; // Dont just copy over the virtualhost template but add some custom settings $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/nginx_apps.vhost.master', 'tpl/nginx_apps.vhost.master'); if($conf['web']['apps_vhost_ip'] == '_default_'){ $apps_vhost_ip = ''; } else { $apps_vhost_ip = $conf['web']['apps_vhost_ip'].':'; } $socket_dir = escapeshellcmd($conf['nginx']['php_fpm_socket_dir']); if(substr($socket_dir, -1) != '/') $socket_dir .= '/'; if(!is_dir($socket_dir)) exec('mkdir -p '.$socket_dir); $fpm_socket = $socket_dir.'apps.sock'; $cgi_socket = escapeshellcmd($conf['nginx']['cgi_socket']); $content = str_replace('{apps_vhost_ip}', $apps_vhost_ip, $content); $content = str_replace('{apps_vhost_port}', $conf['web']['apps_vhost_port'], $content); $content = str_replace('{apps_vhost_dir}', $conf['web']['website_basedir'].'/apps', $content); $content = str_replace('{apps_vhost_servername}', $apps_vhost_servername, $content); //$content = str_replace('{fpm_port}', ($conf['nginx']['php_fpm_start_port']+1), $content); $content = str_replace('{fpm_socket}', $fpm_socket, $content); $content = str_replace('{cgi_socket}', $cgi_socket, $content); // SSL in apps vhost is off by default. Might change later. $content = str_replace('{ssl_on}', 'ssl', $content); $content = str_replace('{ssl_comment}', '#', $content); wf($vhost_conf_dir.'/apps.vhost', $content); // PHP-FPM // Dont just copy over the php-fpm pool template but add some custom settings $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/apps_php_fpm_pool.conf.master', 'tpl/apps_php_fpm_pool.conf.master'); $content = str_replace('{fpm_pool}', 'apps', $content); //$content = str_replace('{fpm_port}', ($conf['nginx']['php_fpm_start_port']+1), $content); $content = str_replace('{fpm_socket}', $fpm_socket, $content); $content = str_replace('{fpm_user}', $apps_vhost_user, $content); $content = str_replace('{fpm_group}', $apps_vhost_group, $content); wf($conf['nginx']['php_fpm_pool_dir'].'/apps.conf', $content); //copy('tpl/nginx_ispconfig.vhost.master', "$vhost_conf_dir/ispconfig.vhost"); //* and create the symlink if(@is_link($vhost_conf_enabled_dir.'/apps.vhost')) unlink($vhost_conf_enabled_dir.'/apps.vhost'); if(!@is_link($vhost_conf_enabled_dir.'/000-apps.vhost')) { symlink($vhost_conf_dir.'/apps.vhost', $vhost_conf_enabled_dir.'/000-apps.vhost'); } } } public function get_host_ips() { $out = array(); exec("ip addr show | awk '/global/ { print $2 }' | cut -d '/' -f 1", $ret, $val); if($val == 0) { if(is_array($ret) && !empty($ret)){ foreach($ret as $ip) { $ip = trim($ip); $out[] = $ip; } } } return $out; } public function install_ispconfig() { global $conf; $install_dir = $conf['ispconfig_install_dir']; //* Create the ISPConfig installation directory if(!@is_dir($install_dir)) { $command = "mkdir $install_dir"; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } //* Create a ISPConfig user and group $command = 'groupadd ispconfig'; if(!is_group('ispconfig')) caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'useradd -g ispconfig -d '.$install_dir.' ispconfig'; if(!is_user('ispconfig')) caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* copy the ISPConfig interface part $command = 'cp -rf ../interface '.$install_dir; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* copy the ISPConfig server part $command = 'cp -rf ../server '.$install_dir; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Make a backup of the security settings if(is_file('/usr/local/ispconfig/security/security_settings.ini')) copy('/usr/local/ispconfig/security/security_settings.ini','/usr/local/ispconfig/security/security_settings.ini~'); //* copy the ISPConfig security part $command = 'cp -rf ../security '.$install_dir; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $configfile = 'security_settings.ini'; if(is_file($install_dir.'/security/'.$configfile)) { copy($install_dir.'/security/'.$configfile, $install_dir.'/security/'.$configfile.'~'); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); wf($install_dir.'/security/'.$configfile, $content); //* Create a symlink, so ISPConfig is accessible via web // Replaced by a separate vhost definition for port 8080 // $command = "ln -s $install_dir/interface/web/ /var/www/ispconfig"; // caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Create the config file for ISPConfig interface $configfile = 'config.inc.php'; if(is_file($install_dir.'/interface/lib/'.$configfile)) { copy($install_dir.'/interface/lib/'.$configfile, $install_dir.'/interface/lib/'.$configfile.'~'); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{mysql_master_server_ispconfig_user}', $conf['mysql']['master_ispconfig_user'], $content); $content = str_replace('{mysql_master_server_ispconfig_password}', $conf['mysql']['master_ispconfig_password'], $content); $content = str_replace('{mysql_master_server_database}', $conf['mysql']['master_database'], $content); $content = str_replace('{mysql_master_server_host}', $conf['mysql']['master_host'], $content); $content = str_replace('{mysql_master_server_port}', $conf['mysql']['master_port'], $content); $content = str_replace('{server_id}', $conf['server_id'], $content); $content = str_replace('{ispconfig_log_priority}', $conf['ispconfig_log_priority'], $content); $content = str_replace('{language}', $conf['language'], $content); $content = str_replace('{timezone}', $conf['timezone'], $content); $content = str_replace('{theme}', $conf['theme'], $content); $content = str_replace('{language_file_import_enabled}', ($conf['language_file_import_enabled'] == true)?'true':'false', $content); wf($install_dir.'/interface/lib/'.$configfile, $content); //* Create the config file for ISPConfig server $configfile = 'config.inc.php'; if(is_file($install_dir.'/server/lib/'.$configfile)) { copy($install_dir.'/server/lib/'.$configfile, $install_dir.'/server/lib/'.$configfile.'~'); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{mysql_master_server_ispconfig_user}', $conf['mysql']['master_ispconfig_user'], $content); $content = str_replace('{mysql_master_server_ispconfig_password}', $conf['mysql']['master_ispconfig_password'], $content); $content = str_replace('{mysql_master_server_database}', $conf['mysql']['master_database'], $content); $content = str_replace('{mysql_master_server_host}', $conf['mysql']['master_host'], $content); $content = str_replace('{mysql_master_server_port}', $conf['mysql']['master_port'], $content); $content = str_replace('{server_id}', $conf['server_id'], $content); $content = str_replace('{ispconfig_log_priority}', $conf['ispconfig_log_priority'], $content); $content = str_replace('{language}', $conf['language'], $content); $content = str_replace('{timezone}', $conf['timezone'], $content); $content = str_replace('{theme}', $conf['theme'], $content); $content = str_replace('{language_file_import_enabled}', ($conf['language_file_import_enabled'] == true)?'true':'false', $content); wf($install_dir.'/server/lib/'.$configfile, $content); //* Create the config file for remote-actions (but only, if it does not exist, because // the value is a autoinc-value and so changed by the remoteaction_core_module if (!file_exists($install_dir.'/server/lib/remote_action.inc.php')) { $content = ''; wf($install_dir.'/server/lib/remote_action.inc.php', $content); } //* Enable the server modules and plugins. // TODO: Implement a selector which modules and plugins shall be enabled. $dir = $install_dir.'/server/mods-available/'; if (is_dir($dir)) { if ($dh = opendir($dir)) { while (($file = readdir($dh)) !== false) { if($file != '.' && $file != '..' && substr($file, -8, 8) == '.inc.php') { include_once $install_dir.'/server/mods-available/'.$file; $module_name = substr($file, 0, -8); $tmp = new $module_name; if($tmp->onInstall()) { if(!@is_link($install_dir.'/server/mods-enabled/'.$file)) { @symlink($install_dir.'/server/mods-available/'.$file, $install_dir.'/server/mods-enabled/'.$file); // @symlink($install_dir.'/server/mods-available/'.$file, '../mods-enabled/'.$file); } if (strpos($file, '_core_module') !== false) { if(!@is_link($install_dir.'/server/mods-core/'.$file)) { @symlink($install_dir.'/server/mods-available/'.$file, $install_dir.'/server/mods-core/'.$file); // @symlink($install_dir.'/server/mods-available/'.$file, '../mods-core/'.$file); } } } unset($tmp); } } closedir($dh); } } $dir = $install_dir.'/server/plugins-available/'; if (is_dir($dir)) { if ($dh = opendir($dir)) { while (($file = readdir($dh)) !== false) { if($conf['apache']['installed'] == true && $file == 'nginx_plugin.inc.php') continue; if($conf['nginx']['installed'] == true && $file == 'apache2_plugin.inc.php') continue; if($file != '.' && $file != '..' && substr($file, -8, 8) == '.inc.php') { include_once $install_dir.'/server/plugins-available/'.$file; $plugin_name = substr($file, 0, -8); $tmp = new $plugin_name; if(method_exists($tmp, 'onInstall') && $tmp->onInstall()) { if(!@is_link($install_dir.'/server/plugins-enabled/'.$file)) { @symlink($install_dir.'/server/plugins-available/'.$file, $install_dir.'/server/plugins-enabled/'.$file); //@symlink($install_dir.'/server/plugins-available/'.$file, '../plugins-enabled/'.$file); } if (strpos($file, '_core_plugin') !== false) { if(!@is_link($install_dir.'/server/plugins-core/'.$file)) { @symlink($install_dir.'/server/plugins-available/'.$file, $install_dir.'/server/plugins-core/'.$file); //@symlink($install_dir.'/server/plugins-available/'.$file, '../plugins-core/'.$file); } } } unset($tmp); } } closedir($dh); } } // Update the server config $mail_server_enabled = ($conf['services']['mail'])?1:0; $web_server_enabled = ($conf['services']['web'])?1:0; $dns_server_enabled = ($conf['services']['dns'])?1:0; $file_server_enabled = ($conf['services']['file'])?1:0; $db_server_enabled = ($conf['services']['db'])?1:0; $vserver_server_enabled = ($conf['openvz']['installed'])?1:0; $proxy_server_enabled = ($conf['services']['proxy'])?1:0; $firewall_server_enabled = ($conf['services']['firewall'])?1:0; $xmpp_server_enabled = ($conf['services']['xmpp'])?1:0; $sql = "UPDATE `server` SET mail_server = '$mail_server_enabled', web_server = '$web_server_enabled', dns_server = '$dns_server_enabled', file_server = '$file_server_enabled', db_server = '$db_server_enabled', vserver_server = '$vserver_server_enabled', proxy_server = '$proxy_server_enabled', firewall_server = '$firewall_server_enabled', xmpp_server = '$xmpp_server_enabled' WHERE server_id = ?"; $this->db->query($sql, $conf['server_id']); if($conf['mysql']['master_slave_setup'] == 'y') { $this->dbmaster->query($sql, $conf['server_id']); } // chown install dir to root and chmod 755 $command = 'chown root:root '.$install_dir; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chmod 755 '.$install_dir; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Chmod the files and directories in the install dir $command = 'chmod -R 750 '.$install_dir.'/*'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the interface files to the ispconfig user and group $command = 'chown -R ispconfig:ispconfig '.$install_dir.'/interface'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the extensions directory to the ispconfig user and group $command = 'chown ispconfig:ispconfig '.$install_dir.'/extensions'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Chmod the files and directories in the acme dir $command = 'chmod -R 755 '.$install_dir.'/interface/acme'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the server files to the root user and group $command = 'chown -R root:root '.$install_dir.'/server'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the security files to the root user and group $command = 'chown -R root:root '.$install_dir.'/security'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the security directory and security_settings.ini to root:ispconfig $command = 'chown root:ispconfig '.$install_dir.'/security/security_settings.ini'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/ids.whitelist'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/ids.htmlfield'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/apache_directives.blacklist'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/nginx_directives.blacklist'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Make the global language file directory group writable exec("chmod -R 770 $install_dir/interface/lib/lang"); //* Make the temp directory for language file exports writable if(is_dir($install_dir.'/interface/web/temp')) exec("chmod -R 770 $install_dir/interface/web/temp"); //* Make all interface language file directories group writable $handle = @opendir($install_dir.'/interface/web'); while ($file = @readdir($handle)) { if ($file != '.' && $file != '..') { if(@is_dir($install_dir.'/interface/web'.'/'.$file.'/lib/lang')) { $handle2 = opendir($install_dir.'/interface/web'.'/'.$file.'/lib/lang'); chmod($install_dir.'/interface/web'.'/'.$file.'/lib/lang', 0770); while ($lang_file = @readdir($handle2)) { if ($lang_file != '.' && $lang_file != '..') { chmod($install_dir.'/interface/web'.'/'.$file.'/lib/lang/'.$lang_file, 0770); } } } } } //* Make the APS directories group writable exec("chmod -R 770 $install_dir/interface/web/sites/aps_meta_packages"); exec("chmod -R 770 $install_dir/server/aps_packages"); //* make sure that the server config file (not the interface one) is only readable by the root user chmod($install_dir.'/server/lib/config.inc.php', 0600); chown($install_dir.'/server/lib/config.inc.php', 'root'); chgrp($install_dir.'/server/lib/config.inc.php', 'root'); //* Make sure thet the interface config file is readable by user ispconfig only chmod($install_dir.'/interface/lib/config.inc.php', 0600); chown($install_dir.'/interface/lib/config.inc.php', 'ispconfig'); chgrp($install_dir.'/interface/lib/config.inc.php', 'ispconfig'); chmod($install_dir.'/server/lib/remote_action.inc.php', 0600); chown($install_dir.'/server/lib/remote_action.inc.php', 'root'); chgrp($install_dir.'/server/lib/remote_action.inc.php', 'root'); if(@is_file($install_dir.'/server/lib/mysql_clientdb.conf')) { chmod($install_dir.'/server/lib/mysql_clientdb.conf', 0600); chown($install_dir.'/server/lib/mysql_clientdb.conf', 'root'); chgrp($install_dir.'/server/lib/mysql_clientdb.conf', 'root'); } if(is_dir($install_dir.'/interface/invoices')) { exec('chmod -R 770 '.escapeshellarg($install_dir.'/interface/invoices')); exec('chown -R ispconfig:ispconfig '.escapeshellarg($install_dir.'/interface/invoices')); } exec('chown -R root:root /usr/local/ispconfig/interface/ssl'); // TODO: FIXME: add the www-data user to the ispconfig group. This is just for testing // and must be fixed as this will allow the apache user to read the ispconfig files. // Later this must run as own apache server or via suexec! if($conf['apache']['installed'] == true){ $command = 'usermod -a -G ispconfig '.$conf['apache']['user']; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); if(is_group('ispapps')){ $command = 'usermod -a -G ispapps '.$conf['apache']['user']; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } } if($conf['nginx']['installed'] == true){ $command = 'usermod -a -G ispconfig '.$conf['nginx']['user']; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); if(is_group('ispapps')){ $command = 'usermod -a -G ispapps '.$conf['nginx']['user']; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } } //* Make the shell scripts executable $command = "chmod +x $install_dir/server/scripts/*.sh"; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); if ($this->install_ispconfig_interface == true && isset($conf['interface_password']) && $conf['interface_password']!='admin') { $sql = "UPDATE sys_user SET passwort = ? WHERE username = 'admin';"; $this->db->query($sql, $this->crypt_password($conf['interface_password'])); } if($conf['apache']['installed'] == true && $this->install_ispconfig_interface == true){ //* Copy the ISPConfig vhost for the controlpanel $vhost_conf_dir = $conf['apache']['vhost_conf_dir']; //$vhost_conf_enabled_dir = $conf['apache']['vhost_conf_enabled_dir']; // Dont just copy over the virtualhost template but add some custom settings $tpl = new tpl(); if (file_exists($conf['ispconfig_install_dir']."/server/conf-custom/install/apache_ispconfig.vhost.master")) { $tpl->newTemplate($conf['ispconfig_install_dir']."/server/conf-custom/install/apache_ispconfig.vhost.master"); } else { $tpl->newTemplate("dist/tpl/gentoo/apache_ispconfig.vhost.master"); } $tpl->setVar('vhost_port',$conf['apache']['vhost_port']); // comment out the listen directive if port is 80 or 443 if($conf['apache']['vhost_port'] == 80 or $conf['apache']['vhost_port'] == 443) { $tpl->setVar('vhost_port_listen','#'); } else { $tpl->setVar('vhost_port_listen',''); } if(is_file($install_dir.'/interface/ssl/ispserver.crt') && is_file($install_dir.'/interface/ssl/ispserver.key')) { $tpl->setVar('ssl_comment',''); } else { $tpl->setVar('ssl_comment','#'); } if(is_file($install_dir.'/interface/ssl/ispserver.crt') && is_file($install_dir.'/interface/ssl/ispserver.key') && is_file($install_dir.'/interface/ssl/ispserver.bundle')) { $tpl->setVar('ssl_bundle_comment',''); } else { $tpl->setVar('ssl_bundle_comment','#'); } $tpl->setVar('apache_version',getapacheversion()); wf($vhost_conf_dir.'/ispconfig.vhost', $tpl->grab()); //* and create the symlink /*if($this->is_update == false) { if(@is_link($vhost_conf_enabled_dir.'/ispconfig.vhost')) unlink($vhost_conf_enabled_dir.'/ispconfig.vhost'); if(!@is_link($vhost_conf_enabled_dir.'/000-ispconfig.vhost')) { symlink($vhost_conf_dir.'/ispconfig.vhost', $vhost_conf_enabled_dir.'/000-ispconfig.vhost'); } }*/ //if(!is_file('/var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter')) { $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/apache_ispconfig_fcgi_starter.master', 'tpl/apache_ispconfig_fcgi_starter.master'); $content = str_replace('{fastcgi_bin}', $conf['fastcgi']['fastcgi_bin'], $content); $content = str_replace('{fastcgi_phpini_path}', $conf['fastcgi']['fastcgi_phpini_path'], $content); @mkdir('/var/www/php-fcgi-scripts/ispconfig', 0755, true); $this->set_immutable('/var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter', false); wf('/var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter', $content); exec('chmod +x /var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter'); @symlink($install_dir.'/interface/web', '/var/www/ispconfig'); exec('chown -R ispconfig:ispconfig /var/www/php-fcgi-scripts/ispconfig'); $this->set_immutable('/var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter', true); //} // unlink acme vhost symlink if(is_link($vhost_conf_dir . '/999-acme.conf') && file_exists($vhost_conf_dir . '/acme.conf')) unlink($vhost_conf_dir . '/999-acme.conf'); } if($conf['nginx']['installed'] == true && $this->install_ispconfig_interface == true){ //* Copy the ISPConfig vhost for the controlpanel $vhost_conf_dir = $conf['nginx']['vhost_conf_dir']; $vhost_conf_enabled_dir = $conf['nginx']['vhost_conf_enabled_dir']; // Dont just copy over the virtualhost template but add some custom settings $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/nginx_ispconfig.vhost.master', 'tpl/nginx_ispconfig.vhost.master'); $content = str_replace('{vhost_port}', $conf['nginx']['vhost_port'], $content); if(is_file($install_dir.'/interface/ssl/ispserver.crt') && is_file($install_dir.'/interface/ssl/ispserver.key')) { $content = str_replace('{ssl_on}', 'ssl http2', $content); $content = str_replace('{ssl_comment}', '', $content); $content = str_replace('{fastcgi_ssl}', 'on', $content); } else { $content = str_replace('{ssl_on}', '', $content); $content = str_replace('{ssl_comment}', '#', $content); $content = str_replace('{fastcgi_ssl}', 'off', $content); } $socket_dir = escapeshellcmd($conf['nginx']['php_fpm_socket_dir']); if(substr($socket_dir, -1) != '/') $socket_dir .= '/'; if(!is_dir($socket_dir)) exec('mkdir -p '.$socket_dir); $fpm_socket = $socket_dir.'ispconfig.sock'; //$content = str_replace('{fpm_port}', $conf['nginx']['php_fpm_start_port'], $content); $content = str_replace('{fpm_socket}', $fpm_socket, $content); wf($vhost_conf_dir.'/ispconfig.vhost', $content); unset($content); // PHP-FPM // Dont just copy over the php-fpm pool template but add some custom settings $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/php_fpm_pool.conf.master', 'tpl/php_fpm_pool.conf.master'); $content = str_replace('{fpm_pool}', 'ispconfig', $content); //$content = str_replace('{fpm_port}', $conf['nginx']['php_fpm_start_port'], $content); $content = str_replace('{fpm_socket}', $fpm_socket, $content); $content = str_replace('{fpm_user}', 'ispconfig', $content); $content = str_replace('{fpm_group}', 'ispconfig', $content); wf($conf['nginx']['php_fpm_pool_dir'].'/ispconfig.conf', $content); //copy('tpl/nginx_ispconfig.vhost.master', $vhost_conf_dir.'/ispconfig.vhost'); //* and create the symlink if($this->is_update == false) { if(@is_link($vhost_conf_enabled_dir.'/ispconfig.vhost')) unlink($vhost_conf_enabled_dir.'/ispconfig.vhost'); if(!@is_link($vhost_conf_enabled_dir.'/000-ispconfig.vhost')) { symlink($vhost_conf_dir.'/ispconfig.vhost', $vhost_conf_enabled_dir.'/000-ispconfig.vhost'); } } } //* Install the update script if(is_file('/usr/local/bin/ispconfig_update_from_dev.sh')) unlink('/usr/local/bin/ispconfig_update_from_dev.sh'); chown($install_dir.'/server/scripts/update_from_dev.sh', 'root'); chmod($install_dir.'/server/scripts/update_from_dev.sh', 0700); // chown($install_dir.'/server/scripts/update_from_tgz.sh', 'root'); // chmod($install_dir.'/server/scripts/update_from_tgz.sh', 0700); chown($install_dir.'/server/scripts/ispconfig_update.sh', 'root'); chmod($install_dir.'/server/scripts/ispconfig_update.sh', 0700); if(!is_link('/usr/local/bin/ispconfig_update_from_dev.sh')) symlink($install_dir.'/server/scripts/ispconfig_update.sh', '/usr/local/bin/ispconfig_update_from_dev.sh'); if(!is_link('/usr/local/bin/ispconfig_update.sh')) symlink($install_dir.'/server/scripts/ispconfig_update.sh', '/usr/local/bin/ispconfig_update.sh'); // Install ISPConfig cli command if(is_file('/usr/local/bin/ispc')) unlink('/usr/local/bin/ispc'); chown($install_dir.'/server/cli/ispc', 'root'); chmod($install_dir.'/server/cli/ispc', 0700); symlink($install_dir.'/server/cli/ispc', '/usr/local/bin/ispc'); // Make executable then unlink and symlink letsencrypt pre, post and renew hook scripts chown($install_dir.'/server/scripts/letsencrypt_pre_hook.sh', 'root'); chown($install_dir.'/server/scripts/letsencrypt_post_hook.sh', 'root'); chown($install_dir.'/server/scripts/letsencrypt_renew_hook.sh', 'root'); chmod($install_dir.'/server/scripts/letsencrypt_pre_hook.sh', 0700); chmod($install_dir.'/server/scripts/letsencrypt_post_hook.sh', 0700); chmod($install_dir.'/server/scripts/letsencrypt_renew_hook.sh', 0700); if(is_link('/usr/local/bin/letsencrypt_pre_hook.sh')) unlink('/usr/local/bin/letsencrypt_pre_hook.sh'); if(is_link('/usr/local/bin/letsencrypt_post_hook.sh')) unlink('/usr/local/bin/letsencrypt_post_hook.sh'); if(is_link('/usr/local/bin/letsencrypt_renew_hook.sh')) unlink('/usr/local/bin/letsencrypt_renew_hook.sh'); symlink($install_dir.'/server/scripts/letsencrypt_pre_hook.sh', '/usr/local/bin/letsencrypt_pre_hook.sh'); symlink($install_dir.'/server/scripts/letsencrypt_post_hook.sh', '/usr/local/bin/letsencrypt_post_hook.sh'); symlink($install_dir.'/server/scripts/letsencrypt_renew_hook.sh', '/usr/local/bin/letsencrypt_renew_hook.sh'); //* Make the logs readable for the ispconfig user if(@is_file('/var/log/mail.log')) exec('chmod +r /var/log/mail.log'); if(@is_file('/var/log/mail.warn')) exec('chmod +r /var/log/mail.warn'); if(@is_file('/var/log/mail.err')) exec('chmod +r /var/log/mail.err'); if(@is_file('/var/log/messages')) exec('chmod +r /var/log/messages'); if(@is_file('/var/log/clamav/clamav.log')) exec('chmod +r /var/log/clamav/clamav.log'); if(@is_file('/var/log/clamav/freshclam.log')) exec('chmod +r /var/log/clamav/freshclam.log'); //* Create the ispconfig log file and directory if(!is_file($conf['ispconfig_log_dir'].'/ispconfig.log')) { if(!is_dir($conf['ispconfig_log_dir'])) mkdir($conf['ispconfig_log_dir'], 0755); touch($conf['ispconfig_log_dir'].'/ispconfig.log'); } chmod($conf['ispconfig_log_dir'].'/ispconfig.log', 0600); //* Create the ispconfig auth log file and set uid/gid if(!is_file($conf['ispconfig_log_dir'].'/auth.log')) { touch($conf['ispconfig_log_dir'].'/auth.log'); } exec('chown ispconfig:ispconfig '. $conf['ispconfig_log_dir'].'/auth.log'); exec('chmod 660 '. $conf['ispconfig_log_dir'].'/auth.log'); if(is_user('getmail')) { rename($install_dir.'/server/scripts/run-getmail.sh', '/usr/local/bin/run-getmail.sh'); if(is_user('getmail')) chown('/usr/local/bin/run-getmail.sh', 'getmail'); chmod('/usr/local/bin/run-getmail.sh', 0744); } //* Add Log-Rotation if (is_dir('/etc/logrotate.d')) { @unlink('/etc/logrotate.d/logispc3'); // ignore, if the file is not there /* We rotate these logs in cron_daily.php $fh = fopen('/etc/logrotate.d/logispc3', 'w'); fwrite($fh, "$conf['ispconfig_log_dir']/ispconfig.log { \n" . " weekly \n" . " missingok \n" . " rotate 4 \n" . " compress \n" . " delaycompress \n" . "} \n" . "$conf['ispconfig_log_dir']/cron.log { \n" . " weekly \n" . " missingok \n" . " rotate 4 \n" . " compress \n" . " delaycompress \n" . "}"); fclose($fh); */ } //* Remove Domain module as its functions are available in the client module now if(@is_dir('/usr/local/ispconfig/interface/web/domain')) exec('rm -rf /usr/local/ispconfig/interface/web/domain'); //* Disable rkhunter run and update in debian cronjob as ispconfig is running and updating rkhunter if(is_file('/etc/default/rkhunter')) { replaceLine('/etc/default/rkhunter', 'CRON_DAILY_RUN="yes"', 'CRON_DAILY_RUN="no"', 1, 0); replaceLine('/etc/default/rkhunter', 'CRON_DB_UPDATE="yes"', 'CRON_DB_UPDATE="no"', 1, 0); } // Add symlink for patch tool if(!is_link('/usr/local/bin/ispconfig_patch')) exec('ln -s /usr/local/ispconfig/server/scripts/ispconfig_patch /usr/local/bin/ispconfig_patch'); // Change mode of a few files from amavisd if(is_file($conf['amavis']['config_dir'].'/conf.d/50-user')) chmod($conf['amavis']['config_dir'].'/conf.d/50-user', 0640); if(is_file($conf['amavis']['config_dir'].'/50-user~')) chmod($conf['amavis']['config_dir'].'/50-user~', 0400); if(is_file($conf['amavis']['config_dir'].'/amavisd.conf')) chmod($conf['amavis']['config_dir'].'/amavisd.conf', 0640); if(is_file($conf['amavis']['config_dir'].'/amavisd.conf~')) chmod($conf['amavis']['config_dir'].'/amavisd.conf~', 0400); } } ?> ispconfig3_install/install/dist/lib/centos53.lib.php0000775000000000000000000000336015114345330021454 0ustar rootroot ispconfig3_install/install/dist/lib/enterpriselinux10.lib.php0000775000000000000000000000341615123305415023414 0ustar rootroot ispconfig3_install/install/dist/lib/debian60.lib.php0000775000000000000000000002563715123305415021414 0ustar rootrootis_update) { $tmp = $this->db->queryOneRecord("SELECT * FROM ?? WHERE server_id = ?", $conf["mysql"]["database"] . ".server", $conf['server_id']); $ini_array = ini_to_array(stripslashes($tmp['config'])); // ini_array needs not to be checked, because already done in update.php -> updateDbAndIni() if(isset($ini_array['mail']['mailbox_virtual_uidgid_maps']) && $ini_array['mail']['mailbox_virtual_uidgid_maps'] == 'y') { $virtual_transport = 'lmtp:unix:private/dovecot-lmtp'; $configure_lmtp = true; } } $config_dir = $conf['postfix']['config_dir']; if(!$this->get_postfix_service('dovecot', 'unix')) { //* backup if(is_file($config_dir.'/master.cf')){ copy($config_dir.'/master.cf', $config_dir.'/master.cf~2'); } if(is_file($config_dir.'/master.cf~2')){ chmod($config_dir.'/master.cf~2', 0400); } //* Configure master.cf and add a line for deliver $content = rf($conf["postfix"]["config_dir"].'/master.cf'); $deliver_content = 'dovecot unix - n n - - pipe'."\n".' flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop}'."\n"; af($config_dir.'/master.cf', $deliver_content); unset($content); unset($deliver_content); } //* Reconfigure postfix to use dovecot authentication $postconf_commands = array ( 'dovecot_destination_recipient_limit = 1', 'virtual_transport = '.$virtual_transport, 'smtpd_sasl_type = dovecot', 'smtpd_sasl_path = private/auth' ); // Make a backup copy of the main.cf file copy($conf["postfix"]["config_dir"].'/main.cf', $conf["postfix"]["config_dir"].'/main.cf~3'); // Executing the postconf commands foreach($postconf_commands as $cmd) { $command = "postconf -e '$cmd'"; caselog($command." &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } //* copy dovecot.conf $config_dir = $conf['dovecot']['config_dir']; $configfile = 'dovecot.conf'; if(is_file($config_dir.'/'.$configfile)){ copy($config_dir.'/'.$configfile, $config_dir.'/'.$configfile.'~'); } //* Get the dovecot version exec('dovecot --version', $tmp); $dovecot_version = $tmp[0]; unset($tmp); //* Copy dovecot configuration file if(version_compare($dovecot_version,2) >= 0) { if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/debian6_dovecot2.conf.master')) { copy($conf['ispconfig_install_dir'].'/server/conf-custom/install/debian6_dovecot2.conf.master', $config_dir.'/'.$configfile); } else { copy('tpl/debian6_dovecot2.conf.master', $config_dir.'/'.$configfile); } // Copy custom config file if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/dovecot_custom.conf.master')) { if(!@is_dir($config_dir . '/conf.d')) { mkdir($config_dir . '/conf.d'); } copy($conf['ispconfig_install_dir'].'/server/conf-custom/install/dovecot_custom.conf.master', $config_dir.'/conf.d/99-ispconfig-custom-config.conf'); } replaceLine($config_dir.'/'.$configfile, 'postmaster_address = postmaster@example.com', 'postmaster_address = postmaster@'.$conf['hostname'], 1, 0); replaceLine($config_dir.'/'.$configfile, 'postmaster_address = webmaster@localhost', 'postmaster_address = postmaster@'.$conf['hostname'], 1, 0); if(version_compare($dovecot_version,2.1) < 0) { removeLine($config_dir.'/'.$configfile, 'ssl_protocols ='); } if(version_compare($dovecot_version,2.2) >= 0) { // Dovecot > 2.2 does not recognize !SSLv2 anymore on Debian 9 $content = file_get_contents($config_dir.'/'.$configfile); $content = str_replace('!SSLv2','',$content); file_put_contents($config_dir.'/'.$configfile,$content); unset($content); } if(version_compare($dovecot_version, 2.4) >= 0) { // Debian 13 ships with Dovecot 2.4 $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/debian6_dovecot2.4.conf.master', 'tpl/debian6_dovecot2.4.conf.master'); $content = str_replace('{server_id}', $conf['server_id'], $content); wf($config_dir.'/'.$configfile, $content); // Copy custom config file if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/dovecot_custom.conf.master')) { if(!@is_dir($config_dir . '/conf.d')) { @mkdir($config_dir . '/conf.d'); } copy($conf['ispconfig_install_dir'].'/server/conf-custom/install/dovecot_custom.conf.master', $config_dir.'/conf.d/99-ispconfig-custom-config.conf'); } replaceLine($config_dir.'/'.$configfile, 'postmaster_address = postmaster@example.com', 'postmaster_address = postmaster@'.$conf['hostname'], 1, 0); replaceLine($config_dir.'/'.$configfile, 'postmaster_address = webmaster@localhost', 'postmaster_address = postmaster@'.$conf['hostname'], 1, 0); ## Self generating dhparams is deprecated, Debian ships with a good one. unset($content); } elseif(version_compare($dovecot_version,2.3) >= 0) { // Remove deprecated setting(s) removeLine($config_dir.'/'.$configfile, 'ssl_protocols ='); // Check if we have a dhparams file and if not, create it if(!file_exists('/etc/dovecot/dh.pem')) { swriteln('Creating new DHParams file, this takes several minutes. Do not interrupt the script.'); if(file_exists('/var/lib/dovecot/ssl-parameters.dat')) { // convert existing ssl parameters file $command = 'dd if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dhparam -inform der > /etc/dovecot/dh.pem'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } else { /* Create a new dhparams file. We use 2048 bit only as it simply takes too long on smaller systems to generate a 4096 bit dh file (> 30 minutes). If you need a 4096 bit file, create it manually before you install ISPConfig */ $command = 'openssl dhparam -out /etc/dovecot/dh.pem 2048'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } } //remove #2.3+ comment $content = file_get_contents($config_dir.'/'.$configfile); $content = str_replace('#2.3+ ','',$content); file_put_contents($config_dir.'/'.$configfile,$content); unset($content); } else { // remove settings which are not supported in Dovecot < 2.3 removeLine($config_dir.'/'.$configfile, 'ssl_min_protocol ='); removeLine($config_dir.'/'.$configfile, 'ssl_dh ='); } } else { if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/debian6_dovecot.conf.master')) { copy($conf['ispconfig_install_dir'].'/server/conf-custom/install/debian6_dovecot.conf.master', $config_dir.'/'.$configfile); } else { copy('tpl/debian6_dovecot.conf.master', $config_dir.'/'.$configfile); } } $dovecot_protocols = 'imap pop3'; //* dovecot-lmtpd if($configure_lmtp) { $dovecot_protocols .= ' lmtp'; } //* dovecot-managesieved if(is_file('/usr/lib/dovecot/managesieve') || is_file('/usr/libexec/dovecot/managesieve')) { $dovecot_protocols .= ' sieve'; } replaceLine($config_dir.'/'.$configfile, 'protocols = imap pop3', "protocols = $dovecot_protocols", 1, 0); //* dovecot-sql.conf $configfile = 'dovecot-sql.conf'; if(is_file($config_dir.'/'.$configfile)){ copy($config_dir.'/'.$configfile, $config_dir.'/'.$configfile.'~'); chmod($config_dir.'/'.$configfile.'~', 0400); } if(version_compare($dovecot_version, 2.4) >= 0) { $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/debian6_dovecot2.4-sql.conf.master', 'tpl/debian6_dovecot2.4-sql.conf.master'); } else { $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/debian6_dovecot-sql.conf.master', 'tpl/debian6_dovecot-sql.conf.master'); } $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{server_id}', $conf['server_id'], $content); # enable iterate_query for dovecot2 if(version_compare($dovecot_version,2, '>=')) { $content = str_replace('# iterate_query', 'iterate_query', $content); } wf($config_dir.'/'.$configfile, $content); chmod($config_dir.'/'.$configfile, 0600); chown($config_dir.'/'.$configfile, 'root'); chgrp($config_dir.'/'.$configfile, 'root'); // Dovecot shall ignore mounts in website directory if(is_installed('doveadm')) exec("doveadm mount add '/var/www/*' ignore > /dev/null 2> /dev/null"); } public function configure_fail2ban() { /* copy('tpl/dovecot-pop3imap.conf.master',"/etc/fail2ban/filter.d/dovecot-pop3imap.conf"); copy('tpl/dovecot_fail2ban_jail.local.master','/etc/fail2ban/jail.local'); */ } } ?> ispconfig3_install/install/dist/lib/opensuse112.lib.php0000775000000000000000000000306315114345330022076 0ustar rootroot ispconfig3_install/install/dist/lib/enterpriselinux_base.lib.php0000775000000000000000000002274215132202514024244 0ustar rootrootclamav_socket, $content); $content = str_replace('{amavis_config_dir}', $conf['amavis']['config_dir'], $content); wf($conf["amavis"]["config_dir"].'/amavisd.conf', $content); chmod($conf['amavis']['config_dir'].'/amavisd.conf', 0640); if(!is_file($conf['amavis']['config_dir'].'/60-dkim')) { touch($conf['amavis']['config_dir'].'/60-dkim'); chmod($conf['amavis']['config_dir'].'/60-dkim', 0640); } // Adding the amavisd commands to the postfix configuration $postconf_commands = array ( 'content_filter = amavis:[127.0.0.1]:10024', 'receive_override_options = no_address_mappings' ); // Make a backup copy of the main.cf file copy($conf["postfix"]["config_dir"].'/main.cf', $conf["postfix"]["config_dir"].'/main.cf~2'); // Executing the postconf commands foreach($postconf_commands as $cmd) { $command = "postconf -e '$cmd'"; caselog($command." &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } $config_dir = $conf['postfix']['config_dir']; // Adding amavis-services to the master.cf file // backup master.cf if(is_file($config_dir.'/master.cf')) copy($config_dir.'/master.cf', $config_dir.'/master.cf~'); // first remove the old service definitions $this->remove_postfix_service('amavis','unix'); $this->remove_postfix_service('127.0.0.1:10025','inet'); $this->remove_postfix_service('127.0.0.1:10027','inet'); // then add them back $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis.master', 'tpl/master_cf_amavis.master'); af($config_dir.'/master.cf', $content); unset($content); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis10025.master', 'tpl/master_cf_amavis10025.master'); af($config_dir.'/master.cf', $content); unset($content); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis10027.master', 'tpl/master_cf_amavis10027.master'); af($config_dir.'/master.cf', $content); unset($content); removeLine('/etc/sysconfig/freshclam', 'FRESHCLAM_DELAY=disabled-warn # REMOVE ME', 1); replaceLine('/etc/freshclam.conf', 'Example', '# Example', 1); // get shell-group for amavis $amavis_group=exec('grep -o "^amavis:\|^vscan:" /etc/group'); if(!empty($amavis_group)) { $amavis_group=rtrim($amavis_group, ":"); } // get shell-user for amavis $amavis_user=exec('grep -o "^amavis:\|^vscan:" /etc/passwd'); if(!empty($amavis_user)) { $amavis_user=rtrim($amavis_user, ":"); } // Create the director for DKIM-Keys if(!is_dir('/var/lib/amavis')) mkdir('/var/lib/amavis', 0750, true); if(!empty($amavis_user)) exec('chown '.$amavis_user.' /var/lib/amavis'); if(!empty($amavis_group)) exec('chgrp '.$amavis_group.' /var/lib/amavis'); if(!is_dir('/var/lib/amavis/dkim')) mkdir('/var/lib/amavis/dkim', 0750); if(!empty($amavis_user)) exec('chown -R '.$amavis_user.' /var/lib/amavis/dkim'); if(!empty($amavis_group)) exec('chgrp -R '.$amavis_group.' /var/lib/amavis/dkim'); } public function install_ispconfig() { parent::install_ispconfig(); // Set SELinux contexts for ISPConfig directories $this->set_selinux_contexts(); // Configure systemd httpd hardening workaround for ISPConfig $this->configure_httpd_systemd_override(); } public function configure_httpd_systemd_override() { global $conf; // Only apply if Apache is installed and systemd is in use if($conf['apache']['installed'] == false) return; if(!is_executable('/bin/systemctl') && !is_executable('/usr/bin/systemctl')) return; // Check if httpd.service has ProtectSystem enabled $protect_system = @exec('systemctl show httpd -p ProtectSystem --value 2>/dev/null'); if(empty($protect_system) || $protect_system == 'no' || $protect_system == 'false') { return; } $install_dir = $conf['ispconfig_install_dir']; $dropin_dir = '/etc/systemd/system/httpd.service.d'; $dropin_file = $dropin_dir.'/ispconfig.conf'; // Create drop-in directory if it doesn't exist if(!is_dir($dropin_dir)) { mkdir($dropin_dir, 0755, true); } // Directories that Apache needs write access to under /usr/local/ispconfig $writable_paths = array( $install_dir.'/interface/temp', $install_dir.'/interface/web/temp', $install_dir.'/interface/cache' ); // Filter to only existing directories $existing_paths = array(); foreach($writable_paths as $path) { if(is_dir($path)) { $existing_paths[] = $path; } } if(count($existing_paths) == 0) { return; } swriteln('Configuring systemd httpd override for ISPConfig writable directories...'); // Build the drop-in configuration content $content = "[Service]\n"; foreach($existing_paths as $path) { $content .= "ReadWritePaths=".$path."\n"; } // Write the drop-in file wf($dropin_file, $content); chmod($dropin_file, 0644); // Reload systemd to apply changes $command = 'systemctl daemon-reload'; caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } public function set_selinux_contexts() { global $conf; $install_dir = $conf['ispconfig_install_dir']; // Check if SELinux is installed and enforcing $selinux_status = @exec('getenforce 2>/dev/null'); if($selinux_status != 'Enforcing' && $selinux_status != 'Permissive') { return; } // Check if required SELinux tools are available if(!is_executable('/usr/sbin/semanage') && !is_executable('/sbin/semanage')) { swriteln('SELinux is enabled but semanage tool is not available. Please install policycoreutils-python-utils package.'); return; } swriteln('Configuring SELinux contexts for ISPConfig...'); // Directories that need httpd write access $writable_dirs = array( $install_dir.'/interface/temp', $install_dir.'/interface/web/temp' ); foreach($writable_dirs as $dir) { if(is_dir($dir)) { // Set the context immediately $command = 'chcon -R -t httpd_sys_rw_content_t '.escapeshellarg($dir); caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); // Make the context persistent across relabels $command = 'semanage fcontext -a -t httpd_sys_rw_content_t '.escapeshellarg($dir.'(/.*)?').' 2>/dev/null || semanage fcontext -m -t httpd_sys_rw_content_t '.escapeshellarg($dir.'(/.*)?'); caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); // Apply the persistent context $command = 'restorecon -Rv '.escapeshellarg($dir); caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } } } } ?> ispconfig3_install/install/uninstall.php0000775000000000000000000001066215123305415017547 0ustar rootroot> Uninstall \n\n"; echo "Are you sure you want to uninstall ISPConfig? [no]"; $input = fgets(STDIN); $do_uninstall = rtrim($input); if($do_uninstall == 'yes') { echo "\n\n>> Uninstalling ISPConfig 3... \n\n"; $link = mysqli_connect($clientdb_host, $clientdb_user, $clientdb_password); if (!$link) { echo "Unable to connect to the database. mysql_error($link)"; } else { $result=mysqli_query($link,"DROP DATABASE ".$conf['db_database'].";"); if (!$result) echo "Unable to remove the ispconfig-database ".$conf['db_database']." ".mysqli_error($link)."\n"; $result=mysqli_query($link,"DROP USER '".$conf['db_user']."'@'".$conf['db_host']."';"); if (!$result) echo "Unable to remove the ispconfig-database-user ".$conf['db_user']." ".mysqli_error($link)."\n"; } mysqli_close($link); // Deleting the symlink in /var/www // Apache @unlink("/etc/apache2/sites-enabled/000-ispconfig.vhost"); @unlink("/etc/apache2/sites-available/ispconfig.vhost"); @unlink("/etc/apache2/sites-enabled/000-apps.vhost"); @unlink("/etc/apache2/sites-available/apps.vhost"); // nginx @unlink("/etc/nginx/sites-enabled/000-ispconfig.vhost"); @unlink("/etc/nginx/sites-available/ispconfig.vhost"); @unlink("/etc/nginx/sites-enabled/000-apps.vhost"); @unlink("/etc/nginx/sites-available/apps.vhost"); // Delete the ispconfig files exec('rm -rf /usr/local/ispconfig'); // Delete various other files @unlink("/usr/local/bin/letsencrypt_post_hook.sh"); @unlink("/usr/local/bin/letsencrypt_pre_hook.sh"); @unlink("/usr/local/bin/letsencrypt_renew_hook.sh"); @unlink("/usr/local/bin/ispconfig_update.sh"); @unlink("/usr/local/bin/ispconfig_update_from_svn.sh"); @unlink("/var/spool/mail/ispconfig"); @unlink("/var/www/ispconfig"); @exec('chattr -i /var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter'); @unlink("/var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter"); @unlink("/var/www/php-fcgi-scripts/ispconfig"); @unlink("/etc/ssl/private/pure-ftpd.pem"); echo "Backups in /var/backup/ and log files in /var/log/ispconfig are not deleted."; echo "Finished uninstalling.\n"; } else { echo "\n\n>> Canceled uninstall. \n\n"; } ?> ispconfig3_install/install/patches/0000775000000000000000000000000015234342134016446 5ustar rootrootispconfig3_install/install/patches/upd_0086.php0000775000000000000000000000251215114345330020425 0ustar rootrootsimple_query('Delete obsolete file ' . $file . '?', array('y', 'n', 'a', 'all', 'none'), 'y'); if($answer == 'n') continue; elseif($answer == 'a' || $answer == 'all') $del_all = true; elseif($answer == 'none') break; } if(@is_file('/usr/local/ispconfig/' . $file) && !@is_file($curpath . '/' . $file)) { // be sure this is not a file contained in installation! @unlink('/usr/local/ispconfig/' . $file); ilog('Deleted obsolete file /usr/local/ispconfig/' . $file); $c++; } } ilog($c . 'obsolete files deleted.'); } } ?> ispconfig3_install/install/patches/upd_0094.php0000775000000000000000000000115615114345330020427 0ustar rootrootdb->query("DELETE FROM mail_forwarding WHERE forwarding_id NOT IN (SELECT MIN(forwarding_id) FROM mail_forwarding GROUP BY source)"); // Remove any duplicate mail_transports prior to adding unique key $inst->db->query("DELETE FROM mail_transport WHERE transport_id NOT IN (SELECT MIN(transport_id) FROM mail_transport GROUP BY domain, server_id)"); } } ispconfig3_install/install/patches/upd_0085.php0000775000000000000000000000363215114345330020430 0ustar rootrootlng('[INFO] Invalid cron line in file ' . $cron_file)); } elseif(preg_match('/^\w+=/', $line)) { if(preg_match('/\s/', $line)) { // warning line with env var and space! swriteln($inst->lng("\n" . '[WARNING] Cron line in file ' . $cron_file . ' contains environment variable.' . "\n")); } } elseif(!isset($fields[5])) { // invalid line (missing user) swriteln($inst->lng("\n" . '[WARNING] Cron line in file ' . $cron_file . ' misses user field.' . "\n")); } else { $check_filename = trim($fields[5]) . $check_suffix; if(substr($cron_file, -strlen($check_filename)) != $check_filename) { // warning user not equal to file name swriteln($inst->lng("\n" . '[WARNING] SUSPECT USER IN CRON FILE ' . $cron_file . '! CHECK CRON FILE FOR MALICIOUS ENTRIES!' . "\n")); } } } fclose($fp); } } } } ?> ispconfig3_install/install/patches/upd_0103.php0000775000000000000000000000337415123305415020422 0ustar rootrootdb->queryAllRecords($sql, $conf['server_id']); foreach($records as $rec) { $log_folder = 'log'; $site_logdir = $rec['document_root'].'/' . $log_folder; if(is_dir($site_logdir)) { $this->exec_safe("chgrp -R ? ?", $rec['system_group'], $site_logdir); $this->exec_safe("chmod -R o-rwx ?", $site_logdir); ilog('Updated log file permissions for '. $rec['domain']); } } } // Copy from server/lib/classes/system.inc.php, adapted to avoid $app public function exec_safe($cmd) { $args = func_get_args(); $arg_count = func_num_args(); if($arg_count != substr_count($cmd, '?') + 1) { trigger_error('Placeholder count not matching argument list.', E_USER_WARNING); return false; } if($arg_count > 1) { array_shift($args); $pos = 0; $a = 0; foreach($args as $value) { $a++; $pos = strpos($cmd, '?', $pos); if($pos === false) { break; } $value = escapeshellarg($value); $cmd = substr_replace($cmd, $value, $pos, 1); $pos += strlen($value); } } $last_exec_out = null; $last_exec_retcode = null; $ret = exec($cmd, $last_exec_out, $last_exec_retcode); ilog("safe_exec cmd: " . $cmd . " - return code: " . $last_exec_retcode, LOGLEVEL_DEBUG); return $ret; } } ispconfig3_install/install/patches/upd_0065.php0000775000000000000000000022562415114345330020435 0ustar rootrootsimple_query('Delete obsolete file ' . $file . '?', array('y', 'n', 'a', 'all', 'none'), 'y'); if($answer == 'n') continue; elseif($answer == 'a' || $answer == 'all') $del_all = true; elseif($answer == 'none') break; } if(@is_file('/usr/local/ispconfig/' . $file) && !@is_file($curpath . '/' . $file)) { // be sure this is not a file contained in installation! @unlink('/usr/local/ispconfig/' . $file); ilog('Deleted obsolete file /usr/local/ispconfig/' . $file); $c++; } } ilog($c . 'obsolete files deleted.'); } } ?> ispconfig3_install/install/patches/upd_0088.php0000775000000000000000000000265215114345330020434 0ustar rootrootsimple_query('Delete obsolete file ' . $file . '?', array('y', 'n', 'a', 'all', 'none'), 'y'); if($answer == 'n') continue; elseif($answer == 'a' || $answer == 'all') $del_all = true; elseif($answer == 'none') break; } if(@is_file('/usr/local/ispconfig/' . $file) && !@is_file($curpath . '/' . $file)) { // be sure this is not a file contained in installation! @unlink('/usr/local/ispconfig/' . $file); ilog('Deleted obsolete file /usr/local/ispconfig/' . $file); $c++; } } ilog($c . 'obsolete files deleted.'); } } ?> ispconfig3_install/install/patches/upd_0104.php0000775000000000000000000000213315234342134020415 0ustar rootrootdb->queryOneRecord('SELECT config FROM sys_ini WHERE sysini_id = 1'); if($tmp && isset($tmp['config']) && $tmp['config'] !== '') { $global_config = ini_to_array(stripslashes($tmp['config'])); if(isset($global_config['mail']) && !empty($global_config['mail']['admin_mail']) && (!isset($global_config['mail']['server_sender_mail']) || $global_config['mail']['server_sender_mail'] === '')) { $global_config['mail']['server_sender_mail'] = $global_config['mail']['admin_mail']; $server_config_str = array_to_ini($global_config); $inst->db->query('UPDATE sys_ini SET config = ? WHERE sysini_id = 1', $server_config_str); ilog('Migrated sys_ini mail.server_sender_mail from admin_mail'); } } } } ispconfig3_install/install/patches/upd_0001.php0000775000000000000000000000066315114345330020415 0ustar rootroot ispconfig3_install/install/patches/upd_0100.php0000775000000000000000000000150215114345330020406 0ustar rootroot Listen NameVirtualHost *: > ServerAdmin webmaster@localhost Alias /mail /var/www/ispconfig/mail SetHandler None Require all denied SetHandler None Require all denied # Do not expose theme version and meta files Require all denied DocumentRoot /var/www/ispconfig/ SuexecUserGroup ispconfig ispconfig Options -Indexes +FollowSymLinks +MultiViews +ExecCGI AllowOverride AuthConfig Indexes Limit Options FileInfo SetHandler fcgid-script FCGIWrapper /var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter .php Require all granted Order allow,deny Allow from all IPCCommTimeout 7200 MaxRequestLen 15728640 DocumentRoot /usr/local/ispconfig/interface/web/ AssignUserId ispconfig ispconfig AddType application/x-httpd-php .php # php_admin_value open_basedir "/usr/local/ispconfig/interface:/usr/share:/tmp" Options +FollowSymLinks AllowOverride None Require all granted Order allow,deny Allow from all php_value magic_quotes_gpc 0 # ErrorLog /var/log/apache2/error.log # CustomLog /var/log/apache2/access.log combined ServerSignature Off SecRuleEngine Off # SSL Configuration SSLEngine On SSLProtocol All -SSLv3 -TLSv1 -TLSv1.1 SSLProtocol All -SSLv2 -SSLv3 SSLCertificateFile /usr/local/ispconfig/interface/ssl/ispserver.crt SSLCertificateKeyFile /usr/local/ispconfig/interface/ssl/ispserver.key SSLCACertificateFile /usr/local/ispconfig/interface/ssl/ispserver.bundle SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 SSLHonorCipherOrder On SSLCompression Off SSLSessionTickets Off # ISPConfig 3.1 currently requires unsafe-line for both scripts and styles, as well as unsafe-eval Header set Content-Security-Policy "default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:; object-src 'none'" Header set Content-Security-Policy "default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:; object-src 'none'; upgrade-insecure-requests" Header set X-Content-Type-Options: nosniff Header set X-Frame-Options: SAMEORIGIN Header set X-XSS-Protection: "1; mode=block" Header always edit Set-Cookie (.*) "$1; HTTPOnly" Header always edit Set-Cookie (.*) "$1; Secure" = 2.4.7> Header setifempty Strict-Transport-Security "max-age=15768000" Header set Strict-Transport-Security "max-age=15768000" RequestHeader unset Proxy early # Redirect http to https ErrorDocument 400 "

Error 400 - trying to redirect

" ispconfig3_install/install/tpl/blacklist_helo.master0000775000000000000000000000304115114345330022011 0ustar rootroot# blacklist_helo - after permit_sasl, used to stop common spammers/misconfigurations # # This file can be used to block hostnames used in smtp HELO command which are known bad. # Occasionally you will run into legitimate mail servers which are misconfigured and end # up blocked here, so this is not enabled by default, but it is useful if you are prepared # to address those cases. # # See docs/extras/blacklist_helo.master from ispconfig source for a more complete example list. # # If you make changes here, also copy them to /usr/local/ispconfig/server/conf-custom/install/blacklist_helo.master, # so your changes are not overwritten with ispconfig updates. #/.*\.administrator$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. #/.*\.admin$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. #/.*\.adsl$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. #/.*\.arpa$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. #/.*\.dhcp$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. #/.*\.dns$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. #/.*\.domain$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. #/.*\.dynamic$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. ispconfig3_install/install/tpl/postfix_3-3.conf.master0000775000000000000000000000024115114345330022033 0ustar rootroot# Postfix configuration for version 3.3 and up # 3.2 and earlier should not have this set when using reject_unverified_recipient enable_original_recipient = no ispconfig3_install/install/tpl/postfix_2-10.conf.master0000775000000000000000000000041015114345330022106 0ustar rootroot# Postfix configuration for version 2.10 and up smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination # This is supported in version 2.9, but lets not create another conf file for it address_verify_sender_ttl = 15686s ispconfig3_install/install/tpl/rspamd_neural_group.conf.master0000775000000000000000000000070415114345330024031 0ustar rootrootsymbols = { "NEURAL_SPAM_LONG" { weight = 1.0; # sample weight description = "Neural network spam (long)"; } "NEURAL_HAM_LONG" { weight = -2.0; # sample weight description = "Neural network ham (long)"; } "NEURAL_SPAM_SHORT" { weight = 0.5; # sample weight description = "Neural network spam (short)"; } "NEURAL_HAM_SHORT" { weight = -1.0; # sample weight description = "Neural network ham (short)"; } } ispconfig3_install/install/tpl/rspamd_mx_check.conf.master0000775000000000000000000000027415114345330023112 0ustar rootrootenabled = true; key_prefix = "rmx"; symbol_bad_mx = "MX_INVALID"; symbol_no_mx = "MX_MISSING"; symbol_good_mx = "MX_GOOD"; expire = 86400; expire_novalid = 7200; greylist_invalid = false; ispconfig3_install/install/tpl/opensuse_dovecot.conf.master0000775000000000000000000014623315114345330023355 0ustar rootroot## Dovecot configuration file # If you're in a hurry, see http://wiki.dovecot.org/QuickConfiguration # "dovecot -n" command gives a clean output of the changed settings. Use it # instead of copy&pasting this file when posting to the Dovecot mailing list. # '#' character and everything after it is treated as comments. Extra spaces # and tabs are ignored. If you want to use either of these explicitly, put the # value inside quotes, eg.: key = "# char and trailing whitespace " # Default values are shown for each setting, it's not required to uncomment # those. These are exceptions to this though: No sections (e.g. namespace {}) # or plugin settings are added by default, they're listed only as examples. # Paths are also just examples with the real defaults being based on configure # options. The paths listed here are for configure --prefix=/usr # --sysconfdir=/etc --localstatedir=/var --with-ssldir=/etc/ssl # Base directory where to store runtime data. #base_dir = /var/run/dovecot/ # Protocols we want to be serving: imap imaps pop3 pop3s managesieve # If you only want to use dovecot-auth, you can set this to "none". #protocols = imap imaps protocols = imap imaps pop3 pop3s # A space separated list of IP or host addresses where to listen in for # connections. "*" listens in all IPv4 interfaces. "[::]" listens in all IPv6 # interfaces. Use "*, [::]" for listening both IPv4 and IPv6. # # If you want to specify ports for each service, you will need to configure # these settings inside the protocol imap/pop3/managesieve { ... } section, # so you can specify different ports for IMAP/POP3/MANAGESIEVE. For example: # protocol imap { # listen = *:10143 # ssl_listen = *:10943 # .. # } # protocol pop3 { # listen = *:10100 # .. # } # protocol managesieve { # listen = *:12000 # .. # } #listen = * listen = *,[::] # Disable LOGIN command and all other plaintext authentications unless # SSL/TLS is used (LOGINDISABLED capability). Note that if the remote IP # matches the local IP (ie. you're connecting from the same computer), the # connection is considered secure and plaintext authentication is allowed. #disable_plaintext_auth = yes disable_plaintext_auth = no # Should all IMAP and POP3 processes be killed when Dovecot master process # shuts down. Setting this to "no" means that Dovecot can be upgraded without # forcing existing client connections to close (although that could also be # a problem if the upgrade is eg. because of a security fix). This however # means that after master process has died, the client processes can't write # to log files anymore. #shutdown_clients = yes shutdown_clients = yes ## ## Logging ## # Log file to use for error messages, instead of sending them to syslog. # /dev/stderr can be used to log into stderr. #log_path = # Log file to use for informational and debug messages. # Default is the same as log_path. #info_log_path = # Prefix for each line written to log file. % codes are in strftime(3) # format. #log_timestamp = "%b %d %H:%M:%S " log_timestamp = "%Y-%m-%d %H:%M:%S " # Syslog facility to use if you're logging to syslog. Usually if you don't # want to use "mail", you'll use local0..local7. Also other standard # facilities are supported. #syslog_facility = mail ## ## SSL settings ## # IP or host address where to listen in for SSL connections. Remember to also # add imaps and/or pop3s to protocols setting. Defaults to same as "listen" # setting if not specified. #ssl_listen = # SSL/TLS support: yes, no, required. ssl = yes # PEM encoded X.509 SSL/TLS certificate and private key. They're opened before # dropping root privileges, so keep the key file unreadable by anyone but # root. Included doc/mkcert.sh can be used to easily generate self-signed # certificate, just make sure to update the domains in dovecot-openssl.cnf #ssl_cert_file = /etc/ssl/certs/dovecot.pem #ssl_key_file = /etc/ssl/private/dovecot.pem ssl_cert_file = /etc/postfix/smtpd.cert ssl_key_file = /etc/postfix/smtpd.key # If key file is password protected, give the password here. Alternatively # give it when starting dovecot with -p parameter. Since this file is often # world-readable, you may want to place this setting instead to a different # root owned 0600 file by using !include_try . #ssl_key_password = # File containing trusted SSL certificate authorities. Set this only if you # intend to use ssl_verify_client_cert=yes. The CAfile should contain the # CA-certificate(s) followed by the matching CRL(s). #ssl_ca_file = # Request client to send a certificate. If you also want to require it, set # ssl_require_client_cert=yes in auth section. #ssl_verify_client_cert = no # Which field from certificate to use for username. commonName and # x500UniqueIdentifier are the usual choices. You'll also need to set # ssl_username_from_cert=yes. #ssl_cert_username_field = commonName # How often to regenerate the SSL parameters file. Generation is quite CPU # intensive operation. The value is in hours, 0 disables regeneration # entirely. #ssl_parameters_regenerate = 168 # SSL ciphers to use #ssl_cipher_list = ALL:!LOW:!SSLv2 # Show protocol level SSL errors. #verbose_ssl = no ## ## Login processes ## # # Directory where authentication process places authentication UNIX sockets # which login needs to be able to connect to. The sockets are created when # running as root, so you don't have to worry about permissions. Note that # everything in this directory is deleted when Dovecot is started. #login_dir = /var/run/dovecot/login # chroot login process to the login_dir. Only reason not to do this is if you # wish to run the whole Dovecot without roots. #login_chroot = yes # User to use for the login process. Create a completely new user for this, # and don't use it anywhere else. The user must also belong to a group where # only it has access, it's used to control access for authentication process. # Note that this user is NOT used to access mails. #login_user = dovecot # Set max. process size in megabytes. If you don't use # login_process_per_connection you might need to grow this. #login_process_size = 64 # Should each login be processed in it's own process (yes), or should one # login process be allowed to process multiple connections (no)? Yes is more # secure, espcially with SSL/TLS enabled. No is faster since there's no need # to create processes all the time. #login_process_per_connection = yes # Number of login processes to keep for listening new connections. #login_processes_count = 3 # Maximum number of login processes to create. The listening process count # usually stays at login_processes_count, but when multiple users start logging # in at the same time more extra processes are created. To prevent fork-bombing # we check only once in a second if new processes should be created - if all # of them are used at the time, we double their amount until the limit set by # this setting is reached. #login_max_processes_count = 128 # Maximum number of connections allowed per each login process. This setting # is used only if login_process_per_connection=no. Once the limit is reached, # the process notifies master so that it can create a new login process. #login_max_connections = 256 # Greeting message for clients. #login_greeting = Dovecot ready. # Space separated list of trusted network ranges. Connections from these # IPs are allowed to override their IP addresses and ports (for logging and # for authentication checks). disable_plaintext_auth is also ignored for # these networks. Typically you'd specify your IMAP proxy servers here. #login_trusted_networks = # Space-separated list of elements we want to log. The elements which have # a non-empty variable value are joined together to form a comma-separated # string. #login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c # Login log format. %$ contains login_log_format_elements string, %s contains # the data we want to log. #login_log_format = %$: %s ## ## Mailbox locations and namespaces ## # Location for users' mailboxes. This is the same as the old default_mail_env # setting. The default is empty, which means that Dovecot tries to find the # mailboxes automatically. This won't work if the user doesn't have any mail # yet, so you should explicitly tell Dovecot the full location. # # If you're using mbox, giving a path to the INBOX file (eg. /var/mail/%u) # isn't enough. You'll also need to tell Dovecot where the other mailboxes are # kept. This is called the "root mail directory", and it must be the first # path given in the mail_location setting. # # There are a few special variables you can use, eg.: # # %u - username # %n - user part in user@domain, same as %u if there's no domain # %d - domain part in user@domain, empty if there's no domain # %h - home directory # # See for full list. Some examples: # # mail_location = maildir:~/Maildir # mail_location = mbox:~/mail:INBOX=/var/mail/%u # mail_location = mbox:/var/mail/%d/%1n/%n:INDEX=/var/indexes/%d/%1n/%n # # # #mail_location = mail_location = maildir:/var/vmail/%d/%n/Maildir # If you need to set multiple mailbox locations or want to change default # namespace settings, you can do it by defining namespace sections. # # You can have private, shared and public namespaces. Private namespaces # are for user's personal mails. Shared namespaces are for accessing other # users' mailboxes that have been shared. Public namespaces are for shared # mailboxes that are managed by sysadmin. If you create any shared or public # namespaces you'll typically want to enable ACL plugin also, otherwise all # users can access all the shared mailboxes, assuming they have permissions # on filesystem level to do so. # # REMEMBER: If you add any namespaces, the default namespace must be added # explicitly, ie. mail_location does nothing unless you have a namespace # without a location setting. Default namespace is simply done by having a # namespace with empty prefix. #namespace private { # Hierarchy separator to use. You should use the same separator for all # namespaces or some clients get confused. '/' is usually a good one. # The default however depends on the underlying mail storage format. #separator = # Prefix required to access this namespace. This needs to be different for # all namespaces. For example "Public/". #prefix = # Physical location of the mailbox. This is in same format as # mail_location, which is also the default for it. #location = # There can be only one INBOX, and this setting defines which namespace # has it. #inbox = no # If namespace is hidden, it's not advertised to clients via NAMESPACE # extension. You'll most likely also want to set list=no. This is mostly # useful when converting from another server with different namespaces which # you want to deprecate but still keep working. For example you can create # hidden namespaces with prefixes "~/mail/", "~%u/mail/" and "mail/". #hidden = yes # Show the mailboxes under this namespace with LIST command. This makes the # namespace visible for clients that don't support NAMESPACE extension. # "children" value lists child mailboxes, but hides the namespace prefix. #list = yes # Namespace handles its own subscriptions. If set to "no", the parent # namespace handles them (empty prefix should always have this as "yes") #subscriptions = yes #} # Example shared namespace configuration #namespace shared { #separator = / # Mailboxes are visible under "shared/user@domain/" # %%n, %%d and %%u are expanded to the destination user. #prefix = shared/%%u/ # Mail location for other users' mailboxes. Note that %variables and ~/ # expands to the logged in user's data. %%n, %%d, %%u and %%h expand to the # destination user's data. #location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u # Use the default namespace for saving subscriptions. #subscriptions = no # List the shared/ namespace only if there are visible shared mailboxes. #list = children #} # System user and group used to access mails. If you use multiple, userdb # can override these by returning uid or gid fields. You can use either numbers # or names. #mail_uid = #mail_gid = # Group to enable temporarily for privileged operations. Currently this is # used only with INBOX when either its initial creation or dotlocking fails. # Typically this is set to "mail" to give access to /var/mail. #mail_privileged_group = # Grant access to these supplementary groups for mail processes. Typically # these are used to set up access to shared mailboxes. Note that it may be # dangerous to set these if users can create symlinks (e.g. if "mail" group is # set here, ln -s /var/mail ~/mail/var could allow a user to delete others' # mailboxes, or ln -s /secret/shared/box ~/mail/mybox would allow reading it). #mail_access_groups = # Allow full filesystem access to clients. There's no access checks other than # what the operating system does for the active UID/GID. It works with both # maildir and mboxes, allowing you to prefix mailboxes names with eg. /path/ # or ~user/. #mail_full_filesystem_access = no ## ## Mail processes ## # Enable mail process debugging. This can help you figure out why Dovecot # isn't finding your mails. #mail_debug = no # Log prefix for mail processes. See for list of # possible variables you can use. #mail_log_prefix = "%Us(%u): " # Max. number of lines a mail process is allowed to log per second before it's # throttled. 0 means unlimited. Typically there's no need to change this # unless you're using mail_log plugin, which may log a lot. This setting is # ignored while mail_debug=yes to avoid pointless throttling. #mail_log_max_lines_per_sec = 10 # Don't use mmap() at all. This is required if you store indexes to shared # filesystems (NFS or clustered filesystem). #mmap_disable = no # Rely on O_EXCL to work when creating dotlock files. NFS supports O_EXCL # since version 3, so this should be safe to use nowadays by default. #dotlock_use_excl = yes # Don't use fsync() or fdatasync() calls. This makes the performance better # at the cost of potential data loss if the server (or the file server) # goes down. #fsync_disable = no # Mail storage exists in NFS. Set this to yes to make Dovecot flush NFS caches # whenever needed. If you're using only a single mail server this isn't needed. #mail_nfs_storage = no # Mail index files also exist in NFS. Setting this to yes requires # mmap_disable=yes and fsync_disable=no. #mail_nfs_index = no # Locking method for index files. Alternatives are fcntl, flock and dotlock. # Dotlocking uses some tricks which may create more disk I/O than other locking # methods. NFS users: flock doesn't work, remember to change mmap_disable. #lock_method = fcntl # Drop all privileges before exec()ing the mail process. This is mostly # meant for debugging, otherwise you don't get core dumps. It could be a small # security risk if you use single UID for multiple users, as the users could # ptrace() each others processes then. #mail_drop_priv_before_exec = no # Show more verbose process titles (in ps). Currently shows user name and # IP address. Useful for seeing who are actually using the IMAP processes # (eg. shared mailboxes or if same uid is used for multiple accounts). #verbose_proctitle = no # Valid UID range for users, defaults to 500 and above. This is mostly # to make sure that users can't log in as daemons or other system users. # Note that denying root logins is hardcoded to dovecot binary and can't # be done even if first_valid_uid is set to 0. first_valid_uid = 5000 last_valid_uid = 5000 # Valid GID range for users, defaults to non-root/wheel. Users having # non-valid GID as primary group ID aren't allowed to log in. If user # belongs to supplementary groups with non-valid GIDs, those groups are # not set. first_valid_gid = 5000 last_valid_gid = 5000 # Maximum number of running mail processes. When this limit is reached, # new users aren't allowed to log in. #max_mail_processes = 512 # Set max. process size in megabytes. Most of the memory goes to mmap()ing # files, so it shouldn't harm much even if this limit is set pretty high. #mail_process_size = 256 # Maximum allowed length for mail keyword name. It's only forced when trying # to create new keywords. #mail_max_keyword_length = 50 # ':' separated list of directories under which chrooting is allowed for mail # processes (ie. /var/mail will allow chrooting to /var/mail/foo/bar too). # This setting doesn't affect login_chroot, mail_chroot or auth chroot # settings. If this setting is empty, "/./" in home dirs are ignored. # WARNING: Never add directories here which local users can modify, that # may lead to root exploit. Usually this should be done only if you don't # allow shell access for users. #valid_chroot_dirs = # Default chroot directory for mail processes. This can be overridden for # specific users in user database by giving /./ in user's home directory # (eg. /home/./user chroots into /home). Note that usually there is no real # need to do chrooting, Dovecot doesn't allow users to access files outside # their mail directory anyway. If your home directories are prefixed with # the chroot directory, append "/." to mail_chroot. #mail_chroot = ## ## Mailbox handling optimizations ## # The minimum number of mails in a mailbox before updates are done to cache # file. This allows optimizing Dovecot's behavior to do less disk writes at # the cost of more disk reads. #mail_cache_min_mail_count = 0 # When IDLE command is running, mailbox is checked once in a while to see if # there are any new mails or other changes. This setting defines the minimum # time in seconds to wait between those checks. Dovecot can also use dnotify, # inotify and kqueue to find out immediately when changes occur. #mailbox_idle_check_interval = 30 # Save mails with CR+LF instead of plain LF. This makes sending those mails # take less CPU, especially with sendfile() syscall with Linux and FreeBSD. # But it also creates a bit more disk I/O which may just make it slower. # Also note that if other software reads the mboxes/maildirs, they may handle # the extra CRs wrong and cause problems. #mail_save_crlf = no ## ## Maildir-specific settings ## # By default LIST command returns all entries in maildir beginning with a dot. # Enabling this option makes Dovecot return only entries which are directories. # This is done by stat()ing each entry, so it causes more disk I/O. # (For systems setting struct dirent->d_type, this check is free and it's # done always regardless of this setting) #maildir_stat_dirs = no # When copying a message, do it with hard links whenever possible. This makes # the performance much better, and it's unlikely to have any side effects. #maildir_copy_with_hardlinks = yes # When copying a message, try to preserve the base filename. Only if the # destination mailbox already contains the same name (ie. the mail is being # copied there twice), a new name is given. The destination filename check is # done only by looking at dovecot-uidlist file, so if something outside # Dovecot does similar filename preserving copies, you may run into problems. # NOTE: This setting requires maildir_copy_with_hardlinks = yes to work. #maildir_copy_preserve_filename = no # Assume Dovecot is the only MUA accessing Maildir: Scan cur/ directory only # when its mtime changes unexpectedly or when we can't find the mail otherwise. #maildir_very_dirty_syncs = no ## ## mbox-specific settings ## # Which locking methods to use for locking mbox. There are four available: # dotlock: Create .lock file. This is the oldest and most NFS-safe # solution. If you want to use /var/mail/ like directory, the users # will need write access to that directory. # dotlock_try: Same as dotlock, but if it fails because of permissions or # because there isn't enough disk space, just skip it. # fcntl : Use this if possible. Works with NFS too if lockd is used. # flock : May not exist in all systems. Doesn't work with NFS. # lockf : May not exist in all systems. Doesn't work with NFS. # # You can use multiple locking methods; if you do the order they're declared # in is important to avoid deadlocks if other MTAs/MUAs are using multiple # locking methods as well. Some operating systems don't allow using some of # them simultaneously. #mbox_read_locks = fcntl #mbox_write_locks = dotlock fcntl # Maximum time in seconds to wait for lock (all of them) before aborting. #mbox_lock_timeout = 300 # If dotlock exists but the mailbox isn't modified in any way, override the # lock file after this many seconds. #mbox_dotlock_change_timeout = 120 # When mbox changes unexpectedly we have to fully read it to find out what # changed. If the mbox is large this can take a long time. Since the change # is usually just a newly appended mail, it'd be faster to simply read the # new mails. If this setting is enabled, Dovecot does this but still safely # fallbacks to re-reading the whole mbox file whenever something in mbox isn't # how it's expected to be. The only real downside to this setting is that if # some other MUA changes message flags, Dovecot doesn't notice it immediately. # Note that a full sync is done with SELECT, EXAMINE, EXPUNGE and CHECK # commands. #mbox_dirty_syncs = yes # Like mbox_dirty_syncs, but don't do full syncs even with SELECT, EXAMINE, # EXPUNGE or CHECK commands. If this is set, mbox_dirty_syncs is ignored. #mbox_very_dirty_syncs = no # Delay writing mbox headers until doing a full write sync (EXPUNGE and CHECK # commands and when closing the mailbox). This is especially useful for POP3 # where clients often delete all mails. The downside is that our changes # aren't immediately visible to other MUAs. #mbox_lazy_writes = yes # If mbox size is smaller than this (in kilobytes), don't write index files. # If an index file already exists it's still read, just not updated. #mbox_min_index_size = 0 ## ## dbox-specific settings ## # Maximum dbox file size in kilobytes until it's rotated. #dbox_rotate_size = 2048 # Minimum dbox file size in kilobytes before it's rotated # (overrides dbox_rotate_days) #dbox_rotate_min_size = 16 # Maximum dbox file age in days until it's rotated. Day always begins from # midnight, so 1 = today, 2 = yesterday, etc. 0 = check disabled. #dbox_rotate_days = 0 ## ## IMAP specific settings ## protocol imap { # Login executable location. #login_executable = /usr/lib/dovecot/imap-login # IMAP executable location. Changing this allows you to execute other # binaries before the imap process is executed. # # This would write rawlogs into user's ~/dovecot.rawlog/, if it exists: # mail_executable = /usr/lib/dovecot/rawlog /usr/lib/dovecot/imap # # # This would attach gdb into the imap process and write backtraces into # /tmp/gdbhelper.* files: # mail_executable = /usr/lib/dovecot/gdbhelper /usr/lib/dovecot/imap # #mail_executable = /usr/lib/dovecot/imap mail_executable = /usr/lib/dovecot/rawlog /usr/lib/dovecot/imap # Maximum IMAP command line length in bytes. Some clients generate very long # command lines with huge mailboxes, so you may need to raise this if you get # "Too long argument" or "IMAP command line too large" errors often. #imap_max_line_length = 65536 # Maximum number of IMAP connections allowed for a user from each IP address. # NOTE: The username is compared case-sensitively. #mail_max_userip_connections = 10 # Support for dynamically loadable plugins. mail_plugins is a space separated # list of plugins to load. #mail_plugins = mail_plugins = quota imap_quota mail_plugin_dir = /usr/lib/dovecot/modules/imap # IMAP logout format string: # %i - total number of bytes read from client # %o - total number of bytes sent to client #imap_logout_format = bytes=%i/%o # Override the IMAP CAPABILITY response. #imap_capability = # How many seconds to wait between "OK Still here" notifications when # client is IDLEing. #imap_idle_notify_interval = 120 # ID field names and values to send to clients. Using * as the value makes # Dovecot use the default value. The following fields have default values # currently: name, version, os, os-version, support-url, support-email. #imap_id_send = # ID fields sent by client to log. * means everything. #imap_id_log = # Workarounds for various client bugs: # delay-newmail: # Send EXISTS/RECENT new mail notifications only when replying to NOOP # and CHECK commands. Some clients ignore them otherwise, for example OSX # Mail ( (e.g. %Uf for the filename in uppercase) # # %v - Mailbox's IMAP UIDVALIDITY # %u - Mail's IMAP UID # %m - MD5 sum of the mailbox headers in hex (mbox only) # %f - filename (maildir only) # # If you want UIDL compatibility with other POP3 servers, use: # UW's ipop3d : %08Xv%08Xu # Courier : %f or %v-%u (both might be used simultaneosly) # Cyrus (<= 2.1.3) : %u # Cyrus (>= 2.1.4) : %v.%u # Dovecot v0.99.x : %v.%u # tpop3d : %Mf # # Note that Outlook 2003 seems to have problems with %v.%u format which was # Dovecot's default, so if you're building a new server it would be a good # idea to change this. %08Xu%08Xv should be pretty fail-safe. # #pop3_uidl_format = %08Xu%08Xv pop3_uidl_format = %08Xu%08Xv # Permanently save UIDLs sent to POP3 clients, so pop3_uidl_format changes # won't change those UIDLs. Currently this works only with Maildir. #pop3_save_uidl = no # POP3 logout format string: # %i - total number of bytes read from client # %o - total number of bytes sent to client # %t - number of TOP commands # %p - number of bytes sent to client as a result of TOP command # %r - number of RETR commands # %b - number of bytes sent to client as a result of RETR command # %d - number of deleted messages # %m - number of messages (before deletion) # %s - mailbox size in bytes (before deletion) #pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s # Maximum number of POP3 connections allowed for a user from each IP address. # NOTE: The username is compared case-sensitively. #mail_max_userip_connections = 3 # Support for dynamically loadable plugins. mail_plugins is a space separated # list of plugins to load. #mail_plugins = mail_plugins = quota mail_plugin_dir = /usr/lib/dovecot/modules/pop3 # Workarounds for various client bugs: # outlook-no-nuls: # Outlook and Outlook Express hang if mails contain NUL characters. # This setting replaces them with 0x80 character. # oe-ns-eoh: # Outlook Express and Netscape Mail breaks if end of headers-line is # missing. This option simply sends it if it's missing. # The list is space-separated. #pop3_client_workarounds = } ## ## ManageSieve specific settings ## protocol managesieve { # Login executable location. #login_executable = /usr/lib/dovecot/managesieve-login # ManageSieve executable location. See IMAP's mail_executable above for # examples how this could be changed. #mail_executable = /usr/lib/dovecot/managesieve # Maximum ManageSieve command line length in bytes. This setting is # directly borrowed from IMAP. But, since long command lines are very # unlikely with ManageSieve, changing this will not be very useful. #managesieve_max_line_length = 65536 # ManageSieve logout format string: # %i - total number of bytes read from client # %o - total number of bytes sent to client #managesieve_logout_format = bytes=%i/%o # If, for some inobvious reason, the sieve_storage remains unset, the # ManageSieve daemon uses the specification of the mail_location to find out # where to store the sieve files (see explaination in README.managesieve). # The example below, when uncommented, overrides any global mail_location # specification and stores all the scripts in '~/mail/sieve' if sieve_storage # is unset. However, you should always use the sieve_storage setting. # mail_location = mbox:~/mail # To fool ManageSieve clients that are focused on timesieved you can # specify the IMPLEMENTATION capability that the dovecot reports to clients # (default: "dovecot"). #managesieve_implementation_string = Cyrus timsieved v2.2.13 } ## ## LDA specific settings ## protocol lda { # Address to use when sending rejection mails. postmaster_address = postmaster@example.com # Hostname to use in various parts of sent mails, eg. in Message-Id. # Default is the system's real hostname. #hostname = # Support for dynamically loadable plugins. mail_plugins is a space separated # list of plugins to load. #mail_plugins = mail_plugins = sieve quota mail_plugin_dir = /usr/lib/dovecot/modules/lda # If user is over quota, return with temporary failure instead of # bouncing the mail. #quota_full_tempfail = no # Format to use for logging mail deliveries. You can use variables: # %$ - Delivery status message (e.g. "saved to INBOX") # %m - Message-ID # %s - Subject # %f - From address #deliver_log_format = msgid=%m: %$ # Binary to use for sending mails. #sendmail_path = /usr/lib/sendmail # Subject: header to use for rejection mails. You can use the same variables # as for rejection_reason below. #rejection_subject = Rejected: %s # Human readable error message for rejection mails. You can use variables: # %n = CRLF, %r = reason, %s = original subject, %t = recipient #rejection_reason = Your message to <%t> was automatically rejected:%n%r # UNIX socket path to master authentication server to find users. auth_socket_path = /var/run/dovecot/auth-master } ## ## Authentication processes ## # Executable location #auth_executable = /usr/lib/dovecot/dovecot-auth # Set max. process size in megabytes. #auth_process_size = 256 # Authentication cache size in kilobytes. 0 means it's disabled. # Note that bsdauth, PAM and vpopmail require cache_key to be set for caching # to be used. #auth_cache_size = 0 # Time to live in seconds for cached data. After this many seconds the cached # record is no longer used, *except* if the main database lookup returns # internal failure. We also try to handle password changes automatically: If # user's previous authentication was successful, but this one wasn't, the # cache isn't used. For now this works only with plaintext authentication. #auth_cache_ttl = 3600 # TTL for negative hits (user not found, password mismatch). # 0 disables caching them completely. #auth_cache_negative_ttl = 3600 # Space separated list of realms for SASL authentication mechanisms that need # them. You can leave it empty if you don't want to support multiple realms. # Many clients simply use the first one listed here, so keep the default realm # first. #auth_realms = # Default realm/domain to use if none was specified. This is used for both # SASL realms and appending @domain to username in plaintext logins. #auth_default_realm = # List of allowed characters in username. If the user-given username contains # a character not listed in here, the login automatically fails. This is just # an extra check to make sure user can't exploit any potential quote escaping # vulnerabilities with SQL/LDAP databases. If you want to allow all characters, # set this value to empty. #auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ # Username character translations before it's looked up from databases. The # value contains series of from -> to characters. For example "#@/@" means # that '#' and '/' characters are translated to '@'. #auth_username_translation = # Username formatting before it's looked up from databases. You can use # the standard variables here, eg. %Lu would lowercase the username, %n would # drop away the domain if it was given, or "%n-AT-%d" would change the '@' into # "-AT-". This translation is done after auth_username_translation changes. #auth_username_format = # If you want to allow master users to log in by specifying the master # username within the normal username string (ie. not using SASL mechanism's # support for it), you can specify the separator character here. The format # is then . UW-IMAP uses "*" as the # separator, so that could be a good choice. #auth_master_user_separator = # Username to use for users logging in with ANONYMOUS SASL mechanism #auth_anonymous_username = anonymous # Log unsuccessful authentication attempts and the reasons why they failed. #auth_verbose = no # Even more verbose logging for debugging purposes. Shows for example SQL # queries. #auth_debug = no # In case of password mismatches, log the passwords and used scheme so the # problem can be debugged. Enabling this also enables auth_debug. #auth_debug_passwords = no # Maximum number of dovecot-auth worker processes. They're used to execute # blocking passdb and userdb queries (eg. MySQL and PAM). They're # automatically created and destroyed as needed. #auth_worker_max_count = 30 # Host name to use in GSSAPI principal names. The default is to use the # name returned by gethostname(). Use "$ALL" to allow all keytab entries. #auth_gssapi_hostname = # Kerberos keytab to use for the GSSAPI mechanism. Will use the system # default (usually /etc/krb5.keytab) if not specified. #auth_krb5_keytab = # Do NTLM and GSS-SPNEGO authentication using Samba's winbind daemon and # ntlm_auth helper. #auth_use_winbind = no # Path for Samba's ntlm_auth helper binary. #auth_winbind_helper_path = /usr/bin/ntlm_auth # Number of seconds to delay before replying to failed authentications. #auth_failure_delay = 2 auth default { # Space separated list of wanted authentication mechanisms: # plain login digest-md5 cram-md5 ntlm rpa apop anonymous gssapi otp skey # gss-spnego # NOTE: See also disable_plaintext_auth setting. mechanisms = plain login # # Password database is used to verify user's password (and nothing more). # You can have multiple passdbs and userdbs. This is useful if you want to # allow both system users (/etc/passwd) and virtual users to login without # duplicating the system users into virtual database. # # # # By adding master=yes setting inside a passdb you make the passdb a list # of "master users", who can log in as anyone else. Unless you're using PAM, # you probably still want the destination user to be looked up from passdb # that it really exists. This can be done by adding pass=yes setting to the # master passdb. # Users can be temporarily disabled by adding a passdb with deny=yes. # If the user is found from that database, authentication will fail. # The deny passdb should always be specified before others, so it gets # checked first. Here's an example: #passdb passwd-file { # File contains a list of usernames, one per line #args = /etc/dovecot.deny #deny = yes #} # PAM authentication. Preferred nowadays by most systems. # Note that PAM can only be used to verify if user's password is correct, # so it can't be used as userdb. If you don't want to use a separate user # database (passwd usually), you can use static userdb. # REMEMBER: You'll need /etc/pam.d/dovecot file created for PAM # authentication to actually work. passdb pam { # [session=yes] [setcred=yes] [failure_show_msg=yes] [max_requests=] # [cache_key=] [] # # session=yes makes Dovecot open and immediately close PAM session. Some # PAM plugins need this to work, such as pam_mkhomedir. # # setcred=yes makes Dovecot establish PAM credentials if some PAM plugins # need that. They aren't ever deleted though, so this isn't enabled by # default. # # max_requests specifies how many PAM lookups to do in one process before # recreating the process. The default is 100, because many PAM plugins # leak memory. # # cache_key can be used to enable authentication caching for PAM # (auth_cache_size also needs to be set). It isn't enabled by default # because PAM modules can do all kinds of checks besides checking password, # such as checking IP address. Dovecot can't know about these checks # without some help. cache_key is simply a list of variables (see # doc/wiki/Variables.txt) which must match for the cached data to be used. # Here are some examples: # %u - Username must match. Probably sufficient for most uses. # %u%r - Username and remote IP address must match. # %u%s - Username and service (ie. IMAP, POP3) must match. # # The service name can contain variables, for example %Ls expands to # pop3 or imap. # # Some examples: # args = session=yes %Ls # args = cache_key=%u dovecot #args = dovecot } # System users (NSS, /etc/passwd, or similiar) # In many systems nowadays this uses Name Service Switch, which is # configured in /etc/nsswitch.conf. #passdb passwd { # [blocking=yes] - See userdb passwd for explanation #args = #} # Shadow passwords for system users (NSS, /etc/shadow or similiar). # Deprecated by PAM nowadays. # #passdb shadow { # [blocking=yes] - See userdb passwd for explanation #args = #} # PAM-like authentication for OpenBSD. # #passdb bsdauth { # [cache_key=] - See cache_key in PAM for explanation. #args = #} # passwd-like file with specified location # #passdb passwd-file { # [scheme=] [username_format=] # #args = #} # checkpassword executable authentication # NOTE: You will probably want to use "userdb prefetch" with this. # #passdb checkpassword { # Path for checkpassword binary #args = #} # SQL database passdb sql { # Path for SQL configuration file, see doc/dovecot-sql-example.conf args = /etc/dovecot/dovecot-sql.conf } # LDAP database #passdb ldap { # Path for LDAP configuration file, see doc/dovecot-ldap-example.conf #args = #} # vpopmail authentication #passdb vpopmail { # [cache_key=] - See cache_key in PAM for explanation. # [quota_template=